@ekanos/cli 0.15.0 → 0.17.0

package/dist/commands/teams.js

@@ -12,13 +12,17 @@ var __rest = (this && this.__rest) || function (s, e) {
 import { loginHint } from '../auth/host-trust.js';
 import { refreshStoredSession, requireSession, resolveAuthEnvironment, } from '../auth/session.js';
 import { authRequiredError, invalidStateError, usageError, validationError, } from '../errors.js';
+import { cli } from '../invocation.js';
 import { ensureSecretsDir, writeSecretFile } from '../secret-file.js';
+import { FIELD_SECRET_FORMS, collectSecrets, parsePlainValues, readSecretFlags, secretInputGiven, } from '../secret-input.js';
 import { resolveSourceTarget } from '../source-target.js';
 import { listTeams, mintTeamWebhook, setTeamApp, showTeamIntegration, } from '../teams-api.js';
 import { promptHidden, promptLine } from './apps.js';
 import { scopeHiddenLines } from './scope-notice.js';
 import { isTeamAgentArea, runTeamAgentCommands } from './team-agents.js';
+import { runTeamAudience } from './teams-audience.js';
 import { runTeamEvents } from './teams-events.js';
+import { LIFECYCLE_SUBCOMMANDS, isLifecycleMemberVerb, isLifecycleSubcommand, parseLifecycle, runLifecycle, } from './teams-lifecycle.js';
 import { ONBOARDING_SUBCOMMANDS, isOnboardingSubcommand, parseOnboarding, runOnboarding, } from './teams-onboard.js';
 import { runTeamOverview } from './teams-overview.js';
 import { runTeamScope } from './teams-scope.js';
@@ -29,7 +33,9 @@ export const TEAMS_SUBCOMMANDS = [
     'webhook',
     'events',
     'scope',
+    'audience',
     ...ONBOARDING_SUBCOMMANDS,
+    ...LIFECYCLE_SUBCOMMANDS,
 ];
 /**
  * `teams` — a Source admin's view of its teams' integration setup, the
@@ -37,13 +43,14 @@ export const TEAMS_SUBCOMMANDS = [
  * team's setup of one product as a checklist; `app set` enters or updates
  * any of a team's own app fields (Zendesk's subdomain, client and signing
  * secret), one at a time if need be — a field left alone keeps its saved
- * value. Secrets are only ever typed at the admin's terminal, never from a
- * flag, a file or a non-interactive run, so an agent driving the CLI never
- * handles one; a non-secret field may be passed as `--set name=value`; `webhook` mints the URL the
+ * value. A secret is typed at the admin's terminal with hidden input or,
+ * without one, read from the environment, a private file, stdin or a form
+ * in the browser (`secret-input.ts`) — never a value in argv; a non-secret
+ * field may be passed as `--set name=value`; `webhook` mints the URL the
  * team's provider sends to, shown once.
  */
 export async function runTeams(ctx, args) {
-    var _a;
+    var _a, _b, _c;
     const [rawSubcommand, ...rest] = args.positionals;
     if (isTeamAgentArea(rawSubcommand)) {
         return runTeamAgentCommands(ctx, args);
@@ -55,8 +62,15 @@ export async function runTeams(ctx, args) {
     if (subcommand === 'scope') {
         return runTeamScope(ctx, args, rest);
     }
+    if (subcommand === 'audience') {
+        return runTeamAudience(ctx, args, rest);
+    }
+    if (isLifecycleSubcommand(subcommand) ||
+        (subcommand === 'members' && isLifecycleMemberVerb(rest[0]))) {
+        return runLifecycle(ctx, args, parseLifecycle(subcommand, rest, args));
+    }
     if (isOnboardingSubcommand(subcommand)) {
-        const plan = parseOnboarding(subcommand, rest, Object.assign(Object.assign({}, args), { as: typeof ((_a = args.flags) === null || _a === void 0 ? void 0 : _a.as) === 'string' ? args.flags.as : undefined }));
+        const plan = parseOnboarding(subcommand, rest, Object.assign(Object.assign({}, args), { as: typeof ((_a = args.flags) === null || _a === void 0 ? void 0 : _a.as) === 'string' ? args.flags.as : undefined, self: ((_b = args.flags) === null || _b === void 0 ? void 0 : _b.self) === true, mine: ((_c = args.flags) === null || _c === void 0 ? void 0 : _c.mine) === true }));
         const env = resolveAuthEnvironment(ctx, args.host, args.env, {
             projectDir: args.dir,
         });
@@ -83,8 +97,10 @@ export async function runTeams(ctx, args) {
     if (subcommand !== 'list' && extra.length > 0) {
         throw usageError(`Unexpected argument "${extra[0]}".`, 'See "ekanos teams --help".');
     }
-    if ((appEdits === null || appEdits === void 0 ? void 0 : appEdits.prompts) && !canPrompt(ctx, args)) {
-        throw usageError("teams app set takes the team's secrets at a terminal, never in a script or an agent run. Non-secret fields can be passed with --set <name>=<value>.", `Run it yourself in your terminal: npx @ekanos/cli teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`);
+    if ((appEdits === null || appEdits === void 0 ? void 0 : appEdits.prompts) &&
+        !canPrompt(ctx, args) &&
+        !secretInputGiven(appEdits.secret)) {
+        throw usageError("teams app set needs the team's secrets, and there is no terminal to ask at. Non-secret fields can be passed with --set <name>=<value>.", `Without a terminal, pass ${FIELD_SECRET_FORMS}. Or run it yourself in your terminal: ${cli()} teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`);
     }
     const env = resolveAuthEnvironment(ctx, args.host, args.env, {
         projectDir: args.dir,
@@ -101,12 +117,14 @@ export async function runTeams(ctx, args) {
             })
             : ctx.ui.result({
                 title: `Teams on ${list.source.slug}`,
-                rows: list.teams.map((entry) => [
-                    entry.slug,
-                    `${entry.name} · ${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`,
-                ]),
+                rows: list.teams.map((entry) => [entry.slug, teamLine(entry)]),
                 notes: [
                     '"ekanos teams show <team>" shows a team\'s setup; add a product for its checklist.',
+                    ...(list.teams.some((entry) => entry.callerIsMember === false && entry.memberCount > 0)
+                        ? [
+                            'You manage every team of the Source as its admin without being a member. To connect your own account to one, join it: "ekanos teams members add <team> --self".',
+                        ]
+                        : []),
                 ],
             }));
     }
@@ -135,22 +153,18 @@ function parseAppEdits(flags) {
             return raw;
         return typeof raw === 'string' ? [raw] : [];
     };
-    const values = {};
-    for (const pair of list('set')) {
-        const at = pair.indexOf('=');
-        if (at <= 0) {
-            throw usageError(`--set "${pair}" is not <field>=<value>.`, 'For example: --set subdomain=acme. Secrets are never passed as arguments: use --field <name> and enter it at the prompt.');
-        }
-        values[pair.slice(0, at).trim()] = pair.slice(at + 1).trim();
-    }
+    const values = parsePlainValues(flags === null || flags === void 0 ? void 0 : flags.set);
     const only = list('field');
     const clear = list('clear');
+    const secret = readSecretFlags(flags);
     return {
         only,
         values,
         clear,
+        secret,
         // Bare `app set` walks every field; `--field` asks the named ones.
         prompts: only.length > 0 ||
+            secretInputGiven(secret) ||
             (Object.keys(values).length === 0 && clear.length === 0),
     };
 }
@@ -175,22 +189,27 @@ async function setApp(ctx, args, client, host, target, status, edits) {
         notes: next,
     }));
 }
-/** Every field, asked in turn: bare `teams app set`, and `teams connect`. */
-const WALK_EVERY_FIELD = {
-    only: [],
-    values: {},
-    clear: [],
-    prompts: true,
-};
+/**
+ * Every field, in turn: bare `teams app set`, and `teams connect` — whose
+ * `--set` and secret-input flags fill the team's app too.
+ */
+function walkEveryField(flags) {
+    return {
+        only: [],
+        values: parsePlainValues(flags === null || flags === void 0 ? void 0 : flags.set),
+        clear: [],
+        secret: readSecretFlags(flags),
+        prompts: true,
+    };
+}
 /**
  * The `teams app set` walkthrough and prompts for one team app, then the
  * save — of only what was entered: a field left empty keeps its saved value.
  * Shared with `teams connect`, which runs it inline when the integration
  * needs the team's own app (Zendesk) before anyone can sign in.
  */
-export async function promptAndSaveTeamApp(ctx, args, client, host, target, status, app, edits = WALK_EVERY_FIELD) {
+export async function promptAndSaveTeamApp(ctx, args, client, host, target, status, app, edits = walkEveryField(args.flags)) {
     var _a;
-    var _b, _c;
     const known = new Map(app.fields.map((field) => [field.secretName, field]));
     const names = app.fields.map((field) => field.secretName).join(', ');
     for (const name of [
@@ -204,7 +223,7 @@ export async function promptAndSaveTeamApp(ctx, args, client, host, target, stat
     }
     for (const name of Object.keys(edits.values)) {
         if ((_a = known.get(name)) === null || _a === void 0 ? void 0 : _a.sensitive) {
-            throw usageError(`"${name}" is a secret: it is never passed as an argument.`, `Enter it at the prompt: ekanos teams app set ${target.team} ${target.product} --field ${name}`);
+            throw usageError(`"${name}" is a secret: it is never passed as an argument.`, `Pass it as --set-secret ${name}=env:<NAME>|file:<path>|stdin, use --browser, or enter it at the prompt: ekanos teams app set ${target.team} ${target.product} --field ${name}`);
         }
     }
     const fields = Object.assign({}, edits.values);
@@ -217,13 +236,35 @@ export async function promptAndSaveTeamApp(ctx, args, client, host, target, stat
         else {
             ctx.log(`${status.product.name} app for team ${target.team} on ${status.source.slug}`);
         }
-        for (const field of toAsk) {
-            const value = (await (field.sensitive
-                ? ((_b = args.askSecret) !== null && _b !== void 0 ? _b : promptHidden)
-                : ((_c = args.ask) !== null && _c !== void 0 ? _c : promptLine))(fieldQuestion(field))).trim();
-            if (value)
-                fields[field.secretName] = value;
-        }
+        const byName = new Map(toAsk.map((field) => [field.secretName, field]));
+        const again = `teams app set ${target.team} ${target.product}${args.connection ? ` --connection ${args.connection}` : ''} --source ${status.source.slug}`;
+        Object.assign(fields, await collectSecrets(ctx, {
+            fields: toAsk
+                .filter((field) => edits.values[field.secretName] === undefined)
+                .map((field) => ({
+                name: field.secretName,
+                label: field.label,
+                sensitive: field.sensitive,
+                set: field.set,
+                value: field.sensitive ? null : field.value,
+            })),
+            flags: edits.secret,
+            io: teamsSecretIO(args),
+            interactive: canPrompt(ctx, args),
+            title: `${status.product.name} app for team ${target.team}`,
+            refusal: `${status.product.name}'s team app takes secrets (${toAsk
+                .filter((field) => field.sensitive)
+                .map((field) => field.secretName)
+                .join(', ')}), and there is no terminal to ask at.`,
+            again,
+            prompt: (spec) => {
+                var _a, _b;
+                const field = byName.get(spec.name);
+                return (field.sensitive
+                    ? ((_a = args.askSecret) !== null && _a !== void 0 ? _a : promptHidden)
+                    : ((_b = args.ask) !== null && _b !== void 0 ? _b : promptLine))(fieldQuestion(field));
+            },
+        }));
     }
     if (Object.keys(fields).length === 0 && edits.clear.length === 0) {
         throw validationError('Nothing was changed.', `Run "ekanos teams show ${target.team} ${target.product}" to see the current state.`);
@@ -332,7 +373,7 @@ export function checklist(status) {
         }
         const unset = app.fields.filter((field) => !field.set);
         if (unset.length > 0) {
-            lines.push(`      → in your terminal: npx @ekanos/cli teams app set ${target.team} ${target.product} --connection ${app.connectionId} ${unset.map((field) => `--field ${field.secretName}`).join(' ')} --source ${status.source.slug}`);
+            lines.push(`      → in your terminal: ${cli()} teams app set ${target.team} ${target.product} --connection ${app.connectionId} ${unset.map((field) => `--field ${field.secretName}`).join(' ')} --source ${status.source.slug}`);
         }
         for (const webhook of app.webhooks) {
             lines.push(webhook.endpoint
@@ -407,9 +448,24 @@ function connectionLines(status) {
     }
     return lines;
 }
+/**
+ * One team in `teams list`: its members, and whether the caller is one. A
+ * team nobody has joined says so with the command that joins it, rather than
+ * reading as a count of zero.
+ */
+export function teamLine(entry) {
+    const count = `${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`;
+    if (entry.callerIsMember === undefined)
+        return `${entry.name} · ${count}`;
+    if (entry.callerIsMember)
+        return `${entry.name} · ${count}, you among them`;
+    return entry.memberCount === 0
+        ? `${entry.name} · 0 members · you are not a member — ekanos teams members add ${entry.slug} --self`
+        : `${entry.name} · ${count} · you are not a member`;
+}
 /** The command that connects the team, for a hint: `--connection` only for a named one. */
 function connectCommand(status, connectionId = 'default') {
-    return `npx @ekanos/cli teams connect ${status.team.slug} ${status.product.slug}${connectionId === 'default' ? '' : ` --connection ${connectionId}`} --source ${status.source.slug}`;
+    return `${cli()} teams connect ${status.team.slug} ${status.product.slug}${connectionId === 'default' ? '' : ` --connection ${connectionId}`} --source ${status.source.slug}`;
 }
 function appWalkthrough(status, app) {
     var _a, _b;
@@ -475,13 +531,24 @@ export function canPrompt(ctx, args) {
     var _a;
     return !ctx.jsonMode && ((_a = args.stdinIsTTY) !== null && _a !== void 0 ? _a : process.stdin.isTTY === true);
 }
+/** What the secret-input flags read from, with this run's test seams. */
+export function teamsSecretIO(args) {
+    var _a;
+    return {
+        env: args.env,
+        stdinIsTTY: (_a = args.stdinIsTTY) !== null && _a !== void 0 ? _a : process.stdin.isTTY === true,
+        readStdin: args.readStdin,
+        openUrl: args.openUrl,
+        formTimeoutMs: args.secretFormTimeoutMs,
+    };
+}
 function parseSubcommand(value) {
     const match = TEAMS_SUBCOMMANDS.find((name) => name === value);
     if (match)
         return match;
     throw usageError(value
         ? `Unknown teams subcommand "${value}".`
-        : 'teams needs a subcommand.', 'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams rename <team> <name>, ekanos teams members list <team>, ekanos teams roles list <team>, ekanos teams connect <team> <product>, ekanos teams disconnect <team> <product> --yes, ekanos teams show <team> [<product>], ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams events <team> [<product>], ekanos teams scope show|set <team> …, ekanos teams agents|triggers|links|mcp ….');
+        : 'teams needs a subcommand.', 'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams rename <team> <name>, ekanos teams members list|add|invite|role|remove|resend <team> … (add <team> --self joins you), ekanos teams roles list <team>, ekanos teams leave <team> --yes, ekanos teams groups list|create|update|delete|members <team> …, ekanos teams health <team> [<product>] [--run] (<product> --mine: your own personal connection), ekanos teams workspace list|default <team> …, ekanos teams connect <team> <product>, ekanos teams disconnect <team> <product> --yes (--mine: your own personal connection), ekanos teams show <team> [<product>], ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams events <team> [<product>], ekanos teams audience <team> [<audience>] [--member <email>], ekanos teams scope show|set <team> … (deprecated: audiences), ekanos teams agents|triggers|links|mcp|llm-key ….');
 }
 function requireSlug(value, what) {
     const slug = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();

package/dist/commands/teams.js.map

@@ -1 +1 @@
-{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/commands/teams.ts"],"names":[],"mappings":";;;;;;;;;;;AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAEL,SAAS,EACT,eAAe,EACf,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,MAAM;IACN,KAAK;IACL,SAAS;IACT,QAAQ;IACR,OAAO;IACP,GAAG,sBAAsB;CACjB,CAAC;AAyCX;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,IAAe;;IAEf,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAClD,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAElD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,kCACxC,IAAI,KACP,EAAE,EAAE,QAAO,MAAA,IAAI,CAAC,KAAK,0CAAE,EAAE,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAClE,CAAC;QACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,OAAO,aAAa,CAClB,GAAG,EACH,IAAI,EACJ,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,IAAI,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,iCAAiC,IAAI,CAAC,CAAC,CAAC,IAAI;YAC9C,CAAC,CAAC,+BAA+B,EACnC,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,CACd,gCAAgC,EAChC,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,oDAAoD;IACpD,MAAM,QAAQ,GAAG,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IACpE,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,IAAI,QAAQ;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,IAAI,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO,KAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,CACd,qJAAqJ,EACrJ,mEAAmE,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjM,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,MAAM;aACb,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI;oBACV,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;iBACnF,CAAC;gBACF,KAAK,EAAE;oBACL,oFAAoF;iBACrF;aACF,CAAC,CACP,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAC7C,CAAC;IAEF,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EACvD,qCAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,qFAAqF,CAC7I,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAcD,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAY,EAAE;QACtC,MAAM,GAAG,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAG,IAAI,CAAC,CAAC;QAC1B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACZ,MAAM,UAAU,CACd,UAAU,IAAI,2BAA2B,EACzC,0HAA0H,CAC3H,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO;QACL,IAAI;QACJ,MAAM;QACN,KAAK;QACL,mEAAmE;QACnE,OAAO,EACL,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,KAAe;IAEf,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,MAAM,EACN,MAAM,EACN,GAAG,EACH,KAAK,CACN,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC;gBACE,kBAAkB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yEAAyE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;aAC9O;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM;QAC1D,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SACzC;QACD,KAAK,EAAE,IAAI;KACZ,CAAC,CACH,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,MAAM,gBAAgB,GAAa;IACjC,IAAI,EAAE,EAAE;IACR,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,IAAI;CACd,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,GAAiB,EACjB,KAAK,GAAa,gBAAgB;;;IAElC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI;QACjB,GAAG,KAAK,CAAC,IAAI;QACb,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,GAAG,KAAK,CAAC,KAAK;KACf,EAAE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,UAAU,CACd,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,IAAI,IAAI,EAC3D,mBAAmB,KAAK,GAAG,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,IAAI,MAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAE,SAAS,EAAE,CAAC;YAC/B,MAAM,UAAU,CACd,IAAI,IAAI,mDAAmD,EAC3D,gDAAgD,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,YAAY,IAAI,EAAE,CAChG,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,qBAAgC,KAAK,CAAC,MAAM,CAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACnB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACjB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;aAC7C,CAAC;YACJ,GAAG,CAAC,GAAG,CACL,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,CACZ,MAAM,CACJ,KAAK,CAAC,SAAS;gBACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;gBAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CACxB,CAAC,IAAI,EAAE,CAAC;YACT,IAAI,KAAK;gBAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,eAAe,CACnB,sBAAsB,EACtB,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,6BAA6B,CACrF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,kBAC5B,YAAY,EAAE,GAAG,CAAC,YAAY,EAC9B,MAAM,IACH,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACzD,CACH,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,KAAqC;IAC1D,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,GAAG,CAAC;IACpD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,GAAG;YACd,CAAC,CAAC,GAAG,IAAI,oCAAoC;YAC7C,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,KAAK;YAChB,CAAC,CAAC,GAAG,IAAI,cAAc,KAAK,CAAC,KAAK,qBAAqB;YACvD,CAAC,CAAC,GAAG,IAAI,4BAA4B,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,KAAqC;IACtD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,SAAS;YACf,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,KAAK,CAAC,KAAK;gBACX,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,OAAO,CAAC;IAChB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,MAAM,KAAK,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,SAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qCAAqC,EAC3D,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,qBAAqB,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,UAAU,CACd,SAAS;YACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,SAAS,IAAI;YAClE,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,kCAAkC,EAC5D,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjI,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,IAAI,+BAA+B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,uGAAuG,EACtM,qFAAqF,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ,CAChJ,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;IACF,MAAM,EAAE,GAAG,KAAc,MAAM,EAAf,IAAI,UAAK,MAAM,EAAzB,OAAgB,CAAS,CAAC;IAChC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE;QAC1C,KAAK,EAAE,MAAM,CAAC,IAAI;QAClB,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,cAAc;QAC1D,OAAO,EAAE,wBAAwB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,oBAAoB,MAAM,CAAC,OAAO,CAAC,IAAI,kEAAkE;QACpM,MAAM,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,EAAE,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ;KAC1F,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,OAAO,+BACd,IAAI,IAAK,IAAI,KAAE,UAAU,KAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE;QAC9D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,CAAC,KAAK,EAAE,YAAY,UAAU,yBAAyB,CAAC;YACxD;gBACE,eAAe;gBACf,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC;aAC1D;SACF;QACD,KAAK,EAAE;YACL,kMAAkM;YAClM,GAAG,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,CAAC,8DAA8D,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,MAA6B;;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACrF,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB;KAClD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,yCAAyC,MAAM,CAAC,MAAM,CAAC,IAAI,qFAAqF,CACjJ,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,KAAK,CAAC,IAAI,CACR,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,kCAC3B,MAAM,KACT,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAC1B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAC9B,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CACxC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CACR,2DAA2D,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,iBAAiB,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAC5N,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,QAAQ;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,QAAQ,CAAC,WAAW,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE;gBAClP,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,CAClE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CACR,gCAAgC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/I,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,kDAAkD,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,UAAU;QACf,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7M,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,gDAAgD,cAAc,CAAC,MAAM,CAAC,EAAE,CAC7F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAA6B;;IACpD,MAAM,WAAW,SAAG,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC;IAC7C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC9B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAC7D,CAAC;QACF,MAAM,QAAQ,SAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,QAAQ,mCAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,IAAI;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,mBAAmB,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;iBACpE,CAAC;YACN,KAAK;gBACH,CAAC,CAAC,KAAK,CAAC,SAAS;oBACf,CAAC,CAAC,aAAa,GAAG,OAAC,KAAK,CAAC,WAAW,mCAAI,EAAE,CAAC,EAAE;oBAC7C,CAAC,CAAC,eAAe;gBACnB,CAAC,CAAC,KAAK,CAAC,SAAS;oBACf,CAAC,CAAC,aAAa,GAAG,OAAC,KAAK,CAAC,WAAW,mCAAI,EAAE,CAAC,EAAE;oBAC7C,CAAC,CAAC,eAAe;YACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACrB,CAAC,CAAC;oBACE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;wBAC3C,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,gBAAgB;iBACrB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,KAAK,GACT,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,gBAAgB,KAAK,KAAK;YAChC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CACR,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,YAAY,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7I,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CACR,oBAAoB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CACR,6BAA6B,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CACrB,MAA6B,EAC7B,YAAY,GAAG,SAAS;IAExB,OAAO,iCAAiC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,YAAY,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AACvL,CAAC;AAED,SAAS,cAAc,CACrB,MAA6B,EAC7B,GAAiB;;IAEjB,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;KACnF,CAAC;IACF,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,MAAM;QACnC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;YACE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+DAA+D;SACzF,CAAC;IACN,KAAK,CAAC,IAAI,CACR,gCAAgC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,qFAAqF,CACtF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,GAAiB,EACjB,MAAc;IAEd,OAAO;QACL,GAAG,GAAG,CAAC,QAAQ;aACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;aACtC,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,+BAA+B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,mCAAmC,CACvH;QACH,GAAG,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,oBAAoB,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,MAA6B,EAC7B,UAA8B;IAE9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,2EAA2E,EACjG,yBAAyB,MAAM,CAAC,OAAO,CAAC,IAAI,yBAAyB,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,UAAU,CACd,UAAU;QACR,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qBAAqB,UAAU,IAAI;QAC3D,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC,EAC7D,kCAAkC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAyD;QAEzD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,sCAAsC,EACtE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACpB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,GAAe,EAAE,IAAe;;IACxD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,6BAA6B,KAAK,IAAI;QACxC,CAAC,CAAC,2BAA2B,EAC/B,mfAAmf,CACpf,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAwB;IACtE,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,EACjE,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,qFAAqF;QACvF,CAAC,CAAC,qFAAqF,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,MAIZ;;IACC,mBAAO,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAiB;IACrC,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type {\n  TeamAppState,\n  TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  authRequiredError,\n  invalidStateError,\n  usageError,\n  validationError,\n} from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { ensureSecretsDir, writeSecretFile } from '../secret-file';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  type TeamsApiResult,\n  listTeams,\n  mintTeamWebhook,\n  setTeamApp,\n  showTeamIntegration,\n} from '../teams-api';\nimport { promptHidden, promptLine } from './apps';\nimport { scopeHiddenLines } from './scope-notice';\nimport { isTeamAgentArea, runTeamAgentCommands } from './team-agents';\nimport { runTeamEvents } from './teams-events';\nimport {\n  ONBOARDING_SUBCOMMANDS,\n  isOnboardingSubcommand,\n  parseOnboarding,\n  runOnboarding,\n} from './teams-onboard';\nimport { runTeamOverview } from './teams-overview';\nimport { runTeamScope } from './teams-scope';\n\nexport const TEAMS_SUBCOMMANDS = [\n  'list',\n  'show',\n  'app',\n  'webhook',\n  'events',\n  'scope',\n  ...ONBOARDING_SUBCOMMANDS,\n] as const;\ntype TeamsSubcommand = (typeof TEAMS_SUBCOMMANDS)[number];\n\nexport interface TeamsArgs {\n  host?: string;\n  source?: string;\n  /** `list`, `show <team> [<product>]`, `app set <team> <product>`, `webhook <team> <product> [<id>]`. */\n  positionals: readonly string[];\n  connection?: string;\n  /** `create --slug`, `create --owner <email>`, `members invite --role`. */\n  slug?: string;\n  owner?: string;\n  role?: string;\n  yes: boolean;\n  /** `connect --no-wait`: print the sign-in link and return without polling. */\n  noWait?: boolean;\n  /** `connect --no-open`: never open a browser, only print the link. */\n  noOpen?: boolean;\n  /** `connect --link-only`: print the team's page, as before connect did the work. */\n  linkOnly?: boolean;\n  /** `connect --reconnect`: connect again though it reads as connected. */\n  reconnect?: boolean;\n  /** Test seams for `connect`: the wait between polls, and the browser opener. */\n  pollDelayMs?: number;\n  openUrl?: (url: string) => void;\n  /** Every parsed flag, for `teams agents|triggers|links|mcp` (team-agents.ts). */\n  flags?: Record<string, string | boolean | string[]>;\n  dir: string;\n  env: Record<string, string | undefined>;\n  stdinIsTTY?: boolean;\n  /** Test seams for the questions `app set` asks. */\n  ask?: (question: string) => Promise<string>;\n  askSecret?: (question: string) => Promise<string>;\n}\n\nexport interface Target {\n  source: string;\n  team: string;\n  product: string;\n}\n\n/**\n * `teams` — a Source admin's view of its teams' integration setup, the\n * team-level counterpart of `apps`. `list` names the teams; `show` reads one\n * team's setup of one product as a checklist; `app set` enters or updates\n * any of a team's own app fields (Zendesk's subdomain, client and signing\n * secret), one at a time if need be — a field left alone keeps its saved\n * value. Secrets are only ever typed at the admin's terminal, never from a\n * flag, a file or a non-interactive run, so an agent driving the CLI never\n * handles one; a non-secret field may be passed as `--set name=value`; `webhook` mints the URL the\n * team's provider sends to, shown once.\n */\nexport async function runTeams(\n  ctx: CliContext,\n  args: TeamsArgs,\n): Promise<ExitCode> {\n  const [rawSubcommand, ...rest] = args.positionals;\n  if (isTeamAgentArea(rawSubcommand)) {\n    return runTeamAgentCommands(ctx, args);\n  }\n  const subcommand = parseSubcommand(rawSubcommand);\n\n  if (subcommand === 'events') {\n    return runTeamEvents(ctx, args, rest);\n  }\n  if (subcommand === 'scope') {\n    return runTeamScope(ctx, args, rest);\n  }\n\n  if (isOnboardingSubcommand(subcommand)) {\n    const plan = parseOnboarding(subcommand, rest, {\n      ...args,\n      as: typeof args.flags?.as === 'string' ? args.flags.as : undefined,\n    });\n    const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n      projectDir: args.dir,\n    });\n    const resolved = await resolveSourceTarget(env, requireSession(env), args);\n    return runOnboarding(\n      ctx,\n      args,\n      new TeamsClient(env, resolved.session),\n      env.host,\n      resolved.source,\n      plan,\n    );\n  }\n\n  if (subcommand === 'app' && rest[0] !== 'set') {\n    throw usageError(\n      rest[0]\n        ? `Unknown teams app subcommand \"${rest[0]}\".`\n        : 'teams app needs a subcommand.',\n      'Run \"ekanos teams app set <team> <product>\".',\n    );\n  }\n  const operands = subcommand === 'app' ? rest.slice(1) : rest;\n\n  if (subcommand === 'list' && operands.length > 0) {\n    throw usageError(\n      'teams list takes no arguments.',\n      'Run \"ekanos teams list --source <slug>\".',\n    );\n  }\n\n  const team = subcommand === 'list' ? '' : requireSlug(operands[0], 'team');\n  // `teams show <team>` alone is the team's overview.\n  const overview = subcommand === 'show' && operands[1] === undefined;\n  const product =\n    subcommand === 'list' || overview\n      ? ''\n      : requireSlug(operands[1], 'product');\n  const extra = operands.slice(subcommand === 'webhook' ? 3 : 2);\n  const appEdits = subcommand === 'app' ? parseAppEdits(args.flags) : null;\n  if (subcommand !== 'list' && extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'See \"ekanos teams --help\".',\n    );\n  }\n\n  if (appEdits?.prompts && !canPrompt(ctx, args)) {\n    throw usageError(\n      \"teams app set takes the team's secrets at a terminal, never in a script or an agent run. Non-secret fields can be passed with --set <name>=<value>.\",\n      `Run it yourself in your terminal: npx @ekanos/cli teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), args);\n  const client = new TeamsClient(env, resolved.session);\n  const source = resolved.source;\n\n  if (subcommand === 'list') {\n    const list = await client.call((token) =>\n      listTeams(env.host, token, source),\n    );\n    return ctx.succeed(\n      { host: env.host, ...list },\n      list.teams.length === 0\n        ? ctx.ui.result({\n            title: `No teams on ${list.source.slug}`,\n            tone: 'warn',\n          })\n        : ctx.ui.result({\n            title: `Teams on ${list.source.slug}`,\n            rows: list.teams.map((entry) => [\n              entry.slug,\n              `${entry.name} · ${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`,\n            ]),\n            notes: [\n              '\"ekanos teams show <team>\" shows a team\\'s setup; add a product for its checklist.',\n            ],\n          }),\n    );\n  }\n\n  if (overview) {\n    return runTeamOverview(ctx, client, env.host, source, team);\n  }\n\n  const target: Target = { source, team, product };\n  const status = await client.call((token) =>\n    showTeamIntegration(env.host, token, target),\n  );\n\n  if (subcommand === 'show') {\n    return ctx.succeed(\n      { host: env.host, ...status },\n      checklist(status).join('\\n'),\n    );\n  }\n\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${product}\" is not enabled on ${status.source.slug}.`,\n      `\"ekanos sources products --source ${status.source.slug}\" shows what it has; only a super-admin enables a product for a Source (in /admin).`,\n    );\n  }\n\n  if (subcommand === 'app' && appEdits) {\n    return setApp(ctx, args, client, env.host, target, status, appEdits);\n  }\n  return mintWebhook(ctx, args, client, env.host, target, status, operands[2]);\n}\n\n/** What `teams app set` was asked to change, from its flags. */\ninterface AppEdits {\n  /** `--field`: enter just these, at the terminal. */\n  only: string[];\n  /** `--set name=value`: non-secret values, no prompt. */\n  values: Record<string, string>;\n  /** `--clear name`: remove a saved value. */\n  clear: string[];\n  /** Whether anything is asked at the terminal. */\n  prompts: boolean;\n}\n\nfunction parseAppEdits(flags: TeamsArgs['flags']): AppEdits {\n  const list = (name: string): string[] => {\n    const raw = flags?.[name];\n    if (raw === undefined || raw === false) return [];\n    if (Array.isArray(raw)) return raw;\n    return typeof raw === 'string' ? [raw] : [];\n  };\n  const values: Record<string, string> = {};\n  for (const pair of list('set')) {\n    const at = pair.indexOf('=');\n    if (at <= 0) {\n      throw usageError(\n        `--set \"${pair}\" is not <field>=<value>.`,\n        'For example: --set subdomain=acme. Secrets are never passed as arguments: use --field <name> and enter it at the prompt.',\n      );\n    }\n    values[pair.slice(0, at).trim()] = pair.slice(at + 1).trim();\n  }\n  const only = list('field');\n  const clear = list('clear');\n  return {\n    only,\n    values,\n    clear,\n    // Bare `app set` walks every field; `--field` asks the named ones.\n    prompts:\n      only.length > 0 ||\n      (Object.keys(values).length === 0 && clear.length === 0),\n  };\n}\n\nasync function setApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  edits: AppEdits,\n): Promise<ExitCode> {\n  const app = chooseApp(status, args.connection);\n  const result = await promptAndSaveTeamApp(\n    ctx,\n    args,\n    client,\n    host,\n    target,\n    status,\n    app,\n    edits,\n  );\n  const missing = result.fields.filter((field) => !field.set);\n  const next = [\n    ...(missing.length > 0\n      ? [\n          `Still not set: ${missing.map((field) => field.label).join(', ')} — a team member can't connect until it is. Run \"ekanos teams app set ${target.team} ${target.product} ${missing.map((field) => `--field ${field.secretName}`).join(' ')}\".`,\n        ]\n      : []),\n    ...nextSteps(status, app, target),\n  ];\n  return ctx.succeed(\n    { host, ...result },\n    ctx.ui.result({\n      title: `Saved ${target.team}'s ${result.product.name} app`,\n      rows: [\n        ['Source', status.source.slug],\n        ['Fields', result.fields.map(fieldLine)],\n      ],\n      notes: next,\n    }),\n  );\n}\n\n/** Every field, asked in turn: bare `teams app set`, and `teams connect`. */\nconst WALK_EVERY_FIELD: AppEdits = {\n  only: [],\n  values: {},\n  clear: [],\n  prompts: true,\n};\n\n/**\n * The `teams app set` walkthrough and prompts for one team app, then the\n * save — of only what was entered: a field left empty keeps its saved value.\n * Shared with `teams connect`, which runs it inline when the integration\n * needs the team's own app (Zendesk) before anyone can sign in.\n */\nexport async function promptAndSaveTeamApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  edits: AppEdits = WALK_EVERY_FIELD,\n) {\n  const known = new Map(app.fields.map((field) => [field.secretName, field]));\n  const names = app.fields.map((field) => field.secretName).join(', ');\n  for (const name of [\n    ...edits.only,\n    ...Object.keys(edits.values),\n    ...edits.clear,\n  ]) {\n    if (!known.has(name)) {\n      throw usageError(\n        `${status.product.name}'s team app has no field \"${name}\".`,\n        `Its fields are: ${names}.`,\n      );\n    }\n  }\n  for (const name of Object.keys(edits.values)) {\n    if (known.get(name)?.sensitive) {\n      throw usageError(\n        `\"${name}\" is a secret: it is never passed as an argument.`,\n        `Enter it at the prompt: ekanos teams app set ${target.team} ${target.product} --field ${name}`,\n      );\n    }\n  }\n\n  const fields: Record<string, string> = { ...edits.values };\n  if (edits.prompts) {\n    const toAsk =\n      edits.only.length > 0\n        ? app.fields.filter((field) => edits.only.includes(field.secretName))\n        : app.fields;\n    if (edits.only.length === 0)\n      ctx.log(appWalkthrough(status, app).join('\\n'));\n    else {\n      ctx.log(\n        `${status.product.name} app for team ${target.team} on ${status.source.slug}`,\n      );\n    }\n    for (const field of toAsk) {\n      const value = (\n        await (\n          field.sensitive\n            ? (args.askSecret ?? promptHidden)\n            : (args.ask ?? promptLine)\n        )(fieldQuestion(field))\n      ).trim();\n      if (value) fields[field.secretName] = value;\n    }\n  }\n\n  if (Object.keys(fields).length === 0 && edits.clear.length === 0) {\n    throw validationError(\n      'Nothing was changed.',\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see the current state.`,\n    );\n  }\n\n  return client.call((token) =>\n    setTeamApp(host, token, target, {\n      connectionId: app.connectionId,\n      fields,\n      ...(edits.clear.length > 0 ? { clear: edits.clear } : {}),\n    }),\n  );\n}\n\n/** The prompt for one field: what is saved, and that Enter keeps it. */\nfunction fieldQuestion(field: TeamAppState['fields'][number]): string {\n  const name = `${field.label} [${field.secretName}]`;\n  if (field.sensitive) {\n    return field.set\n      ? `${name} (saved — Enter to keep, hidden): `\n      : `${name} (hidden): `;\n  }\n  if (field.set) {\n    return field.value\n      ? `${name} (current: ${field.value} — Enter to keep): `\n      : `${name} (saved — Enter to keep): `;\n  }\n  return `${name}: `;\n}\n\n/** One field's state: a secret only as saved / not set, never its value. */\nfunction fieldLine(field: TeamAppState['fields'][number]): string {\n  const state = !field.set\n    ? 'not set'\n    : field.sensitive\n      ? 'saved'\n      : field.value\n        ? field.value\n        : 'saved';\n  return `${mark(field.set)} ${field.label} (${field.secretName}): ${state}`;\n}\n\nasync function mintWebhook(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  requested: string | undefined,\n): Promise<ExitCode> {\n  const webhooks = status.teamApps.flatMap((app) => app.webhooks);\n  if (webhooks.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} has no webhook a team's app sends.`,\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see its setup.`,\n    );\n  }\n  const webhook = requested\n    ? webhooks.find((entry) => entry.webhookId === requested)\n    : webhooks.length === 1\n      ? webhooks[0]\n      : undefined;\n  if (!webhook) {\n    throw usageError(\n      requested\n        ? `${status.product.name} has no team-app webhook \"${requested}\".`\n        : `${status.product.name} has several webhooks; name one.`,\n      `Run one of: ${webhooks.map((entry) => `ekanos teams webhook ${target.team} ${target.product} ${entry.webhookId}`).join(', ')}.`,\n    );\n  }\n\n  if (webhook.endpoint && !args.yes) {\n    throw invalidStateError(\n      `${target.team} already has a live URL for ${webhook.webhookId} (${webhook.endpoint.tokenPrefix}…). A new one revokes it, and the provider's webhook stops working until you paste the new URL there.`,\n      `Re-run with --yes when you are ready to update the provider: ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n    );\n  }\n\n  // The URL carries its token, so it goes to a 0600 file, never the output.\n  const secrets = ensureSecretsDir(args.env);\n  const minted = await client.call((token) =>\n    mintTeamWebhook(host, token, target, webhook.webhookId),\n  );\n  const { url, ...rest } = minted;\n  const secretFile = writeSecretFile(secrets, {\n    owner: target.team,\n    what: `${target.product}-${webhook.webhookId}-webhook-url`,\n    purpose: `Webhook URL for team ${target.team}'s ${status.product.name} (${webhook.webhookId}). Paste it into ${status.product.name}'s webhook settings for this team; the token is part of the URL.`,\n    values: [['WEBHOOK_URL', url]],\n    again: `ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n  });\n  return ctx.succeed(\n    { host, ...rest, secretFile },\n    ctx.ui.result({\n      title: `Webhook URL for ${target.team} · ${webhook.webhookId}`,\n      tone: 'warn',\n      rows: [\n        ['URL', `saved to ${secretFile} (readable only by you)`],\n        [\n          'Paste it into',\n          `${status.product.name}'s webhook settings for this team`,\n        ],\n      ],\n      notes: [\n        'The URL carries its token, so it is shown nowhere else and cannot be read again. Copy it from that file into the provider yourself — not into a chat or an agent session — then delete the file.',\n        ...(minted.replaced\n          ? ['The previous URL is revoked: the provider must use this one.']\n          : []),\n      ],\n    }),\n  );\n}\n\n/** `teams show`, read top to bottom like a setup checklist. */\nexport function checklist(status: TeamIntegrationStatus): string[] {\n  const name = status.product.name;\n  const lines = [\n    `${name} for team ${status.team.slug} (${status.team.name}) on ${status.source.slug}`,\n    `  ${mark(status.enabled)} Enabled on the Source`,\n  ];\n  if (!status.enabled) {\n    lines.push(\n      `    \"ekanos sources products --source ${status.source.slug}\" shows what it has; only a super-admin enables a product for a Source (in /admin).`,\n    );\n    return lines;\n  }\n\n  const target = { team: status.team.slug, product: status.product.slug };\n  lines.push(\n    ...scopeHiddenLines(status.scope, {\n      ...target,\n      source: status.source.slug,\n    }).map((line) => `  ${line}`),\n  );\n  lines.push(...connectionLines(status));\n  for (const app of status.teamApps) {\n    lines.push(`  Team app: ${app.label} (${app.connectionId})`);\n    if (app.setup?.consoleUrl) lines.push(`    Open: ${app.setup.consoleUrl}`);\n    app.setup?.steps.forEach((step, index) =>\n      lines.push(`    ${index + 1}. ${step}`),\n    );\n    lines.push('    Callback URLs to register:');\n    lines.push(...callbackUrls(app).map((url) => `      ${url}`));\n    if (app.guideUrl) lines.push(`    Guide: ${app.guideUrl}`);\n    for (const field of app.fields) {\n      lines.push(`    ${fieldLine(field)}`);\n    }\n    const unset = app.fields.filter((field) => !field.set);\n    if (unset.length > 0) {\n      lines.push(\n        `      → in your terminal: npx @ekanos/cli teams app set ${target.team} ${target.product} --connection ${app.connectionId} ${unset.map((field) => `--field ${field.secretName}`).join(' ')} --source ${status.source.slug}`,\n      );\n    }\n    for (const webhook of app.webhooks) {\n      lines.push(\n        webhook.endpoint\n          ? `    ${mark(true)} Webhook ${webhook.webhookId}: live URL ${webhook.endpoint.tokenPrefix}… since ${day(webhook.endpoint.createdAt)}${webhook.endpoint.lastUsedAt ? `, last delivery ${day(webhook.endpoint.lastUsedAt)}` : ', no delivery yet'}`\n          : `    ${mark(false)} Webhook ${webhook.webhookId}: no URL yet`,\n      );\n      if (!webhook.endpoint) {\n        lines.push(\n          `      → ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --source ${status.source.slug}`,\n        );\n      }\n    }\n    lines.push(\n      app.connection\n        ? `    ${mark(true)} Connected ${day(app.connection.connectedAt)}${app.connection.connectedBy ? ` by ${who(app.connection.connectedBy)}` : ''}`\n        : `    ${mark(false)} Connected: not yet\\n      → in your terminal: ${connectCommand(status, app.connectionId)}`,\n    );\n  }\n\n  lines.push(\n    status.activation\n      ? `  ${mark(true)} Activated for the team${status.activation.activatedAt ? ` ${day(status.activation.activatedAt)}` : ''}${status.activation.activatedBy ? ` by ${who(status.activation.activatedBy)}` : ''}`\n      : `  ${mark(false)} Activated: not yet\\n    → in your terminal: ${connectCommand(status)}`,\n  );\n  lines.push(`  Team page: ${status.connectUrl}`);\n  if (status.agentEvents.length > 0) {\n    lines.push('  Agent events it offers:');\n    lines.push(\n      ...status.agentEvents.map((event) => `    ${event.id} — ${event.label}`),\n    );\n  }\n  return lines;\n}\n\n/**\n * Each OAuth connection in one line — connected, or installed for a named\n * one, with its app's credentials and webhook URL — and which of the team's\n * agents wait on it. A named connection an agent's trigger needs and the team\n * has not installed is the gap no other line names: the trigger is stored\n * and on, and nothing ever reaches it.\n */\nfunction connectionLines(status: TeamIntegrationStatus): string[] {\n  const connections = status.connections ?? [];\n  if (connections.length === 0) return [];\n  const lines = ['  Connections:'];\n  for (const entry of connections) {\n    const named = entry.connectionId !== 'default';\n    const app = status.teamApps.find(\n      (candidate) => candidate.connectionId === entry.connectionId,\n    );\n    const webhooks = app?.webhooks ?? [];\n    const steps = [\n      ...(entry.credentialsSaved === null\n        ? []\n        : [\n            `app credentials ${entry.credentialsSaved ? 'saved' : 'not saved'}`,\n          ]),\n      named\n        ? entry.connected\n          ? `installed ${day(entry.connectedAt ?? '')}`\n          : 'not installed'\n        : entry.connected\n          ? `connected ${day(entry.connectedAt ?? '')}`\n          : 'not connected',\n      ...(webhooks.length > 0\n        ? [\n            webhooks.every((webhook) => webhook.endpoint)\n              ? 'webhook URL made'\n              : 'no webhook URL',\n          ]\n        : []),\n    ];\n    const ready =\n      entry.connected &&\n      entry.credentialsSaved !== false &&\n      webhooks.every((webhook) => webhook.endpoint);\n    lines.push(\n      `    ${mark(ready)} ${entry.label} (${entry.connectionId}): ${steps.join(' · ')}${entry.connectedBy ? ` by ${who(entry.connectedBy)}` : ''}`,\n    );\n    if (entry.neededBy.length > 0) {\n      lines.push(\n        `      Needed by: ${entry.neededBy.map((need) => `${need.agent} (${need.triggers.join(', ')})`).join(', ')}`,\n      );\n    }\n    if (!entry.connected) {\n      lines.push(\n        `      → in your terminal: ${connectCommand(status, entry.connectionId)}`,\n      );\n    }\n  }\n  return lines;\n}\n\n/** The command that connects the team, for a hint: `--connection` only for a named one. */\nfunction connectCommand(\n  status: TeamIntegrationStatus,\n  connectionId = 'default',\n): string {\n  return `npx @ekanos/cli teams connect ${status.team.slug} ${status.product.slug}${connectionId === 'default' ? '' : ` --connection ${connectionId}`} --source ${status.source.slug}`;\n}\n\nfunction appWalkthrough(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n): string[] {\n  const lines = [\n    `${status.product.name} app for team ${status.team.slug} on ${status.source.slug}`,\n  ];\n  if (app.setup?.consoleUrl) lines.push(`  Open: ${app.setup.consoleUrl}`);\n  const steps = app.setup?.steps.length\n    ? [...app.setup.steps]\n    : [\n        `In ${status.product.name}, create an OAuth app for the team (or open the one it uses).`,\n      ];\n  steps.push(\n    `Check the app lists exactly: ${callbackUrls(app).join(', ')}`,\n    \"Enter its values below. Secrets are stored in Ekanos's vault and never shown again.\",\n  );\n  lines.push(...steps.map((step, index) => `  ${index + 1}. ${step}`));\n  if (app.guideUrl) lines.push(`  Guide: ${app.guideUrl}`);\n  return lines;\n}\n\nfunction nextSteps(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  target: Target,\n): string[] {\n  return [\n    ...app.webhooks\n      .filter((webhook) => !webhook.endpoint)\n      .map(\n        (webhook) =>\n          `Next: \"ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId}\" for the provider's webhook URL.`,\n      ),\n    ...(app.connection\n      ? []\n      : [`Then connect it: ${connectCommand(status, app.connectionId)}`]),\n  ];\n}\n\nexport function chooseApp(\n  status: TeamIntegrationStatus,\n  connection: string | undefined,\n): TeamAppState {\n  const apps = status.teamApps;\n  if (apps.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} takes no team app: teams connect through the Source's app, or need none.`,\n      `Run \"ekanos apps show ${status.product.slug}\" for the Source's app.`,\n    );\n  }\n  const app = connection\n    ? apps.find((entry) => entry.connectionId === connection)\n    : apps.length === 1\n      ? apps[0]\n      : apps.find((entry) => entry.connectionId === 'default');\n  if (app) return app;\n  throw usageError(\n    connection\n      ? `${status.product.name} has no team app \"${connection}\".`\n      : `${status.product.name} has several team apps; name one.`,\n    `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`,\n  );\n}\n\nexport class TeamsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<TeamsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the teams call.`,\n      loginHint(this.env),\n    );\n  }\n}\n\nexport function canPrompt(ctx: CliContext, args: TeamsArgs): boolean {\n  return !ctx.jsonMode && (args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n\nfunction parseSubcommand(value: string | undefined): TeamsSubcommand {\n  const match = TEAMS_SUBCOMMANDS.find((name) => name === value);\n  if (match) return match;\n  throw usageError(\n    value\n      ? `Unknown teams subcommand \"${value}\".`\n      : 'teams needs a subcommand.',\n    'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams rename <team> <name>, ekanos teams members list <team>, ekanos teams roles list <team>, ekanos teams connect <team> <product>, ekanos teams disconnect <team> <product> --yes, ekanos teams show <team> [<product>], ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams events <team> [<product>], ekanos teams scope show|set <team> …, ekanos teams agents|triggers|links|mcp ….',\n  );\n}\n\nfunction requireSlug(value: string | undefined, what: 'team' | 'product') {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value ? `\"${value}\" is not a ${what} slug.` : `Name the ${what}.`,\n    what === 'team'\n      ? '\"ekanos teams list\" lists the teams, e.g. \"ekanos teams show acme-support zendesk\".'\n      : '\"ekanos catalog\" lists the products, e.g. \"ekanos teams show acme-support zendesk\".',\n  );\n}\n\nfunction mark(done: boolean): string {\n  return done ? '✓' : '✗';\n}\n\nfunction day(iso: string): string {\n  return iso.slice(0, 10);\n}\n\nfunction who(member: {\n  name: string | null;\n  email: string | null;\n  userId: string;\n}) {\n  return member.email ?? member.name ?? member.userId;\n}\n\n/** Every redirect URI to register. */\nfunction callbackUrls(app: TeamAppState): string[] {\n  return app.callbackUrls.length ? app.callbackUrls : [app.callbackUrl];\n}\n"]}
+{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/commands/teams.ts"],"names":[],"mappings":";;;;;;;;;;;AAMA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EACL,kBAAkB,EAGlB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAEL,SAAS,EACT,eAAe,EACf,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,YAAY,GACb,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,MAAM;IACN,KAAK;IACL,SAAS;IACT,QAAQ;IACR,OAAO;IACP,UAAU;IACV,GAAG,sBAAsB;IACzB,GAAG,qBAAqB;CAChB,CAAC;AA4CX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,IAAe;;IAEf,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAClD,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAElD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,UAAU,KAAK,OAAO,EAAE,CAAC;QAC3B,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,IACE,qBAAqB,CAAC,UAAU,CAAC;QACjC,CAAC,UAAU,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAC5D,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,cAAc,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,kCACxC,IAAI,KACP,EAAE,EAAE,QAAO,MAAA,IAAI,CAAC,KAAK,0CAAE,EAAE,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAClE,IAAI,EAAE,CAAA,MAAA,IAAI,CAAC,KAAK,0CAAE,IAAI,MAAK,IAAI,EAC/B,IAAI,EAAE,CAAA,MAAA,IAAI,CAAC,KAAK,0CAAE,IAAI,MAAK,IAAI,IAC/B,CAAC;QACH,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC3E,OAAO,aAAa,CAClB,GAAG,EACH,IAAI,EACJ,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,IAAI,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,iCAAiC,IAAI,CAAC,CAAC,CAAC,IAAI;YAC9C,CAAC,CAAC,+BAA+B,EACnC,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,CACd,gCAAgC,EAChC,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,oDAAoD;IACpD,MAAM,QAAQ,GAAG,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IACpE,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,IAAI,QAAQ;QAC/B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,IAAI,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,IACE,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,OAAO;QACjB,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;QACrB,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAClC,CAAC;QACD,MAAM,UAAU,CACd,wIAAwI,EACxI,4BAA4B,kBAAkB,0CAA0C,GAAG,EAAE,kBAAkB,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7O,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,MAAM;aACb,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC9D,KAAK,EAAE;oBACL,oFAAoF;oBACpF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CACjB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,cAAc,KAAK,KAAK,IAAI,KAAK,CAAC,WAAW,GAAG,CAAC,CAC1D;wBACC,CAAC,CAAC;4BACE,iKAAiK;yBAClK;wBACH,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CAAC,CACP,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAC7C,CAAC;IAEF,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EACvD,qCAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,qFAAqF,CAC7I,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,QAAQ,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAgBD,SAAS,aAAa,CAAC,KAAyB;IAC9C,MAAM,IAAI,GAAG,CAAC,IAAY,EAAY,EAAE;QACtC,MAAM,GAAG,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAG,IAAI,CAAC,CAAC;QAC1B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC;QACnC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO;QACL,IAAI;QACJ,MAAM;QACN,KAAK;QACL,MAAM;QACN,mEAAmE;QACnE,OAAO,EACL,IAAI,CAAC,MAAM,GAAG,CAAC;YACf,gBAAgB,CAAC,MAAM,CAAC;YACxB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,KAAe;IAEf,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CACvC,GAAG,EACH,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,MAAM,EACN,MAAM,EACN,GAAG,EACH,KAAK,CACN,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG;QACX,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;YACpB,CAAC,CAAC;gBACE,kBAAkB,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,yEAAyE,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI;aAC9O;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC;KAClC,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM;QAC1D,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;SACzC;QACD,KAAK,EAAE,IAAI;KACZ,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,KAAyB;IAC/C,OAAO;QACL,IAAI,EAAE,EAAE;QACR,MAAM,EAAE,gBAAgB,CAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,GAAG,CAAC;QACpC,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC;QAC9B,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,GAAiB,EACjB,KAAK,GAAa,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;;IAE5C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI;QACjB,GAAG,KAAK,CAAC,IAAI;QACb,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC5B,GAAG,KAAK,CAAC,KAAK;KACf,EAAE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,UAAU,CACd,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,IAAI,IAAI,EAC3D,mBAAmB,KAAK,GAAG,CAC5B,CAAC;QACJ,CAAC;IACH,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,IAAI,MAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,0CAAE,SAAS,EAAE,CAAC;YAC/B,MAAM,UAAU,CACd,IAAI,IAAI,mDAAmD,EAC3D,2BAA2B,IAAI,iGAAiG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,YAAY,IAAI,EAAE,CAChL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,qBAAgC,KAAK,CAAC,MAAM,CAAE,CAAC;IAC3D,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YACnB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACrE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACjB,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;aAC7C,CAAC;YACJ,GAAG,CAAC,GAAG,CACL,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,iBAAiB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC1J,MAAM,CAAC,MAAM,CACX,MAAM,EACN,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,KAAK;iBACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;iBAC/D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACf,IAAI,EAAE,KAAK,CAAC,UAAU;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK;aAC5C,CAAC,CAAC;YACL,KAAK,EAAE,KAAK,CAAC,MAAM;YACnB,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC;YACvB,WAAW,EAAE,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;YACjC,KAAK,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,EAAE;YAC3D,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,8BAA8B,KAAK;iBAC/D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;iBAClC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;iBAChC,IAAI,CAAC,IAAI,CAAC,wCAAwC;YACrD,KAAK;YACL,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;;gBACf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;gBACrC,OAAO,CACL,KAAK,CAAC,SAAS;oBACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;oBAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1B,CAAC;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,eAAe,CACnB,sBAAsB,EACtB,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,6BAA6B,CACrF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3B,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,kBAC5B,YAAY,EAAE,GAAG,CAAC,YAAY,EAC9B,MAAM,IACH,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACzD,CACH,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,SAAS,aAAa,CAAC,KAAqC;IAC1D,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,GAAG,CAAC;IACpD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,GAAG;YACd,CAAC,CAAC,GAAG,IAAI,oCAAoC;YAC7C,CAAC,CAAC,GAAG,IAAI,aAAa,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,KAAK;YAChB,CAAC,CAAC,GAAG,IAAI,cAAc,KAAK,CAAC,KAAK,qBAAqB;YACvD,CAAC,CAAC,GAAG,IAAI,4BAA4B,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,KAAqC;IACtD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,GAAG;QACtB,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,KAAK,CAAC,SAAS;YACf,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,KAAK,CAAC,KAAK;gBACX,CAAC,CAAC,KAAK,CAAC,KAAK;gBACb,CAAC,CAAC,OAAO,CAAC;IAChB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,UAAU,MAAM,KAAK,EAAE,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,SAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qCAAqC,EAC3D,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,qBAAqB,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,UAAU,CACd,SAAS;YACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,SAAS,IAAI;YAClE,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,kCAAkC,EAC5D,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjI,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,IAAI,+BAA+B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,uGAAuG,EACtM,qFAAqF,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ,CAChJ,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;IACF,MAAM,EAAE,GAAG,KAAc,MAAM,EAAf,IAAI,UAAK,MAAM,EAAzB,OAAgB,CAAS,CAAC;IAChC,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,EAAE;QAC1C,KAAK,EAAE,MAAM,CAAC,IAAI;QAClB,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,cAAc;QAC1D,OAAO,EAAE,wBAAwB,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,oBAAoB,MAAM,CAAC,OAAO,CAAC,IAAI,kEAAkE;QACpM,MAAM,EAAE,CAAC,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;QAC9B,KAAK,EAAE,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ;KAC1F,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,OAAO,+BACd,IAAI,IAAK,IAAI,KAAE,UAAU,KAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE;QAC9D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,CAAC,KAAK,EAAE,YAAY,UAAU,yBAAyB,CAAC;YACxD;gBACE,eAAe;gBACf,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC;aAC1D;SACF;QACD,KAAK,EAAE;YACL,kMAAkM;YAClM,GAAG,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,CAAC,8DAA8D,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,MAA6B;;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACrF,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB;KAClD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,yCAAyC,MAAM,CAAC,MAAM,CAAC,IAAI,qFAAqF,CACjJ,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,KAAK,CAAC,IAAI,CACR,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,kCAC3B,MAAM,KACT,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAC1B,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAC9B,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CACxC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CACR,6BAA6B,GAAG,EAAE,kBAAkB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,iBAAiB,GAAG,CAAC,YAAY,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACrN,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,QAAQ;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,QAAQ,CAAC,WAAW,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE;gBAClP,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,CAClE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CACR,gCAAgC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/I,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,kDAAkD,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CACnH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,UAAU;QACf,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7M,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,gDAAgD,cAAc,CAAC,MAAM,CAAC,EAAE,CAC7F,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,SAAS,eAAe,CAAC,MAA6B;;IACpD,MAAM,WAAW,SAAG,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC;IAC7C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;QAC/C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC9B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,CAC7D,CAAC;QACF,MAAM,QAAQ,SAAG,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,QAAQ,mCAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG;YACZ,GAAG,CAAC,KAAK,CAAC,gBAAgB,KAAK,IAAI;gBACjC,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC;oBACE,mBAAmB,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE;iBACpE,CAAC;YACN,KAAK;gBACH,CAAC,CAAC,KAAK,CAAC,SAAS;oBACf,CAAC,CAAC,aAAa,GAAG,OAAC,KAAK,CAAC,WAAW,mCAAI,EAAE,CAAC,EAAE;oBAC7C,CAAC,CAAC,eAAe;gBACnB,CAAC,CAAC,KAAK,CAAC,SAAS;oBACf,CAAC,CAAC,aAAa,GAAG,OAAC,KAAK,CAAC,WAAW,mCAAI,EAAE,CAAC,EAAE;oBAC7C,CAAC,CAAC,eAAe;YACrB,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACrB,CAAC,CAAC;oBACE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;wBAC3C,CAAC,CAAC,kBAAkB;wBACpB,CAAC,CAAC,gBAAgB;iBACrB;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,KAAK,GACT,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,gBAAgB,KAAK,KAAK;YAChC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChD,KAAK,CAAC,IAAI,CACR,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,YAAY,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7I,CAAC;QACF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,CAAC,IAAI,CACR,oBAAoB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7G,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CACR,6BAA6B,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC,EAAE,CAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,KAKxB;IACC,MAAM,KAAK,GAAG,GAAG,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;IACjF,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,cAAc;QAAE,OAAO,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,kBAAkB,CAAC;IAC5E,OAAO,KAAK,CAAC,WAAW,KAAK,CAAC;QAC5B,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,kEAAkE,KAAK,CAAC,IAAI,SAAS;QACpG,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,yBAAyB,CAAC;AACxD,CAAC;AAED,2FAA2F;AAC3F,SAAS,cAAc,CACrB,MAA6B,EAC7B,YAAY,GAAG,SAAS;IAExB,OAAO,GAAG,GAAG,EAAE,kBAAkB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,YAAY,EAAE,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAChL,CAAC;AAED,SAAS,cAAc,CACrB,MAA6B,EAC7B,GAAiB;;IAEjB,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;KACnF,CAAC;IACF,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,MAAM;QACnC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;YACE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+DAA+D;SACzF,CAAC;IACN,KAAK,CAAC,IAAI,CACR,gCAAgC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,qFAAqF,CACtF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,GAAiB,EACjB,MAAc;IAEd,OAAO;QACL,GAAG,GAAG,CAAC,QAAQ;aACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;aACtC,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,+BAA+B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,mCAAmC,CACvH;QACH,GAAG,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,oBAAoB,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;KACtE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CACvB,MAA6B,EAC7B,UAA8B;IAE9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,2EAA2E,EACjG,yBAAyB,MAAM,CAAC,OAAO,CAAC,IAAI,yBAAyB,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,UAAU,CACd,UAAU;QACR,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qBAAqB,UAAU,IAAI;QAC3D,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC,EAC7D,kCAAkC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAyD;QAEzD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,sCAAsC,EACtE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACpB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,SAAS,CAAC,GAAe,EAAE,IAAe;;IACxD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,IAAe;;IAC3C,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,UAAU,QAAE,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QAC3D,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,aAAa,EAAE,IAAI,CAAC,mBAAmB;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,6BAA6B,KAAK,IAAI;QACxC,CAAC,CAAC,2BAA2B,EAC/B,s6BAAs6B,CACv6B,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAwB;IACtE,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,EACjE,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,qFAAqF;QACvF,CAAC,CAAC,qFAAqF,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,MAIZ;;IACC,mBAAO,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAiB;IACrC,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type {\n  TeamAppState,\n  TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  authRequiredError,\n  invalidStateError,\n  usageError,\n  validationError,\n} from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { cli } from '../invocation';\nimport { ensureSecretsDir, writeSecretFile } from '../secret-file';\nimport {\n  FIELD_SECRET_FORMS,\n  type SecretFlags,\n  type SecretIO,\n  collectSecrets,\n  parsePlainValues,\n  readSecretFlags,\n  secretInputGiven,\n} from '../secret-input';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  type TeamsApiResult,\n  listTeams,\n  mintTeamWebhook,\n  setTeamApp,\n  showTeamIntegration,\n} from '../teams-api';\nimport { promptHidden, promptLine } from './apps';\nimport { scopeHiddenLines } from './scope-notice';\nimport { isTeamAgentArea, runTeamAgentCommands } from './team-agents';\nimport { runTeamAudience } from './teams-audience';\nimport { runTeamEvents } from './teams-events';\nimport {\n  LIFECYCLE_SUBCOMMANDS,\n  isLifecycleMemberVerb,\n  isLifecycleSubcommand,\n  parseLifecycle,\n  runLifecycle,\n} from './teams-lifecycle';\nimport {\n  ONBOARDING_SUBCOMMANDS,\n  isOnboardingSubcommand,\n  parseOnboarding,\n  runOnboarding,\n} from './teams-onboard';\nimport { runTeamOverview } from './teams-overview';\nimport { runTeamScope } from './teams-scope';\n\nexport const TEAMS_SUBCOMMANDS = [\n  'list',\n  'show',\n  'app',\n  'webhook',\n  'events',\n  'scope',\n  'audience',\n  ...ONBOARDING_SUBCOMMANDS,\n  ...LIFECYCLE_SUBCOMMANDS,\n] as const;\ntype TeamsSubcommand = (typeof TEAMS_SUBCOMMANDS)[number];\n\nexport interface TeamsArgs {\n  host?: string;\n  source?: string;\n  /** `list`, `show <team> [<product>]`, `app set <team> <product>`, `webhook <team> <product> [<id>]`. */\n  positionals: readonly string[];\n  connection?: string;\n  /** `create --slug`, `create --owner <email>`, `members invite --role`. */\n  slug?: string;\n  owner?: string;\n  role?: string;\n  yes: boolean;\n  /** `connect --no-wait`: print the sign-in link and return without polling. */\n  noWait?: boolean;\n  /** `connect --no-open`: never open a browser, only print the link. */\n  noOpen?: boolean;\n  /** `connect --link-only`: print the team's page, as before connect did the work. */\n  linkOnly?: boolean;\n  /** `connect --reconnect`: connect again though it reads as connected. */\n  reconnect?: boolean;\n  /** Test seams for `connect`: the wait between polls, and the browser opener. */\n  pollDelayMs?: number;\n  openUrl?: (url: string) => void;\n  /** Every parsed flag, for `teams agents|triggers|links|mcp` (team-agents.ts). */\n  flags?: Record<string, string | boolean | string[]>;\n  dir: string;\n  env: Record<string, string | undefined>;\n  stdinIsTTY?: boolean;\n  /** Test seams for the questions `app set` asks. */\n  ask?: (question: string) => Promise<string>;\n  askSecret?: (question: string) => Promise<string>;\n  /** Test seams for the secret-input flags (`secret-input.ts`). */\n  readStdin?: () => Promise<string>;\n  secretFormTimeoutMs?: number;\n}\n\nexport interface Target {\n  source: string;\n  team: string;\n  product: string;\n}\n\n/**\n * `teams` — a Source admin's view of its teams' integration setup, the\n * team-level counterpart of `apps`. `list` names the teams; `show` reads one\n * team's setup of one product as a checklist; `app set` enters or updates\n * any of a team's own app fields (Zendesk's subdomain, client and signing\n * secret), one at a time if need be — a field left alone keeps its saved\n * value. A secret is typed at the admin's terminal with hidden input or,\n * without one, read from the environment, a private file, stdin or a form\n * in the browser (`secret-input.ts`) — never a value in argv; a non-secret\n * field may be passed as `--set name=value`; `webhook` mints the URL the\n * team's provider sends to, shown once.\n */\nexport async function runTeams(\n  ctx: CliContext,\n  args: TeamsArgs,\n): Promise<ExitCode> {\n  const [rawSubcommand, ...rest] = args.positionals;\n  if (isTeamAgentArea(rawSubcommand)) {\n    return runTeamAgentCommands(ctx, args);\n  }\n  const subcommand = parseSubcommand(rawSubcommand);\n\n  if (subcommand === 'events') {\n    return runTeamEvents(ctx, args, rest);\n  }\n  if (subcommand === 'scope') {\n    return runTeamScope(ctx, args, rest);\n  }\n  if (subcommand === 'audience') {\n    return runTeamAudience(ctx, args, rest);\n  }\n\n  if (\n    isLifecycleSubcommand(subcommand) ||\n    (subcommand === 'members' && isLifecycleMemberVerb(rest[0]))\n  ) {\n    return runLifecycle(ctx, args, parseLifecycle(subcommand, rest, args));\n  }\n\n  if (isOnboardingSubcommand(subcommand)) {\n    const plan = parseOnboarding(subcommand, rest, {\n      ...args,\n      as: typeof args.flags?.as === 'string' ? args.flags.as : undefined,\n      self: args.flags?.self === true,\n      mine: args.flags?.mine === true,\n    });\n    const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n      projectDir: args.dir,\n    });\n    const resolved = await resolveSourceTarget(env, requireSession(env), args);\n    return runOnboarding(\n      ctx,\n      args,\n      new TeamsClient(env, resolved.session),\n      env.host,\n      resolved.source,\n      plan,\n    );\n  }\n\n  if (subcommand === 'app' && rest[0] !== 'set') {\n    throw usageError(\n      rest[0]\n        ? `Unknown teams app subcommand \"${rest[0]}\".`\n        : 'teams app needs a subcommand.',\n      'Run \"ekanos teams app set <team> <product>\".',\n    );\n  }\n  const operands = subcommand === 'app' ? rest.slice(1) : rest;\n\n  if (subcommand === 'list' && operands.length > 0) {\n    throw usageError(\n      'teams list takes no arguments.',\n      'Run \"ekanos teams list --source <slug>\".',\n    );\n  }\n\n  const team = subcommand === 'list' ? '' : requireSlug(operands[0], 'team');\n  // `teams show <team>` alone is the team's overview.\n  const overview = subcommand === 'show' && operands[1] === undefined;\n  const product =\n    subcommand === 'list' || overview\n      ? ''\n      : requireSlug(operands[1], 'product');\n  const extra = operands.slice(subcommand === 'webhook' ? 3 : 2);\n  const appEdits = subcommand === 'app' ? parseAppEdits(args.flags) : null;\n  if (subcommand !== 'list' && extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'See \"ekanos teams --help\".',\n    );\n  }\n\n  if (\n    appEdits?.prompts &&\n    !canPrompt(ctx, args) &&\n    !secretInputGiven(appEdits.secret)\n  ) {\n    throw usageError(\n      \"teams app set needs the team's secrets, and there is no terminal to ask at. Non-secret fields can be passed with --set <name>=<value>.\",\n      `Without a terminal, pass ${FIELD_SECRET_FORMS}. Or run it yourself in your terminal: ${cli()} teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), args);\n  const client = new TeamsClient(env, resolved.session);\n  const source = resolved.source;\n\n  if (subcommand === 'list') {\n    const list = await client.call((token) =>\n      listTeams(env.host, token, source),\n    );\n    return ctx.succeed(\n      { host: env.host, ...list },\n      list.teams.length === 0\n        ? ctx.ui.result({\n            title: `No teams on ${list.source.slug}`,\n            tone: 'warn',\n          })\n        : ctx.ui.result({\n            title: `Teams on ${list.source.slug}`,\n            rows: list.teams.map((entry) => [entry.slug, teamLine(entry)]),\n            notes: [\n              '\"ekanos teams show <team>\" shows a team\\'s setup; add a product for its checklist.',\n              ...(list.teams.some(\n                (entry) =>\n                  entry.callerIsMember === false && entry.memberCount > 0,\n              )\n                ? [\n                    'You manage every team of the Source as its admin without being a member. To connect your own account to one, join it: \"ekanos teams members add <team> --self\".',\n                  ]\n                : []),\n            ],\n          }),\n    );\n  }\n\n  if (overview) {\n    return runTeamOverview(ctx, client, env.host, source, team);\n  }\n\n  const target: Target = { source, team, product };\n  const status = await client.call((token) =>\n    showTeamIntegration(env.host, token, target),\n  );\n\n  if (subcommand === 'show') {\n    return ctx.succeed(\n      { host: env.host, ...status },\n      checklist(status).join('\\n'),\n    );\n  }\n\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${product}\" is not enabled on ${status.source.slug}.`,\n      `\"ekanos sources products --source ${status.source.slug}\" shows what it has; only a super-admin enables a product for a Source (in /admin).`,\n    );\n  }\n\n  if (subcommand === 'app' && appEdits) {\n    return setApp(ctx, args, client, env.host, target, status, appEdits);\n  }\n  return mintWebhook(ctx, args, client, env.host, target, status, operands[2]);\n}\n\n/** What `teams app set` was asked to change, from its flags. */\ninterface AppEdits {\n  /** `--field`: enter just these, at the terminal. */\n  only: string[];\n  /** `--set name=value`: non-secret values, no prompt. */\n  values: Record<string, string>;\n  /** `--clear name`: remove a saved value. */\n  clear: string[];\n  /** `--secret-*`, `--set-secret`, `--browser`: where secrets come from without a terminal. */\n  secret: SecretFlags;\n  /** Whether any field is collected (asked, or read from the secret-input flags). */\n  prompts: boolean;\n}\n\nfunction parseAppEdits(flags: TeamsArgs['flags']): AppEdits {\n  const list = (name: string): string[] => {\n    const raw = flags?.[name];\n    if (raw === undefined || raw === false) return [];\n    if (Array.isArray(raw)) return raw;\n    return typeof raw === 'string' ? [raw] : [];\n  };\n  const values = parsePlainValues(flags?.set);\n  const only = list('field');\n  const clear = list('clear');\n  const secret = readSecretFlags(flags);\n  return {\n    only,\n    values,\n    clear,\n    secret,\n    // Bare `app set` walks every field; `--field` asks the named ones.\n    prompts:\n      only.length > 0 ||\n      secretInputGiven(secret) ||\n      (Object.keys(values).length === 0 && clear.length === 0),\n  };\n}\n\nasync function setApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  edits: AppEdits,\n): Promise<ExitCode> {\n  const app = chooseApp(status, args.connection);\n  const result = await promptAndSaveTeamApp(\n    ctx,\n    args,\n    client,\n    host,\n    target,\n    status,\n    app,\n    edits,\n  );\n  const missing = result.fields.filter((field) => !field.set);\n  const next = [\n    ...(missing.length > 0\n      ? [\n          `Still not set: ${missing.map((field) => field.label).join(', ')} — a team member can't connect until it is. Run \"ekanos teams app set ${target.team} ${target.product} ${missing.map((field) => `--field ${field.secretName}`).join(' ')}\".`,\n        ]\n      : []),\n    ...nextSteps(status, app, target),\n  ];\n  return ctx.succeed(\n    { host, ...result },\n    ctx.ui.result({\n      title: `Saved ${target.team}'s ${result.product.name} app`,\n      rows: [\n        ['Source', status.source.slug],\n        ['Fields', result.fields.map(fieldLine)],\n      ],\n      notes: next,\n    }),\n  );\n}\n\n/**\n * Every field, in turn: bare `teams app set`, and `teams connect` — whose\n * `--set` and secret-input flags fill the team's app too.\n */\nfunction walkEveryField(flags: TeamsArgs['flags']): AppEdits {\n  return {\n    only: [],\n    values: parsePlainValues(flags?.set),\n    clear: [],\n    secret: readSecretFlags(flags),\n    prompts: true,\n  };\n}\n\n/**\n * The `teams app set` walkthrough and prompts for one team app, then the\n * save — of only what was entered: a field left empty keeps its saved value.\n * Shared with `teams connect`, which runs it inline when the integration\n * needs the team's own app (Zendesk) before anyone can sign in.\n */\nexport async function promptAndSaveTeamApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  edits: AppEdits = walkEveryField(args.flags),\n) {\n  const known = new Map(app.fields.map((field) => [field.secretName, field]));\n  const names = app.fields.map((field) => field.secretName).join(', ');\n  for (const name of [\n    ...edits.only,\n    ...Object.keys(edits.values),\n    ...edits.clear,\n  ]) {\n    if (!known.has(name)) {\n      throw usageError(\n        `${status.product.name}'s team app has no field \"${name}\".`,\n        `Its fields are: ${names}.`,\n      );\n    }\n  }\n  for (const name of Object.keys(edits.values)) {\n    if (known.get(name)?.sensitive) {\n      throw usageError(\n        `\"${name}\" is a secret: it is never passed as an argument.`,\n        `Pass it as --set-secret ${name}=env:<NAME>|file:<path>|stdin, use --browser, or enter it at the prompt: ekanos teams app set ${target.team} ${target.product} --field ${name}`,\n      );\n    }\n  }\n\n  const fields: Record<string, string> = { ...edits.values };\n  if (edits.prompts) {\n    const toAsk =\n      edits.only.length > 0\n        ? app.fields.filter((field) => edits.only.includes(field.secretName))\n        : app.fields;\n    if (edits.only.length === 0)\n      ctx.log(appWalkthrough(status, app).join('\\n'));\n    else {\n      ctx.log(\n        `${status.product.name} app for team ${target.team} on ${status.source.slug}`,\n      );\n    }\n    const byName = new Map(toAsk.map((field) => [field.secretName, field]));\n    const again = `teams app set ${target.team} ${target.product}${args.connection ? ` --connection ${args.connection}` : ''} --source ${status.source.slug}`;\n    Object.assign(\n      fields,\n      await collectSecrets(ctx, {\n        fields: toAsk\n          .filter((field) => edits.values[field.secretName] === undefined)\n          .map((field) => ({\n            name: field.secretName,\n            label: field.label,\n            sensitive: field.sensitive,\n            set: field.set,\n            value: field.sensitive ? null : field.value,\n          })),\n        flags: edits.secret,\n        io: teamsSecretIO(args),\n        interactive: canPrompt(ctx, args),\n        title: `${status.product.name} app for team ${target.team}`,\n        refusal: `${status.product.name}'s team app takes secrets (${toAsk\n          .filter((field) => field.sensitive)\n          .map((field) => field.secretName)\n          .join(', ')}), and there is no terminal to ask at.`,\n        again,\n        prompt: (spec) => {\n          const field = byName.get(spec.name)!;\n          return (\n            field.sensitive\n              ? (args.askSecret ?? promptHidden)\n              : (args.ask ?? promptLine)\n          )(fieldQuestion(field));\n        },\n      }),\n    );\n  }\n\n  if (Object.keys(fields).length === 0 && edits.clear.length === 0) {\n    throw validationError(\n      'Nothing was changed.',\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see the current state.`,\n    );\n  }\n\n  return client.call((token) =>\n    setTeamApp(host, token, target, {\n      connectionId: app.connectionId,\n      fields,\n      ...(edits.clear.length > 0 ? { clear: edits.clear } : {}),\n    }),\n  );\n}\n\n/** The prompt for one field: what is saved, and that Enter keeps it. */\nfunction fieldQuestion(field: TeamAppState['fields'][number]): string {\n  const name = `${field.label} [${field.secretName}]`;\n  if (field.sensitive) {\n    return field.set\n      ? `${name} (saved — Enter to keep, hidden): `\n      : `${name} (hidden): `;\n  }\n  if (field.set) {\n    return field.value\n      ? `${name} (current: ${field.value} — Enter to keep): `\n      : `${name} (saved — Enter to keep): `;\n  }\n  return `${name}: `;\n}\n\n/** One field's state: a secret only as saved / not set, never its value. */\nfunction fieldLine(field: TeamAppState['fields'][number]): string {\n  const state = !field.set\n    ? 'not set'\n    : field.sensitive\n      ? 'saved'\n      : field.value\n        ? field.value\n        : 'saved';\n  return `${mark(field.set)} ${field.label} (${field.secretName}): ${state}`;\n}\n\nasync function mintWebhook(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  requested: string | undefined,\n): Promise<ExitCode> {\n  const webhooks = status.teamApps.flatMap((app) => app.webhooks);\n  if (webhooks.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} has no webhook a team's app sends.`,\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see its setup.`,\n    );\n  }\n  const webhook = requested\n    ? webhooks.find((entry) => entry.webhookId === requested)\n    : webhooks.length === 1\n      ? webhooks[0]\n      : undefined;\n  if (!webhook) {\n    throw usageError(\n      requested\n        ? `${status.product.name} has no team-app webhook \"${requested}\".`\n        : `${status.product.name} has several webhooks; name one.`,\n      `Run one of: ${webhooks.map((entry) => `ekanos teams webhook ${target.team} ${target.product} ${entry.webhookId}`).join(', ')}.`,\n    );\n  }\n\n  if (webhook.endpoint && !args.yes) {\n    throw invalidStateError(\n      `${target.team} already has a live URL for ${webhook.webhookId} (${webhook.endpoint.tokenPrefix}…). A new one revokes it, and the provider's webhook stops working until you paste the new URL there.`,\n      `Re-run with --yes when you are ready to update the provider: ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n    );\n  }\n\n  // The URL carries its token, so it goes to a 0600 file, never the output.\n  const secrets = ensureSecretsDir(args.env);\n  const minted = await client.call((token) =>\n    mintTeamWebhook(host, token, target, webhook.webhookId),\n  );\n  const { url, ...rest } = minted;\n  const secretFile = writeSecretFile(secrets, {\n    owner: target.team,\n    what: `${target.product}-${webhook.webhookId}-webhook-url`,\n    purpose: `Webhook URL for team ${target.team}'s ${status.product.name} (${webhook.webhookId}). Paste it into ${status.product.name}'s webhook settings for this team; the token is part of the URL.`,\n    values: [['WEBHOOK_URL', url]],\n    again: `ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n  });\n  return ctx.succeed(\n    { host, ...rest, secretFile },\n    ctx.ui.result({\n      title: `Webhook URL for ${target.team} · ${webhook.webhookId}`,\n      tone: 'warn',\n      rows: [\n        ['URL', `saved to ${secretFile} (readable only by you)`],\n        [\n          'Paste it into',\n          `${status.product.name}'s webhook settings for this team`,\n        ],\n      ],\n      notes: [\n        'The URL carries its token, so it is shown nowhere else and cannot be read again. Copy it from that file into the provider yourself — not into a chat or an agent session — then delete the file.',\n        ...(minted.replaced\n          ? ['The previous URL is revoked: the provider must use this one.']\n          : []),\n      ],\n    }),\n  );\n}\n\n/** `teams show`, read top to bottom like a setup checklist. */\nexport function checklist(status: TeamIntegrationStatus): string[] {\n  const name = status.product.name;\n  const lines = [\n    `${name} for team ${status.team.slug} (${status.team.name}) on ${status.source.slug}`,\n    `  ${mark(status.enabled)} Enabled on the Source`,\n  ];\n  if (!status.enabled) {\n    lines.push(\n      `    \"ekanos sources products --source ${status.source.slug}\" shows what it has; only a super-admin enables a product for a Source (in /admin).`,\n    );\n    return lines;\n  }\n\n  const target = { team: status.team.slug, product: status.product.slug };\n  lines.push(\n    ...scopeHiddenLines(status.scope, {\n      ...target,\n      source: status.source.slug,\n    }).map((line) => `  ${line}`),\n  );\n  lines.push(...connectionLines(status));\n  for (const app of status.teamApps) {\n    lines.push(`  Team app: ${app.label} (${app.connectionId})`);\n    if (app.setup?.consoleUrl) lines.push(`    Open: ${app.setup.consoleUrl}`);\n    app.setup?.steps.forEach((step, index) =>\n      lines.push(`    ${index + 1}. ${step}`),\n    );\n    lines.push('    Callback URLs to register:');\n    lines.push(...callbackUrls(app).map((url) => `      ${url}`));\n    if (app.guideUrl) lines.push(`    Guide: ${app.guideUrl}`);\n    for (const field of app.fields) {\n      lines.push(`    ${fieldLine(field)}`);\n    }\n    const unset = app.fields.filter((field) => !field.set);\n    if (unset.length > 0) {\n      lines.push(\n        `      → in your terminal: ${cli()} teams app set ${target.team} ${target.product} --connection ${app.connectionId} ${unset.map((field) => `--field ${field.secretName}`).join(' ')} --source ${status.source.slug}`,\n      );\n    }\n    for (const webhook of app.webhooks) {\n      lines.push(\n        webhook.endpoint\n          ? `    ${mark(true)} Webhook ${webhook.webhookId}: live URL ${webhook.endpoint.tokenPrefix}… since ${day(webhook.endpoint.createdAt)}${webhook.endpoint.lastUsedAt ? `, last delivery ${day(webhook.endpoint.lastUsedAt)}` : ', no delivery yet'}`\n          : `    ${mark(false)} Webhook ${webhook.webhookId}: no URL yet`,\n      );\n      if (!webhook.endpoint) {\n        lines.push(\n          `      → ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --source ${status.source.slug}`,\n        );\n      }\n    }\n    lines.push(\n      app.connection\n        ? `    ${mark(true)} Connected ${day(app.connection.connectedAt)}${app.connection.connectedBy ? ` by ${who(app.connection.connectedBy)}` : ''}`\n        : `    ${mark(false)} Connected: not yet\\n      → in your terminal: ${connectCommand(status, app.connectionId)}`,\n    );\n  }\n\n  lines.push(\n    status.activation\n      ? `  ${mark(true)} Activated for the team${status.activation.activatedAt ? ` ${day(status.activation.activatedAt)}` : ''}${status.activation.activatedBy ? ` by ${who(status.activation.activatedBy)}` : ''}`\n      : `  ${mark(false)} Activated: not yet\\n    → in your terminal: ${connectCommand(status)}`,\n  );\n  lines.push(`  Team page: ${status.connectUrl}`);\n  if (status.agentEvents.length > 0) {\n    lines.push('  Agent events it offers:');\n    lines.push(\n      ...status.agentEvents.map((event) => `    ${event.id} — ${event.label}`),\n    );\n  }\n  return lines;\n}\n\n/**\n * Each OAuth connection in one line — connected, or installed for a named\n * one, with its app's credentials and webhook URL — and which of the team's\n * agents wait on it. A named connection an agent's trigger needs and the team\n * has not installed is the gap no other line names: the trigger is stored\n * and on, and nothing ever reaches it.\n */\nfunction connectionLines(status: TeamIntegrationStatus): string[] {\n  const connections = status.connections ?? [];\n  if (connections.length === 0) return [];\n  const lines = ['  Connections:'];\n  for (const entry of connections) {\n    const named = entry.connectionId !== 'default';\n    const app = status.teamApps.find(\n      (candidate) => candidate.connectionId === entry.connectionId,\n    );\n    const webhooks = app?.webhooks ?? [];\n    const steps = [\n      ...(entry.credentialsSaved === null\n        ? []\n        : [\n            `app credentials ${entry.credentialsSaved ? 'saved' : 'not saved'}`,\n          ]),\n      named\n        ? entry.connected\n          ? `installed ${day(entry.connectedAt ?? '')}`\n          : 'not installed'\n        : entry.connected\n          ? `connected ${day(entry.connectedAt ?? '')}`\n          : 'not connected',\n      ...(webhooks.length > 0\n        ? [\n            webhooks.every((webhook) => webhook.endpoint)\n              ? 'webhook URL made'\n              : 'no webhook URL',\n          ]\n        : []),\n    ];\n    const ready =\n      entry.connected &&\n      entry.credentialsSaved !== false &&\n      webhooks.every((webhook) => webhook.endpoint);\n    lines.push(\n      `    ${mark(ready)} ${entry.label} (${entry.connectionId}): ${steps.join(' · ')}${entry.connectedBy ? ` by ${who(entry.connectedBy)}` : ''}`,\n    );\n    if (entry.neededBy.length > 0) {\n      lines.push(\n        `      Needed by: ${entry.neededBy.map((need) => `${need.agent} (${need.triggers.join(', ')})`).join(', ')}`,\n      );\n    }\n    if (!entry.connected) {\n      lines.push(\n        `      → in your terminal: ${connectCommand(status, entry.connectionId)}`,\n      );\n    }\n  }\n  return lines;\n}\n\n/**\n * One team in `teams list`: its members, and whether the caller is one. A\n * team nobody has joined says so with the command that joins it, rather than\n * reading as a count of zero.\n */\nexport function teamLine(entry: {\n  slug: string;\n  name: string;\n  memberCount: number;\n  callerIsMember?: boolean;\n}): string {\n  const count = `${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`;\n  if (entry.callerIsMember === undefined) return `${entry.name} · ${count}`;\n  if (entry.callerIsMember) return `${entry.name} · ${count}, you among them`;\n  return entry.memberCount === 0\n    ? `${entry.name} · 0 members · you are not a member — ekanos teams members add ${entry.slug} --self`\n    : `${entry.name} · ${count} · you are not a member`;\n}\n\n/** The command that connects the team, for a hint: `--connection` only for a named one. */\nfunction connectCommand(\n  status: TeamIntegrationStatus,\n  connectionId = 'default',\n): string {\n  return `${cli()} teams connect ${status.team.slug} ${status.product.slug}${connectionId === 'default' ? '' : ` --connection ${connectionId}`} --source ${status.source.slug}`;\n}\n\nfunction appWalkthrough(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n): string[] {\n  const lines = [\n    `${status.product.name} app for team ${status.team.slug} on ${status.source.slug}`,\n  ];\n  if (app.setup?.consoleUrl) lines.push(`  Open: ${app.setup.consoleUrl}`);\n  const steps = app.setup?.steps.length\n    ? [...app.setup.steps]\n    : [\n        `In ${status.product.name}, create an OAuth app for the team (or open the one it uses).`,\n      ];\n  steps.push(\n    `Check the app lists exactly: ${callbackUrls(app).join(', ')}`,\n    \"Enter its values below. Secrets are stored in Ekanos's vault and never shown again.\",\n  );\n  lines.push(...steps.map((step, index) => `  ${index + 1}. ${step}`));\n  if (app.guideUrl) lines.push(`  Guide: ${app.guideUrl}`);\n  return lines;\n}\n\nfunction nextSteps(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  target: Target,\n): string[] {\n  return [\n    ...app.webhooks\n      .filter((webhook) => !webhook.endpoint)\n      .map(\n        (webhook) =>\n          `Next: \"ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId}\" for the provider's webhook URL.`,\n      ),\n    ...(app.connection\n      ? []\n      : [`Then connect it: ${connectCommand(status, app.connectionId)}`]),\n  ];\n}\n\nexport function chooseApp(\n  status: TeamIntegrationStatus,\n  connection: string | undefined,\n): TeamAppState {\n  const apps = status.teamApps;\n  if (apps.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} takes no team app: teams connect through the Source's app, or need none.`,\n      `Run \"ekanos apps show ${status.product.slug}\" for the Source's app.`,\n    );\n  }\n  const app = connection\n    ? apps.find((entry) => entry.connectionId === connection)\n    : apps.length === 1\n      ? apps[0]\n      : apps.find((entry) => entry.connectionId === 'default');\n  if (app) return app;\n  throw usageError(\n    connection\n      ? `${status.product.name} has no team app \"${connection}\".`\n      : `${status.product.name} has several team apps; name one.`,\n    `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`,\n  );\n}\n\nexport class TeamsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<TeamsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the teams call.`,\n      loginHint(this.env),\n    );\n  }\n}\n\nexport function canPrompt(ctx: CliContext, args: TeamsArgs): boolean {\n  return !ctx.jsonMode && (args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n\n/** What the secret-input flags read from, with this run's test seams. */\nexport function teamsSecretIO(args: TeamsArgs): SecretIO {\n  return {\n    env: args.env,\n    stdinIsTTY: args.stdinIsTTY ?? process.stdin.isTTY === true,\n    readStdin: args.readStdin,\n    openUrl: args.openUrl,\n    formTimeoutMs: args.secretFormTimeoutMs,\n  };\n}\n\nfunction parseSubcommand(value: string | undefined): TeamsSubcommand {\n  const match = TEAMS_SUBCOMMANDS.find((name) => name === value);\n  if (match) return match;\n  throw usageError(\n    value\n      ? `Unknown teams subcommand \"${value}\".`\n      : 'teams needs a subcommand.',\n    'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams rename <team> <name>, ekanos teams members list|add|invite|role|remove|resend <team> … (add <team> --self joins you), ekanos teams roles list <team>, ekanos teams leave <team> --yes, ekanos teams groups list|create|update|delete|members <team> …, ekanos teams health <team> [<product>] [--run] (<product> --mine: your own personal connection), ekanos teams workspace list|default <team> …, ekanos teams connect <team> <product>, ekanos teams disconnect <team> <product> --yes (--mine: your own personal connection), ekanos teams show <team> [<product>], ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams events <team> [<product>], ekanos teams audience <team> [<audience>] [--member <email>], ekanos teams scope show|set <team> … (deprecated: audiences), ekanos teams agents|triggers|links|mcp|llm-key ….',\n  );\n}\n\nfunction requireSlug(value: string | undefined, what: 'team' | 'product') {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value ? `\"${value}\" is not a ${what} slug.` : `Name the ${what}.`,\n    what === 'team'\n      ? '\"ekanos teams list\" lists the teams, e.g. \"ekanos teams show acme-support zendesk\".'\n      : '\"ekanos catalog\" lists the products, e.g. \"ekanos teams show acme-support zendesk\".',\n  );\n}\n\nfunction mark(done: boolean): string {\n  return done ? '✓' : '✗';\n}\n\nfunction day(iso: string): string {\n  return iso.slice(0, 10);\n}\n\nfunction who(member: {\n  name: string | null;\n  email: string | null;\n  userId: string;\n}) {\n  return member.email ?? member.name ?? member.userId;\n}\n\n/** Every redirect URI to register. */\nfunction callbackUrls(app: TeamAppState): string[] {\n  return app.callbackUrls.length ? app.callbackUrls : [app.callbackUrl];\n}\n"]}

package/dist/commands/workflows.d.ts

@@ -0,0 +1,37 @@
+import type { CliContext } from '../context.js';
+import type { ExitCode } from '../exit-codes.js';
+export declare const WORKFLOWS_SUBCOMMANDS: readonly ['list', 'show', 'pull', 'apply', 'enable', 'disable', 'run', 'runs', 'approvals'];
+/** The file `pull` writes and a directory given to `apply` is read from. */
+export declare const WORKFLOW_FILE = "workflow.json";
+export interface WorkflowsArgs {
+    host?: string;
+    source?: string;
+    positionals: readonly string[];
+    team?: string;
+    all: boolean;
+    out?: string;
+    force: boolean;
+    update?: string;
+    confirmAccess: boolean;
+    dryRun: boolean;
+    input?: string;
+    follow: boolean;
+    workflow?: string;
+    status?: string;
+    reason?: string;
+    yes: boolean;
+    dir: string;
+    env: Record<string, string | undefined>;
+    /** Test seams: the `--follow` poll delay, and the confirmations. */
+    sleep?: (ms: number) => Promise<void>;
+    stdinIsTTY?: boolean;
+    confirm?: (question: string) => Promise<boolean>;
+}
+/**
+ * `workflows` — a team's workflows, for its Source admin: the same
+ * definitions the visual editor saves, saved through the same checks
+ * (shape, effect pinning, Custom Code review, write-behind-gate), activated
+ * through the same gate, run and approved through the same paths. A
+ * member's personal workflow is theirs alone and never reachable here.
+ */
+export declare function runWorkflows(ctx: CliContext, args: WorkflowsArgs): Promise<ExitCode>;