@ekanos/cli 0.15.0 → 0.17.0

package/dist/commands/sources.js

@@ -10,6 +10,8 @@ import { resolveSourceTarget } from '../source-target.js';
 import { stillUnauthorizedSourceSeats } from '../sources-api.js';
 import { listProductScopes, setScopeProduct } from '../teams-api.js';
 import { pluralize, shortHost } from '../ui.js';
+import { scopeDeprecationNotice } from './scope-notice.js';
+import { runSourcePeople, runSourceRoles } from './sources-roles.js';
 /**
  * `sources` — list every source the caller holds a developer or admin seat
  * on, the read half of the publish-target-verification story.
@@ -24,8 +26,12 @@ export async function runSources(ctx, args) {
     if (subcommand !== undefined) {
         if (subcommand === 'scopes')
             return runScopes(ctx, args, rest);
+        if (subcommand === 'roles')
+            return runSourceRoles(ctx, args, rest);
+        if (subcommand === 'people')
+            return runSourcePeople(ctx, args, rest);
         if (subcommand !== 'products') {
-            throw usageError(`Unknown sources subcommand "${subcommand}".`, 'Run "ekanos sources" to list your sources, "ekanos sources products [enable|disable <product>]" or "ekanos sources scopes [add|remove <scope> <product>]".');
+            throw usageError(`Unknown sources subcommand "${subcommand}".`, 'Run "ekanos sources" to list your sources, "ekanos sources products [enable|disable <product>]", "ekanos sources scopes [add|remove <scope> <product>]", "ekanos sources roles [list|create|update|delete <role>]" or "ekanos sources people".');
         }
         return runProducts(ctx, args, rest);
     }
@@ -216,6 +222,7 @@ async function runScopes(ctx, args, rest) {
     if (verb === 'remove' && !args.yes) {
         throw invalidStateError(`Taking ${product} out of ${scope} hides it, in the app, from every team on ${scope} that no other of its scopes shows it to.`, `Re-run with --yes: ekanos sources scopes remove ${quoteArg(scope)} ${product} --yes`);
     }
+    ctx.warn(scopeDeprecationNotice(verb ? `audiences set ${scope} --products …` : 'audiences list'));
     const env = resolveAuthEnvironment(ctx, args.host, args.env, {
         projectDir: args.dir,
     });

package/dist/commands/sources.js.map

@@ -1 +1 @@
-{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../src/commands/sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAGL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAmB,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAW,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAatD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,IAAiB;;IAEjB,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAG,IAAI,CAAC,WAAW,mCAAI,EAAE,CAAC;IACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,CACd,+BAA+B,UAAU,IAAI,EAC7C,4JAA4J,CAC7J,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhD,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,EACzD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAE1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAA+B,CAAC,MAAM;QACzC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3D,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACf,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,kGAAkG;AAClG,MAAM,mBAAmB,GAA2C;IAClE,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,SAAS,YAAY,CACnB,EAAM,EACN,IAAY,EACZ,OAAqB,EACrB,YAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,mEAAmE;YACnE,oDAAoD;YACpD,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC,iDAAiD,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GACZ,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE;QACrE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAoB,EAAE,kBAAC;YAC9C,MAAM,CAAC,IAAI;YACX;sBACE,MAAM,CAAC,IAAI,mCAAI,WAAW;gBAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,IAAI,CAAC,KAAK,CAAC;SACd,GAAA,CAAC;QACF,KAAK,EAAE,QAAQ;YACb,CAAC,CAAC;gBACE,yCAAyC,YAAY,oCAAoC;aAC1F;YACH,CAAC,CAAC,EAAE;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,CACd,wCAAwC,IAAI,IAAI,EAChD,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,CACrB,aAAa,OAAO,wGAAwG,EAC5H,sDAAsD,OAAO,QAAQ,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAA2B,EAAE,EAAE,CAC7C,IAAI,CAAC,QAAQ;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI;YACV,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B,EAAE;SAC/M,CAAC,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB;YACE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3C,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC;aAC3B,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5C,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;gBAC3B,KAAK,EAAE;oBACL,IAAI,CAAC,SAAS;wBACZ,CAAC,CAAC,kEAAkE;wBACpE,CAAC,CAAC,IAAI,CAAC,cAAc;4BACnB,CAAC,CAAC,wLAAwL;4BAC1L,CAAC,CAAC,qGAAqG;oBAC3G,qFAAqF;iBACtF;aACF,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO;QACP,OAAO;KACR,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACxF,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACjG,IAAI,EAAE;YACJ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B;gBACE,aAAa;gBACb,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;oBAC7B,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;wBAC/B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,iBAAiB;aACxB;SACF;QACD,KAAK,EACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;YAC9C,CAAC,CAAC;gBACE,sCAAsC,MAAM,CAAC,OAAO,CAAC,IAAI,2BAA2B;aACrF;YACH,CAAC,CAAC,EAAE;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACpD,MAAM,KAAK,GACT,uIAAuI,CAAC;IAC1I,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,UAAU,CAAC,sCAAsC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,UAAU,CACd,kBAAkB,IAAI,+BAA+B,EACrD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,iBAAiB,CACrB,UAAU,OAAO,WAAW,KAAK,6CAA6C,KAAK,2CAA2C,EAC9H,mDAAmD,QAAQ,CAAC,KAAM,CAAC,IAAI,OAAO,QAAQ,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;gBACrD,KAAK,EAAE;oBACL,qEAAqE;iBACtE;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAsB,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI;gBACV;oBACE,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7F,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;wBACvB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;wBACpD,CAAC,CAAC,aAAa;iBAClB;aACF,CAAC;YACF,KAAK,EAAE;gBACL,kEAAkE;gBAClE,0KAA0K;aAC3K;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CACb,GAAG,CAAC,IAAI,EACR,KAAK,EACL,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAC3C,QAAQ,CACT,CACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC5G,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAC3F,IAAI,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACjD,IAAI,EAAE;YACJ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C;gBACE,UAAU;gBACV,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3D,CAAC,CAAC,MAAM;aACX;SACF;QACD,KAAK,EAAE;YACL,QAAQ;gBACN,CAAC,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,kBAAkB;gBAClF,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,IAAI,0CAA0C;SACvG;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,kBAAkB,IAAI,mBAAmB,EAC7C,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,oBAAoB,IAAI,mBAAmB,EAC/C,qFAAqF,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc;IAClB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAkE;QAElE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,wCAAwC,EACxE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACpB,CAAC;IACJ,CAAC;CACF","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport { authRequiredError, invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { EKANOS_CONFIG_FILENAME } from '../project';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport {\n  type SourceProduct,\n  type SourceProductsApiResult,\n  listSourceProducts,\n  setSourceProduct,\n} from '../source-products-api';\nimport { resolveSourceTarget } from '../source-target';\nimport { type SourceSeat, stillUnauthorizedSourceSeats } from '../sources-api';\nimport { listProductScopes, setScopeProduct } from '../teams-api';\nimport { type Ui, pluralize, shortHost } from '../ui';\n\nexport interface SourcesArgs {\n  host?: string;\n  /** `products [enable|disable <product>]`, `scopes [add|remove <scope> <product>]`; none lists the sources. */\n  positionals?: readonly string[];\n  source?: string;\n  yes?: boolean;\n  /** Where a project's ekanos.json may sit — its `source` field, if any, is the marker. */\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `sources` — list every source the caller holds a developer or admin seat\n * on, the read half of the publish-target-verification story.\n *\n * The list itself is the mechanism that makes `publish` safe: a partner (or\n * an agent acting for one) can always answer \"which sources can I possibly\n * publish to?\" before running `ekanos use` or passing `--source`.\n */\nexport async function runSources(\n  ctx: CliContext,\n  args: SourcesArgs,\n): Promise<ExitCode> {\n  const [subcommand, ...rest] = args.positionals ?? [];\n  if (subcommand !== undefined) {\n    if (subcommand === 'scopes') return runScopes(ctx, args, rest);\n    if (subcommand !== 'products') {\n      throw usageError(\n        `Unknown sources subcommand \"${subcommand}\".`,\n        'Run \"ekanos sources\" to list your sources, \"ekanos sources products [enable|disable <product>]\" or \"ekanos sources scopes [add|remove <scope> <product>]\".',\n      );\n    }\n    return runProducts(ctx, args, rest);\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const session = requireSession(env);\n\n  const result = await fetchSeatsWithOneRefresh(env, session);\n\n  if (result.status === 'unauthorized') {\n    stillUnauthorizedSourceSeats(env);\n  }\n\n  const activeSource = readActiveSource(args.dir);\n\n  return ctx.succeed(\n    { host: env.host, sources: result.sources, activeSource },\n    humanSummary(ctx.ui, env.host, result.sources, activeSource),\n  );\n}\n\n/**\n * Best-effort, lenient read of ekanos.json's `source` field — mirrors\n * `readProjectHost` in `auth/session.ts`. A missing, unparseable, or\n * sourceless ekanos.json (or no project at all) simply means \"no active\n * source to mark\", never an error: `sources` must answer outside a project\n * too.\n */\nexport function readActiveSource(dir: string): string | null {\n  const configPath = path.join(dir, EKANOS_CONFIG_FILENAME);\n\n  let raw: string;\n  try {\n    raw = fs.readFileSync(configPath, 'utf8');\n  } catch {\n    return null;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n\n  const source =\n    typeof parsed === 'object' && parsed !== null\n      ? (parsed as { source?: unknown }).source\n      : undefined;\n\n  return typeof source === 'string' && source.trim().length > 0\n    ? source.trim()\n    : null;\n}\n\n/** Why a product is not enabled, by the lever that would enable it — the words `catalog` uses. */\nconst NOT_ENABLED_BECAUSE: Record<SourceProduct['lever'], string> = {\n  flag: 'its Flag is off',\n  plan: 'no active plan',\n  entitlement: 'not granted',\n};\n\nfunction humanSummary(\n  ui: Ui,\n  host: string,\n  sources: SourceSeat[],\n  activeSource: string | null,\n): string {\n  if (sources.length === 0) {\n    return ui.result({\n      // Read by any signed-in account, a team member's too: no word here\n      // may imply the host serves more than one customer.\n      title: 'No partner seats',\n      tone: 'warn',\n      rows: [['Host', shortHost(host)]],\n      notes: ['This account has no partner seats on this host.'],\n    });\n  }\n\n  const orphaned =\n    activeSource && !sources.some((s) => s.slug === activeSource);\n\n  return ui.result({\n    title: `${pluralize(sources.length, 'source')} on ${shortHost(host)}`,\n    rows: sources.map((source): [string, string] => [\n      source.slug,\n      [\n        source.name ?? '(unnamed)',\n        source.roles.join(', '),\n        ...(source.slug === activeSource ? [ui.accent('this project')] : []),\n      ].join(' · '),\n    ]),\n    notes: orphaned\n      ? [\n          `This project's ekanos.json points at \"${activeSource}\", which is not in the list above.`,\n        ]\n      : [],\n  });\n}\n\n/**\n * `sources products` — the catalog as one Source has it: every product, its\n * kind (Experience or Integration), and whether it is enabled for the Source.\n * `enable|disable <product>` switch one through the levers `/admin` uses\n * (`attachProductToSource` / `detachProductFromSource` for an Integration,\n * the Experience lever for an Experience). A Source admin switches the\n * integrations their Source built (`owned`); anything else is a super-admin\n * grant, which an `ekanos login` session never carries, so from the terminal\n * that write answers with where to do it.\n */\nasync function runProducts(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawProduct, ...extra] = rest;\n  if (extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'Run \"ekanos sources products [enable|disable <product>] [--source <slug>]\".',\n    );\n  }\n  if (verb !== undefined && verb !== 'enable' && verb !== 'disable') {\n    throw usageError(\n      `Unknown sources products subcommand \"${verb}\".`,\n      'Run \"ekanos sources products\", \"ekanos sources products enable <product>\" or \"ekanos sources products disable <product> --yes\".',\n    );\n  }\n  const product = verb ? productSlug(rawProduct, verb) : null;\n  if (verb === 'disable' && !args.yes) {\n    throw invalidStateError(\n      `Disabling ${product} removes it from the Source: its plans, widget settings, Source credentials and workspaces go with it.`,\n      `Re-run with --yes: ekanos sources products disable ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product) {\n    const list = await client.call((token) =>\n      listSourceProducts(env.host, token, resolved.source),\n    );\n    const byKind = (kind: SourceProduct['kind']) =>\n      list.products\n        .filter((entry) => entry.kind === kind)\n        .map((entry): [string, string] => [\n          entry.slug,\n          `${entry.enabled ? '✓ enabled' : `✗ not enabled (${NOT_ENABLED_BECAUSE[entry.lever]})`} · ${entry.name}${entry.owned ? ' · built by this Source' : ''}${entry.registered ? '' : ' · no package on this host'}`,\n        ]);\n    return ctx.succeed(\n      { host: env.host, ...list },\n      [\n        ctx.ui.result({\n          title: `Experiences on ${list.source.slug}`,\n          rows: byKind('experience'),\n        }),\n        ctx.ui.result({\n          title: `Integrations on ${list.source.slug}`,\n          rows: byKind('integration'),\n          notes: [\n            list.canEnable\n              ? '\"ekanos sources products enable|disable <product>\" switches one.'\n              : list.canEnableOwned\n                ? '\"ekanos sources products enable|disable <product>\" switches one built by this Source; any other is a super-admin grant, made in the browser at /admin/sources → the Source → Products.'\n                : 'Enabling one is a super-admin grant, made in the browser at /admin/sources → the Source → Products.',\n            '\"ekanos teams connect <team> <product>\" connects an enabled integration for a team.',\n          ],\n        }),\n      ].join('\\n'),\n    );\n  }\n\n  const enabled = verb === 'enable';\n  const result = await client.call((token) =>\n    setSourceProduct(env.host, token, {\n      source: resolved.source,\n      product,\n      enabled,\n    }),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${enabled ? 'Enabled' : 'Disabled'} ${result.product.name} for ${result.source.slug}`\n        : `${result.product.name} was already ${enabled ? 'enabled' : 'off'} for ${result.source.slug}`,\n      rows: [\n        ['Kind', result.product.kind],\n        [\n          'Switched by',\n          result.product.lever === 'flag'\n            ? 'its Flag'\n            : result.product.lever === 'plan'\n              ? 'its plan'\n              : 'the entitlement',\n        ],\n      ],\n      notes:\n        enabled && result.product.kind === 'integration'\n          ? [\n              `Next: \"ekanos teams connect <team> ${result.product.slug}\" connects it for a team.`,\n            ]\n          : [],\n    }),\n  );\n}\n\n/**\n * `sources scopes` — the Source's product scopes, for its Source admin: each\n * scope's products and how many teams hold it. Once a Source has a scope,\n * each team sees in the app only its scopes' products. `add|remove <scope>\n * <product>` changes one scope (by name or id) through what\n * `/admin/sources/[id]/product-scopes` uses; a product can only be added if\n * the Source has it. Taking one out hides it from every team on the scope\n * that no other of its scopes shows it to, so that needs `--yes`.\n */\nasync function runScopes(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawScope, rawProduct, ...extra] = rest;\n  const usage =\n    'Run \"ekanos sources scopes\", \"ekanos sources scopes add <scope> <product>\" or \"ekanos sources scopes remove <scope> <product> --yes\".';\n  if (verb !== undefined && verb !== 'add' && verb !== 'remove') {\n    throw usageError(`Unknown sources scopes subcommand \"${verb}\".`, usage);\n  }\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, usage);\n  }\n  const scope = rawScope?.trim();\n  if (verb && !scope) {\n    throw usageError(\n      `sources scopes ${verb} needs a scope and a product.`,\n      usage,\n    );\n  }\n  const product = verb ? scopeProductSlug(rawProduct, verb) : null;\n  if (verb === 'remove' && !args.yes) {\n    throw invalidStateError(\n      `Taking ${product} out of ${scope} hides it, in the app, from every team on ${scope} that no other of its scopes shows it to.`,\n      `Re-run with --yes: ekanos sources scopes remove ${quoteArg(scope!)} ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product || !scope) {\n    const list = await client.call((token) =>\n      listProductScopes(env.host, token, resolved.source),\n    );\n    if (list.scopes.length === 0) {\n      return ctx.succeed(\n        { host: env.host, ...list },\n        ctx.ui.result({\n          title: `No product scopes on ${list.source.slug}`,\n          rows: [['Teams see', 'every product the Source has']],\n          notes: [\n            'Scopes are created at /admin/sources → the Source → Product scopes.',\n          ],\n        }),\n      );\n    }\n    return ctx.succeed(\n      { host: env.host, ...list },\n      ctx.ui.result({\n        title: `Product scopes on ${list.source.slug}`,\n        rows: list.scopes.map((entry): [string, string[]] => [\n          entry.name,\n          [\n            `${pluralize(entry.teamCount, 'team')}${entry.isDefault ? ' · given to every new team' : ''}`,\n            entry.products.length > 0\n              ? entry.products.map((item) => item.slug).join(', ')\n              : 'no products',\n          ],\n        ]),\n        notes: [\n          'A team sees in the app only the products of the scopes it holds.',\n          '\"ekanos sources scopes add <scope> <product>\" shows a product to every team on a scope; \"ekanos teams scope show|set <team>\" reads or changes which scopes a team holds.',\n        ],\n      }),\n    );\n  }\n\n  const included = verb === 'add';\n  const result = await client.call((token) =>\n    setScopeProduct(\n      env.host,\n      token,\n      { source: resolved.source, scope, product },\n      included,\n    ),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${included ? 'Added' : 'Took'} ${result.product.name} ${included ? 'to' : 'out of'} ${result.scope.name}`\n        : `${result.product.name} was already ${included ? 'in' : 'not in'} ${result.scope.name}`,\n      tone: !included && result.changed ? 'warn' : 'ok',\n      rows: [\n        ['Teams on it', String(result.scope.teamCount)],\n        [\n          'Products',\n          result.scope.products.length > 0\n            ? result.scope.products.map((item) => item.slug).join(', ')\n            : 'none',\n        ],\n      ],\n      notes: [\n        included\n          ? `Every team on ${result.scope.name} sees ${result.product.slug} in the app now.`\n          : `Teams on ${result.scope.name} see ${result.product.slug} only if another of their scopes has it.`,\n      ],\n    }),\n  );\n}\n\nfunction scopeProductSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources scopes ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources scopes add Bronze linear\".',\n  );\n}\n\nfunction quoteArg(value: string): string {\n  return /^[A-Za-z0-9._-]+$/.test(value) ? value : `\"${value}\"`;\n}\n\nfunction productSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources products ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources products enable agents\".',\n  );\n}\n\nclass ProductsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<SourceProductsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the sources call.`,\n      loginHint(this.env),\n    );\n  }\n}\n"]}
+{"version":3,"file":"sources.js","sourceRoot":"","sources":["../../src/commands/sources.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAGL,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAmB,4BAA4B,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAW,SAAS,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAkBlE;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAe,EACf,IAAiB;;IAEjB,MAAM,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAG,IAAI,CAAC,WAAW,mCAAI,EAAE,CAAC;IACrD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC/D,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnE,IAAI,UAAU,KAAK,QAAQ;YAAE,OAAO,eAAe,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,MAAM,UAAU,CACd,+BAA+B,UAAU,IAAI,EAC7C,gPAAgP,CACjP,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAEpC,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE5D,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACrC,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhD,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,EACzD,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,CAAC,CAC7D,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;IAE1D,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GACV,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAC3C,CAAC,CAAE,MAA+B,CAAC,MAAM;QACzC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAC3D,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;QACf,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,kGAAkG;AAClG,MAAM,mBAAmB,GAA2C;IAClE,IAAI,EAAE,iBAAiB;IACvB,IAAI,EAAE,gBAAgB;IACtB,WAAW,EAAE,aAAa;CAC3B,CAAC;AAEF,SAAS,YAAY,CACnB,EAAM,EACN,IAAY,EACZ,OAAqB,EACrB,YAA2B;IAE3B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAC,MAAM,CAAC;YACf,mEAAmE;YACnE,oDAAoD;YACpD,KAAK,EAAE,kBAAkB;YACzB,IAAI,EAAE,MAAM;YACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC,iDAAiD,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GACZ,YAAY,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAEhE,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE;QACrE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAoB,EAAE,kBAAC;YAC9C,MAAM,CAAC,IAAI;YACX;sBACE,MAAM,CAAC,IAAI,mCAAI,WAAW;gBAC1B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;gBACvB,GAAG,CAAC,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE,CAAC,IAAI,CAAC,KAAK,CAAC;SACd,GAAA,CAAC;QACF,KAAK,EAAE,QAAQ;YACb,CAAC,CAAC;gBACE,yCAAyC,YAAY,oCAAoC;aAC1F;YACH,CAAC,CAAC,EAAE;KACP,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAClE,MAAM,UAAU,CACd,wCAAwC,IAAI,IAAI,EAChD,iIAAiI,CAClI,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,CACrB,aAAa,OAAO,wGAAwG,EAC5H,sDAAsD,OAAO,QAAQ,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACrD,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAA2B,EAAE,EAAE,CAC7C,IAAI,CAAC,QAAQ;aACV,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAoB,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI;YACV,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,4BAA4B,EAAE;SAC/M,CAAC,CAAC;QACP,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB;YACE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,kBAAkB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC3C,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC;aAC3B,CAAC;YACF,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5C,IAAI,EAAE,MAAM,CAAC,aAAa,CAAC;gBAC3B,KAAK,EAAE;oBACL,IAAI,CAAC,SAAS;wBACZ,CAAC,CAAC,kEAAkE;wBACpE,CAAC,CAAC,IAAI,CAAC,cAAc;4BACnB,CAAC,CAAC,wLAAwL;4BAC1L,CAAC,CAAC,qGAAqG;oBAC3G,qFAAqF;iBACtF;aACF,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,KAAK,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE;QAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,OAAO;QACP,OAAO;KACR,CAAC,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;YACxF,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACjG,IAAI,EAAE;YACJ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B;gBACE,aAAa;gBACb,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;oBAC7B,CAAC,CAAC,UAAU;oBACZ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,KAAK,MAAM;wBAC/B,CAAC,CAAC,UAAU;wBACZ,CAAC,CAAC,iBAAiB;aACxB;SACF;QACD,KAAK,EACH,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa;YAC9C,CAAC,CAAC;gBACE,sCAAsC,MAAM,CAAC,OAAO,CAAC,IAAI,2BAA2B;aACrF;YACH,CAAC,CAAC,EAAE;KACT,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,IAAiB,EACjB,IAAuB;IAEvB,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC;IACpD,MAAM,KAAK,GACT,uIAAuI,CAAC;IAC1I,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9D,MAAM,UAAU,CAAC,sCAAsC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,UAAU,CACd,kBAAkB,IAAI,+BAA+B,EACrD,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,IAAI,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,MAAM,iBAAiB,CACrB,UAAU,OAAO,WAAW,KAAK,6CAA6C,KAAK,2CAA2C,EAC9H,mDAAmD,QAAQ,CAAC,KAAM,CAAC,IAAI,OAAO,QAAQ,CACvF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,IAAI,CACN,sBAAsB,CACpB,IAAI,CAAC,CAAC,CAAC,iBAAiB,KAAK,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAChE,CACF,CAAC;IAEF,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE;QACnE,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEzD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,iBAAiB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CACpD,CAAC;QACF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,wBAAwB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACjD,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,8BAA8B,CAAC,CAAC;gBACrD,KAAK,EAAE;oBACL,qEAAqE;iBACtE;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAsB,EAAE,CAAC;gBACnD,KAAK,CAAC,IAAI;gBACV;oBACE,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC7F,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;wBACvB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;wBACpD,CAAC,CAAC,aAAa;iBAClB;aACF,CAAC;YACF,KAAK,EAAE;gBACL,kEAAkE;gBAClE,0KAA0K;aAC3K;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,KAAK,KAAK,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CACb,GAAG,CAAC,IAAI,EACR,KAAK,EACL,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,EAC3C,QAAQ,CACT,CACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO;YACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YAC5G,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,gBAAgB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;QAC3F,IAAI,EAAE,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACjD,IAAI,EAAE;YACJ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C;gBACE,UAAU;gBACV,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;oBAC9B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC3D,CAAC,CAAC,MAAM;aACX;SACF;QACD,KAAK,EAAE;YACL,QAAQ;gBACN,CAAC,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,MAAM,CAAC,OAAO,CAAC,IAAI,kBAAkB;gBAClF,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,IAAI,QAAQ,MAAM,CAAC,OAAO,CAAC,IAAI,0CAA0C;SACvG;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB,EAAE,IAAY;IAC/D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,kBAAkB,IAAI,mBAAmB,EAC7C,uFAAuF,CACxF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC;AAChE,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY;IAC1D,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,IAAI,KAAK,0BAA0B;QACrC,CAAC,CAAC,oBAAoB,IAAI,mBAAmB,EAC/C,qFAAqF,CACtF,CAAC;AACJ,CAAC;AAED,MAAM,cAAc;IAClB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAkE;QAElE,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,wCAAwC,EACxE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACpB,CAAC;IACJ,CAAC;CACF","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport { authRequiredError, invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { EKANOS_CONFIG_FILENAME } from '../project';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport {\n  type SourceProduct,\n  type SourceProductsApiResult,\n  listSourceProducts,\n  setSourceProduct,\n} from '../source-products-api';\nimport { resolveSourceTarget } from '../source-target';\nimport { type SourceSeat, stillUnauthorizedSourceSeats } from '../sources-api';\nimport { listProductScopes, setScopeProduct } from '../teams-api';\nimport { type Ui, pluralize, shortHost } from '../ui';\nimport { scopeDeprecationNotice } from './scope-notice';\nimport { runSourcePeople, runSourceRoles } from './sources-roles';\n\nexport interface SourcesArgs {\n  host?: string;\n  /** `products [enable|disable <product>]`, `scopes [add|remove <scope> <product>]`; none lists the sources. */\n  positionals?: readonly string[];\n  source?: string;\n  yes?: boolean;\n  /** `roles` and `people`: their flags (`--level`, `--permission`, `--search` …). */\n  flags?: Record<string, string | boolean | string[]>;\n  /** `roles delete` asks at a terminal; the test seams for it. */\n  stdinIsTTY?: boolean;\n  ask?: (question: string) => Promise<string>;\n  /** Where a project's ekanos.json may sit — its `source` field, if any, is the marker. */\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\n/**\n * `sources` — list every source the caller holds a developer or admin seat\n * on, the read half of the publish-target-verification story.\n *\n * The list itself is the mechanism that makes `publish` safe: a partner (or\n * an agent acting for one) can always answer \"which sources can I possibly\n * publish to?\" before running `ekanos use` or passing `--source`.\n */\nexport async function runSources(\n  ctx: CliContext,\n  args: SourcesArgs,\n): Promise<ExitCode> {\n  const [subcommand, ...rest] = args.positionals ?? [];\n  if (subcommand !== undefined) {\n    if (subcommand === 'scopes') return runScopes(ctx, args, rest);\n    if (subcommand === 'roles') return runSourceRoles(ctx, args, rest);\n    if (subcommand === 'people') return runSourcePeople(ctx, args, rest);\n    if (subcommand !== 'products') {\n      throw usageError(\n        `Unknown sources subcommand \"${subcommand}\".`,\n        'Run \"ekanos sources\" to list your sources, \"ekanos sources products [enable|disable <product>]\", \"ekanos sources scopes [add|remove <scope> <product>]\", \"ekanos sources roles [list|create|update|delete <role>]\" or \"ekanos sources people\".',\n      );\n    }\n    return runProducts(ctx, args, rest);\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const session = requireSession(env);\n\n  const result = await fetchSeatsWithOneRefresh(env, session);\n\n  if (result.status === 'unauthorized') {\n    stillUnauthorizedSourceSeats(env);\n  }\n\n  const activeSource = readActiveSource(args.dir);\n\n  return ctx.succeed(\n    { host: env.host, sources: result.sources, activeSource },\n    humanSummary(ctx.ui, env.host, result.sources, activeSource),\n  );\n}\n\n/**\n * Best-effort, lenient read of ekanos.json's `source` field — mirrors\n * `readProjectHost` in `auth/session.ts`. A missing, unparseable, or\n * sourceless ekanos.json (or no project at all) simply means \"no active\n * source to mark\", never an error: `sources` must answer outside a project\n * too.\n */\nexport function readActiveSource(dir: string): string | null {\n  const configPath = path.join(dir, EKANOS_CONFIG_FILENAME);\n\n  let raw: string;\n  try {\n    raw = fs.readFileSync(configPath, 'utf8');\n  } catch {\n    return null;\n  }\n\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n\n  const source =\n    typeof parsed === 'object' && parsed !== null\n      ? (parsed as { source?: unknown }).source\n      : undefined;\n\n  return typeof source === 'string' && source.trim().length > 0\n    ? source.trim()\n    : null;\n}\n\n/** Why a product is not enabled, by the lever that would enable it — the words `catalog` uses. */\nconst NOT_ENABLED_BECAUSE: Record<SourceProduct['lever'], string> = {\n  flag: 'its Flag is off',\n  plan: 'no active plan',\n  entitlement: 'not granted',\n};\n\nfunction humanSummary(\n  ui: Ui,\n  host: string,\n  sources: SourceSeat[],\n  activeSource: string | null,\n): string {\n  if (sources.length === 0) {\n    return ui.result({\n      // Read by any signed-in account, a team member's too: no word here\n      // may imply the host serves more than one customer.\n      title: 'No partner seats',\n      tone: 'warn',\n      rows: [['Host', shortHost(host)]],\n      notes: ['This account has no partner seats on this host.'],\n    });\n  }\n\n  const orphaned =\n    activeSource && !sources.some((s) => s.slug === activeSource);\n\n  return ui.result({\n    title: `${pluralize(sources.length, 'source')} on ${shortHost(host)}`,\n    rows: sources.map((source): [string, string] => [\n      source.slug,\n      [\n        source.name ?? '(unnamed)',\n        source.roles.join(', '),\n        ...(source.slug === activeSource ? [ui.accent('this project')] : []),\n      ].join(' · '),\n    ]),\n    notes: orphaned\n      ? [\n          `This project's ekanos.json points at \"${activeSource}\", which is not in the list above.`,\n        ]\n      : [],\n  });\n}\n\n/**\n * `sources products` — the catalog as one Source has it: every product, its\n * kind (Experience or Integration), and whether it is enabled for the Source.\n * `enable|disable <product>` switch one through the levers `/admin` uses\n * (`attachProductToSource` / `detachProductFromSource` for an Integration,\n * the Experience lever for an Experience). A Source admin switches the\n * integrations their Source built (`owned`); anything else is a super-admin\n * grant, which an `ekanos login` session never carries, so from the terminal\n * that write answers with where to do it.\n */\nasync function runProducts(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawProduct, ...extra] = rest;\n  if (extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'Run \"ekanos sources products [enable|disable <product>] [--source <slug>]\".',\n    );\n  }\n  if (verb !== undefined && verb !== 'enable' && verb !== 'disable') {\n    throw usageError(\n      `Unknown sources products subcommand \"${verb}\".`,\n      'Run \"ekanos sources products\", \"ekanos sources products enable <product>\" or \"ekanos sources products disable <product> --yes\".',\n    );\n  }\n  const product = verb ? productSlug(rawProduct, verb) : null;\n  if (verb === 'disable' && !args.yes) {\n    throw invalidStateError(\n      `Disabling ${product} removes it from the Source: its plans, widget settings, Source credentials and workspaces go with it.`,\n      `Re-run with --yes: ekanos sources products disable ${product} --yes`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product) {\n    const list = await client.call((token) =>\n      listSourceProducts(env.host, token, resolved.source),\n    );\n    const byKind = (kind: SourceProduct['kind']) =>\n      list.products\n        .filter((entry) => entry.kind === kind)\n        .map((entry): [string, string] => [\n          entry.slug,\n          `${entry.enabled ? '✓ enabled' : `✗ not enabled (${NOT_ENABLED_BECAUSE[entry.lever]})`} · ${entry.name}${entry.owned ? ' · built by this Source' : ''}${entry.registered ? '' : ' · no package on this host'}`,\n        ]);\n    return ctx.succeed(\n      { host: env.host, ...list },\n      [\n        ctx.ui.result({\n          title: `Experiences on ${list.source.slug}`,\n          rows: byKind('experience'),\n        }),\n        ctx.ui.result({\n          title: `Integrations on ${list.source.slug}`,\n          rows: byKind('integration'),\n          notes: [\n            list.canEnable\n              ? '\"ekanos sources products enable|disable <product>\" switches one.'\n              : list.canEnableOwned\n                ? '\"ekanos sources products enable|disable <product>\" switches one built by this Source; any other is a super-admin grant, made in the browser at /admin/sources → the Source → Products.'\n                : 'Enabling one is a super-admin grant, made in the browser at /admin/sources → the Source → Products.',\n            '\"ekanos teams connect <team> <product>\" connects an enabled integration for a team.',\n          ],\n        }),\n      ].join('\\n'),\n    );\n  }\n\n  const enabled = verb === 'enable';\n  const result = await client.call((token) =>\n    setSourceProduct(env.host, token, {\n      source: resolved.source,\n      product,\n      enabled,\n    }),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${enabled ? 'Enabled' : 'Disabled'} ${result.product.name} for ${result.source.slug}`\n        : `${result.product.name} was already ${enabled ? 'enabled' : 'off'} for ${result.source.slug}`,\n      rows: [\n        ['Kind', result.product.kind],\n        [\n          'Switched by',\n          result.product.lever === 'flag'\n            ? 'its Flag'\n            : result.product.lever === 'plan'\n              ? 'its plan'\n              : 'the entitlement',\n        ],\n      ],\n      notes:\n        enabled && result.product.kind === 'integration'\n          ? [\n              `Next: \"ekanos teams connect <team> ${result.product.slug}\" connects it for a team.`,\n            ]\n          : [],\n    }),\n  );\n}\n\n/**\n * `sources scopes` — the Source's product scopes, for its Source admin: each\n * scope's products and how many teams hold it. Once a Source has a scope,\n * each team sees in the app only its scopes' products. `add|remove <scope>\n * <product>` changes one scope (by name or id) through what\n * `/admin/sources/[id]/product-scopes` uses; a product can only be added if\n * the Source has it. Taking one out hides it from every team on the scope\n * that no other of its scopes shows it to, so that needs `--yes`.\n */\nasync function runScopes(\n  ctx: CliContext,\n  args: SourcesArgs,\n  rest: readonly string[],\n): Promise<ExitCode> {\n  const [verb, rawScope, rawProduct, ...extra] = rest;\n  const usage =\n    'Run \"ekanos sources scopes\", \"ekanos sources scopes add <scope> <product>\" or \"ekanos sources scopes remove <scope> <product> --yes\".';\n  if (verb !== undefined && verb !== 'add' && verb !== 'remove') {\n    throw usageError(`Unknown sources scopes subcommand \"${verb}\".`, usage);\n  }\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, usage);\n  }\n  const scope = rawScope?.trim();\n  if (verb && !scope) {\n    throw usageError(\n      `sources scopes ${verb} needs a scope and a product.`,\n      usage,\n    );\n  }\n  const product = verb ? scopeProductSlug(rawProduct, verb) : null;\n  if (verb === 'remove' && !args.yes) {\n    throw invalidStateError(\n      `Taking ${product} out of ${scope} hides it, in the app, from every team on ${scope} that no other of its scopes shows it to.`,\n      `Re-run with --yes: ekanos sources scopes remove ${quoteArg(scope!)} ${product} --yes`,\n    );\n  }\n\n  ctx.warn(\n    scopeDeprecationNotice(\n      verb ? `audiences set ${scope} --products …` : 'audiences list',\n    ),\n  );\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), {\n    source: args.source,\n    dir: args.dir,\n  });\n  const client = new ProductsClient(env, resolved.session);\n\n  if (!verb || !product || !scope) {\n    const list = await client.call((token) =>\n      listProductScopes(env.host, token, resolved.source),\n    );\n    if (list.scopes.length === 0) {\n      return ctx.succeed(\n        { host: env.host, ...list },\n        ctx.ui.result({\n          title: `No product scopes on ${list.source.slug}`,\n          rows: [['Teams see', 'every product the Source has']],\n          notes: [\n            'Scopes are created at /admin/sources → the Source → Product scopes.',\n          ],\n        }),\n      );\n    }\n    return ctx.succeed(\n      { host: env.host, ...list },\n      ctx.ui.result({\n        title: `Product scopes on ${list.source.slug}`,\n        rows: list.scopes.map((entry): [string, string[]] => [\n          entry.name,\n          [\n            `${pluralize(entry.teamCount, 'team')}${entry.isDefault ? ' · given to every new team' : ''}`,\n            entry.products.length > 0\n              ? entry.products.map((item) => item.slug).join(', ')\n              : 'no products',\n          ],\n        ]),\n        notes: [\n          'A team sees in the app only the products of the scopes it holds.',\n          '\"ekanos sources scopes add <scope> <product>\" shows a product to every team on a scope; \"ekanos teams scope show|set <team>\" reads or changes which scopes a team holds.',\n        ],\n      }),\n    );\n  }\n\n  const included = verb === 'add';\n  const result = await client.call((token) =>\n    setScopeProduct(\n      env.host,\n      token,\n      { source: resolved.source, scope, product },\n      included,\n    ),\n  );\n  return ctx.succeed(\n    { host: env.host, ...result },\n    ctx.ui.result({\n      title: result.changed\n        ? `${included ? 'Added' : 'Took'} ${result.product.name} ${included ? 'to' : 'out of'} ${result.scope.name}`\n        : `${result.product.name} was already ${included ? 'in' : 'not in'} ${result.scope.name}`,\n      tone: !included && result.changed ? 'warn' : 'ok',\n      rows: [\n        ['Teams on it', String(result.scope.teamCount)],\n        [\n          'Products',\n          result.scope.products.length > 0\n            ? result.scope.products.map((item) => item.slug).join(', ')\n            : 'none',\n        ],\n      ],\n      notes: [\n        included\n          ? `Every team on ${result.scope.name} sees ${result.product.slug} in the app now.`\n          : `Teams on ${result.scope.name} see ${result.product.slug} only if another of their scopes has it.`,\n      ],\n    }),\n  );\n}\n\nfunction scopeProductSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources scopes ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources scopes add Bronze linear\".',\n  );\n}\n\nfunction quoteArg(value: string): string {\n  return /^[A-Za-z0-9._-]+$/.test(value) ? value : `\"${value}\"`;\n}\n\nfunction productSlug(value: string | undefined, verb: string): string {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value\n      ? `\"${value}\" is not a product slug.`\n      : `sources products ${verb} needs a product.`,\n    '\"ekanos sources products\" lists them, e.g. \"ekanos sources products enable agents\".',\n  );\n}\n\nclass ProductsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<SourceProductsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the sources call.`,\n      loginHint(this.env),\n    );\n  }\n}\n"]}

package/dist/commands/sync.d.ts

@@ -0,0 +1,2 @@
+import type { ExperienceCommand } from './index-experience.js';
+export declare const syncCommand: ExperienceCommand;

package/dist/commands/sync.js

@@ -0,0 +1,150 @@
+import { shortOperation } from '@ekanos/integration-schema';
+import { harnessContractSources } from '../dev-experience.js';
+import { validationError } from '../errors.js';
+import { defaultSources, resolveContract, } from '../experience/contract-sources.js';
+import { pinIntegration } from '../experience/pin-integration.js';
+import { DEPRECATED_USES, renamesNotice } from '../experience/pins.js';
+import { readExperienceProject, readLockfile, writeIntegrations, } from '../experience/project.js';
+import { loadPins, regenerateIntegrations } from '../experience/regenerate.js';
+import { failOnErrors } from '../experience/report.js';
+export const syncCommand = {
+    name: 'sync',
+    usage: [
+        "  sync       Re-resolve every integration's contract, accept a new digest within the",
+        '             pinned line, and regenerate the lock + types (--check: report only)',
+    ],
+    specs: {
+        dir: {
+            type: 'string',
+            description: 'Project directory (default: the current one)',
+        },
+        check: {
+            type: 'boolean',
+            description: 'Report drift without writing anything; exit 3 when there is some',
+        },
+        'from-dir': {
+            type: 'string',
+            description: 'Directory of contract files to resolve from',
+        },
+        'contracts-dir': {
+            type: 'string',
+            description: 'Contracts directory the harness resolves from (same as "ekanos dev --contracts-dir"; default: EKANOS_CONTRACTS_DIR)',
+        },
+        'from-path': {
+            type: 'string',
+            description: 'An integration project directory to resolve from',
+        },
+    },
+    async run(ctx, args) {
+        var _a, _b;
+        const project = readExperienceProject(args.dir);
+        const checkOnly = args.flags.check === true;
+        const fromDir = args.flags['from-dir'];
+        const fromPath = args.flags['from-path'];
+        const contractsDir = args.flags['contracts-dir'];
+        const explicit = Boolean((_b = (_a = fromDir !== null && fromDir !== void 0 ? fromDir : fromPath) !== null && _a !== void 0 ? _a : contractsDir) !== null && _b !== void 0 ? _b : args.env.EKANOS_CONTRACTS_DIR);
+        // The harness's own registry chain (session catalog, published-package
+        // cache, contracts directory, then the committed snapshot) is what
+        // `ekanos dev` resolves with, so it is what decides drift here too.
+        const sources = defaultSources(project, { fromDir, fromPath, env: args.env }, await harnessContractSources(project.dir, args.env, Object.assign(Object.assign({}, ((contractsDir !== null && contractsDir !== void 0 ? contractsDir : fromDir)
+            ? { contractsDir: (contractsDir !== null && contractsDir !== void 0 ? contractsDir : fromDir) }
+            : {})), { onUnavailable: (reason) => ctx.warn(`Could not ask the project's @ekanos/harness for contracts (${reason}); resolving from the committed snapshots only.`) })));
+        if (project.deprecatedUses) {
+            ctx.warn(DEPRECATED_USES);
+            const notice = renamesNotice(project.renames);
+            if (notice)
+                ctx.warn(notice);
+        }
+        const lock = readLockfile(project);
+        const resolved = new Map();
+        const drift = [];
+        const consulted = new Set();
+        for (const use of project.integrations) {
+            const hit = await resolveContract(sources, use.name, use.version);
+            resolved.set(use.name, hit);
+            consulted.add(isSnapshotOnly(hit) ? 'snapshot' : 'harness');
+            const locked = lock.integrations[use.name];
+            if (!locked || locked.digest !== hit.contract.digest) {
+                drift.push(`${use.name}: ${locked ? `${locked.contractVersion} -> ${hit.contract.contractVersion}` : `new pin ${hit.contract.contractVersion}`}`);
+            }
+        }
+        const snapshotOnly = !explicit && !consulted.has('harness');
+        const snapshotNotice = 'Only the committed snapshots were consulted (no contracts directory and nothing newer from the harness registry), so a running "ekanos dev" that resolves elsewhere can still see a drifted digest. Pass --contracts-dir <dir> or set EKANOS_CONTRACTS_DIR, as you do for "ekanos dev".';
+        if (checkOnly) {
+            if (drift.length > 0) {
+                throw validationError(`${drift.length} integration${drift.length === 1 ? '' : 's'} drifted: ${drift.join('; ')}.`, 'Run "ekanos sync" to accept the new contracts.');
+            }
+            if (snapshotOnly)
+                ctx.warn(snapshotNotice);
+            return ctx.succeed({ drift: [], changed: false, snapshotOnly }, snapshotOnly
+                ? 'All integrations match their committed snapshots (no other contract source was consulted).'
+                : 'All integrations match their pinned contracts.');
+        }
+        // Judge the incoming contracts before writing any of it: a new contract
+        // that drops a declared operation must not silently replace the old pin.
+        const candidate = new Map([...resolved].map(([name, hit]) => [name, hit.contract]));
+        const incoming = project.integrations.flatMap((use) => {
+            const contract = candidate.get(use.name);
+            if (!contract)
+                return [];
+            const have = new Set(contract.operations.map((op) => op.id));
+            return use.operations
+                .filter((id) => !have.has(id))
+                .map((id) => ({
+                check: 'checks/integration-pins',
+                severity: 'error',
+                message: `integration "${use.name}": ${use.name}@${use.version} (contract ${contract.contractVersion}) no longer provides ${shortOperation(id)}.`,
+                hint: 'Remove the operation from "integrations", or keep the older pinned contract.',
+                file: 'ekanos.json',
+            }));
+        });
+        const failed = failOnErrors(ctx, 'sync', incoming, { drift }, project.dir);
+        if (failed !== null)
+            return failed;
+        let changed = false;
+        if (project.deprecatedUses) {
+            changed = writeIntegrations(project, project.integrations) || changed;
+        }
+        for (const use of project.integrations) {
+            const hit = resolved.get(use.name);
+            if (!hit)
+                continue;
+            const result = pinIntegration(project, use, hit.contract);
+            changed = changed || result.snapshotChanged || result.lockChanged;
+        }
+        const { pinned } = loadPins(project);
+        const typesChanged = regenerateIntegrations(project, pinned);
+        changed = changed || typesChanged;
+        if (snapshotOnly && drift.length === 0)
+            ctx.warn(snapshotNotice);
+        return ctx.succeed({
+            drift,
+            changed,
+            snapshotOnly,
+            explicitSource: explicit,
+            migratedUses: project.deprecatedUses,
+            renames: project.renames,
+            integrations: project.integrations.map((u) => { var _a, _b, _c; return ({
+                integration: u.name,
+                contractVersion: (_a = resolved.get(u.name)) === null || _a === void 0 ? void 0 : _a.contract.contractVersion,
+                digest: (_b = resolved.get(u.name)) === null || _b === void 0 ? void 0 : _b.contract.digest,
+                origin: (_c = resolved.get(u.name)) === null || _c === void 0 ? void 0 : _c.origin,
+            }); }),
+        }, drift.length > 0
+            ? `Synced ${project.integrations.length} integration${project.integrations.length === 1 ? '' : 's'}; accepted: ${drift.join('; ')}.`
+            : changed
+                ? 'Synced; lock or types were regenerated.'
+                : snapshotOnly
+                    ? 'Nothing to sync against the committed snapshots; no other contract source was consulted.'
+                    : 'Nothing to sync: every integration matches its pinned contract.');
+    },
+};
+/**
+ * The harness's registry source falls back to the committed snapshot when it
+ * finds nothing newer, and says so in its origin ("snapshot <dir>"). A hit that
+ * is only that fallback proves nothing about the registry.
+ */
+function isSnapshotOnly(hit) {
+    return hit.kind === 'snapshot' || hit.origin.startsWith('snapshot ');
+}
+//# sourceMappingURL=sync.js.map

package/dist/commands/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/commands/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAEL,cAAc,EACd,eAAe,GAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,CAAC,MAAM,WAAW,GAAsB;IAC5C,IAAI,EAAE,MAAM;IACZ,KAAK,EAAE;QACL,sFAAsF;QACtF,kFAAkF;KACnF;IACD,KAAK,EAAE;QACL,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8CAA8C;SAC5D;QACD,KAAK,EAAE;YACL,IAAI,EAAE,SAAS;YACf,WAAW,EACT,kEAAkE;SACrE;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6CAA6C;SAC3D;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,qHAAqH;SACxH;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kDAAkD;SAChE;KACF;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;;QACjB,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;QAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAuB,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAuB,CAAC;QAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAuB,CAAC;QACvE,MAAM,QAAQ,GAAG,OAAO,aACtB,OAAO,aAAP,OAAO,cAAP,OAAO,GAAI,QAAQ,mCAAI,YAAY,mCAAI,IAAI,CAAC,GAAG,CAAC,oBAAoB,CACrE,CAAC;QACF,uEAAuE;QACvE,mEAAmE;QACnE,oEAAoE;QACpE,MAAM,OAAO,GAAG,cAAc,CAC5B,OAAO,EACP,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,EACpC,MAAM,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,kCAC7C,CAAC,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,OAAO,CAAC;YAC3B,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,OAAO,CAAW,EAAE;YACvD,CAAC,CAAC,EAAE,CAAC,KACP,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CACxB,GAAG,CAAC,IAAI,CACN,8DAA8D,MAAM,iDAAiD,CACtH,IACH,CACH,CAAC;QAEF,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/B,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;QACrD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwC,CAAC;QAClE,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YAClE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC5B,SAAS,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CACR,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,eAAe,OAAO,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,CACtI,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,CAAC,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC5D,MAAM,cAAc,GAClB,yRAAyR,CAAC;QAE5R,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,eAAe,CACnB,GAAG,KAAK,CAAC,MAAM,eAAe,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3F,gDAAgD,CACjD,CAAC;YACJ,CAAC;YAED,IAAI,YAAY;gBAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAE3C,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAC3C,YAAY;gBACV,CAAC,CAAC,4FAA4F;gBAC9F,CAAC,CAAC,gDAAgD,CACrD,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CACzD,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;YACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,OAAO,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAE7D,OAAO,GAAG,CAAC,UAAU;iBAClB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;iBAC7B,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBACZ,KAAK,EAAE,yBAAyB;gBAChC,QAAQ,EAAE,OAAgB;gBAC1B,OAAO,EAAE,gBAAgB,GAAG,CAAC,IAAI,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,cAAc,QAAQ,CAAC,eAAe,wBAAwB,cAAc,CAAC,EAAE,CAAC,GAAG;gBACjJ,IAAI,EAAE,8EAA8E;gBACpF,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3E,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEnC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC3B,OAAO,GAAG,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC;QACxE,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1D,OAAO,GAAG,OAAO,IAAI,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC,WAAW,CAAC;QACpE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,GAAG,OAAO,IAAI,YAAY,CAAC;QAElC,IAAI,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAEjE,OAAO,GAAG,CAAC,OAAO,CAChB;YACE,KAAK;YACL,OAAO;YACP,YAAY;YACZ,cAAc,EAAE,QAAQ;YACxB,YAAY,EAAE,OAAO,CAAC,cAAc;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,YAAY,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,0BAAC,CAAC;gBAC7C,WAAW,EAAE,CAAC,CAAC,IAAI;gBACnB,eAAe,EAAE,MAAA,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,0CAAE,QAAQ,CAAC,eAAe;gBAC/D,MAAM,EAAE,MAAA,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,0CAAE,QAAQ,CAAC,MAAM;gBAC7C,MAAM,EAAE,MAAA,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,0CAAE,MAAM;aACrC,CAAC,GAAA,CAAC;SACJ,EACD,KAAK,CAAC,MAAM,GAAG,CAAC;YACd,CAAC,CAAC,UAAU,OAAO,CAAC,YAAY,CAAC,MAAM,eAAe,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,eAAe,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACpI,CAAC,CAAC,OAAO;gBACP,CAAC,CAAC,yCAAyC;gBAC3C,CAAC,CAAC,YAAY;oBACZ,CAAC,CAAC,0FAA0F;oBAC5F,CAAC,CAAC,iEAAiE,CAC1E,CAAC;IACJ,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAS,cAAc,CAAC,GAAqB;IAC3C,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;AACvE,CAAC","sourcesContent":["import { shortOperation } from '@ekanos/integration-schema';\n\nimport { harnessContractSources } from '../dev-experience';\nimport { validationError } from '../errors';\nimport {\n  type ResolvedContract,\n  defaultSources,\n  resolveContract,\n} from '../experience/contract-sources';\nimport { pinIntegration } from '../experience/pin-integration';\nimport { DEPRECATED_USES, renamesNotice } from '../experience/pins';\nimport {\n  readExperienceProject,\n  readLockfile,\n  writeIntegrations,\n} from '../experience/project';\nimport { loadPins, regenerateIntegrations } from '../experience/regenerate';\nimport { failOnErrors } from '../experience/report';\nimport type { ExperienceCommand } from './index-experience';\n\nexport const syncCommand: ExperienceCommand = {\n  name: 'sync',\n  usage: [\n    \"  sync       Re-resolve every integration's contract, accept a new digest within the\",\n    '             pinned line, and regenerate the lock + types (--check: report only)',\n  ],\n  specs: {\n    dir: {\n      type: 'string',\n      description: 'Project directory (default: the current one)',\n    },\n    check: {\n      type: 'boolean',\n      description:\n        'Report drift without writing anything; exit 3 when there is some',\n    },\n    'from-dir': {\n      type: 'string',\n      description: 'Directory of contract files to resolve from',\n    },\n    'contracts-dir': {\n      type: 'string',\n      description:\n        'Contracts directory the harness resolves from (same as \"ekanos dev --contracts-dir\"; default: EKANOS_CONTRACTS_DIR)',\n    },\n    'from-path': {\n      type: 'string',\n      description: 'An integration project directory to resolve from',\n    },\n  },\n  async run(ctx, args) {\n    const project = readExperienceProject(args.dir);\n    const checkOnly = args.flags.check === true;\n    const fromDir = args.flags['from-dir'] as string | undefined;\n    const fromPath = args.flags['from-path'] as string | undefined;\n    const contractsDir = args.flags['contracts-dir'] as string | undefined;\n    const explicit = Boolean(\n      fromDir ?? fromPath ?? contractsDir ?? args.env.EKANOS_CONTRACTS_DIR,\n    );\n    // The harness's own registry chain (session catalog, published-package\n    // cache, contracts directory, then the committed snapshot) is what\n    // `ekanos dev` resolves with, so it is what decides drift here too.\n    const sources = defaultSources(\n      project,\n      { fromDir, fromPath, env: args.env },\n      await harnessContractSources(project.dir, args.env, {\n        ...((contractsDir ?? fromDir)\n          ? { contractsDir: (contractsDir ?? fromDir) as string }\n          : {}),\n        onUnavailable: (reason) =>\n          ctx.warn(\n            `Could not ask the project's @ekanos/harness for contracts (${reason}); resolving from the committed snapshots only.`,\n          ),\n      }),\n    );\n\n    if (project.deprecatedUses) {\n      ctx.warn(DEPRECATED_USES);\n      const notice = renamesNotice(project.renames);\n      if (notice) ctx.warn(notice);\n    }\n\n    const lock = readLockfile(project);\n    const resolved = new Map<string, ResolvedContract>();\n    const drift: string[] = [];\n    const consulted = new Set<ResolvedContract['kind'] | 'harness'>();\n    for (const use of project.integrations) {\n      const hit = await resolveContract(sources, use.name, use.version);\n      resolved.set(use.name, hit);\n      consulted.add(isSnapshotOnly(hit) ? 'snapshot' : 'harness');\n      const locked = lock.integrations[use.name];\n      if (!locked || locked.digest !== hit.contract.digest) {\n        drift.push(\n          `${use.name}: ${locked ? `${locked.contractVersion} -> ${hit.contract.contractVersion}` : `new pin ${hit.contract.contractVersion}`}`,\n        );\n      }\n    }\n\n    const snapshotOnly = !explicit && !consulted.has('harness');\n    const snapshotNotice =\n      'Only the committed snapshots were consulted (no contracts directory and nothing newer from the harness registry), so a running \"ekanos dev\" that resolves elsewhere can still see a drifted digest. Pass --contracts-dir <dir> or set EKANOS_CONTRACTS_DIR, as you do for \"ekanos dev\".';\n\n    if (checkOnly) {\n      if (drift.length > 0) {\n        throw validationError(\n          `${drift.length} integration${drift.length === 1 ? '' : 's'} drifted: ${drift.join('; ')}.`,\n          'Run \"ekanos sync\" to accept the new contracts.',\n        );\n      }\n\n      if (snapshotOnly) ctx.warn(snapshotNotice);\n\n      return ctx.succeed(\n        { drift: [], changed: false, snapshotOnly },\n        snapshotOnly\n          ? 'All integrations match their committed snapshots (no other contract source was consulted).'\n          : 'All integrations match their pinned contracts.',\n      );\n    }\n\n    // Judge the incoming contracts before writing any of it: a new contract\n    // that drops a declared operation must not silently replace the old pin.\n    const candidate = new Map(\n      [...resolved].map(([name, hit]) => [name, hit.contract]),\n    );\n    const incoming = project.integrations.flatMap((use) => {\n      const contract = candidate.get(use.name);\n      if (!contract) return [];\n      const have = new Set(contract.operations.map((op) => op.id));\n\n      return use.operations\n        .filter((id) => !have.has(id))\n        .map((id) => ({\n          check: 'checks/integration-pins',\n          severity: 'error' as const,\n          message: `integration \"${use.name}\": ${use.name}@${use.version} (contract ${contract.contractVersion}) no longer provides ${shortOperation(id)}.`,\n          hint: 'Remove the operation from \"integrations\", or keep the older pinned contract.',\n          file: 'ekanos.json',\n        }));\n    });\n    const failed = failOnErrors(ctx, 'sync', incoming, { drift }, project.dir);\n    if (failed !== null) return failed;\n\n    let changed = false;\n    if (project.deprecatedUses) {\n      changed = writeIntegrations(project, project.integrations) || changed;\n    }\n    for (const use of project.integrations) {\n      const hit = resolved.get(use.name);\n      if (!hit) continue;\n      const result = pinIntegration(project, use, hit.contract);\n      changed = changed || result.snapshotChanged || result.lockChanged;\n    }\n    const { pinned } = loadPins(project);\n    const typesChanged = regenerateIntegrations(project, pinned);\n    changed = changed || typesChanged;\n\n    if (snapshotOnly && drift.length === 0) ctx.warn(snapshotNotice);\n\n    return ctx.succeed(\n      {\n        drift,\n        changed,\n        snapshotOnly,\n        explicitSource: explicit,\n        migratedUses: project.deprecatedUses,\n        renames: project.renames,\n        integrations: project.integrations.map((u) => ({\n          integration: u.name,\n          contractVersion: resolved.get(u.name)?.contract.contractVersion,\n          digest: resolved.get(u.name)?.contract.digest,\n          origin: resolved.get(u.name)?.origin,\n        })),\n      },\n      drift.length > 0\n        ? `Synced ${project.integrations.length} integration${project.integrations.length === 1 ? '' : 's'}; accepted: ${drift.join('; ')}.`\n        : changed\n          ? 'Synced; lock or types were regenerated.'\n          : snapshotOnly\n            ? 'Nothing to sync against the committed snapshots; no other contract source was consulted.'\n            : 'Nothing to sync: every integration matches its pinned contract.',\n    );\n  },\n};\n\n/**\n * The harness's registry source falls back to the committed snapshot when it\n * finds nothing newer, and says so in its origin (\"snapshot <dir>\"). A hit that\n * is only that fallback proves nothing about the registry.\n */\nfunction isSnapshotOnly(hit: ResolvedContract): boolean {\n  return hit.kind === 'snapshot' || hit.origin.startsWith('snapshot ');\n}\n"]}

package/dist/commands/team-agent-readiness.d.ts

@@ -1,5 +1,17 @@
 import type { AgentRunSummary, ChannelRequirement, Requirement, TeamAgentEntry, TeamAgentHold, TeamIntegrationEvent } from '@ekanos/integration-schema';
 import { type ScopeFacts } from './scope-notice.js';
+/**
+ * "Is this agent live on this team, and if not, why?" — one answer for
+ * `teams agents show` and the summary line of `teams agents list`, built only
+ * from what the host already reports (CLI audit 2026-10-19, §3).
+ *
+ * Live is: on, on a published version, every connection it needs made,
+ * access confirmed by someone who sets it up (a team manager or the Source
+ * admin, plan 247.2), at least one trigger on, and every trigger's events
+ * able to reach it. Each gap is a step with one fix, in the order they have
+ * to be done; the first step's fix is "Next". A publish holds no team, so
+ * there is no update waiting.
+ */
 export interface ReadinessStep {
     /** What is missing, in words. */
     problem: string;
@@ -26,11 +38,15 @@ export declare function describeHold(hold: TeamAgentHold): string;
 export declare const REASON_WORDS: Record<NonNullable<Requirement['reason']>, string>;
 /** The one command that makes a requirement, or null when none can. */
 export declare function requirementFix(item: Requirement, team: string, source: string): string | null;
-/** The one command that makes a channel ready, or the app step. */
+/**
+ * The one command that makes a channel ready. An older host sends no
+ * `arrival`: the channel's key (`<product>:webhook`, `<product>:route`,
+ * `<product>:<connection>`) still says which command it is.
+ */
 export declare function channelFix(channel: ChannelRequirement, team: string, source: string): string;
 /** How the events of a ready channel reach the agent. */
 export declare function reachedVia(channel: ChannelRequirement): string;
-/** A fix as a line: a command is run in the terminal, an app step is not. */
+/** A fix as a line: a command is run in the terminal; anything else is a person's step. */
 export declare function fixLine(fix: string): string;
 /** "Live: yes" or "Live: no — N steps left". */
 export declare function liveLine(readiness: AgentReadiness): string;

package/dist/commands/team-agent-readiness.js

@@ -1,17 +1,5 @@
+import { cli } from '../invocation.js';
 import { scopeFix, scopeHiddenWords } from './scope-notice.js';
-/**
- * "Is this agent live on this team, and if not, why?" — one answer for
- * `teams agents show` and the summary line of `teams agents list`, built only
- * from what the host already reports (CLI audit 2026-10-19, §3).
- *
- * Live is: on, on a published version, every connection it needs made,
- * access confirmed by someone who sets it up (a team manager or the Source
- * admin, plan 247.2), at least one trigger on, and every trigger's events
- * able to reach it. Each gap is a step with one fix, in the order they have
- * to be done; the first step's fix is "Next". A publish holds no team, so
- * there is no update waiting.
- */
-const CLI = 'npx @ekanos/cli';
 export function agentReadiness(entry, target) {
     var _a;
     var _b;
@@ -52,7 +40,7 @@ export function describeHold(hold) {
 }
 function readinessSteps(entry, { team, source }) {
     var _a, _b, _c, _d, _e;
-    const enable = `${CLI} teams agents enable ${team} ${entry.key} --source ${source}`;
+    const enable = `${cli()} teams agents enable ${team} ${entry.key} --source ${source}`;
     const agent = entry.agent;
     if (!agent)
         return [{ problem: `off for ${team}`, fix: enable }];
@@ -64,19 +52,19 @@ function readinessSteps(entry, { team, source }) {
         // A team testing a draft runs it only when started by hand.
         steps.push({
             problem: `testing unpublished draft v${(_a = agent.version) !== null && _a !== void 0 ? _a : '?'}: its triggers do not start it`,
-            fix: `${CLI} agents publish ${entry.key} --source ${source}`,
+            fix: `${cli()} agents publish ${entry.key} --source ${source}`,
         });
     }
     else if (agent.version === null) {
         steps.push({
             problem: 'no published version',
-            fix: `${CLI} agents publish ${entry.key} --source ${source}`,
+            fix: `${cli()} agents publish ${entry.key} --source ${source}`,
         });
     }
     for (const item of agent.missing) {
         steps.push({
             problem: `${item.name}: ${REASON_WORDS[(_b = item.reason) !== null && _b !== void 0 ? _b : 'not_connected']}`,
-            fix: (_c = requirementFix(item, team, source)) !== null && _c !== void 0 ? _c : `${CLI} teams mcp status ${team} ${item.key} --source ${source}`,
+            fix: (_c = requirementFix(item, team, source)) !== null && _c !== void 0 ? _c : `${cli()} teams mcp status ${team} ${item.key} --source ${source}`,
         });
     }
     if (!agent.accessConfirmed) {
@@ -84,13 +72,13 @@ function readinessSteps(entry, { team, source }) {
             problem: 'nobody has confirmed what it may use',
             // Whoever sets it up confirms, as themselves: the Source admin here,
             // or a team manager in the app (plan 247.2).
-            fix: `${CLI} teams agents confirm ${team} ${entry.key} --source ${source}  (or a team manager confirms in the app: Agents › ${entry.name} › Setup)`,
+            fix: `${cli()} teams agents confirm ${team} ${entry.key} --source ${source}  (or a team manager confirms in the app: Agents › ${entry.name} › Setup)`,
         });
     }
     if (!agent.triggers.some((trigger) => trigger.enabled)) {
         steps.push({
             problem: 'no trigger is on, so it only runs when started by hand',
-            fix: `${CLI} teams triggers add ${team} ${entry.key} event <event-id> --source ${source}  (event ids: ${CLI} catalog --source ${source})`,
+            fix: `${cli()} teams triggers add ${team} ${entry.key} event <event-id> --source ${source}  (event ids: ${cli()} catalog --source ${source})`,
         });
     }
     for (const channel of (_d = agent.channels) !== null && _d !== void 0 ? _d : []) {
@@ -116,38 +104,50 @@ export function requirementFix(item, team, source) {
         return null;
     switch (item.reason) {
         case 'no_route':
-            return `${CLI} routes set ${item.key} <value> ${team} --source ${source}  (values: ${CLI} routes options ${item.key} --source ${source})`;
+            return `${cli()} routes set ${item.key} <value> ${team} --source ${source}  (values: ${cli()} routes options ${item.key} --source ${source})`;
         case 'source_not_connected':
-            return `${CLI} apps connect ${item.key} --source ${source}`;
+            return `${cli()} apps connect ${item.key} --source ${source}`;
         case 'source_not_entitled':
-            return `a super-admin enables it for the Source (${CLI} sources products --source ${source})`;
+            return `a super-admin enables it for the Source (${cli()} sources products --source ${source})`;
         case 'source_unsupported':
-            return `set connections.${item.key}.owner to "team" in agent.json, then ${CLI} agents apply`;
+            return `set connections.${item.key}.owner to "team" in agent.json, then ${cli()} agents apply`;
         default:
             if (item.connected)
                 return null;
             // A per-person product is the runs-as person's connection, not the
             // caller's: connecting your own leaves the agent missing it.
             return item.via === 'person' && item.viaDetail
-                ? `${CLI} teams connect ${team} ${item.key} --as ${item.viaDetail} --source ${source}`
-                : `${CLI} teams connect ${team} ${item.key} --source ${source}`;
+                ? `${cli()} teams connect ${team} ${item.key} --as ${item.viaDetail} --source ${source}`
+                : `${cli()} teams connect ${team} ${item.key} --source ${source}`;
     }
 }
-/** The one command that makes a channel ready, or the app step. */
+/**
+ * The one command that makes a channel ready. An older host sends no
+ * `arrival`: the channel's key (`<product>:webhook`, `<product>:route`,
+ * `<product>:<connection>`) still says which command it is.
+ */
 export function channelFix(channel, team, source) {
-    switch (channel.arrival) {
+    var _a, _b;
+    const suffix = channel.key.includes(':') ? channel.key.split(':')[1] : null;
+    const arrival = (_a = channel.arrival) !== null && _a !== void 0 ? _a : (suffix === 'webhook'
+        ? 'team-webhook'
+        : suffix === 'route'
+            ? 'source-route'
+            : 'install');
+    switch (arrival) {
         case 'team-webhook':
-            return `${CLI} teams webhook ${team} ${channel.product} --source ${source}`;
+            return `${cli()} teams webhook ${team} ${channel.product} --source ${source}`;
         case 'source-route':
             return channel.webhook
-                ? `${CLI} routes set ${channel.product} <value> ${team} --source ${source}  (values: ${CLI} routes options ${channel.product} --source ${source})`
-                : `${CLI} routes webhook ${channel.product} --source ${source}`;
-        default:
-            return channel.connectionId
-                ? `${CLI} teams connect ${team} ${channel.product} --connection ${channel.connectionId} --source ${source}`
-                : channel.key === 'slack' || channel.key === 'linear-app'
-                    ? `${CLI} teams connect ${team} ${channel.key} --source ${source}`
-                    : `install it on the agent's Triggers tab in the app`;
+                ? `${cli()} routes set ${channel.product} <value> ${team} --source ${source}  (values: ${cli()} routes options ${channel.product} --source ${source})`
+                : `${cli()} routes webhook ${channel.product} --source ${source}`;
+        default: {
+            if (channel.key === 'slack' || channel.key === 'linear-app') {
+                return `${cli()} teams connect ${team} ${channel.key} --source ${source}`;
+            }
+            const connection = (_b = channel.connectionId) !== null && _b !== void 0 ? _b : suffix;
+            return `${cli()} teams connect ${team} ${channel.product}${connection ? ` --connection ${connection}` : ''} --source ${source}`;
+        }
     }
 }
 /** How the events of a ready channel reach the agent. */
@@ -161,9 +161,9 @@ export function reachedVia(channel) {
             return `${channel.name} installed`;
     }
 }
-/** A fix as a line: a command is run in the terminal, an app step is not. */
+/** A fix as a line: a command is run in the terminal; anything else is a person's step. */
 export function fixLine(fix) {
-    return fix.startsWith(CLI) ? `in your terminal: ${fix}` : fix;
+    return fix.startsWith(cli()) ? `in your terminal: ${fix}` : fix;
 }
 /** "Live: yes" or "Live: no — N steps left". */
 export function liveLine(readiness) {
@@ -203,7 +203,7 @@ export function describeAgentReadiness(entry, target, readiness, activity, scope
         var _a;
         const fix = item.connected
             ? null
-            : ((_a = requirementFix(item, target.team, target.source)) !== null && _a !== void 0 ? _a : `${CLI} teams mcp status ${target.team} ${item.key} --source ${target.source}`);
+            : ((_a = requirementFix(item, target.team, target.source)) !== null && _a !== void 0 ? _a : `${cli()} teams mcp status ${target.team} ${item.key} --source ${target.source}`);
         const hidden = item.hiddenByScope && scope
             ? [
                 `${indent}! ${scopeHiddenWords(scope)}`,