@ekanos/cli 0.16.0 → 0.17.1

package/README.md

@@ -178,7 +178,7 @@ imply an isolation that does not exist.
   app/harness-shell.tsx        'use client' — injects your registry
   app/page.tsx                 server component — the index
   app/[slug]/layout.tsx        ─┐
-  app/[slug]/page.tsx           │  (redirects /<slug> to /<slug>/widgets)
+  app/[slug]/page.tsx           │  (redirect the old /<slug> addresses to Preview)
   app/[slug]/widgets/page.tsx   │
   app/[slug]/widgets/[widgetId]/page.tsx
   app/[slug]/tile/page.tsx      ├─ one-line re-exports of @ekanos/harness/routes
@@ -187,6 +187,24 @@ imply an isolation that does not exist.
   app/api/integrations/[slug]/[...path]/route.ts
                                server — injects your registry into @ekanos/harness/api
                                (live-mode OAuth loop, storage bridge, trigger route)
+  app/%5F%5Fekanos/api/[...path]/route.ts
+                               server — /__ekanos/api/*: integrations, operations, approvals, run log
+  app/integrations/layout.tsx  the Integration console (mounted from @ekanos/harness/routes)
+  app/integrations/page.tsx
+  app/integrations/[slug]/page.tsx
+  app/integrations/[slug]/connect/page.tsx
+  app/integrations/[slug]/operations/page.tsx
+  app/integrations/[slug]/operations/[kind]/[name]/page.tsx
+  app/integrations/[slug]/events/page.tsx
+  app/integrations/[slug]/health/page.tsx
+  app/integrations/[slug]/runs/page.tsx
+  app/integrations/[slug]/preview/layout.tsx
+  app/integrations/[slug]/preview/page.tsx
+  app/integrations/[slug]/preview/widgets/page.tsx
+  app/integrations/[slug]/preview/widgets/[widgetId]/page.tsx
+  app/integrations/[slug]/preview/tile/page.tsx
+  app/integrations/[slug]/preview/activation/page.tsx
+  app/integrations/[slug]/preview/triggers/page.tsx
   next.config.mjs              transpiles @ekanos/harness, aliases the workspace mock
   postcss.config.mjs           @tailwindcss/postcss
   tsconfig.json                no baseUrl, no paths
@@ -195,6 +213,27 @@ imply an isolation that does not exist.
   package.json                 scripts only — no deps, everything resolves upward
 ```
 
+A `kind: "experience"` project also gets `app/experience/**` (the Experience view,
+whose layout imports your entry) and a home page that redirects there.
+
+An experience declares the integrations it depends on in `ekanos.json`:
+
+```json
+{ "kind": "experience", "slug": "my-exp", "entry": "src/experience.ts",
+  "integrations": [{ "name": "sanity", "version": "0.2",
+                     "operations": ["tool/list_posts", "action/create-draft"] }] }
+```
+
+`name` is the integration's slug and `version` its compat line. `ekanos add
+sanity@0.2` adds an entry (reads by default; writes via `--ops`), pins its
+contract in `contracts/` and `ekanos.lock.json`, and regenerates
+`src/.ekanos/integrations.d.ts`, after which `useOperation('sanity',
+'tool/list_posts')` is typed. A per-developer `ekanos.local.json`
+(`{ "integrations": { "sanity": { "path": "../sanity" } } }`) points an
+integration at a local checkout; `ekanos publish` refuses while one is active.
+The earlier `uses` / `slots` shapes are still read for one version with a
+warning; `ekanos sync` rewrites `ekanos.json` and the lock.
+
 `next dev`/`next build` add `next-env.d.ts`, `.next/`, and (Next 16)
 `AGENTS.md`/`CLAUDE.md` alongside them. None of that is ours and none of it is
 tracked — `.ekanos/` is gitignored in full.
@@ -360,9 +399,28 @@ edit.
 ### For agents
 
 `dev` in JSON mode (`--json`, a pipe, or `CLAUDECODE=1`) **scaffolds and
-returns** rather than blocking on a dev server that never exits — the envelope's
-`data.server` carries `{ started: false, command, url, port }` so the caller can
-start it itself. Pass `--start` to override.
+returns** rather than blocking on a dev server that never exits — it prints
+"Scaffolded only: the server was NOT started", and the envelope's `data.server`
+carries `{ started: false, reason, note, command, url, port }` so the caller can
+start it itself. **Pass `--start` to actually run the server** under an agent
+or a pipe (`ekanos dev --start --json`).
+
+## ESLint and the publish gate
+
+The hosted gate's `checks/capability-lint` runs the **project's own** ESLint (its
+pinned `node_modules/.bin/eslint` and an `eslint.config.*` spreading
+`@ekanos/sdk/eslint`) and refuses a submission without them. It does not bring an
+ESLint of its own: a control the submission can leave out is not a control.
+`ekanos init` scaffolds `eslint`, `@typescript-eslint/parser` and
+`eslint.config.mjs`. A repo created before that (or by hand) adds them once:
+
+```sh
+pnpm add -D eslint @typescript-eslint/parser   # or npm install -D / yarn add -D
+# then add eslint.config.mjs spreading @ekanos/sdk/eslint
+```
+
+`ekanos validate` warns (`project.capability-lint-tooling`) when either is missing
+and prints the config to paste.
 
 ## Keeping the toolchain current
 

package/dist/commands/add.d.ts

@@ -0,0 +1,2 @@
+import type { ExperienceCommand } from './index-experience.js';
+export declare const addCommand: ExperienceCommand;

package/dist/commands/add.js

@@ -0,0 +1,118 @@
+import { harnessContractSources } from '../dev-experience.js';
+import { invalidStateError, usageError } from '../errors.js';
+import { defaultSources, resolveContract, } from '../experience/contract-sources.js';
+import { pinIntegration } from '../experience/pin-integration.js';
+import { inContractOrder, readOperationIds, resolveOpTokens, } from '../experience/pin-ops.js';
+import { DEPRECATED_USES } from '../experience/pins.js';
+import { readExperienceProject, writeIntegrations, } from '../experience/project.js';
+import { loadPins, regenerateIntegrations } from '../experience/regenerate.js';
+const SPEC = /^([a-z][a-z0-9-]*)@(\d+(?:\.\d+)?)$/;
+export const addCommand = {
+    name: 'add',
+    usage: [
+        '  add        Add an integration to an experience: pin its contract,',
+        '             record it in ekanos.json + ekanos.lock.json, regenerate types',
+        '             (add <integration>@<version> [--ops a,b] [--from-dir <dir>])',
+    ],
+    positionals: ['spec'],
+    specs: {
+        dir: {
+            type: 'string',
+            description: 'Project directory (default: the current one)',
+        },
+        ops: {
+            type: 'string',
+            description: 'Operations to allow, comma-separated (tool/name, action/name or a unique bare name). Default on a new integration: every read operation. Writes are opt-in.',
+        },
+        as: {
+            type: 'string',
+            description: 'Removed: an experience addresses an integration by its own name',
+        },
+        'from-dir': {
+            type: 'string',
+            description: 'Directory of <integration>.contract.json files (the contract source)',
+        },
+        'from-path': {
+            type: 'string',
+            description: 'An integration project directory whose contract.json to pin',
+        },
+    },
+    async run(ctx, args) {
+        var _a, _b, _c;
+        const spec = args.positionals[0];
+        const match = spec ? SPEC.exec(spec) : null;
+        if (!match) {
+            throw usageError(spec
+                ? `"${spec}" is not <integration>@<version>.`
+                : 'add needs <integration>@<version>.', 'e.g. "ekanos add sanity@0.2 --from-dir ../contracts".');
+        }
+        const [, integration, version] = match;
+        if (args.flags.as !== undefined) {
+            throw usageError('--as is gone: an experience addresses an integration by its own name.', `Use "${integration}" in useOperation('${integration}', ...).`);
+        }
+        const project = readExperienceProject(args.dir);
+        if (project.deprecatedUses)
+            ctx.warn(DEPRECATED_USES);
+        const sources = defaultSources(project, {
+            fromDir: args.flags['from-dir'],
+            fromPath: args.flags['from-path'],
+            env: args.env,
+        }, await harnessContractSources(project.dir, args.env));
+        const { contract, origin } = await resolveContract(sources, integration, version);
+        const existing = project.integrations.find((u) => u.name === integration);
+        if (existing && existing.version !== version) {
+            throw invalidStateError(`Integration "${integration}" is already pinned at ${existing.version}.`, `Move it to ${version} by editing its "version" in ekanos.json, then run "ekanos sync".`);
+        }
+        const requested = ((_a = args.flags.ops) !== null && _a !== void 0 ? _a : '')
+            .split(',')
+            .map((t) => t.trim())
+            .filter(Boolean);
+        const explicit = resolveOpTokens(contract, requested);
+        const operations = inContractOrder(contract, [
+            ...(existing ? existing.operations : readOperationIds(contract)),
+            ...explicit,
+        ]);
+        if (operations.length === 0) {
+            throw usageError(`${integration}@${version} has no read operations to allow by default.`, 'Pass --ops <tool/name,...> to choose operations.');
+        }
+        const entry = {
+            name: integration,
+            version,
+            operations,
+            required: (_b = existing === null || existing === void 0 ? void 0 : existing.required) !== null && _b !== void 0 ? _b : 'required',
+            modes: (_c = existing === null || existing === void 0 ? void 0 : existing.modes) !== null && _c !== void 0 ? _c : ['team'],
+        };
+        const integrations = existing
+            ? project.integrations.map((u) => (u.name === integration ? entry : u))
+            : [...project.integrations, entry];
+        const integrationsChanged = writeIntegrations(project, integrations);
+        const updated = Object.assign(Object.assign({}, project), { integrations });
+        const pins = pinIntegration(updated, entry, contract);
+        const { pinned } = loadPins(updated);
+        const typesChanged = regenerateIntegrations(updated, pinned);
+        const changed = integrationsChanged ||
+            pins.snapshotChanged ||
+            pins.lockChanged ||
+            typesChanged;
+        const writes = operations.filter((id) => contract.operations.find((op) => op.id === id && op.effect === 'write'));
+        return ctx.succeed({
+            integration,
+            version,
+            contractVersion: contract.contractVersion,
+            digest: contract.digest,
+            operations,
+            writes,
+            origin,
+            changed,
+            files: {
+                integrationsChanged,
+                snapshotChanged: pins.snapshotChanged,
+                lockChanged: pins.lockChanged,
+                typesChanged,
+            },
+        }, changed
+            ? `Added integration "${integration}" (${integration}@${version}, contract ${contract.contractVersion}) with ${operations.length} operation${operations.length === 1 ? '' : 's'}${writes.length ? `, ${writes.length} write${writes.length === 1 ? '' : 's'}` : ''}.`
+            : `Integration "${integration}" is already up to date (no files changed).`);
+    },
+};
+//# sourceMappingURL=add.js.map

package/dist/commands/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../src/commands/add.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EACL,cAAc,EACd,eAAe,GAChB,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAG5E,MAAM,IAAI,GAAG,qCAAqC,CAAC;AAEnD,MAAM,CAAC,MAAM,UAAU,GAAsB;IAC3C,IAAI,EAAE,KAAK;IACX,KAAK,EAAE;QACL,qEAAqE;QACrE,4EAA4E;QAC5E,2EAA2E;KAC5E;IACD,WAAW,EAAE,CAAC,MAAM,CAAC;IACrB,KAAK,EAAE;QACL,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8CAA8C;SAC5D;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,6JAA6J;SAChK;QACD,EAAE,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iEAAiE;SACpE;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,sEAAsE;SACzE;QACD,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,6DAA6D;SAChE;KACF;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;;QACjB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,UAAU,CACd,IAAI;gBACF,CAAC,CAAC,IAAI,IAAI,mCAAmC;gBAC7C,CAAC,CAAC,oCAAoC,EACxC,uDAAuD,CACxD,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,GAAG,KAIhC,CAAC;QACF,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,UAAU,CACd,uEAAuE,EACvE,QAAQ,WAAW,sBAAsB,WAAW,UAAU,CAC/D,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,cAAc;YAAE,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,cAAc,CAC5B,OAAO,EACP;YACE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAuB;YACrD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAuB;YACvD,GAAG,EAAE,IAAI,CAAC,GAAG;SACd,EACD,MAAM,sBAAsB,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CACpD,CAAC;QACF,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,eAAe,CAChD,OAAO,EACP,WAAW,EACX,OAAO,CACR,CAAC;QAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;QAC1E,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC7C,MAAM,iBAAiB,CACrB,gBAAgB,WAAW,0BAA0B,QAAQ,CAAC,OAAO,GAAG,EACxE,cAAc,OAAO,mEAAmE,CACzF,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,OAAE,IAAI,CAAC,KAAK,CAAC,GAA0B,mCAAI,EAAE,CAAC;aAC7D,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,eAAe,CAAC,QAAQ,EAAE;YAC3C,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChE,GAAG,QAAQ;SACZ,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,UAAU,CACd,GAAG,WAAW,IAAI,OAAO,8CAA8C,EACvE,kDAAkD,CACnD,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAqB;YAC9B,IAAI,EAAE,WAAW;YACjB,OAAO;YACP,UAAU;YACV,QAAQ,QAAE,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,QAAQ,mCAAI,UAAU;YAC1C,KAAK,QAAE,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,KAAK,mCAAI,CAAC,MAAM,CAAC;SACnC,CAAC;QACF,MAAM,YAAY,GAAG,QAAQ;YAC3B,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvE,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAErE,MAAM,OAAO,mCAAQ,OAAO,KAAE,YAAY,GAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACtD,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE7D,MAAM,OAAO,GACX,mBAAmB;YACnB,IAAI,CAAC,eAAe;YACpB,IAAI,CAAC,WAAW;YAChB,YAAY,CAAC;QACf,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CACtC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO,CAAC,CACxE,CAAC;QAEF,OAAO,GAAG,CAAC,OAAO,CAChB;YACE,WAAW;YACX,OAAO;YACP,eAAe,EAAE,QAAQ,CAAC,eAAe;YACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,UAAU;YACV,MAAM;YACN,MAAM;YACN,OAAO;YACP,KAAK,EAAE;gBACL,mBAAmB;gBACnB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY;aACb;SACF,EACD,OAAO;YACL,CAAC,CAAC,sBAAsB,WAAW,MAAM,WAAW,IAAI,OAAO,cAAc,QAAQ,CAAC,eAAe,UAAU,UAAU,CAAC,MAAM,aAAa,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,SAAS,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;YACrQ,CAAC,CAAC,gBAAgB,WAAW,6CAA6C,CAC7E,CAAC;IACJ,CAAC;CACF,CAAC","sourcesContent":["import type { IntegrationEntry } from '@ekanos/integration-schema';\n\nimport { harnessContractSources } from '../dev-experience';\nimport { invalidStateError, usageError } from '../errors';\nimport {\n  defaultSources,\n  resolveContract,\n} from '../experience/contract-sources';\nimport { pinIntegration } from '../experience/pin-integration';\nimport {\n  inContractOrder,\n  readOperationIds,\n  resolveOpTokens,\n} from '../experience/pin-ops';\nimport { DEPRECATED_USES } from '../experience/pins';\nimport {\n  readExperienceProject,\n  writeIntegrations,\n} from '../experience/project';\nimport { loadPins, regenerateIntegrations } from '../experience/regenerate';\nimport type { ExperienceCommand } from './index-experience';\n\nconst SPEC = /^([a-z][a-z0-9-]*)@(\\d+(?:\\.\\d+)?)$/;\n\nexport const addCommand: ExperienceCommand = {\n  name: 'add',\n  usage: [\n    '  add        Add an integration to an experience: pin its contract,',\n    '             record it in ekanos.json + ekanos.lock.json, regenerate types',\n    '             (add <integration>@<version> [--ops a,b] [--from-dir <dir>])',\n  ],\n  positionals: ['spec'],\n  specs: {\n    dir: {\n      type: 'string',\n      description: 'Project directory (default: the current one)',\n    },\n    ops: {\n      type: 'string',\n      description:\n        'Operations to allow, comma-separated (tool/name, action/name or a unique bare name). Default on a new integration: every read operation. Writes are opt-in.',\n    },\n    as: {\n      type: 'string',\n      description:\n        'Removed: an experience addresses an integration by its own name',\n    },\n    'from-dir': {\n      type: 'string',\n      description:\n        'Directory of <integration>.contract.json files (the contract source)',\n    },\n    'from-path': {\n      type: 'string',\n      description:\n        'An integration project directory whose contract.json to pin',\n    },\n  },\n  async run(ctx, args) {\n    const spec = args.positionals[0];\n    const match = spec ? SPEC.exec(spec) : null;\n    if (!match) {\n      throw usageError(\n        spec\n          ? `\"${spec}\" is not <integration>@<version>.`\n          : 'add needs <integration>@<version>.',\n        'e.g. \"ekanos add sanity@0.2 --from-dir ../contracts\".',\n      );\n    }\n    const [, integration, version] = match as unknown as [\n      string,\n      string,\n      string,\n    ];\n    if (args.flags.as !== undefined) {\n      throw usageError(\n        '--as is gone: an experience addresses an integration by its own name.',\n        `Use \"${integration}\" in useOperation('${integration}', ...).`,\n      );\n    }\n\n    const project = readExperienceProject(args.dir);\n    if (project.deprecatedUses) ctx.warn(DEPRECATED_USES);\n    const sources = defaultSources(\n      project,\n      {\n        fromDir: args.flags['from-dir'] as string | undefined,\n        fromPath: args.flags['from-path'] as string | undefined,\n        env: args.env,\n      },\n      await harnessContractSources(project.dir, args.env),\n    );\n    const { contract, origin } = await resolveContract(\n      sources,\n      integration,\n      version,\n    );\n\n    const existing = project.integrations.find((u) => u.name === integration);\n    if (existing && existing.version !== version) {\n      throw invalidStateError(\n        `Integration \"${integration}\" is already pinned at ${existing.version}.`,\n        `Move it to ${version} by editing its \"version\" in ekanos.json, then run \"ekanos sync\".`,\n      );\n    }\n\n    const requested = ((args.flags.ops as string | undefined) ?? '')\n      .split(',')\n      .map((t) => t.trim())\n      .filter(Boolean);\n    const explicit = resolveOpTokens(contract, requested);\n    const operations = inContractOrder(contract, [\n      ...(existing ? existing.operations : readOperationIds(contract)),\n      ...explicit,\n    ]);\n    if (operations.length === 0) {\n      throw usageError(\n        `${integration}@${version} has no read operations to allow by default.`,\n        'Pass --ops <tool/name,...> to choose operations.',\n      );\n    }\n\n    const entry: IntegrationEntry = {\n      name: integration,\n      version,\n      operations,\n      required: existing?.required ?? 'required',\n      modes: existing?.modes ?? ['team'],\n    };\n    const integrations = existing\n      ? project.integrations.map((u) => (u.name === integration ? entry : u))\n      : [...project.integrations, entry];\n    const integrationsChanged = writeIntegrations(project, integrations);\n\n    const updated = { ...project, integrations };\n    const pins = pinIntegration(updated, entry, contract);\n    const { pinned } = loadPins(updated);\n    const typesChanged = regenerateIntegrations(updated, pinned);\n\n    const changed =\n      integrationsChanged ||\n      pins.snapshotChanged ||\n      pins.lockChanged ||\n      typesChanged;\n    const writes = operations.filter((id) =>\n      contract.operations.find((op) => op.id === id && op.effect === 'write'),\n    );\n\n    return ctx.succeed(\n      {\n        integration,\n        version,\n        contractVersion: contract.contractVersion,\n        digest: contract.digest,\n        operations,\n        writes,\n        origin,\n        changed,\n        files: {\n          integrationsChanged,\n          snapshotChanged: pins.snapshotChanged,\n          lockChanged: pins.lockChanged,\n          typesChanged,\n        },\n      },\n      changed\n        ? `Added integration \"${integration}\" (${integration}@${version}, contract ${contract.contractVersion}) with ${operations.length} operation${operations.length === 1 ? '' : 's'}${writes.length ? `, ${writes.length} write${writes.length === 1 ? '' : 's'}` : ''}.`\n        : `Integration \"${integration}\" is already up to date (no files changed).`,\n    );\n  },\n};\n"]}

package/dist/commands/audiences.d.ts

@@ -0,0 +1,31 @@
+import type { CliContext } from '../context.js';
+import type { ExitCode } from '../exit-codes.js';
+export interface AudiencesArgs {
+    host?: string;
+    source?: string;
+    /** `list`, `show <audience>`, `create <name>`, `set <audience>`. */
+    positionals: readonly string[];
+    yes: boolean;
+    /** `--products`, `--widgets`, `--tools`, `--name`, `--description` … */
+    flags?: Record<string, string | boolean | string[]>;
+    dir: string;
+    env: Record<string, string | undefined>;
+}
+/**
+ * `audiences` — a Source's audiences, for its Source admin. An audience is a
+ * named set of the Source's products (with optional per-product widget and
+ * tool rules) that people see in the app: each team member holds one, their
+ * own else their team's default (`ekanos teams audience`). It replaces a
+ * product scope; `sources scopes` and `teams scope` keep working until 0.20.
+ *
+ *   list                         every audience, its products and rules
+ *   show <audience>              one, in full
+ *   create <name> …              --products a,b | --all-entitled, --description,
+ *                                --default, --widgets <product>=<id>,…,
+ *                                --tools <product>=<name>,…
+ *   set <audience> …             the same flags, plus --name; --products
+ *                                replaces the product set (rules of kept
+ *                                products stay unless re-stated). Dropping a
+ *                                product needs --yes.
+ */
+export declare function runAudiences(ctx: CliContext, args: AudiencesArgs): Promise<ExitCode>;

package/dist/commands/audiences.js

@@ -0,0 +1,239 @@
+import { requireSession, resolveAuthEnvironment } from '../auth/session.js';
+import { invalidStateError, usageError } from '../errors.js';
+import { resolveSourceTarget } from '../source-target.js';
+import { createAudience, listAudiences, showAudience, updateAudience, } from '../teams-api.js';
+import { pluralize } from '../ui.js';
+import { TeamsClient } from './teams.js';
+const USAGE = 'Run "ekanos audiences list", "ekanos audiences show <audience>", "ekanos audiences create <name> [--products a,b | --all-entitled]" or "ekanos audiences set <audience> [--products a,b] [--widgets <product>=<id>,…] [--tools <product>=<name>,…]".';
+/**
+ * `audiences` — a Source's audiences, for its Source admin. An audience is a
+ * named set of the Source's products (with optional per-product widget and
+ * tool rules) that people see in the app: each team member holds one, their
+ * own else their team's default (`ekanos teams audience`). It replaces a
+ * product scope; `sources scopes` and `teams scope` keep working until 0.20.
+ *
+ *   list                         every audience, its products and rules
+ *   show <audience>              one, in full
+ *   create <name> …              --products a,b | --all-entitled, --description,
+ *                                --default, --widgets <product>=<id>,…,
+ *                                --tools <product>=<name>,…
+ *   set <audience> …             the same flags, plus --name; --products
+ *                                replaces the product set (rules of kept
+ *                                products stay unless re-stated). Dropping a
+ *                                product needs --yes.
+ */
+export async function runAudiences(ctx, args) {
+    var _a, _b;
+    const [verb = 'list', rawName, ...extra] = args.positionals;
+    if (!['list', 'show', 'create', 'set'].includes(verb)) {
+        throw usageError(`Unknown audiences subcommand "${verb}".`, USAGE);
+    }
+    if (extra.length > 0) {
+        throw usageError(`Unexpected argument "${extra[0]}".`, USAGE);
+    }
+    if (verb === 'list' && rawName) {
+        throw usageError(`Unexpected argument "${rawName}".`, USAGE);
+    }
+    const name = rawName === null || rawName === void 0 ? void 0 : rawName.trim();
+    if (verb !== 'list' && !name) {
+        throw usageError(verb === 'create'
+            ? 'audiences create needs a name.'
+            : `audiences ${verb} needs an audience (its name or id).`, USAGE);
+    }
+    const flags = readFlags((_a = args.flags) !== null && _a !== void 0 ? _a : {});
+    const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+        projectDir: args.dir,
+    });
+    const resolved = await resolveSourceTarget(env, requireSession(env), args);
+    const client = new TeamsClient(env, resolved.session);
+    const source = resolved.source;
+    if (verb === 'list') {
+        const list = await client.call((token) => listAudiences(env.host, token, source));
+        if (list.audiences.length === 0) {
+            return ctx.succeed(Object.assign({ host: env.host }, list), ctx.ui.result({
+                title: `No audiences on ${list.source.slug}`,
+                notes: [`"ekanos audiences create <name> --products a,b" makes one.`],
+            }));
+        }
+        return ctx.succeed(Object.assign({ host: env.host }, list), ctx.ui.result({
+            title: `Audiences on ${list.source.slug}`,
+            rows: list.audiences.map((audience) => [
+                audience.name,
+                describeLines(audience),
+            ]),
+            notes: [
+                'A person sees the products of their own audience, else their team’s ("ekanos teams audience <team>").',
+            ],
+        }));
+    }
+    if (verb === 'show') {
+        const shown = await client.call((token) => showAudience(env.host, token, { source, audience: name }));
+        return ctx.succeed(Object.assign({ host: env.host }, shown), renderAudience(ctx.ui, shown.audience, `${shown.audience.name}`));
+    }
+    if (verb === 'create') {
+        const body = Object.assign(Object.assign(Object.assign(Object.assign({ name: name }, (flags.description !== undefined
+            ? { description: flags.description }
+            : {})), (flags.isDefault ? { isDefault: true } : {})), (flags.allEntitled !== undefined
+            ? { includesAllEntitled: flags.allEntitled }
+            : {})), (flags.products || flags.widgets.size > 0 || flags.tools.size > 0
+            ? { products: applyRules([], flags) }
+            : {}));
+        const created = await client.call((token) => createAudience(env.host, token, source, body));
+        return ctx.succeed(Object.assign({ host: env.host }, created), renderAudience(ctx.ui, created.audience, `Created ${created.audience.name}`));
+    }
+    const current = await client.call((token) => showAudience(env.host, token, { source, audience: name }));
+    const before = current.audience;
+    const body = Object.assign(Object.assign(Object.assign(Object.assign({}, (flags.name !== undefined ? { name: flags.name } : {})), (flags.description !== undefined
+        ? { description: flags.description }
+        : {})), (flags.isDefault ? { isDefault: true } : {})), (flags.allEntitled !== undefined
+        ? { includesAllEntitled: flags.allEntitled }
+        : {}));
+    if (flags.products || flags.widgets.size > 0 || flags.tools.size > 0) {
+        body.products = applyRules(before.products.map((product) => (Object.assign(Object.assign({ slug: product.slug }, (product.widgetIds ? { widgetIds: product.widgetIds } : {})), (product.toolNames ? { toolNames: product.toolNames } : {})))), flags);
+    }
+    if (Object.keys(body).length === 0) {
+        throw usageError('Nothing to change.', 'Pass --products, --widgets, --tools, --name, --description, --default or --all-entitled.');
+    }
+    const kept = new Set(((_b = body.products) !== null && _b !== void 0 ? _b : []).map((product) => product.slug));
+    const dropped = body.products
+        ? before.products.filter((product) => !kept.has(product.slug))
+        : [];
+    if (dropped.length > 0 && !args.yes) {
+        throw invalidStateError(`${before.name} would no longer show ${dropped.map((product) => product.slug).join(', ')}: everyone on it stops seeing ${dropped.length === 1 ? 'it' : 'them'} in the app.`, `Re-run with --yes: ekanos audiences set ${quote(before.name)} … --source ${source} --yes`);
+    }
+    const updated = await client.call((token) => updateAudience(env.host, token, { source, audience: name }, body));
+    return ctx.succeed(Object.assign({ host: env.host }, updated), renderAudience(ctx.ui, updated.audience, `Updated ${updated.audience.name}`, {
+        tone: dropped.length > 0 ? 'warn' : 'ok',
+    }));
+}
+function readFlags(flags) {
+    const text = (key) => typeof flags[key] === 'string' ? flags[key] : undefined;
+    const list = (key) => {
+        const value = flags[key];
+        return Array.isArray(value)
+            ? value
+            : typeof value === 'string'
+                ? [value]
+                : [];
+    };
+    const products = text('products');
+    return {
+        name: text('name'),
+        description: text('description'),
+        isDefault: flags.default === true,
+        allEntitled: typeof flags['all-entitled'] === 'boolean'
+            ? flags['all-entitled']
+            : undefined,
+        products: products === undefined
+            ? undefined
+            : products === 'none'
+                ? []
+                : products
+                    .split(',')
+                    .map((slug) => slug.trim().toLowerCase())
+                    .filter(Boolean),
+        widgets: ruleMap('widgets', list('widgets')),
+        tools: ruleMap('tools', list('tools')),
+    };
+}
+/** `linear=w1,w2` per product; `linear=` clears the rule (all of them). */
+function ruleMap(flag, values) {
+    const rules = new Map();
+    for (const value of values) {
+        const at = value.indexOf('=');
+        const slug = (at < 0 ? value : value.slice(0, at)).trim().toLowerCase();
+        if (!slug || at < 0) {
+            throw usageError(`--${flag} takes <product>=<name>,<name>… (got "${value}").`, `e.g. --${flag} linear=${flag === 'widgets' ? 'linear-issues' : 'create_issue'}; "<product>=" lifts the rule.`);
+        }
+        rules.set(slug, value
+            .slice(at + 1)
+            .split(',')
+            .map((item) => item.trim())
+            .filter(Boolean));
+    }
+    return rules;
+}
+/** The product set after `--products` and the widget and tool rules. */
+function applyRules(base, flags) {
+    var _a;
+    const known = new Map(base.map((product) => [product.slug, product]));
+    const slugs = (_a = flags.products) !== null && _a !== void 0 ? _a : base.map((product) => product.slug);
+    const products = slugs.map((slug) => {
+        const existing = known.get(slug);
+        return Object.assign(Object.assign({ slug }, ((existing === null || existing === void 0 ? void 0 : existing.widgetIds) ? { widgetIds: existing.widgetIds } : {})), ((existing === null || existing === void 0 ? void 0 : existing.toolNames) ? { toolNames: existing.toolNames } : {}));
+    });
+    for (const [kind, rules] of [
+        ['widgetIds', flags.widgets],
+        ['toolNames', flags.tools],
+    ]) {
+        for (const [slug, names] of rules) {
+            const product = products.find((entry) => entry.slug === slug);
+            if (!product) {
+                throw usageError(`--${kind === 'widgetIds' ? 'widgets' : 'tools'} names ${slug}, which the audience would not show.`, 'Add it with --products, or name a product that is in the audience.');
+            }
+            if (names.length > 0)
+                product[kind] = names;
+            else
+                delete product[kind];
+        }
+    }
+    return products;
+}
+function describeLines(audience) {
+    const lines = [
+        [
+            audience.includesAllEntitled
+                ? 'every product the Source has'
+                : pluralize(audience.products.length, 'product'),
+            audience.isDefault ? 'given to every new team' : null,
+        ]
+            .filter(Boolean)
+            .join(' · '),
+    ];
+    if (!audience.includesAllEntitled) {
+        lines.push(audience.products.length > 0
+            ? audience.products.map(productWords).join(', ')
+            : 'no products');
+    }
+    return lines;
+}
+function productWords(product) {
+    const rules = [
+        product.widgetIds
+            ? `${pluralize(product.widgetIds.length, 'widget')}`
+            : null,
+        product.toolNames ? `${pluralize(product.toolNames.length, 'tool')}` : null,
+    ].filter(Boolean);
+    return rules.length > 0
+        ? `${product.slug} (only ${rules.join(', ')})`
+        : product.slug;
+}
+function renderAudience(ui, audience, title, options = {}) {
+    var _a;
+    return ui.result({
+        title,
+        tone: (_a = options.tone) !== null && _a !== void 0 ? _a : 'ok',
+        rows: [
+            ['Audience', audience.name],
+            ...(audience.description
+                ? [['About', audience.description]]
+                : []),
+            ['Default', audience.isDefault ? 'yes, new teams start on it' : 'no'],
+            [
+                'Products',
+                audience.includesAllEntitled
+                    ? 'every product the Source has, now and later'
+                    : audience.products.length > 0
+                        ? audience.products.map(productWords)
+                        : 'none',
+            ],
+        ],
+        notes: [
+            'Teams and members are put on an audience with "ekanos teams audience <team> [<audience>]".',
+        ],
+    });
+}
+function quote(name) {
+    return /^[A-Za-z0-9._-]+$/.test(name) ? name : `"${name}"`;
+}
+//# sourceMappingURL=audiences.js.map

package/dist/commands/audiences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audiences.js","sourceRoot":"","sources":["../../src/commands/audiences.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EACL,cAAc,EACd,aAAa,EACb,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAW,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AActC,MAAM,KAAK,GACT,sPAAsP,CAAC;AAIzP;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAe,EACf,IAAmB;;IAEnB,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5D,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,MAAM,UAAU,CAAC,iCAAiC,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,UAAU,CAAC,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC;QAC/B,MAAM,UAAU,CAAC,wBAAwB,OAAO,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,EAAE,CAAC;IAC7B,IAAI,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,UAAU,CACd,IAAI,KAAK,QAAQ;YACf,CAAC,CAAC,gCAAgC;YAClC,CAAC,CAAC,aAAa,IAAI,sCAAsC,EAC3D,KAAK,CACN,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,SAAS,OAAC,IAAI,CAAC,KAAK,mCAAI,EAAE,CAAC,CAAC;IAE1C,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACvC,CAAC;QACF,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,mBAAmB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBAC5C,KAAK,EAAE,CAAC,4DAA4D,CAAC;aACtE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YACZ,KAAK,EAAE,gBAAgB,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YACzC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC;gBACzD,QAAQ,CAAC,IAAI;gBACb,aAAa,CAAC,QAAQ,CAAC;aACxB,CAAC;YACF,KAAK,EAAE;gBACL,uGAAuG;aACxG;SACF,CAAC,CACH,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACxC,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAK,EAAE,CAAC,CAC3D,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,KAAK,GAC1B,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CACjE,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,6DACR,IAAI,EAAE,IAAK,IACR,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC,GACJ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC5C,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,WAAW,EAAE;YAC5C,CAAC,CAAC,EAAE,CAAC,GACJ,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;YAClE,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE;YACrC,CAAC,CAAC,EAAE,CAAC,CACR,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAC9C,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,OAAO,GAC5B,cAAc,CACZ,GAAG,CAAC,EAAE,EACN,OAAO,CAAC,QAAQ,EAChB,WAAW,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CACnC,CACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAK,EAAE,CAAC,CAC3D,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAChC,MAAM,IAAI,+DACL,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACtD,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;QACjC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;QACpC,CAAC,CAAC,EAAE,CAAC,GACJ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC5C,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;QACjC,CAAC,CAAC,EAAE,mBAAmB,EAAE,KAAK,CAAC,WAAW,EAAE;QAC5C,CAAC,CAAC,EAAE,CAAC,CACR,CAAC;IACF,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,QAAQ,GAAG,UAAU,CACxB,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,+BAC/B,IAAI,EAAE,OAAO,CAAC,IAAI,IACf,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC3D,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAC9D,CAAC,EACH,KAAK,CACN,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnC,MAAM,UAAU,CACd,oBAAoB,EACpB,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAC,IAAI,CAAC,QAAQ,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ;QAC3B,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,IAAI,yBAAyB,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,cAAc,EAC3K,2CAA2C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,MAAM,QAAQ,CAC3F,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAK,EAAE,EAAE,IAAI,CAAC,CACnE,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,OAAO,GAC5B,cAAc,CACZ,GAAG,CAAC,EAAE,EACN,OAAO,CAAC,QAAQ,EAChB,WAAW,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAClC;QACE,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KACzC,CACF,CACF,CAAC;AACJ,CAAC;AAaD,SAAS,SAAS,CAChB,KAAkD;IAElD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE,CAC3B,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,KAAK,CAAC,GAAG,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YACzB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ;gBACzB,CAAC,CAAC,CAAC,KAAK,CAAC;gBACT,CAAC,CAAC,EAAE,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IAClC,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC;QAClB,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC;QAChC,SAAS,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI;QACjC,WAAW,EACT,OAAO,KAAK,CAAC,cAAc,CAAC,KAAK,SAAS;YACxC,CAAC,CAAE,KAAK,CAAC,cAAc,CAAa;YACpC,CAAC,CAAC,SAAS;QACf,QAAQ,EACN,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,QAAQ,KAAK,MAAM;gBACnB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,QAAQ;qBACL,KAAK,CAAC,GAAG,CAAC;qBACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;qBACxC,MAAM,CAAC,OAAO,CAAC;QAC1B,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5C,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,SAAS,OAAO,CAAC,IAAY,EAAE,MAAgB;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YACpB,MAAM,UAAU,CACd,KAAK,IAAI,yCAAyC,KAAK,KAAK,EAC5D,UAAU,IAAI,WAAW,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc,gCAAgC,CAC/G,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CACP,IAAI,EACJ,KAAK;aACF,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;aACb,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CACnB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,IAAmB,EAAE,KAAoB;;IAC3D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,KAAK,SAAG,KAAK,CAAC,QAAQ,mCAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpE,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAe,EAAE;QAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,qCACE,IAAI,IACD,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,EAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC9D,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,EAAC,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACjE;IACJ,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI;QAC1B,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC;QAC5B,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC;KAClB,EAAE,CAAC;QACX,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,UAAU,CACd,KAAK,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,UAAU,IAAI,sCAAsC,EACnG,oEAAoE,CACrE,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;;gBACvC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,QAAkB;IACvC,MAAM,KAAK,GAAG;QACZ;YACE,QAAQ,CAAC,mBAAmB;gBAC1B,CAAC,CAAC,8BAA8B;gBAChC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;YAClD,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,IAAI;SACtD;aACE,MAAM,CAAC,OAAO,CAAC;aACf,IAAI,CAAC,KAAK,CAAC;KACf,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CACR,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAChD,CAAC,CAAC,aAAa,CAClB,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAAqC;IACzD,MAAM,KAAK,GAAG;QACZ,OAAO,CAAC,SAAS;YACf,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE;YACpD,CAAC,CAAC,IAAI;QACR,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;KAC5E,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QAC9C,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,SAAS,cAAc,CACrB,EAAM,EACN,QAAkB,EAClB,KAAa,EACb,OAAO,GAA6B,EAAE;;IAEtC,OAAO,EAAE,CAAC,MAAM,CAAC;QACf,KAAK;QACL,IAAI,QAAE,OAAO,CAAC,IAAI,mCAAI,IAAI;QAC1B,IAAI,EAAE;YACJ,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC;YAC3B,GAAG,CAAC,QAAQ,CAAC,WAAW;gBACtB,CAAC,CAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAA6B;gBAChE,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,IAAI,CAAC;YACrE;gBACE,UAAU;gBACV,QAAQ,CAAC,mBAAmB;oBAC1B,CAAC,CAAC,6CAA6C;oBAC/C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;wBAC5B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;wBACrC,CAAC,CAAC,MAAM;aACb;SACF;QACD,KAAK,EAAE;YACL,4FAA4F;SAC7F;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,KAAK,CAAC,IAAY;IACzB,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC;AAC7D,CAAC","sourcesContent":["import type {\n  Audience,\n  AudienceCreateRequest,\n  AudienceUpdateRequest,\n} from '@ekanos/integration-schema';\n\nimport { requireSession, resolveAuthEnvironment } from '../auth/session';\nimport type { CliContext } from '../context';\nimport { invalidStateError, usageError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  createAudience,\n  listAudiences,\n  showAudience,\n  updateAudience,\n} from '../teams-api';\nimport { type Ui, pluralize } from '../ui';\nimport { TeamsClient } from './teams';\n\nexport interface AudiencesArgs {\n  host?: string;\n  source?: string;\n  /** `list`, `show <audience>`, `create <name>`, `set <audience>`. */\n  positionals: readonly string[];\n  yes: boolean;\n  /** `--products`, `--widgets`, `--tools`, `--name`, `--description` … */\n  flags?: Record<string, string | boolean | string[]>;\n  dir: string;\n  env: Record<string, string | undefined>;\n}\n\nconst USAGE =\n  'Run \"ekanos audiences list\", \"ekanos audiences show <audience>\", \"ekanos audiences create <name> [--products a,b | --all-entitled]\" or \"ekanos audiences set <audience> [--products a,b] [--widgets <product>=<id>,…] [--tools <product>=<name>,…]\".';\n\ntype ProductRule = { slug: string; widgetIds?: string[]; toolNames?: string[] };\n\n/**\n * `audiences` — a Source's audiences, for its Source admin. An audience is a\n * named set of the Source's products (with optional per-product widget and\n * tool rules) that people see in the app: each team member holds one, their\n * own else their team's default (`ekanos teams audience`). It replaces a\n * product scope; `sources scopes` and `teams scope` keep working until 0.20.\n *\n *   list                         every audience, its products and rules\n *   show <audience>              one, in full\n *   create <name> …              --products a,b | --all-entitled, --description,\n *                                --default, --widgets <product>=<id>,…,\n *                                --tools <product>=<name>,…\n *   set <audience> …             the same flags, plus --name; --products\n *                                replaces the product set (rules of kept\n *                                products stay unless re-stated). Dropping a\n *                                product needs --yes.\n */\nexport async function runAudiences(\n  ctx: CliContext,\n  args: AudiencesArgs,\n): Promise<ExitCode> {\n  const [verb = 'list', rawName, ...extra] = args.positionals;\n  if (!['list', 'show', 'create', 'set'].includes(verb)) {\n    throw usageError(`Unknown audiences subcommand \"${verb}\".`, USAGE);\n  }\n  if (extra.length > 0) {\n    throw usageError(`Unexpected argument \"${extra[0]}\".`, USAGE);\n  }\n  if (verb === 'list' && rawName) {\n    throw usageError(`Unexpected argument \"${rawName}\".`, USAGE);\n  }\n  const name = rawName?.trim();\n  if (verb !== 'list' && !name) {\n    throw usageError(\n      verb === 'create'\n        ? 'audiences create needs a name.'\n        : `audiences ${verb} needs an audience (its name or id).`,\n      USAGE,\n    );\n  }\n  const flags = readFlags(args.flags ?? {});\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(env, requireSession(env), args);\n  const client = new TeamsClient(env, resolved.session);\n  const source = resolved.source;\n\n  if (verb === 'list') {\n    const list = await client.call((token) =>\n      listAudiences(env.host, token, source),\n    );\n    if (list.audiences.length === 0) {\n      return ctx.succeed(\n        { host: env.host, ...list },\n        ctx.ui.result({\n          title: `No audiences on ${list.source.slug}`,\n          notes: [`\"ekanos audiences create <name> --products a,b\" makes one.`],\n        }),\n      );\n    }\n    return ctx.succeed(\n      { host: env.host, ...list },\n      ctx.ui.result({\n        title: `Audiences on ${list.source.slug}`,\n        rows: list.audiences.map((audience): [string, string[]] => [\n          audience.name,\n          describeLines(audience),\n        ]),\n        notes: [\n          'A person sees the products of their own audience, else their team’s (\"ekanos teams audience <team>\").',\n        ],\n      }),\n    );\n  }\n\n  if (verb === 'show') {\n    const shown = await client.call((token) =>\n      showAudience(env.host, token, { source, audience: name! }),\n    );\n    return ctx.succeed(\n      { host: env.host, ...shown },\n      renderAudience(ctx.ui, shown.audience, `${shown.audience.name}`),\n    );\n  }\n\n  if (verb === 'create') {\n    const body: AudienceCreateRequest = {\n      name: name!,\n      ...(flags.description !== undefined\n        ? { description: flags.description }\n        : {}),\n      ...(flags.isDefault ? { isDefault: true } : {}),\n      ...(flags.allEntitled !== undefined\n        ? { includesAllEntitled: flags.allEntitled }\n        : {}),\n      ...(flags.products || flags.widgets.size > 0 || flags.tools.size > 0\n        ? { products: applyRules([], flags) }\n        : {}),\n    };\n    const created = await client.call((token) =>\n      createAudience(env.host, token, source, body),\n    );\n    return ctx.succeed(\n      { host: env.host, ...created },\n      renderAudience(\n        ctx.ui,\n        created.audience,\n        `Created ${created.audience.name}`,\n      ),\n    );\n  }\n\n  const current = await client.call((token) =>\n    showAudience(env.host, token, { source, audience: name! }),\n  );\n  const before = current.audience;\n  const body: AudienceUpdateRequest = {\n    ...(flags.name !== undefined ? { name: flags.name } : {}),\n    ...(flags.description !== undefined\n      ? { description: flags.description }\n      : {}),\n    ...(flags.isDefault ? { isDefault: true } : {}),\n    ...(flags.allEntitled !== undefined\n      ? { includesAllEntitled: flags.allEntitled }\n      : {}),\n  };\n  if (flags.products || flags.widgets.size > 0 || flags.tools.size > 0) {\n    body.products = applyRules(\n      before.products.map((product) => ({\n        slug: product.slug,\n        ...(product.widgetIds ? { widgetIds: product.widgetIds } : {}),\n        ...(product.toolNames ? { toolNames: product.toolNames } : {}),\n      })),\n      flags,\n    );\n  }\n  if (Object.keys(body).length === 0) {\n    throw usageError(\n      'Nothing to change.',\n      'Pass --products, --widgets, --tools, --name, --description, --default or --all-entitled.',\n    );\n  }\n\n  const kept = new Set((body.products ?? []).map((product) => product.slug));\n  const dropped = body.products\n    ? before.products.filter((product) => !kept.has(product.slug))\n    : [];\n  if (dropped.length > 0 && !args.yes) {\n    throw invalidStateError(\n      `${before.name} would no longer show ${dropped.map((product) => product.slug).join(', ')}: everyone on it stops seeing ${dropped.length === 1 ? 'it' : 'them'} in the app.`,\n      `Re-run with --yes: ekanos audiences set ${quote(before.name)} … --source ${source} --yes`,\n    );\n  }\n\n  const updated = await client.call((token) =>\n    updateAudience(env.host, token, { source, audience: name! }, body),\n  );\n  return ctx.succeed(\n    { host: env.host, ...updated },\n    renderAudience(\n      ctx.ui,\n      updated.audience,\n      `Updated ${updated.audience.name}`,\n      {\n        tone: dropped.length > 0 ? 'warn' : 'ok',\n      },\n    ),\n  );\n}\n\ninterface AudienceFlags {\n  name?: string;\n  description?: string;\n  isDefault: boolean;\n  allEntitled?: boolean;\n  /** Slugs, in the order given; absent when the flag was not passed. */\n  products?: string[];\n  widgets: Map<string, string[]>;\n  tools: Map<string, string[]>;\n}\n\nfunction readFlags(\n  flags: Record<string, string | boolean | string[]>,\n): AudienceFlags {\n  const text = (key: string) =>\n    typeof flags[key] === 'string' ? (flags[key] as string) : undefined;\n  const list = (key: string) => {\n    const value = flags[key];\n    return Array.isArray(value)\n      ? value\n      : typeof value === 'string'\n        ? [value]\n        : [];\n  };\n\n  const products = text('products');\n  return {\n    name: text('name'),\n    description: text('description'),\n    isDefault: flags.default === true,\n    allEntitled:\n      typeof flags['all-entitled'] === 'boolean'\n        ? (flags['all-entitled'] as boolean)\n        : undefined,\n    products:\n      products === undefined\n        ? undefined\n        : products === 'none'\n          ? []\n          : products\n              .split(',')\n              .map((slug) => slug.trim().toLowerCase())\n              .filter(Boolean),\n    widgets: ruleMap('widgets', list('widgets')),\n    tools: ruleMap('tools', list('tools')),\n  };\n}\n\n/** `linear=w1,w2` per product; `linear=` clears the rule (all of them). */\nfunction ruleMap(flag: string, values: string[]): Map<string, string[]> {\n  const rules = new Map<string, string[]>();\n  for (const value of values) {\n    const at = value.indexOf('=');\n    const slug = (at < 0 ? value : value.slice(0, at)).trim().toLowerCase();\n    if (!slug || at < 0) {\n      throw usageError(\n        `--${flag} takes <product>=<name>,<name>… (got \"${value}\").`,\n        `e.g. --${flag} linear=${flag === 'widgets' ? 'linear-issues' : 'create_issue'}; \"<product>=\" lifts the rule.`,\n      );\n    }\n    rules.set(\n      slug,\n      value\n        .slice(at + 1)\n        .split(',')\n        .map((item) => item.trim())\n        .filter(Boolean),\n    );\n  }\n  return rules;\n}\n\n/** The product set after `--products` and the widget and tool rules. */\nfunction applyRules(base: ProductRule[], flags: AudienceFlags): ProductRule[] {\n  const known = new Map(base.map((product) => [product.slug, product]));\n  const slugs = flags.products ?? base.map((product) => product.slug);\n\n  const products = slugs.map((slug): ProductRule => {\n    const existing = known.get(slug);\n    return {\n      slug,\n      ...(existing?.widgetIds ? { widgetIds: existing.widgetIds } : {}),\n      ...(existing?.toolNames ? { toolNames: existing.toolNames } : {}),\n    };\n  });\n  for (const [kind, rules] of [\n    ['widgetIds', flags.widgets],\n    ['toolNames', flags.tools],\n  ] as const) {\n    for (const [slug, names] of rules) {\n      const product = products.find((entry) => entry.slug === slug);\n      if (!product) {\n        throw usageError(\n          `--${kind === 'widgetIds' ? 'widgets' : 'tools'} names ${slug}, which the audience would not show.`,\n          'Add it with --products, or name a product that is in the audience.',\n        );\n      }\n      if (names.length > 0) product[kind] = names;\n      else delete product[kind];\n    }\n  }\n  return products;\n}\n\nfunction describeLines(audience: Audience): string[] {\n  const lines = [\n    [\n      audience.includesAllEntitled\n        ? 'every product the Source has'\n        : pluralize(audience.products.length, 'product'),\n      audience.isDefault ? 'given to every new team' : null,\n    ]\n      .filter(Boolean)\n      .join(' · '),\n  ];\n  if (!audience.includesAllEntitled) {\n    lines.push(\n      audience.products.length > 0\n        ? audience.products.map(productWords).join(', ')\n        : 'no products',\n    );\n  }\n  return lines;\n}\n\nfunction productWords(product: Audience['products'][number]): string {\n  const rules = [\n    product.widgetIds\n      ? `${pluralize(product.widgetIds.length, 'widget')}`\n      : null,\n    product.toolNames ? `${pluralize(product.toolNames.length, 'tool')}` : null,\n  ].filter(Boolean);\n  return rules.length > 0\n    ? `${product.slug} (only ${rules.join(', ')})`\n    : product.slug;\n}\n\nfunction renderAudience(\n  ui: Ui,\n  audience: Audience,\n  title: string,\n  options: { tone?: 'ok' | 'warn' } = {},\n): string {\n  return ui.result({\n    title,\n    tone: options.tone ?? 'ok',\n    rows: [\n      ['Audience', audience.name],\n      ...(audience.description\n        ? ([['About', audience.description]] as Array<[string, string]>)\n        : []),\n      ['Default', audience.isDefault ? 'yes, new teams start on it' : 'no'],\n      [\n        'Products',\n        audience.includesAllEntitled\n          ? 'every product the Source has, now and later'\n          : audience.products.length > 0\n            ? audience.products.map(productWords)\n            : 'none',\n      ],\n    ],\n    notes: [\n      'Teams and members are put on an audience with \"ekanos teams audience <team> [<audience>]\".',\n    ],\n  });\n}\n\nfunction quote(name: string): string {\n  return /^[A-Za-z0-9._-]+$/.test(name) ? name : `\"${name}\"`;\n}\n"]}

package/dist/commands/build.d.ts

@@ -0,0 +1,2 @@
+import type { ExperienceCommand } from './index-experience.js';
+export declare const buildCommand: ExperienceCommand;

package/dist/commands/build.js

@@ -0,0 +1,41 @@
+import { emitExperience } from '../experience/build.js';
+import { runExperienceChecks } from '../experience/checks.js';
+import { readExperienceProject } from '../experience/project.js';
+import { failOnErrors } from '../experience/report.js';
+export const buildCommand = {
+    name: 'build',
+    usage: [
+        '  build      Build an experience: gate (pins, boundary, definition), then emit',
+        '             dist/ and manifest.json',
+    ],
+    specs: {
+        dir: {
+            type: 'string',
+            description: 'Project directory (default: the current one)',
+        },
+    },
+    async run(ctx, args) {
+        const project = readExperienceProject(args.dir);
+        const result = await runExperienceChecks(project, {
+            typecheck: false,
+            loadDefinition: true,
+            inlineSdk: args.env.EKANOS_INLINE_SDK,
+        });
+        const failed = failOnErrors(ctx, 'build', result.findings, { slug: project.slug }, project.dir);
+        if (failed !== null)
+            return failed;
+        const output = await emitExperience(project, result);
+        return ctx.succeed({
+            slug: project.slug,
+            version: output.manifest.version,
+            digest: output.manifest.digest,
+            files: output.files,
+            widgets: output.manifest.widgets.length,
+            pages: output.manifest.pages.length,
+            workflowTemplates: output.manifest.workflowTemplates.length,
+            findings: result.findings,
+            changed: output.changed,
+        }, `Built ${project.slug}@${output.manifest.version} (${output.manifest.digest.slice(0, 18)}…): ${output.files.join(', ')}.`);
+    },
+};
+//# sourceMappingURL=build.js.map

package/dist/commands/build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../src/commands/build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,CAAC,MAAM,YAAY,GAAsB;IAC7C,IAAI,EAAE,OAAO;IACb,KAAK,EAAE;QACL,gFAAgF;QAChF,sCAAsC;KACvC;IACD,KAAK,EAAE;QACL,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,8CAA8C;SAC5D;KACF;IACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI;QACjB,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE;YAChD,SAAS,EAAE,KAAK;YAChB,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,iBAAiB;SACtC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,YAAY,CACzB,GAAG,EACH,OAAO,EACP,MAAM,CAAC,QAAQ,EACf,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EACtB,OAAO,CAAC,GAAG,CACZ,CAAC;QACF,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEnC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAErD,OAAO,GAAG,CAAC,OAAO,CAChB;YACE,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO;YAChC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;YAC9B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM;YACvC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM;YACnC,iBAAiB,EAAE,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM;YAC3D,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,EACD,SAAS,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC1H,CAAC;IACJ,CAAC;CACF,CAAC","sourcesContent":["import { emitExperience } from '../experience/build';\nimport { runExperienceChecks } from '../experience/checks';\nimport { readExperienceProject } from '../experience/project';\nimport { failOnErrors } from '../experience/report';\nimport type { ExperienceCommand } from './index-experience';\n\nexport const buildCommand: ExperienceCommand = {\n  name: 'build',\n  usage: [\n    '  build      Build an experience: gate (pins, boundary, definition), then emit',\n    '             dist/ and manifest.json',\n  ],\n  specs: {\n    dir: {\n      type: 'string',\n      description: 'Project directory (default: the current one)',\n    },\n  },\n  async run(ctx, args) {\n    const project = readExperienceProject(args.dir);\n    const result = await runExperienceChecks(project, {\n      typecheck: false,\n      loadDefinition: true,\n      inlineSdk: args.env.EKANOS_INLINE_SDK,\n    });\n\n    const failed = failOnErrors(\n      ctx,\n      'build',\n      result.findings,\n      { slug: project.slug },\n      project.dir,\n    );\n    if (failed !== null) return failed;\n\n    const output = await emitExperience(project, result);\n\n    return ctx.succeed(\n      {\n        slug: project.slug,\n        version: output.manifest.version,\n        digest: output.manifest.digest,\n        files: output.files,\n        widgets: output.manifest.widgets.length,\n        pages: output.manifest.pages.length,\n        workflowTemplates: output.manifest.workflowTemplates.length,\n        findings: result.findings,\n        changed: output.changed,\n      },\n      `Built ${project.slug}@${output.manifest.version} (${output.manifest.digest.slice(0, 18)}…): ${output.files.join(', ')}.`,\n    );\n  },\n};\n"]}

package/dist/commands/check.d.ts

@@ -0,0 +1,2 @@
+import type { ExperienceCommand } from './index-experience.js';
+export declare const checkCommand: ExperienceCommand;