@ekanos/cli 0.17.1 → 0.18.0

package/dist/commands/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAA2B,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,KAAM,CAAC;AAEtC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AA0CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,IAAgB;;IAEhB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,SAAS;KAC7B,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,CAAC,CAAC;YACE,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC;SACpC,CAAC;IAEN,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,iBAAiB,CACrB,mDAAmD,GAAG,CAAC,IAAI,GAAG,EAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,2BAA2B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACpD,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,8DAA8D;gBAC5D,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,WAAW,GAAG,MAAM,kBAAkB,CACpC,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,MAAM,EACd,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CACL,4BAA4B,GAAG,CAAC,IAAI,mCAAmC;gBACrE,OAAC,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ;YACd,GAAG,CAAC,GAAG,CACL,sEAAsE;gBACpE,mEAAmE;gBACnE,2BAA2B,CAC9B,CAAC;IACN,CAAC;IAED,MAAM,kBAAkB,GACtB,OAAO,IAAI,WAAW;QACpB,CAAC,CAAC,OAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,iBAAiB,GAAG,WAAW;QACnC,CAAC,CAAC,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,MAAK,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,QAAQ,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QAC/D,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,GAAG,CAAC,OAAO,2DAEd,IAAI,EAAE,GAAG,CAAC,IAAI,IACX,OAAO,KACV,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EACnC,OAAO,EAAE,OAAO;YACd,CAAC,iCACM,OAAO,KACV,iBAAiB,EAAE,WAAW;oBAC5B,CAAC,CAAC,OAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,QAAQ,mCAAI,EAAE,CAAC;oBACtC,CAAC,CAAC,IAAI,IAEZ,CAAC,CAAC,IAAI,EACR,WAAW,KACR,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAE1C,YAAY,CACV,GAAG,CAAC,EAAE,QACN,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,mCAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,EAAE,QAAQ,QAAE,IAAI,CAAC,QAAQ,mCAAI,KAAK,EAAE,GAAG,QAAE,IAAI,CAAC,GAAG,mCAAI,KAAK,EAAE,EAC5D,QAAQ,QACR,IAAI,CAAC,GAAG,mCAAI,IAAI,IAAI,EAAE,CACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,GAA8C,EAC9C,OAAsB,EACtB,IAAgB;;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,YAAY,CAAC;IAEzC,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,YAAY,OAAO,CAAC,IAAI,IAAI,aAAa,OAAO,GAAG,CAAC,IAAI,GAAG;QAC9E,kBAAkB,sBAAsB,GAAG,IAAI,KAAK,CACvD,CAAC;IAEF,SAAS,CAAC;QACR,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,qCAAqC;gBAC9D,6BAA6B,EAC/B,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,MAAM;YACzD,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAC9D,CAAC;QAEF,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,YAAiC,EACjC,IAAY,EACZ,OAAe;;IAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,aAAO,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,mCAAI,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAe,EACf,IAAY,EACZ,OAA0B;;IAE1B,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,QAAE,OAAO,CAAC,QAAQ,mCAAI,EAAE;QAChC,MAAM,QAAE,OAAO,CAAC,MAAM,mCAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,4BAA4B;YACpD,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,SAAS,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EACvE,iEAAiE;YAC/D,uCAAuC,CAC1C,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAChB,IAAI,EACJ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE;YACJ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAU,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAA8C,EAC9C,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACrE,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,MAAM,QAAE,MAAM,CAAC,OAAO,CAAC,MAAM,mCAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,kBAAkB,CAC/B,GAA8C,EAC9C,OAAsB,EACtB,MAAc,EACd,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,CAAC,IAAI,EACR,SAAS,CAAC,WAAW,EACrB,MAAM,EACN;QACE,MAAM;KACP,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,2CAA2C,EACtE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAA8C,EAC9C,OAAsB,EACtB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAsC;IAEtC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBACP,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC,GAAA,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAS;;IACvD,MAAM,SAAS,SAAG,OAAO,CAAC,OAAO,mCAAI,OAAO,CAAC,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,OAA0B;;IAE1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,SAAG,OAAO,CAAC,UAAU,mCAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,SAAG,OAAO,CAAC,SAAS,mCAAI,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IACzC,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAM,EACN,QAAsC,EACtC,GAAS;IAET,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;IAEjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7B,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC;QACE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,EAAM,EACN,GAAW,EACX,MAAoC,EACpC,QAAiB;;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT;YACE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;YAC9B,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,QAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;IAEF,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GACjB,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,sBAAC,OAAC,CAAC,CAAC,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,CAAC,CAAC,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,GAAA,CACzD,CAAC;IAEF,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAUD,MAAM,UAAU,oBAAoB,CAClC,WAA8B;;IAE9B,MAAM,MAAM,SAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC;IACxE,OAAO;QACL,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,IAAI,EAAE,WAAW,CAAC,IAAI;QACtB,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM;QAC1C,aAAa,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,mCAAI,IAAI;QACtC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,QAAuB;;;IAEvB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;wBACT,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,mCAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,EAAE,mCAAI,SAAS;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,OAAO,CAAC,MAAM;gBACZ,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxD,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAM,EACN,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,EAAM,EACN,GAAW,EACX,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,WAAuC,EACvC,IAAyC,EACzC,QAAuB,EACvB,GAAS;;IAET,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,CAAC,OAAO;YACR,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,KAAK,GAAa;QACtB,EAAE,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;YAC5D,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1B,CAAC;KACH,CAAC;IAEF,IAAI,IAAI,IAAI,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,SACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3C,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,EAAE,EACF,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,aAAa,WACxC,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,MAAA,OAAO,CAAC,aAAa,mCAAI,GAAG,IACtC,MAAA,OAAO,CAAC,WAAW,mCAAI,GACzB,EAAE,CACH,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,QAAE,MAAM,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  refreshStoredSession,\n  resolveAuthEnvironment,\n  resolveIdentity,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  CliError,\n  authRequiredError,\n  gateFailedError,\n  preconditionError,\n} from '../errors';\nimport { ERROR_CODES, type ExitCode } from '../exit-codes';\nimport { formatFindings, relativeTime } from '../findings-renderer';\nimport { EKANOS_CONFIG_FILENAME, loadProject } from '../project';\nimport {\n  type SubmissionListing,\n  type SubmissionVersion,\n  listSubmissions,\n} from '../publish-api';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport { type ResultRow, type Ui, shortHost } from '../ui';\nimport { announceUpdate, checkForUpdate } from '../update-notice';\nimport { readProjectVersion } from './publish';\n\n/** `--watch`'s poll interval — matches the mission brief exactly. */\nconst WATCH_POLL_INTERVAL_MS = 30_000;\n\n/**\n * The states `--watch` stops on. `submitted` is the only non-terminal state\n * a version can be in when watching starts (an already-`gated`/`dev`/\n * `rejected` version resolves on the very first check, no polling needed).\n */\nconst WATCH_TERMINAL_STATES = new Set(['gated', 'dev', 'rejected']);\n\nexport interface StatusArgs {\n  host?: string;\n  /** Project directory (may contain ekanos.json). Defaults to cwd. */\n  dir: string;\n  env: Record<string, string | undefined>;\n  /** Render each version's full finding list, not just error/warn counts. */\n  findings?: boolean;\n  /**\n   * Expand \"OTHER INTEGRATIONS IN SOURCE …\" from one summary line per\n   * integration into the same VERSION/STATE/AGE/FINDINGS table shape THIS\n   * PROJECT's section uses. Human mode only — the JSON envelope's\n   * `submissions` already carries every integration's full version history\n   * regardless of this flag.\n   */\n  all?: boolean;\n  /**\n   * Block until this project's current (slug, version) submission reaches a\n   * terminal-for-waiting state (gated, dev, rejected), polling every 30s.\n   * Changes the command's exit-code contract — see `runStatus`'s docstring.\n   */\n  watch?: boolean;\n  /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injectable \"now\" for deterministic AGE rendering in tests. Defaults to `new Date()`. */\n  now?: Date;\n}\n\ninterface SessionReport {\n  authenticated: boolean;\n  user?: { id: string; email: string | null; name: string | null };\n  expiresAt?: string;\n  hint?: string;\n}\n\ninterface ProjectReport {\n  dir: string;\n  slug: string;\n  source: string | null;\n}\n\n/**\n * `status` — the read verb: where am I pointed, who am I, and what has this\n * project submitted?\n *\n * Three sections, each degrading gracefully rather than failing:\n *\n *  - **session** — whoami's server-side identity check, but an absent or dead\n *    session reports `authenticated: false` with a hint instead of exit 4. A\n *    partner asking \"what is my state?\" must get an answer, not an error whose\n *    answer it is.\n *  - **project** — the ekanos.json in `--dir` (default cwd), when there is\n *    one. No project is an ordinary state for `status`, never an error.\n *  - **submissions** — `GET /api/partner/submissions?source=…` for the\n *    project's resolved source, only when both a session and a source exist.\n *    Server errors here DO map through the taxonomy: an unreachable host or a\n *    missing source is a fault to surface, not a state to absorb.\n *\n * Exit 0 whenever the report itself could be assembled — EXCEPT under\n * `--watch` (see below), whose exit code carries the gate's verdict instead.\n *\n * The submission listing always requests the full `?detail=findings` shape\n * server-side (needed so THIS PROJECT's latest-error auto-inline rendering\n * — see `humanSummary` — has findings to inspect without a second\n * round-trip). `--findings` no longer changes what's FETCHED; it changes\n * what's RENDERED inline in human mode: every shown version's findings,\n * not just the latest's error-severity ones.\n *\n * `--watch` turns `status` into a blocking wait: it requires a project with\n * a resolved source and a live session (both are PRECONDITIONs here, not\n * degraded-to-false states — there is nothing to watch without them), then\n * polls `GET /api/partner/submissions?detail=findings` every 30s for THIS\n * project's current (slug, package.json version) submission until it reaches\n * a terminal-for-waiting state: `gated`/`dev` exit 0, `rejected` exits 10\n * (GATE_FAILED) with the findings carried in `data` — the same shape\n * `publish`'s own gate refusal uses, so an agent's fix-then-retry loop\n * branches on it identically whether the gate ran inline (future) or via\n * this poll (today). `--json --watch` still emits exactly ONE envelope, at\n * completion — the polling itself only ever writes to stderr via `ctx.log`.\n *\n * Human-mode rendering is PROJECT-SCOPED: the server lists every\n * submission for the resolved source (an org-level bucket shared by every\n * project publishing there — `listSubmissions` has no server-side slug\n * filter, see `publish-api.ts`'s wire contract), so \"THIS PROJECT\" groups\n * the rows matching this project's own slug and \"OTHER INTEGRATIONS IN\n * SOURCE …\" collapses everything else to one summary line per integration\n * (or, with `--all`, the same table shape).\n * The `--json` envelope stays additive-compatible: `submissions` is still\n * the full, unfiltered list, with `data.project.scopedSubmissions` and\n * `data.otherIntegrations` layered on top for a consumer that wants the\n * pre-grouped view without re-deriving it.\n */\nexport async function runStatus(\n  ctx: CliContext,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n\n  const stored = env.store.read(env.host);\n\n  const notice = await checkForUpdate({\n    env: args.env,\n    host: env.host,\n    session: stored ?? undefined,\n  });\n  announceUpdate(ctx, notice);\n\n  const session = stored\n    ? await probeSession(env, stored)\n    : {\n        authenticated: false,\n        hint: loginHint(env, 'to sign in.'),\n      };\n\n  // probeSession may have refreshed the session — persisting a NEW access\n  // token and ROTATING the refresh token on disk. Re-read before using it:\n  // the pre-probe object now holds a dead access token and an already-spent\n  // refresh token, and presenting those would turn \"logged in, token was\n  // merely stale\" into a hard exit-4 — the one failure this command promises\n  // never to produce.\n  const live = stored ? (env.store.read(env.host) ?? stored) : null;\n\n  const project = readProjectReport(args.dir);\n\n  if (args.watch) {\n    if (!session.authenticated || !live) {\n      throw authRequiredError(\n        `\"ekanos status --watch\" needs a live session on ${env.host}.`,\n        loginHint(env),\n      );\n    }\n\n    if (!project) {\n      throw preconditionError(\n        `No ekanos.json found in ${path.resolve(args.dir)}.`,\n        'Run \"ekanos publish\" at least once before watching its gate result.',\n      );\n    }\n\n    if (!project.source) {\n      throw preconditionError(\n        'This project has no \"source\" in ekanos.json yet.',\n        'Run \"ekanos publish\" at least once (it saves the source you ' +\n          'publish to) before watching its gate result.',\n      );\n    }\n\n    return runWatch(ctx, env, project, args);\n  }\n\n  let submissions: SubmissionListing[] | null = null;\n\n  if (project?.source && session.authenticated && live) {\n    // Always the full `?detail=findings` shape, `--findings` or not: THIS\n    // PROJECT's auto-inline latest-error rendering (see `humanSummary`)\n    // needs the findings array to decide whether to render, not just the\n    // counts — and `data.project.scopedSubmissions` carries the same\n    // richer shape in the JSON envelope regardless of the flag. `--findings`\n    // now controls how much of it gets rendered inline, not what's fetched.\n    submissions = await listWithOneRefresh(\n      env,\n      live,\n      project.source,\n      'findings',\n    );\n  } else if (project?.source && !session.authenticated) {\n    // Human mode says this in the result block's note; the stderr line is\n    // for JSON callers, who never see that block.\n    if (ctx.jsonMode) {\n      ctx.log(\n        `ekanos: not logged in to ${env.host} — skipping the submission list. ` +\n          (session.hint ?? ''),\n      );\n    }\n  } else if (project && !project.source) {\n    if (ctx.jsonMode)\n      ctx.log(\n        'ekanos: this project has no \"source\" in ekanos.json yet — the first ' +\n          '\"ekanos publish --source <slug>\" saves one, and status will list ' +\n          'submissions from then on.',\n      );\n  }\n\n  const projectIntegration =\n    project && submissions\n      ? (submissions.find((s) => s.slug === project.slug) ?? null)\n      : null;\n\n  const otherIntegrations = submissions\n    ? submissions\n        .filter((s) => s.slug !== project?.slug)\n        .map((s) => summarizeIntegration(s))\n    : null;\n\n  // Best-effort, human-mode-only add-on for the header's \"publish target\n  // (+ seat role)\" line — same degrade-to-null contract as `whoami`'s own\n  // seat lookup. Skipped entirely in JSON mode: nothing in the envelope\n  // needs it, and it would otherwise be an extra network round-trip every\n  // existing `--json` caller pays for no reason.\n  const seatRole =\n    !ctx.jsonMode && project?.source && session.authenticated && live\n      ? await fetchSeatRoleQuietly(env, live, project.source)\n      : null;\n\n  return ctx.succeed(\n    {\n      host: env.host,\n      ...session,\n      credentialsPath: env.store.filePath,\n      project: project\n        ? {\n            ...project,\n            scopedSubmissions: submissions\n              ? (projectIntegration?.versions ?? [])\n              : null,\n          }\n        : null,\n      submissions,\n      ...(otherIntegrations !== null ? { otherIntegrations } : {}),\n      ...(notice ? { toolchain: notice } : {}),\n    },\n    humanSummary(\n      ctx.ui,\n      project?.dir ?? path.resolve(args.dir),\n      env.host,\n      session,\n      project,\n      submissions,\n      { findings: args.findings ?? false, all: args.all ?? false },\n      seatRole,\n      args.now ?? new Date(),\n    ),\n  );\n}\n\n/**\n * The `--watch` poll loop. Targets THIS project's current submission —\n * `project.slug` + the version presently in `package.json` (the same value\n * `publish` would submit right now) — not \"whatever's most recent,\" so\n * watching after a publish can never resolve against a stale prior version.\n */\nasync function runWatch(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  project: ProjectReport,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const source = project.source;\n  if (!source) {\n    // Unreachable — the caller already checked — but keeps this function's\n    // own type honest without a non-null assertion.\n    throw preconditionError(\n      'This project has no \"source\" in ekanos.json yet.',\n      'Run \"ekanos publish\" at least once before watching its gate result.',\n    );\n  }\n\n  const targetVersion = readProjectVersion(project.dir);\n  const sleep = args.sleep ?? defaultSleep;\n\n  // Glyph-only restyle — the poll contract itself (exit codes, timing,\n  // JSON envelope) is unchanged.\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n\n  ctx.log(\n    `${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +\n      `(polling every ${WATCH_POLL_INTERVAL_MS / 1000}s)…`,\n  );\n\n  for (;;) {\n    // Re-read the session from the credential store on EVERY iteration —\n    // never carry one over in a closure. Auth0 rotates the refresh token on\n    // every use (see `refreshStoredSession`'s docstring), so a token this\n    // loop already consumed is dead by the next iteration; the store is the\n    // persisted source of truth for whichever refresh most recently landed\n    // — this loop's own (via `listWithOneRefresh` below, which persists\n    // through `refreshStoredSession`), or a concurrent one from another\n    // process (another terminal running login/publish/status --watch\n    // against the same host). Threading the refreshed session back out of\n    // `listWithOneRefresh` instead would only cover the first case.\n    const current = env.store.read(env.host);\n\n    if (!current) {\n      throw authRequiredError(\n        `The session for ${env.host} is gone — \"ekanos status --watch\" ` +\n          'cannot continue without it.',\n        loginHint(env),\n      );\n    }\n\n    const integrations = await listWithOneRefresh(\n      env,\n      current,\n      source,\n      'findings',\n    );\n    const version = findVersion(integrations, project.slug, targetVersion);\n\n    if (version && WATCH_TERMINAL_STATES.has(version.state)) {\n      return reportWatchOutcome(ctx, project.slug, version);\n    }\n\n    ctx.log(\n      `${waitGlyph}${prefix}${project.slug}@${targetVersion} is ` +\n        `${version ? version.state : 'not visible yet'} — waiting…`,\n    );\n\n    await sleep(WATCH_POLL_INTERVAL_MS);\n  }\n}\n\nfunction findVersion(\n  integrations: SubmissionListing[],\n  slug: string,\n  version: string,\n): SubmissionVersion | null {\n  const integration = integrations.find((i) => i.slug === slug);\n  return integration?.versions.find((v) => v.version === version) ?? null;\n}\n\nfunction reportWatchOutcome(\n  ctx: CliContext,\n  slug: string,\n  version: SubmissionVersion,\n): ExitCode {\n  const data = {\n    slug,\n    version: version.version,\n    state: version.state,\n    gatedAt: version.gatedAt,\n    errorCount: version.errorCount,\n    warnCount: version.warnCount,\n    findings: version.findings ?? [],\n    stages: version.stages ?? [],\n  };\n\n  if (version.state === 'rejected') {\n    return ctx.fail(\n      gateFailedError(\n        `${slug}@${version.version} was rejected by the gate ` +\n          `(${data.errorCount ?? 0} error${data.errorCount === 1 ? '' : 's'}).`,\n        'Resolve the error-severity findings in data.findings, bump the ' +\n          'version, and re-run \"ekanos publish\".',\n      ),\n      data,\n    );\n  }\n\n  return ctx.succeed(\n    data,\n    ctx.ui.result({\n      title: `${slug}@${version.version} is ${version.state}`,\n      tone: data.warnCount ? 'warn' : 'ok',\n      rows: [\n        ['State', version.state],\n        ...(data.warnCount\n          ? [['Warnings', String(data.warnCount)] as const]\n          : []),\n      ],\n    }),\n  );\n}\n\nfunction defaultSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/**\n * whoami's identity resolution, with AUTH_REQUIRED absorbed into\n * `authenticated: false`. Anything else — network, precondition, MFA mapped\n * to auth by `fetchIdentity` — still propagates: \"the host was unreachable\"\n * must never be reported as \"you are logged out\".\n */\nasync function probeSession(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  stored: StoredSession,\n): Promise<SessionReport> {\n  try {\n    const { identity, session } = await resolveIdentity(env, stored);\n\n    return {\n      authenticated: true,\n      user: { id: identity.id, email: identity.email, name: identity.name },\n      expiresAt: session.expiresAt,\n    };\n  } catch (error) {\n    if (error instanceof CliError && error.code === ERROR_CODES.AUTH_REQUIRED) {\n      return { authenticated: false, hint: error.hint };\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Lenient project read: no ekanos.json means \"not in a project\", which is an\n * answer, not an error. An ekanos.json that EXISTS but does not load keeps\n * `loadProject`'s strict behaviour — a broken project file is a fault the\n * partner needs named, whatever verb they ran.\n */\nfunction readProjectReport(dir: string): ProjectReport | null {\n  const projectDir = path.resolve(dir);\n\n  if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME))) {\n    return null;\n  }\n\n  const loaded = loadProject(projectDir);\n\n  return {\n    dir: loaded.projectDir,\n    slug: loaded.primary.slug,\n    source: loaded.project.source ?? null,\n  };\n}\n\n/** Mirrors publish's one-refresh-one-retry on a stale access token. */\nasync function listWithOneRefresh(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n  detail?: 'findings',\n): Promise<SubmissionListing[]> {\n  const first = await listSubmissions(env.host, session.accessToken, source, {\n    detail,\n  });\n\n  if (first.status === 'ok') return first.integrations;\n\n  const refreshed = await refreshStoredSession(env, session);\n  const second = await listSubmissions(\n    env.host,\n    refreshed.accessToken,\n    source,\n    {\n      detail,\n    },\n  );\n\n  if (second.status === 'ok') return second.integrations;\n\n  // Authenticated a moment ago, unauthorized twice here: report the list as\n  // unavailable rather than the session as dead — probeSession already proved\n  // it. This is unreachable in practice; belt and braces for a racing revoke.\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the submission list.`,\n    loginHint(env),\n  );\n}\n\n/**\n * `whoami`'s seat-lookup degradation, narrowed to one source's role: a\n * network hiccup, MFA, or a deployment predating the seats route must never\n * turn a working `status` into a failing one — the header simply omits the\n * \"(role)\" suffix.\n */\nasync function fetchSeatRoleQuietly(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n): Promise<string | null> {\n  try {\n    const result = await fetchSeatsWithOneRefresh(env, session);\n    if (result.status !== 'ok') return null;\n\n    const seat = result.sources.find((s) => s.slug === source);\n    return seat ? seat.roles.join(', ') : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction tryReadProjectVersion(dir: string): string | null {\n  try {\n    return readProjectVersion(dir);\n  } catch {\n    return null;\n  }\n}\n\nfunction timestampMs(iso: string | null | undefined): number {\n  if (!iso) return 0;\n  const parsed = new Date(iso).getTime();\n  return Number.isNaN(parsed) ? 0 : parsed;\n}\n\n/**\n * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions\n * with no timestamp at all) keep their original, server-given order —\n * `Array#sort` is stable, and a stable no-op is the right answer when there\n * is nothing to compare.\n */\nexport function sortVersionsNewestFirst(\n  versions: readonly SubmissionVersion[],\n): SubmissionVersion[] {\n  return [...versions].sort(\n    (a, b) =>\n      timestampMs(b.gatedAt ?? b.submittedAt) -\n      timestampMs(a.gatedAt ?? a.submittedAt),\n  );\n}\n\nfunction versionAge(version: SubmissionVersion, now: Date): string {\n  const timestamp = version.gatedAt ?? version.submittedAt;\n  return timestamp ? relativeTime(timestamp, now) : '—';\n}\n\nexport function findingsCellParts(\n  ui: Ui,\n  version: SubmissionVersion,\n): { text: string; paint: (text: string) => string } {\n  if (version.errorCount === null && version.warnCount === null) {\n    return { text: '—', paint: ui.dim };\n  }\n\n  const errorCount = version.errorCount ?? 0;\n  const warnCount = version.warnCount ?? 0;\n\n  if (errorCount === 0 && warnCount === 0) {\n    return { text: '0', paint: (text) => text };\n  }\n\n  const parts: string[] = [];\n  if (errorCount > 0) parts.push(`${errorCount}E`);\n  if (warnCount > 0) parts.push(`${warnCount}W`);\n\n  return { text: parts.join(' '), paint: errorCount > 0 ? ui.err : ui.warn };\n}\n\nexport function stateColorFor(ui: Ui, state: string): (text: string) => string {\n  if (state === 'dev' || state === 'prod') return ui.ok;\n  if (state === 'gated') return ui.accent;\n  if (state === 'submitted') return ui.dim;\n  if (state === 'rejected' || state === 'revoked') return ui.err;\n  return (text) => text;\n}\n\n/**\n * A VERSION/STATE/AGE/FINDINGS table, built by hand rather than via\n * `ui.table`: STATE and FINDINGS need per-cell color, and `ui.table` sizes\n * columns from the raw cell strings it's handed — a colored cell's ANSI\n * escapes would inflate that width and misalign the column. `ui.ts`'s own\n * doc comment on `padCell` names this exact tradeoff (\"ignoring color codes\n * in length math is the CALLER's job — pad before coloring, never after\"),\n * so this pads against the PLAIN text first and colors the already-padded\n * string — the same rule `ui.table` documents, just applied here instead of\n * inside it.\n */\nexport function renderVersionsTable(\n  ui: Ui,\n  versions: readonly SubmissionVersion[],\n  now: Date,\n): string {\n  const headers = ['VERSION', 'STATE', 'AGE', 'FINDINGS'] as const;\n\n  const rows = versions.map((version) => {\n    const findings = findingsCellParts(ui, version);\n    return {\n      version: version.version,\n      state: version.state,\n      age: versionAge(version, now),\n      findingsText: findings.text,\n      findingsPaint: findings.paint,\n      statePaint: stateColorFor(ui, version.state),\n    };\n  });\n\n  const widths: [number, number, number, number] = [\n    Math.max(headers[0].length, ...rows.map((r) => r.version.length)),\n    Math.max(headers[1].length, ...rows.map((r) => r.state.length)),\n    Math.max(headers[2].length, ...rows.map((r) => r.age.length)),\n    Math.max(headers[3].length, ...rows.map((r) => r.findingsText.length)),\n  ];\n\n  const headerLine = headers\n    .map((header, i) => ui.dim(header.padEnd(widths[i]!)))\n    .join('  ');\n\n  const bodyLines = rows.map((row) =>\n    [\n      row.version.padEnd(widths[0]),\n      row.statePaint(row.state.padEnd(widths[1])),\n      row.age.padEnd(widths[2]),\n      row.findingsPaint(row.findingsText.padEnd(widths[3])),\n    ].join('  '),\n  );\n\n  return [headerLine, ...bodyLines].join('\\n');\n}\n\n/**\n * The findings shown directly under THIS PROJECT's table. `--findings`\n * forces every version's own findings inline; otherwise only the LATEST\n * version's ERROR-severity findings auto-render (the moment a partner most\n * needs them, no flag required), and a dim pointer at `ekanos status\n * --findings` covers everything else with a nonzero count.\n */\nfunction renderThisProjectFindings(\n  ui: Ui,\n  cwd: string,\n  sorted: readonly SubmissionVersion[],\n  forceAll: boolean,\n): string | null {\n  if (forceAll) {\n    const blocks = sorted\n      .filter((v) => v.findings && v.findings.length > 0)\n      .map((v) =>\n        [\n          `  ${ui.dim(`${v.version}:`)}`,\n          indentLines(formatFindings(ui, v.findings!, { cwd }), 4),\n        ].join('\\n'),\n      );\n\n    return blocks.length > 0 ? blocks.join('\\n\\n') : null;\n  }\n\n  const [latest, ...older] = sorted;\n  const latestErrors = (latest?.findings ?? []).filter(\n    (f) => f.severity === 'error',\n  );\n\n  if (latest && latestErrors.length > 0 && latest.findings) {\n    return indentLines(formatFindings(ui, latest.findings, { cwd }), 2);\n  }\n\n  const latestNonzero =\n    (latest?.errorCount ?? 0) > 0 || (latest?.warnCount ?? 0) > 0;\n  const olderNonzero = older.some(\n    (v) => (v.errorCount ?? 0) > 0 || (v.warnCount ?? 0) > 0,\n  );\n\n  return latestNonzero || olderNonzero\n    ? `  ${ui.dim('→ details: ekanos status --findings')}`\n    : null;\n}\n\nexport interface OtherIntegrationSummary {\n  slug: string;\n  name: string | null;\n  versionsCount: number;\n  latestVersion: string | null;\n  latestState: string | null;\n}\n\nexport function summarizeIntegration(\n  integration: SubmissionListing,\n): OtherIntegrationSummary {\n  const latest = sortVersionsNewestFirst(integration.versions)[0] ?? null;\n  return {\n    slug: integration.slug,\n    name: integration.name,\n    versionsCount: integration.versions.length,\n    latestVersion: latest?.version ?? null,\n    latestState: latest?.state ?? null,\n  };\n}\n\nfunction indentLines(block: string, spaces: number): string {\n  const prefix = ' '.repeat(spaces);\n  return block\n    .split('\\n')\n    .map((line) => `${prefix}${line}`)\n    .join('\\n');\n}\n\nfunction buildHeaderRows(\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  seatRole: string | null,\n): readonly ResultRow[] {\n  const rows: ResultRow[] = [];\n\n  if (session.authenticated) {\n    rows.push([\n      'Account',\n      session.user?.email ?? session.user?.id ?? 'unknown',\n    ]);\n  }\n  rows.push(['Host', shortHost(host)]);\n\n  if (project) {\n    const version = tryReadProjectVersion(project.dir);\n    rows.push([\n      'Project',\n      version ? `${project.slug}@${version}` : project.slug,\n    ]);\n    rows.push([\n      'Target',\n      project.source\n        ? `${project.source}${seatRole ? ` · ${seatRole}` : ''}`\n        : 'none yet',\n    ]);\n  }\n\n  return rows;\n}\n\n/**\n * The closing `ui.nextAction` line, chosen from the LATEST version of THIS\n * project — `null` (no closing line at all) whenever nothing is pending:\n * no submission yet, or the latest is already `dev`/`prod`/`revoked`.\n */\nexport function buildNextAction(\n  ui: Ui,\n  latest: SubmissionVersion | null,\n): string | null {\n  if (!latest) return null;\n\n  if (latest.state === 'rejected') {\n    return ui.nextAction('ekanos status --findings', 'see what failed');\n  }\n  if (latest.state === 'gated') {\n    return `\\n${ui.dim('→ awaiting admission (runs hourly)')}`;\n  }\n  if (latest.state === 'submitted') {\n    return `\\n${ui.dim('→ awaiting gate result')}`;\n  }\n\n  return null;\n}\n\nfunction humanSummary(\n  ui: Ui,\n  cwd: string,\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  submissions: SubmissionListing[] | null,\n  args: { findings: boolean; all: boolean },\n  seatRole: string | null,\n  now: Date,\n): string {\n  const note = !session.authenticated\n    ? session.hint\n    : !project\n      ? 'No ekanos.json here, so there is no project to report on.'\n      : !project.source\n        ? 'No \"source\" configured yet. The first \"ekanos publish --source <slug>\" saves one.'\n        : undefined;\n\n  const lines: string[] = [\n    ui.result({\n      title: session.authenticated ? 'Signed in' : 'Not signed in',\n      tone: session.authenticated ? 'ok' : 'warn',\n      rows: buildHeaderRows(host, session, project, seatRole),\n      notes: note ? [note] : [],\n    }),\n  ];\n\n  if (note || !project?.source || !submissions) {\n    return lines.join('\\n');\n  }\n\n  const projectIntegration =\n    submissions.find((s) => s.slug === project.slug) ?? null;\n  const others = submissions.filter((s) => s.slug !== project.slug);\n\n  lines.push('', ui.section('this project'));\n\n  const sorted = projectIntegration\n    ? sortVersionsNewestFirst(projectIntegration.versions)\n    : [];\n\n  if (sorted.length === 0) {\n    lines.push(`  ${ui.dim('no submissions yet for this project.')}`);\n  } else {\n    lines.push(indentLines(renderVersionsTable(ui, sorted, now), 2));\n\n    const findingsBlock = renderThisProjectFindings(\n      ui,\n      cwd,\n      sorted,\n      args.findings,\n    );\n    if (findingsBlock) lines.push('', findingsBlock);\n  }\n\n  lines.push('', ui.section(`other integrations in source ${project.source}`));\n\n  if (others.length === 0) {\n    lines.push(`  ${ui.dim('none.')}`);\n  } else if (args.all) {\n    for (const integration of others) {\n      const otherSorted = sortVersionsNewestFirst(integration.versions);\n      lines.push(`  ${ui.dim(integration.slug)}`);\n      lines.push(indentLines(renderVersionsTable(ui, otherSorted, now), 4));\n    }\n  } else {\n    for (const integration of others) {\n      const summary = summarizeIntegration(integration);\n      lines.push(\n        `  ${ui.dim(\n          `${summary.slug} — ${summary.versionsCount} version${\n            summary.versionsCount === 1 ? '' : 's'\n          }, latest ${summary.latestVersion ?? '?'} ${\n            summary.latestState ?? '?'\n          }`,\n        )}`,\n      );\n    }\n  }\n\n  const action = buildNextAction(ui, sorted[0] ?? null);\n  if (action) lines.push(action);\n\n  return lines.join('\\n');\n}\n"]}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAA2B,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,KAAM,CAAC;AAEtC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AA0CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,IAAgB;;IAEhB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,SAAS;KAC7B,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,CAAC,CAAC;YACE,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC;SACpC,CAAC;IAEN,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,iBAAiB,CACrB,mDAAmD,GAAG,CAAC,IAAI,GAAG,EAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,2BAA2B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACpD,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,8DAA8D;gBAC5D,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,WAAW,GAAG,MAAM,kBAAkB,CACpC,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,MAAM,EACd,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CACL,4BAA4B,GAAG,CAAC,IAAI,mCAAmC;gBACrE,OAAC,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ;YACd,GAAG,CAAC,GAAG,CACL,sEAAsE;gBACpE,mEAAmE;gBACnE,2BAA2B,CAC9B,CAAC;IACN,CAAC;IAED,MAAM,kBAAkB,GACtB,OAAO,IAAI,WAAW;QACpB,CAAC,CAAC,OAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,iBAAiB,GAAG,WAAW;QACnC,CAAC,CAAC,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,MAAK,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,QAAQ,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QAC/D,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,GAAG,CAAC,OAAO,2DAEd,IAAI,EAAE,GAAG,CAAC,IAAI,IACX,OAAO,KACV,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EACnC,OAAO,EAAE,OAAO;YACd,CAAC,iCACM,OAAO,KACV,iBAAiB,EAAE,WAAW;oBAC5B,CAAC,CAAC,OAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,QAAQ,mCAAI,EAAE,CAAC;oBACtC,CAAC,CAAC,IAAI,IAEZ,CAAC,CAAC,IAAI,EACR,WAAW,KACR,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAE1C,YAAY,CACV,GAAG,CAAC,EAAE,QACN,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,mCAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,EAAE,QAAQ,QAAE,IAAI,CAAC,QAAQ,mCAAI,KAAK,EAAE,GAAG,QAAE,IAAI,CAAC,GAAG,mCAAI,KAAK,EAAE,EAC5D,QAAQ,QACR,IAAI,CAAC,GAAG,mCAAI,IAAI,IAAI,EAAE,CACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,GAA8C,EAC9C,OAAsB,EACtB,IAAgB;;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,YAAY,CAAC;IAEzC,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,YAAY,OAAO,CAAC,IAAI,IAAI,aAAa,OAAO,GAAG,CAAC,IAAI,GAAG;QAC9E,kBAAkB,sBAAsB,GAAG,IAAI,KAAK,CACvD,CAAC;IAEF,SAAS,CAAC;QACR,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,qCAAqC;gBAC9D,6BAA6B,EAC/B,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,MAAM;YACzD,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAC9D,CAAC;QAEF,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,YAAiC,EACjC,IAAY,EACZ,OAAe;;IAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,aAAO,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,mCAAI,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAe,EACf,IAAY,EACZ,OAA0B;;IAE1B,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,QAAE,OAAO,CAAC,QAAQ,mCAAI,EAAE;QAChC,MAAM,QAAE,OAAO,CAAC,MAAM,mCAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,4BAA4B;YACpD,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,SAAS,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EACvE,iEAAiE;YAC/D,uCAAuC,CAC1C,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAChB,IAAI,EACJ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE;YACJ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAU,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAA8C,EAC9C,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACrE,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,MAAM,QAAE,MAAM,CAAC,OAAO,CAAC,MAAM,mCAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,kBAAkB,CAC/B,GAA8C,EAC9C,OAAsB,EACtB,MAAc,EACd,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,CAAC,IAAI,EACR,SAAS,CAAC,WAAW,EACrB,MAAM,EACN;QACE,MAAM;KACP,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,2CAA2C,EACtE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAA8C,EAC9C,OAAsB,EACtB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAsC;IAEtC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBACP,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC,GAAA,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAS;;IACvD,MAAM,SAAS,SAAG,OAAO,CAAC,OAAO,mCAAI,OAAO,CAAC,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,OAA0B;;IAE1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,SAAG,OAAO,CAAC,UAAU,mCAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,SAAG,OAAO,CAAC,SAAS,mCAAI,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IACnE,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAM,EACN,QAAsC,EACtC,GAAS;IAET,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;IAEjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7B,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC;QACE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,EAAM,EACN,GAAW,EACX,MAAoC,EACpC,QAAiB;;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT;YACE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;YAC9B,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,QAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;IAEF,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GACjB,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,sBAAC,OAAC,CAAC,CAAC,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,CAAC,CAAC,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,GAAA,CACzD,CAAC;IAEF,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAYD,MAAM,UAAU,oBAAoB,CAClC,WAA8B;;IAE9B,MAAM,MAAM,SAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC;IACxE,qCACE,IAAI,EAAE,WAAW,CAAC,IAAI,IACnB,CAAC,WAAW,CAAC,WAAW;QACzB,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;QAC1C,CAAC,CAAC,EAAE,CAAC,KACP,IAAI,EAAE,WAAW,CAAC,IAAI,EACtB,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAC1C,aAAa,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,mCAAI,IAAI,EACtC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI,IAClC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,QAAuB;;;IAEvB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;wBACT,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,mCAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,EAAE,mCAAI,SAAS;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,OAAO,CAAC,MAAM;gBACZ,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxD,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAM,EACN,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,EAAM,EACN,GAAW,EACX,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,WAAuC,EACvC,IAAyC,EACzC,QAAuB,EACvB,GAAS;;IAET,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,CAAC,OAAO;YACR,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,KAAK,GAAa;QACtB,EAAE,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;YAC5D,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1B,CAAC;KACH,CAAC;IAEF,IAAI,IAAI,IAAI,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,SACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3C,IACE,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,WAAW;QAC/B,kBAAkB,CAAC,WAAW,KAAK,kBAAkB,CAAC,IAAI,EAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,EAAE,EACF,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAC,WAAW,CAAC,WAAW,mCAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,aAAa,WAC/D,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,MAAA,OAAO,CAAC,aAAa,mCAAI,GAAG,IACtC,MAAA,OAAO,CAAC,WAAW,mCAAI,GACzB,EAAE,CACH,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,QAAE,MAAM,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  refreshStoredSession,\n  resolveAuthEnvironment,\n  resolveIdentity,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  CliError,\n  authRequiredError,\n  gateFailedError,\n  preconditionError,\n} from '../errors';\nimport { ERROR_CODES, type ExitCode } from '../exit-codes';\nimport { formatFindings, relativeTime } from '../findings-renderer';\nimport { EKANOS_CONFIG_FILENAME, loadProject } from '../project';\nimport {\n  type SubmissionListing,\n  type SubmissionVersion,\n  listSubmissions,\n} from '../publish-api';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport { type ResultRow, type Ui, shortHost } from '../ui';\nimport { announceUpdate, checkForUpdate } from '../update-notice';\nimport { readProjectVersion } from './publish';\n\n/** `--watch`'s poll interval — matches the mission brief exactly. */\nconst WATCH_POLL_INTERVAL_MS = 30_000;\n\n/**\n * The states `--watch` stops on. `submitted` is the only non-terminal state\n * a version can be in when watching starts (an already-`gated`/`dev`/\n * `rejected` version resolves on the very first check, no polling needed).\n */\nconst WATCH_TERMINAL_STATES = new Set(['gated', 'dev', 'rejected']);\n\nexport interface StatusArgs {\n  host?: string;\n  /** Project directory (may contain ekanos.json). Defaults to cwd. */\n  dir: string;\n  env: Record<string, string | undefined>;\n  /** Render each version's full finding list, not just error/warn counts. */\n  findings?: boolean;\n  /**\n   * Expand \"OTHER INTEGRATIONS IN SOURCE …\" from one summary line per\n   * integration into the same VERSION/STATE/AGE/FINDINGS table shape THIS\n   * PROJECT's section uses. Human mode only — the JSON envelope's\n   * `submissions` already carries every integration's full version history\n   * regardless of this flag.\n   */\n  all?: boolean;\n  /**\n   * Block until this project's current (slug, version) submission reaches a\n   * terminal-for-waiting state (gated, dev, rejected), polling every 30s.\n   * Changes the command's exit-code contract — see `runStatus`'s docstring.\n   */\n  watch?: boolean;\n  /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injectable \"now\" for deterministic AGE rendering in tests. Defaults to `new Date()`. */\n  now?: Date;\n}\n\ninterface SessionReport {\n  authenticated: boolean;\n  user?: { id: string; email: string | null; name: string | null };\n  expiresAt?: string;\n  hint?: string;\n}\n\ninterface ProjectReport {\n  dir: string;\n  slug: string;\n  source: string | null;\n}\n\n/**\n * `status` — the read verb: where am I pointed, who am I, and what has this\n * project submitted?\n *\n * Three sections, each degrading gracefully rather than failing:\n *\n *  - **session** — whoami's server-side identity check, but an absent or dead\n *    session reports `authenticated: false` with a hint instead of exit 4. A\n *    partner asking \"what is my state?\" must get an answer, not an error whose\n *    answer it is.\n *  - **project** — the ekanos.json in `--dir` (default cwd), when there is\n *    one. No project is an ordinary state for `status`, never an error.\n *  - **submissions** — `GET /api/partner/submissions?source=…` for the\n *    project's resolved source, only when both a session and a source exist.\n *    Server errors here DO map through the taxonomy: an unreachable host or a\n *    missing source is a fault to surface, not a state to absorb.\n *\n * Exit 0 whenever the report itself could be assembled — EXCEPT under\n * `--watch` (see below), whose exit code carries the gate's verdict instead.\n *\n * The submission listing always requests the full `?detail=findings` shape\n * server-side (needed so THIS PROJECT's latest-error auto-inline rendering\n * — see `humanSummary` — has findings to inspect without a second\n * round-trip). `--findings` no longer changes what's FETCHED; it changes\n * what's RENDERED inline in human mode: every shown version's findings,\n * not just the latest's error-severity ones.\n *\n * `--watch` turns `status` into a blocking wait: it requires a project with\n * a resolved source and a live session (both are PRECONDITIONs here, not\n * degraded-to-false states — there is nothing to watch without them), then\n * polls `GET /api/partner/submissions?detail=findings` every 30s for THIS\n * project's current (slug, package.json version) submission until it reaches\n * a terminal-for-waiting state: `gated`/`dev` exit 0, `rejected` exits 10\n * (GATE_FAILED) with the findings carried in `data` — the same shape\n * `publish`'s own gate refusal uses, so an agent's fix-then-retry loop\n * branches on it identically whether the gate ran inline (future) or via\n * this poll (today). `--json --watch` still emits exactly ONE envelope, at\n * completion — the polling itself only ever writes to stderr via `ctx.log`.\n *\n * Human-mode rendering is PROJECT-SCOPED: the server lists every\n * submission for the resolved source (an org-level bucket shared by every\n * project publishing there — `listSubmissions` has no server-side slug\n * filter, see `publish-api.ts`'s wire contract), so \"THIS PROJECT\" groups\n * the rows matching this project's own slug and \"OTHER INTEGRATIONS IN\n * SOURCE …\" collapses everything else to one summary line per integration\n * (or, with `--all`, the same table shape).\n * The `--json` envelope stays additive-compatible: `submissions` is still\n * the full, unfiltered list, with `data.project.scopedSubmissions` and\n * `data.otherIntegrations` layered on top for a consumer that wants the\n * pre-grouped view without re-deriving it.\n */\nexport async function runStatus(\n  ctx: CliContext,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n\n  const stored = env.store.read(env.host);\n\n  const notice = await checkForUpdate({\n    env: args.env,\n    host: env.host,\n    session: stored ?? undefined,\n  });\n  announceUpdate(ctx, notice);\n\n  const session = stored\n    ? await probeSession(env, stored)\n    : {\n        authenticated: false,\n        hint: loginHint(env, 'to sign in.'),\n      };\n\n  // probeSession may have refreshed the session — persisting a NEW access\n  // token and ROTATING the refresh token on disk. Re-read before using it:\n  // the pre-probe object now holds a dead access token and an already-spent\n  // refresh token, and presenting those would turn \"logged in, token was\n  // merely stale\" into a hard exit-4 — the one failure this command promises\n  // never to produce.\n  const live = stored ? (env.store.read(env.host) ?? stored) : null;\n\n  const project = readProjectReport(args.dir);\n\n  if (args.watch) {\n    if (!session.authenticated || !live) {\n      throw authRequiredError(\n        `\"ekanos status --watch\" needs a live session on ${env.host}.`,\n        loginHint(env),\n      );\n    }\n\n    if (!project) {\n      throw preconditionError(\n        `No ekanos.json found in ${path.resolve(args.dir)}.`,\n        'Run \"ekanos publish\" at least once before watching its gate result.',\n      );\n    }\n\n    if (!project.source) {\n      throw preconditionError(\n        'This project has no \"source\" in ekanos.json yet.',\n        'Run \"ekanos publish\" at least once (it saves the source you ' +\n          'publish to) before watching its gate result.',\n      );\n    }\n\n    return runWatch(ctx, env, project, args);\n  }\n\n  let submissions: SubmissionListing[] | null = null;\n\n  if (project?.source && session.authenticated && live) {\n    // Always the full `?detail=findings` shape, `--findings` or not: THIS\n    // PROJECT's auto-inline latest-error rendering (see `humanSummary`)\n    // needs the findings array to decide whether to render, not just the\n    // counts — and `data.project.scopedSubmissions` carries the same\n    // richer shape in the JSON envelope regardless of the flag. `--findings`\n    // now controls how much of it gets rendered inline, not what's fetched.\n    submissions = await listWithOneRefresh(\n      env,\n      live,\n      project.source,\n      'findings',\n    );\n  } else if (project?.source && !session.authenticated) {\n    // Human mode says this in the result block's note; the stderr line is\n    // for JSON callers, who never see that block.\n    if (ctx.jsonMode) {\n      ctx.log(\n        `ekanos: not logged in to ${env.host} — skipping the submission list. ` +\n          (session.hint ?? ''),\n      );\n    }\n  } else if (project && !project.source) {\n    if (ctx.jsonMode)\n      ctx.log(\n        'ekanos: this project has no \"source\" in ekanos.json yet — the first ' +\n          '\"ekanos publish --source <slug>\" saves one, and status will list ' +\n          'submissions from then on.',\n      );\n  }\n\n  const projectIntegration =\n    project && submissions\n      ? (submissions.find((s) => s.slug === project.slug) ?? null)\n      : null;\n\n  const otherIntegrations = submissions\n    ? submissions\n        .filter((s) => s.slug !== project?.slug)\n        .map((s) => summarizeIntegration(s))\n    : null;\n\n  // Best-effort, human-mode-only add-on for the header's \"publish target\n  // (+ seat role)\" line — same degrade-to-null contract as `whoami`'s own\n  // seat lookup. Skipped entirely in JSON mode: nothing in the envelope\n  // needs it, and it would otherwise be an extra network round-trip every\n  // existing `--json` caller pays for no reason.\n  const seatRole =\n    !ctx.jsonMode && project?.source && session.authenticated && live\n      ? await fetchSeatRoleQuietly(env, live, project.source)\n      : null;\n\n  return ctx.succeed(\n    {\n      host: env.host,\n      ...session,\n      credentialsPath: env.store.filePath,\n      project: project\n        ? {\n            ...project,\n            scopedSubmissions: submissions\n              ? (projectIntegration?.versions ?? [])\n              : null,\n          }\n        : null,\n      submissions,\n      ...(otherIntegrations !== null ? { otherIntegrations } : {}),\n      ...(notice ? { toolchain: notice } : {}),\n    },\n    humanSummary(\n      ctx.ui,\n      project?.dir ?? path.resolve(args.dir),\n      env.host,\n      session,\n      project,\n      submissions,\n      { findings: args.findings ?? false, all: args.all ?? false },\n      seatRole,\n      args.now ?? new Date(),\n    ),\n  );\n}\n\n/**\n * The `--watch` poll loop. Targets THIS project's current submission —\n * `project.slug` + the version presently in `package.json` (the same value\n * `publish` would submit right now) — not \"whatever's most recent,\" so\n * watching after a publish can never resolve against a stale prior version.\n */\nasync function runWatch(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  project: ProjectReport,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const source = project.source;\n  if (!source) {\n    // Unreachable — the caller already checked — but keeps this function's\n    // own type honest without a non-null assertion.\n    throw preconditionError(\n      'This project has no \"source\" in ekanos.json yet.',\n      'Run \"ekanos publish\" at least once before watching its gate result.',\n    );\n  }\n\n  const targetVersion = readProjectVersion(project.dir);\n  const sleep = args.sleep ?? defaultSleep;\n\n  // Glyph-only restyle — the poll contract itself (exit codes, timing,\n  // JSON envelope) is unchanged.\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n\n  ctx.log(\n    `${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +\n      `(polling every ${WATCH_POLL_INTERVAL_MS / 1000}s)…`,\n  );\n\n  for (;;) {\n    // Re-read the session from the credential store on EVERY iteration —\n    // never carry one over in a closure. Auth0 rotates the refresh token on\n    // every use (see `refreshStoredSession`'s docstring), so a token this\n    // loop already consumed is dead by the next iteration; the store is the\n    // persisted source of truth for whichever refresh most recently landed\n    // — this loop's own (via `listWithOneRefresh` below, which persists\n    // through `refreshStoredSession`), or a concurrent one from another\n    // process (another terminal running login/publish/status --watch\n    // against the same host). Threading the refreshed session back out of\n    // `listWithOneRefresh` instead would only cover the first case.\n    const current = env.store.read(env.host);\n\n    if (!current) {\n      throw authRequiredError(\n        `The session for ${env.host} is gone — \"ekanos status --watch\" ` +\n          'cannot continue without it.',\n        loginHint(env),\n      );\n    }\n\n    const integrations = await listWithOneRefresh(\n      env,\n      current,\n      source,\n      'findings',\n    );\n    const version = findVersion(integrations, project.slug, targetVersion);\n\n    if (version && WATCH_TERMINAL_STATES.has(version.state)) {\n      return reportWatchOutcome(ctx, project.slug, version);\n    }\n\n    ctx.log(\n      `${waitGlyph}${prefix}${project.slug}@${targetVersion} is ` +\n        `${version ? version.state : 'not visible yet'} — waiting…`,\n    );\n\n    await sleep(WATCH_POLL_INTERVAL_MS);\n  }\n}\n\nfunction findVersion(\n  integrations: SubmissionListing[],\n  slug: string,\n  version: string,\n): SubmissionVersion | null {\n  const integration = integrations.find((i) => i.slug === slug);\n  return integration?.versions.find((v) => v.version === version) ?? null;\n}\n\nfunction reportWatchOutcome(\n  ctx: CliContext,\n  slug: string,\n  version: SubmissionVersion,\n): ExitCode {\n  const data = {\n    slug,\n    version: version.version,\n    state: version.state,\n    gatedAt: version.gatedAt,\n    errorCount: version.errorCount,\n    warnCount: version.warnCount,\n    findings: version.findings ?? [],\n    stages: version.stages ?? [],\n  };\n\n  if (version.state === 'rejected') {\n    return ctx.fail(\n      gateFailedError(\n        `${slug}@${version.version} was rejected by the gate ` +\n          `(${data.errorCount ?? 0} error${data.errorCount === 1 ? '' : 's'}).`,\n        'Resolve the error-severity findings in data.findings, bump the ' +\n          'version, and re-run \"ekanos publish\".',\n      ),\n      data,\n    );\n  }\n\n  return ctx.succeed(\n    data,\n    ctx.ui.result({\n      title: `${slug}@${version.version} is ${version.state}`,\n      tone: data.warnCount ? 'warn' : 'ok',\n      rows: [\n        ['State', version.state],\n        ...(data.warnCount\n          ? [['Warnings', String(data.warnCount)] as const]\n          : []),\n      ],\n    }),\n  );\n}\n\nfunction defaultSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/**\n * whoami's identity resolution, with AUTH_REQUIRED absorbed into\n * `authenticated: false`. Anything else — network, precondition, MFA mapped\n * to auth by `fetchIdentity` — still propagates: \"the host was unreachable\"\n * must never be reported as \"you are logged out\".\n */\nasync function probeSession(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  stored: StoredSession,\n): Promise<SessionReport> {\n  try {\n    const { identity, session } = await resolveIdentity(env, stored);\n\n    return {\n      authenticated: true,\n      user: { id: identity.id, email: identity.email, name: identity.name },\n      expiresAt: session.expiresAt,\n    };\n  } catch (error) {\n    if (error instanceof CliError && error.code === ERROR_CODES.AUTH_REQUIRED) {\n      return { authenticated: false, hint: error.hint };\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Lenient project read: no ekanos.json means \"not in a project\", which is an\n * answer, not an error. An ekanos.json that EXISTS but does not load keeps\n * `loadProject`'s strict behaviour — a broken project file is a fault the\n * partner needs named, whatever verb they ran.\n */\nfunction readProjectReport(dir: string): ProjectReport | null {\n  const projectDir = path.resolve(dir);\n\n  if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME))) {\n    return null;\n  }\n\n  const loaded = loadProject(projectDir);\n\n  return {\n    dir: loaded.projectDir,\n    slug: loaded.primary.slug,\n    source: loaded.project.source ?? null,\n  };\n}\n\n/** Mirrors publish's one-refresh-one-retry on a stale access token. */\nasync function listWithOneRefresh(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n  detail?: 'findings',\n): Promise<SubmissionListing[]> {\n  const first = await listSubmissions(env.host, session.accessToken, source, {\n    detail,\n  });\n\n  if (first.status === 'ok') return first.integrations;\n\n  const refreshed = await refreshStoredSession(env, session);\n  const second = await listSubmissions(\n    env.host,\n    refreshed.accessToken,\n    source,\n    {\n      detail,\n    },\n  );\n\n  if (second.status === 'ok') return second.integrations;\n\n  // Authenticated a moment ago, unauthorized twice here: report the list as\n  // unavailable rather than the session as dead — probeSession already proved\n  // it. This is unreachable in practice; belt and braces for a racing revoke.\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the submission list.`,\n    loginHint(env),\n  );\n}\n\n/**\n * `whoami`'s seat-lookup degradation, narrowed to one source's role: a\n * network hiccup, MFA, or a deployment predating the seats route must never\n * turn a working `status` into a failing one — the header simply omits the\n * \"(role)\" suffix.\n */\nasync function fetchSeatRoleQuietly(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n): Promise<string | null> {\n  try {\n    const result = await fetchSeatsWithOneRefresh(env, session);\n    if (result.status !== 'ok') return null;\n\n    const seat = result.sources.find((s) => s.slug === source);\n    return seat ? seat.roles.join(', ') : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction tryReadProjectVersion(dir: string): string | null {\n  try {\n    return readProjectVersion(dir);\n  } catch {\n    return null;\n  }\n}\n\nfunction timestampMs(iso: string | null | undefined): number {\n  if (!iso) return 0;\n  const parsed = new Date(iso).getTime();\n  return Number.isNaN(parsed) ? 0 : parsed;\n}\n\n/**\n * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions\n * with no timestamp at all) keep their original, server-given order —\n * `Array#sort` is stable, and a stable no-op is the right answer when there\n * is nothing to compare.\n */\nexport function sortVersionsNewestFirst(\n  versions: readonly SubmissionVersion[],\n): SubmissionVersion[] {\n  return [...versions].sort(\n    (a, b) =>\n      timestampMs(b.gatedAt ?? b.submittedAt) -\n      timestampMs(a.gatedAt ?? a.submittedAt),\n  );\n}\n\nfunction versionAge(version: SubmissionVersion, now: Date): string {\n  const timestamp = version.gatedAt ?? version.submittedAt;\n  return timestamp ? relativeTime(timestamp, now) : '—';\n}\n\nexport function findingsCellParts(\n  ui: Ui,\n  version: SubmissionVersion,\n): { text: string; paint: (text: string) => string } {\n  if (version.errorCount === null && version.warnCount === null) {\n    return { text: '—', paint: ui.dim };\n  }\n\n  const errorCount = version.errorCount ?? 0;\n  const warnCount = version.warnCount ?? 0;\n\n  if (errorCount === 0 && warnCount === 0) {\n    return { text: '0', paint: (text) => text };\n  }\n\n  const parts: string[] = [];\n  if (errorCount > 0) parts.push(`${errorCount}E`);\n  if (warnCount > 0) parts.push(`${warnCount}W`);\n\n  return { text: parts.join(' '), paint: errorCount > 0 ? ui.err : ui.warn };\n}\n\nexport function stateColorFor(ui: Ui, state: string): (text: string) => string {\n  if (state === 'dev' || state === 'prod') return ui.ok;\n  if (state === 'gated') return ui.accent;\n  if (state === 'submitted' || state === 'superseded') return ui.dim;\n  if (state === 'rejected' || state === 'revoked') return ui.err;\n  return (text) => text;\n}\n\n/**\n * A VERSION/STATE/AGE/FINDINGS table, built by hand rather than via\n * `ui.table`: STATE and FINDINGS need per-cell color, and `ui.table` sizes\n * columns from the raw cell strings it's handed — a colored cell's ANSI\n * escapes would inflate that width and misalign the column. `ui.ts`'s own\n * doc comment on `padCell` names this exact tradeoff (\"ignoring color codes\n * in length math is the CALLER's job — pad before coloring, never after\"),\n * so this pads against the PLAIN text first and colors the already-padded\n * string — the same rule `ui.table` documents, just applied here instead of\n * inside it.\n */\nexport function renderVersionsTable(\n  ui: Ui,\n  versions: readonly SubmissionVersion[],\n  now: Date,\n): string {\n  const headers = ['VERSION', 'STATE', 'AGE', 'FINDINGS'] as const;\n\n  const rows = versions.map((version) => {\n    const findings = findingsCellParts(ui, version);\n    return {\n      version: version.version,\n      state: version.state,\n      age: versionAge(version, now),\n      findingsText: findings.text,\n      findingsPaint: findings.paint,\n      statePaint: stateColorFor(ui, version.state),\n    };\n  });\n\n  const widths: [number, number, number, number] = [\n    Math.max(headers[0].length, ...rows.map((r) => r.version.length)),\n    Math.max(headers[1].length, ...rows.map((r) => r.state.length)),\n    Math.max(headers[2].length, ...rows.map((r) => r.age.length)),\n    Math.max(headers[3].length, ...rows.map((r) => r.findingsText.length)),\n  ];\n\n  const headerLine = headers\n    .map((header, i) => ui.dim(header.padEnd(widths[i]!)))\n    .join('  ');\n\n  const bodyLines = rows.map((row) =>\n    [\n      row.version.padEnd(widths[0]),\n      row.statePaint(row.state.padEnd(widths[1])),\n      row.age.padEnd(widths[2]),\n      row.findingsPaint(row.findingsText.padEnd(widths[3])),\n    ].join('  '),\n  );\n\n  return [headerLine, ...bodyLines].join('\\n');\n}\n\n/**\n * The findings shown directly under THIS PROJECT's table. `--findings`\n * forces every version's own findings inline; otherwise only the LATEST\n * version's ERROR-severity findings auto-render (the moment a partner most\n * needs them, no flag required), and a dim pointer at `ekanos status\n * --findings` covers everything else with a nonzero count.\n */\nfunction renderThisProjectFindings(\n  ui: Ui,\n  cwd: string,\n  sorted: readonly SubmissionVersion[],\n  forceAll: boolean,\n): string | null {\n  if (forceAll) {\n    const blocks = sorted\n      .filter((v) => v.findings && v.findings.length > 0)\n      .map((v) =>\n        [\n          `  ${ui.dim(`${v.version}:`)}`,\n          indentLines(formatFindings(ui, v.findings!, { cwd }), 4),\n        ].join('\\n'),\n      );\n\n    return blocks.length > 0 ? blocks.join('\\n\\n') : null;\n  }\n\n  const [latest, ...older] = sorted;\n  const latestErrors = (latest?.findings ?? []).filter(\n    (f) => f.severity === 'error',\n  );\n\n  if (latest && latestErrors.length > 0 && latest.findings) {\n    return indentLines(formatFindings(ui, latest.findings, { cwd }), 2);\n  }\n\n  const latestNonzero =\n    (latest?.errorCount ?? 0) > 0 || (latest?.warnCount ?? 0) > 0;\n  const olderNonzero = older.some(\n    (v) => (v.errorCount ?? 0) > 0 || (v.warnCount ?? 0) > 0,\n  );\n\n  return latestNonzero || olderNonzero\n    ? `  ${ui.dim('→ details: ekanos status --findings')}`\n    : null;\n}\n\nexport interface OtherIntegrationSummary {\n  slug: string;\n  /** The full name (`acme/google-drive`); absent on an older host. */\n  displayName?: string;\n  name: string | null;\n  versionsCount: number;\n  latestVersion: string | null;\n  latestState: string | null;\n}\n\nexport function summarizeIntegration(\n  integration: SubmissionListing,\n): OtherIntegrationSummary {\n  const latest = sortVersionsNewestFirst(integration.versions)[0] ?? null;\n  return {\n    slug: integration.slug,\n    ...(integration.displayName\n      ? { displayName: integration.displayName }\n      : {}),\n    name: integration.name,\n    versionsCount: integration.versions.length,\n    latestVersion: latest?.version ?? null,\n    latestState: latest?.state ?? null,\n  };\n}\n\nfunction indentLines(block: string, spaces: number): string {\n  const prefix = ' '.repeat(spaces);\n  return block\n    .split('\\n')\n    .map((line) => `${prefix}${line}`)\n    .join('\\n');\n}\n\nfunction buildHeaderRows(\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  seatRole: string | null,\n): readonly ResultRow[] {\n  const rows: ResultRow[] = [];\n\n  if (session.authenticated) {\n    rows.push([\n      'Account',\n      session.user?.email ?? session.user?.id ?? 'unknown',\n    ]);\n  }\n  rows.push(['Host', shortHost(host)]);\n\n  if (project) {\n    const version = tryReadProjectVersion(project.dir);\n    rows.push([\n      'Project',\n      version ? `${project.slug}@${version}` : project.slug,\n    ]);\n    rows.push([\n      'Target',\n      project.source\n        ? `${project.source}${seatRole ? ` · ${seatRole}` : ''}`\n        : 'none yet',\n    ]);\n  }\n\n  return rows;\n}\n\n/**\n * The closing `ui.nextAction` line, chosen from the LATEST version of THIS\n * project — `null` (no closing line at all) whenever nothing is pending:\n * no submission yet, or the latest is already `dev`/`prod`/`revoked`.\n */\nexport function buildNextAction(\n  ui: Ui,\n  latest: SubmissionVersion | null,\n): string | null {\n  if (!latest) return null;\n\n  if (latest.state === 'rejected') {\n    return ui.nextAction('ekanos status --findings', 'see what failed');\n  }\n  if (latest.state === 'gated') {\n    return `\\n${ui.dim('→ awaiting admission (runs hourly)')}`;\n  }\n  if (latest.state === 'submitted') {\n    return `\\n${ui.dim('→ awaiting gate result')}`;\n  }\n\n  return null;\n}\n\nfunction humanSummary(\n  ui: Ui,\n  cwd: string,\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  submissions: SubmissionListing[] | null,\n  args: { findings: boolean; all: boolean },\n  seatRole: string | null,\n  now: Date,\n): string {\n  const note = !session.authenticated\n    ? session.hint\n    : !project\n      ? 'No ekanos.json here, so there is no project to report on.'\n      : !project.source\n        ? 'No \"source\" configured yet. The first \"ekanos publish --source <slug>\" saves one.'\n        : undefined;\n\n  const lines: string[] = [\n    ui.result({\n      title: session.authenticated ? 'Signed in' : 'Not signed in',\n      tone: session.authenticated ? 'ok' : 'warn',\n      rows: buildHeaderRows(host, session, project, seatRole),\n      notes: note ? [note] : [],\n    }),\n  ];\n\n  if (note || !project?.source || !submissions) {\n    return lines.join('\\n');\n  }\n\n  const projectIntegration =\n    submissions.find((s) => s.slug === project.slug) ?? null;\n  const others = submissions.filter((s) => s.slug !== project.slug);\n\n  lines.push('', ui.section('this project'));\n\n  if (\n    projectIntegration?.displayName &&\n    projectIntegration.displayName !== projectIntegration.slug\n  ) {\n    lines.push(`  ${ui.dim(`published as ${projectIntegration.displayName}`)}`);\n  }\n\n  const sorted = projectIntegration\n    ? sortVersionsNewestFirst(projectIntegration.versions)\n    : [];\n\n  if (sorted.length === 0) {\n    lines.push(`  ${ui.dim('no submissions yet for this project.')}`);\n  } else {\n    lines.push(indentLines(renderVersionsTable(ui, sorted, now), 2));\n\n    const findingsBlock = renderThisProjectFindings(\n      ui,\n      cwd,\n      sorted,\n      args.findings,\n    );\n    if (findingsBlock) lines.push('', findingsBlock);\n  }\n\n  lines.push('', ui.section(`other integrations in source ${project.source}`));\n\n  if (others.length === 0) {\n    lines.push(`  ${ui.dim('none.')}`);\n  } else if (args.all) {\n    for (const integration of others) {\n      const otherSorted = sortVersionsNewestFirst(integration.versions);\n      lines.push(`  ${ui.dim(integration.displayName ?? integration.slug)}`);\n      lines.push(indentLines(renderVersionsTable(ui, otherSorted, now), 4));\n    }\n  } else {\n    for (const integration of others) {\n      const summary = summarizeIntegration(integration);\n      lines.push(\n        `  ${ui.dim(\n          `${summary.displayName ?? summary.slug} — ${summary.versionsCount} version${\n            summary.versionsCount === 1 ? '' : 's'\n          }, latest ${summary.latestVersion ?? '?'} ${\n            summary.latestState ?? '?'\n          }`,\n        )}`,\n      );\n    }\n  }\n\n  const action = buildNextAction(ui, sorted[0] ?? null);\n  if (action) lines.push(action);\n\n  return lines.join('\\n');\n}\n"]}

package/dist/commands/teams-connect.js

@@ -75,7 +75,7 @@ export async function runTeamConnect(ctx, args, client, host, source, input) {
         case 'not-entitled':
             throw invalidStateError((_b = plan.reason) !== null && _b !== void 0 ? _b : `"${input.product}" is not enabled on ${plan.source.slug}.`, `Enable it for the Source first: "ekanos sources products enable ${input.product}" as a Source admin if ${plan.source.slug} built it, otherwise a super-admin (/admin in the browser). "ekanos sources products" shows what ${plan.source.slug} has.`);
         case 'not-self-serve':
-            throw invalidStateError((_c = plan.reason) !== null && _c !== void 0 ? _c : `${name} is not connected by a team.`, plan.product.kind === 'experience'
+            throw invalidStateError((_c = plan.reason) !== null && _c !== void 0 ? _c : `${name} is not connected by a team.`, plan.product.kind === 'feature' || plan.product.kind === 'experience'
                 ? `"ekanos sources products --source ${plan.source.slug}" shows whether it is on for the Source.`
                 : 'It is turned on for the Source by Ekanos; there is nothing for the team to do.');
         case 'unsupported':

package/dist/commands/teams-connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"teams-connect.js","sourceRoot":"","sources":["../../src/commands/teams-connect.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,eAAe,EACf,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAGL,SAAS,EACT,SAAS,EACT,oBAAoB,EACpB,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,KAA0E;;IAE1E,MAAM,MAAM,mBACV,MAAM,EACN,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IACnB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9D,CAAC;IAEF,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,gCAC1D,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IACnB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACrC,IAAI,QAAE,IAAI,CAAC,OAAO,mCAAI,aAAa,IACnC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAC/C,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IACtB,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE;QACrD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;KACzB,CAAC,EAAE,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,cAAc;YACjB,MAAM,iBAAiB,OACrB,IAAI,CAAC,MAAM,mCACT,IAAI,KAAK,CAAC,OAAO,uBAAuB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,EAC7D,mEAAmE,KAAK,CAAC,OAAO,0BAA0B,IAAI,CAAC,MAAM,CAAC,IAAI,oGAAoG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CACtP,CAAC;QACJ,KAAK,gBAAgB;YACnB,MAAM,iBAAiB,OACrB,IAAI,CAAC,MAAM,mCAAI,GAAG,IAAI,8BAA8B,EACpD,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;gBAChC,CAAC,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,IAAI,0CAA0C;gBACjG,CAAC,CAAC,gFAAgF,CACrF,CAAC;QACJ,KAAK,aAAa;YAChB,MAAM,iBAAiB,OACrB,IAAI,CAAC,MAAM,mCAAI,GAAG,IAAI,iCAAiC,EACvD,iCAAiC,IAAI,CAAC,UAAU,EAAE,CACnD,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAC/B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,GAAG,IAAI,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;aACzC,CAAC,CACH,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACzC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,IAAI,CAAC,SAAS;oBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,IAAI,EAAE;oBAC3C,CAAC,CAAC,GAAG,IAAI,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;gBACpC,IAAI,EAAE;oBACJ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC;oBACzB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;iBAC3B;gBACD,KAAK,EAAE,IAAI,CAAC,SAAS;oBACnB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;8BACE,IAAI,CAAC,MAAM,mCACT,GAAG,IAAI,4CAA4C;wBACrD,iDAAiD;qBAClD;aACN,CAAC,CACH,CAAC;QACJ;YACE,MAAM;IACV,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YAC5B,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE;YACnF,IAAI,EAAE;gBACJ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC;aAC/B;YACD,KAAK,EAAE;gBACL,sBAAsB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,yBAAyB;gBAClF,uEAAuE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc;aAC7K;SACF,CAAC,CAAC;QACH,OAAO,KAAK;YACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC;YACvD,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;gBACpD,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;gBACrC,OAAO;aACR,CAAC,CAAC;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACnE,IAAI;QACJ,IAAI,EAAE,KAAK;YACT,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;KAC1E,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,IAAqB;;IAErB,MAAM,KAAK,GAAG,MAAA,MAAA,IAAI,CAAC,MAAM,0CAAE,KAAK,0CAAE,WAAW,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO;IAC5C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;YACvE,MAAM;SACP,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CACL,uBAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAA,MAAA,KAAK,CAAC,KAAK,0CAAE,YAAY,CAAC,IAAI,CAC3C,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI;YAC9B,IAAI,CAAC,GAAG,KAAK,QAAQ;YACrB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,CACzC,0CAAE,SAAS,CAAC;QACb,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,GAAG,CAAC,IAAI,CACN,SAAS,KAAK,CAAC,GAAG,YAAY,MAAM,aAAa,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAoB,KAAK,2BAA2B,GAAG,EAAE,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,MAAM,aAAa,MAAM,EAAE,CACjO,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,KAAqD,EACrD,IAAwD;;IAExD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;QAC/B,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CACH,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,CAAC,YAAoB,EAAE,EAAE,CACvC,wBAAwB,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,iBAAiB,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpH,MAAM,GAAG,GAAG,CAAC,KAA+B,EAAE,EAAE,CAC9C,GAAG,KAAK,CAAC,KAAK,yBAAyB,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;IAErN,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iCAEX,IAAI,CAAC,IAAI,KACZ,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC,KAEL;YACE,IAAI,CAAC,OAAO;YACZ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5B,SAAS,GAAG,CAAC,KAAK,CAAC,EAAE;gBACrB,kCAAkC,GAAG,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE;aACzE,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,IAAI,GAAa,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,CACb,MAAM,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAAC,WAAW,KAAK,CAAC,KAAK,cAAc,CAAC,CACrE;aACE,IAAI,EAAE;aACN,WAAW,EAAE,CAAC;QACjB,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kCACtD,KAAK,KACR,UAAU,EAAE,KAAK,CAAC,YAAY,IAC9B,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,MAA6B;;IAC7D,OAAO,OAAC,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,MAAM,CACtC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAqB;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAmB,EACnB,IAAY,EACZ,MAAyD,EACzD,IAAqB;;;IAErB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;IACF,OAAO,aACL,MAAA,MAAA,MAAM,CAAC,WAAW,0CAAE,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CACpD,0CAAE,KAAK,mCACR,MAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,0CACrE,KAAK,mCACT,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,GAAG,CAC9C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAyD,EACzD,IAAqB;;;IAErB,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,iBAAiB,OACrB,IAAI,CAAC,aAAa,mCAChB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,4DAA4D,EAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CACvB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,KAAK,QAAQ;QACpB,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,kBAClC,MAAM,EAAE,OAAO,CAAC,MAAM,IACnB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACvD,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,+BACd,IAAI,IAAK,OAAO,KAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KACrD,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,aAAa,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7E,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC;gBACE,KAAK;gBACL,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM;oBAC3B,CAAC,CAAC,QAAQ,MAAA,MAAA,OAAO,CAAC,IAAI,CAAC,MAAM,0CAAE,KAAK,mCAAI,cAAc,2BAA2B;oBACjF,CAAC,CAAC,gBAAgB;aACrB;YACD,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;SACvC;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAKC,EACD,IAAqB,EACrB,OAA2B,EAC3B,OAQC;;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1H,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,iBAAiB,OACrB,IAAI,CAAC,aAAa,mCAAI,wCAAwC,EAC9D,IAAI,CAAC,KAAK,KAAK,MAAM;YACnB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACxB,CAAC,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,KAAK,4EAA4E,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAC9K,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;QACF,MAAM,YAAY,SAAG,IAAI,CAAC,YAAY,mCAAI,SAAS,CAAC;QACpD,MAAM,GAAG,SACP,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,mCACpE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IACE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;gBACrB,CAAC,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC9C,CAAC;gBACD,MAAM,UAAU,CACd,GAAG,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,GAAG,CAAC,MAAM;qBAC3D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;qBAC7B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;qBAChC,IAAI,CAAC,IAAI,CAAC,wCAAwC,EACrD,2EAA2E,kBAAkB,0CAA0C,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CACrL,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,GAAG,CACL,GAAG,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,kDAAkD,CAClF,CAAC;YACF,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,MAAM,WAAW,CACf,GAAG,EACH,IAAI,EACJ,IAAI,EACJ,GAAG,KAAK,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CACxC;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,gDAC/B,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAChC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC3C,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAClE,CACH,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,iBAAiB,CACrB,sBAAsB,OAAO,CAAC,MAAM,sCAAsC,EAC1E,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,oBAAoB,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAE3D,MAAM,MAAM,SAAG,OAAO,CAAC,IAAI,CAAC,MAAM,mCAAI,IAAI,CAAC,MAAM,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,GAAG,CACL,SAAS;QACP,CAAC,CAAC;YACE,KAAK;gBACH,CAAC,CAAC,WAAW,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,uEAAuE;gBAC9G,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,GAAG;YACnJ,KAAK,OAAO,CAAC,YAAY,EAAE;YAC3B,iCAAiC,OAAO,OAAO;YAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK;gBACvB,CAAC,CAAC;oBACE,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,4FAA4F;iBAClK;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,IAAI,CAAC;QACd,CAAC,CAAC;YACE,qBAAqB,MAAA,MAAM,CAAC,KAAK,mCAAI,YAAY,WAAW,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG;YACpN,KAAK,OAAO,CAAC,YAAY,EAAE;YAC3B,2CAA2C,OAAO,OAAO;YACzD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK;gBACvB,CAAC,CAAC;oBACE,+BAA+B,IAAI,CAAC,MAAM,CAAC,IAAI,uBAAuB;iBACvE;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;IAEF,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/C,OAAC,IAAI,CAAC,OAAO,mCAAI,aAAa,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,OAAO,CAChB;YACE,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,KAAK;SACjB,EACD,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,YAAY;YACV,CAAC,CAAC,gIAAgI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI;YACnK,CAAC,CAAC,sCAAsC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,CAC5E,CACF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CACL,iFAAiF,CAClF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,kBAC5B,UAAU,CAAC,OAAO,QAAE,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,GAAA,CAC9C,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAC9C,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;YACF,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC1D,OAAO,EAAE;oBACP,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;wBACZ,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC3E,IAAI,EAAE;4BACJ,CAAC,cAAc,QAAE,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,MAAM,CAAC;4BAC/C,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;yBACzC;wBACD,KAAK,EAAE,KAAK;4BACV,CAAC,CAAC;gCACE,8CAA8C,IAAI,CAAC,OAAO,CAAC,IAAI,mCAAmC,IAAI,CAAC,IAAI,CAAC,IAAI,6BAA6B;6BAC9I;4BACH,CAAC,CAAC,EAAE;qBACP,CAAC;oBACF,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC;YACF,OAAO,OAAO,CAAC,IAAI;gBACjB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,eAAe,CACnB,qDAAqD,EACrD,QAAQ,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,2BAA2B,CAC7E,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,YAAY,CACnB,MAAyC,EACzC,IAAqB;IAErB,OAAO,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CACf,IAAqB,EACrB,MAAyC;IAEzC,OAAO,0EAA0E,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,2CAA2C,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,CAAC;AACxO,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,IAAqB,EACrB,KAAa;;IAEb,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAA,IAAI,CAAC,KAAK,0CAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvD,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,MAAM,GACV,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,IACE,WAAW;QACX,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,EAC9C,CAAC;QACD,GAAG,CAAC,GAAG,CACL,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,mCAAmC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,6CAA6C,CAC1N,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QACpD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,KAAK,EAAE,KAAK,CAAC,KAAK,EAClB,SAAS,EAAE,KAAK,CAAC,SAAS,EAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IACrB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAChE,CAAC;YACH,KAAK;YACL,KAAK,EAAE,MAAM;YACb,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC;YACvB,WAAW;YACX,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACnD,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,MAAM;iBAC7D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;iBACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC;iBAChD,IAAI,CAAC,IAAI,CAAC,wCAAwC;YACrD,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;;gBACf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;gBACrC,IAAI,KAAK,CAAC,WAAW;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzD,OAAO,CACL,KAAK,CAAC,SAAS;oBACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;oBAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACxB,CAAC;SACF,CAAC,CAAC;IAET,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAC9D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,CACnB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EACvH,QAAQ,KAAK,UAAU,CACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAyD;;IAEzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,MAAM,CAAC,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EAC9D,qCAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,6EAA6E,CACrI,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAgB;QACxB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;QAC3B;YACE,QAAQ;YACR,SAAS;gBACP,CAAC,CAAC,YAAY,CAAA,MAAA,MAAM,CAAC,UAAU,0CAAE,WAAW,EAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtG,CAAC,CAAC,eAAe;SACpB;KACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS;YACd,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;YAC5D,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACnE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAC/B,IAAI;QACJ,KAAK,EAAE;YACL,kDAAkD;YAClD,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,gDAAgD;SACjH;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAqB,EAAE,KAAK,GAAG,KAAK;IACpD,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;IACtE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9G,CAAC","sourcesContent":["import {\n  TeamAgentListSchema,\n  type TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport { fieldPrompt, parseFieldValue } from '../connect-fields';\nimport type { CliContext } from '../context';\nimport { invalidStateError, usageError, validationError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { cli } from '../invocation';\nimport { assertBrowserSafeUrl, openInBrowser } from '../open-url';\nimport {\n  FIELD_SECRET_FORMS,\n  collectSecrets,\n  parsePlainValues,\n  readSecretFlags,\n  secretInputGiven,\n} from '../secret-input';\nimport {\n  type FieldValue,\n  type TeamConnectPlan,\n  showTeamConnect,\n  startTeamConnect,\n} from '../team-connect-api';\nimport { call, showTeamIntegration } from '../teams-api';\nimport type { ResultRow } from '../ui';\nimport { promptHidden, promptLine } from './apps';\nimport { scopeHiddenLines } from './scope-notice';\nimport {\n  type TeamsArgs,\n  type TeamsClient,\n  canPrompt,\n  checklist,\n  promptAndSaveTeamApp,\n  teamsSecretIO,\n} from './teams';\nimport { isTeamChannel, runTeamChannelInstall } from './teams-channel-install';\n\n/**\n * `teams connect <team> <product>` — connect a product for one team, doing\n * whichever the integration needs (the host's plan decides, never the CLI):\n *\n *   - works as shipped → says so; not self-serve or not enabled → refuses\n *     with the reason (and points at `sources products` for the latter);\n *   - form fields → asks them here (secrets hidden, never as arguments) and\n *     activates exactly as the app's form does;\n *   - OAuth → runs `teams app set` inline when the team's own app is needed\n *     first (Zendesk), then a one-time sign-in link for the member who\n *     consents: the caller when a member, else `--as <email>`. Opens it for\n *     the caller (unless `--no-open`), always prints it, and waits until the\n *     team is connected (unless `--no-wait`);\n *   - a form only the browser can fill → prints the team's page.\n *\n * `--connection <id>` connects one of the integration's named connections\n * instead of the main one — Linear's `agent`, the team's own Linear app\n * installed as a workspace member, which is what makes Linear send the\n * @mention and assignment webhooks an agent's triggers listen for. It runs\n * the same way: the team app's fields when missing, then the sign-in, then\n * the wait until it is installed.\n *\n * Without `--connection`, once the main connection is made (or already\n * was), a named connection the team's agents' triggers wait on is offered\n * next — at a terminal it asks and installs it, otherwise it names the\n * command. \"Connected\" is not the goal; an agent that can be reached is.\n *\n * `--reconnect` connects it again even though it reads as connected — for\n * a revoked or expired sign-in, or new form values. An OAuth reconnect\n * prints the link and returns: the team already reads as connected, so\n * there is nothing to wait for.\n *\n * `--link-only` keeps the old behaviour: the team's page and its status.\n *\n * `slack` and `linear-app` install the channels agent triggers answer\n * through — Slack, and Ekanos's own Linear Agents app — by the same\n * link-and-wait (`teams-channel-install.ts`).\n */\nexport async function runTeamConnect(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  input: { team: string; product: string; as?: string; connection?: string },\n): Promise<ExitCode> {\n  const target = {\n    source,\n    team: input.team,\n    product: input.product,\n    ...(input.connection ? { connection: input.connection } : {}),\n  };\n\n  // Slack and Ekanos's Linear Agents app: the channels a `slack` or `linear`\n  // agent trigger answers through, installed by their own flows.\n  if (!input.connection && !args.linkOnly && isTeamChannel(input.product)) {\n    return runTeamChannelInstall(ctx, args, client, host, source, {\n      team: input.team,\n      channel: input.product,\n      ...(input.as ? { as: input.as } : {}),\n      open: args.openUrl ?? openInBrowser,\n    });\n  }\n\n  if (args.linkOnly) return printLink(ctx, client, host, target);\n\n  const { plan } = await client.call((token) =>\n    showTeamConnect(host, token, target, input.as),\n  );\n  const named = isNamed(plan);\n  const name = named\n    ? await connectionLabel(client, host, target, plan)\n    : plan.product.name;\n  await warnOtherRunsAs(ctx, client, host, source, plan);\n  for (const line of scopeHiddenLines(plan.productScope, {\n    team: plan.team.slug,\n    product: plan.product.slug,\n    source: plan.source.slug,\n  })) {\n    ctx.warn(line);\n  }\n\n  switch (plan.mode) {\n    case 'not-entitled':\n      throw invalidStateError(\n        plan.reason ??\n          `\"${input.product}\" is not enabled on ${plan.source.slug}.`,\n        `Enable it for the Source first: \"ekanos sources products enable ${input.product}\" as a Source admin if ${plan.source.slug} built it, otherwise a super-admin (/admin in the browser). \"ekanos sources products\" shows what ${plan.source.slug} has.`,\n      );\n    case 'not-self-serve':\n      throw invalidStateError(\n        plan.reason ?? `${name} is not connected by a team.`,\n        plan.product.kind === 'experience'\n          ? `\"ekanos sources products --source ${plan.source.slug}\" shows whether it is on for the Source.`\n          : 'It is turned on for the Source by Ekanos; there is nothing for the team to do.',\n      );\n    case 'unsupported':\n      throw invalidStateError(\n        plan.reason ?? `${name} cannot be connected from here.`,\n        `Open the team's page instead: ${plan.connectUrl}`,\n      );\n    case 'works-as-shipped':\n      return ctx.succeed(\n        { host, plan, connected: true },\n        ctx.ui.result({\n          title: `${name} works as shipped for ${plan.team.slug}`,\n          rows: [['Status', 'nothing to connect']],\n        }),\n      );\n    case 'browser':\n      return ctx.succeed(\n        { host, plan, connected: plan.connected },\n        ctx.ui.result({\n          title: plan.connected\n            ? `${plan.team.slug} has connected ${name}`\n            : `${name} connects in the app for ${plan.team.slug}`,\n          tone: plan.connected ? 'ok' : 'warn',\n          rows: [\n            ['Open', plan.connectUrl],\n            ['Status', statusOf(plan)],\n          ],\n          notes: plan.connected\n            ? []\n            : [\n                plan.reason ??\n                  `${name} connects through its own form in the app.`,\n                'A team admin signs in there and clicks Connect.',\n              ],\n        }),\n      );\n    default:\n      break;\n  }\n\n  if (plan.connected && !args.reconnect) {\n    const summary = ctx.ui.result({\n      title: `${plan.team.slug} has already ${named ? 'installed' : 'connected'} ${name}`,\n      rows: [\n        ['Status', statusOf(plan, named)],\n        ['Team page', plan.connectUrl],\n      ],\n      notes: [\n        `\"ekanos teams show ${plan.team.slug} ${plan.product.slug}\" shows the full setup.`,\n        `Broken (revoked or expired)? Connect it again: ekanos teams connect ${plan.team.slug} ${plan.product.slug}${named ? ` --connection ${plan.connectionId}` : ''} --reconnect`,\n      ],\n    });\n    return named\n      ? ctx.succeed({ host, plan, connected: true }, summary)\n      : offerChannels(ctx, args, client, host, source, input, {\n          data: { host, plan, connected: true },\n          summary,\n        });\n  }\n\n  if (plan.mode === 'fields' || plan.mode === 'no-fields') {\n    return activate(ctx, args, client, host, target, plan);\n  }\n  return connectOAuth(ctx, args, client, host, target, plan, input.as, {\n    name,\n    then: named\n      ? undefined\n      : (done) => offerChannels(ctx, args, client, host, source, input, done),\n  });\n}\n\n/**\n * A personal connection belongs to whoever makes it, but a provided agent\n * uses the personal connection of the person it runs as — so connecting\n * your own leaves the agent missing it (CLI audit P0-5). Name each agent\n * that runs as someone else and the command that connects it for them.\n */\nasync function warnOtherRunsAs(\n  ctx: CliContext,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  plan: TeamConnectPlan,\n): Promise<void> {\n  const email = plan.member?.email?.toLowerCase();\n  if (plan.scope !== 'user' || !email) return;\n  let list;\n  try {\n    list = await client.call((token) =>\n      call(host, token, TeamAgentListSchema, {\n        method: 'GET',\n        path: `/api/partner/teams/${encodeURIComponent(plan.team.slug)}/agents`,\n        source,\n      }),\n    );\n  } catch (error) {\n    ctx.log(\n      `Could not check who ${plan.team.slug}'s agents run as: ${error instanceof Error ? error.message : String(error)}`,\n    );\n    return;\n  }\n  for (const entry of list.agents) {\n    const runsAs = entry.agent?.requirements.find(\n      (item) =>\n        item.key === plan.product.slug &&\n        item.via === 'person' &&\n        item.viaDetail &&\n        item.viaDetail.toLowerCase() !== email,\n    )?.viaDetail;\n    if (!runsAs) continue;\n    ctx.warn(\n      `Note: ${entry.key} runs as ${runsAs} and uses ${runsAs}'s ${plan.product.name} connection, not ${email}'s. For the agent, run: ${cli()} teams connect ${plan.team.slug} ${plan.product.slug} --as ${runsAs} --source ${source}`,\n    );\n  }\n}\n\n/**\n * After the main connection: the named connections the team's agents'\n * triggers wait on and the team has not installed (Linear's agent). At a\n * terminal, ask and install each; otherwise name the command, in the\n * result and its JSON (`channelsToInstall`).\n */\nasync function offerChannels(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  input: { team: string; product: string; as?: string },\n  done: { data: Record<string, unknown>; summary: string },\n): Promise<ExitCode> {\n  const status = await client.call((token) =>\n    showTeamIntegration(host, token, {\n      source,\n      team: input.team,\n      product: input.product,\n    }),\n  );\n  const waiting = channelsToInstall(status);\n  if (waiting.length === 0) return ctx.succeed(done.data, done.summary);\n\n  const command = (connectionId: string) =>\n    `ekanos teams connect ${input.team} ${input.product} --connection ${connectionId} --source ${status.source.slug}`;\n  const why = (entry: (typeof waiting)[number]) =>\n    `${entry.label} is not installed for ${input.team}, and ${entry.neededBy.map((need) => `${need.agent} (${need.triggers.join(', ')})`).join(', ')} only start${entry.neededBy.length === 1 ? 's' : ''} through it.`;\n\n  if (!canPrompt(ctx, args)) {\n    return ctx.succeed(\n      {\n        ...done.data,\n        channelsToInstall: waiting.map((entry) => ({\n          connectionId: entry.connectionId,\n          label: entry.label,\n          neededBy: entry.neededBy,\n          command: command(entry.connectionId),\n        })),\n      },\n      [\n        done.summary,\n        ...waiting.flatMap((entry) => [\n          `Next: ${why(entry)}`,\n          `  Install it in your terminal: ${cli()} ${command(entry.connectionId)}`,\n        ]),\n      ].join('\\n'),\n    );\n  }\n\n  ctx.log(done.summary);\n  let code: ExitCode = 0;\n  for (const entry of waiting) {\n    ctx.log(why(entry));\n    const answer = (\n      await (args.ask ?? promptLine)(`Install ${entry.label} now? [Y/n] `)\n    )\n      .trim()\n      .toLowerCase();\n    if (answer !== '' && answer !== 'y' && answer !== 'yes') {\n      ctx.log(`Skipped. Later: ${command(entry.connectionId)}`);\n      continue;\n    }\n    code = await runTeamConnect(ctx, args, client, host, source, {\n      ...input,\n      connection: entry.connectionId,\n    });\n  }\n  return code;\n}\n\n/** Named connections the team's agents wait on and the team has not installed. */\nexport function channelsToInstall(status: TeamIntegrationStatus) {\n  return (status.connections ?? []).filter(\n    (entry) =>\n      entry.connectionId !== 'default' &&\n      !entry.connected &&\n      entry.neededBy.length > 0,\n  );\n}\n\nfunction isNamed(plan: TeamConnectPlan): boolean {\n  return Boolean(plan.connectionId && plan.connectionId !== 'default');\n}\n\nasync function connectionLabel(\n  client: TeamsClient,\n  host: string,\n  target: { source: string; team: string; product: string },\n  plan: TeamConnectPlan,\n): Promise<string> {\n  const status = await client.call((token) =>\n    showTeamIntegration(host, token, target),\n  );\n  return (\n    status.connections?.find(\n      (entry) => entry.connectionId === plan.connectionId,\n    )?.label ??\n    status.teamApps.find((entry) => entry.connectionId === plan.connectionId)\n      ?.label ??\n    `${plan.product.name} (${plan.connectionId})`\n  );\n}\n\nasync function activate(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: { source: string; team: string; product: string },\n  plan: TeamConnectPlan,\n): Promise<ExitCode> {\n  if (plan.scope === 'user' && !plan.member) {\n    throw invalidStateError(\n      plan.memberProblem ??\n        `${plan.product.name} is a personal connection: each member connects their own.`,\n      joinHint(plan, target),\n    );\n  }\n\n  const entered =\n    plan.mode === 'fields'\n      ? await enterFields(ctx, args, plan, connectAgain(target, plan))\n      : { fields: {}, set: [] };\n  const started = await client.call((token) =>\n    startTeamConnect(host, token, target, {\n      fields: entered.fields,\n      ...(entered.set.length > 0 ? { set: entered.set } : {}),\n    }),\n  );\n  return ctx.succeed(\n    { host, ...started, connected: started.plan.connected },\n    ctx.ui.result({\n      title: `Connected ${started.plan.product.name} for ${started.plan.team.slug}`,\n      rows: [\n        ['Status', statusOf(started.plan)],\n        [\n          'For',\n          started.plan.scope === 'user'\n            ? `you (${started.plan.member?.email ?? 'your account'}) — a personal connection`\n            : 'the whole team',\n        ],\n        ['Team page', started.plan.connectUrl],\n      ],\n    }),\n  );\n}\n\nasync function connectOAuth(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: {\n    source: string;\n    team: string;\n    product: string;\n    connection?: string;\n  },\n  plan: TeamConnectPlan,\n  asEmail: string | undefined,\n  options: {\n    /** What is being connected: the product, or a named connection's label. */\n    name: string;\n    /** On success, instead of finishing: the main connection's follow-ups. */\n    then?: (done: {\n      data: Record<string, unknown>;\n      summary: string;\n    }) => Promise<ExitCode>;\n  },\n): Promise<ExitCode> {\n  const named = isNamed(plan);\n  const name = options.name;\n  const again = `ekanos teams connect ${target.team} ${target.product}${named ? ` --connection ${plan.connectionId}` : ''}`;\n  if (!plan.member) {\n    throw invalidStateError(\n      plan.memberProblem ?? 'No member of the team can sign in yet.',\n      plan.scope === 'user'\n        ? joinHint(plan, target)\n        : `Name a member of ${plan.team.slug} who signs in: ${again} --as <email>. Or join it and sign in yourself: ekanos teams members add ${plan.team.slug} --self --role admin`,\n    );\n  }\n\n  if (plan.teamApp) {\n    const status = await client.call((token) =>\n      showTeamIntegration(host, token, target),\n    );\n    const connectionId = plan.connectionId ?? 'default';\n    const app =\n      status.teamApps.find((entry) => entry.connectionId === connectionId) ??\n      (named ? undefined : status.teamApps[0]);\n    if (app && app.fields.some((field) => !field.set)) {\n      if (\n        !canPrompt(ctx, args) &&\n        !secretInputGiven(readSecretFlags(args.flags))\n      ) {\n        throw usageError(\n          `${name} needs ${plan.team.slug}'s own app first (${app.fields\n            .filter((field) => !field.set)\n            .map((field) => field.secretName)\n            .join(', ')}), and there is no terminal to ask at.`,\n          `Without a terminal, pass --set <field>=<value> for the plain fields and ${FIELD_SECRET_FORMS}. Or run it yourself in your terminal: ${cli()} ${again} --source ${plan.source.slug}`,\n        );\n      }\n      ctx.log(\n        `${name} signs ${plan.team.slug} in through the team's own app. Set it up first:`,\n      );\n      await promptAndSaveTeamApp(ctx, args, client, host, target, status, app);\n    }\n  }\n\n  // An app sign-in (GitHub, ROAM) activates on return with what the app's\n  // form would add after the sign-in: asked now, applied then.\n  const entered =\n    plan.signIn === 'app' && plan.fields.length > 0\n      ? await enterFields(\n          ctx,\n          args,\n          plan,\n          `${again} --source ${plan.source.slug}`,\n        )\n      : undefined;\n  const started = await client.call((token) =>\n    startTeamConnect(host, token, target, {\n      ...(asEmail ? { as: asEmail } : {}),\n      ...(entered ? { fields: entered.fields } : {}),\n      ...(entered && entered.set.length > 0 ? { set: entered.set } : {}),\n    }),\n  );\n  if (started.result !== 'consent') {\n    throw invalidStateError(\n      `The host answered \"${started.result}\" where a sign-in link was expected.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the connect contract.',\n    );\n  }\n  assertBrowserSafeUrl(started.authorizeUrl, 'sign-in link');\n\n  const member = started.plan.member ?? plan.member;\n  const forCaller = member.isCaller;\n  const expires = started.expiresAt.replace('T', ' ').slice(0, 16);\n  ctx.log(\n    forCaller\n      ? [\n          named\n            ? `Install ${name} for ${plan.team.slug} — sign in as an admin of the workspace it goes into, and approve it:`\n            : `Sign in to ${plan.product.name} as the account ${plan.team.slug} should use${plan.scope === 'user' ? ' (a personal connection: yours)' : ''}:`,\n          `  ${started.authorizeUrl}`,\n          `  (one-time link, valid until ${expires} UTC)`,\n          ...(plan.signIn === 'app'\n            ? [\n                `  It opens ${plan.product.name}'s sign-in through ${plan.source.slug}'s app: if the browser asks you to sign in to the app first, do, then open the link again.`,\n              ]\n            : []),\n        ].join('\\n')\n      : [\n          `Send this link to ${member.email ?? 'the member'} — they ${named ? `install ${name}` : `sign in to ${plan.product.name}`} for ${plan.team.slug}${plan.scope === 'user' ? ' (a personal connection: theirs)' : ''}:`,\n          `  ${started.authorizeUrl}`,\n          `  (one-time, for them only, valid until ${expires} UTC)`,\n          ...(plan.signIn === 'app'\n            ? [\n                `  They open it signed in to ${plan.source.slug}'s app as themselves.`,\n              ]\n            : []),\n        ].join('\\n'),\n  );\n\n  // Only ever the caller's own browser: opening a link meant for another\n  // member would sign the caller's provider account in for them.\n  if (forCaller && !args.noOpen && !ctx.jsonMode) {\n    (args.openUrl ?? openInBrowser)(started.authorizeUrl);\n  }\n\n  // A reconnect can't be waited on: the team already reads as connected, so\n  // nothing the host reports changes when the new sign-in lands.\n  const reconnecting = args.reconnect === true && plan.connected;\n  if (args.noWait || ctx.jsonMode || reconnecting) {\n    return ctx.succeed(\n      {\n        host,\n        plan: started.plan,\n        authorizeUrl: started.authorizeUrl,\n        expiresAt: started.expiresAt,\n        connected: false,\n      },\n      ctx.ui.hint(\n        reconnecting\n          ? `The current connection keeps working until the sign-in finishes; then its tokens are replaced. Check with \"ekanos teams show ${target.team} ${target.product}\".`\n          : `Then check with \"ekanos teams show ${target.team} ${target.product}\".`,\n      ),\n    );\n  }\n\n  ctx.log(\n    'Waiting for the sign-in to finish (Ctrl-C stops waiting; the link stays valid)…',\n  );\n  const deadline = Date.parse(started.expiresAt) || Date.now() + 10 * 60 * 1000;\n  while (Date.now() < deadline) {\n    await new Promise((resolve) =>\n      setTimeout(resolve, args.pollDelayMs ?? 3000),\n    );\n    const polled = await client.call((token) =>\n      showTeamConnect(host, token, target, asEmail),\n    );\n    if (polled.plan.connected) {\n      const status = await client.call((token) =>\n        showTeamIntegration(host, token, target),\n      );\n      const done = {\n        data: { host, plan: polled.plan, status, connected: true },\n        summary: [\n          ctx.ui.result({\n            title: `${named ? 'Installed' : 'Connected'} ${name} for ${plan.team.slug}`,\n            rows: [\n              ['Signed in by', member.email ?? member.userId],\n              ['Status', statusOf(polled.plan, named)],\n            ],\n            notes: named\n              ? [\n                  `Prove it end to end: @mention the agent in ${plan.product.name}, then \"ekanos runs list --team ${plan.team.slug}\" shows the run it started.`,\n                ]\n              : [],\n          }),\n          checklist(status).join('\\n'),\n        ].join('\\n'),\n      };\n      return options.then\n        ? options.then(done)\n        : ctx.succeed(done.data, done.summary);\n    }\n  }\n  throw validationError(\n    'The sign-in did not finish before the link expired.',\n    `Run \"${again}${asEmail ? ` --as ${asEmail}` : ''}\" again for a fresh link.`,\n  );\n}\n\n/** The command that connects it again, for a hint. */\nfunction connectAgain(\n  target: { team: string; product: string },\n  plan: TeamConnectPlan,\n): string {\n  return `ekanos teams connect ${target.team} ${target.product} --source ${plan.source.slug}`;\n}\n\n/**\n * A personal connection is the member's own: whoever runs connect makes\n * theirs, so a caller who is not on the team joins it first.\n */\nfunction joinHint(\n  plan: TeamConnectPlan,\n  target: { team: string; product: string },\n): string {\n  return `It is yours to connect once you are a member: ekanos teams members add ${plan.team.slug} --self, then ${connectAgain(target, plan)}. For someone else's, send them a link: ${connectAgain(target, plan)} --as <their-email>.`;\n}\n\n/**\n * The activation fields, through the shared secret input (`secret-input.ts`)\n * that every command taking a secret uses: `--set <field>=<value>` for a\n * plain field; for a secret (which includes a JSON value, which can carry\n * one) `--set-secret <field>=env:…|file:…|stdin`, `--secret-env|file|stdin`\n * for a single one, or `--browser`; otherwise a prompt at a terminal, hidden\n * for a secret. Each value is then typed by its field (`connect-fields.ts`).\n *\n * In a script or an agent run with no secret flags, an optional field\n * nobody gave is skipped rather than refused, so a product whose fields are\n * all optional (GitHub) goes straight to its sign-in.\n *\n * `set` names the fields given by `--set`: the host refuses a secret among\n * them (`SECRET_AS_ARGUMENT`), as `--set` here already does.\n */\nasync function enterFields(\n  ctx: CliContext,\n  args: TeamsArgs,\n  plan: TeamConnectPlan,\n  again: string,\n): Promise<{ fields: Record<string, FieldValue>; set: string[] }> {\n  const plain = parsePlainValues(args.flags?.set, 'default_labels=bug,triage');\n  const secret = readSecretFlags(args.flags);\n  const interactive = canPrompt(ctx, args);\n  const asking = interactive || secretInputGiven(secret);\n  // Without a terminal, a secret flag or any --set, only the required fields\n  // are asked for (and refused); an optional one is skipped.\n  const fields =\n    asking || Object.keys(plain).length > 0\n      ? plan.fields\n      : plan.fields.filter((field) => field.required);\n  if (\n    interactive &&\n    !secretInputGiven(secret) &&\n    fields.some((field) => !(field.name in plain))\n  ) {\n    ctx.log(\n      `${plan.product.name} for ${plan.scope === 'user' ? 'you, in' : 'team'} ${plan.team.slug}: enter what the app's form asks${plan.signIn === 'app' ? ' after the sign-in' : ''}. Secrets are hidden and never shown again.`,\n    );\n  }\n\n  const byName = new Map(plan.fields.map((field) => [field.name, field]));\n  const raw =\n    fields.length === 0 && Object.keys(plain).length === 0\n      ? {}\n      : await collectSecrets(ctx, {\n          fields: fields.map((field) => ({\n            name: field.name,\n            label: field.label,\n            sensitive: field.sensitive,\n            required: field.required,\n            ...(field.description ? { description: field.description } : {}),\n          })),\n          plain,\n          flags: secret,\n          io: teamsSecretIO(args),\n          interactive,\n          title: `${plan.product.name} for ${plan.team.slug}`,\n          refusal: `${plan.product.name} needs its form's fields (${fields\n            .filter((field) => field.required)\n            .map((field) => `${field.label} [${field.name}]`)\n            .join(', ')}), and there is no terminal to ask at.`,\n          again: again.replace(/^ekanos /, ''),\n          prompt: (spec) => {\n            const field = byName.get(spec.name)!;\n            if (field.description) ctx.log(`  ${field.description}`);\n            return (\n              field.sensitive\n                ? (args.askSecret ?? promptHidden)\n                : (args.ask ?? promptLine)\n            )(fieldPrompt(field));\n          },\n        });\n\n  const values: Record<string, FieldValue> = {};\n  for (const [name, text] of Object.entries(raw)) {\n    const field = byName.get(name);\n    if (!field) continue;\n    const value = parseFieldValue(field, text);\n    if (value !== undefined) values[name] = value;\n  }\n  const missing = plan.fields.filter(\n    (field) => field.required && values[field.name] === undefined,\n  );\n  if (missing.length > 0) {\n    throw validationError(\n      `${missing.map((field) => `${field.label} (${field.name})`).join(', ')} ${missing.length === 1 ? 'is' : 'are'} needed.`,\n      `Run \"${again}\" again.`,\n    );\n  }\n  return {\n    fields: values,\n    set: Object.keys(plain).filter((name) => plain[name] !== ''),\n  };\n}\n\n/** `--link-only`: the team's page and whether it is connected. */\nasync function printLink(\n  ctx: CliContext,\n  client: TeamsClient,\n  host: string,\n  target: { source: string; team: string; product: string },\n): Promise<ExitCode> {\n  const status = await client.call((token) =>\n    showTeamIntegration(host, token, target),\n  );\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${target.product}\" is not enabled on ${status.source.slug}.`,\n      `\"ekanos sources products --source ${status.source.slug}\" shows what this Source has; a super-admin enables a product for a Source.`,\n    );\n  }\n  const connected = status.activation !== null;\n  const rows: ResultRow[] = [\n    ['Open', status.connectUrl],\n    [\n      'Status',\n      connected\n        ? `connected${status.activation?.activatedAt ? ` ${status.activation.activatedAt.slice(0, 10)}` : ''}`\n        : 'not connected',\n    ],\n  ];\n  return ctx.succeed(\n    { host, ...status },\n    ctx.ui.result({\n      title: connected\n        ? `${status.team.slug} has connected ${status.product.name}`\n        : `Connect link for ${status.team.slug} · ${status.product.name}`,\n      tone: connected ? 'ok' : 'warn',\n      rows,\n      notes: [\n        'A team member signs in there and clicks Connect.',\n        `\"ekanos teams connect ${status.team.slug} ${status.product.slug}\" (without --link-only) connects it from here.`,\n      ],\n    }),\n  );\n}\n\nfunction statusOf(plan: TeamConnectPlan, named = false): string {\n  if (!plan.connected) return named ? 'not installed' : 'not connected';\n  return `${named ? 'installed' : 'connected'}${plan.connectedAt ? ` ${plan.connectedAt.slice(0, 10)}` : ''}`;\n}\n"]}
+{"version":3,"file":"teams-connect.js","sourceRoot":"","sources":["../../src/commands/teams-connect.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAEpB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEjE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE3E,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAGL,eAAe,EACf,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEzD,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAGL,SAAS,EACT,SAAS,EACT,oBAAoB,EACpB,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAE/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,KAA0E;;IAE1E,MAAM,MAAM,mBACV,MAAM,EACN,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IACnB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC9D,CAAC;IAEF,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACxE,OAAO,qBAAqB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,gCAC1D,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,OAAO,EAAE,KAAK,CAAC,OAAO,IACnB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KACrC,IAAI,QAAE,IAAI,CAAC,OAAO,mCAAI,aAAa,IACnC,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE/D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC3C,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAC/C,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC;QACnD,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IACtB,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACvD,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,YAAY,EAAE;QACrD,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;QACpB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;QAC1B,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;KACzB,CAAC,EAAE,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,cAAc;YACjB,MAAM,iBAAiB,OACrB,IAAI,CAAC,MAAM,mCACT,IAAI,KAAK,CAAC,OAAO,uBAAuB,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,EAC7D,mEAAmE,KAAK,CAAC,OAAO,0BAA0B,IAAI,CAAC,MAAM,CAAC,IAAI,oGAAoG,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CACtP,CAAC;QACJ,KAAK,gBAAgB;YACnB,MAAM,iBAAiB,OACrB,IAAI,CAAC,MAAM,mCAAI,GAAG,IAAI,8BAA8B,EACpD,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY;gBACnE,CAAC,CAAC,qCAAqC,IAAI,CAAC,MAAM,CAAC,IAAI,0CAA0C;gBACjG,CAAC,CAAC,gFAAgF,CACrF,CAAC;QACJ,KAAK,aAAa;YAChB,MAAM,iBAAiB,OACrB,IAAI,CAAC,MAAM,mCAAI,GAAG,IAAI,iCAAiC,EACvD,iCAAiC,IAAI,CAAC,UAAU,EAAE,CACnD,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAC/B,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,GAAG,IAAI,yBAAyB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;aACzC,CAAC,CACH,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,GAAG,CAAC,OAAO,CAChB,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EACzC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,IAAI,CAAC,SAAS;oBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,IAAI,EAAE;oBAC3C,CAAC,CAAC,GAAG,IAAI,4BAA4B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;gBACpC,IAAI,EAAE;oBACJ,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC;oBACzB,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;iBAC3B;gBACD,KAAK,EAAE,IAAI,CAAC,SAAS;oBACnB,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC;8BACE,IAAI,CAAC,MAAM,mCACT,GAAG,IAAI,4CAA4C;wBACrD,iDAAiD;qBAClD;aACN,CAAC,CACH,CAAC;QACJ;YACE,MAAM;IACV,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;YAC5B,KAAK,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,EAAE;YACnF,IAAI,EAAE;gBACJ,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;gBACjC,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC;aAC/B;YACD,KAAK,EAAE;gBACL,sBAAsB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,yBAAyB;gBAClF,uEAAuE,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc;aAC7K;SACF,CAAC,CAAC;QACH,OAAO,KAAK;YACV,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC;YACvD,CAAC,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE;gBACpD,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE;gBACrC,OAAO;aACR,CAAC,CAAC;IACT,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACxD,OAAO,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE;QACnE,IAAI;QACJ,IAAI,EAAE,KAAK;YACT,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC;KAC1E,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,eAAe,CAC5B,GAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,IAAqB;;IAErB,MAAM,KAAK,GAAG,MAAA,MAAA,IAAI,CAAC,MAAM,0CAAE,KAAK,0CAAE,WAAW,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO;IAC5C,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACjC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE;YACrC,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS;YACvE,MAAM;SACP,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,GAAG,CAAC,GAAG,CACL,uBAAuB,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACnH,CAAC;QACF,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAA,MAAA,KAAK,CAAC,KAAK,0CAAE,YAAY,CAAC,IAAI,CAC3C,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,IAAI;YAC9B,IAAI,CAAC,GAAG,KAAK,QAAQ;YACrB,IAAI,CAAC,SAAS;YACd,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,KAAK,CACzC,0CAAE,SAAS,CAAC;QACb,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,GAAG,CAAC,IAAI,CACN,SAAS,KAAK,CAAC,GAAG,YAAY,MAAM,aAAa,MAAM,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,oBAAoB,KAAK,2BAA2B,GAAG,EAAE,kBAAkB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,SAAS,MAAM,aAAa,MAAM,EAAE,CACjO,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAC1B,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,KAAqD,EACrD,IAAwD;;IAExD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE;QAC/B,MAAM;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CACH,CAAC;IACF,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAEtE,MAAM,OAAO,GAAG,CAAC,YAAoB,EAAE,EAAE,CACvC,wBAAwB,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,iBAAiB,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACpH,MAAM,GAAG,GAAG,CAAC,KAA+B,EAAE,EAAE,CAC9C,GAAG,KAAK,CAAC,KAAK,yBAAyB,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;IAErN,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iCAEX,IAAI,CAAC,IAAI,KACZ,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACzC,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;aACrC,CAAC,CAAC,KAEL;YACE,IAAI,CAAC,OAAO;YACZ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC5B,SAAS,GAAG,CAAC,KAAK,CAAC,EAAE;gBACrB,kCAAkC,GAAG,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE;aACzE,CAAC;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,IAAI,GAAa,CAAC,CAAC;IACvB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACpB,MAAM,MAAM,GAAG,CACb,MAAM,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAAC,WAAW,KAAK,CAAC,KAAK,cAAc,CAAC,CACrE;aACE,IAAI,EAAE;aACN,WAAW,EAAE,CAAC;QACjB,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kCACtD,KAAK,KACR,UAAU,EAAE,KAAK,CAAC,YAAY,IAC9B,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,iBAAiB,CAAC,MAA6B;;IAC7D,OAAO,OAAC,MAAM,CAAC,WAAW,mCAAI,EAAE,CAAC,CAAC,MAAM,CACtC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,IAAqB;IACpC,OAAO,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,MAAmB,EACnB,IAAY,EACZ,MAAyD,EACzD,IAAqB;;;IAErB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;IACF,OAAO,aACL,MAAA,MAAA,MAAM,CAAC,WAAW,0CAAE,IAAI,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CACpD,0CAAE,KAAK,mCACR,MAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,0CACrE,KAAK,mCACT,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,YAAY,GAAG,CAC9C,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAyD,EACzD,IAAqB;;;IAErB,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,iBAAiB,OACrB,IAAI,CAAC,aAAa,mCAChB,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,4DAA4D,EAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CACvB,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GACX,IAAI,CAAC,IAAI,KAAK,QAAQ;QACpB,CAAC,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,kBAClC,MAAM,EAAE,OAAO,CAAC,MAAM,IACnB,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EACvD,CACH,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,+BACd,IAAI,IAAK,OAAO,KAAE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,KACrD,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,aAAa,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7E,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC;gBACE,KAAK;gBACL,OAAO,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM;oBAC3B,CAAC,CAAC,QAAQ,MAAA,MAAA,OAAO,CAAC,IAAI,CAAC,MAAM,0CAAE,KAAK,mCAAI,cAAc,2BAA2B;oBACjF,CAAC,CAAC,gBAAgB;aACrB;YACD,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;SACvC;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAKC,EACD,IAAqB,EACrB,OAA2B,EAC3B,OAQC;;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1H,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,MAAM,iBAAiB,OACrB,IAAI,CAAC,aAAa,mCAAI,wCAAwC,EAC9D,IAAI,CAAC,KAAK,KAAK,MAAM;YACnB,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACxB,CAAC,CAAC,oBAAoB,IAAI,CAAC,IAAI,CAAC,IAAI,kBAAkB,KAAK,4EAA4E,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAC9K,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;QACF,MAAM,YAAY,SAAG,IAAI,CAAC,YAAY,mCAAI,SAAS,CAAC;QACpD,MAAM,GAAG,SACP,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,YAAY,CAAC,mCACpE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,IACE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC;gBACrB,CAAC,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAC9C,CAAC;gBACD,MAAM,UAAU,CACd,GAAG,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,GAAG,CAAC,MAAM;qBAC3D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;qBAC7B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;qBAChC,IAAI,CAAC,IAAI,CAAC,wCAAwC,EACrD,2EAA2E,kBAAkB,0CAA0C,GAAG,EAAE,IAAI,KAAK,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CACrL,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,GAAG,CACL,GAAG,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,IAAI,kDAAkD,CAClF,CAAC;YACF,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,6DAA6D;IAC7D,MAAM,OAAO,GACX,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QAC7C,CAAC,CAAC,MAAM,WAAW,CACf,GAAG,EACH,IAAI,EACJ,IAAI,EACJ,GAAG,KAAK,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CACxC;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC1C,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,gDAC/B,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAChC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAC3C,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAClE,CACH,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,iBAAiB,CACrB,sBAAsB,OAAO,CAAC,MAAM,sCAAsC,EAC1E,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,oBAAoB,CAAC,OAAO,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;IAE3D,MAAM,MAAM,SAAG,OAAO,CAAC,IAAI,CAAC,MAAM,mCAAI,IAAI,CAAC,MAAM,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjE,GAAG,CAAC,GAAG,CACL,SAAS;QACP,CAAC,CAAC;YACE,KAAK;gBACH,CAAC,CAAC,WAAW,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,uEAAuE;gBAC9G,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,mBAAmB,IAAI,CAAC,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,EAAE,GAAG;YACnJ,KAAK,OAAO,CAAC,YAAY,EAAE;YAC3B,iCAAiC,OAAO,OAAO;YAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK;gBACvB,CAAC,CAAC;oBACE,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,IAAI,CAAC,MAAM,CAAC,IAAI,4FAA4F;iBAClK;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,IAAI,CAAC;QACd,CAAC,CAAC;YACE,qBAAqB,MAAA,MAAM,CAAC,KAAK,mCAAI,YAAY,WAAW,KAAK,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,EAAE,GAAG;YACpN,KAAK,OAAO,CAAC,YAAY,EAAE;YAC3B,2CAA2C,OAAO,OAAO;YACzD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK;gBACvB,CAAC,CAAC;oBACE,+BAA+B,IAAI,CAAC,MAAM,CAAC,IAAI,uBAAuB;iBACvE;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,IAAI,CAAC,IAAI,CAAC,CACjB,CAAC;IAEF,uEAAuE;IACvE,+DAA+D;IAC/D,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/C,OAAC,IAAI,CAAC,OAAO,mCAAI,aAAa,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxD,CAAC;IAED,0EAA0E;IAC1E,+DAA+D;IAC/D,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC;IAC/D,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,YAAY,EAAE,CAAC;QAChD,OAAO,GAAG,CAAC,OAAO,CAChB;YACE,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,KAAK;SACjB,EACD,GAAG,CAAC,EAAE,CAAC,IAAI,CACT,YAAY;YACV,CAAC,CAAC,gIAAgI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI;YACnK,CAAC,CAAC,sCAAsC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,CAC5E,CACF,CAAC;IACJ,CAAC;IAED,GAAG,CAAC,GAAG,CACL,iFAAiF,CAClF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAC9E,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,kBAC5B,UAAU,CAAC,OAAO,QAAE,IAAI,CAAC,WAAW,mCAAI,IAAI,CAAC,GAAA,CAC9C,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAC9C,CAAC;QACF,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;YACF,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;gBAC1D,OAAO,EAAE;oBACP,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;wBACZ,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,IAAI,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;wBAC3E,IAAI,EAAE;4BACJ,CAAC,cAAc,QAAE,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,MAAM,CAAC;4BAC/C,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;yBACzC;wBACD,KAAK,EAAE,KAAK;4BACV,CAAC,CAAC;gCACE,8CAA8C,IAAI,CAAC,OAAO,CAAC,IAAI,mCAAmC,IAAI,CAAC,IAAI,CAAC,IAAI,6BAA6B;6BAC9I;4BACH,CAAC,CAAC,EAAE;qBACP,CAAC;oBACF,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC;aACb,CAAC;YACF,OAAO,OAAO,CAAC,IAAI;gBACjB,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,MAAM,eAAe,CACnB,qDAAqD,EACrD,QAAQ,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,2BAA2B,CAC7E,CAAC;AACJ,CAAC;AAED,sDAAsD;AACtD,SAAS,YAAY,CACnB,MAAyC,EACzC,IAAqB;IAErB,OAAO,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,aAAa,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED;;;GAGG;AACH,SAAS,QAAQ,CACf,IAAqB,EACrB,MAAyC;IAEzC,OAAO,0EAA0E,IAAI,CAAC,IAAI,CAAC,IAAI,iBAAiB,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,2CAA2C,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,sBAAsB,CAAC;AACxO,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,IAAqB,EACrB,KAAa;;IAEb,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAA,IAAI,CAAC,KAAK,0CAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,WAAW,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,WAAW,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACvD,2EAA2E;IAC3E,2DAA2D;IAC3D,MAAM,MAAM,GACV,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,MAAM;QACb,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpD,IACE,WAAW;QACX,CAAC,gBAAgB,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,EAC9C,CAAC;QACD,GAAG,CAAC,GAAG,CACL,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,mCAAmC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,6CAA6C,CAC1N,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GACP,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QACpD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE;YACxB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAC5B,IAAI,EAAE,KAAK,CAAC,IAAI,EAChB,KAAK,EAAE,KAAK,CAAC,KAAK,EAClB,SAAS,EAAE,KAAK,CAAC,SAAS,EAC1B,QAAQ,EAAE,KAAK,CAAC,QAAQ,IACrB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAChE,CAAC;YACH,KAAK;YACL,KAAK,EAAE,MAAM;YACb,EAAE,EAAE,aAAa,CAAC,IAAI,CAAC;YACvB,WAAW;YACX,KAAK,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YACnD,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,MAAM;iBAC7D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;iBACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC;iBAChD,IAAI,CAAC,IAAI,CAAC,wCAAwC;YACrD,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;;gBACf,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;gBACrC,IAAI,KAAK,CAAC,WAAW;oBAAE,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;gBACzD,OAAO,CACL,KAAK,CAAC,SAAS;oBACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;oBAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACxB,CAAC;SACF,CAAC,CAAC;IAET,MAAM,MAAM,GAA+B,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAChD,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAC9D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,CACnB,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,UAAU,EACvH,QAAQ,KAAK,UAAU,CACxB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM;QACd,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;KAC7D,CAAC;AACJ,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,SAAS,CACtB,GAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAyD;;IAEzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACzC,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,MAAM,CAAC,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EAC9D,qCAAqC,MAAM,CAAC,MAAM,CAAC,IAAI,6EAA6E,CACrI,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC;IAC7C,MAAM,IAAI,GAAgB;QACxB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC;QAC3B;YACE,QAAQ;YACR,SAAS;gBACP,CAAC,CAAC,YAAY,CAAA,MAAA,MAAM,CAAC,UAAU,0CAAE,WAAW,EAAC,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACtG,CAAC,CAAC,eAAe;SACpB;KACF,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS;YACd,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;YAC5D,CAAC,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE;QACnE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAC/B,IAAI;QACJ,KAAK,EAAE;YACL,kDAAkD;YAClD,yBAAyB,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,gDAAgD;SACjH;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAqB,EAAE,KAAK,GAAG,KAAK;IACpD,IAAI,CAAC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;IACtE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC9G,CAAC","sourcesContent":["import {\n  TeamAgentListSchema,\n  type TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport { fieldPrompt, parseFieldValue } from '../connect-fields';\nimport type { CliContext } from '../context';\nimport { invalidStateError, usageError, validationError } from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { cli } from '../invocation';\nimport { assertBrowserSafeUrl, openInBrowser } from '../open-url';\nimport {\n  FIELD_SECRET_FORMS,\n  collectSecrets,\n  parsePlainValues,\n  readSecretFlags,\n  secretInputGiven,\n} from '../secret-input';\nimport {\n  type FieldValue,\n  type TeamConnectPlan,\n  showTeamConnect,\n  startTeamConnect,\n} from '../team-connect-api';\nimport { call, showTeamIntegration } from '../teams-api';\nimport type { ResultRow } from '../ui';\nimport { promptHidden, promptLine } from './apps';\nimport { scopeHiddenLines } from './scope-notice';\nimport {\n  type TeamsArgs,\n  type TeamsClient,\n  canPrompt,\n  checklist,\n  promptAndSaveTeamApp,\n  teamsSecretIO,\n} from './teams';\nimport { isTeamChannel, runTeamChannelInstall } from './teams-channel-install';\n\n/**\n * `teams connect <team> <product>` — connect a product for one team, doing\n * whichever the integration needs (the host's plan decides, never the CLI):\n *\n *   - works as shipped → says so; not self-serve or not enabled → refuses\n *     with the reason (and points at `sources products` for the latter);\n *   - form fields → asks them here (secrets hidden, never as arguments) and\n *     activates exactly as the app's form does;\n *   - OAuth → runs `teams app set` inline when the team's own app is needed\n *     first (Zendesk), then a one-time sign-in link for the member who\n *     consents: the caller when a member, else `--as <email>`. Opens it for\n *     the caller (unless `--no-open`), always prints it, and waits until the\n *     team is connected (unless `--no-wait`);\n *   - a form only the browser can fill → prints the team's page.\n *\n * `--connection <id>` connects one of the integration's named connections\n * instead of the main one — Linear's `agent`, the team's own Linear app\n * installed as a workspace member, which is what makes Linear send the\n * @mention and assignment webhooks an agent's triggers listen for. It runs\n * the same way: the team app's fields when missing, then the sign-in, then\n * the wait until it is installed.\n *\n * Without `--connection`, once the main connection is made (or already\n * was), a named connection the team's agents' triggers wait on is offered\n * next — at a terminal it asks and installs it, otherwise it names the\n * command. \"Connected\" is not the goal; an agent that can be reached is.\n *\n * `--reconnect` connects it again even though it reads as connected — for\n * a revoked or expired sign-in, or new form values. An OAuth reconnect\n * prints the link and returns: the team already reads as connected, so\n * there is nothing to wait for.\n *\n * `--link-only` keeps the old behaviour: the team's page and its status.\n *\n * `slack` and `linear-app` install the channels agent triggers answer\n * through — Slack, and Ekanos's own Linear Agents app — by the same\n * link-and-wait (`teams-channel-install.ts`).\n */\nexport async function runTeamConnect(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  input: { team: string; product: string; as?: string; connection?: string },\n): Promise<ExitCode> {\n  const target = {\n    source,\n    team: input.team,\n    product: input.product,\n    ...(input.connection ? { connection: input.connection } : {}),\n  };\n\n  // Slack and Ekanos's Linear Agents app: the channels a `slack` or `linear`\n  // agent trigger answers through, installed by their own flows.\n  if (!input.connection && !args.linkOnly && isTeamChannel(input.product)) {\n    return runTeamChannelInstall(ctx, args, client, host, source, {\n      team: input.team,\n      channel: input.product,\n      ...(input.as ? { as: input.as } : {}),\n      open: args.openUrl ?? openInBrowser,\n    });\n  }\n\n  if (args.linkOnly) return printLink(ctx, client, host, target);\n\n  const { plan } = await client.call((token) =>\n    showTeamConnect(host, token, target, input.as),\n  );\n  const named = isNamed(plan);\n  const name = named\n    ? await connectionLabel(client, host, target, plan)\n    : plan.product.name;\n  await warnOtherRunsAs(ctx, client, host, source, plan);\n  for (const line of scopeHiddenLines(plan.productScope, {\n    team: plan.team.slug,\n    product: plan.product.slug,\n    source: plan.source.slug,\n  })) {\n    ctx.warn(line);\n  }\n\n  switch (plan.mode) {\n    case 'not-entitled':\n      throw invalidStateError(\n        plan.reason ??\n          `\"${input.product}\" is not enabled on ${plan.source.slug}.`,\n        `Enable it for the Source first: \"ekanos sources products enable ${input.product}\" as a Source admin if ${plan.source.slug} built it, otherwise a super-admin (/admin in the browser). \"ekanos sources products\" shows what ${plan.source.slug} has.`,\n      );\n    case 'not-self-serve':\n      throw invalidStateError(\n        plan.reason ?? `${name} is not connected by a team.`,\n        plan.product.kind === 'feature' || plan.product.kind === 'experience'\n          ? `\"ekanos sources products --source ${plan.source.slug}\" shows whether it is on for the Source.`\n          : 'It is turned on for the Source by Ekanos; there is nothing for the team to do.',\n      );\n    case 'unsupported':\n      throw invalidStateError(\n        plan.reason ?? `${name} cannot be connected from here.`,\n        `Open the team's page instead: ${plan.connectUrl}`,\n      );\n    case 'works-as-shipped':\n      return ctx.succeed(\n        { host, plan, connected: true },\n        ctx.ui.result({\n          title: `${name} works as shipped for ${plan.team.slug}`,\n          rows: [['Status', 'nothing to connect']],\n        }),\n      );\n    case 'browser':\n      return ctx.succeed(\n        { host, plan, connected: plan.connected },\n        ctx.ui.result({\n          title: plan.connected\n            ? `${plan.team.slug} has connected ${name}`\n            : `${name} connects in the app for ${plan.team.slug}`,\n          tone: plan.connected ? 'ok' : 'warn',\n          rows: [\n            ['Open', plan.connectUrl],\n            ['Status', statusOf(plan)],\n          ],\n          notes: plan.connected\n            ? []\n            : [\n                plan.reason ??\n                  `${name} connects through its own form in the app.`,\n                'A team admin signs in there and clicks Connect.',\n              ],\n        }),\n      );\n    default:\n      break;\n  }\n\n  if (plan.connected && !args.reconnect) {\n    const summary = ctx.ui.result({\n      title: `${plan.team.slug} has already ${named ? 'installed' : 'connected'} ${name}`,\n      rows: [\n        ['Status', statusOf(plan, named)],\n        ['Team page', plan.connectUrl],\n      ],\n      notes: [\n        `\"ekanos teams show ${plan.team.slug} ${plan.product.slug}\" shows the full setup.`,\n        `Broken (revoked or expired)? Connect it again: ekanos teams connect ${plan.team.slug} ${plan.product.slug}${named ? ` --connection ${plan.connectionId}` : ''} --reconnect`,\n      ],\n    });\n    return named\n      ? ctx.succeed({ host, plan, connected: true }, summary)\n      : offerChannels(ctx, args, client, host, source, input, {\n          data: { host, plan, connected: true },\n          summary,\n        });\n  }\n\n  if (plan.mode === 'fields' || plan.mode === 'no-fields') {\n    return activate(ctx, args, client, host, target, plan);\n  }\n  return connectOAuth(ctx, args, client, host, target, plan, input.as, {\n    name,\n    then: named\n      ? undefined\n      : (done) => offerChannels(ctx, args, client, host, source, input, done),\n  });\n}\n\n/**\n * A personal connection belongs to whoever makes it, but a provided agent\n * uses the personal connection of the person it runs as — so connecting\n * your own leaves the agent missing it (CLI audit P0-5). Name each agent\n * that runs as someone else and the command that connects it for them.\n */\nasync function warnOtherRunsAs(\n  ctx: CliContext,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  plan: TeamConnectPlan,\n): Promise<void> {\n  const email = plan.member?.email?.toLowerCase();\n  if (plan.scope !== 'user' || !email) return;\n  let list;\n  try {\n    list = await client.call((token) =>\n      call(host, token, TeamAgentListSchema, {\n        method: 'GET',\n        path: `/api/partner/teams/${encodeURIComponent(plan.team.slug)}/agents`,\n        source,\n      }),\n    );\n  } catch (error) {\n    ctx.log(\n      `Could not check who ${plan.team.slug}'s agents run as: ${error instanceof Error ? error.message : String(error)}`,\n    );\n    return;\n  }\n  for (const entry of list.agents) {\n    const runsAs = entry.agent?.requirements.find(\n      (item) =>\n        item.key === plan.product.slug &&\n        item.via === 'person' &&\n        item.viaDetail &&\n        item.viaDetail.toLowerCase() !== email,\n    )?.viaDetail;\n    if (!runsAs) continue;\n    ctx.warn(\n      `Note: ${entry.key} runs as ${runsAs} and uses ${runsAs}'s ${plan.product.name} connection, not ${email}'s. For the agent, run: ${cli()} teams connect ${plan.team.slug} ${plan.product.slug} --as ${runsAs} --source ${source}`,\n    );\n  }\n}\n\n/**\n * After the main connection: the named connections the team's agents'\n * triggers wait on and the team has not installed (Linear's agent). At a\n * terminal, ask and install each; otherwise name the command, in the\n * result and its JSON (`channelsToInstall`).\n */\nasync function offerChannels(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  source: string,\n  input: { team: string; product: string; as?: string },\n  done: { data: Record<string, unknown>; summary: string },\n): Promise<ExitCode> {\n  const status = await client.call((token) =>\n    showTeamIntegration(host, token, {\n      source,\n      team: input.team,\n      product: input.product,\n    }),\n  );\n  const waiting = channelsToInstall(status);\n  if (waiting.length === 0) return ctx.succeed(done.data, done.summary);\n\n  const command = (connectionId: string) =>\n    `ekanos teams connect ${input.team} ${input.product} --connection ${connectionId} --source ${status.source.slug}`;\n  const why = (entry: (typeof waiting)[number]) =>\n    `${entry.label} is not installed for ${input.team}, and ${entry.neededBy.map((need) => `${need.agent} (${need.triggers.join(', ')})`).join(', ')} only start${entry.neededBy.length === 1 ? 's' : ''} through it.`;\n\n  if (!canPrompt(ctx, args)) {\n    return ctx.succeed(\n      {\n        ...done.data,\n        channelsToInstall: waiting.map((entry) => ({\n          connectionId: entry.connectionId,\n          label: entry.label,\n          neededBy: entry.neededBy,\n          command: command(entry.connectionId),\n        })),\n      },\n      [\n        done.summary,\n        ...waiting.flatMap((entry) => [\n          `Next: ${why(entry)}`,\n          `  Install it in your terminal: ${cli()} ${command(entry.connectionId)}`,\n        ]),\n      ].join('\\n'),\n    );\n  }\n\n  ctx.log(done.summary);\n  let code: ExitCode = 0;\n  for (const entry of waiting) {\n    ctx.log(why(entry));\n    const answer = (\n      await (args.ask ?? promptLine)(`Install ${entry.label} now? [Y/n] `)\n    )\n      .trim()\n      .toLowerCase();\n    if (answer !== '' && answer !== 'y' && answer !== 'yes') {\n      ctx.log(`Skipped. Later: ${command(entry.connectionId)}`);\n      continue;\n    }\n    code = await runTeamConnect(ctx, args, client, host, source, {\n      ...input,\n      connection: entry.connectionId,\n    });\n  }\n  return code;\n}\n\n/** Named connections the team's agents wait on and the team has not installed. */\nexport function channelsToInstall(status: TeamIntegrationStatus) {\n  return (status.connections ?? []).filter(\n    (entry) =>\n      entry.connectionId !== 'default' &&\n      !entry.connected &&\n      entry.neededBy.length > 0,\n  );\n}\n\nfunction isNamed(plan: TeamConnectPlan): boolean {\n  return Boolean(plan.connectionId && plan.connectionId !== 'default');\n}\n\nasync function connectionLabel(\n  client: TeamsClient,\n  host: string,\n  target: { source: string; team: string; product: string },\n  plan: TeamConnectPlan,\n): Promise<string> {\n  const status = await client.call((token) =>\n    showTeamIntegration(host, token, target),\n  );\n  return (\n    status.connections?.find(\n      (entry) => entry.connectionId === plan.connectionId,\n    )?.label ??\n    status.teamApps.find((entry) => entry.connectionId === plan.connectionId)\n      ?.label ??\n    `${plan.product.name} (${plan.connectionId})`\n  );\n}\n\nasync function activate(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: { source: string; team: string; product: string },\n  plan: TeamConnectPlan,\n): Promise<ExitCode> {\n  if (plan.scope === 'user' && !plan.member) {\n    throw invalidStateError(\n      plan.memberProblem ??\n        `${plan.product.name} is a personal connection: each member connects their own.`,\n      joinHint(plan, target),\n    );\n  }\n\n  const entered =\n    plan.mode === 'fields'\n      ? await enterFields(ctx, args, plan, connectAgain(target, plan))\n      : { fields: {}, set: [] };\n  const started = await client.call((token) =>\n    startTeamConnect(host, token, target, {\n      fields: entered.fields,\n      ...(entered.set.length > 0 ? { set: entered.set } : {}),\n    }),\n  );\n  return ctx.succeed(\n    { host, ...started, connected: started.plan.connected },\n    ctx.ui.result({\n      title: `Connected ${started.plan.product.name} for ${started.plan.team.slug}`,\n      rows: [\n        ['Status', statusOf(started.plan)],\n        [\n          'For',\n          started.plan.scope === 'user'\n            ? `you (${started.plan.member?.email ?? 'your account'}) — a personal connection`\n            : 'the whole team',\n        ],\n        ['Team page', started.plan.connectUrl],\n      ],\n    }),\n  );\n}\n\nasync function connectOAuth(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: {\n    source: string;\n    team: string;\n    product: string;\n    connection?: string;\n  },\n  plan: TeamConnectPlan,\n  asEmail: string | undefined,\n  options: {\n    /** What is being connected: the product, or a named connection's label. */\n    name: string;\n    /** On success, instead of finishing: the main connection's follow-ups. */\n    then?: (done: {\n      data: Record<string, unknown>;\n      summary: string;\n    }) => Promise<ExitCode>;\n  },\n): Promise<ExitCode> {\n  const named = isNamed(plan);\n  const name = options.name;\n  const again = `ekanos teams connect ${target.team} ${target.product}${named ? ` --connection ${plan.connectionId}` : ''}`;\n  if (!plan.member) {\n    throw invalidStateError(\n      plan.memberProblem ?? 'No member of the team can sign in yet.',\n      plan.scope === 'user'\n        ? joinHint(plan, target)\n        : `Name a member of ${plan.team.slug} who signs in: ${again} --as <email>. Or join it and sign in yourself: ekanos teams members add ${plan.team.slug} --self --role admin`,\n    );\n  }\n\n  if (plan.teamApp) {\n    const status = await client.call((token) =>\n      showTeamIntegration(host, token, target),\n    );\n    const connectionId = plan.connectionId ?? 'default';\n    const app =\n      status.teamApps.find((entry) => entry.connectionId === connectionId) ??\n      (named ? undefined : status.teamApps[0]);\n    if (app && app.fields.some((field) => !field.set)) {\n      if (\n        !canPrompt(ctx, args) &&\n        !secretInputGiven(readSecretFlags(args.flags))\n      ) {\n        throw usageError(\n          `${name} needs ${plan.team.slug}'s own app first (${app.fields\n            .filter((field) => !field.set)\n            .map((field) => field.secretName)\n            .join(', ')}), and there is no terminal to ask at.`,\n          `Without a terminal, pass --set <field>=<value> for the plain fields and ${FIELD_SECRET_FORMS}. Or run it yourself in your terminal: ${cli()} ${again} --source ${plan.source.slug}`,\n        );\n      }\n      ctx.log(\n        `${name} signs ${plan.team.slug} in through the team's own app. Set it up first:`,\n      );\n      await promptAndSaveTeamApp(ctx, args, client, host, target, status, app);\n    }\n  }\n\n  // An app sign-in (GitHub, ROAM) activates on return with what the app's\n  // form would add after the sign-in: asked now, applied then.\n  const entered =\n    plan.signIn === 'app' && plan.fields.length > 0\n      ? await enterFields(\n          ctx,\n          args,\n          plan,\n          `${again} --source ${plan.source.slug}`,\n        )\n      : undefined;\n  const started = await client.call((token) =>\n    startTeamConnect(host, token, target, {\n      ...(asEmail ? { as: asEmail } : {}),\n      ...(entered ? { fields: entered.fields } : {}),\n      ...(entered && entered.set.length > 0 ? { set: entered.set } : {}),\n    }),\n  );\n  if (started.result !== 'consent') {\n    throw invalidStateError(\n      `The host answered \"${started.result}\" where a sign-in link was expected.`,\n      'Run \"ekanos upgrade\" — the CLI and the host disagree on the connect contract.',\n    );\n  }\n  assertBrowserSafeUrl(started.authorizeUrl, 'sign-in link');\n\n  const member = started.plan.member ?? plan.member;\n  const forCaller = member.isCaller;\n  const expires = started.expiresAt.replace('T', ' ').slice(0, 16);\n  ctx.log(\n    forCaller\n      ? [\n          named\n            ? `Install ${name} for ${plan.team.slug} — sign in as an admin of the workspace it goes into, and approve it:`\n            : `Sign in to ${plan.product.name} as the account ${plan.team.slug} should use${plan.scope === 'user' ? ' (a personal connection: yours)' : ''}:`,\n          `  ${started.authorizeUrl}`,\n          `  (one-time link, valid until ${expires} UTC)`,\n          ...(plan.signIn === 'app'\n            ? [\n                `  It opens ${plan.product.name}'s sign-in through ${plan.source.slug}'s app: if the browser asks you to sign in to the app first, do, then open the link again.`,\n              ]\n            : []),\n        ].join('\\n')\n      : [\n          `Send this link to ${member.email ?? 'the member'} — they ${named ? `install ${name}` : `sign in to ${plan.product.name}`} for ${plan.team.slug}${plan.scope === 'user' ? ' (a personal connection: theirs)' : ''}:`,\n          `  ${started.authorizeUrl}`,\n          `  (one-time, for them only, valid until ${expires} UTC)`,\n          ...(plan.signIn === 'app'\n            ? [\n                `  They open it signed in to ${plan.source.slug}'s app as themselves.`,\n              ]\n            : []),\n        ].join('\\n'),\n  );\n\n  // Only ever the caller's own browser: opening a link meant for another\n  // member would sign the caller's provider account in for them.\n  if (forCaller && !args.noOpen && !ctx.jsonMode) {\n    (args.openUrl ?? openInBrowser)(started.authorizeUrl);\n  }\n\n  // A reconnect can't be waited on: the team already reads as connected, so\n  // nothing the host reports changes when the new sign-in lands.\n  const reconnecting = args.reconnect === true && plan.connected;\n  if (args.noWait || ctx.jsonMode || reconnecting) {\n    return ctx.succeed(\n      {\n        host,\n        plan: started.plan,\n        authorizeUrl: started.authorizeUrl,\n        expiresAt: started.expiresAt,\n        connected: false,\n      },\n      ctx.ui.hint(\n        reconnecting\n          ? `The current connection keeps working until the sign-in finishes; then its tokens are replaced. Check with \"ekanos teams show ${target.team} ${target.product}\".`\n          : `Then check with \"ekanos teams show ${target.team} ${target.product}\".`,\n      ),\n    );\n  }\n\n  ctx.log(\n    'Waiting for the sign-in to finish (Ctrl-C stops waiting; the link stays valid)…',\n  );\n  const deadline = Date.parse(started.expiresAt) || Date.now() + 10 * 60 * 1000;\n  while (Date.now() < deadline) {\n    await new Promise((resolve) =>\n      setTimeout(resolve, args.pollDelayMs ?? 3000),\n    );\n    const polled = await client.call((token) =>\n      showTeamConnect(host, token, target, asEmail),\n    );\n    if (polled.plan.connected) {\n      const status = await client.call((token) =>\n        showTeamIntegration(host, token, target),\n      );\n      const done = {\n        data: { host, plan: polled.plan, status, connected: true },\n        summary: [\n          ctx.ui.result({\n            title: `${named ? 'Installed' : 'Connected'} ${name} for ${plan.team.slug}`,\n            rows: [\n              ['Signed in by', member.email ?? member.userId],\n              ['Status', statusOf(polled.plan, named)],\n            ],\n            notes: named\n              ? [\n                  `Prove it end to end: @mention the agent in ${plan.product.name}, then \"ekanos runs list --team ${plan.team.slug}\" shows the run it started.`,\n                ]\n              : [],\n          }),\n          checklist(status).join('\\n'),\n        ].join('\\n'),\n      };\n      return options.then\n        ? options.then(done)\n        : ctx.succeed(done.data, done.summary);\n    }\n  }\n  throw validationError(\n    'The sign-in did not finish before the link expired.',\n    `Run \"${again}${asEmail ? ` --as ${asEmail}` : ''}\" again for a fresh link.`,\n  );\n}\n\n/** The command that connects it again, for a hint. */\nfunction connectAgain(\n  target: { team: string; product: string },\n  plan: TeamConnectPlan,\n): string {\n  return `ekanos teams connect ${target.team} ${target.product} --source ${plan.source.slug}`;\n}\n\n/**\n * A personal connection is the member's own: whoever runs connect makes\n * theirs, so a caller who is not on the team joins it first.\n */\nfunction joinHint(\n  plan: TeamConnectPlan,\n  target: { team: string; product: string },\n): string {\n  return `It is yours to connect once you are a member: ekanos teams members add ${plan.team.slug} --self, then ${connectAgain(target, plan)}. For someone else's, send them a link: ${connectAgain(target, plan)} --as <their-email>.`;\n}\n\n/**\n * The activation fields, through the shared secret input (`secret-input.ts`)\n * that every command taking a secret uses: `--set <field>=<value>` for a\n * plain field; for a secret (which includes a JSON value, which can carry\n * one) `--set-secret <field>=env:…|file:…|stdin`, `--secret-env|file|stdin`\n * for a single one, or `--browser`; otherwise a prompt at a terminal, hidden\n * for a secret. Each value is then typed by its field (`connect-fields.ts`).\n *\n * In a script or an agent run with no secret flags, an optional field\n * nobody gave is skipped rather than refused, so a product whose fields are\n * all optional (GitHub) goes straight to its sign-in.\n *\n * `set` names the fields given by `--set`: the host refuses a secret among\n * them (`SECRET_AS_ARGUMENT`), as `--set` here already does.\n */\nasync function enterFields(\n  ctx: CliContext,\n  args: TeamsArgs,\n  plan: TeamConnectPlan,\n  again: string,\n): Promise<{ fields: Record<string, FieldValue>; set: string[] }> {\n  const plain = parsePlainValues(args.flags?.set, 'default_labels=bug,triage');\n  const secret = readSecretFlags(args.flags);\n  const interactive = canPrompt(ctx, args);\n  const asking = interactive || secretInputGiven(secret);\n  // Without a terminal, a secret flag or any --set, only the required fields\n  // are asked for (and refused); an optional one is skipped.\n  const fields =\n    asking || Object.keys(plain).length > 0\n      ? plan.fields\n      : plan.fields.filter((field) => field.required);\n  if (\n    interactive &&\n    !secretInputGiven(secret) &&\n    fields.some((field) => !(field.name in plain))\n  ) {\n    ctx.log(\n      `${plan.product.name} for ${plan.scope === 'user' ? 'you, in' : 'team'} ${plan.team.slug}: enter what the app's form asks${plan.signIn === 'app' ? ' after the sign-in' : ''}. Secrets are hidden and never shown again.`,\n    );\n  }\n\n  const byName = new Map(plan.fields.map((field) => [field.name, field]));\n  const raw =\n    fields.length === 0 && Object.keys(plain).length === 0\n      ? {}\n      : await collectSecrets(ctx, {\n          fields: fields.map((field) => ({\n            name: field.name,\n            label: field.label,\n            sensitive: field.sensitive,\n            required: field.required,\n            ...(field.description ? { description: field.description } : {}),\n          })),\n          plain,\n          flags: secret,\n          io: teamsSecretIO(args),\n          interactive,\n          title: `${plan.product.name} for ${plan.team.slug}`,\n          refusal: `${plan.product.name} needs its form's fields (${fields\n            .filter((field) => field.required)\n            .map((field) => `${field.label} [${field.name}]`)\n            .join(', ')}), and there is no terminal to ask at.`,\n          again: again.replace(/^ekanos /, ''),\n          prompt: (spec) => {\n            const field = byName.get(spec.name)!;\n            if (field.description) ctx.log(`  ${field.description}`);\n            return (\n              field.sensitive\n                ? (args.askSecret ?? promptHidden)\n                : (args.ask ?? promptLine)\n            )(fieldPrompt(field));\n          },\n        });\n\n  const values: Record<string, FieldValue> = {};\n  for (const [name, text] of Object.entries(raw)) {\n    const field = byName.get(name);\n    if (!field) continue;\n    const value = parseFieldValue(field, text);\n    if (value !== undefined) values[name] = value;\n  }\n  const missing = plan.fields.filter(\n    (field) => field.required && values[field.name] === undefined,\n  );\n  if (missing.length > 0) {\n    throw validationError(\n      `${missing.map((field) => `${field.label} (${field.name})`).join(', ')} ${missing.length === 1 ? 'is' : 'are'} needed.`,\n      `Run \"${again}\" again.`,\n    );\n  }\n  return {\n    fields: values,\n    set: Object.keys(plain).filter((name) => plain[name] !== ''),\n  };\n}\n\n/** `--link-only`: the team's page and whether it is connected. */\nasync function printLink(\n  ctx: CliContext,\n  client: TeamsClient,\n  host: string,\n  target: { source: string; team: string; product: string },\n): Promise<ExitCode> {\n  const status = await client.call((token) =>\n    showTeamIntegration(host, token, target),\n  );\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${target.product}\" is not enabled on ${status.source.slug}.`,\n      `\"ekanos sources products --source ${status.source.slug}\" shows what this Source has; a super-admin enables a product for a Source.`,\n    );\n  }\n  const connected = status.activation !== null;\n  const rows: ResultRow[] = [\n    ['Open', status.connectUrl],\n    [\n      'Status',\n      connected\n        ? `connected${status.activation?.activatedAt ? ` ${status.activation.activatedAt.slice(0, 10)}` : ''}`\n        : 'not connected',\n    ],\n  ];\n  return ctx.succeed(\n    { host, ...status },\n    ctx.ui.result({\n      title: connected\n        ? `${status.team.slug} has connected ${status.product.name}`\n        : `Connect link for ${status.team.slug} · ${status.product.name}`,\n      tone: connected ? 'ok' : 'warn',\n      rows,\n      notes: [\n        'A team member signs in there and clicks Connect.',\n        `\"ekanos teams connect ${status.team.slug} ${status.product.slug}\" (without --link-only) connects it from here.`,\n      ],\n    }),\n  );\n}\n\nfunction statusOf(plan: TeamConnectPlan, named = false): string {\n  if (!plan.connected) return named ? 'not installed' : 'not connected';\n  return `${named ? 'installed' : 'connected'}${plan.connectedAt ? ` ${plan.connectedAt.slice(0, 10)}` : ''}`;\n}\n"]}

package/dist/experience/boundary.d.ts

@@ -1,8 +1,8 @@
-import type { Finding } from '@ekanos/integration-schema';
+import { type Finding } from '@ekanos/integration-schema';
 import type { ExperienceProject } from './project.js';
 export declare const BOUNDARY_CHECK = "checks/experience-boundary";
 /** Packages that may stay external at runtime (the host provides them). */
-export declare const ALLOWED_EXTERNALS: readonly ['react', 'react-dom', '@ekanos/sdk', '@ekanos/ui', 'zod', '@tanstack/react-query', 'next-intl', 'react-hook-form', '@hookform/resolvers'];
+export declare const ALLOWED_EXTERNALS: readonly ["react", "react-dom", "@ekanos/sdk", "@ekanos/ui", "zod", "@tanstack/react-query", "next-intl", "react-hook-form", "@hookform/resolvers"];
 /** Nearest `ekanos.json` at or above `start`, with its kind, or null. */
 export declare function nearestEkanosKind(start: string): {
     dir: string;

package/dist/experience/boundary.js

@@ -1,20 +1,11 @@
+import { EXPERIENCE_HOST_EXTERNALS, } from '@ekanos/integration-schema';
 import { build } from 'esbuild';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { isContained } from '../safe-fs.js';
 export const BOUNDARY_CHECK = 'checks/experience-boundary';
 /** Packages that may stay external at runtime (the host provides them). */
-export const ALLOWED_EXTERNALS = [
-    'react',
-    'react-dom',
-    '@ekanos/sdk',
-    '@ekanos/ui',
-    'zod',
-    '@tanstack/react-query',
-    'next-intl',
-    'react-hook-form',
-    '@hookform/resolvers',
-];
+export const ALLOWED_EXTERNALS = EXPERIENCE_HOST_EXTERNALS;
 const INTEGRATION_PACKAGE = /^@companydotcom\/integration-[a-z0-9-]+/;
 /** A pnpm-store or plain node_modules path of an integration package. */
 const INTEGRATION_IN_PATH = /@companydotcom[/+]integration-[a-z0-9-]+/;