@ekanos/cli 0.22.1 → 0.23.0

package/dist/commands/status.d.ts

@@ -1,7 +1,14 @@
+import { resolveAuthEnvironment } from '../auth/session.js';
 import type { CliContext } from '../context.js';
 import { type ExitCode } from '../exit-codes.js';
 import { type SubmissionListing, type SubmissionVersion } from '../publish-api.js';
 import { type Ui } from '../ui.js';
+/** How long `--wait` waits for a verdict when `--timeout` is not given. */
+export declare const DEFAULT_WAIT_MINUTES = 30;
+/** The wait before poll number `attempt` (0-based): 5s, 10s, 20s, then 30s. */
+export declare function pollDelayMs(attempt: number): number;
+/** `--timeout <minutes>`: a positive number, or the default. */
+export declare function parseTimeoutMinutes(raw: string | undefined): number;
 export interface StatusArgs {
     host?: string;
     /** Project directory (may contain ekanos.json). Defaults to cwd. */
@@ -23,6 +30,8 @@ export interface StatusArgs {
      * Changes the command's exit-code contract — see `runStatus`'s docstring.
      */
     watch?: boolean;
+    /** `--timeout <minutes>` for `--watch`/`--wait`: how long to wait (default 30). */
+    timeoutMinutes?: number;
     /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */
     sleep?: (ms: number) => Promise<void>;
     /** Injectable "now" for deterministic AGE rendering in tests. Defaults to `new Date()`. */
@@ -80,6 +89,41 @@ export interface StatusArgs {
  * pre-grouped view without re-deriving it.
  */
 export declare function runStatus(ctx: CliContext, args: StatusArgs): Promise<ExitCode>;
+export type GateWait = {
+    timedOut: false;
+    version: SubmissionVersion;
+} | {
+    timedOut: true;
+    lastState: string | null;
+    waitedMinutes: number;
+};
+/**
+ * Poll the submission list until `slug@version` reaches a verdict (see
+ * `WATCH_TERMINAL_STATES`) or `timeoutMinutes` of waiting has passed. Waits
+ * back off from 5s to a 30s cap. The elapsed time is the sum of the waits, so
+ * a test with an instant `sleep` still reaches the timeout.
+ */
+export declare function waitForGate(ctx: CliContext, env: ReturnType<typeof resolveAuthEnvironment>, target: {
+    slug: string;
+    source: string;
+    version: string;
+    timeoutMinutes: number;
+    sleep: (ms: number) => Promise<void>;
+}): Promise<GateWait>;
+/** The exit-11 outcome: the gate has not answered, but it may still. */
+export declare function failWatchTimeout(ctx: CliContext, slug: string, version: string, waited: Extract<GateWait, {
+    timedOut: true;
+}>): ExitCode;
+export declare function watchOutcomeData(slug: string, version: SubmissionVersion): {
+    slug: string;
+    version: string;
+    state: string;
+    gatedAt: string | null;
+    errorCount: number | null;
+    warnCount: number | null;
+    findings: import("../publish-api.js").GateFinding[];
+    stages: import("../publish-api.js").GateStageResult[];
+};
 /**
  * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions
  * with no timestamp at all) keep their original, server-given order —

package/dist/commands/status.js

@@ -1,8 +1,9 @@
+import { isRepoRoot } from '@ekanos/integration-schema/repo';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { loginHint } from '../auth/host-trust.js';
 import { refreshStoredSession, resolveAuthEnvironment, resolveIdentity, } from '../auth/session.js';
-import { CliError, authRequiredError, gateFailedError, preconditionError, } from '../errors.js';
+import { CliError, authRequiredError, gateFailedError, preconditionError, timeoutError, usageError, } from '../errors.js';
 import { ERROR_CODES } from '../exit-codes.js';
 import { formatFindings, relativeTime } from '../findings-renderer.js';
 import { EKANOS_CONFIG_FILENAME, loadProject } from '../project.js';
@@ -11,8 +12,25 @@ import { fetchSeatsWithOneRefresh } from '../seats.js';
 import { shortHost } from '../ui.js';
 import { announceUpdate, checkForUpdate } from '../update-notice.js';
 import { readProjectVersion } from './publish.js';
-/** `--watch`'s poll interval — matches the mission brief exactly. */
-const WATCH_POLL_INTERVAL_MS = 30000;
+/** The first wait between polls; each one after it doubles, up to the cap. */
+const WATCH_POLL_START_MS = 5000;
+const WATCH_POLL_CAP_MS = 30000;
+/** How long `--wait` waits for a verdict when `--timeout` is not given. */
+export const DEFAULT_WAIT_MINUTES = 30;
+/** The wait before poll number `attempt` (0-based): 5s, 10s, 20s, then 30s. */
+export function pollDelayMs(attempt) {
+    return Math.min(WATCH_POLL_START_MS * 2 ** attempt, WATCH_POLL_CAP_MS);
+}
+/** `--timeout <minutes>`: a positive number, or the default. */
+export function parseTimeoutMinutes(raw) {
+    if (raw === undefined)
+        return DEFAULT_WAIT_MINUTES;
+    const minutes = Number(raw);
+    if (!Number.isFinite(minutes) || minutes <= 0) {
+        throw usageError(`--timeout "${raw}" is not a number of minutes.`, 'Pass a positive number of minutes, e.g. "--wait --timeout 45".');
+    }
+    return minutes;
+}
 /**
  * The states `--watch` stops on. `submitted` is the only non-terminal state
  * a version can be in when watching starts (an already-`gated`/`dev`/
@@ -161,7 +179,7 @@ export async function runStatus(ctx, args) {
  * watching after a publish can never resolve against a stale prior version.
  */
 async function runWatch(ctx, env, project, args) {
-    var _a;
+    var _a, _b, _c;
     const source = project.source;
     if (!source) {
         // Unreachable — the caller already checked — but keeps this function's
@@ -169,14 +187,36 @@ async function runWatch(ctx, env, project, args) {
         throw preconditionError('This project has no "source" in ekanos.json yet.', 'Run "ekanos publish" at least once before watching its gate result.');
     }
     const targetVersion = readProjectVersion(project.dir);
-    const sleep = (_a = args.sleep) !== null && _a !== void 0 ? _a : defaultSleep;
     // Glyph-only restyle — the poll contract itself (exit codes, timing,
     // JSON envelope) is unchanged.
     const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;
     const prefix = ctx.jsonMode ? 'ekanos: ' : '';
     ctx.log(`${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +
-        `(polling every ${WATCH_POLL_INTERVAL_MS / 1000}s)…`);
-    for (;;) {
+        `(polling, up to ${(_a = args.timeoutMinutes) !== null && _a !== void 0 ? _a : DEFAULT_WAIT_MINUTES} min)…`);
+    const waited = await waitForGate(ctx, env, {
+        slug: project.slug,
+        source,
+        version: targetVersion,
+        timeoutMinutes: (_b = args.timeoutMinutes) !== null && _b !== void 0 ? _b : DEFAULT_WAIT_MINUTES,
+        sleep: (_c = args.sleep) !== null && _c !== void 0 ? _c : defaultSleep,
+    });
+    return waited.timedOut
+        ? failWatchTimeout(ctx, project.slug, targetVersion, waited)
+        : reportWatchOutcome(ctx, project.slug, waited.version);
+}
+/**
+ * Poll the submission list until `slug@version` reaches a verdict (see
+ * `WATCH_TERMINAL_STATES`) or `timeoutMinutes` of waiting has passed. Waits
+ * back off from 5s to a 30s cap. The elapsed time is the sum of the waits, so
+ * a test with an instant `sleep` still reaches the timeout.
+ */
+export async function waitForGate(ctx, env, target) {
+    var _a;
+    const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;
+    const prefix = ctx.jsonMode ? 'ekanos: ' : '';
+    const budgetMs = target.timeoutMinutes * 60000;
+    let waitedMs = 0;
+    for (let attempt = 0;; attempt += 1) {
         // Re-read the session from the credential store on EVERY iteration —
         // never carry one over in a closure. Auth0 rotates the refresh token on
         // every use (see `refreshStoredSession`'s docstring), so a token this
@@ -189,27 +229,41 @@ async function runWatch(ctx, env, project, args) {
         // `listWithOneRefresh` instead would only cover the first case.
         const current = env.store.read(env.host);
         if (!current) {
-            throw authRequiredError(`The session for ${env.host} is gone — "ekanos status --watch" ` +
+            throw authRequiredError(`The session for ${env.host} is gone — waiting for the gate ` +
                 'cannot continue without it.', loginHint(env));
         }
-        const integrations = await listWithOneRefresh(env, current, source, 'findings');
-        const version = findVersion(integrations, project.slug, targetVersion);
+        const integrations = await listWithOneRefresh(env, current, target.source, 'findings');
+        const version = findVersion(integrations, target.slug, target.version);
         if (version && WATCH_TERMINAL_STATES.has(version.state)) {
-            return reportWatchOutcome(ctx, project.slug, version);
+            return { timedOut: false, version };
+        }
+        const delay = pollDelayMs(attempt);
+        if (waitedMs + delay > budgetMs) {
+            return {
+                timedOut: true,
+                lastState: (_a = version === null || version === void 0 ? void 0 : version.state) !== null && _a !== void 0 ? _a : null,
+                waitedMinutes: Math.round(waitedMs / 6000) / 10,
+            };
         }
-        ctx.log(`${waitGlyph}${prefix}${project.slug}@${targetVersion} is ` +
+        ctx.log(`${waitGlyph}${prefix}${target.slug}@${target.version} is ` +
             `${version ? version.state : 'not visible yet'} — waiting…`);
-        await sleep(WATCH_POLL_INTERVAL_MS);
+        await target.sleep(delay);
+        waitedMs += delay;
     }
 }
+/** The exit-11 outcome: the gate has not answered, but it may still. */
+export function failWatchTimeout(ctx, slug, version, waited) {
+    return ctx.fail(timeoutError(`${slug}@${version} had no gate verdict after ${waited.waitedMinutes} minutes` +
+        `${waited.lastState ? ` (still "${waited.lastState}")` : ''}.`, 'The gate may still be running. Run "ekanos status --watch" to keep waiting, or raise --timeout.'), { slug, version, state: waited.lastState, timedOut: true });
+}
 function findVersion(integrations, slug, version) {
     var _a;
     const integration = integrations.find((i) => i.slug === slug);
     return (_a = integration === null || integration === void 0 ? void 0 : integration.versions.find((v) => v.version === version)) !== null && _a !== void 0 ? _a : null;
 }
-function reportWatchOutcome(ctx, slug, version) {
-    var _a, _b, _c;
-    const data = {
+export function watchOutcomeData(slug, version) {
+    var _a, _b;
+    return {
         slug,
         version: version.version,
         state: version.state,
@@ -219,9 +273,13 @@ function reportWatchOutcome(ctx, slug, version) {
         findings: (_a = version.findings) !== null && _a !== void 0 ? _a : [],
         stages: (_b = version.stages) !== null && _b !== void 0 ? _b : [],
     };
+}
+function reportWatchOutcome(ctx, slug, version) {
+    var _a;
+    const data = watchOutcomeData(slug, version);
     if (version.state === 'rejected') {
         return ctx.fail(gateFailedError(`${slug}@${version.version} was rejected by the gate ` +
-            `(${(_c = data.errorCount) !== null && _c !== void 0 ? _c : 0} error${data.errorCount === 1 ? '' : 's'}).`, 'Resolve the error-severity findings in data.findings, bump the ' +
+            `(${(_a = data.errorCount) !== null && _a !== void 0 ? _a : 0} error${data.errorCount === 1 ? '' : 's'}).`, 'Resolve the error-severity findings in data.findings, bump the ' +
             'version, and re-run "ekanos publish".'), data);
     }
     return ctx.succeed(data, ctx.ui.result({
@@ -271,7 +329,10 @@ async function probeSession(env, stored) {
 function readProjectReport(dir) {
     var _a;
     const projectDir = path.resolve(dir);
-    if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME))) {
+    // A repo root is not one project: status reports no project there, as it
+    // does outside any.
+    if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME)) ||
+        isRepoRoot(projectDir)) {
         return null;
     }
     const loaded = loadProject(projectDir);

package/dist/commands/status.js.map

@@ -1 +1 @@
-{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAA2B,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,qEAAqE;AACrE,MAAM,sBAAsB,GAAG,KAAM,CAAC;AAEtC;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AA0CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,IAAgB;;IAEhB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,SAAS;KAC7B,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,CAAC,CAAC;YACE,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC;SACpC,CAAC;IAEN,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,iBAAiB,CACrB,mDAAmD,GAAG,CAAC,IAAI,GAAG,EAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,2BAA2B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACpD,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,8DAA8D;gBAC5D,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,WAAW,GAAG,MAAM,kBAAkB,CACpC,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,MAAM,EACd,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CACL,4BAA4B,GAAG,CAAC,IAAI,mCAAmC;gBACrE,OAAC,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ;YACd,GAAG,CAAC,GAAG,CACL,sEAAsE;gBACpE,mEAAmE;gBACnE,2BAA2B,CAC9B,CAAC;IACN,CAAC;IAED,MAAM,kBAAkB,GACtB,OAAO,IAAI,WAAW;QACpB,CAAC,CAAC,OAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,iBAAiB,GAAG,WAAW;QACnC,CAAC,CAAC,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,MAAK,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,QAAQ,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QAC/D,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,GAAG,CAAC,OAAO,2DAEd,IAAI,EAAE,GAAG,CAAC,IAAI,IACX,OAAO,KACV,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EACnC,OAAO,EAAE,OAAO;YACd,CAAC,iCACM,OAAO,KACV,iBAAiB,EAAE,WAAW;oBAC5B,CAAC,CAAC,OAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,QAAQ,mCAAI,EAAE,CAAC;oBACtC,CAAC,CAAC,IAAI,IAEZ,CAAC,CAAC,IAAI,EACR,WAAW,KACR,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAE1C,YAAY,CACV,GAAG,CAAC,EAAE,QACN,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,mCAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,EAAE,QAAQ,QAAE,IAAI,CAAC,QAAQ,mCAAI,KAAK,EAAE,GAAG,QAAE,IAAI,CAAC,GAAG,mCAAI,KAAK,EAAE,EAC5D,QAAQ,QACR,IAAI,CAAC,GAAG,mCAAI,IAAI,IAAI,EAAE,CACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,GAA8C,EAC9C,OAAsB,EACtB,IAAgB;;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACtD,MAAM,KAAK,SAAG,IAAI,CAAC,KAAK,mCAAI,YAAY,CAAC;IAEzC,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,YAAY,OAAO,CAAC,IAAI,IAAI,aAAa,OAAO,GAAG,CAAC,IAAI,GAAG;QAC9E,kBAAkB,sBAAsB,GAAG,IAAI,KAAK,CACvD,CAAC;IAEF,SAAS,CAAC;QACR,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,qCAAqC;gBAC9D,6BAA6B,EAC/B,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,GAAG,EACH,OAAO,EACP,MAAM,EACN,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;QAED,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,IAAI,aAAa,MAAM;YACzD,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAC9D,CAAC;QAEF,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,YAAiC,EACjC,IAAY,EACZ,OAAe;;IAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,aAAO,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,mCAAI,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAe,EACf,IAAY,EACZ,OAA0B;;IAE1B,MAAM,IAAI,GAAG;QACX,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,QAAE,OAAO,CAAC,QAAQ,mCAAI,EAAE;QAChC,MAAM,QAAE,OAAO,CAAC,MAAM,mCAAI,EAAE;KAC7B,CAAC;IAEF,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,4BAA4B;YACpD,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,SAAS,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EACvE,iEAAiE;YAC/D,uCAAuC,CAC1C,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAChB,IAAI,EACJ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE;YACJ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAU,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAA8C,EAC9C,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACrE,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,MAAM,QAAE,MAAM,CAAC,OAAO,CAAC,MAAM,mCAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,kBAAkB,CAC/B,GAA8C,EAC9C,OAAsB,EACtB,MAAc,EACd,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,CAAC,IAAI,EACR,SAAS,CAAC,WAAW,EACrB,MAAM,EACN;QACE,MAAM;KACP,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,2CAA2C,EACtE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAA8C,EAC9C,OAAsB,EACtB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAsC;IAEtC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBACP,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC,GAAA,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAS;;IACvD,MAAM,SAAS,SAAG,OAAO,CAAC,OAAO,mCAAI,OAAO,CAAC,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,OAA0B;;IAE1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,SAAG,OAAO,CAAC,UAAU,mCAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,SAAG,OAAO,CAAC,SAAS,mCAAI,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IACnE,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAM,EACN,QAAsC,EACtC,GAAS;IAET,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;IAEjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7B,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC;QACE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,EAAM,EACN,GAAW,EACX,MAAoC,EACpC,QAAiB;;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT;YACE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;YAC9B,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,QAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;IAEF,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GACjB,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,sBAAC,OAAC,CAAC,CAAC,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,CAAC,CAAC,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,GAAA,CACzD,CAAC;IAEF,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAYD,MAAM,UAAU,oBAAoB,CAClC,WAA8B;;IAE9B,MAAM,MAAM,SAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC;IACxE,qCACE,IAAI,EAAE,WAAW,CAAC,IAAI,IACnB,CAAC,WAAW,CAAC,WAAW;QACzB,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;QAC1C,CAAC,CAAC,EAAE,CAAC,KACP,IAAI,EAAE,WAAW,CAAC,IAAI,EACtB,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAC1C,aAAa,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,mCAAI,IAAI,EACtC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI,IAClC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,QAAuB;;;IAEvB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;wBACT,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,mCAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,EAAE,mCAAI,SAAS;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,OAAO,CAAC,MAAM;gBACZ,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxD,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAM,EACN,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,EAAM,EACN,GAAW,EACX,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,WAAuC,EACvC,IAAyC,EACzC,QAAuB,EACvB,GAAS;;IAET,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,CAAC,OAAO;YACR,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,KAAK,GAAa;QACtB,EAAE,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;YAC5D,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1B,CAAC;KACH,CAAC;IAEF,IAAI,IAAI,IAAI,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,SACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3C,IACE,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,WAAW;QAC/B,kBAAkB,CAAC,WAAW,KAAK,kBAAkB,CAAC,IAAI,EAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,EAAE,EACF,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAC,WAAW,CAAC,WAAW,mCAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,aAAa,WAC/D,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,MAAA,OAAO,CAAC,aAAa,mCAAI,GAAG,IACtC,MAAA,OAAO,CAAC,WAAW,mCAAI,GACzB,EAAE,CACH,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,QAAE,MAAM,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  refreshStoredSession,\n  resolveAuthEnvironment,\n  resolveIdentity,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  CliError,\n  authRequiredError,\n  gateFailedError,\n  preconditionError,\n} from '../errors';\nimport { ERROR_CODES, type ExitCode } from '../exit-codes';\nimport { formatFindings, relativeTime } from '../findings-renderer';\nimport { EKANOS_CONFIG_FILENAME, loadProject } from '../project';\nimport {\n  type SubmissionListing,\n  type SubmissionVersion,\n  listSubmissions,\n} from '../publish-api';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport { type ResultRow, type Ui, shortHost } from '../ui';\nimport { announceUpdate, checkForUpdate } from '../update-notice';\nimport { readProjectVersion } from './publish';\n\n/** `--watch`'s poll interval — matches the mission brief exactly. */\nconst WATCH_POLL_INTERVAL_MS = 30_000;\n\n/**\n * The states `--watch` stops on. `submitted` is the only non-terminal state\n * a version can be in when watching starts (an already-`gated`/`dev`/\n * `rejected` version resolves on the very first check, no polling needed).\n */\nconst WATCH_TERMINAL_STATES = new Set(['gated', 'dev', 'rejected']);\n\nexport interface StatusArgs {\n  host?: string;\n  /** Project directory (may contain ekanos.json). Defaults to cwd. */\n  dir: string;\n  env: Record<string, string | undefined>;\n  /** Render each version's full finding list, not just error/warn counts. */\n  findings?: boolean;\n  /**\n   * Expand \"OTHER INTEGRATIONS IN SOURCE …\" from one summary line per\n   * integration into the same VERSION/STATE/AGE/FINDINGS table shape THIS\n   * PROJECT's section uses. Human mode only — the JSON envelope's\n   * `submissions` already carries every integration's full version history\n   * regardless of this flag.\n   */\n  all?: boolean;\n  /**\n   * Block until this project's current (slug, version) submission reaches a\n   * terminal-for-waiting state (gated, dev, rejected), polling every 30s.\n   * Changes the command's exit-code contract — see `runStatus`'s docstring.\n   */\n  watch?: boolean;\n  /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injectable \"now\" for deterministic AGE rendering in tests. Defaults to `new Date()`. */\n  now?: Date;\n}\n\ninterface SessionReport {\n  authenticated: boolean;\n  user?: { id: string; email: string | null; name: string | null };\n  expiresAt?: string;\n  hint?: string;\n}\n\ninterface ProjectReport {\n  dir: string;\n  slug: string;\n  source: string | null;\n}\n\n/**\n * `status` — the read verb: where am I pointed, who am I, and what has this\n * project submitted?\n *\n * Three sections, each degrading gracefully rather than failing:\n *\n *  - **session** — whoami's server-side identity check, but an absent or dead\n *    session reports `authenticated: false` with a hint instead of exit 4. A\n *    partner asking \"what is my state?\" must get an answer, not an error whose\n *    answer it is.\n *  - **project** — the ekanos.json in `--dir` (default cwd), when there is\n *    one. No project is an ordinary state for `status`, never an error.\n *  - **submissions** — `GET /api/partner/submissions?source=…` for the\n *    project's resolved source, only when both a session and a source exist.\n *    Server errors here DO map through the taxonomy: an unreachable host or a\n *    missing source is a fault to surface, not a state to absorb.\n *\n * Exit 0 whenever the report itself could be assembled — EXCEPT under\n * `--watch` (see below), whose exit code carries the gate's verdict instead.\n *\n * The submission listing always requests the full `?detail=findings` shape\n * server-side (needed so THIS PROJECT's latest-error auto-inline rendering\n * — see `humanSummary` — has findings to inspect without a second\n * round-trip). `--findings` no longer changes what's FETCHED; it changes\n * what's RENDERED inline in human mode: every shown version's findings,\n * not just the latest's error-severity ones.\n *\n * `--watch` turns `status` into a blocking wait: it requires a project with\n * a resolved source and a live session (both are PRECONDITIONs here, not\n * degraded-to-false states — there is nothing to watch without them), then\n * polls `GET /api/partner/submissions?detail=findings` every 30s for THIS\n * project's current (slug, package.json version) submission until it reaches\n * a terminal-for-waiting state: `gated`/`dev` exit 0, `rejected` exits 10\n * (GATE_FAILED) with the findings carried in `data` — the same shape\n * `publish`'s own gate refusal uses, so an agent's fix-then-retry loop\n * branches on it identically whether the gate ran inline (future) or via\n * this poll (today). `--json --watch` still emits exactly ONE envelope, at\n * completion — the polling itself only ever writes to stderr via `ctx.log`.\n *\n * Human-mode rendering is PROJECT-SCOPED: the server lists every\n * submission for the resolved source (an org-level bucket shared by every\n * project publishing there — `listSubmissions` has no server-side slug\n * filter, see `publish-api.ts`'s wire contract), so \"THIS PROJECT\" groups\n * the rows matching this project's own slug and \"OTHER INTEGRATIONS IN\n * SOURCE …\" collapses everything else to one summary line per integration\n * (or, with `--all`, the same table shape).\n * The `--json` envelope stays additive-compatible: `submissions` is still\n * the full, unfiltered list, with `data.project.scopedSubmissions` and\n * `data.otherIntegrations` layered on top for a consumer that wants the\n * pre-grouped view without re-deriving it.\n */\nexport async function runStatus(\n  ctx: CliContext,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n\n  const stored = env.store.read(env.host);\n\n  const notice = await checkForUpdate({\n    env: args.env,\n    host: env.host,\n    session: stored ?? undefined,\n  });\n  announceUpdate(ctx, notice);\n\n  const session = stored\n    ? await probeSession(env, stored)\n    : {\n        authenticated: false,\n        hint: loginHint(env, 'to sign in.'),\n      };\n\n  // probeSession may have refreshed the session — persisting a NEW access\n  // token and ROTATING the refresh token on disk. Re-read before using it:\n  // the pre-probe object now holds a dead access token and an already-spent\n  // refresh token, and presenting those would turn \"logged in, token was\n  // merely stale\" into a hard exit-4 — the one failure this command promises\n  // never to produce.\n  const live = stored ? (env.store.read(env.host) ?? stored) : null;\n\n  const project = readProjectReport(args.dir);\n\n  if (args.watch) {\n    if (!session.authenticated || !live) {\n      throw authRequiredError(\n        `\"ekanos status --watch\" needs a live session on ${env.host}.`,\n        loginHint(env),\n      );\n    }\n\n    if (!project) {\n      throw preconditionError(\n        `No ekanos.json found in ${path.resolve(args.dir)}.`,\n        'Run \"ekanos publish\" at least once before watching its gate result.',\n      );\n    }\n\n    if (!project.source) {\n      throw preconditionError(\n        'This project has no \"source\" in ekanos.json yet.',\n        'Run \"ekanos publish\" at least once (it saves the source you ' +\n          'publish to) before watching its gate result.',\n      );\n    }\n\n    return runWatch(ctx, env, project, args);\n  }\n\n  let submissions: SubmissionListing[] | null = null;\n\n  if (project?.source && session.authenticated && live) {\n    // Always the full `?detail=findings` shape, `--findings` or not: THIS\n    // PROJECT's auto-inline latest-error rendering (see `humanSummary`)\n    // needs the findings array to decide whether to render, not just the\n    // counts — and `data.project.scopedSubmissions` carries the same\n    // richer shape in the JSON envelope regardless of the flag. `--findings`\n    // now controls how much of it gets rendered inline, not what's fetched.\n    submissions = await listWithOneRefresh(\n      env,\n      live,\n      project.source,\n      'findings',\n    );\n  } else if (project?.source && !session.authenticated) {\n    // Human mode says this in the result block's note; the stderr line is\n    // for JSON callers, who never see that block.\n    if (ctx.jsonMode) {\n      ctx.log(\n        `ekanos: not logged in to ${env.host} — skipping the submission list. ` +\n          (session.hint ?? ''),\n      );\n    }\n  } else if (project && !project.source) {\n    if (ctx.jsonMode)\n      ctx.log(\n        'ekanos: this project has no \"source\" in ekanos.json yet — the first ' +\n          '\"ekanos publish --source <slug>\" saves one, and status will list ' +\n          'submissions from then on.',\n      );\n  }\n\n  const projectIntegration =\n    project && submissions\n      ? (submissions.find((s) => s.slug === project.slug) ?? null)\n      : null;\n\n  const otherIntegrations = submissions\n    ? submissions\n        .filter((s) => s.slug !== project?.slug)\n        .map((s) => summarizeIntegration(s))\n    : null;\n\n  // Best-effort, human-mode-only add-on for the header's \"publish target\n  // (+ seat role)\" line — same degrade-to-null contract as `whoami`'s own\n  // seat lookup. Skipped entirely in JSON mode: nothing in the envelope\n  // needs it, and it would otherwise be an extra network round-trip every\n  // existing `--json` caller pays for no reason.\n  const seatRole =\n    !ctx.jsonMode && project?.source && session.authenticated && live\n      ? await fetchSeatRoleQuietly(env, live, project.source)\n      : null;\n\n  return ctx.succeed(\n    {\n      host: env.host,\n      ...session,\n      credentialsPath: env.store.filePath,\n      project: project\n        ? {\n            ...project,\n            scopedSubmissions: submissions\n              ? (projectIntegration?.versions ?? [])\n              : null,\n          }\n        : null,\n      submissions,\n      ...(otherIntegrations !== null ? { otherIntegrations } : {}),\n      ...(notice ? { toolchain: notice } : {}),\n    },\n    humanSummary(\n      ctx.ui,\n      project?.dir ?? path.resolve(args.dir),\n      env.host,\n      session,\n      project,\n      submissions,\n      { findings: args.findings ?? false, all: args.all ?? false },\n      seatRole,\n      args.now ?? new Date(),\n    ),\n  );\n}\n\n/**\n * The `--watch` poll loop. Targets THIS project's current submission —\n * `project.slug` + the version presently in `package.json` (the same value\n * `publish` would submit right now) — not \"whatever's most recent,\" so\n * watching after a publish can never resolve against a stale prior version.\n */\nasync function runWatch(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  project: ProjectReport,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const source = project.source;\n  if (!source) {\n    // Unreachable — the caller already checked — but keeps this function's\n    // own type honest without a non-null assertion.\n    throw preconditionError(\n      'This project has no \"source\" in ekanos.json yet.',\n      'Run \"ekanos publish\" at least once before watching its gate result.',\n    );\n  }\n\n  const targetVersion = readProjectVersion(project.dir);\n  const sleep = args.sleep ?? defaultSleep;\n\n  // Glyph-only restyle — the poll contract itself (exit codes, timing,\n  // JSON envelope) is unchanged.\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n\n  ctx.log(\n    `${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +\n      `(polling every ${WATCH_POLL_INTERVAL_MS / 1000}s)…`,\n  );\n\n  for (;;) {\n    // Re-read the session from the credential store on EVERY iteration —\n    // never carry one over in a closure. Auth0 rotates the refresh token on\n    // every use (see `refreshStoredSession`'s docstring), so a token this\n    // loop already consumed is dead by the next iteration; the store is the\n    // persisted source of truth for whichever refresh most recently landed\n    // — this loop's own (via `listWithOneRefresh` below, which persists\n    // through `refreshStoredSession`), or a concurrent one from another\n    // process (another terminal running login/publish/status --watch\n    // against the same host). Threading the refreshed session back out of\n    // `listWithOneRefresh` instead would only cover the first case.\n    const current = env.store.read(env.host);\n\n    if (!current) {\n      throw authRequiredError(\n        `The session for ${env.host} is gone — \"ekanos status --watch\" ` +\n          'cannot continue without it.',\n        loginHint(env),\n      );\n    }\n\n    const integrations = await listWithOneRefresh(\n      env,\n      current,\n      source,\n      'findings',\n    );\n    const version = findVersion(integrations, project.slug, targetVersion);\n\n    if (version && WATCH_TERMINAL_STATES.has(version.state)) {\n      return reportWatchOutcome(ctx, project.slug, version);\n    }\n\n    ctx.log(\n      `${waitGlyph}${prefix}${project.slug}@${targetVersion} is ` +\n        `${version ? version.state : 'not visible yet'} — waiting…`,\n    );\n\n    await sleep(WATCH_POLL_INTERVAL_MS);\n  }\n}\n\nfunction findVersion(\n  integrations: SubmissionListing[],\n  slug: string,\n  version: string,\n): SubmissionVersion | null {\n  const integration = integrations.find((i) => i.slug === slug);\n  return integration?.versions.find((v) => v.version === version) ?? null;\n}\n\nfunction reportWatchOutcome(\n  ctx: CliContext,\n  slug: string,\n  version: SubmissionVersion,\n): ExitCode {\n  const data = {\n    slug,\n    version: version.version,\n    state: version.state,\n    gatedAt: version.gatedAt,\n    errorCount: version.errorCount,\n    warnCount: version.warnCount,\n    findings: version.findings ?? [],\n    stages: version.stages ?? [],\n  };\n\n  if (version.state === 'rejected') {\n    return ctx.fail(\n      gateFailedError(\n        `${slug}@${version.version} was rejected by the gate ` +\n          `(${data.errorCount ?? 0} error${data.errorCount === 1 ? '' : 's'}).`,\n        'Resolve the error-severity findings in data.findings, bump the ' +\n          'version, and re-run \"ekanos publish\".',\n      ),\n      data,\n    );\n  }\n\n  return ctx.succeed(\n    data,\n    ctx.ui.result({\n      title: `${slug}@${version.version} is ${version.state}`,\n      tone: data.warnCount ? 'warn' : 'ok',\n      rows: [\n        ['State', version.state],\n        ...(data.warnCount\n          ? [['Warnings', String(data.warnCount)] as const]\n          : []),\n      ],\n    }),\n  );\n}\n\nfunction defaultSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/**\n * whoami's identity resolution, with AUTH_REQUIRED absorbed into\n * `authenticated: false`. Anything else — network, precondition, MFA mapped\n * to auth by `fetchIdentity` — still propagates: \"the host was unreachable\"\n * must never be reported as \"you are logged out\".\n */\nasync function probeSession(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  stored: StoredSession,\n): Promise<SessionReport> {\n  try {\n    const { identity, session } = await resolveIdentity(env, stored);\n\n    return {\n      authenticated: true,\n      user: { id: identity.id, email: identity.email, name: identity.name },\n      expiresAt: session.expiresAt,\n    };\n  } catch (error) {\n    if (error instanceof CliError && error.code === ERROR_CODES.AUTH_REQUIRED) {\n      return { authenticated: false, hint: error.hint };\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Lenient project read: no ekanos.json means \"not in a project\", which is an\n * answer, not an error. An ekanos.json that EXISTS but does not load keeps\n * `loadProject`'s strict behaviour — a broken project file is a fault the\n * partner needs named, whatever verb they ran.\n */\nfunction readProjectReport(dir: string): ProjectReport | null {\n  const projectDir = path.resolve(dir);\n\n  if (!fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME))) {\n    return null;\n  }\n\n  const loaded = loadProject(projectDir);\n\n  return {\n    dir: loaded.projectDir,\n    slug: loaded.primary.slug,\n    source: loaded.project.source ?? null,\n  };\n}\n\n/** Mirrors publish's one-refresh-one-retry on a stale access token. */\nasync function listWithOneRefresh(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n  detail?: 'findings',\n): Promise<SubmissionListing[]> {\n  const first = await listSubmissions(env.host, session.accessToken, source, {\n    detail,\n  });\n\n  if (first.status === 'ok') return first.integrations;\n\n  const refreshed = await refreshStoredSession(env, session);\n  const second = await listSubmissions(\n    env.host,\n    refreshed.accessToken,\n    source,\n    {\n      detail,\n    },\n  );\n\n  if (second.status === 'ok') return second.integrations;\n\n  // Authenticated a moment ago, unauthorized twice here: report the list as\n  // unavailable rather than the session as dead — probeSession already proved\n  // it. This is unreachable in practice; belt and braces for a racing revoke.\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the submission list.`,\n    loginHint(env),\n  );\n}\n\n/**\n * `whoami`'s seat-lookup degradation, narrowed to one source's role: a\n * network hiccup, MFA, or a deployment predating the seats route must never\n * turn a working `status` into a failing one — the header simply omits the\n * \"(role)\" suffix.\n */\nasync function fetchSeatRoleQuietly(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n): Promise<string | null> {\n  try {\n    const result = await fetchSeatsWithOneRefresh(env, session);\n    if (result.status !== 'ok') return null;\n\n    const seat = result.sources.find((s) => s.slug === source);\n    return seat ? seat.roles.join(', ') : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction tryReadProjectVersion(dir: string): string | null {\n  try {\n    return readProjectVersion(dir);\n  } catch {\n    return null;\n  }\n}\n\nfunction timestampMs(iso: string | null | undefined): number {\n  if (!iso) return 0;\n  const parsed = new Date(iso).getTime();\n  return Number.isNaN(parsed) ? 0 : parsed;\n}\n\n/**\n * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions\n * with no timestamp at all) keep their original, server-given order —\n * `Array#sort` is stable, and a stable no-op is the right answer when there\n * is nothing to compare.\n */\nexport function sortVersionsNewestFirst(\n  versions: readonly SubmissionVersion[],\n): SubmissionVersion[] {\n  return [...versions].sort(\n    (a, b) =>\n      timestampMs(b.gatedAt ?? b.submittedAt) -\n      timestampMs(a.gatedAt ?? a.submittedAt),\n  );\n}\n\nfunction versionAge(version: SubmissionVersion, now: Date): string {\n  const timestamp = version.gatedAt ?? version.submittedAt;\n  return timestamp ? relativeTime(timestamp, now) : '—';\n}\n\nexport function findingsCellParts(\n  ui: Ui,\n  version: SubmissionVersion,\n): { text: string; paint: (text: string) => string } {\n  if (version.errorCount === null && version.warnCount === null) {\n    return { text: '—', paint: ui.dim };\n  }\n\n  const errorCount = version.errorCount ?? 0;\n  const warnCount = version.warnCount ?? 0;\n\n  if (errorCount === 0 && warnCount === 0) {\n    return { text: '0', paint: (text) => text };\n  }\n\n  const parts: string[] = [];\n  if (errorCount > 0) parts.push(`${errorCount}E`);\n  if (warnCount > 0) parts.push(`${warnCount}W`);\n\n  return { text: parts.join(' '), paint: errorCount > 0 ? ui.err : ui.warn };\n}\n\nexport function stateColorFor(ui: Ui, state: string): (text: string) => string {\n  if (state === 'dev' || state === 'prod') return ui.ok;\n  if (state === 'gated') return ui.accent;\n  if (state === 'submitted' || state === 'superseded') return ui.dim;\n  if (state === 'rejected' || state === 'revoked') return ui.err;\n  return (text) => text;\n}\n\n/**\n * A VERSION/STATE/AGE/FINDINGS table, built by hand rather than via\n * `ui.table`: STATE and FINDINGS need per-cell color, and `ui.table` sizes\n * columns from the raw cell strings it's handed — a colored cell's ANSI\n * escapes would inflate that width and misalign the column. `ui.ts`'s own\n * doc comment on `padCell` names this exact tradeoff (\"ignoring color codes\n * in length math is the CALLER's job — pad before coloring, never after\"),\n * so this pads against the PLAIN text first and colors the already-padded\n * string — the same rule `ui.table` documents, just applied here instead of\n * inside it.\n */\nexport function renderVersionsTable(\n  ui: Ui,\n  versions: readonly SubmissionVersion[],\n  now: Date,\n): string {\n  const headers = ['VERSION', 'STATE', 'AGE', 'FINDINGS'] as const;\n\n  const rows = versions.map((version) => {\n    const findings = findingsCellParts(ui, version);\n    return {\n      version: version.version,\n      state: version.state,\n      age: versionAge(version, now),\n      findingsText: findings.text,\n      findingsPaint: findings.paint,\n      statePaint: stateColorFor(ui, version.state),\n    };\n  });\n\n  const widths: [number, number, number, number] = [\n    Math.max(headers[0].length, ...rows.map((r) => r.version.length)),\n    Math.max(headers[1].length, ...rows.map((r) => r.state.length)),\n    Math.max(headers[2].length, ...rows.map((r) => r.age.length)),\n    Math.max(headers[3].length, ...rows.map((r) => r.findingsText.length)),\n  ];\n\n  const headerLine = headers\n    .map((header, i) => ui.dim(header.padEnd(widths[i]!)))\n    .join('  ');\n\n  const bodyLines = rows.map((row) =>\n    [\n      row.version.padEnd(widths[0]),\n      row.statePaint(row.state.padEnd(widths[1])),\n      row.age.padEnd(widths[2]),\n      row.findingsPaint(row.findingsText.padEnd(widths[3])),\n    ].join('  '),\n  );\n\n  return [headerLine, ...bodyLines].join('\\n');\n}\n\n/**\n * The findings shown directly under THIS PROJECT's table. `--findings`\n * forces every version's own findings inline; otherwise only the LATEST\n * version's ERROR-severity findings auto-render (the moment a partner most\n * needs them, no flag required), and a dim pointer at `ekanos status\n * --findings` covers everything else with a nonzero count.\n */\nfunction renderThisProjectFindings(\n  ui: Ui,\n  cwd: string,\n  sorted: readonly SubmissionVersion[],\n  forceAll: boolean,\n): string | null {\n  if (forceAll) {\n    const blocks = sorted\n      .filter((v) => v.findings && v.findings.length > 0)\n      .map((v) =>\n        [\n          `  ${ui.dim(`${v.version}:`)}`,\n          indentLines(formatFindings(ui, v.findings!, { cwd }), 4),\n        ].join('\\n'),\n      );\n\n    return blocks.length > 0 ? blocks.join('\\n\\n') : null;\n  }\n\n  const [latest, ...older] = sorted;\n  const latestErrors = (latest?.findings ?? []).filter(\n    (f) => f.severity === 'error',\n  );\n\n  if (latest && latestErrors.length > 0 && latest.findings) {\n    return indentLines(formatFindings(ui, latest.findings, { cwd }), 2);\n  }\n\n  const latestNonzero =\n    (latest?.errorCount ?? 0) > 0 || (latest?.warnCount ?? 0) > 0;\n  const olderNonzero = older.some(\n    (v) => (v.errorCount ?? 0) > 0 || (v.warnCount ?? 0) > 0,\n  );\n\n  return latestNonzero || olderNonzero\n    ? `  ${ui.dim('→ details: ekanos status --findings')}`\n    : null;\n}\n\nexport interface OtherIntegrationSummary {\n  slug: string;\n  /** The full name (`acme/google-drive`); absent on an older host. */\n  displayName?: string;\n  name: string | null;\n  versionsCount: number;\n  latestVersion: string | null;\n  latestState: string | null;\n}\n\nexport function summarizeIntegration(\n  integration: SubmissionListing,\n): OtherIntegrationSummary {\n  const latest = sortVersionsNewestFirst(integration.versions)[0] ?? null;\n  return {\n    slug: integration.slug,\n    ...(integration.displayName\n      ? { displayName: integration.displayName }\n      : {}),\n    name: integration.name,\n    versionsCount: integration.versions.length,\n    latestVersion: latest?.version ?? null,\n    latestState: latest?.state ?? null,\n  };\n}\n\nfunction indentLines(block: string, spaces: number): string {\n  const prefix = ' '.repeat(spaces);\n  return block\n    .split('\\n')\n    .map((line) => `${prefix}${line}`)\n    .join('\\n');\n}\n\nfunction buildHeaderRows(\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  seatRole: string | null,\n): readonly ResultRow[] {\n  const rows: ResultRow[] = [];\n\n  if (session.authenticated) {\n    rows.push([\n      'Account',\n      session.user?.email ?? session.user?.id ?? 'unknown',\n    ]);\n  }\n  rows.push(['Host', shortHost(host)]);\n\n  if (project) {\n    const version = tryReadProjectVersion(project.dir);\n    rows.push([\n      'Project',\n      version ? `${project.slug}@${version}` : project.slug,\n    ]);\n    rows.push([\n      'Target',\n      project.source\n        ? `${project.source}${seatRole ? ` · ${seatRole}` : ''}`\n        : 'none yet',\n    ]);\n  }\n\n  return rows;\n}\n\n/**\n * The closing `ui.nextAction` line, chosen from the LATEST version of THIS\n * project — `null` (no closing line at all) whenever nothing is pending:\n * no submission yet, or the latest is already `dev`/`prod`/`revoked`.\n */\nexport function buildNextAction(\n  ui: Ui,\n  latest: SubmissionVersion | null,\n): string | null {\n  if (!latest) return null;\n\n  if (latest.state === 'rejected') {\n    return ui.nextAction('ekanos status --findings', 'see what failed');\n  }\n  if (latest.state === 'gated') {\n    return `\\n${ui.dim('→ awaiting admission (runs hourly)')}`;\n  }\n  if (latest.state === 'submitted') {\n    return `\\n${ui.dim('→ awaiting gate result')}`;\n  }\n\n  return null;\n}\n\nfunction humanSummary(\n  ui: Ui,\n  cwd: string,\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  submissions: SubmissionListing[] | null,\n  args: { findings: boolean; all: boolean },\n  seatRole: string | null,\n  now: Date,\n): string {\n  const note = !session.authenticated\n    ? session.hint\n    : !project\n      ? 'No ekanos.json here, so there is no project to report on.'\n      : !project.source\n        ? 'No \"source\" configured yet. The first \"ekanos publish --source <slug>\" saves one.'\n        : undefined;\n\n  const lines: string[] = [\n    ui.result({\n      title: session.authenticated ? 'Signed in' : 'Not signed in',\n      tone: session.authenticated ? 'ok' : 'warn',\n      rows: buildHeaderRows(host, session, project, seatRole),\n      notes: note ? [note] : [],\n    }),\n  ];\n\n  if (note || !project?.source || !submissions) {\n    return lines.join('\\n');\n  }\n\n  const projectIntegration =\n    submissions.find((s) => s.slug === project.slug) ?? null;\n  const others = submissions.filter((s) => s.slug !== project.slug);\n\n  lines.push('', ui.section('this project'));\n\n  if (\n    projectIntegration?.displayName &&\n    projectIntegration.displayName !== projectIntegration.slug\n  ) {\n    lines.push(`  ${ui.dim(`published as ${projectIntegration.displayName}`)}`);\n  }\n\n  const sorted = projectIntegration\n    ? sortVersionsNewestFirst(projectIntegration.versions)\n    : [];\n\n  if (sorted.length === 0) {\n    lines.push(`  ${ui.dim('no submissions yet for this project.')}`);\n  } else {\n    lines.push(indentLines(renderVersionsTable(ui, sorted, now), 2));\n\n    const findingsBlock = renderThisProjectFindings(\n      ui,\n      cwd,\n      sorted,\n      args.findings,\n    );\n    if (findingsBlock) lines.push('', findingsBlock);\n  }\n\n  lines.push('', ui.section(`other integrations in source ${project.source}`));\n\n  if (others.length === 0) {\n    lines.push(`  ${ui.dim('none.')}`);\n  } else if (args.all) {\n    for (const integration of others) {\n      const otherSorted = sortVersionsNewestFirst(integration.versions);\n      lines.push(`  ${ui.dim(integration.displayName ?? integration.slug)}`);\n      lines.push(indentLines(renderVersionsTable(ui, otherSorted, now), 4));\n    }\n  } else {\n    for (const integration of others) {\n      const summary = summarizeIntegration(integration);\n      lines.push(\n        `  ${ui.dim(\n          `${summary.displayName ?? summary.slug} — ${summary.versionsCount} version${\n            summary.versionsCount === 1 ? '' : 's'\n          }, latest ${summary.latestVersion ?? '?'} ${\n            summary.latestState ?? '?'\n          }`,\n        )}`,\n      );\n    }\n  }\n\n  const action = buildNextAction(ui, sorted[0] ?? null);\n  if (action) lines.push(action);\n\n  return lines.join('\\n');\n}\n"]}
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/commands/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,QAAQ,EACR,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,UAAU,GACX,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAAiB,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,EAGL,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,EAA2B,SAAS,EAAE,MAAM,OAAO,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAE/C,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,IAAK,CAAC;AAClC,MAAM,iBAAiB,GAAG,KAAM,CAAC;AAEjC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEvC,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,IAAI,CAAC,GAAG,CAAC,mBAAmB,GAAG,CAAC,IAAI,OAAO,EAAE,iBAAiB,CAAC,CAAC;AACzE,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,mBAAmB,CAAC,GAAuB;IACzD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACnD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,cAAc,GAAG,+BAA+B,EAChD,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AA4CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAe,EACf,IAAgB;;IAEhB,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAExC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;QAClC,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,OAAO,EAAE,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,SAAS;KAC7B,CAAC,CAAC;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE5B,MAAM,OAAO,GAAG,MAAM;QACpB,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC;QACjC,CAAC,CAAC;YACE,aAAa,EAAE,KAAK;YACpB,IAAI,EAAE,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC;SACpC,CAAC;IAEN,wEAAwE;IACxE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,2EAA2E;IAC3E,oBAAoB;IACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,OAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAI,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,iBAAiB,CACrB,mDAAmD,GAAG,CAAC,IAAI,GAAG,EAC9D,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,2BAA2B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EACpD,qEAAqE,CACtE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,8DAA8D;gBAC5D,8CAA8C,CACjD,CAAC;QACJ,CAAC;QAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,WAAW,GAA+B,IAAI,CAAC;IAEnD,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QACrD,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,iEAAiE;QACjE,yEAAyE;QACzE,wEAAwE;QACxE,WAAW,GAAG,MAAM,kBAAkB,CACpC,GAAG,EACH,IAAI,EACJ,OAAO,CAAC,MAAM,EACd,UAAU,CACX,CAAC;IACJ,CAAC;SAAM,IAAI,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,KAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACrD,sEAAsE;QACtE,8CAA8C;QAC9C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACjB,GAAG,CAAC,GAAG,CACL,4BAA4B,GAAG,CAAC,IAAI,mCAAmC;gBACrE,OAAC,OAAO,CAAC,IAAI,mCAAI,EAAE,CAAC,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,QAAQ;YACd,GAAG,CAAC,GAAG,CACL,sEAAsE;gBACpE,mEAAmE;gBACnE,2BAA2B,CAC9B,CAAC;IACN,CAAC;IAED,MAAM,kBAAkB,GACtB,OAAO,IAAI,WAAW;QACpB,CAAC,CAAC,OAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;QAC5D,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,iBAAiB,GAAG,WAAW;QACnC,CAAC,CAAC,WAAW;aACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,MAAK,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI,CAAA,CAAC;aACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC,CAAC,IAAI,CAAC;IAET,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,QAAQ,GACZ,CAAC,GAAG,CAAC,QAAQ,KAAI,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI;QAC/D,CAAC,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC;IAEX,OAAO,GAAG,CAAC,OAAO,2DAEd,IAAI,EAAE,GAAG,CAAC,IAAI,IACX,OAAO,KACV,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EACnC,OAAO,EAAE,OAAO;YACd,CAAC,iCACM,OAAO,KACV,iBAAiB,EAAE,WAAW;oBAC5B,CAAC,CAAC,OAAC,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,QAAQ,mCAAI,EAAE,CAAC;oBACtC,CAAC,CAAC,IAAI,IAEZ,CAAC,CAAC,IAAI,EACR,WAAW,KACR,CAAC,iBAAiB,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GACzD,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAE1C,YAAY,CACV,GAAG,CAAC,EAAE,QACN,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,GAAG,mCAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,OAAO,EACP,OAAO,EACP,WAAW,EACX,EAAE,QAAQ,QAAE,IAAI,CAAC,QAAQ,mCAAI,KAAK,EAAE,GAAG,QAAE,IAAI,CAAC,GAAG,mCAAI,KAAK,EAAE,EAC5D,QAAQ,QACR,IAAI,CAAC,GAAG,mCAAI,IAAI,IAAI,EAAE,CACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CACrB,GAAe,EACf,GAA8C,EAC9C,OAAsB,EACtB,IAAgB;;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,uEAAuE;QACvE,gDAAgD;QAChD,MAAM,iBAAiB,CACrB,kDAAkD,EAClD,qEAAqE,CACtE,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEtD,qEAAqE;IACrE,+BAA+B;IAC/B,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAE9C,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,YAAY,OAAO,CAAC,IAAI,IAAI,aAAa,OAAO,GAAG,CAAC,IAAI,GAAG;QAC9E,mBAAmB,MAAA,IAAI,CAAC,cAAc,mCAAI,oBAAoB,QAAQ,CACzE,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;QACzC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM;QACN,OAAO,EAAE,aAAa;QACtB,cAAc,QAAE,IAAI,CAAC,cAAc,mCAAI,oBAAoB;QAC3D,KAAK,QAAE,IAAI,CAAC,KAAK,mCAAI,YAAY;KAClC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,QAAQ;QACpB,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,CAAC;QAC5D,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AAC5D,CAAC;AAUD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAe,EACf,GAA8C,EAC9C,MAMC;;IAED,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;IAC3E,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,cAAc,GAAG,KAAM,CAAC;IAChD,IAAI,QAAQ,GAAG,CAAC,CAAC;IAEjB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,IAAI,CAAC,EAAE,CAAC;QACrC,qEAAqE;QACrE,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,uEAAuE;QACvE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,sEAAsE;QACtE,gEAAgE;QAChE,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEzC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,kCAAkC;gBAC3D,6BAA6B,EAC/B,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,kBAAkB,CAC3C,GAAG,EACH,OAAO,EACP,MAAM,CAAC,MAAM,EACb,UAAU,CACX,CAAC;QACF,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;QAEvE,IAAI,OAAO,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;QACtC,CAAC;QAED,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,QAAQ,GAAG,KAAK,GAAG,QAAQ,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,IAAI;gBACd,SAAS,QAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,mCAAI,IAAI;gBACjC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAK,CAAC,GAAG,EAAE;aACjD,CAAC;QACJ,CAAC;QAED,GAAG,CAAC,GAAG,CACL,GAAG,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,MAAM;YACzD,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,iBAAiB,aAAa,CAC9D,CAAC;QAEF,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,QAAQ,IAAI,KAAK,CAAC;IACpB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,gBAAgB,CAC9B,GAAe,EACf,IAAY,EACZ,OAAe,EACf,MAA6C;IAE7C,OAAO,GAAG,CAAC,IAAI,CACb,YAAY,CACV,GAAG,IAAI,IAAI,OAAO,8BAA8B,MAAM,CAAC,aAAa,UAAU;QAC5E,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,EAChE,iGAAiG,CAClG,EACD,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAC3D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,YAAiC,EACjC,IAAY,EACZ,OAAe;;IAEf,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC9D,aAAO,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,mCAAI,IAAI,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAA0B;;IACvE,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,QAAQ,QAAE,OAAO,CAAC,QAAQ,mCAAI,EAAE;QAChC,MAAM,QAAE,OAAO,CAAC,MAAM,mCAAI,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,GAAe,EACf,IAAY,EACZ,OAA0B;;IAE1B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE7C,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACjC,OAAO,GAAG,CAAC,IAAI,CACb,eAAe,CACb,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,4BAA4B;YACpD,IAAI,MAAA,IAAI,CAAC,UAAU,mCAAI,CAAC,SAAS,IAAI,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,EACvE,iEAAiE;YAC/D,uCAAuC,CAC1C,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAChB,IAAI,EACJ,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,OAAO,OAAO,OAAO,CAAC,KAAK,EAAE;QACvD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACpC,IAAI,EAAE;YACJ,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAU,CAAC;gBACjD,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAA8C,EAC9C,MAAqB;IAErB,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAEjE,OAAO;YACL,aAAa,EAAE,IAAI;YACnB,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;YACrE,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC,aAAa,EAAE,CAAC;YAC1E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QACpD,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,GAAW;;IACpC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAErC,yEAAyE;IACzE,oBAAoB;IACpB,IACE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,CAAC;QAC7D,UAAU,CAAC,UAAU,CAAC,EACtB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEvC,OAAO;QACL,GAAG,EAAE,MAAM,CAAC,UAAU;QACtB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI;QACzB,MAAM,QAAE,MAAM,CAAC,OAAO,CAAC,MAAM,mCAAI,IAAI;KACtC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,KAAK,UAAU,kBAAkB,CAC/B,GAA8C,EAC9C,OAAsB,EACtB,MAAc,EACd,MAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE;QACzE,MAAM;KACP,CAAC,CAAC;IAEH,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,eAAe,CAClC,GAAG,CAAC,IAAI,EACR,SAAS,CAAC,WAAW,EACrB,MAAM,EACN;QACE,MAAM;KACP,CACF,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC;IAEvD,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,MAAM,iBAAiB,CACrB,mBAAmB,GAAG,CAAC,IAAI,2CAA2C,EACtE,SAAS,CAAC,GAAG,CAAC,CACf,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,oBAAoB,CACjC,GAA8C,EAC9C,OAAsB,EACtB,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAExC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;eAAO,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA8B;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACvC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAsC;IAEtC,OAAO,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,sBACP,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC;QACvC,WAAW,OAAC,CAAC,CAAC,OAAO,mCAAI,CAAC,CAAC,WAAW,CAAC,GAAA,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAA0B,EAAE,GAAS;;IACvD,MAAM,SAAS,SAAG,OAAO,CAAC,OAAO,mCAAI,OAAO,CAAC,WAAW,CAAC;IACzD,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,EAAM,EACN,OAA0B;;IAE1B,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IACtC,CAAC;IAED,MAAM,UAAU,SAAG,OAAO,CAAC,UAAU,mCAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,SAAG,OAAO,CAAC,SAAS,mCAAI,CAAC,CAAC;IAEzC,IAAI,UAAU,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;IAE/C,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAa;IACjD,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IACtD,IAAI,KAAK,KAAK,OAAO;QAAE,OAAO,EAAE,CAAC,MAAM,CAAC;IACxC,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,YAAY;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IACnE,IAAI,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,GAAG,CAAC;IAC/D,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC;AACxB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,EAAM,EACN,QAAsC,EACtC,GAAS;IAET,MAAM,OAAO,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,CAAU,CAAC;IAEjE,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,GAAG,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC;YAC7B,YAAY,EAAE,QAAQ,CAAC,IAAI;YAC3B,aAAa,EAAE,QAAQ,CAAC,KAAK;YAC7B,UAAU,EAAE,aAAa,CAAC,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC;SAC7C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAqC;QAC/C,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;KACvE,CAAC;IAEF,MAAM,UAAU,GAAG,OAAO;SACvB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;SACrD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACjC;QACE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7B,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IAEF,OAAO,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,yBAAyB,CAChC,EAAM,EACN,GAAW,EACX,MAAoC,EACpC,QAAiB;;IAEjB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,MAAM;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;aAClD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT;YACE,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE;YAC9B,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC,CAAC,QAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QAEJ,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,MAAM,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC;IAClC,MAAM,YAAY,GAAG,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,EAAE,CAAC,CAAC,MAAM,CAClD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAC9B,CAAC;IAEF,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACzD,OAAO,WAAW,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GACjB,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,sBAAC,OAAC,CAAC,CAAC,UAAU,mCAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAC,CAAC,CAAC,SAAS,mCAAI,CAAC,CAAC,GAAG,CAAC,GAAA,CACzD,CAAC;IAEF,OAAO,aAAa,IAAI,YAAY;QAClC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE;QACtD,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAYD,MAAM,UAAU,oBAAoB,CAClC,WAA8B;;IAE9B,MAAM,MAAM,SAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC;IACxE,qCACE,IAAI,EAAE,WAAW,CAAC,IAAI,IACnB,CAAC,WAAW,CAAC,WAAW;QACzB,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;QAC1C,CAAC,CAAC,EAAE,CAAC,KACP,IAAI,EAAE,WAAW,CAAC,IAAI,EACtB,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC,MAAM,EAC1C,aAAa,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,mCAAI,IAAI,EACtC,WAAW,QAAE,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,IAAI,IAClC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,MAAc;IAChD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,KAAK;SACT,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,QAAuB;;;IAEvB,MAAM,IAAI,GAAgB,EAAE,CAAC;IAE7B,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;wBACT,MAAA,OAAO,CAAC,IAAI,0CAAE,KAAK,mCAAI,MAAA,OAAO,CAAC,IAAI,0CAAE,EAAE,mCAAI,SAAS;SACrD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAErC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC;YACR,SAAS;YACT,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;SACtD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC;YACR,QAAQ;YACR,OAAO,CAAC,MAAM;gBACZ,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;gBACxD,CAAC,CAAC,UAAU;SACf,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,EAAM,EACN,MAAgC;IAEhC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,MAAM,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,CAAC,UAAU,CAAC,0BAA0B,EAAE,iBAAiB,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,oCAAoC,CAAC,EAAE,CAAC;IAC7D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;QACjC,OAAO,KAAK,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CACnB,EAAM,EACN,GAAW,EACX,IAAY,EACZ,OAAsB,EACtB,OAA6B,EAC7B,WAAuC,EACvC,IAAyC,EACzC,QAAuB,EACvB,GAAS;;IAET,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa;QACjC,CAAC,CAAC,OAAO,CAAC,IAAI;QACd,CAAC,CAAC,CAAC,OAAO;YACR,CAAC,CAAC,2DAA2D;YAC7D,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;gBACf,CAAC,CAAC,mFAAmF;gBACrF,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,KAAK,GAAa;QACtB,EAAE,CAAC,MAAM,CAAC;YACR,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe;YAC5D,IAAI,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;YAC3C,IAAI,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC;YACvD,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1B,CAAC;KACH,CAAC;IAEF,IAAI,IAAI,IAAI,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,MAAM,CAAA,IAAI,CAAC,WAAW,EAAE,CAAC;QAC7C,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,MAAM,kBAAkB,SACtB,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,mCAAI,IAAI,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAElE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;IAE3C,IACE,CAAA,kBAAkB,aAAlB,kBAAkB,uBAAlB,kBAAkB,CAAE,WAAW;QAC/B,kBAAkB,CAAC,WAAW,KAAK,kBAAkB,CAAC,IAAI,EAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,gBAAgB,kBAAkB,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,MAAM,GAAG,kBAAkB;QAC/B,CAAC,CAAC,uBAAuB,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,sCAAsC,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,aAAa,GAAG,yBAAyB,CAC7C,EAAE,EACF,GAAG,EACH,MAAM,EACN,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,IAAI,aAAa;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,gCAAgC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrC,CAAC;SAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACpB,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,uBAAuB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YAClE,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAC,WAAW,CAAC,WAAW,mCAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,WAAW,IAAI,MAAM,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;YAClD,KAAK,CAAC,IAAI,CACR,KAAK,EAAE,CAAC,GAAG,CACT,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,OAAO,CAAC,IAAI,MAAM,OAAO,CAAC,aAAa,WAC/D,OAAO,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GACrC,YAAY,MAAA,OAAO,CAAC,aAAa,mCAAI,GAAG,IACtC,MAAA,OAAO,CAAC,WAAW,mCAAI,GACzB,EAAE,CACH,EAAE,CACJ,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,QAAE,MAAM,CAAC,CAAC,CAAC,mCAAI,IAAI,CAAC,CAAC;IACtD,IAAI,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAE/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC","sourcesContent":["import { isRepoRoot } from '@ekanos/integration-schema/repo';\nimport * as fs from 'node:fs';\nimport * as path from 'node:path';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport { loginHint } from '../auth/host-trust';\nimport {\n  refreshStoredSession,\n  resolveAuthEnvironment,\n  resolveIdentity,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  CliError,\n  authRequiredError,\n  gateFailedError,\n  preconditionError,\n  timeoutError,\n  usageError,\n} from '../errors';\nimport { ERROR_CODES, type ExitCode } from '../exit-codes';\nimport { formatFindings, relativeTime } from '../findings-renderer';\nimport { EKANOS_CONFIG_FILENAME, loadProject } from '../project';\nimport {\n  type SubmissionListing,\n  type SubmissionVersion,\n  listSubmissions,\n} from '../publish-api';\nimport { fetchSeatsWithOneRefresh } from '../seats';\nimport { type ResultRow, type Ui, shortHost } from '../ui';\nimport { announceUpdate, checkForUpdate } from '../update-notice';\nimport { readProjectVersion } from './publish';\n\n/** The first wait between polls; each one after it doubles, up to the cap. */\nconst WATCH_POLL_START_MS = 5_000;\nconst WATCH_POLL_CAP_MS = 30_000;\n\n/** How long `--wait` waits for a verdict when `--timeout` is not given. */\nexport const DEFAULT_WAIT_MINUTES = 30;\n\n/** The wait before poll number `attempt` (0-based): 5s, 10s, 20s, then 30s. */\nexport function pollDelayMs(attempt: number): number {\n  return Math.min(WATCH_POLL_START_MS * 2 ** attempt, WATCH_POLL_CAP_MS);\n}\n\n/** `--timeout <minutes>`: a positive number, or the default. */\nexport function parseTimeoutMinutes(raw: string | undefined): number {\n  if (raw === undefined) return DEFAULT_WAIT_MINUTES;\n  const minutes = Number(raw);\n  if (!Number.isFinite(minutes) || minutes <= 0) {\n    throw usageError(\n      `--timeout \"${raw}\" is not a number of minutes.`,\n      'Pass a positive number of minutes, e.g. \"--wait --timeout 45\".',\n    );\n  }\n\n  return minutes;\n}\n\n/**\n * The states `--watch` stops on. `submitted` is the only non-terminal state\n * a version can be in when watching starts (an already-`gated`/`dev`/\n * `rejected` version resolves on the very first check, no polling needed).\n */\nconst WATCH_TERMINAL_STATES = new Set(['gated', 'dev', 'rejected']);\n\nexport interface StatusArgs {\n  host?: string;\n  /** Project directory (may contain ekanos.json). Defaults to cwd. */\n  dir: string;\n  env: Record<string, string | undefined>;\n  /** Render each version's full finding list, not just error/warn counts. */\n  findings?: boolean;\n  /**\n   * Expand \"OTHER INTEGRATIONS IN SOURCE …\" from one summary line per\n   * integration into the same VERSION/STATE/AGE/FINDINGS table shape THIS\n   * PROJECT's section uses. Human mode only — the JSON envelope's\n   * `submissions` already carries every integration's full version history\n   * regardless of this flag.\n   */\n  all?: boolean;\n  /**\n   * Block until this project's current (slug, version) submission reaches a\n   * terminal-for-waiting state (gated, dev, rejected), polling every 30s.\n   * Changes the command's exit-code contract — see `runStatus`'s docstring.\n   */\n  watch?: boolean;\n  /** `--timeout <minutes>` for `--watch`/`--wait`: how long to wait (default 30). */\n  timeoutMinutes?: number;\n  /** Injectable for tests — see `auth/device-flow.ts`'s identical pattern. */\n  sleep?: (ms: number) => Promise<void>;\n  /** Injectable \"now\" for deterministic AGE rendering in tests. Defaults to `new Date()`. */\n  now?: Date;\n}\n\ninterface SessionReport {\n  authenticated: boolean;\n  user?: { id: string; email: string | null; name: string | null };\n  expiresAt?: string;\n  hint?: string;\n}\n\ninterface ProjectReport {\n  dir: string;\n  slug: string;\n  source: string | null;\n}\n\n/**\n * `status` — the read verb: where am I pointed, who am I, and what has this\n * project submitted?\n *\n * Three sections, each degrading gracefully rather than failing:\n *\n *  - **session** — whoami's server-side identity check, but an absent or dead\n *    session reports `authenticated: false` with a hint instead of exit 4. A\n *    partner asking \"what is my state?\" must get an answer, not an error whose\n *    answer it is.\n *  - **project** — the ekanos.json in `--dir` (default cwd), when there is\n *    one. No project is an ordinary state for `status`, never an error.\n *  - **submissions** — `GET /api/partner/submissions?source=…` for the\n *    project's resolved source, only when both a session and a source exist.\n *    Server errors here DO map through the taxonomy: an unreachable host or a\n *    missing source is a fault to surface, not a state to absorb.\n *\n * Exit 0 whenever the report itself could be assembled — EXCEPT under\n * `--watch` (see below), whose exit code carries the gate's verdict instead.\n *\n * The submission listing always requests the full `?detail=findings` shape\n * server-side (needed so THIS PROJECT's latest-error auto-inline rendering\n * — see `humanSummary` — has findings to inspect without a second\n * round-trip). `--findings` no longer changes what's FETCHED; it changes\n * what's RENDERED inline in human mode: every shown version's findings,\n * not just the latest's error-severity ones.\n *\n * `--watch` turns `status` into a blocking wait: it requires a project with\n * a resolved source and a live session (both are PRECONDITIONs here, not\n * degraded-to-false states — there is nothing to watch without them), then\n * polls `GET /api/partner/submissions?detail=findings` every 30s for THIS\n * project's current (slug, package.json version) submission until it reaches\n * a terminal-for-waiting state: `gated`/`dev` exit 0, `rejected` exits 10\n * (GATE_FAILED) with the findings carried in `data` — the same shape\n * `publish`'s own gate refusal uses, so an agent's fix-then-retry loop\n * branches on it identically whether the gate ran inline (future) or via\n * this poll (today). `--json --watch` still emits exactly ONE envelope, at\n * completion — the polling itself only ever writes to stderr via `ctx.log`.\n *\n * Human-mode rendering is PROJECT-SCOPED: the server lists every\n * submission for the resolved source (an org-level bucket shared by every\n * project publishing there — `listSubmissions` has no server-side slug\n * filter, see `publish-api.ts`'s wire contract), so \"THIS PROJECT\" groups\n * the rows matching this project's own slug and \"OTHER INTEGRATIONS IN\n * SOURCE …\" collapses everything else to one summary line per integration\n * (or, with `--all`, the same table shape).\n * The `--json` envelope stays additive-compatible: `submissions` is still\n * the full, unfiltered list, with `data.project.scopedSubmissions` and\n * `data.otherIntegrations` layered on top for a consumer that wants the\n * pre-grouped view without re-deriving it.\n */\nexport async function runStatus(\n  ctx: CliContext,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n\n  const stored = env.store.read(env.host);\n\n  const notice = await checkForUpdate({\n    env: args.env,\n    host: env.host,\n    session: stored ?? undefined,\n  });\n  announceUpdate(ctx, notice);\n\n  const session = stored\n    ? await probeSession(env, stored)\n    : {\n        authenticated: false,\n        hint: loginHint(env, 'to sign in.'),\n      };\n\n  // probeSession may have refreshed the session — persisting a NEW access\n  // token and ROTATING the refresh token on disk. Re-read before using it:\n  // the pre-probe object now holds a dead access token and an already-spent\n  // refresh token, and presenting those would turn \"logged in, token was\n  // merely stale\" into a hard exit-4 — the one failure this command promises\n  // never to produce.\n  const live = stored ? (env.store.read(env.host) ?? stored) : null;\n\n  const project = readProjectReport(args.dir);\n\n  if (args.watch) {\n    if (!session.authenticated || !live) {\n      throw authRequiredError(\n        `\"ekanos status --watch\" needs a live session on ${env.host}.`,\n        loginHint(env),\n      );\n    }\n\n    if (!project) {\n      throw preconditionError(\n        `No ekanos.json found in ${path.resolve(args.dir)}.`,\n        'Run \"ekanos publish\" at least once before watching its gate result.',\n      );\n    }\n\n    if (!project.source) {\n      throw preconditionError(\n        'This project has no \"source\" in ekanos.json yet.',\n        'Run \"ekanos publish\" at least once (it saves the source you ' +\n          'publish to) before watching its gate result.',\n      );\n    }\n\n    return runWatch(ctx, env, project, args);\n  }\n\n  let submissions: SubmissionListing[] | null = null;\n\n  if (project?.source && session.authenticated && live) {\n    // Always the full `?detail=findings` shape, `--findings` or not: THIS\n    // PROJECT's auto-inline latest-error rendering (see `humanSummary`)\n    // needs the findings array to decide whether to render, not just the\n    // counts — and `data.project.scopedSubmissions` carries the same\n    // richer shape in the JSON envelope regardless of the flag. `--findings`\n    // now controls how much of it gets rendered inline, not what's fetched.\n    submissions = await listWithOneRefresh(\n      env,\n      live,\n      project.source,\n      'findings',\n    );\n  } else if (project?.source && !session.authenticated) {\n    // Human mode says this in the result block's note; the stderr line is\n    // for JSON callers, who never see that block.\n    if (ctx.jsonMode) {\n      ctx.log(\n        `ekanos: not logged in to ${env.host} — skipping the submission list. ` +\n          (session.hint ?? ''),\n      );\n    }\n  } else if (project && !project.source) {\n    if (ctx.jsonMode)\n      ctx.log(\n        'ekanos: this project has no \"source\" in ekanos.json yet — the first ' +\n          '\"ekanos publish --source <slug>\" saves one, and status will list ' +\n          'submissions from then on.',\n      );\n  }\n\n  const projectIntegration =\n    project && submissions\n      ? (submissions.find((s) => s.slug === project.slug) ?? null)\n      : null;\n\n  const otherIntegrations = submissions\n    ? submissions\n        .filter((s) => s.slug !== project?.slug)\n        .map((s) => summarizeIntegration(s))\n    : null;\n\n  // Best-effort, human-mode-only add-on for the header's \"publish target\n  // (+ seat role)\" line — same degrade-to-null contract as `whoami`'s own\n  // seat lookup. Skipped entirely in JSON mode: nothing in the envelope\n  // needs it, and it would otherwise be an extra network round-trip every\n  // existing `--json` caller pays for no reason.\n  const seatRole =\n    !ctx.jsonMode && project?.source && session.authenticated && live\n      ? await fetchSeatRoleQuietly(env, live, project.source)\n      : null;\n\n  return ctx.succeed(\n    {\n      host: env.host,\n      ...session,\n      credentialsPath: env.store.filePath,\n      project: project\n        ? {\n            ...project,\n            scopedSubmissions: submissions\n              ? (projectIntegration?.versions ?? [])\n              : null,\n          }\n        : null,\n      submissions,\n      ...(otherIntegrations !== null ? { otherIntegrations } : {}),\n      ...(notice ? { toolchain: notice } : {}),\n    },\n    humanSummary(\n      ctx.ui,\n      project?.dir ?? path.resolve(args.dir),\n      env.host,\n      session,\n      project,\n      submissions,\n      { findings: args.findings ?? false, all: args.all ?? false },\n      seatRole,\n      args.now ?? new Date(),\n    ),\n  );\n}\n\n/**\n * The `--watch` poll loop. Targets THIS project's current submission —\n * `project.slug` + the version presently in `package.json` (the same value\n * `publish` would submit right now) — not \"whatever's most recent,\" so\n * watching after a publish can never resolve against a stale prior version.\n */\nasync function runWatch(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  project: ProjectReport,\n  args: StatusArgs,\n): Promise<ExitCode> {\n  const source = project.source;\n  if (!source) {\n    // Unreachable — the caller already checked — but keeps this function's\n    // own type honest without a non-null assertion.\n    throw preconditionError(\n      'This project has no \"source\" in ekanos.json yet.',\n      'Run \"ekanos publish\" at least once before watching its gate result.',\n    );\n  }\n\n  const targetVersion = readProjectVersion(project.dir);\n\n  // Glyph-only restyle — the poll contract itself (exit codes, timing,\n  // JSON envelope) is unchanged.\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n\n  ctx.log(\n    `${waitGlyph}${prefix}watching ${project.slug}@${targetVersion} on ${env.host} ` +\n      `(polling, up to ${args.timeoutMinutes ?? DEFAULT_WAIT_MINUTES} min)…`,\n  );\n\n  const waited = await waitForGate(ctx, env, {\n    slug: project.slug,\n    source,\n    version: targetVersion,\n    timeoutMinutes: args.timeoutMinutes ?? DEFAULT_WAIT_MINUTES,\n    sleep: args.sleep ?? defaultSleep,\n  });\n\n  return waited.timedOut\n    ? failWatchTimeout(ctx, project.slug, targetVersion, waited)\n    : reportWatchOutcome(ctx, project.slug, waited.version);\n}\n\nexport type GateWait =\n  | { timedOut: false; version: SubmissionVersion }\n  | {\n      timedOut: true;\n      lastState: string | null;\n      waitedMinutes: number;\n    };\n\n/**\n * Poll the submission list until `slug@version` reaches a verdict (see\n * `WATCH_TERMINAL_STATES`) or `timeoutMinutes` of waiting has passed. Waits\n * back off from 5s to a 30s cap. The elapsed time is the sum of the waits, so\n * a test with an instant `sleep` still reaches the timeout.\n */\nexport async function waitForGate(\n  ctx: CliContext,\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  target: {\n    slug: string;\n    source: string;\n    version: string;\n    timeoutMinutes: number;\n    sleep: (ms: number) => Promise<void>;\n  },\n): Promise<GateWait> {\n  const waitGlyph = ctx.jsonMode ? '' : `${ctx.ui.dim(ctx.ui.glyphs.info)} `;\n  const prefix = ctx.jsonMode ? 'ekanos: ' : '';\n  const budgetMs = target.timeoutMinutes * 60_000;\n  let waitedMs = 0;\n\n  for (let attempt = 0; ; attempt += 1) {\n    // Re-read the session from the credential store on EVERY iteration —\n    // never carry one over in a closure. Auth0 rotates the refresh token on\n    // every use (see `refreshStoredSession`'s docstring), so a token this\n    // loop already consumed is dead by the next iteration; the store is the\n    // persisted source of truth for whichever refresh most recently landed\n    // — this loop's own (via `listWithOneRefresh` below, which persists\n    // through `refreshStoredSession`), or a concurrent one from another\n    // process (another terminal running login/publish/status --watch\n    // against the same host). Threading the refreshed session back out of\n    // `listWithOneRefresh` instead would only cover the first case.\n    const current = env.store.read(env.host);\n\n    if (!current) {\n      throw authRequiredError(\n        `The session for ${env.host} is gone — waiting for the gate ` +\n          'cannot continue without it.',\n        loginHint(env),\n      );\n    }\n\n    const integrations = await listWithOneRefresh(\n      env,\n      current,\n      target.source,\n      'findings',\n    );\n    const version = findVersion(integrations, target.slug, target.version);\n\n    if (version && WATCH_TERMINAL_STATES.has(version.state)) {\n      return { timedOut: false, version };\n    }\n\n    const delay = pollDelayMs(attempt);\n    if (waitedMs + delay > budgetMs) {\n      return {\n        timedOut: true,\n        lastState: version?.state ?? null,\n        waitedMinutes: Math.round(waitedMs / 6_000) / 10,\n      };\n    }\n\n    ctx.log(\n      `${waitGlyph}${prefix}${target.slug}@${target.version} is ` +\n        `${version ? version.state : 'not visible yet'} — waiting…`,\n    );\n\n    await target.sleep(delay);\n    waitedMs += delay;\n  }\n}\n\n/** The exit-11 outcome: the gate has not answered, but it may still. */\nexport function failWatchTimeout(\n  ctx: CliContext,\n  slug: string,\n  version: string,\n  waited: Extract<GateWait, { timedOut: true }>,\n): ExitCode {\n  return ctx.fail(\n    timeoutError(\n      `${slug}@${version} had no gate verdict after ${waited.waitedMinutes} minutes` +\n        `${waited.lastState ? ` (still \"${waited.lastState}\")` : ''}.`,\n      'The gate may still be running. Run \"ekanos status --watch\" to keep waiting, or raise --timeout.',\n    ),\n    { slug, version, state: waited.lastState, timedOut: true },\n  );\n}\n\nfunction findVersion(\n  integrations: SubmissionListing[],\n  slug: string,\n  version: string,\n): SubmissionVersion | null {\n  const integration = integrations.find((i) => i.slug === slug);\n  return integration?.versions.find((v) => v.version === version) ?? null;\n}\n\nexport function watchOutcomeData(slug: string, version: SubmissionVersion) {\n  return {\n    slug,\n    version: version.version,\n    state: version.state,\n    gatedAt: version.gatedAt,\n    errorCount: version.errorCount,\n    warnCount: version.warnCount,\n    findings: version.findings ?? [],\n    stages: version.stages ?? [],\n  };\n}\n\nfunction reportWatchOutcome(\n  ctx: CliContext,\n  slug: string,\n  version: SubmissionVersion,\n): ExitCode {\n  const data = watchOutcomeData(slug, version);\n\n  if (version.state === 'rejected') {\n    return ctx.fail(\n      gateFailedError(\n        `${slug}@${version.version} was rejected by the gate ` +\n          `(${data.errorCount ?? 0} error${data.errorCount === 1 ? '' : 's'}).`,\n        'Resolve the error-severity findings in data.findings, bump the ' +\n          'version, and re-run \"ekanos publish\".',\n      ),\n      data,\n    );\n  }\n\n  return ctx.succeed(\n    data,\n    ctx.ui.result({\n      title: `${slug}@${version.version} is ${version.state}`,\n      tone: data.warnCount ? 'warn' : 'ok',\n      rows: [\n        ['State', version.state],\n        ...(data.warnCount\n          ? [['Warnings', String(data.warnCount)] as const]\n          : []),\n      ],\n    }),\n  );\n}\n\nfunction defaultSleep(ms: number): Promise<void> {\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\n/**\n * whoami's identity resolution, with AUTH_REQUIRED absorbed into\n * `authenticated: false`. Anything else — network, precondition, MFA mapped\n * to auth by `fetchIdentity` — still propagates: \"the host was unreachable\"\n * must never be reported as \"you are logged out\".\n */\nasync function probeSession(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  stored: StoredSession,\n): Promise<SessionReport> {\n  try {\n    const { identity, session } = await resolveIdentity(env, stored);\n\n    return {\n      authenticated: true,\n      user: { id: identity.id, email: identity.email, name: identity.name },\n      expiresAt: session.expiresAt,\n    };\n  } catch (error) {\n    if (error instanceof CliError && error.code === ERROR_CODES.AUTH_REQUIRED) {\n      return { authenticated: false, hint: error.hint };\n    }\n\n    throw error;\n  }\n}\n\n/**\n * Lenient project read: no ekanos.json means \"not in a project\", which is an\n * answer, not an error. An ekanos.json that EXISTS but does not load keeps\n * `loadProject`'s strict behaviour — a broken project file is a fault the\n * partner needs named, whatever verb they ran.\n */\nfunction readProjectReport(dir: string): ProjectReport | null {\n  const projectDir = path.resolve(dir);\n\n  // A repo root is not one project: status reports no project there, as it\n  // does outside any.\n  if (\n    !fs.existsSync(path.join(projectDir, EKANOS_CONFIG_FILENAME)) ||\n    isRepoRoot(projectDir)\n  ) {\n    return null;\n  }\n\n  const loaded = loadProject(projectDir);\n\n  return {\n    dir: loaded.projectDir,\n    slug: loaded.primary.slug,\n    source: loaded.project.source ?? null,\n  };\n}\n\n/** Mirrors publish's one-refresh-one-retry on a stale access token. */\nasync function listWithOneRefresh(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n  detail?: 'findings',\n): Promise<SubmissionListing[]> {\n  const first = await listSubmissions(env.host, session.accessToken, source, {\n    detail,\n  });\n\n  if (first.status === 'ok') return first.integrations;\n\n  const refreshed = await refreshStoredSession(env, session);\n  const second = await listSubmissions(\n    env.host,\n    refreshed.accessToken,\n    source,\n    {\n      detail,\n    },\n  );\n\n  if (second.status === 'ok') return second.integrations;\n\n  // Authenticated a moment ago, unauthorized twice here: report the list as\n  // unavailable rather than the session as dead — probeSession already proved\n  // it. This is unreachable in practice; belt and braces for a racing revoke.\n  throw authRequiredError(\n    `The session for ${env.host} could not authorize the submission list.`,\n    loginHint(env),\n  );\n}\n\n/**\n * `whoami`'s seat-lookup degradation, narrowed to one source's role: a\n * network hiccup, MFA, or a deployment predating the seats route must never\n * turn a working `status` into a failing one — the header simply omits the\n * \"(role)\" suffix.\n */\nasync function fetchSeatRoleQuietly(\n  env: ReturnType<typeof resolveAuthEnvironment>,\n  session: StoredSession,\n  source: string,\n): Promise<string | null> {\n  try {\n    const result = await fetchSeatsWithOneRefresh(env, session);\n    if (result.status !== 'ok') return null;\n\n    const seat = result.sources.find((s) => s.slug === source);\n    return seat ? seat.roles.join(', ') : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction tryReadProjectVersion(dir: string): string | null {\n  try {\n    return readProjectVersion(dir);\n  } catch {\n    return null;\n  }\n}\n\nfunction timestampMs(iso: string | null | undefined): number {\n  if (!iso) return 0;\n  const parsed = new Date(iso).getTime();\n  return Number.isNaN(parsed) ? 0 : parsed;\n}\n\n/**\n * Newest-first by `gatedAt ?? submittedAt`. Ties (including two versions\n * with no timestamp at all) keep their original, server-given order —\n * `Array#sort` is stable, and a stable no-op is the right answer when there\n * is nothing to compare.\n */\nexport function sortVersionsNewestFirst(\n  versions: readonly SubmissionVersion[],\n): SubmissionVersion[] {\n  return [...versions].sort(\n    (a, b) =>\n      timestampMs(b.gatedAt ?? b.submittedAt) -\n      timestampMs(a.gatedAt ?? a.submittedAt),\n  );\n}\n\nfunction versionAge(version: SubmissionVersion, now: Date): string {\n  const timestamp = version.gatedAt ?? version.submittedAt;\n  return timestamp ? relativeTime(timestamp, now) : '—';\n}\n\nexport function findingsCellParts(\n  ui: Ui,\n  version: SubmissionVersion,\n): { text: string; paint: (text: string) => string } {\n  if (version.errorCount === null && version.warnCount === null) {\n    return { text: '—', paint: ui.dim };\n  }\n\n  const errorCount = version.errorCount ?? 0;\n  const warnCount = version.warnCount ?? 0;\n\n  if (errorCount === 0 && warnCount === 0) {\n    return { text: '0', paint: (text) => text };\n  }\n\n  const parts: string[] = [];\n  if (errorCount > 0) parts.push(`${errorCount}E`);\n  if (warnCount > 0) parts.push(`${warnCount}W`);\n\n  return { text: parts.join(' '), paint: errorCount > 0 ? ui.err : ui.warn };\n}\n\nexport function stateColorFor(ui: Ui, state: string): (text: string) => string {\n  if (state === 'dev' || state === 'prod') return ui.ok;\n  if (state === 'gated') return ui.accent;\n  if (state === 'submitted' || state === 'superseded') return ui.dim;\n  if (state === 'rejected' || state === 'revoked') return ui.err;\n  return (text) => text;\n}\n\n/**\n * A VERSION/STATE/AGE/FINDINGS table, built by hand rather than via\n * `ui.table`: STATE and FINDINGS need per-cell color, and `ui.table` sizes\n * columns from the raw cell strings it's handed — a colored cell's ANSI\n * escapes would inflate that width and misalign the column. `ui.ts`'s own\n * doc comment on `padCell` names this exact tradeoff (\"ignoring color codes\n * in length math is the CALLER's job — pad before coloring, never after\"),\n * so this pads against the PLAIN text first and colors the already-padded\n * string — the same rule `ui.table` documents, just applied here instead of\n * inside it.\n */\nexport function renderVersionsTable(\n  ui: Ui,\n  versions: readonly SubmissionVersion[],\n  now: Date,\n): string {\n  const headers = ['VERSION', 'STATE', 'AGE', 'FINDINGS'] as const;\n\n  const rows = versions.map((version) => {\n    const findings = findingsCellParts(ui, version);\n    return {\n      version: version.version,\n      state: version.state,\n      age: versionAge(version, now),\n      findingsText: findings.text,\n      findingsPaint: findings.paint,\n      statePaint: stateColorFor(ui, version.state),\n    };\n  });\n\n  const widths: [number, number, number, number] = [\n    Math.max(headers[0].length, ...rows.map((r) => r.version.length)),\n    Math.max(headers[1].length, ...rows.map((r) => r.state.length)),\n    Math.max(headers[2].length, ...rows.map((r) => r.age.length)),\n    Math.max(headers[3].length, ...rows.map((r) => r.findingsText.length)),\n  ];\n\n  const headerLine = headers\n    .map((header, i) => ui.dim(header.padEnd(widths[i]!)))\n    .join('  ');\n\n  const bodyLines = rows.map((row) =>\n    [\n      row.version.padEnd(widths[0]),\n      row.statePaint(row.state.padEnd(widths[1])),\n      row.age.padEnd(widths[2]),\n      row.findingsPaint(row.findingsText.padEnd(widths[3])),\n    ].join('  '),\n  );\n\n  return [headerLine, ...bodyLines].join('\\n');\n}\n\n/**\n * The findings shown directly under THIS PROJECT's table. `--findings`\n * forces every version's own findings inline; otherwise only the LATEST\n * version's ERROR-severity findings auto-render (the moment a partner most\n * needs them, no flag required), and a dim pointer at `ekanos status\n * --findings` covers everything else with a nonzero count.\n */\nfunction renderThisProjectFindings(\n  ui: Ui,\n  cwd: string,\n  sorted: readonly SubmissionVersion[],\n  forceAll: boolean,\n): string | null {\n  if (forceAll) {\n    const blocks = sorted\n      .filter((v) => v.findings && v.findings.length > 0)\n      .map((v) =>\n        [\n          `  ${ui.dim(`${v.version}:`)}`,\n          indentLines(formatFindings(ui, v.findings!, { cwd }), 4),\n        ].join('\\n'),\n      );\n\n    return blocks.length > 0 ? blocks.join('\\n\\n') : null;\n  }\n\n  const [latest, ...older] = sorted;\n  const latestErrors = (latest?.findings ?? []).filter(\n    (f) => f.severity === 'error',\n  );\n\n  if (latest && latestErrors.length > 0 && latest.findings) {\n    return indentLines(formatFindings(ui, latest.findings, { cwd }), 2);\n  }\n\n  const latestNonzero =\n    (latest?.errorCount ?? 0) > 0 || (latest?.warnCount ?? 0) > 0;\n  const olderNonzero = older.some(\n    (v) => (v.errorCount ?? 0) > 0 || (v.warnCount ?? 0) > 0,\n  );\n\n  return latestNonzero || olderNonzero\n    ? `  ${ui.dim('→ details: ekanos status --findings')}`\n    : null;\n}\n\nexport interface OtherIntegrationSummary {\n  slug: string;\n  /** The full name (`acme/google-drive`); absent on an older host. */\n  displayName?: string;\n  name: string | null;\n  versionsCount: number;\n  latestVersion: string | null;\n  latestState: string | null;\n}\n\nexport function summarizeIntegration(\n  integration: SubmissionListing,\n): OtherIntegrationSummary {\n  const latest = sortVersionsNewestFirst(integration.versions)[0] ?? null;\n  return {\n    slug: integration.slug,\n    ...(integration.displayName\n      ? { displayName: integration.displayName }\n      : {}),\n    name: integration.name,\n    versionsCount: integration.versions.length,\n    latestVersion: latest?.version ?? null,\n    latestState: latest?.state ?? null,\n  };\n}\n\nfunction indentLines(block: string, spaces: number): string {\n  const prefix = ' '.repeat(spaces);\n  return block\n    .split('\\n')\n    .map((line) => `${prefix}${line}`)\n    .join('\\n');\n}\n\nfunction buildHeaderRows(\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  seatRole: string | null,\n): readonly ResultRow[] {\n  const rows: ResultRow[] = [];\n\n  if (session.authenticated) {\n    rows.push([\n      'Account',\n      session.user?.email ?? session.user?.id ?? 'unknown',\n    ]);\n  }\n  rows.push(['Host', shortHost(host)]);\n\n  if (project) {\n    const version = tryReadProjectVersion(project.dir);\n    rows.push([\n      'Project',\n      version ? `${project.slug}@${version}` : project.slug,\n    ]);\n    rows.push([\n      'Target',\n      project.source\n        ? `${project.source}${seatRole ? ` · ${seatRole}` : ''}`\n        : 'none yet',\n    ]);\n  }\n\n  return rows;\n}\n\n/**\n * The closing `ui.nextAction` line, chosen from the LATEST version of THIS\n * project — `null` (no closing line at all) whenever nothing is pending:\n * no submission yet, or the latest is already `dev`/`prod`/`revoked`.\n */\nexport function buildNextAction(\n  ui: Ui,\n  latest: SubmissionVersion | null,\n): string | null {\n  if (!latest) return null;\n\n  if (latest.state === 'rejected') {\n    return ui.nextAction('ekanos status --findings', 'see what failed');\n  }\n  if (latest.state === 'gated') {\n    return `\\n${ui.dim('→ awaiting admission (runs hourly)')}`;\n  }\n  if (latest.state === 'submitted') {\n    return `\\n${ui.dim('→ awaiting gate result')}`;\n  }\n\n  return null;\n}\n\nfunction humanSummary(\n  ui: Ui,\n  cwd: string,\n  host: string,\n  session: SessionReport,\n  project: ProjectReport | null,\n  submissions: SubmissionListing[] | null,\n  args: { findings: boolean; all: boolean },\n  seatRole: string | null,\n  now: Date,\n): string {\n  const note = !session.authenticated\n    ? session.hint\n    : !project\n      ? 'No ekanos.json here, so there is no project to report on.'\n      : !project.source\n        ? 'No \"source\" configured yet. The first \"ekanos publish --source <slug>\" saves one.'\n        : undefined;\n\n  const lines: string[] = [\n    ui.result({\n      title: session.authenticated ? 'Signed in' : 'Not signed in',\n      tone: session.authenticated ? 'ok' : 'warn',\n      rows: buildHeaderRows(host, session, project, seatRole),\n      notes: note ? [note] : [],\n    }),\n  ];\n\n  if (note || !project?.source || !submissions) {\n    return lines.join('\\n');\n  }\n\n  const projectIntegration =\n    submissions.find((s) => s.slug === project.slug) ?? null;\n  const others = submissions.filter((s) => s.slug !== project.slug);\n\n  lines.push('', ui.section('this project'));\n\n  if (\n    projectIntegration?.displayName &&\n    projectIntegration.displayName !== projectIntegration.slug\n  ) {\n    lines.push(`  ${ui.dim(`published as ${projectIntegration.displayName}`)}`);\n  }\n\n  const sorted = projectIntegration\n    ? sortVersionsNewestFirst(projectIntegration.versions)\n    : [];\n\n  if (sorted.length === 0) {\n    lines.push(`  ${ui.dim('no submissions yet for this project.')}`);\n  } else {\n    lines.push(indentLines(renderVersionsTable(ui, sorted, now), 2));\n\n    const findingsBlock = renderThisProjectFindings(\n      ui,\n      cwd,\n      sorted,\n      args.findings,\n    );\n    if (findingsBlock) lines.push('', findingsBlock);\n  }\n\n  lines.push('', ui.section(`other integrations in source ${project.source}`));\n\n  if (others.length === 0) {\n    lines.push(`  ${ui.dim('none.')}`);\n  } else if (args.all) {\n    for (const integration of others) {\n      const otherSorted = sortVersionsNewestFirst(integration.versions);\n      lines.push(`  ${ui.dim(integration.displayName ?? integration.slug)}`);\n      lines.push(indentLines(renderVersionsTable(ui, otherSorted, now), 4));\n    }\n  } else {\n    for (const integration of others) {\n      const summary = summarizeIntegration(integration);\n      lines.push(\n        `  ${ui.dim(\n          `${summary.displayName ?? summary.slug} — ${summary.versionsCount} version${\n            summary.versionsCount === 1 ? '' : 's'\n          }, latest ${summary.latestVersion ?? '?'} ${\n            summary.latestState ?? '?'\n          }`,\n        )}`,\n      );\n    }\n  }\n\n  const action = buildNextAction(ui, sorted[0] ?? null);\n  if (action) lines.push(action);\n\n  return lines.join('\\n');\n}\n"]}