@ekanos/cli 0.9.0 → 0.11.0

package/dist/commands/teams.js

@@ -0,0 +1,314 @@
+import { refreshStoredSession, requireSession, resolveAuthEnvironment, } from '../auth/session.js';
+import { authRequiredError, invalidStateError, usageError, validationError, } from '../errors.js';
+import { resolveSourceTarget } from '../source-target.js';
+import { listTeams, mintTeamWebhook, setTeamApp, showTeamIntegration, } from '../teams-api.js';
+import { promptHidden, promptLine } from './apps.js';
+import { isTeamAgentArea, runTeamAgentCommands } from './team-agents.js';
+import { ONBOARDING_SUBCOMMANDS, isOnboardingSubcommand, parseOnboarding, runOnboarding, } from './teams-onboard.js';
+export const TEAMS_SUBCOMMANDS = [
+    'list',
+    'show',
+    'app',
+    'webhook',
+    ...ONBOARDING_SUBCOMMANDS,
+];
+/**
+ * `teams` — a Source admin's view of its teams' integration setup, the
+ * team-level counterpart of `apps`. `list` names the teams; `show` reads one
+ * team's setup of one product as a checklist; `app set` enters a team's own
+ * app (Zendesk's subdomain, client and signing secret) at the admin's
+ * terminal — never from a flag, a file or a non-interactive run, so an
+ * agent driving the CLI never handles a secret; `webhook` mints the URL the
+ * team's provider sends to, shown once.
+ */
+export async function runTeams(ctx, args) {
+    const [rawSubcommand, ...rest] = args.positionals;
+    if (isTeamAgentArea(rawSubcommand)) {
+        return runTeamAgentCommands(ctx, args);
+    }
+    const subcommand = parseSubcommand(rawSubcommand);
+    if (isOnboardingSubcommand(subcommand)) {
+        const plan = parseOnboarding(subcommand, rest, args);
+        const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+            projectDir: args.dir,
+        });
+        const resolved = await resolveSourceTarget(env, requireSession(env.store, env.host), args);
+        return runOnboarding(ctx, new TeamsClient(env, resolved.session), env.host, resolved.source, plan);
+    }
+    if (subcommand === 'app' && rest[0] !== 'set') {
+        throw usageError(rest[0]
+            ? `Unknown teams app subcommand "${rest[0]}".`
+            : 'teams app needs a subcommand.', 'Run "ekanos teams app set <team> <product>".');
+    }
+    const operands = subcommand === 'app' ? rest.slice(1) : rest;
+    if (subcommand === 'list' && operands.length > 0) {
+        throw usageError('teams list takes no arguments.', 'Run "ekanos teams list --source <slug>".');
+    }
+    const team = subcommand === 'list' ? '' : requireSlug(operands[0], 'team');
+    const product = subcommand === 'list' ? '' : requireSlug(operands[1], 'product');
+    const extra = operands.slice(subcommand === 'webhook' ? 3 : 2);
+    if (subcommand !== 'list' && extra.length > 0) {
+        throw usageError(`Unexpected argument "${extra[0]}".`, 'See "ekanos teams --help".');
+    }
+    if (subcommand === 'app' && !canPrompt(ctx, args)) {
+        throw usageError("teams app set takes the team's secrets at a terminal, never in a script or an agent run.", `Run it yourself in your terminal: npx @ekanos/cli teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`);
+    }
+    const env = resolveAuthEnvironment(ctx, args.host, args.env, {
+        projectDir: args.dir,
+    });
+    const resolved = await resolveSourceTarget(env, requireSession(env.store, env.host), args);
+    const client = new TeamsClient(env, resolved.session);
+    const source = resolved.source;
+    if (subcommand === 'list') {
+        const list = await client.call((token) => listTeams(env.host, token, source));
+        return ctx.succeed(Object.assign({ host: env.host }, list), list.teams.length === 0
+            ? ctx.ui.result({
+                title: `No teams on ${list.source.slug}`,
+                tone: 'warn',
+            })
+            : ctx.ui.result({
+                title: `Teams on ${list.source.slug}`,
+                rows: list.teams.map((entry) => [
+                    entry.slug,
+                    `${entry.name} · ${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`,
+                ]),
+                notes: [
+                    '"ekanos teams show <team> <product>" shows a team\'s setup.',
+                ],
+            }));
+    }
+    const target = { source, team, product };
+    const status = await client.call((token) => showTeamIntegration(env.host, token, target));
+    if (subcommand === 'show') {
+        return ctx.succeed(Object.assign({ host: env.host }, status), checklist(status).join('\n'));
+    }
+    if (!status.enabled) {
+        throw invalidStateError(`"${product}" is not enabled on ${status.source.slug}.`, '"ekanos catalog" lists what this Source has; Ekanos enables a product for a Source.');
+    }
+    if (subcommand === 'app') {
+        return setApp(ctx, args, client, env.host, target, status);
+    }
+    return mintWebhook(ctx, args, client, env.host, target, status, operands[2]);
+}
+async function setApp(ctx, args, client, host, target, status) {
+    var _a, _b;
+    const app = chooseApp(status, args.connection);
+    ctx.log(appWalkthrough(status, app).join('\n'));
+    const fields = {};
+    for (const field of app.fields) {
+        const keep = field.set ? ' (set — Enter keeps it)' : '';
+        const question = field.sensitive
+            ? `${field.label}${keep} (hidden): `
+            : `${field.label}${keep}: `;
+        const value = (await (field.sensitive
+            ? ((_a = args.askSecret) !== null && _a !== void 0 ? _a : promptHidden)
+            : ((_b = args.ask) !== null && _b !== void 0 ? _b : promptLine))(question)).trim();
+        if (value)
+            fields[field.secretName] = value;
+    }
+    const missing = app.fields.filter((field) => !field.set && !fields[field.secretName]);
+    if (missing.length > 0) {
+        throw validationError(`Every field is needed: ${missing.map((field) => field.label).join(', ')}.`, `Run "ekanos teams app set ${target.team} ${target.product}" again.`);
+    }
+    if (Object.keys(fields).length === 0) {
+        throw validationError('Nothing was changed.', `Run "ekanos teams show ${target.team} ${target.product}" to see the current state.`);
+    }
+    const result = await client.call((token) => setTeamApp(host, token, target, {
+        connectionId: app.connectionId,
+        fields,
+    }));
+    const next = nextSteps(status, app, target);
+    return ctx.succeed(Object.assign({ host }, result), ctx.ui.result({
+        title: `Saved ${target.team}'s ${result.product.name} app`,
+        rows: [
+            ['Source', status.source.slug],
+            [
+                'Fields',
+                result.fields.map((field) => `${mark(field.set)} ${field.label}`),
+            ],
+        ],
+        notes: next,
+    }));
+}
+async function mintWebhook(ctx, args, client, host, target, status, requested) {
+    const webhooks = status.teamApps.flatMap((app) => app.webhooks);
+    if (webhooks.length === 0) {
+        throw invalidStateError(`${status.product.name} has no webhook a team's app sends.`, `Run "ekanos teams show ${target.team} ${target.product}" to see its setup.`);
+    }
+    const webhook = requested
+        ? webhooks.find((entry) => entry.webhookId === requested)
+        : webhooks.length === 1
+            ? webhooks[0]
+            : undefined;
+    if (!webhook) {
+        throw usageError(requested
+            ? `${status.product.name} has no team-app webhook "${requested}".`
+            : `${status.product.name} has several webhooks; name one.`, `Run one of: ${webhooks.map((entry) => `ekanos teams webhook ${target.team} ${target.product} ${entry.webhookId}`).join(', ')}.`);
+    }
+    if (webhook.endpoint && !args.yes) {
+        throw invalidStateError(`${target.team} already has a live URL for ${webhook.webhookId} (${webhook.endpoint.tokenPrefix}…). A new one revokes it, and the provider's webhook stops working until you paste the new URL there.`, `Re-run with --yes when you are ready to update the provider: ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`);
+    }
+    const minted = await client.call((token) => mintTeamWebhook(host, token, target, webhook.webhookId));
+    return ctx.succeed(Object.assign({ host }, minted), ctx.ui.result({
+        title: `Webhook URL for ${target.team} · ${webhook.webhookId}`,
+        tone: 'warn',
+        rows: [
+            ['URL', minted.url],
+            [
+                'Paste it into',
+                `${status.product.name}'s webhook settings for this team`,
+            ],
+        ],
+        notes: [
+            'This URL is shown once and cannot be read again. Paste it now.',
+            ...(minted.replaced
+                ? ['The previous URL is revoked: the provider must use this one.']
+                : []),
+        ],
+    }));
+}
+/** `teams show`, read top to bottom like a setup checklist. */
+export function checklist(status) {
+    var _a, _b;
+    const name = status.product.name;
+    const lines = [
+        `${name} for team ${status.team.slug} (${status.team.name}) on ${status.source.slug}`,
+        `  ${mark(status.enabled)} Enabled on the Source`,
+    ];
+    if (!status.enabled) {
+        lines.push('    "ekanos catalog" lists what this Source has; Ekanos enables a product for a Source.');
+        return lines;
+    }
+    const target = { team: status.team.slug, product: status.product.slug };
+    for (const app of status.teamApps) {
+        lines.push(`  Team app: ${app.label} (${app.connectionId})`);
+        if ((_a = app.setup) === null || _a === void 0 ? void 0 : _a.consoleUrl)
+            lines.push(`    Open: ${app.setup.consoleUrl}`);
+        (_b = app.setup) === null || _b === void 0 ? void 0 : _b.steps.forEach((step, index) => lines.push(`    ${index + 1}. ${step}`));
+        lines.push('    Callback URLs to register:');
+        lines.push(...callbackUrls(app).map((url) => `      ${url}`));
+        if (app.guideUrl)
+            lines.push(`    Guide: ${app.guideUrl}`);
+        for (const field of app.fields) {
+            lines.push(`    ${mark(field.set)} ${field.label}`);
+        }
+        if (app.fields.some((field) => !field.set)) {
+            lines.push(`      → in your terminal: npx @ekanos/cli teams app set ${target.team} ${target.product} --connection ${app.connectionId} --source ${status.source.slug}`);
+        }
+        for (const webhook of app.webhooks) {
+            lines.push(webhook.endpoint
+                ? `    ${mark(true)} Webhook ${webhook.webhookId}: live URL ${webhook.endpoint.tokenPrefix}… since ${day(webhook.endpoint.createdAt)}${webhook.endpoint.lastUsedAt ? `, last delivery ${day(webhook.endpoint.lastUsedAt)}` : ', no delivery yet'}`
+                : `    ${mark(false)} Webhook ${webhook.webhookId}: no URL yet`);
+            if (!webhook.endpoint) {
+                lines.push(`      → ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --source ${status.source.slug}`);
+            }
+        }
+        lines.push(app.connection
+            ? `    ${mark(true)} Connected ${day(app.connection.connectedAt)}${app.connection.connectedBy ? ` by ${who(app.connection.connectedBy)}` : ''}`
+            : `    ${mark(false)} Connected: a team member clicks Connect at ${status.connectUrl}`);
+    }
+    lines.push(status.activation
+        ? `  ${mark(true)} Activated for the team${status.activation.activatedAt ? ` ${day(status.activation.activatedAt)}` : ''}${status.activation.activatedBy ? ` by ${who(status.activation.activatedBy)}` : ''}`
+        : `  ${mark(false)} Activated: a team member connects at ${status.connectUrl}`);
+    lines.push(`  Team page: ${status.connectUrl}`);
+    if (status.agentEvents.length > 0) {
+        lines.push('  Agent events it offers:');
+        lines.push(...status.agentEvents.map((event) => `    ${event.id} — ${event.label}`));
+    }
+    return lines;
+}
+function appWalkthrough(status, app) {
+    var _a, _b;
+    const lines = [
+        `${status.product.name} app for team ${status.team.slug} on ${status.source.slug}`,
+    ];
+    if ((_a = app.setup) === null || _a === void 0 ? void 0 : _a.consoleUrl)
+        lines.push(`  Open: ${app.setup.consoleUrl}`);
+    const steps = ((_b = app.setup) === null || _b === void 0 ? void 0 : _b.steps.length)
+        ? [...app.setup.steps]
+        : [
+            `In ${status.product.name}, create an OAuth app for the team (or open the one it uses).`,
+        ];
+    steps.push(`Check the app lists exactly: ${callbackUrls(app).join(', ')}`, "Enter its values below. Secrets are stored in Ekanos's vault and never shown again.");
+    lines.push(...steps.map((step, index) => `  ${index + 1}. ${step}`));
+    if (app.guideUrl)
+        lines.push(`  Guide: ${app.guideUrl}`);
+    return lines;
+}
+function nextSteps(status, app, target) {
+    return [
+        ...app.webhooks
+            .filter((webhook) => !webhook.endpoint)
+            .map((webhook) => `Next: "ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId}" for the provider's webhook URL.`),
+        ...(app.connection
+            ? []
+            : [`Then a team member clicks Connect at ${status.connectUrl}`]),
+    ];
+}
+function chooseApp(status, connection) {
+    const apps = status.teamApps;
+    if (apps.length === 0) {
+        throw invalidStateError(`${status.product.name} takes no team app: teams connect through the Source's app, or need none.`, `Run "ekanos apps show ${status.product.slug}" for the Source's app.`);
+    }
+    const app = connection
+        ? apps.find((entry) => entry.connectionId === connection)
+        : apps.length === 1
+            ? apps[0]
+            : apps.find((entry) => entry.connectionId === 'default');
+    if (app)
+        return app;
+    throw usageError(connection
+        ? `${status.product.name} has no team app "${connection}".`
+        : `${status.product.name} has several team apps; name one.`, `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`);
+}
+export class TeamsClient {
+    constructor(env, session) {
+        this.env = env;
+        this.session = session;
+    }
+    async call(send) {
+        let result = await send(this.session.accessToken);
+        if (result.status === 'unauthorized') {
+            this.session = await refreshStoredSession(this.env, this.session);
+            result = await send(this.session.accessToken);
+        }
+        if (result.status === 'ok')
+            return result.data;
+        throw authRequiredError(`The session for ${this.env.host} could not authorize the teams call.`, `Run "ekanos login --host ${this.env.host}" and retry.`);
+    }
+}
+function canPrompt(ctx, args) {
+    var _a;
+    return !ctx.jsonMode && ((_a = args.stdinIsTTY) !== null && _a !== void 0 ? _a : process.stdin.isTTY === true);
+}
+function parseSubcommand(value) {
+    const match = TEAMS_SUBCOMMANDS.find((name) => name === value);
+    if (match)
+        return match;
+    throw usageError(value
+        ? `Unknown teams subcommand "${value}".`
+        : 'teams needs a subcommand.', 'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams members list <team>, ekanos teams roles list <team>, ekanos teams connect <team> <product>, ekanos teams show <team> <product>, ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams agents|triggers|links|mcp ….');
+}
+function requireSlug(value, what) {
+    const slug = value === null || value === void 0 ? void 0 : value.trim().toLowerCase();
+    if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug))
+        return slug;
+    throw usageError(value ? `"${value}" is not a ${what} slug.` : `Name the ${what}.`, what === 'team'
+        ? '"ekanos teams list" lists the teams, e.g. "ekanos teams show acme-support zendesk".'
+        : '"ekanos catalog" lists the products, e.g. "ekanos teams show acme-support zendesk".');
+}
+function mark(done) {
+    return done ? '✓' : '✗';
+}
+function day(iso) {
+    return iso.slice(0, 10);
+}
+function who(member) {
+    var _a, _b;
+    return (_b = (_a = member.email) !== null && _a !== void 0 ? _a : member.name) !== null && _b !== void 0 ? _b : member.userId;
+}
+/** Every redirect URI to register. */
+function callbackUrls(app) {
+    return app.callbackUrls.length ? app.callbackUrls : [app.callbackUrl];
+}
+//# sourceMappingURL=teams.js.map

package/dist/commands/teams.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"teams.js","sourceRoot":"","sources":["../../src/commands/teams.ts"],"names":[],"mappings":"AAMA,OAAO,EAEL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,eAAe,GAChB,MAAM,WAAW,CAAC;AAEnB,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAEL,SAAS,EACT,eAAe,EACf,UAAU,EACV,mBAAmB,GACpB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACtE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,eAAe,EACf,aAAa,GACd,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,MAAM;IACN,MAAM;IACN,KAAK;IACL,SAAS;IACT,GAAG,sBAAsB;CACjB,CAAC;AA8BX;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,GAAe,EACf,IAAe;IAEf,MAAM,CAAC,aAAa,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;IAClD,IAAI,eAAe,CAAC,aAAa,CAAC,EAAE,CAAC;QACnC,OAAO,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAElD,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;YAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,GAAG,EACH,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EACnC,IAAI,CACL,CAAC;QACF,OAAO,aAAa,CAClB,GAAG,EACH,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,EACtC,GAAG,CAAC,IAAI,EACR,QAAQ,CAAC,MAAM,EACf,IAAI,CACL,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,IAAI,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,iCAAiC,IAAI,CAAC,CAAC,CAAC,IAAI;YAC9C,CAAC,CAAC,+BAA+B,EACnC,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAE7D,IAAI,UAAU,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,UAAU,CACd,gCAAgC,EAChC,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3E,MAAM,OAAO,GACX,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,UAAU,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,UAAU,CACd,wBAAwB,KAAK,CAAC,CAAC,CAAC,IAAI,EACpC,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,CACd,0FAA0F,EAC1F,mEAAmE,IAAI,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CACjM,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,sBAAsB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE;QAC3D,UAAU,EAAE,IAAI,CAAC,GAAG;KACrB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CACxC,GAAG,EACH,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,EACnC,IAAI,CACL,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/B,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CACnC,CAAC;QACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,IAAI,GACzB,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,eAAe,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACxC,IAAI,EAAE,MAAM;aACb,CAAC;YACJ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;gBACZ,KAAK,EAAE,YAAY,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;gBACrC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC9B,KAAK,CAAC,IAAI;oBACV,GAAG,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC,WAAW,UAAU,KAAK,CAAC,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;iBACnF,CAAC;gBACF,KAAK,EAAE;oBACL,6DAA6D;iBAC9D;aACF,CAAC,CACP,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAW,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IACjD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAC7C,CAAC;IAEF,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,EAAE,GAAG,CAAC,IAAI,IAAK,MAAM,GAC3B,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC7B,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,iBAAiB,CACrB,IAAI,OAAO,uBAAuB,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,EACvD,qFAAqF,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,MAAM,CACnB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B;;IAE7B,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/C,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS;YAC9B,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,aAAa;YACpC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC;QAC9B,MAAM,KAAK,GAAG,CACZ,MAAM,CACJ,KAAK,CAAC,SAAS;YACb,CAAC,CAAC,OAAC,IAAI,CAAC,SAAS,mCAAI,YAAY,CAAC;YAClC,CAAC,CAAC,OAAC,IAAI,CAAC,GAAG,mCAAI,UAAU,CAAC,CAC7B,CAAC,QAAQ,CAAC,CACZ,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAC/B,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CACnD,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,eAAe,CACnB,0BAA0B,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC3E,6BAA6B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,UAAU,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,eAAe,CACnB,sBAAsB,EACtB,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,6BAA6B,CACrF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE;QAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,MAAM;KACP,CAAC,CACH,CAAC;IACF,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,SAAS,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM;QAC1D,IAAI,EAAE;YACJ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YAC9B;gBACE,QAAQ;gBACR,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;aAClE;SACF;QACD,KAAK,EAAE,IAAI;KACZ,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,IAAe,EACf,MAAmB,EACnB,IAAY,EACZ,MAAc,EACd,MAA6B,EAC7B,SAA6B;IAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qCAAqC,EAC3D,0BAA0B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,qBAAqB,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,SAAS;QACvB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC;QACzD,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YACrB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,UAAU,CACd,SAAS;YACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,6BAA6B,SAAS,IAAI;YAClE,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,kCAAkC,EAC5D,eAAe,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,wBAAwB,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjI,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAClC,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,IAAI,+BAA+B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,QAAQ,CAAC,WAAW,uGAAuG,EACtM,qFAAqF,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,QAAQ,CAChJ,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACzC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,CACxD,CAAC;IACF,OAAO,GAAG,CAAC,OAAO,iBACd,IAAI,IAAK,MAAM,GACjB,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QACZ,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE;QAC9D,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;YACnB;gBACE,eAAe;gBACf,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC;aAC1D;SACF;QACD,KAAK,EAAE;YACL,gEAAgE;YAChE,GAAG,CAAC,MAAM,CAAC,QAAQ;gBACjB,CAAC,CAAC,CAAC,8DAA8D,CAAC;gBAClE,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC,CACH,CAAC;AACJ,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,SAAS,CAAC,MAA6B;;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG;QACZ,GAAG,IAAI,aAAa,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,QAAQ,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QACrF,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB;KAClD,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CACR,yFAAyF,CAC1F,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACxE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,YAAY,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;YAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QAC3E,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CACxC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,QAAQ;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,KAAK,CAAC,IAAI,CACR,2DAA2D,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,iBAAiB,GAAG,CAAC,YAAY,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAC3J,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;YACnC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,QAAQ;gBACd,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,OAAO,CAAC,QAAQ,CAAC,WAAW,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE;gBAClP,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,SAAS,cAAc,CAClE,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CACR,gCAAgC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,aAAa,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CACpH,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,UAAU;YACZ,CAAC,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC/I,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,+CAA+C,MAAM,CAAC,UAAU,EAAE,CACzF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,MAAM,CAAC,UAAU;QACf,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,0BAA0B,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC7M,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,yCAAyC,MAAM,CAAC,UAAU,EAAE,CACjF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CACrB,MAA6B,EAC7B,GAAiB;;IAEjB,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;KACnF,CAAC;IACF,IAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,UAAU;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,CAAC,MAAM;QACnC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;YACE,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,+DAA+D;SACzF,CAAC;IACN,KAAK,CAAC,IAAI,CACR,gCAAgC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC9D,qFAAqF,CACtF,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,GAAiB,EACjB,MAAc;IAEd,OAAO;QACL,GAAG,GAAG,CAAC,QAAQ;aACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;aACtC,GAAG,CACF,CAAC,OAAO,EAAE,EAAE,CACV,+BAA+B,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,mCAAmC,CACvH;QACH,GAAG,CAAC,GAAG,CAAC,UAAU;YAChB,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,wCAAwC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAChB,MAA6B,EAC7B,UAA8B;IAE9B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,iBAAiB,CACrB,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,2EAA2E,EACjG,yBAAyB,MAAM,CAAC,OAAO,CAAC,IAAI,yBAAyB,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,UAAU;QACpB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,CAAC;QACzD,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YACjB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACT,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC;IAC7D,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,UAAU,CACd,UAAU;QACR,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,qBAAqB,UAAU,IAAI;QAC3D,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,mCAAmC,EAC7D,kCAAkC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACxF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,WAAW;IACtB,YACmB,GAAoB,EAC7B,OAAsB;mBADb,GAAG;uBACZ,OAAO;IACd,CAAC;IAEJ,KAAK,CAAC,IAAI,CACR,IAAyD;QAEzD,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,MAAM,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,CAAC,OAAO,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YAClE,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC;QAC/C,MAAM,iBAAiB,CACrB,mBAAmB,IAAI,CAAC,GAAG,CAAC,IAAI,sCAAsC,EACtE,4BAA4B,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,CACxD,CAAC;IACJ,CAAC;CACF;AAED,SAAS,SAAS,CAAC,GAAe,EAAE,IAAe;;IACjD,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAC,IAAI,CAAC,UAAU,mCAAI,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,UAAU,CACd,KAAK;QACH,CAAC,CAAC,6BAA6B,KAAK,IAAI;QACxC,CAAC,CAAC,2BAA2B,EAC/B,gVAAgV,CACjV,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAwB;IACtE,MAAM,IAAI,GAAG,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG,WAAW,EAAE,CAAC;IACzC,IAAI,IAAI,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,UAAU,CACd,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,IAAI,QAAQ,CAAC,CAAC,CAAC,YAAY,IAAI,GAAG,EACjE,IAAI,KAAK,MAAM;QACb,CAAC,CAAC,qFAAqF;QACvF,CAAC,CAAC,qFAAqF,CAC1F,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,GAAW;IACtB,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,GAAG,CAAC,MAIZ;;IACC,mBAAO,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,IAAI,mCAAI,MAAM,CAAC,MAAM,CAAC;AACtD,CAAC;AAED,sCAAsC;AACtC,SAAS,YAAY,CAAC,GAAiB;IACrC,OAAO,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import type {\n  TeamAppState,\n  TeamIntegrationStatus,\n} from '@ekanos/integration-schema';\n\nimport type { StoredSession } from '../auth/credential-store';\nimport {\n  type AuthEnvironment,\n  refreshStoredSession,\n  requireSession,\n  resolveAuthEnvironment,\n} from '../auth/session';\nimport type { CliContext } from '../context';\nimport {\n  authRequiredError,\n  invalidStateError,\n  usageError,\n  validationError,\n} from '../errors';\nimport type { ExitCode } from '../exit-codes';\nimport { resolveSourceTarget } from '../source-target';\nimport {\n  type TeamsApiResult,\n  listTeams,\n  mintTeamWebhook,\n  setTeamApp,\n  showTeamIntegration,\n} from '../teams-api';\nimport { promptHidden, promptLine } from './apps';\nimport { isTeamAgentArea, runTeamAgentCommands } from './team-agents';\nimport {\n  ONBOARDING_SUBCOMMANDS,\n  isOnboardingSubcommand,\n  parseOnboarding,\n  runOnboarding,\n} from './teams-onboard';\n\nexport const TEAMS_SUBCOMMANDS = [\n  'list',\n  'show',\n  'app',\n  'webhook',\n  ...ONBOARDING_SUBCOMMANDS,\n] as const;\ntype TeamsSubcommand = (typeof TEAMS_SUBCOMMANDS)[number];\n\nexport interface TeamsArgs {\n  host?: string;\n  source?: string;\n  /** `list`, `show <team> <product>`, `app set <team> <product>`, `webhook <team> <product> [<id>]`. */\n  positionals: readonly string[];\n  connection?: string;\n  /** `create --slug`, `create --owner <email>`, `members invite --role`. */\n  slug?: string;\n  owner?: string;\n  role?: string;\n  yes: boolean;\n  /** Every parsed flag, for `teams agents|triggers|links|mcp` (team-agents.ts). */\n  flags?: Record<string, string | boolean | string[]>;\n  dir: string;\n  env: Record<string, string | undefined>;\n  stdinIsTTY?: boolean;\n  /** Test seams for the questions `app set` asks. */\n  ask?: (question: string) => Promise<string>;\n  askSecret?: (question: string) => Promise<string>;\n}\n\ninterface Target {\n  source: string;\n  team: string;\n  product: string;\n}\n\n/**\n * `teams` — a Source admin's view of its teams' integration setup, the\n * team-level counterpart of `apps`. `list` names the teams; `show` reads one\n * team's setup of one product as a checklist; `app set` enters a team's own\n * app (Zendesk's subdomain, client and signing secret) at the admin's\n * terminal — never from a flag, a file or a non-interactive run, so an\n * agent driving the CLI never handles a secret; `webhook` mints the URL the\n * team's provider sends to, shown once.\n */\nexport async function runTeams(\n  ctx: CliContext,\n  args: TeamsArgs,\n): Promise<ExitCode> {\n  const [rawSubcommand, ...rest] = args.positionals;\n  if (isTeamAgentArea(rawSubcommand)) {\n    return runTeamAgentCommands(ctx, args);\n  }\n  const subcommand = parseSubcommand(rawSubcommand);\n\n  if (isOnboardingSubcommand(subcommand)) {\n    const plan = parseOnboarding(subcommand, rest, args);\n    const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n      projectDir: args.dir,\n    });\n    const resolved = await resolveSourceTarget(\n      env,\n      requireSession(env.store, env.host),\n      args,\n    );\n    return runOnboarding(\n      ctx,\n      new TeamsClient(env, resolved.session),\n      env.host,\n      resolved.source,\n      plan,\n    );\n  }\n\n  if (subcommand === 'app' && rest[0] !== 'set') {\n    throw usageError(\n      rest[0]\n        ? `Unknown teams app subcommand \"${rest[0]}\".`\n        : 'teams app needs a subcommand.',\n      'Run \"ekanos teams app set <team> <product>\".',\n    );\n  }\n  const operands = subcommand === 'app' ? rest.slice(1) : rest;\n\n  if (subcommand === 'list' && operands.length > 0) {\n    throw usageError(\n      'teams list takes no arguments.',\n      'Run \"ekanos teams list --source <slug>\".',\n    );\n  }\n\n  const team = subcommand === 'list' ? '' : requireSlug(operands[0], 'team');\n  const product =\n    subcommand === 'list' ? '' : requireSlug(operands[1], 'product');\n  const extra = operands.slice(subcommand === 'webhook' ? 3 : 2);\n  if (subcommand !== 'list' && extra.length > 0) {\n    throw usageError(\n      `Unexpected argument \"${extra[0]}\".`,\n      'See \"ekanos teams --help\".',\n    );\n  }\n\n  if (subcommand === 'app' && !canPrompt(ctx, args)) {\n    throw usageError(\n      \"teams app set takes the team's secrets at a terminal, never in a script or an agent run.\",\n      `Run it yourself in your terminal: npx @ekanos/cli teams app set ${team} ${product}${args.connection ? ` --connection ${args.connection}` : ''}${args.source ? ` --source ${args.source}` : ''}`,\n    );\n  }\n\n  const env = resolveAuthEnvironment(ctx, args.host, args.env, {\n    projectDir: args.dir,\n  });\n  const resolved = await resolveSourceTarget(\n    env,\n    requireSession(env.store, env.host),\n    args,\n  );\n  const client = new TeamsClient(env, resolved.session);\n  const source = resolved.source;\n\n  if (subcommand === 'list') {\n    const list = await client.call((token) =>\n      listTeams(env.host, token, source),\n    );\n    return ctx.succeed(\n      { host: env.host, ...list },\n      list.teams.length === 0\n        ? ctx.ui.result({\n            title: `No teams on ${list.source.slug}`,\n            tone: 'warn',\n          })\n        : ctx.ui.result({\n            title: `Teams on ${list.source.slug}`,\n            rows: list.teams.map((entry) => [\n              entry.slug,\n              `${entry.name} · ${entry.memberCount} member${entry.memberCount === 1 ? '' : 's'}`,\n            ]),\n            notes: [\n              '\"ekanos teams show <team> <product>\" shows a team\\'s setup.',\n            ],\n          }),\n    );\n  }\n\n  const target: Target = { source, team, product };\n  const status = await client.call((token) =>\n    showTeamIntegration(env.host, token, target),\n  );\n\n  if (subcommand === 'show') {\n    return ctx.succeed(\n      { host: env.host, ...status },\n      checklist(status).join('\\n'),\n    );\n  }\n\n  if (!status.enabled) {\n    throw invalidStateError(\n      `\"${product}\" is not enabled on ${status.source.slug}.`,\n      '\"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n    );\n  }\n\n  if (subcommand === 'app') {\n    return setApp(ctx, args, client, env.host, target, status);\n  }\n  return mintWebhook(ctx, args, client, env.host, target, status, operands[2]);\n}\n\nasync function setApp(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n): Promise<ExitCode> {\n  const app = chooseApp(status, args.connection);\n  ctx.log(appWalkthrough(status, app).join('\\n'));\n\n  const fields: Record<string, string> = {};\n  for (const field of app.fields) {\n    const keep = field.set ? ' (set — Enter keeps it)' : '';\n    const question = field.sensitive\n      ? `${field.label}${keep} (hidden): `\n      : `${field.label}${keep}: `;\n    const value = (\n      await (\n        field.sensitive\n          ? (args.askSecret ?? promptHidden)\n          : (args.ask ?? promptLine)\n      )(question)\n    ).trim();\n    if (value) fields[field.secretName] = value;\n  }\n\n  const missing = app.fields.filter(\n    (field) => !field.set && !fields[field.secretName],\n  );\n  if (missing.length > 0) {\n    throw validationError(\n      `Every field is needed: ${missing.map((field) => field.label).join(', ')}.`,\n      `Run \"ekanos teams app set ${target.team} ${target.product}\" again.`,\n    );\n  }\n  if (Object.keys(fields).length === 0) {\n    throw validationError(\n      'Nothing was changed.',\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see the current state.`,\n    );\n  }\n\n  const result = await client.call((token) =>\n    setTeamApp(host, token, target, {\n      connectionId: app.connectionId,\n      fields,\n    }),\n  );\n  const next = nextSteps(status, app, target);\n  return ctx.succeed(\n    { host, ...result },\n    ctx.ui.result({\n      title: `Saved ${target.team}'s ${result.product.name} app`,\n      rows: [\n        ['Source', status.source.slug],\n        [\n          'Fields',\n          result.fields.map((field) => `${mark(field.set)} ${field.label}`),\n        ],\n      ],\n      notes: next,\n    }),\n  );\n}\n\nasync function mintWebhook(\n  ctx: CliContext,\n  args: TeamsArgs,\n  client: TeamsClient,\n  host: string,\n  target: Target,\n  status: TeamIntegrationStatus,\n  requested: string | undefined,\n): Promise<ExitCode> {\n  const webhooks = status.teamApps.flatMap((app) => app.webhooks);\n  if (webhooks.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} has no webhook a team's app sends.`,\n      `Run \"ekanos teams show ${target.team} ${target.product}\" to see its setup.`,\n    );\n  }\n  const webhook = requested\n    ? webhooks.find((entry) => entry.webhookId === requested)\n    : webhooks.length === 1\n      ? webhooks[0]\n      : undefined;\n  if (!webhook) {\n    throw usageError(\n      requested\n        ? `${status.product.name} has no team-app webhook \"${requested}\".`\n        : `${status.product.name} has several webhooks; name one.`,\n      `Run one of: ${webhooks.map((entry) => `ekanos teams webhook ${target.team} ${target.product} ${entry.webhookId}`).join(', ')}.`,\n    );\n  }\n\n  if (webhook.endpoint && !args.yes) {\n    throw invalidStateError(\n      `${target.team} already has a live URL for ${webhook.webhookId} (${webhook.endpoint.tokenPrefix}…). A new one revokes it, and the provider's webhook stops working until you paste the new URL there.`,\n      `Re-run with --yes when you are ready to update the provider: ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --yes`,\n    );\n  }\n\n  const minted = await client.call((token) =>\n    mintTeamWebhook(host, token, target, webhook.webhookId),\n  );\n  return ctx.succeed(\n    { host, ...minted },\n    ctx.ui.result({\n      title: `Webhook URL for ${target.team} · ${webhook.webhookId}`,\n      tone: 'warn',\n      rows: [\n        ['URL', minted.url],\n        [\n          'Paste it into',\n          `${status.product.name}'s webhook settings for this team`,\n        ],\n      ],\n      notes: [\n        'This URL is shown once and cannot be read again. Paste it now.',\n        ...(minted.replaced\n          ? ['The previous URL is revoked: the provider must use this one.']\n          : []),\n      ],\n    }),\n  );\n}\n\n/** `teams show`, read top to bottom like a setup checklist. */\nexport function checklist(status: TeamIntegrationStatus): string[] {\n  const name = status.product.name;\n  const lines = [\n    `${name} for team ${status.team.slug} (${status.team.name}) on ${status.source.slug}`,\n    `  ${mark(status.enabled)} Enabled on the Source`,\n  ];\n  if (!status.enabled) {\n    lines.push(\n      '    \"ekanos catalog\" lists what this Source has; Ekanos enables a product for a Source.',\n    );\n    return lines;\n  }\n\n  const target = { team: status.team.slug, product: status.product.slug };\n  for (const app of status.teamApps) {\n    lines.push(`  Team app: ${app.label} (${app.connectionId})`);\n    if (app.setup?.consoleUrl) lines.push(`    Open: ${app.setup.consoleUrl}`);\n    app.setup?.steps.forEach((step, index) =>\n      lines.push(`    ${index + 1}. ${step}`),\n    );\n    lines.push('    Callback URLs to register:');\n    lines.push(...callbackUrls(app).map((url) => `      ${url}`));\n    if (app.guideUrl) lines.push(`    Guide: ${app.guideUrl}`);\n    for (const field of app.fields) {\n      lines.push(`    ${mark(field.set)} ${field.label}`);\n    }\n    if (app.fields.some((field) => !field.set)) {\n      lines.push(\n        `      → in your terminal: npx @ekanos/cli teams app set ${target.team} ${target.product} --connection ${app.connectionId} --source ${status.source.slug}`,\n      );\n    }\n    for (const webhook of app.webhooks) {\n      lines.push(\n        webhook.endpoint\n          ? `    ${mark(true)} Webhook ${webhook.webhookId}: live URL ${webhook.endpoint.tokenPrefix}… since ${day(webhook.endpoint.createdAt)}${webhook.endpoint.lastUsedAt ? `, last delivery ${day(webhook.endpoint.lastUsedAt)}` : ', no delivery yet'}`\n          : `    ${mark(false)} Webhook ${webhook.webhookId}: no URL yet`,\n      );\n      if (!webhook.endpoint) {\n        lines.push(\n          `      → ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId} --source ${status.source.slug}`,\n        );\n      }\n    }\n    lines.push(\n      app.connection\n        ? `    ${mark(true)} Connected ${day(app.connection.connectedAt)}${app.connection.connectedBy ? ` by ${who(app.connection.connectedBy)}` : ''}`\n        : `    ${mark(false)} Connected: a team member clicks Connect at ${status.connectUrl}`,\n    );\n  }\n\n  lines.push(\n    status.activation\n      ? `  ${mark(true)} Activated for the team${status.activation.activatedAt ? ` ${day(status.activation.activatedAt)}` : ''}${status.activation.activatedBy ? ` by ${who(status.activation.activatedBy)}` : ''}`\n      : `  ${mark(false)} Activated: a team member connects at ${status.connectUrl}`,\n  );\n  lines.push(`  Team page: ${status.connectUrl}`);\n  if (status.agentEvents.length > 0) {\n    lines.push('  Agent events it offers:');\n    lines.push(\n      ...status.agentEvents.map((event) => `    ${event.id} — ${event.label}`),\n    );\n  }\n  return lines;\n}\n\nfunction appWalkthrough(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n): string[] {\n  const lines = [\n    `${status.product.name} app for team ${status.team.slug} on ${status.source.slug}`,\n  ];\n  if (app.setup?.consoleUrl) lines.push(`  Open: ${app.setup.consoleUrl}`);\n  const steps = app.setup?.steps.length\n    ? [...app.setup.steps]\n    : [\n        `In ${status.product.name}, create an OAuth app for the team (or open the one it uses).`,\n      ];\n  steps.push(\n    `Check the app lists exactly: ${callbackUrls(app).join(', ')}`,\n    \"Enter its values below. Secrets are stored in Ekanos's vault and never shown again.\",\n  );\n  lines.push(...steps.map((step, index) => `  ${index + 1}. ${step}`));\n  if (app.guideUrl) lines.push(`  Guide: ${app.guideUrl}`);\n  return lines;\n}\n\nfunction nextSteps(\n  status: TeamIntegrationStatus,\n  app: TeamAppState,\n  target: Target,\n): string[] {\n  return [\n    ...app.webhooks\n      .filter((webhook) => !webhook.endpoint)\n      .map(\n        (webhook) =>\n          `Next: \"ekanos teams webhook ${target.team} ${target.product} ${webhook.webhookId}\" for the provider's webhook URL.`,\n      ),\n    ...(app.connection\n      ? []\n      : [`Then a team member clicks Connect at ${status.connectUrl}`]),\n  ];\n}\n\nfunction chooseApp(\n  status: TeamIntegrationStatus,\n  connection: string | undefined,\n): TeamAppState {\n  const apps = status.teamApps;\n  if (apps.length === 0) {\n    throw invalidStateError(\n      `${status.product.name} takes no team app: teams connect through the Source's app, or need none.`,\n      `Run \"ekanos apps show ${status.product.slug}\" for the Source's app.`,\n    );\n  }\n  const app = connection\n    ? apps.find((entry) => entry.connectionId === connection)\n    : apps.length === 1\n      ? apps[0]\n      : apps.find((entry) => entry.connectionId === 'default');\n  if (app) return app;\n  throw usageError(\n    connection\n      ? `${status.product.name} has no team app \"${connection}\".`\n      : `${status.product.name} has several team apps; name one.`,\n    `Pass --connection with one of: ${apps.map((entry) => entry.connectionId).join(', ')}.`,\n  );\n}\n\nexport class TeamsClient {\n  constructor(\n    private readonly env: AuthEnvironment,\n    private session: StoredSession,\n  ) {}\n\n  async call<T>(\n    send: (accessToken: string) => Promise<TeamsApiResult<T>>,\n  ): Promise<T> {\n    let result = await send(this.session.accessToken);\n    if (result.status === 'unauthorized') {\n      this.session = await refreshStoredSession(this.env, this.session);\n      result = await send(this.session.accessToken);\n    }\n    if (result.status === 'ok') return result.data;\n    throw authRequiredError(\n      `The session for ${this.env.host} could not authorize the teams call.`,\n      `Run \"ekanos login --host ${this.env.host}\" and retry.`,\n    );\n  }\n}\n\nfunction canPrompt(ctx: CliContext, args: TeamsArgs): boolean {\n  return !ctx.jsonMode && (args.stdinIsTTY ?? process.stdin.isTTY === true);\n}\n\nfunction parseSubcommand(value: string | undefined): TeamsSubcommand {\n  const match = TEAMS_SUBCOMMANDS.find((name) => name === value);\n  if (match) return match;\n  throw usageError(\n    value\n      ? `Unknown teams subcommand \"${value}\".`\n      : 'teams needs a subcommand.',\n    'Run one of: ekanos teams list, ekanos teams create <name>, ekanos teams members list <team>, ekanos teams roles list <team>, ekanos teams connect <team> <product>, ekanos teams show <team> <product>, ekanos teams app set <team> <product>, ekanos teams webhook <team> <product> [<webhook-id>], ekanos teams agents|triggers|links|mcp ….',\n  );\n}\n\nfunction requireSlug(value: string | undefined, what: 'team' | 'product') {\n  const slug = value?.trim().toLowerCase();\n  if (slug && /^[a-z0-9][a-z0-9-]*$/.test(slug)) return slug;\n  throw usageError(\n    value ? `\"${value}\" is not a ${what} slug.` : `Name the ${what}.`,\n    what === 'team'\n      ? '\"ekanos teams list\" lists the teams, e.g. \"ekanos teams show acme-support zendesk\".'\n      : '\"ekanos catalog\" lists the products, e.g. \"ekanos teams show acme-support zendesk\".',\n  );\n}\n\nfunction mark(done: boolean): string {\n  return done ? '✓' : '✗';\n}\n\nfunction day(iso: string): string {\n  return iso.slice(0, 10);\n}\n\nfunction who(member: {\n  name: string | null;\n  email: string | null;\n  userId: string;\n}) {\n  return member.email ?? member.name ?? member.userId;\n}\n\n/** Every redirect URI to register. */\nfunction callbackUrls(app: TeamAppState): string[] {\n  return app.callbackUrls.length ? app.callbackUrls : [app.callbackUrl];\n}\n"]}

package/dist/index.d.ts

@@ -16,7 +16,7 @@ export interface RunOptions {
      */
     stdinIsTTY?: boolean;
     confirm?: (question: string) => Promise<boolean>;
-    /** Test-only answers for `apps set`'s questions — never set from real CLI wiring. */
+    /** Test-only answers for `apps set` / `teams app set` questions — never set from real CLI wiring. */
     ask?: (question: string) => Promise<string>;
     askSecret?: (question: string) => Promise<string>;
     /**