@fluid-app/fluid-cli 0.1.34 → 0.1.36

package/dist/index.mjs

@@ -1,5 +1,6 @@
-import { A as unwrapOr, C as isSuccess, D as tryCatch, E as success, O as tryCatchAsync, S as isNodeError, T as mapResult, _ as validateToken, a as readConfig, b as isError, c as getConfigDir, f as confirmMfa, g as switchCompany, h as sendMfa, i as findProjectConfig, k as unwrap, l as getConfigFilePath, m as getFluidApiBase, n as getAuthToken, o as updateConfig, p as fetchUserCompanies, r as listProfileNames, s as writeConfig, t as getActiveProfile, u as createDefaultConfig, v as failure, w as mapError, x as isFailure, y as getErrorMessage } from "./token--hQqx3DU.mjs";
+import { A as unwrapOr, C as isSuccess, D as tryCatch, E as success, F as walkCommands, I as describeCommand, O as tryCatchAsync, S as isNodeError, T as mapResult, _ as validateToken, a as readConfig, b as isError, c as getConfigDir, f as confirmMfa, g as switchCompany, h as sendMfa, i as findProjectConfig, k as unwrap, l as getConfigFilePath, m as getFluidApiBase, n as getAuthToken, o as updateConfig, p as fetchUserCompanies, r as listProfileNames, s as writeConfig, t as getActiveProfile, u as createDefaultConfig, v as failure, w as mapError, x as isFailure, y as getErrorMessage } from "./token-6SEVoGMw.mjs";
 import { Command } from "commander";
+import prompts from "prompts";
 //#region ../../platform/api-client-core/src/api-error-shape.ts
 /**
 * Narrows a parsed JSON error payload to the envelope contract. Arrays and
@@ -113,8 +114,10 @@ function createFetchClient(config) {
 		const queryString = new URLSearchParams();
 		Object.entries(params).forEach(([key, value]) => {
 			if (value === void 0 || value === null) return;
-			if (Array.isArray(value)) value.forEach((item) => queryString.append(`${key}[]`, String(item)));
-			else if (typeof value === "object") Object.entries(value).forEach(([subKey, subValue]) => {
+			if (Array.isArray(value)) {
+				const arrayKey = key.endsWith("[]") ? key : `${key}[]`;
+				value.forEach((item) => queryString.append(arrayKey, String(item)));
+			} else if (typeof value === "object") Object.entries(value).forEach(([subKey, subValue]) => {
 				if (subValue === void 0 || subValue === null) return;
 				if (Array.isArray(subValue)) subValue.forEach((item) => queryString.append(`${key}[${subKey}][]`, String(item)));
 				else queryString.append(`${key}[${subKey}]`, String(subValue));
@@ -308,21 +311,30 @@ function createCommandContext(opts) {
 		compact: opts.compact,
 		jq: opts.jq
 	};
+	function requireToken() {
+		const token = resolveToken(opts);
+		if (token) return token;
+		if (opts.profile) throw new Error(`No API token found for profile "${opts.profile}". Run \`fluid login\` for that profile or provide --token <token>`);
+		throw new Error("No API token found. Run `fluid login` or provide --token <token>");
+	}
 	return {
 		verbose: opts.verbose,
 		async getClient() {
 			if (clientInstance) return clientInstance;
-			const token = resolveToken(opts);
-			if (!token) {
-				if (opts.profile) throw new Error(`No API token found for profile "${opts.profile}". Run \`fluid login\` for that profile or provide --token <token>`);
-				throw new Error("No API token found. Run `fluid login` or provide --token <token>");
-			}
+			const token = requireToken();
 			clientInstance = createFetchClient({
 				baseUrl: opts.baseUrl ?? process.env["FLUID_API_BASE"] ?? "https://api.fluid.app",
 				getAuthToken: () => token
 			});
 			return clientInstance;
 		},
+		async getClientFor(serviceBaseUrl) {
+			const token = requireToken();
+			return createFetchClient({
+				baseUrl: serviceBaseUrl.replace(/\/$/, ""),
+				getAuthToken: () => token
+			});
+		},
 		output(data) {
 			const formatted = formatOutput(data, outputOptions);
 			process.stdout.write(formatted + "\n");
@@ -375,6 +387,9 @@ function createDomainCommand(name, description, register) {
 		getClient() {
 			return getCtx().getClient();
 		},
+		getClientFor(baseUrl) {
+			return getCtx().getClientFor(baseUrl);
+		},
 		output(data) {
 			return getCtx().output(data);
 		},
@@ -385,6 +400,105 @@ function createDomainCommand(name, description, register) {
 	return cmd;
 }
 //#endregion
+//#region src/walk/prompter.ts
+const NAV_HELP = "Type < to go back, > to skip, ? for the menu. Every answer is saved as you go; Ctrl-C stops.";
+const TYPED_NAV = {
+	"<": "back",
+	">": "skip",
+	"?": "menu"
+};
+/** A typed `<`, `>` or `?` moves instead of answering. */
+function parseTyped(raw) {
+	const nav = TYPED_NAV[raw.trim()];
+	return nav ? { nav } : { value: raw };
+}
+const NAV_PREFIX = "\0";
+function navChoices(canGoBack) {
+	return [
+		...canGoBack ? [{
+			title: "← Back",
+			value: `${NAV_PREFIX}back`
+		}] : [],
+		{
+			title: "Skip →",
+			value: `${NAV_PREFIX}skip`
+		},
+		{
+			title: "Menu…",
+			value: `${NAV_PREFIX}menu`
+		}
+	];
+}
+function fromChoice(value) {
+	return value.startsWith(NAV_PREFIX) ? { nav: value.slice(1) } : { value };
+}
+/** A prompter on the terminal, built on `prompts`. */
+function terminalPrompter() {
+	let cancelled = false;
+	const onCancel = () => {
+		cancelled = true;
+		return false;
+	};
+	return {
+		async ask(q) {
+			cancelled = false;
+			if (q.section) process.stdout.write(`\n${q.section}\n`);
+			const message = q.current ? `${q.message} (saved: ${q.current})` : q.message;
+			if (q.kind === "select" || q.kind === "search") {
+				const choices = [...q.choices ?? [], ...navChoices(q.canGoBack)];
+				const initial = Math.max(0, choices.findIndex((c) => c.title === q.current || c.value === q.current));
+				const { answer } = await prompts({
+					type: q.kind === "search" ? "autocomplete" : "select",
+					name: "answer",
+					message,
+					choices,
+					initial,
+					hint: q.hint,
+					...q.kind === "search" ? { suggest: async (input, all) => {
+						const needle = input.trim().toLowerCase();
+						return all.filter((c) => c.value.startsWith(NAV_PREFIX) || c.title.toLowerCase().includes(needle) || c.value.toLowerCase().includes(needle));
+					} } : {}
+				}, { onCancel });
+				if (cancelled || answer === void 0) return { nav: "quit" };
+				return fromChoice(answer);
+			}
+			const { answer } = await prompts({
+				type: q.kind === "secret" ? "password" : "text",
+				name: "answer",
+				message: q.hint ? `${message} — ${q.hint}` : message,
+				...q.kind === "text" && q.current ? { initial: q.current } : {}
+			}, { onCancel });
+			if (cancelled || answer === void 0) return { nav: "quit" };
+			if (q.kind === "secret" && q.current && answer === "") return { nav: "skip" };
+			return parseTyped(answer);
+		},
+		async menu(message, items) {
+			cancelled = false;
+			const { choice } = await prompts({
+				type: "select",
+				name: "choice",
+				message,
+				choices: items.map((item) => ({
+					title: item.title,
+					value: item.value,
+					description: item.description,
+					disabled: item.disabled
+				}))
+			}, { onCancel });
+			if (cancelled || choice === void 0) return null;
+			return choice;
+		},
+		note(text) {
+			process.stdout.write(`${text}\n`);
+		}
+	};
+}
+/** A walk needs a person at a terminal; scripts and agents use the
+*  non-interactive commands it names. */
+function assertInteractive(alternative, isTTY = Boolean(process.stdin.isTTY && process.stdout.isTTY)) {
+	if (!isTTY) throw new Error(`walk asks questions in a terminal. In a script, use ${alternative}.`);
+}
+//#endregion
 //#region src/git-sync/commit-subject.ts
 /** Actor name used when no human triggered the commit. */
 const SYSTEM_ACTOR_NAME = "Fluid";
@@ -678,6 +792,6 @@ async function resolveGitSyncActor(fetchActor) {
 	return fetched;
 }
 //#endregion
-export { ACTOR_CACHE_TTL_MS, SYSTEM_ACTOR_NAME, changeStatusFromCode, confirmMfa, createCommandContext, createDefaultConfig, createDomainCommand, failure, fetchUserCompanies, findProjectConfig, formatCommitTimestamp, formatOutput, getActiveProfile, getAuthToken, getConfigDir, getConfigFilePath, getErrorMessage, getFluidApiBase, gitSyncActorFromMe, gitSyncCommitSubject, gitSyncSubjectAuthor, isError, isFailure, isNodeError, isSuccess, listProfileNames, mapError, mapResult, parseGitSyncSubject, parseNameStatusZ, readCachedActor, readConfig, resolveGitSyncActor, sendMfa, subjectFragment, success, summarizeChanges, switchCompany, tryCatch, tryCatchAsync, unwrap, unwrapOr, updateConfig, validateToken, writeCachedActor, writeConfig };
+export { ACTOR_CACHE_TTL_MS, NAV_HELP, SYSTEM_ACTOR_NAME, assertInteractive, changeStatusFromCode, confirmMfa, createCommandContext, createDefaultConfig, createDomainCommand, describeCommand, failure, fetchUserCompanies, findProjectConfig, formatCommitTimestamp, formatOutput, getActiveProfile, getAuthToken, getConfigDir, getConfigFilePath, getErrorMessage, getFluidApiBase, gitSyncActorFromMe, gitSyncCommitSubject, gitSyncSubjectAuthor, isError, isFailure, isNodeError, isSuccess, listProfileNames, mapError, mapResult, parseGitSyncSubject, parseNameStatusZ, parseTyped, readCachedActor, readConfig, resolveGitSyncActor, sendMfa, subjectFragment, success, summarizeChanges, switchCompany, terminalPrompter, tryCatch, tryCatchAsync, unwrap, unwrapOr, updateConfig, validateToken, walkCommands, writeCachedActor, writeConfig };
 
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","names":[],"sources":["../../../platform/api-client-core/src/api-error-shape.ts","../../../platform/api-client-core/src/fetch-client.ts","../src/domain/output.ts","../src/domain/context.ts","../src/domain/command.ts","../src/git-sync/commit-subject.ts","../src/git-sync/change-summary.ts","../src/git-sync/actor-cache.ts"],"sourcesContent":["/**\n * The shape contract for `ApiError.body` and `ApiError.data`.\n *\n * One decision, in one place: `body` is the response envelope exactly as the\n * server sent it, `data` is the unwrapped field-error bag. Rationale and the\n * alternatives considered live in `docs/api-error-data-contract.md`.\n */\n\n/**\n * The parsed JSON error response body, exactly as the server sent it.\n *\n * This is the envelope: `errors`, `error_message`, `error`, `status`, `meta`\n * and `request_id` all live here. `null` when the response carried no JSON\n * object — HTML, an empty body, a JSON primitive, or unparseable text.\n */\nexport type ApiErrorBody = Record<string, unknown> | null;\n\n/**\n * The field-level error bag: the envelope's `errors` value when the body has\n * one, otherwise the body itself.\n *\n * `errors` is declared `never` because unwrapping already consumed it — read\n * the envelope from `ApiError.body`, not from here. That makes the historical\n * mistake (`error.data.errors.some_field`, which silently resolved to\n * `undefined`) a typecheck failure instead of a degraded error message.\n */\nexport type ApiErrorFieldErrors = Record<string, unknown> & {\n  errors?: never;\n};\n\n/**\n * Every value `ApiError.data` can hold. Fluid endpoints return an object bag,\n * but `errors` is occasionally an array or a string, and non-JSON responses\n * carry no data at all.\n */\nexport type ApiErrorData =\n  | ApiErrorFieldErrors\n  | readonly unknown[]\n  | string\n  | number\n  | boolean\n  | null;\n\n/**\n * Narrows a parsed JSON error payload to the envelope contract. Arrays and\n * primitives are not envelopes, so they resolve to `null` — their content is\n * still reachable through `ApiError.data`.\n */\nexport function toApiErrorBody(value: unknown): ApiErrorBody {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  return value as Record<string, unknown>;\n}\n\n/**\n * The single unwrap rule, shared by every producer of `ApiError`.\n *\n * `??` rather than `||` so an explicitly empty `errors` (`\"\"`, `0`, `false`)\n * is preserved instead of silently falling back to the whole envelope.\n */\nexport function toApiErrorData(body: ApiErrorBody): ApiErrorData {\n  if (!body) {\n    return null;\n  }\n\n  return (body.errors ?? body) as ApiErrorData;\n}\n","/**\n * Minimal, framework-agnostic fetch client for Fluid APIs\n * Compatible with fluid-admin patterns but usable standalone\n */\n\nimport type { ApiErrorBody, ApiErrorData } from \"./api-error-shape\";\nimport { toApiErrorBody, toApiErrorData } from \"./api-error-shape\";\n\nexport interface FetchClientConfig {\n  /**\n   * Base URL for all requests (e.g., \"https://api.fluid.app/api\")\n   */\n  baseUrl: string;\n\n  /**\n   * Optional function to get auth token\n   * Return null/undefined if no token available\n   */\n  getAuthToken?: () => string | null | Promise<string | null>;\n\n  /**\n   * Optional callback when 401 auth error occurs\n   */\n  onAuthError?: () => void;\n\n  /**\n   * Default headers to include in all requests\n   * Example: { \"x-fluid-client\": \"admin\" }\n   */\n  defaultHeaders?: Record<string, string>;\n\n  /**\n   * Credentials mode for fetch requests.\n   * Set to `\"include\"` for cookie-based (same-origin BFF) authentication.\n   * @default undefined (browser default: \"same-origin\")\n   */\n  credentials?: RequestCredentials;\n\n  /**\n   * Request cache mode for fetch requests.\n   * @default undefined (browser default)\n   */\n  cache?: RequestCache;\n\n  /**\n   * Retry configuration for thrown network errors from fetch.\n   * Does not retry HTTP error responses or aborted requests.\n   * @default undefined (no retries)\n   */\n  networkRetry?: {\n    maxRetries?: number;\n    baseDelayMs?: number;\n  };\n\n  /**\n   * Throw ApiError when a successful response declares JSON but cannot be parsed.\n   * Defaults to false to preserve the legacy generated-client behavior.\n   * @default false\n   */\n  throwOnInvalidJson?: boolean;\n}\n\nexport interface RequestOptions {\n  method?: \"GET\" | \"POST\" | \"PUT\" | \"DELETE\" | \"PATCH\";\n  headers?: Record<string, string>;\n  params?: Record<string, unknown>;\n  body?: unknown;\n  signal?: AbortSignal;\n  priority?: RequestInit[\"priority\"];\n}\n\n/**\n * API Error class compatible with fluid-admin's ApiError\n */\nexport class ApiError extends Error {\n  public readonly status: number;\n\n  /**\n   * The unwrapped field-error bag. See `ApiErrorData`; the contract is\n   * documented in `docs/api-error-data-contract.md`.\n   */\n  public readonly data: ApiErrorData;\n\n  /**\n   * The full error response envelope. Read `error_message`, `error`, `status`\n   * and nested `errors` from here — `data` has already unwrapped one level.\n   */\n  public readonly body: ApiErrorBody;\n\n  public readonly requestId?: string;\n\n  constructor(\n    message: string,\n    status: number,\n    data?: ApiErrorData,\n    requestId?: string,\n    body?: ApiErrorBody,\n  ) {\n    super(message);\n    this.name = \"ApiError\";\n    this.status = status;\n    this.data = data ?? null;\n    this.body = body ?? null;\n    this.requestId = requestId;\n\n    if (\"captureStackTrace\" in Error) {\n      (\n        Error as {\n          captureStackTrace: (\n            target: Error,\n            constructor: NewableFunction,\n          ) => void;\n        }\n      ).captureStackTrace(this, ApiError);\n    }\n  }\n\n  toJSON(): {\n    name: string;\n    message: string;\n    status: number;\n    data: ApiErrorData;\n    body: ApiErrorBody;\n    requestId?: string;\n  } {\n    return {\n      name: this.name,\n      message: this.message,\n      status: this.status,\n      data: this.data,\n      body: this.body,\n      requestId: this.requestId,\n    };\n  }\n}\n\nfunction getStringRequestId(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction getRequestIdFromHeaders(headers: Headers): string | undefined {\n  return (\n    getStringRequestId(headers.get(\"x-request-id\")) ??\n    getStringRequestId(headers.get(\"request-id\")) ??\n    getStringRequestId(headers.get(\"X-Request-ID\"))\n  );\n}\n\nfunction getRequestIdFromJsonBody(body: unknown): string | undefined {\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    return undefined;\n  }\n\n  const record = body as Record<string, unknown>;\n  const meta = record.meta;\n\n  return (\n    getStringRequestId(record.request_id) ??\n    getStringRequestId(record.requestId) ??\n    (meta && typeof meta === \"object\" && !Array.isArray(meta)\n      ? (getStringRequestId((meta as Record<string, unknown>).request_id) ??\n        getStringRequestId((meta as Record<string, unknown>).requestId))\n      : undefined)\n  );\n}\n\n/**\n * Type guard for ApiError\n */\nexport function isApiError(error: unknown): error is ApiError {\n  return error instanceof ApiError;\n}\n\nexport interface FetchClientInstance {\n  request: <TResponse = unknown>(\n    endpoint: string,\n    options?: RequestOptions,\n  ) => Promise<TResponse>;\n  requestWithFormData: <TResponse = unknown>(\n    endpoint: string,\n    formData: FormData,\n    options?: Omit<RequestOptions, \"body\" | \"params\"> & {\n      method?: \"POST\" | \"PUT\" | \"PATCH\";\n    },\n  ) => Promise<TResponse>;\n  get: <TResponse = unknown>(\n    endpoint: string,\n    params?: Record<string, unknown>,\n    options?: Omit<RequestOptions, \"method\" | \"params\">,\n  ) => Promise<TResponse>;\n  post: <TResponse = unknown>(\n    endpoint: string,\n    body?: unknown,\n    options?: Omit<RequestOptions, \"method\" | \"body\">,\n  ) => Promise<TResponse>;\n  put: <TResponse = unknown>(\n    endpoint: string,\n    body?: unknown,\n    options?: Omit<RequestOptions, \"method\" | \"body\">,\n  ) => Promise<TResponse>;\n  patch: <TResponse = unknown>(\n    endpoint: string,\n    body?: unknown,\n    options?: Omit<RequestOptions, \"method\" | \"body\">,\n  ) => Promise<TResponse>;\n  delete: <TResponse = unknown>(\n    endpoint: string,\n    options?: Omit<RequestOptions, \"method\">,\n  ) => Promise<TResponse>;\n}\n\n/**\n * Creates a configured fetch client instance\n */\nexport function createFetchClient(\n  config: FetchClientConfig,\n): FetchClientInstance {\n  const {\n    baseUrl,\n    getAuthToken,\n    onAuthError,\n    defaultHeaders = {},\n    credentials,\n    cache,\n    networkRetry,\n    throwOnInvalidJson = false,\n  } = config;\n  const maxNetworkRetries = Math.max(0, networkRetry?.maxRetries ?? 0);\n  const baseNetworkRetryDelayMs = Math.max(0, networkRetry?.baseDelayMs ?? 0);\n\n  /**\n   * Build headers for a request\n   */\n  async function buildHeaders(\n    customHeaders?: Record<string, string>,\n  ): Promise<Record<string, string>> {\n    const headers: Record<string, string> = {\n      Accept: \"application/json\",\n      \"Content-Type\": \"application/json\",\n      ...defaultHeaders,\n      ...customHeaders,\n    };\n\n    // Add auth token if available\n    if (getAuthToken) {\n      const token = await getAuthToken();\n      if (token) {\n        headers.Authorization = `Bearer ${token}`;\n      }\n    }\n\n    return headers;\n  }\n\n  /**\n   * Join baseUrl + endpoint via string concatenation (matches fetchApi).\n   * Using `new URL(endpoint, baseUrl)` would strip any path prefix from\n   * baseUrl (e.g. \"/api\") when the endpoint starts with \"/\".\n   */\n  function joinUrl(endpoint: string): string {\n    return `${baseUrl}${endpoint}`;\n  }\n\n  /**\n   * Build URL with query parameters for GET requests\n   * Compatible with fluid-admin's query param handling\n   */\n  function buildUrl(\n    endpoint: string,\n    params?: Record<string, unknown>,\n  ): string {\n    const fullUrl = joinUrl(endpoint);\n\n    if (!params || Object.keys(params).length === 0) {\n      return fullUrl;\n    }\n\n    const queryString = new URLSearchParams();\n\n    Object.entries(params).forEach(([key, value]) => {\n      if (value === undefined || value === null) {\n        return; // Skip undefined/null values\n      }\n\n      if (Array.isArray(value)) {\n        // Handle arrays like Rails expects: key[]\n        value.forEach((item) => queryString.append(`${key}[]`, String(item)));\n      } else if (typeof value === \"object\") {\n        // Handle nested objects: key[subkey]\n        Object.entries(value).forEach(([subKey, subValue]) => {\n          if (subValue === undefined || subValue === null) {\n            return;\n          }\n\n          if (Array.isArray(subValue)) {\n            subValue.forEach((item) =>\n              queryString.append(`${key}[${subKey}][]`, String(item)),\n            );\n          } else {\n            queryString.append(`${key}[${subKey}]`, String(subValue));\n          }\n        });\n      } else {\n        queryString.append(key, String(value));\n      }\n    });\n\n    const qs = queryString.toString();\n    return qs ? `${fullUrl}?${qs}` : fullUrl;\n  }\n\n  /**\n   * Shared response handler for both JSON and FormData requests.\n   * Handles auth errors, non-OK responses, 204 No Content, and JSON parsing.\n   */\n  async function handleResponse<TResponse>(\n    response: Response,\n    method: string,\n    _url: string,\n  ): Promise<TResponse> {\n    const headerRequestId = getRequestIdFromHeaders(response.headers);\n\n    if (response.status === 401 && onAuthError) {\n      onAuthError();\n    }\n\n    if (!response.ok) {\n      // Read body as text first to avoid SyntaxError from response.json()\n      // when server returns non-JSON bodies with application/json content-type.\n      const errorText = await response.text().catch(() => \"\");\n      const contentType = response.headers.get(\"content-type\");\n\n      if (contentType?.includes(\"application/json\")) {\n        // Parsed as `unknown` and narrowed before any property read: a body of\n        // `null` (or a bare string/number/array) is valid JSON, and reading\n        // `.error` off it directly threw a TypeError instead of an ApiError.\n        let parsed: unknown;\n        try {\n          parsed = JSON.parse(errorText);\n        } catch {\n          throw new ApiError(\n            errorText.slice(0, 200) ||\n              `${method} request failed with status ${response.status}`,\n            response.status,\n            null,\n            headerRequestId,\n          );\n        }\n\n        const body = toApiErrorBody(parsed);\n        // Only an object envelope can carry a message. Some Rails BFF endpoints\n        // return `{ error: { message, details } }` instead of `{ message }` or\n        // `{ error_message }`, so that shape is tried last.\n        const msg = body\n          ? (() => {\n              const nestedError =\n                typeof body.error === \"object\" && body.error !== null\n                  ? (body.error as { message?: unknown }).message\n                  : undefined;\n              const directError =\n                typeof body.error === \"string\" ? body.error : undefined;\n              const message =\n                typeof body.message === \"string\" ? body.message : undefined;\n              const errorMessage =\n                typeof body.error_message === \"string\"\n                  ? body.error_message\n                  : undefined;\n              return (\n                message ||\n                errorMessage ||\n                directError ||\n                (typeof nestedError === \"string\" ? nestedError : undefined)\n              );\n            })()\n          : undefined;\n\n        throw new ApiError(\n          msg || `${method} request failed with status ${response.status}`,\n          response.status,\n          body ? toApiErrorData(body) : (parsed as ApiErrorData),\n          headerRequestId ?? getRequestIdFromJsonBody(parsed),\n          body,\n        );\n      } else {\n        throw new ApiError(\n          `${method} request failed with status ${response.status}`,\n          response.status,\n          null,\n          headerRequestId,\n        );\n      }\n    }\n\n    if (\n      response.status === 204 ||\n      response.headers.get(\"content-length\") === \"0\"\n    ) {\n      return null as TResponse;\n    }\n\n    const contentType = response.headers.get(\"content-type\");\n\n    if (contentType?.includes(\"application/json\")) {\n      const responseText = await response.text();\n\n      try {\n        const data = JSON.parse(responseText);\n        return data as TResponse;\n      } catch {\n        if (throwOnInvalidJson) {\n          throw new ApiError(\n            \"Failed to parse response as JSON\",\n            response.status,\n            null,\n            headerRequestId,\n          );\n        }\n\n        // API declared JSON content-type but body isn't valid JSON.\n        // Return the raw payload to preserve the legacy non-strict path.\n        return responseText ? (responseText as TResponse) : (null as TResponse);\n      }\n    }\n\n    // Non-JSON response (text/plain, text/html, etc.)\n    return null as TResponse;\n  }\n\n  function getNetworkRetryDelayMs(retryAttempt: number): number {\n    return baseNetworkRetryDelayMs * 2 ** (retryAttempt - 1);\n  }\n\n  async function waitForNetworkRetry(retryAttempt: number): Promise<void> {\n    const delayMs = getNetworkRetryDelayMs(retryAttempt);\n    if (delayMs <= 0) {\n      return;\n    }\n\n    await new Promise((resolve) => setTimeout(resolve, delayMs));\n  }\n\n  async function fetchWithNetworkRetry(\n    url: string,\n    fetchOptions: RequestInit,\n    signal?: AbortSignal,\n  ): Promise<Response> {\n    let retryCount = 0;\n\n    while (true) {\n      try {\n        return await fetch(url, fetchOptions);\n      } catch (networkError) {\n        if (signal?.aborted || retryCount >= maxNetworkRetries) {\n          throw networkError;\n        }\n\n        retryCount += 1;\n        await waitForNetworkRetry(retryCount);\n\n        if (signal?.aborted) {\n          throw networkError;\n        }\n      }\n    }\n  }\n\n  /**\n   * Main request function\n   */\n  async function request<TResponse = unknown>(\n    endpoint: string,\n    options: RequestOptions = {},\n  ): Promise<TResponse> {\n    const {\n      method = \"GET\",\n      headers: customHeaders,\n      params,\n      body,\n      signal,\n      priority,\n    } = options;\n\n    const url = params ? buildUrl(endpoint, params) : joinUrl(endpoint);\n\n    const headers = await buildHeaders(customHeaders);\n\n    let response: Response;\n\n    try {\n      const fetchOptions: RequestInit = { method, headers };\n      if (credentials) fetchOptions.credentials = credentials;\n      if (cache) fetchOptions.cache = cache;\n      if (priority) fetchOptions.priority = priority;\n      const serializedBody =\n        body && method !== \"GET\" ? JSON.stringify(body) : null;\n      if (serializedBody) fetchOptions.body = serializedBody;\n      if (signal) fetchOptions.signal = signal;\n      response = await fetchWithNetworkRetry(url, fetchOptions, signal);\n    } catch (networkError) {\n      throw new ApiError(\n        `Network error: ${networkError instanceof Error ? networkError.message : \"Unknown network error\"}`,\n        0,\n        null,\n      );\n    }\n\n    return handleResponse<TResponse>(response, method, url);\n  }\n\n  /**\n   * Request with FormData (for file uploads)\n   */\n  async function requestWithFormData<TResponse = unknown>(\n    endpoint: string,\n    formData: FormData,\n    options: Omit<RequestOptions, \"body\" | \"params\"> & {\n      method?: \"POST\" | \"PUT\" | \"PATCH\";\n    } = {},\n  ): Promise<TResponse> {\n    const {\n      method = \"POST\",\n      headers: customHeaders,\n      signal,\n      priority,\n    } = options;\n\n    const url = joinUrl(endpoint);\n    const headers = await buildHeaders(customHeaders);\n\n    // Remove Content-Type to let browser set it with boundary\n    delete headers[\"Content-Type\"];\n\n    let response: Response;\n\n    try {\n      const fetchOptions: RequestInit = { method, headers, body: formData };\n      if (credentials) fetchOptions.credentials = credentials;\n      if (cache) fetchOptions.cache = cache;\n      if (priority) fetchOptions.priority = priority;\n      if (signal) fetchOptions.signal = signal;\n      response = await fetchWithNetworkRetry(url, fetchOptions, signal);\n    } catch (networkError) {\n      throw new ApiError(\n        `Network error: ${networkError instanceof Error ? networkError.message : \"Unknown network error\"}`,\n        0,\n        null,\n      );\n    }\n\n    return handleResponse<TResponse>(response, method, url);\n  }\n\n  // Return client with convenience methods\n  return {\n    request: request,\n    requestWithFormData: requestWithFormData,\n\n    // Convenience methods for common HTTP verbs\n    get: <TResponse = unknown>(\n      endpoint: string,\n      params?: Record<string, unknown>,\n      options?: Omit<RequestOptions, \"method\" | \"params\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"GET\" as const,\n        ...(params && { params }),\n      }),\n\n    post: <TResponse = unknown>(\n      endpoint: string,\n      body?: unknown,\n      options?: Omit<RequestOptions, \"method\" | \"body\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"POST\",\n        body,\n      }),\n\n    put: <TResponse = unknown>(\n      endpoint: string,\n      body?: unknown,\n      options?: Omit<RequestOptions, \"method\" | \"body\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"PUT\",\n        body,\n      }),\n\n    patch: <TResponse = unknown>(\n      endpoint: string,\n      body?: unknown,\n      options?: Omit<RequestOptions, \"method\" | \"body\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"PATCH\",\n        body,\n      }),\n\n    delete: <TResponse = unknown>(\n      endpoint: string,\n      options?: Omit<RequestOptions, \"method\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"DELETE\",\n      }),\n  };\n}\n\nexport type FetchClient = FetchClientInstance;\n","import type { OutputOptions } from \"./types.js\";\n\nexport function formatOutput(data: unknown, options: OutputOptions): string {\n  let result = data;\n\n  if (options.jq) {\n    result = extractPath(result, options.jq);\n  }\n\n  if (options.format === \"table\") {\n    return formatTable(result);\n  }\n\n  if (options.compact) {\n    return JSON.stringify(result);\n  }\n  return JSON.stringify(result, null, 2);\n}\n\nfunction extractPath(data: unknown, path: string): unknown {\n  const parts = path\n    .replace(/^\\.*/, \"\")\n    .split(/\\.|\\[/)\n    .filter(Boolean)\n    .map((p) => p.replace(/\\]$/, \"\"));\n\n  let current: any = data;\n  for (const part of parts) {\n    if (current == null) return undefined;\n    current = current[part];\n  }\n  return current;\n}\n\nfunction formatTable(data: unknown): string {\n  if (Array.isArray(data)) {\n    if (data.length === 0) return \"(empty)\";\n\n    if (typeof data[0] === \"object\" && data[0] !== null) {\n      const keys = Object.keys(data[0]);\n      const widths = keys.map((k) =>\n        Math.max(k.length, ...data.map((row) => String(row[k] ?? \"\").length)),\n      );\n\n      const header = keys\n        .map((k, i) => k.toUpperCase().padEnd(widths[i]!))\n        .join(\"  \");\n      const separator = widths.map((w) => \"-\".repeat(w)).join(\"  \");\n      const rows = data.map((row) =>\n        keys.map((k, i) => String(row[k] ?? \"\").padEnd(widths[i]!)).join(\"  \"),\n      );\n\n      return [header, separator, ...rows].join(\"\\n\");\n    }\n\n    return data.map(String).join(\"\\n\");\n  }\n\n  if (typeof data === \"object\" && data !== null) {\n    const entries = Object.entries(data);\n    const maxKeyLen = Math.max(...entries.map(([k]) => k.length));\n    return entries\n      .map(([k, v]) => `${k.padEnd(maxKeyLen)}  ${JSON.stringify(v)}`)\n      .join(\"\\n\");\n  }\n\n  return String(data);\n}\n","import { createFetchClient } from \"@fluid-app/api-client-core\";\nimport type { FetchClient } from \"@fluid-app/api-client-core\";\n\nimport { getAuthToken } from \"../auth/token.js\";\nimport { findProjectConfig } from \"../config/project-config.js\";\nimport { formatOutput } from \"./output.js\";\nimport type { CommandContext, OutputOptions } from \"./types.js\";\n\nexport function createCommandContext(opts: {\n  token?: string;\n  baseUrl?: string;\n  profile?: string;\n  format: \"json\" | \"table\";\n  compact: boolean;\n  jq?: string;\n  verbose: boolean;\n}): CommandContext {\n  let clientInstance: FetchClient | null = null;\n\n  const outputOptions: OutputOptions = {\n    format: opts.format,\n    compact: opts.compact,\n    jq: opts.jq,\n  };\n\n  return {\n    verbose: opts.verbose,\n\n    async getClient(): Promise<FetchClient> {\n      if (clientInstance) return clientInstance;\n\n      const token = resolveToken(opts);\n      if (!token) {\n        if (opts.profile) {\n          throw new Error(\n            `No API token found for profile \"${opts.profile}\". Run \\`fluid login\\` for that profile or provide --token <token>`,\n          );\n        }\n\n        throw new Error(\n          \"No API token found. Run `fluid login` or provide --token <token>\",\n        );\n      }\n\n      const baseUrl =\n        opts.baseUrl ??\n        process.env[\"FLUID_API_BASE\"] ??\n        \"https://api.fluid.app\";\n\n      clientInstance = createFetchClient({\n        baseUrl,\n        getAuthToken: () => token,\n      });\n\n      return clientInstance;\n    },\n\n    output(data: unknown): void {\n      const formatted = formatOutput(data, outputOptions);\n      process.stdout.write(formatted + \"\\n\");\n    },\n\n    parseBody(raw: string): unknown {\n      try {\n        return JSON.parse(raw);\n      } catch {\n        throw new Error(`Invalid JSON body: ${raw}`);\n      }\n    },\n  };\n}\n\nfunction resolveToken(opts: {\n  token?: string;\n  profile?: string;\n}): string | null {\n  if (opts.token) return opts.token;\n\n  if (opts.profile) return getAuthToken(opts.profile);\n\n  const envToken = process.env[\"FLUID_TOKEN\"] ?? process.env[\"FLUID_API_TOKEN\"];\n  if (envToken) return envToken;\n\n  // Project-level .fluidrc profile (before global active profile)\n  const projectConfig = findProjectConfig(process.cwd());\n  if (projectConfig?.profile) {\n    const rcToken = getAuthToken(projectConfig.profile);\n    if (rcToken) return rcToken;\n  }\n\n  return getAuthToken();\n}\n","import { Command } from \"commander\";\n\nimport { createCommandContext } from \"./context.js\";\nimport type { CommandContext } from \"./types.js\";\n\ntype RegisterFn = (parent: Command, ctx: CommandContext) => void;\n\nexport function createDomainCommand(\n  name: string,\n  description: string,\n  register: RegisterFn,\n): Command {\n  const cmd = new Command(name)\n    .description(description)\n    // Keep global domain flags usable before or after nested subcommands.\n    .enablePositionalOptions(false)\n    .option(\"--token <token>\", \"API authentication token\")\n    .option(\"--base-url <url>\", \"API base URL\")\n    .option(\"--profile <name>\", \"Config profile name\")\n    .option(\"--format <format>\", \"Output format (json|table)\", \"json\")\n    .option(\"--compact\", \"Compact JSON output\", false)\n    .option(\"--jq <path>\", \"Extract value at JSON path\")\n    .option(\"--verbose\", \"Print request details to stderr\", false);\n\n  let resolvedCtx: CommandContext | null = null;\n\n  function getCtx(): CommandContext {\n    if (!resolvedCtx) {\n      const opts = cmd.opts();\n      resolvedCtx = createCommandContext({\n        token: opts.token,\n        baseUrl: opts.baseUrl,\n        profile: opts.profile,\n        format: opts.format as \"json\" | \"table\",\n        compact: opts.compact,\n        jq: opts.jq,\n        verbose: opts.verbose,\n      });\n    }\n    return resolvedCtx;\n  }\n\n  const lazyCtx: CommandContext = {\n    get verbose() {\n      return getCtx().verbose;\n    },\n    getClient() {\n      return getCtx().getClient();\n    },\n    output(data: unknown) {\n      return getCtx().output(data);\n    },\n    parseBody(raw: string) {\n      return getCtx().parseBody(raw);\n    },\n  };\n\n  register(cmd, lazyCtx);\n\n  return cmd;\n}\n","/**\n * The canonical GitSync commit-subject format, shared by every kind of\n * Fluid-managed repository — Mist apps, Themes, Portals and Widgets.\n *\n * Each kind used to invent its own wording, so `git log` across a\n * company's repos read as four unrelated systems and only some commits\n * said who made them. One shape now covers all of them:\n *\n *   <Actor Name>: <Action> · <timestamp> (<public_id>)\n *   Mike Tingey: Publish portal Acme Portal · 2026-08-06 12:00:00 (0182d21e-…)\n *\n * Name and action come first so `git log --oneline` stays scannable in a\n * narrow terminal; the long UUID sits at the end where truncation eats\n * it instead of the prose. The timestamp is redundant with git's own\n * committer date but is kept inline because it survives cherry-picks,\n * rebases and the hosting providers' deployment feeds, which surface the\n * subject and nothing else.\n *\n * System-authored commits (auto-provisioning, sweeper retries, webhook\n * fan-out, an unreachable `/api/me`) use the literal actor name `Fluid`\n * and carry no UUID, so they parse with the same grammar rather than\n * needing a second one:\n *\n *   Fluid: Publish theme Aurora · 2026-08-06 12:00:00\n *\n * The Ruby side mirrors this in `GitSync::CommitSubject`\n * (fluid/app/models/git_sync/commit_subject.rb) and Mist Desktop mirrors\n * the parser in `apps/mist-desktop/src/shared/git-commit-subject.ts`.\n * Change all three together.\n */\n\n/** The person a commit is attributed to. */\nexport interface GitSyncActor {\n  /** Display name: full_name → first+last → email → `user-<id>`. */\n  readonly name: string;\n  /** The user's stable public UUID, rendered as a ` (uuid)` suffix. */\n  readonly publicId: string | null;\n}\n\n/** Actor name used when no human triggered the commit. */\nexport const SYSTEM_ACTOR_NAME = \"Fluid\";\n\n/** Parseable fallback when a caller supplies only grammar delimiters or\n * whitespace as the action (for example, `-m \"·\"`). */\nconst DEFAULT_ACTION = \"Sync changes\";\n\n/**\n * A subject broken back into its parts. `publicId` is null for\n * system-authored commits and for actors whose public id was unknown at\n * commit time.\n */\nexport interface ParsedGitSyncSubject {\n  readonly actorName: string;\n  readonly action: string;\n  /** The inline `YYYY-MM-DD HH:MM:SS` stamp, in UTC. */\n  readonly timestamp: string;\n  readonly publicId: string | null;\n}\n\n/**\n * Matches the canonical shape. The actor group is greedy so a display\n * name containing `\": \"` (e.g. `Tingey: Mike`) splits at the LAST colon\n * before the ` · ` separator — safe because {@link subjectFragment}\n * strips both delimiters out of every value we interpolate into an\n * action.\n */\nconst SUBJECT_RE =\n  /^(.+): (.+?) · (\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2})(?: \\(([^()]+)\\))?$/;\n\n/** `2026-08-06T12:00:00.000Z` → `2026-08-06 12:00:00`. */\nexport function formatCommitTimestamp(when: Date): string {\n  return when.toISOString().slice(0, 19).replace(\"T\", \" \");\n}\n\n/**\n * Neutralize the two sequences the grammar splits on, so no value can\n * shift the actor / action / uuid boundaries:\n *\n *   `\": \"` separates the actor from the action\n *   `\"·\"`  separates the action from the timestamp\n *\n * Only those exact sequences are replaced, not every colon — `12:30`\n * and `fix:handle-nulls` survive intact, because neither can be\n * mistaken for a field boundary. A trailing colon is likewise safe: the\n * parser backtracks past it.\n *\n * {@link gitSyncCommitSubject} applies this to every action, so callers\n * don't have to remember. It's idempotent, so calling it yourself on an\n * interpolated resource name (as the CLIs do) costs nothing.\n */\nexport function subjectFragment(value: string): string {\n  return value\n    .replace(/:\\s/g, \" \")\n    .replace(/·/g, \" \")\n    .replace(/\\s+/g, \" \")\n    .trim();\n}\n\n/**\n * Build a canonical commit subject.\n *\n * @param action - What happened, e.g. `Publish theme Aurora`. Run any\n *   interpolated resource name through {@link subjectFragment} first.\n * @param actor - The signed-in user, or null for system-authored\n *   commits (which are attributed to `Fluid`).\n * @param when - Injectable clock, so callers and tests get a stable\n *   stamp.\n */\nexport function gitSyncCommitSubject(\n  action: string,\n  actor: GitSyncActor | null,\n  when: Date = new Date(),\n): string {\n  // Sanitized HERE rather than at each call site. The action is the one\n  // field a user fully controls (`-m`), and a `\": \"` in it would be read\n  // back as part of the actor — `-m \"Publish: Acme\"` attributing the\n  // commit to \"Mike Tingey: Publish\". Doing it at the choke point means\n  // no current or future caller can reintroduce that.\n  //\n  // The actor name is deliberately NOT sanitized: a real name may\n  // contain `\": \"` (`Tingey: Mike`), and the greedy actor group parses\n  // that correctly precisely because the action can no longer contain\n  // the delimiter.\n  const safeAction = subjectFragment(action) || DEFAULT_ACTION;\n  const stamp = formatCommitTimestamp(when);\n  if (!actor) return `${SYSTEM_ACTOR_NAME}: ${safeAction} · ${stamp}`;\n  const idSuffix = actor.publicId ? ` (${actor.publicId})` : \"\";\n  return `${actor.name}: ${safeAction} · ${stamp}${idSuffix}`;\n}\n\n/**\n * Split a canonical subject back into its parts, or null when the\n * subject predates the format (legacy CLI wording such as `push @ <iso>`\n * or a hand-written commit). Callers fall back to rendering the raw\n * subject.\n */\nexport function parseGitSyncSubject(\n  subject: string | null | undefined,\n): ParsedGitSyncSubject | null {\n  if (!subject) return null;\n  const match = subject.trim().match(SUBJECT_RE);\n  if (!match) return null;\n  const [, actorName, action, timestamp, publicId] = match;\n  // The regex guarantees these groups, but noUncheckedIndexedAccess\n  // types them as possibly-undefined.\n  if (!actorName || !action || !timestamp) return null;\n  return {\n    actorName: actorName.trim(),\n    action: action.trim(),\n    timestamp,\n    publicId: publicId?.trim() || null,\n  };\n}\n\n/**\n * The person a canonical subject is attributed to, or null when the\n * subject isn't canonical or was system-authored. Use this for \"who\n * shipped this\" UI — a `Fluid:` commit has no human to name.\n */\nexport function gitSyncSubjectAuthor(\n  subject: string | null | undefined,\n): string | null {\n  const parsed = parseGitSyncSubject(subject);\n  if (!parsed || parsed.actorName === SYSTEM_ACTOR_NAME) return null;\n  return parsed.actorName;\n}\n\n/** The `/api/me` fields the actor is derived from. */\ninterface MeUser {\n  readonly id?: unknown;\n  readonly public_id?: unknown;\n  readonly full_name?: unknown;\n  readonly first_name?: unknown;\n  readonly last_name?: unknown;\n  readonly email?: unknown;\n}\n\n/** Some `/api/me` deployments nest the user, others return it flat. */\ninterface MeResponse extends MeUser {\n  readonly user?: MeUser;\n}\n\nfunction str(value: unknown): string | null {\n  if (typeof value === \"string\" && value.trim().length > 0) return value.trim();\n  return null;\n}\n\n/**\n * Resolve an `/api/me` body to a commit actor, with the name fallback\n * chain `full_name → first+last → email → user-<id>`. Returns null when\n * the body carries no usable identity at all, which callers treat the\n * same as an unreachable `/api/me`: a system-authored commit.\n */\nexport function gitSyncActorFromMe(raw: MeResponse): GitSyncActor | null {\n  const user = raw.user ?? raw;\n  const composed = [str(user.first_name), str(user.last_name)]\n    .filter((part): part is string => part !== null)\n    .join(\" \")\n    .trim();\n  const name =\n    str(user.full_name) ??\n    (composed.length > 0 ? composed : null) ??\n    str(user.email) ??\n    (typeof user.id === \"number\" && Number.isFinite(user.id)\n      ? `user-${user.id}`\n      : null);\n  if (!name) return null;\n  const publicId =\n    str(user.public_id) ??\n    (typeof user.id === \"number\" && Number.isFinite(user.id)\n      ? String(user.id)\n      : null);\n  return { name, publicId };\n}\n","/**\n * Turn a set of changed paths into the `<Action>` half of a canonical\n * GitSync commit subject (see commit-subject.ts).\n *\n * Publishes used to be stamped with a constant — \"Publish from Mist\n * Desktop\", \"Publish theme Aurora\" — so `git log` told you a publish\n * happened but never what it carried. Every entry in the history looked\n * identical, which made the log useless for finding the commit that\n * introduced something.\n *\n * This derives a short, honest phrase from the staged diff:\n *\n *   Update templates/product.liquid\n *   Update 3 files in templates\n *   Add 2 files, update 3, delete 1\n *\n * It is deliberately mechanical. A caller that knows the INTENT behind a\n * change (Mist Desktop, or a human passing `-m`) should pass that\n * instead — an intent describes why, and no diff can recover that. This\n * is the fallback for when nobody supplied one.\n *\n * Pure: callers collect the diff (each CLI has its own git layer) and\n * hand the entries here, so the wording can't drift between kinds.\n */\n\n/** Git's porcelain status letters, narrowed to what we act on. */\nexport type ChangeStatus = \"added\" | \"modified\" | \"deleted\" | \"renamed\";\n\n/**\n * What an auto-commit helper accepts as its subject: either a literal\n * (the caller already knows the intent — a `-m` message), or a resolver\n * handed the staged changes so it can describe them.\n *\n * The resolver form exists because staging is decided INSIDE the commit\n * helpers — they `git add -A` and then unstage private paths — so only\n * they know the final file set. A summary built by the caller beforehand\n * would describe a diff the commit doesn't carry.\n *\n * It may return a promise so a caller can start slow work (an `/api/me`\n * identity lookup, say) BEFORE the git reconcile and await it here, at\n * the last possible moment — overlapping it with the fetch/merge instead\n * of paying for it serially up front. Anything awaited here is on the\n * critical path of the commit, so it must be bounded and best-effort:\n * a publish must never hang waiting to describe itself.\n */\nexport type CommitMessage =\n  | string\n  | ((changes: readonly ChangeEntry[]) => string | Promise<string>);\n\nexport interface ChangeEntry {\n  readonly status: ChangeStatus;\n  /** Repo-relative path, forward-slashed. */\n  readonly path: string;\n}\n\n/** Map a `git diff --name-status` letter to a status. `R`/`C` carry a\n *  similarity score (`R100`), so only the leading letter is read.\n *  Unknown letters (`U` unmerged, `T` typechange) count as modified —\n *  the file did change, and mislabeling the verb is better than\n *  dropping it from the count. */\nexport function changeStatusFromCode(code: string): ChangeStatus {\n  switch (code.trim().charAt(0).toUpperCase()) {\n    case \"A\":\n      return \"added\";\n    case \"D\":\n      return \"deleted\";\n    case \"R\":\n      return \"renamed\";\n    default:\n      return \"modified\";\n  }\n}\n\n/**\n * Parse `git diff --cached --name-status -z` output.\n *\n * NUL-delimited on purpose: paths containing spaces, quotes or newlines\n * are legal in git and common in themes (`assets/hero image.png`), and\n * the newline-delimited form quotes and escapes them, which would corrupt\n * both the count and the path. With `-z`, records are\n * `status\\0path\\0` — except renames and copies, which are\n * `status\\0from\\0to\\0` and consume an extra field.\n */\nexport function parseNameStatusZ(stdout: string): ChangeEntry[] {\n  const fields = stdout.split(\"\\0\").filter((f) => f.length > 0);\n  const entries: ChangeEntry[] = [];\n  for (let i = 0; i < fields.length; ) {\n    const code = fields[i];\n    if (code === undefined) break;\n    const status = changeStatusFromCode(code);\n    if (status === \"renamed\") {\n      // status, from, to — the destination is the path we report.\n      const to = fields[i + 2];\n      if (to === undefined) break;\n      entries.push({ status, path: to });\n      i += 3;\n      continue;\n    }\n    const path = fields[i + 1];\n    if (path === undefined) break;\n    entries.push({ status, path });\n    i += 2;\n  }\n  return entries;\n}\n\n/** Top-level directory of a path, or null for a repo-root file. */\nfunction topLevelDir(path: string): string | null {\n  const slash = path.indexOf(\"/\");\n  return slash > 0 ? path.slice(0, slash) : null;\n}\n\nfunction plural(count: number, noun: string): string {\n  return `${count} ${noun}${count === 1 ? \"\" : \"s\"}`;\n}\n\nconst VERB_FOR: Record<ChangeStatus, string> = {\n  added: \"Add\",\n  modified: \"Update\",\n  deleted: \"Delete\",\n  renamed: \"Rename\",\n};\n\n/**\n * Build the action phrase for a set of changes, or null when there is\n * nothing to describe — the caller then falls back to its own constant\n * (`Publish theme Aurora`), so an empty diff never produces a subject\n * like \"Update 0 files\".\n *\n * @param entries - The staged changes.\n * @param maxLength - Clip the result to keep `git log --oneline`\n *   readable. The subject also carries a name, timestamp and UUID, so\n *   the action gets a modest budget.\n */\nexport function summarizeChanges(\n  entries: readonly ChangeEntry[],\n  maxLength = 72,\n): string | null {\n  if (entries.length === 0) return null;\n\n  // A single change is the most useful case and the most common one:\n  // name the actual file rather than counting to one.\n  if (entries.length === 1) {\n    const only = entries[0]!;\n    return clip(`${VERB_FOR[only.status]} ${only.path}`, maxLength);\n  }\n\n  // Group by verb, ordered so the dominant kind of change leads.\n  const byStatus = new Map<ChangeStatus, number>();\n  for (const entry of entries) {\n    byStatus.set(entry.status, (byStatus.get(entry.status) ?? 0) + 1);\n  }\n\n  // All one verb → \"Update 3 files\", plus a location when they share one.\n  if (byStatus.size === 1) {\n    const status = entries[0]!.status;\n    const dirs = new Set(entries.map((e) => topLevelDir(e.path)));\n    const only = dirs.size === 1 ? [...dirs][0] : null;\n    const phrase = `${VERB_FOR[status]} ${plural(entries.length, \"file\")}`;\n    return clip(only ? `${phrase} in ${only}` : phrase, maxLength);\n  }\n\n  // Mixed → lead with the largest group, then the rest as bare counts:\n  // \"Update 3 files, add 2, delete 1\".\n  const ordered = [...byStatus.entries()].sort(\n    ([aStatus, aCount], [bStatus, bCount]) =>\n      bCount - aCount || VERB_FOR[aStatus].localeCompare(VERB_FOR[bStatus]),\n  );\n  const [leadStatus, leadCount] = ordered[0]!;\n  const rest = ordered\n    .slice(1)\n    .map(([status, count]) => `${VERB_FOR[status].toLowerCase()} ${count}`);\n  const head = `${VERB_FOR[leadStatus]} ${plural(leadCount, \"file\")}`;\n  return clip([head, ...rest].join(\", \"), maxLength);\n}\n\nfunction clip(text: string, maxLength: number): string {\n  return text.length > maxLength\n    ? `${text.slice(0, maxLength - 1).trimEnd()}…`\n    : text;\n}\n","/**\n * Cache the signed-in user's commit identity on the active profile.\n *\n * Commit subjects are stamped `<name>: <action> · <ts> (<public_id>)`,\n * which needs the user's display name and public id. `/api/me` is the\n * only source, and it can be slow — so paying for it on EVERY push, to\n * learn a name that changes approximately never, is the wrong trade.\n *\n * The identity is stored per profile (profiles are per token + company,\n * so the cache can't leak across accounts) and refreshed only when\n * missing or stale. Login and company-switch write a fresh profile,\n * which drops the cached identity with it.\n *\n * Every failure mode here is non-fatal: an unreadable or unwritable\n * config just means we fall back to the network, and a failed network\n * lookup means a `Fluid:` system commit. A publish must never fail\n * because we couldn't work out whose name to put on it.\n */\n\nimport { readConfig, updateConfig } from \"../config/config.js\";\nimport type { GitSyncActor } from \"./commit-subject.js\";\n\n/**\n * How long a cached identity is trusted. Long, because a display name\n * changing is rare — but not forever, so a rename does eventually reach\n * the commit log without the user having to re-login.\n */\nexport const ACTOR_CACHE_TTL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days\n\n/** Cached identity as persisted on a profile. */\nexport interface CachedGitSyncActor {\n  readonly name: string;\n  readonly publicId: string | null;\n  /** ISO-8601. */\n  readonly cachedAt: string;\n}\n\nfunction isFresh(cached: CachedGitSyncActor, now: number): boolean {\n  const at = Date.parse(cached.cachedAt);\n  // An unparseable timestamp is treated as stale rather than trusted\n  // forever — a corrupt field shouldn't pin a wrong name permanently.\n  if (Number.isNaN(at)) return false;\n  return now - at < ACTOR_CACHE_TTL_MS;\n}\n\n/** The cached identity for the active profile, or null. */\nexport function readCachedActor(now = Date.now()): GitSyncActor | null {\n  try {\n    const config = readConfig();\n    const profileName = config.activeProfile;\n    if (!profileName) return null;\n    const cached = config.profiles[profileName]?.gitSyncActor;\n    if (!cached || !cached.name || !isFresh(cached, now)) return null;\n    return { name: cached.name, publicId: cached.publicId ?? null };\n  } catch {\n    return null;\n  }\n}\n\n/** Persist an identity against the active profile. Best-effort. */\nexport function writeCachedActor(actor: GitSyncActor, now = new Date()): void {\n  try {\n    updateConfig((config) => {\n      const profileName = config.activeProfile;\n      if (!profileName) return config;\n      const profile = config.profiles[profileName];\n      if (!profile) return config;\n      return {\n        ...config,\n        profiles: {\n          ...config.profiles,\n          [profileName]: {\n            ...profile,\n            gitSyncActor: {\n              name: actor.name,\n              publicId: actor.publicId,\n              cachedAt: now.toISOString(),\n            },\n          },\n        },\n      };\n    });\n  } catch {\n    // A read-only or malformed config just means we look it up again\n    // next time — never a reason to fail a publish.\n  }\n}\n\n/**\n * The commit identity, from cache when possible.\n *\n * @param fetchActor - Network lookup, used only on a cache miss. Each\n *   CLI has its own client, so the caller supplies it. It must already\n *   be bounded — this function adds no timeout of its own.\n *\n * Returns null when there's no cache and the lookup fails or yields no\n * usable identity; callers then write a `Fluid:` system commit.\n */\nexport async function resolveGitSyncActor(\n  fetchActor: () => Promise<GitSyncActor | null>,\n): Promise<GitSyncActor | null> {\n  const cached = readCachedActor();\n  if (cached) return cached;\n\n  const fetched = await fetchActor().catch(() => null);\n  if (fetched) writeCachedActor(fetched);\n  return fetched;\n}\n"],"mappings":";;;;;;;;AAgDA,SAAgB,eAAe,OAA8B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;AAGT,QAAO;;;;;;;;AAST,SAAgB,eAAe,MAAkC;AAC/D,KAAI,CAAC,KACH,QAAO;AAGT,QAAQ,KAAK,UAAU;;;;;;;ACOzB,IAAa,WAAb,MAAa,iBAAiB,MAAM;CAClC;;;;;CAMA;;;;;CAMA;CAEA;CAEA,YACE,SACA,QACA,MACA,WACA,MACA;AACA,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,SAAS;AACd,OAAK,OAAO,QAAQ;AACpB,OAAK,OAAO,QAAQ;AACpB,OAAK,YAAY;AAEjB,MAAI,uBAAuB,MAEvB,OAMA,kBAAkB,MAAM,SAAS;;CAIvC,SAOE;AACA,SAAO;GACL,MAAM,KAAK;GACX,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,MAAM,KAAK;GACX,WAAW,KAAK;GACjB;;;AAIL,SAAS,mBAAmB,OAAoC;AAC9D,KAAI,OAAO,UAAU,SACnB;CAGF,MAAM,UAAU,MAAM,MAAM;AAC5B,QAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;;AAGxC,SAAS,wBAAwB,SAAsC;AACrE,QACE,mBAAmB,QAAQ,IAAI,eAAe,CAAC,IAC/C,mBAAmB,QAAQ,IAAI,aAAa,CAAC,IAC7C,mBAAmB,QAAQ,IAAI,eAAe,CAAC;;AAInD,SAAS,yBAAyB,MAAmC;AACnE,KAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,KAAK,CAC1D;CAGF,MAAM,SAAS;CACf,MAAM,OAAO,OAAO;AAEpB,QACE,mBAAmB,OAAO,WAAW,IACrC,mBAAmB,OAAO,UAAU,KACnC,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACpD,mBAAoB,KAAiC,WAAW,IACjE,mBAAoB,KAAiC,UAAU,GAC/D,KAAA;;;;;AAoDR,SAAgB,kBACd,QACqB;CACrB,MAAM,EACJ,SACA,cACA,aACA,iBAAiB,EAAE,EACnB,aACA,OACA,cACA,qBAAqB,UACnB;CACJ,MAAM,oBAAoB,KAAK,IAAI,GAAG,cAAc,cAAc,EAAE;CACpE,MAAM,0BAA0B,KAAK,IAAI,GAAG,cAAc,eAAe,EAAE;;;;CAK3E,eAAe,aACb,eACiC;EACjC,MAAM,UAAkC;GACtC,QAAQ;GACR,gBAAgB;GAChB,GAAG;GACH,GAAG;GACJ;AAGD,MAAI,cAAc;GAChB,MAAM,QAAQ,MAAM,cAAc;AAClC,OAAI,MACF,SAAQ,gBAAgB,UAAU;;AAItC,SAAO;;;;;;;CAQT,SAAS,QAAQ,UAA0B;AACzC,SAAO,GAAG,UAAU;;;;;;CAOtB,SAAS,SACP,UACA,QACQ;EACR,MAAM,UAAU,QAAQ,SAAS;AAEjC,MAAI,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,EAC5C,QAAO;EAGT,MAAM,cAAc,IAAI,iBAAiB;AAEzC,SAAO,QAAQ,OAAO,CAAC,SAAS,CAAC,KAAK,WAAW;AAC/C,OAAI,UAAU,KAAA,KAAa,UAAU,KACnC;AAGF,OAAI,MAAM,QAAQ,MAAM,CAEtB,OAAM,SAAS,SAAS,YAAY,OAAO,GAAG,IAAI,KAAK,OAAO,KAAK,CAAC,CAAC;YAC5D,OAAO,UAAU,SAE1B,QAAO,QAAQ,MAAM,CAAC,SAAS,CAAC,QAAQ,cAAc;AACpD,QAAI,aAAa,KAAA,KAAa,aAAa,KACzC;AAGF,QAAI,MAAM,QAAQ,SAAS,CACzB,UAAS,SAAS,SAChB,YAAY,OAAO,GAAG,IAAI,GAAG,OAAO,MAAM,OAAO,KAAK,CAAC,CACxD;QAED,aAAY,OAAO,GAAG,IAAI,GAAG,OAAO,IAAI,OAAO,SAAS,CAAC;KAE3D;OAEF,aAAY,OAAO,KAAK,OAAO,MAAM,CAAC;IAExC;EAEF,MAAM,KAAK,YAAY,UAAU;AACjC,SAAO,KAAK,GAAG,QAAQ,GAAG,OAAO;;;;;;CAOnC,eAAe,eACb,UACA,QACA,MACoB;EACpB,MAAM,kBAAkB,wBAAwB,SAAS,QAAQ;AAEjE,MAAI,SAAS,WAAW,OAAO,YAC7B,cAAa;AAGf,MAAI,CAAC,SAAS,IAAI;GAGhB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;AAGvD,OAFoB,SAAS,QAAQ,IAAI,eAAe,EAEvC,SAAS,mBAAmB,EAAE;IAI7C,IAAI;AACJ,QAAI;AACF,cAAS,KAAK,MAAM,UAAU;YACxB;AACN,WAAM,IAAI,SACR,UAAU,MAAM,GAAG,IAAI,IACrB,GAAG,OAAO,8BAA8B,SAAS,UACnD,SAAS,QACT,MACA,gBACD;;IAGH,MAAM,OAAO,eAAe,OAAO;AA2BnC,UAAM,IAAI,UAvBE,cACD;KACL,MAAM,cACJ,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,OAC5C,KAAK,MAAgC,UACtC,KAAA;KACN,MAAM,cACJ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;KAChD,MAAM,UACJ,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAA;KACpD,MAAM,eACJ,OAAO,KAAK,kBAAkB,WAC1B,KAAK,gBACL,KAAA;AACN,YACE,WACA,gBACA,gBACC,OAAO,gBAAgB,WAAW,cAAc,KAAA;QAEjD,GACJ,KAAA,MAGK,GAAG,OAAO,8BAA8B,SAAS,UACxD,SAAS,QACT,OAAO,eAAe,KAAK,GAAI,QAC/B,mBAAmB,yBAAyB,OAAO,EACnD,KACD;SAED,OAAM,IAAI,SACR,GAAG,OAAO,8BAA8B,SAAS,UACjD,SAAS,QACT,MACA,gBACD;;AAIL,MACE,SAAS,WAAW,OACpB,SAAS,QAAQ,IAAI,iBAAiB,KAAK,IAE3C,QAAO;AAKT,MAFoB,SAAS,QAAQ,IAAI,eAAe,EAEvC,SAAS,mBAAmB,EAAE;GAC7C,MAAM,eAAe,MAAM,SAAS,MAAM;AAE1C,OAAI;AAEF,WADa,KAAK,MAAM,aAAa;WAE/B;AACN,QAAI,mBACF,OAAM,IAAI,SACR,oCACA,SAAS,QACT,MACA,gBACD;AAKH,WAAO,eAAgB,eAA8B;;;AAKzD,SAAO;;CAGT,SAAS,uBAAuB,cAA8B;AAC5D,SAAO,0BAA0B,MAAM,eAAe;;CAGxD,eAAe,oBAAoB,cAAqC;EACtE,MAAM,UAAU,uBAAuB,aAAa;AACpD,MAAI,WAAW,EACb;AAGF,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,QAAQ,CAAC;;CAG9D,eAAe,sBACb,KACA,cACA,QACmB;EACnB,IAAI,aAAa;AAEjB,SAAO,KACL,KAAI;AACF,UAAO,MAAM,MAAM,KAAK,aAAa;WAC9B,cAAc;AACrB,OAAI,QAAQ,WAAW,cAAc,kBACnC,OAAM;AAGR,iBAAc;AACd,SAAM,oBAAoB,WAAW;AAErC,OAAI,QAAQ,QACV,OAAM;;;;;;CASd,eAAe,QACb,UACA,UAA0B,EAAE,EACR;EACpB,MAAM,EACJ,SAAS,OACT,SAAS,eACT,QACA,MACA,QACA,aACE;EAEJ,MAAM,MAAM,SAAS,SAAS,UAAU,OAAO,GAAG,QAAQ,SAAS;EAEnE,MAAM,UAAU,MAAM,aAAa,cAAc;EAEjD,IAAI;AAEJ,MAAI;GACF,MAAM,eAA4B;IAAE;IAAQ;IAAS;AACrD,OAAI,YAAa,cAAa,cAAc;AAC5C,OAAI,MAAO,cAAa,QAAQ;AAChC,OAAI,SAAU,cAAa,WAAW;GACtC,MAAM,iBACJ,QAAQ,WAAW,QAAQ,KAAK,UAAU,KAAK,GAAG;AACpD,OAAI,eAAgB,cAAa,OAAO;AACxC,OAAI,OAAQ,cAAa,SAAS;AAClC,cAAW,MAAM,sBAAsB,KAAK,cAAc,OAAO;WAC1D,cAAc;AACrB,SAAM,IAAI,SACR,kBAAkB,wBAAwB,QAAQ,aAAa,UAAU,2BACzE,GACA,KACD;;AAGH,SAAO,eAA0B,UAAU,QAAQ,IAAI;;;;;CAMzD,eAAe,oBACb,UACA,UACA,UAEI,EAAE,EACc;EACpB,MAAM,EACJ,SAAS,QACT,SAAS,eACT,QACA,aACE;EAEJ,MAAM,MAAM,QAAQ,SAAS;EAC7B,MAAM,UAAU,MAAM,aAAa,cAAc;AAGjD,SAAO,QAAQ;EAEf,IAAI;AAEJ,MAAI;GACF,MAAM,eAA4B;IAAE;IAAQ;IAAS,MAAM;IAAU;AACrE,OAAI,YAAa,cAAa,cAAc;AAC5C,OAAI,MAAO,cAAa,QAAQ;AAChC,OAAI,SAAU,cAAa,WAAW;AACtC,OAAI,OAAQ,cAAa,SAAS;AAClC,cAAW,MAAM,sBAAsB,KAAK,cAAc,OAAO;WAC1D,cAAc;AACrB,SAAM,IAAI,SACR,kBAAkB,wBAAwB,QAAQ,aAAa,UAAU,2BACzE,GACA,KACD;;AAGH,SAAO,eAA0B,UAAU,QAAQ,IAAI;;AAIzD,QAAO;EACI;EACY;EAGrB,MACE,UACA,QACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR,GAAI,UAAU,EAAE,QAAQ;GACzB,CAAC;EAEJ,OACE,UACA,MACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR;GACD,CAAC;EAEJ,MACE,UACA,MACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR;GACD,CAAC;EAEJ,QACE,UACA,MACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR;GACD,CAAC;EAEJ,SACE,UACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACT,CAAC;EACL;;;;ACrmBH,SAAgB,aAAa,MAAe,SAAgC;CAC1E,IAAI,SAAS;AAEb,KAAI,QAAQ,GACV,UAAS,YAAY,QAAQ,QAAQ,GAAG;AAG1C,KAAI,QAAQ,WAAW,QACrB,QAAO,YAAY,OAAO;AAG5B,KAAI,QAAQ,QACV,QAAO,KAAK,UAAU,OAAO;AAE/B,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;;AAGxC,SAAS,YAAY,MAAe,MAAuB;CACzD,MAAM,QAAQ,KACX,QAAQ,QAAQ,GAAG,CACnB,MAAM,QAAQ,CACd,OAAO,QAAQ,CACf,KAAK,MAAM,EAAE,QAAQ,OAAO,GAAG,CAAC;CAEnC,IAAI,UAAe;AACnB,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,WAAW,KAAM,QAAO,KAAA;AAC5B,YAAU,QAAQ;;AAEpB,QAAO;;AAGT,SAAS,YAAY,MAAuB;AAC1C,KAAI,MAAM,QAAQ,KAAK,EAAE;AACvB,MAAI,KAAK,WAAW,EAAG,QAAO;AAE9B,MAAI,OAAO,KAAK,OAAO,YAAY,KAAK,OAAO,MAAM;GACnD,MAAM,OAAO,OAAO,KAAK,KAAK,GAAG;GACjC,MAAM,SAAS,KAAK,KAAK,MACvB,KAAK,IAAI,EAAE,QAAQ,GAAG,KAAK,KAAK,QAAQ,OAAO,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,CACtE;AAUD,UAAO;IARQ,KACZ,KAAK,GAAG,MAAM,EAAE,aAAa,CAAC,OAAO,OAAO,GAAI,CAAC,CACjD,KAAK,KAAK;IACK,OAAO,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,KAAK,KAAK;IAKlC,GAJd,KAAK,KAAK,QACrB,KAAK,KAAK,GAAG,MAAM,OAAO,IAAI,MAAM,GAAG,CAAC,OAAO,OAAO,GAAI,CAAC,CAAC,KAAK,KAAK,CACvE;IAEkC,CAAC,KAAK,KAAK;;AAGhD,SAAO,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK;;AAGpC,KAAI,OAAO,SAAS,YAAY,SAAS,MAAM;EAC7C,MAAM,UAAU,OAAO,QAAQ,KAAK;EACpC,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;AAC7D,SAAO,QACJ,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,GAAG,CAC/D,KAAK,KAAK;;AAGf,QAAO,OAAO,KAAK;;;;AC1DrB,SAAgB,qBAAqB,MAQlB;CACjB,IAAI,iBAAqC;CAEzC,MAAM,gBAA+B;EACnC,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,IAAI,KAAK;EACV;AAED,QAAO;EACL,SAAS,KAAK;EAEd,MAAM,YAAkC;AACtC,OAAI,eAAgB,QAAO;GAE3B,MAAM,QAAQ,aAAa,KAAK;AAChC,OAAI,CAAC,OAAO;AACV,QAAI,KAAK,QACP,OAAM,IAAI,MACR,mCAAmC,KAAK,QAAQ,oEACjD;AAGH,UAAM,IAAI,MACR,mEACD;;AAQH,oBAAiB,kBAAkB;IACjC,SALA,KAAK,WACL,QAAQ,IAAI,qBACZ;IAIA,oBAAoB;IACrB,CAAC;AAEF,UAAO;;EAGT,OAAO,MAAqB;GAC1B,MAAM,YAAY,aAAa,MAAM,cAAc;AACnD,WAAQ,OAAO,MAAM,YAAY,KAAK;;EAGxC,UAAU,KAAsB;AAC9B,OAAI;AACF,WAAO,KAAK,MAAM,IAAI;WAChB;AACN,UAAM,IAAI,MAAM,sBAAsB,MAAM;;;EAGjD;;AAGH,SAAS,aAAa,MAGJ;AAChB,KAAI,KAAK,MAAO,QAAO,KAAK;AAE5B,KAAI,KAAK,QAAS,QAAO,aAAa,KAAK,QAAQ;CAEnD,MAAM,WAAW,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAC3D,KAAI,SAAU,QAAO;CAGrB,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK,CAAC;AACtD,KAAI,eAAe,SAAS;EAC1B,MAAM,UAAU,aAAa,cAAc,QAAQ;AACnD,MAAI,QAAS,QAAO;;AAGtB,QAAO,cAAc;;;;ACnFvB,SAAgB,oBACd,MACA,aACA,UACS;CACT,MAAM,MAAM,IAAI,QAAQ,KAAK,CAC1B,YAAY,YAAY,CAExB,wBAAwB,MAAM,CAC9B,OAAO,mBAAmB,2BAA2B,CACrD,OAAO,oBAAoB,eAAe,CAC1C,OAAO,oBAAoB,sBAAsB,CACjD,OAAO,qBAAqB,8BAA8B,OAAO,CACjE,OAAO,aAAa,uBAAuB,MAAM,CACjD,OAAO,eAAe,6BAA6B,CACnD,OAAO,aAAa,mCAAmC,MAAM;CAEhE,IAAI,cAAqC;CAEzC,SAAS,SAAyB;AAChC,MAAI,CAAC,aAAa;GAChB,MAAM,OAAO,IAAI,MAAM;AACvB,iBAAc,qBAAqB;IACjC,OAAO,KAAK;IACZ,SAAS,KAAK;IACd,SAAS,KAAK;IACd,QAAQ,KAAK;IACb,SAAS,KAAK;IACd,IAAI,KAAK;IACT,SAAS,KAAK;IACf,CAAC;;AAEJ,SAAO;;AAkBT,UAAS,KAfuB;EAC9B,IAAI,UAAU;AACZ,UAAO,QAAQ,CAAC;;EAElB,YAAY;AACV,UAAO,QAAQ,CAAC,WAAW;;EAE7B,OAAO,MAAe;AACpB,UAAO,QAAQ,CAAC,OAAO,KAAK;;EAE9B,UAAU,KAAa;AACrB,UAAO,QAAQ,CAAC,UAAU,IAAI;;EAEjC,CAEqB;AAEtB,QAAO;;;;;ACnBT,MAAa,oBAAoB;;;AAIjC,MAAM,iBAAiB;;;;;;;;AAsBvB,MAAM,aACJ;;AAGF,SAAgB,sBAAsB,MAAoB;AACxD,QAAO,KAAK,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI;;;;;;;;;;;;;;;;;;AAmB1D,SAAgB,gBAAgB,OAAuB;AACrD,QAAO,MACJ,QAAQ,QAAQ,IAAI,CACpB,QAAQ,MAAM,IAAI,CAClB,QAAQ,QAAQ,IAAI,CACpB,MAAM;;;;;;;;;;;;AAaX,SAAgB,qBACd,QACA,OACA,uBAAa,IAAI,MAAM,EACf;CAWR,MAAM,aAAa,gBAAgB,OAAO,IAAI;CAC9C,MAAM,QAAQ,sBAAsB,KAAK;AACzC,KAAI,CAAC,MAAO,QAAO,GAAG,kBAAkB,IAAI,WAAW,KAAK;CAC5D,MAAM,WAAW,MAAM,WAAW,KAAK,MAAM,SAAS,KAAK;AAC3D,QAAO,GAAG,MAAM,KAAK,IAAI,WAAW,KAAK,QAAQ;;;;;;;;AASnD,SAAgB,oBACd,SAC6B;AAC7B,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,QAAQ,QAAQ,MAAM,CAAC,MAAM,WAAW;AAC9C,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,GAAG,WAAW,QAAQ,WAAW,YAAY;AAGnD,KAAI,CAAC,aAAa,CAAC,UAAU,CAAC,UAAW,QAAO;AAChD,QAAO;EACL,WAAW,UAAU,MAAM;EAC3B,QAAQ,OAAO,MAAM;EACrB;EACA,UAAU,UAAU,MAAM,IAAI;EAC/B;;;;;;;AAQH,SAAgB,qBACd,SACe;CACf,MAAM,SAAS,oBAAoB,QAAQ;AAC3C,KAAI,CAAC,UAAU,OAAO,cAAA,QAAiC,QAAO;AAC9D,QAAO,OAAO;;AAkBhB,SAAS,IAAI,OAA+B;AAC1C,KAAI,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,SAAS,EAAG,QAAO,MAAM,MAAM;AAC7E,QAAO;;;;;;;;AAST,SAAgB,mBAAmB,KAAsC;CACvE,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,WAAW,CAAC,IAAI,KAAK,WAAW,EAAE,IAAI,KAAK,UAAU,CAAC,CACzD,QAAQ,SAAyB,SAAS,KAAK,CAC/C,KAAK,IAAI,CACT,MAAM;CACT,MAAM,OACJ,IAAI,KAAK,UAAU,KAClB,SAAS,SAAS,IAAI,WAAW,SAClC,IAAI,KAAK,MAAM,KACd,OAAO,KAAK,OAAO,YAAY,OAAO,SAAS,KAAK,GAAG,GACpD,QAAQ,KAAK,OACb;AACN,KAAI,CAAC,KAAM,QAAO;AAMlB,QAAO;EAAE;EAAM,UAJb,IAAI,KAAK,UAAU,KAClB,OAAO,KAAK,OAAO,YAAY,OAAO,SAAS,KAAK,GAAG,GACpD,OAAO,KAAK,GAAG,GACf;EACmB;;;;;;;;;ACxJ3B,SAAgB,qBAAqB,MAA4B;AAC/D,SAAQ,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,aAAa,EAA3C;EACE,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,QACE,QAAO;;;;;;;;;;;;;AAcb,SAAgB,iBAAiB,QAA+B;CAC9D,MAAM,SAAS,OAAO,MAAM,KAAK,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;CAC7D,MAAM,UAAyB,EAAE;AACjC,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,SAAU;EACnC,MAAM,OAAO,OAAO;AACpB,MAAI,SAAS,KAAA,EAAW;EACxB,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,WAAW;GAExB,MAAM,KAAK,OAAO,IAAI;AACtB,OAAI,OAAO,KAAA,EAAW;AACtB,WAAQ,KAAK;IAAE;IAAQ,MAAM;IAAI,CAAC;AAClC,QAAK;AACL;;EAEF,MAAM,OAAO,OAAO,IAAI;AACxB,MAAI,SAAS,KAAA,EAAW;AACxB,UAAQ,KAAK;GAAE;GAAQ;GAAM,CAAC;AAC9B,OAAK;;AAEP,QAAO;;;AAIT,SAAS,YAAY,MAA6B;CAChD,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,QAAO,QAAQ,IAAI,KAAK,MAAM,GAAG,MAAM,GAAG;;AAG5C,SAAS,OAAO,OAAe,MAAsB;AACnD,QAAO,GAAG,MAAM,GAAG,OAAO,UAAU,IAAI,KAAK;;AAG/C,MAAM,WAAyC;CAC7C,OAAO;CACP,UAAU;CACV,SAAS;CACT,SAAS;CACV;;;;;;;;;;;;AAaD,SAAgB,iBACd,SACA,YAAY,IACG;AACf,KAAI,QAAQ,WAAW,EAAG,QAAO;AAIjC,KAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,OAAO,QAAQ;AACrB,SAAO,KAAK,GAAG,SAAS,KAAK,QAAQ,GAAG,KAAK,QAAQ,UAAU;;CAIjE,MAAM,2BAAW,IAAI,KAA2B;AAChD,MAAK,MAAM,SAAS,QAClB,UAAS,IAAI,MAAM,SAAS,SAAS,IAAI,MAAM,OAAO,IAAI,KAAK,EAAE;AAInE,KAAI,SAAS,SAAS,GAAG;EACvB,MAAM,SAAS,QAAQ,GAAI;EAC3B,MAAM,OAAO,IAAI,IAAI,QAAQ,KAAK,MAAM,YAAY,EAAE,KAAK,CAAC,CAAC;EAC7D,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK;EAC9C,MAAM,SAAS,GAAG,SAAS,QAAQ,GAAG,OAAO,QAAQ,QAAQ,OAAO;AACpE,SAAO,KAAK,OAAO,GAAG,OAAO,MAAM,SAAS,QAAQ,UAAU;;CAKhE,MAAM,UAAU,CAAC,GAAG,SAAS,SAAS,CAAC,CAAC,MACrC,CAAC,SAAS,SAAS,CAAC,SAAS,YAC5B,SAAS,UAAU,SAAS,SAAS,cAAc,SAAS,SAAS,CACxE;CACD,MAAM,CAAC,YAAY,aAAa,QAAQ;CACxC,MAAM,OAAO,QACV,MAAM,EAAE,CACR,KAAK,CAAC,QAAQ,WAAW,GAAG,SAAS,QAAQ,aAAa,CAAC,GAAG,QAAQ;AAEzE,QAAO,KAAK,CADC,GAAG,SAAS,YAAY,GAAG,OAAO,WAAW,OAAO,IAC9C,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,UAAU;;AAGpD,SAAS,KAAK,MAAc,WAA2B;AACrD,QAAO,KAAK,SAAS,YACjB,GAAG,KAAK,MAAM,GAAG,YAAY,EAAE,CAAC,SAAS,CAAC,KAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;ACxJN,MAAa,qBAAqB,MAAU,KAAK,KAAK;AAUtD,SAAS,QAAQ,QAA4B,KAAsB;CACjE,MAAM,KAAK,KAAK,MAAM,OAAO,SAAS;AAGtC,KAAI,OAAO,MAAM,GAAG,CAAE,QAAO;AAC7B,QAAO,MAAM,KAAK;;;AAIpB,SAAgB,gBAAgB,MAAM,KAAK,KAAK,EAAuB;AACrE,KAAI;EACF,MAAM,SAAS,YAAY;EAC3B,MAAM,cAAc,OAAO;AAC3B,MAAI,CAAC,YAAa,QAAO;EACzB,MAAM,SAAS,OAAO,SAAS,cAAc;AAC7C,MAAI,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,QAAQ,QAAQ,IAAI,CAAE,QAAO;AAC7D,SAAO;GAAE,MAAM,OAAO;GAAM,UAAU,OAAO,YAAY;GAAM;SACzD;AACN,SAAO;;;;AAKX,SAAgB,iBAAiB,OAAqB,sBAAM,IAAI,MAAM,EAAQ;AAC5E,KAAI;AACF,gBAAc,WAAW;GACvB,MAAM,cAAc,OAAO;AAC3B,OAAI,CAAC,YAAa,QAAO;GACzB,MAAM,UAAU,OAAO,SAAS;AAChC,OAAI,CAAC,QAAS,QAAO;AACrB,UAAO;IACL,GAAG;IACH,UAAU;KACR,GAAG,OAAO;MACT,cAAc;MACb,GAAG;MACH,cAAc;OACZ,MAAM,MAAM;OACZ,UAAU,MAAM;OAChB,UAAU,IAAI,aAAa;OAC5B;MACF;KACF;IACF;IACD;SACI;;;;;;;;;;;;AAgBV,eAAsB,oBACpB,YAC8B;CAC9B,MAAM,SAAS,iBAAiB;AAChC,KAAI,OAAQ,QAAO;CAEnB,MAAM,UAAU,MAAM,YAAY,CAAC,YAAY,KAAK;AACpD,KAAI,QAAS,kBAAiB,QAAQ;AACtC,QAAO"}
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../platform/api-client-core/src/api-error-shape.ts","../../../platform/api-client-core/src/fetch-client.ts","../src/domain/output.ts","../src/domain/context.ts","../src/domain/command.ts","../src/walk/prompter.ts","../src/git-sync/commit-subject.ts","../src/git-sync/change-summary.ts","../src/git-sync/actor-cache.ts"],"sourcesContent":["/**\n * The shape contract for `ApiError.body` and `ApiError.data`.\n *\n * One decision, in one place: `body` is the response envelope exactly as the\n * server sent it, `data` is the unwrapped field-error bag. Rationale and the\n * alternatives considered live in `docs/api-error-data-contract.md`.\n */\n\n/**\n * The parsed JSON error response body, exactly as the server sent it.\n *\n * This is the envelope: `errors`, `error_message`, `error`, `status`, `meta`\n * and `request_id` all live here. `null` when the response carried no JSON\n * object — HTML, an empty body, a JSON primitive, or unparseable text.\n */\nexport type ApiErrorBody = Record<string, unknown> | null;\n\n/**\n * The field-level error bag: the envelope's `errors` value when the body has\n * one, otherwise the body itself.\n *\n * `errors` is declared `never` because unwrapping already consumed it — read\n * the envelope from `ApiError.body`, not from here. That makes the historical\n * mistake (`error.data.errors.some_field`, which silently resolved to\n * `undefined`) a typecheck failure instead of a degraded error message.\n */\nexport type ApiErrorFieldErrors = Record<string, unknown> & {\n  errors?: never;\n};\n\n/**\n * Every value `ApiError.data` can hold. Fluid endpoints return an object bag,\n * but `errors` is occasionally an array or a string, and non-JSON responses\n * carry no data at all.\n */\nexport type ApiErrorData =\n  | ApiErrorFieldErrors\n  | readonly unknown[]\n  | string\n  | number\n  | boolean\n  | null;\n\n/**\n * Narrows a parsed JSON error payload to the envelope contract. Arrays and\n * primitives are not envelopes, so they resolve to `null` — their content is\n * still reachable through `ApiError.data`.\n */\nexport function toApiErrorBody(value: unknown): ApiErrorBody {\n  if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n    return null;\n  }\n\n  return value as Record<string, unknown>;\n}\n\n/**\n * The single unwrap rule, shared by every producer of `ApiError`.\n *\n * `??` rather than `||` so an explicitly empty `errors` (`\"\"`, `0`, `false`)\n * is preserved instead of silently falling back to the whole envelope.\n */\nexport function toApiErrorData(body: ApiErrorBody): ApiErrorData {\n  if (!body) {\n    return null;\n  }\n\n  return (body.errors ?? body) as ApiErrorData;\n}\n","/**\n * Minimal, framework-agnostic fetch client for Fluid APIs\n * Compatible with fluid-admin patterns but usable standalone\n */\n\nimport type { ApiErrorBody, ApiErrorData } from \"./api-error-shape\";\nimport { toApiErrorBody, toApiErrorData } from \"./api-error-shape\";\n\nexport interface FetchClientConfig {\n  /**\n   * Base URL for all requests (e.g., \"https://api.fluid.app/api\")\n   */\n  baseUrl: string;\n\n  /**\n   * Optional function to get auth token\n   * Return null/undefined if no token available\n   */\n  getAuthToken?: () => string | null | Promise<string | null>;\n\n  /**\n   * Optional callback when 401 auth error occurs\n   */\n  onAuthError?: () => void;\n\n  /**\n   * Default headers to include in all requests\n   * Example: { \"x-fluid-client\": \"admin\" }\n   */\n  defaultHeaders?: Record<string, string>;\n\n  /**\n   * Credentials mode for fetch requests.\n   * Set to `\"include\"` for cookie-based (same-origin BFF) authentication.\n   * @default undefined (browser default: \"same-origin\")\n   */\n  credentials?: RequestCredentials;\n\n  /**\n   * Request cache mode for fetch requests.\n   * @default undefined (browser default)\n   */\n  cache?: RequestCache;\n\n  /**\n   * Retry configuration for thrown network errors from fetch.\n   * Does not retry HTTP error responses or aborted requests.\n   * @default undefined (no retries)\n   */\n  networkRetry?: {\n    maxRetries?: number;\n    baseDelayMs?: number;\n  };\n\n  /**\n   * Throw ApiError when a successful response declares JSON but cannot be parsed.\n   * Defaults to false to preserve the legacy generated-client behavior.\n   * @default false\n   */\n  throwOnInvalidJson?: boolean;\n}\n\nexport interface RequestOptions {\n  method?: \"GET\" | \"POST\" | \"PUT\" | \"DELETE\" | \"PATCH\";\n  headers?: Record<string, string>;\n  params?: Record<string, unknown>;\n  body?: unknown;\n  signal?: AbortSignal;\n  priority?: RequestInit[\"priority\"];\n}\n\n/**\n * API Error class compatible with fluid-admin's ApiError\n */\nexport class ApiError extends Error {\n  public readonly status: number;\n\n  /**\n   * The unwrapped field-error bag. See `ApiErrorData`; the contract is\n   * documented in `docs/api-error-data-contract.md`.\n   */\n  public readonly data: ApiErrorData;\n\n  /**\n   * The full error response envelope. Read `error_message`, `error`, `status`\n   * and nested `errors` from here — `data` has already unwrapped one level.\n   */\n  public readonly body: ApiErrorBody;\n\n  public readonly requestId?: string;\n\n  constructor(\n    message: string,\n    status: number,\n    data?: ApiErrorData,\n    requestId?: string,\n    body?: ApiErrorBody,\n  ) {\n    super(message);\n    this.name = \"ApiError\";\n    this.status = status;\n    this.data = data ?? null;\n    this.body = body ?? null;\n    this.requestId = requestId;\n\n    if (\"captureStackTrace\" in Error) {\n      (\n        Error as {\n          captureStackTrace: (\n            target: Error,\n            constructor: NewableFunction,\n          ) => void;\n        }\n      ).captureStackTrace(this, ApiError);\n    }\n  }\n\n  toJSON(): {\n    name: string;\n    message: string;\n    status: number;\n    data: ApiErrorData;\n    body: ApiErrorBody;\n    requestId?: string;\n  } {\n    return {\n      name: this.name,\n      message: this.message,\n      status: this.status,\n      data: this.data,\n      body: this.body,\n      requestId: this.requestId,\n    };\n  }\n}\n\nfunction getStringRequestId(value: unknown): string | undefined {\n  if (typeof value !== \"string\") {\n    return undefined;\n  }\n\n  const trimmed = value.trim();\n  return trimmed.length > 0 ? trimmed : undefined;\n}\n\nfunction getRequestIdFromHeaders(headers: Headers): string | undefined {\n  return (\n    getStringRequestId(headers.get(\"x-request-id\")) ??\n    getStringRequestId(headers.get(\"request-id\")) ??\n    getStringRequestId(headers.get(\"X-Request-ID\"))\n  );\n}\n\nfunction getRequestIdFromJsonBody(body: unknown): string | undefined {\n  if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n    return undefined;\n  }\n\n  const record = body as Record<string, unknown>;\n  const meta = record.meta;\n\n  return (\n    getStringRequestId(record.request_id) ??\n    getStringRequestId(record.requestId) ??\n    (meta && typeof meta === \"object\" && !Array.isArray(meta)\n      ? (getStringRequestId((meta as Record<string, unknown>).request_id) ??\n        getStringRequestId((meta as Record<string, unknown>).requestId))\n      : undefined)\n  );\n}\n\n/**\n * Type guard for ApiError\n */\nexport function isApiError(error: unknown): error is ApiError {\n  return error instanceof ApiError;\n}\n\nexport interface FetchClientInstance {\n  request: <TResponse = unknown>(\n    endpoint: string,\n    options?: RequestOptions,\n  ) => Promise<TResponse>;\n  requestWithFormData: <TResponse = unknown>(\n    endpoint: string,\n    formData: FormData,\n    options?: Omit<RequestOptions, \"body\" | \"params\"> & {\n      method?: \"POST\" | \"PUT\" | \"PATCH\";\n    },\n  ) => Promise<TResponse>;\n  get: <TResponse = unknown>(\n    endpoint: string,\n    params?: Record<string, unknown>,\n    options?: Omit<RequestOptions, \"method\" | \"params\">,\n  ) => Promise<TResponse>;\n  post: <TResponse = unknown>(\n    endpoint: string,\n    body?: unknown,\n    options?: Omit<RequestOptions, \"method\" | \"body\">,\n  ) => Promise<TResponse>;\n  put: <TResponse = unknown>(\n    endpoint: string,\n    body?: unknown,\n    options?: Omit<RequestOptions, \"method\" | \"body\">,\n  ) => Promise<TResponse>;\n  patch: <TResponse = unknown>(\n    endpoint: string,\n    body?: unknown,\n    options?: Omit<RequestOptions, \"method\" | \"body\">,\n  ) => Promise<TResponse>;\n  delete: <TResponse = unknown>(\n    endpoint: string,\n    options?: Omit<RequestOptions, \"method\">,\n  ) => Promise<TResponse>;\n}\n\n/**\n * Creates a configured fetch client instance\n */\nexport function createFetchClient(\n  config: FetchClientConfig,\n): FetchClientInstance {\n  const {\n    baseUrl,\n    getAuthToken,\n    onAuthError,\n    defaultHeaders = {},\n    credentials,\n    cache,\n    networkRetry,\n    throwOnInvalidJson = false,\n  } = config;\n  const maxNetworkRetries = Math.max(0, networkRetry?.maxRetries ?? 0);\n  const baseNetworkRetryDelayMs = Math.max(0, networkRetry?.baseDelayMs ?? 0);\n\n  /**\n   * Build headers for a request\n   */\n  async function buildHeaders(\n    customHeaders?: Record<string, string>,\n  ): Promise<Record<string, string>> {\n    const headers: Record<string, string> = {\n      Accept: \"application/json\",\n      \"Content-Type\": \"application/json\",\n      ...defaultHeaders,\n      ...customHeaders,\n    };\n\n    // Add auth token if available\n    if (getAuthToken) {\n      const token = await getAuthToken();\n      if (token) {\n        headers.Authorization = `Bearer ${token}`;\n      }\n    }\n\n    return headers;\n  }\n\n  /**\n   * Join baseUrl + endpoint via string concatenation (matches fetchApi).\n   * Using `new URL(endpoint, baseUrl)` would strip any path prefix from\n   * baseUrl (e.g. \"/api\") when the endpoint starts with \"/\".\n   */\n  function joinUrl(endpoint: string): string {\n    return `${baseUrl}${endpoint}`;\n  }\n\n  /**\n   * Build URL with query parameters for GET requests\n   * Compatible with fluid-admin's query param handling\n   */\n  function buildUrl(\n    endpoint: string,\n    params?: Record<string, unknown>,\n  ): string {\n    const fullUrl = joinUrl(endpoint);\n\n    if (!params || Object.keys(params).length === 0) {\n      return fullUrl;\n    }\n\n    const queryString = new URLSearchParams();\n\n    Object.entries(params).forEach(([key, value]) => {\n      if (value === undefined || value === null) {\n        return; // Skip undefined/null values\n      }\n\n      if (Array.isArray(value)) {\n        // Handle arrays like Rails expects: key[]. The OpenAPI-declared\n        // param name is sometimes already bracketed (e.g. \"product_ids[]\",\n        // \"filters[integration_class][]\") to match Rails' own convention;\n        // appending another \"[]\" in that case would double-bracket the wire\n        // format (key[][]=1), which Rails does not parse as the array.\n        const arrayKey = key.endsWith(\"[]\") ? key : `${key}[]`;\n        value.forEach((item) => queryString.append(arrayKey, String(item)));\n      } else if (typeof value === \"object\") {\n        // Handle nested objects: key[subkey]\n        Object.entries(value).forEach(([subKey, subValue]) => {\n          if (subValue === undefined || subValue === null) {\n            return;\n          }\n\n          if (Array.isArray(subValue)) {\n            subValue.forEach((item) =>\n              queryString.append(`${key}[${subKey}][]`, String(item)),\n            );\n          } else {\n            queryString.append(`${key}[${subKey}]`, String(subValue));\n          }\n        });\n      } else {\n        queryString.append(key, String(value));\n      }\n    });\n\n    const qs = queryString.toString();\n    return qs ? `${fullUrl}?${qs}` : fullUrl;\n  }\n\n  /**\n   * Shared response handler for both JSON and FormData requests.\n   * Handles auth errors, non-OK responses, 204 No Content, and JSON parsing.\n   */\n  async function handleResponse<TResponse>(\n    response: Response,\n    method: string,\n    _url: string,\n  ): Promise<TResponse> {\n    const headerRequestId = getRequestIdFromHeaders(response.headers);\n\n    if (response.status === 401 && onAuthError) {\n      onAuthError();\n    }\n\n    if (!response.ok) {\n      // Read body as text first to avoid SyntaxError from response.json()\n      // when server returns non-JSON bodies with application/json content-type.\n      const errorText = await response.text().catch(() => \"\");\n      const contentType = response.headers.get(\"content-type\");\n\n      if (contentType?.includes(\"application/json\")) {\n        // Parsed as `unknown` and narrowed before any property read: a body of\n        // `null` (or a bare string/number/array) is valid JSON, and reading\n        // `.error` off it directly threw a TypeError instead of an ApiError.\n        let parsed: unknown;\n        try {\n          parsed = JSON.parse(errorText);\n        } catch {\n          throw new ApiError(\n            errorText.slice(0, 200) ||\n              `${method} request failed with status ${response.status}`,\n            response.status,\n            null,\n            headerRequestId,\n          );\n        }\n\n        const body = toApiErrorBody(parsed);\n        // Only an object envelope can carry a message. Some Rails BFF endpoints\n        // return `{ error: { message, details } }` instead of `{ message }` or\n        // `{ error_message }`, so that shape is tried last.\n        const msg = body\n          ? (() => {\n              const nestedError =\n                typeof body.error === \"object\" && body.error !== null\n                  ? (body.error as { message?: unknown }).message\n                  : undefined;\n              const directError =\n                typeof body.error === \"string\" ? body.error : undefined;\n              const message =\n                typeof body.message === \"string\" ? body.message : undefined;\n              const errorMessage =\n                typeof body.error_message === \"string\"\n                  ? body.error_message\n                  : undefined;\n              return (\n                message ||\n                errorMessage ||\n                directError ||\n                (typeof nestedError === \"string\" ? nestedError : undefined)\n              );\n            })()\n          : undefined;\n\n        throw new ApiError(\n          msg || `${method} request failed with status ${response.status}`,\n          response.status,\n          body ? toApiErrorData(body) : (parsed as ApiErrorData),\n          headerRequestId ?? getRequestIdFromJsonBody(parsed),\n          body,\n        );\n      } else {\n        throw new ApiError(\n          `${method} request failed with status ${response.status}`,\n          response.status,\n          null,\n          headerRequestId,\n        );\n      }\n    }\n\n    if (\n      response.status === 204 ||\n      response.headers.get(\"content-length\") === \"0\"\n    ) {\n      return null as TResponse;\n    }\n\n    const contentType = response.headers.get(\"content-type\");\n\n    if (contentType?.includes(\"application/json\")) {\n      const responseText = await response.text();\n\n      try {\n        const data = JSON.parse(responseText);\n        return data as TResponse;\n      } catch {\n        if (throwOnInvalidJson) {\n          throw new ApiError(\n            \"Failed to parse response as JSON\",\n            response.status,\n            null,\n            headerRequestId,\n          );\n        }\n\n        // API declared JSON content-type but body isn't valid JSON.\n        // Return the raw payload to preserve the legacy non-strict path.\n        return responseText ? (responseText as TResponse) : (null as TResponse);\n      }\n    }\n\n    // Non-JSON response (text/plain, text/html, etc.)\n    return null as TResponse;\n  }\n\n  function getNetworkRetryDelayMs(retryAttempt: number): number {\n    return baseNetworkRetryDelayMs * 2 ** (retryAttempt - 1);\n  }\n\n  async function waitForNetworkRetry(retryAttempt: number): Promise<void> {\n    const delayMs = getNetworkRetryDelayMs(retryAttempt);\n    if (delayMs <= 0) {\n      return;\n    }\n\n    await new Promise((resolve) => setTimeout(resolve, delayMs));\n  }\n\n  async function fetchWithNetworkRetry(\n    url: string,\n    fetchOptions: RequestInit,\n    signal?: AbortSignal,\n  ): Promise<Response> {\n    let retryCount = 0;\n\n    while (true) {\n      try {\n        return await fetch(url, fetchOptions);\n      } catch (networkError) {\n        if (signal?.aborted || retryCount >= maxNetworkRetries) {\n          throw networkError;\n        }\n\n        retryCount += 1;\n        await waitForNetworkRetry(retryCount);\n\n        if (signal?.aborted) {\n          throw networkError;\n        }\n      }\n    }\n  }\n\n  /**\n   * Main request function\n   */\n  async function request<TResponse = unknown>(\n    endpoint: string,\n    options: RequestOptions = {},\n  ): Promise<TResponse> {\n    const {\n      method = \"GET\",\n      headers: customHeaders,\n      params,\n      body,\n      signal,\n      priority,\n    } = options;\n\n    const url = params ? buildUrl(endpoint, params) : joinUrl(endpoint);\n\n    const headers = await buildHeaders(customHeaders);\n\n    let response: Response;\n\n    try {\n      const fetchOptions: RequestInit = { method, headers };\n      if (credentials) fetchOptions.credentials = credentials;\n      if (cache) fetchOptions.cache = cache;\n      if (priority) fetchOptions.priority = priority;\n      const serializedBody =\n        body && method !== \"GET\" ? JSON.stringify(body) : null;\n      if (serializedBody) fetchOptions.body = serializedBody;\n      if (signal) fetchOptions.signal = signal;\n      response = await fetchWithNetworkRetry(url, fetchOptions, signal);\n    } catch (networkError) {\n      throw new ApiError(\n        `Network error: ${networkError instanceof Error ? networkError.message : \"Unknown network error\"}`,\n        0,\n        null,\n      );\n    }\n\n    return handleResponse<TResponse>(response, method, url);\n  }\n\n  /**\n   * Request with FormData (for file uploads)\n   */\n  async function requestWithFormData<TResponse = unknown>(\n    endpoint: string,\n    formData: FormData,\n    options: Omit<RequestOptions, \"body\" | \"params\"> & {\n      method?: \"POST\" | \"PUT\" | \"PATCH\";\n    } = {},\n  ): Promise<TResponse> {\n    const {\n      method = \"POST\",\n      headers: customHeaders,\n      signal,\n      priority,\n    } = options;\n\n    const url = joinUrl(endpoint);\n    const headers = await buildHeaders(customHeaders);\n\n    // Remove Content-Type to let browser set it with boundary\n    delete headers[\"Content-Type\"];\n\n    let response: Response;\n\n    try {\n      const fetchOptions: RequestInit = { method, headers, body: formData };\n      if (credentials) fetchOptions.credentials = credentials;\n      if (cache) fetchOptions.cache = cache;\n      if (priority) fetchOptions.priority = priority;\n      if (signal) fetchOptions.signal = signal;\n      response = await fetchWithNetworkRetry(url, fetchOptions, signal);\n    } catch (networkError) {\n      throw new ApiError(\n        `Network error: ${networkError instanceof Error ? networkError.message : \"Unknown network error\"}`,\n        0,\n        null,\n      );\n    }\n\n    return handleResponse<TResponse>(response, method, url);\n  }\n\n  // Return client with convenience methods\n  return {\n    request: request,\n    requestWithFormData: requestWithFormData,\n\n    // Convenience methods for common HTTP verbs\n    get: <TResponse = unknown>(\n      endpoint: string,\n      params?: Record<string, unknown>,\n      options?: Omit<RequestOptions, \"method\" | \"params\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"GET\" as const,\n        ...(params && { params }),\n      }),\n\n    post: <TResponse = unknown>(\n      endpoint: string,\n      body?: unknown,\n      options?: Omit<RequestOptions, \"method\" | \"body\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"POST\",\n        body,\n      }),\n\n    put: <TResponse = unknown>(\n      endpoint: string,\n      body?: unknown,\n      options?: Omit<RequestOptions, \"method\" | \"body\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"PUT\",\n        body,\n      }),\n\n    patch: <TResponse = unknown>(\n      endpoint: string,\n      body?: unknown,\n      options?: Omit<RequestOptions, \"method\" | \"body\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"PATCH\",\n        body,\n      }),\n\n    delete: <TResponse = unknown>(\n      endpoint: string,\n      options?: Omit<RequestOptions, \"method\">,\n    ): Promise<TResponse> =>\n      request<TResponse>(endpoint, {\n        ...options,\n        method: \"DELETE\",\n      }),\n  };\n}\n\nexport type FetchClient = FetchClientInstance;\n","import type { OutputOptions } from \"./types.js\";\n\nexport function formatOutput(data: unknown, options: OutputOptions): string {\n  let result = data;\n\n  if (options.jq) {\n    result = extractPath(result, options.jq);\n  }\n\n  if (options.format === \"table\") {\n    return formatTable(result);\n  }\n\n  if (options.compact) {\n    return JSON.stringify(result);\n  }\n  return JSON.stringify(result, null, 2);\n}\n\nfunction extractPath(data: unknown, path: string): unknown {\n  const parts = path\n    .replace(/^\\.*/, \"\")\n    .split(/\\.|\\[/)\n    .filter(Boolean)\n    .map((p) => p.replace(/\\]$/, \"\"));\n\n  let current: any = data;\n  for (const part of parts) {\n    if (current == null) return undefined;\n    current = current[part];\n  }\n  return current;\n}\n\nfunction formatTable(data: unknown): string {\n  if (Array.isArray(data)) {\n    if (data.length === 0) return \"(empty)\";\n\n    if (typeof data[0] === \"object\" && data[0] !== null) {\n      const keys = Object.keys(data[0]);\n      const widths = keys.map((k) =>\n        Math.max(k.length, ...data.map((row) => String(row[k] ?? \"\").length)),\n      );\n\n      const header = keys\n        .map((k, i) => k.toUpperCase().padEnd(widths[i]!))\n        .join(\"  \");\n      const separator = widths.map((w) => \"-\".repeat(w)).join(\"  \");\n      const rows = data.map((row) =>\n        keys.map((k, i) => String(row[k] ?? \"\").padEnd(widths[i]!)).join(\"  \"),\n      );\n\n      return [header, separator, ...rows].join(\"\\n\");\n    }\n\n    return data.map(String).join(\"\\n\");\n  }\n\n  if (typeof data === \"object\" && data !== null) {\n    const entries = Object.entries(data);\n    const maxKeyLen = Math.max(...entries.map(([k]) => k.length));\n    return entries\n      .map(([k, v]) => `${k.padEnd(maxKeyLen)}  ${JSON.stringify(v)}`)\n      .join(\"\\n\");\n  }\n\n  return String(data);\n}\n","import { createFetchClient } from \"@fluid-app/api-client-core\";\nimport type { FetchClient } from \"@fluid-app/api-client-core\";\n\nimport { getAuthToken } from \"../auth/token.js\";\nimport { findProjectConfig } from \"../config/project-config.js\";\nimport { formatOutput } from \"./output.js\";\nimport type { CommandContext, OutputOptions } from \"./types.js\";\n\nexport function createCommandContext(opts: {\n  token?: string;\n  baseUrl?: string;\n  profile?: string;\n  format: \"json\" | \"table\";\n  compact: boolean;\n  jq?: string;\n  verbose: boolean;\n}): CommandContext {\n  let clientInstance: FetchClient | null = null;\n\n  const outputOptions: OutputOptions = {\n    format: opts.format,\n    compact: opts.compact,\n    jq: opts.jq,\n  };\n\n  function requireToken(): string {\n    const token = resolveToken(opts);\n    if (token) return token;\n    if (opts.profile) {\n      throw new Error(\n        `No API token found for profile \"${opts.profile}\". Run \\`fluid login\\` for that profile or provide --token <token>`,\n      );\n    }\n    throw new Error(\n      \"No API token found. Run `fluid login` or provide --token <token>\",\n    );\n  }\n\n  return {\n    verbose: opts.verbose,\n\n    async getClient(): Promise<FetchClient> {\n      if (clientInstance) return clientInstance;\n\n      const token = requireToken();\n      const baseUrl =\n        opts.baseUrl ??\n        process.env[\"FLUID_API_BASE\"] ??\n        \"https://api.fluid.app\";\n\n      clientInstance = createFetchClient({\n        baseUrl,\n        getAuthToken: () => token,\n      });\n\n      return clientInstance;\n    },\n\n    async getClientFor(serviceBaseUrl: string): Promise<FetchClient> {\n      const token = requireToken();\n      return createFetchClient({\n        baseUrl: serviceBaseUrl.replace(/\\/$/, \"\"),\n        getAuthToken: () => token,\n      });\n    },\n\n    output(data: unknown): void {\n      const formatted = formatOutput(data, outputOptions);\n      process.stdout.write(formatted + \"\\n\");\n    },\n\n    parseBody(raw: string): unknown {\n      try {\n        return JSON.parse(raw);\n      } catch {\n        throw new Error(`Invalid JSON body: ${raw}`);\n      }\n    },\n  };\n}\n\nfunction resolveToken(opts: {\n  token?: string;\n  profile?: string;\n}): string | null {\n  if (opts.token) return opts.token;\n\n  if (opts.profile) return getAuthToken(opts.profile);\n\n  const envToken = process.env[\"FLUID_TOKEN\"] ?? process.env[\"FLUID_API_TOKEN\"];\n  if (envToken) return envToken;\n\n  // Project-level .fluidrc profile (before global active profile)\n  const projectConfig = findProjectConfig(process.cwd());\n  if (projectConfig?.profile) {\n    const rcToken = getAuthToken(projectConfig.profile);\n    if (rcToken) return rcToken;\n  }\n\n  return getAuthToken();\n}\n","import { Command } from \"commander\";\n\nimport { createCommandContext } from \"./context.js\";\nimport type { CommandContext } from \"./types.js\";\n\ntype RegisterFn = (parent: Command, ctx: CommandContext) => void;\n\nexport function createDomainCommand(\n  name: string,\n  description: string,\n  register: RegisterFn,\n): Command {\n  const cmd = new Command(name)\n    .description(description)\n    // Keep global domain flags usable before or after nested subcommands.\n    .enablePositionalOptions(false)\n    .option(\"--token <token>\", \"API authentication token\")\n    .option(\"--base-url <url>\", \"API base URL\")\n    .option(\"--profile <name>\", \"Config profile name\")\n    .option(\"--format <format>\", \"Output format (json|table)\", \"json\")\n    .option(\"--compact\", \"Compact JSON output\", false)\n    .option(\"--jq <path>\", \"Extract value at JSON path\")\n    .option(\"--verbose\", \"Print request details to stderr\", false);\n\n  let resolvedCtx: CommandContext | null = null;\n\n  function getCtx(): CommandContext {\n    if (!resolvedCtx) {\n      const opts = cmd.opts();\n      resolvedCtx = createCommandContext({\n        token: opts.token,\n        baseUrl: opts.baseUrl,\n        profile: opts.profile,\n        format: opts.format as \"json\" | \"table\",\n        compact: opts.compact,\n        jq: opts.jq,\n        verbose: opts.verbose,\n      });\n    }\n    return resolvedCtx;\n  }\n\n  const lazyCtx: CommandContext = {\n    get verbose() {\n      return getCtx().verbose;\n    },\n    getClient() {\n      return getCtx().getClient();\n    },\n    getClientFor(baseUrl: string) {\n      return getCtx().getClientFor(baseUrl);\n    },\n    output(data: unknown) {\n      return getCtx().output(data);\n    },\n    parseBody(raw: string) {\n      return getCtx().parseBody(raw);\n    },\n  };\n\n  register(cmd, lazyCtx);\n\n  return cmd;\n}\n","// The input side of a plugin's interactive `walk`: ask one question, or show\n// a menu, and report whether the person answered or wants to move around.\n// Plugins drive the walk; this only talks to the terminal.\n\nimport prompts from \"prompts\";\n\nexport type Nav = \"back\" | \"skip\" | \"menu\" | \"quit\";\n\n/** An answer, or a request to move: back a question, skip it, open the\n *  menu, or stop (Ctrl-C / Esc). */\nexport type Reply = { value: string } | { nav: Nav };\n\nexport interface Choice {\n  title: string;\n  value: string;\n  description?: string;\n}\n\nexport interface Question {\n  /** A line above the prompt, e.g. \"Business Info · 3 left\". */\n  section?: string;\n  message: string;\n  /** `secret` hides the typing; `search` filters a long list as you type. */\n  kind: \"text\" | \"secret\" | \"select\" | \"search\";\n  choices?: Choice[];\n  /** The saved answer, already masked if sensitive. Enter keeps it. */\n  current?: string;\n  hint?: string;\n  canGoBack: boolean;\n}\n\nexport interface MenuItem<T extends string> {\n  title: string;\n  value: T;\n  description?: string;\n  disabled?: boolean;\n}\n\nexport interface Prompter {\n  ask(question: Question): Promise<Reply>;\n  /** Null when the person cancels the menu. */\n  menu<T extends string>(\n    message: string,\n    items: ReadonlyArray<MenuItem<T>>,\n  ): Promise<T | null>;\n  note(text: string): void;\n}\n\nexport const NAV_HELP =\n  \"Type < to go back, > to skip, ? for the menu. Every answer is saved as you go; Ctrl-C stops.\";\n\nconst TYPED_NAV: Record<string, Nav> = { \"<\": \"back\", \">\": \"skip\", \"?\": \"menu\" };\n\n/** A typed `<`, `>` or `?` moves instead of answering. */\nexport function parseTyped(raw: string): Reply {\n  const nav = TYPED_NAV[raw.trim()];\n  return nav ? { nav } : { value: raw };\n}\n\n// Navigation entries appended to a pick list. The NUL prefix keeps them\n// from colliding with a real option value.\nconst NAV_PREFIX = \"\\u0000\";\n\nfunction navChoices(canGoBack: boolean): Choice[] {\n  return [\n    ...(canGoBack ? [{ title: \"← Back\", value: `${NAV_PREFIX}back` }] : []),\n    { title: \"Skip →\", value: `${NAV_PREFIX}skip` },\n    { title: \"Menu…\", value: `${NAV_PREFIX}menu` },\n  ];\n}\n\nfunction fromChoice(value: string): Reply {\n  return value.startsWith(NAV_PREFIX)\n    ? { nav: value.slice(NAV_PREFIX.length) as Nav }\n    : { value };\n}\n\n/** A prompter on the terminal, built on `prompts`. */\nexport function terminalPrompter(): Prompter {\n  let cancelled = false;\n  const onCancel = () => {\n    cancelled = true;\n    return false;\n  };\n\n  return {\n    async ask(q) {\n      cancelled = false;\n      if (q.section) process.stdout.write(`\\n${q.section}\\n`);\n      const message = q.current\n        ? `${q.message} (saved: ${q.current})`\n        : q.message;\n\n      if (q.kind === \"select\" || q.kind === \"search\") {\n        const choices = [...(q.choices ?? []), ...navChoices(q.canGoBack)];\n        const initial = Math.max(\n          0,\n          choices.findIndex((c) => c.title === q.current || c.value === q.current),\n        );\n        const { answer } = (await prompts(\n          {\n            type: q.kind === \"search\" ? \"autocomplete\" : \"select\",\n            name: \"answer\",\n            message,\n            choices,\n            initial,\n            hint: q.hint,\n            ...(q.kind === \"search\"\n              ? {\n                  suggest: async (input: string, all: Choice[]) => {\n                    const needle = input.trim().toLowerCase();\n                    return all.filter(\n                      (c) =>\n                        c.value.startsWith(NAV_PREFIX) ||\n                        c.title.toLowerCase().includes(needle) ||\n                        c.value.toLowerCase().includes(needle),\n                    );\n                  },\n                }\n              : {}),\n          } as prompts.PromptObject<\"answer\">,\n          { onCancel },\n        )) as { answer?: string };\n        if (cancelled || answer === undefined) return { nav: \"quit\" };\n        return fromChoice(answer);\n      }\n\n      const { answer } = (await prompts(\n        {\n          type: q.kind === \"secret\" ? \"password\" : \"text\",\n          name: \"answer\",\n          message: q.hint ? `${message} — ${q.hint}` : message,\n          // A secret's saved value is masked, so it can't pre-fill; Enter on\n          // an empty secret keeps what's saved.\n          ...(q.kind === \"text\" && q.current ? { initial: q.current } : {}),\n        },\n        { onCancel },\n      )) as { answer?: string };\n      if (cancelled || answer === undefined) return { nav: \"quit\" };\n      // Enter on a secret that's already saved keeps it: moving on without\n      // an answer is a skip, so a walk never saves an empty value over it.\n      if (q.kind === \"secret\" && q.current && answer === \"\") return { nav: \"skip\" };\n      return parseTyped(answer);\n    },\n\n    async menu(message, items) {\n      cancelled = false;\n      const { choice } = (await prompts(\n        {\n          type: \"select\",\n          name: \"choice\",\n          message,\n          choices: items.map((item) => ({\n            title: item.title,\n            value: item.value,\n            description: item.description,\n            disabled: item.disabled,\n          })),\n        },\n        { onCancel },\n      )) as { choice?: string };\n      if (cancelled || choice === undefined) return null;\n      return choice as (typeof items)[number][\"value\"];\n    },\n\n    note(text) {\n      process.stdout.write(`${text}\\n`);\n    },\n  };\n}\n\n/** A walk needs a person at a terminal; scripts and agents use the\n *  non-interactive commands it names. */\nexport function assertInteractive(\n  alternative: string,\n  isTTY: boolean = Boolean(process.stdin.isTTY && process.stdout.isTTY),\n): void {\n  if (!isTTY) {\n    throw new Error(\n      `walk asks questions in a terminal. In a script, use ${alternative}.`,\n    );\n  }\n}\n","/**\n * The canonical GitSync commit-subject format, shared by every kind of\n * Fluid-managed repository — Mist apps, Themes, Portals and Widgets.\n *\n * Each kind used to invent its own wording, so `git log` across a\n * company's repos read as four unrelated systems and only some commits\n * said who made them. One shape now covers all of them:\n *\n *   <Actor Name>: <Action> · <timestamp> (<public_id>)\n *   Mike Tingey: Publish portal Acme Portal · 2026-08-06 12:00:00 (0182d21e-…)\n *\n * Name and action come first so `git log --oneline` stays scannable in a\n * narrow terminal; the long UUID sits at the end where truncation eats\n * it instead of the prose. The timestamp is redundant with git's own\n * committer date but is kept inline because it survives cherry-picks,\n * rebases and the hosting providers' deployment feeds, which surface the\n * subject and nothing else.\n *\n * System-authored commits (auto-provisioning, sweeper retries, webhook\n * fan-out, an unreachable `/api/me`) use the literal actor name `Fluid`\n * and carry no UUID, so they parse with the same grammar rather than\n * needing a second one:\n *\n *   Fluid: Publish theme Aurora · 2026-08-06 12:00:00\n *\n * The Ruby side mirrors this in `GitSync::CommitSubject`\n * (fluid/app/models/git_sync/commit_subject.rb) and Mist Desktop mirrors\n * the parser in `apps/mist-desktop/src/shared/git-commit-subject.ts`.\n * Change all three together.\n */\n\n/** The person a commit is attributed to. */\nexport interface GitSyncActor {\n  /** Display name: full_name → first+last → email → `user-<id>`. */\n  readonly name: string;\n  /** The user's stable public UUID, rendered as a ` (uuid)` suffix. */\n  readonly publicId: string | null;\n}\n\n/** Actor name used when no human triggered the commit. */\nexport const SYSTEM_ACTOR_NAME = \"Fluid\";\n\n/** Parseable fallback when a caller supplies only grammar delimiters or\n * whitespace as the action (for example, `-m \"·\"`). */\nconst DEFAULT_ACTION = \"Sync changes\";\n\n/**\n * A subject broken back into its parts. `publicId` is null for\n * system-authored commits and for actors whose public id was unknown at\n * commit time.\n */\nexport interface ParsedGitSyncSubject {\n  readonly actorName: string;\n  readonly action: string;\n  /** The inline `YYYY-MM-DD HH:MM:SS` stamp, in UTC. */\n  readonly timestamp: string;\n  readonly publicId: string | null;\n}\n\n/**\n * Matches the canonical shape. The actor group is greedy so a display\n * name containing `\": \"` (e.g. `Tingey: Mike`) splits at the LAST colon\n * before the ` · ` separator — safe because {@link subjectFragment}\n * strips both delimiters out of every value we interpolate into an\n * action.\n */\nconst SUBJECT_RE =\n  /^(.+): (.+?) · (\\d{4}-\\d{2}-\\d{2} \\d{2}:\\d{2}:\\d{2})(?: \\(([^()]+)\\))?$/;\n\n/** `2026-08-06T12:00:00.000Z` → `2026-08-06 12:00:00`. */\nexport function formatCommitTimestamp(when: Date): string {\n  return when.toISOString().slice(0, 19).replace(\"T\", \" \");\n}\n\n/**\n * Neutralize the two sequences the grammar splits on, so no value can\n * shift the actor / action / uuid boundaries:\n *\n *   `\": \"` separates the actor from the action\n *   `\"·\"`  separates the action from the timestamp\n *\n * Only those exact sequences are replaced, not every colon — `12:30`\n * and `fix:handle-nulls` survive intact, because neither can be\n * mistaken for a field boundary. A trailing colon is likewise safe: the\n * parser backtracks past it.\n *\n * {@link gitSyncCommitSubject} applies this to every action, so callers\n * don't have to remember. It's idempotent, so calling it yourself on an\n * interpolated resource name (as the CLIs do) costs nothing.\n */\nexport function subjectFragment(value: string): string {\n  return value\n    .replace(/:\\s/g, \" \")\n    .replace(/·/g, \" \")\n    .replace(/\\s+/g, \" \")\n    .trim();\n}\n\n/**\n * Build a canonical commit subject.\n *\n * @param action - What happened, e.g. `Publish theme Aurora`. Run any\n *   interpolated resource name through {@link subjectFragment} first.\n * @param actor - The signed-in user, or null for system-authored\n *   commits (which are attributed to `Fluid`).\n * @param when - Injectable clock, so callers and tests get a stable\n *   stamp.\n */\nexport function gitSyncCommitSubject(\n  action: string,\n  actor: GitSyncActor | null,\n  when: Date = new Date(),\n): string {\n  // Sanitized HERE rather than at each call site. The action is the one\n  // field a user fully controls (`-m`), and a `\": \"` in it would be read\n  // back as part of the actor — `-m \"Publish: Acme\"` attributing the\n  // commit to \"Mike Tingey: Publish\". Doing it at the choke point means\n  // no current or future caller can reintroduce that.\n  //\n  // The actor name is deliberately NOT sanitized: a real name may\n  // contain `\": \"` (`Tingey: Mike`), and the greedy actor group parses\n  // that correctly precisely because the action can no longer contain\n  // the delimiter.\n  const safeAction = subjectFragment(action) || DEFAULT_ACTION;\n  const stamp = formatCommitTimestamp(when);\n  if (!actor) return `${SYSTEM_ACTOR_NAME}: ${safeAction} · ${stamp}`;\n  const idSuffix = actor.publicId ? ` (${actor.publicId})` : \"\";\n  return `${actor.name}: ${safeAction} · ${stamp}${idSuffix}`;\n}\n\n/**\n * Split a canonical subject back into its parts, or null when the\n * subject predates the format (legacy CLI wording such as `push @ <iso>`\n * or a hand-written commit). Callers fall back to rendering the raw\n * subject.\n */\nexport function parseGitSyncSubject(\n  subject: string | null | undefined,\n): ParsedGitSyncSubject | null {\n  if (!subject) return null;\n  const match = subject.trim().match(SUBJECT_RE);\n  if (!match) return null;\n  const [, actorName, action, timestamp, publicId] = match;\n  // The regex guarantees these groups, but noUncheckedIndexedAccess\n  // types them as possibly-undefined.\n  if (!actorName || !action || !timestamp) return null;\n  return {\n    actorName: actorName.trim(),\n    action: action.trim(),\n    timestamp,\n    publicId: publicId?.trim() || null,\n  };\n}\n\n/**\n * The person a canonical subject is attributed to, or null when the\n * subject isn't canonical or was system-authored. Use this for \"who\n * shipped this\" UI — a `Fluid:` commit has no human to name.\n */\nexport function gitSyncSubjectAuthor(\n  subject: string | null | undefined,\n): string | null {\n  const parsed = parseGitSyncSubject(subject);\n  if (!parsed || parsed.actorName === SYSTEM_ACTOR_NAME) return null;\n  return parsed.actorName;\n}\n\n/** The `/api/me` fields the actor is derived from. */\ninterface MeUser {\n  readonly id?: unknown;\n  readonly public_id?: unknown;\n  readonly full_name?: unknown;\n  readonly first_name?: unknown;\n  readonly last_name?: unknown;\n  readonly email?: unknown;\n}\n\n/** Some `/api/me` deployments nest the user, others return it flat. */\ninterface MeResponse extends MeUser {\n  readonly user?: MeUser;\n}\n\nfunction str(value: unknown): string | null {\n  if (typeof value === \"string\" && value.trim().length > 0) return value.trim();\n  return null;\n}\n\n/**\n * Resolve an `/api/me` body to a commit actor, with the name fallback\n * chain `full_name → first+last → email → user-<id>`. Returns null when\n * the body carries no usable identity at all, which callers treat the\n * same as an unreachable `/api/me`: a system-authored commit.\n */\nexport function gitSyncActorFromMe(raw: MeResponse): GitSyncActor | null {\n  const user = raw.user ?? raw;\n  const composed = [str(user.first_name), str(user.last_name)]\n    .filter((part): part is string => part !== null)\n    .join(\" \")\n    .trim();\n  const name =\n    str(user.full_name) ??\n    (composed.length > 0 ? composed : null) ??\n    str(user.email) ??\n    (typeof user.id === \"number\" && Number.isFinite(user.id)\n      ? `user-${user.id}`\n      : null);\n  if (!name) return null;\n  const publicId =\n    str(user.public_id) ??\n    (typeof user.id === \"number\" && Number.isFinite(user.id)\n      ? String(user.id)\n      : null);\n  return { name, publicId };\n}\n","/**\n * Turn a set of changed paths into the `<Action>` half of a canonical\n * GitSync commit subject (see commit-subject.ts).\n *\n * Publishes used to be stamped with a constant — \"Publish from Mist\n * Desktop\", \"Publish theme Aurora\" — so `git log` told you a publish\n * happened but never what it carried. Every entry in the history looked\n * identical, which made the log useless for finding the commit that\n * introduced something.\n *\n * This derives a short, honest phrase from the staged diff:\n *\n *   Update templates/product.liquid\n *   Update 3 files in templates\n *   Add 2 files, update 3, delete 1\n *\n * It is deliberately mechanical. A caller that knows the INTENT behind a\n * change (Mist Desktop, or a human passing `-m`) should pass that\n * instead — an intent describes why, and no diff can recover that. This\n * is the fallback for when nobody supplied one.\n *\n * Pure: callers collect the diff (each CLI has its own git layer) and\n * hand the entries here, so the wording can't drift between kinds.\n */\n\n/** Git's porcelain status letters, narrowed to what we act on. */\nexport type ChangeStatus = \"added\" | \"modified\" | \"deleted\" | \"renamed\";\n\n/**\n * What an auto-commit helper accepts as its subject: either a literal\n * (the caller already knows the intent — a `-m` message), or a resolver\n * handed the staged changes so it can describe them.\n *\n * The resolver form exists because staging is decided INSIDE the commit\n * helpers — they `git add -A` and then unstage private paths — so only\n * they know the final file set. A summary built by the caller beforehand\n * would describe a diff the commit doesn't carry.\n *\n * It may return a promise so a caller can start slow work (an `/api/me`\n * identity lookup, say) BEFORE the git reconcile and await it here, at\n * the last possible moment — overlapping it with the fetch/merge instead\n * of paying for it serially up front. Anything awaited here is on the\n * critical path of the commit, so it must be bounded and best-effort:\n * a publish must never hang waiting to describe itself.\n */\nexport type CommitMessage =\n  | string\n  | ((changes: readonly ChangeEntry[]) => string | Promise<string>);\n\nexport interface ChangeEntry {\n  readonly status: ChangeStatus;\n  /** Repo-relative path, forward-slashed. */\n  readonly path: string;\n}\n\n/** Map a `git diff --name-status` letter to a status. `R`/`C` carry a\n *  similarity score (`R100`), so only the leading letter is read.\n *  Unknown letters (`U` unmerged, `T` typechange) count as modified —\n *  the file did change, and mislabeling the verb is better than\n *  dropping it from the count. */\nexport function changeStatusFromCode(code: string): ChangeStatus {\n  switch (code.trim().charAt(0).toUpperCase()) {\n    case \"A\":\n      return \"added\";\n    case \"D\":\n      return \"deleted\";\n    case \"R\":\n      return \"renamed\";\n    default:\n      return \"modified\";\n  }\n}\n\n/**\n * Parse `git diff --cached --name-status -z` output.\n *\n * NUL-delimited on purpose: paths containing spaces, quotes or newlines\n * are legal in git and common in themes (`assets/hero image.png`), and\n * the newline-delimited form quotes and escapes them, which would corrupt\n * both the count and the path. With `-z`, records are\n * `status\\0path\\0` — except renames and copies, which are\n * `status\\0from\\0to\\0` and consume an extra field.\n */\nexport function parseNameStatusZ(stdout: string): ChangeEntry[] {\n  const fields = stdout.split(\"\\0\").filter((f) => f.length > 0);\n  const entries: ChangeEntry[] = [];\n  for (let i = 0; i < fields.length; ) {\n    const code = fields[i];\n    if (code === undefined) break;\n    const status = changeStatusFromCode(code);\n    if (status === \"renamed\") {\n      // status, from, to — the destination is the path we report.\n      const to = fields[i + 2];\n      if (to === undefined) break;\n      entries.push({ status, path: to });\n      i += 3;\n      continue;\n    }\n    const path = fields[i + 1];\n    if (path === undefined) break;\n    entries.push({ status, path });\n    i += 2;\n  }\n  return entries;\n}\n\n/** Top-level directory of a path, or null for a repo-root file. */\nfunction topLevelDir(path: string): string | null {\n  const slash = path.indexOf(\"/\");\n  return slash > 0 ? path.slice(0, slash) : null;\n}\n\nfunction plural(count: number, noun: string): string {\n  return `${count} ${noun}${count === 1 ? \"\" : \"s\"}`;\n}\n\nconst VERB_FOR: Record<ChangeStatus, string> = {\n  added: \"Add\",\n  modified: \"Update\",\n  deleted: \"Delete\",\n  renamed: \"Rename\",\n};\n\n/**\n * Build the action phrase for a set of changes, or null when there is\n * nothing to describe — the caller then falls back to its own constant\n * (`Publish theme Aurora`), so an empty diff never produces a subject\n * like \"Update 0 files\".\n *\n * @param entries - The staged changes.\n * @param maxLength - Clip the result to keep `git log --oneline`\n *   readable. The subject also carries a name, timestamp and UUID, so\n *   the action gets a modest budget.\n */\nexport function summarizeChanges(\n  entries: readonly ChangeEntry[],\n  maxLength = 72,\n): string | null {\n  if (entries.length === 0) return null;\n\n  // A single change is the most useful case and the most common one:\n  // name the actual file rather than counting to one.\n  if (entries.length === 1) {\n    const only = entries[0]!;\n    return clip(`${VERB_FOR[only.status]} ${only.path}`, maxLength);\n  }\n\n  // Group by verb, ordered so the dominant kind of change leads.\n  const byStatus = new Map<ChangeStatus, number>();\n  for (const entry of entries) {\n    byStatus.set(entry.status, (byStatus.get(entry.status) ?? 0) + 1);\n  }\n\n  // All one verb → \"Update 3 files\", plus a location when they share one.\n  if (byStatus.size === 1) {\n    const status = entries[0]!.status;\n    const dirs = new Set(entries.map((e) => topLevelDir(e.path)));\n    const only = dirs.size === 1 ? [...dirs][0] : null;\n    const phrase = `${VERB_FOR[status]} ${plural(entries.length, \"file\")}`;\n    return clip(only ? `${phrase} in ${only}` : phrase, maxLength);\n  }\n\n  // Mixed → lead with the largest group, then the rest as bare counts:\n  // \"Update 3 files, add 2, delete 1\".\n  const ordered = [...byStatus.entries()].sort(\n    ([aStatus, aCount], [bStatus, bCount]) =>\n      bCount - aCount || VERB_FOR[aStatus].localeCompare(VERB_FOR[bStatus]),\n  );\n  const [leadStatus, leadCount] = ordered[0]!;\n  const rest = ordered\n    .slice(1)\n    .map(([status, count]) => `${VERB_FOR[status].toLowerCase()} ${count}`);\n  const head = `${VERB_FOR[leadStatus]} ${plural(leadCount, \"file\")}`;\n  return clip([head, ...rest].join(\", \"), maxLength);\n}\n\nfunction clip(text: string, maxLength: number): string {\n  return text.length > maxLength\n    ? `${text.slice(0, maxLength - 1).trimEnd()}…`\n    : text;\n}\n","/**\n * Cache the signed-in user's commit identity on the active profile.\n *\n * Commit subjects are stamped `<name>: <action> · <ts> (<public_id>)`,\n * which needs the user's display name and public id. `/api/me` is the\n * only source, and it can be slow — so paying for it on EVERY push, to\n * learn a name that changes approximately never, is the wrong trade.\n *\n * The identity is stored per profile (profiles are per token + company,\n * so the cache can't leak across accounts) and refreshed only when\n * missing or stale. Login and company-switch write a fresh profile,\n * which drops the cached identity with it.\n *\n * Every failure mode here is non-fatal: an unreadable or unwritable\n * config just means we fall back to the network, and a failed network\n * lookup means a `Fluid:` system commit. A publish must never fail\n * because we couldn't work out whose name to put on it.\n */\n\nimport { readConfig, updateConfig } from \"../config/config.js\";\nimport type { GitSyncActor } from \"./commit-subject.js\";\n\n/**\n * How long a cached identity is trusted. Long, because a display name\n * changing is rare — but not forever, so a rename does eventually reach\n * the commit log without the user having to re-login.\n */\nexport const ACTOR_CACHE_TTL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days\n\n/** Cached identity as persisted on a profile. */\nexport interface CachedGitSyncActor {\n  readonly name: string;\n  readonly publicId: string | null;\n  /** ISO-8601. */\n  readonly cachedAt: string;\n}\n\nfunction isFresh(cached: CachedGitSyncActor, now: number): boolean {\n  const at = Date.parse(cached.cachedAt);\n  // An unparseable timestamp is treated as stale rather than trusted\n  // forever — a corrupt field shouldn't pin a wrong name permanently.\n  if (Number.isNaN(at)) return false;\n  return now - at < ACTOR_CACHE_TTL_MS;\n}\n\n/** The cached identity for the active profile, or null. */\nexport function readCachedActor(now = Date.now()): GitSyncActor | null {\n  try {\n    const config = readConfig();\n    const profileName = config.activeProfile;\n    if (!profileName) return null;\n    const cached = config.profiles[profileName]?.gitSyncActor;\n    if (!cached || !cached.name || !isFresh(cached, now)) return null;\n    return { name: cached.name, publicId: cached.publicId ?? null };\n  } catch {\n    return null;\n  }\n}\n\n/** Persist an identity against the active profile. Best-effort. */\nexport function writeCachedActor(actor: GitSyncActor, now = new Date()): void {\n  try {\n    updateConfig((config) => {\n      const profileName = config.activeProfile;\n      if (!profileName) return config;\n      const profile = config.profiles[profileName];\n      if (!profile) return config;\n      return {\n        ...config,\n        profiles: {\n          ...config.profiles,\n          [profileName]: {\n            ...profile,\n            gitSyncActor: {\n              name: actor.name,\n              publicId: actor.publicId,\n              cachedAt: now.toISOString(),\n            },\n          },\n        },\n      };\n    });\n  } catch {\n    // A read-only or malformed config just means we look it up again\n    // next time — never a reason to fail a publish.\n  }\n}\n\n/**\n * The commit identity, from cache when possible.\n *\n * @param fetchActor - Network lookup, used only on a cache miss. Each\n *   CLI has its own client, so the caller supplies it. It must already\n *   be bounded — this function adds no timeout of its own.\n *\n * Returns null when there's no cache and the lookup fails or yields no\n * usable identity; callers then write a `Fluid:` system commit.\n */\nexport async function resolveGitSyncActor(\n  fetchActor: () => Promise<GitSyncActor | null>,\n): Promise<GitSyncActor | null> {\n  const cached = readCachedActor();\n  if (cached) return cached;\n\n  const fetched = await fetchActor().catch(() => null);\n  if (fetched) writeCachedActor(fetched);\n  return fetched;\n}\n"],"mappings":";;;;;;;;;AAgDA,SAAgB,eAAe,OAA8B;AAC3D,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;AAGT,QAAO;;;;;;;;AAST,SAAgB,eAAe,MAAkC;AAC/D,KAAI,CAAC,KACH,QAAO;AAGT,QAAQ,KAAK,UAAU;;;;;;;ACOzB,IAAa,WAAb,MAAa,iBAAiB,MAAM;CAClC;;;;;CAMA;;;;;CAMA;CAEA;CAEA,YACE,SACA,QACA,MACA,WACA,MACA;AACA,QAAM,QAAQ;AACd,OAAK,OAAO;AACZ,OAAK,SAAS;AACd,OAAK,OAAO,QAAQ;AACpB,OAAK,OAAO,QAAQ;AACpB,OAAK,YAAY;AAEjB,MAAI,uBAAuB,MAEvB,OAMA,kBAAkB,MAAM,SAAS;;CAIvC,SAOE;AACA,SAAO;GACL,MAAM,KAAK;GACX,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,MAAM,KAAK;GACX,MAAM,KAAK;GACX,WAAW,KAAK;GACjB;;;AAIL,SAAS,mBAAmB,OAAoC;AAC9D,KAAI,OAAO,UAAU,SACnB;CAGF,MAAM,UAAU,MAAM,MAAM;AAC5B,QAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;;AAGxC,SAAS,wBAAwB,SAAsC;AACrE,QACE,mBAAmB,QAAQ,IAAI,eAAe,CAAC,IAC/C,mBAAmB,QAAQ,IAAI,aAAa,CAAC,IAC7C,mBAAmB,QAAQ,IAAI,eAAe,CAAC;;AAInD,SAAS,yBAAyB,MAAmC;AACnE,KAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,KAAK,CAC1D;CAGF,MAAM,SAAS;CACf,MAAM,OAAO,OAAO;AAEpB,QACE,mBAAmB,OAAO,WAAW,IACrC,mBAAmB,OAAO,UAAU,KACnC,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACpD,mBAAoB,KAAiC,WAAW,IACjE,mBAAoB,KAAiC,UAAU,GAC/D,KAAA;;;;;AAoDR,SAAgB,kBACd,QACqB;CACrB,MAAM,EACJ,SACA,cACA,aACA,iBAAiB,EAAE,EACnB,aACA,OACA,cACA,qBAAqB,UACnB;CACJ,MAAM,oBAAoB,KAAK,IAAI,GAAG,cAAc,cAAc,EAAE;CACpE,MAAM,0BAA0B,KAAK,IAAI,GAAG,cAAc,eAAe,EAAE;;;;CAK3E,eAAe,aACb,eACiC;EACjC,MAAM,UAAkC;GACtC,QAAQ;GACR,gBAAgB;GAChB,GAAG;GACH,GAAG;GACJ;AAGD,MAAI,cAAc;GAChB,MAAM,QAAQ,MAAM,cAAc;AAClC,OAAI,MACF,SAAQ,gBAAgB,UAAU;;AAItC,SAAO;;;;;;;CAQT,SAAS,QAAQ,UAA0B;AACzC,SAAO,GAAG,UAAU;;;;;;CAOtB,SAAS,SACP,UACA,QACQ;EACR,MAAM,UAAU,QAAQ,SAAS;AAEjC,MAAI,CAAC,UAAU,OAAO,KAAK,OAAO,CAAC,WAAW,EAC5C,QAAO;EAGT,MAAM,cAAc,IAAI,iBAAiB;AAEzC,SAAO,QAAQ,OAAO,CAAC,SAAS,CAAC,KAAK,WAAW;AAC/C,OAAI,UAAU,KAAA,KAAa,UAAU,KACnC;AAGF,OAAI,MAAM,QAAQ,MAAM,EAAE;IAMxB,MAAM,WAAW,IAAI,SAAS,KAAK,GAAG,MAAM,GAAG,IAAI;AACnD,UAAM,SAAS,SAAS,YAAY,OAAO,UAAU,OAAO,KAAK,CAAC,CAAC;cAC1D,OAAO,UAAU,SAE1B,QAAO,QAAQ,MAAM,CAAC,SAAS,CAAC,QAAQ,cAAc;AACpD,QAAI,aAAa,KAAA,KAAa,aAAa,KACzC;AAGF,QAAI,MAAM,QAAQ,SAAS,CACzB,UAAS,SAAS,SAChB,YAAY,OAAO,GAAG,IAAI,GAAG,OAAO,MAAM,OAAO,KAAK,CAAC,CACxD;QAED,aAAY,OAAO,GAAG,IAAI,GAAG,OAAO,IAAI,OAAO,SAAS,CAAC;KAE3D;OAEF,aAAY,OAAO,KAAK,OAAO,MAAM,CAAC;IAExC;EAEF,MAAM,KAAK,YAAY,UAAU;AACjC,SAAO,KAAK,GAAG,QAAQ,GAAG,OAAO;;;;;;CAOnC,eAAe,eACb,UACA,QACA,MACoB;EACpB,MAAM,kBAAkB,wBAAwB,SAAS,QAAQ;AAEjE,MAAI,SAAS,WAAW,OAAO,YAC7B,cAAa;AAGf,MAAI,CAAC,SAAS,IAAI;GAGhB,MAAM,YAAY,MAAM,SAAS,MAAM,CAAC,YAAY,GAAG;AAGvD,OAFoB,SAAS,QAAQ,IAAI,eAAe,EAEvC,SAAS,mBAAmB,EAAE;IAI7C,IAAI;AACJ,QAAI;AACF,cAAS,KAAK,MAAM,UAAU;YACxB;AACN,WAAM,IAAI,SACR,UAAU,MAAM,GAAG,IAAI,IACrB,GAAG,OAAO,8BAA8B,SAAS,UACnD,SAAS,QACT,MACA,gBACD;;IAGH,MAAM,OAAO,eAAe,OAAO;AA2BnC,UAAM,IAAI,UAvBE,cACD;KACL,MAAM,cACJ,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,OAC5C,KAAK,MAAgC,UACtC,KAAA;KACN,MAAM,cACJ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;KAChD,MAAM,UACJ,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAA;KACpD,MAAM,eACJ,OAAO,KAAK,kBAAkB,WAC1B,KAAK,gBACL,KAAA;AACN,YACE,WACA,gBACA,gBACC,OAAO,gBAAgB,WAAW,cAAc,KAAA;QAEjD,GACJ,KAAA,MAGK,GAAG,OAAO,8BAA8B,SAAS,UACxD,SAAS,QACT,OAAO,eAAe,KAAK,GAAI,QAC/B,mBAAmB,yBAAyB,OAAO,EACnD,KACD;SAED,OAAM,IAAI,SACR,GAAG,OAAO,8BAA8B,SAAS,UACjD,SAAS,QACT,MACA,gBACD;;AAIL,MACE,SAAS,WAAW,OACpB,SAAS,QAAQ,IAAI,iBAAiB,KAAK,IAE3C,QAAO;AAKT,MAFoB,SAAS,QAAQ,IAAI,eAAe,EAEvC,SAAS,mBAAmB,EAAE;GAC7C,MAAM,eAAe,MAAM,SAAS,MAAM;AAE1C,OAAI;AAEF,WADa,KAAK,MAAM,aAAa;WAE/B;AACN,QAAI,mBACF,OAAM,IAAI,SACR,oCACA,SAAS,QACT,MACA,gBACD;AAKH,WAAO,eAAgB,eAA8B;;;AAKzD,SAAO;;CAGT,SAAS,uBAAuB,cAA8B;AAC5D,SAAO,0BAA0B,MAAM,eAAe;;CAGxD,eAAe,oBAAoB,cAAqC;EACtE,MAAM,UAAU,uBAAuB,aAAa;AACpD,MAAI,WAAW,EACb;AAGF,QAAM,IAAI,SAAS,YAAY,WAAW,SAAS,QAAQ,CAAC;;CAG9D,eAAe,sBACb,KACA,cACA,QACmB;EACnB,IAAI,aAAa;AAEjB,SAAO,KACL,KAAI;AACF,UAAO,MAAM,MAAM,KAAK,aAAa;WAC9B,cAAc;AACrB,OAAI,QAAQ,WAAW,cAAc,kBACnC,OAAM;AAGR,iBAAc;AACd,SAAM,oBAAoB,WAAW;AAErC,OAAI,QAAQ,QACV,OAAM;;;;;;CASd,eAAe,QACb,UACA,UAA0B,EAAE,EACR;EACpB,MAAM,EACJ,SAAS,OACT,SAAS,eACT,QACA,MACA,QACA,aACE;EAEJ,MAAM,MAAM,SAAS,SAAS,UAAU,OAAO,GAAG,QAAQ,SAAS;EAEnE,MAAM,UAAU,MAAM,aAAa,cAAc;EAEjD,IAAI;AAEJ,MAAI;GACF,MAAM,eAA4B;IAAE;IAAQ;IAAS;AACrD,OAAI,YAAa,cAAa,cAAc;AAC5C,OAAI,MAAO,cAAa,QAAQ;AAChC,OAAI,SAAU,cAAa,WAAW;GACtC,MAAM,iBACJ,QAAQ,WAAW,QAAQ,KAAK,UAAU,KAAK,GAAG;AACpD,OAAI,eAAgB,cAAa,OAAO;AACxC,OAAI,OAAQ,cAAa,SAAS;AAClC,cAAW,MAAM,sBAAsB,KAAK,cAAc,OAAO;WAC1D,cAAc;AACrB,SAAM,IAAI,SACR,kBAAkB,wBAAwB,QAAQ,aAAa,UAAU,2BACzE,GACA,KACD;;AAGH,SAAO,eAA0B,UAAU,QAAQ,IAAI;;;;;CAMzD,eAAe,oBACb,UACA,UACA,UAEI,EAAE,EACc;EACpB,MAAM,EACJ,SAAS,QACT,SAAS,eACT,QACA,aACE;EAEJ,MAAM,MAAM,QAAQ,SAAS;EAC7B,MAAM,UAAU,MAAM,aAAa,cAAc;AAGjD,SAAO,QAAQ;EAEf,IAAI;AAEJ,MAAI;GACF,MAAM,eAA4B;IAAE;IAAQ;IAAS,MAAM;IAAU;AACrE,OAAI,YAAa,cAAa,cAAc;AAC5C,OAAI,MAAO,cAAa,QAAQ;AAChC,OAAI,SAAU,cAAa,WAAW;AACtC,OAAI,OAAQ,cAAa,SAAS;AAClC,cAAW,MAAM,sBAAsB,KAAK,cAAc,OAAO;WAC1D,cAAc;AACrB,SAAM,IAAI,SACR,kBAAkB,wBAAwB,QAAQ,aAAa,UAAU,2BACzE,GACA,KACD;;AAGH,SAAO,eAA0B,UAAU,QAAQ,IAAI;;AAIzD,QAAO;EACI;EACY;EAGrB,MACE,UACA,QACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR,GAAI,UAAU,EAAE,QAAQ;GACzB,CAAC;EAEJ,OACE,UACA,MACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR;GACD,CAAC;EAEJ,MACE,UACA,MACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR;GACD,CAAC;EAEJ,QACE,UACA,MACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACR;GACD,CAAC;EAEJ,SACE,UACA,YAEA,QAAmB,UAAU;GAC3B,GAAG;GACH,QAAQ;GACT,CAAC;EACL;;;;AC1mBH,SAAgB,aAAa,MAAe,SAAgC;CAC1E,IAAI,SAAS;AAEb,KAAI,QAAQ,GACV,UAAS,YAAY,QAAQ,QAAQ,GAAG;AAG1C,KAAI,QAAQ,WAAW,QACrB,QAAO,YAAY,OAAO;AAG5B,KAAI,QAAQ,QACV,QAAO,KAAK,UAAU,OAAO;AAE/B,QAAO,KAAK,UAAU,QAAQ,MAAM,EAAE;;AAGxC,SAAS,YAAY,MAAe,MAAuB;CACzD,MAAM,QAAQ,KACX,QAAQ,QAAQ,GAAG,CACnB,MAAM,QAAQ,CACd,OAAO,QAAQ,CACf,KAAK,MAAM,EAAE,QAAQ,OAAO,GAAG,CAAC;CAEnC,IAAI,UAAe;AACnB,MAAK,MAAM,QAAQ,OAAO;AACxB,MAAI,WAAW,KAAM,QAAO,KAAA;AAC5B,YAAU,QAAQ;;AAEpB,QAAO;;AAGT,SAAS,YAAY,MAAuB;AAC1C,KAAI,MAAM,QAAQ,KAAK,EAAE;AACvB,MAAI,KAAK,WAAW,EAAG,QAAO;AAE9B,MAAI,OAAO,KAAK,OAAO,YAAY,KAAK,OAAO,MAAM;GACnD,MAAM,OAAO,OAAO,KAAK,KAAK,GAAG;GACjC,MAAM,SAAS,KAAK,KAAK,MACvB,KAAK,IAAI,EAAE,QAAQ,GAAG,KAAK,KAAK,QAAQ,OAAO,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,CACtE;AAUD,UAAO;IARQ,KACZ,KAAK,GAAG,MAAM,EAAE,aAAa,CAAC,OAAO,OAAO,GAAI,CAAC,CACjD,KAAK,KAAK;IACK,OAAO,KAAK,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC,KAAK,KAAK;IAKlC,GAJd,KAAK,KAAK,QACrB,KAAK,KAAK,GAAG,MAAM,OAAO,IAAI,MAAM,GAAG,CAAC,OAAO,OAAO,GAAI,CAAC,CAAC,KAAK,KAAK,CACvE;IAEkC,CAAC,KAAK,KAAK;;AAGhD,SAAO,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK;;AAGpC,KAAI,OAAO,SAAS,YAAY,SAAS,MAAM;EAC7C,MAAM,UAAU,OAAO,QAAQ,KAAK;EACpC,MAAM,YAAY,KAAK,IAAI,GAAG,QAAQ,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;AAC7D,SAAO,QACJ,KAAK,CAAC,GAAG,OAAO,GAAG,EAAE,OAAO,UAAU,CAAC,IAAI,KAAK,UAAU,EAAE,GAAG,CAC/D,KAAK,KAAK;;AAGf,QAAO,OAAO,KAAK;;;;AC1DrB,SAAgB,qBAAqB,MAQlB;CACjB,IAAI,iBAAqC;CAEzC,MAAM,gBAA+B;EACnC,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,IAAI,KAAK;EACV;CAED,SAAS,eAAuB;EAC9B,MAAM,QAAQ,aAAa,KAAK;AAChC,MAAI,MAAO,QAAO;AAClB,MAAI,KAAK,QACP,OAAM,IAAI,MACR,mCAAmC,KAAK,QAAQ,oEACjD;AAEH,QAAM,IAAI,MACR,mEACD;;AAGH,QAAO;EACL,SAAS,KAAK;EAEd,MAAM,YAAkC;AACtC,OAAI,eAAgB,QAAO;GAE3B,MAAM,QAAQ,cAAc;AAM5B,oBAAiB,kBAAkB;IACjC,SALA,KAAK,WACL,QAAQ,IAAI,qBACZ;IAIA,oBAAoB;IACrB,CAAC;AAEF,UAAO;;EAGT,MAAM,aAAa,gBAA8C;GAC/D,MAAM,QAAQ,cAAc;AAC5B,UAAO,kBAAkB;IACvB,SAAS,eAAe,QAAQ,OAAO,GAAG;IAC1C,oBAAoB;IACrB,CAAC;;EAGJ,OAAO,MAAqB;GAC1B,MAAM,YAAY,aAAa,MAAM,cAAc;AACnD,WAAQ,OAAO,MAAM,YAAY,KAAK;;EAGxC,UAAU,KAAsB;AAC9B,OAAI;AACF,WAAO,KAAK,MAAM,IAAI;WAChB;AACN,UAAM,IAAI,MAAM,sBAAsB,MAAM;;;EAGjD;;AAGH,SAAS,aAAa,MAGJ;AAChB,KAAI,KAAK,MAAO,QAAO,KAAK;AAE5B,KAAI,KAAK,QAAS,QAAO,aAAa,KAAK,QAAQ;CAEnD,MAAM,WAAW,QAAQ,IAAI,kBAAkB,QAAQ,IAAI;AAC3D,KAAI,SAAU,QAAO;CAGrB,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK,CAAC;AACtD,KAAI,eAAe,SAAS;EAC1B,MAAM,UAAU,aAAa,cAAc,QAAQ;AACnD,MAAI,QAAS,QAAO;;AAGtB,QAAO,cAAc;;;;AC5FvB,SAAgB,oBACd,MACA,aACA,UACS;CACT,MAAM,MAAM,IAAI,QAAQ,KAAK,CAC1B,YAAY,YAAY,CAExB,wBAAwB,MAAM,CAC9B,OAAO,mBAAmB,2BAA2B,CACrD,OAAO,oBAAoB,eAAe,CAC1C,OAAO,oBAAoB,sBAAsB,CACjD,OAAO,qBAAqB,8BAA8B,OAAO,CACjE,OAAO,aAAa,uBAAuB,MAAM,CACjD,OAAO,eAAe,6BAA6B,CACnD,OAAO,aAAa,mCAAmC,MAAM;CAEhE,IAAI,cAAqC;CAEzC,SAAS,SAAyB;AAChC,MAAI,CAAC,aAAa;GAChB,MAAM,OAAO,IAAI,MAAM;AACvB,iBAAc,qBAAqB;IACjC,OAAO,KAAK;IACZ,SAAS,KAAK;IACd,SAAS,KAAK;IACd,QAAQ,KAAK;IACb,SAAS,KAAK;IACd,IAAI,KAAK;IACT,SAAS,KAAK;IACf,CAAC;;AAEJ,SAAO;;AAqBT,UAAS,KAlBuB;EAC9B,IAAI,UAAU;AACZ,UAAO,QAAQ,CAAC;;EAElB,YAAY;AACV,UAAO,QAAQ,CAAC,WAAW;;EAE7B,aAAa,SAAiB;AAC5B,UAAO,QAAQ,CAAC,aAAa,QAAQ;;EAEvC,OAAO,MAAe;AACpB,UAAO,QAAQ,CAAC,OAAO,KAAK;;EAE9B,UAAU,KAAa;AACrB,UAAO,QAAQ,CAAC,UAAU,IAAI;;EAEjC,CAEqB;AAEtB,QAAO;;;;ACdT,MAAa,WACX;AAEF,MAAM,YAAiC;CAAE,KAAK;CAAQ,KAAK;CAAQ,KAAK;CAAQ;;AAGhF,SAAgB,WAAW,KAAoB;CAC7C,MAAM,MAAM,UAAU,IAAI,MAAM;AAChC,QAAO,MAAM,EAAE,KAAK,GAAG,EAAE,OAAO,KAAK;;AAKvC,MAAM,aAAa;AAEnB,SAAS,WAAW,WAA8B;AAChD,QAAO;EACL,GAAI,YAAY,CAAC;GAAE,OAAO;GAAU,OAAO,GAAG,WAAW;GAAO,CAAC,GAAG,EAAE;EACtE;GAAE,OAAO;GAAU,OAAO,GAAG,WAAW;GAAO;EAC/C;GAAE,OAAO;GAAS,OAAO,GAAG,WAAW;GAAO;EAC/C;;AAGH,SAAS,WAAW,OAAsB;AACxC,QAAO,MAAM,WAAW,WAAW,GAC/B,EAAE,KAAK,MAAM,MAAM,EAAkB,EAAS,GAC9C,EAAE,OAAO;;;AAIf,SAAgB,mBAA6B;CAC3C,IAAI,YAAY;CAChB,MAAM,iBAAiB;AACrB,cAAY;AACZ,SAAO;;AAGT,QAAO;EACL,MAAM,IAAI,GAAG;AACX,eAAY;AACZ,OAAI,EAAE,QAAS,SAAQ,OAAO,MAAM,KAAK,EAAE,QAAQ,IAAI;GACvD,MAAM,UAAU,EAAE,UACd,GAAG,EAAE,QAAQ,WAAW,EAAE,QAAQ,KAClC,EAAE;AAEN,OAAI,EAAE,SAAS,YAAY,EAAE,SAAS,UAAU;IAC9C,MAAM,UAAU,CAAC,GAAI,EAAE,WAAW,EAAE,EAAG,GAAG,WAAW,EAAE,UAAU,CAAC;IAClE,MAAM,UAAU,KAAK,IACnB,GACA,QAAQ,WAAW,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CACzE;IACD,MAAM,EAAE,WAAY,MAAM,QACxB;KACE,MAAM,EAAE,SAAS,WAAW,iBAAiB;KAC7C,MAAM;KACN;KACA;KACA;KACA,MAAM,EAAE;KACR,GAAI,EAAE,SAAS,WACX,EACE,SAAS,OAAO,OAAe,QAAkB;MAC/C,MAAM,SAAS,MAAM,MAAM,CAAC,aAAa;AACzC,aAAO,IAAI,QACR,MACC,EAAE,MAAM,WAAW,WAAW,IAC9B,EAAE,MAAM,aAAa,CAAC,SAAS,OAAO,IACtC,EAAE,MAAM,aAAa,CAAC,SAAS,OAAO,CACzC;QAEJ,GACD,EAAE;KACP,EACD,EAAE,UAAU,CACb;AACD,QAAI,aAAa,WAAW,KAAA,EAAW,QAAO,EAAE,KAAK,QAAQ;AAC7D,WAAO,WAAW,OAAO;;GAG3B,MAAM,EAAE,WAAY,MAAM,QACxB;IACE,MAAM,EAAE,SAAS,WAAW,aAAa;IACzC,MAAM;IACN,SAAS,EAAE,OAAO,GAAG,QAAQ,KAAK,EAAE,SAAS;IAG7C,GAAI,EAAE,SAAS,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,GAAG,EAAE;IACjE,EACD,EAAE,UAAU,CACb;AACD,OAAI,aAAa,WAAW,KAAA,EAAW,QAAO,EAAE,KAAK,QAAQ;AAG7D,OAAI,EAAE,SAAS,YAAY,EAAE,WAAW,WAAW,GAAI,QAAO,EAAE,KAAK,QAAQ;AAC7E,UAAO,WAAW,OAAO;;EAG3B,MAAM,KAAK,SAAS,OAAO;AACzB,eAAY;GACZ,MAAM,EAAE,WAAY,MAAM,QACxB;IACE,MAAM;IACN,MAAM;IACN;IACA,SAAS,MAAM,KAAK,UAAU;KAC5B,OAAO,KAAK;KACZ,OAAO,KAAK;KACZ,aAAa,KAAK;KAClB,UAAU,KAAK;KAChB,EAAE;IACJ,EACD,EAAE,UAAU,CACb;AACD,OAAI,aAAa,WAAW,KAAA,EAAW,QAAO;AAC9C,UAAO;;EAGT,KAAK,MAAM;AACT,WAAQ,OAAO,MAAM,GAAG,KAAK,IAAI;;EAEpC;;;;AAKH,SAAgB,kBACd,aACA,QAAiB,QAAQ,QAAQ,MAAM,SAAS,QAAQ,OAAO,MAAM,EAC/D;AACN,KAAI,CAAC,MACH,OAAM,IAAI,MACR,uDAAuD,YAAY,GACpE;;;;;AC5IL,MAAa,oBAAoB;;;AAIjC,MAAM,iBAAiB;;;;;;;;AAsBvB,MAAM,aACJ;;AAGF,SAAgB,sBAAsB,MAAoB;AACxD,QAAO,KAAK,aAAa,CAAC,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,IAAI;;;;;;;;;;;;;;;;;;AAmB1D,SAAgB,gBAAgB,OAAuB;AACrD,QAAO,MACJ,QAAQ,QAAQ,IAAI,CACpB,QAAQ,MAAM,IAAI,CAClB,QAAQ,QAAQ,IAAI,CACpB,MAAM;;;;;;;;;;;;AAaX,SAAgB,qBACd,QACA,OACA,uBAAa,IAAI,MAAM,EACf;CAWR,MAAM,aAAa,gBAAgB,OAAO,IAAI;CAC9C,MAAM,QAAQ,sBAAsB,KAAK;AACzC,KAAI,CAAC,MAAO,QAAO,GAAG,kBAAkB,IAAI,WAAW,KAAK;CAC5D,MAAM,WAAW,MAAM,WAAW,KAAK,MAAM,SAAS,KAAK;AAC3D,QAAO,GAAG,MAAM,KAAK,IAAI,WAAW,KAAK,QAAQ;;;;;;;;AASnD,SAAgB,oBACd,SAC6B;AAC7B,KAAI,CAAC,QAAS,QAAO;CACrB,MAAM,QAAQ,QAAQ,MAAM,CAAC,MAAM,WAAW;AAC9C,KAAI,CAAC,MAAO,QAAO;CACnB,MAAM,GAAG,WAAW,QAAQ,WAAW,YAAY;AAGnD,KAAI,CAAC,aAAa,CAAC,UAAU,CAAC,UAAW,QAAO;AAChD,QAAO;EACL,WAAW,UAAU,MAAM;EAC3B,QAAQ,OAAO,MAAM;EACrB;EACA,UAAU,UAAU,MAAM,IAAI;EAC/B;;;;;;;AAQH,SAAgB,qBACd,SACe;CACf,MAAM,SAAS,oBAAoB,QAAQ;AAC3C,KAAI,CAAC,UAAU,OAAO,cAAA,QAAiC,QAAO;AAC9D,QAAO,OAAO;;AAkBhB,SAAS,IAAI,OAA+B;AAC1C,KAAI,OAAO,UAAU,YAAY,MAAM,MAAM,CAAC,SAAS,EAAG,QAAO,MAAM,MAAM;AAC7E,QAAO;;;;;;;;AAST,SAAgB,mBAAmB,KAAsC;CACvE,MAAM,OAAO,IAAI,QAAQ;CACzB,MAAM,WAAW,CAAC,IAAI,KAAK,WAAW,EAAE,IAAI,KAAK,UAAU,CAAC,CACzD,QAAQ,SAAyB,SAAS,KAAK,CAC/C,KAAK,IAAI,CACT,MAAM;CACT,MAAM,OACJ,IAAI,KAAK,UAAU,KAClB,SAAS,SAAS,IAAI,WAAW,SAClC,IAAI,KAAK,MAAM,KACd,OAAO,KAAK,OAAO,YAAY,OAAO,SAAS,KAAK,GAAG,GACpD,QAAQ,KAAK,OACb;AACN,KAAI,CAAC,KAAM,QAAO;AAMlB,QAAO;EAAE;EAAM,UAJb,IAAI,KAAK,UAAU,KAClB,OAAO,KAAK,OAAO,YAAY,OAAO,SAAS,KAAK,GAAG,GACpD,OAAO,KAAK,GAAG,GACf;EACmB;;;;;;;;;ACxJ3B,SAAgB,qBAAqB,MAA4B;AAC/D,SAAQ,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,aAAa,EAA3C;EACE,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,KAAK,IACH,QAAO;EACT,QACE,QAAO;;;;;;;;;;;;;AAcb,SAAgB,iBAAiB,QAA+B;CAC9D,MAAM,SAAS,OAAO,MAAM,KAAK,CAAC,QAAQ,MAAM,EAAE,SAAS,EAAE;CAC7D,MAAM,UAAyB,EAAE;AACjC,MAAK,IAAI,IAAI,GAAG,IAAI,OAAO,SAAU;EACnC,MAAM,OAAO,OAAO;AACpB,MAAI,SAAS,KAAA,EAAW;EACxB,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,WAAW;GAExB,MAAM,KAAK,OAAO,IAAI;AACtB,OAAI,OAAO,KAAA,EAAW;AACtB,WAAQ,KAAK;IAAE;IAAQ,MAAM;IAAI,CAAC;AAClC,QAAK;AACL;;EAEF,MAAM,OAAO,OAAO,IAAI;AACxB,MAAI,SAAS,KAAA,EAAW;AACxB,UAAQ,KAAK;GAAE;GAAQ;GAAM,CAAC;AAC9B,OAAK;;AAEP,QAAO;;;AAIT,SAAS,YAAY,MAA6B;CAChD,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,QAAO,QAAQ,IAAI,KAAK,MAAM,GAAG,MAAM,GAAG;;AAG5C,SAAS,OAAO,OAAe,MAAsB;AACnD,QAAO,GAAG,MAAM,GAAG,OAAO,UAAU,IAAI,KAAK;;AAG/C,MAAM,WAAyC;CAC7C,OAAO;CACP,UAAU;CACV,SAAS;CACT,SAAS;CACV;;;;;;;;;;;;AAaD,SAAgB,iBACd,SACA,YAAY,IACG;AACf,KAAI,QAAQ,WAAW,EAAG,QAAO;AAIjC,KAAI,QAAQ,WAAW,GAAG;EACxB,MAAM,OAAO,QAAQ;AACrB,SAAO,KAAK,GAAG,SAAS,KAAK,QAAQ,GAAG,KAAK,QAAQ,UAAU;;CAIjE,MAAM,2BAAW,IAAI,KAA2B;AAChD,MAAK,MAAM,SAAS,QAClB,UAAS,IAAI,MAAM,SAAS,SAAS,IAAI,MAAM,OAAO,IAAI,KAAK,EAAE;AAInE,KAAI,SAAS,SAAS,GAAG;EACvB,MAAM,SAAS,QAAQ,GAAI;EAC3B,MAAM,OAAO,IAAI,IAAI,QAAQ,KAAK,MAAM,YAAY,EAAE,KAAK,CAAC,CAAC;EAC7D,MAAM,OAAO,KAAK,SAAS,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK;EAC9C,MAAM,SAAS,GAAG,SAAS,QAAQ,GAAG,OAAO,QAAQ,QAAQ,OAAO;AACpE,SAAO,KAAK,OAAO,GAAG,OAAO,MAAM,SAAS,QAAQ,UAAU;;CAKhE,MAAM,UAAU,CAAC,GAAG,SAAS,SAAS,CAAC,CAAC,MACrC,CAAC,SAAS,SAAS,CAAC,SAAS,YAC5B,SAAS,UAAU,SAAS,SAAS,cAAc,SAAS,SAAS,CACxE;CACD,MAAM,CAAC,YAAY,aAAa,QAAQ;CACxC,MAAM,OAAO,QACV,MAAM,EAAE,CACR,KAAK,CAAC,QAAQ,WAAW,GAAG,SAAS,QAAQ,aAAa,CAAC,GAAG,QAAQ;AAEzE,QAAO,KAAK,CADC,GAAG,SAAS,YAAY,GAAG,OAAO,WAAW,OAAO,IAC9C,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,UAAU;;AAGpD,SAAS,KAAK,MAAc,WAA2B;AACrD,QAAO,KAAK,SAAS,YACjB,GAAG,KAAK,MAAM,GAAG,YAAY,EAAE,CAAC,SAAS,CAAC,KAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;ACxJN,MAAa,qBAAqB,MAAU,KAAK,KAAK;AAUtD,SAAS,QAAQ,QAA4B,KAAsB;CACjE,MAAM,KAAK,KAAK,MAAM,OAAO,SAAS;AAGtC,KAAI,OAAO,MAAM,GAAG,CAAE,QAAO;AAC7B,QAAO,MAAM,KAAK;;;AAIpB,SAAgB,gBAAgB,MAAM,KAAK,KAAK,EAAuB;AACrE,KAAI;EACF,MAAM,SAAS,YAAY;EAC3B,MAAM,cAAc,OAAO;AAC3B,MAAI,CAAC,YAAa,QAAO;EACzB,MAAM,SAAS,OAAO,SAAS,cAAc;AAC7C,MAAI,CAAC,UAAU,CAAC,OAAO,QAAQ,CAAC,QAAQ,QAAQ,IAAI,CAAE,QAAO;AAC7D,SAAO;GAAE,MAAM,OAAO;GAAM,UAAU,OAAO,YAAY;GAAM;SACzD;AACN,SAAO;;;;AAKX,SAAgB,iBAAiB,OAAqB,sBAAM,IAAI,MAAM,EAAQ;AAC5E,KAAI;AACF,gBAAc,WAAW;GACvB,MAAM,cAAc,OAAO;AAC3B,OAAI,CAAC,YAAa,QAAO;GACzB,MAAM,UAAU,OAAO,SAAS;AAChC,OAAI,CAAC,QAAS,QAAO;AACrB,UAAO;IACL,GAAG;IACH,UAAU;KACR,GAAG,OAAO;MACT,cAAc;MACb,GAAG;MACH,cAAc;OACZ,MAAM,MAAM;OACZ,UAAU,MAAM;OAChB,UAAU,IAAI,aAAa;OAC5B;MACF;KACF;IACF;IACD;SACI;;;;;;;;;;;;AAgBV,eAAsB,oBACpB,YAC8B;CAC9B,MAAM,SAAS,iBAAiB;AAChC,KAAI,OAAQ,QAAO;CAEnB,MAAM,UAAU,MAAM,YAAY,CAAC,YAAY,KAAK;AACpD,KAAI,QAAS,kBAAiB,QAAQ;AACtC,QAAO"}

package/dist/{token--hQqx3DU.mjs → token-6SEVoGMw.mjs}

@@ -2,6 +2,106 @@ import { existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileS
 import { dirname, join } from "node:path";
 import { randomBytes } from "node:crypto";
 import { homedir } from "node:os";
+//#region src/catalog/annotations.ts
+const ANNOTATION = Symbol.for("@fluid-app/fluid-cli.command-annotation");
+/**
+* Record the endpoints a command calls and whether it writes, so
+* `fluid commands --json` can list them. Returns the command for chaining.
+*/
+function describeCommand(command, annotation) {
+	const target = command;
+	target[ANNOTATION] = {
+		...target[ANNOTATION],
+		...annotation
+	};
+	return command;
+}
+function readAnnotation(command) {
+	return command[ANNOTATION] ?? null;
+}
+//#endregion
+//#region src/catalog/walk.ts
+function isHidden(command) {
+	return command._hidden === true;
+}
+function isRunnable(command) {
+	return command._actionHandler != null;
+}
+function visibleSubcommands(command) {
+	return command.commands.filter((sub) => !isHidden(sub));
+}
+function visibleOptions(command) {
+	return command.options.filter((option) => !option.hidden);
+}
+function describeOption(option) {
+	return {
+		flags: option.flags,
+		long: option.long ?? null,
+		short: option.short ?? null,
+		description: option.description,
+		takesValue: option.required,
+		optionalValue: option.optional,
+		required: option.mandatory,
+		defaultValue: option.defaultValue
+	};
+}
+function describeArgument(argument) {
+	return {
+		name: argument.name(),
+		description: argument.description,
+		required: argument.required,
+		variadic: argument.variadic
+	};
+}
+function inferWrites(command, declared) {
+	if (declared !== void 0) return declared;
+	return command.options.some((option) => option.long === "--yes") ? true : null;
+}
+function walkCommands(root) {
+	const entries = [];
+	function visit(command, path, ancestors) {
+		const annotation = readAnnotation(command);
+		const subcommands = visibleSubcommands(command);
+		entries.push({
+			command: path.join(" "),
+			path,
+			description: command.description(),
+			aliases: command.aliases(),
+			arguments: command.registeredArguments.map(describeArgument),
+			options: visibleOptions(command).map(describeOption),
+			inheritsOptionsFrom: ancestors.filter((ancestor) => visibleOptions(ancestor).some((option) => option.long !== "--version")).map((ancestor) => commandPath(ancestor).join(" ")),
+			subcommands: subcommands.map((sub) => sub.name()),
+			runnable: isRunnable(command),
+			writes: inferWrites(command, annotation?.writes),
+			endpoints: annotation?.endpoints ?? null
+		});
+		for (const sub of subcommands) visit(sub, [...path, sub.name()], [...ancestors, command]);
+	}
+	visit(root, [root.name()], []);
+	return entries;
+}
+function rootCommand(command) {
+	let root = command;
+	while (root.parent) root = root.parent;
+	return root;
+}
+function commandPath(command) {
+	const path = [];
+	for (let c = command; c; c = c.parent) path.unshift(c.name());
+	return path;
+}
+/** Keep the entries at or under `prefix`, matching names or aliases. */
+function filterCatalog(entries, root, prefix) {
+	let target = root;
+	for (const word of prefix) {
+		const next = visibleSubcommands(target).find((sub) => sub.name() === word || sub.aliases().includes(word));
+		if (!next) return [];
+		target = next;
+	}
+	const base = commandPath(target);
+	return entries.filter((entry) => base.every((word, index) => entry.path[index] === word));
+}
+//#endregion
 //#region src/utils/result.ts
 function success(value) {
 	return {
@@ -499,6 +599,6 @@ function listProfileNames() {
 	return Object.keys(config.profiles);
 }
 //#endregion
-export { unwrapOr as A, isSuccess as C, tryCatch as D, success as E, tryCatchAsync as O, isNodeError as S, mapResult as T, validateToken as _, readConfig as a, isError as b, getConfigDir as c, FLUID_API_ERROR as d, confirmMfa as f, switchCompany as g, sendMfa as h, findProjectConfig as i, unwrap as k, getConfigFilePath as l, getFluidApiBase as m, getAuthToken as n, updateConfig as o, fetchUserCompanies as p, listProfileNames as r, writeConfig as s, getActiveProfile as t, createDefaultConfig as u, failure as v, mapError as w, isFailure as x, getErrorMessage as y };
+export { unwrapOr as A, isSuccess as C, tryCatch as D, success as E, walkCommands as F, describeCommand as I, rootCommand as M, visibleOptions as N, tryCatchAsync as O, visibleSubcommands as P, isNodeError as S, mapResult as T, validateToken as _, readConfig as a, isError as b, getConfigDir as c, FLUID_API_ERROR as d, confirmMfa as f, switchCompany as g, sendMfa as h, findProjectConfig as i, filterCatalog as j, unwrap as k, getConfigFilePath as l, getFluidApiBase as m, getAuthToken as n, updateConfig as o, fetchUserCompanies as p, listProfileNames as r, writeConfig as s, getActiveProfile as t, createDefaultConfig as u, failure as v, mapError as w, isFailure as x, getErrorMessage as y };
 
-//# sourceMappingURL=token--hQqx3DU.mjs.map
+//# sourceMappingURL=token-6SEVoGMw.mjs.map