@heyditto/cli 2.9.1 → 2.10.0

package/dist/app-commands.js

@@ -0,0 +1,485 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { Option } from "commander";
+import { apiBase, attachAppEndpoint, createApp, detachAppEndpoint, findApp, getConsentProfile, getEndpoint, listAppEndpoints, listApps, listReceipts, rotateAppSecret, setAppEndpointBilling, updateApp, uploadAppIcon, verifyCallbackOrigin, } from "./api.js";
+import { confirmTyped, isJSON, printTable, shorthandsOf } from "./commands.js";
+import { STORE_IDS, VERCEL_TARGETS, deliver, selectStore } from "./secret-stores/index.js";
+/**
+ * Developer apps from the shell — everything the developer console does for
+ * "Sign in with Ditto" and app-owned Router endpoints, so an agent can set an
+ * app up end to end without a browser:
+ *
+ *   heyditto apps create "DittoBench"
+ *   heyditto apps origins verify dittobench-3f9a https://dittobench.ai  (then --confirm)
+ *   heyditto apps consent set dittobench-3f9a credits:spend "Pays for the inference your miner uses."
+ *   heyditto apps secret rotate dittobench-3f9a --gh-secret DITTO_OIDC_CLIENT_SECRET --repo ditto-assistant/ditto-subnet
+ *   heyditto apps oidc dittobench-3f9a --output env
+ *   heyditto apps endpoints attach dittobench-3f9a screener --billing user
+ *
+ * The client secret follows the same rule as endpoint keys: it is forwarded
+ * straight into a secret store over the store CLI's stdin and never printed.
+ */
+const ADVERTISED_SCOPES = [
+    "openid",
+    "email",
+    "profile",
+    "credits:spend",
+    "memory:read",
+    "memory:write",
+    "memory:delete",
+    "memory:publish",
+    "offline_access",
+    "mcp:read",
+    "mcp:write",
+];
+function writeJSON(value) {
+    process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
+}
+function appRow(app) {
+    return [app.appID, app.name, app.enabled ? (app.archived ? "archived" : "enabled") : "disabled", app.createdAt.slice(0, 10)];
+}
+/** OIDC/OAuth values a relying app needs; none of them are secret. */
+export function oidcConfig(app, base = apiBase()) {
+    return {
+        DITTO_OIDC_ISSUER: base,
+        DITTO_OIDC_CLIENT_ID: app.appID,
+        DITTO_OIDC_AUTHORIZATION_ENDPOINT: `${base}/authorize`,
+        DITTO_OIDC_TOKEN_ENDPOINT: `${base}/token`,
+        DITTO_OIDC_USERINFO_ENDPOINT: `${base}/userinfo`,
+        DITTO_OIDC_JWKS_URI: `${base}/.well-known/jwks.json`,
+        DITTO_OIDC_DISCOVERY: `${base}/.well-known/openid-configuration`,
+        DITTO_INFERENCE_BASE_URL: "",
+    };
+}
+/** Renders {KEY: value} as KEY=value lines (values quoted only when needed). */
+export function envLines(values) {
+    return Object.entries(values)
+        .filter(([, v]) => v !== "")
+        .map(([k, v]) => `${k}=${/[\s#"'\\]/.test(v) ? JSON.stringify(v) : v}`)
+        .join("\n");
+}
+function requireEnabledScope(scope) {
+    const s = scope.trim();
+    if (!ADVERTISED_SCOPES.includes(s)) {
+        throw new Error(`unknown scope "${scope}". Known scopes: ${ADVERTISED_SCOPES.join(", ")}`);
+    }
+    return s;
+}
+/** Select the store, preflight its CLI and resolve the target — nothing is minted yet. */
+function prepareSecretStore(options, defaultName) {
+    const { store, name: secretName } = selectStore({ ...options, secret: options.secret ?? defaultName, shorthands: shorthandsOf(options) });
+    store.preflight();
+    const target = store.resolveTarget(options);
+    return { store, secretName, target };
+}
+/** Forward a secret into a prepared store over stdin; never argv, never stdout. */
+function deliverPrepared(prepared, plaintext, what) {
+    const { store, secretName, target } = prepared;
+    deliver(store, secretName, store.deliveries(secretName, target), plaintext);
+    process.stderr.write(`Stored ${what} as ${secretName} in ${target.describe}.\n`);
+    return { secretName, describe: target.describe };
+}
+function hasStoreFlag(options) {
+    return Boolean(options.store || options.secret || Object.values(shorthandsOf(options)).some(Boolean));
+}
+function addStoreOptions(command, defaultSecret) {
+    return command
+        .addOption(new Option("--store <destination>", `where the secret goes (default secret name ${defaultSecret})`).choices([...STORE_IDS]))
+        .option("--secret <NAME>", "name of the secret, variable, item or path to store (with --store)")
+        .option("--gh-secret <NAME>", "shorthand for --store github --secret NAME")
+        .option("--gitlab-var <NAME>", "shorthand for --store gitlab --secret NAME")
+        .option("--aws-secret <NAME>", "shorthand for --store aws --secret NAME")
+        .option("--gcp-secret <NAME>", "shorthand for --store gcloud --secret NAME")
+        .option("--az-secret <NAME>", "shorthand for --store azure --secret NAME")
+        .option("--op-item <TITLE>", "shorthand for --store 1password --secret TITLE")
+        .option("--vault-secret <PATH>", "shorthand for --store vault --secret PATH")
+        .option("--doppler-secret <NAME>", "shorthand for --store doppler --secret NAME")
+        .option("--cf-secret <NAME>", "shorthand for --store cloudflare --secret NAME")
+        .option("--vercel-env <NAME>", "shorthand for --store vercel --secret NAME")
+        .option("--k8s-secret <NAME>", "shorthand for --store kubernetes --secret NAME")
+        .option("--fly-secret <NAME>", "shorthand for --store fly --secret NAME")
+        .option("--repo <owner/repo>", "github: repository for the secret (default: the repo of the current directory)")
+        .option("--env <environment>", "github: deployment environment; gitlab: variable environment scope")
+        .option("--org <org>", "github: organization secret; gitlab: group variable")
+        .option("--region <region>", "aws: region")
+        .option("--project <project>", "gitlab, gcloud, doppler: project")
+        .option("--key-vault <name>", "azure: Key Vault the secret goes into")
+        .option("--op-vault <name>", "1password: vault for the item")
+        .option("--mount <mount>", "vault: kv mount")
+        .option("--field <field>", "vault: field at the path")
+        .option("--doppler-config <config>", "doppler: config within the project")
+        .option("--worker <name>", "cloudflare: Worker name")
+        .addOption(new Option("--vercel-target <target>", "vercel: environment").choices([...VERCEL_TARGETS]))
+        .option("--namespace <namespace>", "kubernetes: namespace")
+        .option("--k8s-key <key>", "kubernetes: key within the secret")
+        .option("--app <app>", "fly: app name");
+}
+// ---------------------------------------------------------------------------
+export async function cmdAppsList(options) {
+    const apps = await listApps(options.company);
+    if (isJSON(options))
+        return writeJSON({ apps });
+    if (apps.length === 0) {
+        process.stdout.write("No apps yet. Create one: heyditto apps create \"My App\"\n");
+        return;
+    }
+    printTable(["APP ID", "NAME", "STATE", "CREATED"], apps.map(appRow));
+}
+export async function cmdAppsCreate(name, options) {
+    // Everything that can fail cheaply happens before the app exists: the
+    // platform CLI is present and signed in and its target resolves. Otherwise
+    // a typo in --repo would create the app and lose its only secret.
+    const prepared = hasStoreFlag(options) ? prepareSecretStore(options, "DITTO_OIDC_CLIENT_SECRET") : undefined;
+    const app = await createApp(name.trim(), options.company);
+    const { appSecret, ...safe } = app;
+    let stored;
+    if (appSecret && prepared) {
+        try {
+            stored = deliverPrepared(prepared, appSecret, "the app secret");
+        }
+        catch (err) {
+            const reason = err instanceof Error ? err.message : String(err);
+            throw new Error(`${reason}\nApp ${app.appID} was created but its secret could NOT be stored and is not recoverable. Rotate it into a store: heyditto apps secret rotate ${app.appID} --gh-secret ${prepared.secretName} --repo <owner/repo>`);
+        }
+    }
+    if (isJSON(options))
+        return writeJSON({ app: safe, secretStored: stored ?? null, oidc: oidcConfig(app) });
+    process.stdout.write(`Created app ${app.appID} ("${app.name}").\n`);
+    process.stdout.write(`${envLines(oidcConfig(app))}\n`);
+    if (appSecret && !stored) {
+        process.stderr.write("The app secret was minted but NOT shown. Store it somewhere your server can read it:\n" +
+            `  heyditto apps secret rotate ${app.appID} --gh-secret DITTO_OIDC_CLIENT_SECRET --repo <owner/repo>\n` +
+            "(rotating mints a fresh secret and forwards it straight into the store).\n");
+    }
+}
+export async function cmdAppsShow(ref, options) {
+    const app = await findApp(ref, options.company);
+    const [{ endpoints, baseUrl, onBehalfOfHeader }, profile] = await Promise.all([
+        listAppEndpoints(app.appID),
+        getConsentProfile(app.appID).catch(() => undefined),
+    ]);
+    if (isJSON(options))
+        return writeJSON({ app, endpoints, baseUrl, onBehalfOfHeader, consentProfile: profile ?? null, oidc: oidcConfig(app) });
+    process.stdout.write(`${app.name} (${app.appID}) — ${app.enabled ? "enabled" : "disabled"}${app.archived ? ", archived" : ""}\n`);
+    if (app.metadata?.description)
+        process.stdout.write(`  ${app.metadata.description}\n`);
+    if (profile?.iconUrl)
+        process.stdout.write(`  icon: ${profile.iconUrl}\n`);
+    const origins = profile?.callbackOrigins ?? [];
+    process.stdout.write(`  verified callback origins: ${origins.length ? origins.join(", ") : "(none — run: heyditto apps origins verify)"}\n`);
+    const rationale = app.consentRationale ?? profile?.rationale ?? {};
+    process.stdout.write(`  consent rationale: ${Object.keys(rationale).length ? "" : "(none)"}\n`);
+    for (const [scope, why] of Object.entries(rationale))
+        process.stdout.write(`    ${scope}: ${why}\n`);
+    process.stdout.write(`  endpoints (${endpoints.length}):${endpoints.length ? "" : " (none — run: heyditto apps endpoints attach)"}\n`);
+    for (const e of endpoints)
+        process.stdout.write(`    ${e.slug}  ${e.model}  billing=${e.appBilling}  ${baseUrl}\n`);
+    if (endpoints.length)
+        process.stdout.write(`  server-to-server: send ${onBehalfOfHeader}: <ditto uid> with an owner-minted key on the endpoint\n`);
+}
+export async function cmdAppsUpdate(ref, options) {
+    const app = await findApp(ref, options.company);
+    const patch = {};
+    if (options.name !== undefined)
+        patch.name = options.name;
+    if (options.description !== undefined)
+        patch.description = options.description;
+    if (options.landingUrl !== undefined)
+        patch.landingURL = options.landingUrl;
+    if (options.appUrl !== undefined)
+        patch.appURL = options.appUrl;
+    if (options.enable)
+        patch.enabled = true;
+    if (options.disable)
+        patch.enabled = false;
+    if (options.archive)
+        patch.archived = true;
+    if (options.restore)
+        patch.archived = false;
+    if (Object.keys(patch).length === 0)
+        throw new Error("nothing to change; pass --name, --description, --landing-url, --app-url, --enable, --disable, --archive or --restore");
+    const updated = await updateApp(app.appID, patch);
+    if (isJSON(options))
+        return writeJSON({ app: updated });
+    process.stdout.write(`Updated ${updated.appID}.\n`);
+}
+export async function cmdAppsConsentShow(ref, options) {
+    const app = await findApp(ref, options.company);
+    const profile = await getConsentProfile(app.appID);
+    if (isJSON(options))
+        return writeJSON({ consentProfile: profile });
+    process.stdout.write(`Consent screen for ${profile.name} (${profile.appID})\n`);
+    if (profile.iconUrl)
+        process.stdout.write(`  icon: ${profile.iconUrl}\n`);
+    if (profile.ownerName)
+        process.stdout.write(`  by: ${profile.ownerName}\n`);
+    const entries = Object.entries(profile.rationale);
+    process.stdout.write(`  rationale:${entries.length ? "" : " (none — the default scope wording is shown)"}\n`);
+    for (const [scope, why] of entries)
+        process.stdout.write(`    ${scope}: ${why}\n`);
+}
+export async function cmdAppsConsentSet(ref, scope, why, options) {
+    const app = await findApp(ref, options.company);
+    const key = requireEnabledScope(scope);
+    const current = { ...(app.consentRationale ?? {}) };
+    if (options.clear)
+        delete current[key];
+    else {
+        const text = (why ?? "").trim();
+        if (!text)
+            throw new Error("pass the reason text, or --clear to remove it");
+        current[key] = text;
+    }
+    const updated = await updateApp(app.appID, { consentRationale: current });
+    if (isJSON(options))
+        return writeJSON({ consentRationale: updated.consentRationale ?? current });
+    process.stdout.write(options.clear ? `Cleared the ${key} rationale on ${app.appID}.\n` : `Set the ${key} rationale on ${app.appID}.\n`);
+}
+const ICON_TYPES = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg", ".webp": "image/webp", ".svg": "image/svg+xml" };
+export async function cmdAppsIconSet(ref, file, options) {
+    const app = await findApp(ref, options.company);
+    const contentType = ICON_TYPES[path.extname(file).toLowerCase()];
+    if (!contentType)
+        throw new Error(`unsupported icon type "${path.extname(file)}"; use png, jpg, webp or svg`);
+    const data = await readFile(file);
+    const out = await uploadAppIcon(app.appID, contentType, data.toString("base64"));
+    const url = out.iconURL ?? out.iconUrl ?? "";
+    if (isJSON(options))
+        return writeJSON({ appID: app.appID, iconURL: url });
+    process.stdout.write(`Icon uploaded for ${app.appID}${url ? `: ${url}` : ""}\n`);
+}
+export async function cmdAppsOriginsVerify(ref, origin, options) {
+    const app = await findApp(ref, options.company);
+    const out = await verifyCallbackOrigin(app.appID, origin, Boolean(options.confirm));
+    if (isJSON(options))
+        return writeJSON(out);
+    if (out.verified) {
+        process.stdout.write(`Verified ${out.origin}. Callback origins: ${(out.callbackOrigins ?? []).join(", ")}\n`);
+        return;
+    }
+    process.stdout.write(`Challenge for ${out.origin}:\n` +
+        `  Serve this token as the plain-text body of ${out.wellKnown}\n` +
+        `  token: ${out.token}\n` +
+        `Then run: heyditto apps origins verify ${app.appID} ${out.origin} --confirm\n`);
+}
+export async function cmdAppsSecretRotate(ref, options) {
+    const app = await findApp(ref, options.company);
+    if (!hasStoreFlag(options)) {
+        throw new Error("choose where the new secret goes (it is never printed): e.g. --gh-secret DITTO_OIDC_CLIENT_SECRET --repo owner/repo, --gcp-secret NAME, --op-item TITLE …");
+    }
+    const { store, name: secretName } = selectStore({ ...options, secret: options.secret ?? "DITTO_OIDC_CLIENT_SECRET", shorthands: shorthandsOf(options) });
+    store.preflight();
+    const target = store.resolveTarget(options);
+    await confirmTyped({
+        action: `rotate the app secret of ${app.appID} (the current secret stops working) and store it in ${store.label}`,
+        expected: secretName,
+        label: `the ${store.nameLabel.toLowerCase()}`,
+        yes: options.yes,
+        preview: `Will mint a new app secret for ${app.appID} and store ${secretName} in ${target.describe}. Your server must switch to it right away.`,
+    });
+    const rotated = await rotateAppSecret(app.appID);
+    const { appSecret, ...safe } = rotated;
+    try {
+        deliver(store, secretName, store.deliveries(secretName, target), appSecret ?? "");
+    }
+    catch (err) {
+        const reason = err instanceof Error ? err.message : String(err);
+        // The backend already replaced the secret; the plaintext is gone with this
+        // process. Never print it as a fallback — say what happened and how to recover.
+        throw new Error(`${reason}\nThe app secret of ${app.appID} was rotated but could NOT be stored; the previous secret no longer works and the new one is not recoverable. Re-run: heyditto apps secret rotate ${app.appID} --gh-secret ${secretName} --repo <owner/repo>`);
+    }
+    if (isJSON(options))
+        return writeJSON({ ...safe, appID: app.appID, secretStored: { secretName, describe: target.describe } });
+    process.stdout.write(`Rotated the app secret of ${app.appID} and stored ${secretName} in ${target.describe}.\n`);
+}
+export async function cmdAppsOidc(ref, options) {
+    const app = await findApp(ref, options.company);
+    const [{ baseUrl }, profile] = await Promise.all([listAppEndpoints(app.appID), getConsentProfile(app.appID).catch(() => undefined)]);
+    const values = oidcConfig(app);
+    values.DITTO_INFERENCE_BASE_URL = baseUrl;
+    if (options.callback)
+        values.DITTO_OIDC_REDIRECT_URI = options.callback;
+    const origins = profile?.callbackOrigins ?? [];
+    if (options.output === "json")
+        return writeJSON({ oidc: values, callbackOrigins: origins, scopes: ["openid", "email", "profile"], spendingScope: "credits:spend" });
+    process.stdout.write(`${envLines(values)}\n`);
+    process.stderr.write(`# redirect_uri must be on a verified callback origin (${origins.length ? origins.join(", ") : "none yet — heyditto apps origins verify"}).\n` +
+        `# client_secret: heyditto apps secret rotate ${app.appID} --gh-secret DITTO_OIDC_CLIENT_SECRET …\n` +
+        `# request scope "openid email profile" for sign-in, add "credits:spend" to let users pay for the app's inference.\n`);
+}
+function endpointRow(e) {
+    return [e.slug, e.model, e.appBilling, e.status ?? "", e.id];
+}
+export async function cmdAppsEndpointsList(ref, options) {
+    const app = await findApp(ref, options.company);
+    const { endpoints, baseUrl, onBehalfOfHeader } = await listAppEndpoints(app.appID);
+    if (isJSON(options))
+        return writeJSON({ appID: app.appID, endpoints, baseUrl, onBehalfOfHeader });
+    if (endpoints.length === 0) {
+        process.stdout.write(`No endpoints attached to ${app.appID}. Attach one: heyditto apps endpoints attach ${app.appID} <endpoint> --billing user|sponsor\n`);
+        return;
+    }
+    printTable(["SLUG", "MODEL", "BILLING", "STATUS", "ID"], endpoints.map(endpointRow));
+    process.stdout.write(`Base URL ${baseUrl}; server-to-server calls send ${onBehalfOfHeader}: <ditto uid>.\n`);
+}
+function parseBilling(raw) {
+    const v = (raw ?? "user").trim();
+    if (v === "user" || v === "sponsor")
+        return v;
+    throw new Error(`--billing must be user (the consenting user pays) or sponsor (the endpoint owner pays), got "${raw}"`);
+}
+export async function cmdAppsEndpointsAttach(ref, endpointRef, options) {
+    const app = await findApp(ref, options.company);
+    const { endpoint } = await getEndpoint(endpointRef);
+    const attached = await attachAppEndpoint(app.appID, endpoint.id, parseBilling(options.billing));
+    if (isJSON(options))
+        return writeJSON({ appID: app.appID, endpoint: attached });
+    process.stdout.write(`Attached ${attached.slug} to ${app.appID} (billing=${attached.appBilling}).\n`);
+}
+export async function cmdAppsEndpointsBilling(ref, endpointRef, billing, options) {
+    const app = await findApp(ref, options.company);
+    const { endpoint } = await getEndpoint(endpointRef);
+    const updated = await setAppEndpointBilling(app.appID, endpoint.id, parseBilling(billing));
+    if (isJSON(options))
+        return writeJSON({ appID: app.appID, endpoint: updated });
+    process.stdout.write(`${updated.slug} now bills the ${updated.appBilling === "user" ? "consenting user" : "sponsor"}.\n`);
+}
+export async function cmdAppsEndpointsDetach(ref, endpointRef, options) {
+    const app = await findApp(ref, options.company);
+    const { endpoint } = await getEndpoint(endpointRef);
+    // App users lose this endpoint the moment it is detached; make it deliberate.
+    await confirmTyped({
+        action: `detach ${endpoint.slug} from ${app.appID} (its app users lose access immediately)`,
+        expected: endpoint.slug,
+        label: "the endpoint slug",
+        yes: options.yes,
+        preview: `Will detach ${endpoint.slug} from ${app.appID}. The endpoint and its keys are kept; app users can no longer call it.`,
+    });
+    await detachAppEndpoint(app.appID, endpoint.id);
+    if (isJSON(options))
+        return writeJSON({ appID: app.appID, detached: endpoint.id });
+    process.stdout.write(`Detached ${endpoint.slug} from ${app.appID}.\n`);
+}
+export async function cmdReceipts(options) {
+    const days = options.days ? Number(options.days) : undefined;
+    const limit = options.limit ? Number(options.limit) : undefined;
+    if (days !== undefined && (!Number.isInteger(days) || days <= 0))
+        throw new Error("--days must be a positive integer");
+    const out = await listReceipts({ leg: options.leg, app: options.app, days, limit });
+    if (isJSON(options))
+        return writeJSON(out);
+    const usd = (tokens) => `$${(tokens / 1e9).toFixed(4)}`;
+    if (out.summary.length) {
+        printTable(["LEG", "APP", "CALLS", "DITTO COST"], out.summary.map((s) => [s.leg, s.appName || s.appID || "ditto", String(s.calls), s.leg === "ditto" ? usd(s.dittoTokens) : "—"]));
+        process.stdout.write("\n");
+    }
+    if (out.receipts.length === 0) {
+        process.stdout.write("No receipts in this window.\n");
+        return;
+    }
+    printTable(["WHEN", "MODEL", "LEG", "APP", "COST"], out.receipts.map((r) => [r.timestamp.slice(0, 16).replace("T", " "), r.model || r.serviceName || "—", r.leg, r.appID ? `${r.appID}${r.billing === "sponsor" ? " (sponsored)" : ""}` : "", r.leg === "ditto" ? usd(r.dittoTokens) : "—"]));
+}
+export function registerAppCommands(program, addExamples, outputOption) {
+    const apps = program.command("apps").description("developer apps: Sign in with Ditto, branded consent and app-owned Router endpoints");
+    const companyOption = () => new Option("--company <id>", "developer company (organization) the app belongs to; default: your developer company");
+    addExamples(apps.command("list", { isDefault: true }).description("list your developer apps").addOption(companyOption()).addOption(outputOption()).action(cmdAppsList), `  heyditto apps list
+  heyditto apps list --company 5f1c… --output json`);
+    addExamples(addStoreOptions(apps
+        .command("create")
+        .description("create an app; forward its client secret straight into a secret store (never printed)")
+        .argument("<name>", "display name shown on the consent screen")
+        .addOption(companyOption())
+        .option("--yes", "skip confirmations")
+        .addOption(outputOption()), "DITTO_OIDC_CLIENT_SECRET").action(cmdAppsCreate), `  heyditto apps create "DittoBench" --gh-secret DITTO_OIDC_CLIENT_SECRET --repo ditto-assistant/ditto-subnet
+  heyditto apps create "DittoBench" --output json     # secret minted but not shown; rotate it into a store later`);
+    apps.command("show").description("one app: state, callback origins, consent rationale, attached endpoints").argument("<app>", "app id, slug or name").addOption(companyOption()).addOption(outputOption()).action(cmdAppsShow);
+    apps
+        .command("update")
+        .description("rename, describe, enable/disable or archive an app")
+        .argument("<app>", "app id, slug or name")
+        .option("--name <name>")
+        .option("--description <text>")
+        .option("--landing-url <url>")
+        .option("--app-url <url>")
+        .option("--enable")
+        .option("--disable")
+        .option("--archive")
+        .option("--restore")
+        .addOption(companyOption())
+        .addOption(outputOption())
+        .action(cmdAppsUpdate);
+    const consent = apps.command("consent").description("what the consent screen says about this app");
+    consent.command("show").description("the public consent profile (name, icon, rationale per scope)").argument("<app>").addOption(companyOption()).addOption(outputOption()).action(cmdAppsConsentShow);
+    addExamples(consent
+        .command("set")
+        .description("set (or --clear) the app's own reason for one requested scope")
+        .argument("<app>")
+        .argument("<scope>", `one of ${ADVERTISED_SCOPES.join(", ")}`)
+        .argument("[why]", "the reason shown under the permission (≤ 280 chars)")
+        .option("--clear", "remove the reason for this scope")
+        .addOption(companyOption())
+        .addOption(outputOption())
+        .action(cmdAppsConsentSet), `  heyditto apps consent set dittobench credits:spend "Pays for the inference your miner uses during screening."
+  heyditto apps consent set dittobench openid "Links your miner hotkeys to your Ditto account."
+  heyditto apps consent set dittobench email --clear`);
+    apps.command("icon").description("app icon").command("set").description("upload the icon shown on the consent screen (png, jpg, webp, svg)").argument("<app>").argument("<file>").addOption(companyOption()).addOption(outputOption()).action(cmdAppsIconSet);
+    const origins = apps.command("origins").description("verified callback origins (allowed OAuth redirect origins)");
+    addExamples(origins
+        .command("verify")
+        .description("request a challenge for an https origin, then --confirm once it is served")
+        .argument("<app>")
+        .argument("<origin>", "https origin, e.g. https://dittobench.ai")
+        .option("--confirm", "verify a previously requested challenge")
+        .addOption(companyOption())
+        .addOption(outputOption())
+        .action(cmdAppsOriginsVerify), `  heyditto apps origins verify dittobench https://dittobench.ai            # prints the token to serve
+  heyditto apps origins verify dittobench https://dittobench.ai --confirm  # checks /.well-known/ditto-callback-challenge`);
+    const secret = apps.command("secret").description("the app's client secret (signs consent callbacks; OIDC client_secret)");
+    addExamples(addStoreOptions(secret.command("rotate").description("mint a new secret and store it straight into a secret store (never printed)").argument("<app>").addOption(companyOption()).option("--yes", "skip the confirmation prompt").addOption(outputOption()), "DITTO_OIDC_CLIENT_SECRET").action(cmdAppsSecretRotate), `  heyditto apps secret rotate dittobench --gh-secret DITTO_OIDC_CLIENT_SECRET --repo ditto-assistant/ditto-subnet
+  heyditto apps secret rotate dittobench --gcp-secret dittobench-oidc-client-secret --project ditto-platform
+  heyditto apps secret rotate dittobench --op-item "DittoBench OIDC" --op-vault Engineering`);
+    addExamples(apps
+        .command("oidc")
+        .description("the non-secret OIDC configuration a relying app needs (issuer, endpoints, client_id) as env lines or JSON")
+        .argument("<app>")
+        .option("--callback <url>", "include the redirect URI your app uses")
+        .addOption(companyOption())
+        .addOption(outputOption())
+        .action(cmdAppsOidc), `  heyditto apps oidc dittobench --callback https://dittobench.ai/auth/ditto/callback >> .env
+  heyditto apps oidc dittobench --output json`);
+    const endpoints = apps.command("endpoints").description("Router endpoints this app owns (its users get inference, never keys)");
+    endpoints.command("list", { isDefault: true }).argument("<app>").addOption(companyOption()).addOption(outputOption()).action(cmdAppsEndpointsList);
+    addExamples(endpoints
+        .command("attach")
+        .description("attach one of your endpoints to the app and choose who pays")
+        .argument("<app>")
+        .argument("<endpoint>", "endpoint slug or id")
+        .addOption(new Option("--billing <who>", "user = the consenting user's credits (needs their credits:spend grant); sponsor = the endpoint owner").choices(["user", "sponsor"]).default("user"))
+        .addOption(companyOption())
+        .addOption(outputOption())
+        .action(cmdAppsEndpointsAttach), `  heyditto apps endpoints attach dittobench screener --billing sponsor
+  heyditto apps endpoints attach dittobench competition --billing user
+  heyditto endpoints keys create competition --gh-secret DITTO_ROUTER_KEY --repo ditto-assistant/ditto-subnet   # the app's server key`);
+    endpoints.command("billing").description("change who pays on an attached endpoint").argument("<app>").argument("<endpoint>").argument("<who>", "user | sponsor").addOption(companyOption()).addOption(outputOption()).action(cmdAppsEndpointsBilling);
+    endpoints
+        .command("detach")
+        .description("detach an endpoint from the app (its app users lose access immediately; asks you to type the slug)")
+        .argument("<app>")
+        .argument("<endpoint>")
+        .option("--yes", "skip the confirmation")
+        .addOption(companyOption())
+        .addOption(outputOption())
+        .action(cmdAppsEndpointsDetach);
+    addExamples(program
+        .command("receipts")
+        .description("your receipts by billing leg (ditto | byok | covered) and by the app that spent them")
+        .addOption(new Option("--leg <leg>", "billing leg").choices(["ditto", "byok", "covered"]))
+        .option("--app <app_id>", "only this app's spend (use - for Ditto's own surfaces)")
+        .option("--days <n>", "window in days (default 30)")
+        .option("--limit <n>", "max receipts (default 50)")
+        .addOption(outputOption())
+        .action(cmdReceipts), `  heyditto receipts
+  heyditto receipts --leg byok --days 7
+  heyditto receipts --app dittobench --output json`);
+}
+//# sourceMappingURL=app-commands.js.map

package/dist/app-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-commands.js","sourceRoot":"","sources":["../src/app-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAW,MAAM,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAIL,OAAO,EACP,iBAAiB,EACjB,SAAS,EACT,iBAAiB,EACjB,OAAO,EACP,iBAAiB,EACjB,WAAW,EACX,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,SAAS,EACT,aAAa,EACb,oBAAoB,GACrB,MAAM,UAAU,CAAC;AAClB,OAAO,EAA0B,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACvG,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAE3F;;;;;;;;;;;;;;GAcG;AAEH,MAAM,iBAAiB,GAAG;IACxB,QAAQ;IACR,OAAO;IACP,SAAS;IACT,eAAe;IACf,aAAa;IACb,cAAc;IACd,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,UAAU;IACV,WAAW;CACH,CAAC;AAOX,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,MAAM,CAAC,GAAiB;IAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAC/H,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,GAAiB,EAAE,IAAI,GAAG,OAAO,EAAE;IAC5D,OAAO;QACL,iBAAiB,EAAE,IAAI;QACvB,oBAAoB,EAAE,GAAG,CAAC,KAAK;QAC/B,iCAAiC,EAAE,GAAG,IAAI,YAAY;QACtD,yBAAyB,EAAE,GAAG,IAAI,QAAQ;QAC1C,4BAA4B,EAAE,GAAG,IAAI,WAAW;QAChD,mBAAmB,EAAE,GAAG,IAAI,wBAAwB;QACpD,oBAAoB,EAAE,GAAG,IAAI,mCAAmC;QAChE,wBAAwB,EAAE,EAAE;KAC7B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,MAA8B;IACrD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,CAAE,iBAAuC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,kBAAkB,KAAK,oBAAoB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAQD,0FAA0F;AAC1F,SAAS,kBAAkB,CAAC,OAA0B,EAAE,WAAmB;IACzE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1I,KAAK,CAAC,SAAS,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,mFAAmF;AACnF,SAAS,eAAe,CAAC,QAAuB,EAAE,SAAiB,EAAE,IAAY;IAC/E,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IAC/C,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,UAAU,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;IACjF,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,YAAY,CAAC,OAA0B;IAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAE,aAAqB;IAC9D,OAAO,OAAO;SACX,SAAS,CAAC,IAAI,MAAM,CAAC,uBAAuB,EAAE,8CAA8C,aAAa,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC;SACtI,MAAM,CAAC,iBAAiB,EAAE,oEAAoE,CAAC;SAC/F,MAAM,CAAC,oBAAoB,EAAE,4CAA4C,CAAC;SAC1E,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;SAC3E,MAAM,CAAC,qBAAqB,EAAE,yCAAyC,CAAC;SACxE,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;SAC3E,MAAM,CAAC,oBAAoB,EAAE,2CAA2C,CAAC;SACzE,MAAM,CAAC,mBAAmB,EAAE,gDAAgD,CAAC;SAC7E,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC;SAC5E,MAAM,CAAC,yBAAyB,EAAE,6CAA6C,CAAC;SAChF,MAAM,CAAC,oBAAoB,EAAE,gDAAgD,CAAC;SAC9E,MAAM,CAAC,qBAAqB,EAAE,4CAA4C,CAAC;SAC3E,MAAM,CAAC,qBAAqB,EAAE,gDAAgD,CAAC;SAC/E,MAAM,CAAC,qBAAqB,EAAE,yCAAyC,CAAC;SACxE,MAAM,CAAC,qBAAqB,EAAE,gFAAgF,CAAC;SAC/G,MAAM,CAAC,qBAAqB,EAAE,oEAAoE,CAAC;SACnG,MAAM,CAAC,aAAa,EAAE,qDAAqD,CAAC;SAC5E,MAAM,CAAC,mBAAmB,EAAE,aAAa,CAAC;SAC1C,MAAM,CAAC,qBAAqB,EAAE,kCAAkC,CAAC;SACjE,MAAM,CAAC,oBAAoB,EAAE,uCAAuC,CAAC;SACrE,MAAM,CAAC,mBAAmB,EAAE,+BAA+B,CAAC;SAC5D,MAAM,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;SAC5C,MAAM,CAAC,iBAAiB,EAAE,0BAA0B,CAAC;SACrD,MAAM,CAAC,2BAA2B,EAAE,oCAAoC,CAAC;SACzE,MAAM,CAAC,iBAAiB,EAAE,yBAAyB,CAAC;SACpD,SAAS,CAAC,IAAI,MAAM,CAAC,0BAA0B,EAAE,qBAAqB,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC;SACrG,MAAM,CAAC,yBAAyB,EAAE,uBAAuB,CAAC;SAC1D,MAAM,CAAC,iBAAiB,EAAE,mCAAmC,CAAC;SAC9D,MAAM,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAqB;IACrD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IACD,UAAU,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAyC;IACzF,sEAAsE;IACtE,2EAA2E;IAC3E,kEAAkE;IAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACnC,IAAI,MAA4D,CAAC;IACjE,IAAI,SAAS,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QAClE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,SAAS,GAAG,CAAC,KAAK,+HAA+H,GAAG,CAAC,KAAK,gBAAgB,QAAQ,CAAC,UAAU,sBAAsB,CAC7N,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,IAAI,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,KAAK,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wFAAwF;YACtF,iCAAiC,GAAG,CAAC,KAAK,6DAA6D;YACvG,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,OAAqB;IAClE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC5E,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC;QAC3B,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,OAAO,IAAI,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7I,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,KAAK,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClI,IAAI,GAAG,CAAC,QAAQ,EAAE,WAAW;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,CAAC,CAAC;IACvF,IAAI,OAAO,EAAE,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,4CAA4C,IAAI,CAAC,CAAC;IAC7I,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,IAAI,OAAO,EAAE,SAAS,IAAI,EAAE,CAAC;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;IAChG,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;IACrG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,+CAA+C,IAAI,CAAC,CAAC;IACvI,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,UAAU,KAAK,OAAO,IAAI,CAAC,CAAC;IACpH,IAAI,SAAS,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,gBAAgB,0DAA0D,CAAC,CAAC;AACrJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,OAAgL;IAEhL,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1D,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,KAAK,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAC/E,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAChE,IAAI,OAAO,CAAC,MAAM;QAAE,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IACzC,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;IAC3C,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC;IAC3C,IAAI,OAAO,CAAC,OAAO;QAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sHAAsH,CAAC,CAAC;IAC7K,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,OAAqB;IACzE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,8CAA8C,IAAI,CAAC,CAAC;IAC9G,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,KAAK,KAAK,GAAG,IAAI,CAAC,CAAC;AACrF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,KAAa,EAAE,GAAuB,EAAE,OAA2C;IACtI,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;SAClC,CAAC;QACJ,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC5E,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,IAAI,OAAO,EAAE,CAAC,CAAC;IACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,GAAG,iBAAiB,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,WAAW,GAAG,iBAAiB,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;AAC1I,CAAC;AAED,MAAM,UAAU,GAA2B,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;AAEhK,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY,EAAE,OAAqB;IACnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC9G,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;IAC7C,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,MAAc,EAAE,OAA6C;IACnH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,MAAM,uBAAuB,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9G,OAAO;IACT,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iBAAiB,GAAG,CAAC,MAAM,KAAK;QAC9B,gDAAgD,GAAG,CAAC,SAAS,IAAI;QACjE,YAAY,GAAG,CAAC,KAAK,IAAI;QACzB,0CAA0C,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,cAAc,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAAyC;IAC9F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,2JAA2J,CAC5J,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,0BAA0B,EAAE,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzJ,KAAK,CAAC,SAAS,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,YAAY,CAAC;QACjB,MAAM,EAAE,4BAA4B,GAAG,CAAC,KAAK,uDAAuD,KAAK,CAAC,KAAK,EAAE;QACjH,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,OAAO,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE;QAC7C,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,kCAAkC,GAAG,CAAC,KAAK,cAAc,UAAU,OAAO,MAAM,CAAC,QAAQ,6CAA6C;KAChJ,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChE,2EAA2E;QAC3E,gFAAgF;QAChF,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,uBAAuB,GAAG,CAAC,KAAK,qJAAqJ,GAAG,CAAC,KAAK,gBAAgB,UAAU,sBAAsB,CACxP,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,KAAK,eAAe,UAAU,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,OAA6C;IAC1F,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrI,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,CAAC,wBAAwB,GAAG,OAAO,CAAC;IAC1C,IAAI,OAAO,CAAC,QAAQ;QAAE,MAAM,CAAC,uBAAuB,GAAG,OAAO,CAAC,QAAQ,CAAC;IACxE,MAAM,OAAO,GAAG,OAAO,EAAE,eAAe,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC;IACpK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,yCAAyC,MAAM;QAC5I,gDAAgD,GAAG,CAAC,KAAK,2CAA2C;QACpG,qHAAqH,CACxH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,CAAc;IACjC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAW,EAAE,OAAqB;IAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAClG,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,GAAG,CAAC,KAAK,gDAAgD,GAAG,CAAC,KAAK,sCAAsC,CAAC,CAAC;QAC3J,OAAO;IACT,CAAC;IACD,UAAU,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;IACrF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,iCAAiC,gBAAgB,kBAAkB,CAAC,CAAC;AAC/G,CAAC;AAED,SAAS,YAAY,CAAC,GAAuB;IAC3C,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,IAAI,KAAK,CAAC,gGAAgG,GAAG,GAAG,CAAC,CAAC;AAC1H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW,EAAE,WAAmB,EAAE,OAA4C;IACzH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,OAAO,GAAG,CAAC,KAAK,aAAa,QAAQ,CAAC,UAAU,MAAM,CAAC,CAAC;AACxG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAW,EAAE,WAAmB,EAAE,OAAe,EAAE,OAAqB;IACpH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3F,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,IAAI,kBAAkB,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC;AAC5H,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,GAAW,EAAE,WAAmB,EAAE,OAAyC;IACtH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,CAAC;IACpD,8EAA8E;IAC9E,MAAM,YAAY,CAAC;QACjB,MAAM,EAAE,UAAU,QAAQ,CAAC,IAAI,SAAS,GAAG,CAAC,KAAK,0CAA0C;QAC3F,QAAQ,EAAE,QAAQ,CAAC,IAAI;QACvB,KAAK,EAAE,mBAAmB;QAC1B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,eAAe,QAAQ,CAAC,IAAI,SAAS,GAAG,CAAC,KAAK,wEAAwE;KAChI,CAAC,CAAC;IACH,MAAM,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IAChD,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;IACnF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,SAAS,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAuF;IACvH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,UAAU,CACR,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,CAAC,EACrC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAChI,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,UAAU,CACR,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,EACvC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CACzO,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,WAA4D,EAAE,YAA0B;IAC5I,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,oFAAoF,CAAC,CAAC;IACvI,MAAM,aAAa,GAAG,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC,gBAAgB,EAAE,sFAAsF,CAAC,CAAC;IAEjJ,WAAW,CACT,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAC1J;mDAC+C,CAChD,CAAC;IACF,WAAW,CACT,eAAe,CACb,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uFAAuF,CAAC;SACpG,QAAQ,CAAC,QAAQ,EAAE,0CAA0C,CAAC;SAC9D,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,EAAE,oBAAoB,CAAC;SACrC,SAAS,CAAC,YAAY,EAAE,CAAC,EAC5B,0BAA0B,CAC3B,CAAC,MAAM,CAAC,aAAa,CAAC,EACvB;kHAC8G,CAC/G,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,yEAAyE,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/N,IAAI;SACD,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oDAAoD,CAAC;SACjE,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;SACzC,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,sBAAsB,CAAC;SAC9B,MAAM,CAAC,qBAAqB,CAAC;SAC7B,MAAM,CAAC,iBAAiB,CAAC;SACzB,MAAM,CAAC,UAAU,CAAC;SAClB,MAAM,CAAC,WAAW,CAAC;SACnB,MAAM,CAAC,WAAW,CAAC;SACnB,MAAM,CAAC,WAAW,CAAC;SACnB,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,aAAa,CAAC,CAAC;IAEzB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,6CAA6C,CAAC,CAAC;IACnG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,8DAA8D,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtM,WAAW,CACT,OAAO;SACJ,OAAO,CAAC,KAAK,CAAC;SACd,WAAW,CAAC,+DAA+D,CAAC;SAC5E,QAAQ,CAAC,OAAO,CAAC;SACjB,QAAQ,CAAC,SAAS,EAAE,UAAU,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SAC7D,QAAQ,CAAC,OAAO,EAAE,qDAAqD,CAAC;SACxE,MAAM,CAAC,SAAS,EAAE,kCAAkC,CAAC;SACrD,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,iBAAiB,CAAC,EAC5B;;qDAEiD,CAClD,CAAC;IAEF,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,mEAAmE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IAE9P,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,4DAA4D,CAAC,CAAC;IAClH,WAAW,CACT,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2EAA2E,CAAC;SACxF,QAAQ,CAAC,OAAO,CAAC;SACjB,QAAQ,CAAC,UAAU,EAAE,0CAA0C,CAAC;SAChE,MAAM,CAAC,WAAW,EAAE,yCAAyC,CAAC;SAC9D,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,oBAAoB,CAAC,EAC/B;0HACsH,CACvH,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,uEAAuE,CAAC,CAAC;IAC3H,WAAW,CACT,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,6EAA6E,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,EAAE,0BAA0B,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EACnT;;4FAEwF,CACzF,CAAC;IAEF,WAAW,CACT,IAAI;SACD,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,2GAA2G,CAAC;SACxH,QAAQ,CAAC,OAAO,CAAC;SACjB,MAAM,CAAC,kBAAkB,EAAE,wCAAwC,CAAC;SACpE,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,WAAW,CAAC,EACtB;8CAC0C,CAC3C,CAAC;IAEF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,WAAW,CAAC,sEAAsE,CAAC,CAAC;IAChI,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACnJ,WAAW,CACT,SAAS;SACN,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,6DAA6D,CAAC;SAC1E,QAAQ,CAAC,OAAO,CAAC;SACjB,QAAQ,CAAC,YAAY,EAAE,qBAAqB,CAAC;SAC7C,SAAS,CAAC,IAAI,MAAM,CAAC,iBAAiB,EAAE,sGAAsG,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SAC7L,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,sBAAsB,CAAC,EACjC;;uIAEmI,CACpI,CAAC;IACF,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,yCAAyC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACtP,SAAS;SACN,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,oGAAoG,CAAC;SACjH,QAAQ,CAAC,OAAO,CAAC;SACjB,QAAQ,CAAC,YAAY,CAAC;SACtB,MAAM,CAAC,OAAO,EAAE,uBAAuB,CAAC;SACxC,SAAS,CAAC,aAAa,EAAE,CAAC;SAC1B,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAElC,WAAW,CACT,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,sFAAsF,CAAC;SACnG,SAAS,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;SACzF,MAAM,CAAC,gBAAgB,EAAE,wDAAwD,CAAC;SAClF,MAAM,CAAC,YAAY,EAAE,6BAA6B,CAAC;SACnD,MAAM,CAAC,aAAa,EAAE,2BAA2B,CAAC;SAClD,SAAS,CAAC,YAAY,EAAE,CAAC;SACzB,MAAM,CAAC,WAAW,CAAC,EACtB;;mDAE+C,CAChD,CAAC;AACJ,CAAC"}

package/dist/cli.js

@@ -11,6 +11,7 @@ import { markSessionUsed, resolveActiveSession, sessionHeaders } from "./mcp-ses
 import { NO_KEY_MESSAGE } from "./api.js";
 import { openInBrowser } from "./browser.js";
 import { registerTeleportCommands } from "./teleport/commands.js";
+import { registerAppCommands } from "./app-commands.js";
 import { deviceLogin } from "./device-login.js";
 const OUTPUT_FORMATS = ["json", "text", "markdown", "raw"];
 const MEMORY_FORMATS = ["full", "outline", "blocks"];
@@ -914,6 +915,7 @@ your own graph or an app graph.`);
         .addOption(hiddenOutputOption())
         .action(cmdLogin);
     registerEndpointCommands(program, addExamples, outputOption);
+    registerAppCommands(program, addExamples, outputOption);
     registerHarnessCommands(program, addExamples);
     registerSessionCommands(program, addExamples);
     registerTeleportCommands(program, addExamples);