@hs-x/cli 0.1.0

package/dist/services/account-store.d.ts

@@ -0,0 +1,31 @@
+import { FileSystem, Path } from '@effect/platform';
+import { Context, Effect, Layer } from 'effect';
+import { type CliError } from '../cli-error.js';
+import type { HsxAccountStore, HsxStoredAccount, HsxUserSession } from '../account-store.js';
+import { AppPaths } from './app-paths.js';
+/**
+ * The account store as an Effect service: bearer session + linked accounts
+ * persisted to `$XDG_CONFIG_HOME/hs-x/config.json` (override `HSX_STORE_PATH`).
+ * All I/O goes through `FileSystem`; timestamps through `Clock`. Mutations fail
+ * with a typed `CliError` (e.g. `HSX_E_ACCOUNT_NOT_FOUND`).
+ */
+export interface AccountStoreApi {
+    /** Read the store; a missing/corrupt file yields an empty store. */
+    readonly load: Effect.Effect<HsxAccountStore>;
+    readonly isLinked: Effect.Effect<boolean>;
+    readonly save: (store: HsxAccountStore) => Effect.Effect<void, CliError>;
+    readonly setUserSession: (session: HsxUserSession) => Effect.Effect<HsxAccountStore, CliError>;
+    readonly clearUserSession: Effect.Effect<HsxAccountStore, CliError>;
+    readonly addAccount: (account: Omit<HsxStoredAccount, 'createdAt'>, options?: {
+        readonly makeDefault?: boolean;
+    }) => Effect.Effect<HsxAccountStore, CliError>;
+    readonly setDefault: (id: string) => Effect.Effect<HsxAccountStore, CliError>;
+    readonly removeAccount: (id: string) => Effect.Effect<HsxAccountStore, CliError>;
+}
+declare const AccountStore_base: Context.TagClass<AccountStore, "cli/AccountStore", AccountStoreApi>;
+export declare class AccountStore extends AccountStore_base {
+}
+export declare function isActiveUserSession(session: HsxUserSession | undefined, nowMs: number): boolean;
+export declare const layer: Layer.Layer<AccountStore, never, FileSystem.FileSystem | Path.Path | AppPaths>;
+export {};
+//# sourceMappingURL=account-store.d.ts.map

package/dist/services/account-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-store.d.ts","sourceRoot":"","sources":["../../src/services/account-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAS,OAAO,EAAE,MAAM,EAAE,KAAK,EAAU,MAAM,QAAQ,CAAC;AAC/D,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAChB,cAAc,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,oEAAoE;IACpE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC/F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IACpE,QAAQ,CAAC,UAAU,EAAE,CACnB,OAAO,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,EAC5C,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,KACzC,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC9E,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;CAClF;;AAED,qBAAa,YAAa,SAAQ,iBAG/B;CAAG;AA4BN,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,cAAc,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAI/F;AAED,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAC7B,YAAY,EACZ,KAAK,EACL,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,GAAG,QAAQ,CAkI7C,CAAC"}

package/dist/services/account-store.js

@@ -0,0 +1,135 @@
+import { FileSystem, Path } from '@effect/platform';
+import { Clock, Context, Effect, Layer, Option } from 'effect';
+import { cliError } from '../cli-error.js';
+import { AppPaths } from './app-paths.js';
+export class AccountStore extends Context.Tag('cli/AccountStore')() {
+}
+const EMPTY_STORE = { schemaVersion: 1, accounts: {} };
+function isStoredAccount(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const v = value;
+    return (typeof v.id === 'string' &&
+        typeof v.displayName === 'string' &&
+        typeof v.hubspotPortalId === 'number' &&
+        (v.source === 'connect' || v.source === 'imported') &&
+        typeof v.createdAt === 'string');
+}
+function isUserSession(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const v = value;
+    return (typeof v.sessionToken === 'string' &&
+        typeof v.expiresAt === 'string' &&
+        typeof v.email === 'string' &&
+        typeof v.userId === 'string' &&
+        (v.accountId === undefined || typeof v.accountId === 'string'));
+}
+export function isActiveUserSession(session, nowMs) {
+    if (!session)
+        return false;
+    const expiresAt = Date.parse(session.expiresAt);
+    return Number.isFinite(expiresAt) && expiresAt > nowMs;
+}
+export const layer = Layer.effect(AccountStore, Effect.gen(function* () {
+    const fs = yield* FileSystem.FileSystem;
+    const path = yield* Path.Path;
+    const paths = yield* AppPaths;
+    const storePath = () => paths.storePath();
+    const load = Effect.gen(function* () {
+        const raw = yield* fs.readFileString(storePath()).pipe(Effect.option);
+        if (Option.isNone(raw))
+            return EMPTY_STORE;
+        return yield* Effect.try(() => {
+            const parsed = JSON.parse(raw.value);
+            const accounts = {};
+            if (parsed.accounts && typeof parsed.accounts === 'object') {
+                for (const [id, value] of Object.entries(parsed.accounts)) {
+                    if (isStoredAccount(value))
+                        accounts[id] = value;
+                }
+            }
+            return {
+                schemaVersion: 1,
+                ...(parsed.defaultAccountId ? { defaultAccountId: parsed.defaultAccountId } : {}),
+                accounts,
+                ...(isUserSession(parsed.userSession) ? { userSession: parsed.userSession } : {}),
+            };
+        }).pipe(Effect.orElseSucceed(() => EMPTY_STORE));
+    });
+    const save = (store) => Effect.gen(function* () {
+        const target = storePath();
+        yield* fs.makeDirectory(path.dirname(target), { recursive: true, mode: 0o700 });
+        yield* fs.writeFileString(target, `${JSON.stringify(store, null, 2)}\n`);
+        // file holds a bearer token — best-effort restrict perms (no-op on Windows)
+        yield* fs.chmod(target, 0o600).pipe(Effect.ignore);
+    }).pipe(Effect.mapError((cause) => cliError('HSX_E_INTERNAL', `Failed to write account store: ${String(cause)}`)));
+    const isLinked = Effect.gen(function* () {
+        const store = yield* load;
+        const nowMs = yield* Clock.currentTimeMillis;
+        return isActiveUserSession(store.userSession, nowMs);
+    });
+    const setUserSession = (session) => Effect.gen(function* () {
+        const store = yield* load;
+        const next = { ...store, userSession: session };
+        yield* save(next);
+        return next;
+    });
+    const clearUserSession = Effect.gen(function* () {
+        const store = yield* load;
+        const { userSession: _drop, ...rest } = store;
+        void _drop;
+        const next = rest;
+        yield* save(next);
+        return next;
+    });
+    const addAccount = (account, options = {}) => Effect.gen(function* () {
+        const store = yield* load;
+        const nowMs = yield* Clock.currentTimeMillis;
+        const accounts = {
+            ...store.accounts,
+            [account.id]: { ...account, createdAt: new Date(nowMs).toISOString() },
+        };
+        const defaultAccountId = options.makeDefault || !store.defaultAccountId ? account.id : store.defaultAccountId;
+        const next = { schemaVersion: 1, defaultAccountId, accounts };
+        yield* save(next);
+        return next;
+    });
+    const setDefault = (id) => Effect.gen(function* () {
+        const store = yield* load;
+        if (!store.accounts[id]) {
+            return yield* Effect.fail(cliError('HSX_E_ACCOUNT_NOT_FOUND', `No HS-X account with id ${id}.`));
+        }
+        const next = { ...store, defaultAccountId: id };
+        yield* save(next);
+        return next;
+    });
+    const removeAccount = (id) => Effect.gen(function* () {
+        const store = yield* load;
+        if (!store.accounts[id]) {
+            return yield* Effect.fail(cliError('HSX_E_ACCOUNT_NOT_FOUND', `No HS-X account with id ${id}.`));
+        }
+        const accounts = { ...store.accounts };
+        delete accounts[id];
+        const remaining = Object.keys(accounts);
+        const defaultAccountId = store.defaultAccountId === id ? remaining[0] : store.defaultAccountId;
+        const next = {
+            schemaVersion: 1,
+            ...(defaultAccountId ? { defaultAccountId } : {}),
+            accounts,
+        };
+        yield* save(next);
+        return next;
+    });
+    return {
+        load,
+        isLinked,
+        save,
+        setUserSession,
+        clearUserSession,
+        addAccount,
+        setDefault,
+        removeAccount,
+    };
+}));
+//# sourceMappingURL=account-store.js.map

package/dist/services/account-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-store.js","sourceRoot":"","sources":["../../src/services/account-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAiB,MAAM,iBAAiB,CAAC;AAM1D,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAuB1C,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAG9D;CAAG;AAEN,MAAM,WAAW,GAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAExE,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC;QACnD,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAChC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAClC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAmC,EAAE,KAAa;IACpF,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,KAAK,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,MAAM,KAAK,GAId,KAAK,CAAC,MAAM,CACd,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC;IAE9B,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;IAElD,MAAM,IAAI,GAA4B,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QACxD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,WAAW,CAAC;QAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAGlC,CAAC;YACF,MAAM,QAAQ,GAAqC,EAAE,CAAC;YACtD,IAAI,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC3D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,QAAmC,CAAC,EAAE,CAAC;oBACrF,IAAI,eAAe,CAAC,KAAK,CAAC;wBAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;gBACnD,CAAC;YACH,CAAC;YACD,OAAO;gBACL,aAAa,EAAE,CAAU;gBACzB,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,QAAQ;gBACR,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClF,CAAC;QACJ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAA4B,CAAC,KAAK,EAAE,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,KAAK,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,KAAK,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACzE,4EAA4E;QAC5E,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CACxB,QAAQ,CAAC,gBAAgB,EAAE,kCAAkC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAC9E,CACF,CAAC;IAEJ,MAAM,QAAQ,GAAgC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC7C,OAAO,mBAAmB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAsC,CAAC,OAAO,EAAE,EAAE,CACpE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAoB,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACjE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,MAAM,gBAAgB,GAAwC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAChF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;QAC1B,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAC9C,KAAK,KAAK,CAAC;QACX,MAAM,IAAI,GAAoB,IAAI,CAAC;QACnC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,MAAM,UAAU,GAAkC,CAAC,OAAO,EAAE,OAAO,GAAG,EAAE,EAAE,EAAE,CAC1E,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;QAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;QAC7C,MAAM,QAAQ,GAAqC;YACjD,GAAG,KAAK,CAAC,QAAQ;YACjB,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE;SACvE,CAAC;QACF,MAAM,gBAAgB,GACpB,OAAO,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACvF,MAAM,IAAI,GAAoB,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;QAC/E,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,MAAM,UAAU,GAAkC,CAAC,EAAE,EAAE,EAAE,CACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CAAC,yBAAyB,EAAE,2BAA2B,EAAE,GAAG,CAAC,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAoB,EAAE,GAAG,KAAK,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC;QACjE,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,MAAM,aAAa,GAAqC,CAAC,EAAE,EAAE,EAAE,CAC7D,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CAAC,yBAAyB,EAAE,2BAA2B,EAAE,GAAG,CAAC,CACtE,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvC,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC;QACpB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,gBAAgB,GACpB,KAAK,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACxE,MAAM,IAAI,GAAoB;YAC5B,aAAa,EAAE,CAAC;YAChB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,QAAQ;SACT,CAAC;QACF,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEL,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,IAAI;QACJ,cAAc;QACd,gBAAgB;QAChB,UAAU;QACV,UAAU;QACV,aAAa;KACY,CAAC;AAC9B,CAAC,CAAC,CACH,CAAC"}

package/dist/services/app-paths.d.ts

@@ -0,0 +1,25 @@
+import { Path } from '@effect/platform';
+import { Context, Layer } from 'effect';
+/**
+ * Resolves XDG base directories for the `hs-x` app. Pure string assembly once
+ * the environment is captured at Layer construction — exposed as plain methods
+ * (no Effect) because there is no I/O, only path joining via the `Path` service.
+ */
+export interface AppPathsApi {
+    readonly configPath: (file: string) => string;
+    readonly cachePath: (file: string) => string;
+    readonly statePath: (file: string) => string;
+    /** Account store location; honors the `HSX_STORE_PATH` override. */
+    readonly storePath: () => string;
+}
+declare const AppPaths_base: Context.TagClass<AppPaths, "cli/AppPaths", AppPathsApi>;
+export declare class AppPaths extends AppPaths_base {
+}
+/**
+ * Live layer. Environment (`HOME`, `XDG_*`, `HSX_STORE_PATH`) is read through
+ * `Config` and `homedir()` is the single sanctioned platform fallback (the
+ * edge). Path joining goes through the injected `Path` service.
+ */
+export declare const layer: Layer.Layer<AppPaths, never, Path.Path>;
+export {};
+//# sourceMappingURL=app-paths.d.ts.map

package/dist/services/app-paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-paths.d.ts","sourceRoot":"","sources":["../../src/services/app-paths.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAU,OAAO,EAAU,KAAK,EAAE,MAAM,QAAQ,CAAC;AAExD;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7C,oEAAoE;IACpE,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,CAAC;CAClC;;AAED,qBAAa,QAAS,SAAQ,aAAoD;CAAG;AAIrF;;;;GAIG;AACH,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,CA0BzD,CAAC"}

package/dist/services/app-paths.js

@@ -0,0 +1,34 @@
+import { homedir } from 'node:os';
+import { Path } from '@effect/platform';
+import { Config, Context, Effect, Layer } from 'effect';
+export class AppPaths extends Context.Tag('cli/AppPaths')() {
+}
+const APP_DIR = 'hs-x';
+/**
+ * Live layer. Environment (`HOME`, `XDG_*`, `HSX_STORE_PATH`) is read through
+ * `Config` and `homedir()` is the single sanctioned platform fallback (the
+ * edge). Path joining goes through the injected `Path` service.
+ */
+export const layer = Layer.effect(AppPaths, Effect.gen(function* () {
+    const path = yield* Path.Path;
+    const env = yield* Config.all({
+        home: Config.string('HOME').pipe(Config.withDefault('')),
+        xdgConfig: Config.string('XDG_CONFIG_HOME').pipe(Config.withDefault('')),
+        xdgCache: Config.string('XDG_CACHE_HOME').pipe(Config.withDefault('')),
+        xdgState: Config.string('XDG_STATE_HOME').pipe(Config.withDefault('')),
+        storeOverride: Config.string('HSX_STORE_PATH').pipe(Config.withDefault('')),
+        // every key has a default, so a config read can never actually fail here
+    }).pipe(Effect.orDie);
+    const home = env.home.length > 0 ? env.home : homedir();
+    const base = (override, ...segments) => override.length > 0 ? override : path.join(home, ...segments);
+    const configBase = base(env.xdgConfig, '.config');
+    const cacheBase = base(env.xdgCache, '.cache');
+    const stateBase = base(env.xdgState, '.local', 'state');
+    return {
+        configPath: (file) => path.join(configBase, APP_DIR, file),
+        cachePath: (file) => path.join(cacheBase, APP_DIR, file),
+        statePath: (file) => path.join(stateBase, APP_DIR, file),
+        storePath: () => env.storeOverride.length > 0 ? env.storeOverride : path.join(configBase, APP_DIR, 'config.json'),
+    };
+}));
+//# sourceMappingURL=app-paths.js.map

package/dist/services/app-paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-paths.js","sourceRoot":"","sources":["../../src/services/app-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAexD,MAAM,OAAO,QAAS,SAAQ,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAyB;CAAG;AAErF,MAAM,OAAO,GAAG,MAAM,CAAC;AAEvB;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAA4C,KAAK,CAAC,MAAM,CACxE,QAAQ,EACR,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9B,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxD,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtE,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3E,yEAAyE;KAC1E,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,MAAM,IAAI,GAAG,CAAC,QAAgB,EAAE,GAAG,QAAkB,EAAU,EAAE,CAC/D,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IACxD,OAAO;QACL,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;QAC1D,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;QACxD,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;QACxD,SAAS,EAAE,GAAG,EAAE,CACd,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC;KAC7E,CAAC;AAC1B,CAAC,CAAC,CACH,CAAC"}

package/dist/services/cloudflare-auth.d.ts

@@ -0,0 +1,83 @@
+import type { Schema, schemas } from '@hs-x/types';
+import { Context, Effect, Layer } from 'effect';
+import { type CliError } from '../cli-error.js';
+import { type CloudflareTokenInfo } from '../cloudflare-auth.js';
+import { type CallbackResult, type CloudflareOAuthConfig, type CloudflareOAuthTokens, type ExchangeCodeInput, type LoadCloudflareOAuthConfigInput, type PkcePair, type RefreshTokensInput } from '../cloudflare-oauth.js';
+import { type CloudflareOAuthCredential, type CloudflareOAuthStore } from '../cloudflare-oauth-store.js';
+type CloudflarePointer = Schema.Schema.Type<typeof schemas.CloudflarePointer>;
+/** Handle returned by {@link CloudflareAuthApi.startCallbackListener}. */
+export interface CallbackListenerHandle {
+    readonly result: Promise<CallbackResult>;
+    readonly close: () => Promise<void>;
+}
+/**
+ * The Cloudflare auth concern as an Effect service. Wraps the imperative
+ * OAuth orchestration (`cloudflare-oauth.ts` — local callback listener + browser
+ * handoff) and the simpler fs/http helpers (`cloudflare-auth.ts` token verify,
+ * `cloudflare-oauth-store.ts` refresh-token store, `cloudflare-pointer.ts`
+ * project pointer) behind Effect-returning methods. Failures surface as a
+ * typed `CliError` (`HSX_E_INTERNAL`); the underlying functions retain their
+ * own internal error mapping, so the wrapped boundary is uniformly `CliError`.
+ *
+ * The OAuth listener is genuinely imperative (binds a loopback HTTP server) and
+ * is NOT rewritten here — `startCallbackListener` returns its existing handle
+ * (`{ result, close }`) synchronously inside an `Effect.sync`; callers await the
+ * `result` Promise and invoke `close()` themselves as before.
+ */
+export interface CloudflareAuthApi {
+    /** Verify an API token and introspect its granted/missing permission groups. */
+    readonly verifyToken: (token: string, baseUrl?: string) => Effect.Effect<CloudflareTokenInfo, CliError>;
+    /** Source the brokered OAuth client config (control plane, or dev env override). */
+    readonly loadOAuthConfig: (input?: LoadCloudflareOAuthConfigInput) => Effect.Effect<CloudflareOAuthConfig, CliError>;
+    /** Generate a PKCE verifier/challenge pair (S256). Pure, never fails. */
+    readonly generatePkce: Effect.Effect<PkcePair>;
+    /** Generate an opaque OAuth `state` value. Pure, never fails. */
+    readonly generateState: Effect.Effect<string>;
+    /** Build the `/oauth2/auth` URL the user's browser is sent to. */
+    readonly buildAuthorizeUrl: (input: {
+        readonly config: CloudflareOAuthConfig;
+        readonly pkce: PkcePair;
+        readonly state: string;
+    }) => Effect.Effect<string>;
+    /**
+     * Start the local loopback callback listener (quarantined imperative
+     * orchestration). Returns the existing handle synchronously; the caller
+     * awaits `handle.result` and calls `handle.close()`.
+     */
+    readonly startCallbackListener: (input: {
+        readonly port: number;
+        readonly expectedState: string;
+        readonly timeoutMs?: number;
+    }) => Effect.Effect<CallbackListenerHandle>;
+    /** Exchange an authorization code (+ PKCE verifier) for tokens. */
+    readonly exchangeAuthorizationCode: (input: ExchangeCodeInput) => Effect.Effect<CloudflareOAuthTokens, CliError>;
+    /** Refresh tokens from a stored refresh token. */
+    readonly refreshTokens: (input: RefreshTokensInput) => Effect.Effect<CloudflareOAuthTokens, CliError>;
+    /** Persist a refresh-token credential keyed by Cloudflare account id. */
+    readonly saveOAuthCredential: (cloudflareAccountId: string, credential: Omit<CloudflareOAuthCredential, 'updatedAt'>, options?: {
+        readonly path?: string;
+        readonly now?: () => Date;
+    }) => Effect.Effect<CloudflareOAuthStore, CliError>;
+    /** Read a stored refresh-token credential for a Cloudflare account id. */
+    readonly getOAuthCredential: (cloudflareAccountId: string, path?: string) => Effect.Effect<CloudflareOAuthCredential | undefined, CliError>;
+    /** Load the `.hs-x/cloudflare.json` pointer for a project root (or undefined). */
+    readonly loadPointer: (root: string) => Effect.Effect<CloudflarePointer | undefined, CliError>;
+    /** Create the pointer if absent, otherwise return the existing one. */
+    readonly ensurePointer: (input: {
+        readonly root: string;
+        readonly cloudflareAccountId: string;
+        readonly stateKvNamespaceId: string;
+        readonly stateKvNamespaceName: string;
+    }) => Effect.Effect<CloudflarePointer, CliError>;
+    /** Rewrite the pointer's `ownerId` (claim on link). */
+    readonly rewritePointerOwner: (input: {
+        readonly root: string;
+        readonly ownerId: string;
+    }) => Effect.Effect<CloudflarePointer, CliError>;
+}
+declare const CloudflareAuth_base: Context.TagClass<CloudflareAuth, "cli/CloudflareAuth", CloudflareAuthApi>;
+export declare class CloudflareAuth extends CloudflareAuth_base {
+}
+export declare const layer: Layer.Layer<CloudflareAuth>;
+export {};
+//# sourceMappingURL=cloudflare-auth.d.ts.map

package/dist/services/cloudflare-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-auth.d.ts","sourceRoot":"","sources":["../../src/services/cloudflare-auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,EAQL,KAAK,cAAc,EACnB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,8BAA8B,EACnC,KAAK,QAAQ,EACb,KAAK,kBAAkB,EACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EAC1B,MAAM,8BAA8B,CAAC;AAOtC,KAAK,iBAAiB,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAE9E,0EAA0E;AAC1E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACzC,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,iBAAiB;IAEhC,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,CACpB,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,KACb,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAGlD,oFAAoF;IACpF,QAAQ,CAAC,eAAe,EAAE,CACxB,KAAK,CAAC,EAAE,8BAA8B,KACnC,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IACpD,yEAAyE;IACzE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/C,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,kEAAkE;IAClE,QAAQ,CAAC,iBAAiB,EAAE,CAAC,KAAK,EAAE;QAClC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;QACvC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACxB,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,qBAAqB,EAAE,CAAC,KAAK,EAAE;QACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B,KAAK,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IAC5C,mEAAmE;IACnE,QAAQ,CAAC,yBAAyB,EAAE,CAClC,KAAK,EAAE,iBAAiB,KACrB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IACpD,kDAAkD;IAClD,QAAQ,CAAC,aAAa,EAAE,CACtB,KAAK,EAAE,kBAAkB,KACtB,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IAGpD,yEAAyE;IACzE,QAAQ,CAAC,mBAAmB,EAAE,CAC5B,mBAAmB,EAAE,MAAM,EAC3B,UAAU,EAAE,IAAI,CAAC,yBAAyB,EAAE,WAAW,CAAC,EACxD,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAA;KAAE,KAC5D,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;IACnD,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,mBAAmB,EAAE,MAAM,EAC3B,IAAI,CAAC,EAAE,MAAM,KACV,MAAM,CAAC,MAAM,CAAC,yBAAyB,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC;IAGpE,kFAAkF;IAClF,QAAQ,CAAC,WAAW,EAAE,CACpB,IAAI,EAAE,MAAM,KACT,MAAM,CAAC,MAAM,CAAC,iBAAiB,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC5D,uEAAuE;IACvE,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE;QAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;QACrC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;KACvC,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;IACjD,uDAAuD;IACvD,QAAQ,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE;QACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,KAAK,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,CAAC;CAClD;;AAED,qBAAa,cAAe,SAAQ,mBAGjC;CAAG;AAQN,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,CAiChB,CAAC"}

package/dist/services/cloudflare-auth.js

@@ -0,0 +1,30 @@
+import { Context, Effect, Layer } from 'effect';
+import { cliError } from '../cli-error.js';
+import { verifyCloudflareToken } from '../cloudflare-auth.js';
+import { buildAuthorizeUrl, exchangeAuthorizationCode, generatePkcePair, generateState, loadCloudflareOAuthConfig, refreshTokens, startCallbackListener, } from '../cloudflare-oauth.js';
+import { getCloudflareOAuthCredential, saveCloudflareOAuthCredential, } from '../cloudflare-oauth-store.js';
+import { ensureCloudflarePointer, loadCloudflarePointer, rewriteCloudflarePointerOwner, } from '../cloudflare-pointer.js';
+export class CloudflareAuth extends Context.Tag('cli/CloudflareAuth')() {
+}
+const wrap = (thunk) => Effect.tryPromise({
+    try: thunk,
+    catch: (e) => cliError('HSX_E_INTERNAL', String(e)),
+});
+export const layer = Layer.succeed(CloudflareAuth, {
+    verifyToken: (token, baseUrl) => wrap(() => (baseUrl === undefined ? verifyCloudflareToken(token) : verifyCloudflareToken(token, baseUrl))),
+    loadOAuthConfig: (input) => wrap(() => loadCloudflareOAuthConfig(input)),
+    generatePkce: Effect.sync(() => generatePkcePair()),
+    generateState: Effect.sync(() => generateState()),
+    buildAuthorizeUrl: (input) => Effect.sync(() => buildAuthorizeUrl(input)),
+    startCallbackListener: (input) => Effect.sync(() => startCallbackListener(input)),
+    exchangeAuthorizationCode: (input) => wrap(() => exchangeAuthorizationCode(input)),
+    refreshTokens: (input) => wrap(() => refreshTokens(input)),
+    saveOAuthCredential: (cloudflareAccountId, credential, options) => wrap(() => saveCloudflareOAuthCredential(cloudflareAccountId, credential, options)),
+    getOAuthCredential: (cloudflareAccountId, path) => wrap(() => path === undefined
+        ? getCloudflareOAuthCredential(cloudflareAccountId)
+        : getCloudflareOAuthCredential(cloudflareAccountId, path)),
+    loadPointer: (root) => wrap(() => loadCloudflarePointer(root)),
+    ensurePointer: (input) => wrap(() => ensureCloudflarePointer(input)),
+    rewritePointerOwner: (input) => wrap(() => rewriteCloudflarePointerOwner(input)),
+});
+//# sourceMappingURL=cloudflare-auth.js.map

package/dist/services/cloudflare-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-auth.js","sourceRoot":"","sources":["../../src/services/cloudflare-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAiB,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAA4B,MAAM,uBAAuB,CAAC;AACxF,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EAChB,aAAa,EACb,yBAAyB,EACzB,aAAa,EACb,qBAAqB,GAQtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAG9B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAkGlC,MAAM,OAAO,cAAe,SAAQ,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAGlE;CAAG;AAEN,MAAM,IAAI,GAAG,CAAI,KAAuB,EAA8B,EAAE,CACtE,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK;IACV,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;CACpD,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,KAAK,GAAgC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE;IAC9E,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAC9B,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IAE5G,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAExE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC;IAEnD,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC;IAEjD,iBAAiB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;IAEzE,qBAAqB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEjF,yBAAyB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;IAElF,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAE1D,mBAAmB,EAAE,CAAC,mBAAmB,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAChE,IAAI,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,mBAAmB,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAErF,kBAAkB,EAAE,CAAC,mBAAmB,EAAE,IAAI,EAAE,EAAE,CAChD,IAAI,CAAC,GAAG,EAAE,CACR,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,4BAA4B,CAAC,mBAAmB,CAAC;QACnD,CAAC,CAAC,4BAA4B,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAC5D;IAEH,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE9D,aAAa,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAEpE,mBAAmB,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;CACrD,CAAC,CAAC"}

package/dist/services/cloudflare-kv.d.ts

@@ -0,0 +1,45 @@
+import { Context, Effect, Layer } from 'effect';
+import { type CliError } from '../cli-error.js';
+import { CliHttp } from './http.js';
+export interface CloudflareKvNamespace {
+    readonly id: string;
+    readonly title: string;
+}
+/**
+ * A credential- and namespace-bound Cloudflare KV client. All methods return
+ * Effects that fail with a typed `CliError` (`HSX_E_API_NETWORK` for transport
+ * / HTTP failures, `HSX_E_INTERNAL` for invariant violations). The active
+ * namespace id is held in a `Ref` so `ensureNamespace` can latch it for later
+ * value/key operations within the same handle.
+ */
+export interface CloudflareKvHandle {
+    readonly ensureNamespace: (name: string) => Effect.Effect<CloudflareKvNamespace, CliError>;
+    readonly get: (key: string) => Effect.Effect<string | undefined, CliError>;
+    readonly put: (key: string, value: string) => Effect.Effect<void, CliError>;
+    readonly list: (prefix: string) => Effect.Effect<readonly string[], CliError>;
+    readonly delete: (key: string) => Effect.Effect<void, CliError>;
+}
+/**
+ * Cloudflare KV access as an injectable service. `make` builds a handle bound
+ * to a set of credentials + (optional) namespace; `resolveCredentials` merges
+ * argv-flag overrides over the environment (read via `Config` at layer build).
+ * Depends on `CliHttp` for all transport — never touches raw `fetch`.
+ */
+export interface CloudflareKvApi {
+    readonly make: (input: {
+        readonly accountId: string;
+        readonly apiToken: string;
+        readonly namespaceId?: string;
+        readonly baseUrl?: string;
+    }) => Effect.Effect<CloudflareKvHandle>;
+    readonly resolveCredentials: (argv: readonly string[]) => Effect.Effect<{
+        readonly apiToken: string | undefined;
+        readonly accountId: string | undefined;
+    }>;
+}
+declare const CloudflareKv_base: Context.TagClass<CloudflareKv, "cli/CloudflareKv", CloudflareKvApi>;
+export declare class CloudflareKv extends CloudflareKv_base {
+}
+export declare const layer: Layer.Layer<CloudflareKv, never, CliHttp>;
+export {};
+//# sourceMappingURL=cloudflare-kv.d.ts.map

package/dist/services/cloudflare-kv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-kv.d.ts","sourceRoot":"","sources":["../../src/services/cloudflare-kv.ts"],"names":[],"mappings":"AACA,OAAO,EAAU,OAAO,EAAE,MAAM,EAAE,KAAK,EAAO,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAY,KAAK,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;IAC3F,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC3E,QAAQ,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5E,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,MAAM,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9E,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;CACjE;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;KAC3B,KAAK,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACxC,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,IAAI,EAAE,SAAS,MAAM,EAAE,KACpB,MAAM,CAAC,MAAM,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACvG;;AAED,qBAAa,YAAa,SAAQ,iBAG/B;CAAG;AAEN,eAAO,MAAM,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,OAAO,CAuN3D,CAAC"}

package/dist/services/cloudflare-kv.js

@@ -0,0 +1,151 @@
+import { HttpClientRequest } from '@hs-x/types';
+import { Config, Context, Effect, Layer, Ref } from 'effect';
+import { cliError } from '../cli-error.js';
+import { CliHttp } from './http.js';
+const DEFAULT_BASE_URL = 'https://api.cloudflare.com';
+export class CloudflareKv extends Context.Tag('cli/CloudflareKv')() {
+}
+export const layer = Layer.effect(CloudflareKv, Effect.gen(function* () {
+    const http = yield* CliHttp;
+    // Environment fallbacks for credentials, read once at layer construction.
+    const env = yield* Config.all({
+        envApiTokenHsx: Config.string('HSX_CLOUDFLARE_API_TOKEN').pipe(Config.withDefault('')),
+        envApiToken: Config.string('CLOUDFLARE_API_TOKEN').pipe(Config.withDefault('')),
+        envAccountIdHsx: Config.string('HSX_CLOUDFLARE_ACCOUNT_ID').pipe(Config.withDefault('')),
+        envAccountId: Config.string('CLOUDFLARE_ACCOUNT_ID').pipe(Config.withDefault('')),
+        // every key has a default, so a config read can never actually fail here
+    }).pipe(Effect.orDie);
+    const make = (input) => Effect.gen(function* () {
+        const baseUrl = input.baseUrl ?? DEFAULT_BASE_URL;
+        const namespaceRef = yield* Ref.make(input.namespaceId);
+        const buildUrl = (path) => new URL(path, baseUrl);
+        const baseHeaders = (extra) => ({
+            authorization: `Bearer ${input.apiToken}`,
+            ...(extra ?? {}),
+        });
+        // GET-style request that fails on any non-ok status.
+        const execOk = (path) => Effect.gen(function* () {
+            const request = HttpClientRequest.make('GET')(buildUrl(path)).pipe(HttpClientRequest.setHeaders(baseHeaders()));
+            const response = yield* http.execute(request);
+            if (!response.ok) {
+                const detail = yield* readTextSafe(response);
+                return yield* Effect.fail(cliError('HSX_E_API_NETWORK', `Cloudflare KV request failed (${response.status})${detail ? `: ${detail}` : ''}`));
+            }
+            return response;
+        });
+        const requireNamespaceId = () => Effect.flatMap(Ref.get(namespaceRef), (id) => id
+            ? Effect.succeed(id)
+            : Effect.fail(cliError('HSX_E_INTERNAL', 'Cloudflare KV namespace has not been initialized.')));
+        const namespacesPath = `/client/v4/accounts/${encodeURIComponent(input.accountId)}/storage/kv/namespaces`;
+        const ensureNamespace = (name) => Effect.gen(function* () {
+            const listResponse = yield* execOk(namespacesPath);
+            const listBody = yield* readJson(listResponse);
+            const existing = listBody.result?.find((item) => item.title === name);
+            if (existing?.id && existing.title) {
+                yield* Ref.set(namespaceRef, existing.id);
+                return { id: existing.id, title: existing.title };
+            }
+            const createRequest = HttpClientRequest.make('POST')(buildUrl(namespacesPath)).pipe(HttpClientRequest.setHeaders(baseHeaders()), HttpClientRequest.bodyText(JSON.stringify({ title: name }), 'application/json'));
+            const createResponse = yield* http.execute(createRequest);
+            if (!createResponse.ok) {
+                const detail = yield* readTextSafe(createResponse);
+                return yield* Effect.fail(cliError('HSX_E_API_NETWORK', `Cloudflare KV request failed (${createResponse.status})${detail ? `: ${detail}` : ''}`));
+            }
+            const createBody = yield* readJson(createResponse);
+            if (!createBody.result?.id) {
+                return yield* Effect.fail(cliError('HSX_E_INTERNAL', 'Cloudflare KV namespace create response did not include an id.'));
+            }
+            yield* Ref.set(namespaceRef, createBody.result.id);
+            return { id: createBody.result.id, title: createBody.result.title ?? name };
+        });
+        const valuePath = (namespaceId, key) => `/client/v4/accounts/${encodeURIComponent(input.accountId)}/storage/kv/namespaces/${encodeURIComponent(namespaceId)}/values/${encodeURIComponent(key)}`;
+        const get = (key) => Effect.gen(function* () {
+            const namespaceId = yield* requireNamespaceId();
+            const request = HttpClientRequest.make('GET')(buildUrl(valuePath(namespaceId, key))).pipe(HttpClientRequest.setHeaders(baseHeaders()));
+            const response = yield* http.execute(request);
+            if (response.status === 404)
+                return undefined;
+            if (!response.ok) {
+                return yield* Effect.fail(cliError('HSX_E_API_NETWORK', `Cloudflare KV get failed (${response.status}).`));
+            }
+            return yield* readText(response);
+        });
+        const put = (key, value) => Effect.gen(function* () {
+            const namespaceId = yield* requireNamespaceId();
+            const request = HttpClientRequest.make('PUT')(buildUrl(valuePath(namespaceId, key))).pipe(HttpClientRequest.setHeaders(baseHeaders()), HttpClientRequest.bodyText(value, 'text/plain'));
+            const response = yield* http.execute(request);
+            if (!response.ok) {
+                const detail = yield* readTextSafe(response);
+                return yield* Effect.fail(cliError('HSX_E_API_NETWORK', `Cloudflare KV request failed (${response.status})${detail ? `: ${detail}` : ''}`));
+            }
+        });
+        const list = (prefix) => Effect.gen(function* () {
+            const namespaceId = yield* requireNamespaceId();
+            const keysPath = `/client/v4/accounts/${encodeURIComponent(input.accountId)}/storage/kv/namespaces/${encodeURIComponent(namespaceId)}/keys`;
+            const keys = [];
+            let cursor;
+            do {
+                const url = buildUrl(keysPath);
+                url.searchParams.set('prefix', prefix);
+                if (cursor)
+                    url.searchParams.set('cursor', cursor);
+                const response = yield* execOk(`${url.pathname}${url.search}`);
+                const body = yield* readJson(response);
+                keys.push(...(body.result ?? []).flatMap((item) => (item.name ? [item.name] : [])));
+                cursor = body.result_info?.cursor || undefined;
+            } while (cursor);
+            return keys;
+        });
+        const del = (key) => Effect.gen(function* () {
+            const namespaceId = yield* requireNamespaceId();
+            const request = HttpClientRequest.make('DELETE')(buildUrl(valuePath(namespaceId, key))).pipe(HttpClientRequest.setHeaders(baseHeaders()));
+            const response = yield* http.execute(request);
+            if (!response.ok) {
+                const detail = yield* readTextSafe(response);
+                return yield* Effect.fail(cliError('HSX_E_API_NETWORK', `Cloudflare KV request failed (${response.status})${detail ? `: ${detail}` : ''}`));
+            }
+        });
+        return {
+            ensureNamespace,
+            get,
+            put,
+            list,
+            delete: del,
+        };
+    });
+    const resolveCredentials = (argv) => Effect.sync(() => {
+        const envApiToken = env.envApiTokenHsx || env.envApiToken || undefined;
+        const envAccountId = env.envAccountIdHsx || env.envAccountId || undefined;
+        return {
+            apiToken: resolveFlag(argv, '--cloudflare-api-token') ??
+                resolveFlag(argv, '--api-token') ??
+                envApiToken,
+            accountId: resolveFlag(argv, '--cloudflare-account-id') ?? envAccountId,
+        };
+    });
+    return { make, resolveCredentials };
+}));
+function readJson(response) {
+    return Effect.tryPromise({
+        try: () => response.json(),
+        catch: (cause) => cliError('HSX_E_API_NETWORK', `Failed to parse Cloudflare KV response: ${String(cause)}`),
+    });
+}
+function readText(response) {
+    return Effect.tryPromise({
+        try: () => response.text(),
+        catch: (cause) => cliError('HSX_E_API_NETWORK', `Failed to read Cloudflare KV response: ${String(cause)}`),
+    });
+}
+/** Best-effort body text for error detail; never fails the surrounding Effect. */
+function readTextSafe(response) {
+    return Effect.promise(() => response.text().catch(() => ''));
+}
+function resolveFlag(argv, name) {
+    const eq = argv.find((arg) => arg.startsWith(`${name}=`));
+    if (eq)
+        return eq.slice(name.length + 1);
+    const idx = argv.indexOf(name);
+    return idx >= 0 ? argv[idx + 1] : undefined;
+}
+//# sourceMappingURL=cloudflare-kv.js.map

package/dist/services/cloudflare-kv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare-kv.js","sourceRoot":"","sources":["../../src/services/cloudflare-kv.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAiB,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAwCtD,MAAM,OAAO,YAAa,SAAQ,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAG9D;CAAG;AAEN,MAAM,CAAC,MAAM,KAAK,GAA8C,KAAK,CAAC,MAAM,CAC1E,YAAY,EACZ,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;IAE5B,0EAA0E;IAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACtF,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC/E,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACxF,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjF,yEAAyE;KAC1E,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM,IAAI,GAA4B,CAAC,KAAK,EAAE,EAAE,CAC9C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,gBAAgB,CAAC;QAClD,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAqB,KAAK,CAAC,WAAW,CAAC,CAAC;QAE5E,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAO,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAE/D,MAAM,WAAW,GAAG,CAAC,KAA8B,EAA0B,EAAE,CAAC,CAAC;YAC/E,aAAa,EAAE,UAAU,KAAK,CAAC,QAAQ,EAAE;YACzC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACjB,CAAC,CAAC;QAEH,qDAAqD;QACrD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAqC,EAAE,CACjE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAChE,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAC5C,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CACN,mBAAmB,EACnB,iCAAiC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClF,CACF,CAAC;YACJ,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;QAEL,MAAM,kBAAkB,GAAG,GAAoC,EAAE,CAC/D,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAC3C,EAAE;YACA,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,QAAQ,CACN,gBAAgB,EAChB,mDAAmD,CACpD,CACF,CACN,CAAC;QAEJ,MAAM,cAAc,GAAG,uBAAuB,kBAAkB,CAC9D,KAAK,CAAC,SAAS,CAChB,wBAAwB,CAAC;QAE1B,MAAM,eAAe,GAA0C,CAAC,IAAI,EAAE,EAAE,CACtE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,QAAQ,CAE7B,YAAY,CAAC,CAAC;YACjB,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;YACtE,IAAI,QAAQ,EAAE,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBACnC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC1C,OAAO,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;YACpD,CAAC;YAED,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CACjF,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAC3C,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAChF,CAAC;YACF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAC1D,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACvB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;gBACnD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CACN,mBAAmB,EACnB,iCAAiC,cAAc,CAAC,MAAM,IACpD,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAC3B,EAAE,CACH,CACF,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,QAAQ,CAChC,cAAc,CACf,CAAC;YACF,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CACN,gBAAgB,EAChB,gEAAgE,CACjE,CACF,CAAC;YACJ,CAAC;YACD,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACnD,OAAO,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC9E,CAAC,CAAC,CAAC;QAEL,MAAM,SAAS,GAAG,CAAC,WAAmB,EAAE,GAAW,EAAU,EAAE,CAC7D,uBAAuB,kBAAkB,CACvC,KAAK,CAAC,SAAS,CAChB,0BAA0B,kBAAkB,CAAC,WAAW,CAAC,WAAW,kBAAkB,CACrF,GAAG,CACJ,EAAE,CAAC;QAEN,MAAM,GAAG,GAA8B,CAAC,GAAG,EAAE,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3C,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CACtC,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CAAC,mBAAmB,EAAE,6BAA6B,QAAQ,CAAC,MAAM,IAAI,CAAC,CAChF,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QAEL,MAAM,GAAG,GAA8B,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3C,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CACtC,CAAC,IAAI,CACJ,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,EAC3C,iBAAiB,CAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,CAChD,CAAC;YACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CACN,mBAAmB,EACnB,iCAAiC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClF,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEL,MAAM,IAAI,GAA+B,CAAC,MAAM,EAAE,EAAE,CAClD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,QAAQ,GAAG,uBAAuB,kBAAkB,CACxD,KAAK,CAAC,SAAS,CAChB,0BAA0B,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAAC;YAClE,MAAM,IAAI,GAAa,EAAE,CAAC;YAC1B,IAAI,MAA0B,CAAC;YAC/B,GAAG,CAAC;gBACF,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACvC,IAAI,MAAM;oBAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAGzB,QAAQ,CAAC,CAAC;gBACb,IAAI,CAAC,IAAI,CACP,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACzE,CAAC;gBACF,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,SAAS,CAAC;YACjD,CAAC,QAAQ,MAAM,EAAE;YACjB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEL,MAAM,GAAG,GAAiC,CAAC,GAAG,EAAE,EAAE,CAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAClB,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,kBAAkB,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC9C,QAAQ,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CACtC,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,QAAQ,CACN,mBAAmB,EACnB,iCAAiC,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAClF,CACF,CAAC;YACJ,CAAC;QACH,CAAC,CAAC,CAAC;QAEL,OAAO;YACL,eAAe;YACf,GAAG;YACH,GAAG;YACH,IAAI;YACJ,MAAM,EAAE,GAAG;SACiB,CAAC;IACjC,CAAC,CAAC,CAAC;IAEL,MAAM,kBAAkB,GAA0C,CAAC,IAAI,EAAE,EAAE,CACzE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE;QACf,MAAM,WAAW,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,WAAW,IAAI,SAAS,CAAC;QACvE,MAAM,YAAY,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,YAAY,IAAI,SAAS,CAAC;QAC1E,OAAO;YACL,QAAQ,EACN,WAAW,CAAC,IAAI,EAAE,wBAAwB,CAAC;gBAC3C,WAAW,CAAC,IAAI,EAAE,aAAa,CAAC;gBAChC,WAAW;YACb,SAAS,EAAE,WAAW,CAAC,IAAI,EAAE,yBAAyB,CAAC,IAAI,YAAY;SACxE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAA4B,CAAC;AAChE,CAAC,CAAC,CACH,CAAC;AAEF,SAAS,QAAQ,CAAI,QAAkB;IACrC,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAgB;QACxC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,QAAQ,CAAC,mBAAmB,EAAE,2CAA2C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;KAC5F,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,QAAkB;IAClC,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE;QAC1B,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,QAAQ,CAAC,mBAAmB,EAAE,0CAA0C,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;KAC3F,CAAC,CAAC;AACL,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CAAC,QAAkB;IACtC,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,WAAW,CAAC,IAAuB,EAAE,IAAY;IACxD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;IAC1D,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9C,CAAC"}