@inboxychat/cli 0.0.0-stage → 0.1.0

package/README.md

@@ -1,3 +1,121 @@
-# Temporary Holding Version
+# @inboxychat/cli — `inboxy` (read-only)
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+A command line for agencies and support: check a key, read orders, contacts and
+usage, and diagnose a setup. It uses only the public API v1
+(`/api/v1/public`) and never writes.
+
+Status: local package (plan task API-04). Not published to npm.
+
+## Install (local)
+
+```bash
+pnpm install
+pnpm --filter @inboxychat/cli build          # builds the SDK too
+node packages/inboxy-cli/dist/bin.js --help
+# optional: alias inboxy="node $PWD/packages/inboxy-cli/dist/bin.js"
+```
+
+## Sign in
+
+```bash
+inboxy auth login                      # paste the key at the hidden prompt
+pbpaste | inboxy auth login            # or pipe it (keeps it out of shell history)
+inboxy auth login --profile client-a   # one profile per company (agencies)
+inboxy auth status                     # where the key comes from + is it accepted
+inboxy auth logout --profile client-a
+```
+
+The key is read from stdin, never from a command-line argument: `inboxy auth login <key>`
+or a `--key` / `--token` / `--api-key` flag on any command is refused (exit 2) without
+echoing what was typed. It is stored in
+the OS keychain (macOS Keychain via `security`, Linux Secret Service via
+`secret-tool`; the secret goes to those tools on stdin, not argv). Without a
+keychain (or with `--store file`) it goes into the config file with mode `0600`
+in a `0700` directory; a config file other users can read is refused.
+
+Config: `$INBOXY_CONFIG_DIR`, else `$XDG_CONFIG_HOME/inboxy`, else
+`~/.config/inboxy/config.json`. It holds the API URL and where the key lives.
+
+`INBOXY_API_KEY` / `INBOXY_API_URL` / `INBOXY_PROFILE` override everything.
+`INBOXY_KEYCHAIN=off` disables the keychain.
+
+## Commands
+
+```
+inboxy whoami                         company, key name, scopes, expiry, rate limits
+inboxy usage                          plan usage against limits
+inboxy stores list                    connected-store count vs plan limit (*)
+inboxy orders list [--status pending] [--payment-status ..] [--fulfillment-status ..]
+                   [--source shopify] [--store <id>] [--contact <id>] [--search <text>]
+                   [--after <iso>] [--before <iso>]
+inboxy orders get <id>
+inboxy contacts search [text] [--status ..] [--stage lead] [--tags <ids>]
+                   [--created-after <iso>] [--created-before <iso>]
+inboxy doctor                         URL, key, key format, reachability, scopes,
+                                      key expiry, clock skew, config permissions
+```
+
+(\*) The public API has no stores route yet, so `stores list` shows the count
+from plan usage and says so (`items: null` in JSON). Per-store health is in the
+dashboard.
+
+Paging: `--limit 1-100`, `--cursor <nextCursor>`, or `--all` (follows cursors,
+up to `--max-pages`, default 10). Global: `--json`, `--profile`, `--url`,
+`--timeout <ms>`. Global options may come before or after the command.
+
+## `--json`
+
+One document on stdout, schema version 1 (fields may be added, never renamed or removed):
+
+```json
+{ "schemaVersion": 1, "ok": true, "command": "orders list",
+  "data": [ ... ], "meta": { "limit": 20, "hasMore": true, "nextCursor": "...", "pages": 1 } }
+
+{ "schemaVersion": 1, "ok": false, "command": "orders list",
+  "error": { "kind": "forbidden", "code": "INSUFFICIENT_PERMISSIONS", "status": 403,
+             "message": "This API key does not have the \"orders:read\" scope. ...",
+             "details": { "requiredScope": "orders:read" }, "retryAfterSeconds": null } }
+```
+
+`data` items are the public API v1 objects unchanged.
+
+## Exit codes
+
+| Code | Meaning                                                                   |
+| ---- | ------------------------------------------------------------------------- |
+| 0    | OK                                                                        |
+| 1    | Unexpected error                                                          |
+| 2    | Usage error (bad flag, bad value, invalid id) — nothing was sent          |
+| 3    | Configuration: no key, bad URL, config file permissions, no keychain      |
+| 4    | Key refused (401)                                                         |
+| 5    | Forbidden (403): missing scope, company paused, key owner no longer admin |
+| 6    | Not found (404)                                                           |
+| 7    | Rate limited (429) — see `retryAfterSeconds`                              |
+| 8    | Network error, timeout or cancelled                                       |
+| 9    | Server error or a response that is not the API envelope                   |
+| 10   | `doctor` found at least one failing check                                 |
+
+## Safety
+
+- The key is never printed. Errors and JSON pass through redaction (any
+  `inboxy_…` value, any `Bearer …` value and the exact key in use), even when a
+  server message echoes the header back. Status output shows only the 8-character
+  prefix the dashboard also shows.
+- No shell: inputs reach the API only as validated, percent-encoded path
+  segments or query values; ids must be 1–64 letters, digits, `_` or `-`.
+- HTTPS only (plain `http://` for `localhost` only); redirects are refused.
+
+## Tests
+
+```bash
+pnpm --filter @inboxychat/cli test
+```
+
+`test/cli.e2e.test.ts` runs the built binary against the local mock API:
+every command, paging, filters, exit codes, the key never in stdout/stderr,
+no shell interpolation, auth login/status/logout with the 0600 file, refusal
+of a world-readable config, profiles per company, and doctor (clock skew,
+scopes, expiry, refused key, unreachable URL). `test/cli.inprocess.test.ts`
+covers the keychain path with a fake keychain and redaction of a key echoed by
+the server. The macOS Keychain adapter was also checked once by hand with a
+throwaway entry (store, update, read, delete).

package/dist/bin.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=bin.d.ts.map

package/dist/bin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.d.ts","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":""}

package/dist/bin.js

@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+import { runCli } from './cli.js';
+async function readAll(stream) {
+    let data = '';
+    stream.setEncoding('utf8');
+    for await (const chunk of stream)
+        data += chunk;
+    return data;
+}
+/** Reads a line from the terminal without echoing it. */
+function promptHidden(prompt) {
+    const stdin = process.stdin;
+    process.stderr.write(prompt);
+    return new Promise((resolve) => {
+        let input = '';
+        stdin.setRawMode(true);
+        stdin.resume();
+        stdin.setEncoding('utf8');
+        const onData = (chunk) => {
+            for (const ch of chunk) {
+                if (ch === '\r' || ch === '\n' || ch === '\u0004') {
+                    stdin.setRawMode(false);
+                    stdin.pause();
+                    stdin.off('data', onData);
+                    process.stderr.write('\n');
+                    resolve(input);
+                    return;
+                }
+                if (ch === '\u0003') {
+                    stdin.setRawMode(false);
+                    process.stderr.write('\n');
+                    process.exit(130);
+                }
+                if (ch === '\u007f' || ch === '\b')
+                    input = input.slice(0, -1);
+                else
+                    input += ch;
+            }
+        };
+        stdin.on('data', onData);
+    });
+}
+const io = {
+    stdout: (t) => process.stdout.write(t),
+    stderr: (t) => process.stderr.write(t),
+    readSecret: (prompt) => (process.stdin.isTTY ? promptHidden(prompt) : readAll(process.stdin)),
+    env: process.env,
+    now: () => Date.now(),
+};
+runCli(process.argv.slice(2), io).then((code) => {
+    process.exitCode = code;
+}, () => {
+    process.stderr.write('inboxy: unexpected failure\n');
+    process.exitCode = 1;
+});
+//# sourceMappingURL=bin.js.map

package/dist/bin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/bin.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAGlC,KAAK,UAAU,OAAO,CAAC,MAAyB;IAC9C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM;QAAE,IAAI,IAAI,KAAe,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yDAAyD;AACzD,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,CAAC,MAAM,EAAE,CAAC;QACf,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE;YAC/B,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;oBAClD,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBACxB,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,KAAK,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;oBACpB,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;oBACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACpB,CAAC;gBACD,IAAI,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;oBAAE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;;oBAC1D,KAAK,IAAI,EAAE,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,EAAE,GAAU;IAChB,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACtC,UAAU,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7F,GAAG,EAAE,OAAO,CAAC,GAAG;IAChB,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;CACtB,CAAC;AAEF,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CACpC,CAAC,IAAI,EAAE,EAAE;IACP,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;AAC1B,CAAC,EACD,GAAG,EAAE;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CACF,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,16 @@
+import { type Keychain } from '@inboxychat/sdk';
+import { type CliIO } from './output.js';
+export declare const CLI_VERSION = "0.1.0";
+export interface CliDeps {
+    /** Override the OS keychain (tests); undefined = detect, null = none. */
+    keychain?: Keychain | null;
+}
+/** Commands that only touch local configuration (no capability behind them). */
+export declare const LOCAL_COMMANDS: readonly ["auth login", "auth logout", "auth status", "doctor"];
+/**
+ * Data commands: each is the adapter of one registered capability (UX26-F,
+ * apps/api/src/lib/capabilities). A command without one is not offered.
+ */
+export declare const DATA_COMMANDS: string[];
+export declare function runCli(argv: string[], io: CliIO, deps?: CliDeps): Promise<number>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AASA,OAAO,EAqBL,KAAK,QAAQ,EAKd,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAmC,KAAK,KAAK,EAAE,MAAM,aAAa,CAAC;AAE1E,eAAO,MAAM,WAAW,UAAU,CAAC;AAwDnC,MAAM,WAAW,OAAO;IACtB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC;CAC5B;AA6DD,gFAAgF;AAChF,eAAO,MAAM,cAAc,iEAAkE,CAAC;AAE9F;;;GAGG;AACH,eAAO,MAAM,aAAa,UAEzB,CAAC;AAcF,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,GAAE,OAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAub3F"}

package/dist/cli.js

@@ -0,0 +1,538 @@
+/**
+ * The `inboxy` command line (local, read-only).
+ *
+ * Inputs are parsed with node:util parseArgs and only ever reach the network
+ * as validated, percent-encoded path segments or URLSearchParams values.
+ * Nothing here spawns a shell; the only child processes are the OS keychain
+ * tools, started with argument arrays by @inboxychat/sdk.
+ */
+import { parseArgs } from 'node:util';
+import { CONTACT_STATUSES, FULFILLMENT_STATUSES, InboxyClient, InboxyError, LIFECYCLE_STAGES, ORDER_SOURCES, ORDER_STATUSES, PAGE_LIMIT_MAX, PAYMENT_STATUSES, PUBLIC_CAPABILITIES, collectPages, loadConfig, looksLikeInboxyKey, normalizeBaseUrl, resolveCredentials, saveConfig, systemKeychain, validateProfileName, } from '@inboxychat/sdk';
+import { runDoctor } from './doctor.js';
+import { EXIT, Output, UsageError, table } from './output.js';
+export const CLI_VERSION = '0.1.0';
+const HELP = `inboxy ${CLI_VERSION} — read-only command line for the Inboxy public API
+
+Usage: inboxy <command> [options]
+
+Account
+  auth login [--store keychain|file] [--no-verify]   Store an API key (read from stdin or a hidden prompt)
+  auth logout                                         Remove the stored key of the profile
+  auth status [--offline]                             Where the key comes from, and whether Inboxy accepts it
+  whoami                                              Company, key name, scopes, expiry, rate limits
+  usage                                               Plan usage against limits
+  stores list                                         Connected-store count against the plan limit
+  doctor                                              Check URL, key, scopes, clock skew and config permissions
+
+Data
+  orders list [filters] [paging]                      --status --payment-status --fulfillment-status --source
+                                                      --store <id> --contact <id> --search <text>
+                                                      --after <iso> --before <iso>
+  orders get <id>
+  contacts search [text] [paging]                     --status --stage --tags <ids> --created-after --created-before
+
+Paging
+  --limit <1-${PAGE_LIMIT_MAX}>   --cursor <nextCursor>   --all [--max-pages <n>, default 10]
+
+Global options
+  --json              One JSON document on stdout (schemaVersion 1)
+  --profile <name>    Use a stored profile (one per company; default "default", or INBOXY_PROFILE)
+  --url <origin>      API origin (default INBOXY_API_URL, the profile, or https://api.inboxy.chat)
+  --timeout <ms>      Per-request timeout (default 20000)
+  -h, --help          This help        --version   Print the version
+
+Credentials: INBOXY_API_KEY, else the OS keychain entry written by \`auth login\`,
+else (machines without a keychain) the 0600 config file. The key is never printed.
+Exit codes: 0 ok, 2 usage, 3 config, 4 key refused, 5 forbidden, 6 not found,
+7 rate limited, 8 network/timeout, 9 server, 10 doctor checks failed, 1 unexpected.`;
+const KEY_ON_COMMAND_LINE = 'The API key is never passed as an argument (it would stay in shell history). Run `inboxy auth login` and type it at the hidden prompt, or pipe it: `pbpaste | inboxy auth login`.';
+const GLOBAL_OPTIONS = {
+    json: { type: 'boolean' },
+    profile: { type: 'string' },
+    url: { type: 'string' },
+    timeout: { type: 'string' },
+    help: { type: 'boolean', short: 'h' },
+    version: { type: 'boolean' },
+};
+const PAGING_OPTIONS = {
+    limit: { type: 'string' },
+    cursor: { type: 'string' },
+    all: { type: 'boolean' },
+    'max-pages': { type: 'string' },
+};
+function intOption(value, name, min, max) {
+    if (value === undefined)
+        return undefined;
+    if (!/^\d+$/.test(value))
+        throw new UsageError(`--${name} must be a whole number.`);
+    const n = Number(value);
+    if (n < min || n > max)
+        throw new UsageError(`--${name} must be between ${min} and ${max}.`);
+    return n;
+}
+function enumOption(value, name, allowed) {
+    if (value === undefined)
+        return undefined;
+    if (!allowed.includes(value)) {
+        throw new UsageError(`--${name} must be one of: ${allowed.join(', ')}.`);
+    }
+    return value;
+}
+function isoOption(value, name) {
+    if (value === undefined)
+        return undefined;
+    if (Number.isNaN(Date.parse(value)))
+        throw new UsageError(`--${name} must be an ISO-8601 date or date-time.`);
+    return value;
+}
+/**
+ * Splits `argv` into the command words and the rest, without interpreting
+ * values. Global options may come before the command (`inboxy --profile a whoami`).
+ */
+const GLOBAL_VALUE_FLAGS = new Set(['--profile', '--url', '--timeout']);
+function commandWords(argv) {
+    const words = [];
+    const rest = [];
+    let i = 0;
+    while (i < argv.length && words.length < 2) {
+        const arg = argv[i];
+        if (GLOBAL_VALUE_FLAGS.has(arg)) {
+            rest.push(arg, ...(i + 1 < argv.length ? [argv[i + 1]] : []));
+            i += 2;
+        }
+        else if (arg === '--json') {
+            rest.push(arg);
+            i += 1;
+        }
+        else if (arg.startsWith('-')) {
+            break;
+        }
+        else {
+            words.push(arg);
+            i += 1;
+        }
+    }
+    return { words, rest: [...rest, ...argv.slice(i)] };
+}
+/** Commands that only touch local configuration (no capability behind them). */
+export const LOCAL_COMMANDS = ['auth login', 'auth logout', 'auth status', 'doctor'];
+/**
+ * Data commands: each is the adapter of one registered capability (UX26-F,
+ * apps/api/src/lib/capabilities). A command without one is not offered.
+ */
+export const DATA_COMMANDS = PUBLIC_CAPABILITIES.flatMap((c) => c.cliCommand ? [c.cliCommand] : []);
+const COMMANDS = new Set([...LOCAL_COMMANDS, ...DATA_COMMANDS]);
+function matchCommand(words) {
+    if (words.length >= 2 && COMMANDS.has(`${words[0]} ${words[1]}`)) {
+        return { name: `${words[0]} ${words[1]}`, positionals: [] };
+    }
+    if (words.length >= 1 && COMMANDS.has(words[0])) {
+        return { name: words[0], positionals: words.slice(1) };
+    }
+    return null;
+}
+export async function runCli(argv, io, deps = {}) {
+    const wantsJson = argv.includes('--json');
+    const { words, rest } = commandWords(argv);
+    const matched = matchCommand(words);
+    const commandName = matched?.name ?? words.join(' ');
+    let activeKey = null;
+    const out = new Output(io, wantsJson, commandName || 'help', () => activeKey ? [activeKey] : []);
+    try {
+        if (!matched) {
+            if (argv.includes('--version')) {
+                io.stdout(`${CLI_VERSION}\n`);
+                return EXIT.OK;
+            }
+            if (words.length === 0 || argv.includes('--help') || argv.includes('-h')) {
+                io.stdout(`${HELP}\n`);
+                return words.length === 0 && !argv.includes('--help') && !argv.includes('-h')
+                    ? EXIT.USAGE
+                    : EXIT.OK;
+            }
+            throw new UsageError(`Unknown command "${words.join(' ')}".`);
+        }
+        const extra = {};
+        const name = matched.name;
+        if (name === 'orders list') {
+            Object.assign(extra, PAGING_OPTIONS, {
+                status: { type: 'string' },
+                'payment-status': { type: 'string' },
+                'fulfillment-status': { type: 'string' },
+                source: { type: 'string' },
+                store: { type: 'string' },
+                contact: { type: 'string' },
+                search: { type: 'string' },
+                after: { type: 'string' },
+                before: { type: 'string' },
+            });
+        }
+        else if (name === 'contacts search') {
+            Object.assign(extra, PAGING_OPTIONS, {
+                status: { type: 'string' },
+                stage: { type: 'string' },
+                tags: { type: 'string' },
+                'created-after': { type: 'string' },
+                'created-before': { type: 'string' },
+            });
+        }
+        else if (name === 'auth login') {
+            Object.assign(extra, { store: { type: 'string' }, 'no-verify': { type: 'boolean' } });
+        }
+        else if (name === 'auth status') {
+            Object.assign(extra, { offline: { type: 'boolean' } });
+        }
+        // A key typed as an argument stays in shell history and process lists:
+        // refuse it before parsing, without echoing what was typed.
+        const KEY_FLAG = /^--(key|token|api-key|apikey|secret)(=|$)/i;
+        if (rest.some((arg) => KEY_FLAG.test(arg))) {
+            throw new UsageError(KEY_ON_COMMAND_LINE);
+        }
+        let parsed;
+        try {
+            parsed = parseArgs({
+                args: rest,
+                options: { ...GLOBAL_OPTIONS, ...extra },
+                allowPositionals: true,
+                strict: true,
+            });
+        }
+        catch (error) {
+            throw new UsageError(error.message.replace(/\. To specify.*$/s, '.'));
+        }
+        const opts = parsed.values;
+        const positionals = [...matched.positionals, ...parsed.positionals];
+        if (opts.help) {
+            io.stdout(`${HELP}\n`);
+            return EXIT.OK;
+        }
+        const profile = typeof opts.profile === 'string' ? validateProfileName(opts.profile) : undefined;
+        const timeoutMs = intOption(opts.timeout, 'timeout', 100, 120_000);
+        const env = typeof opts.url === 'string' ? { ...io.env, INBOXY_API_URL: opts.url } : io.env;
+        const keychainFor = async () => deps.keychain !== undefined ? deps.keychain : systemKeychain(env);
+        const credentials = async () => {
+            const creds = await resolveCredentials({ env, profile, keychain: await keychainFor() });
+            activeKey = creds.apiKey;
+            return creds;
+        };
+        const clientFrom = (creds) => {
+            if (!creds.apiKey) {
+                throw new InboxyError({
+                    kind: 'config',
+                    code: 'API_KEY_MISSING',
+                    message: `No API key for profile "${creds.profile}". Set INBOXY_API_KEY or run \`inboxy auth login\`.`,
+                });
+            }
+            return new InboxyClient({
+                apiKey: creds.apiKey,
+                baseUrl: creds.apiUrl,
+                timeoutMs,
+                userAgent: `inboxy-cli/${CLI_VERSION}`,
+            });
+        };
+        const noPositionals = () => {
+            if (!positionals.length)
+                return;
+            // `auth login <key>`: never echo the argument back (it is probably the key).
+            if (name === 'auth login')
+                throw new UsageError(KEY_ON_COMMAND_LINE);
+            throw new UsageError(`Unexpected argument "${positionals[0]}".`);
+        };
+        switch (name) {
+            // ------------------------------------------------------------------
+            case 'whoami': {
+                noPositionals();
+                const { data } = await clientFrom(await credentials()).getCompany();
+                return out.success(data, undefined, () => [
+                    `Company   ${data.company.name} (${data.company.id})`,
+                    `Key       ${data.token.name} · ${data.token.prefix}…`,
+                    `Scopes    ${data.token.scopes.join(', ') || 'none'}`,
+                    `Expires   ${data.token.expiresAt ?? 'never'}`,
+                    `Limits    ${data.rateLimits.perKey.limit}/min per key · ${data.rateLimits.perCompany.limit}/min per company`,
+                ].join('\n'));
+            }
+            // ------------------------------------------------------------------
+            case 'usage': {
+                noPositionals();
+                const { data } = await clientFrom(await credentials()).getUsage();
+                return out.success(data, undefined, () => {
+                    const rows = Object.entries(data.usage).map(([k, c]) => [
+                        k,
+                        c.used,
+                        c.limit === null ? 'unlimited' : c.limit,
+                    ]);
+                    return [
+                        `Plan ${data.plan.name} (${data.plan.status}${data.plan.isTrial ? ', trial' : ''}) · period ends ${data.plan.currentPeriodEnd}`,
+                        table(['counter', 'used', 'limit'], rows),
+                        `API requests in the last 24 h: ${data.api.requestsLast24h}`,
+                    ].join('\n');
+                });
+            }
+            // ------------------------------------------------------------------
+            case 'stores list': {
+                noPositionals();
+                const { data } = await clientFrom(await credentials()).getUsage();
+                const result = {
+                    stores: data.usage.stores,
+                    items: null,
+                    note: 'Public API v1 has no stores route yet; this is the connected-store count from plan usage. Per-store details and health are in the dashboard.',
+                };
+                return out.success(result, undefined, () => [
+                    `Connected stores: ${data.usage.stores.used} of ${data.usage.stores.limit ?? 'unlimited'}`,
+                    result.note,
+                ].join('\n'));
+            }
+            // ------------------------------------------------------------------
+            case 'orders list': {
+                noPositionals();
+                const query = {
+                    status: enumOption(opts.status, 'status', ORDER_STATUSES),
+                    paymentStatus: enumOption(opts['payment-status'], 'payment-status', PAYMENT_STATUSES),
+                    fulfillmentStatus: enumOption(opts['fulfillment-status'], 'fulfillment-status', FULFILLMENT_STATUSES),
+                    source: enumOption(opts.source, 'source', ORDER_SOURCES),
+                    storeId: opts.store,
+                    contactId: opts.contact,
+                    search: opts.search,
+                    dateAfter: isoOption(opts.after, 'after'),
+                    dateBefore: isoOption(opts.before, 'before'),
+                    limit: intOption(opts.limit, 'limit', 1, PAGE_LIMIT_MAX),
+                    cursor: opts.cursor,
+                };
+                const client = clientFrom(await credentials());
+                const page = await listPages((q) => client.listOrders(q), query, opts);
+                return out.success(page.items, page.meta, () => [
+                    table(['id', 'number', 'status', 'payment', 'total', 'customer', 'date'], page.items.map((o) => [
+                        o.id,
+                        o.orderNumber,
+                        o.status,
+                        o.paymentStatus,
+                        `${o.total} ${o.currency}`,
+                        o.contact?.name,
+                        o.orderDate.slice(0, 10),
+                    ])),
+                    pagingHint(page.meta),
+                ]
+                    .filter(Boolean)
+                    .join('\n'));
+            }
+            case 'orders get': {
+                if (positionals.length !== 1)
+                    throw new UsageError('Usage: inboxy orders get <id>');
+                const { data: o } = await clientFrom(await credentials()).getOrder(positionals[0]);
+                return out.success(o, undefined, () => [
+                    `Order ${o.orderNumber} (${o.id}) · ${o.source}`,
+                    `Status ${o.status} · payment ${o.paymentStatus} · fulfillment ${o.fulfillmentStatus} · confirmation ${o.confirmationStatus}`,
+                    `Total ${o.total} ${o.currency} (subtotal ${o.subtotal}, shipping ${o.shipping ?? '-'}, discount ${o.discount ?? '-'})`,
+                    `Customer ${o.contact ? `${o.contact.name} ${o.contact.phone ?? ''}`.trim() : '-'}`,
+                    `Date ${o.orderDate}`,
+                    table(['item', 'sku', 'qty', 'total'], o.items.map((i) => [
+                        i.variant ? `${i.name} (${i.variant})` : i.name,
+                        i.sku,
+                        i.quantity,
+                        i.totalPrice,
+                    ])),
+                ].join('\n'));
+            }
+            // ------------------------------------------------------------------
+            case 'contacts search': {
+                if (positionals.length > 1)
+                    throw new UsageError('Usage: inboxy contacts search [text]');
+                const query = {
+                    search: positionals[0],
+                    status: enumOption(opts.status, 'status', CONTACT_STATUSES),
+                    lifecycleStage: enumOption(opts.stage, 'stage', LIFECYCLE_STAGES),
+                    tagIds: opts.tags,
+                    createdAfter: isoOption(opts['created-after'], 'created-after'),
+                    createdBefore: isoOption(opts['created-before'], 'created-before'),
+                    limit: intOption(opts.limit, 'limit', 1, PAGE_LIMIT_MAX),
+                    cursor: opts.cursor,
+                };
+                const client = clientFrom(await credentials());
+                const page = await listPages((q) => client.listContacts(q), query, opts);
+                return out.success(page.items, page.meta, () => [
+                    table(['id', 'name', 'phone', 'email', 'stage', 'orders'], page.items.map((c) => [
+                        c.id,
+                        c.name,
+                        c.phone,
+                        c.email,
+                        c.lifecycleStage,
+                        c.totalOrders,
+                    ])),
+                    pagingHint(page.meta),
+                ]
+                    .filter(Boolean)
+                    .join('\n'));
+            }
+            // ------------------------------------------------------------------
+            case 'doctor': {
+                noPositionals();
+                let creds;
+                let credentialError;
+                try {
+                    creds = await credentials();
+                }
+                catch (error) {
+                    // A refused config (e.g. a key in a world-readable file) is a failed
+                    // check, not a crash.
+                    if (!(error instanceof InboxyError) || error.kind !== 'config')
+                        throw error;
+                    credentialError = `${error.code}: ${error.message}`;
+                    creds = {
+                        profile: profile ?? env.INBOXY_PROFILE ?? 'default',
+                        apiKey: null,
+                        keySource: 'none',
+                        apiUrl: env.INBOXY_API_URL ?? 'https://api.inboxy.chat',
+                        urlSource: env.INBOXY_API_URL ? 'env' : 'default',
+                        configPath: '',
+                        warnings: [],
+                    };
+                }
+                const report = await runDoctor(creds, { env, timeoutMs, now: io.now, credentialError });
+                const code = out.success(report, undefined, () => [
+                    `Profile "${report.profile}" · ${report.apiUrl}`,
+                    ...report.checks.map((c) => `${c.status.toUpperCase().padEnd(4)}  ${c.id.padEnd(14)} ${c.message}`),
+                    report.ok ? 'All checks passed.' : 'Some checks failed.',
+                ].join('\n'));
+                return report.ok ? code : EXIT.CHECKS_FAILED;
+            }
+            // ------------------------------------------------------------------
+            case 'auth status': {
+                noPositionals();
+                const creds = await credentials();
+                const status = {
+                    profile: creds.profile,
+                    apiUrl: creds.apiUrl,
+                    urlSource: creds.urlSource,
+                    keySource: creds.keySource,
+                    keyPrefix: creds.apiKey ? `${creds.apiKey.slice(0, 8)}…` : null,
+                    verified: null,
+                    company: null,
+                };
+                if (!creds.apiKey) {
+                    throw new InboxyError({
+                        kind: 'config',
+                        code: 'API_KEY_MISSING',
+                        message: `Not signed in (profile "${creds.profile}"). Run \`inboxy auth login\` or set INBOXY_API_KEY.`,
+                    });
+                }
+                if (!opts.offline) {
+                    const { data } = await clientFrom(creds).getCompany();
+                    status.verified = true;
+                    status.company = { id: data.company.id, name: data.company.name };
+                }
+                return out.success(status, undefined, () => [
+                    `Profile   ${creds.profile}`,
+                    `API       ${creds.apiUrl} (from ${creds.urlSource})`,
+                    `Key       ${status.keyPrefix} (from ${creds.keySource})`,
+                    status.company
+                        ? `Verified  ${status.company.name} accepts this key`
+                        : 'Verified  skipped (--offline)',
+                ].join('\n'));
+            }
+            case 'auth login': {
+                noPositionals();
+                const profileName = profile ?? io.env.INBOXY_PROFILE ?? 'default';
+                validateProfileName(profileName);
+                const storeOpt = opts.store;
+                if (storeOpt !== undefined && storeOpt !== 'keychain' && storeOpt !== 'file') {
+                    throw new UsageError('--store must be keychain or file.');
+                }
+                const apiUrl = normalizeBaseUrl(opts.url ?? io.env.INBOXY_API_URL ?? 'https://api.inboxy.chat');
+                const key = (await io.readSecret('Inboxy API key (input hidden): ')).trim();
+                activeKey = key;
+                if (!key)
+                    throw new UsageError('No API key received on stdin.');
+                if (!looksLikeInboxyKey(key)) {
+                    throw new InboxyError({
+                        kind: 'config',
+                        code: 'API_KEY_INVALID_FORMAT',
+                        message: 'That does not look like an Inboxy API key (inboxy_ followed by 64 hex characters).',
+                    });
+                }
+                let company = null;
+                if (!opts['no-verify']) {
+                    const client = new InboxyClient({
+                        apiKey: key,
+                        baseUrl: apiUrl,
+                        timeoutMs,
+                        userAgent: `inboxy-cli/${CLI_VERSION}`,
+                    });
+                    const { data } = await client.getCompany();
+                    company = { id: data.company.id, name: data.company.name };
+                }
+                const keychain = storeOpt === 'file' ? null : await keychainFor();
+                if (storeOpt === 'keychain' && !keychain) {
+                    throw new InboxyError({
+                        kind: 'config',
+                        code: 'KEYCHAIN_UNAVAILABLE',
+                        message: 'No OS keychain is available on this machine. Use --store file, or set INBOXY_API_KEY.',
+                    });
+                }
+                const loaded = await loadConfig(env);
+                const config = loaded.config;
+                if (keychain) {
+                    await keychain.set(profileName, key);
+                    config.profiles[profileName] = { apiUrl, keyStorage: 'keychain' };
+                }
+                else {
+                    config.profiles[profileName] = { apiUrl, keyStorage: 'file', apiKey: key };
+                }
+                if (!config.defaultProfile)
+                    config.defaultProfile = profileName;
+                const file = await saveConfig(config, env);
+                const result = {
+                    profile: profileName,
+                    apiUrl,
+                    keyStorage: keychain ? 'keychain' : 'file',
+                    keychain: keychain?.name ?? null,
+                    configPath: file,
+                    verified: company !== null,
+                    company,
+                };
+                if (!keychain)
+                    out.note(`No OS keychain in use: the key is stored in ${file} (mode 600).`);
+                return out.success(result, undefined, () => `Saved profile "${profileName}" (${keychain ? keychain.name : `file ${file}`}).${company ? ` Company: ${company.name}.` : ' Not verified (--no-verify).'}`);
+            }
+            case 'auth logout': {
+                noPositionals();
+                const loaded = await loadConfig(env);
+                const profileName = profile ?? io.env.INBOXY_PROFILE ?? loaded.config.defaultProfile ?? 'default';
+                validateProfileName(profileName);
+                const keychain = await keychainFor();
+                let removedFromKeychain = false;
+                if (keychain)
+                    removedFromKeychain = await keychain.delete(profileName).catch(() => false);
+                const had = profileName in loaded.config.profiles;
+                if (had) {
+                    delete loaded.config.profiles[profileName];
+                    if (loaded.config.defaultProfile === profileName)
+                        delete loaded.config.defaultProfile;
+                    await saveConfig(loaded.config, env);
+                }
+                const result = { profile: profileName, removedFromKeychain, removedFromConfig: had };
+                return out.success(result, undefined, () => had || removedFromKeychain
+                    ? `Removed profile "${profileName}".`
+                    : `Profile "${profileName}" was not stored.`);
+            }
+        }
+        throw new UsageError(`Unknown command "${name}".`);
+    }
+    catch (error) {
+        return out.failure(error);
+    }
+}
+async function listPages(fetchPage, query, opts) {
+    const maxPages = intOption(opts['max-pages'], 'max-pages', 1, 1000);
+    if (maxPages !== undefined && !opts.all)
+        throw new UsageError('--max-pages needs --all.');
+    if (!opts.all) {
+        const page = await fetchPage(query);
+        return { items: page.data, meta: { ...page.meta, pages: 1 } };
+    }
+    const all = await collectPages(fetchPage, query, maxPages ?? 10);
+    return { items: all.items, meta: { ...all.meta, pages: all.pages } };
+}
+function pagingHint(meta) {
+    return meta.hasMore && meta.nextCursor ? `More results: --cursor ${meta.nextCursor}` : '';
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAwB,MAAM,WAAW,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,mBAAmB,GAQpB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAc,MAAM,aAAa,CAAC;AAE1E,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,IAAI,GAAG,UAAU,WAAW;;;;;;;;;;;;;;;;;;;;;eAqBnB,cAAc;;;;;;;;;;;;oFAYuD,CAAC;AAErF,MAAM,mBAAmB,GACvB,mLAAmL,CAAC;AAEtL,MAAM,cAAc,GAAG;IACrB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACzB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACvB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC3B,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE;IACrC,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;CACiB,CAAC;AAEhD,MAAM,cAAc,GAAG;IACrB,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;IAC1B,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;IACxB,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;CACc,CAAC;AAOhD,SAAS,SAAS,CAChB,KAAyB,EACzB,IAAY,EACZ,GAAW,EACX,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,0BAA0B,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,oBAAoB,GAAG,QAAQ,GAAG,GAAG,CAAC,CAAC;IAC7F,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,UAAU,CACjB,KAAyB,EACzB,IAAY,EACZ,OAAU;IAEV,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAkB,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB,EAAE,IAAY;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,yCAAyC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,CAAC;AACxE,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACrB,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACf,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;aAAM,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM;QACR,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,IAAI,CAAC,CAAC;QACT,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,CAAU,CAAC;AAE9F;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7D,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CACnC,CAAC;AAEF,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,cAAc,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;AAExE,SAAS,YAAY,CAAC,KAAe;IACnC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACjE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAc,EAAE,EAAS,EAAE,OAAgB,EAAE;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,OAAO,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,WAAW,IAAI,MAAM,EAAE,GAAG,EAAE,CAChE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAC7B,CAAC;IAEF,IAAI,CAAC;QACH,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,EAAE,CAAC,MAAM,CAAC,GAAG,WAAW,IAAI,CAAC,CAAC;gBAC9B,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzE,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;gBACvB,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAC3E,CAAC,CAAC,IAAI,CAAC,KAAK;oBACZ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACd,CAAC;YACD,MAAM,IAAI,UAAU,CAAC,oBAAoB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,KAAK,GAA+B,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAC3B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE;gBACnC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACpC,oBAAoB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC3B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,EAAE;gBACnC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxB,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACnC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aACrC,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;YACjC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC;aAAM,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACzD,CAAC;QAED,uEAAuE;QACvE,4DAA4D;QAC5D,MAAM,QAAQ,GAAG,4CAA4C,CAAC;QAC9D,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC;gBACjB,IAAI,EAAE,IAAI;gBACV,OAAO,EAAE,EAAE,GAAG,cAAc,EAAE,GAAG,KAAK,EAAE;gBACxC,gBAAgB,EAAE,IAAI;gBACtB,MAAM,EAAE,IAAI;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,UAAU,CAAE,KAAe,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAsD,CAAC;QAC3E,MAAM,WAAW,GAAG,CAAC,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC,EAAE,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GACX,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAA6B,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;QACzF,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC;QAC5F,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE,CAC7B,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,WAAW,GAAG,KAAK,IAAkC,EAAE;YAC3D,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,EAAE,EAAE,CAAC,CAAC;YACxF,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;YACzB,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,KAA0B,EAAE,EAAE;YAChD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,MAAM,IAAI,WAAW,CAAC;oBACpB,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,iBAAiB;oBACvB,OAAO,EAAE,2BAA2B,KAAK,CAAC,OAAO,qDAAqD;iBACvG,CAAC,CAAC;YACL,CAAC;YACD,OAAO,IAAI,YAAY,CAAC;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,KAAK,CAAC,MAAM;gBACrB,SAAS;gBACT,SAAS,EAAE,cAAc,WAAW,EAAE;aACvC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,IAAI,CAAC,WAAW,CAAC,MAAM;gBAAE,OAAO;YAChC,6EAA6E;YAC7E,IAAI,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;YACrE,MAAM,IAAI,UAAU,CAAC,wBAAwB,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,CAAC,CAAC;QAEF,QAAQ,IAAI,EAAE,CAAC;YACb,qEAAqE;YACrE,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,aAAa,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;gBACpE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CACvC;oBACE,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,EAAE,GAAG;oBACrD,aAAa,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG;oBACtD,aAAa,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;oBACrD,aAAa,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,OAAO,EAAE;oBAC9C,aAAa,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,kBAAkB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,kBAAkB;iBAC9G,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,aAAa,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAClE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;oBACvC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;wBACtD,CAAC;wBACD,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK;qBACzC,CAAC,CAAC;oBACH,OAAO;wBACL,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,mBAAmB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;wBAC/H,KAAK,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC;wBACzC,kCAAkC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE;qBAC7D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC,CAAC,CAAC;YACL,CAAC;YAED,qEAAqE;YACrE,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,aAAa,EAAE,CAAC;gBAChB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;gBAClE,MAAM,MAAM,GAAG;oBACb,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;oBACzB,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,8IAA8I;iBACrJ,CAAC;gBACF,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CACzC;oBACE,qBAAqB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,WAAW,EAAE;oBAC1F,MAAM,CAAC,IAAI;iBACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,aAAa,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAgB;oBACzB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAA4B,EAAE,QAAQ,EAAE,cAAc,CAAC;oBAC/E,aAAa,EAAE,UAAU,CACvB,IAAI,CAAC,gBAAgB,CAAuB,EAC5C,gBAAgB,EAChB,gBAAgB,CACjB;oBACD,iBAAiB,EAAE,UAAU,CAC3B,IAAI,CAAC,oBAAoB,CAAuB,EAChD,oBAAoB,EACpB,oBAAoB,CACrB;oBACD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAA4B,EAAE,QAAQ,EAAE,aAAa,CAAC;oBAC9E,OAAO,EAAE,IAAI,CAAC,KAA2B;oBACzC,SAAS,EAAE,IAAI,CAAC,OAA6B;oBAC7C,MAAM,EAAE,IAAI,CAAC,MAA4B;oBACzC,SAAS,EAAE,SAAS,CAAC,IAAI,CAAC,KAA2B,EAAE,OAAO,CAAC;oBAC/D,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,MAA4B,EAAE,QAAQ,CAAC;oBAClE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,CAAC;oBAC9E,MAAM,EAAE,IAAI,CAAC,MAA4B;iBAC1C,CAAC;gBACF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;gBAC/C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBACvE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAC7C;oBACE,KAAK,CACH,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,EAClE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAQ,EAAE,EAAE,CAAC;wBAC3B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,MAAM;wBACR,CAAC,CAAC,aAAa;wBACf,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,EAAE;wBAC1B,CAAC,CAAC,OAAO,EAAE,IAAI;wBACf,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;qBACzB,CAAC,CACH;oBACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;iBACtB;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;YACJ,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;gBACpF,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,MAAM,UAAU,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC;gBACpF,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CACpC;oBACE,SAAS,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE;oBAChD,UAAU,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,aAAa,kBAAkB,CAAC,CAAC,iBAAiB,mBAAmB,CAAC,CAAC,kBAAkB,EAAE;oBAC7H,SAAS,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,QAAQ,cAAc,CAAC,CAAC,QAAQ,IAAI,GAAG,cAAc,CAAC,CAAC,QAAQ,IAAI,GAAG,GAAG;oBACvH,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE;oBACnF,QAAQ,CAAC,CAAC,SAAS,EAAE;oBACrB,KAAK,CACH,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,EAC/B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;wBACjB,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;wBAC/C,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,UAAU;qBACb,CAAC,CACH;iBACF,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,KAAK,iBAAiB,CAAC,CAAC,CAAC;gBACvB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;oBAAE,MAAM,IAAI,UAAU,CAAC,sCAAsC,CAAC,CAAC;gBACzF,MAAM,KAAK,GAAkB;oBAC3B,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;oBACtB,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAA4B,EAAE,QAAQ,EAAE,gBAAgB,CAAC;oBACjF,cAAc,EAAE,UAAU,CAAC,IAAI,CAAC,KAA2B,EAAE,OAAO,EAAE,gBAAgB,CAAC;oBACvF,MAAM,EAAE,IAAI,CAAC,IAA0B;oBACvC,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,eAAe,CAAuB,EAAE,eAAe,CAAC;oBACrF,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAuB,EAAE,gBAAgB,CAAC;oBACxF,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,KAA2B,EAAE,OAAO,EAAE,CAAC,EAAE,cAAc,CAAC;oBAC9E,MAAM,EAAE,IAAI,CAAC,MAA4B;iBAC1C,CAAC;gBACF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,WAAW,EAAE,CAAC,CAAC;gBAC/C,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;gBACzE,OAAO,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAC7C;oBACE,KAAK,CACH,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EACnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC;wBAC7B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,KAAK;wBACP,CAAC,CAAC,cAAc;wBAChB,CAAC,CAAC,WAAW;qBACd,CAAC,CACH;oBACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;iBACtB;qBACE,MAAM,CAAC,OAAO,CAAC;qBACf,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,aAAa,EAAE,CAAC;gBAChB,IAAI,KAA0B,CAAC;gBAC/B,IAAI,eAAmC,CAAC;gBACxC,IAAI,CAAC;oBACH,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;gBAC9B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,qEAAqE;oBACrE,sBAAsB;oBACtB,IAAI,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;oBAC5E,eAAe,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;oBACpD,KAAK,GAAG;wBACN,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,cAAc,IAAI,SAAS;wBACnD,MAAM,EAAE,IAAI;wBACZ,SAAS,EAAE,MAAM;wBACjB,MAAM,EAAE,GAAG,CAAC,cAAc,IAAI,yBAAyB;wBACvD,SAAS,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;wBACjD,UAAU,EAAE,EAAE;wBACd,QAAQ,EAAE,EAAE;qBACb,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,CAAC,CAAC;gBACxF,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAC/C;oBACE,YAAY,MAAM,CAAC,OAAO,OAAO,MAAM,CAAC,MAAM,EAAE;oBAChD,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAClB,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAC9E;oBACD,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB;iBACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;gBACF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;YAC/C,CAAC;YAED,qEAAqE;YACrE,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,aAAa,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAC;gBAClC,MAAM,MAAM,GAA4B;oBACtC,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;oBAC/D,QAAQ,EAAE,IAAsB;oBAChC,OAAO,EAAE,IAA2C;iBACrD,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,IAAI,WAAW,CAAC;wBACpB,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,iBAAiB;wBACvB,OAAO,EAAE,2BAA2B,KAAK,CAAC,OAAO,sDAAsD;qBACxG,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;oBACtD,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC;oBACvB,MAAM,CAAC,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACpE,CAAC;gBACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CACzC;oBACE,aAAa,KAAK,CAAC,OAAO,EAAE;oBAC5B,aAAa,KAAK,CAAC,MAAM,UAAU,KAAK,CAAC,SAAS,GAAG;oBACrD,aAAa,MAAM,CAAC,SAAS,UAAU,KAAK,CAAC,SAAS,GAAG;oBACzD,MAAM,CAAC,OAAO;wBACZ,CAAC,CAAC,aAAc,MAAM,CAAC,OAA4B,CAAC,IAAI,mBAAmB;wBAC3E,CAAC,CAAC,+BAA+B;iBACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;YACJ,CAAC;YAED,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,aAAa,EAAE,CAAC;gBAChB,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,SAAS,CAAC;gBAClE,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAA2B,CAAC;gBAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,UAAU,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC7E,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;gBAC5D,CAAC;gBACD,MAAM,MAAM,GAAG,gBAAgB,CAC5B,IAAI,CAAC,GAA0B,IAAI,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,yBAAyB,CACvF,CAAC;gBACF,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,iCAAiC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5E,SAAS,GAAG,GAAG,CAAC;gBAChB,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;gBAChE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,MAAM,IAAI,WAAW,CAAC;wBACpB,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,wBAAwB;wBAC9B,OAAO,EACL,oFAAoF;qBACvF,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,OAAO,GAAwC,IAAI,CAAC;gBACxD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;wBAC9B,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,MAAM;wBACf,SAAS;wBACT,SAAS,EAAE,cAAc,WAAW,EAAE;qBACvC,CAAC,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC;oBAC3C,OAAO,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC7D,CAAC;gBACD,MAAM,QAAQ,GAAG,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC;gBAClE,IAAI,QAAQ,KAAK,UAAU,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACzC,MAAM,IAAI,WAAW,CAAC;wBACpB,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,sBAAsB;wBAC5B,OAAO,EACL,uFAAuF;qBAC1F,CAAC,CAAC;gBACL,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC7B,IAAI,QAAQ,EAAE,CAAC;oBACb,MAAM,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;oBACrC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;gBACpE,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;gBAC7E,CAAC;gBACD,IAAI,CAAC,MAAM,CAAC,cAAc;oBAAE,MAAM,CAAC,cAAc,GAAG,WAAW,CAAC;gBAChE,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBAC3C,MAAM,MAAM,GAAG;oBACb,OAAO,EAAE,WAAW;oBACpB,MAAM;oBACN,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;oBAC1C,QAAQ,EAAE,QAAQ,EAAE,IAAI,IAAI,IAAI;oBAChC,UAAU,EAAE,IAAI;oBAChB,QAAQ,EAAE,OAAO,KAAK,IAAI;oBAC1B,OAAO;iBACR,CAAC;gBACF,IAAI,CAAC,QAAQ;oBAAE,GAAG,CAAC,IAAI,CAAC,+CAA+C,IAAI,cAAc,CAAC,CAAC;gBAC3F,OAAO,GAAG,CAAC,OAAO,CAChB,MAAM,EACN,SAAS,EACT,GAAG,EAAE,CACH,kBAAkB,WAAW,MAAM,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,KAC1E,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,8BAC3C,EAAE,CACL,CAAC;YACJ,CAAC;YAED,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,aAAa,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,CAAC;gBACrC,MAAM,WAAW,GACf,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,IAAI,SAAS,CAAC;gBAChF,mBAAmB,CAAC,WAAW,CAAC,CAAC;gBACjC,MAAM,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;gBACrC,IAAI,mBAAmB,GAAG,KAAK,CAAC;gBAChC,IAAI,QAAQ;oBAAE,mBAAmB,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;gBAC1F,MAAM,GAAG,GAAG,WAAW,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAClD,IAAI,GAAG,EAAE,CAAC;oBACR,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;oBAC3C,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,KAAK,WAAW;wBAAE,OAAO,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC;oBACtF,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;gBACvC,CAAC;gBACD,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;gBACrF,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CACzC,GAAG,IAAI,mBAAmB;oBACxB,CAAC,CAAC,oBAAoB,WAAW,IAAI;oBACrC,CAAC,CAAC,YAAY,WAAW,mBAAmB,CAC/C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,IAAI,UAAU,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,SAA6C,EAC7C,KAAQ,EACR,IAAkD;IAElD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAuB,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,UAAU,CAAC,0BAA0B,CAAC,CAAC;IAC1F,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;IAChE,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,IAAqD;IACvE,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,0BAA0B,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC5F,CAAC"}

package/dist/doctor.d.ts

@@ -0,0 +1,32 @@
+/**
+ * `inboxy doctor` — checks the local setup end to end and says what to fix.
+ * Every check is read-only. The key is never printed (only its source and the
+ * same short prefix the dashboard shows).
+ */
+import { type ResolvedCredentials } from '@inboxychat/sdk';
+export type CheckStatus = 'pass' | 'warn' | 'fail' | 'skip';
+export interface Check {
+    id: string;
+    status: CheckStatus;
+    message: string;
+}
+export interface DoctorReport {
+    ok: boolean;
+    profile: string;
+    apiUrl: string;
+    checks: Check[];
+}
+/**
+ * Scopes the CLI's read commands use, derived from the capability each
+ * command is an adapter of (UX26-F): scope → the commands that need it.
+ */
+export declare const CLI_SCOPES: Record<string, string>;
+export declare const SKEW_WARN_SECONDS = 60;
+export declare const SKEW_FAIL_SECONDS = 300;
+export declare function runDoctor(creds: ResolvedCredentials, options: {
+    env: NodeJS.ProcessEnv;
+    timeoutMs?: number;
+    now: () => number;
+    credentialError?: string;
+}): Promise<DoctorReport>;
+//# sourceMappingURL=doctor.d.ts.map

package/dist/doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAUL,KAAK,mBAAmB,EACzB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,KAAK;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAQxC,CAAC;AAEP,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AAGrC,wBAAsB,SAAS,CAC7B,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE;IACP,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,MAAM,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B,GACA,OAAO,CAAC,YAAY,CAAC,CAwIvB"}

package/dist/doctor.js

@@ -0,0 +1,127 @@
+/**
+ * `inboxy doctor` — checks the local setup end to end and says what to fix.
+ * Every check is read-only. The key is never printed (only its source and the
+ * same short prefix the dashboard shows).
+ */
+import { InboxyClient, InboxyError, describeError, isModeTooOpen, loadConfig, looksLikeInboxyKey, normalizeBaseUrl, PUBLIC_CAPABILITIES, } from '@inboxychat/sdk';
+/**
+ * Scopes the CLI's read commands use, derived from the capability each
+ * command is an adapter of (UX26-F): scope → the commands that need it.
+ */
+export const CLI_SCOPES = PUBLIC_CAPABILITIES.reduce((acc, capability) => {
+    if (!capability.cliCommand || !capability.scope)
+        return acc;
+    acc[capability.scope] = acc[capability.scope]
+        ? `${acc[capability.scope]}, ${capability.cliCommand}`
+        : capability.cliCommand;
+    return acc;
+}, {});
+export const SKEW_WARN_SECONDS = 60;
+export const SKEW_FAIL_SECONDS = 300;
+const EXPIRY_WARN_DAYS = 7;
+export async function runDoctor(creds, options) {
+    const checks = [];
+    const add = (id, status, message) => checks.push({ id, status, message });
+    // 1. Config file
+    const loaded = await loadConfig(options.env);
+    if (!loaded.exists)
+        add('config-file', 'pass', `No config file (${loaded.path}); using environment/defaults.`);
+    else if (isModeTooOpen(loaded.mode)) {
+        const holdsKey = Object.values(loaded.config.profiles).some((p) => !!p.apiKey);
+        add('config-file', holdsKey ? 'fail' : 'warn', `${loaded.path} is readable by other users (mode ${(loaded.mode ?? 0).toString(8)}). Run: chmod 600 "${loaded.path}"`);
+    }
+    else
+        add('config-file', 'pass', `${loaded.path} (mode ${loaded.mode === null ? 'n/a' : loaded.mode.toString(8)})`);
+    // 2. API URL
+    let urlOk = true;
+    try {
+        const url = normalizeBaseUrl(creds.apiUrl);
+        add('api-url', 'pass', `${url} (from ${creds.urlSource})`);
+    }
+    catch (error) {
+        urlOk = false;
+        add('api-url', 'fail', error instanceof InboxyError ? error.message : 'Invalid API URL.');
+    }
+    // 3. Key present + format
+    if (options.credentialError) {
+        add('api-key', 'fail', options.credentialError);
+    }
+    else if (!creds.apiKey) {
+        add('api-key', 'fail', 'No API key. Set INBOXY_API_KEY or run `inboxy auth login`.');
+    }
+    else {
+        add('api-key', 'pass', `Found (from ${creds.keySource}, starts ${creds.apiKey.slice(0, 8)}…).`);
+        add('key-format', looksLikeInboxyKey(creds.apiKey) ? 'pass' : 'warn', looksLikeInboxyKey(creds.apiKey)
+            ? 'Looks like an Inboxy key (inboxy_ + 64 hex).'
+            : 'Does not look like an Inboxy key (expected inboxy_ followed by 64 hex characters).');
+    }
+    for (const w of creds.warnings)
+        add('keychain', 'warn', w);
+    // 4. Reach the API with the key
+    let company = null;
+    if (!creds.apiKey || !urlOk) {
+        add('api-reachable', 'skip', 'Skipped: no key or invalid URL.');
+    }
+    else {
+        const client = new InboxyClient({
+            apiKey: creds.apiKey,
+            baseUrl: creds.apiUrl,
+            timeoutMs: options.timeoutMs,
+        });
+        const started = options.now();
+        try {
+            const { body, info } = await client.request('/company');
+            company = body.data;
+            add('api-reachable', 'pass', `Inboxy answered in ${info.latencyMs} ms.`);
+            add('key-valid', 'pass', `Key "${company.token.name}" belongs to ${company.company.name} (${company.company.id}).`);
+            // Clock skew: server Date (1 s resolution) vs the request's midpoint.
+            if (info.date) {
+                const server = Date.parse(info.date);
+                const local = started + info.latencyMs / 2;
+                const skew = Math.round((local - server) / 1000);
+                const abs = Math.abs(skew);
+                const status = abs > SKEW_FAIL_SECONDS ? 'fail' : abs > SKEW_WARN_SECONDS ? 'warn' : 'pass';
+                add('clock-skew', status, abs <= 1
+                    ? 'Local clock matches the server.'
+                    : `Local clock is ${abs} s ${skew > 0 ? 'ahead of' : 'behind'} the server${status === 'pass' ? '.' : '. Enable automatic time sync (NTP).'}`);
+            }
+            else
+                add('clock-skew', 'skip', 'The server sent no Date header.');
+        }
+        catch (error) {
+            const err = error instanceof InboxyError ? error : null;
+            if (err && (err.kind === 'network' || err.kind === 'timeout')) {
+                add('api-reachable', 'fail', describeError(err));
+            }
+            else {
+                add('api-reachable', 'pass', 'Inboxy answered.');
+                add('key-valid', 'fail', err ? `${err.code}: ${describeError(err)}` : 'Unexpected error.');
+            }
+        }
+    }
+    // 5. Scopes and expiry (need a valid key)
+    if (company) {
+        const scopes = new Set(company.token.scopes);
+        const missing = Object.entries(CLI_SCOPES).filter(([s]) => !scopes.has(s));
+        add('scopes', missing.length ? 'warn' : 'pass', missing.length
+            ? `Missing ${missing.map(([s, cmds]) => `${s} (${cmds})`).join(', ')}. Key scopes: ${[...scopes].join(', ') || 'none'}.`
+            : `Key has ${[...scopes].join(', ')}.`);
+        const expiresAt = company.token.expiresAt ? Date.parse(company.token.expiresAt) : null;
+        if (expiresAt === null)
+            add('key-expiry', 'pass', 'The key does not expire.');
+        else {
+            const days = (expiresAt - options.now()) / 86_400_000;
+            add('key-expiry', days <= 0 ? 'fail' : days <= EXPIRY_WARN_DAYS ? 'warn' : 'pass', days <= 0
+                ? 'The key has expired.'
+                : `The key expires ${company.token.expiresAt} (in ${Math.ceil(days)} day${Math.ceil(days) === 1 ? '' : 's'}).`);
+        }
+        add('rate-limits', 'pass', `${company.rateLimits.perKey.limit}/${company.rateLimits.perKey.windowSeconds}s per key, ${company.rateLimits.perCompany.limit}/${company.rateLimits.perCompany.windowSeconds}s per company.`);
+    }
+    return {
+        ok: !checks.some((c) => c.status === 'fail'),
+        profile: creds.profile,
+        apiUrl: creds.apiUrl,
+        checks,
+    };
+}
+//# sourceMappingURL=doctor.js.map

package/dist/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,YAAY,EACZ,WAAW,EACX,aAAa,EACb,aAAa,EACb,UAAU,EACV,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,GAGpB,MAAM,iBAAiB,CAAC;AAiBzB;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAA2B,mBAAmB,CAAC,MAAM,CAE1E,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;IACpB,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,KAAK;QAAE,OAAO,GAAG,CAAC;IAC5D,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAC3C,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU,CAAC,UAAU,EAAE;QACtD,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC;IAC1B,OAAO,GAAG,CAAC;AACb,CAAC,EAAE,EAAE,CAAC,CAAC;AAEP,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AACpC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAA0B,EAC1B,OAKC;IAED,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,MAAmB,EAAE,OAAe,EAAE,EAAE,CAC/D,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAEvC,iBAAiB;IACjB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,MAAM;QAChB,GAAG,CAAC,aAAa,EAAE,MAAM,EAAE,mBAAmB,MAAM,CAAC,IAAI,gCAAgC,CAAC,CAAC;SACxF,IAAI,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/E,GAAG,CACD,aAAa,EACb,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC1B,GAAG,MAAM,CAAC,IAAI,qCAAqC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,sBAAsB,MAAM,CAAC,IAAI,GAAG,CACtH,CAAC;IACJ,CAAC;;QACC,GAAG,CACD,aAAa,EACb,MAAM,EACN,GAAG,MAAM,CAAC,IAAI,UAAU,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAClF,CAAC;IAEJ,aAAa;IACb,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,GAAG,UAAU,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,KAAK,GAAG,KAAK,CAAC;QACd,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAC5F,CAAC;IAED,0BAA0B;IAC1B,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC;SAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,4DAA4D,CAAC,CAAC;IACvF,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,eAAe,KAAK,CAAC,SAAS,YAAY,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAChG,GAAG,CACD,YAAY,EACZ,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAClD,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC;YAC9B,CAAC,CAAC,8CAA8C;YAChD,CAAC,CAAC,oFAAoF,CACzF,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ;QAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAE3D,gCAAgC;IAChC,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QAC5B,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,MAAM,GAAG,IAAI,YAAY,CAAC;YAC9B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,OAAO,EAAE,KAAK,CAAC,MAAM;YACrB,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC;YACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAA2B,UAAU,CAAC,CAAC;YAClF,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC;YACpB,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,sBAAsB,IAAI,CAAC,SAAS,MAAM,CAAC,CAAC;YACzE,GAAG,CACD,WAAW,EACX,MAAM,EACN,QAAQ,OAAO,CAAC,KAAK,CAAC,IAAI,gBAAgB,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,CAC1F,CAAC;YAEF,sEAAsE;YACtE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,OAAO,GAAG,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;gBAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;gBACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,MAAM,GACV,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBAC/E,GAAG,CACD,YAAY,EACZ,MAAM,EACN,GAAG,IAAI,CAAC;oBACN,CAAC,CAAC,iCAAiC;oBACnC,CAAC,CAAC,kBAAkB,GAAG,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,cACzD,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,qCAC5B,EAAE,CACP,CAAC;YACJ,CAAC;;gBAAM,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,iCAAiC,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YACxD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;gBACjD,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,GAAG,CACD,QAAQ,EACR,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAChC,OAAO,CAAC,MAAM;YACZ,CAAC,CAAC,WAAW,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;YACxH,CAAC,CAAC,WAAW,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACzC,CAAC;QACF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvF,IAAI,SAAS,KAAK,IAAI;YAAE,GAAG,CAAC,YAAY,EAAE,MAAM,EAAE,0BAA0B,CAAC,CAAC;aACzE,CAAC;YACJ,MAAM,IAAI,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,UAAU,CAAC;YACtD,GAAG,CACD,YAAY,EACZ,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,gBAAgB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAC/D,IAAI,IAAI,CAAC;gBACP,CAAC,CAAC,sBAAsB;gBACxB,CAAC,CAAC,mBAAmB,OAAO,CAAC,KAAK,CAAC,SAAS,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CACjH,CAAC;QACJ,CAAC;QACD,GAAG,CACD,aAAa,EACb,MAAM,EACN,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,aAAa,cAAc,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,aAAa,gBAAgB,CAC9L,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/output.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Output contract of the `inboxy` CLI.
+ *
+ * --json prints exactly one JSON document on stdout (schemaVersion 1):
+ *   success: { schemaVersion: 1, ok: true,  command, data, meta? }
+ *   failure: { schemaVersion: 1, ok: false, command, error: { kind, code, message, status, details, retryAfterSeconds } }
+ * Fields may be added within schemaVersion 1; none is renamed or removed.
+ *
+ * Exit codes are stable and documented in the README.
+ */
+import { type InboxyErrorKind } from '@inboxychat/sdk';
+export declare const JSON_SCHEMA_VERSION = 1;
+export declare const EXIT: {
+    readonly OK: 0;
+    readonly UNEXPECTED: 1;
+    readonly USAGE: 2;
+    readonly CONFIG: 3;
+    readonly AUTH: 4;
+    readonly FORBIDDEN: 5;
+    readonly NOT_FOUND: 6;
+    readonly RATE_LIMITED: 7;
+    readonly NETWORK: 8;
+    readonly SERVER: 9;
+    readonly CHECKS_FAILED: 10;
+};
+export declare function exitCodeFor(kind: InboxyErrorKind): number;
+export declare class UsageError extends Error {
+    constructor(message: string);
+}
+export interface CliIO {
+    stdout(text: string): void;
+    stderr(text: string): void;
+    /** Reads the API key for `auth login` (piped stdin, or a hidden prompt on a TTY). */
+    readSecret(prompt: string): Promise<string>;
+    env: NodeJS.ProcessEnv;
+    now(): number;
+}
+export declare class Output {
+    private readonly io;
+    private readonly json;
+    private readonly command;
+    /** Secrets that must never reach the terminal (the key in use). */
+    private readonly secrets;
+    constructor(io: CliIO, json: boolean, command: string, 
+    /** Secrets that must never reach the terminal (the key in use). */
+    secrets: () => string[]);
+    private clean;
+    /** Success. `human` renders the non-JSON view. */
+    success(data: unknown, meta: unknown, human: () => string): number;
+    failure(error: unknown): number;
+    /** Progress or hints for humans; suppressed in --json mode. */
+    note(text: string): void;
+}
+/** A plain aligned table; cells are flattened to one line. */
+export declare function table(headers: string[], rows: Array<Array<string | number | null | undefined>>): string;
+//# sourceMappingURL=output.d.ts.map

package/dist/output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.d.ts","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAA6C,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElG,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,eAAO,MAAM,IAAI;;;;;;;;;;;;CAYP,CAAC;AAEX,wBAAgB,WAAW,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,CAwBzD;AAED,qBAAa,UAAW,SAAQ,KAAK;gBACvB,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,KAAK;IACpB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,qFAAqF;IACrF,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,GAAG,IAAI,MAAM,CAAC;CACf;AAED,qBAAa,MAAM;IAEf,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,mEAAmE;IACnE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAJP,EAAE,EAAE,KAAK,EACT,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM;IAChC,mEAAmE;IAClD,OAAO,EAAE,MAAM,MAAM,EAAE;IAG1C,OAAO,CAAC,KAAK;IAIb,kDAAkD;IAClD,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,GAAG,MAAM;IAiBlE,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;IAqD/B,+DAA+D;IAC/D,IAAI,CAAC,IAAI,EAAE,MAAM;CAGlB;AAED,8DAA8D;AAC9D,wBAAgB,KAAK,CACnB,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC,GACrD,MAAM,CAiBR"}

package/dist/output.js

@@ -0,0 +1,161 @@
+/**
+ * Output contract of the `inboxy` CLI.
+ *
+ * --json prints exactly one JSON document on stdout (schemaVersion 1):
+ *   success: { schemaVersion: 1, ok: true,  command, data, meta? }
+ *   failure: { schemaVersion: 1, ok: false, command, error: { kind, code, message, status, details, retryAfterSeconds } }
+ * Fields may be added within schemaVersion 1; none is renamed or removed.
+ *
+ * Exit codes are stable and documented in the README.
+ */
+import { InboxyError, describeError, redactSecrets } from '@inboxychat/sdk';
+export const JSON_SCHEMA_VERSION = 1;
+export const EXIT = {
+    OK: 0,
+    UNEXPECTED: 1,
+    USAGE: 2,
+    CONFIG: 3,
+    AUTH: 4,
+    FORBIDDEN: 5,
+    NOT_FOUND: 6,
+    RATE_LIMITED: 7,
+    NETWORK: 8,
+    SERVER: 9,
+    CHECKS_FAILED: 10,
+};
+export function exitCodeFor(kind) {
+    switch (kind) {
+        case 'config':
+            return EXIT.CONFIG;
+        case 'auth':
+            return EXIT.AUTH;
+        case 'forbidden':
+            return EXIT.FORBIDDEN;
+        case 'not_found':
+            return EXIT.NOT_FOUND;
+        case 'rate_limited':
+            return EXIT.RATE_LIMITED;
+        case 'timeout':
+        case 'cancelled':
+        case 'network':
+            return EXIT.NETWORK;
+        case 'server':
+        case 'invalid_response':
+            return EXIT.SERVER;
+        case 'invalid_request':
+            return EXIT.USAGE;
+        default:
+            return EXIT.UNEXPECTED;
+    }
+}
+export class UsageError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'UsageError';
+    }
+}
+export class Output {
+    io;
+    json;
+    command;
+    secrets;
+    constructor(io, json, command, 
+    /** Secrets that must never reach the terminal (the key in use). */
+    secrets) {
+        this.io = io;
+        this.json = json;
+        this.command = command;
+        this.secrets = secrets;
+    }
+    clean(text) {
+        return redactSecrets(text, this.secrets());
+    }
+    /** Success. `human` renders the non-JSON view. */
+    success(data, meta, human) {
+        if (this.json) {
+            const doc = {
+                schemaVersion: JSON_SCHEMA_VERSION,
+                ok: true,
+                command: this.command,
+                data,
+            };
+            if (meta !== undefined)
+                doc.meta = meta;
+            this.io.stdout(`${this.clean(JSON.stringify(doc, null, 2))}\n`);
+        }
+        else {
+            const text = human();
+            if (text)
+                this.io.stdout(`${this.clean(text)}\n`);
+        }
+        return EXIT.OK;
+    }
+    failure(error) {
+        let payload;
+        let code;
+        let human;
+        if (error instanceof InboxyError) {
+            payload = { ...error.toJSON(), message: describeError(error) };
+            code = exitCodeFor(error.kind);
+            human = `Error (${error.code}): ${describeError(error)}`;
+        }
+        else if (error instanceof UsageError) {
+            payload = {
+                kind: 'usage',
+                code: 'USAGE',
+                message: error.message,
+                status: 0,
+                details: {},
+                retryAfterSeconds: null,
+            };
+            code = EXIT.USAGE;
+            human = `Error: ${error.message}\nRun \`inboxy --help\` for usage.`;
+        }
+        else {
+            const message = error instanceof Error ? error.message : 'Unexpected error';
+            payload = {
+                kind: 'unexpected',
+                code: 'UNEXPECTED',
+                message,
+                status: 0,
+                details: {},
+                retryAfterSeconds: null,
+            };
+            code = EXIT.UNEXPECTED;
+            human = `Error: ${message}`;
+        }
+        if (this.json) {
+            const doc = {
+                schemaVersion: JSON_SCHEMA_VERSION,
+                ok: false,
+                command: this.command,
+                error: payload,
+            };
+            this.io.stdout(`${this.clean(JSON.stringify(doc, null, 2))}\n`);
+        }
+        else {
+            this.io.stderr(`${this.clean(human)}\n`);
+        }
+        return code;
+    }
+    /** Progress or hints for humans; suppressed in --json mode. */
+    note(text) {
+        if (!this.json)
+            this.io.stderr(`${this.clean(text)}\n`);
+    }
+}
+/** A plain aligned table; cells are flattened to one line. */
+export function table(headers, rows) {
+    const cells = rows.map((r) => r.map((c) => (c === null || c === undefined ? '-' : String(c).replace(/\s+/g, ' '))));
+    const widths = headers.map((h, i) => Math.min(48, Math.max(h.length, ...cells.map((r) => (r[i] ?? '').length))));
+    const fmt = (r) => r
+        .map((c, i) => {
+        const w = widths[i];
+        const v = c.length > w ? `${c.slice(0, w - 1)}…` : c;
+        return v.padEnd(w);
+    })
+        .join('  ')
+        .trimEnd();
+    return [fmt(headers), fmt(widths.map((w) => '-'.repeat(w))), ...cells.map(fmt)].join('\n');
+}
+//# sourceMappingURL=output.js.map

package/dist/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../src/output.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,aAAa,EAAwB,MAAM,iBAAiB,CAAC;AAElG,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,UAAU,EAAE,CAAC;IACb,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,CAAC;IACZ,YAAY,EAAE,CAAC;IACf,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,EAAE;CACT,CAAC;AAEX,MAAM,UAAU,WAAW,CAAC,IAAqB;IAC/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,IAAI,CAAC;QACnB,KAAK,WAAW;YACd,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,IAAI,CAAC,SAAS,CAAC;QACxB,KAAK,cAAc;YACjB,OAAO,IAAI,CAAC,YAAY,CAAC;QAC3B,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC;QACjB,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,KAAK,QAAQ,CAAC;QACd,KAAK,kBAAkB;YACrB,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,KAAK,iBAAiB;YACpB,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB;YACE,OAAO,IAAI,CAAC,UAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAWD,MAAM,OAAO,MAAM;IAEE;IACA;IACA;IAEA;IALnB,YACmB,EAAS,EACT,IAAa,EACb,OAAe;IAChC,mEAAmE;IAClD,OAAuB;QAJvB,OAAE,GAAF,EAAE,CAAO;QACT,SAAI,GAAJ,IAAI,CAAS;QACb,YAAO,GAAP,OAAO,CAAQ;QAEf,YAAO,GAAP,OAAO,CAAgB;IACvC,CAAC;IAEI,KAAK,CAAC,IAAY;QACxB,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,kDAAkD;IAClD,OAAO,CAAC,IAAa,EAAE,IAAa,EAAE,KAAmB;QACvD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,GAA4B;gBACnC,aAAa,EAAE,mBAAmB;gBAClC,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,IAAI;aACL,CAAC;YACF,IAAI,IAAI,KAAK,SAAS;gBAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YACxC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC;YACrB,IAAI,IAAI;gBAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,OAAO,CAAC,KAAc;QACpB,IAAI,OAOH,CAAC;QACF,IAAI,IAAY,CAAC;QACjB,IAAI,KAAa,CAAC;QAClB,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/D,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,KAAK,GAAG,UAAU,KAAK,CAAC,IAAI,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,CAAC;aAAM,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YACvC,OAAO,GAAG;gBACR,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,EAAE;gBACX,iBAAiB,EAAE,IAAI;aACxB,CAAC;YACF,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;YAClB,KAAK,GAAG,UAAU,KAAK,CAAC,OAAO,oCAAoC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC5E,OAAO,GAAG;gBACR,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,YAAY;gBAClB,OAAO;gBACP,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,EAAE;gBACX,iBAAiB,EAAE,IAAI;aACxB,CAAC;YACF,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC;YACvB,KAAK,GAAG,UAAU,OAAO,EAAE,CAAC;QAC9B,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,MAAM,GAAG,GAAG;gBACV,aAAa,EAAE,mBAAmB;gBAClC,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,KAAK,EAAE,OAAO;aACf,CAAC;YACF,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,IAAY;QACf,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,UAAU,KAAK,CACnB,OAAiB,EACjB,IAAsD;IAEtD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC3B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CACrF,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAClC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAC3E,CAAC;IACF,MAAM,GAAG,GAAG,CAAC,CAAW,EAAE,EAAE,CAC1B,CAAC;SACE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACZ,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC;SACV,OAAO,EAAE,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7F,CAAC"}

package/package.json

@@ -1,6 +1,36 @@
 {
   "name": "@inboxychat/cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.0",
+  "description": "Inboxy command line: read-only account, orders, contacts and usage, plus doctor diagnostics.",
+  "license": "UNLICENSED",
+  "type": "module",
+  "bin": {
+    "inboxy": "./dist/bin.js"
+  },
+  "files": [
+    "dist",
+    "!dist/.tsbuildinfo",
+    "!dist/**/*.tsbuildinfo"
+  ],
+  "engines": {
+    "node": ">=20.3.0"
+  },
+  "dependencies": {
+    "@inboxychat/sdk": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "typescript": "^5.3.0",
+    "vitest": "^4.0.16"
+  },
+  "homepage": "https://inboxy.chat",
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json",
+    "type-check": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist .turbo"
+  }
 }