@indecisivedev/openplan 0.2.0-alpha.2

package/dist/cli-credentials.js

@@ -0,0 +1,447 @@
+import fs from "node:fs/promises";
+import { constants } from "node:fs";
+import path from "node:path";
+import { randomUUID } from "node:crypto";
+import { normalizeApiUrl } from "./cli-endpoint.js";
+export class CredentialError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "CredentialError";
+    }
+}
+const MAX_STORE_BYTES = 1024 * 1024;
+const metadataKeys = ["accountId", "accountName", "apiKeyId", "apiKeyName"];
+function fail(code, message) { throw new CredentialError(code, message); }
+function record(value) { return !!value && typeof value === "object" && !Array.isArray(value); }
+export function validateApiKey(key) {
+    if (typeof key !== "string" || !key || key.length > 8192 || !/^[\x21-\x7e]+$/.test(key))
+        fail("INVALID_KEY", "API key must be a nonempty, bounded printable token without whitespace.");
+}
+/** Internal redaction primitive; supplied secrets never appear in its result. */
+export function textContainsSecret(value, secret) {
+    let decoded = value;
+    for (let depth = 0; depth < 8; depth++) {
+        if (decoded.includes(secret))
+            return true;
+        // Keys are printable ASCII. Decode ASCII percent bytes individually so an
+        // unrelated malformed UTF-8 escape cannot hide an otherwise encoded key.
+        const next = decoded.replace(/%([0-9a-f]{2})/gi, (_match, hex) => String.fromCharCode(Number.parseInt(hex, 16)));
+        if (next === decoded)
+            return false;
+        decoded = next;
+    }
+    // Refuse pathological multilayer escaping rather than unbounded CPU work or
+    // allowing another decoder to reveal secret text beyond our inspection bound.
+    return decoded.includes(secret) || /%[0-9a-f]{2}/i.test(decoded);
+}
+function validateSnapshotMetadata(data) {
+    const entries = Object.values(data.byOrigin);
+    const keys = [...entries.map(entry => entry.apiKey), ...(data.legacyUnbound ? [data.legacyUnbound.apiKey] : [])];
+    for (const entry of entries) {
+        for (const field of metadataKeys) {
+            const value = entry[field];
+            if (value !== undefined && keys.some(key => textContainsSecret(value, key)))
+                fail("INVALID_STORE", "Credential metadata contains secret material and cannot be displayed.");
+        }
+    }
+}
+function validEntry(value, legacy = false) {
+    if (!record(value) || Object.keys(value).some(k => !["apiKey", "updatedAt", ...(legacy ? [] : metadataKeys)].includes(k)))
+        fail("INVALID_STORE", "Credential store has an invalid record; preserve it for owner-controlled repair.");
+    try {
+        validateApiKey(value.apiKey);
+    }
+    catch {
+        fail("INVALID_STORE", "Credential store has an invalid key record; preserve it for owner-controlled repair.");
+    }
+    for (const key of ["updatedAt", ...metadataKeys]) {
+        if (value[key] !== undefined && (typeof value[key] !== "string" || value[key].length > 1024 || /[\x00-\x1f\x7f]/.test(value[key])))
+            fail("INVALID_STORE", "Credential store has invalid metadata.");
+    }
+    for (const key of metadataKeys) {
+        if (typeof value[key] === "string" && textContainsSecret(value[key], value.apiKey))
+            fail("INVALID_STORE", "Credential metadata contains secret material and cannot be displayed.");
+    }
+    return value;
+}
+function rejectDuplicateKeys(text) {
+    // JSON.parse otherwise silently discards duplicate records. Only scan after
+    // parsing succeeds, so colons following string tokens unambiguously mark keys.
+    const objects = [];
+    const tokens = /"(?:\\.|[^"\\])*"|[{}\[\]]/g;
+    for (const match of text.matchAll(tokens)) {
+        const token = match[0];
+        if (token === "{")
+            objects.push(new Set());
+        else if (token === "[")
+            objects.push(null);
+        else if (token === "}" || token === "]")
+            objects.pop();
+        else if (text.slice(match.index + token.length).trimStart().startsWith(":")) {
+            const keys = objects.at(-1);
+            const key = JSON.parse(token);
+            if (keys?.has(key))
+                fail("INVALID_STORE", "Credential store contains duplicate JSON keys; no records were merged.");
+            keys?.add(key);
+        }
+    }
+}
+function parseSnapshot(text) {
+    let value;
+    try {
+        value = JSON.parse(text);
+    }
+    catch {
+        fail("INVALID_STORE", "Credential store is not valid JSON; preserve it for owner-controlled repair.");
+    }
+    rejectDuplicateKeys(text);
+    if (!record(value))
+        fail("INVALID_STORE", "Credential store has an unsupported schema.");
+    if (!("version" in value)) {
+        if (!Object.hasOwn(value, "apiKey"))
+            fail("INVALID_STORE", "Credential store has an unsupported schema.");
+        return { kind: "legacy", entry: validEntry(value, true) };
+    }
+    if (value.version !== 2)
+        fail("UNSUPPORTED_VERSION", "Credential store version is unsupported; do not overwrite it with this client.");
+    if (Object.keys(value).some(k => !["version", "byOrigin", "legacyUnbound"].includes(k)) || !record(value.byOrigin))
+        fail("INVALID_STORE", "Credential store has an invalid v2 schema.");
+    const byOrigin = Object.create(null);
+    for (const [origin, entry] of Object.entries(value.byOrigin)) {
+        let normalized;
+        try {
+            normalized = normalizeApiUrl(origin);
+        }
+        catch {
+            fail("INVALID_STORE", "Credential store contains an invalid origin.");
+        }
+        if (normalized !== origin)
+            fail("INVALID_STORE", "Credential store origins must already be canonical; no entries were merged.");
+        byOrigin[origin] = validEntry(entry);
+    }
+    const data = { version: 2, byOrigin };
+    if (Object.hasOwn(value, "legacyUnbound"))
+        data.legacyUnbound = validEntry(value.legacyUnbound, true);
+    validateSnapshotMetadata(data);
+    return { kind: "v2", data };
+}
+function metadata(entry) {
+    const result = {};
+    for (const key of metadataKeys)
+        if (entry[key] !== undefined)
+            result[key] = entry[key];
+    return result;
+}
+function osCode(error) { return error?.code; }
+function privateStat(stat, directory) {
+    if ((directory ? !stat.isDirectory() : !stat.isFile()) || stat.uid !== process.getuid?.() || (stat.mode & 0o7077) !== 0 || (!directory && stat.nlink !== 1)) {
+        fail("UNSAFE_STORE", "Unsafe credential state ownership, permissions or file type. Inspect ~/.openplan and repair ownership/private modes without following links.");
+    }
+}
+function sameFile(a, b) { return a.dev === b.dev && a.ino === b.ino; }
+const secrets = new WeakMap();
+export function enrollmentCredential(origin, apiKey) {
+    validateApiKey(apiKey);
+    return bind(normalizeApiUrl(origin), apiKey, "enrollment");
+}
+function bind(origin, key, source) {
+    const result = Object.freeze({ origin, source });
+    secrets.set(result, key);
+    return result;
+}
+/** Internal transport boundary: not a command-facing credential context. */
+export function credentialAuthorization(credential, origin) {
+    const key = secrets.get(credential);
+    if (!key || credential.origin !== origin)
+        fail("ORIGIN_MISMATCH", "Credential does not belong to the selected origin.");
+    return `Bearer ${key}`;
+}
+function environmentCredential(origin, env) {
+    if (env.OPENPLAN_API_KEY === undefined && env.OPENPLAN_API_KEY_ORIGIN === undefined)
+        return undefined;
+    if (!env.OPENPLAN_API_KEY || !env.OPENPLAN_API_KEY_ORIGIN)
+        fail("INVALID_ENV_BINDING", "Set both OPENPLAN_API_KEY and OPENPLAN_API_KEY_ORIGIN, or unset both to use saved credentials.");
+    let bound;
+    try {
+        validateApiKey(env.OPENPLAN_API_KEY);
+        bound = normalizeApiUrl(env.OPENPLAN_API_KEY_ORIGIN);
+    }
+    catch {
+        fail("INVALID_ENV_BINDING", "The environment API key/origin binding is invalid; no saved credential was substituted.");
+    }
+    if (bound !== origin)
+        fail("ENV_ORIGIN_MISMATCH", "OPENPLAN_API_KEY_ORIGIN does not match the selected origin; no request was sent. Unset both key variables to use saved credentials.");
+    return bind(origin, env.OPENPLAN_API_KEY, "environment");
+}
+export class CredentialStore {
+    #directory;
+    #lockTimeoutMs;
+    #lockRetryMs;
+    constructor(homeDir, options = {}) {
+        this.#directory = path.join(path.resolve(homeDir), ".openplan");
+        this.#lockTimeoutMs = options.lockTimeoutMs ?? 3000;
+        this.#lockRetryMs = options.lockRetryMs ?? 25;
+        if (![this.#lockTimeoutMs, this.#lockRetryMs].every(x => Number.isSafeInteger(x) && x > 0 && x <= 60_000))
+            fail("INVALID_OPTIONS", "Credential lock timing must be finite and bounded.");
+    }
+    async #openDirectory(create) {
+        if (process.platform !== "linux") {
+            fail("UNSUPPORTED_PLATFORM", "Saved CLI credentials require Linux for this alpha. Run the CLI on Linux or in a Linux container; native macOS and Windows credential storage is not supported yet.");
+        }
+        try {
+            // Reject symlinks in the supplied home path as well as the state directory.
+            const home = path.dirname(this.#directory);
+            let cursor = path.parse(home).root;
+            for (const component of home.slice(cursor.length).split(path.sep).filter(Boolean)) {
+                cursor = path.join(cursor, component);
+                const stat = await fs.lstat(cursor);
+                if (!stat.isDirectory() || stat.isSymbolicLink())
+                    fail("UNSAFE_STORE", "Credential home must use real directories, not symlinks.");
+            }
+            if (create) {
+                let created = false;
+                try {
+                    await fs.mkdir(this.#directory, { mode: 0o700 });
+                    created = true;
+                }
+                catch (error) {
+                    if (osCode(error) !== "EEXIST")
+                        throw error;
+                }
+                if (created) {
+                    // Persist the new directory's entry as well, not just its contents.
+                    const parent = await fs.open(home, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+                    try {
+                        await parent.sync();
+                    }
+                    finally {
+                        await parent.close();
+                    }
+                }
+            }
+            let before;
+            try {
+                before = await fs.lstat(this.#directory);
+            }
+            catch (error) {
+                if (!create && osCode(error) === "ENOENT")
+                    return undefined;
+                throw error;
+            }
+            privateStat(before, true);
+            const handle = await fs.open(this.#directory, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+            try {
+                const after = await handle.stat();
+                privateStat(after, true);
+                if (!sameFile(before, after))
+                    fail("UNSAFE_STORE", "Credential directory changed during inspection.");
+                return handle;
+            }
+            catch (error) {
+                await handle.close();
+                throw error;
+            }
+        }
+        catch (error) {
+            if (error instanceof CredentialError)
+                throw error;
+            fail("STORE_IO", "Cannot safely access the credential directory; inspect its ownership and private permissions.");
+        }
+    }
+    #at(directory, filename) {
+        // Supported Linux profile: anchor operations to the inspected open directory,
+        // rather than resolving a possibly replaced parent path again.
+        return `/proc/self/fd/${directory.fd}/${filename}`;
+    }
+    async #read(directory) {
+        let file;
+        try {
+            const filename = this.#at(directory, "credentials.json");
+            let before;
+            try {
+                before = await fs.lstat(filename);
+            }
+            catch (error) {
+                if (osCode(error) === "ENOENT")
+                    return { kind: "missing" };
+                throw error;
+            }
+            privateStat(before, false);
+            file = await fs.open(filename, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+            const stat = await file.stat();
+            privateStat(stat, false);
+            if (!sameFile(before, stat))
+                fail("UNSAFE_STORE", "Credential file changed during inspection.");
+            if (stat.size > MAX_STORE_BYTES)
+                fail("INVALID_STORE", "Credential store exceeds the supported size bound.");
+            const buffer = Buffer.alloc(MAX_STORE_BYTES + 1);
+            let offset = 0;
+            while (offset < buffer.length) {
+                const { bytesRead } = await file.read(buffer, offset, buffer.length - offset, null);
+                if (!bytesRead)
+                    break;
+                offset += bytesRead;
+            }
+            if (offset > MAX_STORE_BYTES)
+                fail("INVALID_STORE", "Credential store exceeds the supported size bound.");
+            let text;
+            try {
+                text = new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, offset));
+            }
+            catch {
+                return fail("INVALID_STORE", "Credential store is not valid UTF-8; existing state was not replaced.");
+            }
+            return parseSnapshot(text);
+        }
+        catch (error) {
+            if (error instanceof CredentialError)
+                throw error;
+            return fail("STORE_IO", "Cannot safely read credential state; existing state was not replaced.");
+        }
+        finally {
+            await file?.close();
+        }
+    }
+    async #snapshot() {
+        const directory = await this.#openDirectory(false);
+        if (!directory)
+            return { kind: "missing" };
+        try {
+            return await this.#read(directory);
+        }
+        finally {
+            await directory.close();
+        }
+    }
+    async resolve(originInput, env = process.env) {
+        const origin = normalizeApiUrl(originInput);
+        const ambient = environmentCredential(origin, env);
+        if (ambient)
+            return ambient;
+        const snapshot = await this.#snapshot();
+        if (snapshot.kind === "v2" && snapshot.data.byOrigin[origin])
+            return bind(origin, snapshot.data.byOrigin[origin].apiKey, "saved");
+        if (snapshot.kind === "legacy")
+            fail("LEGACY_UNBOUND", "Legacy credentials are unbound and inactive. Reauthenticate explicitly with openplan auth login; no discovery request was sent.");
+        fail("MISSING_CREDENTIAL", "No saved credential for the selected origin. Run openplan auth login for this origin.");
+    }
+    async status(originInput, env = process.env) {
+        const origin = normalizeApiUrl(originInput);
+        const ambient = environmentCredential(origin, env);
+        const snapshot = await this.#snapshot();
+        const entry = snapshot.kind === "v2" ? snapshot.data.byOrigin[origin] : undefined;
+        const hasLegacyUnbound = snapshot.kind === "legacy" || (snapshot.kind === "v2" && !!snapshot.data.legacyUnbound);
+        return { origin, source: ambient ? "environment" : entry ? "saved" : hasLegacyUnbound ? "legacy" : "none", hasSavedCredential: !!entry, hasLegacyUnbound, ...(entry && !ambient ? { metadata: metadata(entry) } : {}) };
+    }
+    async #mutate(change) {
+        const directory = (await this.#openDirectory(true));
+        const lockPath = this.#at(directory, "credentials.lock");
+        let lock;
+        let lockStat;
+        let temp;
+        let committed = false;
+        try {
+            const start = Date.now();
+            while (!lock) {
+                try {
+                    lock = await fs.open(lockPath, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600);
+                    lockStat = await lock.stat();
+                    privateStat(lockStat, false);
+                }
+                catch (error) {
+                    if (osCode(error) !== "EEXIST")
+                        throw error;
+                    try {
+                        privateStat(await fs.lstat(lockPath), false);
+                    }
+                    catch (e) {
+                        if (osCode(e) === "ENOENT")
+                            continue;
+                        throw e;
+                    }
+                    if (Date.now() - start >= this.#lockTimeoutMs)
+                        fail("LOCK_TIMEOUT", "Credential store is locked. Inspect the writer or abandoned lock; locks are never automatically broken.");
+                    await new Promise(resolve => setTimeout(resolve, this.#lockRetryMs));
+                }
+            }
+            const { data, result } = change(await this.#read(directory));
+            if (!data)
+                return result;
+            validateSnapshotMetadata(data);
+            const serialized = `${JSON.stringify(data, null, 2)}\n`;
+            if (Buffer.byteLength(serialized) > MAX_STORE_BYTES)
+                fail("INVALID_STORE", "Credential store would exceed the supported size bound.");
+            temp = this.#at(directory, `.credentials-${randomUUID()}.tmp`);
+            const file = await fs.open(temp, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+            try {
+                await file.writeFile(serialized, "utf8");
+                await file.sync();
+            }
+            finally {
+                await file.close();
+            }
+            // Refuse a newly unsafe destination, even though rename would not follow it.
+            await this.#read(directory);
+            await fs.rename(temp, this.#at(directory, "credentials.json"));
+            committed = true;
+            temp = undefined;
+            await directory.sync();
+            return result;
+        }
+        catch (error) {
+            if (committed)
+                fail("PERSISTENCE_UNCERTAIN", "Credential replacement occurred but durability could not be confirmed. Persistence is uncertain; inspect local auth status before retrying.");
+            if (error instanceof CredentialError)
+                throw error;
+            return fail("STORE_WRITE", "Credential update failed before replacement; existing credentials were preserved. Inspect local state before retrying.");
+        }
+        finally {
+            if (temp)
+                await fs.unlink(temp).catch(() => { });
+            if (lock) {
+                try {
+                    const current = await fs.lstat(lockPath);
+                    if (lockStat && sameFile(current, lockStat))
+                        await fs.unlink(lockPath);
+                }
+                catch { /* Do not unlink another writer's lock or obscure the commit result. */ }
+                await lock.close().catch(() => { });
+            }
+            await directory.close().catch(() => { });
+        }
+    }
+    async save(originInput, apiKey, info = {}) {
+        const origin = normalizeApiUrl(originInput);
+        validateApiKey(apiKey);
+        const entry = validEntry({ apiKey, ...metadata({ apiKey, ...info }), updatedAt: new Date().toISOString() });
+        return this.#mutate(snapshot => {
+            const data = snapshot.kind === "v2" ? snapshot.data : { version: 2, byOrigin: Object.create(null), ...(snapshot.kind === "legacy" ? { legacyUnbound: snapshot.entry } : {}) };
+            data.byOrigin[origin] = entry;
+            if (data.legacyUnbound?.apiKey === apiKey)
+                delete data.legacyUnbound;
+            return { data, result: { hasLegacyUnbound: !!data.legacyUnbound } };
+        });
+    }
+    async remove(originInput) {
+        const origin = normalizeApiUrl(originInput);
+        return this.#mutate(snapshot => {
+            const hasLegacyUnbound = snapshot.kind === "legacy" || (snapshot.kind === "v2" && !!snapshot.data.legacyUnbound);
+            if (snapshot.kind !== "v2" || !snapshot.data.byOrigin[origin])
+                return { result: { removed: false, hasLegacyUnbound } };
+            delete snapshot.data.byOrigin[origin];
+            return { data: snapshot.data, result: { removed: true, hasLegacyUnbound } };
+        });
+    }
+    async removeLegacy() {
+        return this.#mutate(snapshot => {
+            if (snapshot.kind === "missing" || (snapshot.kind === "v2" && !snapshot.data.legacyUnbound))
+                return { result: { removed: false } };
+            const data = snapshot.kind === "v2" ? snapshot.data : { version: 2, byOrigin: Object.create(null) };
+            delete data.legacyUnbound;
+            return { data, result: { removed: true } };
+        });
+    }
+}
+//# sourceMappingURL=cli-credentials.js.map

package/dist/cli-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-credentials.js","sourceRoot":"","sources":["../src/cli-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,SAAS,EAAc,MAAM,SAAS,CAAC;AAChD,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACZ;IAA5B,YAA4B,IAAY,EAAE,OAAe;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAhD,SAAI,GAAJ,IAAI,CAAQ;QAAqC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAAC,CAAC;CAC9G;AAUD,MAAM,eAAe,GAAG,IAAI,GAAG,IAAI,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,CAAU,CAAC;AACrF,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,IAAW,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACjG,SAAS,MAAM,CAAC,KAAc,IAAsC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3I,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,aAAa,EAAE,yEAAyE,CAAC,CAAC;AAC1L,CAAC;AACD,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,KAAa,EAAE,MAAc;IAC9D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,0EAA0E;QAC1E,yEAAyE;QACzE,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,MAAM,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACzH,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACnC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,OAAO,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AACD,SAAS,wBAAwB,CAAC,IAAQ;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAAE,IAAI,CAAC,eAAe,EAAE,uEAAuE,CAAC,CAAC;QAC9K,CAAC;IACH,CAAC;AACH,CAAC;AACD,SAAS,UAAU,CAAC,KAAc,EAAE,MAAM,GAAG,KAAK;IAChD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,eAAe,EAAE,kFAAkF,CAAC,CAAC;IACrO,IAAI,CAAC;QAAC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,eAAe,EAAE,sFAAsF,CAAC,CAAC;IAAC,CAAC;IAC9J,KAAK,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,YAAY,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,KAAK,CAAC,GAAG,CAAY,CAAC,MAAM,GAAG,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAW,CAAC,CAAC;YAAE,IAAI,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IAC5N,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAW,EAAE,KAAK,CAAC,MAAgB,CAAC;YAAE,IAAI,CAAC,eAAe,EAAE,uEAAuE,CAAC,CAAC;IACzM,CAAC;IACD,OAAO,KAAyB,CAAC;AACnC,CAAC;AACD,SAAS,mBAAmB,CAAC,IAAY;IACvC,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,6BAA6B,CAAC;IAC7C,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;aACtC,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;aACtC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aAClD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAC;YACxC,IAAI,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,eAAe,EAAE,wEAAwE,CAAC,CAAC;YACpH,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AACD,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,IAAI,CAAC,eAAe,EAAE,8EAA8E,CAAC,CAAC;IAAC,CAAC;IAClJ,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,SAAS,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC;YAAE,IAAI,CAAC,eAAe,EAAE,6CAA6C,CAAC,CAAC;QAC1G,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC;QAAE,IAAI,CAAC,qBAAqB,EAAE,gFAAgF,CAAC,CAAC;IACvI,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,eAAe,EAAE,4CAA4C,CAAC,CAAC;IACxL,MAAM,QAAQ,GAA0B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7D,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;QAAC,CAAC;QAC9H,IAAI,UAAU,KAAK,MAAM;YAAE,IAAI,CAAC,eAAe,EAAE,6EAA6E,CAAC,CAAC;QAChI,QAAQ,CAAC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,IAAI,GAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,CAAC;QAAE,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IACtG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9B,CAAC;AACD,SAAS,QAAQ,CAAC,KAAY;IAC5B,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,MAAM,GAAG,IAAI,YAAY;QAAE,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;IACvF,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,IAAwB,OAAQ,KAA+B,EAAE,IAAI,CAAC,CAAC,CAAC;AACtG,SAAS,WAAW,CAAC,IAAW,EAAE,SAAkB;IAClD,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5J,IAAI,CAAC,cAAc,EAAE,8IAA8I,CAAC,CAAC;IACvK,CAAC;AACH,CAAC;AACD,SAAS,QAAQ,CAAC,CAAQ,EAAE,CAAQ,IAAa,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAK7F,MAAM,OAAO,GAAG,IAAI,OAAO,EAA2B,CAAC;AACvD,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,MAAc;IACjE,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,IAAI,CAAC,MAAc,EAAE,GAAW,EAAE,MAAiC;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAAC,OAAO,MAAM,CAAC;AAC5F,CAAC;AACD,4EAA4E;AAC5E,MAAM,UAAU,uBAAuB,CAAC,UAA2B,EAAE,MAAc;IACjF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM;QAAE,IAAI,CAAC,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;IACxH,OAAO,UAAU,GAAG,EAAE,CAAC;AACzB,CAAC;AACD,SAAS,qBAAqB,CAAC,MAAc,EAAE,GAAsB;IACnE,IAAI,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,GAAG,CAAC,uBAAuB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtG,IAAI,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC,uBAAuB;QAAE,IAAI,CAAC,qBAAqB,EAAE,gGAAgG,CAAC,CAAC;IACzL,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAC,cAAc,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAAC,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAAC,CAAC;IACnG,MAAM,CAAC;QAAC,IAAI,CAAC,qBAAqB,EAAE,yFAAyF,CAAC,CAAC;IAAC,CAAC;IACjI,IAAI,KAAK,KAAK,MAAM;QAAE,IAAI,CAAC,qBAAqB,EAAE,qIAAqI,CAAC,CAAC;IACzL,OAAO,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,OAAO,eAAe;IACjB,UAAU,CAAS;IACnB,cAAc,CAAS;IACvB,YAAY,CAAS;IAC9B,YAAY,OAAe,EAAE,UAAwB,EAAE;QACrD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,CAAC;QAChE,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,IAAI,CAAC;QACpD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;YAAE,IAAI,CAAC,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;IAC3L,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,MAAe;QAClC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,sBAAsB,EAAE,qKAAqK,CAAC,CAAC;QACtM,CAAC;QACD,IAAI,CAAC;YACH,4EAA4E;YAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YACnC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAClF,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;oBAAE,IAAI,CAAC,cAAc,EAAE,0DAA0D,CAAC,CAAC;YACrI,CAAC;YACD,IAAI,MAAM,EAAE,CAAC;gBACX,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,CAAC;oBAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBAAC,OAAO,GAAG,IAAI,CAAC;gBAAC,CAAC;gBACzE,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;gBAAC,CAAC;gBAC9D,IAAI,OAAO,EAAE,CAAC;oBACZ,oEAAoE;oBACpE,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;oBACtG,IAAI,CAAC;wBAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;oBAAC,CAAC;4BAAS,CAAC;wBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,CAAC;gBAChE,CAAC;YACH,CAAC;YACD,IAAI,MAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;oBAAE,OAAO,SAAS,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YAC7I,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YACjH,IAAI,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC;oBAAE,IAAI,CAAC,cAAc,EAAE,iDAAiD,CAAC,CAAC;gBAAC,OAAO,MAAM,CAAC;YAAC,CAAC;YAC1L,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,IAAI,CAAC,UAAU,EAAE,+FAA+F,CAAC,CAAC;QACpH,CAAC;IACH,CAAC;IACD,GAAG,CAAC,SAAqB,EAAE,QAAgB;QACzC,8EAA8E;QAC9E,+DAA+D;QAC/D,OAAO,iBAAiB,SAAS,CAAC,EAAE,IAAI,QAAQ,EAAE,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,SAAqB;QAC/B,IAAI,IAA4B,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;YACzD,IAAI,MAAa,CAAC;YAClB,IAAI,CAAC;gBAAC,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;oBAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;YACrI,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC3B,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YACjG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;gBAAE,IAAI,CAAC,cAAc,EAAE,4CAA4C,CAAC,CAAC;YAChG,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe;gBAAE,IAAI,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;YAC7G,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,eAAe,GAAG,CAAC,CAAC,CAAC;YACjD,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,SAAS;oBAAE,MAAM;gBAAC,MAAM,IAAI,SAAS,CAAC;YAAC,CAAC;YACnK,IAAI,MAAM,GAAG,eAAe;gBAAE,IAAI,CAAC,eAAe,EAAE,oDAAoD,CAAC,CAAC;YAC1G,IAAI,IAAY,CAAC;YACjB,IAAI,CAAC;gBAAC,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;YAC5F,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,eAAe,EAAE,uEAAuE,CAAC,CAAC;YAAC,CAAC;YAChH,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAAC,OAAO,IAAI,CAAC,UAAU,EAAE,uEAAuE,CAAC,CAAC;QAAC,CAAC;gBAChK,CAAC;YAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;IAClC,CAAC;IACD,KAAK,CAAC,SAAS;QACb,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC3C,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,WAAmB,EAAE,MAAyB,OAAO,CAAC,GAAG;QACrE,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnD,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnI,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,IAAI,CAAC,gBAAgB,EAAE,iIAAiI,CAAC,CAAC;QAC1L,IAAI,CAAC,oBAAoB,EAAE,uFAAuF,CAAC,CAAC;IACtH,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,WAAmB,EAAE,MAAyB,OAAO,CAAC,GAAG;QACpE,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACjH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC1N,CAAC;IACD,KAAK,CAAC,OAAO,CAAI,MAAwD;QACvE,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACzD,IAAI,IAA4B,CAAC;QACjC,IAAI,QAA2B,CAAC;QAChC,IAAI,IAAwB,CAAC;QAC7B,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,EAAE,CAAC;gBACb,IAAI,CAAC;oBAAC,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBAAC,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBAAC,CAAC;gBAC5L,OAAO,KAAK,EAAE,CAAC;oBACb,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ;wBAAE,MAAM,KAAK,CAAC;oBAC5C,IAAI,CAAC;wBAAC,WAAW,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;oBAAC,CAAC;oBAAC,OAAO,CAAC,EAAE,CAAC;wBAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ;4BAAE,SAAS;wBAAC,MAAM,CAAC,CAAC;oBAAC,CAAC;oBAClH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,IAAI,CAAC,cAAc;wBAAE,IAAI,CAAC,cAAc,EAAE,yGAAyG,CAAC,CAAC;oBAC/K,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI;gBAAE,OAAO,MAAM,CAAC;YACzB,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YACxD,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,eAAe;gBAAE,IAAI,CAAC,eAAe,EAAE,yDAAyD,CAAC,CAAC;YACtI,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,gBAAgB,UAAU,EAAE,MAAM,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAC1H,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YACpG,6EAA6E;YAC7E,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAC/D,SAAS,GAAG,IAAI,CAAC;YAAC,IAAI,GAAG,SAAS,CAAC;YACnC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS;gBAAE,IAAI,CAAC,uBAAuB,EAAE,6IAA6I,CAAC,CAAC;YAC5L,IAAI,KAAK,YAAY,eAAe;gBAAE,MAAM,KAAK,CAAC;YAClD,OAAO,IAAI,CAAC,aAAa,EAAE,wHAAwH,CAAC,CAAC;QACvJ,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI;gBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAChD,IAAI,IAAI,EAAE,CAAC;gBACT,IAAI,CAAC;oBAAC,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBAAC,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;wBAAE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,uEAAuE,CAAC,CAAC;gBAC3M,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,CAAC;YACD,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,MAAc,EAAE,OAA2B,EAAE;QAC3E,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpE,MAAM,KAAK,GAAG,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5G,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE;YAC7B,MAAM,IAAI,GAAO,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YAClL,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;YAC9B,IAAI,IAAI,CAAC,aAAa,EAAE,MAAM,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,aAAa,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtE,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,WAAmB;QAC9B,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAkD,QAAQ,CAAC,EAAE;YAC9E,MAAM,gBAAgB,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACjH,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC;YACvH,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;QACrH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,OAAO,CAAuB,QAAQ,CAAC,EAAE;YACnD,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;YACnI,MAAM,IAAI,GAAO,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACxG,OAAO,IAAI,CAAC,aAAa,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;QACxE,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/cli-endpoint.d.ts

@@ -0,0 +1,19 @@
+export declare class EndpointError extends Error {
+    readonly code = "INVALID_ENDPOINT";
+    constructor(message: string);
+}
+/** Endpoint selection is deliberately independent of credential selection. */
+export type ApiUrlSource = "command line" | "OPENPLAN_API_URL" | "saved config" | "package default";
+export interface EndpointOptions {
+    apiUrlOverride?: unknown;
+    env?: NodeJS.ProcessEnv;
+    savedApiUrl?: unknown;
+    defaultApiUrl?: unknown;
+}
+export interface ResolvedEndpoint {
+    apiUrl: string;
+    source: ApiUrlSource;
+}
+export declare function normalizeApiUrl(value: unknown, label?: string): string;
+export declare function resolveConfiguredApiUrl(options?: EndpointOptions): ResolvedEndpoint | null;
+export declare function resolveApiUrl(options?: EndpointOptions): ResolvedEndpoint;

package/dist/cli-endpoint.js

@@ -0,0 +1,56 @@
+export class EndpointError extends Error {
+    code = "INVALID_ENDPOINT";
+    constructor(message) { super(message); this.name = "EndpointError"; }
+}
+export function normalizeApiUrl(value, label = "API URL") {
+    // Never include user input (which may contain userinfo or a token) in diagnostics.
+    const invalid = () => new EndpointError(`${label}: expected an HTTPS origin without credentials, path, query or fragment (HTTP is allowed only for loopback development).`);
+    if (typeof value !== "string" || !value || value !== value.trim() || /[\u0000-\u0020\u007f\\]/u.test(value))
+        throw invalid();
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw invalid();
+    }
+    if (!/^https?:\/\//i.test(value) || url.username || url.password || url.pathname !== "/" || url.search || url.hash || value.includes("?") || value.includes("#"))
+        throw invalid();
+    // The URL parser removes dot segments; reject them rather than accepting an
+    // input that happened to normalize back to the root.
+    const authorityAndPath = value.slice(value.indexOf("://") + 3);
+    const slash = authorityAndPath.indexOf("/");
+    if ((slash < 0 ? authorityAndPath : authorityAndPath.slice(0, slash)).includes("@"))
+        throw invalid();
+    if (slash !== -1 && authorityAndPath.slice(slash) !== "/")
+        throw invalid();
+    if (url.protocol !== "https:" && !(url.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname)))
+        throw invalid();
+    // Numeric/hex shorthand IPv4 forms must not widen the explicit loopback exception.
+    if (url.protocol === "http:") {
+        const authority = slash < 0 ? authorityAndPath : authorityAndPath.slice(0, slash);
+        const host = authority.startsWith("[") ? authority.slice(0, authority.indexOf("]") + 1) : authority.split(":")[0];
+        if (!["localhost", "127.0.0.1", "[::1]"].includes(host.toLowerCase()))
+            throw invalid();
+    }
+    return url.origin;
+}
+export function resolveConfiguredApiUrl(options = {}) {
+    const env = options.env ?? process.env;
+    const candidates = [
+        [options.apiUrlOverride, "command line"], [env.OPENPLAN_API_URL, "OPENPLAN_API_URL"],
+        [options.savedApiUrl, "saved config"], [options.defaultApiUrl, "package default"]
+    ];
+    for (const [value, source] of candidates) {
+        if (value !== undefined && value !== null)
+            return { apiUrl: normalizeApiUrl(value, source), source };
+    }
+    return null;
+}
+export function resolveApiUrl(options = {}) {
+    const result = resolveConfiguredApiUrl(options);
+    if (!result)
+        throw new EndpointError("No Openplan API URL is configured. Run: openplan endpoint set <url>");
+    return result;
+}
+//# sourceMappingURL=cli-endpoint.js.map

package/dist/cli-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-endpoint.js","sourceRoot":"","sources":["../src/cli-endpoint.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC7B,IAAI,GAAG,kBAAkB,CAAC;IACnC,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC;CAC9E;AAYD,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,KAAK,GAAG,SAAS;IAC/D,mFAAmF;IACnF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,IAAI,aAAa,CAAC,GAAG,KAAK,0HAA0H,CAAC,CAAC;IAC5K,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC7H,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,OAAO,EAAE,CAAC;IAAC,CAAC;IACxD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAClL,4EAA4E;IAC5E,qDAAqD;IACrD,MAAM,gBAAgB,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IACrG,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG;QAAE,MAAM,OAAO,EAAE,CAAC;IAC3E,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,OAAO,EAAE,CAAC;IAC5I,mFAAmF;IACnF,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAClF,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,WAAW,EAAE,CAAC;YAAE,MAAM,OAAO,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,UAA2B,EAAE;IACnE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,UAAU,GAA8B;QAC5C,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE,kBAAkB,CAAC;QACpF,CAAC,OAAO,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,iBAAiB,CAAC;KAClF,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QACzC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IACvG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,UAA2B,EAAE;IACzD,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,qEAAqE,CAAC,CAAC;IAC5G,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli-program.d.ts

@@ -0,0 +1,11 @@
+export interface CliPackageMetadata {
+    name: string;
+    version: string;
+    openplan?: {
+        defaultApiUrl?: string;
+    };
+    instructionCommand?: string;
+    localInstructionCommand?: string;
+}
+/** Run the shared CLI with metadata supplied by its registry-specific launcher. */
+export declare function runCli(packageMetadata: CliPackageMetadata): Promise<void>;