@indemn/cli 1.6.0 → 1.7.0

package/dist/core/diff.js

@@ -0,0 +1,57 @@
+/** Line diff by longest common subsequence. Very large inputs fall back to "all removed, all added". */
+export function lineDiff(before, after) {
+    const a = before.split('\n');
+    const b = after.split('\n');
+    if (a.length * b.length > 4_000_000) {
+        return [...a.map((text) => ({ op: '-', text })), ...b.map((text) => ({ op: '+', text }))];
+    }
+    const lcs = Array.from({ length: a.length + 1 }, () => new Array(b.length + 1).fill(0));
+    for (let i = a.length - 1; i >= 0; i--) {
+        for (let j = b.length - 1; j >= 0; j--) {
+            lcs[i][j] = a[i] === b[j] ? lcs[i + 1][j + 1] + 1 : Math.max(lcs[i + 1][j], lcs[i][j + 1]);
+        }
+    }
+    const out = [];
+    let i = 0;
+    let j = 0;
+    while (i < a.length && j < b.length) {
+        if (a[i] === b[j]) {
+            out.push({ op: ' ', text: a[i] });
+            i++;
+            j++;
+        }
+        else if (lcs[i + 1][j] >= lcs[i][j + 1])
+            out.push({ op: '-', text: a[i++] });
+        else
+            out.push({ op: '+', text: b[j++] });
+    }
+    while (i < a.length)
+        out.push({ op: '-', text: a[i++] });
+    while (j < b.length)
+        out.push({ op: '+', text: b[j++] });
+    return out;
+}
+export function diffStats(diff) {
+    return { added: diff.filter((d) => d.op === '+').length, removed: diff.filter((d) => d.op === '-').length };
+}
+/** Changed lines with `context` unchanged lines around them, as unified-style text. */
+export function formatDiff(diff, opts = {}) {
+    const context = opts.context ?? 2;
+    const keep = new Set();
+    diff.forEach((d, i) => {
+        if (d.op !== ' ')
+            for (let k = Math.max(0, i - context); k <= Math.min(diff.length - 1, i + context); k++)
+                keep.add(k);
+    });
+    const lines = [];
+    let last = -1;
+    for (const i of [...keep].sort((x, y) => x - y)) {
+        if (last >= 0 && i > last + 1)
+            lines.push('…');
+        lines.push(`${diff[i].op} ${diff[i].text}`);
+        last = i;
+    }
+    const max = opts.maxLines ?? Infinity;
+    return lines.length > max ? [...lines.slice(0, max), `… ${lines.length - max} more line(s)`].join('\n') : lines.join('\n');
+}
+//# sourceMappingURL=diff.js.map

package/dist/core/diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../src/core/diff.ts"],"names":[],"mappings":"AAKA,wGAAwG;AACxG,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,KAAa;IACpD,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAY,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,GAAG,GAAe,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5G,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7F,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAAC,CAAC,EAAE,CAAC;YAAC,CAAC,EAAE,CAAC;QAAC,CAAC;aAC9D,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;;YACxE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAgB;IACxC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9G,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,UAAU,CAAC,IAAgB,EAAE,OAAgD,EAAE;IAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,EAAE;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChD,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,CAAC;IACX,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC;IACtC,OAAO,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,KAAK,CAAC,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7H,CAAC"}

package/dist/core/org-resolver.d.ts

@@ -0,0 +1,37 @@
+import type { Environment } from '../sdk/types.js';
+/** Where `indemn link` pins a project folder to one org and its agents. */
+export declare const LINK_RELATIVE_PATH: string;
+export interface OrgChoice {
+    id: string;
+    name?: string;
+}
+export interface LinkFile {
+    org_id: string;
+    org_name?: string;
+    environment: Environment;
+    agents: string[];
+    /** Absolute path of the file, for messages. */
+    path: string;
+}
+export type OrgSource = 'flag' | 'env' | 'link' | 'single' | 'asked';
+export interface ResolvedOrg {
+    id: string;
+    source: OrgSource;
+    link: LinkFile | null;
+}
+/** Walk up from `startDir` to the filesystem root looking for `.indemn/project.json`. */
+export declare function findLinkFile(startDir?: string): LinkFile | null;
+/**
+ * Decide which org a command acts on. The saved config never decides.
+ * Order: the --org flag (or an MCP tool's org_id), INDEMN_ORG_ID from a host,
+ * the linked folder, the only org the user belongs to, otherwise ask.
+ */
+export declare function resolveOrg(input: {
+    flag?: string;
+    envOrg?: string;
+    link: LinkFile | null;
+    environment: Environment;
+    memberships: () => Promise<OrgChoice[]>;
+    ask?: (choices: OrgChoice[]) => Promise<string | undefined>;
+}): Promise<ResolvedOrg>;
+//# sourceMappingURL=org-resolver.d.ts.map

package/dist/core/org-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-resolver.d.ts","sourceRoot":"","sources":["../../src/core/org-resolver.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGnD,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,QAAkC,CAAC;AAElE,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;AAErE,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,SAAS,CAAC;IAClB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;CACvB;AAED,yFAAyF;AACzF,wBAAgB,YAAY,CAAC,QAAQ,GAAE,MAAsB,GAAG,QAAQ,GAAG,IAAI,CA0B9E;AAMD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE;IACtC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,WAAW,CAAC;IACzB,WAAW,EAAE,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC;IACxC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7D,GAAG,OAAO,CAAC,WAAW,CAAC,CAqCvB"}

package/dist/core/org-resolver.js

@@ -0,0 +1,73 @@
+import { existsSync, readFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+import { CliError, EXIT, NeedsInputError } from './runtime.js';
+/** Where `indemn link` pins a project folder to one org and its agents. */
+export const LINK_RELATIVE_PATH = join('.indemn', 'project.json');
+/** Walk up from `startDir` to the filesystem root looking for `.indemn/project.json`. */
+export function findLinkFile(startDir = process.cwd()) {
+    let dir = resolve(startDir);
+    for (;;) {
+        const candidate = join(dir, LINK_RELATIVE_PATH);
+        if (existsSync(candidate)) {
+            let raw;
+            try {
+                raw = JSON.parse(readFileSync(candidate, 'utf8'));
+            }
+            catch {
+                throw new CliError(`Cannot read ${candidate}. Fix the file or run \`indemn unlink\` in ${dir}.`);
+            }
+            if (!raw.org_id || (raw.environment !== 'dev' && raw.environment !== 'production')) {
+                throw new CliError(`${candidate} has no org_id or environment. Run \`indemn link\` again in ${dir}.`);
+            }
+            return {
+                org_id: raw.org_id,
+                org_name: raw.org_name,
+                environment: raw.environment,
+                agents: Array.isArray(raw.agents) ? raw.agents.map(String) : [],
+                path: candidate,
+            };
+        }
+        const parent = dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}
+function label(o) {
+    return o.name ? `${o.name}` : o.id;
+}
+/**
+ * Decide which org a command acts on. The saved config never decides.
+ * Order: the --org flag (or an MCP tool's org_id), INDEMN_ORG_ID from a host,
+ * the linked folder, the only org the user belongs to, otherwise ask.
+ */
+export async function resolveOrg(input) {
+    const { link } = input;
+    if (link && link.environment !== input.environment) {
+        throw new CliError(`This folder is linked to ${link.environment} (${link.path}) but you are logged in to ${input.environment}. ` +
+            'Log in to the matching platform or run `indemn unlink`.');
+    }
+    const explicit = input.flag || input.envOrg;
+    if (explicit) {
+        if (link && link.org_id !== explicit) {
+            throw new CliError(`This folder is linked to org ${link.org_name ?? link.org_id} (${link.path}); ` +
+                `refusing to act on ${explicit}. Remove --org, or run \`indemn unlink\` first.`, EXIT.NEEDS_INPUT);
+        }
+        return { id: explicit, source: input.flag ? 'flag' : 'env', link };
+    }
+    if (link)
+        return { id: link.org_id, source: 'link', link };
+    const orgs = await input.memberships();
+    if (orgs.length === 0) {
+        throw new CliError('You are not a member of any organization on this platform. Ask an admin to add you.');
+    }
+    if (orgs.length === 1)
+        return { id: orgs[0].id, source: 'single', link: null };
+    if (input.ask) {
+        const chosen = await input.ask(orgs);
+        if (chosen && orgs.some((o) => o.id === chosen))
+            return { id: chosen, source: 'asked', link: null };
+    }
+    throw new NeedsInputError(`You belong to ${orgs.length} organizations. Choose one with --org <id>, or pin this folder with \`indemn link --org <id>\`.`, orgs.map((o) => ({ id: o.id, label: label(o) })));
+}
+//# sourceMappingURL=org-resolver.js.map

package/dist/core/org-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"org-resolver.js","sourceRoot":"","sources":["../../src/core/org-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEnD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;AAwBlE,yFAAyF;AACzF,MAAM,UAAU,YAAY,CAAC,WAAmB,OAAO,CAAC,GAAG,EAAE;IAC3D,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAChD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,GAAsB,CAAC;YAC3B,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;YACpD,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,eAAe,SAAS,8CAA8C,GAAG,GAAG,CAAC,CAAC;YACnG,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,WAAW,KAAK,KAAK,IAAI,GAAG,CAAC,WAAW,KAAK,YAAY,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,+DAA+D,GAAG,GAAG,CAAC,CAAC;YACxG,CAAC;YACD,OAAO;gBACL,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC/D,IAAI,EAAE,SAAS;aAChB,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,CAAY;IACzB,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAOhC;IACC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACvB,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,IAAI,QAAQ,CAChB,4BAA4B,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,IAAI,8BAA8B,KAAK,CAAC,WAAW,IAAI;YAC3G,yDAAyD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,QAAQ,CAChB,gCAAgC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK;gBAC7E,sBAAsB,QAAQ,iDAAiD,EACjF,IAAI,CAAC,WAAW,CACjB,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAE3D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,QAAQ,CAAC,qFAAqF,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAE/E,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,MAAM,IAAI,eAAe,CACvB,iBAAiB,IAAI,CAAC,MAAM,iGAAiG,EAC7H,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CACjD,CAAC;AACJ,CAAC"}

package/dist/core/runtime.d.ts

@@ -0,0 +1,36 @@
+/** Process exit codes. Scripts and agents branch on these. */
+export declare const EXIT: {
+    readonly OK: 0;
+    readonly ERROR: 1;
+    /** A choice is needed (for example which org) or the command was used wrongly. */
+    readonly NEEDS_INPUT: 2;
+    /** Not logged in, or the session expired and could not be renewed. */
+    readonly AUTH: 3;
+};
+export declare class CliError extends Error {
+    readonly exitCode: number;
+    readonly details?: unknown | undefined;
+    constructor(message: string, exitCode?: number, details?: unknown | undefined);
+}
+export interface Choice {
+    id: string;
+    label: string;
+}
+export declare class NeedsInputError extends CliError {
+    readonly choices: Choice[];
+    constructor(message: string, choices?: Choice[]);
+}
+export declare class SessionExpiredError extends CliError {
+    constructor(message?: string);
+}
+/**
+ * True when nobody can answer a prompt: an AI agent (Claude Code sets
+ * CLAUDECODE=1), CI, an explicit opt-out, or stdin that is not a terminal.
+ */
+export declare function isNonInteractive(env?: NodeJS.ProcessEnv, stdinIsTTY?: boolean): boolean;
+export declare function isDebug(env?: NodeJS.ProcessEnv): boolean;
+/** The package version, read from package.json (src/core and dist/core are both two levels down). */
+export declare function cliVersion(): string;
+/** How long a question to a person (through an MCP host) may stay open. The MCP default of 60 s is too short to read a diff. */
+export declare const PERSON_TIMEOUT_MS: number;
+//# sourceMappingURL=runtime.d.ts.map

package/dist/core/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../../src/core/runtime.ts"],"names":[],"mappings":"AAEA,8DAA8D;AAC9D,eAAO,MAAM,IAAI;;;IAGf,kFAAkF;;IAElF,sEAAsE;;CAE9D,CAAC;AAEX,qBAAa,QAAS,SAAQ,KAAK;aAGf,QAAQ,EAAE,MAAM;aAChB,OAAO,CAAC,EAAE,OAAO;gBAFjC,OAAO,EAAE,MAAM,EACC,QAAQ,GAAE,MAAmB,EAC7B,OAAO,CAAC,EAAE,OAAO,YAAA;CAKpC;AAED,MAAM,WAAW,MAAM;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,eAAgB,SAAQ,QAAQ;aACE,OAAO,EAAE,MAAM,EAAE;gBAAlD,OAAO,EAAE,MAAM,EAAkB,OAAO,GAAE,MAAM,EAAO;CAIpE;AAED,qBAAa,mBAAoB,SAAQ,QAAQ;gBACnC,OAAO,SAAqD;CAIzE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,UAAU,GAAE,OAAsC,GACjD,OAAO,CAKT;AAED,wBAAgB,OAAO,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAErE;AAID,qGAAqG;AACrG,wBAAgB,UAAU,IAAI,MAAM,CAMnC;AAED,gIAAgI;AAChI,eAAO,MAAM,iBAAiB,QAAc,CAAC"}

package/dist/core/runtime.js

@@ -0,0 +1,62 @@
+import { createRequire } from 'node:module';
+/** Process exit codes. Scripts and agents branch on these. */
+export const EXIT = {
+    OK: 0,
+    ERROR: 1,
+    /** A choice is needed (for example which org) or the command was used wrongly. */
+    NEEDS_INPUT: 2,
+    /** Not logged in, or the session expired and could not be renewed. */
+    AUTH: 3,
+};
+export class CliError extends Error {
+    exitCode;
+    details;
+    constructor(message, exitCode = EXIT.ERROR, details) {
+        super(message);
+        this.exitCode = exitCode;
+        this.details = details;
+        this.name = 'CliError';
+    }
+}
+export class NeedsInputError extends CliError {
+    choices;
+    constructor(message, choices = []) {
+        super(message, EXIT.NEEDS_INPUT, { choices });
+        this.choices = choices;
+        this.name = 'NeedsInputError';
+    }
+}
+export class SessionExpiredError extends CliError {
+    constructor(message = 'Session expired. Run `indemn login`, then retry.') {
+        super(message, EXIT.AUTH);
+        this.name = 'SessionExpiredError';
+    }
+}
+/**
+ * True when nobody can answer a prompt: an AI agent (Claude Code sets
+ * CLAUDECODE=1), CI, an explicit opt-out, or stdin that is not a terminal.
+ */
+export function isNonInteractive(env = process.env, stdinIsTTY = Boolean(process.stdin.isTTY)) {
+    if (env.CLAUDECODE === '1')
+        return true;
+    if (env.CI && env.CI !== 'false' && env.CI !== '0')
+        return true;
+    if (env.INDEMN_NON_INTERACTIVE === '1')
+        return true;
+    return !stdinIsTTY;
+}
+export function isDebug(env = process.env) {
+    return env.INDEMN_DEBUG === '1';
+}
+let cachedVersion;
+/** The package version, read from package.json (src/core and dist/core are both two levels down). */
+export function cliVersion() {
+    if (!cachedVersion) {
+        const require = createRequire(import.meta.url);
+        cachedVersion = require('../../package.json').version;
+    }
+    return cachedVersion;
+}
+/** How long a question to a person (through an MCP host) may stay open. The MCP default of 60 s is too short to read a diff. */
+export const PERSON_TIMEOUT_MS = 10 * 60_000;
+//# sourceMappingURL=runtime.js.map

package/dist/core/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/core/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,KAAK,EAAE,CAAC;IACR,kFAAkF;IAClF,WAAW,EAAE,CAAC;IACd,sEAAsE;IACtE,IAAI,EAAE,CAAC;CACC,CAAC;AAEX,MAAM,OAAO,QAAS,SAAQ,KAAK;IAGf;IACA;IAHlB,YACE,OAAe,EACC,WAAmB,IAAI,CAAC,KAAK,EAC7B,OAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,aAAQ,GAAR,QAAQ,CAAqB;QAC7B,YAAO,GAAP,OAAO,CAAU;QAGjC,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAOD,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IACE;IAA7C,YAAY,OAAe,EAAkB,UAAoB,EAAE;QACjE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QADH,YAAO,GAAP,OAAO,CAAe;QAEjE,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,QAAQ;IAC/C,YAAY,OAAO,GAAG,kDAAkD;QACtE,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAyB,OAAO,CAAC,GAAG,EACpC,aAAsB,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAElD,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACxC,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,OAAO,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,GAAG,CAAC,sBAAsB,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpD,OAAO,CAAC,UAAU,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC1D,OAAO,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC;AAClC,CAAC;AAED,IAAI,aAAiC,CAAC;AAEtC,qGAAqG;AACrG,MAAM,UAAU,UAAU;IACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,aAAa,GAAI,OAAO,CAAC,oBAAoB,CAAyB,CAAC,OAAO,CAAC;IACjF,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,gIAAgI;AAChI,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,MAAM,CAAC"}

package/dist/core/scope.d.ts

@@ -0,0 +1,33 @@
+import type { Environment } from '../sdk/types.js';
+import type { OrgChoice, OrgSource } from './org-resolver.js';
+export declare function runWithOrg<T>(orgId: string | undefined, fn: () => Promise<T>): Promise<T>;
+export declare function scopedOrg(): string | undefined;
+export declare function setOrgFlag(flag?: string): void;
+export declare function getOrgFlag(): string | undefined;
+/** How to ask the person something: a terminal prompt, an MCP elicitation, or nothing. */
+export interface FormField {
+    key: string;
+    title: string;
+    description?: string;
+    required?: boolean;
+}
+export interface Askers {
+    chooseOrg?: (choices: OrgChoice[]) => Promise<string | undefined>;
+    mfaCode?: () => Promise<string>;
+    /** Ask for several text fields at once; undefined when declined or nobody can answer. */
+    form?: (message: string, fields: FormField[]) => Promise<Record<string, string> | undefined>;
+}
+export declare function setAskers(a: Askers): void;
+export declare function getAskers(): Askers;
+export interface ResolvedOrgEvent {
+    id: string;
+    name?: string;
+    source: OrgSource;
+    environment: Environment;
+}
+type Listener = (org: ResolvedOrgEvent) => void;
+/** Called once per client when its org is decided; the CLI prints its banner here. */
+export declare function onOrgResolved(fn: Listener): void;
+export declare function emitOrgResolved(org: ResolvedOrgEvent): void;
+export {};
+//# sourceMappingURL=scope.d.ts.map

package/dist/core/scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.d.ts","sourceRoot":"","sources":["../../src/core/scope.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACnD,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAQ9D,wBAAgB,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEzF;AAED,wBAAgB,SAAS,IAAI,MAAM,GAAG,SAAS,CAE9C;AAID,wBAAgB,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAE9C;AACD,wBAAgB,UAAU,IAAI,MAAM,GAAG,SAAS,CAE/C;AAED,0FAA0F;AAC1F,MAAM,WAAW,SAAS;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,MAAM;IACrB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClE,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,yFAAyF;IACzF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC;CAC9F;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,CAEzC;AACD,wBAAgB,SAAS,IAAI,MAAM,CAElC;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,SAAS,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;CAC1B;AACD,KAAK,QAAQ,GAAG,CAAC,GAAG,EAAE,gBAAgB,KAAK,IAAI,CAAC;AAEhD,sFAAsF;AACtF,wBAAgB,aAAa,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAEhD;AACD,wBAAgB,eAAe,CAAC,GAAG,EAAE,gBAAgB,GAAG,IAAI,CAE3D"}

package/dist/core/scope.js

@@ -0,0 +1,37 @@
+import { AsyncLocalStorage } from 'node:async_hooks';
+/**
+ * The org one MCP tool call acts on. Each call runs inside its own scope, so
+ * two concurrent calls for different orgs never see each other's org.
+ */
+const orgScope = new AsyncLocalStorage();
+export function runWithOrg(orgId, fn) {
+    return orgId ? orgScope.run({ orgId }, fn) : fn();
+}
+export function scopedOrg() {
+    return orgScope.getStore()?.orgId;
+}
+/** The terminal `--org` flag, process-wide for one CLI command. */
+let orgFlag;
+export function setOrgFlag(flag) {
+    orgFlag = flag || undefined;
+}
+export function getOrgFlag() {
+    return orgFlag;
+}
+let askers = {};
+export function setAskers(a) {
+    askers = a;
+}
+export function getAskers() {
+    return askers;
+}
+const listeners = [];
+/** Called once per client when its org is decided; the CLI prints its banner here. */
+export function onOrgResolved(fn) {
+    listeners.push(fn);
+}
+export function emitOrgResolved(org) {
+    for (const fn of listeners)
+        fn(org);
+}
+//# sourceMappingURL=scope.js.map

package/dist/core/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../src/core/scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAIrD;;;GAGG;AACH,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAqB,CAAC;AAE5D,MAAM,UAAU,UAAU,CAAI,KAAyB,EAAE,EAAoB;IAC3E,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,OAAO,QAAQ,CAAC,QAAQ,EAAE,EAAE,KAAK,CAAC;AACpC,CAAC;AAED,mEAAmE;AACnE,IAAI,OAA2B,CAAC;AAChC,MAAM,UAAU,UAAU,CAAC,IAAa;IACtC,OAAO,GAAG,IAAI,IAAI,SAAS,CAAC;AAC9B,CAAC;AACD,MAAM,UAAU,UAAU;IACxB,OAAO,OAAO,CAAC;AACjB,CAAC;AAgBD,IAAI,MAAM,GAAW,EAAE,CAAC;AACxB,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,MAAM,GAAG,CAAC,CAAC;AACb,CAAC;AACD,MAAM,UAAU,SAAS;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AASD,MAAM,SAAS,GAAe,EAAE,CAAC;AACjC,sFAAsF;AACtF,MAAM,UAAU,aAAa,CAAC,EAAY;IACxC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,GAAqB;IACnD,KAAK,MAAM,EAAE,IAAI,SAAS;QAAE,EAAE,CAAC,GAAG,CAAC,CAAC;AACtC,CAAC"}

package/dist/mcp/registry.d.ts

@@ -0,0 +1,67 @@
+import { z } from 'zod/v3';
+import type { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import { type CallToolResult } from '@modelcontextprotocol/sdk/types.js';
+import type { Environment } from '../sdk/types.js';
+import { type ToolMeta } from './tool-meta.js';
+/** Where a tool result came from. Every successful result carries it. */
+export interface ResultContext {
+    org_id?: string;
+    org_name?: string;
+    environment: Environment;
+    /** The person approved this call in the host's approval form (the model cannot see that form). */
+    approved_by_person?: boolean;
+}
+type Shape = Record<string, z.ZodTypeAny>;
+type Args = Record<string, unknown>;
+/** `confirmedByPerson` is true when the host asked the person and they agreed. */
+type Handler = (args: any, meta: {
+    confirmedByPerson: boolean;
+}) => Promise<CallToolResult>;
+/**
+ * Handlers return `success(data)`, a JSON text block. Rewrap it as
+ * `{ context, data }` so the caller always sees which org and platform
+ * answered. Error results and non-JSON text pass through untouched.
+ */
+/** About 20k tokens: Claude Code refuses tool results over 25k tokens. */
+export declare const MAX_RESULT_CHARS = 80000;
+/**
+ * Ask before a destructive call. With elicitation the host asks the person
+ * directly and a `confirm` argument is ignored, so an agent cannot confirm
+ * for itself. Without elicitation `confirm: true` proceeds; anything else
+ * returns a dry run and the call is not made.
+ */
+/** Approval forms show a few short lines: a long prompt diff would push the Proceed box off the screen. */
+export declare function fitForm(text: string, maxLines?: number, maxLine?: number): string;
+export declare function guardDestructive(server: McpServer, toolName: string, args: Args, preview: string, formText?: string): Promise<{
+    proceed: true;
+    byPerson: boolean;
+} | {
+    proceed: false;
+    result: CallToolResult;
+}>;
+export declare function createRegistry(server: McpServer, opts: {
+    context: () => Promise<ResultContext> | ResultContext;
+    meta?: Record<string, ToolMeta>;
+    /** Decide the org for one call from its org_id argument (else link, only org, or ask). */
+    resolveOrg?: (explicit?: string) => Promise<{
+        id: string;
+        name?: string;
+    }>;
+    /**
+     * Names for the ids of a call (agent, knowledge base, org…), shown in approvals instead of the ids,
+     * and the ids that name nothing (no card is shown for those).
+     */
+    displayNames?: (args: Args, orgId?: string) => Promise<{
+        names: Record<string, string>;
+        missing?: string[];
+    }>;
+}): {
+    tool(name: string, description: string, shape: Shape, handler: Handler, extra?: {
+        preview?: (args: Args) => Promise<string>;
+        guardWhen?: (args: Args) => Promise<boolean>;
+    }): void;
+    names(): string[];
+};
+export type Registry = ReturnType<typeof createRegistry>;
+export {};
+//# sourceMappingURL=registry.d.ts.map

package/dist/mcp/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/mcp/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACzE,OAAO,EAAa,KAAK,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1D,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,WAAW,CAAC;IACzB,kGAAkG;IAClG,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,KAAK,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;AAC1C,KAAK,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACpC,kFAAkF;AAClF,KAAK,OAAO,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;IAAE,iBAAiB,EAAE,OAAO,CAAA;CAAE,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;AAM5F;;;;GAIG;AACH,0EAA0E;AAC1E,eAAO,MAAM,gBAAgB,QAAS,CAAC;AA8CvC;;;;;GAKG;AACH,2GAA2G;AAC3G,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,SAAI,EAAE,OAAO,SAAM,GAAG,MAAM,CAMzE;AAED,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,EACf,QAAQ,GAAE,MAAgB,GACzB,OAAO,CAAC;IAAE,OAAO,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,CAAA;CAAE,CAAC,CAgC5F;AAUD,wBAAgB,cAAc,CAC5B,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,GAAG,aAAa,CAAC;IACtD,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,0FAA0F;IAC1F,UAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3E;;;OAGG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAC/G;eAMY,MAAM,eAAe,MAAM,SAAS,KAAK,WAAW,OAAO,UAAS;QAAE,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,GAAQ,IAAI;aAsE7K,MAAM,EAAE;EAIpB;AAED,MAAM,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC"}