@indigoai-us/hq-cli 5.5.0 → 5.5.2-sentry-rc.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (139) hide show
  1. package/dist/bin/hq-auth-refresh.js +22 -12
  2. package/dist/bin/hq-auth-refresh.js.map +1 -1
  3. package/dist/commands/_patterns.d.ts +3 -0
  4. package/dist/commands/_patterns.d.ts.map +1 -0
  5. package/dist/commands/_patterns.js +3 -0
  6. package/dist/commands/_patterns.js.map +1 -0
  7. package/dist/commands/add.d.ts.map +1 -1
  8. package/dist/commands/add.js +2 -1
  9. package/dist/commands/add.js.map +1 -1
  10. package/dist/commands/auth.d.ts +0 -3
  11. package/dist/commands/auth.d.ts.map +1 -1
  12. package/dist/commands/auth.js +0 -3
  13. package/dist/commands/auth.js.map +1 -1
  14. package/dist/commands/cloud.d.ts +12 -2
  15. package/dist/commands/cloud.d.ts.map +1 -1
  16. package/dist/commands/cloud.js +112 -80
  17. package/dist/commands/cloud.js.map +1 -1
  18. package/dist/commands/groups.d.ts +3 -0
  19. package/dist/commands/groups.d.ts.map +1 -0
  20. package/dist/commands/groups.js +341 -0
  21. package/dist/commands/groups.js.map +1 -0
  22. package/dist/commands/list.d.ts.map +1 -1
  23. package/dist/commands/list.js +18 -1
  24. package/dist/commands/list.js.map +1 -1
  25. package/dist/commands/login.d.ts +1 -1
  26. package/dist/commands/login.d.ts.map +1 -1
  27. package/dist/commands/login.js +28 -9
  28. package/dist/commands/login.js.map +1 -1
  29. package/dist/commands/logout.d.ts +1 -1
  30. package/dist/commands/logout.d.ts.map +1 -1
  31. package/dist/commands/logout.js +8 -3
  32. package/dist/commands/logout.js.map +1 -1
  33. package/dist/commands/onboard.d.ts +23 -0
  34. package/dist/commands/onboard.d.ts.map +1 -0
  35. package/dist/commands/onboard.js +142 -0
  36. package/dist/commands/onboard.js.map +1 -0
  37. package/dist/commands/pack-install.d.ts +44 -0
  38. package/dist/commands/pack-install.d.ts.map +1 -0
  39. package/dist/commands/pack-install.js +513 -0
  40. package/dist/commands/pack-install.js.map +1 -0
  41. package/dist/commands/pkg-install.d.ts.map +1 -1
  42. package/dist/commands/pkg-install.js +20 -8
  43. package/dist/commands/pkg-install.js.map +1 -1
  44. package/dist/commands/pkg-list.js +4 -4
  45. package/dist/commands/pkg-list.js.map +1 -1
  46. package/dist/commands/pkg-update.js +3 -3
  47. package/dist/commands/pkg-update.js.map +1 -1
  48. package/dist/commands/secrets.d.ts +12 -0
  49. package/dist/commands/secrets.d.ts.map +1 -0
  50. package/dist/commands/secrets.js +756 -0
  51. package/dist/commands/secrets.js.map +1 -0
  52. package/dist/commands/sync.d.ts.map +1 -1
  53. package/dist/commands/sync.js +10 -2
  54. package/dist/commands/sync.js.map +1 -1
  55. package/dist/commands/team-sync.d.ts.map +1 -1
  56. package/dist/commands/team-sync.js +6 -6
  57. package/dist/commands/team-sync.js.map +1 -1
  58. package/dist/commands/whoami.d.ts +1 -1
  59. package/dist/commands/whoami.d.ts.map +1 -1
  60. package/dist/commands/whoami.js +23 -7
  61. package/dist/commands/whoami.js.map +1 -1
  62. package/dist/index.js +24 -2
  63. package/dist/index.js.map +1 -1
  64. package/dist/sentry-before-send.d.ts +3 -0
  65. package/dist/sentry-before-send.d.ts.map +1 -0
  66. package/dist/sentry-before-send.js +216 -0
  67. package/dist/sentry-before-send.js.map +1 -0
  68. package/dist/sentry-dsn.generated.d.ts +2 -0
  69. package/dist/sentry-dsn.generated.d.ts.map +1 -0
  70. package/dist/sentry-dsn.generated.js.map +1 -0
  71. package/dist/sentry.d.ts +4 -0
  72. package/dist/sentry.d.ts.map +1 -0
  73. package/dist/sentry.js +19 -0
  74. package/dist/sentry.js.map +1 -0
  75. package/dist/strategies/link.d.ts +2 -2
  76. package/dist/strategies/link.d.ts.map +1 -1
  77. package/dist/strategies/link.js.map +1 -1
  78. package/dist/strategies/merge.d.ts +2 -2
  79. package/dist/strategies/merge.d.ts.map +1 -1
  80. package/dist/strategies/merge.js.map +1 -1
  81. package/dist/types.d.ts +37 -3
  82. package/dist/types.d.ts.map +1 -1
  83. package/dist/types.js +6 -0
  84. package/dist/types.js.map +1 -1
  85. package/dist/utils/cognito-session.d.ts +18 -7
  86. package/dist/utils/cognito-session.d.ts.map +1 -1
  87. package/dist/utils/cognito-session.js +35 -8
  88. package/dist/utils/cognito-session.js.map +1 -1
  89. package/dist/utils/manifest.d.ts +13 -0
  90. package/dist/utils/manifest.d.ts.map +1 -1
  91. package/dist/utils/manifest.js +24 -1
  92. package/dist/utils/manifest.js.map +1 -1
  93. package/dist/utils/secrets-cache.d.ts +7 -0
  94. package/dist/utils/secrets-cache.d.ts.map +1 -0
  95. package/dist/utils/secrets-cache.js +135 -0
  96. package/dist/utils/secrets-cache.js.map +1 -0
  97. package/package.json +17 -6
  98. package/scripts/generate-dsn.mjs +26 -0
  99. package/src/bin/hq-auth-refresh.ts +23 -16
  100. package/src/commands/_patterns.ts +2 -0
  101. package/src/commands/add.ts +7 -6
  102. package/src/commands/auth.ts +0 -3
  103. package/src/commands/cloud.ts +214 -101
  104. package/src/commands/groups.ts +357 -0
  105. package/src/commands/list.ts +20 -1
  106. package/src/commands/login.ts +28 -9
  107. package/src/commands/logout.ts +8 -3
  108. package/src/commands/onboard.ts +193 -0
  109. package/src/commands/pack-install.ts +667 -0
  110. package/src/commands/pkg-install.ts +34 -16
  111. package/src/commands/pkg-list.ts +4 -4
  112. package/src/commands/pkg-update.ts +3 -3
  113. package/src/commands/secrets.ts +950 -0
  114. package/src/commands/sync.ts +20 -4
  115. package/src/commands/team-sync.ts +7 -8
  116. package/src/commands/whoami.ts +22 -7
  117. package/src/index.ts +26 -2
  118. package/src/sentry-before-send.test.ts +359 -0
  119. package/src/sentry-before-send.ts +221 -0
  120. package/src/sentry.test.ts +24 -0
  121. package/src/sentry.ts +19 -0
  122. package/src/strategies/link.ts +2 -2
  123. package/src/strategies/merge.ts +2 -2
  124. package/src/types.ts +54 -4
  125. package/src/utils/cognito-session.ts +46 -14
  126. package/src/utils/manifest.test.ts +148 -0
  127. package/src/utils/manifest.ts +22 -1
  128. package/src/utils/secrets-cache.ts +130 -0
  129. package/tsconfig.json +2 -1
  130. package/dist/utils/auth.d.ts +0 -27
  131. package/dist/utils/auth.d.ts.map +0 -1
  132. package/dist/utils/auth.js +0 -155
  133. package/dist/utils/auth.js.map +0 -1
  134. package/dist/utils/token-store.d.ts +0 -28
  135. package/dist/utils/token-store.d.ts.map +0 -1
  136. package/dist/utils/token-store.js +0 -68
  137. package/dist/utils/token-store.js.map +0 -1
  138. package/src/utils/auth.ts +0 -193
  139. package/src/utils/token-store.ts +0 -83
@@ -0,0 +1,341 @@
1
+ import chalk from "chalk";
2
+ import { ensureCognitoToken } from "../utils/cognito-session.js";
3
+ import { vaultApiFetch, getCompanyUid } from "./secrets.js";
4
+ import { GROUP_ID_PATTERN } from "./_patterns.js";
5
+ const EMAIL_PATTERN = /^[^\s]+@[^\s]+$/;
6
+ const PERSON_UID_PATTERN = /^prs_[A-Za-z0-9_-]+$/;
7
+ function detectPrincipalType(principal) {
8
+ if (EMAIL_PATTERN.test(principal)) {
9
+ // Server normalizes email again; we normalize here so local validation /
10
+ // cache keys agree with the server-side canonicalization.
11
+ return { granteeType: "email", granteeId: principal.trim().toLowerCase() };
12
+ }
13
+ if (PERSON_UID_PATTERN.test(principal)) {
14
+ return { granteeType: "person", granteeId: principal };
15
+ }
16
+ return null;
17
+ }
18
+ function shortDate(iso) {
19
+ return iso.slice(0, 10);
20
+ }
21
+ export function registerGroupsCommand(program) {
22
+ const groups = program
23
+ .command("groups")
24
+ .description("Manage groups in HQ vault")
25
+ .option("--company <slug>", "Company slug (resolves to companyUid)");
26
+ groups
27
+ .command("create <groupId>")
28
+ .description("Create a new group")
29
+ .requiredOption("--name <name>", "Human-readable group name")
30
+ .option("--description <desc>", "Optional description")
31
+ .action(async (groupId, opts) => {
32
+ try {
33
+ if (!GROUP_ID_PATTERN.test(groupId)) {
34
+ console.error(chalk.red(`Invalid group id '${groupId}': must match grp_<alphanumeric>`));
35
+ process.exit(1);
36
+ }
37
+ const token = await ensureCognitoToken();
38
+ const companySlug = groups.opts().company;
39
+ const companyUid = await getCompanyUid(token, companySlug);
40
+ const body = { groupId, name: opts.name };
41
+ if (opts.description)
42
+ body.description = opts.description;
43
+ const res = await vaultApiFetch({
44
+ token,
45
+ path: `/secrets/${encodeURIComponent(companyUid)}/groups`,
46
+ method: "POST",
47
+ body,
48
+ });
49
+ if (!res.ok) {
50
+ const err = await res.json().catch(() => ({}));
51
+ if (res.status === 401) {
52
+ console.error(chalk.red("Not authenticated — please run `hq login`"));
53
+ }
54
+ else if (res.status === 403) {
55
+ console.error(chalk.red("Not authorized — owner or admin role required"));
56
+ }
57
+ else if (res.status === 409) {
58
+ console.error(chalk.red(`Group already exists: ${groupId}`));
59
+ }
60
+ else if (res.status >= 500) {
61
+ console.error(chalk.red(`Server error: ${err.error ?? res.statusText}`));
62
+ }
63
+ else {
64
+ console.error(chalk.red(err.message ?? err.error ?? "Invalid request"));
65
+ }
66
+ process.exit(1);
67
+ }
68
+ console.log(chalk.green(`Group '${groupId}' (${opts.name}) created`));
69
+ }
70
+ catch (err) {
71
+ console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
72
+ process.exit(1);
73
+ }
74
+ });
75
+ groups
76
+ .command("delete <groupId>")
77
+ .description("Delete a group")
78
+ .action(async (groupId) => {
79
+ try {
80
+ if (!GROUP_ID_PATTERN.test(groupId)) {
81
+ console.error(chalk.red(`Invalid group id '${groupId}': must match grp_<alphanumeric>`));
82
+ process.exit(1);
83
+ }
84
+ const token = await ensureCognitoToken();
85
+ const companySlug = groups.opts().company;
86
+ const companyUid = await getCompanyUid(token, companySlug);
87
+ const res = await vaultApiFetch({
88
+ token,
89
+ path: `/secrets/${encodeURIComponent(companyUid)}/groups`,
90
+ method: "DELETE",
91
+ query: { groupId },
92
+ });
93
+ if (!res.ok) {
94
+ const err = await res.json().catch(() => ({}));
95
+ if (res.status === 401) {
96
+ console.error(chalk.red("Not authenticated — please run `hq login`"));
97
+ }
98
+ else if (res.status === 403) {
99
+ console.error(chalk.red("Not authorized — owner or admin role required"));
100
+ }
101
+ else if (res.status === 404) {
102
+ console.error(chalk.red(`Group not found: ${groupId}`));
103
+ }
104
+ else if (res.status >= 500) {
105
+ console.error(chalk.red(`Server error: ${err.error ?? res.statusText}`));
106
+ }
107
+ else {
108
+ console.error(chalk.red(err.message ?? err.error ?? "Invalid request"));
109
+ }
110
+ process.exit(1);
111
+ }
112
+ console.log(chalk.green(`Group '${groupId}' deleted`));
113
+ }
114
+ catch (err) {
115
+ console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
116
+ process.exit(1);
117
+ }
118
+ });
119
+ groups
120
+ .command("add <groupId> <principal>")
121
+ .description("Add a person to a group (principal: email or personUid)")
122
+ .action(async (groupId, principal) => {
123
+ try {
124
+ if (!GROUP_ID_PATTERN.test(groupId)) {
125
+ console.error(chalk.red(`Invalid group id '${groupId}': must match grp_<alphanumeric>`));
126
+ process.exit(1);
127
+ }
128
+ const detected = detectPrincipalType(principal);
129
+ if (!detected) {
130
+ console.error(chalk.red(`Invalid principal '${principal}': must be an email address or a personUid matching prs_<alphanumeric>`));
131
+ process.exit(1);
132
+ }
133
+ const token = await ensureCognitoToken();
134
+ const companySlug = groups.opts().company;
135
+ const companyUid = await getCompanyUid(token, companySlug);
136
+ const res = await vaultApiFetch({
137
+ token,
138
+ path: `/secrets/${encodeURIComponent(companyUid)}/groups/members`,
139
+ method: "POST",
140
+ body: { groupId, granteeType: detected.granteeType, granteeId: detected.granteeId },
141
+ });
142
+ if (!res.ok) {
143
+ const err = await res.json().catch(() => ({}));
144
+ if (res.status === 401) {
145
+ console.error(chalk.red("Not authenticated — please run `hq login`"));
146
+ }
147
+ else if (res.status === 403) {
148
+ console.error(chalk.red("Not authorized — owner/admin role or group creator required"));
149
+ }
150
+ else if (res.status === 404) {
151
+ // Server provides a helpful message (email not found vs group not found)
152
+ console.error(chalk.red(err.error ?? `Not found`));
153
+ }
154
+ else if (res.status >= 500) {
155
+ console.error(chalk.red(`Server error: ${err.error ?? res.statusText}`));
156
+ }
157
+ else {
158
+ console.error(chalk.red(err.message ?? err.error ?? "Invalid request"));
159
+ }
160
+ process.exit(1);
161
+ }
162
+ console.log(chalk.green(`Added ${principal} to group '${groupId}'`));
163
+ }
164
+ catch (err) {
165
+ console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
166
+ process.exit(1);
167
+ }
168
+ });
169
+ groups
170
+ .command("remove <groupId> <principal>")
171
+ .description("Remove a person from a group (principal: email or personUid)")
172
+ .action(async (groupId, principal) => {
173
+ try {
174
+ if (!GROUP_ID_PATTERN.test(groupId)) {
175
+ console.error(chalk.red(`Invalid group id '${groupId}': must match grp_<alphanumeric>`));
176
+ process.exit(1);
177
+ }
178
+ const detected = detectPrincipalType(principal);
179
+ if (!detected) {
180
+ console.error(chalk.red(`Invalid principal '${principal}': must be an email address or a personUid matching prs_<alphanumeric>`));
181
+ process.exit(1);
182
+ }
183
+ const token = await ensureCognitoToken();
184
+ const companySlug = groups.opts().company;
185
+ const companyUid = await getCompanyUid(token, companySlug);
186
+ const res = await vaultApiFetch({
187
+ token,
188
+ path: `/secrets/${encodeURIComponent(companyUid)}/groups/members`,
189
+ method: "DELETE",
190
+ query: {
191
+ groupId,
192
+ granteeType: detected.granteeType,
193
+ granteeId: detected.granteeId,
194
+ },
195
+ });
196
+ if (!res.ok) {
197
+ const err = await res.json().catch(() => ({}));
198
+ if (res.status === 401) {
199
+ console.error(chalk.red("Not authenticated — please run `hq login`"));
200
+ }
201
+ else if (res.status === 403) {
202
+ console.error(chalk.red("Not authorized — owner/admin role or group creator required"));
203
+ }
204
+ else if (res.status === 404) {
205
+ console.error(chalk.red(err.error ?? `Not found`));
206
+ }
207
+ else if (res.status >= 500) {
208
+ console.error(chalk.red(`Server error: ${err.error ?? res.statusText}`));
209
+ }
210
+ else {
211
+ console.error(chalk.red(err.message ?? err.error ?? "Invalid request"));
212
+ }
213
+ process.exit(1);
214
+ }
215
+ console.log(chalk.green(`Removed ${principal} from group '${groupId}'`));
216
+ }
217
+ catch (err) {
218
+ console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
219
+ process.exit(1);
220
+ }
221
+ });
222
+ groups
223
+ .command("list")
224
+ .description("List all groups in the company")
225
+ .action(async () => {
226
+ try {
227
+ const token = await ensureCognitoToken();
228
+ const companySlug = groups.opts().company;
229
+ const companyUid = await getCompanyUid(token, companySlug);
230
+ const res = await vaultApiFetch({
231
+ token,
232
+ path: `/secrets/${encodeURIComponent(companyUid)}/groups`,
233
+ });
234
+ if (!res.ok) {
235
+ const err = await res.json().catch(() => ({}));
236
+ if (res.status === 401) {
237
+ console.error(chalk.red("Not authenticated — please run `hq login`"));
238
+ }
239
+ else if (res.status === 403) {
240
+ console.error(chalk.red("Not authorized to list groups"));
241
+ }
242
+ else if (res.status >= 500) {
243
+ console.error(chalk.red(`Server error: ${err.error ?? res.statusText}`));
244
+ }
245
+ else {
246
+ console.error(chalk.red(err.message ?? err.error ?? "Invalid request"));
247
+ }
248
+ process.exit(1);
249
+ }
250
+ const data = await res.json();
251
+ if (data.groups.length === 0) {
252
+ console.log(chalk.gray("No groups in this company yet."));
253
+ return;
254
+ }
255
+ const idW = Math.max(8, ...data.groups.map((g) => g.groupId.length));
256
+ const nameW = Math.max(4, ...data.groups.map((g) => g.name.length));
257
+ const descW = Math.max(11, ...data.groups.map((g) => (g.description ?? "").length));
258
+ console.log(chalk.bold([
259
+ "GROUP_ID".padEnd(idW),
260
+ "NAME".padEnd(nameW),
261
+ "DESCRIPTION".padEnd(descW),
262
+ "CREATED_AT",
263
+ ].join(" ")));
264
+ for (const g of data.groups) {
265
+ console.log([
266
+ g.groupId.padEnd(idW),
267
+ g.name.padEnd(nameW),
268
+ (g.description ?? "").padEnd(descW),
269
+ shortDate(g.createdAt),
270
+ ].join(" "));
271
+ }
272
+ }
273
+ catch (err) {
274
+ console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
275
+ process.exit(1);
276
+ }
277
+ });
278
+ groups
279
+ .command("members <groupId>")
280
+ .description("List members of a group")
281
+ .action(async (groupId) => {
282
+ try {
283
+ if (!GROUP_ID_PATTERN.test(groupId)) {
284
+ console.error(chalk.red(`Invalid group id '${groupId}': must match grp_<alphanumeric>`));
285
+ process.exit(1);
286
+ }
287
+ const token = await ensureCognitoToken();
288
+ const companySlug = groups.opts().company;
289
+ const companyUid = await getCompanyUid(token, companySlug);
290
+ const res = await vaultApiFetch({
291
+ token,
292
+ path: `/secrets/${encodeURIComponent(companyUid)}/groups/members`,
293
+ query: { groupId },
294
+ });
295
+ if (!res.ok) {
296
+ const err = await res.json().catch(() => ({}));
297
+ if (res.status === 401) {
298
+ console.error(chalk.red("Not authenticated — please run `hq login`"));
299
+ }
300
+ else if (res.status === 403) {
301
+ console.error(chalk.red("Not authorized to view group members"));
302
+ }
303
+ else if (res.status === 404) {
304
+ console.error(chalk.red(`Group not found: ${groupId}`));
305
+ }
306
+ else if (res.status >= 500) {
307
+ console.error(chalk.red(`Server error: ${err.error ?? res.statusText}`));
308
+ }
309
+ else {
310
+ console.error(chalk.red(err.message ?? err.error ?? "Invalid request"));
311
+ }
312
+ process.exit(1);
313
+ }
314
+ const data = await res.json();
315
+ console.log(`Members of '${groupId}':`);
316
+ if (data.members.length === 0) {
317
+ console.log(chalk.gray("No members yet — use 'hq groups add' to add."));
318
+ return;
319
+ }
320
+ const uidW = Math.max(10, ...data.members.map((m) => m.personUid.length));
321
+ const byW = Math.max(8, ...data.members.map((m) => m.addedBy.length));
322
+ console.log(chalk.bold([
323
+ "PERSON_UID".padEnd(uidW),
324
+ "ADDED_BY".padEnd(byW),
325
+ "ADDED_AT",
326
+ ].join(" ")));
327
+ for (const m of data.members) {
328
+ console.log([
329
+ m.personUid.padEnd(uidW),
330
+ m.addedBy.padEnd(byW),
331
+ shortDate(m.addedAt),
332
+ ].join(" "));
333
+ }
334
+ }
335
+ catch (err) {
336
+ console.error(chalk.red("Error:"), err instanceof Error ? err.message : String(err));
337
+ process.exit(1);
338
+ }
339
+ });
340
+ }
341
+ //# sourceMappingURL=groups.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"groups.js","sourceRoot":"","sources":["../../src/commands/groups.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC;AAElD,SAAS,mBAAmB,CAC1B,SAAiB;IAEjB,IAAI,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,yEAAyE;QACzE,0DAA0D;QAC1D,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IAEvE,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,oBAAoB,CAAC;SACjC,cAAc,CAAC,eAAe,EAAE,2BAA2B,CAAC;SAC5D,MAAM,CAAC,sBAAsB,EAAE,sBAAsB,CAAC;SACtD,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAA4C,EAAE,EAAE;QAC9E,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,kCAAkC,CAAC,CAAC,CAAC;gBACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE3D,MAAM,IAAI,GAA4B,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;YACnE,IAAI,IAAI,CAAC,WAAW;gBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAE1D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,KAAK;gBACL,IAAI,EAAE,YAAY,kBAAkB,CAAC,UAAU,CAAC,SAAS;gBACzD,MAAM,EAAE,MAAM;gBACd,IAAI;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;gBACzE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC/D,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,OAAO,MAAM,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC;QACxE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,kBAAkB,CAAC;SAC3B,WAAW,CAAC,gBAAgB,CAAC;SAC7B,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,kCAAkC,CAAC,CAAC,CAAC;gBACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE3D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,KAAK;gBACL,IAAI,EAAE,YAAY,kBAAkB,CAAC,UAAU,CAAC,SAAS;gBACzD,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE,EAAE,OAAO,EAAE;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;gBACzE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;gBAC5E,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,OAAO,WAAW,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,2BAA2B,CAAC;SACpC,WAAW,CAAC,yDAAyD,CAAC;SACtE,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,SAAiB,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,kCAAkC,CAAC,CAAC,CAAC;gBACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,SAAS,wEAAwE,CAAC,CAAC,CAAC;gBAClI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE3D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,KAAK;gBACL,IAAI,EAAE,YAAY,kBAAkB,CAAC,UAAU,CAAC,iBAAiB;gBACjE,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE;aACpF,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;gBACzE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;gBAC1F,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,yEAAyE;oBACzE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC;gBACrD,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,SAAS,cAAc,OAAO,GAAG,CAAC,CAAC,CAAC;QACvE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,8BAA8B,CAAC;SACvC,WAAW,CAAC,8DAA8D,CAAC;SAC3E,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,SAAiB,EAAE,EAAE;QACnD,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,kCAAkC,CAAC,CAAC,CAAC;gBACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,SAAS,wEAAwE,CAAC,CAAC,CAAC;gBAClI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE3D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,KAAK;gBACL,IAAI,EAAE,YAAY,kBAAkB,CAAC,UAAU,CAAC,iBAAiB;gBACjE,MAAM,EAAE,QAAQ;gBAChB,KAAK,EAAE;oBACL,OAAO;oBACP,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,SAAS,EAAE,QAAQ,CAAC,SAAS;iBAC9B;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;gBACzE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC,CAAC;gBAC1F,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,WAAW,CAAC,CAAC,CAAC;gBACrD,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,SAAS,gBAAgB,OAAO,GAAG,CAAC,CAAC,CAAC;QAC3E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,gCAAgC,CAAC;SAC7C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE3D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,KAAK;gBACL,IAAI,EAAE,YAAY,kBAAkB,CAAC,UAAU,CAAC,SAAS;aAC1D,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;gBACzE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBAC5D,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAE1B,CAAC;YAEF,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACrE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YACpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACpF,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;gBACtB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;gBACpB,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC3B,YAAY;aACb,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC;oBACV,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;oBACrB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;oBACpB,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBACnC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;iBACvB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,MAAM;SACH,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CAAC,yBAAyB,CAAC;SACtC,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,EAAE;QAChC,IAAI,CAAC;YACH,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,qBAAqB,OAAO,kCAAkC,CAAC,CAAC,CAAC;gBACzF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAA6B,CAAC;YAChE,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAE3D,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC;gBAC9B,KAAK;gBACL,IAAI,EAAE,YAAY,kBAAkB,CAAC,UAAU,CAAC,iBAAiB;gBACjE,KAAK,EAAE,EAAE,OAAO,EAAE;aACnB,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAA2B,CAAC;gBACzE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACvB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAC,CAAC;gBACxE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC,CAAC;gBACnE,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC,CAAC;gBAC1D,CAAC;qBAAM,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;oBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC3E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC1E,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAE1B,CAAC;YAEF,OAAO,CAAC,GAAG,CAAC,eAAe,OAAO,IAAI,CAAC,CAAC;YACxC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAC1E,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACtE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBACrB,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;gBACzB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;gBACtB,UAAU;aACX,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC;oBACV,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC;oBACxB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC;oBACrB,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;iBACrB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAChB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -1 +1 @@
1
- {"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAuD1D"}
1
+ {"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA0E1D"}
@@ -21,9 +21,26 @@ export function registerListCommand(program) {
21
21
  const lock = readLock(hqRoot);
22
22
  console.log('Modules:\n');
23
23
  for (const module of manifest.modules) {
24
+ console.log(` ${module.name}`);
25
+ if (module.strategy === 'package') {
26
+ // hq-pack content pack — wired by scripts/scan-packages.sh
27
+ console.log(` Strategy: package`);
28
+ console.log(` Source: ${module.source}`);
29
+ if (module.version) {
30
+ console.log(` Version: ${module.version}`);
31
+ }
32
+ if (module.installed_at) {
33
+ console.log(` Path: ${module.installed_at}`);
34
+ }
35
+ if (module.resolved_sha) {
36
+ console.log(` SHA: ${module.resolved_sha}`);
37
+ }
38
+ console.log();
39
+ continue;
40
+ }
41
+ // legacy git-repo module
24
42
  const moduleDir = path.join(modulesDir, module.name);
25
43
  const installed = await isRepo(moduleDir);
26
- console.log(` ${module.name}`);
27
44
  console.log(` Repo: ${module.repo}`);
28
45
  console.log(` Branch: ${module.branch || 'main'}`);
29
46
  console.log(` Strategy: ${module.strategy}`);
@@ -1 +1 @@
1
- {"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE3E,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE9B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAE1B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBAE1C,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAE1F,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvC,MAAM,YAAY,GAAG,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/C,MAAM,QAAQ,GAAG,YAAY,KAAK,MAAM,CAAC;oBAEzC,OAAO,CAAC,GAAG,CAAC,+BAA+B,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAExF,2BAA2B;oBAC3B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;oBAC5D,IAAI,MAAM,EAAE,CAAC;wBACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,0BAA0B,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC/C,CAAC;gBAED,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;QAEH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
1
+ {"version":3,"file":"list.js","sourceRoot":"","sources":["../../src/commands/list.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACzF,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAE3E,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,KAAK,CAAC,IAAI,CAAC;SACX,WAAW,CAAC,mCAAmC,CAAC;SAChD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;YAEtC,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;gBAC5E,OAAO;YACT,CAAC;YAED,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAE9B,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAE1B,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACtC,OAAO,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAEhC,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAClC,2DAA2D;oBAC3D,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;oBACrC,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC9C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;wBACnB,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;oBACjD,CAAC;oBACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;oBACtD,CAAC;oBACD,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;wBACxB,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;oBACtD,CAAC;oBACD,OAAO,CAAC,GAAG,EAAE,CAAC;oBACd,SAAS;gBACX,CAAC;gBAED,yBAAyB;gBACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;gBACrD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;gBAE1C,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC5C,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAChD,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAE1F,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBACvC,MAAM,YAAY,GAAG,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/C,MAAM,QAAQ,GAAG,YAAY,KAAK,MAAM,CAAC;oBAEzC,OAAO,CAAC,GAAG,CAAC,+BAA+B,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAExF,2BAA2B;oBAC3B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,CAAC;oBAC5D,IAAI,MAAM,EAAE,CAAC;wBACX,OAAO,CAAC,GAAG,CAAC,iBAAiB,OAAO,0BAA0B,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;gBAC/C,CAAC;gBAED,OAAO,CAAC,GAAG,EAAE,CAAC;YAChB,CAAC;QAEH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -1,5 +1,5 @@
1
1
  /**
2
- * hq login — opens browser for Clerk auth, caches token (US-004)
2
+ * hq login — opens browser for Cognito auth via Google OAuth
3
3
  */
4
4
  import { Command } from 'commander';
5
5
  export declare function registerLoginCommand(program: Command): void;
@@ -1 +1 @@
1
- {"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkB3D"}
1
+ {"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyB3D"}
@@ -1,20 +1,39 @@
1
1
  /**
2
- * hq login — opens browser for Clerk auth, caches token (US-004)
2
+ * hq login — opens browser for Cognito auth via Google OAuth
3
3
  */
4
4
  import chalk from 'chalk';
5
- import { startAuthFlow } from '../utils/auth.js';
6
- import { saveToken } from '../utils/token-store.js';
7
- import { getRegistryUrl } from '../utils/registry-client.js';
5
+ import { browserLogin, loadCachedTokens, isExpiring } from '@indigoai-us/hq-cloud';
6
+ import { DEFAULT_COGNITO } from '../utils/cognito-session.js';
7
+ function peekIdToken(idToken) {
8
+ try {
9
+ const payload = idToken.split('.')[1];
10
+ if (!payload)
11
+ return {};
12
+ const pad = payload.length % 4 === 0 ? '' : '='.repeat(4 - (payload.length % 4));
13
+ const normalized = payload.replace(/-/g, '+').replace(/_/g, '/') + pad;
14
+ const decoded = JSON.parse(Buffer.from(normalized, 'base64').toString('utf-8'));
15
+ return { email: decoded.email, sub: decoded.sub };
16
+ }
17
+ catch {
18
+ return {};
19
+ }
20
+ }
8
21
  export function registerLoginCommand(program) {
9
22
  program
10
23
  .command('login')
11
- .description('Authenticate with the HQ package registry')
24
+ .description('Authenticate with HQ via Cognito (Google OAuth)')
12
25
  .action(async () => {
13
26
  try {
14
- const registryUrl = getRegistryUrl();
15
- const token = await startAuthFlow(registryUrl);
16
- await saveToken(token);
17
- console.log(chalk.green(`Logged in as ${token.email}`));
27
+ const existing = loadCachedTokens();
28
+ if (existing && !isExpiring(existing, 120)) {
29
+ const who = peekIdToken(existing.idToken).email ?? 'cached session';
30
+ console.log(chalk.green(`Already logged in as ${who}. Run \`hq logout\` to switch accounts.`));
31
+ return;
32
+ }
33
+ console.log('Opening browser for authentication...');
34
+ const tokens = await browserLogin(DEFAULT_COGNITO);
35
+ const who = peekIdToken(tokens.idToken).email ?? 'HQ';
36
+ console.log(chalk.green(`Logged in as ${who}`));
18
37
  }
19
38
  catch (error) {
20
39
  console.error(chalk.red('Login failed:'), error instanceof Error ? error.message : 'Unknown error');
@@ -1 +1 @@
1
- {"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,2CAA2C,CAAC;SACxD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAC1B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
1
+ {"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnF,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAE9D,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC;QACvE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAgB;IACnD,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,iDAAiD,CAAC;SAC9D,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YACpC,IAAI,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,gBAAgB,CAAC;gBACpE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,wBAAwB,GAAG,yCAAyC,CAAC,CAAC,CAAC;gBAC/F,OAAO;YACT,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,CAAC;YACnD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAC1B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -1,5 +1,5 @@
1
1
  /**
2
- * hq logout — clears cached session (US-004)
2
+ * hq logout — clears cached Cognito session
3
3
  */
4
4
  import { Command } from 'commander';
5
5
  export declare function registerLogoutCommand(program: Command): void;
@@ -1 +1 @@
1
- {"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgB5D"}
1
+ {"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAqB5D"}
@@ -1,15 +1,20 @@
1
1
  /**
2
- * hq logout — clears cached session (US-004)
2
+ * hq logout — clears cached Cognito session
3
3
  */
4
4
  import chalk from 'chalk';
5
- import { clearToken } from '../utils/token-store.js';
5
+ import { clearCachedTokens, loadCachedTokens } from '@indigoai-us/hq-cloud';
6
6
  export function registerLogoutCommand(program) {
7
7
  program
8
8
  .command('logout')
9
9
  .description('Log out and clear cached credentials')
10
10
  .action(async () => {
11
11
  try {
12
- await clearToken();
12
+ const existing = loadCachedTokens();
13
+ if (!existing) {
14
+ console.log(chalk.yellow('No cached HQ session'));
15
+ return;
16
+ }
17
+ clearCachedTokens();
13
18
  console.log(chalk.green('Logged out successfully'));
14
19
  }
15
20
  catch (error) {
@@ -1 +1 @@
1
- {"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,UAAU,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
1
+ {"version":3,"file":"logout.js","sourceRoot":"","sources":["../../src/commands/logout.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAE5E,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,sCAAsC,CAAC;SACnD,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAClD,OAAO;YACT,CAAC;YACD,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAC3B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CACzD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -0,0 +1,23 @@
1
+ /**
2
+ * `hq onboard` — bootstrap an HQ vault: sign in to Cognito + provision
3
+ * the company entity, S3 bucket, KMS key, owner membership, and STS-vended
4
+ * credentials in one flow.
5
+ *
6
+ * This is the "the entire flow" entry point that VLT-9 was building toward:
7
+ * a real user can install hq-cli and run `hq onboard create-company` once
8
+ * to land in a fully provisioned vault, then use `hq sync push|pull` to
9
+ * round-trip files against S3.
10
+ *
11
+ * Subcommands:
12
+ * hq onboard create-company — provision a brand new company
13
+ * hq onboard join — accept an invite from another user
14
+ * hq onboard resume — resume a partially-completed flow from checkpoint
15
+ * hq onboard dry-run — show what create-company would do, without doing it
16
+ *
17
+ * Auth: we cache the Cognito access + refresh tokens at ~/.hq/cognito-tokens.json.
18
+ * If the cached token is missing or expired beyond the refresh window, the
19
+ * browser-OAuth flow opens automatically.
20
+ */
21
+ import { Command } from "commander";
22
+ export declare function registerOnboardCommand(program: Command): void;
23
+ //# sourceMappingURL=onboard.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"onboard.d.ts","sourceRoot":"","sources":["../../src/commands/onboard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAcpC,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA6J7D"}