@kindgi/cli 0.1.4 → 0.1.5

package/dist/commands/sso.js

@@ -0,0 +1,318 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+import { readFile } from 'node:fs/promises';
+import { renderJson } from '../output.js';
+import { listFlag, readJsonInput, requiredPositional, runSdk, runSdkRendered, stringFlag, } from './helpers.js';
+/** The identity providers `start --idp` has steps for. */
+/** The setup guides, at the docs' root (always the latest release). */
+const GUIDES = 'https://docs.kindgi.com/guides/sso';
+const IDP_STEPS = {
+    google: {
+        kind: 'oidc',
+        guide: 'google',
+        steps: [
+            'Google Cloud console → Google Auth Platform:',
+            '  1. Branding: the app name and a support email.',
+            '  2. Audience: Internal (only your Google Workspace accounts; no test users, no review).',
+            '  3. Data access: openid, email, profile.',
+            '  4. Clients → Create client → Web application → Authorized redirect URIs: the URI above.',
+            '  5. Download the client ID and secret (Google shows the secret once).',
+            'Issuer: https://accounts.google.com',
+        ].join('\n'),
+    },
+    entra: {
+        kind: 'oidc',
+        guide: 'entra-id',
+        steps: [
+            'Microsoft Entra admin center → App registrations → New registration:',
+            '  1. Supported account types: this organizational directory only (single tenant).',
+            '  2. Redirect URI: Web, the URI above.',
+            '  3. Copy the Application (client) ID and the Directory (tenant) ID.',
+            '  4. Certificates & secrets → New client secret: copy its Value (shown once). It expires:',
+            '     note the date.',
+            '  5. Enterprise applications → the app → Properties → Assignment required: Yes; then',
+            '     Users and groups: who may sign in.',
+            'Issuer: https://login.microsoftonline.com/<directory-tenant-id>/v2.0 (never `common`).',
+        ].join('\n'),
+    },
+    okta: {
+        kind: 'oidc',
+        guide: 'okta',
+        steps: [
+            'Okta admin console → Applications → Create App Integration → OIDC - OpenID Connect →',
+            'Web Application:',
+            '  1. Sign-in redirect URIs: the URI above.',
+            '  2. Assignments: the groups who may sign in.',
+            '  3. Copy the client ID and the client secret.',
+            'Issuer: https://<your-org>.okta.com',
+        ].join('\n'),
+    },
+    keycloak: {
+        kind: 'oidc',
+        guide: 'keycloak',
+        steps: [
+            'Keycloak admin console → your realm → Clients → Create client → OpenID Connect:',
+            '  1. Client authentication: On. Authentication flow: Standard flow.',
+            '  2. Valid redirect URIs: the URI above (exactly; no wildcard).',
+            '  3. Credentials tab: copy the client secret.',
+            '  4. Each person needs an email with "Email verified" on, or sign-in is refused.',
+            'Issuer: https://<keycloak-host>/realms/<realm>',
+        ].join('\n'),
+    },
+};
+const kindOption = {
+    kind: {
+        type: 'string',
+        description: '`oidc` (OpenID Connect: Google, Entra ID, Okta, Keycloak…) or `saml`.',
+    },
+};
+/** The provider's fields as flags; `--spec` takes anything else, as JSON. */
+const configOptions = {
+    ...kindOption,
+    name: {
+        type: 'string',
+        description: 'What the sign-in button says ("Sign in with …").',
+    },
+    domains: {
+        type: 'string',
+        multiple: true,
+        description: 'An email domain whose people sign in with it (`acme.com`); repeatable or comma-separated.',
+    },
+    issuer: { type: 'string', description: 'OIDC: the issuer URL.' },
+    'client-id': { type: 'string', description: 'OIDC: the client ID.' },
+    'client-secret-ref': {
+        type: 'string',
+        description: "OIDC: the NAME of the client secret in Kindgi's secret store (`kindgi secrets set <NAME>`), never the secret.",
+    },
+    'idp-metadata': {
+        type: 'string',
+        description: "SAML: the identity provider's metadata XML, as `@<file>`.",
+    },
+    'sp-signing-key-ref': {
+        type: 'string',
+        description: 'SAML: the NAME of the signing key, for identity providers that want signed requests.',
+    },
+    spec: {
+        type: 'string',
+        description: 'Any other provider fields, as inline JSON or `@<file>` (flags win).',
+    },
+};
+async function configFromFlags(ctx) {
+    const specText = stringFlag(ctx, 'spec');
+    const spec = specText === undefined ? {} : await readJsonInput(specText);
+    if (spec === null || typeof spec !== 'object' || Array.isArray(spec)) {
+        throw new Error('--spec must be a JSON object');
+    }
+    const domains = listFlag(ctx, 'domains')
+        .flatMap((d) => d.split(','))
+        .map((d) => d.trim())
+        .filter((d) => d !== '');
+    const metadataArg = stringFlag(ctx, 'idp-metadata');
+    if (metadataArg !== undefined && !metadataArg.startsWith('@')) {
+        throw new Error('--idp-metadata takes a file: --idp-metadata=@<path-to-metadata.xml>');
+    }
+    const flags = {
+        kind: stringFlag(ctx, 'kind'),
+        displayName: stringFlag(ctx, 'name'),
+        issuer: stringFlag(ctx, 'issuer'),
+        clientId: stringFlag(ctx, 'client-id'),
+        clientSecretRef: stringFlag(ctx, 'client-secret-ref'),
+        spSigningKeyRef: stringFlag(ctx, 'sp-signing-key-ref'),
+        ...(domains.length > 0 && { domains }),
+        ...(metadataArg !== undefined && {
+            idpMetadataXml: await readFile(metadataArg.slice(1), 'utf8'),
+        }),
+    };
+    for (const [k, v] of Object.entries(flags))
+        if (v === undefined)
+            delete flags[k];
+    return { ...spec, ...flags };
+}
+function kindFlag(ctx) {
+    const kind = stringFlag(ctx, 'kind');
+    if (kind === undefined || kind === 'oidc' || kind === 'saml')
+        return kind;
+    throw new Error('--kind must be `oidc` or `saml`');
+}
+/** What to send IT: the URLs for their side, and what to send back. */
+export function handoffText(urls, idp) {
+    const { providerId, signIn } = urls;
+    const out = [];
+    if ('redirectUri' in signIn) {
+        out.push(`Sign-in with "${providerId}" (OpenID Connect). Send this to whoever runs your identity provider:`, '', '  Create an OpenID Connect web application (a confidential client) for Kindgi.', `  Redirect URI:  ${signIn.redirectUri}`, '  Scopes:        openid email profile', '  Let in only the people who should use Kindgi (assign users or groups).', '', '  Send back: the issuer URL and the client ID. The client secret goes into', "  Kindgi's secret store under a name, never by email or chat:", '    kindgi secrets set <NAME> --env=<runtime env> --scope=tenant');
+    }
+    else {
+        out.push(`Sign-in with "${providerId}" (SAML). Send this to whoever runs your identity provider:`, '', '  Create a SAML 2.0 application for Kindgi.', `  ACS URL (single sign-on URL):  ${signIn.acsUrl}`, `  Entity ID (audience):          ${signIn.spEntityId}`, `  Service provider metadata:     ${signIn.spMetadataUrl}`, '  Name ID: the email address (or an `email` attribute). Sign the assertions.', '  Let in only the people who should use Kindgi (assign users or groups).', '', "  Send back: the identity provider's metadata XML.");
+    }
+    const steps = idp === undefined ? undefined : IDP_STEPS[idp];
+    if (steps !== undefined)
+        out.push('', steps.steps);
+    const guide = steps?.guide ?? ('redirectUri' in signIn ? 'oidc' : 'saml');
+    out.push('', `Step by step: ${GUIDES}/${guide}/`);
+    out.push('', 'Then register it:', 'redirectUri' in signIn
+        ? `  kindgi sso providers finish ${providerId} --kind=oidc --issuer=<issuer> --client-id=<client-id> --client-secret-ref=<NAME> --domains=<your-domain>`
+        : `  kindgi sso providers finish ${providerId} --kind=saml --idp-metadata=@<metadata.xml> --domains=<your-domain>`, '', 'These URLs stay the same after registering and after any `update`.');
+    return `${out.join('\n')}\n`;
+}
+const start = {
+    kind: 'leaf',
+    name: 'start',
+    description: 'Get the URLs to give your identity provider, before registering anything, and a message to send IT.',
+    usage: 'kindgi sso providers start <provider-id> --kind=oidc|saml [--idp=google|entra|okta|keycloak]',
+    optionSpec: {
+        ...kindOption,
+        idp: {
+            type: 'string',
+            description: 'Add the click-by-click steps for `google`, `entra`, `okta` or `keycloak` (OIDC).',
+        },
+    },
+    run: (ctx) => runSdkRendered(ctx, 'sso providers start', async () => {
+        const providerId = requiredPositional(ctx, 0, 'provider-id');
+        const idp = stringFlag(ctx, 'idp');
+        if (idp !== undefined && IDP_STEPS[idp] === undefined) {
+            throw new Error(`--idp must be one of: ${Object.keys(IDP_STEPS).join(', ')}`);
+        }
+        const kind = kindFlag(ctx) ?? (idp !== undefined ? IDP_STEPS[idp]?.kind : undefined);
+        const urls = await ctx
+            .client()
+            .auth.providers.signIn(providerId, kind === undefined ? undefined : { kind });
+        if (ctx.globals.formatRequested)
+            return renderJson(urls, ctx.globals.format);
+        return { stdout: handoffText(urls, idp), stderr: '' };
+    }),
+};
+const finish = {
+    kind: 'leaf',
+    name: 'finish',
+    description: 'Register the provider with what your identity provider gave back.',
+    usage: 'kindgi sso providers finish <provider-id> --domains=<d> (--kind=oidc --issuer=<url> --client-id=<id> --client-secret-ref=<NAME> | --kind=saml --idp-metadata=@<file>) [--name=<text>] [...]',
+    optionSpec: configOptions,
+    run: (ctx) => runSdk(ctx, 'sso providers finish', async () => {
+        const providerId = requiredPositional(ctx, 0, 'provider-id');
+        kindFlag(ctx);
+        const config = { ...(await configFromFlags(ctx)), providerId };
+        if (config.kind === undefined)
+            throw new Error('--kind=oidc|saml is required');
+        if (!Array.isArray(config.domains) || config.domains.length === 0) {
+            throw new Error("--domains=<your-domain> is required: sign-in is email first, so people find this provider by their email's domain");
+        }
+        return await ctx.client().auth.providers.register(config);
+    }),
+};
+const update = {
+    kind: 'leaf',
+    name: 'update',
+    description: "Change a provider; its URLs (on your identity provider's side) don't change.",
+    usage: 'kindgi sso providers update <provider-id> [--client-id=<id>] [--client-secret-ref=<NAME>] [--domains=<d>] [--name=<text>] [--remove=<field>] [...]',
+    optionSpec: {
+        ...configOptions,
+        remove: {
+            type: 'string',
+            multiple: true,
+            description: 'An optional field to remove (e.g. `displayName`, `domains`); repeatable.',
+        },
+    },
+    run: (ctx) => runSdk(ctx, 'sso providers update', async () => {
+        const providerId = requiredPositional(ctx, 0, 'provider-id');
+        kindFlag(ctx);
+        const changes = await configFromFlags(ctx);
+        for (const field of listFlag(ctx, 'remove').flatMap((f) => f.split(','))) {
+            if (field.trim() !== '')
+                changes[field.trim()] = null;
+        }
+        if (Object.keys(changes).length === 0)
+            throw new Error('Nothing to change: give a flag or --spec');
+        return await ctx
+            .client()
+            .auth.providers.update(providerId, changes);
+    }),
+};
+const get = {
+    kind: 'leaf',
+    name: 'get',
+    description: 'Show one provider, with the URLs your identity provider has.',
+    usage: 'kindgi sso providers get <provider-id>',
+    run: (ctx) => runSdk(ctx, 'sso providers get', async () => {
+        const providerId = requiredPositional(ctx, 0, 'provider-id');
+        return await ctx.client().auth.providers.get(providerId);
+    }),
+};
+const list = {
+    kind: 'leaf',
+    name: 'list',
+    description: "List this tenant's sign-in providers.",
+    usage: 'kindgi sso providers list',
+    run: (ctx) => runSdk(ctx, 'sso providers list', async () => await ctx.client().auth.providers.list(), {
+        rows: (page) => page.data,
+        columns: [
+            { header: 'PROVIDER', get: (p) => p.providerId },
+            { header: 'KIND', get: (p) => p.kind },
+            { header: 'NAME', get: (p) => p.displayName ?? '' },
+            { header: 'DOMAINS', get: (p) => (p.domains ?? []).join(',') },
+        ],
+    }),
+};
+const remove = {
+    kind: 'leaf',
+    name: 'remove',
+    description: "Stop signing in with a provider. Registering the same id again gives it the same URLs, but nobody's earlier sign-in carries over.",
+    usage: 'kindgi sso providers remove <provider-id>',
+    run: (ctx) => runSdk(ctx, 'sso providers remove', async () => {
+        const providerId = requiredPositional(ctx, 0, 'provider-id');
+        return await ctx.client().auth.providers.unregister(providerId);
+    }),
+};
+const test = {
+    kind: 'leaf',
+    name: 'test',
+    description: 'The link to try signing in with a provider, as a person at one of its domains.',
+    usage: 'kindgi sso providers test <provider-id> [--email=<someone@your-domain>]',
+    optionSpec: {
+        email: {
+            type: 'string',
+            description: "Whose sign-in to try; default: someone at the provider's first domain.",
+        },
+    },
+    run: (ctx) => runSdkRendered(ctx, 'sso providers test', async () => {
+        const providerId = requiredPositional(ctx, 0, 'provider-id');
+        const client = ctx.client();
+        const provider = await client.auth.providers.get(providerId);
+        const domain = provider.domains?.[0];
+        const email = stringFlag(ctx, 'email') ?? (domain === undefined ? undefined : `someone@${domain}`);
+        const options = await client.auth.signInOptions(email === undefined ? undefined : { email });
+        const option = options.data.find((o) => o.providerId === providerId);
+        const signInUrl = option === undefined ? undefined : new URL(option.signInUrl, ctx.apiUrl()).toString();
+        if (ctx.globals.formatRequested) {
+            return renderJson({ providerId, email, signInUrl: signInUrl ?? null }, ctx.globals.format);
+        }
+        if (signInUrl !== undefined) {
+            return {
+                stdout: [
+                    `Open this in a browser and sign in as a person who's been added to this tenant:`,
+                    `  ${signInUrl}`,
+                    '',
+                    'Afterwards, the console shows who you are signed in as.',
+                    '',
+                ].join('\n'),
+                stderr: '',
+            };
+        }
+        const why = email === undefined
+            ? `"${providerId}" has no domains. Sign-in is email first, so people find a provider by their email's domain: kindgi sso providers update ${providerId} --domains=<your-domain>`
+            : `No sign-in page offers "${providerId}" for ${email}: its domain isn't one of the provider's, or it isn't verified for this tenant (a runtime that serves several tenants routes a domain only once its operator lists it in KINDGI_AUTH_VERIFIED_DOMAINS).`;
+        return { stdout: '', stderr: `${why}\n`, exitCode: 1 };
+    }),
+};
+const providers = {
+    kind: 'group',
+    name: 'providers',
+    description: "Your organization's identity providers (Google, Entra ID, Okta, Keycloak, SAML…).",
+    subcommands: [start, finish, update, get, list, test, remove],
+};
+export const ssoCommand = {
+    kind: 'group',
+    name: 'sso',
+    description: "Sign-in with your organization's identity provider (single sign-on).",
+    subcommands: [providers],
+};
+//# sourceMappingURL=sso.js.map

package/dist/commands/sso.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sso.js","sourceRoot":"","sources":["../../src/commands/sso.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAS5C,OAAO,EAAiB,UAAU,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EACL,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,UAAU,GACX,MAAM,cAAc,CAAC;AAatB,0DAA0D;AAC1D,uEAAuE;AACvE,MAAM,MAAM,GAAG,oCAAoC,CAAC;AAEpD,MAAM,SAAS,GAEX;IACF,MAAM,EAAE;QACN,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE;YACL,8CAA8C;YAC9C,kDAAkD;YAClD,0FAA0F;YAC1F,2CAA2C;YAC3C,2FAA2F;YAC3F,wEAAwE;YACxE,qCAAqC;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,KAAK,EAAE;QACL,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE;YACL,sEAAsE;YACtE,mFAAmF;YACnF,wCAAwC;YACxC,sEAAsE;YACtE,2FAA2F;YAC3F,qBAAqB;YACrB,sFAAsF;YACtF,yCAAyC;YACzC,wFAAwF;SACzF,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,MAAM;QACb,KAAK,EAAE;YACL,sFAAsF;YACtF,kBAAkB;YAClB,4CAA4C;YAC5C,+CAA+C;YAC/C,gDAAgD;YAChD,qCAAqC;SACtC,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE;YACL,iFAAiF;YACjF,qEAAqE;YACrE,iEAAiE;YACjE,+CAA+C;YAC/C,kFAAkF;YAClF,gDAAgD;SACjD,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC;AAEF,MAAM,UAAU,GAAG;IACjB,IAAI,EAAE;QACJ,IAAI,EAAE,QAAiB;QACvB,WAAW,EAAE,uEAAuE;KACrF;CACF,CAAC;AAEF,6EAA6E;AAC7E,MAAM,aAAa,GAAG;IACpB,GAAG,UAAU;IACb,IAAI,EAAE;QACJ,IAAI,EAAE,QAAiB;QACvB,WAAW,EAAE,kDAAkD;KAChE;IACD,OAAO,EAAE;QACP,IAAI,EAAE,QAAiB;QACvB,QAAQ,EAAE,IAAI;QACd,WAAW,EACT,2FAA2F;KAC9F;IACD,MAAM,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,WAAW,EAAE,uBAAuB,EAAE;IACzE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAiB,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAC7E,mBAAmB,EAAE;QACnB,IAAI,EAAE,QAAiB;QACvB,WAAW,EACT,+GAA+G;KAClH;IACD,cAAc,EAAE;QACd,IAAI,EAAE,QAAiB;QACvB,WAAW,EAAE,2DAA2D;KACzE;IACD,oBAAoB,EAAE;QACpB,IAAI,EAAE,QAAiB;QACvB,WAAW,EACT,sFAAsF;KACzF;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,QAAiB;QACvB,WAAW,EAAE,qEAAqE;KACnF;CACF,CAAC;AAEF,KAAK,UAAU,eAAe,CAAC,GAAmB;IAChD,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;SACrC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;SAC5B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAA4B;QACrC,IAAI,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;QAC7B,WAAW,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;QACpC,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC;QACjC,QAAQ,EAAE,UAAU,CAAC,GAAG,EAAE,WAAW,CAAC;QACtC,eAAe,EAAE,UAAU,CAAC,GAAG,EAAE,mBAAmB,CAAC;QACrD,eAAe,EAAE,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC;QACtD,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QACtC,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI;YAC/B,cAAc,EAAE,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;SAC7D,CAAC;KACH,CAAC;IACF,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,GAAI,IAAgC,EAAE,GAAG,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACrD,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,WAAW,CAAC,IAAsC,EAAE,GAAY;IAC9E,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;QAC5B,GAAG,CAAC,IAAI,CACN,iBAAiB,UAAU,uEAAuE,EAClG,EAAE,EACF,gFAAgF,EAChF,oBAAoB,MAAM,CAAC,WAAW,EAAE,EACxC,uCAAuC,EACvC,0EAA0E,EAC1E,EAAE,EACF,4EAA4E,EAC5E,+DAA+D,EAC/D,kEAAkE,CACnE,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,IAAI,CACN,iBAAiB,UAAU,6DAA6D,EACxF,EAAE,EACF,6CAA6C,EAC7C,oCAAoC,MAAM,CAAC,MAAM,EAAE,EACnD,oCAAoC,MAAM,CAAC,UAAU,EAAE,EACvD,oCAAoC,MAAM,CAAC,aAAa,EAAE,EAC1D,8EAA8E,EAC9E,0EAA0E,EAC1E,EAAE,EACF,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7D,IAAI,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1E,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC;IAClD,GAAG,CAAC,IAAI,CACN,EAAE,EACF,mBAAmB,EACnB,aAAa,IAAI,MAAM;QACrB,CAAC,CAAC,iCAAiC,UAAU,2GAA2G;QACxJ,CAAC,CAAC,iCAAiC,UAAU,qEAAqE,EACpH,EAAE,EACF,oEAAoE,CACrE,CAAC;IACF,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAC/B,CAAC;AAED,MAAM,KAAK,GAAgB;IACzB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,OAAO;IACb,WAAW,EACT,qGAAqG;IACvG,KAAK,EACH,8FAA8F;IAChG,UAAU,EAAE;QACV,GAAG,UAAU;QACb,GAAG,EAAE;YACH,IAAI,EAAE,QAAiB;YACvB,WAAW,EACT,kFAAkF;SACrF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,cAAc,CAAC,GAAG,EAAE,qBAAqB,EAAE,KAAK,IAAuB,EAAE;QACvE,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,SAAS,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,yBAAyB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrF,MAAM,IAAI,GAAG,MAAM,GAAG;aACnB,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAChF,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe;YAAE,OAAO,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC7E,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,mEAAmE;IAChF,KAAK,EACH,6LAA6L;IAC/L,UAAU,EAAE,aAAa;IACzB,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7D,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAA4B,EAAE,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;QACxF,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAC/E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CACb,mHAAmH,CACpH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAuC,CAAC,CAAC;IAC7F,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,8EAA8E;IAC3F,KAAK,EACH,oJAAoJ;IACtJ,UAAU,EAAE;QACV,GAAG,aAAa;QAChB,MAAM,EAAE;YACN,IAAI,EAAE,QAAiB;YACvB,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,0EAA0E;SACxF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7D,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,OAAO,GAA4B,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QACxD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,OAAO,MAAM,GAAG;aACb,MAAM,EAAE;aACR,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,EAAE,OAAsC,CAAC,CAAC;IAC/E,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,GAAG,GAAgB;IACvB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,8DAA8D;IAC3E,KAAK,EAAE,wCAAwC;IAC/C,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7D,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,IAAI,GAAgB;IACxB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,uCAAuC;IACpD,KAAK,EAAE,2BAA2B;IAClC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE;QACtF,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;QACzB,OAAO,EAAE;YACP,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,EAAE;YAChD,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;YACtC,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,EAAE;YACnD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;SAC/D;KACF,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,mIAAmI;IACrI,KAAK,EAAE,2CAA2C;IAClD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7D,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IAClE,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,IAAI,GAAgB;IACxB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,gFAAgF;IAC7F,KAAK,EAAE,yEAAyE;IAChF,UAAU,EAAE;QACV,KAAK,EAAE;YACL,IAAI,EAAE,QAAiB;YACvB,WAAW,EAAE,wEAAwE;SACtF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,cAAc,CACZ,GAAG,EACH,oBAAoB,EACpB,KAAK,IAA+C,EAAE;QACpD,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,KAAK,GACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;QACvF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,aAAa,CAC7C,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAC5C,CAAC;QACF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;QACrE,MAAM,SAAS,GACb,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxF,IAAI,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;YAChC,OAAO,UAAU,CACf,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,IAAI,IAAI,EAAE,EACnD,GAAG,CAAC,OAAO,CAAC,MAAM,CACnB,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,MAAM,EAAE;oBACN,iFAAiF;oBACjF,KAAK,SAAS,EAAE;oBAChB,EAAE;oBACF,yDAAyD;oBACzD,EAAE;iBACH,CAAC,IAAI,CAAC,IAAI,CAAC;gBACZ,MAAM,EAAE,EAAE;aACX,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GACP,KAAK,KAAK,SAAS;YACjB,CAAC,CAAC,IAAI,UAAU,4HAA4H,UAAU,0BAA0B;YAChL,CAAC,CAAC,2BAA2B,UAAU,SAAS,KAAK,yMAAyM,CAAC;QACnQ,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzD,CAAC,CACF;CACJ,CAAC;AAEF,MAAM,SAAS,GAAY;IACzB,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,mFAAmF;IAChG,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC;CAC9D,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAY;IACjC,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,sEAAsE;IACnF,WAAW,EAAE,CAAC,SAAS,CAAC;CACzB,CAAC"}

package/dist/commands/tokens.d.ts

@@ -1,3 +1,14 @@
+import type { ApiKeyPrincipal } from '@kindgi/client';
+import type { CommandContext } from '../context.js';
 import type { Command } from './types.js';
+/**
+ * `kindgi tokens`: API keys. A key acts for one principal, a person or a
+ * service account, with that principal's grants. Its role is a ceiling
+ * under them, and its project a limit.
+ */
+/** `--for=user:<id>` or `--for=sa:<id>` (also `service-account:<id>`). */
+export declare function principalFlag(ctx: CommandContext, name?: string): ApiKeyPrincipal | undefined;
+/** `--expires=30d|12h|90m` (from now) or an ISO date. */
+export declare function expiresFlag(ctx: CommandContext, now?: () => number): string | undefined;
 export declare const tokensCommand: Command;
 //# sourceMappingURL=tokens.d.ts.map

package/dist/commands/tokens.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/commands/tokens.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,YAAY,CAAC;AA6BvD,eAAO,MAAM,aAAa,EAAE,OAK3B,CAAC"}
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../src/commands/tokens.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,gBAAgB,CAAC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAYpD,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,YAAY,CAAC;AAEvD;;;;GAIG;AAEH,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,SAAQ,GAAG,eAAe,GAAG,SAAS,CAW5F;AAKD,yDAAyD;AACzD,wBAAgB,WAAW,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,eAAmB,GAAG,MAAM,GAAG,SAAS,CAc3F;AAuID,eAAO,MAAM,aAAa,EAAE,OAM3B,CAAC"}

package/dist/commands/tokens.js

@@ -1,33 +1,166 @@
 // SPDX-License-Identifier: Apache-2.0
 // Copyright (C) 2026 Kindgi Inc.
-import { requiredPositional, runSdk, throwUnwired } from './helpers.js';
+import { UsageError } from '../errors.js';
+import { renderJson } from '../output.js';
+import { integerFlag, listFlag, requiredPositional, runSdk, runSdkRendered, stringFlag, } from './helpers.js';
+/**
+ * `kindgi tokens`: API keys. A key acts for one principal, a person or a
+ * service account, with that principal's grants. Its role is a ceiling
+ * under them, and its project a limit.
+ */
+/** `--for=user:<id>` or `--for=sa:<id>` (also `service-account:<id>`). */
+export function principalFlag(ctx, name = 'for') {
+    const raw = stringFlag(ctx, name);
+    if (raw === undefined)
+        return undefined;
+    const colon = raw.indexOf(':');
+    const kind = raw.slice(0, colon);
+    const id = raw.slice(colon + 1);
+    if (colon > 0 && id !== '') {
+        if (kind === 'user')
+            return { kind: 'user', id };
+        if (kind === 'sa' || kind === 'service-account')
+            return { kind: 'service-account', id };
+    }
+    throw new UsageError(`--${name} must be user:<id> or sa:<id>, got "${raw}"`);
+}
+const DURATION_RE = /^(\d+)([dhm])$/;
+const UNIT_MS = { d: 86_400_000, h: 3_600_000, m: 60_000 };
+/** `--expires=30d|12h|90m` (from now) or an ISO date. */
+export function expiresFlag(ctx, now = () => Date.now()) {
+    const raw = stringFlag(ctx, 'expires');
+    if (raw === undefined)
+        return undefined;
+    const span = DURATION_RE.exec(raw);
+    if (span !== null) {
+        const ms = Number(span[1]) * UNIT_MS[span[2]];
+        if (ms <= 0)
+            throw new UsageError('--expires must be in the future');
+        return new Date(now() + ms).toISOString();
+    }
+    const at = new Date(raw);
+    if (Number.isNaN(at.getTime())) {
+        throw new UsageError(`--expires must be like 30d, 12h or 90m, or an ISO date; got "${raw}"`);
+    }
+    return at.toISOString();
+}
+const principalCell = (p) => p === undefined ? '' : `${p.kind === 'user' ? 'user' : 'sa'}:${p.id}`;
+const when = (v) => (v !== undefined ? String(v) : '');
+/** `tokens list --table`. */
+const TOKENS_TABLE = {
+    rows: (page) => page.data,
+    columns: [
+        { header: 'ID', get: (t) => String(t.id) },
+        { header: 'FOR', get: (t) => principalCell(t.principal) },
+        { header: 'ROLE', get: (t) => t.role },
+        { header: 'PROJECT', get: (t) => when(t.projectId) },
+        { header: 'LABEL', get: (t) => t.label ?? '' },
+        { header: 'CREATED', get: (t) => String(t.createdAt) },
+        { header: 'EXPIRES', get: (t) => when(t.expiresAt) },
+        { header: 'REVOKED', get: (t) => when(t.revokedAt) },
+        { header: 'LAST USED', get: (t) => when(t.lastUsedAt) },
+    ],
+};
+const ROLES = ['member', 'admin'];
 const create = {
     kind: 'leaf',
     name: 'create',
-    description: 'Create a new API token.',
-    usage: 'kindgi tokens create --spec=<json-or-@file>',
+    description: 'Create an API key, for you or (a tenant admin) for someone else. Its secret is printed once, here: store it now, nothing shows it again. A `member` key takes no admin action on the tenant; a key limited to a project acts only there.',
+    usage: 'kindgi tokens create [--for=user:<id>|sa:<id>] [--role=member|admin] [--project=<project-id>] [--expires=30d|<iso-date>] [--label=<text>] [--capability=<cap>]…',
     optionSpec: {
-        spec: {
+        for: {
+            type: 'string',
+            description: 'Whom it acts for: `user:<id>` or `sa:<service-account-id>` (default: you).',
+        },
+        role: {
+            type: 'string',
+            description: '`member` (the default) or `admin` (needs a tenant admin, for one).',
+        },
+        project: { type: 'string', description: 'Limit the key to this project.' },
+        expires: {
             type: 'string',
-            description: 'The token as inline JSON or `@<file>`, every field optional: `role` (`admin` or `member`, default `member`), `capabilities`, `label`, `expiresAt`, `projectId`.',
+            description: 'When it stops working: `30d`, `12h`, `90m` from now, or an ISO date.',
+        },
+        label: { type: 'string', description: 'What the key is for, e.g. `ci`.' },
+        capability: {
+            type: 'string',
+            multiple: true,
+            description: 'A capability it carries (repeatable); you must hold it.',
         },
     },
-    run: (ctx) => runSdk(ctx, 'tokens create', async () => throwUnwired('tokens.create')),
+    run: (ctx) => runSdkRendered(ctx, 'tokens create', async () => {
+        const principal = principalFlag(ctx);
+        const role = stringFlag(ctx, 'role');
+        if (role !== undefined && !ROLES.includes(role)) {
+            throw new UsageError(`--role must be member or admin, got "${role}"`);
+        }
+        const projectId = stringFlag(ctx, 'project');
+        const expiresAt = expiresFlag(ctx);
+        const label = stringFlag(ctx, 'label');
+        const capabilities = listFlag(ctx, 'capability');
+        const created = await ctx.client().tokens.create({
+            ...(principal !== undefined && { for: principal }),
+            ...(role !== undefined && { role: role }),
+            ...(projectId !== undefined && { projectId: projectId }),
+            ...(expiresAt !== undefined && { expiresAt: expiresAt }),
+            ...(label !== undefined && { label }),
+            ...(capabilities.length > 0 && { capabilities }),
+        });
+        return {
+            ...renderJson(created, ctx.globals.format),
+            stderr: `⚠ The secret of key ${String(created.meta.id)} is shown once, above: store it now.\n`,
+        };
+    }),
+};
+const list = {
+    kind: 'leaf',
+    name: 'list',
+    description: 'List API keys, newest first, revoked ones included; never secrets. A tenant admin sees every key (`--for` narrows to one principal); anyone else, their own.',
+    usage: 'kindgi tokens list [--for=user:<id>|sa:<id>] [--limit=<n>] [--cursor=<c>] [--table]',
+    optionSpec: {
+        for: { type: 'string', description: "Only this principal's keys (tenant admins)." },
+        limit: { type: 'string', description: 'The most keys to return.' },
+        cursor: {
+            type: 'string',
+            description: "Resume after this cursor, from the previous page's `nextCursor`.",
+        },
+    },
+    run: (ctx) => runSdk(ctx, 'tokens list', async () => {
+        const principal = principalFlag(ctx);
+        const limit = integerFlag(ctx, 'limit');
+        const cursor = stringFlag(ctx, 'cursor');
+        return await ctx.client().tokens.list({
+            ...(principal !== undefined && { principal }),
+            ...(limit !== undefined && { limit }),
+            ...(cursor !== undefined && { cursor: cursor }),
+        });
+    }, TOKENS_TABLE),
+};
+const get = {
+    kind: 'leaf',
+    name: 'get',
+    description: 'One API key, by id. No secret.',
+    usage: 'kindgi tokens get <token-id>',
+    run: (ctx) => runSdk(ctx, 'tokens get', async () => {
+        const id = requiredPositional(ctx, 0, 'token-id');
+        return await ctx.client().tokens.get(id);
+    }),
 };
 const revoke = {
     kind: 'leaf',
     name: 'revoke',
-    description: 'Revoke an API token.',
+    description: 'Revoke an API key: from its next request on, it is refused.',
     usage: 'kindgi tokens revoke <token-id>',
     run: (ctx) => runSdk(ctx, 'tokens revoke', async () => {
-        requiredPositional(ctx, 0, 'token-id');
-        throwUnwired('tokens.revoke');
+        const id = requiredPositional(ctx, 0, 'token-id');
+        await ctx.client().tokens.revoke(id);
+        return { tokenId: id, revoked: true };
     }),
 };
 export const tokensCommand = {
     kind: 'group',
     name: 'tokens',
-    description: 'Manage API tokens.',
-    subcommands: [create, revoke],
+    description: 'API keys for you, a person or a service account: create (its secret shown once), list, get, revoke.',
+    subcommands: [create, list, get, revoke],
 };
 //# sourceMappingURL=tokens.js.map

package/dist/commands/tokens.js.map

@@ -1 +1 @@
-{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/commands/tokens.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAEjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGxE,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,yBAAyB;IACtC,KAAK,EAAE,6CAA6C;IACpD,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,iKAAiK;SACpK;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;CACtF,CAAC;AAEF,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,sBAAsB;IACnC,KAAK,EAAE,iCAAiC;IACxC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QACtC,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QACvC,YAAY,CAAC,eAAe,CAAC,CAAC;IAChC,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAY;IACpC,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,oBAAoB;IACjC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC;CAC9B,CAAC"}
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../src/commands/tokens.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAKjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAEL,WAAW,EACX,QAAQ,EACR,kBAAkB,EAClB,MAAM,EACN,cAAc,EACd,UAAU,GACX,MAAM,cAAc,CAAC;AAGtB;;;;GAIG;AAEH,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,GAAmB,EAAE,IAAI,GAAG,KAAK;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjC,MAAM,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC3B,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACjD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,iBAAiB;YAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,UAAU,CAAC,KAAK,IAAI,uCAAuC,GAAG,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,WAAW,GAAG,gBAAgB,CAAC;AACrC,MAAM,OAAO,GAAqC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAE7F,yDAAyD;AACzD,MAAM,UAAU,WAAW,CAAC,GAAmB,EAAE,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACvC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAW,CAAY,CAAC;QACpE,IAAI,EAAE,IAAI,CAAC;YAAE,MAAM,IAAI,UAAU,CAAC,iCAAiC,CAAC,CAAC;QACrE,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAAC,gEAAgE,GAAG,GAAG,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;AAC1B,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,CAA8B,EAAE,EAAE,CACvD,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;AACxE,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEhE,6BAA6B;AAC7B,MAAM,YAAY,GAA4C;IAC5D,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;IACzB,OAAO,EAAE;QACP,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC1C,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;QACzD,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACtC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;QACpD,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE;QAC9C,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;QACtD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;QACpD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;QACpD,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;KACxD;CACF,CAAC;AAEF,MAAM,KAAK,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAU,CAAC;AAE3C,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,0OAA0O;IAC5O,KAAK,EACH,iKAAiK;IACnK,UAAU,EAAE;QACV,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,4EAA4E;SAC1F;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,oEAAoE;SAClF;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,gCAAgC,EAAE;QAC1E,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,sEAAsE;SACpF;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iCAAiC,EAAE;QACzE,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,yDAAyD;SACvE;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,cAAc,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAE,KAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,UAAU,CAAC,wCAAwC,IAAI,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC7C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACvC,MAAM,YAAY,GAAG,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC/C,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,IAA8B,EAAE,CAAC;YACnE,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAkB,EAAE,CAAC;YACjE,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,SAAkB,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC;SACjD,CAAC,CAAC;QACH,OAAO;YACL,GAAG,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;YAC1C,MAAM,EAAE,uBAAuB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,wCAAwC;SAC/F,CAAC;IACJ,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,IAAI,GAAgB;IACxB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EACT,8JAA8J;IAChK,KAAK,EAAE,qFAAqF;IAC5F,UAAU,EAAE;QACV,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,6CAA6C,EAAE;QACnF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE;QAClE,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kEAAkE;SAChF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CACJ,GAAG,EACH,aAAa,EACb,KAAK,IAAI,EAAE;QACT,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;YACpC,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7C,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;SACzD,CAAC,CAAC;IACL,CAAC,EACD,YAAY,CACb;CACJ,CAAC;AAEF,MAAM,GAAG,GAAgB;IACvB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,gCAAgC;IAC7C,KAAK,EAAE,8BAA8B;IACrC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE;QACnC,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAClD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAW,CAAC,CAAC;IACpD,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,GAAgB;IAC1B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,6DAA6D;IAC1E,KAAK,EAAE,iCAAiC;IACxC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,EAAE,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;QAClD,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAW,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAY;IACpC,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,QAAQ;IACd,WAAW,EACT,qGAAqG;IACvG,WAAW,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC;CACzC,CAAC"}

package/dist/commands/tools.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/commands/tools.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,YAAY,CAAC;AAsKvD,eAAO,MAAM,YAAY,EAAE,OAK1B,CAAC"}
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/commands/tools.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,OAAO,EAAe,MAAM,YAAY,CAAC;AAuKvD,eAAO,MAAM,YAAY,EAAE,OAK1B,CAAC"}

package/dist/commands/tools.js

@@ -1,5 +1,6 @@
 // SPDX-License-Identifier: Apache-2.0
 // Copyright (C) 2026 Kindgi Inc.
+import { UsageError } from '../errors.js';
 import { projectIdFlag, readJsonInput, requiredPositional, runSdk, stringFlag, truncateCell, } from './helpers.js';
 /** `tools list --table`. */
 const TOOLS_TABLE = {
@@ -32,7 +33,7 @@ const list = {
         const limitStr = stringFlag(ctx, 'limit');
         const limit = limitStr !== undefined ? Number.parseInt(limitStr, 10) : undefined;
         if (limit !== undefined && Number.isNaN(limit)) {
-            throw new Error(`--limit must be an integer, got "${limitStr}"`);
+            throw new UsageError(`--limit must be an integer, got "${limitStr}"`);
         }
         return await ctx.client().tools.list({
             ...(name !== undefined && { name }),
@@ -69,7 +70,7 @@ const publish = {
     run: (ctx) => runSdk(ctx, 'tools publish', async () => {
         const manifestText = stringFlag(ctx, 'manifest');
         if (manifestText === undefined)
-            throw new Error('--manifest=<json-or-@file> is required');
+            throw new UsageError('--manifest=<json-or-@file> is required');
         const manifest = (await readJsonInput(manifestText));
         const projectId = await projectIdFlag(ctx);
         return await ctx.client().tools.register(manifest, { projectId });
@@ -111,7 +112,7 @@ const versions = {
         const limitStr = stringFlag(ctx, 'limit');
         const limit = limitStr !== undefined ? Number.parseInt(limitStr, 10) : undefined;
         if (limit !== undefined && Number.isNaN(limit)) {
-            throw new Error(`--limit must be an integer, got "${limitStr}"`);
+            throw new UsageError(`--limit must be an integer, got "${limitStr}"`);
         }
         const includeTombstoned = ctx.options['include-tombstoned'] === true;
         return await ctx.client().tools.versions.list(toolId, {

package/dist/commands/tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/commands/tools.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAKjC,OAAO,EAEL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,MAAM,EACN,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAC;AAGtB,4BAA4B;AAC5B,MAAM,WAAW,GAAoC;IACnD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;IACzB,OAAO,EAAE;QACP,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAChD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QACxD,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE;KAC7E;CACF,CAAC;AAEF,MAAM,IAAI,GAAgB;IACxB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,wBAAwB;IACrC,KAAK,EAAE,kEAAkE;IACzE,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;QACzF,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qDAAqD;SACnE;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kEAAkE;SAChF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CACJ,GAAG,EACH,YAAY,EACZ,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,EACD,WAAW,CACZ;CACJ,CAAC;AAEF,MAAM,GAAG,GAAgB;IACvB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,4CAA4C;IACzD,KAAK,EAAE,4BAA4B;IACnC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC;IACxD,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,OAAO,GAAgB;IAC3B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,SAAS;IACf,WAAW,EACT,2GAA2G;IAC7G,KAAK,EAAE,0EAA0E;IACjF,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,2EAA2E;SACzF;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,qFAAqF;SACxF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjD,IAAI,YAAY,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,YAAY,CAAC,CAAS,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,uFAAuF;IACzF,KAAK,EAAE,6CAA6C;IACpD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,QAAQ,GAAgB;IAC5B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,qEAAqE;IAClF,KAAK,EAAE,qFAAqF;IAC5F,UAAU,EAAE;QACV,oBAAoB,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,oEAAoE;SAClF;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wDAAwD;SACtE;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kEAAkE;SAChF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,GAAG,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,IAAI,CAAC;QACrE,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAgB,EAAE;YAC9D,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,gDAAgD;IAC7D,KAAK,EAAE,8CAA8C;IACrD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,SAAS,GAAgB;IAC7B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,mDAAmD;IAChE,KAAK,EAAE,4CAA4C;IACnD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IAChF,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,4BAA4B;IACzC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;CAC/E,CAAC"}
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/commands/tools.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAKjC,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAEL,aAAa,EACb,aAAa,EACb,kBAAkB,EAClB,MAAM,EACN,UAAU,EACV,YAAY,GACb,MAAM,cAAc,CAAC;AAGtB,4BAA4B;AAC5B,MAAM,WAAW,GAAoC;IACnD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI;IACzB,OAAO,EAAE;QACP,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAChD,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE;QACxD,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE;KAC7E;CACF,CAAC;AAEF,MAAM,IAAI,GAAgB;IACxB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,wBAAwB;IACrC,KAAK,EAAE,kEAAkE;IACzE,UAAU,EAAE;QACV,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,kDAAkD,EAAE;QACzF,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,qDAAqD;SACnE;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kEAAkE;SAChF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CACJ,GAAG,EACH,YAAY,EACZ,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,UAAU,CAAC,oCAAoC,QAAQ,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACnC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;SACtC,CAAC,CAAC;IACL,CAAC,EACD,WAAW,CACZ;CACJ,CAAC;AAEF,MAAM,GAAG,GAAgB;IACvB,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,KAAK;IACX,WAAW,EAAE,4CAA4C;IACzD,KAAK,EAAE,4BAA4B;IACnC,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAgB,CAAC,CAAC;IACxD,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,OAAO,GAAgB;IAC3B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,SAAS;IACf,WAAW,EACT,2GAA2G;IAC7G,KAAK,EAAE,0EAA0E;IACjF,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,2EAA2E;SACzF;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,WAAW,EACT,qFAAqF;SACxF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACjD,IAAI,YAAY,KAAK,SAAS;YAC5B,MAAM,IAAI,UAAU,CAAC,wCAAwC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,CAAC,MAAM,aAAa,CAAC,YAAY,CAAC,CAAS,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QAC3C,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,YAAY;IAClB,WAAW,EACT,uFAAuF;IACzF,KAAK,EAAE,6CAA6C;IACpD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,kBAAkB,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,QAAQ,GAAgB;IAC5B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,qEAAqE;IAClF,KAAK,EAAE,qFAAqF;IAC5F,UAAU,EAAE;QACV,oBAAoB,EAAE;YACpB,IAAI,EAAE,SAAS;YACf,WAAW,EAAE,oEAAoE;SAClF;QACD,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,wDAAwD;SACtE;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,kEAAkE;SAChF;KACF;IACD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,UAAU,CAAC,oCAAoC,QAAQ,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,iBAAiB,GAAG,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,IAAI,CAAC;QACrE,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAgB,EAAE;YAC9D,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,MAAe,EAAE,CAAC;YACxD,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;YACrC,GAAG,CAAC,iBAAiB,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,UAAU,GAAgB;IAC9B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,aAAa;IACnB,WAAW,EAAE,gDAAgD;IAC7D,KAAK,EAAE,8CAA8C;IACrD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,KAAK,IAAI,EAAE;QAC1C,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,SAAS,GAAgB;IAC7B,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,WAAW;IACjB,WAAW,EAAE,mDAAmD;IAChE,KAAK,EAAE,4CAA4C;IACnD,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAgB,EAAE,OAAO,CAAC,CAAC;IAChF,CAAC,CAAC;CACL,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,4BAA4B;IACzC,WAAW,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC;CAC/E,CAAC"}

package/dist/commands/unwired.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"unwired.d.ts","sourceRoot":"","sources":["../../src/commands/unwired.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAQ/C,CAAC;AAMH;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAwBtD,CAAC;AAEH,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAMzE;AAED,yEAAyE;AACzE,wBAAgB,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAKxD;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,GAAE,SAAS,MAAM,EAAO,GAC7B,SAAS,OAAO,EAAE,CAEpB"}
+{"version":3,"file":"unwired.d.ts","sourceRoot":"","sources":["../../src/commands/unwired.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAA6B,CAAC;AAE/E;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAKtD,CAAC;AAEH,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAMzE;AAED,yEAAyE;AACzE,wBAAgB,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAKxD;AAED,wEAAwE;AACxE,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,SAAS,OAAO,EAAE,EAC5B,MAAM,GAAE,SAAS,MAAM,EAAO,GAC7B,SAAS,OAAO,EAAE,CAEpB"}