@kodycodes/cli 1.26.1 → 1.26.3

package/dist/api-token.js

@@ -1,238 +0,0 @@
-import { loadStoredApiToken, } from './api-token-store.js';
-import { apiTokenEnvVar, defaultApiUrl, defaultMcpUrl, } from './defaults.js';
-/** ADR 0056 `short` absolute max (24h), used only to infer hint lifetime. */
-const shortAbsoluteLifetimeMs = 24 * 60 * 60 * 1000;
-/** Platform tracking for login OAuth as CapabilityProxy / package-graph Bearer. */
-export const localExecuteOauthPlatformIssueUrl = 'https://github.com/kentcdodds/kody/issues/2812';
-const loopbackHosts = new Set(['localhost', '127.0.0.1', '[::1]', '::1']);
-function tryParseUrl(value) {
-    try {
-        return new URL(value);
-    }
-    catch {
-        return null;
-    }
-}
-function isWorkersDevHostname(hostname) {
-    return hostname.endsWith('.workers.dev');
-}
-/** Whether a login OAuth bearer may be sent to this API origin. */
-export function isPairedApiUrl(apiUrl = defaultApiUrl, mcpUrl = defaultMcpUrl) {
-    const api = tryParseUrl(apiUrl);
-    const mcp = tryParseUrl(mcpUrl);
-    if (!api || !mcp)
-        return false;
-    const apiIsLoopback = loopbackHosts.has(api.hostname.toLowerCase());
-    const mcpIsLoopback = loopbackHosts.has(mcp.hostname.toLowerCase());
-    if (apiIsLoopback && mcpIsLoopback) {
-        return ['http:', 'https:'].includes(api.protocol) &&
-            ['http:', 'https:'].includes(mcp.protocol);
-    }
-    if (api.protocol !== 'https:' || mcp.protocol !== 'https:')
-        return false;
-    const apiIsWorkersDev = isWorkersDevHostname(api.hostname);
-    const mcpIsWorkersDev = isWorkersDevHostname(mcp.hostname);
-    if (apiIsWorkersDev || mcpIsWorkersDev) {
-        if (!apiIsWorkersDev || !mcpIsWorkersDev)
-            return false;
-        const apiLabels = api.hostname.toLowerCase().split('.');
-        const mcpLabels = mcp.hostname.toLowerCase().split('.');
-        return (apiLabels.length === mcpLabels.length &&
-            apiLabels.slice(1).join('.') === mcpLabels.slice(1).join('.') &&
-            apiLabels[0] === `${mcpLabels[0]}-api`);
-    }
-    return api.hostname.toLowerCase() === `api.${mcp.hostname.toLowerCase()}`;
-}
-export function expectedPairedApiOrigin(mcpUrl) {
-    const mcp = tryParseUrl(mcpUrl);
-    if (!mcp)
-        return 'a paired API origin';
-    if (loopbackHosts.has(mcp.hostname.toLowerCase())) {
-        return 'a loopback API origin';
-    }
-    const hostname = mcp.hostname.toLowerCase();
-    if (isWorkersDevHostname(hostname)) {
-        const labels = hostname.split('.');
-        labels[0] = `${labels[0]}-api`;
-        return `https://${labels.join('.')}`;
-    }
-    return `https://api.${hostname}`;
-}
-/**
- * Scoped Open API / CapabilityProxy token (`kody_at_…`). Same source for
- * `execute --local`, token-only cloud execute, and Open API search/whoami.
- */
-export function readApiToken(values = {}, env = process.env) {
-    const token = (values.token ?? env[apiTokenEnvVar] ?? '').trim();
-    return token.length > 0 ? token : null;
-}
-/**
- * Resolve a scoped API token without falling back to `kody login` OAuth.
- * Priority: `--token` / `KODY_API_TOKEN` → stored bootstrap/API token.
- */
-export function resolveScopedApiToken(input = {}) {
-    const token = readApiToken(input.tokenValues, input.env);
-    if (token)
-        return token;
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    const loadApi = input.loadApiToken ?? loadStoredApiToken;
-    return loadApi(apiUrl, input.apiTokenBackend, input.apiTokenResolution)?.token ?? null;
-}
-/** True when the bearer looks like a minted Open API token (not MCP OAuth). */
-export function isScopedApiToken(token) {
-    return token.startsWith('kody_at_');
-}
-/**
- * How to mint a scoped token for CI/headless. Interactive agents on MCP should
- * prefer `cliCredentialBootstrap` → `auth bootstrap` instead.
- */
-export function apiTokenMintInstructions() {
-    return `For CI/headless only: mint with the Kody MCP \`api\` tool \`tokenCreate\` (include \`org:execute\` plus the capability scopes this command needs, e.g. \`package:execute\` / \`integration:read\`) and pass --token or set ${apiTokenEnvVar}.`;
-}
-/**
- * CapabilityProxy refused the token outright (not a missing scope): one line
- * saying so, then one line with the command that fixes it.
- */
-export function capabilityProxyForbiddenMessage(input) {
-    const reason = input.serverMessage ? `: ${input.serverMessage}` : '';
-    return (`The API token is not allowed to use CapabilityProxy (${input.code ?? 'forbidden'})${reason}.\n` +
-        `Fix: run \`npx @kodycodes/cli login\` (agents on Kody MCP: ${cliBootstrapInstructions()}; CI: tokenCreate with \`org:execute\`, passed via --token or ${apiTokenEnvVar}).`);
-}
-/** Preferred interactive path for agents already on Kody MCP (ADR 0056). */
-export function cliBootstrapInstructions(lifetime = 'short') {
-    return `From MCP, call \`cliCredentialBootstrap\` (MCP \`api\` / \`kody.cliCredentialBootstrap\`), then run \`npx @kodycodes/cli auth bootstrap --code <kody_bc_…> --lifetime ${lifetime}\``;
-}
-/**
- * Infer short|long from a stored token's absolute expiry. Tokens that can live
- * longer than the `short` absolute max are treated as `long` so
- * `insufficient_scope` hints remint with the same lifetime class.
- */
-export function inferCliTokenLifetimeAlias(stored, nowMs = Date.now()) {
-    if (!stored)
-        return 'short';
-    const absoluteMs = Date.parse(stored.maxExpiresAt ?? '') || Date.parse(stored.expiresAt ?? '');
-    if (!Number.isFinite(absoluteMs))
-        return 'short';
-    return absoluteMs - nowMs > shortAbsoluteLifetimeMs ? 'long' : 'short';
-}
-/** `--lifetime short|long` fragment for auth bootstrap hint commands. */
-export function cliBootstrapLifetimeFlags(lifetime = 'short') {
-    return `--lifetime ${lifetime}`;
-}
-/** `{ lifetime: "short"|"long" }` for cliCredentialBootstrap hint calls. */
-export function cliBootstrapLifetimeMintFields(lifetime = 'short') {
-    return { lifetime };
-}
-/** Lifetime hint from the stored API token for `apiUrl`, defaulting to short. */
-export function currentStoredTokenLifetimeAlias(apiUrl = defaultApiUrl, nowMs = Date.now(), loadApiToken = loadStoredApiToken) {
-    return inferCliTokenLifetimeAlias(loadApiToken(apiUrl), nowMs);
-}
-/** Token-only Open API paths (search / whoami / cloud token execute) with no token. */
-export function missingApiTokenMessage(purpose) {
-    return `${purpose} needs a scoped Kody API token. ${cliBootstrapInstructions()}, or ${apiTokenMintInstructions()}`;
-}
-/**
- * `execute --local` with neither env/`--token`, stored bootstrap token, nor
- * `kody login`. Prefer bootstrap (MCP) → login → tokenCreate (CI).
- */
-export function missingLocalExecuteAuthMessage(purpose = 'execute --local') {
-    return `${purpose} needs auth. ${cliBootstrapInstructions()}; or run \`kody login\`; or for CI/headless, ${apiTokenMintInstructions()}`;
-}
-/** Cloud search / whoami / execute when the process has neither a session nor a token. */
-export function missingCliAuthMessage() {
-    return `Not logged in, and no API token is set. ${cliBootstrapInstructions()}; or run \`kody login\` for browser OAuth (search, whoami, cloud execute, and login-backed \`execute --local\`); or for CI/headless, ${apiTokenMintInstructions()}`;
-}
-/** 401 when CapabilityProxy rejected a non-`kody_at_` bearer (typically CLI OAuth). */
-export function rejectedOauthBearerMessage() {
-    return `Kody rejected the bearer from \`kody login\`: the Open API still accepts only scoped \`kody_at_…\` API tokens on CapabilityProxy / package-graph (not MCP OAuth). See ${localExecuteOauthPlatformIssueUrl}. Until that lands, ${apiTokenMintInstructions()}`;
-}
-export function readInsufficientScopeDetails(body) {
-    const details = isRecord(body) && isRecord(body.error) && isRecord(body.error.details)
-        ? body.error.details
-        : null;
-    if (!details)
-        return { requiredScope: null, mintScopes: null, denial: null };
-    const requiredScope = readNonEmptyString(details.required_scope) ??
-        readNonEmptyString(details.required_permission) ??
-        readStringList(details.required_scopes)?.join(', ') ??
-        null;
-    return {
-        requiredScope,
-        mintScopes: readStringList(details.mint_scopes),
-        denial: readNonEmptyString(details.denial),
-    };
-}
-/** `npx @kodycodes/cli auth bootstrap --lifetime short --scopes a,b` */
-export function cliBootstrapScopesCommand(scopes, lifetimeFlags = 'short') {
-    const flags = lifetimeFlags === 'short' || lifetimeFlags === 'long'
-        ? cliBootstrapLifetimeFlags(lifetimeFlags)
-        : lifetimeFlags;
-    return `npx @kodycodes/cli auth bootstrap ${flags} --scopes ${scopes.join(',')}`;
-}
-/** `cliCredentialBootstrap({ lifetime: "short", scopes: ["a", "b"] })` */
-export function cliBootstrapMintCall(scopes, lifetime = 'short') {
-    const fieldsRecord = lifetime === 'short' || lifetime === 'long'
-        ? cliBootstrapLifetimeMintFields(lifetime)
-        : lifetime;
-    const fields = [
-        ...Object.entries(fieldsRecord).map(([key, value]) => `${key}: ${JSON.stringify(value)}`),
-        `scopes: [${scopes.map((scope) => JSON.stringify(scope)).join(', ')}]`,
-    ];
-    return `cliCredentialBootstrap({ ${fields.join(', ')} })`;
-}
-export function insufficientScopeMessage(input) {
-    const required = input.requiredScope ?? null;
-    const lifetime = input.currentLifetime === 'long' || input.currentLifetime === 'short'
-        ? input.currentLifetime
-        : 'short';
-    const lifetimeFlags = cliBootstrapLifetimeFlags(lifetime);
-    const lifetimeMint = cliBootstrapLifetimeMintFields(lifetime);
-    if (input.denial === 'missing_permission') {
-        return `Kody returned insufficient_scope: your org role does not grant ${required ? `"${required}"` : 'the required permission'}. A new token cannot add it; an org Owner can grant it.`;
-    }
-    if (!required) {
-        return `Kody returned insufficient_scope. Mint a token that includes the missing scope: run \`${cliBootstrapScopesCommand(['<scope>', '…'], lifetimeFlags)}\` after \`kody login\`, or from Kody MCP call \`${cliBootstrapMintCall(['<scope>', '…'], lifetimeMint)}\` and run its cli_command. Scopes replace the defaults, so list every scope you need. For CI/headless, mint with tokenCreate and pass --token or set ${apiTokenEnvVar}.`;
-    }
-    const mintScopes = input.mintScopes && input.mintScopes.length > 0
-        ? input.mintScopes
-        : input.currentScopes && input.currentScopes.length > 0
-            ? [...new Set([...input.currentScopes, ...required.split(/,\s*/)])].sort()
-            : null;
-    if (!mintScopes) {
-        return `Kody returned insufficient_scope: this token is missing "${required}". Mint a token whose scopes include "${required}" plus the ones you already use (scopes replace the defaults): run \`${cliBootstrapScopesCommand(['<current scopes>', required], lifetimeFlags)}\` after \`kody login\`, or from Kody MCP call \`${cliBootstrapMintCall(['<current scopes>', required], lifetimeMint)}\` and run its cli_command. For CI/headless, mint with tokenCreate including "${required}" and pass --token or set ${apiTokenEnvVar}.`;
-    }
-    return `Kody returned insufficient_scope: this token is missing "${required}". Mint one that includes it: run \`${cliBootstrapScopesCommand(mintScopes, lifetimeFlags)}\` after \`kody login\`, or from Kody MCP call \`${cliBootstrapMintCall(mintScopes, lifetimeMint)}\` and run its cli_command. For CI/headless, mint with tokenCreate using those scopes and pass --token or set ${apiTokenEnvVar}.`;
-}
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-function readNonEmptyString(value) {
-    return typeof value === 'string' && value.trim() ? value.trim() : null;
-}
-function readStringList(value) {
-    if (!Array.isArray(value))
-        return null;
-    const list = value
-        .filter((item) => typeof item === 'string')
-        .map((item) => item.trim())
-        .filter(Boolean);
-    return list.length > 0 ? list : null;
-}
-export function featureDisabledMessage() {
-    return 'Kody returned feature_disabled: CapabilityProxy is not enabled for this Kody account (feature flag `local-execute`). `execute --local` and token-auth cloud execute both stop here; minting another token does not bypass the flag. Browser `kody login` can still run cloud execute over MCP.';
-}
-export function requireApiToken(values = {}, env = process.env, purpose = 'this command', options = {}) {
-    const token = resolveScopedApiToken({
-        tokenValues: values,
-        env,
-        ...options,
-    });
-    if (!token)
-        throw new Error(missingApiTokenMessage(purpose));
-    return token;
-}
-/** True when the user passed `--token` (not only the env var). */
-export function hasExplicitTokenFlag(values) {
-    return typeof values.token === 'string' && values.token.trim().length > 0;
-}
-//# sourceMappingURL=api-token.js.map

package/dist/api-token.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"api-token.js","sourceRoot":"","sources":["../src/api-token.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,kBAAkB,GAElB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACN,cAAc,EACd,aAAa,EACb,aAAa,GACb,MAAM,eAAe,CAAA;AAMtB,6EAA6E;AAC7E,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnD,mFAAmF;AACnF,MAAM,CAAC,MAAM,iCAAiC,GAC7C,gDAAgD,CAAA;AAYjD,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAA;AAEzE,SAAS,WAAW,CAAC,KAAa;IACjC,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC7C,OAAO,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAA;AACzC,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAC7B,SAAiB,aAAa,EAC9B,SAAiB,aAAa;IAE9B,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC/B,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAA;IAE9B,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IACnE,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAA;IACnE,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;QACpC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;YAChD,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC5C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACxE,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,eAAe,GAAG,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IAC1D,IAAI,eAAe,IAAI,eAAe,EAAE,CAAC;QACxC,IAAI,CAAC,eAAe,IAAI,CAAC,eAAe;YAAE,OAAO,KAAK,CAAA;QACtD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvD,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACvD,OAAO,CACN,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;YACrC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC7D,SAAS,CAAC,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,CACtC,CAAA;IACF,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAA;AAC1E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACrD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAC/B,IAAI,CAAC,GAAG;QAAE,OAAO,qBAAqB,CAAA;IACtC,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACnD,OAAO,uBAAuB,CAAA;IAC/B,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;IAC3C,IAAI,oBAAoB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;QAC9B,OAAO,WAAW,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IACrC,CAAC;IACD,OAAO,eAAe,QAAQ,EAAE,CAAA;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC3B,SAA6B,EAAE,EAC/B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IAChE,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACvC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACpC,QAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;IACxD,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,YAAY,IAAI,kBAAkB,CAAA;IACxD,OAAO,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,KAAK,IAAI,IAAI,CAAA;AACvF,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACvC,OAAO,8NAA8N,cAAc,GAAG,CAAA;AACvP,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAG/C;IACA,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACpE,OAAO,CACN,wDAAwD,KAAK,CAAC,IAAI,IAAI,WAAW,IAAI,MAAM,KAAK;QAChG,8DAA8D,wBAAwB,EAAE,iEAAiE,cAAc,IAAI,CAC3K,CAAA;AACF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,wBAAwB,CACvC,WAAkC,OAAO;IAEzC,OAAO,yKAAyK,QAAQ,IAAI,CAAA;AAC7L,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACzC,MAA6E,EAC7E,QAAgB,IAAI,CAAC,GAAG,EAAE;IAE1B,IAAI,CAAC,MAAM;QAAE,OAAO,OAAO,CAAA;IAC3B,MAAM,UAAU,GACf,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;IAC5E,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAA;IAChD,OAAO,UAAU,GAAG,KAAK,GAAG,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAA;AACvE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,yBAAyB,CACxC,WAAkC,OAAO;IAEzC,OAAO,cAAc,QAAQ,EAAE,CAAA;AAChC,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B,CAC7C,WAAkC,OAAO;IAEzC,OAAO,EAAE,QAAQ,EAAE,CAAA;AACpB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,+BAA+B,CAC9C,SAAiB,aAAa,EAC9B,QAAgB,IAAI,CAAC,GAAG,EAAE,EAC1B,eAA0C,kBAAkB;IAE5D,OAAO,0BAA0B,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACrD,OAAO,GAAG,OAAO,mCAAmC,wBAAwB,EAAE,QAAQ,wBAAwB,EAAE,EAAE,CAAA;AACnH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,8BAA8B,CAC7C,UAAkB,iBAAiB;IAEnC,OAAO,GAAG,OAAO,gBAAgB,wBAAwB,EAAE,gDAAgD,wBAAwB,EAAE,EAAE,CAAA;AACxI,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,qBAAqB;IACpC,OAAO,2CAA2C,wBAAwB,EAAE,wIAAwI,wBAAwB,EAAE,EAAE,CAAA;AACjP,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,0BAA0B;IACzC,OAAO,yKAAyK,iCAAiC,uBAAuB,wBAAwB,EAAE,EAAE,CAAA;AACrQ,CAAC;AAWD,MAAM,UAAU,4BAA4B,CAAC,IAAa;IACzD,MAAM,OAAO,GACZ,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACrE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;QACpB,CAAC,CAAC,IAAI,CAAA;IACR,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;IAC5E,MAAM,aAAa,GAClB,kBAAkB,CAAC,OAAO,CAAC,cAAc,CAAC;QAC1C,kBAAkB,CAAC,OAAO,CAAC,mBAAmB,CAAC;QAC/C,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC;QACnD,IAAI,CAAA;IACL,OAAO;QACN,aAAa;QACb,UAAU,EAAE,cAAc,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/C,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC1C,CAAA;AACF,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,yBAAyB,CACxC,MAA6B,EAC7B,gBAAgD,OAAO;IAEvD,MAAM,KAAK,GACV,aAAa,KAAK,OAAO,IAAI,aAAa,KAAK,MAAM;QACpD,CAAC,CAAC,yBAAyB,CAAC,aAAa,CAAC;QAC1C,CAAC,CAAC,aAAa,CAAA;IACjB,OAAO,qCAAqC,KAAK,aAAa,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;AACjF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CACnC,MAA6B,EAC7B,WAAoE,OAAO;IAE3E,MAAM,YAAY,GACjB,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,MAAM;QAC1C,CAAC,CAAC,8BAA8B,CAAC,QAAQ,CAAC;QAC1C,CAAC,CAAC,QAAQ,CAAA;IACZ,MAAM,MAAM,GAAG;QACd,GAAG,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,GAAG,CAClC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CACpD;QACD,YAAY,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;KACtE,CAAA;IACD,OAAO,4BAA4B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,wBAAwB,CACvC,KAQC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,IAAI,IAAI,CAAA;IAC5C,MAAM,QAAQ,GACb,KAAK,CAAC,eAAe,KAAK,MAAM,IAAI,KAAK,CAAC,eAAe,KAAK,OAAO;QACpE,CAAC,CAAC,KAAK,CAAC,eAAe;QACvB,CAAC,CAAC,OAAO,CAAA;IACX,MAAM,aAAa,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAA;IACzD,MAAM,YAAY,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAA;IAC7D,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAC3C,OAAO,kEACN,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC,yBAC9B,yDAAyD,CAAA;IAC1D,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACf,OAAO,yFAAyF,yBAAyB,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,aAAa,CAAC,oDAAoD,oBAAoB,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,YAAY,CAAC,yJAAyJ,cAAc,GAAG,CAAA;IAC7a,CAAC;IACD,MAAM,UAAU,GACf,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAC9C,CAAC,CAAC,KAAK,CAAC,UAAU;QAClB,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;YACtD,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;YAC1E,CAAC,CAAC,IAAI,CAAA;IACT,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,4DAA4D,QAAQ,yCAAyC,QAAQ,wEAAwE,yBAAyB,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EAAE,aAAa,CAAC,oDAAoD,oBAAoB,CAAC,CAAC,kBAAkB,EAAE,QAAQ,CAAC,EAAE,YAAY,CAAC,iFAAiF,QAAQ,6BAA6B,cAAc,GAAG,CAAA;IAC1gB,CAAC;IACD,OAAO,4DAA4D,QAAQ,uCAAuC,yBAAyB,CAAC,UAAU,EAAE,aAAa,CAAC,oDAAoD,oBAAoB,CAAC,UAAU,EAAE,YAAY,CAAC,iHAAiH,cAAc,GAAG,CAAA;AAC3Y,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACtC,MAAM,IAAI,GAAG,KAAK;SAChB,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,OAAO,CAAC,CAAA;IACjB,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;AACrC,CAAC;AAED,MAAM,UAAU,sBAAsB;IACrC,OAAO,gSAAgS,CAAA;AACxS,CAAC;AAED,MAAM,UAAU,eAAe,CAC9B,SAA6B,EAAE,EAC/B,MAAyB,OAAO,CAAC,GAAG,EACpC,UAAkB,cAAc,EAChC,UAAmE,EAAE;IAErE,MAAM,KAAK,GAAG,qBAAqB,CAAC;QACnC,WAAW,EAAE,MAAM;QACnB,GAAG;QACH,GAAG,OAAO;KACV,CAAC,CAAA;IACF,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC,CAAA;IAC5D,OAAO,KAAK,CAAA;AACb,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,oBAAoB,CAAC,MAA0B;IAC9D,OAAO,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAA;AAC1E,CAAC"}

package/dist/auth-bootstrap.js

@@ -1,373 +0,0 @@
-import { assertTokenSafeApiUrl, capabilityProxyUrl } from './capability-proxy.js';
-import { cliName, defaultApiUrl } from './defaults.js';
-import { summarizeNonJsonErrorBody } from './http-error-body.js';
-import { describeNetworkError } from './network-error.js';
-import { readPackageVersion } from './package-info.js';
-import { saveStoredApiToken, } from './api-token-store.js';
-/** ADR 0056 one-shot bootstrap code prefix (`kody_bc_…`). */
-export const cliBootstrapCodePrefix = 'kody_bc_';
-/** Platform shape: `kody_bc_<16 alnum>_<32 base64url>`. */
-const bootstrapCodePattern = /^kody_bc_([a-z0-9]{16})_([A-Za-z0-9_-]{32})$/;
-export const bootstrapRedeemPath = 'v1/tokens/bootstrap/redeem';
-/** ADR 0056 idle / absolute lifetime caps (seconds). */
-export const cliTokenLifetimePolicy = {
-    minIdleTtlSeconds: 60,
-    /** Idle timeout at most 14 days. */
-    maxIdleTtlSeconds: 14 * 24 * 60 * 60,
-    /** Absolute lifetime at most 3 months. */
-    maxMaxLifetimeSeconds: 90 * 24 * 60 * 60,
-};
-/**
- * Input aliases for required token lifetimes. Sugar only: never stored on the
- * token. `short` suits single-task agents; `long` is the policy maximum.
- */
-export const cliTokenLifetimeAliases = {
-    short: {
-        idleTtlSeconds: 60 * 60,
-        maxLifetimeSeconds: 24 * 60 * 60,
-    },
-    long: {
-        idleTtlSeconds: cliTokenLifetimePolicy.maxIdleTtlSeconds,
-        maxLifetimeSeconds: cliTokenLifetimePolicy.maxMaxLifetimeSeconds,
-    },
-};
-export function parseCliBootstrapCode(value) {
-    const match = bootstrapCodePattern.exec(value.trim());
-    if (!match)
-        return null;
-    const [, codeId, secret] = match;
-    if (!codeId || !secret)
-        return null;
-    return { codeId, secret };
-}
-export function assertCliBootstrapCode(code) {
-    const trimmed = code.trim();
-    if (!parseCliBootstrapCode(trimmed)) {
-        throw new Error(`Invalid bootstrap code. Expected a one-shot ${cliBootstrapCodePrefix}… from cliCredentialBootstrap (MCP api / kody.cliCredentialBootstrap).`);
-    }
-    return trimmed;
-}
-/** Exact CLI flag syntax for a missing lifetime (ADR 0056). */
-export function cliTokenLifetimeMissingError() {
-    return ('Token lifetime is required. Pass --lifetime short|long, or both ' +
-        `--idle-ttl-seconds <n> and --max-lifetime-seconds <n> ` +
-        `(idle ${cliTokenLifetimePolicy.minIdleTtlSeconds}-${cliTokenLifetimePolicy.maxIdleTtlSeconds}s, ` +
-        `max age up to ${cliTokenLifetimePolicy.maxMaxLifetimeSeconds}s). ` +
-        'Single-task agents should use --lifetime short.');
-}
-/**
- * Resolve a required lifetime choice. Aliases expand to idle/max seconds for
- * validation; the redeem body still sends the alias or explicit seconds only.
- */
-export function resolveCliTokenLifetime(input) {
-    const aliasRaw = typeof input.lifetime === 'string' ? input.lifetime.trim() : '';
-    const hasAlias = aliasRaw.length > 0;
-    const hasIdle = input.idleTtlSeconds !== undefined;
-    const hasMax = input.maxLifetimeSeconds !== undefined;
-    if (!hasAlias && !hasIdle && !hasMax) {
-        throw new Error(cliTokenLifetimeMissingError());
-    }
-    if (hasAlias && (hasIdle || hasMax)) {
-        throw new Error('Pass --lifetime short|long, or both --idle-ttl-seconds and --max-lifetime-seconds, not both forms.');
-    }
-    if (hasAlias) {
-        if (!(aliasRaw in cliTokenLifetimeAliases)) {
-            throw new Error(`--lifetime must be short or long (got ${JSON.stringify(aliasRaw)}).`);
-        }
-        const lifetime = aliasRaw;
-        const resolved = cliTokenLifetimeAliases[lifetime];
-        return {
-            kind: 'alias',
-            lifetime,
-            idleTtlSeconds: resolved.idleTtlSeconds,
-            maxLifetimeSeconds: resolved.maxLifetimeSeconds,
-        };
-    }
-    if (!hasIdle || !hasMax) {
-        throw new Error('When not using --lifetime short|long, both --idle-ttl-seconds and --max-lifetime-seconds are required.');
-    }
-    const idleTtlSeconds = readRequiredInteger({
-        value: input.idleTtlSeconds,
-        min: cliTokenLifetimePolicy.minIdleTtlSeconds,
-        max: cliTokenLifetimePolicy.maxIdleTtlSeconds,
-        field: '--idle-ttl-seconds',
-    });
-    const maxLifetimeSeconds = readRequiredInteger({
-        value: input.maxLifetimeSeconds,
-        min: idleTtlSeconds,
-        max: cliTokenLifetimePolicy.maxMaxLifetimeSeconds,
-        field: '--max-lifetime-seconds',
-    });
-    return {
-        kind: 'explicit',
-        idleTtlSeconds,
-        maxLifetimeSeconds,
-    };
-}
-/** Build the redeem JSON body (alias or explicit seconds — never both). */
-export function bootstrapRedeemRequestBody(code, lifetime) {
-    if (lifetime.kind === 'alias') {
-        return { code, lifetime: lifetime.lifetime };
-    }
-    return {
-        code,
-        idle_ttl_seconds: lifetime.idleTtlSeconds,
-        max_lifetime_seconds: lifetime.maxLifetimeSeconds,
-    };
-}
-/** Parse a CLI `--idle-ttl-seconds` / `--max-lifetime-seconds` string flag. */
-export function parseCliLifetimeSecondsFlag(raw, flag) {
-    if (raw === undefined)
-        return undefined;
-    const trimmed = raw.trim();
-    if (!/^-?\d+$/.test(trimmed)) {
-        throw new Error(`${flag} must be an integer.`);
-    }
-    return Number(trimmed);
-}
-/**
- * Lifetime for redeem after a successful mint. Trusts the server's clamped
- * idle/max seconds (may be below CLI flag mins, or max below the requested
- * idle). Only coerces idle down when max < idle so the pair stays consistent.
- */
-export function resolveMintedRedeemLifetime(minted) {
-    const maxLifetimeSeconds = minted.max_lifetime_seconds;
-    const idleTtlSeconds = Math.min(minted.idle_ttl_seconds, maxLifetimeSeconds);
-    return {
-        kind: 'explicit',
-        idleTtlSeconds,
-        maxLifetimeSeconds,
-    };
-}
-/**
- * POST /v1/tokens/bootstrap/redeem with JSON `{ code, lifetime }` or
- * `{ code, idle_ttl_seconds, max_lifetime_seconds }` and **no** Authorization
- * header (ADR 0056). Returns the minted `kody_at_…` once.
- *
- * Pass `trustedMintLifetime` after cliCredentialBootstrap so server-clamped
- * seconds are redeemed without re-applying CLI flag mins (max may be below
- * the requested idle or below `--idle-ttl-seconds` minimum).
- */
-export async function redeemBootstrapCode(input) {
-    const code = assertCliBootstrapCode(input.code);
-    const lifetime = input.trustedMintLifetime
-        ? resolveMintedRedeemLifetime(input.trustedMintLifetime)
-        : resolveCliTokenLifetime({
-            lifetime: input.lifetime,
-            idleTtlSeconds: input.idleTtlSeconds,
-            maxLifetimeSeconds: input.maxLifetimeSeconds,
-        });
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    assertTokenSafeApiUrl(apiUrl);
-    const url = capabilityProxyUrl(apiUrl, bootstrapRedeemPath);
-    const fetchFn = input.fetchFn ?? fetch;
-    let response;
-    try {
-        response = await fetchFn(url, {
-            method: 'POST',
-            headers: {
-                accept: 'application/json',
-                'content-type': 'application/json',
-                'user-agent': `${cliName}/${readPackageVersion()}`,
-            },
-            body: JSON.stringify(bootstrapRedeemRequestBody(code, lifetime)),
-        });
-    }
-    catch (error) {
-        const reason = describeNetworkError(error);
-        throw new Error(`Could not reach the Kody API at ${url.origin} (${reason}). Check --api-url / KODY_API_URL and your network.`);
-    }
-    const body = await readJson(response);
-    if (!response.ok) {
-        throw describeRedeemFailure(response.status, body, url);
-    }
-    return parseRedeemResponse(body);
-}
-export function storedApiTokenFromRedeem(input) {
-    const token = input.redeemed.token.trim();
-    if (!token.startsWith('kody_at_')) {
-        throw new Error('Bootstrap redeem did not return a scoped kody_at_… API token.');
-    }
-    return {
-        version: 1,
-        apiUrl: input.apiUrl,
-        token,
-        tokenId: input.redeemed.id,
-        ...(input.redeemed.name ? { name: input.redeemed.name } : {}),
-        ...(Array.isArray(input.redeemed.scopes) ? { scopes: input.redeemed.scopes } : {}),
-        expiresAt: input.redeemed.expires_at ?? null,
-        maxExpiresAt: input.redeemed.max_expires_at ?? null,
-        createdVia: input.redeemed.created_via ?? 'cli-bootstrap',
-    };
-}
-/**
- * Redeem a one-shot `kody_bc_…` and persist the resulting API token for
- * `execute --local`. Never returns the token string to callers that print
- * success output — use `stored.tokenId` / backend kind only.
- */
-export async function authBootstrap(input) {
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    const redeemed = await redeemBootstrapCode({
-        code: input.code,
-        lifetime: input.lifetime,
-        idleTtlSeconds: input.idleTtlSeconds,
-        maxLifetimeSeconds: input.maxLifetimeSeconds,
-        apiUrl,
-        fetchFn: input.fetchFn,
-    });
-    const stored = storedApiTokenFromRedeem({ apiUrl, redeemed });
-    const saved = saveStoredApiToken(stored, input.backend, input.resolution);
-    return {
-        stored,
-        backendKind: saved.backend.kind,
-        ...(saved.backend.path ? { backendPath: saved.backend.path } : {}),
-    };
-}
-export const cliCredentialBootstrapOperationId = 'cliCredentialBootstrap';
-/**
- * Parse `--scopes`. Comma- or space-separated, deduped, order kept. The list
- * replaces cliCredentialBootstrap's default scopes; the server validates names.
- */
-export function parseCliScopesFlag(raw) {
-    if (raw === undefined)
-        return undefined;
-    const scopes = [
-        ...new Set(raw
-            .split(/[\s,]+/)
-            .map((scope) => scope.trim())
-            .filter(Boolean)),
-    ];
-    if (scopes.length === 0) {
-        throw new Error('--scopes needs at least one scope (e.g. --scopes org:execute,package:write).');
-    }
-    return scopes;
-}
-/** cliCredentialBootstrap params for an explicit scope list and lifetime. */
-export function bootstrapMintParams(scopes, lifetime) {
-    return {
-        scopes: [...scopes],
-        ...bootstrapMintLifetimeFields(lifetime),
-    };
-}
-export function bootstrapMintLifetimeFields(lifetime) {
-    return lifetime.kind === 'alias'
-        ? { lifetime: lifetime.lifetime }
-        : {
-            idle_ttl_seconds: lifetime.idleTtlSeconds,
-            max_lifetime_seconds: lifetime.maxLifetimeSeconds,
-        };
-}
-export function parseBootstrapMintResponse(body) {
-    if (!isRecord(body) ||
-        typeof body.bootstrap_code !== 'string' ||
-        typeof body.idle_ttl_seconds !== 'number' ||
-        typeof body.max_lifetime_seconds !== 'number') {
-        throw new Error('cliCredentialBootstrap returned an unexpected response.');
-    }
-    return {
-        bootstrap_code: body.bootstrap_code,
-        scopes: Array.isArray(body.scopes)
-            ? body.scopes.filter((scope) => typeof scope === 'string')
-            : [],
-        idle_ttl_seconds: body.idle_ttl_seconds,
-        max_lifetime_seconds: body.max_lifetime_seconds,
-    };
-}
-/**
- * Mint a bootstrap code with explicit `scopes` through the caller's current
- * Kody credential, then redeem and store it like `authBootstrap`. Redeems with
- * the minted idle/max seconds because the server may clamp the max lifetime to
- * a parent API token's remaining lifetime — those values must not be
- * re-validated as CLI lifetime flags (which would burn the one-shot code).
- */
-export async function authBootstrapWithScopes(input) {
-    const minted = parseBootstrapMintResponse(await input.mint(bootstrapMintParams(input.scopes, input.lifetime)));
-    const apiUrl = input.apiUrl || defaultApiUrl;
-    const redeemed = await redeemBootstrapCode({
-        code: minted.bootstrap_code,
-        trustedMintLifetime: {
-            idle_ttl_seconds: minted.idle_ttl_seconds,
-            max_lifetime_seconds: minted.max_lifetime_seconds,
-        },
-        apiUrl,
-        fetchFn: input.fetchFn,
-    });
-    const stored = storedApiTokenFromRedeem({ apiUrl, redeemed });
-    const saved = saveStoredApiToken(stored, input.backend, input.resolution);
-    return {
-        stored,
-        backendKind: saved.backend.kind,
-        ...(saved.backend.path ? { backendPath: saved.backend.path } : {}),
-    };
-}
-function readRequiredInteger(input) {
-    if (!Number.isInteger(input.value) ||
-        input.value < input.min ||
-        input.value > input.max) {
-        throw new Error(`${input.field} must be an integer between ${input.min} and ${input.max}.`);
-    }
-    return input.value;
-}
-function parseRedeemResponse(body) {
-    if (!isRecord(body) || typeof body.token !== 'string' || typeof body.id !== 'string') {
-        throw new Error('Bootstrap redeem returned an unexpected response.');
-    }
-    return {
-        token: body.token,
-        token_type: typeof body.token_type === 'string' ? body.token_type : undefined,
-        id: body.id,
-        name: typeof body.name === 'string' ? body.name : null,
-        scopes: Array.isArray(body.scopes)
-            ? body.scopes.filter((scope) => typeof scope === 'string')
-            : undefined,
-        status: typeof body.status === 'string' ? body.status : undefined,
-        idle_ttl_seconds: typeof body.idle_ttl_seconds === 'number' ? body.idle_ttl_seconds : undefined,
-        expires_at: typeof body.expires_at === 'string' ? body.expires_at : null,
-        max_expires_at: typeof body.max_expires_at === 'string' ? body.max_expires_at : null,
-        created_via: typeof body.created_via === 'string' ? body.created_via : undefined,
-    };
-}
-function describeRedeemFailure(status, body, url) {
-    const failure = readErrorBody(body);
-    const detail = failure?.message ? ` Server said: ${failure.message}` : '';
-    if (status === 400 || status === 401 || status === 403 || status === 404) {
-        return new Error(`Bootstrap redeem failed (HTTP ${status}). The code may be invalid, expired, or already used. Call cliCredentialBootstrap again for a fresh code.${detail}`);
-    }
-    return new Error(failure?.message ??
-        `Bootstrap redeem failed with HTTP ${status} (${url.pathname}).${detail}`);
-}
-async function readJson(response) {
-    const text = await response.text();
-    if (!text)
-        return null;
-    try {
-        return JSON.parse(text);
-    }
-    catch {
-        return text;
-    }
-}
-function readErrorBody(body) {
-    if (!isRecord(body) || body.error == null) {
-        if (typeof body === 'string' && body.trim()) {
-            return { code: null, message: summarizeNonJsonErrorBody(body) };
-        }
-        if (isRecord(body) && typeof body.message === 'string') {
-            return { code: null, message: body.message };
-        }
-        return null;
-    }
-    const { error } = body;
-    if (typeof error === 'string')
-        return { code: null, message: error };
-    if (isRecord(error)) {
-        const code = typeof error.code === 'string' ? error.code : null;
-        const message = typeof error.message === 'string' ? error.message : code ?? JSON.stringify(error);
-        return { code, message };
-    }
-    return { code: null, message: String(error) };
-}
-function isRecord(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-//# sourceMappingURL=auth-bootstrap.js.map

package/dist/auth-bootstrap.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-bootstrap.js","sourceRoot":"","sources":["../src/auth-bootstrap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EACN,kBAAkB,GAElB,MAAM,sBAAsB,CAAA;AAG7B,6DAA6D;AAC7D,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAA;AAEhD,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,8CAA8C,CAAA;AAE3E,MAAM,CAAC,MAAM,mBAAmB,GAAG,4BAA4B,CAAA;AAE/D,wDAAwD;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,iBAAiB,EAAE,EAAE;IACrB,oCAAoC;IACpC,iBAAiB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;IACpC,0CAA0C;IAC1C,qBAAqB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE;CAC/B,CAAA;AAEV;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACtC,KAAK,EAAE;QACN,cAAc,EAAE,EAAE,GAAG,EAAE;QACvB,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;KAChC;IACD,IAAI,EAAE;QACL,cAAc,EAAE,sBAAsB,CAAC,iBAAiB;QACxD,kBAAkB,EAAE,sBAAsB,CAAC,qBAAqB;KAChE;CACQ,CAAA;AA2CV,MAAM,UAAU,qBAAqB,CAAC,KAAa;IAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACvB,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,CAAA;IAChC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACnC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAY;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAA;IAC3B,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACd,+CAA+C,sBAAsB,wEAAwE,CAC7I,CAAA;IACF,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,4BAA4B;IAC3C,OAAO,CACN,kEAAkE;QAClE,wDAAwD;QACxD,SAAS,sBAAsB,CAAC,iBAAiB,IAAI,sBAAsB,CAAC,iBAAiB,KAAK;QAClG,iBAAiB,sBAAsB,CAAC,qBAAqB,MAAM;QACnE,iDAAiD,CACjD,CAAA;AACF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACA,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAChF,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAA;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,cAAc,KAAK,SAAS,CAAA;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,kBAAkB,KAAK,SAAS,CAAA;IAErD,IAAI,CAAC,QAAQ,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CACd,oGAAoG,CACpG,CAAA;IACF,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACd,IAAI,CAAC,CAAC,QAAQ,IAAI,uBAAuB,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACd,yCAAyC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CACrE,CAAA;QACF,CAAC;QACD,MAAM,QAAQ,GAAG,QAAiC,CAAA;QAClD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;QAClD,OAAO;YACN,IAAI,EAAE,OAAO;YACb,QAAQ;YACR,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,kBAAkB,EAAE,QAAQ,CAAC,kBAAkB;SAC/C,CAAA;IACF,CAAC;IACD,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,wGAAwG,CACxG,CAAA;IACF,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC;QAC1C,KAAK,EAAE,KAAK,CAAC,cAAe;QAC5B,GAAG,EAAE,sBAAsB,CAAC,iBAAiB;QAC7C,GAAG,EAAE,sBAAsB,CAAC,iBAAiB;QAC7C,KAAK,EAAE,oBAAoB;KAC3B,CAAC,CAAA;IACF,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;QAC9C,KAAK,EAAE,KAAK,CAAC,kBAAmB;QAChC,GAAG,EAAE,cAAc;QACnB,GAAG,EAAE,sBAAsB,CAAC,qBAAqB;QACjD,KAAK,EAAE,wBAAwB;KAC/B,CAAC,CAAA;IACF,OAAO;QACN,IAAI,EAAE,UAAU;QAChB,cAAc;QACd,kBAAkB;KAClB,CAAA;AACF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,0BAA0B,CACzC,IAAY,EACZ,QAAkC;IAElC,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAA;IAC7C,CAAC;IACD,OAAO;QACN,IAAI;QACJ,gBAAgB,EAAE,QAAQ,CAAC,cAAc;QACzC,oBAAoB,EAAE,QAAQ,CAAC,kBAAkB;KACjD,CAAA;AACF,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,2BAA2B,CAC1C,GAAuB,EACvB,IAAqD;IAErD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IAC1B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAA;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,CAAA;AACvB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,MAG3C;IACA,MAAM,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAA;IACtD,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAA;IAC5E,OAAO;QACN,IAAI,EAAE,UAAU;QAChB,cAAc;QACd,kBAAkB;KAClB,CAAA;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAWzC;IACA,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,KAAK,CAAC,mBAAmB;QACzC,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACxD,CAAC,CAAC,uBAAuB,CAAC;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC5C,CAAC,CAAA;IACJ,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,qBAAqB,CAAC,MAAM,CAAC,CAAA;IAC7B,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAA;IACtC,IAAI,QAAkB,CAAA;IACtB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACR,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,YAAY,EAAE,GAAG,OAAO,IAAI,kBAAkB,EAAE,EAAE;aAClD;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,0BAA0B,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;SAChE,CAAC,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAA;QAC1C,MAAM,IAAI,KAAK,CACd,mCAAmC,GAAG,CAAC,MAAM,KAAK,MAAM,qDAAqD,CAC7G,CAAA;IACF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,qBAAqB,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAGxC;IACA,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAA;IACjF,CAAC;IACD,OAAO;QACN,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;QAC1B,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,IAAI,IAAI;QAC5C,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,cAAc,IAAI,IAAI;QACnD,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,IAAI,eAAe;KACzD,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KASnC;IAKA,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACzE,OAAO;QACN,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAA;AACF,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,wBAAwB,CAAA;AASzE;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAuB;IACzD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACvC,MAAM,MAAM,GAAG;QACd,GAAG,IAAI,GAAG,CACT,GAAG;aACD,KAAK,CAAC,QAAQ,CAAC;aACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;aAC5B,MAAM,CAAC,OAAO,CAAC,CACjB;KACD,CAAA;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAClC,MAA6B,EAC7B,QAAkC;IAElC,OAAO;QACN,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC;QACnB,GAAG,2BAA2B,CAAC,QAAQ,CAAC;KACxC,CAAA;AACF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAC1C,QAAkC;IAElC,OAAO,QAAQ,CAAC,IAAI,KAAK,OAAO;QAC/B,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE;QACjC,CAAC,CAAC;YACA,gBAAgB,EAAE,QAAQ,CAAC,cAAc;YACzC,oBAAoB,EAAE,QAAQ,CAAC,kBAAkB;SACjD,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAa;IACvD,IACC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACf,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ;QACvC,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;QACzC,OAAO,IAAI,CAAC,oBAAoB,KAAK,QAAQ,EAC5C,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAA;IAC3E,CAAC;IACD,OAAO;QACN,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC3E,CAAC,CAAC,EAAE;QACL,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;QACvC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;KAC/C,CAAA;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAQ7C;IACA,MAAM,MAAM,GAAG,0BAA0B,CACxC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CACnE,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,aAAa,CAAA;IAC5C,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QAC1C,IAAI,EAAE,MAAM,CAAC,cAAc;QAC3B,mBAAmB,EAAE;YACpB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;SACjD;QACD,MAAM;QACN,OAAO,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;IACzE,OAAO;QACN,MAAM;QACN,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;QAC/B,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAA;AACF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAK5B;IACA,IACC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;QAC9B,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG;QACvB,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,EACtB,CAAC;QACF,MAAM,IAAI,KAAK,CACd,GAAG,KAAK,CAAC,KAAK,+BAA+B,KAAK,CAAC,GAAG,QAAQ,KAAK,CAAC,GAAG,GAAG,CAC1E,CAAA;IACF,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAA;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACzC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;IACrE,CAAC;IACD,OAAO;QACN,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QAC7E,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACtD,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACjC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YAC3E,CAAC,CAAC,SAAS;QACZ,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACjE,gBAAgB,EACf,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QAC9E,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QACxE,cAAc,EAAE,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;QACpF,WAAW,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;KAChF,CAAA;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAc,EAAE,IAAa,EAAE,GAAQ;IACrE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IACzE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QAC1E,OAAO,IAAI,KAAK,CACf,iCAAiC,MAAM,4GAA4G,MAAM,EAAE,CAC3J,CAAA;IACF,CAAC;IACD,OAAO,IAAI,KAAK,CACf,OAAO,EAAE,OAAO;QACf,qCAAqC,MAAM,KAAK,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAC1E,CAAA;AACF,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACzC,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC;QAC3C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,yBAAyB,CAAC,IAAI,CAAC,EAAE,CAAA;QAChE,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACxD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAA;QAC7C,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAA;IACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IACpE,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;QAC/D,MAAM,OAAO,GACZ,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAClF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC9C,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC5E,CAAC"}