@kolatts/pncli 1.15.0 → 1.17.0

package/dist/{config-TL5X47RY.js → config-S56LADVF.js}

@@ -8,7 +8,7 @@ import {
   setRepoConfigValue,
   writeGlobalConfig,
   writeRepoConfig
-} from "./chunk-CFUUOW7B.js";
+} from "./chunk-FFVQ4PA7.js";
 export {
   getGlobalConfigPath,
   loadConfig,
@@ -19,4 +19,4 @@ export {
   writeGlobalConfig,
   writeRepoConfig
 };
-//# sourceMappingURL=config-TL5X47RY.js.map
+//# sourceMappingURL=config-S56LADVF.js.map

package/dist/{http-OYI4NEKO.js → http-5WRBWEM6.js}

@@ -2,9 +2,9 @@
 import {
   HttpClient,
   createHttpClient
-} from "./chunk-YHRFL7VX.js";
+} from "./chunk-XPPEXJBP.js";
 export {
   HttpClient,
   createHttpClient
 };
-//# sourceMappingURL=http-OYI4NEKO.js.map
+//# sourceMappingURL=http-5WRBWEM6.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kolatts/pncli",
-  "version": "1.15.0",
+  "version": "1.17.0",
   "description": "The Paperwork Nightmare CLI — One command does what three meetings couldn't.",
   "type": "module",
   "bin": {

package/skills/pncli/SKILL.md

@@ -36,6 +36,7 @@ For detailed setup of any service, read the included file for that service.
 |---------|------|-------------------|
 | Jira | `jira.md` | Issues, sprints, custom fields |
 | Bitbucket | `bitbucket.md` | Repos, PRs, diffs |
+| GitHub | `github.md` | PRs, reviews, comments, checks |
 | Azure DevOps | `ado.md` | Work items, repos, PRs, pipelines |
 | Confluence | `confluence.md` | Pages, spaces |
 | JWT | `jwt.md` | Decode JWT tokens |
@@ -68,7 +69,7 @@ Ask: "Does this org use Jira or Azure DevOps for work items?" See `jira.md` or `
 
 **Step 3 — Source control**
 
-Ask: "Does this org use Bitbucket or Azure DevOps for PRs?" See `bitbucket.md` or `ado.md`.
+Ask: "Does this org use GitHub, Bitbucket, or Azure DevOps for PRs?" See `github.md`, `bitbucket.md`, or `ado.md`.
 
 **Step 4 — Optional services**
 

package/skills/pncli/github.md

@@ -0,0 +1,38 @@
+# GitHub
+
+Enables: `pncli github list-prs`, `pncli github create-pr`, `pncli github diff` — list and manage PRs, post reviews, get diffs.
+
+> **Prefer the official GitHub CLI where you can.** In corporate environments with a software packaging team that can distribute and keep [`gh`](https://cli.github.com/) up to date on developer machines and CI runners, use `gh` instead of `pncli github` — it is GitHub's first-party tool with broader coverage and official support. `pncli github` exists for environments where installing `gh` is impractical (locked-down runners, no packaging pipeline, or to keep a single CLI across Jira/Bitbucket/ADO/GitHub), and it covers the common PR, review, comment, diff, and status operations.
+
+## Required config
+
+| Key | Env var | Description |
+|-----|---------|-------------|
+| `github.baseUrl` | `PNCLI_GITHUB_BASE_URL` | GitHub API base URL. GitHub.com: `https://api.github.com`. GitHub Enterprise: `https://<host>/api/v3` |
+| `github.token` | `PNCLI_GITHUB_TOKEN` | Personal access token (classic or fine-grained) |
+
+## Config file (persistent)
+
+```
+pncli config set github.baseUrl https://api.github.com
+pncli config set github.token <token>
+```
+
+## Env vars (ephemeral / CI)
+
+```
+export PNCLI_GITHUB_BASE_URL=https://api.github.com
+export PNCLI_GITHUB_TOKEN=<token>
+```
+
+## Repo defaults
+
+```
+pncli config set --repo defaults.github.owner myorg
+pncli config set --repo defaults.github.repo myrepo
+pncli config set --repo defaults.github.targetBranch main
+```
+
+## Auto-detection
+
+When the git remote matches the configured GitHub host, `--owner` and `--repo` are detected automatically from the remote URL. HTTPS (`https://github.com/owner/repo.git`), SSH (`git@github.com:owner/repo.git`), and `ssh://` protocol (`ssh://git@github.com/owner/repo.git`) formats are all supported.

package/skills/pncli/jenkins.md

@@ -27,3 +27,25 @@ export PNCLI_JENKINS_BASE_URL=https://jenkins.company.com
 export PNCLI_JENKINS_USERNAME=<username>
 export PNCLI_JENKINS_API_TOKEN=<token>
 ```
+
+## Project-level base URL override
+
+Teams with different Jenkins controllers per repo can set `defaults.jenkins.baseUrl` in the project's `.pncli.json`:
+
+```json
+{
+  "defaults": {
+    "jenkins": {
+      "baseUrl": "https://jenkins.myteam.company.com"
+    }
+  }
+}
+```
+
+Or via the CLI:
+
+```
+pncli config set --repo defaults.jenkins.baseUrl https://jenkins.myteam.company.com
+```
+
+Resolution order (highest to lowest): project `.pncli.json` → global config → `PNCLI_JENKINS_BASE_URL` env var.

package/skills/pncli/jira.md

@@ -1,6 +1,6 @@
 # Jira
 
-Enables: `pncli jira issue`, `pncli jira sprint`, `pncli jira project`, `pncli jira user` — list and get issues, sprints, custom fields, and project members.
+Enables: `pncli jira get-issue`, `create-issue`, `update-issue`, `search`, `list-boards`, `list-sprints`, `set-sprint`, and more — get, create, and update issues, transitions, comments, attachments, custom fields, and sprints.
 
 ## Required config
 
@@ -29,7 +29,20 @@ export PNCLI_JIRA_API_TOKEN=<token>
 pncli config set --repo defaults.jira.project ACME
 ```
 
+## Sprints
+
+Sprints live behind the Jira Agile API, not the issue API — list boards first, then sprints on a board (or resolve straight from a project key):
+
+```
+pncli jira list-boards --project ACME
+pncli jira list-sprints --project ACME [--state active,future,closed]
+pncli jira list-sprints --board <id> [--state active,future,closed]
+pncli jira set-sprint --key ACME-123 --sprint <sprint-id>
+```
+
+`list-sprints` output includes `startDate`/`endDate`/`state`/`goal` for each sprint.
+
 ## Notes
 
 - Jira Cloud and Jira Data Center both work; token format differs (API token vs PAT)
-- Custom fields discovered with `pncli jira project fields`
+- Custom fields discovered with `pncli jira fields --discover`

package/skills/pncli/marketplace.md

@@ -1,21 +1,34 @@
 # Skills Marketplace
 
-Enables installing org-internal Claude Code or GitHub Copilot skills from a private git-hosted marketplace repository.
+Enables installing org-internal Claude Code or GitHub Copilot skills from one or more private git-hosted marketplace repositories.
 
-## Setup
+## Add a marketplace
 
 ```
-pncli skills marketplace setup <git-clone-url> <local-path>
+pncli skills marketplace add <git-clone-url> [local-path]
 ```
 
-Use `--branch main` if the default branch is `main` instead of `master`. This clones the repo to `<local-path>` and stores the mapping in your pncli global config.
+Use `--branch main` if the default branch is `main` instead of `master`. Use `--name` to give the marketplace a short, human-friendly identifier (defaults to the repo name). This clones the repo to `local-path` (default: `~/.agents/marketplaces/<repo-name>`), registers it in your pncli global config, and installs all of its plugins.
 
 **Example:**
 ```
-pncli skills marketplace setup https://bitbucket.company.com/scm/ai/skills.git ~/ai-skills
+pncli skills marketplace add https://bitbucket.company.com/scm/ai/skills.git --name internal-ai
 ```
 
-## Sync (install a plugin)
+You can register as many marketplaces as you like — just run `add` again with a different URL. `marketplace setup` is kept as an alias of `add` for backward compatibility.
+
+If you upgrade pncli from a version that only supported a single marketplace, your existing config is migrated to the multi-marketplace format automatically the first time you run any `marketplace` command — no manual steps required.
+
+## List marketplaces and browse plugins
+
+```
+pncli skills marketplace list
+pncli skills marketplace plugins <name>
+```
+
+`list` shows every registered marketplace. `plugins` shows the plugins available inside one of them, without installing anything.
+
+## Sync (pull + install)
 
 Install to `~/.agents/skills` (GitHub Copilot / Codex):
 ```
@@ -27,11 +40,38 @@ Install to `~/.claude/skills` (Claude Code):
 pncli skills marketplace sync --claude
 ```
 
-Pass a plugin name to skip the interactive picker:
+With a single registered marketplace, `sync` just prompts you to pick a plugin (or pass one explicitly). With more than one marketplace registered, it first prompts you to pick a marketplace — if you pick the wrong plugin from the wrong marketplace, choose "← Back to marketplace selection" to reselect rather than restarting the command.
+
+Pass a plugin name to skip the interactive plugin picker:
 ```
 pncli skills marketplace sync my-plugin --claude
 ```
 
+Pass `--marketplace <name>` to skip the interactive marketplace picker:
+```
+pncli skills marketplace sync my-plugin --marketplace internal-ai
+```
+
+Install every plugin from one marketplace:
+```
+pncli skills marketplace sync all --marketplace internal-ai
+```
+
+Sync every plugin from every registered marketplace in one shot:
+```
+pncli skills marketplace sync --marketplace all
+```
+
+`sync` skips reinstalling when a marketplace has no new upstream changes (single-plugin and `all` installs alike). Pass `--force` to reinstall anyway.
+
+## Remove a marketplace
+
+```
+pncli skills marketplace remove <name>
+```
+
+Unregisters the marketplace from your config. It does not delete the local clone on disk.
+
 ## Marketplace repo structure
 
 The marketplace repo should contain either:

package/dist/chunk-CFUUOW7B.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/config.ts"],"sourcesContent":["import fs from 'fs';\nimport os from 'os';\nimport path from 'path';\nimport { execSync } from 'child_process';\nimport type { GlobalConfig, RepoConfig, ResolvedConfig, JiraDefaults, BitbucketDefaults, SonarDefaults, SdeDefaults, AdoDefaults, UdeployDefaults } from '../types/config.js';\nimport type { CustomFieldDefinition } from '../types/jira.js';\n\nconst ENV_KEYS = {\n  EMAIL: 'PNCLI_EMAIL',\n  USERID: 'PNCLI_USERID',\n  JIRA_BASE_URL: 'PNCLI_JIRA_BASE_URL',\n  JIRA_API_TOKEN: 'PNCLI_JIRA_API_TOKEN',\n  BITBUCKET_BASE_URL: 'PNCLI_BITBUCKET_BASE_URL',\n  BITBUCKET_PAT: 'PNCLI_BITBUCKET_PAT',\n  CONFLUENCE_BASE_URL: 'PNCLI_CONFLUENCE_BASE_URL',\n  CONFLUENCE_API_TOKEN: 'PNCLI_CONFLUENCE_API_TOKEN',\n  ARTIFACTORY_BASE_URL: 'PNCLI_ARTIFACTORY_BASE_URL',\n  ARTIFACTORY_TOKEN: 'PNCLI_ARTIFACTORY_TOKEN',\n  ARTIFACTORY_REPO_NPM: 'PNCLI_ARTIFACTORY_REPO_NPM',\n  ARTIFACTORY_REPO_NUGET: 'PNCLI_ARTIFACTORY_REPO_NUGET',\n  ARTIFACTORY_REPO_MAVEN: 'PNCLI_ARTIFACTORY_REPO_MAVEN',\n  SONAR_BASE_URL: 'PNCLI_SONAR_BASE_URL',\n  SONAR_TOKEN: 'PNCLI_SONAR_TOKEN',\n  SDE_CONNECTION: 'PNCLI_SDE_CONNECTION',\n  ADO_BASE_URL: 'PNCLI_ADO_BASE_URL',\n  ADO_PAT: 'PNCLI_ADO_PAT',\n  JENKINS_BASE_URL: 'PNCLI_JENKINS_BASE_URL',\n  JENKINS_USERNAME: 'PNCLI_JENKINS_USERNAME',\n  JENKINS_API_TOKEN: 'PNCLI_JENKINS_API_TOKEN',\n  UDEPLOY_BASE_URL: 'PNCLI_UDEPLOY_BASE_URL',\n  UDEPLOY_PAT: 'PNCLI_UDEPLOY_PAT',\n  UDEPLOY_USERNAME: 'PNCLI_UDEPLOY_USERNAME',\n  UDEPLOY_PASSWORD: 'PNCLI_UDEPLOY_PASSWORD',\n  CHECKMARX_BASE_URL: 'PNCLI_CHECKMARX_BASE_URL',\n  CHECKMARX_USERNAME: 'PNCLI_CHECKMARX_USERNAME',\n  CHECKMARX_PASSWORD: 'PNCLI_CHECKMARX_PASSWORD',\n  SERVICENOW_BASE_URL: 'PNCLI_SERVICENOW_BASE_URL',\n  SERVICENOW_USERNAME: 'PNCLI_SERVICENOW_USERNAME',\n  SERVICENOW_PASSWORD: 'PNCLI_SERVICENOW_PASSWORD',\n  SERVICENOW_API_TOKEN: 'PNCLI_SERVICENOW_API_TOKEN',\n  CONTRAST_BASE_URL: 'PNCLI_CONTRAST_BASE_URL',\n  CONTRAST_ORG_UUID: 'PNCLI_CONTRAST_ORG_UUID',\n  CONTRAST_API_KEY: 'PNCLI_CONTRAST_API_KEY',\n  CONTRAST_SERVICE_KEY: 'PNCLI_CONTRAST_SERVICE_KEY',\n  CONTRAST_USERNAME: 'PNCLI_CONTRAST_USERNAME',\n  SONATYPEIQ_BASE_URL: 'PNCLI_SONATYPEIQ_BASE_URL',\n  SONATYPEIQ_USER_CODE: 'PNCLI_SONATYPEIQ_USER_CODE',\n  SONATYPEIQ_PASSCODE: 'PNCLI_SONATYPEIQ_PASSCODE',\n  OPENSHIFT_BASE_URL: 'PNCLI_OPENSHIFT_BASE_URL',\n  OPENSHIFT_TOKEN: 'PNCLI_OPENSHIFT_TOKEN',\n  CONFIG_PATH: 'PNCLI_CONFIG_PATH'\n} as const;\n\nfunction getGlobalConfigPath(overridePath?: string): string {\n  if (overridePath) return overridePath;\n  const envPath = process.env[ENV_KEYS.CONFIG_PATH];\n  if (envPath) return envPath;\n  return path.join(os.homedir(), '.pncli', 'config.json');\n}\n\nfunction loadJsonFile<T>(filePath: string): T | null {\n  try {\n    const content = fs.readFileSync(filePath, 'utf8');\n    return JSON.parse(content) as T;\n  } catch {\n    return null;\n  }\n}\n\nfunction getRepoRoot(): string | null {\n  try {\n    return execSync('git rev-parse --show-toplevel', { encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();\n  } catch {\n    return null;\n  }\n}\n\nfunction parseSdeConnection(connection: string): { token: string; baseUrl: string } | null {\n  const idx = connection.indexOf('@');\n  if (idx <= 0) return null;\n  const token = connection.slice(0, idx);\n  const host = connection.slice(idx + 1);\n  const baseUrl = /^https?:\\/\\//i.test(host) ? host : `https://${host}`;\n  return { token, baseUrl };\n}\n\nfunction mergeCustomFields(\n  global: CustomFieldDefinition[] | undefined,\n  repo: CustomFieldDefinition[] | undefined\n): CustomFieldDefinition[] {\n  const map = new Map<string, CustomFieldDefinition>();\n  for (const f of global ?? []) map.set(f.id, f);\n  for (const f of repo ?? []) map.set(f.id, f); // repo wins\n  return Array.from(map.values());\n}\n\nfunction mergeDefaults(\n  global: GlobalConfig['defaults'],\n  repo: RepoConfig['defaults']\n): { jira: JiraDefaults; bitbucket: BitbucketDefaults; sonar: SonarDefaults; sde: SdeDefaults; ado: AdoDefaults; udeploy: UdeployDefaults } {\n  return {\n    jira: { ...global?.jira, ...repo?.jira },\n    bitbucket: { ...global?.bitbucket, ...repo?.bitbucket },\n    sonar: { ...global?.sonar, ...repo?.sonar },\n    sde: { ...global?.sde, ...repo?.sde },\n    ado: { ...global?.ado, ...repo?.ado },\n    udeploy: { ...global?.udeploy, ...repo?.udeploy }\n  };\n}\n\nexport interface LoadConfigOptions {\n  configPath?: string;\n}\n\nexport function loadConfig(opts: LoadConfigOptions = {}): ResolvedConfig {\n  const globalConfigPath = getGlobalConfigPath(opts.configPath);\n  const globalConfig = loadJsonFile<GlobalConfig>(globalConfigPath) ?? {};\n\n  const repoRoot = getRepoRoot();\n  let repoConfig: RepoConfig = {};\n  if (repoRoot) {\n    repoConfig = loadJsonFile<RepoConfig>(path.join(repoRoot, '.pncli.json')) ?? {};\n  }\n\n  const mergedDefaults = mergeDefaults(globalConfig.defaults, repoConfig.defaults);\n\n  return {\n    user: {\n      email: process.env[ENV_KEYS.EMAIL] ?? globalConfig.user?.email,\n      userId: process.env[ENV_KEYS.USERID] ?? globalConfig.user?.userId\n    },\n    jira: {\n      baseUrl: process.env[ENV_KEYS.JIRA_BASE_URL] ?? globalConfig.jira?.baseUrl,\n      apiToken: process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken,\n      customFields: mergeCustomFields(globalConfig.jira?.customFields, repoConfig.jira?.customFields)\n    },\n    bitbucket: {\n      baseUrl: process.env[ENV_KEYS.BITBUCKET_BASE_URL] ?? globalConfig.bitbucket?.baseUrl,\n      pat: process.env[ENV_KEYS.BITBUCKET_PAT] ?? globalConfig.bitbucket?.pat\n    },\n    confluence: {\n      baseUrl: process.env[ENV_KEYS.CONFLUENCE_BASE_URL] ?? globalConfig.confluence?.baseUrl,\n      apiToken: process.env[ENV_KEYS.CONFLUENCE_API_TOKEN] ?? globalConfig.confluence?.apiToken\n        ?? process.env[ENV_KEYS.JIRA_API_TOKEN] ?? globalConfig.jira?.apiToken,\n      apiTokenExplicit: !!(\n        process.env[ENV_KEYS.CONFLUENCE_API_TOKEN] ?? globalConfig.confluence?.apiToken\n      )\n    },\n    artifactory: {\n      baseUrl: process.env[ENV_KEYS.ARTIFACTORY_BASE_URL] ?? globalConfig.artifactory?.baseUrl,\n      token: process.env[ENV_KEYS.ARTIFACTORY_TOKEN] ?? globalConfig.artifactory?.token,\n      npmRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NPM] ?? globalConfig.artifactory?.npmRepo,\n      nugetRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_NUGET] ?? globalConfig.artifactory?.nugetRepo,\n      mavenRepo: process.env[ENV_KEYS.ARTIFACTORY_REPO_MAVEN] ?? globalConfig.artifactory?.mavenRepo\n    },\n    sonar: {\n      baseUrl: process.env[ENV_KEYS.SONAR_BASE_URL] ?? globalConfig.sonar?.baseUrl,\n      token: process.env[ENV_KEYS.SONAR_TOKEN] ?? globalConfig.sonar?.token\n    },\n    sde: (() => {\n      const raw = process.env[ENV_KEYS.SDE_CONNECTION] ?? globalConfig.sde?.connection;\n      const parsed = raw ? parseSdeConnection(raw) : null;\n      return { baseUrl: parsed?.baseUrl, token: parsed?.token };\n    })(),\n    ado: {\n      baseUrl: process.env[ENV_KEYS.ADO_BASE_URL] ?? globalConfig.ado?.baseUrl,\n      pat: process.env[ENV_KEYS.ADO_PAT] ?? globalConfig.ado?.pat,\n      fieldAliases: globalConfig.ado?.fieldAliases ?? {},\n      discoveredFields: globalConfig.ado?.discoveredFields ?? [],\n      discoveredTypes: globalConfig.ado?.discoveredTypes ?? []\n    },\n    jenkins: {\n      baseUrl: process.env[ENV_KEYS.JENKINS_BASE_URL] ?? globalConfig.jenkins?.baseUrl,\n      username: process.env[ENV_KEYS.JENKINS_USERNAME] ?? globalConfig.jenkins?.username,\n      apiToken: process.env[ENV_KEYS.JENKINS_API_TOKEN] ?? globalConfig.jenkins?.apiToken\n    },\n    udeploy: {\n      baseUrl: process.env[ENV_KEYS.UDEPLOY_BASE_URL] ?? globalConfig.udeploy?.baseUrl,\n      pat: process.env[ENV_KEYS.UDEPLOY_PAT] ?? globalConfig.udeploy?.pat,\n      username: process.env[ENV_KEYS.UDEPLOY_USERNAME] ?? globalConfig.udeploy?.username,\n      password: process.env[ENV_KEYS.UDEPLOY_PASSWORD] ?? globalConfig.udeploy?.password,\n    },\n    checkmarx: {\n      baseUrl: process.env[ENV_KEYS.CHECKMARX_BASE_URL] ?? globalConfig.checkmarx?.baseUrl,\n      username: process.env[ENV_KEYS.CHECKMARX_USERNAME] ?? globalConfig.checkmarx?.username,\n      password: process.env[ENV_KEYS.CHECKMARX_PASSWORD] ?? globalConfig.checkmarx?.password,\n    },\n    servicenow: {\n      baseUrl: process.env[ENV_KEYS.SERVICENOW_BASE_URL] ?? globalConfig.servicenow?.baseUrl,\n      username: process.env[ENV_KEYS.SERVICENOW_USERNAME] ?? globalConfig.servicenow?.username,\n      password: process.env[ENV_KEYS.SERVICENOW_PASSWORD] ?? globalConfig.servicenow?.password,\n      apiToken: process.env[ENV_KEYS.SERVICENOW_API_TOKEN] ?? globalConfig.servicenow?.apiToken,\n    },\n    contrast: {\n      baseUrl: process.env[ENV_KEYS.CONTRAST_BASE_URL] ?? globalConfig.contrast?.baseUrl,\n      orgUuid: process.env[ENV_KEYS.CONTRAST_ORG_UUID] ?? globalConfig.contrast?.orgUuid,\n      apiKey: process.env[ENV_KEYS.CONTRAST_API_KEY] ?? globalConfig.contrast?.apiKey,\n      serviceKey: process.env[ENV_KEYS.CONTRAST_SERVICE_KEY] ?? globalConfig.contrast?.serviceKey,\n      username: process.env[ENV_KEYS.CONTRAST_USERNAME] ?? globalConfig.contrast?.username,\n    },\n    sonatypeiq: {\n      baseUrl: process.env[ENV_KEYS.SONATYPEIQ_BASE_URL] ?? globalConfig.sonatypeiq?.baseUrl,\n      userCode: process.env[ENV_KEYS.SONATYPEIQ_USER_CODE] ?? globalConfig.sonatypeiq?.userCode,\n      passcode: process.env[ENV_KEYS.SONATYPEIQ_PASSCODE] ?? globalConfig.sonatypeiq?.passcode,\n    },\n    openshift: {\n      baseUrl: process.env[ENV_KEYS.OPENSHIFT_BASE_URL] ?? globalConfig.openshift?.baseUrl,\n      token: process.env[ENV_KEYS.OPENSHIFT_TOKEN] ?? globalConfig.openshift?.token,\n    },\n    defaults: mergedDefaults\n  };\n}\n\nexport function writeGlobalConfig(config: GlobalConfig, configPath?: string): void {\n  const filePath = getGlobalConfigPath(configPath);\n  const dir = path.dirname(filePath);\n  if (!fs.existsSync(dir)) {\n    fs.mkdirSync(dir, { recursive: true });\n  }\n  fs.writeFileSync(filePath, JSON.stringify(config, null, 2) + '\\n', 'utf8');\n}\n\nexport function writeRepoConfig(config: RepoConfig): void {\n  const repoRoot = getRepoRoot();\n  const targetDir = repoRoot ?? process.cwd();\n  fs.writeFileSync(path.join(targetDir, '.pncli.json'), JSON.stringify(config, null, 2) + '\\n', 'utf8');\n}\n\nexport function setConfigValue(key: string, value: string, configPath?: string): void {\n  const filePath = getGlobalConfigPath(configPath);\n  const existing = loadJsonFile<GlobalConfig>(filePath) ?? {};\n\n  const parts = key.split('.');\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let current: any = existing;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i]!;\n    if (typeof current[part] !== 'object' || current[part] === null) {\n      current[part] = {};\n    }\n    current = current[part];\n  }\n  current[parts[parts.length - 1]!] = value;\n\n  writeGlobalConfig(existing, configPath);\n}\n\nexport function setRepoConfigValue(key: string, value: string): void {\n  const repoRoot = getRepoRoot();\n  const targetDir = repoRoot ?? process.cwd();\n  const filePath = path.join(targetDir, '.pncli.json');\n  const existing = loadJsonFile<RepoConfig>(filePath) ?? {};\n\n  const parts = key.split('.');\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  let current: any = existing;\n  for (let i = 0; i < parts.length - 1; i++) {\n    const part = parts[i]!;\n    if (typeof current[part] !== 'object' || current[part] === null) {\n      current[part] = {};\n    }\n    current = current[part];\n  }\n  current[parts[parts.length - 1]!] = value;\n\n  writeRepoConfig(existing);\n}\n\nexport function maskConfig(config: ResolvedConfig): unknown {\n  return {\n    ...config,\n    jira: {\n      ...config.jira,\n      apiToken: config.jira.apiToken ? '***' : undefined,\n      customFields: config.jira.customFields\n    },\n    bitbucket: {\n      ...config.bitbucket,\n      pat: config.bitbucket.pat ? '***' : undefined\n    },\n    confluence: {\n      ...config.confluence,\n      apiToken: config.confluence.apiToken ? '***' : undefined\n    },\n    artifactory: {\n      ...config.artifactory,\n      token: config.artifactory.token ? '***' : undefined\n    },\n    sonar: {\n      ...config.sonar,\n      token: config.sonar.token ? '***' : undefined\n    },\n    sde: {\n      baseUrl: config.sde.baseUrl,\n      token: config.sde.token ? '***' : undefined\n    },\n    ado: {\n      ...config.ado,\n      pat: config.ado.pat ? '***' : undefined\n    },\n    jenkins: {\n      ...config.jenkins,\n      apiToken: config.jenkins.apiToken ? '***' : undefined\n    },\n    udeploy: {\n      ...config.udeploy,\n      pat: config.udeploy.pat ? '***' : undefined,\n      password: config.udeploy.password ? '***' : undefined\n    },\n    checkmarx: {\n      ...config.checkmarx,\n      password: config.checkmarx.password ? '***' : undefined\n    },\n    servicenow: {\n      ...config.servicenow,\n      password: config.servicenow.password ? '***' : undefined,\n      apiToken: config.servicenow.apiToken ? '***' : undefined\n    },\n    contrast: {\n      ...config.contrast,\n      apiKey: config.contrast.apiKey ? '***' : undefined,\n      serviceKey: config.contrast.serviceKey ? '***' : undefined\n    },\n    sonatypeiq: {\n      ...config.sonatypeiq,\n      passcode: config.sonatypeiq.passcode ? '***' : undefined\n    },\n    openshift: {\n      ...config.openshift,\n      token: config.openshift.token ? '***' : undefined\n    }\n  };\n}\n\nexport { getGlobalConfigPath, loadJsonFile };\n"],"mappings":";;;AAAA,OAAO,QAAQ;AACf,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,gBAAgB;AAIzB,IAAM,WAAW;AAAA,EACf,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,eAAe;AAAA,EACf,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,sBAAsB;AAAA,EACtB,wBAAwB;AAAA,EACxB,wBAAwB;AAAA,EACxB,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,gBAAgB;AAAA,EAChB,cAAc;AAAA,EACd,SAAS;AAAA,EACT,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,mBAAmB;AAAA,EACnB,kBAAkB;AAAA,EAClB,aAAa;AAAA,EACb,kBAAkB;AAAA,EAClB,kBAAkB;AAAA,EAClB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,mBAAmB;AAAA,EACnB,kBAAkB;AAAA,EAClB,sBAAsB;AAAA,EACtB,mBAAmB;AAAA,EACnB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,iBAAiB;AAAA,EACjB,aAAa;AACf;AAEA,SAAS,oBAAoB,cAA+B;AAC1D,MAAI,aAAc,QAAO;AACzB,QAAM,UAAU,QAAQ,IAAI,SAAS,WAAW;AAChD,MAAI,QAAS,QAAO;AACpB,SAAO,KAAK,KAAK,GAAG,QAAQ,GAAG,UAAU,aAAa;AACxD;AAEA,SAAS,aAAgB,UAA4B;AACnD,MAAI;AACF,UAAM,UAAU,GAAG,aAAa,UAAU,MAAM;AAChD,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,cAA6B;AACpC,MAAI;AACF,WAAO,SAAS,iCAAiC,EAAE,UAAU,QAAQ,OAAO,CAAC,QAAQ,QAAQ,MAAM,EAAE,CAAC,EAAE,KAAK;AAAA,EAC/G,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAAmB,YAA+D;AACzF,QAAM,MAAM,WAAW,QAAQ,GAAG;AAClC,MAAI,OAAO,EAAG,QAAO;AACrB,QAAM,QAAQ,WAAW,MAAM,GAAG,GAAG;AACrC,QAAM,OAAO,WAAW,MAAM,MAAM,CAAC;AACrC,QAAM,UAAU,gBAAgB,KAAK,IAAI,IAAI,OAAO,WAAW,IAAI;AACnE,SAAO,EAAE,OAAO,QAAQ;AAC1B;AAEA,SAAS,kBACP,QACA,MACyB;AACzB,QAAM,MAAM,oBAAI,IAAmC;AACnD,aAAW,KAAK,UAAU,CAAC,EAAG,KAAI,IAAI,EAAE,IAAI,CAAC;AAC7C,aAAW,KAAK,QAAQ,CAAC,EAAG,KAAI,IAAI,EAAE,IAAI,CAAC;AAC3C,SAAO,MAAM,KAAK,IAAI,OAAO,CAAC;AAChC;AAEA,SAAS,cACP,QACA,MAC0I;AAC1I,SAAO;AAAA,IACL,MAAM,EAAE,GAAG,QAAQ,MAAM,GAAG,MAAM,KAAK;AAAA,IACvC,WAAW,EAAE,GAAG,QAAQ,WAAW,GAAG,MAAM,UAAU;AAAA,IACtD,OAAO,EAAE,GAAG,QAAQ,OAAO,GAAG,MAAM,MAAM;AAAA,IAC1C,KAAK,EAAE,GAAG,QAAQ,KAAK,GAAG,MAAM,IAAI;AAAA,IACpC,KAAK,EAAE,GAAG,QAAQ,KAAK,GAAG,MAAM,IAAI;AAAA,IACpC,SAAS,EAAE,GAAG,QAAQ,SAAS,GAAG,MAAM,QAAQ;AAAA,EAClD;AACF;AAMO,SAAS,WAAW,OAA0B,CAAC,GAAmB;AACvE,QAAM,mBAAmB,oBAAoB,KAAK,UAAU;AAC5D,QAAM,eAAe,aAA2B,gBAAgB,KAAK,CAAC;AAEtE,QAAM,WAAW,YAAY;AAC7B,MAAI,aAAyB,CAAC;AAC9B,MAAI,UAAU;AACZ,iBAAa,aAAyB,KAAK,KAAK,UAAU,aAAa,CAAC,KAAK,CAAC;AAAA,EAChF;AAEA,QAAM,iBAAiB,cAAc,aAAa,UAAU,WAAW,QAAQ;AAE/E,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,OAAO,QAAQ,IAAI,SAAS,KAAK,KAAK,aAAa,MAAM;AAAA,MACzD,QAAQ,QAAQ,IAAI,SAAS,MAAM,KAAK,aAAa,MAAM;AAAA,IAC7D;AAAA,IACA,MAAM;AAAA,MACJ,SAAS,QAAQ,IAAI,SAAS,aAAa,KAAK,aAAa,MAAM;AAAA,MACnE,UAAU,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,MAAM;AAAA,MACrE,cAAc,kBAAkB,aAAa,MAAM,cAAc,WAAW,MAAM,YAAY;AAAA,IAChG;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,KAAK,QAAQ,IAAI,SAAS,aAAa,KAAK,aAAa,WAAW;AAAA,IACtE;AAAA,IACA,YAAY;AAAA,MACV,SAAS,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAC/E,UAAU,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY,YAC5E,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,MAAM;AAAA,MAChE,kBAAkB,CAAC,EACjB,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY;AAAA,IAE3E;AAAA,IACA,aAAa;AAAA,MACX,SAAS,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,aAAa;AAAA,MACjF,OAAO,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,aAAa;AAAA,MAC5E,SAAS,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,aAAa;AAAA,MACjF,WAAW,QAAQ,IAAI,SAAS,sBAAsB,KAAK,aAAa,aAAa;AAAA,MACrF,WAAW,QAAQ,IAAI,SAAS,sBAAsB,KAAK,aAAa,aAAa;AAAA,IACvF;AAAA,IACA,OAAO;AAAA,MACL,SAAS,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,OAAO;AAAA,MACrE,OAAO,QAAQ,IAAI,SAAS,WAAW,KAAK,aAAa,OAAO;AAAA,IAClE;AAAA,IACA,MAAM,MAAM;AACV,YAAM,MAAM,QAAQ,IAAI,SAAS,cAAc,KAAK,aAAa,KAAK;AACtE,YAAM,SAAS,MAAM,mBAAmB,GAAG,IAAI;AAC/C,aAAO,EAAE,SAAS,QAAQ,SAAS,OAAO,QAAQ,MAAM;AAAA,IAC1D,GAAG;AAAA,IACH,KAAK;AAAA,MACH,SAAS,QAAQ,IAAI,SAAS,YAAY,KAAK,aAAa,KAAK;AAAA,MACjE,KAAK,QAAQ,IAAI,SAAS,OAAO,KAAK,aAAa,KAAK;AAAA,MACxD,cAAc,aAAa,KAAK,gBAAgB,CAAC;AAAA,MACjD,kBAAkB,aAAa,KAAK,oBAAoB,CAAC;AAAA,MACzD,iBAAiB,aAAa,KAAK,mBAAmB,CAAC;AAAA,IACzD;AAAA,IACA,SAAS;AAAA,MACP,SAAS,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MACzE,UAAU,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MAC1E,UAAU,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,SAAS;AAAA,IAC7E;AAAA,IACA,SAAS;AAAA,MACP,SAAS,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MACzE,KAAK,QAAQ,IAAI,SAAS,WAAW,KAAK,aAAa,SAAS;AAAA,MAChE,UAAU,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,MAC1E,UAAU,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,SAAS;AAAA,IAC5E;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,UAAU,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC9E,UAAU,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,IAChF;AAAA,IACA,YAAY;AAAA,MACV,SAAS,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAC/E,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAChF,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAChF,UAAU,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY;AAAA,IACnF;AAAA,IACA,UAAU;AAAA,MACR,SAAS,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,UAAU;AAAA,MAC3E,SAAS,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,UAAU;AAAA,MAC3E,QAAQ,QAAQ,IAAI,SAAS,gBAAgB,KAAK,aAAa,UAAU;AAAA,MACzE,YAAY,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,UAAU;AAAA,MACjF,UAAU,QAAQ,IAAI,SAAS,iBAAiB,KAAK,aAAa,UAAU;AAAA,IAC9E;AAAA,IACA,YAAY;AAAA,MACV,SAAS,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,MAC/E,UAAU,QAAQ,IAAI,SAAS,oBAAoB,KAAK,aAAa,YAAY;AAAA,MACjF,UAAU,QAAQ,IAAI,SAAS,mBAAmB,KAAK,aAAa,YAAY;AAAA,IAClF;AAAA,IACA,WAAW;AAAA,MACT,SAAS,QAAQ,IAAI,SAAS,kBAAkB,KAAK,aAAa,WAAW;AAAA,MAC7E,OAAO,QAAQ,IAAI,SAAS,eAAe,KAAK,aAAa,WAAW;AAAA,IAC1E;AAAA,IACA,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,kBAAkB,QAAsB,YAA2B;AACjF,QAAM,WAAW,oBAAoB,UAAU;AAC/C,QAAM,MAAM,KAAK,QAAQ,QAAQ;AACjC,MAAI,CAAC,GAAG,WAAW,GAAG,GAAG;AACvB,OAAG,UAAU,KAAK,EAAE,WAAW,KAAK,CAAC;AAAA,EACvC;AACA,KAAG,cAAc,UAAU,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,MAAM;AAC3E;AAEO,SAAS,gBAAgB,QAA0B;AACxD,QAAM,WAAW,YAAY;AAC7B,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,KAAG,cAAc,KAAK,KAAK,WAAW,aAAa,GAAG,KAAK,UAAU,QAAQ,MAAM,CAAC,IAAI,MAAM,MAAM;AACtG;AAEO,SAAS,eAAe,KAAa,OAAe,YAA2B;AACpF,QAAM,WAAW,oBAAoB,UAAU;AAC/C,QAAM,WAAW,aAA2B,QAAQ,KAAK,CAAC;AAE1D,QAAM,QAAQ,IAAI,MAAM,GAAG;AAE3B,MAAI,UAAe;AACnB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,OAAO,QAAQ,IAAI,MAAM,YAAY,QAAQ,IAAI,MAAM,MAAM;AAC/D,cAAQ,IAAI,IAAI,CAAC;AAAA,IACnB;AACA,cAAU,QAAQ,IAAI;AAAA,EACxB;AACA,UAAQ,MAAM,MAAM,SAAS,CAAC,CAAE,IAAI;AAEpC,oBAAkB,UAAU,UAAU;AACxC;AAEO,SAAS,mBAAmB,KAAa,OAAqB;AACnE,QAAM,WAAW,YAAY;AAC7B,QAAM,YAAY,YAAY,QAAQ,IAAI;AAC1C,QAAM,WAAW,KAAK,KAAK,WAAW,aAAa;AACnD,QAAM,WAAW,aAAyB,QAAQ,KAAK,CAAC;AAExD,QAAM,QAAQ,IAAI,MAAM,GAAG;AAE3B,MAAI,UAAe;AACnB,WAAS,IAAI,GAAG,IAAI,MAAM,SAAS,GAAG,KAAK;AACzC,UAAM,OAAO,MAAM,CAAC;AACpB,QAAI,OAAO,QAAQ,IAAI,MAAM,YAAY,QAAQ,IAAI,MAAM,MAAM;AAC/D,cAAQ,IAAI,IAAI,CAAC;AAAA,IACnB;AACA,cAAU,QAAQ,IAAI;AAAA,EACxB;AACA,UAAQ,MAAM,MAAM,SAAS,CAAC,CAAE,IAAI;AAEpC,kBAAgB,QAAQ;AAC1B;AAEO,SAAS,WAAW,QAAiC;AAC1D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,MAAM;AAAA,MACJ,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,KAAK,WAAW,QAAQ;AAAA,MACzC,cAAc,OAAO,KAAK;AAAA,IAC5B;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,KAAK,OAAO,UAAU,MAAM,QAAQ;AAAA,IACtC;AAAA,IACA,YAAY;AAAA,MACV,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,IACjD;AAAA,IACA,aAAa;AAAA,MACX,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,YAAY,QAAQ,QAAQ;AAAA,IAC5C;AAAA,IACA,OAAO;AAAA,MACL,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,MAAM,QAAQ,QAAQ;AAAA,IACtC;AAAA,IACA,KAAK;AAAA,MACH,SAAS,OAAO,IAAI;AAAA,MACpB,OAAO,OAAO,IAAI,QAAQ,QAAQ;AAAA,IACpC;AAAA,IACA,KAAK;AAAA,MACH,GAAG,OAAO;AAAA,MACV,KAAK,OAAO,IAAI,MAAM,QAAQ;AAAA,IAChC;AAAA,IACA,SAAS;AAAA,MACP,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,QAAQ,WAAW,QAAQ;AAAA,IAC9C;AAAA,IACA,SAAS;AAAA,MACP,GAAG,OAAO;AAAA,MACV,KAAK,OAAO,QAAQ,MAAM,QAAQ;AAAA,MAClC,UAAU,OAAO,QAAQ,WAAW,QAAQ;AAAA,IAC9C;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,UAAU,WAAW,QAAQ;AAAA,IAChD;AAAA,IACA,YAAY;AAAA,MACV,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,MAC/C,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,IACjD;AAAA,IACA,UAAU;AAAA,MACR,GAAG,OAAO;AAAA,MACV,QAAQ,OAAO,SAAS,SAAS,QAAQ;AAAA,MACzC,YAAY,OAAO,SAAS,aAAa,QAAQ;AAAA,IACnD;AAAA,IACA,YAAY;AAAA,MACV,GAAG,OAAO;AAAA,MACV,UAAU,OAAO,WAAW,WAAW,QAAQ;AAAA,IACjD;AAAA,IACA,WAAW;AAAA,MACT,GAAG,OAAO;AAAA,MACV,OAAO,OAAO,UAAU,QAAQ,QAAQ;AAAA,IAC1C;AAAA,EACF;AACF;","names":[]}

package/dist/chunk-YHRFL7VX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/lib/http.ts","../src/lib/errors.ts","../src/lib/exitCodes.ts","../src/lib/output.ts","../src/lib/adoFetch.ts","../src/lib/checkmarxFetch.ts"],"sourcesContent":["import fs from 'fs';\nimport type { ResolvedConfig } from '../types/config.js';\nimport { PncliError } from './errors.js';\nimport { ExitCode } from './exitCodes.js';\nimport { log, debug, isDebugEnabled } from './output.js';\nimport { buildAdoFetcher } from './adoFetch.js';\nimport { buildCheckmarxFetcher } from './checkmarxFetch.js';\n\nexport type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';\n\nexport interface HttpRequestOptions {\n  method?: HttpMethod;\n  body?: unknown;\n  params?: Record<string, string | number | boolean | undefined>;\n  timeoutMs?: number;\n  headers?: Record<string, string>;\n}\n\nexport interface HttpError {\n  error: true;\n  status: number;\n  message: string;\n  url: string;\n}\n\nconst SENSITIVE_HEADERS = new Set(['authorization', 'api-key']);\n\nfunction redactHeaders(headers: RequestInit['headers']): Record<string, string> {\n  if (!headers) return {};\n  let entries: [string, string][];\n  if (headers instanceof Headers) {\n    entries = [...headers.entries()];\n  } else if (Array.isArray(headers)) {\n    entries = (headers as string[][]) as [string, string][];\n  } else {\n    entries = Object.entries(headers as Record<string, string>);\n  }\n  return Object.fromEntries(\n    entries.map(([k, v]) => [k, SENSITIVE_HEADERS.has(k.toLowerCase()) ? '[REDACTED]' : v])\n  );\n}\n\nfunction buildUrl(base: string, path: string, params?: Record<string, string | number | boolean | undefined>): string {\n  const url = new URL(path, base.endsWith('/') ? base : base + '/');\n  if (params) {\n    for (const [key, val] of Object.entries(params)) {\n      if (val !== undefined) {\n        url.searchParams.set(key, String(val));\n      }\n    }\n  }\n  return url.toString();\n}\n\nasync function fetchWithTimeout(url: string, init: RequestInit, timeoutMs: number, fetcher: typeof fetch = fetch): Promise<Response> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n  try {\n    return await fetcher(url, { ...init, signal: controller.signal });\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\nasync function request<T>(\n  url: string,\n  init: RequestInit,\n  timeoutMs: number,\n  fetcher: typeof fetch = fetch\n): Promise<T> {\n  let lastError: unknown;\n\n  if (isDebugEnabled()) {\n    const method = (init.method ?? 'GET').toUpperCase();\n    const safeHeaders = redactHeaders(init.headers);\n    debug(`→ ${method} ${url}`);\n    debug(`  Headers: ${JSON.stringify(safeHeaders)}`);\n  }\n\n  for (let attempt = 0; attempt < 3; attempt++) {\n    let response: Response;\n    const reqStart = Date.now();\n    try {\n      response = await fetchWithTimeout(url, init, timeoutMs, fetcher);\n    } catch (err) {\n      debug(`  Error: ${err instanceof Error ? err.message : String(err)}`);\n      throw new PncliError(\n        `Request failed: ${err instanceof Error ? err.message : String(err)}`,\n        0,\n        url\n      );\n    }\n\n    debug(`← ${response.status} ${response.statusText} (${Date.now() - reqStart}ms)`);\n\n    if (response.status === 429) {\n      const retryAfter = response.headers.get('Retry-After');\n      const waitMs = retryAfter ? parseInt(retryAfter, 10) * 1000 : (attempt + 1) * 1000;\n      log(`Rate limited. Retrying after ${waitMs}ms...`);\n      await new Promise(resolve => setTimeout(resolve, waitMs));\n      lastError = new PncliError('Rate limited', 429, url);\n      continue;\n    }\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const body = await response.text();\n        const parsed = JSON.parse(body);\n        const parts: string[] = [];\n        // Jira: errorMessages is string[]\n        if (Array.isArray(parsed.errorMessages)) {\n          parts.push(...(parsed.errorMessages as string[]).filter(Boolean));\n        }\n        // errors as object map (Jira: Record<string, string>)\n        if (parsed.errors && typeof parsed.errors === 'object' && !Array.isArray(parsed.errors)) {\n          for (const [field, msg] of Object.entries(parsed.errors as Record<string, string>)) {\n            parts.push(`${field}: ${msg}`);\n          }\n        }\n        // errors as array of objects with message or msg field (SonarQube uses msg)\n        if (Array.isArray(parsed.errors)) {\n          for (const e of parsed.errors as Array<{ message?: string; msg?: string }>) {\n            if (e?.message) parts.push(e.message);\n            else if (e?.msg) parts.push(e.msg);\n          }\n        }\n        // Generic APIs: { message: \"...\" }\n        if (parts.length === 0 && parsed.message) {\n          parts.push(String(parsed.message));\n        }\n        if (parts.length > 0) message = parts.join('; ');\n      } catch {\n        // ignore parse errors\n      }\n      throw new PncliError(message, response.status, url);\n    }\n\n    if (response.status === 204) {\n      return undefined as T;\n    }\n\n    const text = await response.text();\n    if (!text) return undefined as T;\n    return JSON.parse(text) as T;\n  }\n\n  throw lastError ?? new PncliError('Request failed after retries', 1, url);\n}\n\nexport class HttpClient {\n  private config: ResolvedConfig;\n  private dryRun: boolean;\n  private adoFetcher: typeof fetch | null = null;\n  private checkmarxFetcher: typeof fetch | null = null;\n\n  constructor(config: ResolvedConfig, dryRun = false) {\n    this.config = config;\n    this.dryRun = dryRun;\n  }\n\n  private jiraToken(): string {\n    const { apiToken } = this.config.jira;\n    if (!apiToken) throw new PncliError('Jira credentials not configured. Run: pncli config init');\n    return apiToken;\n  }\n\n  private jiraHeaders(): Record<string, string> {\n    return {\n      'Authorization': `Bearer ${this.jiraToken()}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  private bitbucketHeaders(): Record<string, string> {\n    const { pat } = this.config.bitbucket;\n    if (!pat) throw new PncliError('Bitbucket credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${pat}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async jira<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.jira.baseUrl;\n    if (!baseUrl) throw new PncliError('Jira baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.jiraHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async jiraBuffer(absoluteUrl: string, opts: { timeoutMs?: number } = {}): Promise<Buffer> {\n    const headers: Record<string, string> = {\n      'Authorization': `Bearer ${this.jiraToken()}`,\n      'Connection': 'close'\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: GET ${absoluteUrl}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`;\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const response = await fetchWithTimeout(absoluteUrl, { headers }, opts.timeoutMs ?? 60000);\n    if (!response.ok) {\n      throw new PncliError(`HTTP ${response.status} ${response.statusText}`, response.status, absoluteUrl);\n    }\n    return Buffer.from(await response.arrayBuffer());\n  }\n\n  async adoUpload<T>(\n    path: string,\n    buffer: Buffer,\n    contentType: string,\n    opts: { timeoutMs?: number } = {}\n  ): Promise<T> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path);\n\n    if (this.dryRun) {\n      fs.writeSync(process.stderr.fd, `DRY RUN: POST ${url}\\nBody: <binary ${buffer.length} bytes>\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    return request<T>(url, {\n      method: 'POST',\n      headers: { 'Accept': 'application/json', 'Content-Type': contentType },\n      body: buffer\n    }, opts.timeoutMs ?? 60000, fetcher);\n  }\n\n  async adoBuffer(absoluteUrl: string, opts: { timeoutMs?: number } = {}): Promise<Buffer> {\n    if (this.dryRun) {\n      fs.writeSync(process.stderr.fd, `DRY RUN: GET ${absoluteUrl}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const response = await fetchWithTimeout(\n      absoluteUrl,\n      { headers: { Accept: 'application/octet-stream' } },\n      opts.timeoutMs ?? 60000,\n      fetcher\n    );\n    if (!response.ok) {\n      throw new PncliError(`HTTP ${response.status} ${response.statusText}`, response.status, absoluteUrl);\n    }\n    return Buffer.from(await response.arrayBuffer());\n  }\n\n  async jiraUpload<T>(\n    path: string,\n    formData: FormData,\n    opts: { timeoutMs?: number } = {}\n  ): Promise<T> {\n    const baseUrl = this.config.jira.baseUrl;\n    if (!baseUrl) throw new PncliError('Jira baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path);\n    const headers: Record<string, string> = {\n      'Authorization': `Bearer ${this.jiraToken()}`,\n      'X-Atlassian-Token': 'no-check',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: POST ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\nBody: <multipart/form-data>\\n`;\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, { method: 'POST', headers, body: formData }, opts.timeoutMs ?? 60000);\n  }\n\n  async bitbucket<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.bitbucket.baseUrl;\n    if (!baseUrl) throw new PncliError('Bitbucket baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.bitbucketHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private confluenceHeaders(): Record<string, string> {\n    const { apiToken } = this.config.confluence;\n    if (!apiToken) throw new PncliError('Confluence credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${apiToken}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async confluence<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.confluence.baseUrl;\n    if (!baseUrl) throw new PncliError('Confluence baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.confluenceHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private sdeHeaders(): Record<string, string> {\n    const { token } = this.config.sde;\n    if (!token) throw new PncliError('SDElements credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Token ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async sde<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.sde.baseUrl;\n    if (!baseUrl) throw new PncliError('SDElements baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.sdeHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async sdePaginate<T>(\n    fetchPage: (page: number, pageSize: number) => Promise<{ count: number; results: T[] }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let page = 1;\n    const pageSize = 100;\n\n    while (true) {\n      const response = await fetchPage(page, pageSize);\n      results.push(...response.results);\n      if (results.length >= response.count || response.results.length === 0) break;\n      page++;\n    }\n\n    return results;\n  }\n\n  private async getAdoFetcher(): Promise<typeof fetch> {\n    if (!this.adoFetcher) {\n      this.adoFetcher = await buildAdoFetcher(this.config);\n    }\n    return this.adoFetcher;\n  }\n\n  async ado<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      const msg = `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const defaultHeaders: Record<string, string> = {\n      'Accept': 'application/json',\n      'Content-Type': 'application/json',\n      ...opts.headers\n    };\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers: defaultHeaders,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000, fetcher);\n  }\n\n  async adoText(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<string> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      fs.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const response = await fetchWithTimeout(url, {\n      method: opts.method ?? 'GET',\n      headers: { 'Accept': 'text/plain', ...opts.headers }\n    }, opts.timeoutMs ?? 30000, fetcher);\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return response.text();\n  }\n\n  async adoRaw(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<{ data: unknown; headers: Headers }> {\n    const baseUrl = this.config.ado.baseUrl;\n    if (!baseUrl) throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      fs.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = await this.getAdoFetcher();\n    const controller = new AbortController();\n    const timer = setTimeout(() => controller.abort(), opts.timeoutMs ?? 30000);\n    let response: Response;\n    try {\n      response = await fetcher(url, {\n        method: opts.method ?? 'GET',\n        headers: { 'Accept': 'application/json', 'Content-Type': 'application/json', ...opts.headers },\n        body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined,\n        signal: controller.signal\n      });\n    } finally {\n      clearTimeout(timer);\n    }\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    const text = await response.text();\n    const data = text ? JSON.parse(text) : undefined;\n    return { data, headers: response.headers };\n  }\n\n  async adoPaginate<T>(\n    fetchPage: (continuationToken?: string) => Promise<{ data: { value: T[] }; headers: Headers }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let token: string | undefined;\n\n    while (true) {\n      const { data, headers } = await fetchPage(token);\n      results.push(...(data.value ?? []));\n      const next = headers.get('x-ms-continuationtoken');\n      if (!next) break;\n      token = next;\n    }\n\n    return results;\n  }\n\n  private jenkinsHeaders(): Record<string, string> {\n    const { username, apiToken } = this.config.jenkins;\n    if (!username || !apiToken) throw new PncliError('Jenkins credentials not configured. Run: pncli config init');\n    const creds = Buffer.from(`${username}:${apiToken}`).toString('base64');\n    return {\n      'Authorization': `Basic ${creds}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  private artifactoryHeaders(): Record<string, string> {\n    const { token } = this.config.artifactory;\n    if (!token) throw new PncliError('Artifactory credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  private udeployHeaders(): Record<string, string> {\n    const { pat, username, password } = this.config.udeploy;\n    let encoded: string;\n    if (username && password) {\n      encoded = Buffer.from(`${username}:${password}`).toString('base64');\n    } else if (username && pat) {\n      encoded = Buffer.from(`${username}:${pat}`).toString('base64');\n    } else if (pat) {\n      encoded = Buffer.from(`PasswordIsAuthToken:${JSON.stringify({ token: pat })}`).toString('base64');\n    } else {\n      throw new PncliError('UDeploy credentials not configured. Run: pncli config init');\n    }\n    return {\n      'Authorization': `Basic ${encoded}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async jenkins<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.jenkins.baseUrl;\n    if (!baseUrl) throw new PncliError('Jenkins baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.jenkinsHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async jenkinsRaw(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<{ status: number; headers: Headers; text: string }> {\n    const baseUrl = this.config.jenkins.baseUrl;\n    if (!baseUrl) throw new PncliError('Jenkins baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.jenkinsHeaders();\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${opts.method ?? 'GET'} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const response = await fetchWithTimeout(url, {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    }, opts.timeoutMs ?? 30000);\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return { status: response.status, headers: response.headers, text: await response.text() };\n  }\n\n  async artifactory<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.artifactory.baseUrl;\n    if (!baseUrl) throw new PncliError('Artifactory baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = { ...this.artifactoryHeaders(), ...opts.headers };\n\n    // AQL search uses text/plain body — don't JSON-serialize it\n    const body = opts.body !== undefined\n      ? (typeof opts.body === 'string' ? opts.body : JSON.stringify(opts.body))\n      : undefined;\n\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${typeof opts.body === 'string' ? opts.body : JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n\n  async udeploy<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.udeploy.baseUrl;\n    if (!baseUrl) throw new PncliError('UDeploy baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.udeployHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async artifactoryText(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<string> {\n    const baseUrl = this.config.artifactory.baseUrl;\n    if (!baseUrl) throw new PncliError('Artifactory baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = { ...this.artifactoryHeaders(), Accept: 'text/plain', ...opts.headers };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      fs.writeSync(process.stderr.fd, `DRY RUN: ${opts.method ?? 'GET'} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const response = await fetchWithTimeout(url, {\n      method: opts.method ?? 'GET',\n      headers\n    }, opts.timeoutMs ?? 30000);\n\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return response.text();\n  }\n\n\n\n  private sonarHeaders(): Record<string, string> {\n    const { token } = this.config.sonar;\n    if (!token) throw new PncliError('SonarQube credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async sonar<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.sonar.baseUrl;\n    if (!baseUrl) throw new PncliError('SonarQube baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.sonarHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async sonarPaginate<T>(\n    fetchPage: (page: number, pageSize: number) => Promise<{ total: number; p: number; ps: number; items: T[] }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let page = 1;\n    const pageSize = 500;\n\n    while (true) {\n      const response = await fetchPage(page, pageSize);\n      results.push(...response.items);\n      if (results.length >= response.total || response.items.length === 0) break;\n      page++;\n    }\n\n    return results;\n  }\n\n  async confluencePaginate<T>(\n    fetchPage: (start: number, limit: number) => Promise<{ results: T[]; start: number; limit: number; size: number; _links: { next?: string } }>,\n    maxTotal?: number\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let start = 0;\n    const defaultPageSize = 25;\n\n    while (true) {\n      const pageLimit = maxTotal !== undefined\n        ? Math.min(maxTotal - results.length, defaultPageSize)\n        : defaultPageSize;\n      const page = await fetchPage(start, pageLimit);\n      results.push(...page.results);\n      if (maxTotal !== undefined && results.length >= maxTotal) break;\n      if (!page._links.next) break;\n      start += page.size;\n    }\n\n    return maxTotal !== undefined ? results.slice(0, maxTotal) : results;\n  }\n\n  async paginate<T>(\n    fetchPage: (start: number, limit: number) => Promise<{ values: T[]; isLastPage: boolean; nextPageStart?: number }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let start = 0;\n    const limit = 100;\n\n    while (true) {\n      const page = await fetchPage(start, limit);\n      results.push(...page.values);\n      if (page.isLastPage) break;\n      start = page.nextPageStart ?? start + limit;\n    }\n\n    return results;\n  }\n\n  async jiraPaginate<T>(\n    fetchPage: (startAt: number, maxResults: number) => Promise<{ issues?: T[]; values?: T[]; total: number; startAt: number; maxResults: number }>\n  ): Promise<T[]> {\n    const results: T[] = [];\n    let startAt = 0;\n    const maxResults = 100;\n\n    while (true) {\n      const page = await fetchPage(startAt, maxResults);\n      const items = (page.issues ?? page.values ?? []) as T[];\n      results.push(...items);\n      startAt += items.length;\n      if (startAt >= page.total || items.length === 0) break;\n    }\n\n    return results;\n  }\n\n  private getCheckmarxFetcher(): typeof fetch {\n    if (!this.checkmarxFetcher) {\n      this.checkmarxFetcher = buildCheckmarxFetcher(this.config);\n    }\n    return this.checkmarxFetcher;\n  }\n\n  private servicenowHeaders(): Record<string, string> {\n    const { username, password, apiToken } = this.config.servicenow;\n    let encoded: string;\n    if (username && apiToken) {\n      encoded = Buffer.from(`${username}:${apiToken}`).toString('base64');\n    } else if (username && password) {\n      encoded = Buffer.from(`${username}:${password}`).toString('base64');\n    } else {\n      throw new PncliError('ServiceNow credentials not configured. Run: pncli config init');\n    }\n    return {\n      'Authorization': `Basic ${encoded}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async servicenow<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.servicenow.baseUrl;\n    if (!baseUrl) throw new PncliError('ServiceNow baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.servicenowHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private contrastHeaders(): Record<string, string> {\n    const { apiKey, serviceKey, username } = this.config.contrast;\n    if (!apiKey || !serviceKey || !username) {\n      throw new PncliError('Contrast credentials not configured. Run: pncli config init');\n    }\n    const authorization = Buffer.from(`${username}:${serviceKey}`).toString('base64');\n    return {\n      'Authorization': authorization,\n      'API-Key': apiKey,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async contrast<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const { baseUrl } = this.config.contrast;\n    if (!baseUrl) throw new PncliError('Contrast base URL not configured. Run: pncli config set contrast.baseUrl <url>');\n\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.contrastHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]', 'API-Key': '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private sonatypeiqHeaders(): Record<string, string> {\n    const { userCode, passcode } = this.config.sonatypeiq;\n    if (!userCode || !passcode) throw new PncliError('Sonatype IQ credentials not configured. Run: pncli config init');\n    const encoded = Buffer.from(`${userCode}:${passcode}`).toString('base64');\n    return {\n      'Authorization': `Basic ${encoded}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async sonatypeiq<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.sonatypeiq.baseUrl;\n    if (!baseUrl) throw new PncliError('Sonatype IQ Server baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.sonatypeiqHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  private openshiftHeaders(): Record<string, string> {\n    const { token } = this.config.openshift;\n    if (!token) throw new PncliError('OpenShift credentials not configured. Run: pncli config init');\n    return {\n      'Authorization': `Bearer ${token}`,\n      'Content-Type': 'application/json',\n      'Accept': 'application/json',\n      'Connection': 'close'\n    };\n  }\n\n  async openshift<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.openshift.baseUrl;\n    if (!baseUrl) throw new PncliError('OpenShift baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n    const headers = this.openshiftHeaders();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers,\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      const msg = `DRY RUN: ${init.method} ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000);\n  }\n\n  async openshiftText(\n    path: string,\n    opts: HttpRequestOptions & { lines?: number } = {}\n  ): Promise<string> {\n    const baseUrl = this.config.openshift.baseUrl;\n    if (!baseUrl) throw new PncliError('OpenShift baseUrl not configured. Run: pncli config init');\n\n    const params: Record<string, string | number | boolean | undefined> = { ...opts.params };\n    if (opts.lines !== undefined) params['tailLines'] = opts.lines;\n\n    const url = buildUrl(baseUrl, path, params);\n    const headers: Record<string, string> = {\n      'Authorization': this.openshiftHeaders()['Authorization'],\n      'Accept': '*/*',\n      'Connection': 'close'\n    };\n\n    if (this.dryRun) {\n      const safeHeaders = { ...headers, Authorization: '[REDACTED]' };\n      fs.writeSync(process.stderr.fd, `DRY RUN: GET ${url}\\nHeaders: ${JSON.stringify(safeHeaders, null, 2)}\\n`);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const response = await fetchWithTimeout(url, { method: 'GET', headers }, opts.timeoutMs ?? 30000);\n    if (!response.ok) {\n      let message = `HTTP ${response.status} ${response.statusText}`;\n      try {\n        const parsed = JSON.parse(await response.text());\n        if (parsed.message) message = String(parsed.message);\n      } catch { /* ignore */ }\n      throw new PncliError(message, response.status, url);\n    }\n\n    return response.text();\n  }\n\n  async checkmarx<T>(\n    path: string,\n    opts: HttpRequestOptions = {}\n  ): Promise<T> {\n    const baseUrl = this.config.checkmarx.baseUrl;\n    if (!baseUrl) throw new PncliError('Checkmarx baseUrl not configured. Run: pncli config init');\n\n    const url = buildUrl(baseUrl, path, opts.params);\n\n    if (this.dryRun) {\n      const msg = `DRY RUN: ${opts.method ?? 'GET'} ${url}\\n`\n        + (opts.body ? `Body: ${JSON.stringify(opts.body, null, 2)}\\n` : '');\n      fs.writeSync(process.stderr.fd, msg);\n      process.exitCode = ExitCode.SUCCESS;\n      throw new PncliError('dry-run', 0);\n    }\n\n    const fetcher = this.getCheckmarxFetcher();\n    const init: RequestInit = {\n      method: opts.method ?? 'GET',\n      headers: { 'Accept': 'application/json', 'Content-Type': 'application/json', ...opts.headers },\n      body: opts.body !== undefined ? JSON.stringify(opts.body) : undefined\n    };\n\n    return request<T>(url, init, opts.timeoutMs ?? 30000, fetcher);\n  }\n}\n\nexport function createHttpClient(config: ResolvedConfig, dryRun = false): HttpClient {\n  return new HttpClient(config, dryRun);\n}\n","export class PncliError extends Error {\n  status: number;\n  url?: string;\n\n  constructor(message: string, status: number = 1, url?: string) {\n    super(message);\n    this.name = 'PncliError';\n    this.status = status;\n    this.url = url;\n  }\n}\n","export const ExitCode = {\n  SUCCESS: 0,\n  GENERAL_ERROR: 1,\n  USAGE_ERROR: 2,\n  NETWORK_ERROR: 69,    // EX_UNAVAILABLE from sysexits.h\n  AUTH_ERROR: 77,       // EX_NOPERM from sysexits.h\n  CONFIG_ERROR: 78,     // EX_CONFIG from sysexits.h\n} as const;\n\nexport type ExitCode = (typeof ExitCode)[keyof typeof ExitCode];\n\nexport function exitCodeFromStatus(httpStatus: number): ExitCode {\n  if (httpStatus === 401 || httpStatus === 403) return ExitCode.AUTH_ERROR;\n  if (httpStatus === 0) return ExitCode.NETWORK_ERROR;\n  return ExitCode.GENERAL_ERROR;\n}\n","import fs from 'fs';\nimport chalk from 'chalk';\nimport type { Meta, SuccessEnvelope, ErrorEnvelope, ErrorDetail } from '../types/common.js';\nimport { PncliError } from './errors.js';\nimport { ExitCode, exitCodeFromStatus } from './exitCodes.js';\n\nlet globalOptions = { pretty: false, verbose: false, debug: false };\nlet globalUser: { email: string | undefined; userId: string | undefined } = { email: undefined, userId: undefined };\nlet outputFile: string | undefined;\n\nexport function setGlobalOptions(opts: { pretty: boolean; verbose: boolean; debug?: boolean; outputFile?: string }): void {\n  globalOptions = { pretty: opts.pretty, verbose: opts.verbose, debug: opts.debug ?? false };\n  outputFile = opts.outputFile;\n}\n\nexport function isDebugEnabled(): boolean {\n  return globalOptions.debug;\n}\n\nexport function setGlobalUser(user: { email: string | undefined; userId: string | undefined }): void {\n  globalUser = user;\n}\n\nfunction buildMeta(service: string, action: string, startTime: number): Meta {\n  return {\n    service,\n    action,\n    timestamp: new Date().toISOString(),\n    duration_ms: Date.now() - startTime,\n    user: (globalUser.email ?? globalUser.userId) ? globalUser : undefined\n  };\n}\n\nfunction writeToFile(filePath: string, content: string): void {\n  try {\n    fs.writeFileSync(filePath, content, 'utf8');\n  } catch (writeErr) {\n    process.stderr.write(\n      `Warning: could not write to output file \"${filePath}\": ${(writeErr as NodeJS.ErrnoException).message}\\n`\n    );\n    process.exitCode = ExitCode.GENERAL_ERROR;\n  }\n}\n\nexport function success<T>(data: T, service: string, action: string, startTime: number): void {\n  const envelope: SuccessEnvelope<T> = {\n    ok: true,\n    data,\n    meta: buildMeta(service, action, startTime)\n  };\n  const out = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + '\\n';\n  if (outputFile) {\n    writeToFile(outputFile, out);\n  } else {\n    process.stdout.write(out);\n  }\n}\n\nexport function fail(\n  err: unknown,\n  service: string,\n  action: string,\n  startTime: number\n): never {\n  const errorDetail: ErrorDetail = {\n    status: err instanceof PncliError ? err.status : 1,\n    message: err instanceof Error ? err.message : String(err),\n    url: err instanceof PncliError ? (err.url ?? null) : null\n  };\n\n  const envelope: ErrorEnvelope = {\n    ok: false,\n    error: errorDetail,\n    meta: buildMeta(service, action, startTime)\n  };\n\n  const msg = globalOptions.pretty\n    ? chalk.red('✗ Error: ') + errorDetail.message\n    : null;\n\n  if (msg) process.stderr.write(msg + '\\n');\n\n  const output = (globalOptions.pretty ? JSON.stringify(envelope, null, 2) : JSON.stringify(envelope)) + '\\n';\n  const exitCode = err instanceof PncliError ? exitCodeFromStatus(err.status) : ExitCode.GENERAL_ERROR;\n  if (outputFile) {\n    writeToFile(outputFile, output);\n  } else {\n    try {\n      fs.writeSync(process.stdout.fd, output);\n    } catch (writeErr) {\n      if ((writeErr as NodeJS.ErrnoException).code !== 'EPIPE') throw writeErr;\n    }\n  }\n  process.exitCode = exitCode;\n  throw new PncliError(errorDetail.message, errorDetail.status);\n}\n\nexport function writeRawOutput(content: string): void {\n  if (outputFile) {\n    writeToFile(outputFile, content);\n  } else {\n    process.stdout.write(content);\n  }\n}\n\nexport function log(message: string): void {\n  if (globalOptions.verbose) {\n    process.stderr.write(\n      (globalOptions.pretty ? chalk.gray('▸ ') : '') + message + '\\n'\n    );\n  }\n}\n\nexport function debug(message: string): void {\n  if (globalOptions.debug) {\n    process.stderr.write(\n      (globalOptions.pretty ? chalk.cyan('⬡ ') : '') + message + '\\n'\n    );\n  }\n}\n\nexport function warn(message: string): void {\n  process.stderr.write(\n    (globalOptions.pretty ? chalk.yellow('⚠ ') : '') + message + '\\n'\n  );\n}\n","import type { ResolvedConfig } from '../types/config.js';\nimport { PncliError } from './errors.js';\n\n/**\n * Returns a fetch-compatible function for Azure DevOps Server requests,\n * with Basic auth (PAT) injected into every call.\n */\nexport async function buildAdoFetcher(\n  config: ResolvedConfig\n): Promise<typeof fetch> {\n  const { pat, baseUrl } = config.ado;\n\n  if (!baseUrl) {\n    throw new PncliError('Azure DevOps baseUrl not configured. Run: pncli config init', 1);\n  }\n\n  if (!pat) {\n    throw new PncliError(\n      'Azure DevOps PAT not configured. Set a PAT via pncli config init or PNCLI_ADO_PAT env var.',\n      1\n    );\n  }\n\n  const encoded = Buffer.from(':' + pat).toString('base64');\n  const authHeader = `Basic ${encoded}`;\n  return (url: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]) =>\n    fetch(url, {\n      ...init,\n      headers: {\n        'Content-Type': 'application/json',\n        'Accept': 'application/json',\n        ...(init?.headers as Record<string, string> | undefined),\n        'Authorization': authHeader\n      }\n    });\n}\n","import type { ResolvedConfig } from '../types/config.js';\nimport type { CheckmarxTokenResponse } from '../types/checkmarx.js';\nimport { PncliError } from './errors.js';\n\nconst CX_CLIENT_ID = 'resource_owner_client';\nconst CX_CLIENT_SECRET = '014DF517-39D1-4453-B7B3-9930C563627C';\nconst CX_SCOPE = 'sast_api offline_access';\n\ninterface TokenCache {\n  value: string;\n  expiresAt: number;\n}\n\n/**\n * Returns a fetch-compatible function for Checkmarx CxSAST 9.x requests,\n * with OAuth2 password-grant token exchange and bearer auth injected into every call.\n * The token is cached for the lifetime of the returned fetcher and refreshed\n * when within 60s of expiry.\n */\nexport function buildCheckmarxFetcher(config: ResolvedConfig): typeof fetch {\n  const { baseUrl, username, password } = config.checkmarx;\n\n  if (!baseUrl) throw new PncliError('Checkmarx baseUrl not configured. Run: pncli config init', 1);\n  if (!username) throw new PncliError('Checkmarx username not configured. Run: pncli config init', 1);\n  if (!password) throw new PncliError('Checkmarx password not configured. Run: pncli config init', 1);\n\n  // Capture as definite strings for use inside the closure (TypeScript can't narrow across closures)\n  const resolvedUsername: string = username;\n  const resolvedPassword: string = password;\n  const tokenUrl = `${baseUrl.replace(/\\/$/, '')}/cxrestapi/auth/identity/connect/token`;\n  let cache: TokenCache | null = null;\n\n  async function getToken(): Promise<string> {\n    const now = Date.now();\n    if (cache && cache.expiresAt - now > 60_000) {\n      return cache.value;\n    }\n\n    const body = new URLSearchParams({\n      grant_type: 'password',\n      client_id: CX_CLIENT_ID,\n      client_secret: CX_CLIENT_SECRET,\n      scope: CX_SCOPE,\n      username: resolvedUsername,\n      password: resolvedPassword\n    });\n\n    const response = await fetch(tokenUrl, {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n      body: body.toString()\n    });\n\n    if (!response.ok) {\n      const text = await response.text().catch(() => '');\n      throw new PncliError(\n        `Checkmarx token exchange failed (${response.status}): ${text || response.statusText}`,\n        response.status\n      );\n    }\n\n    const data = await response.json() as CheckmarxTokenResponse;\n    if (!data.access_token) {\n      throw new PncliError('Checkmarx token endpoint returned no access_token', response.status);\n    }\n    cache = {\n      value: data.access_token,\n      expiresAt: now + data.expires_in * 1000\n    };\n    return cache.value;\n  }\n\n  // Intentionally synchronous (unlike buildAdoFetcher which is async): the token exchange\n  // happens lazily inside getToken() on the first actual API call, not during construction.\n  return async (url: Parameters<typeof fetch>[0], init?: Parameters<typeof fetch>[1]): Promise<Response> => {\n    const token = await getToken();\n    return fetch(url, {\n      ...init,\n      headers: {\n        ...(init?.headers as Record<string, string> | undefined),\n        'Authorization': `Bearer ${token}`\n      }\n    });\n  };\n}\n"],"mappings":";;;AAAA,OAAOA,SAAQ;;;ACAR,IAAM,aAAN,cAAyB,MAAM;AAAA,EACpC;AAAA,EACA;AAAA,EAEA,YAAY,SAAiB,SAAiB,GAAG,KAAc;AAC7D,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,MAAM;AAAA,EACb;AACF;;;ACVO,IAAM,WAAW;AAAA,EACtB,SAAS;AAAA,EACT,eAAe;AAAA,EACf,aAAa;AAAA,EACb,eAAe;AAAA;AAAA,EACf,YAAY;AAAA;AAAA,EACZ,cAAc;AAAA;AAChB;AAIO,SAAS,mBAAmB,YAA8B;AAC/D,MAAI,eAAe,OAAO,eAAe,IAAK,QAAO,SAAS;AAC9D,MAAI,eAAe,EAAG,QAAO,SAAS;AACtC,SAAO,SAAS;AAClB;;;ACfA,OAAO,QAAQ;AACf,OAAO,WAAW;AAKlB,IAAI,gBAAgB,EAAE,QAAQ,OAAO,SAAS,OAAO,OAAO,MAAM;AAClE,IAAI,aAAwE,EAAE,OAAO,QAAW,QAAQ,OAAU;AAClH,IAAI;AAEG,SAAS,iBAAiB,MAAyF;AACxH,kBAAgB,EAAE,QAAQ,KAAK,QAAQ,SAAS,KAAK,SAAS,OAAO,KAAK,SAAS,MAAM;AACzF,eAAa,KAAK;AACpB;AAEO,SAAS,iBAA0B;AACxC,SAAO,cAAc;AACvB;AAEO,SAAS,cAAc,MAAuE;AACnG,eAAa;AACf;AAEA,SAAS,UAAU,SAAiB,QAAgB,WAAyB;AAC3E,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,aAAa,KAAK,IAAI,IAAI;AAAA,IAC1B,MAAO,WAAW,SAAS,WAAW,SAAU,aAAa;AAAA,EAC/D;AACF;AAEA,SAAS,YAAY,UAAkB,SAAuB;AAC5D,MAAI;AACF,OAAG,cAAc,UAAU,SAAS,MAAM;AAAA,EAC5C,SAAS,UAAU;AACjB,YAAQ,OAAO;AAAA,MACb,4CAA4C,QAAQ,MAAO,SAAmC,OAAO;AAAA;AAAA,IACvG;AACA,YAAQ,WAAW,SAAS;AAAA,EAC9B;AACF;AAEO,SAAS,QAAW,MAAS,SAAiB,QAAgB,WAAyB;AAC5F,QAAM,WAA+B;AAAA,IACnC,IAAI;AAAA,IACJ;AAAA,IACA,MAAM,UAAU,SAAS,QAAQ,SAAS;AAAA,EAC5C;AACA,QAAM,OAAO,cAAc,SAAS,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,KAAK,UAAU,QAAQ,KAAK;AACpG,MAAI,YAAY;AACd,gBAAY,YAAY,GAAG;AAAA,EAC7B,OAAO;AACL,YAAQ,OAAO,MAAM,GAAG;AAAA,EAC1B;AACF;AAEO,SAAS,KACd,KACA,SACA,QACA,WACO;AACP,QAAM,cAA2B;AAAA,IAC/B,QAAQ,eAAe,aAAa,IAAI,SAAS;AAAA,IACjD,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAAA,IACxD,KAAK,eAAe,aAAc,IAAI,OAAO,OAAQ;AAAA,EACvD;AAEA,QAAM,WAA0B;AAAA,IAC9B,IAAI;AAAA,IACJ,OAAO;AAAA,IACP,MAAM,UAAU,SAAS,QAAQ,SAAS;AAAA,EAC5C;AAEA,QAAM,MAAM,cAAc,SACtB,MAAM,IAAI,gBAAW,IAAI,YAAY,UACrC;AAEJ,MAAI,IAAK,SAAQ,OAAO,MAAM,MAAM,IAAI;AAExC,QAAM,UAAU,cAAc,SAAS,KAAK,UAAU,UAAU,MAAM,CAAC,IAAI,KAAK,UAAU,QAAQ,KAAK;AACvG,QAAM,WAAW,eAAe,aAAa,mBAAmB,IAAI,MAAM,IAAI,SAAS;AACvF,MAAI,YAAY;AACd,gBAAY,YAAY,MAAM;AAAA,EAChC,OAAO;AACL,QAAI;AACF,SAAG,UAAU,QAAQ,OAAO,IAAI,MAAM;AAAA,IACxC,SAAS,UAAU;AACjB,UAAK,SAAmC,SAAS,QAAS,OAAM;AAAA,IAClE;AAAA,EACF;AACA,UAAQ,WAAW;AACnB,QAAM,IAAI,WAAW,YAAY,SAAS,YAAY,MAAM;AAC9D;AAEO,SAAS,eAAe,SAAuB;AACpD,MAAI,YAAY;AACd,gBAAY,YAAY,OAAO;AAAA,EACjC,OAAO;AACL,YAAQ,OAAO,MAAM,OAAO;AAAA,EAC9B;AACF;AAEO,SAAS,IAAI,SAAuB;AACzC,MAAI,cAAc,SAAS;AACzB,YAAQ,OAAO;AAAA,OACZ,cAAc,SAAS,MAAM,KAAK,SAAI,IAAI,MAAM,UAAU;AAAA,IAC7D;AAAA,EACF;AACF;AAEO,SAAS,MAAM,SAAuB;AAC3C,MAAI,cAAc,OAAO;AACvB,YAAQ,OAAO;AAAA,OACZ,cAAc,SAAS,MAAM,KAAK,SAAI,IAAI,MAAM,UAAU;AAAA,IAC7D;AAAA,EACF;AACF;AAEO,SAAS,KAAK,SAAuB;AAC1C,UAAQ,OAAO;AAAA,KACZ,cAAc,SAAS,MAAM,OAAO,SAAI,IAAI,MAAM,UAAU;AAAA,EAC/D;AACF;;;ACtHA,eAAsB,gBACpB,QACuB;AACvB,QAAM,EAAE,KAAK,QAAQ,IAAI,OAAO;AAEhC,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,WAAW,+DAA+D,CAAC;AAAA,EACvF;AAEA,MAAI,CAAC,KAAK;AACR,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,OAAO,KAAK,MAAM,GAAG,EAAE,SAAS,QAAQ;AACxD,QAAM,aAAa,SAAS,OAAO;AACnC,SAAO,CAAC,KAAkC,SACxC,MAAM,KAAK;AAAA,IACT,GAAG;AAAA,IACH,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,GAAI,MAAM;AAAA,MACV,iBAAiB;AAAA,IACnB;AAAA,EACF,CAAC;AACL;;;AC/BA,IAAM,eAAe;AACrB,IAAM,mBAAmB;AACzB,IAAM,WAAW;AAaV,SAAS,sBAAsB,QAAsC;AAC1E,QAAM,EAAE,SAAS,UAAU,SAAS,IAAI,OAAO;AAE/C,MAAI,CAAC,QAAS,OAAM,IAAI,WAAW,4DAA4D,CAAC;AAChG,MAAI,CAAC,SAAU,OAAM,IAAI,WAAW,6DAA6D,CAAC;AAClG,MAAI,CAAC,SAAU,OAAM,IAAI,WAAW,6DAA6D,CAAC;AAGlG,QAAM,mBAA2B;AACjC,QAAM,mBAA2B;AACjC,QAAM,WAAW,GAAG,QAAQ,QAAQ,OAAO,EAAE,CAAC;AAC9C,MAAI,QAA2B;AAE/B,iBAAe,WAA4B;AACzC,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,SAAS,MAAM,YAAY,MAAM,KAAQ;AAC3C,aAAO,MAAM;AAAA,IACf;AAEA,UAAM,OAAO,IAAI,gBAAgB;AAAA,MAC/B,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,eAAe;AAAA,MACf,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,CAAC;AAED,UAAM,WAAW,MAAM,MAAM,UAAU;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,MAC/D,MAAM,KAAK,SAAS;AAAA,IACtB,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,OAAO,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACjD,YAAM,IAAI;AAAA,QACR,oCAAoC,SAAS,MAAM,MAAM,QAAQ,SAAS,UAAU;AAAA,QACpF,SAAS;AAAA,MACX;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,CAAC,KAAK,cAAc;AACtB,YAAM,IAAI,WAAW,qDAAqD,SAAS,MAAM;AAAA,IAC3F;AACA,YAAQ;AAAA,MACN,OAAO,KAAK;AAAA,MACZ,WAAW,MAAM,KAAK,aAAa;AAAA,IACrC;AACA,WAAO,MAAM;AAAA,EACf;AAIA,SAAO,OAAO,KAAkC,SAA0D;AACxG,UAAM,QAAQ,MAAM,SAAS;AAC7B,WAAO,MAAM,KAAK;AAAA,MAChB,GAAG;AAAA,MACH,SAAS;AAAA,QACP,GAAI,MAAM;AAAA,QACV,iBAAiB,UAAU,KAAK;AAAA,MAClC;AAAA,IACF,CAAC;AAAA,EACH;AACF;;;AL3DA,IAAM,oBAAoB,oBAAI,IAAI,CAAC,iBAAiB,SAAS,CAAC;AAE9D,SAAS,cAAc,SAAyD;AAC9E,MAAI,CAAC,QAAS,QAAO,CAAC;AACtB,MAAI;AACJ,MAAI,mBAAmB,SAAS;AAC9B,cAAU,CAAC,GAAG,QAAQ,QAAQ,CAAC;AAAA,EACjC,WAAW,MAAM,QAAQ,OAAO,GAAG;AACjC,cAAW;AAAA,EACb,OAAO;AACL,cAAU,OAAO,QAAQ,OAAiC;AAAA,EAC5D;AACA,SAAO,OAAO;AAAA,IACZ,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,kBAAkB,IAAI,EAAE,YAAY,CAAC,IAAI,eAAe,CAAC,CAAC;AAAA,EACxF;AACF;AAEA,SAAS,SAAS,MAAc,MAAc,QAAwE;AACpH,QAAM,MAAM,IAAI,IAAI,MAAM,KAAK,SAAS,GAAG,IAAI,OAAO,OAAO,GAAG;AAChE,MAAI,QAAQ;AACV,eAAW,CAAC,KAAK,GAAG,KAAK,OAAO,QAAQ,MAAM,GAAG;AAC/C,UAAI,QAAQ,QAAW;AACrB,YAAI,aAAa,IAAI,KAAK,OAAO,GAAG,CAAC;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,eAAe,iBAAiB,KAAa,MAAmB,WAAmB,UAAwB,OAA0B;AACnI,QAAM,aAAa,IAAI,gBAAgB;AACvC,QAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,SAAS;AAC5D,MAAI;AACF,WAAO,MAAM,QAAQ,KAAK,EAAE,GAAG,MAAM,QAAQ,WAAW,OAAO,CAAC;AAAA,EAClE,UAAE;AACA,iBAAa,KAAK;AAAA,EACpB;AACF;AAEA,eAAe,QACb,KACA,MACA,WACA,UAAwB,OACZ;AACZ,MAAI;AAEJ,MAAI,eAAe,GAAG;AACpB,UAAM,UAAU,KAAK,UAAU,OAAO,YAAY;AAClD,UAAM,cAAc,cAAc,KAAK,OAAO;AAC9C,UAAM,UAAK,MAAM,IAAI,GAAG,EAAE;AAC1B,UAAM,cAAc,KAAK,UAAU,WAAW,CAAC,EAAE;AAAA,EACnD;AAEA,WAAS,UAAU,GAAG,UAAU,GAAG,WAAW;AAC5C,QAAI;AACJ,UAAM,WAAW,KAAK,IAAI;AAC1B,QAAI;AACF,iBAAW,MAAM,iBAAiB,KAAK,MAAM,WAAW,OAAO;AAAA,IACjE,SAAS,KAAK;AACZ,YAAM,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC,EAAE;AACpE,YAAM,IAAI;AAAA,QACR,mBAAmB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,QACnE;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,UAAM,UAAK,SAAS,MAAM,IAAI,SAAS,UAAU,KAAK,KAAK,IAAI,IAAI,QAAQ,KAAK;AAEhF,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,aAAa,SAAS,QAAQ,IAAI,aAAa;AACrD,YAAM,SAAS,aAAa,SAAS,YAAY,EAAE,IAAI,OAAQ,UAAU,KAAK;AAC9E,UAAI,gCAAgC,MAAM,OAAO;AACjD,YAAM,IAAI,QAAQ,aAAW,WAAW,SAAS,MAAM,CAAC;AACxD,kBAAY,IAAI,WAAW,gBAAgB,KAAK,GAAG;AACnD;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,OAAO,MAAM,SAAS,KAAK;AACjC,cAAM,SAAS,KAAK,MAAM,IAAI;AAC9B,cAAM,QAAkB,CAAC;AAEzB,YAAI,MAAM,QAAQ,OAAO,aAAa,GAAG;AACvC,gBAAM,KAAK,GAAI,OAAO,cAA2B,OAAO,OAAO,CAAC;AAAA,QAClE;AAEA,YAAI,OAAO,UAAU,OAAO,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,MAAM,GAAG;AACvF,qBAAW,CAAC,OAAO,GAAG,KAAK,OAAO,QAAQ,OAAO,MAAgC,GAAG;AAClF,kBAAM,KAAK,GAAG,KAAK,KAAK,GAAG,EAAE;AAAA,UAC/B;AAAA,QACF;AAEA,YAAI,MAAM,QAAQ,OAAO,MAAM,GAAG;AAChC,qBAAW,KAAK,OAAO,QAAqD;AAC1E,gBAAI,GAAG,QAAS,OAAM,KAAK,EAAE,OAAO;AAAA,qBAC3B,GAAG,IAAK,OAAM,KAAK,EAAE,GAAG;AAAA,UACnC;AAAA,QACF;AAEA,YAAI,MAAM,WAAW,KAAK,OAAO,SAAS;AACxC,gBAAM,KAAK,OAAO,OAAO,OAAO,CAAC;AAAA,QACnC;AACA,YAAI,MAAM,SAAS,EAAG,WAAU,MAAM,KAAK,IAAI;AAAA,MACjD,QAAQ;AAAA,MAER;AACA,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,QAAI,SAAS,WAAW,KAAK;AAC3B,aAAO;AAAA,IACT;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,QAAI,CAAC,KAAM,QAAO;AAClB,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB;AAEA,QAAM,aAAa,IAAI,WAAW,gCAAgC,GAAG,GAAG;AAC1E;AAEO,IAAM,aAAN,MAAiB;AAAA,EACd;AAAA,EACA;AAAA,EACA,aAAkC;AAAA,EAClC,mBAAwC;AAAA,EAEhD,YAAY,QAAwB,SAAS,OAAO;AAClD,SAAK,SAAS;AACd,SAAK,SAAS;AAAA,EAChB;AAAA,EAEQ,YAAoB;AAC1B,UAAM,EAAE,SAAS,IAAI,KAAK,OAAO;AACjC,QAAI,CAAC,SAAU,OAAM,IAAI,WAAW,yDAAyD;AAC7F,WAAO;AAAA,EACT;AAAA,EAEQ,cAAsC;AAC5C,WAAO;AAAA,MACL,iBAAiB,UAAU,KAAK,UAAU,CAAC;AAAA,MAC3C,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,mBAA2C;AACjD,UAAM,EAAE,IAAI,IAAI,KAAK,OAAO;AAC5B,QAAI,CAAC,IAAK,OAAM,IAAI,WAAW,8DAA8D;AAC7F,WAAO;AAAA,MACL,iBAAiB,UAAU,GAAG;AAAA,MAC9B,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,KAAK;AACjC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,qDAAqD;AAExF,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,YAAY;AACjC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAC,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,WAAW,aAAqB,OAA+B,CAAC,GAAoB;AACxF,UAAM,UAAkC;AAAA,MACtC,iBAAiB,UAAU,KAAK,UAAU,CAAC;AAAA,MAC3C,cAAc;AAAA,IAChB;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,gBAAgB,WAAW;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA;AACzF,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,WAAW,MAAM,iBAAiB,aAAa,EAAE,QAAQ,GAAG,KAAK,aAAa,GAAK;AACzF,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,WAAW,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU,IAAI,SAAS,QAAQ,WAAW;AAAA,IACrG;AACA,WAAO,OAAO,KAAK,MAAM,SAAS,YAAY,CAAC;AAAA,EACjD;AAAA,EAEA,MAAM,UACJ,MACA,QACA,aACA,OAA+B,CAAC,GACpB;AACZ,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,IAAI;AAElC,QAAI,KAAK,QAAQ;AACf,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,iBAAiB,GAAG;AAAA,gBAAmB,OAAO,MAAM;AAAA,CAAW;AAC/F,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,WAAO,QAAW,KAAK;AAAA,MACrB,QAAQ;AAAA,MACR,SAAS,EAAE,UAAU,oBAAoB,gBAAgB,YAAY;AAAA,MACrE,MAAM;AAAA,IACR,GAAG,KAAK,aAAa,KAAO,OAAO;AAAA,EACrC;AAAA,EAEA,MAAM,UAAU,aAAqB,OAA+B,CAAC,GAAoB;AACvF,QAAI,KAAK,QAAQ;AACf,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,gBAAgB,WAAW;AAAA,CAAI;AAC/D,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,WAAW,MAAM;AAAA,MACrB;AAAA,MACA,EAAE,SAAS,EAAE,QAAQ,2BAA2B,EAAE;AAAA,MAClD,KAAK,aAAa;AAAA,MAClB;AAAA,IACF;AACA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,IAAI,WAAW,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU,IAAI,SAAS,QAAQ,WAAW;AAAA,IACrG;AACA,WAAO,OAAO,KAAK,MAAM,SAAS,YAAY,CAAC;AAAA,EACjD;AAAA,EAEA,MAAM,WACJ,MACA,UACA,OAA+B,CAAC,GACpB;AACZ,UAAM,UAAU,KAAK,OAAO,KAAK;AACjC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,qDAAqD;AAExF,UAAM,MAAM,SAAS,SAAS,IAAI;AAClC,UAAM,UAAkC;AAAA,MACtC,iBAAiB,UAAU,KAAK,UAAU,CAAC;AAAA,MAC3C,qBAAqB;AAAA,MACrB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,iBAAiB,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA;AAAA;AAClF,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,EAAE,QAAQ,QAAQ,SAAS,MAAM,SAAS,GAAG,KAAK,aAAa,GAAK;AAAA,EAC7F;AAAA,EAEA,MAAM,UACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,UAAU;AACtC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,iBAAiB;AACtC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,oBAA4C;AAClD,UAAM,EAAE,SAAS,IAAI,KAAK,OAAO;AACjC,QAAI,CAAC,SAAU,OAAM,IAAI,WAAW,+DAA+D;AACnG,WAAO;AAAA,MACL,iBAAiB,UAAU,QAAQ;AAAA,MACnC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,WAAW;AACvC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,2DAA2D;AAE9F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,kBAAkB;AACvC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,aAAqC;AAC3C,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,+DAA+D;AAChG,WAAO;AAAA,MACL,iBAAiB,SAAS,KAAK;AAAA,MAC/B,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,IACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,2DAA2D;AAE9F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,WAAW;AAChC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,YACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,OAAO;AACX,UAAM,WAAW;AAEjB,WAAO,MAAM;AACX,YAAM,WAAW,MAAM,UAAU,MAAM,QAAQ;AAC/C,cAAQ,KAAK,GAAG,SAAS,OAAO;AAChC,UAAI,QAAQ,UAAU,SAAS,SAAS,SAAS,QAAQ,WAAW,EAAG;AACvE;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,gBAAuC;AACnD,QAAI,CAAC,KAAK,YAAY;AACpB,WAAK,aAAa,MAAM,gBAAgB,KAAK,MAAM;AAAA,IACrD;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,IACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,YAAM,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,KAC9C,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,iBAAyC;AAAA,MAC7C,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,GAAG,KAAK;AAAA,IACV;AACA,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB,SAAS;AAAA,MACT,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,KAAO,OAAO;AAAA,EAC/D;AAAA,EAEA,MAAM,QACJ,MACA,OAA2B,CAAC,GACX;AACjB,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,CAAI;AAC3E,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,WAAW,MAAM,iBAAiB,KAAK;AAAA,MAC3C,QAAQ,KAAK,UAAU;AAAA,MACvB,SAAS,EAAE,UAAU,cAAc,GAAG,KAAK,QAAQ;AAAA,IACrD,GAAG,KAAK,aAAa,KAAO,OAAO;AAEnC,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEA,MAAM,OACJ,MACA,OAA2B,CAAC,GACkB;AAC9C,UAAM,UAAU,KAAK,OAAO,IAAI;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,6DAA6D;AAEhG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,CAAI;AAC3E,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,MAAM,KAAK,cAAc;AACzC,UAAM,aAAa,IAAI,gBAAgB;AACvC,UAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,KAAK,aAAa,GAAK;AAC1E,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,QAAQ,KAAK;AAAA,QAC5B,QAAQ,KAAK,UAAU;AAAA,QACvB,SAAS,EAAE,UAAU,oBAAoB,gBAAgB,oBAAoB,GAAG,KAAK,QAAQ;AAAA,QAC7F,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,QAC5D,QAAQ,WAAW;AAAA,MACrB,CAAC;AAAA,IACH,UAAE;AACA,mBAAa,KAAK;AAAA,IACpB;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,UAAM,OAAO,MAAM,SAAS,KAAK;AACjC,UAAM,OAAO,OAAO,KAAK,MAAM,IAAI,IAAI;AACvC,WAAO,EAAE,MAAM,SAAS,SAAS,QAAQ;AAAA,EAC3C;AAAA,EAEA,MAAM,YACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI;AAEJ,WAAO,MAAM;AACX,YAAM,EAAE,MAAM,QAAQ,IAAI,MAAM,UAAU,KAAK;AAC/C,cAAQ,KAAK,GAAI,KAAK,SAAS,CAAC,CAAE;AAClC,YAAM,OAAO,QAAQ,IAAI,wBAAwB;AACjD,UAAI,CAAC,KAAM;AACX,cAAQ;AAAA,IACV;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,iBAAyC;AAC/C,UAAM,EAAE,UAAU,SAAS,IAAI,KAAK,OAAO;AAC3C,QAAI,CAAC,YAAY,CAAC,SAAU,OAAM,IAAI,WAAW,4DAA4D;AAC7G,UAAM,QAAQ,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AACtE,WAAO;AAAA,MACL,iBAAiB,SAAS,KAAK;AAAA,MAC/B,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,qBAA6C;AACnD,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,gEAAgE;AACjG,WAAO;AAAA,MACL,iBAAiB,UAAU,KAAK;AAAA,MAChC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEQ,iBAAyC;AAC/C,UAAM,EAAE,KAAK,UAAU,SAAS,IAAI,KAAK,OAAO;AAChD,QAAI;AACJ,QAAI,YAAY,UAAU;AACxB,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AAAA,IACpE,WAAW,YAAY,KAAK;AAC1B,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,GAAG,EAAE,EAAE,SAAS,QAAQ;AAAA,IAC/D,WAAW,KAAK;AACd,gBAAU,OAAO,KAAK,uBAAuB,KAAK,UAAU,EAAE,OAAO,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,QAAQ;AAAA,IAClG,OAAO;AACL,YAAM,IAAI,WAAW,4DAA4D;AAAA,IACnF;AACA,WAAO;AAAA,MACL,iBAAiB,SAAS,OAAO;AAAA,MACjC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,QACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,QAAQ;AACpC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,wDAAwD;AAE3F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,eAAe;AACpC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GACiC;AAC7D,UAAM,UAAU,KAAK,OAAO,QAAQ;AACpC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,wDAAwD;AAE3F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,eAAe;AAEpC,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KAChG,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,WAAW,MAAM,iBAAiB,KAAK;AAAA,MAC3C,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D,GAAG,KAAK,aAAa,GAAK;AAE1B,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,EAAE,QAAQ,SAAS,QAAQ,SAAS,SAAS,SAAS,MAAM,MAAM,SAAS,KAAK,EAAE;AAAA,EAC3F;AAAA,EAEA,MAAM,YACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,YAAY;AACxC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,4DAA4D;AAE/F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,EAAE,GAAG,KAAK,mBAAmB,GAAG,GAAG,KAAK,QAAQ;AAGhE,UAAM,OAAO,KAAK,SAAS,SACtB,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,IAAI,IACrE;AAEJ,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA;AAAA,IACF;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AAC/G,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAGA,MAAM,QACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,QAAQ;AACpC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,wDAAwD;AAE3F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,eAAe;AACpC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,gBACJ,MACA,OAA2B,CAAC,GACX;AACjB,UAAM,UAAU,KAAK,OAAO,YAAY;AACxC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,4DAA4D;AAE/F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,EAAE,GAAG,KAAK,mBAAmB,GAAG,QAAQ,cAAc,GAAG,KAAK,QAAQ;AAEtF,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,CAAI;AAC7H,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,WAAW,MAAM,iBAAiB,KAAK;AAAA,MAC3C,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,IACF,GAAG,KAAK,aAAa,GAAK;AAE1B,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAIQ,eAAuC;AAC7C,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,8DAA8D;AAC/F,WAAO;AAAA,MACL,iBAAiB,UAAU,KAAK;AAAA,MAChC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,MACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,MAAM;AAClC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,aAAa;AAClC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,cACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,OAAO;AACX,UAAM,WAAW;AAEjB,WAAO,MAAM;AACX,YAAM,WAAW,MAAM,UAAU,MAAM,QAAQ;AAC/C,cAAQ,KAAK,GAAG,SAAS,KAAK;AAC9B,UAAI,QAAQ,UAAU,SAAS,SAAS,SAAS,MAAM,WAAW,EAAG;AACrE;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,mBACJ,WACA,UACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,QAAQ;AACZ,UAAM,kBAAkB;AAExB,WAAO,MAAM;AACX,YAAM,YAAY,aAAa,SAC3B,KAAK,IAAI,WAAW,QAAQ,QAAQ,eAAe,IACnD;AACJ,YAAM,OAAO,MAAM,UAAU,OAAO,SAAS;AAC7C,cAAQ,KAAK,GAAG,KAAK,OAAO;AAC5B,UAAI,aAAa,UAAa,QAAQ,UAAU,SAAU;AAC1D,UAAI,CAAC,KAAK,OAAO,KAAM;AACvB,eAAS,KAAK;AAAA,IAChB;AAEA,WAAO,aAAa,SAAY,QAAQ,MAAM,GAAG,QAAQ,IAAI;AAAA,EAC/D;AAAA,EAEA,MAAM,SACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,QAAQ;AACZ,UAAM,QAAQ;AAEd,WAAO,MAAM;AACX,YAAM,OAAO,MAAM,UAAU,OAAO,KAAK;AACzC,cAAQ,KAAK,GAAG,KAAK,MAAM;AAC3B,UAAI,KAAK,WAAY;AACrB,cAAQ,KAAK,iBAAiB,QAAQ;AAAA,IACxC;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,aACJ,WACc;AACd,UAAM,UAAe,CAAC;AACtB,QAAI,UAAU;AACd,UAAM,aAAa;AAEnB,WAAO,MAAM;AACX,YAAM,OAAO,MAAM,UAAU,SAAS,UAAU;AAChD,YAAM,QAAS,KAAK,UAAU,KAAK,UAAU,CAAC;AAC9C,cAAQ,KAAK,GAAG,KAAK;AACrB,iBAAW,MAAM;AACjB,UAAI,WAAW,KAAK,SAAS,MAAM,WAAW,EAAG;AAAA,IACnD;AAEA,WAAO;AAAA,EACT;AAAA,EAEQ,sBAAoC;AAC1C,QAAI,CAAC,KAAK,kBAAkB;AAC1B,WAAK,mBAAmB,sBAAsB,KAAK,MAAM;AAAA,IAC3D;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEQ,oBAA4C;AAClD,UAAM,EAAE,UAAU,UAAU,SAAS,IAAI,KAAK,OAAO;AACrD,QAAI;AACJ,QAAI,YAAY,UAAU;AACxB,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AAAA,IACpE,WAAW,YAAY,UAAU;AAC/B,gBAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AAAA,IACpE,OAAO;AACL,YAAM,IAAI,WAAW,+DAA+D;AAAA,IACtF;AACA,WAAO;AAAA,MACL,iBAAiB,SAAS,OAAO;AAAA,MACjC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,WAAW;AACvC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,2DAA2D;AAE9F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,kBAAkB;AACvC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,kBAA0C;AAChD,UAAM,EAAE,QAAQ,YAAY,SAAS,IAAI,KAAK,OAAO;AACrD,QAAI,CAAC,UAAU,CAAC,cAAc,CAAC,UAAU;AACvC,YAAM,IAAI,WAAW,6DAA6D;AAAA,IACpF;AACA,UAAM,gBAAgB,OAAO,KAAK,GAAG,QAAQ,IAAI,UAAU,EAAE,EAAE,SAAS,QAAQ;AAChF,WAAO;AAAA,MACL,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,SACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,EAAE,QAAQ,IAAI,KAAK,OAAO;AAChC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,gFAAgF;AAGnH,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,gBAAgB;AACrC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,cAAc,WAAW,aAAa;AACvF,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,oBAA4C;AAClD,UAAM,EAAE,UAAU,SAAS,IAAI,KAAK,OAAO;AAC3C,QAAI,CAAC,YAAY,CAAC,SAAU,OAAM,IAAI,WAAW,gEAAgE;AACjH,UAAM,UAAU,OAAO,KAAK,GAAG,QAAQ,IAAI,QAAQ,EAAE,EAAE,SAAS,QAAQ;AACxE,WAAO;AAAA,MACL,iBAAiB,SAAS,OAAO;AAAA,MACjC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,WACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,WAAW;AACvC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,mEAAmE;AAEtG,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,kBAAkB;AACvC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEQ,mBAA2C;AACjD,UAAM,EAAE,MAAM,IAAI,KAAK,OAAO;AAC9B,QAAI,CAAC,MAAO,OAAM,IAAI,WAAW,8DAA8D;AAC/F,WAAO;AAAA,MACL,iBAAiB,UAAU,KAAK;AAAA,MAChC,gBAAgB;AAAA,MAChB,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,UAAU;AACtC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAC/C,UAAM,UAAU,KAAK,iBAAiB;AACtC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB;AAAA,MACA,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,YAAM,MAAM,YAAY,KAAK,MAAM,IAAI,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,KACvF,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,GAAK;AAAA,EACtD;AAAA,EAEA,MAAM,cACJ,MACA,OAAgD,CAAC,GAChC;AACjB,UAAM,UAAU,KAAK,OAAO,UAAU;AACtC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,SAAgE,EAAE,GAAG,KAAK,OAAO;AACvF,QAAI,KAAK,UAAU,OAAW,QAAO,WAAW,IAAI,KAAK;AAEzD,UAAM,MAAM,SAAS,SAAS,MAAM,MAAM;AAC1C,UAAM,UAAkC;AAAA,MACtC,iBAAiB,KAAK,iBAAiB,EAAE,eAAe;AAAA,MACxD,UAAU;AAAA,MACV,cAAc;AAAA,IAChB;AAEA,QAAI,KAAK,QAAQ;AACf,YAAM,cAAc,EAAE,GAAG,SAAS,eAAe,aAAa;AAC9D,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,gBAAgB,GAAG;AAAA,WAAc,KAAK,UAAU,aAAa,MAAM,CAAC,CAAC;AAAA,CAAI;AACzG,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,WAAW,MAAM,iBAAiB,KAAK,EAAE,QAAQ,OAAO,QAAQ,GAAG,KAAK,aAAa,GAAK;AAChG,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,UAAU,QAAQ,SAAS,MAAM,IAAI,SAAS,UAAU;AAC5D,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,MAAM,SAAS,KAAK,CAAC;AAC/C,YAAI,OAAO,QAAS,WAAU,OAAO,OAAO,OAAO;AAAA,MACrD,QAAQ;AAAA,MAAe;AACvB,YAAM,IAAI,WAAW,SAAS,SAAS,QAAQ,GAAG;AAAA,IACpD;AAEA,WAAO,SAAS,KAAK;AAAA,EACvB;AAAA,EAEA,MAAM,UACJ,MACA,OAA2B,CAAC,GAChB;AACZ,UAAM,UAAU,KAAK,OAAO,UAAU;AACtC,QAAI,CAAC,QAAS,OAAM,IAAI,WAAW,0DAA0D;AAE7F,UAAM,MAAM,SAAS,SAAS,MAAM,KAAK,MAAM;AAE/C,QAAI,KAAK,QAAQ;AACf,YAAM,MAAM,YAAY,KAAK,UAAU,KAAK,IAAI,GAAG;AAAA,KAC9C,KAAK,OAAO,SAAS,KAAK,UAAU,KAAK,MAAM,MAAM,CAAC,CAAC;AAAA,IAAO;AACnE,MAAAA,IAAG,UAAU,QAAQ,OAAO,IAAI,GAAG;AACnC,cAAQ,WAAW,SAAS;AAC5B,YAAM,IAAI,WAAW,WAAW,CAAC;AAAA,IACnC;AAEA,UAAM,UAAU,KAAK,oBAAoB;AACzC,UAAM,OAAoB;AAAA,MACxB,QAAQ,KAAK,UAAU;AAAA,MACvB,SAAS,EAAE,UAAU,oBAAoB,gBAAgB,oBAAoB,GAAG,KAAK,QAAQ;AAAA,MAC7F,MAAM,KAAK,SAAS,SAAY,KAAK,UAAU,KAAK,IAAI,IAAI;AAAA,IAC9D;AAEA,WAAO,QAAW,KAAK,MAAM,KAAK,aAAa,KAAO,OAAO;AAAA,EAC/D;AACF;AAEO,SAAS,iBAAiB,QAAwB,SAAS,OAAmB;AACnF,SAAO,IAAI,WAAW,QAAQ,MAAM;AACtC;","names":["fs","fs"]}