@mesh-tech/mesh-cli 0.1.0 → 0.12.0

package/dist/src/commands/tunnel/index.js

@@ -2,12 +2,194 @@
  * mesh tunnel - SSM tunneling to platform services
  *
  * Commands:
- *   mesh tunnel dev          Start all dev tunnels (temporal + db)
- *   mesh tunnel --services   Start specific services
- *   mesh tunnel --list       List available services
+ *   mesh tunnel dev              Start all dev tunnels (temporal + db)
+ *   mesh tunnel --services       Start specific services
+ *   mesh tunnel --list           List available services
+ *   mesh tunnel external <name>  Tunnel to a registered external service
  */
 import { spawn } from "child_process";
-import { getPlatformBastionInfo, logInfo, logError, } from "../../utils/index.js";
+import * as fs from "fs";
+import * as os from "os";
+import * as path from "path";
+import { SecretsManagerClient, GetSecretValueCommand, } from "@aws-sdk/client-secrets-manager";
+import { detectContext, getPlatformBastionInfo, logInfo, logError, } from "../../utils/index.js";
+/**
+ * Resolve tenant/env without ceremony: explicit flags win, otherwise the
+ * same Pulumi/SST context detection `mesh dev` uses (mesh:tenant + stack
+ * file in the current app dir).
+ *
+ * Returns the detected app `stage` alongside the platform `env` because they
+ * are genuinely different values — detectContext() strips the tenant prefix
+ * and runs the result through the platform-env map, so a stack
+ * `Pulumi.scu-dev.yaml` yields stage `scu-dev` but platform env `dev`.
+ * Callers that key on the app axis (credential secrets) need the former.
+ */
+function resolveTenantEnv(options) {
+    if (options.tenant && options.env) {
+        // Fully explicit: nothing was detected, so there is no app stage to offer —
+        // the credential axis falls back to --env, exactly as `mesh db …` does.
+        return { tenant: options.tenant, env: options.env };
+    }
+    // `options.env` is a platform env, not a stage; passing it as detectContext's
+    // stage hint is deliberate (it's the best hint available) but does make that
+    // function's own "Stage: …" log line read as an env when only -e was given.
+    const ctx = detectContext(options.env);
+    return {
+        tenant: options.tenant ?? ctx.tenant,
+        env: options.env ?? ctx.platformEnv,
+        stage: ctx.stage,
+    };
+}
+/**
+ * aws:region from the nearest Pulumi config in cwd. Prefers the stack actually
+ * being targeted; otherwise stack files before the project file, and among
+ * several stacks this is a best-effort pick (readdir order).
+ */
+function readPulumiAwsRegion(stage) {
+    const preferred = stage ? `Pulumi.${stage}.yaml` : undefined;
+    const rank = (f) => f === preferred ? 0 : f === "Pulumi.yaml" ? 2 : 1;
+    try {
+        const files = fs
+            .readdirSync(".")
+            .filter((f) => f.startsWith("Pulumi.") && f.endsWith(".yaml"))
+            .sort((a, b) => rank(a) - rank(b));
+        for (const f of files) {
+            const m = fs
+                .readFileSync(f, "utf-8")
+                .match(/^\s*aws:region:\s*["']?([^"'\n]+)["']?/m);
+            if (m?.[1])
+                return m[1].trim();
+        }
+    }
+    catch {
+        /* unreadable cwd — fall through */
+    }
+    return undefined;
+}
+/** `~/.aws` section headers a profile can appear under, in precedence order. */
+function awsProfileSections(name) {
+    return [
+        [path.join(os.homedir(), ".aws", "config"), `[profile ${name}]`],
+        [path.join(os.homedir(), ".aws", "credentials"), `[${name}]`],
+    ];
+}
+function awsProfileExists(name) {
+    for (const [file, header] of awsProfileSections(name)) {
+        try {
+            const lines = fs.readFileSync(file, "utf-8").split("\n");
+            if (lines.some((l) => l.trim() === header))
+                return true;
+        }
+        catch {
+            /* file absent */
+        }
+    }
+    return false;
+}
+/** `region = …` from a specific section of an ini-style `~/.aws` file. */
+export function parseProfileRegion(text, header) {
+    let inSection = false;
+    for (const raw of text.split("\n")) {
+        const line = raw.trim();
+        if (line.startsWith("[")) {
+            inSection = line === header;
+            continue;
+        }
+        if (!inSection)
+            continue;
+        const m = line.match(/^region\s*=\s*(.+)$/);
+        // AWS's shared-config parser strips whitespace-prefixed inline comments
+        // (`region = us-east-1 # prod` means us-east-1); match it. The regex
+        // already ate leading whitespace, so the first split segment is the value.
+        const value = m?.[1]?.split(/\s+[#;]/)[0]?.trim();
+        if (value)
+            return value;
+    }
+    return undefined;
+}
+function awsProfileRegion(profile) {
+    if (!profile)
+        return undefined;
+    for (const [file, header] of awsProfileSections(profile)) {
+        try {
+            const region = parseProfileRegion(fs.readFileSync(file, "utf-8"), header);
+            if (region)
+                return region;
+        }
+        catch {
+            /* file absent */
+        }
+    }
+    return undefined;
+}
+/**
+ * Section headers for the SDK's implicit `[default]` profile. Spelled
+ * `[default]` in BOTH files — `~/.aws/config` has no `[profile default]`
+ * form — so it cannot be routed through awsProfileSections("default").
+ */
+export function awsDefaultProfileSections() {
+    return [
+        [path.join(os.homedir(), ".aws", "config"), "[default]"],
+        [path.join(os.homedir(), ".aws", "credentials"), "[default]"],
+    ];
+}
+/** Region the SDK would take from `[default]` when no named profile is in play. */
+function awsDefaultProfileRegion() {
+    for (const [file, header] of awsDefaultProfileSections()) {
+        try {
+            const region = parseProfileRegion(fs.readFileSync(file, "utf-8"), header);
+            if (region)
+                return region;
+        }
+        catch {
+            /* file absent */
+        }
+    }
+    return undefined;
+}
+/**
+ * Fill AWS_PROFILE/AWS_REGION so tunnels run without env-var ceremony:
+ * profile by tenant convention ({tenant}-{env}, then {tenant}) when no
+ * credentials are already present, then region from the nearest Pulumi config,
+ * else that profile's own region. Applies to both the SDK lookups and the
+ * spawned `aws ssm start-session`.
+ *
+ * Order matters: AWS_REGION in the environment outranks a profile's own
+ * `region` in both the SDK v3 chain and the `aws` CLI, so the profile must be
+ * resolved FIRST and its region consulted BEFORE any platform default —
+ * otherwise a stack that isn't in us-east-2 (tests/tenants/bigbank,
+ * tests/tenants/mesh/apps/hello are us-east-1) gets silently redirected when
+ * run from a directory with no Pulumi.*.yaml. Same call `dev.ts:3157` and
+ * `utils/tailscale.ts:611` make.
+ *
+ * us-east-2 survives only as the last resort, because this module builds its
+ * SecretsManagerClient inline (`new SecretsManagerClient({})`) — aws-auth.ts's
+ * DEFAULT_REGION is module-private to that file and does NOT backstop it, so
+ * dropping the default outright turns a no-Pulumi/no-profile-region directory
+ * into `Region is missing` rather than a working tunnel.
+ */
+function applyAwsDefaults(tenant, env, stage) {
+    if (!process.env.AWS_PROFILE && !process.env.AWS_ACCESS_KEY_ID) {
+        const profile = [`${tenant}-${env}`, tenant].find(awsProfileExists);
+        if (profile) {
+            process.env.AWS_PROFILE = profile;
+            logInfo(`AWS profile: ${profile} (from ~/.aws, tenant convention)`);
+        }
+    }
+    if (!process.env.AWS_REGION && !process.env.AWS_DEFAULT_REGION) {
+        // stack config > the effective profile's own region > platform default.
+        // When no named profile is in play the SDK's effective profile is
+        // `[default]`, so consult ITS region before inventing us-east-2 —
+        // otherwise a plain `[default]`-only setup gets silently redirected.
+        const region = readPulumiAwsRegion(stage) ??
+            (process.env.AWS_PROFILE
+                ? awsProfileRegion(process.env.AWS_PROFILE)
+                : awsDefaultProfileRegion()) ??
+            "us-east-2";
+        process.env.AWS_REGION = region;
+        logInfo(`AWS region: ${region} (auto)`);
+    }
+}
 /**
  * Service definitions with their local ports and display names
  */
@@ -114,6 +296,7 @@ async function listServices(options) {
     console.log("  mesh tunnel dev                    # All dev services");
     console.log("  mesh tunnel --services temporal    # Just temporal services");
     console.log("  mesh tunnel --services db          # Just database");
+    console.log("  mesh tunnel external <name>        # Registered external service");
     console.log("");
 }
 /**
@@ -175,22 +358,142 @@ async function tunnelServices(serviceNames, options) {
     })));
     cleanup();
 }
+/**
+ * The credential axis (app tenant/stage) the ExternalService secret is keyed
+ * on, which is NOT the platform axis that hosts the bastion.
+ *
+ * Precedence: explicit --app-tenant/--app-stage, then the stage detected from
+ * cwd (a tenant-prefixed stack like `scu-dev` maps to platform env `dev`, and
+ * the secret is keyed on the former), then the platform tenant/env.
+ */
+export function resolveCredentialAxis(options) {
+    return {
+        appTenant: options.appTenant ?? options.tenant,
+        appStage: options.appStage ?? options.stage ?? options.env,
+    };
+}
+function isValidPort(port) {
+    return Number.isInteger(port) && port >= 1 && port <= 65535;
+}
+/**
+ * Secrets Manager id for an ExternalService's credentials.
+ *
+ * Mirrors what the primitive builds (ExternalService.ts) and what apps resolve
+ * at runtime (libs/secrets): keyed on the APP tenant/stage, with multi-instance
+ * (credentials.keyedBy) services storing one secret per instance under the base.
+ */
+export function externalSecretId(appTenant, appStage, name, key) {
+    const base = `mesh/${appTenant}/${appStage}/external/${name}`;
+    return key ? `${base}/${key}` : base;
+}
+/**
+ * Pull the tunnel endpoint out of a credential secret. The local port defaults
+ * to the remote port so `localhost:<same-port>` behaves like the real service.
+ * Throws with a user-facing message when the secret isn't tunnelable or the
+ * `--port` override isn't a valid port number.
+ */
+export function resolveExternalPorts(creds, portOverride) {
+    const host = typeof creds.host === "string" ? creds.host.trim() : "";
+    const remotePort = Number(creds.port);
+    if (!host || !isValidPort(remotePort)) {
+        throw new Error("Secret has no usable host/port fields — only host:port externals are tunnelable.");
+    }
+    if (portOverride === undefined) {
+        return { host, remotePort, localPort: remotePort };
+    }
+    const localPort = Number(portOverride);
+    if (!isValidPort(localPort)) {
+        throw new Error(`--port must be an integer between 1 and 65535 (got "${portOverride}").`);
+    }
+    return { host, remotePort, localPort };
+}
+/**
+ * Tunnel to a registered external service (ExternalService primitive).
+ *
+ * The service's credential secret (mesh/{app-tenant}/{app-stage}/external/{name})
+ * is the source of truth for host/port — the same values deployed apps resolve
+ * at runtime via resolveCredentials() — so anything the platform bastion can
+ * reach is tunnelable without a per-service CLI entry.
+ */
+async function tunnelExternal(name, options) {
+    const { tenant, env, key } = options;
+    // The bastion lives in the platform tenant/env; the credential secret is
+    // keyed on the app tenant/stage. Those are different axes (a platform env
+    // like `dev-temporal` can host an app at stage `dev`), so they default to
+    // each other but stay separately overridable — same as `mesh db …`.
+    const { appTenant, appStage } = resolveCredentialAxis(options);
+    const secretId = externalSecretId(appTenant, appStage, name, key);
+    const setHint = `mesh secrets set external/${name}${key ? ` --key=${key}` : ""}`;
+    const sm = new SecretsManagerClient({});
+    let creds;
+    try {
+        const out = await sm.send(new GetSecretValueCommand({ SecretId: secretId }));
+        creds = JSON.parse(out.SecretString ?? "{}");
+    }
+    catch (err) {
+        logError(`Could not read ${secretId}: ${err instanceof Error ? err.message : String(err)}`);
+        logInfo(`Is the external service registered and seeded? (${setHint})`);
+        logInfo(`Credential axis used: app tenant '${appTenant}', app stage '${appStage}' (override with --app-tenant/--app-stage) — ` +
+            `zero-flag runs key on the stage detected from the app dir, while explicit -t/-e keys on the platform env.`);
+        if (!key) {
+            logInfo("Multi-instance externals (credentials.keyedBy) store one secret per instance — pass --key <key>.");
+        }
+        process.exit(1);
+    }
+    let host;
+    let remotePort;
+    let localPort;
+    try {
+        ({ host, remotePort, localPort } = resolveExternalPorts(creds, options.port));
+    }
+    catch (err) {
+        logError(err instanceof Error ? err.message : String(err));
+        logInfo(`Secret: ${secretId}`);
+        process.exit(1);
+    }
+    const bastion = await getPlatformBastionInfo(tenant, env);
+    console.log("");
+    logInfo(`Tenant: ${tenant}, Platform Env: ${env}`);
+    if (appTenant !== tenant || appStage !== env) {
+        logInfo(`App credentials: tenant=${appTenant}, stage=${appStage}`);
+    }
+    console.log("");
+    console.log(`  ${name.padEnd(25)} localhost:${localPort} → ${host}:${remotePort}`);
+    console.log("");
+    logInfo("Press Ctrl+C to stop the tunnel");
+    console.log("");
+    const proc = spawnSsmTunnel(bastion.instanceId, { host, port: remotePort }, localPort);
+    const cleanup = () => {
+        proc.kill();
+        process.exit(0);
+    };
+    process.on("SIGINT", cleanup);
+    process.on("SIGTERM", cleanup);
+    await new Promise((resolve) => {
+        proc.on("exit", () => resolve());
+        proc.on("error", () => resolve());
+    });
+    cleanup();
+}
 /**
  * Register tunnel commands with the CLI
  */
 export function registerTunnelCommands(program) {
-    program
+    const tunnel = program
         .command("tunnel")
         .description("Start SSM tunnel to platform services")
-        .requiredOption("-t, --tenant <tenant>", "Platform tenant (e.g., mesh)")
-        .requiredOption("-e, --env <env>", "Platform environment (e.g., dev)")
+        .option("-t, --tenant <tenant>", "Platform tenant (default: detected from Pulumi/SST config in cwd)")
+        .option("-e, --env <env>", "Platform environment (default: detected from cwd, else dev)")
         .option("-l, --list", "List available services")
         .option("-s, --services <services>", "Services to tunnel (comma-separated or group name)")
         .option("--db-port <port>", "Custom local port for database (default: 5432)")
         .option("--temporal-ui-port <port>", "Custom local port for Temporal UI (default: 8080)")
         .option("--temporal-frontend-port <port>", "Custom local port for Temporal Frontend (default: 7233)")
         .argument("[group]", "Service group to tunnel (e.g., dev, temporal)")
-        .action(async (group, options) => {
+        .action(async (group, rawOptions) => {
+        const { tenant, env, stage } = resolveTenantEnv(rawOptions);
+        applyAwsDefaults(tenant, env, stage);
+        const options = { ...rawOptions, tenant, env };
         // Handle --list
         if (options.list) {
             await listServices(options);
@@ -213,5 +516,25 @@ export function registerTunnelCommands(program) {
         }
         await tunnelServices(services, options);
     });
+    tunnel
+        .command("external")
+        .description("Tunnel to a registered external service via the platform bastion " +
+        "(host/port from mesh/{app-tenant}/{app-stage}/external/{name})")
+        .argument("<name>", "External service name (e.g., plaid-db)")
+        .option("-t, --tenant <tenant>", "Platform tenant (default: detected from Pulumi/SST config in cwd)")
+        .option("-e, --env <env>", "Platform environment (default: detected from cwd, else dev)")
+        .option("--app-tenant <tenant>", "Tenant for the external service's credentials (default: --tenant)")
+        .option("--app-stage <stage>", "Stage for the external service's credentials (default: --env)")
+        .option("-k, --key <key>", "Instance key for a multi-instance external (credentials.keyedBy)")
+        .option("-p, --port <port>", "Local port (default: the service's remote port)")
+        .action(async (name, _options, command) => {
+        // -t/-e are also declared on the parent `tunnel` command, which
+        // consumes them wherever they appear — merge both scopes, then fall
+        // back to Pulumi/SST context detection.
+        const merged = command.optsWithGlobals();
+        const { tenant, env, stage } = resolveTenantEnv(merged);
+        applyAwsDefaults(tenant, env, stage);
+        await tunnelExternal(name, { ...merged, tenant, env, stage });
+    });
 }
 //# sourceMappingURL=index.js.map

package/dist/src/commands/tunnel/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/tunnel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,KAAK,EAAgB,MAAM,eAAe,CAAC;AACpD,OAAO,EACL,sBAAsB,EACtB,OAAO,EACP,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAa9B;;GAEG;AACH,MAAM,cAAc,GAGhB;IACF,mBAAmB,EAAE;QACnB,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD,aAAa,EAAE;QACb,UAAU,EAAE,aAAa;QACzB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,iBAAiB;KAC/B;IACD,EAAE,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,uBAAuB;KACrC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,cAAc,GAA6B;IAC/C,GAAG,EAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC;IAC/C,QAAQ,EAAE,CAAC,mBAAmB,EAAE,aAAa,CAAC;CAC/C,CAAC;AAEF;;GAEG;AACH,SAAS,gBAAgB,CAAC,WAAmB,EAAE,OAAsB;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAEtB,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,IAAI;YACP,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QAC1E,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC,cAAc;gBAC3B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACtC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACvB,KAAK,mBAAmB;YACtB,OAAO,OAAO,CAAC,oBAAoB;gBACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC5C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACvB;YACE,OAAO,MAAM,CAAC,SAAS,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,6BAA6B;IAC7B,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,0CAA0C;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,UAAkB,EAClB,OAAwB,EACxB,SAAiB;IAEjB,OAAO,KAAK,CACV,KAAK,EACL;QACE,KAAK;QACL,eAAe;QACf,UAAU;QACV,UAAU;QACV,iBAAiB;QACjB,4CAA4C;QAC5C,cAAc;QACd,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,UAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC,eAAe,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;SACrC,CAAC;KACH,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAsB;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,WAAW,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,SAAS,MAAM,QAAQ,EAAE,IAAI,IAAI,eAAe,IAAI,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,YAAsB,EACtB,OAAsB;IAEtB,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1D,iDAAiD;IACjD,MAAM,eAAe,GAIhB,EAAE,CAAC;IAER,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,uBAAuB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,YAAY,IAAI,sCAAsC,CAAC,CAAC;YACjE,OAAO,CAAC,gDAAgD,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,WAAW,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAE/B,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,SAAS,MAAM,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,+BAA+B;IAC/B,MAAM,OAAO,CAAC,IAAI,CAChB,SAAS,CAAC,GAAG,CACX,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CACL,CACF,CAAC;IAEF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uCAAuC,CAAC;SACpD,cAAc,CAAC,uBAAuB,EAAE,8BAA8B,CAAC;SACvE,cAAc,CAAC,iBAAiB,EAAE,kCAAkC,CAAC;SACrE,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC;SAC/C,MAAM,CAAC,2BAA2B,EAAE,oDAAoD,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;SAC5E,MAAM,CAAC,2BAA2B,EAAE,mDAAmD,CAAC;SACxF,MAAM,CAAC,iCAAiC,EAAE,yDAAyD,CAAC;SACpG,QAAQ,CAAC,SAAS,EAAE,+CAA+C,CAAC;SACpE,MAAM,CAAC,KAAK,EAAE,KAAyB,EAAE,OAAsB,EAAE,EAAE;QAClE,gBAAgB;QAChB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,oCAAoC;QACpC,IAAI,QAAkB,CAAC;QAEvB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,2BAA2B;YAC3B,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,4BAA4B;YAC5B,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/commands/tunnel/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,KAAK,EAAgB,MAAM,eAAe,CAAC;AACpD,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,aAAa,EACb,sBAAsB,EACtB,OAAO,EACP,QAAQ,GACT,MAAM,sBAAsB,CAAC;AAa9B;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,OAA0C;IAKlE,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClC,4EAA4E;QAC5E,wEAAwE;QACxE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IACtD,CAAC;IACD,8EAA8E;IAC9E,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;QACpC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW;QACnC,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,KAAc;IACzC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CACjC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE;aACb,WAAW,CAAC,GAAG,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAC7D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,EAAE;iBACT,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC;iBACxB,KAAK,CAAC,yCAAyC,CAAC,CAAC;YACpD,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mCAAmC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO;QACL,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAY,IAAI,GAAG,CAAC;QAChE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,IAAI,GAAG,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,kBAAkB,CAChC,IAAY,EACZ,MAAc;IAEd,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,SAAS,GAAG,IAAI,KAAK,MAAM,CAAC;YAC5B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,SAAS;YAAE,SAAS;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC5C,wEAAwE;QACxE,qEAAqE;QACrE,2EAA2E;QAC3E,MAAM,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAClD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA2B;IACnD,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1E,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB;IACvC,OAAO;QACL,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC;QACxD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,WAAW,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,uBAAuB;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,yBAAyB,EAAE,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YAC1E,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,GAAW,EAAE,KAAc;IACnE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QAC/D,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;YAClC,OAAO,CAAC,gBAAgB,OAAO,mCAAmC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QAC/D,wEAAwE;QACxE,kEAAkE;QAClE,kEAAkE;QAClE,qEAAqE;QACrE,MAAM,MAAM,GACV,mBAAmB,CAAC,KAAK,CAAC;YAC1B,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW;gBACtB,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;gBAC3C,CAAC,CAAC,uBAAuB,EAAE,CAAC;YAC9B,WAAW,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;QAChC,OAAO,CAAC,eAAe,MAAM,SAAS,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,cAAc,GAGhB;IACF,mBAAmB,EAAE;QACnB,UAAU,EAAE,mBAAmB;QAC/B,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,0BAA0B;KACxC;IACD,aAAa,EAAE;QACb,UAAU,EAAE,aAAa;QACzB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,iBAAiB;KAC/B;IACD,EAAE,EAAE;QACF,UAAU,EAAE,KAAK;QACjB,SAAS,EAAE,IAAI;QACf,WAAW,EAAE,uBAAuB;KACrC;CACF,CAAC;AAEF;;GAEG;AACH,MAAM,cAAc,GAA6B;IAC/C,GAAG,EAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC;IAC/C,QAAQ,EAAE,CAAC,mBAAmB,EAAE,aAAa,CAAC;CAC/C,CAAC;AAEF;;GAEG;AACH,SAAS,gBAAgB,CAAC,WAAmB,EAAE,OAAsB;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IAEtB,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,IAAI;YACP,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QAC1E,KAAK,aAAa;YAChB,OAAO,OAAO,CAAC,cAAc;gBAC3B,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;gBACtC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACvB,KAAK,mBAAmB;YACtB,OAAO,OAAO,CAAC,oBAAoB;gBACjC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC;gBAC5C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;QACvB;YACE,OAAO,MAAM,CAAC,SAAS,CAAC;IAC5B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,6BAA6B;IAC7B,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,0CAA0C;IAC1C,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;GAEG;AACH,SAAS,cAAc,CACrB,UAAkB,EAClB,OAAwB,EACxB,SAAiB;IAEjB,OAAO,KAAK,CACV,KAAK,EACL;QACE,KAAK;QACL,eAAe;QACf,UAAU;QACV,UAAU;QACV,iBAAiB;QACjB,4CAA4C;QAC5C,cAAc;QACd,IAAI,CAAC,SAAS,CAAC;YACb,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YACpB,UAAU,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAClC,eAAe,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;SACrC,CAAC;KACH,EACD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,OAAsB;IAChD,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,WAAW,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,SAAS,MAAM,QAAQ,EAAE,IAAI,IAAI,eAAe,IAAI,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC/B,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IACvE,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACpE,OAAO,CAAC,GAAG,CAAC,oEAAoE,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,cAAc,CAC3B,YAAsB,EACtB,OAAsB;IAEtB,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1D,iDAAiD;IACjD,MAAM,eAAe,GAIhB,EAAE,CAAC;IAER,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACrC,OAAO,CAAC,uBAAuB,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACzE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACrD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,YAAY,IAAI,sCAAsC,CAAC,CAAC;YACjE,OAAO,CAAC,gDAAgD,CAAC,CAAC;YAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,eAAe,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,WAAW,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAE/B,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;QACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CACT,KAAK,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,SAAS,MAAM,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,EAAE,CAChG,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,SAAS,GAAmB,EAAE,CAAC;IAErC,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,eAAe,EAAE,CAAC;QACjD,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClD,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;IAC1E,CAAC;IAED,yBAAyB;IACzB,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,+BAA+B;IAC/B,MAAM,OAAO,CAAC,IAAI,CAChB,SAAS,CAAC,GAAG,CACX,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAC5B,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CACL,CACF,CAAC;IAEF,OAAO,EAAE,CAAC;AACZ,CAAC;AAaD;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAMrC;IACC,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM;QAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG;KAC3D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,EACjB,QAAgB,EAChB,IAAY,EACZ,GAAY;IAEZ,MAAM,IAAI,GAAG,QAAQ,SAAS,IAAI,QAAQ,aAAa,IAAI,EAAE,CAAC;IAC9D,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAsC,EACtC,YAAqB;IAErB,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IAED,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,uDAAuD,YAAY,KAAK,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAY,EACZ,OAA8B;IAE9B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IACrC,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,6BAA6B,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAEjF,MAAM,EAAE,GAAG,IAAI,oBAAoB,CAAC,EAAE,CAAC,CAAC;IACxC,IAAI,KAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC7E,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CACN,kBAAkB,QAAQ,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAClF,CAAC;QACF,OAAO,CAAC,mDAAmD,OAAO,GAAG,CAAC,CAAC;QACvE,OAAO,CACL,qCAAqC,SAAS,iBAAiB,QAAQ,+CAA+C;YACpH,2GAA2G,CAC9G,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CACL,kGAAkG,CACnG,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAY,CAAC;IACjB,IAAI,UAAkB,CAAC;IACvB,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,OAAO,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE1D,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,WAAW,MAAM,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACnD,IAAI,SAAS,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,CAAC,2BAA2B,SAAS,WAAW,QAAQ,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,GAAG,CACT,KAAK,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,cAAc,SAAS,MAAM,IAAI,IAAI,UAAU,EAAE,CACtE,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEhB,MAAM,IAAI,GAAG,cAAc,CACzB,OAAO,CAAC,UAAU,EAClB,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,EAC1B,SAAS,CACV,CAAC;IAEF,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAE/B,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,MAAM,MAAM,GAAG,OAAO;SACnB,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,uCAAuC,CAAC;SACpD,MAAM,CACL,uBAAuB,EACvB,mEAAmE,CACpE;SACA,MAAM,CACL,iBAAiB,EACjB,6DAA6D,CAC9D;SACA,MAAM,CAAC,YAAY,EAAE,yBAAyB,CAAC;SAC/C,MAAM,CAAC,2BAA2B,EAAE,oDAAoD,CAAC;SACzF,MAAM,CAAC,kBAAkB,EAAE,gDAAgD,CAAC;SAC5E,MAAM,CAAC,2BAA2B,EAAE,mDAAmD,CAAC;SACxF,MAAM,CAAC,iCAAiC,EAAE,yDAAyD,CAAC;SACpG,QAAQ,CAAC,SAAS,EAAE,+CAA+C,CAAC;SACpE,MAAM,CACL,KAAK,EACH,KAAyB,EACzB,UAGC,EACD,EAAE;QACF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC5D,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,OAAO,GAAkB,EAAE,GAAG,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAE9D,gBAAgB;QAChB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;YACjB,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,oCAAoC;QACpC,IAAI,QAAkB,CAAC;QAEvB,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,2BAA2B;YAC3B,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,KAAK,EAAE,CAAC;YACjB,4BAA4B;YAC5B,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,oCAAoC;YACpC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO;QACT,CAAC;QAED,MAAM,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC,CACF,CAAC;IAEJ,MAAM;SACH,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CACV,mEAAmE;QACjE,gEAAgE,CACnE;SACA,QAAQ,CAAC,QAAQ,EAAE,wCAAwC,CAAC;SAC5D,MAAM,CACL,uBAAuB,EACvB,mEAAmE,CACpE;SACA,MAAM,CACL,iBAAiB,EACjB,6DAA6D,CAC9D;SACA,MAAM,CACL,uBAAuB,EACvB,mEAAmE,CACpE;SACA,MAAM,CACL,qBAAqB,EACrB,+DAA+D,CAChE;SACA,MAAM,CACL,iBAAiB,EACjB,kEAAkE,CACnE;SACA,MAAM,CACL,mBAAmB,EACnB,iDAAiD,CAClD;SACA,MAAM,CACL,KAAK,EAAE,IAAY,EAAE,QAA+B,EAAE,OAAgB,EAAE,EAAE;QACxE,gEAAgE;QAChE,oEAAoE;QACpE,wCAAwC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,EAAkC,CAAC;QACzE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACxD,gBAAgB,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,CAAC,CACF,CAAC;AACN,CAAC"}

package/dist/src/commands/vcs/clone.d.ts

@@ -0,0 +1,3 @@
+import { type CommonOpts } from "./common.js";
+export declare function cloneCommand(repo: string, dest: string | undefined, opts: CommonOpts): Promise<void>;
+//# sourceMappingURL=clone.d.ts.map

package/dist/src/commands/vcs/clone.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.d.ts","sourceRoot":"","sources":["../../../../src/commands/vcs/clone.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAE3E,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAsBf"}

package/dist/src/commands/vcs/clone.js

@@ -0,0 +1,20 @@
+import { execFileAsync, resolveToken } from "./common.js";
+export async function cloneCommand(repo, dest, opts) {
+    const baseUrl = (opts.url ?? process.env.VCS_URL)?.replace(/\/$/, "");
+    if (!baseUrl)
+        throw new Error("clone requires --url or VCS_URL");
+    const token = await resolveToken(opts);
+    await execFileAsync("git", [
+        "clone",
+        "-c",
+        `http.extraHeader=Authorization: Bearer ${token}`,
+        `${baseUrl}/git/${repo}`,
+        dest ?? repo,
+    ]);
+    // Persist the auth header for future fetches in THIS clone only.
+    // Dev-grade: tokens land in .git/config — revisit with a credential helper
+    // once non-dev tokens are routine.
+    await execFileAsync("git", ["config", "http.extraHeader", `Authorization: Bearer ${token}`], { cwd: dest ?? repo });
+    console.log(`cloned ${repo} → ${dest ?? repo} (read-only remote; use 'mesh vcs propose' to submit changes)`);
+}
+//# sourceMappingURL=clone.js.map

package/dist/src/commands/vcs/clone.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clone.js","sourceRoot":"","sources":["../../../../src/commands/vcs/clone.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAmB,MAAM,aAAa,CAAC;AAE3E,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAAwB,EACxB,IAAgB;IAEhB,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,aAAa,CAAC,KAAK,EAAE;QACzB,OAAO;QACP,IAAI;QACJ,0CAA0C,KAAK,EAAE;QACjD,GAAG,OAAO,QAAQ,IAAI,EAAE;QACxB,IAAI,IAAI,IAAI;KACb,CAAC,CAAC;IACH,iEAAiE;IACjE,2EAA2E;IAC3E,mCAAmC;IACnC,MAAM,aAAa,CACjB,KAAK,EACL,CAAC,QAAQ,EAAE,kBAAkB,EAAE,yBAAyB,KAAK,EAAE,CAAC,EAChE,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI,EAAE,CACtB,CAAC;IACF,OAAO,CAAC,GAAG,CACT,UAAU,IAAI,MAAM,IAAI,IAAI,IAAI,+DAA+D,CAChG,CAAC;AACJ,CAAC"}

package/dist/src/commands/vcs/common.d.ts

@@ -0,0 +1,21 @@
+import { execFile } from "node:child_process";
+export declare const execFileAsync: typeof execFile.__promisify__;
+export interface VcsTarget {
+    baseUrl: string;
+    repo?: string;
+}
+export interface CommonOpts {
+    url?: string;
+    token?: string;
+    context?: string;
+}
+/** https://host/git/<repo> (origin remote) → { baseUrl: https://host, repo }. */
+export declare function parseRemote(remoteUrl: string): VcsTarget | null;
+export declare function resolveTarget(opts: CommonOpts & {
+    repo?: string;
+    cwd?: string;
+}): Promise<VcsTarget>;
+export declare function resolveToken(opts: CommonOpts): Promise<string>;
+/** Minimal authenticated JSON call against the vcs API. */
+export declare function vcsApi(baseUrl: string, token: string, path: string, method?: string, body?: unknown): Promise<unknown>;
+//# sourceMappingURL=common.d.ts.map

package/dist/src/commands/vcs/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/commands/vcs/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,eAAO,MAAM,aAAa,+BAAsB,CAAC;AAEjD,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,iFAAiF;AACjF,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,CAG/D;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,UAAU,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,SAAS,CAAC,CA0BpB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAWpE;AAED,2DAA2D;AAC3D,wBAAsB,MAAM,CAC1B,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,MAAM,SAAQ,EACd,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CAgBlB"}

package/dist/src/commands/vcs/common.js

@@ -0,0 +1,62 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+export const execFileAsync = promisify(execFile);
+/** https://host/git/<repo> (origin remote) → { baseUrl: https://host, repo }. */
+export function parseRemote(remoteUrl) {
+    const m = remoteUrl.trim().match(/^(https?:\/\/[^/]+)\/git\/([^/]+?)(?:\.git)?$/);
+    return m ? { baseUrl: m[1], repo: m[2] } : null;
+}
+export async function resolveTarget(opts) {
+    // An explicit base URL (flag or env) overrides only the BASE URL — it must
+    // not suppress origin-derived repo resolution. Commands like `propose` carry
+    // no repo argument and rely on the clone's origin remote; returning early
+    // here with `repo: undefined` (the prior behaviour) broke them whenever
+    // VCS_URL/--url was set. So resolve the repo independently: explicit repo →
+    // origin-derived → undefined.
+    const explicitBase = opts.url ?? process.env.VCS_URL;
+    let originTarget = null;
+    try {
+        const { stdout } = await execFileAsync("git", ["remote", "get-url", "origin"], {
+            cwd: opts.cwd ?? process.cwd(),
+        });
+        originTarget = parseRemote(stdout);
+    }
+    catch {
+        // not in a clone
+    }
+    const baseUrl = (explicitBase ?? originTarget?.baseUrl)?.replace(/\/$/, "");
+    if (!baseUrl) {
+        throw new Error("vcs service URL not found: pass --url, set VCS_URL, or run inside a vcs clone");
+    }
+    return { baseUrl, repo: opts.repo ?? originTarget?.repo };
+}
+export async function resolveToken(opts) {
+    if (opts.token)
+        return opts.token;
+    if (process.env.VCS_TOKEN)
+        return process.env.VCS_TOKEN;
+    if (opts.context) {
+        const { getValidToken } = await import("../login.js");
+        const token = await getValidToken(opts.context);
+        if (token)
+            return token;
+    }
+    throw new Error("no token: pass --token, set VCS_TOKEN, or pass --context <platform-context> (after mesh login)");
+}
+/** Minimal authenticated JSON call against the vcs API. */
+export async function vcsApi(baseUrl, token, path, method = "GET", body) {
+    const res = await fetch(`${baseUrl}${path}`, {
+        method,
+        headers: {
+            authorization: `Bearer ${token}`,
+            ...(body !== undefined ? { "content-type": "application/json" } : {}),
+        },
+        ...(body !== undefined ? { body: JSON.stringify(body) } : {}),
+    });
+    const data = (await res.json().catch(() => ({})));
+    if (!res.ok) {
+        throw new Error(`${method} ${path} failed (${res.status}): ${String(data.error ?? "unknown error")}`);
+    }
+    return data;
+}
+//# sourceMappingURL=common.js.map

package/dist/src/commands/vcs/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/commands/vcs/common.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAajD,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAkD;IAElD,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,wEAAwE;IACxE,4EAA4E;IAC5E,8BAA8B;IAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;IAErD,IAAI,YAAY,GAAqB,IAAI,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;YAC7E,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;SAC/B,CAAC,CAAC;QACH,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,YAAY,IAAI,YAAY,EAAE,OAAO,CAAC,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,IAAI,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAgB;IACjD,IAAI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAClC,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IACxD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAe,EACf,KAAa,EACb,IAAY,EACZ,MAAM,GAAG,KAAK,EACd,IAAc;IAEd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;QAC3C,MAAM;QACN,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE;QACD,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,IAAI,IAAI,YAAY,GAAG,CAAC,MAAM,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/commands/vcs/drafts.d.ts

@@ -0,0 +1,13 @@
+import { type CommonOpts } from "./common.js";
+export declare function draftsListCommand(repo: string, opts: CommonOpts & {
+    all?: boolean;
+}): Promise<void>;
+export declare function draftsShowCommand(repo: string, draftId: string, opts: CommonOpts): Promise<void>;
+export declare function draftsCreateCommand(repo: string, opts: CommonOpts & {
+    title?: string;
+}): Promise<void>;
+export declare function draftsSubmitCommand(repo: string, draftId: string, opts: CommonOpts & {
+    note?: string;
+}): Promise<void>;
+export declare function draftsDiscardCommand(repo: string, draftId: string, opts: CommonOpts): Promise<void>;
+//# sourceMappingURL=drafts.d.ts.map

package/dist/src/commands/vcs/drafts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drafts.d.ts","sourceRoot":"","sources":["../../../../src/commands/vcs/drafts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAcnF,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,GAAG;IAAE,GAAG,CAAC,EAAE,OAAO,CAAA;CAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CAYf;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,GAAG;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GACpC,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACnC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,UAAU,GACf,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/src/commands/vcs/drafts.js

@@ -0,0 +1,45 @@
+import { resolveTarget, resolveToken, vcsApi } from "./common.js";
+async function call(opts, repo, path, method = "GET", body) {
+    const target = await resolveTarget({ ...opts, repo });
+    const token = await resolveToken(opts);
+    return vcsApi(target.baseUrl, token, `/v1/repos/${repo}${path}`, method, body);
+}
+export async function draftsListCommand(repo, opts) {
+    const data = (await call(opts, repo, `/drafts${opts.all ? "?all=true" : ""}`));
+    const drafts = data.drafts;
+    if (drafts.length === 0) {
+        console.log("no drafts");
+        return;
+    }
+    for (const d of drafts) {
+        console.log(`${d.draftId}  [${d.state}]  ${d.title}  (updated ${d.updatedAt})`);
+    }
+}
+export async function draftsShowCommand(repo, draftId, opts) {
+    const d = (await call(opts, repo, `/drafts/${draftId}`));
+    console.log(`${d.draftId}  [${d.state}]  ${d.title}`);
+    if (d.headSha !== undefined) {
+        console.log(`head: ${d.headSha}`);
+    }
+    if (d.mergeable === false) {
+        console.log("⚠ the page changed while this draft was being edited");
+    }
+    if (d.changedFiles) {
+        for (const f of d.changedFiles) {
+            console.log(`  ${f.status} ${f.path}`);
+        }
+    }
+}
+export async function draftsCreateCommand(repo, opts) {
+    const d = (await call(opts, repo, "/drafts", "POST", opts.title ? { title: opts.title } : {}));
+    console.log(`draft ${d.draftId} created — submit with: mesh vcs drafts submit ${repo} ${d.draftId}`);
+}
+export async function draftsSubmitCommand(repo, draftId, opts) {
+    const d = (await call(opts, repo, `/drafts/${draftId}/submit`, "POST", opts.note ? { note: opts.note } : {}));
+    console.log(`draft ${d.draftId} submitted for review [${d.state}]`);
+}
+export async function draftsDiscardCommand(repo, draftId, opts) {
+    const d = (await call(opts, repo, `/drafts/${draftId}/discard`, "POST", {}));
+    console.log(`draft ${d.draftId} discarded`);
+}
+//# sourceMappingURL=drafts.js.map

package/dist/src/commands/vcs/drafts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"drafts.js","sourceRoot":"","sources":["../../../../src/commands/vcs/drafts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,EAAmB,MAAM,aAAa,CAAC;AAEnF,KAAK,UAAU,IAAI,CACjB,IAAgB,EAChB,IAAY,EACZ,IAAY,EACZ,MAAM,GAAG,KAAK,EACd,IAAc;IAEd,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,IAAI,GAAG,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,IAAoC;IAEpC,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAE5E,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACzB,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC;IAClF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,OAAe,EACf,IAAgB;IAEhB,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,OAAO,EAAE,CAAC,CAItD,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,IAAqC;IAErC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAE5F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,kDAAkD,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAY,EACZ,OAAe,EACf,IAAoC;IAEpC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CACnB,IAAI,EACJ,IAAI,EACJ,WAAW,OAAO,SAAS,EAC3B,MAAM,EACN,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CACrC,CAA+E,CAAC;IACjF,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,0BAA0B,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY,EACZ,OAAe,EACf,IAAgB;IAEhB,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,OAAO,UAAU,EAAE,MAAM,EAAE,EAAE,CAAC,CAE1E,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,OAAO,YAAY,CAAC,CAAC;AAC9C,CAAC"}

package/dist/src/commands/vcs/get.d.ts

@@ -0,0 +1,8 @@
+import { type CommonOpts } from "./common.js";
+interface GetOpts extends CommonOpts {
+    target?: string;
+    output?: string;
+}
+export declare function getCommand(repo: string, path: string, opts: GetOpts): Promise<void>;
+export {};
+//# sourceMappingURL=get.d.ts.map

package/dist/src/commands/vcs/get.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get.d.ts","sourceRoot":"","sources":["../../../../src/commands/vcs/get.ts"],"names":[],"mappings":"AAeA,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAG5D,UAAU,OAAQ,SAAQ,UAAU;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAuCzF"}