@mx-space/cli 0.1.1 → 0.2.1

package/dist/{login-mjliJn8U.mjs → login-bZx4HaVs.mjs}

@@ -1,13 +1,13 @@
-import { i as emitSuccess, r as emitInfo } from "./output-BM7aBFwt.mjs";
-import { u as writeCredentials } from "./config-store-WL7dNMS6.mjs";
-import { l as requestDeviceCode, o as pollDeviceToken, u as toCredentials } from "./auth-OeKZZ_2x.mjs";
-import { n as resolveContext } from "./shared-C2EAn5h_.mjs";
+import { i as emitSuccess, r as emitInfo } from "./output-vzequvhd.mjs";
+import { f as setCurrentProfile, h as writeProfileCredentials, l as readProfileConfig, m as writeProfileConfig, r as getCurrentProfile } from "./profile-CNe2uWJi.mjs";
+import { l as requestDeviceCode, o as pollDeviceToken, u as toCredentials } from "./auth-CAKmTDpF.mjs";
+import { n as resolveContext } from "./shared-d0_6ZPn_.mjs";
 import childProcess, { execFile } from "node:child_process";
 import path from "node:path";
 import fs from "node:fs";
 import V from "node:process";
-import os from "node:os";
 import { promisify } from "node:util";
+import os from "node:os";
 import { fileURLToPath } from "node:url";
 import fs$1, { constants } from "node:fs/promises";
 import { Buffer } from "node:buffer";
@@ -540,7 +540,7 @@ defineLazyProperty(apps, "edge", () => detectPlatformBinary({
 defineLazyProperty(apps, "safari", () => detectPlatformBinary({ darwin: "Safari" }));
 //#endregion
 //#region src/commands/auth/login.ts
-async function run(flags, out) {
+async function run(flags, out, opts = {}) {
 	const ctx = await resolveContext(flags, out);
 	emitInfo(`probing ${ctx.apiUrl}…`, out);
 	emitInfo(`API base: ${ctx.apiBase}`, out);
@@ -566,8 +566,20 @@ async function run(flags, out) {
 			if (state === "slow_down") emitInfo("slow_down — increasing interval", out);
 		}
 	}));
-	await writeCredentials(cred);
-	emitInfo("authorized", out);
+	const target = flags.profile?.trim() || await getCurrentProfile() || "default";
+	const existing = await readProfileConfig(target);
+	await writeProfileConfig(target, {
+		...existing,
+		api_url: ctx.apiUrl,
+		api_base: ctx.apiBase,
+		auth_base: ctx.authBase,
+		api_version: ctx.apiVersion,
+		client_id: ctx.clientId,
+		...opts.production !== void 0 ? { production: opts.production } : existing.production !== void 0 ? { production: existing.production } : {}
+	});
+	await writeProfileCredentials(target, cred);
+	await setCurrentProfile(target);
+	emitInfo(`mxs: logged in to profile '${target}'`, out);
 	emitSuccess({
 		user: cred.user ?? null,
 		expires_at: cred.expires_at
@@ -576,4 +588,4 @@ async function run(flags, out) {
 //#endregion
 export { run };
 
-//# sourceMappingURL=login-mjliJn8U.mjs.map
+//# sourceMappingURL=login-bZx4HaVs.mjs.map

package/dist/{login-mjliJn8U.mjs.map → login-bZx4HaVs.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"login-mjliJn8U.mjs","names":["process","execFile","powerShellPath","process","execFile","fs","fsConstants","isWsl","windowsPowerShellPath","execFileAsync","process","execFileAsync","process","execFileAsync","defaultBrowser","process","windows","process","process","isWsl","fs","fsConstants"],"sources":["../../../node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js","../../../node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js","../../../node_modules/.pnpm/is-wsl@3.1.1/node_modules/is-wsl/index.js","../../../node_modules/.pnpm/powershell-utils@0.1.0/node_modules/powershell-utils/index.js","../../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js","../../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js","../../../node_modules/.pnpm/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js","../../../node_modules/.pnpm/default-browser-id@5.0.1/node_modules/default-browser-id/index.js","../../../node_modules/.pnpm/run-applescript@7.1.0/node_modules/run-applescript/index.js","../../../node_modules/.pnpm/bundle-name@4.1.0/node_modules/bundle-name/index.js","../../../node_modules/.pnpm/default-browser@5.5.0/node_modules/default-browser/windows.js","../../../node_modules/.pnpm/default-browser@5.5.0/node_modules/default-browser/index.js","../../../node_modules/.pnpm/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js","../../../node_modules/.pnpm/open@11.0.0/node_modules/open/index.js","../src/commands/auth/login.ts"],"sourcesContent":["import fs from 'node:fs';\n\nlet isDockerCached;\n\nfunction hasDockerEnv() {\n\ttry {\n\t\tfs.statSync('/.dockerenv');\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nfunction hasDockerCGroup() {\n\ttry {\n\t\treturn fs.readFileSync('/proc/self/cgroup', 'utf8').includes('docker');\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport default function isDocker() {\n\t// TODO: Use `??=` when targeting Node.js 16.\n\tif (isDockerCached === undefined) {\n\t\tisDockerCached = hasDockerEnv() || hasDockerCGroup();\n\t}\n\n\treturn isDockerCached;\n}\n","import fs from 'node:fs';\nimport isDocker from 'is-docker';\n\nlet cachedResult;\n\n// Podman detection\nconst hasContainerEnv = () => {\n\ttry {\n\t\tfs.statSync('/run/.containerenv');\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n};\n\nexport default function isInsideContainer() {\n\t// TODO: Use `??=` when targeting Node.js 16.\n\tif (cachedResult === undefined) {\n\t\tcachedResult = hasContainerEnv() || isDocker();\n\t}\n\n\treturn cachedResult;\n}\n","import process from 'node:process';\nimport os from 'node:os';\nimport fs from 'node:fs';\nimport isInsideContainer from 'is-inside-container';\n\nconst isWsl = () => {\n\tif (process.platform !== 'linux') {\n\t\treturn false;\n\t}\n\n\tif (os.release().toLowerCase().includes('microsoft')) {\n\t\tif (isInsideContainer()) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn true;\n\t}\n\n\ttry {\n\t\tif (fs.readFileSync('/proc/version', 'utf8').toLowerCase().includes('microsoft')) {\n\t\t\treturn !isInsideContainer();\n\t\t}\n\t} catch {}\n\n\t// Fallback for custom kernels: check WSL-specific paths.\n\tif (\n\t\tfs.existsSync('/proc/sys/fs/binfmt_misc/WSLInterop')\n\t\t|| fs.existsSync('/run/WSL')\n\t) {\n\t\treturn !isInsideContainer();\n\t}\n\n\treturn false;\n};\n\nexport default process.env.__IS_WSL_TEST__ ? isWsl : isWsl();\n","import process from 'node:process';\nimport {Buffer} from 'node:buffer';\nimport {promisify} from 'node:util';\nimport childProcess from 'node:child_process';\nimport fs, {constants as fsConstants} from 'node:fs/promises';\n\nconst execFile = promisify(childProcess.execFile);\n\nexport const powerShellPath = () => `${process.env.SYSTEMROOT || process.env.windir || String.raw`C:\\Windows`}\\\\System32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe`;\n\n// Cache for PowerShell accessibility check\nlet canAccessCache;\n\nexport const canAccessPowerShell = async () => {\n\tcanAccessCache ??= (async () => {\n\t\ttry {\n\t\t\tawait fs.access(powerShellPath(), fsConstants.X_OK);\n\t\t\treturn true;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t})();\n\n\treturn canAccessCache;\n};\n\nexport const executePowerShell = async (command, options = {}) => {\n\tconst {\n\t\tpowerShellPath: psPath,\n\t\t...execFileOptions\n\t} = options;\n\n\tconst encodedCommand = executePowerShell.encodeCommand(command);\n\n\treturn execFile(\n\t\tpsPath ?? powerShellPath(),\n\t\t[\n\t\t\t...executePowerShell.argumentsPrefix,\n\t\t\tencodedCommand,\n\t\t],\n\t\t{\n\t\t\tencoding: 'utf8',\n\t\t\t...execFileOptions,\n\t\t},\n\t);\n};\n\nexecutePowerShell.argumentsPrefix = [\n\t'-NoProfile',\n\t'-NonInteractive',\n\t'-ExecutionPolicy',\n\t'Bypass',\n\t'-EncodedCommand',\n];\n\nexecutePowerShell.encodeCommand = command => Buffer.from(command, 'utf16le').toString('base64');\n\nexecutePowerShell.escapeArgument = value => `'${String(value).replaceAll('\\'', '\\'\\'')}'`;\n","export function parseMountPointFromConfig(content) {\n\tfor (const line of content.split('\\n')) {\n\t\t// Skip comment lines\n\t\tif (/^\\s*#/.test(line)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\t// Match root at start of line (after optional whitespace)\n\t\tconst match = /^\\s*root\\s*=\\s*(?<mountPoint>\"[^\"]*\"|'[^']*'|[^#]*)/.exec(line);\n\t\tif (!match) {\n\t\t\tcontinue;\n\t\t}\n\n\t\treturn match.groups.mountPoint\n\t\t\t.trim()\n\t\t\t// Strip surrounding quotes\n\t\t\t.replaceAll(/^[\"']|[\"']$/g, '');\n\t}\n}\n","import {promisify} from 'node:util';\nimport childProcess from 'node:child_process';\nimport fs, {constants as fsConstants} from 'node:fs/promises';\nimport isWsl from 'is-wsl';\nimport {powerShellPath as windowsPowerShellPath, executePowerShell} from 'powershell-utils';\nimport {parseMountPointFromConfig} from './utilities.js';\n\nconst execFile = promisify(childProcess.execFile);\n\nexport const wslDrivesMountPoint = (() => {\n\t// Default value for \"root\" param\n\t// according to https://docs.microsoft.com/en-us/windows/wsl/wsl-config\n\tconst defaultMountPoint = '/mnt/';\n\n\tlet mountPoint;\n\n\treturn async function () {\n\t\tif (mountPoint) {\n\t\t\t// Return memoized mount point value\n\t\t\treturn mountPoint;\n\t\t}\n\n\t\tconst configFilePath = '/etc/wsl.conf';\n\n\t\tlet isConfigFileExists = false;\n\t\ttry {\n\t\t\tawait fs.access(configFilePath, fsConstants.F_OK);\n\t\t\tisConfigFileExists = true;\n\t\t} catch {}\n\n\t\tif (!isConfigFileExists) {\n\t\t\treturn defaultMountPoint;\n\t\t}\n\n\t\tconst configContent = await fs.readFile(configFilePath, {encoding: 'utf8'});\n\t\tconst parsedMountPoint = parseMountPointFromConfig(configContent);\n\n\t\tif (parsedMountPoint === undefined) {\n\t\t\treturn defaultMountPoint;\n\t\t}\n\n\t\tmountPoint = parsedMountPoint;\n\t\tmountPoint = mountPoint.endsWith('/') ? mountPoint : `${mountPoint}/`;\n\n\t\treturn mountPoint;\n\t};\n})();\n\nexport const powerShellPathFromWsl = async () => {\n\tconst mountPoint = await wslDrivesMountPoint();\n\treturn `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`;\n};\n\nexport const powerShellPath = isWsl ? powerShellPathFromWsl : windowsPowerShellPath;\n\n// Cache for PowerShell accessibility check\nlet canAccessPowerShellPromise;\n\nexport const canAccessPowerShell = async () => {\n\tcanAccessPowerShellPromise ??= (async () => {\n\t\ttry {\n\t\t\tconst psPath = await powerShellPath();\n\t\t\tawait fs.access(psPath, fsConstants.X_OK);\n\t\t\treturn true;\n\t\t} catch {\n\t\t\t// PowerShell is not accessible (either doesn't exist, no execute permission, or other error)\n\t\t\treturn false;\n\t\t}\n\t})();\n\n\treturn canAccessPowerShellPromise;\n};\n\nexport const wslDefaultBrowser = async () => {\n\tconst psPath = await powerShellPath();\n\tconst command = String.raw`(Get-ItemProperty -Path \"HKCU:\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice\").ProgId`;\n\n\tconst {stdout} = await executePowerShell(command, {powerShellPath: psPath});\n\n\treturn stdout.trim();\n};\n\nexport const convertWslPathToWindows = async path => {\n\t// Don't convert URLs\n\tif (/^[a-z]+:\\/\\//i.test(path)) {\n\t\treturn path;\n\t}\n\n\ttry {\n\t\tconst {stdout} = await execFile('wslpath', ['-aw', path], {encoding: 'utf8'});\n\t\treturn stdout.trim();\n\t} catch {\n\t\t// If wslpath fails, return the original path\n\t\treturn path;\n\t}\n};\n\nexport {default as isWsl} from 'is-wsl';\n","export default function defineLazyProperty(object, propertyName, valueGetter) {\n\tconst define = value => Object.defineProperty(object, propertyName, {value, enumerable: true, writable: true});\n\n\tObject.defineProperty(object, propertyName, {\n\t\tconfigurable: true,\n\t\tenumerable: true,\n\t\tget() {\n\t\t\tconst result = valueGetter();\n\t\t\tdefine(result);\n\t\t\treturn result;\n\t\t},\n\t\tset(value) {\n\t\t\tdefine(value);\n\t\t}\n\t});\n\n\treturn object;\n}\n","import {promisify} from 'node:util';\nimport process from 'node:process';\nimport {execFile} from 'node:child_process';\n\nconst execFileAsync = promisify(execFile);\n\nexport default async function defaultBrowserId() {\n\tif (process.platform !== 'darwin') {\n\t\tthrow new Error('macOS only');\n\t}\n\n\tconst {stdout} = await execFileAsync('defaults', ['read', 'com.apple.LaunchServices/com.apple.launchservices.secure', 'LSHandlers']);\n\n\t// `(?!-)` is to prevent matching `LSHandlerRoleAll = \"-\";`.\n\tconst match = /LSHandlerRoleAll = \"(?!-)(?<id>[^\"]+?)\";\\s+?LSHandlerURLScheme = (?:http|https);/.exec(stdout);\n\n\tconst browserId = match?.groups.id ?? 'com.apple.Safari';\n\n\t// Correct the case for Safari's bundle identifier\n\tif (browserId === 'com.apple.safari') {\n\t\treturn 'com.apple.Safari';\n\t}\n\n\treturn browserId;\n}\n","import process from 'node:process';\nimport {promisify} from 'node:util';\nimport {execFile, execFileSync} from 'node:child_process';\n\nconst execFileAsync = promisify(execFile);\n\nexport async function runAppleScript(script, {humanReadableOutput = true, signal} = {}) {\n\tif (process.platform !== 'darwin') {\n\t\tthrow new Error('macOS only');\n\t}\n\n\tconst outputArguments = humanReadableOutput ? [] : ['-ss'];\n\n\tconst execOptions = {};\n\tif (signal) {\n\t\texecOptions.signal = signal;\n\t}\n\n\tconst {stdout} = await execFileAsync('osascript', ['-e', script, outputArguments], execOptions);\n\treturn stdout.trim();\n}\n\nexport function runAppleScriptSync(script, {humanReadableOutput = true} = {}) {\n\tif (process.platform !== 'darwin') {\n\t\tthrow new Error('macOS only');\n\t}\n\n\tconst outputArguments = humanReadableOutput ? [] : ['-ss'];\n\n\tconst stdout = execFileSync('osascript', ['-e', script, ...outputArguments], {\n\t\tencoding: 'utf8',\n\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\ttimeout: 500,\n\t});\n\n\treturn stdout.trim();\n}\n","import {runAppleScript} from 'run-applescript';\n\nexport default async function bundleName(bundleId) {\n\treturn runAppleScript(`tell application \"Finder\" to set app_path to application file id \"${bundleId}\" as string\\ntell application \"System Events\" to get value of property list item \"CFBundleName\" of property list file (app_path & \":Contents:Info.plist\")`);\n}\n","import {promisify} from 'node:util';\nimport {execFile} from 'node:child_process';\n\nconst execFileAsync = promisify(execFile);\n\n// TODO: Fix the casing of bundle identifiers in the next major version.\n\n// Windows doesn't have browser IDs in the same way macOS/Linux does so we give fake\n// ones that look real and match the macOS/Linux versions for cross-platform apps.\nconst windowsBrowserProgIds = {\n\tMSEdgeHTM: {name: 'Edge', id: 'com.microsoft.edge'}, // The missing `L` is correct.\n\tMSEdgeBHTML: {name: 'Edge Beta', id: 'com.microsoft.edge.beta'},\n\tMSEdgeDHTML: {name: 'Edge Dev', id: 'com.microsoft.edge.dev'},\n\tAppXq0fevzme2pys62n3e0fbqa7peapykr8v: {name: 'Edge', id: 'com.microsoft.edge.old'},\n\tChromeHTML: {name: 'Chrome', id: 'com.google.chrome'},\n\tChromeBHTML: {name: 'Chrome Beta', id: 'com.google.chrome.beta'},\n\tChromeDHTML: {name: 'Chrome Dev', id: 'com.google.chrome.dev'},\n\tChromiumHTM: {name: 'Chromium', id: 'org.chromium.Chromium'},\n\tBraveHTML: {name: 'Brave', id: 'com.brave.Browser'},\n\tBraveBHTML: {name: 'Brave Beta', id: 'com.brave.Browser.beta'},\n\tBraveDHTML: {name: 'Brave Dev', id: 'com.brave.Browser.dev'},\n\tBraveSSHTM: {name: 'Brave Nightly', id: 'com.brave.Browser.nightly'},\n\tFirefoxURL: {name: 'Firefox', id: 'org.mozilla.firefox'},\n\tOperaStable: {name: 'Opera', id: 'com.operasoftware.Opera'},\n\tVivaldiHTM: {name: 'Vivaldi', id: 'com.vivaldi.Vivaldi'},\n\t'IE.HTTP': {name: 'Internet Explorer', id: 'com.microsoft.ie'},\n};\n\nexport const _windowsBrowserProgIdMap = new Map(Object.entries(windowsBrowserProgIds));\n\nexport class UnknownBrowserError extends Error {}\n\nexport default async function defaultBrowser(_execFileAsync = execFileAsync) {\n\tconst {stdout} = await _execFileAsync('reg', [\n\t\t'QUERY',\n\t\t' HKEY_CURRENT_USER\\\\Software\\\\Microsoft\\\\Windows\\\\Shell\\\\Associations\\\\UrlAssociations\\\\http\\\\UserChoice',\n\t\t'/v',\n\t\t'ProgId',\n\t]);\n\n\tconst match = /ProgId\\s*REG_SZ\\s*(?<id>\\S+)/.exec(stdout);\n\tif (!match) {\n\t\tthrow new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);\n\t}\n\n\tconst {id} = match.groups;\n\n\t// Windows can append a hash suffix to ProgIds using a dot or hyphen\n\t// (e.g., `ChromeHTML.ABC123`, `FirefoxURL-6F193CCC56814779`).\n\t// Try exact match first, then try without the suffix.\n\tconst dotIndex = id.lastIndexOf('.');\n\tconst hyphenIndex = id.lastIndexOf('-');\n\tconst baseIdByDot = dotIndex === -1 ? undefined : id.slice(0, dotIndex);\n\tconst baseIdByHyphen = hyphenIndex === -1 ? undefined : id.slice(0, hyphenIndex);\n\n\treturn windowsBrowserProgIds[id] ?? windowsBrowserProgIds[baseIdByDot] ?? windowsBrowserProgIds[baseIdByHyphen] ?? {name: id, id};\n}\n","import {promisify} from 'node:util';\nimport process from 'node:process';\nimport {execFile} from 'node:child_process';\nimport defaultBrowserId from 'default-browser-id';\nimport bundleName from 'bundle-name';\nimport windows from './windows.js';\n\nexport {_windowsBrowserProgIdMap} from './windows.js';\n\nconst execFileAsync = promisify(execFile);\n\n// Inlined: https://github.com/sindresorhus/titleize/blob/main/index.js\nconst titleize = string => string.toLowerCase().replaceAll(/(?:^|\\s|-)\\S/g, x => x.toUpperCase());\n\nexport default async function defaultBrowser() {\n\tif (process.platform === 'darwin') {\n\t\tconst id = await defaultBrowserId();\n\t\tconst name = await bundleName(id);\n\t\treturn {name, id};\n\t}\n\n\tif (process.platform === 'linux') {\n\t\tconst {stdout} = await execFileAsync('xdg-mime', ['query', 'default', 'x-scheme-handler/http']);\n\t\tconst id = stdout.trim();\n\t\tconst name = titleize(id.replace(/.desktop$/, '').replace('-', ' '));\n\t\treturn {name, id};\n\t}\n\n\tif (process.platform === 'win32') {\n\t\treturn windows();\n\t}\n\n\tthrow new Error('Only macOS, Linux, and Windows are supported');\n}\n","import process from 'node:process';\n\nconst isInSsh = Boolean(process.env.SSH_CONNECTION\n\t|| process.env.SSH_CLIENT\n\t|| process.env.SSH_TTY);\n\nexport default isInSsh;\n","import process from 'node:process';\nimport path from 'node:path';\nimport {fileURLToPath} from 'node:url';\nimport childProcess from 'node:child_process';\nimport fs, {constants as fsConstants} from 'node:fs/promises';\nimport {\n\tisWsl,\n\tpowerShellPath,\n\tconvertWslPathToWindows,\n\tcanAccessPowerShell,\n\twslDefaultBrowser,\n} from 'wsl-utils';\nimport {executePowerShell} from 'powershell-utils';\nimport defineLazyProperty from 'define-lazy-prop';\nimport defaultBrowser, {_windowsBrowserProgIdMap} from 'default-browser';\nimport isInsideContainer from 'is-inside-container';\nimport isInSsh from 'is-in-ssh';\n\nconst fallbackAttemptSymbol = Symbol('fallbackAttempt');\n\n// Path to included `xdg-open`.\nconst __dirname = import.meta.url ? path.dirname(fileURLToPath(import.meta.url)) : '';\nconst localXdgOpenPath = path.join(__dirname, 'xdg-open');\n\nconst {platform, arch} = process;\n\nconst tryEachApp = async (apps, opener) => {\n\tif (apps.length === 0) {\n\t\t// No app was provided\n\t\treturn;\n\t}\n\n\tconst errors = [];\n\n\tfor (const app of apps) {\n\t\ttry {\n\t\t\treturn await opener(app); // eslint-disable-line no-await-in-loop\n\t\t} catch (error) {\n\t\t\terrors.push(error);\n\t\t}\n\t}\n\n\tthrow new AggregateError(errors, 'Failed to open in all supported apps');\n};\n\n// eslint-disable-next-line complexity\nconst baseOpen = async options => {\n\toptions = {\n\t\twait: false,\n\t\tbackground: false,\n\t\tnewInstance: false,\n\t\tallowNonzeroExitCode: false,\n\t\t...options,\n\t};\n\n\tconst isFallbackAttempt = options[fallbackAttemptSymbol] === true;\n\tdelete options[fallbackAttemptSymbol];\n\n\tif (Array.isArray(options.app)) {\n\t\treturn tryEachApp(options.app, singleApp => baseOpen({\n\t\t\t...options,\n\t\t\tapp: singleApp,\n\t\t\t[fallbackAttemptSymbol]: true,\n\t\t}));\n\t}\n\n\tlet {name: app, arguments: appArguments = []} = options.app ?? {};\n\tappArguments = [...appArguments];\n\n\tif (Array.isArray(app)) {\n\t\treturn tryEachApp(app, appName => baseOpen({\n\t\t\t...options,\n\t\t\tapp: {\n\t\t\t\tname: appName,\n\t\t\t\targuments: appArguments,\n\t\t\t},\n\t\t\t[fallbackAttemptSymbol]: true,\n\t\t}));\n\t}\n\n\tif (app === 'browser' || app === 'browserPrivate') {\n\t\t// IDs from default-browser for macOS and windows are the same.\n\t\t// IDs are lowercased to increase chances of a match.\n\t\tconst ids = {\n\t\t\t'com.google.chrome': 'chrome',\n\t\t\t'google-chrome.desktop': 'chrome',\n\t\t\t'com.brave.browser': 'brave',\n\t\t\t'org.mozilla.firefox': 'firefox',\n\t\t\t'firefox.desktop': 'firefox',\n\t\t\t'com.microsoft.msedge': 'edge',\n\t\t\t'com.microsoft.edge': 'edge',\n\t\t\t'com.microsoft.edgemac': 'edge',\n\t\t\t'microsoft-edge.desktop': 'edge',\n\t\t\t'com.apple.safari': 'safari',\n\t\t};\n\n\t\t// Incognito flags for each browser in `apps`.\n\t\tconst flags = {\n\t\t\tchrome: '--incognito',\n\t\t\tbrave: '--incognito',\n\t\t\tfirefox: '--private-window',\n\t\t\tedge: '--inPrivate',\n\t\t\t// Safari doesn't support private mode via command line\n\t\t};\n\n\t\tlet browser;\n\t\tif (isWsl) {\n\t\t\tconst progId = await wslDefaultBrowser();\n\t\t\tconst browserInfo = _windowsBrowserProgIdMap.get(progId);\n\t\t\tbrowser = browserInfo ?? {};\n\t\t} else {\n\t\t\tbrowser = await defaultBrowser();\n\t\t}\n\n\t\tif (browser.id in ids) {\n\t\t\tconst browserName = ids[browser.id.toLowerCase()];\n\n\t\t\tif (app === 'browserPrivate') {\n\t\t\t\t// Safari doesn't support private mode via command line\n\t\t\t\tif (browserName === 'safari') {\n\t\t\t\t\tthrow new Error('Safari doesn\\'t support opening in private mode via command line');\n\t\t\t\t}\n\n\t\t\t\tappArguments.push(flags[browserName]);\n\t\t\t}\n\n\t\t\treturn baseOpen({\n\t\t\t\t...options,\n\t\t\t\tapp: {\n\t\t\t\t\tname: apps[browserName],\n\t\t\t\t\targuments: appArguments,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\tthrow new Error(`${browser.name} is not supported as a default browser`);\n\t}\n\n\tlet command;\n\tconst cliArguments = [];\n\tconst childProcessOptions = {};\n\n\t// Determine if we should use Windows/PowerShell behavior in WSL.\n\t// We only use Windows integration if PowerShell is actually accessible.\n\t// This allows the package to work in sandboxed WSL environments where Windows access is restricted.\n\tlet shouldUseWindowsInWsl = false;\n\tif (isWsl && !isInsideContainer() && !isInSsh && !app) {\n\t\tshouldUseWindowsInWsl = await canAccessPowerShell();\n\t}\n\n\tif (platform === 'darwin') {\n\t\tcommand = 'open';\n\n\t\tif (options.wait) {\n\t\t\tcliArguments.push('--wait-apps');\n\t\t}\n\n\t\tif (options.background) {\n\t\t\tcliArguments.push('--background');\n\t\t}\n\n\t\tif (options.newInstance) {\n\t\t\tcliArguments.push('--new');\n\t\t}\n\n\t\tif (app) {\n\t\t\tcliArguments.push('-a', app);\n\t\t}\n\t} else if (platform === 'win32' || shouldUseWindowsInWsl) {\n\t\tcommand = await powerShellPath();\n\n\t\tcliArguments.push(...executePowerShell.argumentsPrefix);\n\n\t\tif (!isWsl) {\n\t\t\tchildProcessOptions.windowsVerbatimArguments = true;\n\t\t}\n\n\t\t// Convert WSL Linux paths to Windows paths\n\t\tif (isWsl && options.target) {\n\t\t\toptions.target = await convertWslPathToWindows(options.target);\n\t\t}\n\n\t\t// Suppress PowerShell progress messages that are written to stderr\n\t\tconst encodedArguments = ['$ProgressPreference = \\'SilentlyContinue\\';', 'Start'];\n\n\t\tif (options.wait) {\n\t\t\tencodedArguments.push('-Wait');\n\t\t}\n\n\t\tif (app) {\n\t\t\tencodedArguments.push(executePowerShell.escapeArgument(app));\n\t\t\tif (options.target) {\n\t\t\t\tappArguments.push(options.target);\n\t\t\t}\n\t\t} else if (options.target) {\n\t\t\tencodedArguments.push(executePowerShell.escapeArgument(options.target));\n\t\t}\n\n\t\tif (appArguments.length > 0) {\n\t\t\tappArguments = appArguments.map(argument => executePowerShell.escapeArgument(argument));\n\t\t\tencodedArguments.push('-ArgumentList', appArguments.join(','));\n\t\t}\n\n\t\t// Using Base64-encoded command, accepted by PowerShell, to allow special characters.\n\t\toptions.target = executePowerShell.encodeCommand(encodedArguments.join(' '));\n\n\t\tif (!options.wait) {\n\t\t\t// PowerShell will keep the parent process alive unless stdio is ignored.\n\t\t\tchildProcessOptions.stdio = 'ignore';\n\t\t}\n\t} else {\n\t\tif (app) {\n\t\t\tcommand = app;\n\t\t} else {\n\t\t\t// When bundled by Webpack, there's no actual package file path and no local `xdg-open`.\n\t\t\tconst isBundled = !__dirname || __dirname === '/';\n\n\t\t\t// Check if local `xdg-open` exists and is executable.\n\t\t\tlet exeLocalXdgOpen = false;\n\t\t\ttry {\n\t\t\t\tawait fs.access(localXdgOpenPath, fsConstants.X_OK);\n\t\t\t\texeLocalXdgOpen = true;\n\t\t\t} catch {}\n\n\t\t\tconst useSystemXdgOpen = process.versions.electron\n\t\t\t\t?? (platform === 'android' || isBundled || !exeLocalXdgOpen);\n\t\t\tcommand = useSystemXdgOpen ? 'xdg-open' : localXdgOpenPath;\n\t\t}\n\n\t\tif (appArguments.length > 0) {\n\t\t\tcliArguments.push(...appArguments);\n\t\t}\n\n\t\tif (!options.wait) {\n\t\t\t// `xdg-open` will block the process unless stdio is ignored\n\t\t\t// and it's detached from the parent even if it's unref'd.\n\t\t\tchildProcessOptions.stdio = 'ignore';\n\t\t\tchildProcessOptions.detached = true;\n\t\t}\n\t}\n\n\tif (platform === 'darwin' && appArguments.length > 0) {\n\t\tcliArguments.push('--args', ...appArguments);\n\t}\n\n\t// IMPORTANT: On macOS, the target MUST come AFTER '--args'.\n\t// When using --args, ALL following arguments are passed to the app.\n\t// Example: open -a \"chrome\" --args --incognito https://site.com\n\t// This passes BOTH --incognito AND https://site.com to Chrome.\n\t// Without this order, Chrome won't open in incognito. See #332.\n\tif (options.target) {\n\t\tcliArguments.push(options.target);\n\t}\n\n\tconst subprocess = childProcess.spawn(command, cliArguments, childProcessOptions);\n\n\tif (options.wait) {\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tsubprocess.once('error', reject);\n\n\t\t\tsubprocess.once('close', exitCode => {\n\t\t\t\tif (!options.allowNonzeroExitCode && exitCode !== 0) {\n\t\t\t\t\treject(new Error(`Exited with code ${exitCode}`));\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tresolve(subprocess);\n\t\t\t});\n\t\t});\n\t}\n\n\t// When we're in a fallback attempt, we need to detect launch failures before trying the next app.\n\t// Wait for the close event to check the exit code before unreffing.\n\t// The launcher (open/xdg-open/PowerShell) exits quickly (~10-30ms) even on success.\n\tif (isFallbackAttempt) {\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tsubprocess.once('error', reject);\n\n\t\t\tsubprocess.once('spawn', () => {\n\t\t\t\t// Keep error handler active for post-spawn errors\n\t\t\t\tsubprocess.once('close', exitCode => {\n\t\t\t\t\tsubprocess.off('error', reject);\n\n\t\t\t\t\tif (exitCode !== 0) {\n\t\t\t\t\t\treject(new Error(`Exited with code ${exitCode}`));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\n\t\t\t\t\tsubprocess.unref();\n\t\t\t\t\tresolve(subprocess);\n\t\t\t\t});\n\t\t\t});\n\t\t});\n\t}\n\n\tsubprocess.unref();\n\n\t// Handle spawn errors before the caller can attach listeners.\n\t// This prevents unhandled error events from crashing the process.\n\treturn new Promise((resolve, reject) => {\n\t\tsubprocess.once('error', reject);\n\n\t\t// Wait for the subprocess to spawn before resolving.\n\t\t// This ensures the process is established before the caller continues,\n\t\t// preventing issues when process.exit() is called immediately after.\n\t\tsubprocess.once('spawn', () => {\n\t\t\tsubprocess.off('error', reject);\n\t\t\tresolve(subprocess);\n\t\t});\n\t});\n};\n\nconst open = (target, options) => {\n\tif (typeof target !== 'string') {\n\t\tthrow new TypeError('Expected a `target`');\n\t}\n\n\treturn baseOpen({\n\t\t...options,\n\t\ttarget,\n\t});\n};\n\nexport const openApp = (name, options) => {\n\tif (typeof name !== 'string' && !Array.isArray(name)) {\n\t\tthrow new TypeError('Expected a valid `name`');\n\t}\n\n\tconst {arguments: appArguments = []} = options ?? {};\n\tif (appArguments !== undefined && appArguments !== null && !Array.isArray(appArguments)) {\n\t\tthrow new TypeError('Expected `appArguments` as Array type');\n\t}\n\n\treturn baseOpen({\n\t\t...options,\n\t\tapp: {\n\t\t\tname,\n\t\t\targuments: appArguments,\n\t\t},\n\t});\n};\n\nfunction detectArchBinary(binary) {\n\tif (typeof binary === 'string' || Array.isArray(binary)) {\n\t\treturn binary;\n\t}\n\n\tconst {[arch]: archBinary} = binary;\n\n\tif (!archBinary) {\n\t\tthrow new Error(`${arch} is not supported`);\n\t}\n\n\treturn archBinary;\n}\n\nfunction detectPlatformBinary({[platform]: platformBinary}, {wsl} = {}) {\n\tif (wsl && isWsl) {\n\t\treturn detectArchBinary(wsl);\n\t}\n\n\tif (!platformBinary) {\n\t\tthrow new Error(`${platform} is not supported`);\n\t}\n\n\treturn detectArchBinary(platformBinary);\n}\n\nexport const apps = {\n\tbrowser: 'browser',\n\tbrowserPrivate: 'browserPrivate',\n};\n\ndefineLazyProperty(apps, 'chrome', () => detectPlatformBinary({\n\tdarwin: 'google chrome',\n\twin32: 'chrome',\n\t// `chromium-browser` is the older deb package name used by Ubuntu/Debian before snap.\n\tlinux: ['google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser'],\n}, {\n\twsl: {\n\t\tia32: '/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe',\n\t\tx64: ['/mnt/c/Program Files/Google/Chrome/Application/chrome.exe', '/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe'],\n\t},\n}));\n\ndefineLazyProperty(apps, 'brave', () => detectPlatformBinary({\n\tdarwin: 'brave browser',\n\twin32: 'brave',\n\tlinux: ['brave-browser', 'brave'],\n}, {\n\twsl: {\n\t\tia32: '/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe',\n\t\tx64: ['/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe', '/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe'],\n\t},\n}));\n\ndefineLazyProperty(apps, 'firefox', () => detectPlatformBinary({\n\tdarwin: 'firefox',\n\twin32: String.raw`C:\\Program Files\\Mozilla Firefox\\firefox.exe`,\n\tlinux: 'firefox',\n}, {\n\twsl: '/mnt/c/Program Files/Mozilla Firefox/firefox.exe',\n}));\n\ndefineLazyProperty(apps, 'edge', () => detectPlatformBinary({\n\tdarwin: 'microsoft edge',\n\twin32: 'msedge',\n\tlinux: ['microsoft-edge', 'microsoft-edge-dev'],\n}, {\n\twsl: '/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe',\n}));\n\ndefineLazyProperty(apps, 'safari', () => detectPlatformBinary({\n\tdarwin: 'Safari',\n}));\n\nexport default open;\n","import open from 'open'\n\nimport {\n  pollDeviceToken,\n  requestDeviceCode,\n  toCredentials,\n} from '../../core/auth'\nimport { writeCredentials } from '../../core/config-store'\nimport { emitInfo, emitSuccess, type OutputOptions } from '../../core/output'\nimport { type GlobalFlags, resolveContext } from '../internal/shared'\n\nexport async function run(flags: GlobalFlags, out: OutputOptions) {\n  const ctx = await resolveContext(flags, out)\n  emitInfo(`probing ${ctx.apiUrl}…`, out)\n  emitInfo(`API base: ${ctx.apiBase}`, out)\n\n  const code = await requestDeviceCode(ctx.authBase, ctx.clientId)\n  emitInfo(`visit: ${code.verification_uri}`, out)\n  emitInfo(`code:  ${code.user_code}`, out)\n  emitInfo(`expires in ${code.expires_in}s`, out)\n\n  if (out.json) {\n    process.stdout.write(\n      `${JSON.stringify({\n        ok: true,\n        data: {\n          verification_uri: code.verification_uri,\n          verification_uri_complete: code.verification_uri_complete,\n          user_code: code.user_code,\n          expires_in: code.expires_in,\n          interval: code.interval,\n        },\n      })}\\n`,\n    )\n  } else if (!flags.quiet && code.verification_uri_complete) {\n    void open(code.verification_uri_complete).catch(() => undefined)\n  }\n\n  const token = await pollDeviceToken(\n    ctx.authBase,\n    ctx.clientId,\n    code.device_code,\n    {\n      intervalSec: code.interval,\n      expiresInSec: code.expires_in,\n      onTick: (state) => {\n        if (state === 'slow_down')\n          emitInfo('slow_down — increasing interval', out)\n      },\n    },\n  )\n  const cred = toCredentials(token)\n  await writeCredentials(cred)\n  emitInfo('authorized', out)\n  emitSuccess(\n    {\n      user: cred.user ?? null,\n      expires_at: cred.expires_at,\n    },\n    out,\n  )\n}\n"],"x_google_ignoreList":[0,1,2,3,4,5,6,7,8,9,10,11,12,13],"mappings":";;;;;;;;;;;;;;AAEA,IAAI;AAEJ,SAAS,eAAe;CACvB,IAAI;EACH,GAAG,SAAS,aAAa;EACzB,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,kBAAkB;CAC1B,IAAI;EACH,OAAO,GAAG,aAAa,qBAAqB,MAAM,EAAE,SAAS,QAAQ;CACtE,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAwB,WAAW;CAElC,IAAI,mBAAmB,KAAA,GACtB,iBAAiB,aAAa,KAAK,gBAAgB;CAGpD,OAAO;AACR;;;ACzBA,IAAI;AAGJ,MAAM,wBAAwB;CAC7B,IAAI;EACH,GAAG,SAAS,oBAAoB;EAChC,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAwB,oBAAoB;CAE3C,IAAI,iBAAiB,KAAA,GACpB,eAAe,gBAAgB,KAAK,SAAS;CAG9C,OAAO;AACR;;;ACjBA,MAAM,cAAc;CACnB,IAAIA,EAAQ,aAAa,SACxB,OAAO;CAGR,IAAI,GAAG,QAAQ,EAAE,YAAY,EAAE,SAAS,WAAW,GAAG;EACrD,IAAI,kBAAkB,GACrB,OAAO;EAGR,OAAO;CACR;CAEA,IAAI;EACH,IAAI,GAAG,aAAa,iBAAiB,MAAM,EAAE,YAAY,EAAE,SAAS,WAAW,GAC9E,OAAO,CAAC,kBAAkB;CAE5B,QAAQ,CAAC;CAGT,IACC,GAAG,WAAW,qCAAqC,KAChD,GAAG,WAAW,UAAU,GAE3B,OAAO,CAAC,kBAAkB;CAG3B,OAAO;AACR;AAEA,IAAA,iBAAeA,EAAQ,IAAI,kBAAkB,QAAQ,MAAM;;;AC7B3D,MAAMC,aAAW,UAAU,aAAa,QAAQ;AAEhD,MAAaC,yBAAuB,GAAGC,EAAQ,IAAI,cAAcA,EAAQ,IAAI,UAAU,OAAO,GAAG,aAAa;AAkB9G,MAAa,oBAAoB,OAAO,SAAS,UAAU,CAAC,MAAM;CACjE,MAAM,EACL,gBAAgB,QAChB,GAAG,oBACA;CAEJ,MAAM,iBAAiB,kBAAkB,cAAc,OAAO;CAE9D,OAAOF,WACN,UAAUC,iBAAe,GACzB,CACC,GAAG,kBAAkB,iBACrB,cACD,GACA;EACC,UAAU;EACV,GAAG;CACJ,CACD;AACD;AAEA,kBAAkB,kBAAkB;CACnC;CACA;CACA;CACA;CACA;AACD;AAEA,kBAAkB,iBAAgB,YAAW,OAAO,KAAK,SAAS,SAAS,EAAE,SAAS,QAAQ;AAE9F,kBAAkB,kBAAiB,UAAS,IAAI,OAAO,KAAK,EAAE,WAAW,KAAM,IAAM,EAAE;;;ACzDvF,SAAgB,0BAA0B,SAAS;CAClD,KAAK,MAAM,QAAQ,QAAQ,MAAM,IAAI,GAAG;EAEvC,IAAI,QAAQ,KAAK,IAAI,GACpB;EAID,MAAM,QAAQ,sDAAsD,KAAK,IAAI;EAC7E,IAAI,CAAC,OACJ;EAGD,OAAO,MAAM,OAAO,WAClB,KAAK,EAEL,WAAW,gBAAgB,EAAE;CAChC;AACD;;;ACXA,MAAME,aAAW,UAAU,aAAa,QAAQ;AAEhD,MAAa,6BAA6B;CAGzC,MAAM,oBAAoB;CAE1B,IAAI;CAEJ,OAAO,iBAAkB;EACxB,IAAI,YAEH,OAAO;EAGR,MAAM,iBAAiB;EAEvB,IAAI,qBAAqB;EACzB,IAAI;GACH,MAAMC,KAAG,OAAO,gBAAgBC,UAAY,IAAI;GAChD,qBAAqB;EACtB,QAAQ,CAAC;EAET,IAAI,CAAC,oBACJ,OAAO;EAIR,MAAM,mBAAmB,0BAA0B,MADvBD,KAAG,SAAS,gBAAgB,EAAC,UAAU,OAAM,CAAC,CACV;EAEhE,IAAI,qBAAqB,KAAA,GACxB,OAAO;EAGR,aAAa;EACb,aAAa,WAAW,SAAS,GAAG,IAAI,aAAa,GAAG,WAAW;EAEnE,OAAO;CACR;AACD,GAAG;AAEH,MAAa,wBAAwB,YAAY;CAEhD,OAAO,GAAG,MADe,oBAAoB,EACxB;AACtB;AAEA,MAAa,iBAAiBE,iBAAQ,wBAAwBC;AAG9D,IAAI;AAEJ,MAAa,sBAAsB,YAAY;CAC9C,gCAAgC,YAAY;EAC3C,IAAI;GACH,MAAM,SAAS,MAAM,eAAe;GACpC,MAAMH,KAAG,OAAO,QAAQC,UAAY,IAAI;GACxC,OAAO;EACR,QAAQ;GAEP,OAAO;EACR;CACD,GAAG;CAEH,OAAO;AACR;AAEA,MAAa,oBAAoB,YAAY;CAC5C,MAAM,SAAS,MAAM,eAAe;CAGpC,MAAM,EAAC,WAAU,MAAM,kBAAkB,OAFlB,GAAG,yHAEwB,EAAC,gBAAgB,OAAM,CAAC;CAE1E,OAAO,OAAO,KAAK;AACpB;AAEA,MAAa,0BAA0B,OAAM,SAAQ;CAEpD,IAAI,gBAAgB,KAAK,IAAI,GAC5B,OAAO;CAGR,IAAI;EACH,MAAM,EAAC,WAAU,MAAMF,WAAS,WAAW,CAAC,OAAO,IAAI,GAAG,EAAC,UAAU,OAAM,CAAC;EAC5E,OAAO,OAAO,KAAK;CACpB,QAAQ;EAEP,OAAO;CACR;AACD;;;AC/FA,SAAwB,mBAAmB,QAAQ,cAAc,aAAa;CAC7E,MAAM,UAAS,UAAS,OAAO,eAAe,QAAQ,cAAc;EAAC;EAAO,YAAY;EAAM,UAAU;CAAI,CAAC;CAE7G,OAAO,eAAe,QAAQ,cAAc;EAC3C,cAAc;EACd,YAAY;EACZ,MAAM;GACL,MAAM,SAAS,YAAY;GAC3B,OAAO,MAAM;GACb,OAAO;EACR;EACA,IAAI,OAAO;GACV,OAAO,KAAK;EACb;CACD,CAAC;CAED,OAAO;AACR;;;ACbA,MAAMK,kBAAgB,UAAU,QAAQ;AAExC,eAA8B,mBAAmB;CAChD,IAAIC,EAAQ,aAAa,UACxB,MAAM,IAAI,MAAM,YAAY;CAG7B,MAAM,EAAC,WAAU,MAAMD,gBAAc,YAAY;EAAC;EAAQ;EAA4D;CAAY,CAAC;CAKnI,MAAM,YAFQ,mFAAmF,KAAK,MAEhF,GAAG,OAAO,MAAM;CAGtC,IAAI,cAAc,oBACjB,OAAO;CAGR,OAAO;AACR;;;ACpBA,MAAME,kBAAgB,UAAU,QAAQ;AAExC,eAAsB,eAAe,QAAQ,EAAC,sBAAsB,MAAM,WAAU,CAAC,GAAG;CACvF,IAAIC,EAAQ,aAAa,UACxB,MAAM,IAAI,MAAM,YAAY;CAG7B,MAAM,kBAAkB,sBAAsB,CAAC,IAAI,CAAC,KAAK;CAEzD,MAAM,cAAc,CAAC;CACrB,IAAI,QACH,YAAY,SAAS;CAGtB,MAAM,EAAC,WAAU,MAAMD,gBAAc,aAAa;EAAC;EAAM;EAAQ;CAAe,GAAG,WAAW;CAC9F,OAAO,OAAO,KAAK;AACpB;;;AClBA,eAA8B,WAAW,UAAU;CAClD,OAAO,eAAe,qEAAqE,SAAS,0JAA0J;AAC/P;;;ACDA,MAAME,kBAAgB,UAAU,QAAQ;AAMxC,MAAM,wBAAwB;CAC7B,WAAW;EAAC,MAAM;EAAQ,IAAI;CAAoB;CAClD,aAAa;EAAC,MAAM;EAAa,IAAI;CAAyB;CAC9D,aAAa;EAAC,MAAM;EAAY,IAAI;CAAwB;CAC5D,sCAAsC;EAAC,MAAM;EAAQ,IAAI;CAAwB;CACjF,YAAY;EAAC,MAAM;EAAU,IAAI;CAAmB;CACpD,aAAa;EAAC,MAAM;EAAe,IAAI;CAAwB;CAC/D,aAAa;EAAC,MAAM;EAAc,IAAI;CAAuB;CAC7D,aAAa;EAAC,MAAM;EAAY,IAAI;CAAuB;CAC3D,WAAW;EAAC,MAAM;EAAS,IAAI;CAAmB;CAClD,YAAY;EAAC,MAAM;EAAc,IAAI;CAAwB;CAC7D,YAAY;EAAC,MAAM;EAAa,IAAI;CAAuB;CAC3D,YAAY;EAAC,MAAM;EAAiB,IAAI;CAA2B;CACnE,YAAY;EAAC,MAAM;EAAW,IAAI;CAAqB;CACvD,aAAa;EAAC,MAAM;EAAS,IAAI;CAAyB;CAC1D,YAAY;EAAC,MAAM;EAAW,IAAI;CAAqB;CACvD,WAAW;EAAC,MAAM;EAAqB,IAAI;CAAkB;AAC9D;AAEA,MAAa,2BAA2B,IAAI,IAAI,OAAO,QAAQ,qBAAqB,CAAC;AAErF,IAAa,sBAAb,cAAyC,MAAM,CAAC;AAEhD,eAA8BC,iBAAe,iBAAiBD,iBAAe;CAC5E,MAAM,EAAC,WAAU,MAAM,eAAe,OAAO;EAC5C;EACA;EACA;EACA;CACD,CAAC;CAED,MAAM,QAAQ,+BAA+B,KAAK,MAAM;CACxD,IAAI,CAAC,OACJ,MAAM,IAAI,oBAAoB,0CAA0C,KAAK,UAAU,MAAM,GAAG;CAGjG,MAAM,EAAC,OAAM,MAAM;CAKnB,MAAM,WAAW,GAAG,YAAY,GAAG;CACnC,MAAM,cAAc,GAAG,YAAY,GAAG;CACtC,MAAM,cAAc,aAAa,KAAK,KAAA,IAAY,GAAG,MAAM,GAAG,QAAQ;CACtE,MAAM,iBAAiB,gBAAgB,KAAK,KAAA,IAAY,GAAG,MAAM,GAAG,WAAW;CAE/E,OAAO,sBAAsB,OAAO,sBAAsB,gBAAgB,sBAAsB,mBAAmB;EAAC,MAAM;EAAI;CAAE;AACjI;;;AC/CA,MAAM,gBAAgB,UAAU,QAAQ;AAGxC,MAAM,YAAW,WAAU,OAAO,YAAY,EAAE,WAAW,kBAAiB,MAAK,EAAE,YAAY,CAAC;AAEhG,eAA8B,iBAAiB;CAC9C,IAAIE,EAAQ,aAAa,UAAU;EAClC,MAAM,KAAK,MAAM,iBAAiB;EAElC,OAAO;GAAC,MAAA,MADW,WAAW,EAAE;GAClB;EAAE;CACjB;CAEA,IAAIA,EAAQ,aAAa,SAAS;EACjC,MAAM,EAAC,WAAU,MAAM,cAAc,YAAY;GAAC;GAAS;GAAW;EAAuB,CAAC;EAC9F,MAAM,KAAK,OAAO,KAAK;EAEvB,OAAO;GAAC,MADK,SAAS,GAAG,QAAQ,aAAa,EAAE,EAAE,QAAQ,KAAK,GAAG,CACvD;GAAG;EAAE;CACjB;CAEA,IAAIA,EAAQ,aAAa,SACxB,OAAOC,iBAAQ;CAGhB,MAAM,IAAI,MAAM,8CAA8C;AAC/D;;;AC/BA,MAAM,UAAU,QAAQC,EAAQ,IAAI,kBAChCA,EAAQ,IAAI,cACZA,EAAQ,IAAI,OAAO;;;ACcvB,MAAM,wBAAwB,OAAO,iBAAiB;AAGtD,MAAM,YAAY,OAAO,KAAK,MAAM,KAAK,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC,IAAI;AACnF,MAAM,mBAAmB,KAAK,KAAK,WAAW,UAAU;AAExD,MAAM,EAAC,UAAU,SAAQC;AAEzB,MAAM,aAAa,OAAO,MAAM,WAAW;CAC1C,IAAI,KAAK,WAAW,GAEnB;CAGD,MAAM,SAAS,CAAC;CAEhB,KAAK,MAAM,OAAO,MACjB,IAAI;EACH,OAAO,MAAM,OAAO,GAAG;CACxB,SAAS,OAAO;EACf,OAAO,KAAK,KAAK;CAClB;CAGD,MAAM,IAAI,eAAe,QAAQ,sCAAsC;AACxE;AAGA,MAAM,WAAW,OAAM,YAAW;CACjC,UAAU;EACT,MAAM;EACN,YAAY;EACZ,aAAa;EACb,sBAAsB;EACtB,GAAG;CACJ;CAEA,MAAM,oBAAoB,QAAQ,2BAA2B;CAC7D,OAAO,QAAQ;CAEf,IAAI,MAAM,QAAQ,QAAQ,GAAG,GAC5B,OAAO,WAAW,QAAQ,MAAK,cAAa,SAAS;EACpD,GAAG;EACH,KAAK;GACJ,wBAAwB;CAC1B,CAAC,CAAC;CAGH,IAAI,EAAC,MAAM,KAAK,WAAW,eAAe,CAAC,MAAK,QAAQ,OAAO,CAAC;CAChE,eAAe,CAAC,GAAG,YAAY;CAE/B,IAAI,MAAM,QAAQ,GAAG,GACpB,OAAO,WAAW,MAAK,YAAW,SAAS;EAC1C,GAAG;EACH,KAAK;GACJ,MAAM;GACN,WAAW;EACZ;GACC,wBAAwB;CAC1B,CAAC,CAAC;CAGH,IAAI,QAAQ,aAAa,QAAQ,kBAAkB;EAGlD,MAAM,MAAM;GACX,qBAAqB;GACrB,yBAAyB;GACzB,qBAAqB;GACrB,uBAAuB;GACvB,mBAAmB;GACnB,wBAAwB;GACxB,sBAAsB;GACtB,yBAAyB;GACzB,0BAA0B;GAC1B,oBAAoB;EACrB;EAGA,MAAM,QAAQ;GACb,QAAQ;GACR,OAAO;GACP,SAAS;GACT,MAAM;EAEP;EAEA,IAAI;EACJ,IAAIC,gBAAO;GACV,MAAM,SAAS,MAAM,kBAAkB;GAEvC,UADoB,yBAAyB,IAAI,MAC7B,KAAK,CAAC;EAC3B,OACC,UAAU,MAAM,eAAe;EAGhC,IAAI,QAAQ,MAAM,KAAK;GACtB,MAAM,cAAc,IAAI,QAAQ,GAAG,YAAY;GAE/C,IAAI,QAAQ,kBAAkB;IAE7B,IAAI,gBAAgB,UACnB,MAAM,IAAI,MAAM,iEAAkE;IAGnF,aAAa,KAAK,MAAM,YAAY;GACrC;GAEA,OAAO,SAAS;IACf,GAAG;IACH,KAAK;KACJ,MAAM,KAAK;KACX,WAAW;IACZ;GACD,CAAC;EACF;EAEA,MAAM,IAAI,MAAM,GAAG,QAAQ,KAAK,uCAAuC;CACxE;CAEA,IAAI;CACJ,MAAM,eAAe,CAAC;CACtB,MAAM,sBAAsB,CAAC;CAK7B,IAAI,wBAAwB;CAC5B,IAAIA,kBAAS,CAAC,kBAAkB,KAAK,CAAC,WAAW,CAAC,KACjD,wBAAwB,MAAM,oBAAoB;CAGnD,IAAI,aAAa,UAAU;EAC1B,UAAU;EAEV,IAAI,QAAQ,MACX,aAAa,KAAK,aAAa;EAGhC,IAAI,QAAQ,YACX,aAAa,KAAK,cAAc;EAGjC,IAAI,QAAQ,aACX,aAAa,KAAK,OAAO;EAG1B,IAAI,KACH,aAAa,KAAK,MAAM,GAAG;CAE7B,OAAO,IAAI,aAAa,WAAW,uBAAuB;EACzD,UAAU,MAAM,eAAe;EAE/B,aAAa,KAAK,GAAG,kBAAkB,eAAe;EAEtD,IAAI,CAACA,gBACJ,oBAAoB,2BAA2B;EAIhD,IAAIA,kBAAS,QAAQ,QACpB,QAAQ,SAAS,MAAM,wBAAwB,QAAQ,MAAM;EAI9D,MAAM,mBAAmB,CAAC,6CAA+C,OAAO;EAEhF,IAAI,QAAQ,MACX,iBAAiB,KAAK,OAAO;EAG9B,IAAI,KAAK;GACR,iBAAiB,KAAK,kBAAkB,eAAe,GAAG,CAAC;GAC3D,IAAI,QAAQ,QACX,aAAa,KAAK,QAAQ,MAAM;EAElC,OAAO,IAAI,QAAQ,QAClB,iBAAiB,KAAK,kBAAkB,eAAe,QAAQ,MAAM,CAAC;EAGvE,IAAI,aAAa,SAAS,GAAG;GAC5B,eAAe,aAAa,KAAI,aAAY,kBAAkB,eAAe,QAAQ,CAAC;GACtF,iBAAiB,KAAK,iBAAiB,aAAa,KAAK,GAAG,CAAC;EAC9D;EAGA,QAAQ,SAAS,kBAAkB,cAAc,iBAAiB,KAAK,GAAG,CAAC;EAE3E,IAAI,CAAC,QAAQ,MAEZ,oBAAoB,QAAQ;CAE9B,OAAO;EACN,IAAI,KACH,UAAU;OACJ;GAEN,MAAM,YAAY,CAAC,aAAa,cAAc;GAG9C,IAAI,kBAAkB;GACtB,IAAI;IACH,MAAMC,KAAG,OAAO,kBAAkBC,UAAY,IAAI;IAClD,kBAAkB;GACnB,QAAQ,CAAC;GAIT,UAFyBH,EAAQ,SAAS,aACrC,aAAa,aAAa,aAAa,CAAC,mBAChB,aAAa;EAC3C;EAEA,IAAI,aAAa,SAAS,GACzB,aAAa,KAAK,GAAG,YAAY;EAGlC,IAAI,CAAC,QAAQ,MAAM;GAGlB,oBAAoB,QAAQ;GAC5B,oBAAoB,WAAW;EAChC;CACD;CAEA,IAAI,aAAa,YAAY,aAAa,SAAS,GAClD,aAAa,KAAK,UAAU,GAAG,YAAY;CAQ5C,IAAI,QAAQ,QACX,aAAa,KAAK,QAAQ,MAAM;CAGjC,MAAM,aAAa,aAAa,MAAM,SAAS,cAAc,mBAAmB;CAEhF,IAAI,QAAQ,MACX,OAAO,IAAI,SAAS,SAAS,WAAW;EACvC,WAAW,KAAK,SAAS,MAAM;EAE/B,WAAW,KAAK,UAAS,aAAY;GACpC,IAAI,CAAC,QAAQ,wBAAwB,aAAa,GAAG;IACpD,uBAAO,IAAI,MAAM,oBAAoB,UAAU,CAAC;IAChD;GACD;GAEA,QAAQ,UAAU;EACnB,CAAC;CACF,CAAC;CAMF,IAAI,mBACH,OAAO,IAAI,SAAS,SAAS,WAAW;EACvC,WAAW,KAAK,SAAS,MAAM;EAE/B,WAAW,KAAK,eAAe;GAE9B,WAAW,KAAK,UAAS,aAAY;IACpC,WAAW,IAAI,SAAS,MAAM;IAE9B,IAAI,aAAa,GAAG;KACnB,uBAAO,IAAI,MAAM,oBAAoB,UAAU,CAAC;KAChD;IACD;IAEA,WAAW,MAAM;IACjB,QAAQ,UAAU;GACnB,CAAC;EACF,CAAC;CACF,CAAC;CAGF,WAAW,MAAM;CAIjB,OAAO,IAAI,SAAS,SAAS,WAAW;EACvC,WAAW,KAAK,SAAS,MAAM;EAK/B,WAAW,KAAK,eAAe;GAC9B,WAAW,IAAI,SAAS,MAAM;GAC9B,QAAQ,UAAU;EACnB,CAAC;CACF,CAAC;AACF;AAEA,MAAM,QAAQ,QAAQ,YAAY;CACjC,IAAI,OAAO,WAAW,UACrB,MAAM,IAAI,UAAU,qBAAqB;CAG1C,OAAO,SAAS;EACf,GAAG;EACH;CACD,CAAC;AACF;AAqBA,SAAS,iBAAiB,QAAQ;CACjC,IAAI,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACrD,OAAO;CAGR,MAAM,GAAE,OAAO,eAAc;CAE7B,IAAI,CAAC,YACJ,MAAM,IAAI,MAAM,GAAG,KAAK,kBAAkB;CAG3C,OAAO;AACR;AAEA,SAAS,qBAAqB,GAAE,WAAW,kBAAiB,EAAC,QAAO,CAAC,GAAG;CACvE,IAAI,OAAOC,gBACV,OAAO,iBAAiB,GAAG;CAG5B,IAAI,CAAC,gBACJ,MAAM,IAAI,MAAM,GAAG,SAAS,kBAAkB;CAG/C,OAAO,iBAAiB,cAAc;AACvC;AAEA,MAAa,OAAO;CACnB,SAAS;CACT,gBAAgB;AACjB;AAEA,mBAAmB,MAAM,gBAAgB,qBAAqB;CAC7D,QAAQ;CACR,OAAO;CAEP,OAAO;EAAC;EAAiB;EAAwB;EAAY;CAAkB;AAChF,GAAG,EACF,KAAK;CACJ,MAAM;CACN,KAAK,CAAC,6DAA6D,iEAAiE;AACrI,EACD,CAAC,CAAC;AAEF,mBAAmB,MAAM,eAAe,qBAAqB;CAC5D,QAAQ;CACR,OAAO;CACP,OAAO,CAAC,iBAAiB,OAAO;AACjC,GAAG,EACF,KAAK;CACJ,MAAM;CACN,KAAK,CAAC,0EAA0E,8EAA8E;AAC/J,EACD,CAAC,CAAC;AAEF,mBAAmB,MAAM,iBAAiB,qBAAqB;CAC9D,QAAQ;CACR,OAAO,OAAO,GAAG;CACjB,OAAO;AACR,GAAG,EACF,KAAK,mDACN,CAAC,CAAC;AAEF,mBAAmB,MAAM,cAAc,qBAAqB;CAC3D,QAAQ;CACR,OAAO;CACP,OAAO,CAAC,kBAAkB,oBAAoB;AAC/C,GAAG,EACF,KAAK,mEACN,CAAC,CAAC;AAEF,mBAAmB,MAAM,gBAAgB,qBAAqB,EAC7D,QAAQ,SACT,CAAC,CAAC;;;ACnZF,eAAsB,IAAI,OAAoB,KAAoB;CAChE,MAAM,MAAM,MAAM,eAAe,OAAO,GAAG;CAC3C,SAAS,WAAW,IAAI,OAAO,IAAI,GAAG;CACtC,SAAS,aAAa,IAAI,WAAW,GAAG;CAExC,MAAM,OAAO,MAAM,kBAAkB,IAAI,UAAU,IAAI,QAAQ;CAC/D,SAAS,UAAU,KAAK,oBAAoB,GAAG;CAC/C,SAAS,UAAU,KAAK,aAAa,GAAG;CACxC,SAAS,cAAc,KAAK,WAAW,IAAI,GAAG;CAE9C,IAAI,IAAI,MACN,QAAQ,OAAO,MACb,GAAG,KAAK,UAAU;EAChB,IAAI;EACJ,MAAM;GACJ,kBAAkB,KAAK;GACvB,2BAA2B,KAAK;GAChC,WAAW,KAAK;GAChB,YAAY,KAAK;GACjB,UAAU,KAAK;EACjB;CACF,CAAC,EAAE,GACL;MACK,IAAI,CAAC,MAAM,SAAS,KAAK,2BAC9B,KAAU,KAAK,yBAAyB,EAAE,YAAY,KAAA,CAAS;CAgBjE,MAAM,OAAO,cAAc,MAbP,gBAClB,IAAI,UACJ,IAAI,UACJ,KAAK,aACL;EACE,aAAa,KAAK;EAClB,cAAc,KAAK;EACnB,SAAS,UAAU;GACjB,IAAI,UAAU,aACZ,SAAS,mCAAmC,GAAG;EACnD;CACF,CACF,CACgC;CAChC,MAAM,iBAAiB,IAAI;CAC3B,SAAS,cAAc,GAAG;CAC1B,YACE;EACE,MAAM,KAAK,QAAQ;EACnB,YAAY,KAAK;CACnB,GACA,GACF;AACF"}
+{"version":3,"file":"login-bZx4HaVs.mjs","names":["process","execFile","powerShellPath","process","execFile","fs","fsConstants","isWsl","windowsPowerShellPath","execFileAsync","process","execFileAsync","process","execFileAsync","defaultBrowser","process","windows","process","process","isWsl","fs","fsConstants"],"sources":["../../../node_modules/.pnpm/is-docker@3.0.0/node_modules/is-docker/index.js","../../../node_modules/.pnpm/is-inside-container@1.0.0/node_modules/is-inside-container/index.js","../../../node_modules/.pnpm/is-wsl@3.1.1/node_modules/is-wsl/index.js","../../../node_modules/.pnpm/powershell-utils@0.1.0/node_modules/powershell-utils/index.js","../../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/utilities.js","../../../node_modules/.pnpm/wsl-utils@0.3.1/node_modules/wsl-utils/index.js","../../../node_modules/.pnpm/define-lazy-prop@3.0.0/node_modules/define-lazy-prop/index.js","../../../node_modules/.pnpm/default-browser-id@5.0.1/node_modules/default-browser-id/index.js","../../../node_modules/.pnpm/run-applescript@7.1.0/node_modules/run-applescript/index.js","../../../node_modules/.pnpm/bundle-name@4.1.0/node_modules/bundle-name/index.js","../../../node_modules/.pnpm/default-browser@5.5.0/node_modules/default-browser/windows.js","../../../node_modules/.pnpm/default-browser@5.5.0/node_modules/default-browser/index.js","../../../node_modules/.pnpm/is-in-ssh@1.0.0/node_modules/is-in-ssh/index.js","../../../node_modules/.pnpm/open@11.0.0/node_modules/open/index.js","../src/commands/auth/login.ts"],"sourcesContent":["import fs from 'node:fs';\n\nlet isDockerCached;\n\nfunction hasDockerEnv() {\n\ttry {\n\t\tfs.statSync('/.dockerenv');\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nfunction hasDockerCGroup() {\n\ttry {\n\t\treturn fs.readFileSync('/proc/self/cgroup', 'utf8').includes('docker');\n\t} catch {\n\t\treturn false;\n\t}\n}\n\nexport default function isDocker() {\n\t// TODO: Use `??=` when targeting Node.js 16.\n\tif (isDockerCached === undefined) {\n\t\tisDockerCached = hasDockerEnv() || hasDockerCGroup();\n\t}\n\n\treturn isDockerCached;\n}\n","import fs from 'node:fs';\nimport isDocker from 'is-docker';\n\nlet cachedResult;\n\n// Podman detection\nconst hasContainerEnv = () => {\n\ttry {\n\t\tfs.statSync('/run/.containerenv');\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n};\n\nexport default function isInsideContainer() {\n\t// TODO: Use `??=` when targeting Node.js 16.\n\tif (cachedResult === undefined) {\n\t\tcachedResult = hasContainerEnv() || isDocker();\n\t}\n\n\treturn cachedResult;\n}\n","import process from 'node:process';\nimport os from 'node:os';\nimport fs from 'node:fs';\nimport isInsideContainer from 'is-inside-container';\n\nconst isWsl = () => {\n\tif (process.platform !== 'linux') {\n\t\treturn false;\n\t}\n\n\tif (os.release().toLowerCase().includes('microsoft')) {\n\t\tif (isInsideContainer()) {\n\t\t\treturn false;\n\t\t}\n\n\t\treturn true;\n\t}\n\n\ttry {\n\t\tif (fs.readFileSync('/proc/version', 'utf8').toLowerCase().includes('microsoft')) {\n\t\t\treturn !isInsideContainer();\n\t\t}\n\t} catch {}\n\n\t// Fallback for custom kernels: check WSL-specific paths.\n\tif (\n\t\tfs.existsSync('/proc/sys/fs/binfmt_misc/WSLInterop')\n\t\t|| fs.existsSync('/run/WSL')\n\t) {\n\t\treturn !isInsideContainer();\n\t}\n\n\treturn false;\n};\n\nexport default process.env.__IS_WSL_TEST__ ? isWsl : isWsl();\n","import process from 'node:process';\nimport {Buffer} from 'node:buffer';\nimport {promisify} from 'node:util';\nimport childProcess from 'node:child_process';\nimport fs, {constants as fsConstants} from 'node:fs/promises';\n\nconst execFile = promisify(childProcess.execFile);\n\nexport const powerShellPath = () => `${process.env.SYSTEMROOT || process.env.windir || String.raw`C:\\Windows`}\\\\System32\\\\WindowsPowerShell\\\\v1.0\\\\powershell.exe`;\n\n// Cache for PowerShell accessibility check\nlet canAccessCache;\n\nexport const canAccessPowerShell = async () => {\n\tcanAccessCache ??= (async () => {\n\t\ttry {\n\t\t\tawait fs.access(powerShellPath(), fsConstants.X_OK);\n\t\t\treturn true;\n\t\t} catch {\n\t\t\treturn false;\n\t\t}\n\t})();\n\n\treturn canAccessCache;\n};\n\nexport const executePowerShell = async (command, options = {}) => {\n\tconst {\n\t\tpowerShellPath: psPath,\n\t\t...execFileOptions\n\t} = options;\n\n\tconst encodedCommand = executePowerShell.encodeCommand(command);\n\n\treturn execFile(\n\t\tpsPath ?? powerShellPath(),\n\t\t[\n\t\t\t...executePowerShell.argumentsPrefix,\n\t\t\tencodedCommand,\n\t\t],\n\t\t{\n\t\t\tencoding: 'utf8',\n\t\t\t...execFileOptions,\n\t\t},\n\t);\n};\n\nexecutePowerShell.argumentsPrefix = [\n\t'-NoProfile',\n\t'-NonInteractive',\n\t'-ExecutionPolicy',\n\t'Bypass',\n\t'-EncodedCommand',\n];\n\nexecutePowerShell.encodeCommand = command => Buffer.from(command, 'utf16le').toString('base64');\n\nexecutePowerShell.escapeArgument = value => `'${String(value).replaceAll('\\'', '\\'\\'')}'`;\n","export function parseMountPointFromConfig(content) {\n\tfor (const line of content.split('\\n')) {\n\t\t// Skip comment lines\n\t\tif (/^\\s*#/.test(line)) {\n\t\t\tcontinue;\n\t\t}\n\n\t\t// Match root at start of line (after optional whitespace)\n\t\tconst match = /^\\s*root\\s*=\\s*(?<mountPoint>\"[^\"]*\"|'[^']*'|[^#]*)/.exec(line);\n\t\tif (!match) {\n\t\t\tcontinue;\n\t\t}\n\n\t\treturn match.groups.mountPoint\n\t\t\t.trim()\n\t\t\t// Strip surrounding quotes\n\t\t\t.replaceAll(/^[\"']|[\"']$/g, '');\n\t}\n}\n","import {promisify} from 'node:util';\nimport childProcess from 'node:child_process';\nimport fs, {constants as fsConstants} from 'node:fs/promises';\nimport isWsl from 'is-wsl';\nimport {powerShellPath as windowsPowerShellPath, executePowerShell} from 'powershell-utils';\nimport {parseMountPointFromConfig} from './utilities.js';\n\nconst execFile = promisify(childProcess.execFile);\n\nexport const wslDrivesMountPoint = (() => {\n\t// Default value for \"root\" param\n\t// according to https://docs.microsoft.com/en-us/windows/wsl/wsl-config\n\tconst defaultMountPoint = '/mnt/';\n\n\tlet mountPoint;\n\n\treturn async function () {\n\t\tif (mountPoint) {\n\t\t\t// Return memoized mount point value\n\t\t\treturn mountPoint;\n\t\t}\n\n\t\tconst configFilePath = '/etc/wsl.conf';\n\n\t\tlet isConfigFileExists = false;\n\t\ttry {\n\t\t\tawait fs.access(configFilePath, fsConstants.F_OK);\n\t\t\tisConfigFileExists = true;\n\t\t} catch {}\n\n\t\tif (!isConfigFileExists) {\n\t\t\treturn defaultMountPoint;\n\t\t}\n\n\t\tconst configContent = await fs.readFile(configFilePath, {encoding: 'utf8'});\n\t\tconst parsedMountPoint = parseMountPointFromConfig(configContent);\n\n\t\tif (parsedMountPoint === undefined) {\n\t\t\treturn defaultMountPoint;\n\t\t}\n\n\t\tmountPoint = parsedMountPoint;\n\t\tmountPoint = mountPoint.endsWith('/') ? mountPoint : `${mountPoint}/`;\n\n\t\treturn mountPoint;\n\t};\n})();\n\nexport const powerShellPathFromWsl = async () => {\n\tconst mountPoint = await wslDrivesMountPoint();\n\treturn `${mountPoint}c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe`;\n};\n\nexport const powerShellPath = isWsl ? powerShellPathFromWsl : windowsPowerShellPath;\n\n// Cache for PowerShell accessibility check\nlet canAccessPowerShellPromise;\n\nexport const canAccessPowerShell = async () => {\n\tcanAccessPowerShellPromise ??= (async () => {\n\t\ttry {\n\t\t\tconst psPath = await powerShellPath();\n\t\t\tawait fs.access(psPath, fsConstants.X_OK);\n\t\t\treturn true;\n\t\t} catch {\n\t\t\t// PowerShell is not accessible (either doesn't exist, no execute permission, or other error)\n\t\t\treturn false;\n\t\t}\n\t})();\n\n\treturn canAccessPowerShellPromise;\n};\n\nexport const wslDefaultBrowser = async () => {\n\tconst psPath = await powerShellPath();\n\tconst command = String.raw`(Get-ItemProperty -Path \"HKCU:\\Software\\Microsoft\\Windows\\Shell\\Associations\\UrlAssociations\\http\\UserChoice\").ProgId`;\n\n\tconst {stdout} = await executePowerShell(command, {powerShellPath: psPath});\n\n\treturn stdout.trim();\n};\n\nexport const convertWslPathToWindows = async path => {\n\t// Don't convert URLs\n\tif (/^[a-z]+:\\/\\//i.test(path)) {\n\t\treturn path;\n\t}\n\n\ttry {\n\t\tconst {stdout} = await execFile('wslpath', ['-aw', path], {encoding: 'utf8'});\n\t\treturn stdout.trim();\n\t} catch {\n\t\t// If wslpath fails, return the original path\n\t\treturn path;\n\t}\n};\n\nexport {default as isWsl} from 'is-wsl';\n","export default function defineLazyProperty(object, propertyName, valueGetter) {\n\tconst define = value => Object.defineProperty(object, propertyName, {value, enumerable: true, writable: true});\n\n\tObject.defineProperty(object, propertyName, {\n\t\tconfigurable: true,\n\t\tenumerable: true,\n\t\tget() {\n\t\t\tconst result = valueGetter();\n\t\t\tdefine(result);\n\t\t\treturn result;\n\t\t},\n\t\tset(value) {\n\t\t\tdefine(value);\n\t\t}\n\t});\n\n\treturn object;\n}\n","import {promisify} from 'node:util';\nimport process from 'node:process';\nimport {execFile} from 'node:child_process';\n\nconst execFileAsync = promisify(execFile);\n\nexport default async function defaultBrowserId() {\n\tif (process.platform !== 'darwin') {\n\t\tthrow new Error('macOS only');\n\t}\n\n\tconst {stdout} = await execFileAsync('defaults', ['read', 'com.apple.LaunchServices/com.apple.launchservices.secure', 'LSHandlers']);\n\n\t// `(?!-)` is to prevent matching `LSHandlerRoleAll = \"-\";`.\n\tconst match = /LSHandlerRoleAll = \"(?!-)(?<id>[^\"]+?)\";\\s+?LSHandlerURLScheme = (?:http|https);/.exec(stdout);\n\n\tconst browserId = match?.groups.id ?? 'com.apple.Safari';\n\n\t// Correct the case for Safari's bundle identifier\n\tif (browserId === 'com.apple.safari') {\n\t\treturn 'com.apple.Safari';\n\t}\n\n\treturn browserId;\n}\n","import process from 'node:process';\nimport {promisify} from 'node:util';\nimport {execFile, execFileSync} from 'node:child_process';\n\nconst execFileAsync = promisify(execFile);\n\nexport async function runAppleScript(script, {humanReadableOutput = true, signal} = {}) {\n\tif (process.platform !== 'darwin') {\n\t\tthrow new Error('macOS only');\n\t}\n\n\tconst outputArguments = humanReadableOutput ? [] : ['-ss'];\n\n\tconst execOptions = {};\n\tif (signal) {\n\t\texecOptions.signal = signal;\n\t}\n\n\tconst {stdout} = await execFileAsync('osascript', ['-e', script, outputArguments], execOptions);\n\treturn stdout.trim();\n}\n\nexport function runAppleScriptSync(script, {humanReadableOutput = true} = {}) {\n\tif (process.platform !== 'darwin') {\n\t\tthrow new Error('macOS only');\n\t}\n\n\tconst outputArguments = humanReadableOutput ? [] : ['-ss'];\n\n\tconst stdout = execFileSync('osascript', ['-e', script, ...outputArguments], {\n\t\tencoding: 'utf8',\n\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\ttimeout: 500,\n\t});\n\n\treturn stdout.trim();\n}\n","import {runAppleScript} from 'run-applescript';\n\nexport default async function bundleName(bundleId) {\n\treturn runAppleScript(`tell application \"Finder\" to set app_path to application file id \"${bundleId}\" as string\\ntell application \"System Events\" to get value of property list item \"CFBundleName\" of property list file (app_path & \":Contents:Info.plist\")`);\n}\n","import {promisify} from 'node:util';\nimport {execFile} from 'node:child_process';\n\nconst execFileAsync = promisify(execFile);\n\n// TODO: Fix the casing of bundle identifiers in the next major version.\n\n// Windows doesn't have browser IDs in the same way macOS/Linux does so we give fake\n// ones that look real and match the macOS/Linux versions for cross-platform apps.\nconst windowsBrowserProgIds = {\n\tMSEdgeHTM: {name: 'Edge', id: 'com.microsoft.edge'}, // The missing `L` is correct.\n\tMSEdgeBHTML: {name: 'Edge Beta', id: 'com.microsoft.edge.beta'},\n\tMSEdgeDHTML: {name: 'Edge Dev', id: 'com.microsoft.edge.dev'},\n\tAppXq0fevzme2pys62n3e0fbqa7peapykr8v: {name: 'Edge', id: 'com.microsoft.edge.old'},\n\tChromeHTML: {name: 'Chrome', id: 'com.google.chrome'},\n\tChromeBHTML: {name: 'Chrome Beta', id: 'com.google.chrome.beta'},\n\tChromeDHTML: {name: 'Chrome Dev', id: 'com.google.chrome.dev'},\n\tChromiumHTM: {name: 'Chromium', id: 'org.chromium.Chromium'},\n\tBraveHTML: {name: 'Brave', id: 'com.brave.Browser'},\n\tBraveBHTML: {name: 'Brave Beta', id: 'com.brave.Browser.beta'},\n\tBraveDHTML: {name: 'Brave Dev', id: 'com.brave.Browser.dev'},\n\tBraveSSHTM: {name: 'Brave Nightly', id: 'com.brave.Browser.nightly'},\n\tFirefoxURL: {name: 'Firefox', id: 'org.mozilla.firefox'},\n\tOperaStable: {name: 'Opera', id: 'com.operasoftware.Opera'},\n\tVivaldiHTM: {name: 'Vivaldi', id: 'com.vivaldi.Vivaldi'},\n\t'IE.HTTP': {name: 'Internet Explorer', id: 'com.microsoft.ie'},\n};\n\nexport const _windowsBrowserProgIdMap = new Map(Object.entries(windowsBrowserProgIds));\n\nexport class UnknownBrowserError extends Error {}\n\nexport default async function defaultBrowser(_execFileAsync = execFileAsync) {\n\tconst {stdout} = await _execFileAsync('reg', [\n\t\t'QUERY',\n\t\t' HKEY_CURRENT_USER\\\\Software\\\\Microsoft\\\\Windows\\\\Shell\\\\Associations\\\\UrlAssociations\\\\http\\\\UserChoice',\n\t\t'/v',\n\t\t'ProgId',\n\t]);\n\n\tconst match = /ProgId\\s*REG_SZ\\s*(?<id>\\S+)/.exec(stdout);\n\tif (!match) {\n\t\tthrow new UnknownBrowserError(`Cannot find Windows browser in stdout: ${JSON.stringify(stdout)}`);\n\t}\n\n\tconst {id} = match.groups;\n\n\t// Windows can append a hash suffix to ProgIds using a dot or hyphen\n\t// (e.g., `ChromeHTML.ABC123`, `FirefoxURL-6F193CCC56814779`).\n\t// Try exact match first, then try without the suffix.\n\tconst dotIndex = id.lastIndexOf('.');\n\tconst hyphenIndex = id.lastIndexOf('-');\n\tconst baseIdByDot = dotIndex === -1 ? undefined : id.slice(0, dotIndex);\n\tconst baseIdByHyphen = hyphenIndex === -1 ? undefined : id.slice(0, hyphenIndex);\n\n\treturn windowsBrowserProgIds[id] ?? windowsBrowserProgIds[baseIdByDot] ?? windowsBrowserProgIds[baseIdByHyphen] ?? {name: id, id};\n}\n","import {promisify} from 'node:util';\nimport process from 'node:process';\nimport {execFile} from 'node:child_process';\nimport defaultBrowserId from 'default-browser-id';\nimport bundleName from 'bundle-name';\nimport windows from './windows.js';\n\nexport {_windowsBrowserProgIdMap} from './windows.js';\n\nconst execFileAsync = promisify(execFile);\n\n// Inlined: https://github.com/sindresorhus/titleize/blob/main/index.js\nconst titleize = string => string.toLowerCase().replaceAll(/(?:^|\\s|-)\\S/g, x => x.toUpperCase());\n\nexport default async function defaultBrowser() {\n\tif (process.platform === 'darwin') {\n\t\tconst id = await defaultBrowserId();\n\t\tconst name = await bundleName(id);\n\t\treturn {name, id};\n\t}\n\n\tif (process.platform === 'linux') {\n\t\tconst {stdout} = await execFileAsync('xdg-mime', ['query', 'default', 'x-scheme-handler/http']);\n\t\tconst id = stdout.trim();\n\t\tconst name = titleize(id.replace(/.desktop$/, '').replace('-', ' '));\n\t\treturn {name, id};\n\t}\n\n\tif (process.platform === 'win32') {\n\t\treturn windows();\n\t}\n\n\tthrow new Error('Only macOS, Linux, and Windows are supported');\n}\n","import process from 'node:process';\n\nconst isInSsh = Boolean(process.env.SSH_CONNECTION\n\t|| process.env.SSH_CLIENT\n\t|| process.env.SSH_TTY);\n\nexport default isInSsh;\n","import process from 'node:process';\nimport path from 'node:path';\nimport {fileURLToPath} from 'node:url';\nimport childProcess from 'node:child_process';\nimport fs, {constants as fsConstants} from 'node:fs/promises';\nimport {\n\tisWsl,\n\tpowerShellPath,\n\tconvertWslPathToWindows,\n\tcanAccessPowerShell,\n\twslDefaultBrowser,\n} from 'wsl-utils';\nimport {executePowerShell} from 'powershell-utils';\nimport defineLazyProperty from 'define-lazy-prop';\nimport defaultBrowser, {_windowsBrowserProgIdMap} from 'default-browser';\nimport isInsideContainer from 'is-inside-container';\nimport isInSsh from 'is-in-ssh';\n\nconst fallbackAttemptSymbol = Symbol('fallbackAttempt');\n\n// Path to included `xdg-open`.\nconst __dirname = import.meta.url ? path.dirname(fileURLToPath(import.meta.url)) : '';\nconst localXdgOpenPath = path.join(__dirname, 'xdg-open');\n\nconst {platform, arch} = process;\n\nconst tryEachApp = async (apps, opener) => {\n\tif (apps.length === 0) {\n\t\t// No app was provided\n\t\treturn;\n\t}\n\n\tconst errors = [];\n\n\tfor (const app of apps) {\n\t\ttry {\n\t\t\treturn await opener(app); // eslint-disable-line no-await-in-loop\n\t\t} catch (error) {\n\t\t\terrors.push(error);\n\t\t}\n\t}\n\n\tthrow new AggregateError(errors, 'Failed to open in all supported apps');\n};\n\n// eslint-disable-next-line complexity\nconst baseOpen = async options => {\n\toptions = {\n\t\twait: false,\n\t\tbackground: false,\n\t\tnewInstance: false,\n\t\tallowNonzeroExitCode: false,\n\t\t...options,\n\t};\n\n\tconst isFallbackAttempt = options[fallbackAttemptSymbol] === true;\n\tdelete options[fallbackAttemptSymbol];\n\n\tif (Array.isArray(options.app)) {\n\t\treturn tryEachApp(options.app, singleApp => baseOpen({\n\t\t\t...options,\n\t\t\tapp: singleApp,\n\t\t\t[fallbackAttemptSymbol]: true,\n\t\t}));\n\t}\n\n\tlet {name: app, arguments: appArguments = []} = options.app ?? {};\n\tappArguments = [...appArguments];\n\n\tif (Array.isArray(app)) {\n\t\treturn tryEachApp(app, appName => baseOpen({\n\t\t\t...options,\n\t\t\tapp: {\n\t\t\t\tname: appName,\n\t\t\t\targuments: appArguments,\n\t\t\t},\n\t\t\t[fallbackAttemptSymbol]: true,\n\t\t}));\n\t}\n\n\tif (app === 'browser' || app === 'browserPrivate') {\n\t\t// IDs from default-browser for macOS and windows are the same.\n\t\t// IDs are lowercased to increase chances of a match.\n\t\tconst ids = {\n\t\t\t'com.google.chrome': 'chrome',\n\t\t\t'google-chrome.desktop': 'chrome',\n\t\t\t'com.brave.browser': 'brave',\n\t\t\t'org.mozilla.firefox': 'firefox',\n\t\t\t'firefox.desktop': 'firefox',\n\t\t\t'com.microsoft.msedge': 'edge',\n\t\t\t'com.microsoft.edge': 'edge',\n\t\t\t'com.microsoft.edgemac': 'edge',\n\t\t\t'microsoft-edge.desktop': 'edge',\n\t\t\t'com.apple.safari': 'safari',\n\t\t};\n\n\t\t// Incognito flags for each browser in `apps`.\n\t\tconst flags = {\n\t\t\tchrome: '--incognito',\n\t\t\tbrave: '--incognito',\n\t\t\tfirefox: '--private-window',\n\t\t\tedge: '--inPrivate',\n\t\t\t// Safari doesn't support private mode via command line\n\t\t};\n\n\t\tlet browser;\n\t\tif (isWsl) {\n\t\t\tconst progId = await wslDefaultBrowser();\n\t\t\tconst browserInfo = _windowsBrowserProgIdMap.get(progId);\n\t\t\tbrowser = browserInfo ?? {};\n\t\t} else {\n\t\t\tbrowser = await defaultBrowser();\n\t\t}\n\n\t\tif (browser.id in ids) {\n\t\t\tconst browserName = ids[browser.id.toLowerCase()];\n\n\t\t\tif (app === 'browserPrivate') {\n\t\t\t\t// Safari doesn't support private mode via command line\n\t\t\t\tif (browserName === 'safari') {\n\t\t\t\t\tthrow new Error('Safari doesn\\'t support opening in private mode via command line');\n\t\t\t\t}\n\n\t\t\t\tappArguments.push(flags[browserName]);\n\t\t\t}\n\n\t\t\treturn baseOpen({\n\t\t\t\t...options,\n\t\t\t\tapp: {\n\t\t\t\t\tname: apps[browserName],\n\t\t\t\t\targuments: appArguments,\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\n\t\tthrow new Error(`${browser.name} is not supported as a default browser`);\n\t}\n\n\tlet command;\n\tconst cliArguments = [];\n\tconst childProcessOptions = {};\n\n\t// Determine if we should use Windows/PowerShell behavior in WSL.\n\t// We only use Windows integration if PowerShell is actually accessible.\n\t// This allows the package to work in sandboxed WSL environments where Windows access is restricted.\n\tlet shouldUseWindowsInWsl = false;\n\tif (isWsl && !isInsideContainer() && !isInSsh && !app) {\n\t\tshouldUseWindowsInWsl = await canAccessPowerShell();\n\t}\n\n\tif (platform === 'darwin') {\n\t\tcommand = 'open';\n\n\t\tif (options.wait) {\n\t\t\tcliArguments.push('--wait-apps');\n\t\t}\n\n\t\tif (options.background) {\n\t\t\tcliArguments.push('--background');\n\t\t}\n\n\t\tif (options.newInstance) {\n\t\t\tcliArguments.push('--new');\n\t\t}\n\n\t\tif (app) {\n\t\t\tcliArguments.push('-a', app);\n\t\t}\n\t} else if (platform === 'win32' || shouldUseWindowsInWsl) {\n\t\tcommand = await powerShellPath();\n\n\t\tcliArguments.push(...executePowerShell.argumentsPrefix);\n\n\t\tif (!isWsl) {\n\t\t\tchildProcessOptions.windowsVerbatimArguments = true;\n\t\t}\n\n\t\t// Convert WSL Linux paths to Windows paths\n\t\tif (isWsl && options.target) {\n\t\t\toptions.target = await convertWslPathToWindows(options.target);\n\t\t}\n\n\t\t// Suppress PowerShell progress messages that are written to stderr\n\t\tconst encodedArguments = ['$ProgressPreference = \\'SilentlyContinue\\';', 'Start'];\n\n\t\tif (options.wait) {\n\t\t\tencodedArguments.push('-Wait');\n\t\t}\n\n\t\tif (app) {\n\t\t\tencodedArguments.push(executePowerShell.escapeArgument(app));\n\t\t\tif (options.target) {\n\t\t\t\tappArguments.push(options.target);\n\t\t\t}\n\t\t} else if (options.target) {\n\t\t\tencodedArguments.push(executePowerShell.escapeArgument(options.target));\n\t\t}\n\n\t\tif (appArguments.length > 0) {\n\t\t\tappArguments = appArguments.map(argument => executePowerShell.escapeArgument(argument));\n\t\t\tencodedArguments.push('-ArgumentList', appArguments.join(','));\n\t\t}\n\n\t\t// Using Base64-encoded command, accepted by PowerShell, to allow special characters.\n\t\toptions.target = executePowerShell.encodeCommand(encodedArguments.join(' '));\n\n\t\tif (!options.wait) {\n\t\t\t// PowerShell will keep the parent process alive unless stdio is ignored.\n\t\t\tchildProcessOptions.stdio = 'ignore';\n\t\t}\n\t} else {\n\t\tif (app) {\n\t\t\tcommand = app;\n\t\t} else {\n\t\t\t// When bundled by Webpack, there's no actual package file path and no local `xdg-open`.\n\t\t\tconst isBundled = !__dirname || __dirname === '/';\n\n\t\t\t// Check if local `xdg-open` exists and is executable.\n\t\t\tlet exeLocalXdgOpen = false;\n\t\t\ttry {\n\t\t\t\tawait fs.access(localXdgOpenPath, fsConstants.X_OK);\n\t\t\t\texeLocalXdgOpen = true;\n\t\t\t} catch {}\n\n\t\t\tconst useSystemXdgOpen = process.versions.electron\n\t\t\t\t?? (platform === 'android' || isBundled || !exeLocalXdgOpen);\n\t\t\tcommand = useSystemXdgOpen ? 'xdg-open' : localXdgOpenPath;\n\t\t}\n\n\t\tif (appArguments.length > 0) {\n\t\t\tcliArguments.push(...appArguments);\n\t\t}\n\n\t\tif (!options.wait) {\n\t\t\t// `xdg-open` will block the process unless stdio is ignored\n\t\t\t// and it's detached from the parent even if it's unref'd.\n\t\t\tchildProcessOptions.stdio = 'ignore';\n\t\t\tchildProcessOptions.detached = true;\n\t\t}\n\t}\n\n\tif (platform === 'darwin' && appArguments.length > 0) {\n\t\tcliArguments.push('--args', ...appArguments);\n\t}\n\n\t// IMPORTANT: On macOS, the target MUST come AFTER '--args'.\n\t// When using --args, ALL following arguments are passed to the app.\n\t// Example: open -a \"chrome\" --args --incognito https://site.com\n\t// This passes BOTH --incognito AND https://site.com to Chrome.\n\t// Without this order, Chrome won't open in incognito. See #332.\n\tif (options.target) {\n\t\tcliArguments.push(options.target);\n\t}\n\n\tconst subprocess = childProcess.spawn(command, cliArguments, childProcessOptions);\n\n\tif (options.wait) {\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tsubprocess.once('error', reject);\n\n\t\t\tsubprocess.once('close', exitCode => {\n\t\t\t\tif (!options.allowNonzeroExitCode && exitCode !== 0) {\n\t\t\t\t\treject(new Error(`Exited with code ${exitCode}`));\n\t\t\t\t\treturn;\n\t\t\t\t}\n\n\t\t\t\tresolve(subprocess);\n\t\t\t});\n\t\t});\n\t}\n\n\t// When we're in a fallback attempt, we need to detect launch failures before trying the next app.\n\t// Wait for the close event to check the exit code before unreffing.\n\t// The launcher (open/xdg-open/PowerShell) exits quickly (~10-30ms) even on success.\n\tif (isFallbackAttempt) {\n\t\treturn new Promise((resolve, reject) => {\n\t\t\tsubprocess.once('error', reject);\n\n\t\t\tsubprocess.once('spawn', () => {\n\t\t\t\t// Keep error handler active for post-spawn errors\n\t\t\t\tsubprocess.once('close', exitCode => {\n\t\t\t\t\tsubprocess.off('error', reject);\n\n\t\t\t\t\tif (exitCode !== 0) {\n\t\t\t\t\t\treject(new Error(`Exited with code ${exitCode}`));\n\t\t\t\t\t\treturn;\n\t\t\t\t\t}\n\n\t\t\t\t\tsubprocess.unref();\n\t\t\t\t\tresolve(subprocess);\n\t\t\t\t});\n\t\t\t});\n\t\t});\n\t}\n\n\tsubprocess.unref();\n\n\t// Handle spawn errors before the caller can attach listeners.\n\t// This prevents unhandled error events from crashing the process.\n\treturn new Promise((resolve, reject) => {\n\t\tsubprocess.once('error', reject);\n\n\t\t// Wait for the subprocess to spawn before resolving.\n\t\t// This ensures the process is established before the caller continues,\n\t\t// preventing issues when process.exit() is called immediately after.\n\t\tsubprocess.once('spawn', () => {\n\t\t\tsubprocess.off('error', reject);\n\t\t\tresolve(subprocess);\n\t\t});\n\t});\n};\n\nconst open = (target, options) => {\n\tif (typeof target !== 'string') {\n\t\tthrow new TypeError('Expected a `target`');\n\t}\n\n\treturn baseOpen({\n\t\t...options,\n\t\ttarget,\n\t});\n};\n\nexport const openApp = (name, options) => {\n\tif (typeof name !== 'string' && !Array.isArray(name)) {\n\t\tthrow new TypeError('Expected a valid `name`');\n\t}\n\n\tconst {arguments: appArguments = []} = options ?? {};\n\tif (appArguments !== undefined && appArguments !== null && !Array.isArray(appArguments)) {\n\t\tthrow new TypeError('Expected `appArguments` as Array type');\n\t}\n\n\treturn baseOpen({\n\t\t...options,\n\t\tapp: {\n\t\t\tname,\n\t\t\targuments: appArguments,\n\t\t},\n\t});\n};\n\nfunction detectArchBinary(binary) {\n\tif (typeof binary === 'string' || Array.isArray(binary)) {\n\t\treturn binary;\n\t}\n\n\tconst {[arch]: archBinary} = binary;\n\n\tif (!archBinary) {\n\t\tthrow new Error(`${arch} is not supported`);\n\t}\n\n\treturn archBinary;\n}\n\nfunction detectPlatformBinary({[platform]: platformBinary}, {wsl} = {}) {\n\tif (wsl && isWsl) {\n\t\treturn detectArchBinary(wsl);\n\t}\n\n\tif (!platformBinary) {\n\t\tthrow new Error(`${platform} is not supported`);\n\t}\n\n\treturn detectArchBinary(platformBinary);\n}\n\nexport const apps = {\n\tbrowser: 'browser',\n\tbrowserPrivate: 'browserPrivate',\n};\n\ndefineLazyProperty(apps, 'chrome', () => detectPlatformBinary({\n\tdarwin: 'google chrome',\n\twin32: 'chrome',\n\t// `chromium-browser` is the older deb package name used by Ubuntu/Debian before snap.\n\tlinux: ['google-chrome', 'google-chrome-stable', 'chromium', 'chromium-browser'],\n}, {\n\twsl: {\n\t\tia32: '/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe',\n\t\tx64: ['/mnt/c/Program Files/Google/Chrome/Application/chrome.exe', '/mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe'],\n\t},\n}));\n\ndefineLazyProperty(apps, 'brave', () => detectPlatformBinary({\n\tdarwin: 'brave browser',\n\twin32: 'brave',\n\tlinux: ['brave-browser', 'brave'],\n}, {\n\twsl: {\n\t\tia32: '/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe',\n\t\tx64: ['/mnt/c/Program Files/BraveSoftware/Brave-Browser/Application/brave.exe', '/mnt/c/Program Files (x86)/BraveSoftware/Brave-Browser/Application/brave.exe'],\n\t},\n}));\n\ndefineLazyProperty(apps, 'firefox', () => detectPlatformBinary({\n\tdarwin: 'firefox',\n\twin32: String.raw`C:\\Program Files\\Mozilla Firefox\\firefox.exe`,\n\tlinux: 'firefox',\n}, {\n\twsl: '/mnt/c/Program Files/Mozilla Firefox/firefox.exe',\n}));\n\ndefineLazyProperty(apps, 'edge', () => detectPlatformBinary({\n\tdarwin: 'microsoft edge',\n\twin32: 'msedge',\n\tlinux: ['microsoft-edge', 'microsoft-edge-dev'],\n}, {\n\twsl: '/mnt/c/Program Files (x86)/Microsoft/Edge/Application/msedge.exe',\n}));\n\ndefineLazyProperty(apps, 'safari', () => detectPlatformBinary({\n\tdarwin: 'Safari',\n}));\n\nexport default open;\n","import open from 'open'\n\nimport {\n  pollDeviceToken,\n  requestDeviceCode,\n  toCredentials,\n} from '../../core/auth'\nimport { emitInfo, emitSuccess, type OutputOptions } from '../../core/output'\nimport {\n  getCurrentProfile,\n  readProfileConfig,\n  setCurrentProfile,\n  writeProfileConfig,\n  writeProfileCredentials,\n} from '../../core/profile'\nimport { type GlobalFlags, resolveContext } from '../internal/shared'\n\nexport interface LoginOpts {\n  production?: boolean\n}\n\nexport async function run(\n  flags: GlobalFlags,\n  out: OutputOptions,\n  opts: LoginOpts = {},\n) {\n  const ctx = await resolveContext(flags, out)\n  emitInfo(`probing ${ctx.apiUrl}…`, out)\n  emitInfo(`API base: ${ctx.apiBase}`, out)\n\n  const code = await requestDeviceCode(ctx.authBase, ctx.clientId)\n  emitInfo(`visit: ${code.verification_uri}`, out)\n  emitInfo(`code:  ${code.user_code}`, out)\n  emitInfo(`expires in ${code.expires_in}s`, out)\n\n  if (out.json) {\n    process.stdout.write(\n      `${JSON.stringify({\n        ok: true,\n        data: {\n          verification_uri: code.verification_uri,\n          verification_uri_complete: code.verification_uri_complete,\n          user_code: code.user_code,\n          expires_in: code.expires_in,\n          interval: code.interval,\n        },\n      })}\\n`,\n    )\n  } else if (!flags.quiet && code.verification_uri_complete) {\n    void open(code.verification_uri_complete).catch(() => undefined)\n  }\n\n  const token = await pollDeviceToken(\n    ctx.authBase,\n    ctx.clientId,\n    code.device_code,\n    {\n      intervalSec: code.interval,\n      expiresInSec: code.expires_in,\n      onTick: (state) => {\n        if (state === 'slow_down')\n          emitInfo('slow_down — increasing interval', out)\n      },\n    },\n  )\n  const cred = toCredentials(token)\n\n  // Determine target profile per spec §3:\n  // 1. --profile flag\n  // 2. active current profile\n  // 3. fresh install → 'default'\n  const target =\n    flags.profile?.trim() || (await getCurrentProfile()) || 'default'\n\n  const existing = await readProfileConfig(target)\n  await writeProfileConfig(target, {\n    ...existing,\n    api_url: ctx.apiUrl,\n    api_base: ctx.apiBase,\n    auth_base: ctx.authBase,\n    api_version: ctx.apiVersion,\n    client_id: ctx.clientId,\n    ...(opts.production !== undefined\n      ? { production: opts.production }\n      : existing.production !== undefined\n        ? { production: existing.production }\n        : {}),\n  })\n  await writeProfileCredentials(target, cred)\n  await setCurrentProfile(target)\n\n  emitInfo(`mxs: logged in to profile '${target}'`, out)\n  emitSuccess(\n    {\n      user: cred.user ?? null,\n      expires_at: cred.expires_at,\n    },\n    out,\n  )\n}\n"],"x_google_ignoreList":[0,1,2,3,4,5,6,7,8,9,10,11,12,13],"mappings":";;;;;;;;;;;;;;AAEA,IAAI;AAEJ,SAAS,eAAe;CACvB,IAAI;EACH,GAAG,SAAS,aAAa;EACzB,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAS,kBAAkB;CAC1B,IAAI;EACH,OAAO,GAAG,aAAa,qBAAqB,MAAM,EAAE,SAAS,QAAQ;CACtE,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAwB,WAAW;CAElC,IAAI,mBAAmB,KAAA,GACtB,iBAAiB,aAAa,KAAK,gBAAgB;CAGpD,OAAO;AACR;;;ACzBA,IAAI;AAGJ,MAAM,wBAAwB;CAC7B,IAAI;EACH,GAAG,SAAS,oBAAoB;EAChC,OAAO;CACR,QAAQ;EACP,OAAO;CACR;AACD;AAEA,SAAwB,oBAAoB;CAE3C,IAAI,iBAAiB,KAAA,GACpB,eAAe,gBAAgB,KAAK,SAAS;CAG9C,OAAO;AACR;;;ACjBA,MAAM,cAAc;CACnB,IAAIA,EAAQ,aAAa,SACxB,OAAO;CAGR,IAAI,GAAG,QAAQ,EAAE,YAAY,EAAE,SAAS,WAAW,GAAG;EACrD,IAAI,kBAAkB,GACrB,OAAO;EAGR,OAAO;CACR;CAEA,IAAI;EACH,IAAI,GAAG,aAAa,iBAAiB,MAAM,EAAE,YAAY,EAAE,SAAS,WAAW,GAC9E,OAAO,CAAC,kBAAkB;CAE5B,QAAQ,CAAC;CAGT,IACC,GAAG,WAAW,qCAAqC,KAChD,GAAG,WAAW,UAAU,GAE3B,OAAO,CAAC,kBAAkB;CAG3B,OAAO;AACR;AAEA,IAAA,iBAAeA,EAAQ,IAAI,kBAAkB,QAAQ,MAAM;;;AC7B3D,MAAMC,aAAW,UAAU,aAAa,QAAQ;AAEhD,MAAaC,yBAAuB,GAAGC,EAAQ,IAAI,cAAcA,EAAQ,IAAI,UAAU,OAAO,GAAG,aAAa;AAkB9G,MAAa,oBAAoB,OAAO,SAAS,UAAU,CAAC,MAAM;CACjE,MAAM,EACL,gBAAgB,QAChB,GAAG,oBACA;CAEJ,MAAM,iBAAiB,kBAAkB,cAAc,OAAO;CAE9D,OAAOF,WACN,UAAUC,iBAAe,GACzB,CACC,GAAG,kBAAkB,iBACrB,cACD,GACA;EACC,UAAU;EACV,GAAG;CACJ,CACD;AACD;AAEA,kBAAkB,kBAAkB;CACnC;CACA;CACA;CACA;CACA;AACD;AAEA,kBAAkB,iBAAgB,YAAW,OAAO,KAAK,SAAS,SAAS,EAAE,SAAS,QAAQ;AAE9F,kBAAkB,kBAAiB,UAAS,IAAI,OAAO,KAAK,EAAE,WAAW,KAAM,IAAM,EAAE;;;ACzDvF,SAAgB,0BAA0B,SAAS;CAClD,KAAK,MAAM,QAAQ,QAAQ,MAAM,IAAI,GAAG;EAEvC,IAAI,QAAQ,KAAK,IAAI,GACpB;EAID,MAAM,QAAQ,sDAAsD,KAAK,IAAI;EAC7E,IAAI,CAAC,OACJ;EAGD,OAAO,MAAM,OAAO,WAClB,KAAK,EAEL,WAAW,gBAAgB,EAAE;CAChC;AACD;;;ACXA,MAAME,aAAW,UAAU,aAAa,QAAQ;AAEhD,MAAa,6BAA6B;CAGzC,MAAM,oBAAoB;CAE1B,IAAI;CAEJ,OAAO,iBAAkB;EACxB,IAAI,YAEH,OAAO;EAGR,MAAM,iBAAiB;EAEvB,IAAI,qBAAqB;EACzB,IAAI;GACH,MAAMC,KAAG,OAAO,gBAAgBC,UAAY,IAAI;GAChD,qBAAqB;EACtB,QAAQ,CAAC;EAET,IAAI,CAAC,oBACJ,OAAO;EAIR,MAAM,mBAAmB,0BAA0B,MADvBD,KAAG,SAAS,gBAAgB,EAAC,UAAU,OAAM,CAAC,CACV;EAEhE,IAAI,qBAAqB,KAAA,GACxB,OAAO;EAGR,aAAa;EACb,aAAa,WAAW,SAAS,GAAG,IAAI,aAAa,GAAG,WAAW;EAEnE,OAAO;CACR;AACD,GAAG;AAEH,MAAa,wBAAwB,YAAY;CAEhD,OAAO,GAAG,MADe,oBAAoB,EACxB;AACtB;AAEA,MAAa,iBAAiBE,iBAAQ,wBAAwBC;AAG9D,IAAI;AAEJ,MAAa,sBAAsB,YAAY;CAC9C,gCAAgC,YAAY;EAC3C,IAAI;GACH,MAAM,SAAS,MAAM,eAAe;GACpC,MAAMH,KAAG,OAAO,QAAQC,UAAY,IAAI;GACxC,OAAO;EACR,QAAQ;GAEP,OAAO;EACR;CACD,GAAG;CAEH,OAAO;AACR;AAEA,MAAa,oBAAoB,YAAY;CAC5C,MAAM,SAAS,MAAM,eAAe;CAGpC,MAAM,EAAC,WAAU,MAAM,kBAAkB,OAFlB,GAAG,yHAEwB,EAAC,gBAAgB,OAAM,CAAC;CAE1E,OAAO,OAAO,KAAK;AACpB;AAEA,MAAa,0BAA0B,OAAM,SAAQ;CAEpD,IAAI,gBAAgB,KAAK,IAAI,GAC5B,OAAO;CAGR,IAAI;EACH,MAAM,EAAC,WAAU,MAAMF,WAAS,WAAW,CAAC,OAAO,IAAI,GAAG,EAAC,UAAU,OAAM,CAAC;EAC5E,OAAO,OAAO,KAAK;CACpB,QAAQ;EAEP,OAAO;CACR;AACD;;;AC/FA,SAAwB,mBAAmB,QAAQ,cAAc,aAAa;CAC7E,MAAM,UAAS,UAAS,OAAO,eAAe,QAAQ,cAAc;EAAC;EAAO,YAAY;EAAM,UAAU;CAAI,CAAC;CAE7G,OAAO,eAAe,QAAQ,cAAc;EAC3C,cAAc;EACd,YAAY;EACZ,MAAM;GACL,MAAM,SAAS,YAAY;GAC3B,OAAO,MAAM;GACb,OAAO;EACR;EACA,IAAI,OAAO;GACV,OAAO,KAAK;EACb;CACD,CAAC;CAED,OAAO;AACR;;;ACbA,MAAMK,kBAAgB,UAAU,QAAQ;AAExC,eAA8B,mBAAmB;CAChD,IAAIC,EAAQ,aAAa,UACxB,MAAM,IAAI,MAAM,YAAY;CAG7B,MAAM,EAAC,WAAU,MAAMD,gBAAc,YAAY;EAAC;EAAQ;EAA4D;CAAY,CAAC;CAKnI,MAAM,YAFQ,mFAAmF,KAAK,MAEhF,GAAG,OAAO,MAAM;CAGtC,IAAI,cAAc,oBACjB,OAAO;CAGR,OAAO;AACR;;;ACpBA,MAAME,kBAAgB,UAAU,QAAQ;AAExC,eAAsB,eAAe,QAAQ,EAAC,sBAAsB,MAAM,WAAU,CAAC,GAAG;CACvF,IAAIC,EAAQ,aAAa,UACxB,MAAM,IAAI,MAAM,YAAY;CAG7B,MAAM,kBAAkB,sBAAsB,CAAC,IAAI,CAAC,KAAK;CAEzD,MAAM,cAAc,CAAC;CACrB,IAAI,QACH,YAAY,SAAS;CAGtB,MAAM,EAAC,WAAU,MAAMD,gBAAc,aAAa;EAAC;EAAM;EAAQ;CAAe,GAAG,WAAW;CAC9F,OAAO,OAAO,KAAK;AACpB;;;AClBA,eAA8B,WAAW,UAAU;CAClD,OAAO,eAAe,qEAAqE,SAAS,0JAA0J;AAC/P;;;ACDA,MAAME,kBAAgB,UAAU,QAAQ;AAMxC,MAAM,wBAAwB;CAC7B,WAAW;EAAC,MAAM;EAAQ,IAAI;CAAoB;CAClD,aAAa;EAAC,MAAM;EAAa,IAAI;CAAyB;CAC9D,aAAa;EAAC,MAAM;EAAY,IAAI;CAAwB;CAC5D,sCAAsC;EAAC,MAAM;EAAQ,IAAI;CAAwB;CACjF,YAAY;EAAC,MAAM;EAAU,IAAI;CAAmB;CACpD,aAAa;EAAC,MAAM;EAAe,IAAI;CAAwB;CAC/D,aAAa;EAAC,MAAM;EAAc,IAAI;CAAuB;CAC7D,aAAa;EAAC,MAAM;EAAY,IAAI;CAAuB;CAC3D,WAAW;EAAC,MAAM;EAAS,IAAI;CAAmB;CAClD,YAAY;EAAC,MAAM;EAAc,IAAI;CAAwB;CAC7D,YAAY;EAAC,MAAM;EAAa,IAAI;CAAuB;CAC3D,YAAY;EAAC,MAAM;EAAiB,IAAI;CAA2B;CACnE,YAAY;EAAC,MAAM;EAAW,IAAI;CAAqB;CACvD,aAAa;EAAC,MAAM;EAAS,IAAI;CAAyB;CAC1D,YAAY;EAAC,MAAM;EAAW,IAAI;CAAqB;CACvD,WAAW;EAAC,MAAM;EAAqB,IAAI;CAAkB;AAC9D;AAEA,MAAa,2BAA2B,IAAI,IAAI,OAAO,QAAQ,qBAAqB,CAAC;AAErF,IAAa,sBAAb,cAAyC,MAAM,CAAC;AAEhD,eAA8BC,iBAAe,iBAAiBD,iBAAe;CAC5E,MAAM,EAAC,WAAU,MAAM,eAAe,OAAO;EAC5C;EACA;EACA;EACA;CACD,CAAC;CAED,MAAM,QAAQ,+BAA+B,KAAK,MAAM;CACxD,IAAI,CAAC,OACJ,MAAM,IAAI,oBAAoB,0CAA0C,KAAK,UAAU,MAAM,GAAG;CAGjG,MAAM,EAAC,OAAM,MAAM;CAKnB,MAAM,WAAW,GAAG,YAAY,GAAG;CACnC,MAAM,cAAc,GAAG,YAAY,GAAG;CACtC,MAAM,cAAc,aAAa,KAAK,KAAA,IAAY,GAAG,MAAM,GAAG,QAAQ;CACtE,MAAM,iBAAiB,gBAAgB,KAAK,KAAA,IAAY,GAAG,MAAM,GAAG,WAAW;CAE/E,OAAO,sBAAsB,OAAO,sBAAsB,gBAAgB,sBAAsB,mBAAmB;EAAC,MAAM;EAAI;CAAE;AACjI;;;AC/CA,MAAM,gBAAgB,UAAU,QAAQ;AAGxC,MAAM,YAAW,WAAU,OAAO,YAAY,EAAE,WAAW,kBAAiB,MAAK,EAAE,YAAY,CAAC;AAEhG,eAA8B,iBAAiB;CAC9C,IAAIE,EAAQ,aAAa,UAAU;EAClC,MAAM,KAAK,MAAM,iBAAiB;EAElC,OAAO;GAAC,MAAA,MADW,WAAW,EAAE;GAClB;EAAE;CACjB;CAEA,IAAIA,EAAQ,aAAa,SAAS;EACjC,MAAM,EAAC,WAAU,MAAM,cAAc,YAAY;GAAC;GAAS;GAAW;EAAuB,CAAC;EAC9F,MAAM,KAAK,OAAO,KAAK;EAEvB,OAAO;GAAC,MADK,SAAS,GAAG,QAAQ,aAAa,EAAE,EAAE,QAAQ,KAAK,GAAG,CACvD;GAAG;EAAE;CACjB;CAEA,IAAIA,EAAQ,aAAa,SACxB,OAAOC,iBAAQ;CAGhB,MAAM,IAAI,MAAM,8CAA8C;AAC/D;;;AC/BA,MAAM,UAAU,QAAQC,EAAQ,IAAI,kBAChCA,EAAQ,IAAI,cACZA,EAAQ,IAAI,OAAO;;;ACcvB,MAAM,wBAAwB,OAAO,iBAAiB;AAGtD,MAAM,YAAY,OAAO,KAAK,MAAM,KAAK,QAAQ,cAAc,OAAO,KAAK,GAAG,CAAC,IAAI;AACnF,MAAM,mBAAmB,KAAK,KAAK,WAAW,UAAU;AAExD,MAAM,EAAC,UAAU,SAAQC;AAEzB,MAAM,aAAa,OAAO,MAAM,WAAW;CAC1C,IAAI,KAAK,WAAW,GAEnB;CAGD,MAAM,SAAS,CAAC;CAEhB,KAAK,MAAM,OAAO,MACjB,IAAI;EACH,OAAO,MAAM,OAAO,GAAG;CACxB,SAAS,OAAO;EACf,OAAO,KAAK,KAAK;CAClB;CAGD,MAAM,IAAI,eAAe,QAAQ,sCAAsC;AACxE;AAGA,MAAM,WAAW,OAAM,YAAW;CACjC,UAAU;EACT,MAAM;EACN,YAAY;EACZ,aAAa;EACb,sBAAsB;EACtB,GAAG;CACJ;CAEA,MAAM,oBAAoB,QAAQ,2BAA2B;CAC7D,OAAO,QAAQ;CAEf,IAAI,MAAM,QAAQ,QAAQ,GAAG,GAC5B,OAAO,WAAW,QAAQ,MAAK,cAAa,SAAS;EACpD,GAAG;EACH,KAAK;GACJ,wBAAwB;CAC1B,CAAC,CAAC;CAGH,IAAI,EAAC,MAAM,KAAK,WAAW,eAAe,CAAC,MAAK,QAAQ,OAAO,CAAC;CAChE,eAAe,CAAC,GAAG,YAAY;CAE/B,IAAI,MAAM,QAAQ,GAAG,GACpB,OAAO,WAAW,MAAK,YAAW,SAAS;EAC1C,GAAG;EACH,KAAK;GACJ,MAAM;GACN,WAAW;EACZ;GACC,wBAAwB;CAC1B,CAAC,CAAC;CAGH,IAAI,QAAQ,aAAa,QAAQ,kBAAkB;EAGlD,MAAM,MAAM;GACX,qBAAqB;GACrB,yBAAyB;GACzB,qBAAqB;GACrB,uBAAuB;GACvB,mBAAmB;GACnB,wBAAwB;GACxB,sBAAsB;GACtB,yBAAyB;GACzB,0BAA0B;GAC1B,oBAAoB;EACrB;EAGA,MAAM,QAAQ;GACb,QAAQ;GACR,OAAO;GACP,SAAS;GACT,MAAM;EAEP;EAEA,IAAI;EACJ,IAAIC,gBAAO;GACV,MAAM,SAAS,MAAM,kBAAkB;GAEvC,UADoB,yBAAyB,IAAI,MAC7B,KAAK,CAAC;EAC3B,OACC,UAAU,MAAM,eAAe;EAGhC,IAAI,QAAQ,MAAM,KAAK;GACtB,MAAM,cAAc,IAAI,QAAQ,GAAG,YAAY;GAE/C,IAAI,QAAQ,kBAAkB;IAE7B,IAAI,gBAAgB,UACnB,MAAM,IAAI,MAAM,iEAAkE;IAGnF,aAAa,KAAK,MAAM,YAAY;GACrC;GAEA,OAAO,SAAS;IACf,GAAG;IACH,KAAK;KACJ,MAAM,KAAK;KACX,WAAW;IACZ;GACD,CAAC;EACF;EAEA,MAAM,IAAI,MAAM,GAAG,QAAQ,KAAK,uCAAuC;CACxE;CAEA,IAAI;CACJ,MAAM,eAAe,CAAC;CACtB,MAAM,sBAAsB,CAAC;CAK7B,IAAI,wBAAwB;CAC5B,IAAIA,kBAAS,CAAC,kBAAkB,KAAK,CAAC,WAAW,CAAC,KACjD,wBAAwB,MAAM,oBAAoB;CAGnD,IAAI,aAAa,UAAU;EAC1B,UAAU;EAEV,IAAI,QAAQ,MACX,aAAa,KAAK,aAAa;EAGhC,IAAI,QAAQ,YACX,aAAa,KAAK,cAAc;EAGjC,IAAI,QAAQ,aACX,aAAa,KAAK,OAAO;EAG1B,IAAI,KACH,aAAa,KAAK,MAAM,GAAG;CAE7B,OAAO,IAAI,aAAa,WAAW,uBAAuB;EACzD,UAAU,MAAM,eAAe;EAE/B,aAAa,KAAK,GAAG,kBAAkB,eAAe;EAEtD,IAAI,CAACA,gBACJ,oBAAoB,2BAA2B;EAIhD,IAAIA,kBAAS,QAAQ,QACpB,QAAQ,SAAS,MAAM,wBAAwB,QAAQ,MAAM;EAI9D,MAAM,mBAAmB,CAAC,6CAA+C,OAAO;EAEhF,IAAI,QAAQ,MACX,iBAAiB,KAAK,OAAO;EAG9B,IAAI,KAAK;GACR,iBAAiB,KAAK,kBAAkB,eAAe,GAAG,CAAC;GAC3D,IAAI,QAAQ,QACX,aAAa,KAAK,QAAQ,MAAM;EAElC,OAAO,IAAI,QAAQ,QAClB,iBAAiB,KAAK,kBAAkB,eAAe,QAAQ,MAAM,CAAC;EAGvE,IAAI,aAAa,SAAS,GAAG;GAC5B,eAAe,aAAa,KAAI,aAAY,kBAAkB,eAAe,QAAQ,CAAC;GACtF,iBAAiB,KAAK,iBAAiB,aAAa,KAAK,GAAG,CAAC;EAC9D;EAGA,QAAQ,SAAS,kBAAkB,cAAc,iBAAiB,KAAK,GAAG,CAAC;EAE3E,IAAI,CAAC,QAAQ,MAEZ,oBAAoB,QAAQ;CAE9B,OAAO;EACN,IAAI,KACH,UAAU;OACJ;GAEN,MAAM,YAAY,CAAC,aAAa,cAAc;GAG9C,IAAI,kBAAkB;GACtB,IAAI;IACH,MAAMC,KAAG,OAAO,kBAAkBC,UAAY,IAAI;IAClD,kBAAkB;GACnB,QAAQ,CAAC;GAIT,UAFyBH,EAAQ,SAAS,aACrC,aAAa,aAAa,aAAa,CAAC,mBAChB,aAAa;EAC3C;EAEA,IAAI,aAAa,SAAS,GACzB,aAAa,KAAK,GAAG,YAAY;EAGlC,IAAI,CAAC,QAAQ,MAAM;GAGlB,oBAAoB,QAAQ;GAC5B,oBAAoB,WAAW;EAChC;CACD;CAEA,IAAI,aAAa,YAAY,aAAa,SAAS,GAClD,aAAa,KAAK,UAAU,GAAG,YAAY;CAQ5C,IAAI,QAAQ,QACX,aAAa,KAAK,QAAQ,MAAM;CAGjC,MAAM,aAAa,aAAa,MAAM,SAAS,cAAc,mBAAmB;CAEhF,IAAI,QAAQ,MACX,OAAO,IAAI,SAAS,SAAS,WAAW;EACvC,WAAW,KAAK,SAAS,MAAM;EAE/B,WAAW,KAAK,UAAS,aAAY;GACpC,IAAI,CAAC,QAAQ,wBAAwB,aAAa,GAAG;IACpD,uBAAO,IAAI,MAAM,oBAAoB,UAAU,CAAC;IAChD;GACD;GAEA,QAAQ,UAAU;EACnB,CAAC;CACF,CAAC;CAMF,IAAI,mBACH,OAAO,IAAI,SAAS,SAAS,WAAW;EACvC,WAAW,KAAK,SAAS,MAAM;EAE/B,WAAW,KAAK,eAAe;GAE9B,WAAW,KAAK,UAAS,aAAY;IACpC,WAAW,IAAI,SAAS,MAAM;IAE9B,IAAI,aAAa,GAAG;KACnB,uBAAO,IAAI,MAAM,oBAAoB,UAAU,CAAC;KAChD;IACD;IAEA,WAAW,MAAM;IACjB,QAAQ,UAAU;GACnB,CAAC;EACF,CAAC;CACF,CAAC;CAGF,WAAW,MAAM;CAIjB,OAAO,IAAI,SAAS,SAAS,WAAW;EACvC,WAAW,KAAK,SAAS,MAAM;EAK/B,WAAW,KAAK,eAAe;GAC9B,WAAW,IAAI,SAAS,MAAM;GAC9B,QAAQ,UAAU;EACnB,CAAC;CACF,CAAC;AACF;AAEA,MAAM,QAAQ,QAAQ,YAAY;CACjC,IAAI,OAAO,WAAW,UACrB,MAAM,IAAI,UAAU,qBAAqB;CAG1C,OAAO,SAAS;EACf,GAAG;EACH;CACD,CAAC;AACF;AAqBA,SAAS,iBAAiB,QAAQ;CACjC,IAAI,OAAO,WAAW,YAAY,MAAM,QAAQ,MAAM,GACrD,OAAO;CAGR,MAAM,GAAE,OAAO,eAAc;CAE7B,IAAI,CAAC,YACJ,MAAM,IAAI,MAAM,GAAG,KAAK,kBAAkB;CAG3C,OAAO;AACR;AAEA,SAAS,qBAAqB,GAAE,WAAW,kBAAiB,EAAC,QAAO,CAAC,GAAG;CACvE,IAAI,OAAOC,gBACV,OAAO,iBAAiB,GAAG;CAG5B,IAAI,CAAC,gBACJ,MAAM,IAAI,MAAM,GAAG,SAAS,kBAAkB;CAG/C,OAAO,iBAAiB,cAAc;AACvC;AAEA,MAAa,OAAO;CACnB,SAAS;CACT,gBAAgB;AACjB;AAEA,mBAAmB,MAAM,gBAAgB,qBAAqB;CAC7D,QAAQ;CACR,OAAO;CAEP,OAAO;EAAC;EAAiB;EAAwB;EAAY;CAAkB;AAChF,GAAG,EACF,KAAK;CACJ,MAAM;CACN,KAAK,CAAC,6DAA6D,iEAAiE;AACrI,EACD,CAAC,CAAC;AAEF,mBAAmB,MAAM,eAAe,qBAAqB;CAC5D,QAAQ;CACR,OAAO;CACP,OAAO,CAAC,iBAAiB,OAAO;AACjC,GAAG,EACF,KAAK;CACJ,MAAM;CACN,KAAK,CAAC,0EAA0E,8EAA8E;AAC/J,EACD,CAAC,CAAC;AAEF,mBAAmB,MAAM,iBAAiB,qBAAqB;CAC9D,QAAQ;CACR,OAAO,OAAO,GAAG;CACjB,OAAO;AACR,GAAG,EACF,KAAK,mDACN,CAAC,CAAC;AAEF,mBAAmB,MAAM,cAAc,qBAAqB;CAC3D,QAAQ;CACR,OAAO;CACP,OAAO,CAAC,kBAAkB,oBAAoB;AAC/C,GAAG,EACF,KAAK,mEACN,CAAC,CAAC;AAEF,mBAAmB,MAAM,gBAAgB,qBAAqB,EAC7D,QAAQ,SACT,CAAC,CAAC;;;ACzYF,eAAsB,IACpB,OACA,KACA,OAAkB,CAAC,GACnB;CACA,MAAM,MAAM,MAAM,eAAe,OAAO,GAAG;CAC3C,SAAS,WAAW,IAAI,OAAO,IAAI,GAAG;CACtC,SAAS,aAAa,IAAI,WAAW,GAAG;CAExC,MAAM,OAAO,MAAM,kBAAkB,IAAI,UAAU,IAAI,QAAQ;CAC/D,SAAS,UAAU,KAAK,oBAAoB,GAAG;CAC/C,SAAS,UAAU,KAAK,aAAa,GAAG;CACxC,SAAS,cAAc,KAAK,WAAW,IAAI,GAAG;CAE9C,IAAI,IAAI,MACN,QAAQ,OAAO,MACb,GAAG,KAAK,UAAU;EAChB,IAAI;EACJ,MAAM;GACJ,kBAAkB,KAAK;GACvB,2BAA2B,KAAK;GAChC,WAAW,KAAK;GAChB,YAAY,KAAK;GACjB,UAAU,KAAK;EACjB;CACF,CAAC,EAAE,GACL;MACK,IAAI,CAAC,MAAM,SAAS,KAAK,2BAC9B,KAAU,KAAK,yBAAyB,EAAE,YAAY,KAAA,CAAS;CAgBjE,MAAM,OAAO,cAAc,MAbP,gBAClB,IAAI,UACJ,IAAI,UACJ,KAAK,aACL;EACE,aAAa,KAAK;EAClB,cAAc,KAAK;EACnB,SAAS,UAAU;GACjB,IAAI,UAAU,aACZ,SAAS,mCAAmC,GAAG;EACnD;CACF,CACF,CACgC;CAMhC,MAAM,SACJ,MAAM,SAAS,KAAK,KAAM,MAAM,kBAAkB,KAAM;CAE1D,MAAM,WAAW,MAAM,kBAAkB,MAAM;CAC/C,MAAM,mBAAmB,QAAQ;EAC/B,GAAG;EACH,SAAS,IAAI;EACb,UAAU,IAAI;EACd,WAAW,IAAI;EACf,aAAa,IAAI;EACjB,WAAW,IAAI;EACf,GAAI,KAAK,eAAe,KAAA,IACpB,EAAE,YAAY,KAAK,WAAW,IAC9B,SAAS,eAAe,KAAA,IACtB,EAAE,YAAY,SAAS,WAAW,IAClC,CAAC;CACT,CAAC;CACD,MAAM,wBAAwB,QAAQ,IAAI;CAC1C,MAAM,kBAAkB,MAAM;CAE9B,SAAS,8BAA8B,OAAO,IAAI,GAAG;CACrD,YACE;EACE,MAAM,KAAK,QAAQ;EACnB,YAAY,KAAK;CACnB,GACA,GACF;AACF"}

package/dist/logout-C0Dzitsu.mjs

@@ -0,0 +1,18 @@
+import { c as MxsErrorCode, i as emitSuccess, r as emitInfo, s as MxsError } from "./output-vzequvhd.mjs";
+import { r as getCurrentProfile, t as deleteProfileCredentials } from "./profile-CNe2uWJi.mjs";
+//#region src/commands/auth/logout.ts
+async function run(flags, out) {
+	const target = flags.profile?.trim() || await getCurrentProfile() || null;
+	if (!target) throw new MxsError({
+		code: MxsErrorCode.ProfileNoneActive,
+		message: "no active profile to log out of",
+		hint: "pass --profile <name> or set an active profile with `mxs profile use <name>`"
+	});
+	await deleteProfileCredentials(target);
+	emitInfo(`mxs: logged out of profile '${target}'`, out);
+	emitSuccess({ ok: true }, out);
+}
+//#endregion
+export { run };
+
+//# sourceMappingURL=logout-C0Dzitsu.mjs.map

package/dist/logout-C0Dzitsu.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout-C0Dzitsu.mjs","names":[],"sources":["../src/commands/auth/logout.ts"],"sourcesContent":["import { MxsError, MxsErrorCode } from '../../core/errors'\nimport { emitInfo, emitSuccess, type OutputOptions } from '../../core/output'\nimport { deleteProfileCredentials, getCurrentProfile } from '../../core/profile'\nimport { type GlobalFlags } from '../internal/shared'\n\nexport async function run(flags: GlobalFlags, out: OutputOptions) {\n  const target = flags.profile?.trim() || (await getCurrentProfile()) || null\n\n  if (!target) {\n    throw new MxsError({\n      code: MxsErrorCode.ProfileNoneActive,\n      message: 'no active profile to log out of',\n      hint: 'pass --profile <name> or set an active profile with `mxs profile use <name>`',\n    })\n  }\n\n  await deleteProfileCredentials(target)\n  emitInfo(`mxs: logged out of profile '${target}'`, out)\n  emitSuccess({ ok: true }, out)\n}\n"],"mappings":";;;AAKA,eAAsB,IAAI,OAAoB,KAAoB;CAChE,MAAM,SAAS,MAAM,SAAS,KAAK,KAAM,MAAM,kBAAkB,KAAM;CAEvE,IAAI,CAAC,QACH,MAAM,IAAI,SAAS;EACjB,MAAM,aAAa;EACnB,SAAS;EACT,MAAM;CACR,CAAC;CAGH,MAAM,yBAAyB,MAAM;CACrC,SAAS,+BAA+B,OAAO,IAAI,GAAG;CACtD,YAAY,EAAE,IAAI,KAAK,GAAG,GAAG;AAC/B"}

package/dist/ls-wMiTXZPQ.mjs

@@ -0,0 +1,33 @@
+import { i as emitSuccess, o as renderTable } from "./output-vzequvhd.mjs";
+import { c as listProfiles, l as readProfileConfig, r as getCurrentProfile } from "./profile-CNe2uWJi.mjs";
+//#region src/commands/profile/ls.ts
+async function run(_flags, out) {
+	const [names, current] = await Promise.all([listProfiles(), getCurrentProfile()]);
+	const rows = await Promise.all(names.map(async (name) => {
+		const cfg = await readProfileConfig(name);
+		return {
+			current: name === current ? "*" : "",
+			name,
+			api_url: cfg.api_url ?? "",
+			production: cfg.production ? "yes" : "no"
+		};
+	}));
+	if (out.json || out.output === "json") {
+		emitSuccess(rows, out);
+		return;
+	}
+	if (rows.length === 0) {
+		process.stdout.write("(no profiles)\n");
+		return;
+	}
+	process.stdout.write(`${renderTable(rows, [
+		"current",
+		"name",
+		"api_url",
+		"production"
+	])}\n`);
+}
+//#endregion
+export { run };
+
+//# sourceMappingURL=ls-wMiTXZPQ.mjs.map

package/dist/ls-wMiTXZPQ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ls-wMiTXZPQ.mjs","names":[],"sources":["../src/commands/profile/ls.ts"],"sourcesContent":["import { emitSuccess, type OutputOptions, renderTable } from '../../core/output'\nimport {\n  getCurrentProfile,\n  listProfiles,\n  readProfileConfig,\n} from '../../core/profile'\nimport type { GlobalFlags } from '../internal/shared'\n\nexport async function run(_flags: GlobalFlags, out: OutputOptions) {\n  const [names, current] = await Promise.all([\n    listProfiles(),\n    getCurrentProfile(),\n  ])\n\n  const rows = await Promise.all(\n    names.map(async (name) => {\n      const cfg = await readProfileConfig(name)\n      return {\n        current: name === current ? '*' : '',\n        name,\n        api_url: cfg.api_url ?? '',\n        production: cfg.production ? 'yes' : 'no',\n      }\n    }),\n  )\n\n  if (out.json || out.output === 'json') {\n    emitSuccess(rows, out)\n    return\n  }\n\n  if (rows.length === 0) {\n    process.stdout.write('(no profiles)\\n')\n    return\n  }\n\n  process.stdout.write(\n    `${renderTable(rows, ['current', 'name', 'api_url', 'production'])}\\n`,\n  )\n}\n"],"mappings":";;;AAQA,eAAsB,IAAI,QAAqB,KAAoB;CACjE,MAAM,CAAC,OAAO,WAAW,MAAM,QAAQ,IAAI,CACzC,aAAa,GACb,kBAAkB,CACpB,CAAC;CAED,MAAM,OAAO,MAAM,QAAQ,IACzB,MAAM,IAAI,OAAO,SAAS;EACxB,MAAM,MAAM,MAAM,kBAAkB,IAAI;EACxC,OAAO;GACL,SAAS,SAAS,UAAU,MAAM;GAClC;GACA,SAAS,IAAI,WAAW;GACxB,YAAY,IAAI,aAAa,QAAQ;EACvC;CACF,CAAC,CACH;CAEA,IAAI,IAAI,QAAQ,IAAI,WAAW,QAAQ;EACrC,YAAY,MAAM,GAAG;EACrB;CACF;CAEA,IAAI,KAAK,WAAW,GAAG;EACrB,QAAQ,OAAO,MAAM,iBAAiB;EACtC;CACF;CAEA,QAAQ,OAAO,MACb,GAAG,YAAY,MAAM;EAAC;EAAW;EAAQ;EAAW;CAAY,CAAC,EAAE,GACrE;AACF"}

package/dist/mark-Dh9BErsf.mjs

@@ -0,0 +1,29 @@
+import { c as MxsErrorCode, r as emitInfo, s as MxsError } from "./output-vzequvhd.mjs";
+import { l as readProfileConfig, m as writeProfileConfig, o as getProfileDir, p as validateProfileName } from "./profile-CNe2uWJi.mjs";
+import { promises } from "node:fs";
+//#region src/commands/profile/mark.ts
+async function run(name, opts, _flags, out) {
+	validateProfileName(name);
+	if (opts.production === void 0) throw new MxsError({
+		code: MxsErrorCode.ValidationFailed,
+		message: "one of --production or --no-production is required"
+	});
+	try {
+		if (!(await promises.stat(getProfileDir(name))).isDirectory()) throw new Error("not a directory");
+	} catch (err) {
+		if (err?.code !== "ENOENT" && !(err instanceof MxsError)) throw err;
+		throw new MxsError({
+			code: MxsErrorCode.ProfileNotFound,
+			message: `profile '${name}' does not exist`
+		});
+	}
+	await writeProfileConfig(name, {
+		...await readProfileConfig(name),
+		production: opts.production
+	});
+	emitInfo(`mxs: profile '${name}' marked with ${opts.production ? "--production" : "--no-production"}`, out);
+}
+//#endregion
+export { run };
+
+//# sourceMappingURL=mark-Dh9BErsf.mjs.map

package/dist/mark-Dh9BErsf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mark-Dh9BErsf.mjs","names":["fs"],"sources":["../src/commands/profile/mark.ts"],"sourcesContent":["import { promises as fs } from 'node:fs'\n\nimport { MxsError, MxsErrorCode } from '../../core/errors'\nimport { emitInfo, type OutputOptions } from '../../core/output'\nimport {\n  getProfileDir,\n  readProfileConfig,\n  validateProfileName,\n  writeProfileConfig,\n} from '../../core/profile'\nimport type { GlobalFlags } from '../internal/shared'\n\nexport interface MarkOpts {\n  production?: boolean\n}\n\nexport async function run(\n  name: string,\n  opts: MarkOpts,\n  _flags: GlobalFlags,\n  out: OutputOptions,\n) {\n  validateProfileName(name)\n\n  if (opts.production === undefined) {\n    throw new MxsError({\n      code: MxsErrorCode.ValidationFailed,\n      message: 'one of --production or --no-production is required',\n    })\n  }\n\n  try {\n    const stat = await fs.stat(getProfileDir(name))\n    if (!stat.isDirectory()) throw new Error('not a directory')\n  } catch (err: any) {\n    if (err?.code !== 'ENOENT' && !(err instanceof MxsError)) throw err\n    throw new MxsError({\n      code: MxsErrorCode.ProfileNotFound,\n      message: `profile '${name}' does not exist`,\n    })\n  }\n\n  const existing = await readProfileConfig(name)\n  await writeProfileConfig(name, { ...existing, production: opts.production })\n\n  const flag = opts.production ? '--production' : '--no-production'\n  emitInfo(`mxs: profile '${name}' marked with ${flag}`, out)\n}\n"],"mappings":";;;;AAgBA,eAAsB,IACpB,MACA,MACA,QACA,KACA;CACA,oBAAoB,IAAI;CAExB,IAAI,KAAK,eAAe,KAAA,GACtB,MAAM,IAAI,SAAS;EACjB,MAAM,aAAa;EACnB,SAAS;CACX,CAAC;CAGH,IAAI;EAEF,IAAI,EAAC,MADcA,SAAG,KAAK,cAAc,IAAI,CAAC,GACpC,YAAY,GAAG,MAAM,IAAI,MAAM,iBAAiB;CAC5D,SAAS,KAAU;EACjB,IAAI,KAAK,SAAS,YAAY,EAAE,eAAe,WAAW,MAAM;EAChE,MAAM,IAAI,SAAS;GACjB,MAAM,aAAa;GACnB,SAAS,YAAY,KAAK;EAC5B,CAAC;CACH;CAGA,MAAM,mBAAmB,MAAM;EAAE,GAAG,MADb,kBAAkB,IAAI;EACC,YAAY,KAAK;CAAW,CAAC;CAG3E,SAAS,iBAAiB,KAAK,gBADlB,KAAK,aAAa,iBAAiB,qBACO,GAAG;AAC5D"}

package/dist/onboarding-Bw_I8qpf.mjs

@@ -0,0 +1,214 @@
+import { t as Pe } from "./dist-DJF1Ntdn.mjs";
+import { c as MxsErrorCode, s as MxsError } from "./output-vzequvhd.mjs";
+import { f as setCurrentProfile, m as writeProfileConfig, r as getCurrentProfile } from "./profile-CNe2uWJi.mjs";
+import { f as writeCredentials, l as readCredentials, s as normalizeApiUrl } from "./config-store-B8_9iStL.mjs";
+import { c as refreshAccessToken, n as defaultHttp, r as ensureFreshToken, s as probeAuthEndpoint } from "./auth-CAKmTDpF.mjs";
+//#region src/core/gate.ts
+const SAFE_METHODS = new Set([
+	"GET",
+	"HEAD",
+	"OPTIONS"
+]);
+function decideWriteGate(resolved, method) {
+	if (SAFE_METHODS.has(method)) return { allow: true };
+	if (!resolved.isProduction) return { allow: true };
+	if (resolved.profileExplicit) return { allow: true };
+	if (resolved.urlOverridden) return { allow: true };
+	const name = resolved.profileName ?? "unknown";
+	const url = resolved.apiUrl;
+	return {
+		allow: false,
+		code: MxsErrorCode.ProfileWriteRequiresExplicit,
+		message: `write blocked: active profile '${name}' (${url}) is production`,
+		hint: `active profile '${name}' is production; retry with --profile ${name} or MXS_PROFILE=${name}`
+	};
+}
+//#endregion
+//#region src/core/api-client.ts
+var ApiClient = class {
+	ctx;
+	http;
+	token;
+	refreshed = false;
+	constructor(ctx) {
+		this.ctx = ctx;
+		this.http = ctx.http ?? defaultHttp();
+		this.token = ctx.token;
+		if (ctx.resolved?.isProduction && !ctx.quiet) {
+			const r = ctx.resolved;
+			process.stderr.write(`mxs: profile=${r.profileName} (production) → ${r.apiUrl}\n`);
+		}
+	}
+	get apiBase() {
+		return this.ctx.apiBase;
+	}
+	async request(path, options = {}) {
+		const method = options.method ?? "GET";
+		if (this.ctx.resolved) {
+			const decision = decideWriteGate(this.ctx.resolved, method);
+			if (!decision.allow) throw new MxsError({
+				code: MxsErrorCode.ProfileWriteRequiresExplicit,
+				message: decision.message,
+				hint: decision.hint,
+				details: {
+					profile: this.ctx.resolved.profileName,
+					api_url: this.ctx.resolved.apiUrl
+				}
+			});
+		}
+		if (this.ctx.autoRefresh && this.token) await this.tryRefresh();
+		const url = buildUrl(this.ctx.apiBase, path, options.query);
+		const headers = {
+			accept: "application/json",
+			...options.headers
+		};
+		if (this.token) headers.authorization = `Bearer ${this.token}`;
+		if (this.ctx.apiKey) headers["x-api-key"] = this.ctx.apiKey;
+		if (options.body !== void 0 && !(options.body instanceof FormData)) headers["content-type"] ??= "application/json";
+		const startedAt = Date.now();
+		let res = await this.http.fetch(url, {
+			method,
+			headers,
+			body: options.body === void 0 ? void 0 : options.body instanceof FormData ? options.body : JSON.stringify(options.body),
+			signal: options.signal
+		});
+		if (this.ctx.verbose) process.stderr.write(`${method} ${url} → ${res.status} (${Date.now() - startedAt}ms)\n`);
+		if (res.status === 401 && !this.refreshed && this.token) {
+			const refreshed = await this.tryRefresh();
+			if (refreshed) {
+				this.refreshed = true;
+				headers.authorization = `Bearer ${refreshed.access_token}`;
+				this.token = refreshed.access_token;
+				res = await this.http.fetch(url, {
+					method,
+					headers,
+					body: options.body === void 0 ? void 0 : options.body instanceof FormData ? options.body : JSON.stringify(options.body),
+					signal: options.signal
+				});
+			}
+		}
+		const data = await parseBody(res);
+		if (res.ok) return {
+			ok: true,
+			status: res.status,
+			data
+		};
+		throw toMxsError(res.status, data);
+	}
+	async tryRefresh() {
+		const current = await readCredentials();
+		if (!current) return null;
+		if (this.token && current.access_token !== this.token) return null;
+		const refreshed = await refreshAccessToken(this.ctx.authBase, this.ctx.clientId, current, this.http);
+		if (!refreshed) return null;
+		await writeCredentials(refreshed);
+		this.token = refreshed.access_token;
+		return refreshed;
+	}
+};
+async function createApiClient(ctx) {
+	if (!ctx.token) return new ApiClient(ctx);
+	const fresh = await ensureFreshToken(ctx.authBase, ctx.clientId, ctx.http ?? defaultHttp()).catch(() => null);
+	if (fresh) return new ApiClient({
+		...ctx,
+		token: fresh.access_token
+	});
+	return new ApiClient(ctx);
+}
+function buildUrl(base, path, query) {
+	const url = new URL(path.startsWith("/") ? path.slice(1) : path, base.endsWith("/") ? base : `${base}/`);
+	if (query) for (const [k, v] of Object.entries(query)) {
+		if (v === void 0 || v === null) continue;
+		url.searchParams.set(k, String(v));
+	}
+	return url.toString();
+}
+async function parseBody(res) {
+	if ((res.headers.get("content-type") ?? "").includes("application/json")) try {
+		return await res.json();
+	} catch {
+		return;
+	}
+	return await res.text();
+}
+function toMxsError(status, body) {
+	if (status === 401) return new MxsError({
+		code: MxsErrorCode.AuthExpired,
+		message: "authentication required",
+		hint: "run `mxs auth login`",
+		details: body
+	});
+	if (status === 403) return new MxsError({
+		code: MxsErrorCode.AuthDenied,
+		message: "permission denied",
+		details: body
+	});
+	if (status === 404) return new MxsError({
+		code: MxsErrorCode.ResourceNotFound,
+		message: "resource not found",
+		details: body
+	});
+	if (status === 422 || status === 400) return new MxsError({
+		code: MxsErrorCode.ValidationFailed,
+		message: extractMessage(body) ?? "validation failed",
+		details: body
+	});
+	if (status >= 500) return new MxsError({
+		code: MxsErrorCode.ServerError,
+		message: extractMessage(body) ?? `server error (${status})`,
+		details: body
+	});
+	return new MxsError({
+		code: MxsErrorCode.Generic,
+		message: extractMessage(body) ?? `request failed (${status})`,
+		details: body
+	});
+}
+function extractMessage(body) {
+	if (!body || typeof body !== "object") return null;
+	const msg = body.message;
+	if (typeof msg === "string") return msg;
+	if (Array.isArray(msg) && typeof msg[0] === "string") return msg.join("; ");
+	return null;
+}
+//#endregion
+//#region src/core/onboarding.ts
+async function runOnboarding(opts = {}) {
+	const tty = opts.isTTY ?? Boolean(process.stdin.isTTY && process.stdout.isTTY);
+	let input = opts.initialApiUrl;
+	if (!input) {
+		if (!tty) throw new MxsError({
+			code: MxsErrorCode.ConfigMissingApiUrl,
+			message: "API URL is not configured",
+			hint: "set MXS_API_URL or pass --api-url <url>, or run `mxs auth login` in an interactive shell"
+		});
+		if (opts.prompt) input = await opts.prompt("API URL of your mx-core server");
+		else {
+			const answer = await Pe({
+				message: "API URL of your mx-core server",
+				placeholder: "https://blog.example.com",
+				validate: (v) => !v || v.trim().length === 0 ? "required" : void 0
+			});
+			if (typeof answer !== "string") throw new MxsError({
+				code: MxsErrorCode.ConfigMissingApiUrl,
+				message: "onboarding aborted"
+			});
+			input = answer;
+		}
+	}
+	const probed = await probeAuthEndpoint(normalizeApiUrl(input), opts.http ?? defaultHttp());
+	const target = opts.profile?.trim() || await getCurrentProfile() || "default";
+	await writeProfileConfig(target, {
+		api_url: probed.apiUrl,
+		api_base: probed.apiBase,
+		auth_base: probed.authBase,
+		api_version: probed.apiVersion,
+		client_id: "mxs-cli"
+	});
+	await setCurrentProfile(target);
+	return probed;
+}
+//#endregion
+export { ApiClient as n, createApiClient as r, runOnboarding as t };
+
+//# sourceMappingURL=onboarding-Bw_I8qpf.mjs.map

package/dist/onboarding-Bw_I8qpf.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding-Bw_I8qpf.mjs","names":["text"],"sources":["../src/core/gate.ts","../src/core/api-client.ts","../src/core/onboarding.ts"],"sourcesContent":["import type { ResolvedConfig } from './config-store'\nimport { MxsErrorCode } from './errors'\n\nexport type HttpMethod =\n  | 'GET'\n  | 'HEAD'\n  | 'OPTIONS'\n  | 'POST'\n  | 'PUT'\n  | 'PATCH'\n  | 'DELETE'\n\nexport interface GateDecision {\n  allow: boolean\n  code?: 'profile.write_requires_explicit'\n  message?: string\n  hint?: string\n}\n\nconst SAFE_METHODS = new Set<HttpMethod>(['GET', 'HEAD', 'OPTIONS'])\n\nexport function decideWriteGate(\n  resolved: ResolvedConfig,\n  method: HttpMethod,\n): GateDecision {\n  if (SAFE_METHODS.has(method)) {\n    return { allow: true }\n  }\n  if (!resolved.isProduction) {\n    return { allow: true }\n  }\n  if (resolved.profileExplicit) {\n    return { allow: true }\n  }\n  if (resolved.urlOverridden) {\n    return { allow: true }\n  }\n\n  const name = resolved.profileName ?? 'unknown'\n  const url = resolved.apiUrl\n\n  return {\n    allow: false,\n    code: MxsErrorCode.ProfileWriteRequiresExplicit,\n    message: `write blocked: active profile '${name}' (${url}) is production`,\n    hint: `active profile '${name}' is production; retry with --profile ${name} or MXS_PROFILE=${name}`,\n  }\n}\n","import {\n  type AuthHttp,\n  defaultHttp,\n  ensureFreshToken,\n  refreshAccessToken,\n} from './auth'\nimport {\n  type CredentialsShape,\n  readCredentials,\n  type ResolvedConfig,\n  writeCredentials,\n} from './config-store'\nimport { MxsError, MxsErrorCode } from './errors'\nimport { decideWriteGate, type HttpMethod } from './gate'\n\nexport interface ApiClientContext {\n  apiBase: string\n  authBase: string\n  clientId: string\n  token?: string\n  apiKey?: string\n  autoRefresh?: boolean\n  verbose?: boolean\n  quiet?: boolean\n  http?: AuthHttp\n  /** When provided, enables the production banner and write gate. */\n  resolved?: ResolvedConfig\n}\n\nexport interface RequestOptions {\n  method?: 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE'\n  body?: unknown\n  query?: Record<string, unknown>\n  headers?: Record<string, string>\n  signal?: AbortSignal\n}\n\nexport interface ApiResponse<T> {\n  ok: boolean\n  status: number\n  data: T\n}\n\nexport class ApiClient {\n  private http: AuthHttp\n  private token?: string\n  private refreshed = false\n\n  constructor(private ctx: ApiClientContext) {\n    this.http = ctx.http ?? defaultHttp()\n    this.token = ctx.token\n    if (ctx.resolved?.isProduction && !ctx.quiet) {\n      const r = ctx.resolved\n      process.stderr.write(\n        `mxs: profile=${r.profileName} (production) → ${r.apiUrl}\\n`,\n      )\n    }\n  }\n\n  get apiBase(): string {\n    return this.ctx.apiBase\n  }\n\n  async request<T = unknown>(\n    path: string,\n    options: RequestOptions = {},\n  ): Promise<ApiResponse<T>> {\n    const method = (options.method ?? 'GET') as HttpMethod\n    if (this.ctx.resolved) {\n      const decision = decideWriteGate(this.ctx.resolved, method)\n      if (!decision.allow) {\n        throw new MxsError({\n          code: MxsErrorCode.ProfileWriteRequiresExplicit,\n          message: decision.message!,\n          hint: decision.hint,\n          details: {\n            profile: this.ctx.resolved.profileName,\n            api_url: this.ctx.resolved.apiUrl,\n          },\n        })\n      }\n    }\n    if (this.ctx.autoRefresh && this.token) {\n      await this.tryRefresh()\n    }\n    const url = buildUrl(this.ctx.apiBase, path, options.query)\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      ...options.headers,\n    }\n    if (this.token) headers.authorization = `Bearer ${this.token}`\n    if (this.ctx.apiKey) headers['x-api-key'] = this.ctx.apiKey\n    if (options.body !== undefined && !(options.body instanceof FormData)) {\n      headers['content-type'] ??= 'application/json'\n    }\n    const startedAt = Date.now()\n    let res = await this.http.fetch(url, {\n      method,\n      headers,\n      body:\n        options.body === undefined\n          ? undefined\n          : options.body instanceof FormData\n            ? options.body\n            : JSON.stringify(options.body),\n      signal: options.signal,\n    })\n    if (this.ctx.verbose) {\n      process.stderr.write(\n        `${method} ${url} → ${res.status} (${Date.now() - startedAt}ms)\\n`,\n      )\n    }\n\n    if (res.status === 401 && !this.refreshed && this.token) {\n      const refreshed = await this.tryRefresh()\n      if (refreshed) {\n        this.refreshed = true\n        headers.authorization = `Bearer ${refreshed.access_token}`\n        this.token = refreshed.access_token\n        res = await this.http.fetch(url, {\n          method,\n          headers,\n          body:\n            options.body === undefined\n              ? undefined\n              : options.body instanceof FormData\n                ? options.body\n                : JSON.stringify(options.body),\n          signal: options.signal,\n        })\n      }\n    }\n\n    const data = await parseBody<T>(res)\n    if (res.ok) return { ok: true, status: res.status, data }\n\n    throw toMxsError(res.status, data)\n  }\n\n  private async tryRefresh(): Promise<CredentialsShape | null> {\n    const current = await readCredentials()\n    if (!current) return null\n    if (this.token && current.access_token !== this.token) return null\n    const refreshed = await refreshAccessToken(\n      this.ctx.authBase,\n      this.ctx.clientId,\n      current,\n      this.http,\n    )\n    if (!refreshed) return null\n    await writeCredentials(refreshed)\n    this.token = refreshed.access_token\n    return refreshed\n  }\n}\n\nexport async function createApiClient(\n  ctx: ApiClientContext,\n): Promise<ApiClient> {\n  if (!ctx.token) return new ApiClient(ctx)\n  const fresh = await ensureFreshToken(\n    ctx.authBase,\n    ctx.clientId,\n    ctx.http ?? defaultHttp(),\n  ).catch(() => null)\n  if (fresh) {\n    return new ApiClient({ ...ctx, token: fresh.access_token })\n  }\n  return new ApiClient(ctx)\n}\n\nfunction buildUrl(\n  base: string,\n  path: string,\n  query?: Record<string, unknown>,\n): string {\n  const url = new URL(\n    path.startsWith('/') ? path.slice(1) : path,\n    base.endsWith('/') ? base : `${base}/`,\n  )\n  if (query) {\n    for (const [k, v] of Object.entries(query)) {\n      if (v === undefined || v === null) continue\n      url.searchParams.set(k, String(v))\n    }\n  }\n  return url.toString()\n}\n\nasync function parseBody<T>(res: Response): Promise<T> {\n  const ct = res.headers.get('content-type') ?? ''\n  if (ct.includes('application/json')) {\n    try {\n      return (await res.json()) as T\n    } catch {\n      return undefined as T\n    }\n  }\n  return (await res.text()) as unknown as T\n}\n\nfunction toMxsError(status: number, body: unknown): MxsError {\n  if (status === 401) {\n    return new MxsError({\n      code: MxsErrorCode.AuthExpired,\n      message: 'authentication required',\n      hint: 'run `mxs auth login`',\n      details: body,\n    })\n  }\n  if (status === 403) {\n    return new MxsError({\n      code: MxsErrorCode.AuthDenied,\n      message: 'permission denied',\n      details: body,\n    })\n  }\n  if (status === 404) {\n    return new MxsError({\n      code: MxsErrorCode.ResourceNotFound,\n      message: 'resource not found',\n      details: body,\n    })\n  }\n  if (status === 422 || status === 400) {\n    return new MxsError({\n      code: MxsErrorCode.ValidationFailed,\n      message: extractMessage(body) ?? 'validation failed',\n      details: body,\n    })\n  }\n  if (status >= 500) {\n    return new MxsError({\n      code: MxsErrorCode.ServerError,\n      message: extractMessage(body) ?? `server error (${status})`,\n      details: body,\n    })\n  }\n  return new MxsError({\n    code: MxsErrorCode.Generic,\n    message: extractMessage(body) ?? `request failed (${status})`,\n    details: body,\n  })\n}\n\nfunction extractMessage(body: unknown): string | null {\n  if (!body || typeof body !== 'object') return null\n  const msg = (body as Record<string, unknown>).message\n  if (typeof msg === 'string') return msg\n  if (Array.isArray(msg) && typeof msg[0] === 'string') return msg.join('; ')\n  return null\n}\n","import { text } from '@clack/prompts'\n\nimport { type AuthHttp, defaultHttp, probeAuthEndpoint } from './auth'\nimport { normalizeApiUrl } from './config-store'\nimport { MxsError, MxsErrorCode } from './errors'\nimport {\n  getCurrentProfile,\n  setCurrentProfile,\n  writeProfileConfig,\n} from './profile'\n\nexport interface OnboardingResult {\n  apiUrl: string\n  apiBase: string\n  authBase: string\n  apiVersion: number\n}\n\nexport interface OnboardingOptions {\n  http?: AuthHttp\n  initialApiUrl?: string\n  isTTY?: boolean\n  prompt?: (question: string) => Promise<string>\n  /** Override the target profile name (mirrors --profile flag). */\n  profile?: string\n}\n\nexport async function runOnboarding(\n  opts: OnboardingOptions = {},\n): Promise<OnboardingResult> {\n  const tty = opts.isTTY ?? Boolean(process.stdin.isTTY && process.stdout.isTTY)\n  let input = opts.initialApiUrl\n  if (!input) {\n    if (!tty) {\n      throw new MxsError({\n        code: MxsErrorCode.ConfigMissingApiUrl,\n        message: 'API URL is not configured',\n        hint: 'set MXS_API_URL or pass --api-url <url>, or run `mxs auth login` in an interactive shell',\n      })\n    }\n    if (opts.prompt) {\n      input = await opts.prompt('API URL of your mx-core server')\n    } else {\n      const answer = await text({\n        message: 'API URL of your mx-core server',\n        placeholder: 'https://blog.example.com',\n        validate: (v) => (!v || v.trim().length === 0 ? 'required' : undefined),\n      })\n      if (typeof answer !== 'string') {\n        throw new MxsError({\n          code: MxsErrorCode.ConfigMissingApiUrl,\n          message: 'onboarding aborted',\n        })\n      }\n      input = answer\n    }\n  }\n\n  const apiUrl = normalizeApiUrl(input)\n  const probed = await probeAuthEndpoint(apiUrl, opts.http ?? defaultHttp())\n\n  // Determine target profile: --profile > active current > 'default'\n  const target =\n    opts.profile?.trim() || (await getCurrentProfile()) || 'default'\n\n  await writeProfileConfig(target, {\n    api_url: probed.apiUrl,\n    api_base: probed.apiBase,\n    auth_base: probed.authBase,\n    api_version: probed.apiVersion,\n    client_id: 'mxs-cli',\n  })\n\n  await setCurrentProfile(target)\n\n  return probed\n}\n"],"mappings":";;;;;;AAmBA,MAAM,eAAe,IAAI,IAAgB;CAAC;CAAO;CAAQ;AAAS,CAAC;AAEnE,SAAgB,gBACd,UACA,QACc;CACd,IAAI,aAAa,IAAI,MAAM,GACzB,OAAO,EAAE,OAAO,KAAK;CAEvB,IAAI,CAAC,SAAS,cACZ,OAAO,EAAE,OAAO,KAAK;CAEvB,IAAI,SAAS,iBACX,OAAO,EAAE,OAAO,KAAK;CAEvB,IAAI,SAAS,eACX,OAAO,EAAE,OAAO,KAAK;CAGvB,MAAM,OAAO,SAAS,eAAe;CACrC,MAAM,MAAM,SAAS;CAErB,OAAO;EACL,OAAO;EACP,MAAM,aAAa;EACnB,SAAS,kCAAkC,KAAK,KAAK,IAAI;EACzD,MAAM,mBAAmB,KAAK,wCAAwC,KAAK,kBAAkB;CAC/F;AACF;;;ACJA,IAAa,YAAb,MAAuB;CAKD;CAJpB;CACA;CACA,YAAoB;CAEpB,YAAY,KAA+B;EAAvB,KAAA,MAAA;EAClB,KAAK,OAAO,IAAI,QAAQ,YAAY;EACpC,KAAK,QAAQ,IAAI;EACjB,IAAI,IAAI,UAAU,gBAAgB,CAAC,IAAI,OAAO;GAC5C,MAAM,IAAI,IAAI;GACd,QAAQ,OAAO,MACb,gBAAgB,EAAE,YAAY,kBAAkB,EAAE,OAAO,GAC3D;EACF;CACF;CAEA,IAAI,UAAkB;EACpB,OAAO,KAAK,IAAI;CAClB;CAEA,MAAM,QACJ,MACA,UAA0B,CAAC,GACF;EACzB,MAAM,SAAU,QAAQ,UAAU;EAClC,IAAI,KAAK,IAAI,UAAU;GACrB,MAAM,WAAW,gBAAgB,KAAK,IAAI,UAAU,MAAM;GAC1D,IAAI,CAAC,SAAS,OACZ,MAAM,IAAI,SAAS;IACjB,MAAM,aAAa;IACnB,SAAS,SAAS;IAClB,MAAM,SAAS;IACf,SAAS;KACP,SAAS,KAAK,IAAI,SAAS;KAC3B,SAAS,KAAK,IAAI,SAAS;IAC7B;GACF,CAAC;EAEL;EACA,IAAI,KAAK,IAAI,eAAe,KAAK,OAC/B,MAAM,KAAK,WAAW;EAExB,MAAM,MAAM,SAAS,KAAK,IAAI,SAAS,MAAM,QAAQ,KAAK;EAC1D,MAAM,UAAkC;GACtC,QAAQ;GACR,GAAG,QAAQ;EACb;EACA,IAAI,KAAK,OAAO,QAAQ,gBAAgB,UAAU,KAAK;EACvD,IAAI,KAAK,IAAI,QAAQ,QAAQ,eAAe,KAAK,IAAI;EACrD,IAAI,QAAQ,SAAS,KAAA,KAAa,EAAE,QAAQ,gBAAgB,WAC1D,QAAQ,oBAAoB;EAE9B,MAAM,YAAY,KAAK,IAAI;EAC3B,IAAI,MAAM,MAAM,KAAK,KAAK,MAAM,KAAK;GACnC;GACA;GACA,MACE,QAAQ,SAAS,KAAA,IACb,KAAA,IACA,QAAQ,gBAAgB,WACtB,QAAQ,OACR,KAAK,UAAU,QAAQ,IAAI;GACnC,QAAQ,QAAQ;EAClB,CAAC;EACD,IAAI,KAAK,IAAI,SACX,QAAQ,OAAO,MACb,GAAG,OAAO,GAAG,IAAI,KAAK,IAAI,OAAO,IAAI,KAAK,IAAI,IAAI,UAAU,MAC9D;EAGF,IAAI,IAAI,WAAW,OAAO,CAAC,KAAK,aAAa,KAAK,OAAO;GACvD,MAAM,YAAY,MAAM,KAAK,WAAW;GACxC,IAAI,WAAW;IACb,KAAK,YAAY;IACjB,QAAQ,gBAAgB,UAAU,UAAU;IAC5C,KAAK,QAAQ,UAAU;IACvB,MAAM,MAAM,KAAK,KAAK,MAAM,KAAK;KAC/B;KACA;KACA,MACE,QAAQ,SAAS,KAAA,IACb,KAAA,IACA,QAAQ,gBAAgB,WACtB,QAAQ,OACR,KAAK,UAAU,QAAQ,IAAI;KACnC,QAAQ,QAAQ;IAClB,CAAC;GACH;EACF;EAEA,MAAM,OAAO,MAAM,UAAa,GAAG;EACnC,IAAI,IAAI,IAAI,OAAO;GAAE,IAAI;GAAM,QAAQ,IAAI;GAAQ;EAAK;EAExD,MAAM,WAAW,IAAI,QAAQ,IAAI;CACnC;CAEA,MAAc,aAA+C;EAC3D,MAAM,UAAU,MAAM,gBAAgB;EACtC,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,KAAK,SAAS,QAAQ,iBAAiB,KAAK,OAAO,OAAO;EAC9D,MAAM,YAAY,MAAM,mBACtB,KAAK,IAAI,UACT,KAAK,IAAI,UACT,SACA,KAAK,IACP;EACA,IAAI,CAAC,WAAW,OAAO;EACvB,MAAM,iBAAiB,SAAS;EAChC,KAAK,QAAQ,UAAU;EACvB,OAAO;CACT;AACF;AAEA,eAAsB,gBACpB,KACoB;CACpB,IAAI,CAAC,IAAI,OAAO,OAAO,IAAI,UAAU,GAAG;CACxC,MAAM,QAAQ,MAAM,iBAClB,IAAI,UACJ,IAAI,UACJ,IAAI,QAAQ,YAAY,CAC1B,EAAE,YAAY,IAAI;CAClB,IAAI,OACF,OAAO,IAAI,UAAU;EAAE,GAAG;EAAK,OAAO,MAAM;CAAa,CAAC;CAE5D,OAAO,IAAI,UAAU,GAAG;AAC1B;AAEA,SAAS,SACP,MACA,MACA,OACQ;CACR,MAAM,MAAM,IAAI,IACd,KAAK,WAAW,GAAG,IAAI,KAAK,MAAM,CAAC,IAAI,MACvC,KAAK,SAAS,GAAG,IAAI,OAAO,GAAG,KAAK,EACtC;CACA,IAAI,OACF,KAAK,MAAM,CAAC,GAAG,MAAM,OAAO,QAAQ,KAAK,GAAG;EAC1C,IAAI,MAAM,KAAA,KAAa,MAAM,MAAM;EACnC,IAAI,aAAa,IAAI,GAAG,OAAO,CAAC,CAAC;CACnC;CAEF,OAAO,IAAI,SAAS;AACtB;AAEA,eAAe,UAAa,KAA2B;CAErD,KADW,IAAI,QAAQ,IAAI,cAAc,KAAK,IACvC,SAAS,kBAAkB,GAChC,IAAI;EACF,OAAQ,MAAM,IAAI,KAAK;CACzB,QAAQ;EACN;CACF;CAEF,OAAQ,MAAM,IAAI,KAAK;AACzB;AAEA,SAAS,WAAW,QAAgB,MAAyB;CAC3D,IAAI,WAAW,KACb,OAAO,IAAI,SAAS;EAClB,MAAM,aAAa;EACnB,SAAS;EACT,MAAM;EACN,SAAS;CACX,CAAC;CAEH,IAAI,WAAW,KACb,OAAO,IAAI,SAAS;EAClB,MAAM,aAAa;EACnB,SAAS;EACT,SAAS;CACX,CAAC;CAEH,IAAI,WAAW,KACb,OAAO,IAAI,SAAS;EAClB,MAAM,aAAa;EACnB,SAAS;EACT,SAAS;CACX,CAAC;CAEH,IAAI,WAAW,OAAO,WAAW,KAC/B,OAAO,IAAI,SAAS;EAClB,MAAM,aAAa;EACnB,SAAS,eAAe,IAAI,KAAK;EACjC,SAAS;CACX,CAAC;CAEH,IAAI,UAAU,KACZ,OAAO,IAAI,SAAS;EAClB,MAAM,aAAa;EACnB,SAAS,eAAe,IAAI,KAAK,iBAAiB,OAAO;EACzD,SAAS;CACX,CAAC;CAEH,OAAO,IAAI,SAAS;EAClB,MAAM,aAAa;EACnB,SAAS,eAAe,IAAI,KAAK,mBAAmB,OAAO;EAC3D,SAAS;CACX,CAAC;AACH;AAEA,SAAS,eAAe,MAA8B;CACpD,IAAI,CAAC,QAAQ,OAAO,SAAS,UAAU,OAAO;CAC9C,MAAM,MAAO,KAAiC;CAC9C,IAAI,OAAO,QAAQ,UAAU,OAAO;CACpC,IAAI,MAAM,QAAQ,GAAG,KAAK,OAAO,IAAI,OAAO,UAAU,OAAO,IAAI,KAAK,IAAI;CAC1E,OAAO;AACT;;;AChOA,eAAsB,cACpB,OAA0B,CAAC,GACA;CAC3B,MAAM,MAAM,KAAK,SAAS,QAAQ,QAAQ,MAAM,SAAS,QAAQ,OAAO,KAAK;CAC7E,IAAI,QAAQ,KAAK;CACjB,IAAI,CAAC,OAAO;EACV,IAAI,CAAC,KACH,MAAM,IAAI,SAAS;GACjB,MAAM,aAAa;GACnB,SAAS;GACT,MAAM;EACR,CAAC;EAEH,IAAI,KAAK,QACP,QAAQ,MAAM,KAAK,OAAO,gCAAgC;OACrD;GACL,MAAM,SAAS,MAAMA,GAAK;IACxB,SAAS;IACT,aAAa;IACb,WAAW,MAAO,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,IAAI,aAAa,KAAA;GAC/D,CAAC;GACD,IAAI,OAAO,WAAW,UACpB,MAAM,IAAI,SAAS;IACjB,MAAM,aAAa;IACnB,SAAS;GACX,CAAC;GAEH,QAAQ;EACV;CACF;CAGA,MAAM,SAAS,MAAM,kBADN,gBAAgB,KACa,GAAG,KAAK,QAAQ,YAAY,CAAC;CAGzE,MAAM,SACJ,KAAK,SAAS,KAAK,KAAM,MAAM,kBAAkB,KAAM;CAEzD,MAAM,mBAAmB,QAAQ;EAC/B,SAAS,OAAO;EAChB,UAAU,OAAO;EACjB,WAAW,OAAO;EAClB,aAAa,OAAO;EACpB,WAAW;CACb,CAAC;CAED,MAAM,kBAAkB,MAAM;CAE9B,OAAO;AACT"}