@nio-cli/cli 0.1.0 → 0.2.0

package/dist/gateway/services/security.js

@@ -0,0 +1,99 @@
+import { createUserRepository } from '../../adapters/pg/user-repository.js';
+import { createLoginChallengeRepository } from '../../adapters/pg/login-challenge-repository.js';
+import { createHttpSmsSender } from '../../adapters/sms/http-generic.js';
+import { generateOtp, hashOtp, verifyOtp } from '../../lib/auth/otp.js';
+import { generateBackupCodes, verifyBackupCode, markUsed, countRemaining, } from '../../lib/auth/backup-codes.js';
+import { challengeUsable, maskPhone, OTP_TTL_MS, OTP_MAX_ATTEMPTS } from './login.js';
+export function isE164(phone) {
+    return /^\+\d{8,15}$/.test(phone.trim());
+}
+export async function startSecurityChallenge(userId, toPhone, deps = {}) {
+    if (!isE164(toPhone))
+        return { ok: false, error: 'número inválido (use E.164, ex.: +5511999998888)' };
+    const challenges = deps.challenges ?? createLoginChallengeRepository();
+    const sms = deps.sms ?? createHttpSmsSender();
+    const code = generateOtp();
+    const challenge = await challenges.create({
+        userId,
+        purpose: 'enable_2fa',
+        codeHash: hashOtp(code),
+        channel: 'sms',
+        expiresAt: new Date(Date.now() + OTP_TTL_MS),
+    });
+    const sent = await sms.send(toPhone, `NIO: seu código de confirmação é ${code} (expira em 5 min).`);
+    if (sent.status === 'skipped') {
+        await challenges.consume(challenge.id).catch(() => { });
+        return { ok: false, error: '2FA não configurado no servidor (SMS_*).' };
+    }
+    if (sent.status === 'failed') {
+        await challenges.consume(challenge.id).catch(() => { });
+        return { ok: false, error: `falha ao enviar o SMS: ${sent.error ?? ''}`.trim() };
+    }
+    return { ok: true, challengeId: challenge.id };
+}
+async function consumeSecurityCode(userId, challengeId, code, type, deps) {
+    const challenges = deps.challenges ?? createLoginChallengeRepository();
+    const users = deps.users ?? createUserRepository();
+    const usable = challengeUsable(await challenges.findById(challengeId));
+    if (!usable.ok)
+        return { ok: false, error: `desafio ${usable.reason}` };
+    const ch = usable.ch;
+    if (ch.userId !== userId || ch.purpose !== 'enable_2fa') {
+        return { ok: false, error: 'desafio não corresponde' };
+    }
+    if (type === 'backup') {
+        const stored = await users.getBackupCodes(userId);
+        const idx = await verifyBackupCode(code, stored);
+        if (idx < 0)
+            return { ok: false, error: 'código de backup inválido' };
+        await users.updateBackupCodes(userId, markUsed(stored, idx));
+    }
+    else {
+        if (!verifyOtp(code, ch.codeHash)) {
+            const n = await challenges.incrementAttempts(ch.id);
+            return {
+                ok: false,
+                error: n >= OTP_MAX_ATTEMPTS ? 'tentativas esgotadas' : 'código inválido',
+            };
+        }
+    }
+    await challenges.consume(ch.id);
+    return { ok: true };
+}
+export async function confirmEnable2fa(userId, challengeId, code, phone, deps = {}) {
+    const res = await consumeSecurityCode(userId, challengeId, code, 'otp', deps);
+    if (!res.ok)
+        return res;
+    const users = deps.users ?? createUserRepository();
+    const { codes, hashes } = await generateBackupCodes();
+    await users.enable2fa(userId, phone.trim(), hashes);
+    return { ok: true, backupCodes: codes };
+}
+export async function disable2fa(userId, challengeId, code, type, deps = {}) {
+    const res = await consumeSecurityCode(userId, challengeId, code, type, deps);
+    if (!res.ok)
+        return res;
+    await (deps.users ?? createUserRepository()).disable2fa(userId);
+    return { ok: true };
+}
+export async function regenerateBackupCodes(userId, challengeId, code, type, deps = {}) {
+    const res = await consumeSecurityCode(userId, challengeId, code, type, deps);
+    if (!res.ok)
+        return res;
+    const users = deps.users ?? createUserRepository();
+    const { codes, hashes } = await generateBackupCodes();
+    await users.updateBackupCodes(userId, hashes);
+    return { ok: true, backupCodes: codes };
+}
+export async function status(userId, deps = {}) {
+    const users = deps.users ?? createUserRepository();
+    const user = await users.findById(userId);
+    if (!user || !user.auth2)
+        return { enabled: false, phoneHint: null, backupCodesRemaining: 0 };
+    return {
+        enabled: true,
+        phoneHint: user.phone ? maskPhone(user.phone) : null,
+        backupCodesRemaining: countRemaining(await users.getBackupCodes(userId)),
+    };
+}
+//# sourceMappingURL=security.js.map

package/dist/gateway/services/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/gateway/services/security.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,8BAA8B,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,EACR,cAAc,GACf,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAStF,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAKD,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,OAAe,EACf,OAAqB,EAAE;IAEvB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;IACtG,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,8BAA8B,EAAE,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC;QACxC,MAAM;QACN,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;QACvB,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,oCAAoC,IAAI,qBAAqB,CAAC,CAAC;IACpG,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACvD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,0BAA0B,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;AACjD,CAAC;AAGD,KAAK,UAAU,mBAAmB,CAChC,MAAc,EACd,WAAmB,EACnB,IAAY,EACZ,IAAsB,EACtB,IAAkB;IAElB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,8BAA8B,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IACxE,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;IACrB,IAAI,EAAE,CAAC,MAAM,KAAK,MAAM,IAAI,EAAE,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;QACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;IACzD,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,GAAG,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC;QACtE,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACpD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB;aAC1E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,WAAmB,EACnB,IAAY,EACZ,KAAa,EACb,OAAqB,EAAE;IAEvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACtD,MAAM,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;IACpD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,WAAmB,EACnB,IAAY,EACZ,IAAsB,EACtB,OAAqB,EAAE;IAEvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,WAAmB,EACnB,IAAY,EACZ,IAAsB,EACtB,OAAqB,EAAE;IAEvB,MAAM,GAAG,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACtD,MAAM,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,MAAc,EACd,OAAqB,EAAE;IAEvB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,oBAAoB,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC,EAAE,CAAC;IAC9F,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QACpD,oBAAoB,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KACzE,CAAC;AACJ,CAAC"}

package/dist/lib/auth/backup-codes.js

@@ -0,0 +1,46 @@
+import { randomInt } from 'node:crypto';
+import { hashPassword, verifyPassword } from './password.js';
+const COUNT = 10;
+const LENGTH = 8;
+const ALPHABET = 'ABCDEFGHJKMNPQRSTUVWXYZ23456789';
+const USED = '[USED]';
+function randomCode() {
+    let out = '';
+    for (let i = 0; i < LENGTH; i++)
+        out += ALPHABET[randomInt(0, ALPHABET.length)];
+    return out;
+}
+export async function generateBackupCodes() {
+    const codes = Array.from({ length: COUNT }, randomCode);
+    const hashes = await Promise.all(codes.map((c) => hashPassword(c)));
+    return { codes, hashes: hashes.join('|') };
+}
+export async function verifyBackupCode(input, joined) {
+    if (!joined)
+        return -1;
+    const normalized = input.trim().toUpperCase();
+    const parts = joined.split('|');
+    for (let i = 0; i < parts.length; i++) {
+        const h = parts[i];
+        if (!h || h === USED)
+            continue;
+        if (await verifyPassword(h, normalized))
+            return i;
+    }
+    return -1;
+}
+export function markUsed(joined, idx) {
+    const parts = joined.split('|');
+    if (idx >= 0 && idx < parts.length)
+        parts[idx] = USED;
+    return parts.join('|');
+}
+export function countRemaining(joined) {
+    if (!joined)
+        return 0;
+    return joined.split('|').filter((h) => h && h !== USED).length;
+}
+export function isBackupCodeFormat(s) {
+    return /^[A-Za-z0-9]{8}$/.test(s.trim());
+}
+//# sourceMappingURL=backup-codes.js.map

package/dist/lib/auth/backup-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup-codes.js","sourceRoot":"","sources":["../../../src/lib/auth/backup-codes.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7D,MAAM,KAAK,GAAG,EAAE,CAAC;AACjB,MAAM,MAAM,GAAG,CAAC,CAAC;AAEjB,MAAM,QAAQ,GAAG,iCAAiC,CAAC;AACnD,MAAM,IAAI,GAAG,QAAQ,CAAC;AAEtB,SAAS,UAAU;IACjB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC7C,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAqB;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACnB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI;YAAE,SAAS;QAC/B,IAAI,MAAM,cAAc,CAAC,CAAC,EAAE,UAAU,CAAC;YAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAGD,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,GAAW;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,MAAM;QAAE,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAGD,MAAM,UAAU,cAAc,CAAC,MAAqB;IAClD,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;AACjE,CAAC;AAGD,MAAM,UAAU,kBAAkB,CAAC,CAAS;IAC1C,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC"}

package/dist/lib/auth/gateway-client.js

@@ -0,0 +1,106 @@
+import { GATEWAY_URL } from '../../gateway/config.js';
+import { getOrCreateGatewayToken } from './gateway-token.js';
+function unreachableError(cause) {
+    return new Error(`Não consegui falar com o nio-gateway em ${GATEWAY_URL} — ele está rodando? ` +
+        `Rode \`nio-gateway\` numa outra janela antes de tentar de novo. (${cause.message ?? cause})`);
+}
+async function errorFromResponse(res) {
+    const body = (await res.json().catch(() => ({})));
+    return new Error(body.error ?? `gateway respondeu ${res.status}`);
+}
+async function baseHeaders() {
+    return { 'Content-Type': 'application/json', 'X-Nio-Gateway-Token': await getOrCreateGatewayToken() };
+}
+async function authedHeaders(token) {
+    return { ...(await baseHeaders()), Authorization: `Bearer ${token}` };
+}
+async function post(path, body, headers) {
+    let res;
+    try {
+        res = await fetch(`${GATEWAY_URL}${path}`, { method: 'POST', headers, body: JSON.stringify(body) });
+    }
+    catch (err) {
+        throw unreachableError(err);
+    }
+    if (!res.ok)
+        throw await errorFromResponse(res);
+    return (await res.json());
+}
+export async function gatewayLogin(name, password) {
+    let res;
+    try {
+        res = await fetch(`${GATEWAY_URL}/login`, {
+            method: 'POST',
+            headers: await baseHeaders(),
+            body: JSON.stringify({ name, password }),
+        });
+    }
+    catch (err) {
+        throw unreachableError(err);
+    }
+    if (res.status === 401)
+        return null;
+    if (!res.ok)
+        throw await errorFromResponse(res);
+    return (await res.json());
+}
+export async function gatewayVerify2fa(challengeId, code, type) {
+    let res;
+    try {
+        res = await fetch(`${GATEWAY_URL}/verify-2fa`, {
+            method: 'POST',
+            headers: await baseHeaders(),
+            body: JSON.stringify({ challengeId, code, type }),
+        });
+    }
+    catch (err) {
+        throw unreachableError(err);
+    }
+    const body = (await res.json().catch(() => ({})));
+    if (res.status === 401 || res.status === 429) {
+        return {
+            ok: false,
+            reason: String(body.reason ?? 'invalid'),
+            remaining: body.remaining,
+            requiresBackupCode: body.requiresBackupCode,
+        };
+    }
+    if (!res.ok)
+        throw new Error(body.error ?? `gateway respondeu ${res.status}`);
+    return { ok: true, ...body, backupCodesRemaining: body.backupCodesRemaining };
+}
+export async function gatewayLogout(sessionId) {
+    let res;
+    try {
+        res = await fetch(`${GATEWAY_URL}/logout`, {
+            method: 'POST',
+            headers: await baseHeaders(),
+            body: JSON.stringify({ sessionId }),
+        });
+    }
+    catch (err) {
+        throw unreachableError(err);
+    }
+    if (!res.ok)
+        throw await errorFromResponse(res);
+}
+export const gatewaySecurity = {
+    status: async (token) => {
+        let res;
+        try {
+            res = await fetch(`${GATEWAY_URL}/security/status`, { headers: await authedHeaders(token) });
+        }
+        catch (err) {
+            throw unreachableError(err);
+        }
+        if (!res.ok)
+            throw await errorFromResponse(res);
+        return (await res.json());
+    },
+    enable: async (token, phone) => post('/security/enable-2fa', { phone }, await authedHeaders(token)),
+    confirmEnable: async (token, challengeId, code, phone) => post('/security/confirm-2fa', { challengeId, code, phone }, await authedHeaders(token)),
+    challenge: async (token) => post('/security/challenge', {}, await authedHeaders(token)),
+    disable: async (token, challengeId, code, type) => post('/security/disable-2fa', { challengeId, code, type }, await authedHeaders(token)),
+    regenerateBackupCodes: async (token, challengeId, code, type) => post('/security/regenerate-backup-codes', { challengeId, code, type }, await authedHeaders(token)),
+};
+//# sourceMappingURL=gateway-client.js.map

package/dist/lib/auth/gateway-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-client.js","sourceRoot":"","sources":["../../../src/lib/auth/gateway-client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAyB7D,SAAS,gBAAgB,CAAC,KAAc;IACtC,OAAO,IAAI,KAAK,CACd,2CAA2C,WAAW,uBAAuB;QAC3E,oEAAqE,KAAe,CAAC,OAAO,IAAI,KAAK,GAAG,CAC3G,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,GAAa;IAC5C,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAc,CAAC;IAC/D,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,EAAE,EAAE,CAAC;AACxG,CAAC;AAGD,KAAK,UAAU,aAAa,CAAC,KAAa;IACxC,OAAO,EAAE,GAAG,CAAC,MAAM,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,IAAI,CAAI,IAAY,EAAE,IAAa,EAAE,OAA+B;IACjF,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,QAAgB;IAC/D,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,QAAQ,EAAE;YACxC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,WAAW,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;SACzC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;AAClD,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,IAAY,EACZ,IAAsB;IAEtB,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,aAAa,EAAE;YAC7C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,WAAW,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;IAC7E,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;YACxC,SAAS,EAAE,IAAI,CAAC,SAA+B;YAC/C,kBAAkB,EAAE,IAAI,CAAC,kBAAyC;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAE,IAAI,CAAC,KAAgB,IAAI,qBAAqB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAI,IAAkC,EAAE,oBAAoB,EAAE,IAAI,CAAC,oBAA8B,EAAE,CAAC;AACzH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,SAAiB;IACnD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,SAAS,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,MAAM,WAAW,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC;SACpC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAGD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE;QAC9B,IAAI,GAAa,CAAC;QAClB,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,WAAW,kBAAkB,EAAE,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiF,CAAC;IAC5G,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAa,EAAE,KAAa,EAAE,EAAE,CAC7C,IAAI,CAA0B,sBAAsB,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAE9F,aAAa,EAAE,KAAK,EAAE,KAAa,EAAE,WAAmB,EAAE,IAAY,EAAE,KAAa,EAAE,EAAE,CACvF,IAAI,CACF,uBAAuB,EACvB,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,EAC5B,MAAM,aAAa,CAAC,KAAK,CAAC,CAC3B;IAEH,SAAS,EAAE,KAAK,EAAE,KAAa,EAAE,EAAE,CACjC,IAAI,CAA0B,qBAAqB,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAEtF,OAAO,EAAE,KAAK,EAAE,KAAa,EAAE,WAAmB,EAAE,IAAY,EAAE,IAAsB,EAAE,EAAE,CAC1F,IAAI,CAAe,uBAAuB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;IAEtG,qBAAqB,EAAE,KAAK,EAAE,KAAa,EAAE,WAAmB,EAAE,IAAY,EAAE,IAAsB,EAAE,EAAE,CACxG,IAAI,CACF,mCAAmC,EACnC,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,EAC3B,MAAM,aAAa,CAAC,KAAK,CAAC,CAC3B;CACJ,CAAC"}

package/dist/lib/auth/gateway-token.js

@@ -0,0 +1,26 @@
+import { randomBytes } from 'node:crypto';
+import { mkdir, readFile, writeFile, chmod } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { homePath } from '../../brand.js';
+export const GATEWAY_TOKEN_FILE = homePath('gateway.token');
+export async function getOrCreateGatewayToken(file = GATEWAY_TOKEN_FILE) {
+    try {
+        const existing = (await readFile(file, 'utf8')).trim();
+        if (existing)
+            return existing;
+    }
+    catch (err) {
+        if (err.code !== 'ENOENT')
+            throw err;
+    }
+    const token = randomBytes(32).toString('hex');
+    await mkdir(dirname(file), { recursive: true });
+    await writeFile(file, token + '\n', 'utf8');
+    try {
+        await chmod(file, 0o600);
+    }
+    catch {
+    }
+    return token;
+}
+//# sourceMappingURL=gateway-token.js.map

package/dist/lib/auth/gateway-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-token.js","sourceRoot":"","sources":["../../../src/lib/auth/gateway-token.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;AAE5D,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAAe,kBAAkB;IAC7E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,GAAG,CAAC;IAClE,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/lib/auth/nio-config.js

@@ -0,0 +1,138 @@
+import { existsSync, readFileSync, writeFileSync, chmodSync, mkdirSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { brand, homePath } from '../../brand.js';
+import { closePool, ping } from '../../adapters/pg/client.js';
+import { input, password, confirm } from '../prompts.js';
+import { c, sym, box, cmd } from '../colors.js';
+export const CONFIG_FILE = homePath('config.env');
+const PG_URL = /^postgres(ql)?:\/\/.+/i;
+export function parseEnvFile(text) {
+    const out = {};
+    for (const raw of text.split('\n')) {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const eq = line.indexOf('=');
+        if (eq < 1)
+            continue;
+        out[line.slice(0, eq).trim()] = line.slice(eq + 1).trim();
+    }
+    return out;
+}
+export function readConfigFile(path = CONFIG_FILE) {
+    if (!existsSync(path))
+        return {};
+    try {
+        return parseEnvFile(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return {};
+    }
+}
+export function writeConfigFile(updates, path = CONFIG_FILE) {
+    const merged = { ...readConfigFile(path), ...updates };
+    const body = '# Config da NIO-CLI — gerado por `nio config setup`. Não commitar.\n' +
+        Object.entries(merged)
+            .filter(([, v]) => v != null && v !== '')
+            .map(([k, v]) => `${k}=${v}`)
+            .join('\n') +
+        '\n';
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, body, 'utf8');
+    try {
+        chmodSync(path, 0o600);
+    }
+    catch {
+    }
+}
+export function validateConfigShape(env) {
+    const problems = [];
+    const url = env.NIO_DATABASE_URL?.trim();
+    const jwt = env.JWT_SECRET?.trim();
+    if (!url) {
+        problems.push({ key: 'NIO_DATABASE_URL', issue: 'missing', hint: 'endereço do Postgres da equipe' });
+    }
+    else if (!PG_URL.test(url)) {
+        problems.push({ key: 'NIO_DATABASE_URL', issue: 'invalid', hint: 'precisa começar com postgres://' });
+    }
+    if (!jwt) {
+        problems.push({ key: 'JWT_SECRET', issue: 'missing', hint: 'segredo compartilhado do time (assina o login)' });
+    }
+    return problems;
+}
+export async function checkConfig() {
+    const problems = validateConfigShape(process.env);
+    if (!problems.some((p) => p.key === 'NIO_DATABASE_URL')) {
+        await closePool();
+        if (!(await ping())) {
+            problems.push({
+                key: 'NIO_DATABASE_URL',
+                issue: 'unreachable',
+                hint: 'não conectou — confira host/porta/credencial e a rede/VPN',
+            });
+        }
+    }
+    return problems;
+}
+async function promptWizard() {
+    const file = readConfigFile();
+    const url = (await input({
+        message: 'NIO_DATABASE_URL  (postgres://user:senha@host:5432/nio_cli)',
+        default: process.env.NIO_DATABASE_URL ?? file.NIO_DATABASE_URL,
+        validate: (v) => PG_URL.test(v.trim()) || 'precisa começar com postgres://',
+    })).trim();
+    const ssl = await confirm({ message: 'O banco exige TLS/SSL? (gerenciado/nuvem)', default: false });
+    const jwt = (await password({
+        message: 'JWT_SECRET  (segredo compartilhado do time)',
+        mask: '*',
+        validate: (v) => v.trim().length >= 8 || 'muito curto — use o valor real do time',
+    })).trim();
+    return { url, ssl, jwt };
+}
+export async function runConfigWizard() {
+    console.log(box(`${c.bold('Configuração da NIO-CLI')}\n` +
+        `${c.dim('Cole os valores que o time te passou — vão pra')} ${cmd(CONFIG_FILE)}\n` +
+        `${c.dim('(só nesta máquina, chmod 600, nunca commitado).')}`, { borderColor: 'cyan', title: 'nio config' }));
+    const { url, ssl, jwt } = await promptWizard();
+    await closePool();
+    process.env.NIO_DATABASE_URL = url;
+    process.env.NIO_DATABASE_SSL = ssl ? 'true' : '';
+    process.env.JWT_SECRET = jwt;
+    process.stdout.write(c.dim('  testando a conexão com o Postgres… '));
+    if (!(await ping())) {
+        console.log(c.red(sym.err));
+        console.error(`  ${c.red('Não conectei.')} Confira o endereço/credencial e a rede/VPN, e rode de novo.`);
+        return false;
+    }
+    console.log(c.green(sym.ok));
+    const updates = { NIO_DATABASE_URL: url, JWT_SECRET: jwt };
+    if (ssl)
+        updates.NIO_DATABASE_SSL = 'true';
+    writeConfigFile(updates);
+    console.log(`  ${c.green(sym.ok)} salvo em ${cmd(CONFIG_FILE)}`);
+    return true;
+}
+function problemsBox(problems) {
+    const label = { missing: 'faltando', invalid: 'inválido', unreachable: 'sem conexão' };
+    return box(`${c.yellow(sym.warn)} ${c.bold('Config incompleta ou inválida.')}\n\n` +
+        problems
+            .map((p) => `${c.red(sym.err)} ${c.bold(p.key)} ${c.dim('— ' + label[p.issue])}\n   ${c.dim(p.hint)}`)
+            .join('\n') +
+        `\n\n${c.dim('Rode')} ${cmd(`${brand.name} config setup`)} ${c.dim('ou crie')} ${cmd(CONFIG_FILE)} ${c.dim('com:')}\n` +
+        `   ${c.dim('NIO_DATABASE_URL=postgres://user:senha@host:5432/nio_cli')}\n` +
+        `   ${c.dim('JWT_SECRET=<segredo-do-time>')}`, { borderColor: 'yellow', title: 'Configuração necessária' });
+}
+export async function ensureConfig(opts) {
+    let problems = await checkConfig();
+    if (problems.length === 0)
+        return;
+    const fixable = problems.some((p) => p.issue !== 'unreachable');
+    if (opts.interactive && process.stdin.isTTY && fixable && (await runConfigWizard())) {
+        problems = await checkConfig();
+        if (problems.length === 0)
+            return;
+    }
+    console.error(problemsBox(problems));
+    process.exit(1);
+}
+//# sourceMappingURL=nio-config.js.map

package/dist/lib/auth/nio-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nio-config.js","sourceRoot":"","sources":["../../../src/lib/auth/nio-config.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACxF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEhD,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,GAAG,wBAAwB,CAAC;AASxC,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC;YAAE,SAAS;QACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI,GAAG,WAAW;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,eAAe,CAAC,OAA+B,EAAE,IAAI,GAAG,WAAW;IACjF,MAAM,MAAM,GAAG,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;IACvD,MAAM,IAAI,GACR,sEAAsE;QACtE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC;QACb,IAAI,CAAC;IACP,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;AACH,CAAC;AAGD,MAAM,UAAU,mBAAmB,CAAC,GAAsB;IACxD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAEnC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC;IACvG,CAAC;SAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,gDAAgD,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,kBAAkB,CAAC,EAAE,CAAC;QACxD,MAAM,SAAS,EAAE,CAAC;QAClB,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;YACpB,QAAQ,CAAC,IAAI,CAAC;gBACZ,GAAG,EAAE,kBAAkB;gBACvB,KAAK,EAAE,aAAa;gBACpB,IAAI,EAAE,2DAA2D;aAClE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AASD,KAAK,UAAU,YAAY;IACzB,MAAM,IAAI,GAAG,cAAc,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,CACV,MAAM,KAAK,CAAC;QACV,OAAO,EAAE,6DAA6D;QACtE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,gBAAgB;QAC9D,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,iCAAiC;KAC5E,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACpG,MAAM,GAAG,GAAG,CACV,MAAM,QAAQ,CAAC;QACb,OAAO,EAAE,6CAA6C;QACtD,IAAI,EAAE,GAAG;QACT,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,wCAAwC;KAClF,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;IACT,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC3B,CAAC;AAGD,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,OAAO,CAAC,GAAG,CACT,GAAG,CACD,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI;QACtC,GAAG,CAAC,CAAC,GAAG,CAAC,gDAAgD,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI;QAClF,GAAG,CAAC,CAAC,GAAG,CAAC,iDAAiD,CAAC,EAAE,EAC/D,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,CAC7C,CACF,CAAC;IACF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;IAE/C,MAAM,SAAS,EAAE,CAAC;IAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,CAAC;IAE7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC,CAAC;IACrE,IAAI,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACpB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,8DAA8D,CAAC,CAAC;QACzG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE7B,MAAM,OAAO,GAA2B,EAAE,gBAAgB,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;IACnF,IAAI,GAAG;QAAE,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAC;IAC3C,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,QAAyB;IAC5C,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC;IACvF,OAAO,GAAG,CACR,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,MAAM;QACrE,QAAQ;aACL,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;aACrG,IAAI,CAAC,IAAI,CAAC;QACb,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI;QACtH,MAAM,CAAC,CAAC,GAAG,CAAC,0DAA0D,CAAC,IAAI;QAC3E,MAAM,CAAC,CAAC,GAAG,CAAC,8BAA8B,CAAC,EAAE,EAC/C,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAC5D,CAAC;AACJ,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAA8B;IAC/D,IAAI,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;IACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAElC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,MAAM,eAAe,EAAE,CAAC,EAAE,CAAC;QACpF,QAAQ,GAAG,MAAM,WAAW,EAAE,CAAC;QAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;IACpC,CAAC;IAED,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/lib/auth/otp.js

@@ -0,0 +1,23 @@
+import { createHmac, randomInt, timingSafeEqual } from 'node:crypto';
+import { getJwtSecret } from '../../gateway/config.js';
+export function generateOtp() {
+    return String(randomInt(0, 1_000_000)).padStart(6, '0');
+}
+export function hashOtp(code, secret = getJwtSecret()) {
+    return createHmac('sha256', secret).update(code).digest('hex');
+}
+export function verifyOtp(code, hash, secret) {
+    const expected = Buffer.from(hashOtp(code, secret ?? getJwtSecret()), 'hex');
+    let actual;
+    try {
+        actual = Buffer.from(hash, 'hex');
+    }
+    catch {
+        return false;
+    }
+    return expected.length === actual.length && timingSafeEqual(expected, actual);
+}
+export function isOtpFormat(s) {
+    return /^\d{6}$/.test(s.trim());
+}
+//# sourceMappingURL=otp.js.map

package/dist/lib/auth/otp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otp.js","sourceRoot":"","sources":["../../../src/lib/auth/otp.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGvD,MAAM,UAAU,WAAW;IACzB,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAGD,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,SAAiB,YAAY,EAAE;IACnE,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACjE,CAAC;AAGD,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,IAAY,EAAE,MAAe;IACnE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,YAAY,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7E,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAChF,CAAC;AAGD,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC"}

package/dist/lib/auth/password.js

@@ -0,0 +1,23 @@
+import { hash, verify } from '@node-rs/argon2';
+const ARGON2ID = 2;
+const OPTIONS = {
+    algorithm: ARGON2ID,
+    memoryCost: 19_456,
+    timeCost: 2,
+    parallelism: 1,
+};
+export function hashPassword(plain) {
+    if (plain.length === 0) {
+        return Promise.reject(new Error('Senha vazia não pode ser hasheada.'));
+    }
+    return hash(plain, OPTIONS);
+}
+export async function verifyPassword(storedHash, plain) {
+    try {
+        return await verify(storedHash, plain);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=password.js.map

package/dist/lib/auth/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../../src/lib/auth/password.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAK/C,MAAM,QAAQ,GAAG,CAAc,CAAC;AAEhC,MAAM,OAAO,GAAG;IACd,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,CAAC;IACX,WAAW,EAAE,CAAC;CACN,CAAC;AAGX,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AAC9B,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,UAAkB,EAAE,KAAa;IACpE,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/lib/auth/session-store.js

@@ -0,0 +1,49 @@
+import { mkdir, readFile, writeFile, rm, chmod } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { homePath } from '../../brand.js';
+export const SESSION_FILE = homePath('session.json');
+export function parseStoredSession(raw) {
+    if (!raw || typeof raw !== 'object')
+        return null;
+    const s = raw;
+    if (typeof s.userId === 'number' &&
+        typeof s.name === 'string' &&
+        typeof s.token === 'string' &&
+        typeof s.sessionId === 'string' &&
+        typeof s.loggedInAt === 'string' &&
+        typeof s.expiresAt === 'string') {
+        return {
+            userId: s.userId,
+            name: s.name,
+            token: s.token,
+            sessionId: s.sessionId,
+            loggedInAt: s.loggedInAt,
+            expiresAt: s.expiresAt,
+        };
+    }
+    return null;
+}
+export async function loadSession(file = SESSION_FILE) {
+    try {
+        const raw = await readFile(file, 'utf8');
+        return parseStoredSession(JSON.parse(raw));
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+export async function saveSession(session, file = SESSION_FILE) {
+    await mkdir(dirname(file), { recursive: true });
+    await writeFile(file, JSON.stringify(session, null, 2) + '\n', 'utf8');
+    try {
+        await chmod(file, 0o600);
+    }
+    catch {
+    }
+}
+export async function clearSession(file = SESSION_FILE) {
+    await rm(file, { force: true });
+}
+//# sourceMappingURL=session-store.js.map

package/dist/lib/auth/session-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-store.js","sourceRoot":"","sources":["../../../src/lib/auth/session-store.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,MAAM,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;AAYrD,MAAM,UAAU,kBAAkB,CAAC,GAAY;IAC7C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IACE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,EAC/B,CAAC;QACD,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,UAAU,EAAE,CAAC,CAAC,UAAU;YACxB,SAAS,EAAE,CAAC,CAAC,SAAS;SACvB,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAe,YAAY;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAClE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAAsB,EAAE,OAAe,YAAY;IACnF,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;IAET,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAe,YAAY;IAC5D,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC"}

package/dist/lib/clients/autopull.js

@@ -0,0 +1,8 @@
+import { opencodeTarget } from './targets.js';
+export function shouldRunAutoPull(client, autoPullFlag) {
+    return autoPullFlag !== '0' && autoPullFlag !== 'false';
+}
+export function pickProvisionTarget(client) {
+    return opencodeTarget;
+}
+//# sourceMappingURL=autopull.js.map

package/dist/lib/clients/autopull.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autopull.js","sourceRoot":"","sources":["../../../src/lib/clients/autopull.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAwB,MAAM,cAAc,CAAC;AAGpE,MAAM,UAAU,iBAAiB,CAAC,MAA0B,EAAE,YAAgC;IAC5F,OAAO,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,OAAO,CAAC;AAC1D,CAAC;AAID,MAAM,UAAU,mBAAmB,CAAC,MAA0B;IAC5D,OAAO,cAAc,CAAC;AACxB,CAAC"}