@nocobase/app-cli-client 0.0.0-stage → 0.1.0-beta.1

package/dist/login.js

@@ -0,0 +1,232 @@
+import { createInterface } from 'node:readline/promises';
+import { Flags } from '@oclif/core';
+import { EXIT_CODES } from '@nocobase/agent-protocol';
+import { authRouteOf, manifestPathOf } from "./config.js";
+import { CliManifestSchema } from "./dynamic/manifest.js";
+import { loadDynamic } from "./dynamic/index.js";
+import { serverPath } from "./dynamic/session.js";
+import { AppCommand, UsageError } from "./lib/command.js";
+import { credentialHeaders, DEFAULT_PROFILE, envValue, listProfiles, normalizeServer, saveUserConfig, userClient, } from "./lib/credentials.js";
+import { cliUserAgent, openBrowser, pollDeviceAuthorization, startDeviceAuthorization, } from "./lib/device.js";
+import { CliCommandError } from "./lib/envelope.js";
+import { globalFlags } from "./lib/globals.js";
+import { AppApiError } from "./lib/http.js";
+import { askUpdateHint, printUpdateHint } from "./lib/update-hint.js";
+import { describeStorage } from "./lib/secrets/index.js";
+async function readStdin() {
+    const chunks = [];
+    for await (const chunk of process.stdin)
+        chunks.push(chunk);
+    return Buffer.concat(chunks).toString('utf8').trim();
+}
+/** A user code in two halves, `WDJB-MJHT`, as device sign-in pages show it; the server ignores the hyphen. */
+function displayUserCode(code) {
+    return code.length === 8 ? `${code.slice(0, 4)}-${code.slice(4)}` : code;
+}
+const interactive = () => Boolean(process.stdin.isTTY) && Boolean(process.stderr.isTTY);
+async function ask(question) {
+    const lines = createInterface({
+        input: process.stdin,
+        output: process.stderr,
+    });
+    try {
+        return (await lines.question(question)).trim();
+    }
+    finally {
+        lines.close();
+    }
+}
+/** `<bin> login`: signs in through the browser, or stores an API key given on standard input. */
+export function loginCommand(app) {
+    const example = app.exampleServer ?? 'https://app.example.com';
+    const envServer = app.envPrefix === undefined ? undefined : `${app.envPrefix}_SERVER`;
+    return class Login extends AppCommand {
+        static summary = `Sign in to a ${app.displayName} server.`;
+        static description = `Opens ${app.displayName} in the browser, where you approve the code it shows; the CLI then holds a session of ` +
+            `its own, renewed while you use it, which it keeps in the system keychain (the macOS Keychain, the Secret ` +
+            `Service on Linux or the Windows Credential Manager; where there is none, ~/${app.stateDir}/config.json, 0600, ` +
+            `with a warning). Without a browser, open the address it prints anywhere you are signed in. For CI, create an ` +
+            `API key in the application and pass it on standard input with --api-key-stdin` +
+            (app.envPrefix === undefined
+                ? '.'
+                : `, or skip signing in: set ${app.envPrefix}_SERVER and ${app.envPrefix}_API_KEY.`) +
+            ` Each server you sign in to is a profile (--profile <name>, "${DEFAULT_PROFILE}" at first).`;
+        static examples = [
+            `<%= config.bin %> login --server ${example}`,
+            `<%= config.bin %> login --server ${example} --profile staging`,
+            `<%= config.bin %> login --server ${example} --api-key-stdin < key.txt`,
+        ];
+        static flags = {
+            server: Flags.string({
+                description: `The ${app.displayName} server URL; the profile's own when it has one${envServer ? `, or ${envServer}` : ''}.`,
+            }),
+            'api-key-stdin': Flags.boolean({
+                description: 'Read an API key from standard input instead of signing in through the browser.',
+            }),
+            token: Flags.string({
+                description: 'An API key (prefer --api-key-stdin, which keeps it out of the shell history).',
+                exclusive: ['api-key-stdin'],
+            }),
+            browser: Flags.boolean({
+                description: 'Open the browser to approve the sign-in; --no-browser prints the address instead.',
+                allowNo: true,
+                default: true,
+            }),
+            'skip-verify': Flags.boolean({
+                description: 'Store an API key without checking it against the server.',
+            }),
+        };
+        async serverOf(given) {
+            const profile = globalFlags().profile;
+            const known = (await listProfiles({ paths: this.paths, config: app, profile })).find((entry) => entry.current);
+            const server = given ??
+                envValue(app, process.env, 'SERVER') ??
+                (known && (profile === undefined || known.name === profile)
+                    ? known.server
+                    : undefined) ??
+                (interactive()
+                    ? await ask(`${app.displayName} server URL (such as ${example}): `)
+                    : undefined);
+            if (!server)
+                throw new CliCommandError('MISSING_ARGUMENT', `Which ${app.displayName} server? Pass --server.`, {
+                    exit: EXIT_CODES.validation,
+                    suggestions: [
+                        {
+                            message: `Sign in with \`${app.bin} login --server ${example}\`.`,
+                        },
+                    ],
+                });
+            try {
+                return normalizeServer(server);
+            }
+            catch {
+                throw new UsageError(`Not a server URL: ${server}`);
+            }
+        }
+        async run() {
+            const { flags } = await this.parse(Login);
+            const server = await this.serverOf(flags.server);
+            const profile = globalFlags().profile;
+            const byKey = flags['api-key-stdin'] === true || flags.token !== undefined;
+            if (!byKey && app.auth === undefined)
+                throw new UsageError(`${app.displayName} offers no browser sign-in here: pass an API key with --api-key-stdin.`);
+            let key;
+            let identity;
+            if (byKey) {
+                key = flags['api-key-stdin'] ? await readStdin() : (flags.token ?? '');
+                if (key === '')
+                    throw new UsageError('Pass the API key on standard input with --api-key-stdin.');
+                if (!flags['skip-verify'])
+                    identity = await this.verify(server, { key, kind: 'apiKey' });
+            }
+            else {
+                key = (await this.device(server, !flags.browser)).token;
+                identity = await this.verify(server, { key, kind: 'session' });
+            }
+            const kind = byKey ? 'apiKey' : 'session';
+            const saved = await saveUserConfig(server, key, {
+                paths: this.paths,
+                config: app,
+                profile,
+                kind,
+            });
+            if (saved.warning !== undefined)
+                this.warn(saved.warning);
+            const hint = askUpdateHint({
+                server,
+                headers: credentialHeaders({ key, kind }),
+            });
+            // Fetches the commands now, so completion and `docs` have them before the first command runs.
+            await loadDynamic().catch(() => undefined);
+            const where = describeStorage(saved.storage, this.paths.userConfig);
+            this.log(`Signed in to ${server}${identity ? ` as ${identity.displayName}` : ''} (profile ${saved.profile})` +
+                `; the ${byKey ? 'key' : 'session'} is in ${where}.`);
+            const result = {
+                server,
+                profile: saved.profile,
+                storage: saved.storage,
+                method: byKey ? 'api-key' : 'browser',
+                ...(identity ?? {}),
+            };
+            await printUpdateHint(hint);
+            return result;
+        }
+        /** Checks a credential against the manifest; only an authentication failure is fatal. */
+        async verify(server, credential) {
+            try {
+                const { identity } = await userClient({
+                    server,
+                    ...credential,
+                }).get(manifestPathOf(app), CliManifestSchema);
+                return identity;
+            }
+            catch (error) {
+                if (!(error instanceof AppApiError) ||
+                    error.status === 401 ||
+                    error.status === 403 ||
+                    error.status === 0)
+                    throw error;
+                this.warn(`Could not confirm the ${credential.kind === 'session' ? 'session' : 'key'} (${error.reason}); stored it anyway.`);
+                return undefined;
+            }
+        }
+        async device(server, noBrowser) {
+            const auth = app.auth;
+            // Kept with the session the server creates, so the person can tell this machine's sign-in from others.
+            const options = { userAgent: cliUserAgent(app) };
+            let started;
+            try {
+                started = await startDeviceAuthorization(server, auth, options);
+            }
+            catch (error) {
+                if (error instanceof AppApiError &&
+                    (error.status === 404 || error.reason === 'INVALID_CLIENT'))
+                    throw new CliCommandError('BROWSER_SIGN_IN_UNAVAILABLE', error.status === 404
+                        ? `${server} offers no browser sign-in (${serverPath(server, authRouteOf(auth, '/device/code'))} answered 404).`
+                        : `${server} does not accept ${app.bin} for browser sign-in (invalid_client).`, {
+                        exit: EXIT_CODES.notFound,
+                        suggestions: [
+                            {
+                                message: `Create an API key in ${app.displayName} and pass it: \`${app.bin} login --server ${server} --api-key-stdin < key.txt\`.`,
+                            },
+                        ],
+                    });
+                throw error;
+            }
+            // The code and the address go to stderr, so `--json` keeps stdout to its one document.
+            const say = (line) => process.stderr.write(`${line}\n`);
+            say(`Your one-time code: ${displayUserCode(started.userCode)}`);
+            const opened = !noBrowser &&
+                interactive() &&
+                openBrowser(started.verificationUriComplete);
+            if (opened)
+                say(`Opened the sign-in page in your browser; check the code there and approve. If it did not open, visit ${started.verificationUriComplete}`);
+            else
+                say(`On any device where you are signed in, open ${started.verificationUri} and enter the code, or open ${started.verificationUriComplete}`);
+            say(`Waiting (the code expires in ${Math.round(started.expiresIn / 60)} minutes)…`);
+            try {
+                return await pollDeviceAuthorization(server, auth, started, options);
+            }
+            catch (error) {
+                if (error instanceof AppApiError && error.reason === 'ACCESS_DENIED')
+                    throw new CliCommandError('ACCESS_DENIED', 'The sign-in was declined in the browser; nothing was stored.', { exit: EXIT_CODES.auth });
+                if (error instanceof AppApiError &&
+                    (error.reason === 'EXPIRED_TOKEN' || error.reason === 'INVALID_GRANT'))
+                    throw new CliCommandError('EXPIRED_TOKEN', 'The code expired before it was approved; nothing was stored.', {
+                        exit: EXIT_CODES.auth,
+                        suggestions: [
+                            {
+                                message: 'Sign in again.',
+                                run: {
+                                    command: app.bin,
+                                    args: ['login', '--server', server],
+                                },
+                            },
+                        ],
+                    });
+                throw error;
+            }
+        }
+    };
+}
+//# sourceMappingURL=login.js.map

package/dist/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../src/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAEzD,OAAO,EAAE,KAAK,EAAgB,MAAM,aAAa,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAqB,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,WAAW,EAEX,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAmB,MAAM,wBAAwB,CAAC;AAE1E,KAAK,UAAU,SAAS;IACtB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;AACvD,CAAC;AAED,8GAA8G;AAC9G,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AAED,MAAM,WAAW,GAAG,GAAY,EAAE,CAChC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEhE,KAAK,UAAU,GAAG,CAAC,QAAgB;IACjC,MAAM,KAAK,GAAG,eAAe,CAAC;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IACH,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;AACH,CAAC;AAYD,iGAAiG;AACjG,MAAM,UAAU,YAAY,CAAC,GAAiB;IAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,yBAAyB,CAAC;IAC/D,MAAM,SAAS,GACb,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,SAAS,SAAS,CAAC;IACtE,OAAO,MAAM,KAAM,SAAQ,UAAU;QACnC,MAAM,CAAU,OAAO,GAAG,gBAAgB,GAAG,CAAC,WAAW,UAAU,CAAC;QACpE,MAAM,CAAU,WAAW,GACzB,SAAS,GAAG,CAAC,WAAW,wFAAwF;YAChH,2GAA2G;YAC3G,8EAA8E,GAAG,CAAC,QAAQ,sBAAsB;YAChH,+GAA+G;YAC/G,+EAA+E;YAC/E,CAAC,GAAG,CAAC,SAAS,KAAK,SAAS;gBAC1B,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,6BAA6B,GAAG,CAAC,SAAS,eAAe,GAAG,CAAC,SAAS,WAAW,CAAC;YACtF,gEAAgE,eAAe,cAAc,CAAC;QAChG,MAAM,CAAU,QAAQ,GAAG;YACzB,oCAAoC,OAAO,EAAE;YAC7C,oCAAoC,OAAO,oBAAoB;YAC/D,oCAAoC,OAAO,4BAA4B;SACxE,CAAC;QACF,MAAM,CAAU,KAAK,GAAG;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;gBACnB,WAAW,EAAE,OAAO,GAAG,CAAC,WAAW,iDAAiD,SAAS,CAAC,CAAC,CAAC,QAAQ,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG;aAC5H,CAAC;YACF,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC;gBAC7B,WAAW,EACT,gFAAgF;aACnF,CAAC;YACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;gBAClB,WAAW,EACT,+EAA+E;gBACjF,SAAS,EAAE,CAAC,eAAe,CAAC;aAC7B,CAAC;YACF,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC;gBACrB,WAAW,EACT,mFAAmF;gBACrF,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,IAAI;aACd,CAAC;YACF,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC;gBAC3B,WAAW,EAAE,0DAA0D;aACxE,CAAC;SACH,CAAC;QAEM,KAAK,CAAC,QAAQ,CAAC,KAAyB;YAC9C,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC,OAAO,CAAC;YACtC,MAAM,KAAK,GAAG,CACZ,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAChE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,MAAM,GACV,KAAK;gBACL,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;gBACpC,CAAC,KAAK,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;oBACzD,CAAC,CAAC,KAAK,CAAC,MAAM;oBACd,CAAC,CAAC,SAAS,CAAC;gBACd,CAAC,WAAW,EAAE;oBACZ,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,WAAW,wBAAwB,OAAO,KAAK,CAAC;oBACnE,CAAC,CAAC,SAAS,CAAC,CAAC;YACjB,IAAI,CAAC,MAAM;gBACT,MAAM,IAAI,eAAe,CACvB,kBAAkB,EAClB,SAAS,GAAG,CAAC,WAAW,yBAAyB,EACjD;oBACE,IAAI,EAAE,UAAU,CAAC,UAAU;oBAC3B,WAAW,EAAE;wBACX;4BACE,OAAO,EAAE,kBAAkB,GAAG,CAAC,GAAG,mBAAmB,OAAO,KAAK;yBAClE;qBACF;iBACF,CACF,CAAC;YACJ,IAAI,CAAC;gBACH,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;YACjC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,UAAU,CAAC,qBAAqB,MAAM,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QAED,KAAK,CAAC,GAAG;YACP,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC,OAAO,CAAC;YACtC,MAAM,KAAK,GACT,KAAK,CAAC,eAAe,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC;YAC/D,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;gBAClC,MAAM,IAAI,UAAU,CAClB,GAAG,GAAG,CAAC,WAAW,wEAAwE,CAC3F,CAAC;YACJ,IAAI,GAAW,CAAC;YAChB,IAAI,QAA6D,CAAC;YAClE,IAAI,KAAK,EAAE,CAAC;gBACV,GAAG,GAAG,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;gBACvE,IAAI,GAAG,KAAK,EAAE;oBACZ,MAAM,IAAI,UAAU,CAClB,0DAA0D,CAC3D,CAAC;gBACJ,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC;oBACvB,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAClE,CAAC;iBAAM,CAAC;gBACN,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;gBACxD,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE;gBAC9C,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,GAAG;gBACX,OAAO;gBACP,IAAI;aACL,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,aAAa,CAAC;gBACzB,MAAM;gBACN,OAAO,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;aAC1C,CAAC,CAAC;YACH,8FAA8F;YAC9F,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACpE,IAAI,CAAC,GAAG,CACN,gBAAgB,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,KAAK,CAAC,OAAO,GAAG;gBACjG,SAAS,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,UAAU,KAAK,GAAG,CACvD,CAAC;YACF,MAAM,MAAM,GAAgB;gBAC1B,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;gBACrC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC;aACpB,CAAC;YACF,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QAED,yFAAyF;QACjF,KAAK,CAAC,MAAM,CAClB,MAAc,EACd,UAAuD;YAEvD,IAAI,CAAC;gBACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,UAAU,CAAC;oBACpC,MAAM;oBACN,GAAG,UAAU;iBACd,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;gBAC/C,OAAO,QAAQ,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;oBAC/B,KAAK,CAAC,MAAM,KAAK,GAAG;oBACpB,KAAK,CAAC,MAAM,KAAK,GAAG;oBACpB,KAAK,CAAC,MAAM,KAAK,CAAC;oBAElB,MAAM,KAAK,CAAC;gBACd,IAAI,CAAC,IAAI,CACP,yBAAyB,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,MAAM,sBAAsB,CAClH,CAAC;gBACF,OAAO,SAAS,CAAC;YACnB,CAAC;QACH,CAAC;QAEO,KAAK,CAAC,MAAM,CAClB,MAAc,EACd,SAAkB;YAElB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAK,CAAC;YACvB,uGAAuG;YACvG,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC;YACZ,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IACE,KAAK,YAAY,WAAW;oBAC5B,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC;oBAE3D,MAAM,IAAI,eAAe,CACvB,6BAA6B,EAC7B,KAAK,CAAC,MAAM,KAAK,GAAG;wBAClB,CAAC,CAAC,GAAG,MAAM,+BAA+B,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,iBAAiB;wBAChH,CAAC,CAAC,GAAG,MAAM,oBAAoB,GAAG,CAAC,GAAG,wCAAwC,EAChF;wBACE,IAAI,EAAE,UAAU,CAAC,QAAQ;wBACzB,WAAW,EAAE;4BACX;gCACE,OAAO,EAAE,wBAAwB,GAAG,CAAC,WAAW,mBAAmB,GAAG,CAAC,GAAG,mBAAmB,MAAM,+BAA+B;6BACnI;yBACF;qBACF,CACF,CAAC;gBACJ,MAAM,KAAK,CAAC;YACd,CAAC;YACD,uFAAuF;YACvF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;YAChE,GAAG,CAAC,uBAAuB,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GACV,CAAC,SAAS;gBACV,WAAW,EAAE;gBACb,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;YAC/C,IAAI,MAAM;gBACR,GAAG,CACD,wGAAwG,OAAO,CAAC,uBAAuB,EAAE,CAC1I,CAAC;;gBAEF,GAAG,CACD,+CAA+C,OAAO,CAAC,eAAe,gCAAgC,OAAO,CAAC,uBAAuB,EAAE,CACxI,CAAC;YACJ,GAAG,CACD,gCAAgC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,GAAG,EAAE,CAAC,YAAY,CAC/E,CAAC;YACF,IAAI,CAAC;gBACH,OAAO,MAAM,uBAAuB,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,WAAW,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe;oBAClE,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,8DAA8D,EAC9D,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAC1B,CAAC;gBACJ,IACE,KAAK,YAAY,WAAW;oBAC5B,CAAC,KAAK,CAAC,MAAM,KAAK,eAAe,IAAI,KAAK,CAAC,MAAM,KAAK,eAAe,CAAC;oBAEtE,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,8DAA8D,EAC9D;wBACE,IAAI,EAAE,UAAU,CAAC,IAAI;wBACrB,WAAW,EAAE;4BACX;gCACE,OAAO,EAAE,gBAAgB;gCACzB,GAAG,EAAE;oCACH,OAAO,EAAE,GAAG,CAAC,GAAG;oCAChB,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC;iCACpC;6BACF;yBACF;qBACF,CACF,CAAC;gBACJ,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/logout.d.ts

@@ -0,0 +1,13 @@
+import type { Command } from '@oclif/core';
+import { type AppCliConfig } from './config.ts';
+/** What `logout` answers. */
+export interface LogoutResult {
+    readonly profile: string;
+    readonly server: string;
+    /** Whether the server signed the session out; false for an API key, or when the server could not be reached. */
+    readonly revoked: boolean;
+    readonly dryRun?: boolean;
+}
+/** `<bin> logout`: forgets a profile's credential here and, for a session a browser sign-in gave, signs it out there. */
+export declare function logoutCommand(app: AppCliConfig): Command.Class;
+//# sourceMappingURL=logout.d.ts.map

package/dist/logout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.d.ts","sourceRoot":"","sources":["../src/logout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAY7D,6BAA6B;AAC7B,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gHAAgH;IAChH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,yHAAyH;AACzH,wBAAgB,aAAa,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,KAAK,CAmE9D"}

package/dist/logout.js

@@ -0,0 +1,56 @@
+import { authRouteOf } from "./config.js";
+import { serverPath } from "./dynamic/session.js";
+import { AppCommand, UsageError } from "./lib/command.js";
+import { envValue, readUserConfig, removeProfile, userClient, } from "./lib/credentials.js";
+import { globalFlags } from "./lib/globals.js";
+import { AppApiError } from "./lib/http.js";
+/** `<bin> logout`: forgets a profile's credential here and, for a session a browser sign-in gave, signs it out there. */
+export function logoutCommand(app) {
+    return class Logout extends AppCommand {
+        static summary = 'Sign out: forget the credential here and end the session on the server.';
+        static description = 'Removes the profile (the current one, or --profile) and its credential from the keychain or config.json. The ' +
+            `session \`${app.bin} login\` received in the browser is signed out on the server too; an API key passed with ` +
+            '--api-key-stdin stays valid there, to be revoked where it was created.';
+        static supportsDryRun = true;
+        static examples = [
+            '<%= config.bin %> logout',
+            '<%= config.bin %> logout --profile staging --dry-run',
+        ];
+        async run() {
+            await this.parse(Logout);
+            if (envValue(app, process.env, 'API_KEY') !== undefined)
+                throw new UsageError(`${app.envPrefix}_API_KEY is set: the CLI acts with it, not with a profile. Unset it to sign out.`);
+            const user = await readUserConfig({
+                paths: this.paths,
+                config: app,
+                profile: globalFlags().profile,
+            }).catch(() => undefined);
+            const profile = user?.profile ?? globalFlags().profile;
+            if (user === undefined || profile === undefined)
+                throw new UsageError(`Not signed in${profile ? ` as profile ${profile}` : ''}; nothing to sign out of.`);
+            const session = user.kind === 'session';
+            if (this.dryRun) {
+                this.log(`Would forget profile ${profile} (${user.server})${session ? ' and sign its session out on the server' : ''}.`);
+                return { profile, server: user.server, revoked: false, dryRun: true };
+            }
+            let revoked = false;
+            if (session)
+                try {
+                    await userClient(user).request('POST', serverPath(user.server, authRouteOf(app.auth, '/sign-out')), {});
+                    revoked = true;
+                }
+                catch (error) {
+                    // 401 or 403: the session is no longer valid there anyway.
+                    if (!(error instanceof AppApiError) ||
+                        (error.status !== 401 && error.status !== 403))
+                        this.warn(`Could not sign the session out on ${user.server} (${error instanceof Error ? error.message : String(error)}); forgot it here.`);
+                }
+            else
+                this.warn(`The API key stays valid on ${user.server}: revoke it where it was created.`);
+            await removeProfile(profile, { paths: this.paths, config: app });
+            this.log(`Signed out of ${user.server} (profile ${profile})${revoked ? '; the session is ended' : ''}.`);
+            return { profile, server: user.server, revoked };
+        }
+    };
+}
+//# sourceMappingURL=logout.js.map

package/dist/logout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logout.js","sourceRoot":"","sources":["../src/logout.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EACL,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,GACX,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAW5C,yHAAyH;AACzH,MAAM,UAAU,aAAa,CAAC,GAAiB;IAC7C,OAAO,MAAM,MAAO,SAAQ,UAAU;QACpC,MAAM,CAAU,OAAO,GACrB,yEAAyE,CAAC;QAC5E,MAAM,CAAU,WAAW,GACzB,+GAA+G;YAC/G,aAAa,GAAG,CAAC,GAAG,2FAA2F;YAC/G,wEAAwE,CAAC;QAC3E,MAAM,CAAU,cAAc,GAAG,IAAI,CAAC;QACtC,MAAM,CAAU,QAAQ,GAAG;YACzB,0BAA0B;YAC1B,sDAAsD;SACvD,CAAC;QAEF,KAAK,CAAC,GAAG;YACP,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,KAAK,SAAS;gBACrD,MAAM,IAAI,UAAU,CAClB,GAAG,GAAG,CAAC,SAAS,kFAAkF,CACnG,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC;gBAChC,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,MAAM,EAAE,GAAG;gBACX,OAAO,EAAE,WAAW,EAAE,CAAC,OAAO;aAC/B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1B,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,WAAW,EAAE,CAAC,OAAO,CAAC;YACvD,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;gBAC7C,MAAM,IAAI,UAAU,CAClB,gBAAgB,OAAO,CAAC,CAAC,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,2BAA2B,CACnF,CAAC;YACJ,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC;YACxC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,IAAI,CAAC,GAAG,CACN,wBAAwB,OAAO,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,EAAE,GAAG,CAC/G,CAAC;gBACF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;YACxE,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,OAAO;gBACT,IAAI,CAAC;oBACH,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAC5B,MAAM,EACN,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAC3D,EAAE,CACH,CAAC;oBACF,OAAO,GAAG,IAAI,CAAC;gBACjB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,2DAA2D;oBAC3D,IACE,CAAC,CAAC,KAAK,YAAY,WAAW,CAAC;wBAC/B,CAAC,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;wBAE9C,IAAI,CAAC,IAAI,CACP,qCAAqC,IAAI,CAAC,MAAM,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAChI,CAAC;gBACN,CAAC;;gBAED,IAAI,CAAC,IAAI,CACP,8BAA8B,IAAI,CAAC,MAAM,mCAAmC,CAC7E,CAAC;YACJ,MAAM,aAAa,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,GAAG,CACN,iBAAiB,IAAI,CAAC,MAAM,aAAa,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,GAAG,CAC/F,CAAC;YACF,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;QACnD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/parse/arguments.d.ts

@@ -0,0 +1,84 @@
+import { type ExitCode } from '@nocobase/agent-protocol';
+import type { CommandSuggestion } from '@nocobase/cli-envelope';
+import type { CliCommand, CliEnvDefault, CliParameter } from './manifest.ts';
+/** A line the command cannot take, with what the cli-envelope says of it. */
+export declare class CliParseError extends Error {
+    readonly code: string;
+    readonly exit: ExitCode;
+    readonly suggestions: readonly CommandSuggestion[];
+    readonly details: unknown;
+    constructor(code: string, message: string, options?: {
+        readonly exit?: ExitCode;
+        readonly suggestions?: readonly CommandSuggestion[];
+        readonly details?: unknown;
+    });
+}
+/** A file to send, as the environment found it. */
+export interface CliFileRef {
+    /** Its base name, or for a changed file its path inside the directory. */
+    readonly name: string;
+    readonly size: number;
+}
+/** Where a line's files, environment and answers come from. */
+export interface CliParseIo<F extends CliFileRef = CliFileRef> {
+    /** A text file's content; undefined when it cannot be read. */
+    readText(path: string): Promise<string | undefined>;
+    /** An environment variable; undefined when it is not set. */
+    env(name: string): string | undefined;
+    /** A file to send; undefined when it is not a file. Absent where there are no files to send: such flags are refused. */
+    file?(path: string): Promise<F | undefined>;
+    /** The changed files of a directory (`changed`); `flag` names them in errors. */
+    changed?(spec: NonNullable<CliParameter['changed']>, flag: string): Promise<readonly F[]>;
+    /** Asks for a missing value; present only where someone can answer. */
+    ask?(parameter: CliParameter): Promise<string>;
+}
+export interface CliParseOptions<F extends CliFileRef = CliFileRef> {
+    /** The CLI's command name, for messages. */
+    readonly bin: string;
+    readonly io: CliParseIo<F>;
+    /** `--yes` was given before the command. */
+    readonly yes?: boolean;
+    /** `--dry-run` was given: the command's own `dry-run` flag is set, and a command without one is refused. */
+    readonly dryRun?: boolean;
+}
+/** What a line asks of a command. */
+export interface CliCall<F extends CliFileRef = CliFileRef> {
+    /** The value of each parameter given; a binary body field holds its files. */
+    readonly values: ReadonlyMap<CliParameter, unknown>;
+    /** The body's file, read: an object whose fields the flags override. */
+    readonly bodyFile?: Readonly<Record<string, unknown>>;
+    /** The files of each upload parameter. */
+    readonly uploads: ReadonlyMap<CliParameter, readonly F[]>;
+    /** The file streamed to the ticket the request answers. */
+    readonly ticket?: F;
+    /** Changed files sent with the request, by the field they fill. */
+    readonly changed?: {
+        readonly field: string;
+        readonly files: readonly F[];
+    };
+    /** `--out`, as typed. */
+    readonly out?: string;
+    readonly yes: boolean;
+    readonly json: boolean;
+    readonly help: boolean;
+}
+/** A command's words, such as `issue comment add`. */
+export declare function commandWords(command: Pick<CliCommand, 'id'>): string;
+/** The parameters a person types without a flag, in order. */
+export declare function positionalOf(command: CliCommand): CliParameter[];
+/** How a parameter is named on the line: `<issue>` or `--title`. */
+export declare function parameterLabel(parameter: CliParameter): string;
+/** Whether running the command sends a file of the caller's, or saves one. */
+export declare function needsLocalFiles(command: CliCommand): boolean;
+/** Whether a file name fits `accept` (extensions such as `.log`; media types are left to the server). */
+export declare function accepts(accept: readonly string[], file: string): boolean;
+/**
+ * The first of `sources` the environment has: a variable that is set and not empty, or the field of the JSON file a
+ * variable names. Undefined when none is; an unreadable file or a missing field falls through to the next source.
+ */
+export declare function envDefaultOf(sources: readonly CliEnvDefault[], io: Pick<CliParseIo, 'env' | 'readText'>): Promise<string | undefined>;
+/** What a line without its required arguments is told, and how to see them all. */
+export declare function missingArguments(bin: string, command: CliCommand, missing: readonly CliParameter[]): CliParseError;
+/** Reads the rest of the line, after the command's words, against the command's parameters. */
+export declare function parseCommandLine<F extends CliFileRef>(command: CliCommand, rest: readonly string[], options: CliParseOptions<F>): Promise<CliCall<F>>;
+//# sourceMappingURL=arguments.d.ts.map

package/dist/parse/arguments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arguments.d.ts","sourceRoot":"","sources":["../../src/parse/arguments.ts"],"names":[],"mappings":"AAeA,OAAO,EAGL,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7E,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAGxB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,GAAE;QACP,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;QACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;QACpD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;KACvB;CAST;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,+DAA+D;AAC/D,MAAM,WAAW,UAAU,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU;IAC3D,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD,6DAA6D;IAC7D,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,wHAAwH;IACxH,IAAI,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC5C,iFAAiF;IACjF,OAAO,CAAC,CACN,IAAI,EAAE,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,EAC1C,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACzB,uEAAuE;IACvE,GAAG,CAAC,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU;IAChE,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC;IACvB,4GAA4G;IAC5G,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,qCAAqC;AACrC,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,UAAU,GAAG,UAAU;IACxD,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IACpD,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtD,0CAA0C;IAC1C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAC1D,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpB,mEAAmE;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;KAC9B,CAAC;IACF,yBAAyB;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAKD,sDAAsD;AACtD,wBAAgB,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,CAEpE;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY,EAAE,CAIhE;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,SAAS,EAAE,YAAY,GAAG,MAAM,CAI9D;AAED,8EAA8E;AAC9E,wBAAgB,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAS5D;AAED,yGAAyG;AACzG,wBAAgB,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAMxE;AAaD;;;GAGG;AACH,wBAAsB,YAAY,CAChC,OAAO,EAAE,SAAS,aAAa,EAAE,EACjC,EAAE,EAAE,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,UAAU,CAAC,GACvC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAqB7B;AA6DD,mFAAmF;AACnF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE,SAAS,YAAY,EAAE,GAC/B,aAAa,CAwBf;AAED,+FAA+F;AAC/F,wBAAsB,gBAAgB,CAAC,CAAC,SAAS,UAAU,EACzD,OAAO,EAAE,UAAU,EACnB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAuTrB"}