@ora-ai/cli 0.1.0

package/dist/render/trajectory.js

@@ -0,0 +1,75 @@
+/**
+ * Rich renderer for a run's trajectory artifact (`GET .../runs/:id/trajectory`
+ * — see `@ora/trace-normalize`'s `TrajectoryData`). Draws the JOURNEY GRAPH —
+ * the same picture the ora product shows: the intent root, every tool action
+ * as a rounded box, attribution-driven edges, reasoning pinned as (…) notes
+ * above the action it produced — followed by the step summary. Ported from
+ * the standalone eralabs-ai/ora-cli renderer (render/journey-graph.ts).
+ */
+import { GLYPHS, accent } from "./glyphs.js";
+import { buildJourneyTree, drawJourneyTree, journeySummary, } from "./journey-graph.js";
+/**
+ * `steps` + `action_sequence` + `well_known_probes` together are unique to
+ * the trajectory artifact among this CLI's captured shapes: the insight
+ * artifact has no step array at all, and journey/run-list nest their arrays
+ * under `data`/`results` rather than a bare top-level `steps`. Pinned on the
+ * live-captured fixture (__fixtures__/trajectory.json).
+ *
+ * Every element must also be a non-null object (mirrors run-list's `isRunRow`
+ * check on its rows) — a `null`/primitive step would otherwise pass the
+ * array check here and then throw in `glyphForStep` (`step.type` on null).
+ * Rejecting it here sends the payload to the plain fallback instead.
+ */
+function isTrajectory(data) {
+    if (typeof data !== "object" || data === null)
+        return false;
+    const d = data;
+    return (Array.isArray(d.steps) &&
+        d.steps.every((s) => typeof s === "object" && s !== null) &&
+        typeof d.action_sequence === "string" &&
+        Array.isArray(d.well_known_probes));
+}
+/**
+ * A tool_call always gets the tool glyph. Of the text sub-kinds, `output` (the
+ * agent's final answer) reads as `ok` — everything else (`reasoning`,
+ * `prompt`, generic `text`) reads as `thought`, since they're all
+ * intermediate agent thinking/instruction rather than a completed result.
+ */
+function glyphForStep(step) {
+    if (step.type === "tool_call")
+        return GLYPHS.tool;
+    if (step.kind === "output")
+        return GLYPHS.ok;
+    return GLYPHS.thought;
+}
+function labelForStep(step) {
+    if (step.type === "tool_call")
+        return typeof step.tool === "string" ? step.tool : "tool";
+    return typeof step.kind === "string" ? step.kind : "text";
+}
+/** Absent `elapsed_ms` (a step with no wall-clock timestamp) renders no duration at all — never "0ms" or "NaNms". */
+function durationSuffix(step) {
+    return typeof step.elapsed_ms === "number" ? ` (${Math.round(step.elapsed_ms)}ms)` : "";
+}
+export function renderStep(step) {
+    return `${glyphForStep(step)} ${labelForStep(step)}${durationSuffix(step)}`;
+}
+/** Root label: the run's first target when the artifact carries one. */
+function rootLabel(d) {
+    return typeof d.first_target === "string" && d.first_target ? d.first_target : "journey";
+}
+function render(data) {
+    const d = data;
+    const header = accent.bold(`Trajectory — ${d.steps.length} step${d.steps.length === 1 ? "" : "s"} (${d.action_sequence})`);
+    const steps = d.steps;
+    const tree = buildJourneyTree(steps, rootLabel(d), true);
+    return [header, journeySummary(steps), "", ...drawJourneyTree(tree)].join("\n");
+}
+// The flat step line remains for very small terminals / debugging via the
+// exported helpers below (renderStep is exercised directly by tests).
+export const trajectoryRenderer = {
+    name: "trajectory",
+    canRender: isTrajectory,
+    render,
+};
+//# sourceMappingURL=trajectory.js.map

package/dist/render/trajectory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trajectory.js","sourceRoot":"","sources":["../../src/render/trajectory.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,cAAc,GAEf,MAAM,oBAAoB,CAAC;AAe5B;;;;;;;;;;;GAWG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO,CACL,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;QACzD,OAAO,CAAC,CAAC,eAAe,KAAK,QAAQ;QACrC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CACnC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAwB;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IAClD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,EAAE,CAAC;IAC7C,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,YAAY,CAAC,IAAwB;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACzF,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AAC5D,CAAC;AAED,qHAAqH;AACrH,SAAS,cAAc,CAAC,IAAwB;IAC9C,OAAO,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAwB;IACjD,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,wEAAwE;AACxE,SAAS,SAAS,CAAC,CAA8C;IAC/D,OAAO,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,MAAM,CAAC,IAAa;IAC3B,MAAM,CAAC,GAAG,IAAmD,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,eAAe,GAAG,CAAC,CAAC;IAC3H,MAAM,KAAK,GAAG,CAAC,CAAC,KAAoB,CAAC;IACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,0EAA0E;AAC1E,sEAAsE;AAGtE,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,IAAI,EAAE,YAAY;IAClB,SAAS,EAAE,YAAY;IACvB,MAAM;CACP,CAAC"}

package/dist/render/tunnel.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Rich renderers for the tunnels surface: the LIST (`GET /tunnels/v1`) as a
+ * status-glyph table, a single tunnel (get/create/revoke responses) as a
+ * card. Same Registry-of-Strategies contract as run-list.ts; shared column
+ * machinery from ./table.js.
+ */
+import type { Renderer } from "./registry.js";
+export declare const tunnelListRenderer: Renderer;
+export declare const tunnelCardRenderer: Renderer;
+//# sourceMappingURL=tunnel.d.ts.map

package/dist/render/tunnel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.d.ts","sourceRoot":"","sources":["../../src/render/tunnel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAyG9C,eAAO,MAAM,kBAAkB,EAAE,QAIhC,CAAC;AAEF,eAAO,MAAM,kBAAkB,EAAE,QAIhC,CAAC"}

package/dist/render/tunnel.js

@@ -0,0 +1,108 @@
+/**
+ * Rich renderers for the tunnels surface: the LIST (`GET /tunnels/v1`) as a
+ * status-glyph table, a single tunnel (get/create/revoke responses) as a
+ * card. Same Registry-of-Strategies contract as run-list.ts; shared column
+ * machinery from ./table.js.
+ */
+import chalk from "chalk";
+import { cell, columnWidths, padLine, rowCountLabel } from "./table.js";
+const STATUS_GLYPH = {
+    connected: chalk.green("●"),
+    pending: chalk.dim("○"),
+    disconnected: chalk.yellow("◌"),
+    revoked: chalk.red("✖")
+};
+const ACCESS_LABEL = {
+    private: chalk.dim("private"),
+    protected: chalk.yellow("protected"),
+    public: chalk.cyan("public")
+};
+function isTunnel(row) {
+    if (typeof row !== "object" || row === null)
+        return false;
+    const r = row;
+    return (typeof r.id === "string" &&
+        typeof r.name === "string" &&
+        typeof r.status === "string" &&
+        typeof r.access === "string" &&
+        "publicUrl" in r);
+}
+/** `{ tunnels: [...] }` with tunnel-shaped rows — unique to tunnels.list. */
+function isTunnelList(data) {
+    if (typeof data !== "object" || data === null)
+        return false;
+    const d = data;
+    return Array.isArray(d.tunnels) && d.tunnels.every(isTunnel);
+}
+function ago(iso) {
+    if (!iso)
+        return "—";
+    const ms = Date.now() - Date.parse(iso);
+    if (!Number.isFinite(ms) || ms < 0)
+        return "—";
+    const m = Math.floor(ms / 60_000);
+    if (m < 1)
+        return "just now";
+    if (m < 60)
+        return `${m}m ago`;
+    const h = Math.floor(m / 60);
+    return h < 48 ? `${h}h ago` : `${Math.floor(h / 24)}d ago`;
+}
+function renderList(data) {
+    const rows = data.tunnels;
+    if (rows.length === 0) {
+        return chalk.dim("no tunnels — start one with `ora tunnel <port>`");
+    }
+    // Same discipline as run-list.ts: ONLY the leading glyph carries color (a
+    // single cell whose ANSI slack barely shifts column 1); every other cell is
+    // plain text so padEnd alignment stays exact.
+    const header = ["", "name", "id", "access", "url", "last seen"];
+    const body = rows.map((t) => [
+        STATUS_GLYPH[t.status] ?? "?",
+        cell(t.name),
+        `${t.id.slice(0, 8)}…`,
+        t.access,
+        t.publicUrl ? cell(t.publicUrl.replace(/^https?:\/\//, "")) : "—",
+        ago(t.lastSeenAt)
+    ]);
+    const widths = columnWidths(header, body);
+    return [
+        chalk.bold(padLine(header, widths)),
+        ...body.map((cells) => padLine(cells, widths)),
+        chalk.dim(rowCountLabel(rows.length)),
+        chalk.dim("start one: `ora tunnel <port>` · remove: `ora tunnels delete <id>`")
+    ].join("\n");
+}
+function renderCard(data) {
+    const t = data;
+    const line = (label, value) => `  ${chalk.dim(label.padEnd(10))} ${value}`;
+    const out = [
+        "",
+        `  ${STATUS_GLYPH[t.status] ?? "?"} ${chalk.bold(t.name)} ${chalk.dim(`(${t.status})`)}`,
+        line("id", t.id),
+        line("access", ACCESS_LABEL[t.access] ?? t.access)
+    ];
+    if (t.publicUrl)
+        out.push(line("url", chalk.cyan.underline(t.publicUrl)));
+    if (t.accessToken) {
+        out.push(line("secret", `${chalk.yellow(t.accessToken)} ${chalk.dim("(shown ONCE)")}`));
+    }
+    if (t.lastSeenAt)
+        out.push(line("last seen", ago(t.lastSeenAt)));
+    if (t.status !== "connected") {
+        out.push(line("", chalk.dim("hold it live: `ora tunnel <port> --id " + t.id + "`")));
+    }
+    out.push("");
+    return out.join("\n");
+}
+export const tunnelListRenderer = {
+    name: "tunnel-list",
+    canRender: isTunnelList,
+    render: renderList
+};
+export const tunnelCardRenderer = {
+    name: "tunnel-card",
+    canRender: isTunnel,
+    render: renderCard
+};
+//# sourceMappingURL=tunnel.js.map

package/dist/render/tunnel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel.js","sourceRoot":"","sources":["../../src/render/tunnel.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAcxE,MAAM,YAAY,GAA2B;IAC3C,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;IAC3B,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;IACvB,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;IAC/B,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;CACxB,CAAC;AAEF,MAAM,YAAY,GAA2B;IAC3C,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;IAC7B,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC;IACpC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;CAC7B,CAAC;AAEF,SAAS,QAAQ,CAAC,GAAY;IAC5B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC1D,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACL,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;QAC1B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,WAAW,IAAI,CAAC,CACjB,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC5D,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,GAAG,CAAC,GAA8B;IACzC,IAAI,CAAC,GAAG;QAAE,OAAO,GAAG,CAAC;IACrB,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC;AAC7D,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,MAAM,IAAI,GAAI,IAAkC,CAAC,OAAO,CAAC;IACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IACtE,CAAC;IACD,0EAA0E;IAC1E,4EAA4E;IAC5E,8CAA8C;IAC9C,MAAM,MAAM,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC3B,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG;QAC7B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QACZ,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG;QACtB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;QACjE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;KAClB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9C,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,oEAAoE,CAAC;KAChF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAC/B,MAAM,CAAC,GAAG,IAAkB,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAa,EAAU,EAAE,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IACnG,MAAM,GAAG,GAAa;QACpB,EAAE;QACF,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;QACxF,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QAChB,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;KACnD,CAAC;IACF,IAAI,CAAC,CAAC,SAAS;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,CAAC,UAAU;QAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,wCAAwC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,YAAY;IACvB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAa;IAC1C,IAAI,EAAE,aAAa;IACnB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,UAAU;CACnB,CAAC"}

package/dist/render/usage.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Token/cost/cache metadata chips — the "how much did this journey spend"
+ * line under a journey's agents and a run's outcome. ONE normalizer accepts
+ * BOTH spellings the platform serves (journey agents are camelCase; run-list
+ * rows are snake_case), so every renderer reads the same shape.
+ */
+export interface UsageLike {
+    inputTokens?: number | null;
+    outputTokens?: number | null;
+    totalTokens?: number | null;
+    cacheReadTokens?: number | null;
+    cacheCreationTokens?: number | null;
+    costUsd?: number | null;
+    numTurns?: number | null;
+    durationMs?: number | null;
+}
+/** Read usage off any object, accepting camelCase and snake_case spellings. */
+export declare function readUsage(raw: unknown): UsageLike;
+export declare function formatTokens(n: number): string;
+export declare function formatCost(usd: number): string;
+/**
+ * The chips line: `in 12.3k · out 4.1k · cache 197.9k r / 135.8k w · $0.042 ·
+ * 7 turns · 33.3s`. Only fields that exist appear — a null never renders as a
+ * dash, it just isn't spent yet.
+ */
+export declare function usageChips(usage: UsageLike): string;
+/** Sum every numeric field across a set of usages (a journey's agents). */
+export declare function sumUsage(usages: UsageLike[]): UsageLike;
+//# sourceMappingURL=usage.d.ts.map

package/dist/render/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/render/usage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,WAAW,SAAS;IACxB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAKD,+EAA+E;AAC/E,wBAAgB,SAAS,CAAC,GAAG,EAAE,OAAO,GAAG,SAAS,CAajD;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAgBnD;AAED,2EAA2E;AAC3E,wBAAgB,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,SAAS,CAevD"}

package/dist/render/usage.js

@@ -0,0 +1,83 @@
+/**
+ * Token/cost/cache metadata chips — the "how much did this journey spend"
+ * line under a journey's agents and a run's outcome. ONE normalizer accepts
+ * BOTH spellings the platform serves (journey agents are camelCase; run-list
+ * rows are snake_case), so every renderer reads the same shape.
+ */
+import chalk from "chalk";
+const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : undefined;
+/** Read usage off any object, accepting camelCase and snake_case spellings. */
+export function readUsage(raw) {
+    if (typeof raw !== "object" || raw === null)
+        return {};
+    const r = raw;
+    return {
+        inputTokens: num(r.inputTokens) ?? num(r.input_tokens),
+        outputTokens: num(r.outputTokens) ?? num(r.output_tokens),
+        totalTokens: num(r.totalTokens) ?? num(r.total_tokens),
+        cacheReadTokens: num(r.cacheReadTokens) ?? num(r.cache_read_tokens),
+        cacheCreationTokens: num(r.cacheCreationTokens) ?? num(r.cache_creation_tokens),
+        costUsd: num(r.costUsd) ?? num(r.cost_usd),
+        numTurns: num(r.numTurns) ?? num(r.num_turns),
+        durationMs: num(r.durationMs) ?? num(r.duration_ms),
+    };
+}
+export function formatTokens(n) {
+    if (n >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (n >= 1000)
+        return `${(n / 1000).toFixed(1)}k`;
+    return String(n);
+}
+export function formatCost(usd) {
+    if (usd < 0.01)
+        return `$${usd.toFixed(4)}`;
+    if (usd < 1)
+        return `$${usd.toFixed(3)}`;
+    return `$${usd.toFixed(2)}`;
+}
+/**
+ * The chips line: `in 12.3k · out 4.1k · cache 197.9k r / 135.8k w · $0.042 ·
+ * 7 turns · 33.3s`. Only fields that exist appear — a null never renders as a
+ * dash, it just isn't spent yet.
+ */
+export function usageChips(usage) {
+    const chips = [];
+    if (usage.inputTokens != null)
+        chips.push(`in ${formatTokens(usage.inputTokens)}`);
+    if (usage.outputTokens != null)
+        chips.push(`out ${formatTokens(usage.outputTokens)}`);
+    if (usage.totalTokens != null && usage.inputTokens == null && usage.outputTokens == null)
+        chips.push(`${formatTokens(usage.totalTokens)} tokens`);
+    if (usage.cacheReadTokens != null || usage.cacheCreationTokens != null) {
+        const read = usage.cacheReadTokens != null ? `${formatTokens(usage.cacheReadTokens)} r` : "";
+        const write = usage.cacheCreationTokens != null ? `${formatTokens(usage.cacheCreationTokens)} w` : "";
+        chips.push(`cache ${[read, write].filter(Boolean).join(" / ")}`);
+    }
+    if (usage.costUsd != null)
+        chips.push(formatCost(usage.costUsd));
+    if (usage.numTurns != null)
+        chips.push(`${usage.numTurns} turns`);
+    if (usage.durationMs != null)
+        chips.push(`${(usage.durationMs / 1000).toFixed(1)}s`);
+    return chips.join(chalk.dim(" · "));
+}
+/** Sum every numeric field across a set of usages (a journey's agents). */
+export function sumUsage(usages) {
+    const total = {};
+    const add = (key) => {
+        const values = usages.map((u) => u[key]).filter((v) => v != null);
+        if (values.length)
+            total[key] = values.reduce((a, b) => a + b, 0);
+    };
+    add("inputTokens");
+    add("outputTokens");
+    add("totalTokens");
+    add("cacheReadTokens");
+    add("cacheCreationTokens");
+    add("costUsd");
+    add("numTurns");
+    add("durationMs");
+    return total;
+}
+//# sourceMappingURL=usage.js.map

package/dist/render/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/render/usage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAa1B,MAAM,GAAG,GAAG,CAAC,CAAU,EAAsB,EAAE,CAC7C,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAE9D,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QACtD,YAAY,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC;QACzD,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC;QACtD,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,iBAAiB,CAAC;QACnE,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,qBAAqB,CAAC;QAC/E,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC1C,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7C,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,GAAG,IAAI;QAAE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5C,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAgB;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACnF,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,YAAY,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,KAAK,CAAC,YAAY,IAAI,IAAI;QACtF,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,IAAI,KAAK,CAAC,mBAAmB,IAAI,IAAI,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,MAAM,KAAK,GACT,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,IAAI,KAAK,CAAC,QAAQ,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrF,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AACtC,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,QAAQ,CAAC,MAAmB;IAC1C,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,CAAC,GAAoB,EAAQ,EAAE;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC/E,IAAI,MAAM,CAAC,MAAM;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC;IACF,GAAG,CAAC,aAAa,CAAC,CAAC;IACnB,GAAG,CAAC,cAAc,CAAC,CAAC;IACpB,GAAG,CAAC,aAAa,CAAC,CAAC;IACnB,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACvB,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC3B,GAAG,CAAC,SAAS,CAAC,CAAC;IACf,GAAG,CAAC,UAAU,CAAC,CAAC;IAChB,GAAG,CAAC,YAAY,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tunnel-command.d.ts

@@ -0,0 +1,15 @@
+import type { Command } from "commander";
+import type { ResolvedDeps } from "./program.js";
+/**
+ * `ora tunnel <port>` — the ngrok-style one-shot: resolve (create or reuse)
+ * a tunnel, dial the `/connect` WebSocket, and forward every proxied request
+ * to `127.0.0.1:<port>` until Ctrl-C. This is the HAND-WRITTEN companion to
+ * the generated `ora tunnels …` CRUD (create/list/get/revoke manage the
+ * ledger; THIS command is the live data plane).
+ *
+ * Reuse-by-name: running `ora tunnel 3000` twice reuses the `dev-3000` row
+ * (create → 409 name-conflict → list lookup), so the id — and therefore the
+ * public hostname — stays stable across restarts.
+ */
+export declare function attachTunnelCommand(program: Command, deps: ResolvedDeps): void;
+//# sourceMappingURL=tunnel-command.d.ts.map

package/dist/tunnel-command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-command.d.ts","sourceRoot":"","sources":["../src/tunnel-command.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AA2BjD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAiC9E"}

package/dist/tunnel-command.js

@@ -0,0 +1,267 @@
+import http from "node:http";
+import chalk from "chalk";
+import { WebSocket } from "ws";
+import { TunnelConnector, V1Codec } from "@ora-ai/tunnel-protocol";
+import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { credentials } from "./core/run-operation.js";
+import { renderError } from "./core/output.js";
+/**
+ * Protected-mode secrets are shown ONCE by the API (only sha256 stored), so
+ * the CLI remembers them per tunnel-id in the config dir — the ngrok
+ * authtoken model: your own machine keeps your own credential, and
+ * `ora tunnel <port>` keeps "just working" across restarts. A tunnel whose
+ * secret was lost (created elsewhere) is deleted + recreated instead — a new
+ * URL, exactly like ngrok restarting.
+ */
+const SECRETS_FILE = "tunnel-secrets.json";
+function readSecrets(dir) {
+    try {
+        return JSON.parse(readFileSync(join(dir, SECRETS_FILE), "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
+function rememberSecret(dir, tunnelId, secret) {
+    const all = readSecrets(dir);
+    all[tunnelId] = secret;
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(join(dir, SECRETS_FILE), JSON.stringify(all, null, 2), { mode: 0o600 });
+}
+/**
+ * `ora tunnel <port>` — the ngrok-style one-shot: resolve (create or reuse)
+ * a tunnel, dial the `/connect` WebSocket, and forward every proxied request
+ * to `127.0.0.1:<port>` until Ctrl-C. This is the HAND-WRITTEN companion to
+ * the generated `ora tunnels …` CRUD (create/list/get/revoke manage the
+ * ledger; THIS command is the live data plane).
+ *
+ * Reuse-by-name: running `ora tunnel 3000` twice reuses the `dev-3000` row
+ * (create → 409 name-conflict → list lookup), so the id — and therefore the
+ * public hostname — stays stable across restarts.
+ */
+export function attachTunnelCommand(program, deps) {
+    program
+        .command("tunnel")
+        .description("Expose a local port to ora (hold a live dev tunnel until Ctrl-C)")
+        .argument("<port>", "local port to forward to (e.g. 3000)")
+        .option("--name <name>", "tunnel name (default: dev-<port>; reused across runs)")
+        .option("--access <mode>", "exposure: protected | public | private", "protected")
+        .option("--id <tunnelId>", "reuse a specific existing tunnel instead of name-based create")
+        .option("--host <host>", "local host to forward to", "127.0.0.1")
+        .option("--api-url <url>", "override the API base URL")
+        .addHelpText("after", [
+        "",
+        "Access modes:",
+        "  protected  a URL only holders of the printed link can reach (default — journeys use this)",
+        "  public     an open URL — real answer engines can browse it",
+        "  private    no URL; only ora's own scanners reach it",
+        "",
+        "Examples:",
+        "  ora tunnel 8081                    # like `ngrok http 8081` — prints a working URL",
+        "  ora tunnel 8081 --access public    # let answer engines index the dev site",
+        "  ora tunnel 3000 --name account-ui"
+    ].join("\n"))
+        .action(async (portArg, opts) => {
+        try {
+            await runTunnel(portArg, opts, deps);
+        }
+        catch (error) {
+            deps.errOut(renderError(error));
+            process.exitCode = 1;
+        }
+    });
+}
+async function runTunnel(portArg, opts, deps) {
+    const port = Number.parseInt(portArg, 10);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        throw new Error(`invalid port "${portArg}" — expected 1-65535`);
+    }
+    const access = opts.access ?? "protected";
+    if (!["private", "protected", "public"].includes(access)) {
+        throw new Error(`invalid --access "${access}" — expected private | protected | public`);
+    }
+    const creds = credentials(deps, opts.apiUrl);
+    if (!creds)
+        return; // credentials() already reported the login hint
+    const client = deps.makeClient(creds);
+    const tunnel = await resolveTunnel(client, deps, {
+        id: opts.id,
+        name: opts.name ?? `dev-${port}`,
+        access
+    });
+    if (tunnel.accessToken)
+        rememberSecret(deps.dir, tunnel.id, tunnel.accessToken);
+    const secret = tunnel.accessToken ?? readSecrets(deps.dir)[tunnel.id] ?? null;
+    printHeader(deps, tunnel, port, secret);
+    if (tunnel.connection.kind !== "ora-ws") {
+        throw new Error(`provider connection kind "${tunnel.connection.kind}" is not supported by this CLI yet`);
+    }
+    const token = await deps.makeAuth(creds).getToken();
+    await holdConnection(tunnel, token, { host: opts.host ?? "127.0.0.1", port }, deps);
+}
+/**
+ * create-or-reuse: --id wins; else create by name, falling back to the
+ * existing row on 409. A reused tunnel must be USABLE: if its access mode
+ * differs from the request, or it is protected and this machine no longer
+ * has the secret, it is deleted + recreated (a fresh URL — the ngrok model)
+ * rather than handed back half-working.
+ */
+async function resolveTunnel(client, deps, want) {
+    if (want.id) {
+        return (await client.call({ method: "GET", path: `/tunnels/v1/${want.id}` }));
+    }
+    try {
+        return (await client.call({
+            method: "POST",
+            path: "/tunnels/v1",
+            body: { name: want.name, access: want.access }
+        }));
+    }
+    catch (error) {
+        if (!(error instanceof Error) || !/409|conflict/i.test(error.message))
+            throw error;
+        const { tunnels } = (await client.call({ method: "GET", path: "/tunnels/v1" }));
+        const existing = tunnels.find((t) => t.name === want.name && t.status !== "revoked");
+        if (!existing)
+            throw error;
+        const secretLost = existing.access === "protected" && !readSecrets(deps.dir)[existing.id];
+        if (existing.access !== want.access || secretLost) {
+            await client.call({ method: "DELETE", path: `/tunnels/v1/${existing.id}` });
+            return (await client.call({
+                method: "POST",
+                path: "/tunnels/v1",
+                body: { name: want.name, access: want.access }
+            }));
+        }
+        return existing;
+    }
+}
+function printHeader(deps, tunnel, port, secret) {
+    const line = (label, value) => deps.out(`  ${chalk.dim(label.padEnd(10))} ${value}`);
+    deps.out("");
+    deps.out(`  ${chalk.bold("🚇 ora tunnel")} ${chalk.dim("—")} ${tunnel.name}`);
+    line("forwards", `${chalk.cyan(`localhost:${port}`)} ${chalk.dim("→")} ${tunnel.id.slice(0, 8)}…`);
+    // THE line: one URL that works as printed (ngrok parity). Protected embeds
+    // the remembered secret; journeys take it verbatim as targetDomain.
+    const openable = tunnel.publicUrl && tunnel.access === "protected" && secret
+        ? `${tunnel.publicUrl}/?ora_token=${secret}`
+        : tunnel.publicUrl;
+    if (openable) {
+        line("url", chalk.cyan.underline(openable));
+        if (tunnel.access === "protected") {
+            line("", chalk.dim("only holders of this link reach it — paste it as a journey targetDomain"));
+        }
+        else {
+            line("", chalk.dim("open: anyone (and answer engines) can browse it"));
+        }
+    }
+    else {
+        line("access", `${tunnel.access} ${chalk.dim("— no URL: only ora scans reach it (use --access protected for a link)")}`);
+    }
+    deps.out("");
+}
+/** Dial the WS, run the protocol connector, and log traffic until Ctrl-C. */
+async function holdConnection(tunnel, bearer, target, deps) {
+    const url = `${tunnel.connection.url}?tunnelId=${tunnel.id}`;
+    const ws = new WebSocket(url, [tunnel.connection.subprotocol], {
+        headers: { Authorization: `Bearer ${bearer}` }
+    });
+    await new Promise((resolve, reject) => {
+        ws.once("open", () => resolve());
+        ws.once("unexpected-response", (_req, res) => reject(new Error(`connect refused: HTTP ${res.statusCode} (is the tunnel revoked, or the active-tunnel limit reached?)`)));
+        ws.once("error", reject);
+    });
+    const connector = new TunnelConnector({
+        socket: wsSocket(ws),
+        codec: new V1Codec(),
+        hello: {
+            agentVersion: "ora-cli",
+            target: { protocol: "http", host: target.host, port: target.port },
+            maxStreams: 32
+        },
+        forwarder: { forward: (req) => forwardLocal(req, target, deps) }
+    });
+    const ack = await connector.start();
+    deps.out(`  ${chalk.green("●")} connected ${chalk.dim(`(${ack.tunnelId})`)} — Ctrl-C to stop\n`);
+    await new Promise((resolve) => {
+        const stop = () => {
+            deps.out(`\n  ${chalk.dim("closing tunnel…")}`);
+            connector.close(1000, "cli exit");
+            try {
+                ws.terminate();
+            }
+            catch {
+                /* already closed */
+            }
+            resolve();
+        };
+        process.once("SIGINT", stop);
+        process.once("SIGTERM", stop);
+        ws.once("close", (code, reason) => {
+            deps.out(`\n  ${chalk.red("●")} disconnected (${code}${reason.length ? ` ${reason.toString()}` : ""})`);
+            resolve();
+        });
+    });
+}
+/** Forward one proxied request to the local server, logging ngrok-style. */
+async function forwardLocal(req, target, deps) {
+    const started = Date.now();
+    const res = await new Promise((resolve, reject) => {
+        const out = http.request({
+            host: target.host,
+            port: target.port,
+            path: req.path,
+            method: req.method,
+            headers: sanitizeLocalHeaders(req.headers)
+        }, resolve);
+        out.on("error", reject);
+        void pipeBody(req.body, out);
+    });
+    const status = res.statusCode ?? 0;
+    const color = status < 400 ? chalk.green : status < 500 ? chalk.yellow : chalk.red;
+    deps.out(`  ${color(String(status))} ${req.method.padEnd(6)} ${req.path} ${chalk.dim(`${Date.now() - started}ms`)}`);
+    return {
+        status,
+        headers: Object.fromEntries(Object.entries(res.headers).filter((e) => typeof e[1] === "string")),
+        body: res
+    };
+}
+async function pipeBody(body, out) {
+    try {
+        for await (const chunk of body)
+            out.write(chunk);
+    }
+    finally {
+        out.end();
+    }
+}
+/** hop-by-hop + host headers must not be replayed against the local server. */
+function sanitizeLocalHeaders(headers) {
+    const banned = new Set(["host", "connection", "keep-alive", "transfer-encoding", "upgrade", "te"]);
+    return Object.fromEntries(Object.entries(headers).filter(([k]) => !banned.has(k.toLowerCase())));
+}
+/** A `ws` WebSocket adapted to the protocol's transport-neutral ISocket. */
+function wsSocket(ws) {
+    return {
+        get bufferedAmount() {
+            return ws.bufferedAmount;
+        },
+        send: (data) => {
+            if (ws.readyState === ws.OPEN)
+                ws.send(data, { binary: true });
+        },
+        close: (code, reason) => {
+            try {
+                ws.close(code, reason);
+            }
+            catch {
+                ws.terminate();
+            }
+        },
+        onMessage: (h) => ws.on("message", (d, isBinary) => isBinary && h(new Uint8Array(d))),
+        onClose: (h) => ws.on("close", (c, r) => h(c, r.toString())),
+        onError: (h) => ws.on("error", h)
+    };
+}
+//# sourceMappingURL=tunnel-command.js.map

package/dist/tunnel-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tunnel-command.js","sourceRoot":"","sources":["../src/tunnel-command.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC/B,OAAO,EACL,eAAe,EACf,OAAO,EAIR,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAE3C,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,MAAM,CAAC,CAA2B,CAAC;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,QAAgB,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC7B,GAAG,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;IACvB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,IAAkB;IACtE,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,QAAQ,CAAC,QAAQ,EAAE,sCAAsC,CAAC;SAC1D,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC;SAChF,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,EAAE,WAAW,CAAC;SAChF,MAAM,CAAC,iBAAiB,EAAE,+DAA+D,CAAC;SAC1F,MAAM,CAAC,eAAe,EAAE,0BAA0B,EAAE,WAAW,CAAC;SAChE,MAAM,CAAC,iBAAiB,EAAE,2BAA2B,CAAC;SACtD,WAAW,CACV,OAAO,EACP;QACE,EAAE;QACF,eAAe;QACf,6FAA6F;QAC7F,8DAA8D;QAC9D,uDAAuD;QACvD,EAAE;QACF,WAAW;QACX,sFAAsF;QACtF,8EAA8E;QAC9E,qCAAqC;KACtC,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;SACA,MAAM,CAAC,KAAK,EAAE,OAAe,EAAE,IAAwC,EAAE,EAAE;QAC1E,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YAChC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAYD,KAAK,UAAU,SAAS,CACtB,OAAe,EACf,IAAwC,EACxC,IAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iBAAiB,OAAO,sBAAsB,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC;IAC1C,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,2CAA2C,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,gDAAgD;IACpE,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAEtC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,IAAI,EAAE;QAC/C,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,EAAE;QAChC,MAAM;KACP,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,WAAW;QAAE,cAAc,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAChF,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC;IAC9E,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAExC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,UAAU,CAAC,IAAI,oCAAoC,CAAC,CAAC;IAC3G,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IACpD,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,WAAW,EAAE,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;AACtF,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,aAAa,CAC1B,MAA8C,EAC9C,IAAkB,EAClB,IAAmD;IAEnD,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;QACZ,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAmB,CAAC;IAClG,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;YACxB,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;SAC/C,CAAC,CAAmB,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,KAAK,CAAC;QACnF,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAE7E,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3B,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1F,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;YAClD,MAAM,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,aAAa;gBACnB,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;aAC/C,CAAC,CAAmB,CAAC;QACxB,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,IAAkB,EAAE,MAAsB,EAAE,IAAY,EAAE,MAAqB;IAClG,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;IACrG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACnG,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,QAAQ,GACZ,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM;QACzD,CAAC,CAAC,GAAG,MAAM,CAAC,SAAS,eAAe,MAAM,EAAE;QAC5C,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;IACvB,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC,CAAC;QACjG,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,uEAAuE,CAAC,EAAE,CAAC,CAAC;IAC3H,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,cAAc,CAC3B,MAAsB,EACtB,MAAc,EACd,MAAsC,EACtC,IAAkB;IAElB,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,aAAa,MAAM,CAAC,EAAE,EAAE,CAAC;IAC7D,MAAM,EAAE,GAAG,IAAI,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QAC7D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;KAC/C,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;QACjC,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAC3C,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,UAAU,+DAA+D,CAAC,CAAC,CAC1H,CAAC;QACF,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;QACpC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;QACpB,KAAK,EAAE,IAAI,OAAO,EAAE;QACpB,KAAK,EAAE;YACL,YAAY,EAAE,SAAS;YACvB,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YAClE,UAAU,EAAE,EAAE;SACf;QACD,SAAS,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;KACjE,CAAC,CAAC;IACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;IACpC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAEjG,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,GAAS,EAAE;YACtB,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC;YAChD,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAClC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC9B,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAY,EAAE,MAAc,EAAE,EAAE;YAChD,IAAI,CAAC,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,kBAAkB,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACxG,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,KAAK,UAAU,YAAY,CACzB,GAAiB,EACjB,MAAsC,EACtC,IAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CACtB;YACE,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;SAC3C,EACD,OAAO,CACR,CAAC;QACF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,KAAK,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;IACnF,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IACrH,OAAO;QACL,MAAM;QACN,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAC3F;QACD,IAAI,EAAE,GAAgC;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAA+B,EAAE,GAAuB;IAC9E,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;YAAS,CAAC;QACT,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,SAAS,oBAAoB,CAAC,OAA0C;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,EAAa;IAC7B,OAAO;QACL,IAAI,cAAc;YAChB,OAAO,EAAE,CAAC,cAAc,CAAC;QAC3B,CAAC;QACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,EAAE,CAAC,UAAU,KAAK,EAAE,CAAC,IAAI;gBAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACtB,IAAI,CAAC;gBACH,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,EAAE,CAAC,SAAS,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;QACD,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAS,EAAE,QAAiB,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACtG,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5E,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;KAClC,CAAC;AACJ,CAAC"}