@orizm/cli 2.2.7 → 3.0.0

package/dist/table-event-D7PPuS7E.cjs

@@ -0,0 +1,101 @@
+const require_parse = require('./parse-BeO2IwfI.cjs');
+let _praha_byethrow = require("@praha/byethrow");
+
+//#region src/cli/commands/webhook/table-event.ts
+const VALID_EVENTS = [
+	"content.create",
+	"content.update",
+	"content.delete"
+];
+function parseTableEvents(flag, value) {
+	if (value === void 0) return _praha_byethrow.Result.succeed(void 0);
+	const items = require_parse.parseRepeatableFlag(flag, value);
+	if (_praha_byethrow.Result.isFailure(items)) return items;
+	const tableEvents = [];
+	for (const item of items.value) {
+		const pair = require_parse.splitColonPair(flag, item, "<table>:<event>");
+		if (_praha_byethrow.Result.isFailure(pair)) return pair;
+		const [tableName, event] = pair.value;
+		const matched = VALID_EVENTS.find((candidate) => candidate === event);
+		if (matched === void 0) return _praha_byethrow.Result.fail({ message: `Invalid --${flag} value: ${item}. Valid events: ${VALID_EVENTS.join(", ")}.` });
+		const existing = tableEvents.find((entry) => entry.tableName === tableName);
+		if (existing === void 0) tableEvents.push({
+			tableName,
+			events: [matched]
+		});
+		else if (!existing.events.includes(matched)) existing.events.push(matched);
+	}
+	return _praha_byethrow.Result.succeed(tableEvents);
+}
+function addTableEvents(current, additions) {
+	const merged = current.map((entry) => ({
+		tableName: entry.tableName,
+		events: [...entry.events]
+	}));
+	for (const addition of additions) {
+		const existing = merged.find((entry) => entry.tableName === addition.tableName);
+		if (existing === void 0) {
+			merged.push({
+				tableName: addition.tableName,
+				events: [...addition.events]
+			});
+			continue;
+		}
+		for (const event of addition.events) if (!existing.events.includes(event)) existing.events.push(event);
+	}
+	return merged;
+}
+function removeTableEvents(current, removals) {
+	return current.map((entry) => {
+		const removal = removals.find((candidate) => candidate.tableName === entry.tableName);
+		if (removal === void 0) return entry;
+		return {
+			tableName: entry.tableName,
+			events: entry.events.filter((event) => !removal.events.includes(event))
+		};
+	}).filter((entry) => entry.events.length > 0);
+}
+function missingTableEventRemovals(current, removals) {
+	const missing = [];
+	for (const removal of removals) {
+		const entry = current.find((candidate) => candidate.tableName === removal.tableName);
+		for (const event of removal.events) if (entry === void 0 || !entry.events.includes(event)) missing.push(`${removal.tableName}:${event}`);
+	}
+	return missing;
+}
+function formatTableEvents(tableEvents) {
+	return tableEvents.map((entry) => `${entry.tableName}:${entry.events.join("|")}`).join(", ");
+}
+
+//#endregion
+Object.defineProperty(exports, 'addTableEvents', {
+  enumerable: true,
+  get: function () {
+    return addTableEvents;
+  }
+});
+Object.defineProperty(exports, 'formatTableEvents', {
+  enumerable: true,
+  get: function () {
+    return formatTableEvents;
+  }
+});
+Object.defineProperty(exports, 'missingTableEventRemovals', {
+  enumerable: true,
+  get: function () {
+    return missingTableEventRemovals;
+  }
+});
+Object.defineProperty(exports, 'parseTableEvents', {
+  enumerable: true,
+  get: function () {
+    return parseTableEvents;
+  }
+});
+Object.defineProperty(exports, 'removeTableEvents', {
+  enumerable: true,
+  get: function () {
+    return removeTableEvents;
+  }
+});
+//# sourceMappingURL=table-event-D7PPuS7E.cjs.map

package/dist/table-event-D7PPuS7E.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"table-event-D7PPuS7E.cjs","names":["Result","parseRepeatableFlag","splitColonPair"],"sources":["../src/cli/commands/webhook/table-event.ts"],"sourcesContent":["import { Result } from \"@praha/byethrow\";\nimport type { CommandFailure } from \"../define-command.js\";\nimport { parseRepeatableFlag, splitColonPair } from \"../parse.js\";\n\nexport type WebhookEventType =\n  | \"content.create\"\n  | \"content.update\"\n  | \"content.delete\";\n\nexport type TableEvent = { tableName: string; events: WebhookEventType[] };\n\nconst VALID_EVENTS: WebhookEventType[] = [\n  \"content.create\",\n  \"content.update\",\n  \"content.delete\",\n];\n\n// CLI は <table>:<event> を 1 件ずつ受けるが、API の tableEvents は\n// { tableName, events[] } の形なので、同一テーブルを 1 エントリに集約する。\nexport function parseTableEvents(\n  flag: string,\n  value: unknown,\n): Result.Result<TableEvent[] | undefined, CommandFailure> {\n  if (value === undefined) return Result.succeed(undefined);\n\n  const items = parseRepeatableFlag(flag, value);\n  if (Result.isFailure(items)) return items;\n\n  const tableEvents: TableEvent[] = [];\n  for (const item of items.value) {\n    const pair = splitColonPair(flag, item, \"<table>:<event>\");\n    if (Result.isFailure(pair)) return pair;\n\n    const [tableName, event] = pair.value;\n    const matched = VALID_EVENTS.find((candidate) => candidate === event);\n    if (matched === undefined) {\n      return Result.fail({\n        message: `Invalid --${flag} value: ${item}. Valid events: ${VALID_EVENTS.join(\", \")}.`,\n      });\n    }\n\n    const existing = tableEvents.find((entry) => entry.tableName === tableName);\n    if (existing === undefined) {\n      tableEvents.push({ tableName, events: [matched] });\n    } else if (!existing.events.includes(matched)) {\n      existing.events.push(matched);\n    }\n  }\n  return Result.succeed(tableEvents);\n}\n\nexport function addTableEvents(\n  current: TableEvent[],\n  additions: TableEvent[],\n): TableEvent[] {\n  const merged = current.map((entry) => ({\n    tableName: entry.tableName,\n    events: [...entry.events],\n  }));\n  for (const addition of additions) {\n    const existing = merged.find(\n      (entry) => entry.tableName === addition.tableName,\n    );\n    if (existing === undefined) {\n      merged.push({\n        tableName: addition.tableName,\n        events: [...addition.events],\n      });\n      continue;\n    }\n    for (const event of addition.events) {\n      if (!existing.events.includes(event)) existing.events.push(event);\n    }\n  }\n  return merged;\n}\n\nexport function removeTableEvents(\n  current: TableEvent[],\n  removals: TableEvent[],\n): TableEvent[] {\n  return current\n    .map((entry) => {\n      const removal = removals.find(\n        (candidate) => candidate.tableName === entry.tableName,\n      );\n      if (removal === undefined) return entry;\n      return {\n        tableName: entry.tableName,\n        events: entry.events.filter((event) => !removal.events.includes(event)),\n      };\n    })\n    .filter((entry) => entry.events.length > 0);\n}\n\n// remove 指定のうち現在の購読に存在しないものを \"table:event\" 形式で列挙する。\nexport function missingTableEventRemovals(\n  current: TableEvent[],\n  removals: TableEvent[],\n): string[] {\n  const missing: string[] = [];\n  for (const removal of removals) {\n    const entry = current.find(\n      (candidate) => candidate.tableName === removal.tableName,\n    );\n    for (const event of removal.events) {\n      if (entry === undefined || !entry.events.includes(event)) {\n        missing.push(`${removal.tableName}:${event}`);\n      }\n    }\n  }\n  return missing;\n}\n\nexport function formatTableEvents(tableEvents: TableEvent[]): string {\n  return tableEvents\n    .map((entry) => `${entry.tableName}:${entry.events.join(\"|\")}`)\n    .join(\", \");\n}\n"],"mappings":";;;;AAWA,MAAM,eAAmC;CACvC;CACA;CACA;AACF;AAIA,SAAgB,iBACd,MACA,OACyD;CACzD,IAAI,UAAU,QAAW,OAAOA,uBAAO,QAAQ,MAAS;CAExD,MAAM,QAAQC,kCAAoB,MAAM,KAAK;CAC7C,IAAID,uBAAO,UAAU,KAAK,GAAG,OAAO;CAEpC,MAAM,cAA4B,CAAC;CACnC,KAAK,MAAM,QAAQ,MAAM,OAAO;EAC9B,MAAM,OAAOE,6BAAe,MAAM,MAAM,iBAAiB;EACzD,IAAIF,uBAAO,UAAU,IAAI,GAAG,OAAO;EAEnC,MAAM,CAAC,WAAW,SAAS,KAAK;EAChC,MAAM,UAAU,aAAa,MAAM,cAAc,cAAc,KAAK;EACpE,IAAI,YAAY,QACd,OAAOA,uBAAO,KAAK,EACjB,SAAS,aAAa,KAAK,UAAU,KAAK,kBAAkB,aAAa,KAAK,IAAI,EAAE,GACtF,CAAC;EAGH,MAAM,WAAW,YAAY,MAAM,UAAU,MAAM,cAAc,SAAS;EAC1E,IAAI,aAAa,QACf,YAAY,KAAK;GAAE;GAAW,QAAQ,CAAC,OAAO;EAAE,CAAC;OAC5C,IAAI,CAAC,SAAS,OAAO,SAAS,OAAO,GAC1C,SAAS,OAAO,KAAK,OAAO;CAEhC;CACA,OAAOA,uBAAO,QAAQ,WAAW;AACnC;AAEA,SAAgB,eACd,SACA,WACc;CACd,MAAM,SAAS,QAAQ,KAAK,WAAW;EACrC,WAAW,MAAM;EACjB,QAAQ,CAAC,GAAG,MAAM,MAAM;CAC1B,EAAE;CACF,KAAK,MAAM,YAAY,WAAW;EAChC,MAAM,WAAW,OAAO,MACrB,UAAU,MAAM,cAAc,SAAS,SAC1C;EACA,IAAI,aAAa,QAAW;GAC1B,OAAO,KAAK;IACV,WAAW,SAAS;IACpB,QAAQ,CAAC,GAAG,SAAS,MAAM;GAC7B,CAAC;GACD;EACF;EACA,KAAK,MAAM,SAAS,SAAS,QAC3B,IAAI,CAAC,SAAS,OAAO,SAAS,KAAK,GAAG,SAAS,OAAO,KAAK,KAAK;CAEpE;CACA,OAAO;AACT;AAEA,SAAgB,kBACd,SACA,UACc;CACd,OAAO,QACJ,KAAK,UAAU;EACd,MAAM,UAAU,SAAS,MACtB,cAAc,UAAU,cAAc,MAAM,SAC/C;EACA,IAAI,YAAY,QAAW,OAAO;EAClC,OAAO;GACL,WAAW,MAAM;GACjB,QAAQ,MAAM,OAAO,QAAQ,UAAU,CAAC,QAAQ,OAAO,SAAS,KAAK,CAAC;EACxE;CACF,CAAC,CAAC,CACD,QAAQ,UAAU,MAAM,OAAO,SAAS,CAAC;AAC9C;AAGA,SAAgB,0BACd,SACA,UACU;CACV,MAAM,UAAoB,CAAC;CAC3B,KAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,QAAQ,QAAQ,MACnB,cAAc,UAAU,cAAc,QAAQ,SACjD;EACA,KAAK,MAAM,SAAS,QAAQ,QAC1B,IAAI,UAAU,UAAa,CAAC,MAAM,OAAO,SAAS,KAAK,GACrD,QAAQ,KAAK,GAAG,QAAQ,UAAU,GAAG,OAAO;CAGlD;CACA,OAAO;AACT;AAEA,SAAgB,kBAAkB,aAAmC;CACnE,OAAO,YACJ,KAAK,UAAU,GAAG,MAAM,UAAU,GAAG,MAAM,OAAO,KAAK,GAAG,GAAG,CAAC,CAC9D,KAAK,IAAI;AACd"}

package/dist/token-store--9GYVL7N.cjs

@@ -0,0 +1,139 @@
+const require_cli_main = require('./cli/main.cjs');
+let _praha_byethrow = require("@praha/byethrow");
+let valibot = require("valibot");
+valibot = require_cli_main.__toESM(valibot, 1);
+let node_fs_promises = require("node:fs/promises");
+let node_os = require("node:os");
+node_os = require_cli_main.__toESM(node_os, 1);
+let node_path = require("node:path");
+node_path = require_cli_main.__toESM(node_path, 1);
+
+//#region src/cli/env.ts
+const DEFAULT_BASE_URL = "https://app.orizm.com";
+const trimmedUrl = valibot.pipe(valibot.string(), valibot.url(), valibot.transform((value) => value.replace(/\/+$/, "")));
+const nonEmpty = valibot.pipe(valibot.string(), valibot.nonEmpty());
+const EnvSchema = valibot.object({
+	ORIZM_BASE_URL: valibot.optional(trimmedUrl, DEFAULT_BASE_URL),
+	ORIZM_OAUTH_ISSUER_URL: valibot.optional(trimmedUrl),
+	ORIZM_API_KEY: valibot.optional(nonEmpty),
+	ORIZM_PROJECT: valibot.optional(nonEmpty)
+});
+function normalize(raw) {
+	if (raw === void 0) return void 0;
+	const trimmed = raw.trim();
+	return trimmed === "" ? void 0 : trimmed;
+}
+function resolveEnv(source = process.env) {
+	const parsed = valibot.safeParse(EnvSchema, {
+		ORIZM_BASE_URL: normalize(source.ORIZM_BASE_URL),
+		ORIZM_OAUTH_ISSUER_URL: normalize(source.ORIZM_OAUTH_ISSUER_URL),
+		ORIZM_API_KEY: normalize(source.ORIZM_API_KEY),
+		ORIZM_PROJECT: normalize(source.ORIZM_PROJECT)
+	});
+	if (!parsed.success) return _praha_byethrow.Result.fail({
+		type: "invalid_env",
+		issues: parsed.issues
+	});
+	const { ORIZM_BASE_URL, ORIZM_OAUTH_ISSUER_URL, ORIZM_API_KEY, ORIZM_PROJECT } = parsed.output;
+	return _praha_byethrow.Result.succeed({
+		baseUrl: ORIZM_BASE_URL,
+		issuerUrl: ORIZM_OAUTH_ISSUER_URL ?? ORIZM_BASE_URL,
+		apiKey: ORIZM_API_KEY,
+		project: ORIZM_PROJECT
+	});
+}
+
+//#endregion
+//#region src/cli/auth/token-store.ts
+const TokenEntrySchema = valibot.object({
+	accessToken: valibot.string(),
+	refreshToken: valibot.string(),
+	idToken: valibot.string(),
+	expiresAt: valibot.string(),
+	scope: valibot.string(),
+	subject: valibot.string(),
+	profile: valibot.object({
+		name: valibot.optional(valibot.string()),
+		email: valibot.optional(valibot.string())
+	})
+});
+const AuthFileSchema = valibot.object({ issuers: valibot.record(valibot.string(), TokenEntrySchema) });
+var FileTokenStore = class {
+	#dir;
+	#file;
+	constructor(dir = defaultAuthDir()) {
+		this.#dir = dir;
+		this.#file = node_path.default.join(dir, "auth.json");
+	}
+	async get(issuer) {
+		return (await this.#read()).issuers[issuer];
+	}
+	async set(issuer, entry) {
+		const file = await this.#read();
+		file.issuers[issuer] = entry;
+		await this.#write(file);
+	}
+	async remove(issuer) {
+		const file = await this.#read();
+		if (file.issuers[issuer] === void 0) return;
+		file.issuers = Object.fromEntries(Object.entries(file.issuers).filter(([key]) => key !== issuer));
+		await this.#write(file);
+	}
+	async #read() {
+		const raw = await (0, node_fs_promises.readFile)(this.#file, "utf-8").catch((error) => {
+			if (error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (raw === void 0) return { issuers: {} };
+		const parsed = valibot.safeParse(AuthFileSchema, safeJsonParse(raw));
+		if (!parsed.success) throw new Error(`Malformed auth file: ${this.#file}`);
+		return parsed.output;
+	}
+	async #write(file) {
+		await (0, node_fs_promises.mkdir)(this.#dir, {
+			recursive: true,
+			mode: 448
+		});
+		const temp = node_path.default.join(this.#dir, `auth.json.${globalThis.crypto.randomUUID()}.tmp`);
+		await (0, node_fs_promises.writeFile)(temp, JSON.stringify(file, null, 2), {
+			encoding: "utf-8",
+			mode: 384
+		});
+		if (process.platform !== "win32") await (0, node_fs_promises.chmod)(temp, 384);
+		await (0, node_fs_promises.rename)(temp, this.#file).catch(async (error) => {
+			await (0, node_fs_promises.rm)(temp, { force: true });
+			throw error;
+		});
+	}
+};
+function defaultAuthDir() {
+	if (process.platform === "win32") {
+		const appData = process.env.APPDATA ?? node_path.default.join(node_os.default.homedir(), "AppData", "Roaming");
+		return node_path.default.join(appData, "orizm");
+	}
+	const xdg = process.env.XDG_CONFIG_HOME;
+	const base = xdg != null && xdg !== "" ? xdg : node_path.default.join(node_os.default.homedir(), ".config");
+	return node_path.default.join(base, "orizm");
+}
+function safeJsonParse(raw) {
+	try {
+		return JSON.parse(raw);
+	} catch {
+		return;
+	}
+}
+
+//#endregion
+Object.defineProperty(exports, 'FileTokenStore', {
+  enumerable: true,
+  get: function () {
+    return FileTokenStore;
+  }
+});
+Object.defineProperty(exports, 'resolveEnv', {
+  enumerable: true,
+  get: function () {
+    return resolveEnv;
+  }
+});
+//# sourceMappingURL=token-store--9GYVL7N.cjs.map

package/dist/token-store--9GYVL7N.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store--9GYVL7N.cjs","names":["v","Result","v","#dir","#file","path","#read","#write","os"],"sources":["../src/cli/env.ts","../src/cli/auth/token-store.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport { Result } from \"@praha/byethrow\";\n\nexport const DEFAULT_BASE_URL = \"https://app.orizm.com\";\n\nexport type ResolvedEnv = {\n  baseUrl: string;\n  // OAuth2 issuer。ローカルで Hydra が別ポートのときだけ ORIZM_OAUTH_ISSUER_URL で上書きし、\n  // 省略時は baseUrl と同じ。トークンストアの namespace キーともこの値で一致させる。\n  issuerUrl: string;\n  apiKey: string | undefined;\n  project: string | undefined;\n};\n\nexport type EnvError = { type: \"invalid_env\"; issues: v.BaseIssue<unknown>[] };\n\nconst trimmedUrl = v.pipe(\n  v.string(),\n  v.url(),\n  // 末尾スラッシュの有無で issuer namespace キーがブレないよう正規化する。\n  v.transform((value) => value.replace(/\\/+$/, \"\")),\n);\n\nconst nonEmpty = v.pipe(v.string(), v.nonEmpty());\n\nconst EnvSchema = v.object({\n  ORIZM_BASE_URL: v.optional(trimmedUrl, DEFAULT_BASE_URL),\n  ORIZM_OAUTH_ISSUER_URL: v.optional(trimmedUrl),\n  ORIZM_API_KEY: v.optional(nonEmpty),\n  ORIZM_PROJECT: v.optional(nonEmpty),\n});\n\n// 空文字 / 空白のみの環境変数は未設定と同じ扱いにする（v.optional のデフォルト適用を働かせる）。\nfunction normalize(raw: string | undefined): string | undefined {\n  if (raw === undefined) return undefined;\n  const trimmed = raw.trim();\n  return trimmed === \"\" ? undefined : trimmed;\n}\n\nexport function resolveEnv(\n  source: NodeJS.ProcessEnv = process.env,\n): Result.Result<ResolvedEnv, EnvError> {\n  const parsed = v.safeParse(EnvSchema, {\n    ORIZM_BASE_URL: normalize(source.ORIZM_BASE_URL),\n    ORIZM_OAUTH_ISSUER_URL: normalize(source.ORIZM_OAUTH_ISSUER_URL),\n    ORIZM_API_KEY: normalize(source.ORIZM_API_KEY),\n    ORIZM_PROJECT: normalize(source.ORIZM_PROJECT),\n  });\n\n  if (!parsed.success) {\n    return Result.fail({ type: \"invalid_env\", issues: parsed.issues });\n  }\n\n  const {\n    ORIZM_BASE_URL,\n    ORIZM_OAUTH_ISSUER_URL,\n    ORIZM_API_KEY,\n    ORIZM_PROJECT,\n  } = parsed.output;\n\n  return Result.succeed({\n    baseUrl: ORIZM_BASE_URL,\n    issuerUrl: ORIZM_OAUTH_ISSUER_URL ?? ORIZM_BASE_URL,\n    apiKey: ORIZM_API_KEY,\n    project: ORIZM_PROJECT,\n  });\n}\n","import {\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  writeFile,\n  chmod,\n} from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport * as v from \"valibot\";\n\nconst TokenEntrySchema = v.object({\n  accessToken: v.string(),\n  refreshToken: v.string(),\n  idToken: v.string(),\n  // ISO8601。リフレッシュ要否の判定（残り 60 秒以下）に使う。\n  expiresAt: v.string(),\n  scope: v.string(),\n  subject: v.string(),\n  profile: v.object({\n    name: v.optional(v.string()),\n    email: v.optional(v.string()),\n  }),\n});\n\nconst AuthFileSchema = v.object({\n  issuers: v.record(v.string(), TokenEntrySchema),\n});\n\nexport type TokenEntry = v.InferOutput<typeof TokenEntrySchema>;\ntype AuthFile = v.InferOutput<typeof AuthFileSchema>;\n\nexport type TokenStore = {\n  get(issuer: string): Promise<TokenEntry | undefined>;\n  set(issuer: string, entry: TokenEntry): Promise<void>;\n  remove(issuer: string): Promise<void>;\n};\n\n// 実装が 1 つでも、後で OS keychain など別の保管先に差し替えられるよう interface に寄せておく。\nexport class FileTokenStore implements TokenStore {\n  readonly #dir: string;\n  readonly #file: string;\n\n  constructor(dir: string = defaultAuthDir()) {\n    this.#dir = dir;\n    this.#file = path.join(dir, \"auth.json\");\n  }\n\n  async get(issuer: string): Promise<TokenEntry | undefined> {\n    const file = await this.#read();\n    return file.issuers[issuer];\n  }\n\n  async set(issuer: string, entry: TokenEntry): Promise<void> {\n    const file = await this.#read();\n    file.issuers[issuer] = entry;\n    await this.#write(file);\n  }\n\n  async remove(issuer: string): Promise<void> {\n    const file = await this.#read();\n    if (file.issuers[issuer] === undefined) return;\n    file.issuers = Object.fromEntries(\n      Object.entries(file.issuers).filter(([key]) => key !== issuer),\n    );\n    await this.#write(file);\n  }\n\n  async #read(): Promise<AuthFile> {\n    const raw = await readFile(this.#file, \"utf-8\").catch(\n      (error: NodeJS.ErrnoException) => {\n        if (error.code === \"ENOENT\") return undefined;\n        throw error;\n      },\n    );\n    if (raw === undefined) return { issuers: {} };\n\n    const parsed = v.safeParse(AuthFileSchema, safeJsonParse(raw));\n    if (!parsed.success) {\n      throw new Error(`Malformed auth file: ${this.#file}`);\n    }\n    return parsed.output;\n  }\n\n  // Refresh Token rotation の途中でクラッシュしても token を失わないよう、\n  // 一時ファイルへ書いてから rename で差し替える。\n  async #write(file: AuthFile): Promise<void> {\n    await mkdir(this.#dir, { recursive: true, mode: 0o700 });\n    const temp = path.join(\n      this.#dir,\n      `auth.json.${globalThis.crypto.randomUUID()}.tmp`,\n    );\n    await writeFile(temp, JSON.stringify(file, null, 2), {\n      encoding: \"utf-8\",\n      mode: 0o600,\n    });\n    if (process.platform !== \"win32\") {\n      // umask の影響を受けないよう作成後に明示設定する。Windows は OS 既定 ACL に委ねる。\n      await chmod(temp, 0o600);\n    }\n    await rename(temp, this.#file).catch(async (error: unknown) => {\n      await rm(temp, { force: true });\n      throw error;\n    });\n  }\n}\n\nexport function defaultAuthDir(): string {\n  if (process.platform === \"win32\") {\n    const appData =\n      process.env.APPDATA ?? path.join(os.homedir(), \"AppData\", \"Roaming\");\n    return path.join(appData, \"orizm\");\n  }\n  const xdg = process.env.XDG_CONFIG_HOME;\n  const base =\n    xdg != null && xdg !== \"\" ? xdg : path.join(os.homedir(), \".config\");\n  return path.join(base, \"orizm\");\n}\n\nfunction safeJsonParse(raw: string): unknown {\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;;;;;AAGA,MAAa,mBAAmB;AAahC,MAAM,aAAaA,QAAE,KACnBA,QAAE,OAAO,GACTA,QAAE,IAAI,GAENA,QAAE,WAAW,UAAU,MAAM,QAAQ,QAAQ,EAAE,CAAC,CAClD;AAEA,MAAM,WAAWA,QAAE,KAAKA,QAAE,OAAO,GAAGA,QAAE,SAAS,CAAC;AAEhD,MAAM,YAAYA,QAAE,OAAO;CACzB,gBAAgBA,QAAE,SAAS,YAAY,gBAAgB;CACvD,wBAAwBA,QAAE,SAAS,UAAU;CAC7C,eAAeA,QAAE,SAAS,QAAQ;CAClC,eAAeA,QAAE,SAAS,QAAQ;AACpC,CAAC;AAGD,SAAS,UAAU,KAA6C;CAC9D,IAAI,QAAQ,QAAW,OAAO;CAC9B,MAAM,UAAU,IAAI,KAAK;CACzB,OAAO,YAAY,KAAK,SAAY;AACtC;AAEA,SAAgB,WACd,SAA4B,QAAQ,KACE;CACtC,MAAM,SAASA,QAAE,UAAU,WAAW;EACpC,gBAAgB,UAAU,OAAO,cAAc;EAC/C,wBAAwB,UAAU,OAAO,sBAAsB;EAC/D,eAAe,UAAU,OAAO,aAAa;EAC7C,eAAe,UAAU,OAAO,aAAa;CAC/C,CAAC;CAED,IAAI,CAAC,OAAO,SACV,OAAOC,uBAAO,KAAK;EAAE,MAAM;EAAe,QAAQ,OAAO;CAAO,CAAC;CAGnE,MAAM,EACJ,gBACA,wBACA,eACA,kBACE,OAAO;CAEX,OAAOA,uBAAO,QAAQ;EACpB,SAAS;EACT,WAAW,0BAA0B;EACrC,QAAQ;EACR,SAAS;CACX,CAAC;AACH;;;;ACtDA,MAAM,mBAAmBC,QAAE,OAAO;CAChC,aAAaA,QAAE,OAAO;CACtB,cAAcA,QAAE,OAAO;CACvB,SAASA,QAAE,OAAO;CAElB,WAAWA,QAAE,OAAO;CACpB,OAAOA,QAAE,OAAO;CAChB,SAASA,QAAE,OAAO;CAClB,SAASA,QAAE,OAAO;EAChB,MAAMA,QAAE,SAASA,QAAE,OAAO,CAAC;EAC3B,OAAOA,QAAE,SAASA,QAAE,OAAO,CAAC;CAC9B,CAAC;AACH,CAAC;AAED,MAAM,iBAAiBA,QAAE,OAAO,EAC9B,SAASA,QAAE,OAAOA,QAAE,OAAO,GAAG,gBAAgB,EAChD,CAAC;AAYD,IAAa,iBAAb,MAAkD;CAChD,AAASC;CACT,AAASC;CAET,YAAY,MAAc,eAAe,GAAG;EAC1C,KAAKD,OAAO;EACZ,KAAKC,QAAQC,kBAAK,KAAK,KAAK,WAAW;CACzC;CAEA,MAAM,IAAI,QAAiD;EAEzD,QAAO,MADY,KAAKC,MAAM,EACnB,CAAC,QAAQ;CACtB;CAEA,MAAM,IAAI,QAAgB,OAAkC;EAC1D,MAAM,OAAO,MAAM,KAAKA,MAAM;EAC9B,KAAK,QAAQ,UAAU;EACvB,MAAM,KAAKC,OAAO,IAAI;CACxB;CAEA,MAAM,OAAO,QAA+B;EAC1C,MAAM,OAAO,MAAM,KAAKD,MAAM;EAC9B,IAAI,KAAK,QAAQ,YAAY,QAAW;EACxC,KAAK,UAAU,OAAO,YACpB,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,QAAQ,MAAM,CAC/D;EACA,MAAM,KAAKC,OAAO,IAAI;CACxB;CAEA,MAAMD,QAA2B;EAC/B,MAAM,MAAM,qCAAe,KAAKF,OAAO,OAAO,CAAC,CAAC,OAC7C,UAAiC;GAChC,IAAI,MAAM,SAAS,UAAU,OAAO;GACpC,MAAM;EACR,CACF;EACA,IAAI,QAAQ,QAAW,OAAO,EAAE,SAAS,CAAC,EAAE;EAE5C,MAAM,SAASF,QAAE,UAAU,gBAAgB,cAAc,GAAG,CAAC;EAC7D,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,wBAAwB,KAAKE,OAAO;EAEtD,OAAO,OAAO;CAChB;CAIA,MAAMG,OAAO,MAA+B;EAC1C,kCAAY,KAAKJ,MAAM;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACvD,MAAM,OAAOE,kBAAK,KAChB,KAAKF,MACL,aAAa,WAAW,OAAO,WAAW,EAAE,KAC9C;EACA,sCAAgB,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;GACnD,UAAU;GACV,MAAM;EACR,CAAC;EACD,IAAI,QAAQ,aAAa,SAEvB,kCAAY,MAAM,GAAK;EAEzB,mCAAa,MAAM,KAAKC,KAAK,CAAC,CAAC,MAAM,OAAO,UAAmB;GAC7D,+BAAS,MAAM,EAAE,OAAO,KAAK,CAAC;GAC9B,MAAM;EACR,CAAC;CACH;AACF;AAEA,SAAgB,iBAAyB;CACvC,IAAI,QAAQ,aAAa,SAAS;EAChC,MAAM,UACJ,QAAQ,IAAI,WAAWC,kBAAK,KAAKG,gBAAG,QAAQ,GAAG,WAAW,SAAS;EACrE,OAAOH,kBAAK,KAAK,SAAS,OAAO;CACnC;CACA,MAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,OACJ,OAAO,QAAQ,QAAQ,KAAK,MAAMA,kBAAK,KAAKG,gBAAG,QAAQ,GAAG,SAAS;CACrE,OAAOH,kBAAK,KAAK,MAAM,OAAO;AAChC;AAEA,SAAS,cAAc,KAAsB;CAC3C,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN;CACF;AACF"}

package/dist/token-store-reCGF86F.mjs

@@ -0,0 +1,124 @@
+import { Result } from "@praha/byethrow";
+import * as v from "valibot";
+import { chmod, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+
+//#region src/cli/env.ts
+const DEFAULT_BASE_URL = "https://app.orizm.com";
+const trimmedUrl = v.pipe(v.string(), v.url(), v.transform((value) => value.replace(/\/+$/, "")));
+const nonEmpty = v.pipe(v.string(), v.nonEmpty());
+const EnvSchema = v.object({
+	ORIZM_BASE_URL: v.optional(trimmedUrl, DEFAULT_BASE_URL),
+	ORIZM_OAUTH_ISSUER_URL: v.optional(trimmedUrl),
+	ORIZM_API_KEY: v.optional(nonEmpty),
+	ORIZM_PROJECT: v.optional(nonEmpty)
+});
+function normalize(raw) {
+	if (raw === void 0) return void 0;
+	const trimmed = raw.trim();
+	return trimmed === "" ? void 0 : trimmed;
+}
+function resolveEnv(source = process.env) {
+	const parsed = v.safeParse(EnvSchema, {
+		ORIZM_BASE_URL: normalize(source.ORIZM_BASE_URL),
+		ORIZM_OAUTH_ISSUER_URL: normalize(source.ORIZM_OAUTH_ISSUER_URL),
+		ORIZM_API_KEY: normalize(source.ORIZM_API_KEY),
+		ORIZM_PROJECT: normalize(source.ORIZM_PROJECT)
+	});
+	if (!parsed.success) return Result.fail({
+		type: "invalid_env",
+		issues: parsed.issues
+	});
+	const { ORIZM_BASE_URL, ORIZM_OAUTH_ISSUER_URL, ORIZM_API_KEY, ORIZM_PROJECT } = parsed.output;
+	return Result.succeed({
+		baseUrl: ORIZM_BASE_URL,
+		issuerUrl: ORIZM_OAUTH_ISSUER_URL ?? ORIZM_BASE_URL,
+		apiKey: ORIZM_API_KEY,
+		project: ORIZM_PROJECT
+	});
+}
+
+//#endregion
+//#region src/cli/auth/token-store.ts
+const TokenEntrySchema = v.object({
+	accessToken: v.string(),
+	refreshToken: v.string(),
+	idToken: v.string(),
+	expiresAt: v.string(),
+	scope: v.string(),
+	subject: v.string(),
+	profile: v.object({
+		name: v.optional(v.string()),
+		email: v.optional(v.string())
+	})
+});
+const AuthFileSchema = v.object({ issuers: v.record(v.string(), TokenEntrySchema) });
+var FileTokenStore = class {
+	#dir;
+	#file;
+	constructor(dir = defaultAuthDir()) {
+		this.#dir = dir;
+		this.#file = path.join(dir, "auth.json");
+	}
+	async get(issuer) {
+		return (await this.#read()).issuers[issuer];
+	}
+	async set(issuer, entry) {
+		const file = await this.#read();
+		file.issuers[issuer] = entry;
+		await this.#write(file);
+	}
+	async remove(issuer) {
+		const file = await this.#read();
+		if (file.issuers[issuer] === void 0) return;
+		file.issuers = Object.fromEntries(Object.entries(file.issuers).filter(([key]) => key !== issuer));
+		await this.#write(file);
+	}
+	async #read() {
+		const raw = await readFile(this.#file, "utf-8").catch((error) => {
+			if (error.code === "ENOENT") return void 0;
+			throw error;
+		});
+		if (raw === void 0) return { issuers: {} };
+		const parsed = v.safeParse(AuthFileSchema, safeJsonParse(raw));
+		if (!parsed.success) throw new Error(`Malformed auth file: ${this.#file}`);
+		return parsed.output;
+	}
+	async #write(file) {
+		await mkdir(this.#dir, {
+			recursive: true,
+			mode: 448
+		});
+		const temp = path.join(this.#dir, `auth.json.${globalThis.crypto.randomUUID()}.tmp`);
+		await writeFile(temp, JSON.stringify(file, null, 2), {
+			encoding: "utf-8",
+			mode: 384
+		});
+		if (process.platform !== "win32") await chmod(temp, 384);
+		await rename(temp, this.#file).catch(async (error) => {
+			await rm(temp, { force: true });
+			throw error;
+		});
+	}
+};
+function defaultAuthDir() {
+	if (process.platform === "win32") {
+		const appData = process.env.APPDATA ?? path.join(os.homedir(), "AppData", "Roaming");
+		return path.join(appData, "orizm");
+	}
+	const xdg = process.env.XDG_CONFIG_HOME;
+	const base = xdg != null && xdg !== "" ? xdg : path.join(os.homedir(), ".config");
+	return path.join(base, "orizm");
+}
+function safeJsonParse(raw) {
+	try {
+		return JSON.parse(raw);
+	} catch {
+		return;
+	}
+}
+
+//#endregion
+export { resolveEnv as n, FileTokenStore as t };
+//# sourceMappingURL=token-store-reCGF86F.mjs.map

package/dist/token-store-reCGF86F.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store-reCGF86F.mjs","names":["#dir","#file","#read","#write"],"sources":["../src/cli/env.ts","../src/cli/auth/token-store.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport { Result } from \"@praha/byethrow\";\n\nexport const DEFAULT_BASE_URL = \"https://app.orizm.com\";\n\nexport type ResolvedEnv = {\n  baseUrl: string;\n  // OAuth2 issuer。ローカルで Hydra が別ポートのときだけ ORIZM_OAUTH_ISSUER_URL で上書きし、\n  // 省略時は baseUrl と同じ。トークンストアの namespace キーともこの値で一致させる。\n  issuerUrl: string;\n  apiKey: string | undefined;\n  project: string | undefined;\n};\n\nexport type EnvError = { type: \"invalid_env\"; issues: v.BaseIssue<unknown>[] };\n\nconst trimmedUrl = v.pipe(\n  v.string(),\n  v.url(),\n  // 末尾スラッシュの有無で issuer namespace キーがブレないよう正規化する。\n  v.transform((value) => value.replace(/\\/+$/, \"\")),\n);\n\nconst nonEmpty = v.pipe(v.string(), v.nonEmpty());\n\nconst EnvSchema = v.object({\n  ORIZM_BASE_URL: v.optional(trimmedUrl, DEFAULT_BASE_URL),\n  ORIZM_OAUTH_ISSUER_URL: v.optional(trimmedUrl),\n  ORIZM_API_KEY: v.optional(nonEmpty),\n  ORIZM_PROJECT: v.optional(nonEmpty),\n});\n\n// 空文字 / 空白のみの環境変数は未設定と同じ扱いにする（v.optional のデフォルト適用を働かせる）。\nfunction normalize(raw: string | undefined): string | undefined {\n  if (raw === undefined) return undefined;\n  const trimmed = raw.trim();\n  return trimmed === \"\" ? undefined : trimmed;\n}\n\nexport function resolveEnv(\n  source: NodeJS.ProcessEnv = process.env,\n): Result.Result<ResolvedEnv, EnvError> {\n  const parsed = v.safeParse(EnvSchema, {\n    ORIZM_BASE_URL: normalize(source.ORIZM_BASE_URL),\n    ORIZM_OAUTH_ISSUER_URL: normalize(source.ORIZM_OAUTH_ISSUER_URL),\n    ORIZM_API_KEY: normalize(source.ORIZM_API_KEY),\n    ORIZM_PROJECT: normalize(source.ORIZM_PROJECT),\n  });\n\n  if (!parsed.success) {\n    return Result.fail({ type: \"invalid_env\", issues: parsed.issues });\n  }\n\n  const {\n    ORIZM_BASE_URL,\n    ORIZM_OAUTH_ISSUER_URL,\n    ORIZM_API_KEY,\n    ORIZM_PROJECT,\n  } = parsed.output;\n\n  return Result.succeed({\n    baseUrl: ORIZM_BASE_URL,\n    issuerUrl: ORIZM_OAUTH_ISSUER_URL ?? ORIZM_BASE_URL,\n    apiKey: ORIZM_API_KEY,\n    project: ORIZM_PROJECT,\n  });\n}\n","import {\n  mkdir,\n  readFile,\n  rename,\n  rm,\n  writeFile,\n  chmod,\n} from \"node:fs/promises\";\nimport os from \"node:os\";\nimport path from \"node:path\";\nimport * as v from \"valibot\";\n\nconst TokenEntrySchema = v.object({\n  accessToken: v.string(),\n  refreshToken: v.string(),\n  idToken: v.string(),\n  // ISO8601。リフレッシュ要否の判定（残り 60 秒以下）に使う。\n  expiresAt: v.string(),\n  scope: v.string(),\n  subject: v.string(),\n  profile: v.object({\n    name: v.optional(v.string()),\n    email: v.optional(v.string()),\n  }),\n});\n\nconst AuthFileSchema = v.object({\n  issuers: v.record(v.string(), TokenEntrySchema),\n});\n\nexport type TokenEntry = v.InferOutput<typeof TokenEntrySchema>;\ntype AuthFile = v.InferOutput<typeof AuthFileSchema>;\n\nexport type TokenStore = {\n  get(issuer: string): Promise<TokenEntry | undefined>;\n  set(issuer: string, entry: TokenEntry): Promise<void>;\n  remove(issuer: string): Promise<void>;\n};\n\n// 実装が 1 つでも、後で OS keychain など別の保管先に差し替えられるよう interface に寄せておく。\nexport class FileTokenStore implements TokenStore {\n  readonly #dir: string;\n  readonly #file: string;\n\n  constructor(dir: string = defaultAuthDir()) {\n    this.#dir = dir;\n    this.#file = path.join(dir, \"auth.json\");\n  }\n\n  async get(issuer: string): Promise<TokenEntry | undefined> {\n    const file = await this.#read();\n    return file.issuers[issuer];\n  }\n\n  async set(issuer: string, entry: TokenEntry): Promise<void> {\n    const file = await this.#read();\n    file.issuers[issuer] = entry;\n    await this.#write(file);\n  }\n\n  async remove(issuer: string): Promise<void> {\n    const file = await this.#read();\n    if (file.issuers[issuer] === undefined) return;\n    file.issuers = Object.fromEntries(\n      Object.entries(file.issuers).filter(([key]) => key !== issuer),\n    );\n    await this.#write(file);\n  }\n\n  async #read(): Promise<AuthFile> {\n    const raw = await readFile(this.#file, \"utf-8\").catch(\n      (error: NodeJS.ErrnoException) => {\n        if (error.code === \"ENOENT\") return undefined;\n        throw error;\n      },\n    );\n    if (raw === undefined) return { issuers: {} };\n\n    const parsed = v.safeParse(AuthFileSchema, safeJsonParse(raw));\n    if (!parsed.success) {\n      throw new Error(`Malformed auth file: ${this.#file}`);\n    }\n    return parsed.output;\n  }\n\n  // Refresh Token rotation の途中でクラッシュしても token を失わないよう、\n  // 一時ファイルへ書いてから rename で差し替える。\n  async #write(file: AuthFile): Promise<void> {\n    await mkdir(this.#dir, { recursive: true, mode: 0o700 });\n    const temp = path.join(\n      this.#dir,\n      `auth.json.${globalThis.crypto.randomUUID()}.tmp`,\n    );\n    await writeFile(temp, JSON.stringify(file, null, 2), {\n      encoding: \"utf-8\",\n      mode: 0o600,\n    });\n    if (process.platform !== \"win32\") {\n      // umask の影響を受けないよう作成後に明示設定する。Windows は OS 既定 ACL に委ねる。\n      await chmod(temp, 0o600);\n    }\n    await rename(temp, this.#file).catch(async (error: unknown) => {\n      await rm(temp, { force: true });\n      throw error;\n    });\n  }\n}\n\nexport function defaultAuthDir(): string {\n  if (process.platform === \"win32\") {\n    const appData =\n      process.env.APPDATA ?? path.join(os.homedir(), \"AppData\", \"Roaming\");\n    return path.join(appData, \"orizm\");\n  }\n  const xdg = process.env.XDG_CONFIG_HOME;\n  const base =\n    xdg != null && xdg !== \"\" ? xdg : path.join(os.homedir(), \".config\");\n  return path.join(base, \"orizm\");\n}\n\nfunction safeJsonParse(raw: string): unknown {\n  try {\n    return JSON.parse(raw);\n  } catch {\n    return undefined;\n  }\n}\n"],"mappings":";;;;;;;AAGA,MAAa,mBAAmB;AAahC,MAAM,aAAa,EAAE,KACnB,EAAE,OAAO,GACT,EAAE,IAAI,GAEN,EAAE,WAAW,UAAU,MAAM,QAAQ,QAAQ,EAAE,CAAC,CAClD;AAEA,MAAM,WAAW,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,SAAS,CAAC;AAEhD,MAAM,YAAY,EAAE,OAAO;CACzB,gBAAgB,EAAE,SAAS,YAAY,gBAAgB;CACvD,wBAAwB,EAAE,SAAS,UAAU;CAC7C,eAAe,EAAE,SAAS,QAAQ;CAClC,eAAe,EAAE,SAAS,QAAQ;AACpC,CAAC;AAGD,SAAS,UAAU,KAA6C;CAC9D,IAAI,QAAQ,QAAW,OAAO;CAC9B,MAAM,UAAU,IAAI,KAAK;CACzB,OAAO,YAAY,KAAK,SAAY;AACtC;AAEA,SAAgB,WACd,SAA4B,QAAQ,KACE;CACtC,MAAM,SAAS,EAAE,UAAU,WAAW;EACpC,gBAAgB,UAAU,OAAO,cAAc;EAC/C,wBAAwB,UAAU,OAAO,sBAAsB;EAC/D,eAAe,UAAU,OAAO,aAAa;EAC7C,eAAe,UAAU,OAAO,aAAa;CAC/C,CAAC;CAED,IAAI,CAAC,OAAO,SACV,OAAO,OAAO,KAAK;EAAE,MAAM;EAAe,QAAQ,OAAO;CAAO,CAAC;CAGnE,MAAM,EACJ,gBACA,wBACA,eACA,kBACE,OAAO;CAEX,OAAO,OAAO,QAAQ;EACpB,SAAS;EACT,WAAW,0BAA0B;EACrC,QAAQ;EACR,SAAS;CACX,CAAC;AACH;;;;ACtDA,MAAM,mBAAmB,EAAE,OAAO;CAChC,aAAa,EAAE,OAAO;CACtB,cAAc,EAAE,OAAO;CACvB,SAAS,EAAE,OAAO;CAElB,WAAW,EAAE,OAAO;CACpB,OAAO,EAAE,OAAO;CAChB,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;EAChB,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;EAC3B,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC9B,CAAC;AACH,CAAC;AAED,MAAM,iBAAiB,EAAE,OAAO,EAC9B,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,gBAAgB,EAChD,CAAC;AAYD,IAAa,iBAAb,MAAkD;CAChD,AAASA;CACT,AAASC;CAET,YAAY,MAAc,eAAe,GAAG;EAC1C,KAAKD,OAAO;EACZ,KAAKC,QAAQ,KAAK,KAAK,KAAK,WAAW;CACzC;CAEA,MAAM,IAAI,QAAiD;EAEzD,QAAO,MADY,KAAKC,MAAM,EACnB,CAAC,QAAQ;CACtB;CAEA,MAAM,IAAI,QAAgB,OAAkC;EAC1D,MAAM,OAAO,MAAM,KAAKA,MAAM;EAC9B,KAAK,QAAQ,UAAU;EACvB,MAAM,KAAKC,OAAO,IAAI;CACxB;CAEA,MAAM,OAAO,QAA+B;EAC1C,MAAM,OAAO,MAAM,KAAKD,MAAM;EAC9B,IAAI,KAAK,QAAQ,YAAY,QAAW;EACxC,KAAK,UAAU,OAAO,YACpB,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,SAAS,QAAQ,MAAM,CAC/D;EACA,MAAM,KAAKC,OAAO,IAAI;CACxB;CAEA,MAAMD,QAA2B;EAC/B,MAAM,MAAM,MAAM,SAAS,KAAKD,OAAO,OAAO,CAAC,CAAC,OAC7C,UAAiC;GAChC,IAAI,MAAM,SAAS,UAAU,OAAO;GACpC,MAAM;EACR,CACF;EACA,IAAI,QAAQ,QAAW,OAAO,EAAE,SAAS,CAAC,EAAE;EAE5C,MAAM,SAAS,EAAE,UAAU,gBAAgB,cAAc,GAAG,CAAC;EAC7D,IAAI,CAAC,OAAO,SACV,MAAM,IAAI,MAAM,wBAAwB,KAAKA,OAAO;EAEtD,OAAO,OAAO;CAChB;CAIA,MAAME,OAAO,MAA+B;EAC1C,MAAM,MAAM,KAAKH,MAAM;GAAE,WAAW;GAAM,MAAM;EAAM,CAAC;EACvD,MAAM,OAAO,KAAK,KAChB,KAAKA,MACL,aAAa,WAAW,OAAO,WAAW,EAAE,KAC9C;EACA,MAAM,UAAU,MAAM,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;GACnD,UAAU;GACV,MAAM;EACR,CAAC;EACD,IAAI,QAAQ,aAAa,SAEvB,MAAM,MAAM,MAAM,GAAK;EAEzB,MAAM,OAAO,MAAM,KAAKC,KAAK,CAAC,CAAC,MAAM,OAAO,UAAmB;GAC7D,MAAM,GAAG,MAAM,EAAE,OAAO,KAAK,CAAC;GAC9B,MAAM;EACR,CAAC;CACH;AACF;AAEA,SAAgB,iBAAyB;CACvC,IAAI,QAAQ,aAAa,SAAS;EAChC,MAAM,UACJ,QAAQ,IAAI,WAAW,KAAK,KAAK,GAAG,QAAQ,GAAG,WAAW,SAAS;EACrE,OAAO,KAAK,KAAK,SAAS,OAAO;CACnC;CACA,MAAM,MAAM,QAAQ,IAAI;CACxB,MAAM,OACJ,OAAO,QAAQ,QAAQ,KAAK,MAAM,KAAK,KAAK,GAAG,QAAQ,GAAG,SAAS;CACrE,OAAO,KAAK,KAAK,MAAM,OAAO;AAChC;AAEA,SAAS,cAAc,KAAsB;CAC3C,IAAI;EACF,OAAO,KAAK,MAAM,GAAG;CACvB,QAAQ;EACN;CACF;AACF"}

package/dist/update-8e3u4jKa.mjs

@@ -0,0 +1,109 @@
+import { t as defineCommand } from "./cli/main.mjs";
+import { r as contextArgs } from "./shared-CZZimGxc.mjs";
+import { a as apiErrorFailure, n as runWithContext, u as toResult } from "./run-with-context-CVhmzAFZ.mjs";
+import { t as renderDetail } from "./detail-DN5jCQ4N.mjs";
+import { f as parseRepeatableFlag, t as collectRepeatableFlag } from "./parse-CA5fBB3x.mjs";
+import { r as resolveArrayUpdate } from "./array-update-CMFUoQEe.mjs";
+import { i as warnMissingGroupRemovals, n as formatGroupRoles, r as parseGroupRoles, t as applyGroupRoleEdits } from "./group-roles-BEEzLxPX.mjs";
+import { Result } from "@praha/byethrow";
+
+//#region src/cli/commands/project-user/update.ts
+async function projectUserUpdateHandler(ctx, options) {
+	if (options.name === void 0 && options.groupRoles === void 0) return Result.fail({ message: "Nothing to update. Pass --name or a --group-role option." });
+	let groupRoles;
+	if (options.groupRoles?.mode === "edit") {
+		const current = toResult(await ctx.client.GET("/projects/{projectName}/users/{userId}", { params: { path: {
+			projectName: ctx.projectName,
+			userId: options.userId
+		} } }));
+		if (Result.isFailure(current)) return apiErrorFailure(current.error);
+		warnMissingGroupRemovals(current.value.groupRoles, options.groupRoles.remove);
+		groupRoles = applyGroupRoleEdits(current.value.groupRoles, options.groupRoles);
+	} else if (options.groupRoles !== void 0) groupRoles = options.groupRoles.items;
+	const body = {
+		...options.name !== void 0 ? { name: options.name } : {},
+		...groupRoles !== void 0 ? { groupRoles } : {}
+	};
+	const updated = toResult(await ctx.client.PUT("/projects/{projectName}/users/{userId}", {
+		params: { path: {
+			projectName: ctx.projectName,
+			userId: options.userId
+		} },
+		body
+	}));
+	if (Result.isFailure(updated)) return apiErrorFailure(updated.error);
+	const value = updated.value;
+	return Result.succeed({
+		json: value,
+		text: () => renderDetail([
+			["Updated", value.id],
+			["Name", value.name],
+			["Email", value.email],
+			["Group roles", formatGroupRoles(value.groupRoles)]
+		])
+	});
+}
+const updateArgs = {
+	...contextArgs,
+	"user-id": {
+		type: "positional",
+		required: true,
+		description: "Project user ID"
+	},
+	name: {
+		type: "string",
+		description: "New display name"
+	},
+	"group-role": {
+		type: "string",
+		description: "Replace all RBAC assignments with <group>:<role>; repeatable"
+	},
+	"add-group-role": {
+		type: "string",
+		description: "Add an RBAC assignment as <group>:<role>; repeatable"
+	},
+	"remove-group-role": {
+		type: "string",
+		description: "Remove an RBAC assignment by group name; repeatable"
+	},
+	"clear-group-roles": {
+		type: "boolean",
+		description: "Remove all RBAC assignments",
+		default: false
+	}
+};
+var update_default = defineCommand({
+	meta: {
+		name: "update",
+		description: "Update a project user's name or group roles"
+	},
+	args: updateArgs,
+	run: async ({ args, rawArgs }) => {
+		const replace = parseGroupRoles("group-role", collectRepeatableFlag(rawArgs, "group-role"));
+		if (Result.isFailure(replace)) return replace;
+		const added = parseGroupRoles("add-group-role", collectRepeatableFlag(rawArgs, "add-group-role"));
+		if (Result.isFailure(added)) return added;
+		const removeValues = collectRepeatableFlag(rawArgs, "remove-group-role");
+		const removed = removeValues === void 0 ? Result.succeed(void 0) : parseRepeatableFlag("remove-group-role", removeValues);
+		if (Result.isFailure(removed)) return removed;
+		const groupRoles = resolveArrayUpdate({
+			replaceFlag: "group-role",
+			clearFlag: "clear-group-roles",
+			editFlags: "--add-group-role / --remove-group-role",
+			replace: replace.value,
+			add: added.value,
+			remove: removed.value,
+			clear: args["clear-group-roles"] === true
+		});
+		if (Result.isFailure(groupRoles)) return groupRoles;
+		return runWithContext(args, (ctx) => projectUserUpdateHandler(ctx, {
+			userId: args["user-id"],
+			name: typeof args.name === "string" ? args.name : void 0,
+			groupRoles: groupRoles.value
+		}));
+	}
+});
+
+//#endregion
+export { update_default as default };
+//# sourceMappingURL=update-8e3u4jKa.mjs.map

package/dist/update-8e3u4jKa.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-8e3u4jKa.mjs","names":[],"sources":["../src/cli/commands/project-user/update.ts"],"sourcesContent":["import type { ArgsDef } from \"citty\";\nimport { Result } from \"@praha/byethrow\";\nimport {\n  defineCommand,\n  type CommandFailure,\n  type CommandOutput,\n} from \"../define-command.js\";\nimport { contextArgs } from \"../shared.js\";\nimport { runWithContext, type CommandContext } from \"../run-with-context.js\";\nimport { apiErrorFailure } from \"../api-errors.js\";\nimport { toResult } from \"../../api/errors.js\";\nimport { renderDetail } from \"../../ui/detail.js\";\nimport { collectRepeatableFlag, parseRepeatableFlag } from \"../parse.js\";\nimport { resolveArrayUpdate, type ArrayUpdate } from \"../array-update.js\";\nimport {\n  applyGroupRoleEdits,\n  formatGroupRoles,\n  warnMissingGroupRemovals,\n  parseGroupRoles,\n  type GroupRole,\n} from \"../group-roles.js\";\n\nexport async function projectUserUpdateHandler(\n  ctx: CommandContext,\n  options: {\n    userId: string;\n    name?: string;\n    groupRoles: ArrayUpdate<GroupRole, string>;\n  },\n): Promise<Result.Result<CommandOutput | undefined, CommandFailure>> {\n  if (options.name === undefined && options.groupRoles === undefined) {\n    return Result.fail({\n      message: \"Nothing to update. Pass --name or a --group-role option.\",\n    });\n  }\n\n  // API は groupRoles の全置換しか受けないため、要素単位の編集は現状を取得してから組み立てる\n  let groupRoles: GroupRole[] | undefined;\n  if (options.groupRoles?.mode === \"edit\") {\n    const current = toResult(\n      await ctx.client.GET(\"/projects/{projectName}/users/{userId}\", {\n        params: {\n          path: { projectName: ctx.projectName, userId: options.userId },\n        },\n      }),\n    );\n    if (Result.isFailure(current)) return apiErrorFailure(current.error);\n    warnMissingGroupRemovals(\n      current.value.groupRoles,\n      options.groupRoles.remove,\n    );\n    groupRoles = applyGroupRoleEdits(\n      current.value.groupRoles,\n      options.groupRoles,\n    );\n  } else if (options.groupRoles !== undefined) {\n    groupRoles = options.groupRoles.items;\n  }\n\n  const body = {\n    ...(options.name !== undefined ? { name: options.name } : {}),\n    ...(groupRoles !== undefined ? { groupRoles } : {}),\n  };\n\n  const updated = toResult(\n    await ctx.client.PUT(\"/projects/{projectName}/users/{userId}\", {\n      params: {\n        path: { projectName: ctx.projectName, userId: options.userId },\n      },\n      body,\n    }),\n  );\n  if (Result.isFailure(updated)) return apiErrorFailure(updated.error);\n\n  const value = updated.value;\n  return Result.succeed({\n    json: value,\n    text: () =>\n      renderDetail([\n        [\"Updated\", value.id],\n        [\"Name\", value.name],\n        [\"Email\", value.email],\n        [\"Group roles\", formatGroupRoles(value.groupRoles)],\n      ]),\n  });\n}\n\nconst updateArgs = {\n  ...contextArgs,\n  \"user-id\": {\n    type: \"positional\",\n    required: true,\n    description: \"Project user ID\",\n  },\n  name: {\n    type: \"string\",\n    description: \"New display name\",\n  },\n  \"group-role\": {\n    type: \"string\",\n    description: \"Replace all RBAC assignments with <group>:<role>; repeatable\",\n  },\n  \"add-group-role\": {\n    type: \"string\",\n    description: \"Add an RBAC assignment as <group>:<role>; repeatable\",\n  },\n  \"remove-group-role\": {\n    type: \"string\",\n    description: \"Remove an RBAC assignment by group name; repeatable\",\n  },\n  \"clear-group-roles\": {\n    type: \"boolean\",\n    description: \"Remove all RBAC assignments\",\n    default: false,\n  },\n} satisfies ArgsDef;\n\nexport default defineCommand({\n  meta: {\n    name: \"update\",\n    description: \"Update a project user's name or group roles\",\n  },\n  args: updateArgs,\n  run: async ({ args, rawArgs }) => {\n    const replace = parseGroupRoles(\n      \"group-role\",\n      collectRepeatableFlag(rawArgs, \"group-role\"),\n    );\n    if (Result.isFailure(replace)) return replace;\n    const added = parseGroupRoles(\n      \"add-group-role\",\n      collectRepeatableFlag(rawArgs, \"add-group-role\"),\n    );\n    if (Result.isFailure(added)) return added;\n    const removeValues = collectRepeatableFlag(rawArgs, \"remove-group-role\");\n    const removed =\n      removeValues === undefined\n        ? Result.succeed(undefined)\n        : parseRepeatableFlag(\"remove-group-role\", removeValues);\n    if (Result.isFailure(removed)) return removed;\n    const groupRoles = resolveArrayUpdate({\n      replaceFlag: \"group-role\",\n      clearFlag: \"clear-group-roles\",\n      editFlags: \"--add-group-role / --remove-group-role\",\n      replace: replace.value,\n      add: added.value,\n      remove: removed.value,\n      clear: args[\"clear-group-roles\"] === true,\n    });\n    if (Result.isFailure(groupRoles)) return groupRoles;\n\n    return runWithContext(args, (ctx) =>\n      projectUserUpdateHandler(ctx, {\n        userId: args[\"user-id\"],\n        name: typeof args.name === \"string\" ? args.name : undefined,\n        groupRoles: groupRoles.value,\n      }),\n    );\n  },\n});\n"],"mappings":";;;;;;;;;;AAsBA,eAAsB,yBACpB,KACA,SAKmE;CACnE,IAAI,QAAQ,SAAS,UAAa,QAAQ,eAAe,QACvD,OAAO,OAAO,KAAK,EACjB,SAAS,2DACX,CAAC;CAIH,IAAI;CACJ,IAAI,QAAQ,YAAY,SAAS,QAAQ;EACvC,MAAM,UAAU,SACd,MAAM,IAAI,OAAO,IAAI,0CAA0C,EAC7D,QAAQ,EACN,MAAM;GAAE,aAAa,IAAI;GAAa,QAAQ,QAAQ;EAAO,EAC/D,EACF,CAAC,CACH;EACA,IAAI,OAAO,UAAU,OAAO,GAAG,OAAO,gBAAgB,QAAQ,KAAK;EACnE,yBACE,QAAQ,MAAM,YACd,QAAQ,WAAW,MACrB;EACA,aAAa,oBACX,QAAQ,MAAM,YACd,QAAQ,UACV;CACF,OAAO,IAAI,QAAQ,eAAe,QAChC,aAAa,QAAQ,WAAW;CAGlC,MAAM,OAAO;EACX,GAAI,QAAQ,SAAS,SAAY,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;EAC3D,GAAI,eAAe,SAAY,EAAE,WAAW,IAAI,CAAC;CACnD;CAEA,MAAM,UAAU,SACd,MAAM,IAAI,OAAO,IAAI,0CAA0C;EAC7D,QAAQ,EACN,MAAM;GAAE,aAAa,IAAI;GAAa,QAAQ,QAAQ;EAAO,EAC/D;EACA;CACF,CAAC,CACH;CACA,IAAI,OAAO,UAAU,OAAO,GAAG,OAAO,gBAAgB,QAAQ,KAAK;CAEnE,MAAM,QAAQ,QAAQ;CACtB,OAAO,OAAO,QAAQ;EACpB,MAAM;EACN,YACE,aAAa;GACX,CAAC,WAAW,MAAM,EAAE;GACpB,CAAC,QAAQ,MAAM,IAAI;GACnB,CAAC,SAAS,MAAM,KAAK;GACrB,CAAC,eAAe,iBAAiB,MAAM,UAAU,CAAC;EACpD,CAAC;CACL,CAAC;AACH;AAEA,MAAM,aAAa;CACjB,GAAG;CACH,WAAW;EACT,MAAM;EACN,UAAU;EACV,aAAa;CACf;CACA,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,cAAc;EACZ,MAAM;EACN,aAAa;CACf;CACA,kBAAkB;EAChB,MAAM;EACN,aAAa;CACf;CACA,qBAAqB;EACnB,MAAM;EACN,aAAa;CACf;CACA,qBAAqB;EACnB,MAAM;EACN,aAAa;EACb,SAAS;CACX;AACF;AAEA,qBAAe,cAAc;CAC3B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,KAAK,OAAO,EAAE,MAAM,cAAc;EAChC,MAAM,UAAU,gBACd,cACA,sBAAsB,SAAS,YAAY,CAC7C;EACA,IAAI,OAAO,UAAU,OAAO,GAAG,OAAO;EACtC,MAAM,QAAQ,gBACZ,kBACA,sBAAsB,SAAS,gBAAgB,CACjD;EACA,IAAI,OAAO,UAAU,KAAK,GAAG,OAAO;EACpC,MAAM,eAAe,sBAAsB,SAAS,mBAAmB;EACvE,MAAM,UACJ,iBAAiB,SACb,OAAO,QAAQ,MAAS,IACxB,oBAAoB,qBAAqB,YAAY;EAC3D,IAAI,OAAO,UAAU,OAAO,GAAG,OAAO;EACtC,MAAM,aAAa,mBAAmB;GACpC,aAAa;GACb,WAAW;GACX,WAAW;GACX,SAAS,QAAQ;GACjB,KAAK,MAAM;GACX,QAAQ,QAAQ;GAChB,OAAO,KAAK,yBAAyB;EACvC,CAAC;EACD,IAAI,OAAO,UAAU,UAAU,GAAG,OAAO;EAEzC,OAAO,eAAe,OAAO,QAC3B,yBAAyB,KAAK;GAC5B,QAAQ,KAAK;GACb,MAAM,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;GAClD,YAAY,WAAW;EACzB,CAAC,CACH;CACF;AACF,CAAC"}

package/dist/update-CDLviRuu.cjs

@@ -0,0 +1,73 @@
+const require_cli_main = require('./cli/main.cjs');
+const require_shared = require('./shared-DHRPzzKl.cjs');
+const require_run_with_context = require('./run-with-context-DJNnEigg.cjs');
+const require_detail = require('./detail-8CXNIhKw.cjs');
+const require_parse = require('./parse-BeO2IwfI.cjs');
+const require_project_name = require('./project-name-CEoM-OL4.cjs');
+let _praha_byethrow = require("@praha/byethrow");
+
+//#region src/cli/commands/project/update.ts
+async function projectUpdateHandler(ctx, options) {
+	const body = {
+		...options.displayName !== void 0 ? { displayName: options.displayName } : {},
+		...options.cmsUrl !== void 0 ? { cmsUrl: options.cmsUrl } : {},
+		...options.deletionProtected !== void 0 ? { isDeletionProtected: options.deletionProtected } : {}
+	};
+	if (Object.keys(body).length === 0) return _praha_byethrow.Result.fail({ message: "Nothing to update. Pass --display-name, --cms-url, or --deletion-protected." });
+	const updated = require_run_with_context.toResult(await ctx.client.PUT("/projects/{projectName}", {
+		params: { path: { projectName: ctx.projectName } },
+		body
+	}));
+	if (_praha_byethrow.Result.isFailure(updated)) return require_run_with_context.apiErrorFailure(updated.error);
+	const value = updated.value;
+	return _praha_byethrow.Result.succeed({
+		json: value,
+		text: () => require_detail.renderDetail([
+			["Updated", value.name],
+			["Display name", value.displayName],
+			["CMS URL", value.cmsUrl ?? "-"],
+			["Deletion protected", String(value.isDeletionProtected)]
+		])
+	});
+}
+const updateArgs = {
+	...require_shared.contextArgs,
+	name: {
+		type: "positional",
+		required: false,
+		description: "Project name (defaults to the current project context)"
+	},
+	"display-name": {
+		type: "string",
+		description: "New display name"
+	},
+	"cms-url": {
+		type: "string",
+		description: "New CMS URL"
+	},
+	"deletion-protected": {
+		type: "string",
+		description: "Set deletion protection (true/false)",
+		valueHint: "true|false"
+	}
+};
+var update_default = require_cli_main.defineCommand({
+	meta: {
+		name: "update",
+		description: "Update a project's settings"
+	},
+	args: updateArgs,
+	run: async ({ args }) => {
+		const deletionProtected = require_parse.parseBooleanFlag("deletion-protected", args["deletion-protected"]);
+		if (_praha_byethrow.Result.isFailure(deletionProtected)) return deletionProtected;
+		return require_run_with_context.runWithContext(require_project_name.projectNameOverride(args), (ctx) => projectUpdateHandler(ctx, {
+			displayName: typeof args["display-name"] === "string" ? args["display-name"] : void 0,
+			cmsUrl: typeof args["cms-url"] === "string" ? args["cms-url"] : void 0,
+			deletionProtected: deletionProtected.value
+		}));
+	}
+});
+
+//#endregion
+exports.default = update_default;
+//# sourceMappingURL=update-CDLviRuu.cjs.map

package/dist/update-CDLviRuu.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-CDLviRuu.cjs","names":["Result","toResult","apiErrorFailure","renderDetail","contextArgs","defineCommand","parseBooleanFlag","runWithContext","projectNameOverride"],"sources":["../src/cli/commands/project/update.ts"],"sourcesContent":["import type { ArgsDef } from \"citty\";\nimport { Result } from \"@praha/byethrow\";\nimport type { components } from \"@orizm/internal-shared/api-clients/dev-v2\";\nimport {\n  defineCommand,\n  type CommandFailure,\n  type CommandOutput,\n} from \"../define-command.js\";\nimport { contextArgs } from \"../shared.js\";\nimport { runWithContext, type CommandContext } from \"../run-with-context.js\";\nimport { apiErrorFailure } from \"../api-errors.js\";\nimport { toResult } from \"../../api/errors.js\";\nimport { renderDetail } from \"../../ui/detail.js\";\nimport { parseBooleanFlag } from \"../parse.js\";\nimport { projectNameOverride } from \"./project-name.js\";\n\nexport async function projectUpdateHandler(\n  ctx: CommandContext,\n  options: {\n    displayName?: string;\n    cmsUrl?: string;\n    deletionProtected?: boolean;\n  },\n): Promise<Result.Result<CommandOutput | undefined, CommandFailure>> {\n  const body: components[\"schemas\"][\"UpdateProjectRequest\"] = {\n    ...(options.displayName !== undefined\n      ? { displayName: options.displayName }\n      : {}),\n    ...(options.cmsUrl !== undefined ? { cmsUrl: options.cmsUrl } : {}),\n    ...(options.deletionProtected !== undefined\n      ? { isDeletionProtected: options.deletionProtected }\n      : {}),\n  };\n\n  if (Object.keys(body).length === 0) {\n    return Result.fail({\n      message:\n        \"Nothing to update. Pass --display-name, --cms-url, or --deletion-protected.\",\n    });\n  }\n\n  const updated = toResult(\n    await ctx.client.PUT(\"/projects/{projectName}\", {\n      params: { path: { projectName: ctx.projectName } },\n      body,\n    }),\n  );\n  if (Result.isFailure(updated)) return apiErrorFailure(updated.error);\n\n  const value = updated.value;\n  return Result.succeed({\n    json: value,\n    text: () =>\n      renderDetail([\n        [\"Updated\", value.name],\n        [\"Display name\", value.displayName],\n        [\"CMS URL\", value.cmsUrl ?? \"-\"],\n        [\"Deletion protected\", String(value.isDeletionProtected)],\n      ]),\n  });\n}\n\nconst updateArgs = {\n  ...contextArgs,\n  name: {\n    type: \"positional\",\n    required: false,\n    description: \"Project name (defaults to the current project context)\",\n  },\n  \"display-name\": {\n    type: \"string\",\n    description: \"New display name\",\n  },\n  \"cms-url\": {\n    type: \"string\",\n    description: \"New CMS URL\",\n  },\n  // 「未指定 = 変更しない」「true / false = その値へ変更」の 3 状態を扱うため、\n  // bare 指定が true になる boolean フラグではなく、値を明示させる文字列で受ける。\n  \"deletion-protected\": {\n    type: \"string\",\n    description: \"Set deletion protection (true/false)\",\n    valueHint: \"true|false\",\n  },\n} satisfies ArgsDef;\n\nexport default defineCommand({\n  meta: {\n    name: \"update\",\n    description: \"Update a project's settings\",\n  },\n  args: updateArgs,\n  run: async ({ args }) => {\n    const deletionProtected = parseBooleanFlag(\n      \"deletion-protected\",\n      args[\"deletion-protected\"],\n    );\n    if (Result.isFailure(deletionProtected)) return deletionProtected;\n\n    return runWithContext(projectNameOverride(args), (ctx) =>\n      projectUpdateHandler(ctx, {\n        displayName:\n          typeof args[\"display-name\"] === \"string\"\n            ? args[\"display-name\"]\n            : undefined,\n        cmsUrl:\n          typeof args[\"cms-url\"] === \"string\" ? args[\"cms-url\"] : undefined,\n        deletionProtected: deletionProtected.value,\n      }),\n    );\n  },\n});\n"],"mappings":";;;;;;;;;AAgBA,eAAsB,qBACpB,KACA,SAKmE;CACnE,MAAM,OAAsD;EAC1D,GAAI,QAAQ,gBAAgB,SACxB,EAAE,aAAa,QAAQ,YAAY,IACnC,CAAC;EACL,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;EACjE,GAAI,QAAQ,sBAAsB,SAC9B,EAAE,qBAAqB,QAAQ,kBAAkB,IACjD,CAAC;CACP;CAEA,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,WAAW,GAC/B,OAAOA,uBAAO,KAAK,EACjB,SACE,8EACJ,CAAC;CAGH,MAAM,UAAUC,kCACd,MAAM,IAAI,OAAO,IAAI,2BAA2B;EAC9C,QAAQ,EAAE,MAAM,EAAE,aAAa,IAAI,YAAY,EAAE;EACjD;CACF,CAAC,CACH;CACA,IAAID,uBAAO,UAAU,OAAO,GAAG,OAAOE,yCAAgB,QAAQ,KAAK;CAEnE,MAAM,QAAQ,QAAQ;CACtB,OAAOF,uBAAO,QAAQ;EACpB,MAAM;EACN,YACEG,4BAAa;GACX,CAAC,WAAW,MAAM,IAAI;GACtB,CAAC,gBAAgB,MAAM,WAAW;GAClC,CAAC,WAAW,MAAM,UAAU,GAAG;GAC/B,CAAC,sBAAsB,OAAO,MAAM,mBAAmB,CAAC;EAC1D,CAAC;CACL,CAAC;AACH;AAEA,MAAM,aAAa;CACjB,GAAGC;CACH,MAAM;EACJ,MAAM;EACN,UAAU;EACV,aAAa;CACf;CACA,gBAAgB;EACd,MAAM;EACN,aAAa;CACf;CACA,WAAW;EACT,MAAM;EACN,aAAa;CACf;CAGA,sBAAsB;EACpB,MAAM;EACN,aAAa;EACb,WAAW;CACb;AACF;AAEA,qBAAeC,+BAAc;CAC3B,MAAM;EACJ,MAAM;EACN,aAAa;CACf;CACA,MAAM;CACN,KAAK,OAAO,EAAE,WAAW;EACvB,MAAM,oBAAoBC,+BACxB,sBACA,KAAK,qBACP;EACA,IAAIN,uBAAO,UAAU,iBAAiB,GAAG,OAAO;EAEhD,OAAOO,wCAAeC,yCAAoB,IAAI,IAAI,QAChD,qBAAqB,KAAK;GACxB,aACE,OAAO,KAAK,oBAAoB,WAC5B,KAAK,kBACL;GACN,QACE,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;GAC1D,mBAAmB,kBAAkB;EACvC,CAAC,CACH;CACF;AACF,CAAC"}