@paradigma-inc/flywheel 0.1.115 → 0.1.134

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-create.js

@@ -1,9 +1,256 @@
+import { createHash } from "node:crypto";
+import { constants } from "node:fs";
+import { link, lstat, open, unlink, } from "node:fs/promises";
+import { basename, dirname, isAbsolute, join, resolve } from "node:path";
+import { CliUsageError } from "../errors.js";
 import { adminAuthRequestOptions, requireAdminCredential, } from "./_admin-auth.js";
+let checkpoint = () => undefined;
+export function __setAdminTestUserCreateCheckpointForTests(replacement = () => undefined) {
+    checkpoint = replacement;
+}
+function stateConflict(message = "generated-user lifecycle state conflict") {
+    throw new CliUsageError(message);
+}
+function stringParam(params, name) {
+    const value = params[name];
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string") {
+        throw new CliUsageError(`invalid --${name}: expected a value`);
+    }
+    return value;
+}
+async function privateFile(path, expected) {
+    let details;
+    try {
+        details = await lstat(path);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            stateConflict();
+        throw error;
+    }
+    if (!details.isFile() ||
+        details.isSymbolicLink() ||
+        (process.getuid !== undefined && details.uid !== process.getuid()) ||
+        (details.mode & 0o777) !== 0o600) {
+        stateConflict();
+    }
+    const handle = await open(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
+    let value;
+    try {
+        value = await handle.readFile();
+    }
+    finally {
+        await handle.close();
+    }
+    if (expected !== undefined && !value.equals(expected))
+        stateConflict();
+    return value;
+}
+async function privateDirectory(path) {
+    const details = await lstat(path);
+    if (!details.isDirectory() ||
+        details.isSymbolicLink() ||
+        (process.getuid !== undefined && details.uid !== process.getuid()) ||
+        (details.mode & 0o777) !== 0o700) {
+        stateConflict();
+    }
+}
+async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+async function sameFile(left, right) {
+    const [leftDetails, rightDetails] = await Promise.all([
+        lstat(left),
+        lstat(right),
+    ]);
+    return (leftDetails.dev === rightDetails.dev && leftDetails.ino === rightDetails.ino);
+}
+async function syncDirectory(path) {
+    const handle = await open(path, constants.O_RDONLY);
+    try {
+        await handle.sync();
+    }
+    finally {
+        await handle.close();
+    }
+}
+async function publish(finalPath, temporaryPath, value, label) {
+    if (dirname(finalPath) !== dirname(temporaryPath))
+        stateConflict();
+    const [finalExists, temporaryExists] = await Promise.all([
+        exists(finalPath),
+        exists(temporaryPath),
+    ]);
+    if (finalExists) {
+        await privateFile(finalPath, value);
+        if (temporaryExists) {
+            await privateFile(temporaryPath, value);
+            if (!(await sameFile(finalPath, temporaryPath)))
+                stateConflict();
+            await unlink(temporaryPath);
+            checkpoint(`${label}.temp_unlinked`);
+            await syncDirectory(dirname(finalPath));
+            checkpoint(`${label}.cleanup_fsynced`);
+        }
+        return;
+    }
+    if (temporaryExists) {
+        await privateFile(temporaryPath);
+        await unlink(temporaryPath);
+        await syncDirectory(dirname(finalPath));
+    }
+    const handle = await open(temporaryPath, constants.O_WRONLY |
+        constants.O_CREAT |
+        constants.O_EXCL |
+        (constants.O_NOFOLLOW ?? 0), 0o600);
+    try {
+        await handle.chmod(0o600);
+        checkpoint(`${label}.created`);
+        const split = Math.max(1, Math.floor(value.length / 2));
+        await handle.write(value.subarray(0, split));
+        checkpoint(`${label}.partial_written`);
+        await handle.write(value.subarray(split));
+        checkpoint(`${label}.written`);
+        await handle.sync();
+        checkpoint(`${label}.fsynced`);
+    }
+    finally {
+        await handle.close();
+    }
+    await privateFile(temporaryPath, value);
+    try {
+        await link(temporaryPath, finalPath);
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+        await privateFile(finalPath, value);
+        if (!(await sameFile(finalPath, temporaryPath)))
+            stateConflict();
+    }
+    checkpoint(`${label}.linked`);
+    await syncDirectory(dirname(finalPath));
+    checkpoint(`${label}.parent_fsynced`);
+    await unlink(temporaryPath);
+    checkpoint(`${label}.temp_unlinked`);
+    await syncDirectory(dirname(finalPath));
+    checkpoint(`${label}.cleanup_fsynced`);
+    await privateFile(finalPath, value);
+}
+async function lifecycleBinding(claim, output, idempotencyKey) {
+    if (!isAbsolute(claim) ||
+        !isAbsolute(output) ||
+        dirname(claim) !== dirname(output)) {
+        stateConflict("generated-user lifecycle manifest mismatch");
+    }
+    const directory = dirname(claim);
+    await privateDirectory(directory);
+    const manifestPath = join(directory, "run-manifest.json");
+    let manifest;
+    try {
+        manifest = JSON.parse((await privateFile(manifestPath)).toString("utf8"));
+    }
+    catch (error) {
+        if (error instanceof CliUsageError)
+            throw error;
+        stateConflict("generated-user lifecycle manifest mismatch");
+    }
+    const record = manifest;
+    const generationId = record.generation_id;
+    if (record.schema_version !== 1 ||
+        typeof generationId !== "string" ||
+        !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(generationId) ||
+        record.paths?.user_id_claim !== resolve(claim) ||
+        record.paths?.user_id_file !== resolve(output) ||
+        record.values?.create_idempotency_key !== idempotencyKey) {
+        stateConflict("generated-user lifecycle manifest mismatch");
+    }
+    const claimValue = Buffer.from(`${JSON.stringify({
+        schema_version: 1,
+        claim_nonce: generationId,
+        create_idempotency_key_sha256: createHash("sha256")
+            .update(idempotencyKey)
+            .digest("hex"),
+        user_id_out: resolve(output),
+    })}\n`);
+    return {
+        claim: resolve(claim),
+        claimTemporary: join(directory, `.${basename(claim)}.${generationId}.init`),
+        claimValue,
+        output: resolve(output),
+        outputTemporary: join(directory, `.${basename(output)}.${generationId}.init`),
+    };
+}
+function generatedUserId(payload) {
+    const value = payload?.user_id;
+    if (typeof value !== "string" ||
+        !/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value)) {
+        stateConflict("generated-user response is invalid");
+    }
+    return value;
+}
 export const adminTestUsersCreateCommand = async (context) => {
     requireAdminCredential(context, "admin:test-users:create");
     const options = {
         ...adminAuthRequestOptions(context.apiKey),
     };
-    return context.requestJson("POST", "/admin/test-users", options);
+    const claim = stringParam(context.params, "user_id_claim");
+    const output = stringParam(context.params, "user_id_out");
+    if (claim === undefined && output === undefined) {
+        return context.requestJson("POST", "/admin/test-users", options);
+    }
+    if (claim === undefined || output === undefined) {
+        throw new CliUsageError("generated-user capture requires both claim and output paths");
+    }
+    const idempotencyKey = context.globals?.idempotencyKey;
+    if (!idempotencyKey) {
+        throw new CliUsageError("generated-user capture requires an idempotency key");
+    }
+    const binding = await lifecycleBinding(claim, output, idempotencyKey);
+    const claimExists = await exists(binding.claim);
+    if (!claimExists &&
+        ((await exists(binding.output)) || (await exists(binding.outputTemporary)))) {
+        stateConflict();
+    }
+    await publish(binding.claim, binding.claimTemporary, binding.claimValue, "claim");
+    const [outputExists, outputTemporaryExists] = await Promise.all([
+        exists(binding.output),
+        exists(binding.outputTemporary),
+    ]);
+    if (outputExists) {
+        const existing = (await privateFile(binding.output)).toString("utf8");
+        if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}\n$/i.test(existing)) {
+            stateConflict();
+        }
+    }
+    if (outputTemporaryExists) {
+        await privateFile(binding.outputTemporary);
+        if (outputExists &&
+            !(await sameFile(binding.output, binding.outputTemporary))) {
+            stateConflict();
+        }
+    }
+    const payload = await context.requestJson("POST", "/admin/test-users", options);
+    checkpoint("request.completed");
+    const userId = generatedUserId(payload);
+    const userIdValue = Buffer.from(`${userId}\n`);
+    if (await exists(binding.output)) {
+        const existing = await privateFile(binding.output);
+        if (!existing.equals(userIdValue)) {
+            stateConflict("generated-user replay identity mismatch");
+        }
+    }
+    await publish(binding.output, binding.outputTemporary, userIdValue, "user_id");
+    return undefined;
 };
 //# sourceMappingURL=admin-test-users-create.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-create.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-test-users-create.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-create.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,CAAC,MAAM,2BAA2B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3E,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;AACnE,CAAC,CAAC"}
+{"version":3,"file":"admin-test-users-create.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-create.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,MAAM,GACP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEzE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAK1B,IAAI,UAAU,GAAe,GAAG,EAAE,CAAC,SAAS,CAAC;AAE7C,MAAM,UAAU,0CAA0C,CACxD,cAA0B,GAAG,EAAE,CAAC,SAAS;IAEzC,UAAU,GAAG,WAAW,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,OAAO,GAAG,yCAAyC;IACxE,MAAM,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,WAAW,CAClB,MAAwC,EACxC,IAAY;IAEZ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,aAAa,CAAC,aAAa,IAAI,oBAAoB,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,QAAiB;IACxD,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,aAAa,EAAE,CAAC;QACxE,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IACE,CAAC,OAAO,CAAC,MAAM,EAAE;QACjB,OAAO,CAAC,cAAc,EAAE;QACxB,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAClE,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAChC,CAAC;QACD,aAAa,EAAE,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,IAAI,EACJ,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CACjD,CAAC;IACF,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,aAAa,EAAE,CAAC;IACvE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,IACE,CAAC,OAAO,CAAC,WAAW,EAAE;QACtB,OAAO,CAAC,cAAc,EAAE;QACxB,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAClE,CAAC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,EAChC,CAAC;QACD,aAAa,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY;IAChC,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAa;IACjD,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC;QACX,KAAK,CAAC,KAAK,CAAC;KACb,CAAC,CAAC;IACH,OAAO,CACL,WAAW,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,KAAK,YAAY,CAAC,GAAG,CAC7E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,SAAiB,EACjB,aAAqB,EACrB,KAAa,EACb,KAAa;IAEb,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,aAAa,CAAC;QAAE,aAAa,EAAE,CAAC;IACnE,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACvD,MAAM,CAAC,SAAS,CAAC;QACjB,MAAM,CAAC,aAAa,CAAC;KACtB,CAAC,CAAC;IACH,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,eAAe,EAAE,CAAC;YACpB,MAAM,WAAW,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBAAE,aAAa,EAAE,CAAC;YACjE,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;YAC5B,UAAU,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;YACrC,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;YACxC,UAAU,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QACzC,CAAC;QACD,OAAO;IACT,CAAC;IAED,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,WAAW,CAAC,aAAa,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;QAC5B,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,aAAa,EACb,SAAS,CAAC,QAAQ;QAChB,SAAS,CAAC,OAAO;QACjB,SAAS,CAAC,MAAM;QAChB,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,EAC7B,KAAK,CACN,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACxD,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC7C,UAAU,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;QACvC,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;QAC/B,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,WAAW,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;QACpE,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAAE,aAAa,EAAE,CAAC;IACnE,CAAC;IACD,UAAU,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC9B,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,UAAU,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;IACtC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5B,UAAU,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC;IACrC,MAAM,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACxC,UAAU,CAAC,GAAG,KAAK,kBAAkB,CAAC,CAAC;IACvC,MAAM,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACtC,CAAC;AAUD,KAAK,UAAU,gBAAgB,CAC7B,KAAa,EACb,MAAc,EACd,cAAsB;IAEtB,IACE,CAAC,UAAU,CAAC,KAAK,CAAC;QAClB,CAAC,UAAU,CAAC,MAAM,CAAC;QACnB,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,EAClC,CAAC;QACD,aAAa,CAAC,4CAA4C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;IAC1D,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,aAAa,CAAC,4CAA4C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,QAKd,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;IAC1C,IACE,MAAM,CAAC,cAAc,KAAK,CAAC;QAC3B,OAAO,YAAY,KAAK,QAAQ;QAChC,CAAC,4EAA4E,CAAC,IAAI,CAChF,YAAY,CACb;QACD,MAAM,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,KAAK,CAAC;QAC9C,MAAM,CAAC,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,MAAM,CAAC;QAC9C,MAAM,CAAC,MAAM,EAAE,sBAAsB,KAAK,cAAc,EACxD,CAAC;QACD,aAAa,CAAC,4CAA4C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAC5B,GAAG,IAAI,CAAC,SAAS,CAAC;QAChB,cAAc,EAAE,CAAC;QACjB,WAAW,EAAE,YAAY;QACzB,6BAA6B,EAAE,UAAU,CAAC,QAAQ,CAAC;aAChD,MAAM,CAAC,cAAc,CAAC;aACtB,MAAM,CAAC,KAAK,CAAC;QAChB,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC;KAC7B,CAAC,IAAI,CACP,CAAC;IACF,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACrB,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,OAAO,CAAC;QAC3E,UAAU;QACV,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC;QACvB,eAAe,EAAE,IAAI,CACnB,SAAS,EACT,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,YAAY,OAAO,CAC5C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,KAAK,GAAI,OAAwC,EAAE,OAAO,CAAC;IACjE,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,4EAA4E,CAAC,IAAI,CAChF,KAAK,CACN,EACD,CAAC;QACD,aAAa,CAAC,oCAAoC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3E,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,OAAO,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChD,MAAM,IAAI,aAAa,CACrB,6DAA6D,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC;IACvD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,MAAM,IAAI,aAAa,CACrB,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,IACE,CAAC,WAAW;QACZ,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAC3E,CAAC;QACD,aAAa,EAAE,CAAC;IAClB,CAAC;IACD,MAAM,OAAO,CACX,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,cAAc,EACtB,OAAO,CAAC,UAAU,EAClB,OAAO,CACR,CAAC;IACF,MAAM,CAAC,YAAY,EAAE,qBAAqB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC;KAChC,CAAC,CAAC;IACH,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,QAAQ,GAAG,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACtE,IACE,CAAC,8EAA8E,CAAC,IAAI,CAClF,QAAQ,CACT,EACD,CAAC;YACD,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3C,IACE,YAAY;YACZ,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,EAC1D,CAAC;YACD,aAAa,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAC;IAChF,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAC/C,IAAI,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,aAAa,CAAC,yCAAyC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,MAAM,OAAO,CACX,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,eAAe,EACvB,WAAW,EACX,SAAS,CACV,CAAC;IACF,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-login.js

@@ -1,8 +1,22 @@
 import { adminAuthRequestOptions, requireAdminCredential, } from "./_admin-auth.js";
 import { buildPrivateBrowserHandoffResult, requirePrivateBrowserHandoff, } from "./_browser-handoff.js";
-import { requiredString } from "./utils.js";
+import { CliUsageError } from "../errors.js";
+import { EXIT_TRANSPORT } from "../exit-codes.js";
+import { CliHttpError } from "../http/client.js";
+import { requiredBoolean, requiredString } from "./utils.js";
 export const adminTestUsersLoginCommand = async (context) => {
     requireAdminCredential(context, "admin:test-users:login");
+    const headless = context.params.headless !== undefined &&
+        requiredBoolean(context.params, "headless");
+    const credentialStdout = context.params["credential-stdout"] !== undefined &&
+        requiredBoolean(context.params, "credential-stdout");
+    if (headless || credentialStdout) {
+        if (!headless || !credentialStdout || context.globals?.open ||
+            context.globals?.formatExplicit || context.globals?.outPath !== undefined) {
+            throw new CliUsageError("--headless and --credential-stdout require each other and forbid browser, format, and output-file options");
+        }
+        return issueToPipe(context);
+    }
     requirePrivateBrowserHandoff(context.globals);
     const userId = requiredString(context.params, "user_id");
     const options = {
@@ -17,4 +31,54 @@ export const adminTestUsersLoginCommand = async (context) => {
         nextAction: "Test-user browser session opened.",
     });
 };
+function validExpiry(value) {
+    if (typeof value !== "string")
+        return false;
+    const parts = /^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])[Tt](?:[01]\d|2[0-3]):[0-5]\d:[0-5]\d(?:\.\d+)?(?:[Zz]|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/.exec(value);
+    if (!parts || !Number.isFinite(Date.parse(value)))
+        return false;
+    const year = Number(parts[1]);
+    const leap = year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+    return Number(parts[3]) <= [31, leap ? 29 : 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31][Number(parts[2]) - 1];
+}
+async function issueToPipe(context) {
+    if (context.credentialOutput !== "pipe" || !context.stdout || !context.stderr) {
+        throw new CliUsageError("Credential output requires the process stdout pipe or socket");
+    }
+    const userId = requiredString(context.params, "user_id");
+    let response;
+    try {
+        response = await context.requestJson("POST", `/admin/test-users/${encodeURIComponent(userId)}/api-key`, { ...adminAuthRequestOptions(context.apiKey), body: {}, retryEnabled: false });
+    }
+    catch (error) {
+        // Never pass a one-time secret body or transport diagnostics to the formatter.
+        throw new CliHttpError("Generated-user credential issuance failed; do not retry before account reconciliation", error instanceof CliHttpError ? error.exitCode : EXIT_TRANSPORT, error instanceof CliHttpError ? error.status : undefined);
+    }
+    const payload = response;
+    if (!payload || typeof payload !== "object" ||
+        typeof payload.key !== "string" || !payload.key ||
+        /[\r\n]/.test(payload.key) || payload.key.trim() !== payload.key ||
+        typeof payload.key_id !== "string" ||
+        !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(payload.key_id) ||
+        !validExpiry(payload.expires_at)) {
+        throw new CliHttpError("Invalid generated-user credential response; reconcile the account before retrying", EXIT_TRANSPORT);
+    }
+    try {
+        await context.stderr(`${JSON.stringify({
+            action: "issued",
+            target_role: "generated-test-user",
+            key_id: payload.key_id,
+            expires_at: payload.expires_at,
+        })}\n`);
+    }
+    catch {
+        throw new CliHttpError("Credential receipt delivery failed; reconcile the account", EXIT_TRANSPORT);
+    }
+    try {
+        await context.stdout(`${payload.key}\n`);
+    }
+    catch {
+        throw new CliHttpError("Credential delivery failed; revoke the recorded key before retrying", EXIT_TRANSPORT);
+    }
+}
 //# sourceMappingURL=admin-test-users-login.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-test-users-login.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-login.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,CAAC,MAAM,0BAA0B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC1E,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC1D,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,MAAM,OAAO,GACX,CAAC,MAAM,OAAO,CAAC,WAAW,CACxB,MAAM,EACN,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAC5D,OAAO,CACR,CAAC,IAAI,EAAE,CAAC;IACX,OAAO,gCAAgC,CAAC;QACtC,OAAO,EAAE,wBAAwB;QACjC,GAAG,EAAE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,mCAAmC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC"}
+{"version":3,"file":"admin-test-users-login.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-login.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE7D,MAAM,CAAC,MAAM,0BAA0B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC1E,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS;QACpD,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC9C,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,KAAK,SAAS;QACxE,eAAe,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IACvD,IAAI,QAAQ,IAAI,gBAAgB,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,IAAI,OAAO,CAAC,OAAO,EAAE,IAAI;YACzD,OAAO,CAAC,OAAO,EAAE,cAAc,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5E,MAAM,IAAI,aAAa,CACrB,2GAA2G,CAC5G,CAAC;QACJ,CAAC;QACD,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9B,CAAC;IACD,4BAA4B,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,MAAM,OAAO,GACX,CAAC,MAAM,OAAO,CAAC,WAAW,CACxB,MAAM,EACN,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,aAAa,EAC5D,OAAO,CACR,CAAC,IAAI,EAAE,CAAC;IACX,OAAO,gCAAgC,CAAC;QACtC,OAAO,EAAE,wBAAwB;QACjC,GAAG,EAAE,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE;QACvE,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,UAAU,EAAE,mCAAmC;KAChD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,KAAK,GAAG,sIAAsI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;AACjH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAuB;IAChD,IAAI,OAAO,CAAC,gBAAgB,KAAK,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9E,MAAM,IAAI,aAAa,CAAC,8DAA8D,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAClC,MAAM,EACN,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,UAAU,EACzD,EAAE,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAC9E,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,+EAA+E;QAC/E,MAAM,IAAI,YAAY,CACpB,uFAAuF,EACvF,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,EAC/D,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,QAA0C,CAAC;IAC3D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QACzC,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG;QAC/C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,OAAO,CAAC,GAAG;QAChE,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ;QAClC,CAAC,iEAAiE,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QACvF,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,YAAY,CACpB,mFAAmF,EACnF,cAAc,CACf,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YACrC,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,qBAAqB;YAClC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,IAAI,CAAC,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,2DAA2D,EAAE,cAAc,CAAC,CAAC;IACtG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,qEAAqE,EAAE,cAAc,CAAC,CAAC;IAChH,CAAC;AACH,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-revoke-api-key.js

@@ -0,0 +1,17 @@
+import { adminAuthRequestOptions, requireAdminCredential } from "./_admin-auth.js";
+import { EXIT_TRANSPORT } from "../exit-codes.js";
+import { CliHttpError } from "../http/client.js";
+import { requiredString } from "./utils.js";
+export const adminTestUsersRevokeApiKeyCommand = async (context) => {
+    requireAdminCredential(context, "admin:test-users:revoke-api-key");
+    const userId = requiredString(context.params, "user_id");
+    const keyId = requiredString(context.params, "key_id");
+    try {
+        await context.requestJson("DELETE", `/admin/test-users/${encodeURIComponent(userId)}/api-keys/${encodeURIComponent(keyId)}`, adminAuthRequestOptions(context.apiKey));
+    }
+    catch (error) {
+        throw new CliHttpError("Generated-user key revocation failed", error instanceof CliHttpError ? error.exitCode : EXIT_TRANSPORT, error instanceof CliHttpError ? error.status : undefined);
+    }
+    return { action: "revoked", target_role: "generated-test-user", key_id: keyId };
+};
+//# sourceMappingURL=admin-test-users-revoke-api-key.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-test-users-revoke-api-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-test-users-revoke-api-key.js","sourceRoot":"","sources":["../../src/commands/admin-test-users-revoke-api-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,CAAC,MAAM,iCAAiC,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IACjF,sBAAsB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,WAAW,CACvB,QAAQ,EACR,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,aAAa,kBAAkB,CAAC,KAAK,CAAC,EAAE,EACvF,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC,CACxC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,sCAAsC,EACtC,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,EAC/D,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAClF,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/aliases.js

@@ -1,13 +1,9 @@
 export const RUNTIME_ALIASES = Object.freeze({
     as: 'auth:status',
     al: 'auth:login',
-    nl: 'nodes:list',
-    ng: 'nodes:get',
-    nc: 'nodes:commit',
-    nb: 'nodes:branch',
-    nm: 'nodes:merge',
-    arl: 'artifacts:list',
-    aru: 'artifacts:upload',
+    nl: 'hosted:node:list',
+    ng: 'hosted:node:get',
+    arl: 'hosted:artifact:list',
     cs: 'compute:status',
 });
 //# sourceMappingURL=aliases.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/aliases.js.map

@@ -1 +1 @@
-{"version":3,"file":"aliases.js","sourceRoot":"","sources":["../../src/commands/aliases.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,cAAc;IAClB,EAAE,EAAE,cAAc;IAClB,EAAE,EAAE,aAAa;IACjB,GAAG,EAAE,gBAAgB;IACrB,GAAG,EAAE,kBAAkB;IACvB,EAAE,EAAE,gBAAgB;CACZ,CAAC,CAAC"}
+{"version":3,"file":"aliases.js","sourceRoot":"","sources":["../../src/commands/aliases.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,EAAE,EAAE,aAAa;IACjB,EAAE,EAAE,YAAY;IAChB,EAAE,EAAE,kBAAkB;IACtB,EAAE,EAAE,iBAAiB;IACrB,GAAG,EAAE,sBAAsB;IAC3B,EAAE,EAAE,gBAAgB;CACZ,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-credentials-clear.js

@@ -0,0 +1,12 @@
+import { clearCredential } from "../auth/credentials.js";
+import { CliUsageError } from "../errors.js";
+import { optionalString } from "./utils.js";
+export const authCredentialsClearCommand = async (context) => {
+    const profile = optionalString(context.params, "profile") ?? "default";
+    if (!context.authCredentialFile) {
+        throw new CliUsageError("credential store path is unavailable");
+    }
+    const removed = await clearCredential(profile, context.authCredentialFile);
+    return { ok: removed, profile };
+};
+//# sourceMappingURL=auth-credentials-clear.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-credentials-clear.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-credentials-clear.js","sourceRoot":"","sources":["../../src/commands/auth-credentials-clear.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,CAAC,MAAM,2BAA2B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3E,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC;IACvE,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC3E,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-credentials-set.js

@@ -0,0 +1,29 @@
+import { text } from "node:stream/consumers";
+import { setCredential } from "../auth/credentials.js";
+import { resolveBuiltinBaseUrl } from "../auth/profiles.js";
+import { CliUsageError } from "../errors.js";
+import { optionalString } from "./utils.js";
+function resolveProfileBaseUrl(context, profile) {
+    const builtinBaseUrl = resolveBuiltinBaseUrl(profile);
+    if (builtinBaseUrl)
+        return builtinBaseUrl;
+    const configured = context.config.profiles?.[profile];
+    if (configured)
+        return configured.baseUrl;
+    if (profile === "default")
+        return context.authDefaultBaseUrl;
+    throw new CliUsageError(`unknown profile: ${profile}. Create its endpoint with flywheel profile:set --name ${profile} --base_url <url>.`);
+}
+export const authCredentialsSetCommand = async (context) => {
+    const profile = optionalString(context.params, "profile") ?? "default";
+    const baseUrl = resolveProfileBaseUrl(context, profile);
+    const apiKey = (await text(process.stdin.setEncoding("utf8"))).replace(/\r?\n$/, "");
+    if (!apiKey)
+        throw new CliUsageError("no key value received on stdin");
+    if (!context.authCredentialFile) {
+        throw new CliUsageError("credential store path is unavailable");
+    }
+    await setCredential(profile, baseUrl, apiKey, context.authCredentialFile);
+    return { ok: true, profile };
+};
+//# sourceMappingURL=auth-credentials-set.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-credentials-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-credentials-set.js","sourceRoot":"","sources":["../../src/commands/auth-credentials-set.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,SAAS,qBAAqB,CAC5B,OAAuB,EACvB,OAAe;IAEf,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAE1C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC,OAAO,CAAC;IAC1C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,kBAAkB,CAAC;IAE7D,MAAM,IAAI,aAAa,CACrB,oBAAoB,OAAO,0DAA0D,OAAO,oBAAoB,CACjH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IACzE,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,SAAS,CAAC;IACvE,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CACpE,QAAQ,EACR,EAAE,CACH,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACvE,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-login.js

@@ -1,3 +1,5 @@
+import { baseUrlsEqual } from '../auth/baseurl.js';
+import { BUILTIN_PROFILE_NAMES, resolveBuiltinBaseUrl, } from '../auth/profiles.js';
 import { runAuthLogin } from '../auth/login.js';
 import { CliUsageError } from '../errors.js';
 import { EXIT_AUTH, EXIT_USAGE } from '../exit-codes.js';
@@ -13,12 +15,22 @@ export const authLoginCommand = async (context) => {
         : (chunk) => {
             process.stderr.write(chunk);
         };
+    const credentialProfile = context.authProfileBaseUrl &&
+        baseUrlsEqual(context.baseUrl, context.authProfileBaseUrl)
+        ? context.authProfile
+        : undefined;
+    const builtinProfile = BUILTIN_PROFILE_NAMES.find((name) => baseUrlsEqual(context.baseUrl, resolveBuiltinBaseUrl(name) ?? ""));
+    if (!context.authCredentialFile) {
+        throw new CliUsageError("credential store path is unavailable");
+    }
     const result = await runAuthLogin({
         baseUrl: context.baseUrl,
         params: context.params,
         requestJson: context.requestJson,
         saveConfig: context.saveConfig,
         configPath: context.configPath,
+        profileName: credentialProfile ?? builtinProfile ?? "default",
+        credentialFile: context.authCredentialFile,
         writeStdout: writeProgress,
     });
     if (result.exit_code === 3) {

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-login.js","sourceRoot":"","sources":["../../src/commands/auth-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGzD,MAAM,CAAC,MAAM,gBAAgB,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM;QAClC,CAAC,CAAC,CAAC,KAAa,EAAE,EAAE;YAChB,OAAO,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACH,CAAC,CAAC,CAAC,KAAa,EAAE,EAAE;YAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;IACN,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,aAAa;KAC3B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,wCAAwC,EAAE;YAChE,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACnC,CAAC,CAAC"}
+{"version":3,"file":"auth-login.js","sourceRoot":"","sources":["../../src/commands/auth-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAGzD,MAAM,CAAC,MAAM,gBAAgB,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAChE,yEAAyE;IACzE,sEAAsE;IACtE,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM;QAClC,CAAC,CAAC,CAAC,KAAa,EAAE,EAAE;YAClB,OAAO,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,CAAC,CAAC,CAAC,KAAa,EAAE,EAAE;YAClB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC9B,CAAC,CAAC;IACJ,MAAM,iBAAiB,GACrB,OAAO,CAAC,kBAAkB;QACxB,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,CAAC;QAC1D,CAAC,CAAC,OAAO,CAAC,WAAW;QACrB,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACzD,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAClE,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QAChC,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;QAChC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,iBAAiB,IAAI,cAAc,IAAI,SAAS;QAC7D,cAAc,EAAE,OAAO,CAAC,kBAAkB;QAC1C,WAAW,EAAE,aAAa;KAC3B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,wCAAwC,EAAE;YAChE,QAAQ,EAAE,UAAU;SACrB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACnC,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-status.js

@@ -1,18 +1,54 @@
 function isObjectPayload(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
+    return value !== null &&
+        typeof value === 'object' &&
+        !Array.isArray(value) &&
+        !(value instanceof Uint8Array);
 }
 export const authStatusCommand = async (context) => {
-    const payload = await context.requestJson('GET', '/auth/status');
-    if (context.apiKey &&
-        isObjectPayload(payload) &&
-        payload.authenticated === true &&
-        (payload.email === null || payload.email === undefined)) {
+    const profile = context.authProfile ?? 'default';
+    const localConfigReadiness = context.authLocalConfigReadiness ?? 'ready';
+    const credentialReadiness = context.authCredentialReadiness ??
+        (context.apiKey ? 'ready' : 'missing');
+    const localConfigBlocksRemote = localConfigReadiness !== 'ready' &&
+        context.authRemoteProbeAllowed !== true;
+    const remediation = localConfigBlocksRemote
+        ? 'npx --yes @paradigma-inc/flywheel setup --mode cli'
+        : profile === 'default'
+            ? 'flywheel auth:login'
+            : `flywheel auth:login --env ${profile}`;
+    if (localConfigBlocksRemote) {
         return {
-            ...payload,
-            auth_method: 'api_key',
-            email_unavailable_reason: 'api_key_auth_without_email',
+            authenticated: false,
+            profile,
+            local_config_readiness: localConfigReadiness,
+            credential_store_readiness: credentialReadiness,
+            remote_readiness: 'not_checked',
+            remediation,
         };
     }
-    return payload;
+    const payload = await context.requestJson('GET', '/auth/status');
+    if (!isObjectPayload(payload))
+        return payload;
+    const remoteReadiness = payload.authenticated === true && context.apiKey
+        ? 'ready'
+        : credentialReadiness === 'missing' && !context.apiKey
+            ? 'missing'
+            : 'not_authenticated';
+    return {
+        ...payload,
+        ...(context.apiKey &&
+            payload.authenticated === true &&
+            (payload.email === null || payload.email === undefined)
+            ? {
+                auth_method: 'api_key',
+                email_unavailable_reason: 'api_key_auth_without_email',
+            }
+            : {}),
+        profile,
+        local_config_readiness: localConfigReadiness,
+        credential_store_readiness: credentialReadiness,
+        remote_readiness: remoteReadiness,
+        ...(remoteReadiness !== 'ready' ? { remediation } : {}),
+    };
 };
 //# sourceMappingURL=auth-status.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/auth-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-status.js","sourceRoot":"","sources":["../../src/commands/auth-status.ts"],"names":[],"mappings":"AAEA,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IACjE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,IACE,OAAO,CAAC,MAAM;QACd,eAAe,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,aAAa,KAAK,IAAI;QAC9B,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,EACvD,CAAC;QACD,OAAO;YACL,GAAG,OAAO;YACV,WAAW,EAAE,SAAS;YACtB,wBAAwB,EAAE,4BAA4B;SACvD,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC"}
+{"version":3,"file":"auth-status.js","sourceRoot":"","sources":["../../src/commands/auth-status.ts"],"names":[],"mappings":"AAEA,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,KAAK,KAAK,IAAI;QACnB,OAAO,KAAK,KAAK,QAAQ;QACzB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACrB,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,WAAW,IAAI,SAAS,CAAC;IACjD,MAAM,oBAAoB,GAAG,OAAO,CAAC,wBAAwB,IAAI,OAAO,CAAC;IACzE,MAAM,mBAAmB,GAAG,OAAO,CAAC,uBAAuB;QACzD,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,uBAAuB,GAC3B,oBAAoB,KAAK,OAAO;QAChC,OAAO,CAAC,sBAAsB,KAAK,IAAI,CAAC;IAC1C,MAAM,WAAW,GACf,uBAAuB;QACrB,CAAC,CAAC,oDAAoD;QACtD,CAAC,CAAC,OAAO,KAAK,SAAS;YACrB,CAAC,CAAC,qBAAqB;YACvB,CAAC,CAAC,6BAA6B,OAAO,EAAE,CAAC;IAE/C,IAAI,uBAAuB,EAAE,CAAC;QAC5B,OAAO;YACL,aAAa,EAAE,KAAK;YACpB,OAAO;YACP,sBAAsB,EAAE,oBAAoB;YAC5C,0BAA0B,EAAE,mBAAmB;YAC/C,gBAAgB,EAAE,aAAa;YAC/B,WAAW;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9C,MAAM,eAAe,GACnB,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM;QAC9C,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,mBAAmB,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM;YACpD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,mBAAmB,CAAC;IAE5B,OAAO;QACL,GAAG,OAAO;QACV,GAAG,CAAC,OAAO,CAAC,MAAM;YAChB,OAAO,CAAC,aAAa,KAAK,IAAI;YAC9B,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC;YACvD,CAAC,CAAC;gBACA,WAAW,EAAE,SAAS;gBACtB,wBAAwB,EAAE,4BAA4B;aACvD;YACD,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;QACP,sBAAsB,EAAE,oBAAoB;QAC5C,0BAA0B,EAAE,mBAAmB;QAC/C,gBAAgB,EAAE,eAAe;QACjC,GAAG,CAAC,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC,CAAC"}