@paradigma-inc/flywheel 0.1.53 → 0.1.60

package/src/mcp-writer.mjs

@@ -166,6 +166,86 @@ export async function resolveMcpPath(candidates) {
   return candidates[0];
 }
 
+/**
+ * Extract the remote endpoint URL from an MCP server entry, regardless of
+ * which transport key the host uses.
+ *
+ * MCP host config schemas diverge on the JSON key: most (Claude Code, Cursor,
+ * OpenCode, Pi, OpenClaw, Codex TOML, Hermes YAML) use `url`, while Gemini
+ * CLI's `settings.json` uses `httpUrl` for HTTP streaming endpoints and
+ * reserves `url` for SSE. Idempotent setup, uninstall enumeration, and
+ * prior-mode detection all need to recognize an existing Flywheel entry no
+ * matter which key the host writes — without this, writing `httpUrl` on one
+ * run and reading only `url` on the next reclassifies the live entry as
+ * missing/drifted and breaks reruns.
+ *
+ * Precedence is `httpUrl` before `url`: Flywheel's canonical Gemini writer
+ * (see `src/agents.mjs` gemini.buildEntry) emits `httpUrl` for the
+ * Streamable-HTTP transport, and a config that carries both keys is most
+ * plausibly one where `url` is a legacy-SSE leftover alongside the managed
+ * HTTP endpoint. Reading `url` first in that case would surface the stale
+ * secondary endpoint and misreport drift. For hosts that only ever set `url`,
+ * the `httpUrl`-first check is a no-op.
+ *
+ * Returns null when no recognizable URL key is present.
+ */
+export function readEntryServerUrl(entry) {
+  if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+    return null;
+  }
+  // Empty / whitespace-only strings are placeholder shapes (half-populated
+  // host writers, hand-edited configs). Returning "" from here would satisfy
+  // downstream `typeof === "string"` checks but break equality comparisons in
+  // idempotent setup, drift detection, and uninstall enumeration — the live
+  // entry would be misclassified as missing. Only non-blank strings count.
+  //
+  // Trim-and-return-trimmed: callers compare the result against a canonical
+  // target via strict equality. Returning the raw field would re-introduce
+  // the false mismatch on hand-edited configs that carry leading/trailing
+  // whitespace or a trailing newline around the value.
+  const httpUrl = typeof entry.httpUrl === "string" ? entry.httpUrl.trim() : "";
+  if (httpUrl.length > 0) {
+    return httpUrl;
+  }
+  const url = typeof entry.url === "string" ? entry.url.trim() : "";
+  if (url.length > 0) {
+    return url;
+  }
+  return null;
+}
+
+/**
+ * Canonical auth mode of an MCP server entry.
+ *
+ * Every host's `buildEntry` in `src/agents.mjs` places a single signal on the
+ * entry when an API key was minted: a `headers.Authorization` string (Bearer
+ * token). OAuth-mode entries omit the header entirely and expect the IDE to
+ * run the MCP 2.0 OAuth discovery flow. So the presence/absence of that
+ * header is the authoritative auth-mode marker across JSON/YAML hosts.
+ *
+ * Returns `"api-key"` when the Bearer header is present, `"oauth"` otherwise
+ * (including for null / non-object entries). The writer uses this to decide
+ * whether an in-place entry must be rewritten when a rerun toggles auth
+ * mode (e.g. `flywheel setup --oauth` on a host previously bootstrapped with
+ * `--api-key`) — without this check the name-only "already exists" short
+ * circuit would leave the stale Authorization header behind.
+ */
+export function readEntryAuthMode(entry) {
+  if (!entry || typeof entry !== "object" || Array.isArray(entry)) {
+    return "oauth";
+  }
+  const headers = entry.headers;
+  if (
+    headers &&
+    typeof headers === "object" &&
+    !Array.isArray(headers) &&
+    typeof headers.Authorization === "string"
+  ) {
+    return "api-key";
+  }
+  return "oauth";
+}
+
 function keyPath(configKey) {
   return Array.isArray(configKey) ? configKey : [configKey];
 }
@@ -223,11 +303,31 @@ function writeConfigSection(config, configKey, section) {
   return root;
 }
 
-export function mergeServerEntry(existing, configKey, serverName, entry) {
+export function mergeServerEntry(
+  existing,
+  configKey,
+  serverName,
+  entry,
+  { enforceAuthMode = false } = {},
+) {
   const section = readConfigSection(existing, configKey);
 
   if (serverName in section) {
-    return { config: existing, alreadyExists: true };
+    // `enforceAuthMode` is opt-in and signals that the caller holds explicit
+    // auth intent (`--oauth` or `--api-key ...` on the command line). Only
+    // then do we reclassify on auth-mode mismatch and rewrite: the caller
+    // explicitly wants the Authorization header added or removed. Without
+    // that signal, setup is in the idempotent "re-run with no auth flags"
+    // mode and must preserve the existing entry byte-for-byte — otherwise
+    // a benign rerun would wipe the minted bearer key, because the ambient
+    // rebuild path constructs a headerless entry (apiKey omitted when the
+    // CLI did not resolve a new key).
+    if (
+      !enforceAuthMode ||
+      readEntryAuthMode(section[serverName]) === readEntryAuthMode(entry)
+    ) {
+      return { config: existing, alreadyExists: true };
+    }
   }
 
   return {
@@ -267,15 +367,18 @@ export async function readTomlServerEntry(filePath, serverName) {
   try {
     raw = await readFile(filePath, "utf8");
   } catch {
-    return { exists: false, url: null };
+    return { exists: false, url: null, authMode: "oauth" };
   }
 
   const normalized = normalizeLineEndings(raw);
   const lines = normalized.split("\n");
   const targetSection = `mcp_servers.${serverName}`;
+  const headersSection = `${targetSection}.http_headers`;
   let inTargetSection = false;
+  let inHeadersSection = false;
   let exists = false;
   let url = null;
+  let hasAuthorizationHeader = false;
 
   for (const line of lines) {
     const trimmed = line.trim();
@@ -285,27 +388,57 @@ export async function readTomlServerEntry(filePath, serverName) {
       if (sectionName === targetSection) {
         exists = true;
         inTargetSection = true;
+        inHeadersSection = false;
         continue;
       }
 
-      if (exists && !sectionName.startsWith(`${targetSection}.`)) {
-        break;
+      if (sectionName === headersSection) {
+        // The http_headers block is a nested child of the parent
+        // `[mcp_servers.<name>]` section. Its presence alone does NOT imply a
+        // usable entry exists — a partially-edited config can leave the
+        // child behind after the parent is deleted, and treating the orphan
+        // as "exists" would make appendTomlServer short-circuit and refuse
+        // to recreate the missing parent block on the next setup rerun. Only
+        // the parent header toggles `exists`; here we just capture the
+        // headers subsection for auth-mode detection.
+        inTargetSection = false;
+        inHeadersSection = true;
+        continue;
       }
 
+      // Never break out of the scan loop: TOML permits declaring tables in
+      // any order, so `[mcp_servers.<name>.http_headers]` is free to appear
+      // after an unrelated intermediate table. Breaking at the first
+      // non-target sibling would miss the headers subsection in that
+      // layout, causing auth-mode misclassification (oauth when the entry
+      // actually carries a Bearer header) and silently defeating the
+      // enforceAuthMode contract on `--oauth` reruns.
       inTargetSection = false;
+      inHeadersSection = false;
       continue;
     }
 
-    if (!inTargetSection) continue;
-
-    const withoutComment = stripTomlInlineComment(trimmed);
-    const urlMatch = withoutComment.match(/^url\s*=\s*(.+)$/);
-    if (!urlMatch) continue;
+    if (inTargetSection) {
+      const withoutComment = stripTomlInlineComment(trimmed);
+      const urlMatch = withoutComment.match(/^url\s*=\s*(.+)$/);
+      if (urlMatch) {
+        url = parseTomlStringValue(urlMatch[1]);
+      }
+    }
 
-    url = parseTomlStringValue(urlMatch[1]);
+    if (inHeadersSection) {
+      const withoutComment = stripTomlInlineComment(trimmed);
+      if (/^Authorization\s*=\s*/.test(withoutComment)) {
+        hasAuthorizationHeader = true;
+      }
+    }
   }
 
-  return { exists, url };
+  return {
+    exists,
+    url,
+    authMode: hasAuthorizationHeader ? "api-key" : "oauth",
+  };
 }
 
 export function buildTomlServerBlock(serverName, entry) {
@@ -331,13 +464,25 @@ export function buildTomlServerBlock(serverName, entry) {
   return `${lines.join("\n")}\n`;
 }
 
-export async function appendTomlServer(filePath, serverName, entry) {
-  if (await readTomlServerExists(filePath, serverName)) {
-    return { alreadyExists: true };
+export async function appendTomlServer(
+  filePath,
+  serverName,
+  entry,
+  { enforceAuthMode = false } = {},
+) {
+  const existingEntry = await readTomlServerEntry(filePath, serverName);
+  const newAuthMode = readEntryAuthMode(entry);
+
+  if (existingEntry.exists) {
+    // Mirror `mergeServerEntry`'s `enforceAuthMode` contract: preserve the
+    // existing block on passive reruns, and only reconcile the Authorization
+    // header when the caller explicitly toggled auth mode via `--oauth` or
+    // `--api-key`.
+    if (!enforceAuthMode || existingEntry.authMode === newAuthMode) {
+      return { alreadyExists: true };
+    }
   }
 
-  const block = buildTomlServerBlock(serverName, entry);
-
   let existing = "";
   try {
     existing = await readFile(filePath, "utf8");
@@ -345,6 +490,25 @@ export async function appendTomlServer(filePath, serverName, entry) {
     existing = "";
   }
 
+  // Always strip before appending on the write path. Two cases motivate an
+  // unconditional strip:
+  //   1. Auth-mode toggle (api-key ↔ oauth) with the parent section present:
+  //      without this, the prior block stays and we'd produce duplicate
+  //      `[mcp_servers.<name>]` sections.
+  //   2. Partially-edited config with an orphan
+  //      `[mcp_servers.<name>.http_headers]` subsection but no parent: the
+  //      orphan would otherwise coexist with the freshly-appended parent,
+  //      carrying stale Authorization headers into the rewritten entry.
+  // `stripCodexTomlServerBlock` is a no-op when neither the parent nor any
+  // child is present (returns `removed: false`), so it is safe to call
+  // unconditionally on the append path.
+  const { stripped } = stripCodexTomlServerBlock({
+    tomlText: existing,
+    serverName,
+  });
+  existing = stripped;
+
+  const block = buildTomlServerBlock(serverName, entry);
   const separator =
     existing.length > 0 && !existing.endsWith("\n")
       ? "\n\n"
@@ -389,6 +553,15 @@ function stripCodexTomlServerBlock({ tomlText, serverName }) {
     }
   }
 
+  // Lossless when nothing matched: callers invoke this on the append path
+  // unconditionally, and the compaction below (blank-line collapsing +
+  // trimEnd + trailing newline) would otherwise mutate unrelated TOML —
+  // most notably the blank lines inside multiline `"""..."""` values and
+  // any trailing whitespace a user deliberately kept.
+  if (!removed) {
+    return { stripped: tomlText || "", removed: false };
+  }
+
   let stripped = output.join("\n");
   stripped = stripped.replace(/\n{3,}/g, "\n\n").trimEnd();
   if (stripped.length > 0) stripped += "\n";

package/src/runtime/required-runtime-commands.json

@@ -25,7 +25,6 @@
   "nodes:sharing:set-bulk",
   "nodes:sharing:summaries",
   "nodes:resolve-slug",
-  "nodes:audit:list",
   "nodes:render:ancestry",
   "nodes:render:summary",
   "nodes:add-parent",
@@ -45,6 +44,16 @@
   "artifacts:upload",
   "artifacts:delete",
   "artifacts:note:set",
+  "hooks:list",
+  "hooks:create",
+  "hooks:update",
+  "hooks:delete",
+  "hooks:set-enabled",
+  "hooks:runs:list",
+  "hooks:secrets:list",
+  "hooks:secrets:create",
+  "hooks:secrets:update",
+  "hooks:secrets:delete",
   "compute:options",
   "compute:funding",
   "compute:connection",
@@ -68,6 +77,12 @@
   "export:summary:stream",
   "export:summary:pdf",
   "export:summary:render-pdf",
+  "admin:graphs:list",
+  "admin:graphs:export",
+  "admin:graphs:export:stream",
+  "admin:compute:policy:get",
+  "admin:compute:policy:set",
+  "admin:nodes:audit:list",
   "updates:list",
   "updates:hide",
   "updates:hide-all-active",
@@ -106,12 +121,10 @@
   "blobs:get",
   "files:list",
   "export:history",
-  "compute:policy:get",
-  "compute:policy:set",
   "compute:budgets",
   "machines:list",
   "auth:keychain:set",
   "auth:keychain:clear",
   "env:list",
   "env:switch"
-]
+]

package/src/runtime/vendor/flywheel-cli-dist/auth/login.d.ts

@@ -19,5 +19,6 @@ export interface AuthLoginResult {
     key_id: string | null;
     exit_code: 0 | 1 | 3;
 }
+export declare function formatDenyStdout(): string;
 export declare function runAuthLogin(args: AuthLoginArgs): Promise<AuthLoginResult>;
 export {};

package/src/runtime/vendor/flywheel-cli-dist/auth/login.js

@@ -158,16 +158,13 @@ function readFlag(params, key) {
     const value = params[key];
     return value === true || value === 'true';
 }
-function formatDenyStdout() {
+export function formatDenyStdout() {
     return [
         '',
         '  ✖ Authorization denied.',
         '',
-        '    Your identity is not authorized for staging access.',
-        '    Staging is limited to Paradigma engineers and approved beta users.',
-        '',
-        '    To request access, see docs/flywheel/CLI_STAGING_ACCESS.md',
-        '    (internal) or contact the staging-access owner listed there.',
+        '    Your identity is not on the Flywheel access allowlist.',
+        '    If you believe this is an error, contact Paradigma support.',
         '',
     ].join('\n');
 }

package/src/runtime/vendor/flywheel-cli-dist/auth/login.js.map

@@ -1 +1 @@
-{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AA6CvB,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAsB,CAAC;IACzC,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,WAA0B;IAE1B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC;IACtD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,GAA8B,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,2DAA2D;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAI,MAA8C,CAAC,qBAAqB,CAAC;QACrF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,0EAA0E;IAC1E,wEAAwE;IACxE,mBAAmB;IACnB,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAI,MAA8B,CAAC,KAAK,CAAC;QACrD,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,4EAA4E;IAC5E,2EAA2E;IAC3E,YAAY;IACZ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,oBAAoB;AACpB,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC;IAClC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,UAAU,GAA+C,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAoC,CAAC,EAAE,CAAC;QACjF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAA6B,CAAC;YAC5C,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAwBD,SAAS,eAAe,CACtB,MAAwC,EACxC,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,yEAAyE;IACzE,yEAAyE;IACzE,qCAAqC;IACrC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,aAAa,CAAC,qBAAqB,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAwC,EACxC,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CACf,MAAwC,EACxC,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAC5C,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,yDAAyD;QACzD,wEAAwE;QACxE,EAAE;QACF,gEAAgE;QAChE,kEAAkE;QAClE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,4BAA4B,CAAC,KAA+B;IACnE,OAAO;QACL,EAAE;QACF,oBAAoB,KAAK,CAAC,SAAS,EAAE;QACrC,EAAE;QACF,aAAa,KAAK,CAAC,gBAAgB,kBAAkB;QACrD,yDAAyD;QACzD,EAAE;QACF,gCAAgC;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA+B;IAChE,OAAO;QACL,EAAE;QACF,oBAAoB,KAAK,CAAC,SAAS,EAAE;QACrC,EAAE;QACF,6BAA6B;QAC7B,OAAO,KAAK,CAAC,gBAAgB,EAAE;QAC/B,EAAE;QACF,6BAA6B;QAC7B,EAAE;QACF,2CAA2C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,OAAO;KAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE/D,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,IAAI;QAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IAChC,IAAI,UAAU,KAAK,SAAS;QAAE,SAAS,CAAC,WAAW,GAAG,UAAU,CAAC;IACjE,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,mEAAmE;IACnE,gEAAgE;IAChE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,mBAAmB,EAAE,CAAC;QACxB,SAAS,CAAC,qBAAqB,GAAG,mBAAmB,CAAC;IACxD,CAAC;IAED,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAC5B,MAAM,EACN,uCAAuC,EACvC,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,6DAA6D;QAC7D,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,kBAAkB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,oEAAoE;gBAClE,mBAAmB,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,gEAAgE;QAClE,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;IACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC,qBAAqB,CAAC;IACtD,sEAAsE;IACtE,oEAAoE;IACpE,+DAA+D;IAC/D,gEAAgE;IAChE,oBAAoB;IACpB,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,SAAS,CAAC;QACR,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,gBAAgB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAClE,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACtE,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEjC,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAC3B,MAAM,EACN,sCAAsC,EACtC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,eAAe,KAAK,WAAW,EAAE,CAAC;gBACpC,mBAAmB,IAAI,CAAC,CAAC;gBACzB,oBAAoB,GAAG,mBAAmB,CAAC;gBAC3C,KAAK,CAAC,iCAAiC,mBAAmB,yBAAyB,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAI,eAAe,KAAK,uBAAuB,EAAE,CAAC;gBAChD,+DAA+D;gBAC/D,8DAA8D;gBAC9D,yDAAyD;gBACzD,8DAA8D;gBAC9D,iDAAiD;gBACjD,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBAClD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;gBAChE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBACxC,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACtE,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,oEAAoE;YACpE,+DAA+D;YAC/D,kEAAkE;YAClE,iDAAiD;YACjD,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBACxC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,IAAI,eAAe,KAAK,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,8DAA8D;oBAC5D,yBAAyB,CAC5B,CAAC;YACJ,CAAC;YACD,4DAA4D;YAC5D,6DAA6D;YAC7D,uDAAuD;YACvD,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,8DAA8D;YAC9D,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,WAAW,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACtE,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAChE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,gEAAgE;YAChE,4DAA4D;YAC5D,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,4DAA4D;YAC5D,4DAA4D;YAC5D,8DAA8D;YAC9D,EAAE;YACF,2DAA2D;YAC3D,2DAA2D;YAC3D,+DAA+D;YAC/D,gEAAgE;YAChE,8CAA8C;YAC9C,IAAI,aAAa,GAA8B,IAAI,CAAC;YACpD,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;gBACzC,IAAI,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChE,aAAa,GAAG,IAAI,CAAC;oBACrB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,OAAO,GAA+C;oBAC1D,GAAG,QAAQ;oBACX,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtC,CAAC;gBACF,4DAA4D;gBAC5D,+DAA+D;gBAC/D,wDAAwD;gBACxD,yDAAyD;gBACzD,4DAA4D;gBAC5D,uDAAuD;gBACvD,4BAA4B;gBAC5B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE;oBACrC,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE;oBACrC,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACvC,KAAK,CAAC,wBAAwB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EACL,gBAAgB,EAChB,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AA6CvB,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,SAAS,GAAG,KAAsB,CAAC;IACzC,IAAI,OAAO,SAAS,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,gBAAgB,CACvB,WAA0B;IAE1B,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,IAAI,WAAW,CAAC,SAAS,CAAC;IACtD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,GAA8B,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAY;IACzC,qEAAqE;IACrE,qEAAqE;IACrE,gEAAgE;IAChE,2DAA2D;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAI,MAA8C,CAAC,qBAAqB,CAAC;QACrF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,0EAA0E;IAC1E,wEAAwE;IACxE,mBAAmB;IACnB,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,KAAgB,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACzC,MAAM,MAAM,GAAI,MAA8B,CAAC,KAAK,CAAC;QACrD,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,4EAA4E;IAC5E,2EAA2E;IAC3E,YAAY;IACZ,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,yBAAyB,CAAC,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,0EAA0E;AAC1E,yEAAyE;AACzE,oBAAoB;AACpB,KAAK,UAAU,aAAa,CAAC,UAAkB;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YACzC,OAAO,MAAiC,CAAC;QAC3C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0DAA0D;IAC5D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,uBAAuB,CACpC,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,GAAG,CAAC,WAAW,CAAC;IAClC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAC3D,MAAM,UAAU,GAA+C,EAAE,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAoC,CAAC,EAAE,CAAC;QACjF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,KAAK,GAAG,KAA6B,CAAC;YAC5C,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACrC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAwBD,SAAS,eAAe,CACtB,MAAwC,EACxC,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC5C,yEAAyE;IACzE,yEAAyE;IACzE,qCAAqC;IACrC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,aAAa,CAAC,qBAAqB,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB,CACzB,MAAwC,EACxC,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CACf,MAAwC,EACxC,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,OAAO;QACL,EAAE;QACF,2BAA2B;QAC3B,EAAE;QACF,4DAA4D;QAC5D,iEAAiE;QACjE,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAS,4BAA4B,CAAC,KAA+B;IACnE,OAAO;QACL,EAAE;QACF,oBAAoB,KAAK,CAAC,SAAS,EAAE;QACrC,EAAE;QACF,aAAa,KAAK,CAAC,gBAAgB,kBAAkB;QACrD,yDAAyD;QACzD,EAAE;QACF,gCAAgC;KACjC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,SAAS,yBAAyB,CAAC,KAA+B;IAChE,OAAO;QACL,EAAE;QACF,oBAAoB,KAAK,CAAC,SAAS,EAAE;QACrC,EAAE;QACF,6BAA6B;QAC7B,OAAO,KAAK,CAAC,gBAAgB,EAAE;QAC/B,EAAE;QACF,6BAA6B;QAC7B,EAAE;QACF,2CAA2C,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,OAAO;KAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3E,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAE/D,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,IAAI,IAAI;QAAE,SAAS,CAAC,IAAI,GAAG,IAAI,CAAC;IAChC,IAAI,UAAU,KAAK,SAAS;QAAE,SAAS,CAAC,WAAW,GAAG,UAAU,CAAC;IACjE,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,mEAAmE;IACnE,gEAAgE;IAChE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpE,IAAI,mBAAmB,EAAE,CAAC;QACxB,SAAS,CAAC,qBAAqB,GAAG,mBAAmB,CAAC;IACxD,CAAC;IAED,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAC5B,MAAM,EACN,uCAAuC,EACvC,EAAE,IAAI,EAAE,SAAS,EAAE,CACpB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,uEAAuE;QACvE,6DAA6D;QAC7D,sEAAsE;QACtE,oEAAoE;QACpE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,eAAe,KAAK,kBAAkB,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CACb,oEAAoE;gBAClE,mBAAmB,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,gEAAgE;QAClE,CAAC;IACH,CAAC;IAED,MAAM,gBAAgB,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;IACtC,IAAI,mBAAmB,GAAG,KAAK,CAAC,qBAAqB,CAAC;IACtD,sEAAsE;IACtE,oEAAoE;IACpE,+DAA+D;IAC/D,gEAAgE;IAChE,oBAAoB;IACpB,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAE7B,SAAS,CAAC;QACR,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,gBAAgB,IAAI,KAAK,CAAC,kBAAkB,EAAE,CAAC;YAClE,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACtE,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACxC,CAAC;QAED,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAEjC,IAAI,IAA6B,CAAC;QAClC,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAC3B,MAAM,EACN,sCAAsC,EACtC,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CACzE,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;YACtD,IAAI,eAAe,KAAK,WAAW,EAAE,CAAC;gBACpC,mBAAmB,IAAI,CAAC,CAAC;gBACzB,oBAAoB,GAAG,mBAAmB,CAAC;gBAC3C,KAAK,CAAC,iCAAiC,mBAAmB,yBAAyB,CAAC,CAAC;gBACrF,SAAS;YACX,CAAC;YACD,IAAI,eAAe,KAAK,uBAAuB,EAAE,CAAC;gBAChD,+DAA+D;gBAC/D,8DAA8D;gBAC9D,yDAAyD;gBACzD,8DAA8D;gBAC9D,iDAAiD;gBACjD,MAAM,OAAO,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;gBAClD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;gBAChE,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBACxC,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACtE,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,oEAAoE;YACpE,+DAA+D;YAC/D,kEAAkE;YAClE,iDAAiD;YACjD,IAAI,eAAe,KAAK,eAAe,EAAE,CAAC;gBACxC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;gBAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,IAAI,eAAe,KAAK,kBAAkB,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CACb,8DAA8D;oBAC5D,yBAAyB,CAC5B,CAAC;YACJ,CAAC;YACD,4DAA4D;YAC5D,6DAA6D;YAC7D,uDAAuD;YACvD,gEAAgE;YAChE,8DAA8D;YAC9D,gEAAgE;YAChE,8DAA8D;YAC9D,MAAM,WAAW,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,WAAW,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBACtE,KAAK,CAAC,4DAA4D,CAAC,CAAC;gBACpE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,oEAAoE;YACpE,mEAAmE;YACnE,mEAAmE;YACnE,iEAAiE;YACjE,kEAAkE;YAClE,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAClE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,mBAAmB,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YAChE,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,gEAAgE;YAChE,4DAA4D;YAC5D,iEAAiE;YACjE,iEAAiE;YACjE,kEAAkE;YAClE,4DAA4D;YAC5D,4DAA4D;YAC5D,8DAA8D;YAC9D,EAAE;YACF,2DAA2D;YAC3D,2DAA2D;YAC3D,+DAA+D;YAC/D,gEAAgE;YAChE,8CAA8C;YAC9C,IAAI,aAAa,GAA8B,IAAI,CAAC;YACpD,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;gBACzC,IAAI,aAAa,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAChE,aAAa,GAAG,IAAI,CAAC;oBACrB,MAAM;gBACR,CAAC;YACH,CAAC;YACD,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;gBAChE,MAAM,OAAO,GAA+C;oBAC1D,GAAG,QAAQ;oBACX,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtC,CAAC;gBACF,4DAA4D;gBAC5D,+DAA+D;gBAC/D,wDAAwD;gBACxD,yDAAyD;gBACzD,4DAA4D;gBAC5D,uDAAuD;gBACvD,4BAA4B;gBAC5B,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE;oBACrC,WAAW,EAAE,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE;oBACrC,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,MAAM,EAAE,IAAI,CAAC,GAAG;iBACjB,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACvC,KAAK,CAAC,wBAAwB,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;YACnD,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC/C,CAAC;IACH,CAAC;AACH,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/auth/profiles.d.ts

@@ -15,6 +15,7 @@
  */
 export interface BuiltinProfile {
     baseUrl: string;
+    hidden?: boolean;
 }
 export declare const BUILTIN_PROFILES: {
     readonly prod: BuiltinProfile;

package/src/runtime/vendor/flywheel-cli-dist/auth/profiles.js

@@ -15,7 +15,7 @@
  */
 export const BUILTIN_PROFILES = {
     prod: { baseUrl: 'https://flywheel.paradigma.inc/api' },
-    staging: { baseUrl: 'https://flywheel-staging.paradigma.inc/api' },
+    staging: { baseUrl: 'https://flywheel-staging.paradigma.inc/api', hidden: true },
 };
 export const BUILTIN_PROFILE_NAMES = Object.freeze(Object.keys(BUILTIN_PROFILES));
 export function isBuiltinProfileName(name) {

package/src/runtime/vendor/flywheel-cli-dist/auth/profiles.js.map

@@ -1 +1 @@
-{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/auth/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,MAAM,CAAC,MAAM,gBAAgB,GAGzB;IACF,IAAI,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACvD,OAAO,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE;CACnE,CAAC;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAkC,MAAM,CAAC,MAAM,CAC/E,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAyB,CACtD,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC"}
+{"version":3,"file":"profiles.js","sourceRoot":"","sources":["../../src/auth/profiles.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,MAAM,CAAC,MAAM,gBAAgB,GAGzB;IACF,IAAI,EAAE,EAAE,OAAO,EAAE,oCAAoC,EAAE;IACvD,OAAO,EAAE,EAAE,OAAO,EAAE,4CAA4C,EAAE,MAAM,EAAE,IAAI,EAAE;CACjF,CAAC;AAIF,MAAM,CAAC,MAAM,qBAAqB,GAAkC,MAAM,CAAC,MAAM,CAC/E,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAyB,CACtD,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/_admin-auth.d.ts

@@ -0,0 +1,25 @@
+import type { RequestOptions } from './types.js';
+/**
+ * Build the admin-only auth overlay for `RequestOptions` from the
+ * ``FLYWHEEL_ADMIN_KEY`` env var and the caller's configured bearer.
+ *
+ * Shared by every CLI command that targets an ``/admin/*`` HTTP route.
+ * The overlay:
+ *
+ * 1. Sends the env value as the ``X-Admin-Key`` header (consumed by
+ *    ``require_paradigma_admin`` on the server).
+ * 2. Sets ``skipAuth: true`` ONLY when the caller's configured bearer
+ *    looks like a Flywheel API key (``fwk_*``). The server's
+ *    ``get_current_user`` runs before ``require_paradigma_admin`` and
+ *    rejects API-key bearers for routes not in the API-key allowlist;
+ *    ``/admin/*`` is intentionally excluded from that allowlist, so
+ *    that 403 would fire before the admin-key header could be seen.
+ *    Suppressing the bearer ONLY for API-key bearers keeps JWT bearers
+ *    (``@paradigma.inc`` browser-login sessions) intact — user-bound
+ *    admin routes (e.g. ``/admin/dev/*``) still require the
+ *    authenticated user identity those JWTs carry.
+ *
+ * When the env var is unset, returns an empty overlay so the bearer
+ * chain (JWT or API key) flows through untouched.
+ */
+export declare function adminAuthRequestOptions(apiKey?: string): Pick<RequestOptions, 'extraHeaders' | 'skipAuth'>;

package/src/runtime/vendor/flywheel-cli-dist/commands/_admin-auth.js

@@ -0,0 +1,35 @@
+/**
+ * Build the admin-only auth overlay for `RequestOptions` from the
+ * ``FLYWHEEL_ADMIN_KEY`` env var and the caller's configured bearer.
+ *
+ * Shared by every CLI command that targets an ``/admin/*`` HTTP route.
+ * The overlay:
+ *
+ * 1. Sends the env value as the ``X-Admin-Key`` header (consumed by
+ *    ``require_paradigma_admin`` on the server).
+ * 2. Sets ``skipAuth: true`` ONLY when the caller's configured bearer
+ *    looks like a Flywheel API key (``fwk_*``). The server's
+ *    ``get_current_user`` runs before ``require_paradigma_admin`` and
+ *    rejects API-key bearers for routes not in the API-key allowlist;
+ *    ``/admin/*`` is intentionally excluded from that allowlist, so
+ *    that 403 would fire before the admin-key header could be seen.
+ *    Suppressing the bearer ONLY for API-key bearers keeps JWT bearers
+ *    (``@paradigma.inc`` browser-login sessions) intact — user-bound
+ *    admin routes (e.g. ``/admin/dev/*``) still require the
+ *    authenticated user identity those JWTs carry.
+ *
+ * When the env var is unset, returns an empty overlay so the bearer
+ * chain (JWT or API key) flows through untouched.
+ */
+export function adminAuthRequestOptions(apiKey) {
+    const key = process.env.FLYWHEEL_ADMIN_KEY;
+    if (typeof key === 'string' && key.trim()) {
+        const bearerIsApiKey = typeof apiKey === 'string' && apiKey.startsWith('fwk_');
+        return {
+            extraHeaders: { 'X-Admin-Key': key.trim() },
+            ...(bearerIsApiKey ? { skipAuth: true } : {}),
+        };
+    }
+    return { extraHeaders: {} };
+}
+//# sourceMappingURL=_admin-auth.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/_admin-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_admin-auth.js","sourceRoot":"","sources":["../../src/commands/_admin-auth.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAe;IAEf,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1C,MAAM,cAAc,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/E,OAAO;YACL,YAAY,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE;YAC3C,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAC9B,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/_stream-file-out.d.ts

@@ -0,0 +1,39 @@
+import { type WriteStream } from 'node:fs';
+/**
+ * Lifecycle handle for an ``--out`` destination.
+ *
+ * ``stream`` is the open writable stream the caller feeds bytes into.
+ * The stream writes to a sibling ``.partial`` temp file, NOT the final
+ * destination, so an aborted run cannot clobber a previously-good file
+ * at ``outPath``.
+ *
+ * Callers MUST invoke exactly one of:
+ *
+ * * :func:`finalize` after the last successful write + stream close —
+ *   atomically renames the temp over ``outPath`` on filesystems that
+ *   support ``rename(2)`` semantics (all POSIX targets + Windows).
+ * * :func:`abort` on any failure path — best-effort removes the temp so
+ *   a retry starts clean.
+ */
+export interface OutputFileHandle {
+    readonly stream: WriteStream;
+    finalize(): Promise<void>;
+    abort(): Promise<void>;
+}
+/**
+ * Validate and open a writable destination for an ``--out`` path.
+ *
+ * Returns an :class:`OutputFileHandle` when ``outPath`` is a concrete
+ * filesystem path, or ``null`` when the caller is streaming to stdout
+ * (``outPath`` is absent or the literal ``"-"``).
+ *
+ * The handle is backed by a ``<outPath>.partial`` temp file opened in
+ * the same directory so the final ``rename`` is atomic (same
+ * filesystem). The temp file is fully opened (``"open"`` event
+ * resolved) before this function returns, so callers can still order
+ * this BEFORE dispatching an expensive server-side request — a bad
+ * destination raises a typed :class:`CliUsageError` without any
+ * network traffic, but the caller's previous ``outPath`` contents are
+ * never overwritten until ``finalize`` succeeds.
+ */
+export declare function openWriteStreamOrFail(outPath: string | undefined): Promise<OutputFileHandle | null>;

package/src/runtime/vendor/flywheel-cli-dist/commands/_stream-file-out.js

@@ -0,0 +1,72 @@
+import { createWriteStream } from 'node:fs';
+import { rename, unlink } from 'node:fs/promises';
+import { CliUsageError } from '../errors.js';
+/**
+ * Validate and open a writable destination for an ``--out`` path.
+ *
+ * Returns an :class:`OutputFileHandle` when ``outPath`` is a concrete
+ * filesystem path, or ``null`` when the caller is streaming to stdout
+ * (``outPath`` is absent or the literal ``"-"``).
+ *
+ * The handle is backed by a ``<outPath>.partial`` temp file opened in
+ * the same directory so the final ``rename`` is atomic (same
+ * filesystem). The temp file is fully opened (``"open"`` event
+ * resolved) before this function returns, so callers can still order
+ * this BEFORE dispatching an expensive server-side request — a bad
+ * destination raises a typed :class:`CliUsageError` without any
+ * network traffic, but the caller's previous ``outPath`` contents are
+ * never overwritten until ``finalize`` succeeds.
+ */
+export async function openWriteStreamOrFail(outPath) {
+    if (!outPath || outPath === '-') {
+        return null;
+    }
+    // Same-directory temp so the final ``rename`` stays on one filesystem
+    // and is therefore atomic. ``.partial`` is the conventional suffix
+    // used by curl / wget / aria2 / pip for in-flight downloads; it makes
+    // the intent obvious to anyone inspecting the directory mid-run.
+    const tmpPath = `${outPath}.partial`;
+    const candidate = createWriteStream(tmpPath);
+    try {
+        await new Promise((resolve, reject) => {
+            const onOpen = () => {
+                candidate.off('error', onError);
+                resolve();
+            };
+            const onError = (err) => {
+                candidate.off('open', onOpen);
+                reject(err);
+            };
+            candidate.once('open', onOpen);
+            candidate.once('error', onError);
+        });
+    }
+    catch (err) {
+        candidate.destroy();
+        // Best-effort cleanup in case ``createWriteStream`` managed to
+        // create the temp before failing (e.g. parent dir writable but then
+        // a later error). Swallow because the original open error is the
+        // message the caller actually needs.
+        await unlink(tmpPath).catch(() => undefined);
+        throw new CliUsageError(`cannot open --out=${outPath}: ${err.message}`);
+    }
+    let settled = false;
+    return {
+        stream: candidate,
+        async finalize() {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            await rename(tmpPath, outPath);
+        },
+        async abort() {
+            if (settled) {
+                return;
+            }
+            settled = true;
+            await unlink(tmpPath).catch(() => undefined);
+        },
+    };
+}
+//# sourceMappingURL=_stream-file-out.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/_stream-file-out.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_stream-file-out.js","sourceRoot":"","sources":["../../src/commands/_stream-file-out.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAoB,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAElD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAwB7C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA2B;IAE3B,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,sEAAsE;IACtE,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,MAAM,OAAO,GAAG,GAAG,OAAO,UAAU,CAAC;IACrC,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC1C,MAAM,MAAM,GAAG,GAAS,EAAE;gBACxB,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,CAAC,GAAU,EAAQ,EAAE;gBACnC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC;YACF,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/B,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,SAAS,CAAC,OAAO,EAAE,CAAC;QACpB,+DAA+D;QAC/D,oEAAoE;QACpE,iEAAiE;QACjE,qCAAqC;QACrC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,IAAI,aAAa,CACrB,qBAAqB,OAAO,KAAM,GAAa,CAAC,OAAO,EAAE,CAC1D,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,KAAK,CAAC,QAAQ;YACZ,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QACD,KAAK,CAAC,KAAK;YACT,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO;YACT,CAAC;YACD,OAAO,GAAG,IAAI,CAAC;YACf,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-compute-policy-get.d.ts

@@ -0,0 +1,2 @@
+import type { CommandHandler } from './types.js';
+export declare const adminComputePolicyGetCommand: CommandHandler;

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-compute-policy-get.js

@@ -0,0 +1,10 @@
+import { adminAuthRequestOptions } from './_admin-auth.js';
+import { requiredString } from './utils.js';
+export const adminComputePolicyGetCommand = async (context) => {
+    const nodeId = requiredString(context.params, 'node_id');
+    const options = {
+        ...adminAuthRequestOptions(context.apiKey),
+    };
+    return context.requestJson('GET', `/admin/nodes/${encodeURIComponent(nodeId)}/compute/policy`, options);
+};
+//# sourceMappingURL=admin-compute-policy-get.js.map

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-compute-policy-get.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-compute-policy-get.js","sourceRoot":"","sources":["../../src/commands/admin-compute-policy-get.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,MAAM,CAAC,MAAM,4BAA4B,GAAmB,KAAK,EAAE,OAAO,EAAE,EAAE;IAC5E,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACzD,MAAM,OAAO,GAAmB;QAC9B,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,CAAC;KAC3C,CAAC;IACF,OAAO,OAAO,CAAC,WAAW,CACxB,KAAK,EACL,gBAAgB,kBAAkB,CAAC,MAAM,CAAC,iBAAiB,EAC3D,OAAO,CACR,CAAC;AACJ,CAAC,CAAC"}

package/src/runtime/vendor/flywheel-cli-dist/commands/admin-compute-policy-set.d.ts

@@ -0,0 +1,2 @@
+import type { CommandHandler } from './types.js';
+export declare const adminComputePolicySetCommand: CommandHandler;