@pleri/olam-cli 0.1.201 → 0.1.204

package/dist/commands/auth-migrate.js

@@ -1,465 +0,0 @@
-/**
- * olam auth migrate — one-shot migration tool for operators with a legacy
- * `~/.olam/auth-data/accounts.json` (the file the pre-Phase-A auth-service
- * container wrote OAuth tokens to). Reads each local account and walks the
- * operator through re-authenticating it against the cloud auth-worker.
- *
- * ───────────────────────────────────────────────────────────────────────────
- * IMPORTANT — DESIGN-DOC NOTE FROM B2's AUDIT
- * ───────────────────────────────────────────────────────────────────────────
- *
- * **There is no `POST /v1/credentials` endpoint on the cloud auth-worker DO.**
- * Phase A's design doc (`docs/architecture/cloud-only-vault.md` §3 — "the
- * bearer IS the credential") makes the explicit choice that the cloud vault
- * does not accept already-minted OAuth tokens over HTTP. The only way a
- * credential lands in the DO is via the worker's own OAuth-callback handler
- * after the operator completes the Anthropic device-code dance.
- *
- * So "migrate" here does NOT mean "POST tokens into the cloud DO" (phase-b-
- * tasks.md B3's wording is shorthand). It means: **for each local account,
- * re-run the OAuth-start flow against the cloud auth-worker so the operator
- * re-authenticates that Anthropic account, and the worker's callback stores
- * the resulting token server-side.**
- *
- * The local OAuth token bytes themselves are never sent anywhere — they
- * remain in `~/.olam/auth-data/accounts.json` until the operator approves
- * the final timestamped rename. Local file is NEVER deleted automatically.
- *
- * ───────────────────────────────────────────────────────────────────────────
- * IDEMPOTENCE MODEL
- * ───────────────────────────────────────────────────────────────────────────
- *
- * Per-account migration state lives in `~/.olam/auth-data/migration-state.json`:
- *
- *   {
- *     "version": 1,
- *     "migrated": {
- *       "<sha256(stable-content-shape)>": {
- *         "migratedAt": "2026-05-29T...Z",
- *         "email": "alice@example.com",
- *         "provider": "claude"
- *       },
- *       ...
- *     }
- *   }
- *
- * The hash is computed from a STABLE JSON shape (`{email, provider,
- * anthropicAccountId}`) — re-running migrate after the local vault changes
- * picks up new accounts but skips already-migrated ones. Atomic write
- * (write-to-tmp then rename) guarantees that a mid-flight kill resumes
- * cleanly: any account whose state record is durable on disk is skipped;
- * the rest are re-attempted.
- *
- * ───────────────────────────────────────────────────────────────────────────
- * CLI SURFACE
- * ───────────────────────────────────────────────────────────────────────────
- *
- *   olam auth migrate                 # default: interactive live-run
- *   olam auth migrate --dry-run       # print the per-account plan only
- *   olam auth migrate --remote <url>  # override auth-worker URL
- *   olam auth migrate --yes           # CI safety; only valid w/ --dry-run
- */
-import * as fs from 'node:fs';
-import * as os from 'node:os';
-import * as path from 'node:path';
-import * as crypto from 'node:crypto';
-import * as readline from 'node:readline/promises';
-import pc from 'picocolors';
-import { requireBackend, ConflictingBackendFlags, } from '../lib/auth-backend.js';
-import { resolveRemoteUrl, DEFAULT_AUTH_WORKER_URL } from '../lib/auth-login.js';
-import { printError, printHeader, printSuccess } from '../output.js';
-// ── Path helpers ────────────────────────────────────────────────────────────
-function defaultAccountsPath() {
-    return path.join(os.homedir(), '.olam', 'auth-data', 'accounts.json');
-}
-function defaultStatePath() {
-    return path.join(os.homedir(), '.olam', 'auth-data', 'migration-state.json');
-}
-// ── Hash + state IO ─────────────────────────────────────────────────────────
-/**
- * Stable content hash for an account. Two accounts with identical
- * (email, provider, anthropicAccountId) tuples produce the same hash —
- * the operator deleting + re-adding the same Anthropic account locally
- * still resolves to "already migrated" on the cloud side. Tests rely on
- * this invariant being stable (no random salt, no time component).
- */
-export function accountContentHash(account) {
-    const stable = JSON.stringify({
-        email: account.email,
-        provider: account.provider,
-        anthropicAccountId: account.anthropicAccountId ?? null,
-    });
-    return crypto.createHash('sha256').update(stable).digest('hex');
-}
-/** Empty initial migration state (version 1). */
-export function emptyMigrationState() {
-    return { version: 1, migrated: {} };
-}
-/**
- * Read + parse migration-state.json. Returns `emptyMigrationState()` when
- * the file is absent (first-ever migrate run). Throws on parse-failure or
- * version drift so the caller can exit 1 with a manual-inspection message.
- */
-export function readMigrationState(statePath, deps) {
-    const existsSync = deps.existsSync ?? fs.existsSync;
-    const readFileSync = deps.readFileSync ?? ((p) => fs.readFileSync(p, 'utf-8'));
-    if (!existsSync(statePath))
-        return emptyMigrationState();
-    const raw = readFileSync(statePath);
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch {
-        throw new Error(`Migration state file is corrupt at ${statePath}. ` +
-            `Inspect manually or delete to restart migration.`);
-    }
-    if (typeof parsed !== 'object' ||
-        parsed === null ||
-        parsed.version !== 1 ||
-        typeof parsed.migrated !== 'object' ||
-        parsed.migrated === null) {
-        throw new Error(`Migration state file is corrupt at ${statePath}. ` +
-            `Inspect manually or delete to restart migration.`);
-    }
-    return parsed;
-}
-/**
- * Atomically write migration state. Strategy: serialise to `<path>.tmp`,
- * then `rename` over the live file. The rename is atomic on POSIX (and on
- * NTFS via ReplaceFileEx semantics); a process kill between the .tmp write
- * and the rename leaves the live file untouched.
- *
- * Throws on write or rename failure; caller is expected to surface the
- * error and exit 1 without touching anything else.
- */
-export function writeMigrationStateAtomic(statePath, state, deps) {
-    const writeFileSync = deps.writeFileSync ?? ((p, d) => fs.writeFileSync(p, d, 'utf-8'));
-    const renameSync = deps.renameSync ?? fs.renameSync;
-    const tmpPath = `${statePath}.tmp`;
-    writeFileSync(tmpPath, JSON.stringify(state, null, 2) + '\n');
-    renameSync(tmpPath, statePath);
-}
-/**
- * Read + parse the legacy local vault file. Returns `null` when absent
- * (the "nothing to migrate" path). Throws on parse failure.
- */
-export function readLocalAccounts(accountsPath, deps) {
-    const existsSync = deps.existsSync ?? fs.existsSync;
-    const readFileSync = deps.readFileSync ?? ((p) => fs.readFileSync(p, 'utf-8'));
-    if (!existsSync(accountsPath))
-        return null;
-    const raw = readFileSync(accountsPath);
-    let parsed;
-    try {
-        parsed = JSON.parse(raw);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        throw new Error(`Failed to parse ${accountsPath}: ${msg}`);
-    }
-    if (typeof parsed !== 'object' ||
-        parsed === null ||
-        !Array.isArray(parsed.accounts)) {
-        throw new Error(`Malformed ${accountsPath}: expected { accounts: LocalAccount[] }`);
-    }
-    for (const a of parsed.accounts) {
-        if (typeof a !== 'object' ||
-            a === null ||
-            typeof a.email !== 'string' ||
-            typeof a.provider !== 'string') {
-            throw new Error(`Malformed ${accountsPath}: each account must have string email + provider.`);
-        }
-    }
-    return parsed;
-}
-// ── Plan computation ────────────────────────────────────────────────────────
-/**
- * Pure planner — given the local accounts + the migration state, decide
- * what each account's status is. No IO; trivial to unit-test.
- */
-export function planMigration(accounts, state) {
-    return accounts.map((account) => {
-        const hash = accountContentHash(account);
-        const existing = state.migrated[hash];
-        if (existing) {
-            return { account, hash, status: 'already-migrated', migratedRecord: existing };
-        }
-        return { account, hash, status: 'pending' };
-    });
-}
-// ── Rendering ───────────────────────────────────────────────────────────────
-function renderPlanTable(plan, remoteUrl) {
-    const lines = [];
-    lines.push(`Local vault accounts (${plan.length}):`);
-    for (let i = 0; i < plan.length; i += 1) {
-        const p = plan[i];
-        const idx = String(i + 1).padStart(2, ' ');
-        const emailPad = p.account.email.padEnd(34);
-        const provider = `(${p.account.provider})`.padEnd(10);
-        if (p.status === 'already-migrated') {
-            const recorded = p.migratedRecord?.migratedAt ?? 'unknown';
-            lines.push(`  [${idx}] ${emailPad} ${provider} status: ALREADY MIGRATED  (recorded ${recorded})`);
-        }
-        else {
-            lines.push(`  [${idx}] ${emailPad} ${provider} status: pending  hash: ${p.hash.slice(0, 12)}...`);
-        }
-    }
-    const pending = plan.filter((p) => p.status === 'pending').length;
-    const migrated = plan.length - pending;
-    lines.push('');
-    if (pending === 0) {
-        lines.push(`All ${migrated} account(s) already migrated to ${remoteUrl}. Nothing to do.`);
-    }
-    else {
-        lines.push(`Migration plan: ${pending} account(s) will be re-OAuth'd against ${remoteUrl}.`);
-    }
-    return lines.join('\n') + '\n';
-}
-// ── Default deps for production IO ──────────────────────────────────────────
-function defaultIsTty() {
-    return Boolean(process.stdin.isTTY);
-}
-async function defaultPromptLine(question) {
-    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-    try {
-        const answer = await rl.question(question);
-        return answer.trim();
-    }
-    finally {
-        rl.close();
-    }
-}
-// ── Core orchestration — the testable entry point ───────────────────────────
-/**
- * Run the `olam auth migrate` decision tree. Every IO touchpoint is funnelled
- * through `AuthMigrateDeps` so tests assert on orchestration without spawning
- * real OAuth round-trips, filesystem writes, or readline reads.
- */
-export async function runAuthMigrate(opts, deps = {}) {
-    const stdout = deps.stdout ?? process.stdout;
-    const stderr = deps.stderr ?? process.stderr;
-    const now = deps.now ?? (() => new Date().toISOString());
-    const accountsPath = deps.accountsPath ?? defaultAccountsPath();
-    const statePath = deps.statePath ?? defaultStatePath();
-    // (0) Safety: --yes only meaningful with --dry-run.
-    if (opts.yes === true && opts.dryRun !== true) {
-        stderr.write('error: --yes is only valid with --dry-run ' +
-            '(interactive browser is required for real migrations).\n');
-        return { exitCode: 1 };
-    }
-    // (1) Backend resolution (gives us the remote-URL hint).
-    let resolution;
-    try {
-        resolution = requireBackend({ local: opts.local, remote: opts.remote });
-    }
-    catch (err) {
-        if (err instanceof ConflictingBackendFlags) {
-            stderr.write(`error: ${err.message}\n`);
-            return { exitCode: 1 };
-        }
-        throw err;
-    }
-    // `--local` makes no sense for migrate (migrate's whole purpose is to move
-    // to remote). Treat the explicit --local opt-out as a user error.
-    if (resolution.backend === 'local' && opts.local === true) {
-        stderr.write('error: --local is incompatible with `olam auth migrate` ' +
-            '(migrate exists to move local vault → cloud auth-worker).\n');
-        return { exitCode: 1 };
-    }
-    const remoteUrl = resolveRemoteUrl(resolution, {
-        readEnv: deps.readEnv,
-        readAuthWorkerUrlFile: deps.readAuthWorkerUrlFile,
-    });
-    // (2) Read the local vault. Empty / absent → exit 0 cleanly.
-    let vault;
-    try {
-        vault = readLocalAccounts(accountsPath, deps);
-    }
-    catch (err) {
-        stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
-        return { exitCode: 1 };
-    }
-    if (vault === null || vault.accounts.length === 0) {
-        stdout.write('No local vault found; nothing to migrate.\n');
-        return { exitCode: 0, accountsTotal: 0 };
-    }
-    // (3) Read the migration state. Corrupt → exit 1.
-    let state;
-    try {
-        state = readMigrationState(statePath, deps);
-    }
-    catch (err) {
-        stderr.write(`error: ${err instanceof Error ? err.message : String(err)}\n`);
-        return { exitCode: 1 };
-    }
-    // (4) Compute the plan.
-    const plan = planMigration(vault.accounts, state);
-    const pending = plan.filter((p) => p.status === 'pending');
-    const alreadyMigrated = plan.length - pending.length;
-    // (5) --dry-run branch.
-    if (opts.dryRun === true) {
-        stdout.write(renderPlanTable(plan, remoteUrl));
-        if (pending.length > 0) {
-            stdout.write('Re-run without --dry-run to begin.\n');
-        }
-        return {
-            exitCode: 0,
-            accountsTotal: plan.length,
-            accountsAlreadyMigrated: alreadyMigrated,
-            accountsMigratedNow: 0,
-            accountsSkipped: 0,
-            dryRun: true,
-            resolvedRemoteUrl: remoteUrl,
-        };
-    }
-    // (6) Live-run requires a TTY (operator must complete the browser flow).
-    const isTty = (deps.isTty ?? defaultIsTty)();
-    if (!isTty) {
-        stderr.write('error: `olam auth migrate` requires an interactive terminal.\n');
-        return { exitCode: 1 };
-    }
-    stdout.write(renderPlanTable(plan, remoteUrl));
-    if (pending.length === 0) {
-        return {
-            exitCode: 0,
-            accountsTotal: plan.length,
-            accountsAlreadyMigrated: alreadyMigrated,
-            accountsMigratedNow: 0,
-            accountsSkipped: 0,
-            dryRun: false,
-            resolvedRemoteUrl: remoteUrl,
-        };
-    }
-    // (7) Per-account live-run loop.
-    let migratedNow = 0;
-    let skipped = 0;
-    let currentState = state;
-    const promptPerAccount = deps.promptPerAccount ?? defaultPromptLine;
-    for (const entry of pending) {
-        stdout.write(`\nMigrating ${entry.account.email} (${entry.account.provider})...\n`);
-        const startUrl = `${remoteUrl.replace(/\/+$/, '')}/v1/oauth/start?label=${encodeURIComponent(entry.account.email)}`;
-        stdout.write(`  Open: ${startUrl}\n`);
-        const ans = (await promptPerAccount(`  Press Enter when login succeeds in browser. (s = skip, q = abort): `))
-            .trim()
-            .toLowerCase();
-        if (ans === 'q' || ans === 'quit' || ans === 'abort') {
-            stderr.write('Migration aborted by operator. Partial state saved; safe to re-run.\n');
-            return {
-                exitCode: 1,
-                accountsTotal: plan.length,
-                accountsAlreadyMigrated: alreadyMigrated,
-                accountsMigratedNow: migratedNow,
-                accountsSkipped: skipped,
-                dryRun: false,
-                resolvedRemoteUrl: remoteUrl,
-            };
-        }
-        if (ans === 's' || ans === 'skip') {
-            stdout.write(`  Skipped ${entry.account.email}.\n`);
-            skipped += 1;
-            continue;
-        }
-        // Confirm + record. Build the next state immutably so a writeFileSync
-        // exception (atomic-write failure) does not pollute the in-memory state.
-        const record = {
-            migratedAt: now(),
-            email: entry.account.email,
-            provider: entry.account.provider,
-        };
-        const nextState = {
-            version: 1,
-            migrated: { ...currentState.migrated, [entry.hash]: record },
-        };
-        try {
-            writeMigrationStateAtomic(statePath, nextState, deps);
-        }
-        catch (err) {
-            stderr.write(`error: failed to persist migration state: ` +
-                `${err instanceof Error ? err.message : String(err)}\n`);
-            return {
-                exitCode: 1,
-                accountsTotal: plan.length,
-                accountsAlreadyMigrated: alreadyMigrated,
-                accountsMigratedNow: migratedNow,
-                accountsSkipped: skipped,
-                dryRun: false,
-                resolvedRemoteUrl: remoteUrl,
-            };
-        }
-        currentState = nextState;
-        migratedNow += 1;
-        stdout.write(`  Recorded ${entry.account.email} as migrated.\n`);
-    }
-    // (8) Final rename prompt — only when ALL accounts were migrated.
-    if (skipped === 0 && migratedNow === pending.length) {
-        const ts = now().replace(/[:.]/g, '-');
-        const backupPath = `${accountsPath}.migrated-${ts}.bak`;
-        const promptFinalRename = deps.promptFinalRename ?? defaultPromptLine;
-        const ans = (await promptFinalRename(`\nAll accounts migrated. Rename ${accountsPath} -> ${backupPath}? [y/N] `))
-            .trim()
-            .toLowerCase();
-        if (ans === 'y' || ans === 'yes') {
-            const renameSync = deps.renameSync ?? fs.renameSync;
-            try {
-                renameSync(accountsPath, backupPath);
-                stdout.write(`Local vault renamed to ${backupPath}.\n`);
-            }
-            catch (err) {
-                stderr.write(`warning: rename failed: ${err instanceof Error ? err.message : String(err)}. ` +
-                    `Migration state is intact; rename ${accountsPath} manually when ready.\n`);
-            }
-        }
-        else {
-            stdout.write('Local vault left in place. Use OLAM_CREDENTIAL_BACKEND=local to ' +
-                'keep using it, or rename manually when ready.\n');
-        }
-    }
-    else {
-        stdout.write(`\n${migratedNow} migrated, ${skipped} skipped. Re-run to handle skipped accounts.\n`);
-    }
-    return {
-        exitCode: 0,
-        accountsTotal: plan.length,
-        accountsAlreadyMigrated: alreadyMigrated,
-        accountsMigratedNow: migratedNow,
-        accountsSkipped: skipped,
-        dryRun: false,
-        resolvedRemoteUrl: remoteUrl,
-    };
-}
-// ── Commander registration ──────────────────────────────────────────────────
-/**
- * Register `olam auth migrate` on the supplied `auth` subcommand. Called
- * from `packages/cli/src/commands/auth.ts`.
- */
-export function registerAuthMigrate(auth) {
-    auth
-        .command('migrate')
-        .description('Migrate local ~/.olam/auth-data/accounts.json to the cloud auth-worker. ' +
-        'Each local account is re-OAuth\'d against the cloud worker; local file ' +
-        'is preserved until operator approves the timestamped rename. Idempotent ' +
-        'on re-run via content-hash state in migration-state.json. ' +
-        '(Design note: cloud DO has no POST /v1/credentials; migration = per-account re-OAuth.)')
-        .option('--dry-run', 'Print the migration plan without acting')
-        .option('--yes', 'Skip interactive prompts (only valid with --dry-run)')
-        .option('--remote <url>', 'Override auth-worker URL (defaults to canonical zone)')
-        .option('--local', '(Disallowed — migrate only makes sense going to remote)')
-        .action(async (opts) => {
-        const result = await runAuthMigrate(opts, {});
-        if (result.exitCode !== 0) {
-            process.exitCode = result.exitCode;
-        }
-    });
-}
-// Re-export for the deprecated stub in auth.ts so the redirect can call it.
-export { DEFAULT_AUTH_WORKER_URL };
-// Silence "unused import" lints when the symbols below are only used by
-// downstream re-exports + Commander action wiring (TS strict mode).
-export const _internal = {
-    printError,
-    printHeader,
-    printSuccess,
-    pc,
-};
-//# sourceMappingURL=auth-migrate.js.map

package/dist/commands/auth-migrate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-migrate.js","sourceRoot":"","sources":["../../src/commands/auth-migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,QAAQ,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EACL,cAAc,EACd,uBAAuB,GACxB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AACjF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAyGrE,+EAA+E;AAE/E,SAAS,mBAAmB;IAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,sBAAsB,CAAC,CAAC;AAC/E,CAAC;AAED,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAqB;IACtD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI;KACvD,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,mBAAmB;IACjC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAiB,EACjB,IAA0D;IAE1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvF,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,mBAAmB,EAAE,CAAC;IAEzD,MAAM,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACpC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,IAAI;YACjD,kDAAkD,CACrD,CAAC;IACJ,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACd,MAAgC,CAAC,OAAO,KAAK,CAAC;QAC/C,OAAQ,MAAiC,CAAC,QAAQ,KAAK,QAAQ;QAC9D,MAAiC,CAAC,QAAQ,KAAK,IAAI,EACpD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sCAAsC,SAAS,IAAI;YACjD,kDAAkD,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,MAAwB,CAAC;AAClC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAAiB,EACjB,KAAqB,EACrB,IAA2D;IAE3D,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IACxG,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC;IAEpD,MAAM,OAAO,GAAG,GAAG,SAAS,MAAM,CAAC;IACnC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAC9D,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,YAAoB,EACpB,IAA0D;IAE1D,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC;IACpD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;IAEvF,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,CAAC,CAAC;IACvC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,KAAK,GAAG,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,CAAC,KAAK,CAAC,OAAO,CAAE,MAAiC,CAAC,QAAQ,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,yCAAyC,CACnE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,IAAK,MAAkC,CAAC,QAAQ,EAAE,CAAC;QAC7D,IACE,OAAO,CAAC,KAAK,QAAQ;YACrB,CAAC,KAAK,IAAI;YACV,OAAQ,CAAyB,CAAC,KAAK,KAAK,QAAQ;YACpD,OAAQ,CAA4B,CAAC,QAAQ,KAAK,QAAQ,EAC1D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,aAAa,YAAY,mDAAmD,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAA2B,CAAC;AACrC,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,QAAiC,EACjC,KAAqB;IAErB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAE/E,SAAS,eAAe,CAAC,IAA+B,EAAE,SAAiB;IACzE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yBAAyB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;IACrD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,CAAC,CAAC,cAAc,EAAE,UAAU,IAAI,SAAS,CAAC;YAC3D,KAAK,CAAC,IAAI,CACR,MAAM,GAAG,KAAK,QAAQ,IAAI,QAAQ,wCAAwC,QAAQ,GAAG,CACtF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CACR,MAAM,GAAG,KAAK,QAAQ,IAAI,QAAQ,2BAA2B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CACtF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CACR,OAAO,QAAQ,mCAAmC,SAAS,kBAAkB,CAC9E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,mBAAmB,OAAO,0CAA0C,SAAS,GAAG,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;AACjC,CAAC;AAED,+EAA+E;AAE/E,SAAS,YAAY;IACnB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB;IAC/C,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAwB,EACxB,OAAwB,EAAE;IAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,EAAE,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,CAAC;IAEvD,oDAAoD;IACpD,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,CAAC,KAAK,CACV,4CAA4C;YAC1C,0DAA0D,CAC7D,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,yDAAyD;IACzD,IAAI,UAAU,CAAC;IACf,IAAI,CAAC;QACH,UAAU,GAAG,cAAc,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,uBAAuB,EAAE,CAAC;YAC3C,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;YACxC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACzB,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,2EAA2E;IAC3E,kEAAkE;IAClE,IAAI,UAAU,CAAC,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC1D,MAAM,CAAC,KAAK,CACV,0DAA0D;YACxD,6DAA6D,CAChE,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,EAAE;QAC7C,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,qBAAqB,EAAE,IAAI,CAAC,qBAAqB;KAClD,CAAC,CAAC;IAEH,6DAA6D;IAC7D,IAAI,KAA+B,CAAC;IACpC,IAAI,CAAC;QACH,KAAK,GAAG,iBAAiB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;QAC5D,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAC3C,CAAC;IAED,kDAAkD;IAClD,IAAI,KAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC7E,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,wBAAwB;IACxB,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC3D,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAErD,wBAAwB;IACxB,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QACzB,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,uBAAuB,EAAE,eAAe;YACxC,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,IAAI;YACZ,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,yEAAyE;IACzE,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC,EAAE,CAAC;IAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CACV,gEAAgE,CACjE,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,aAAa,EAAE,IAAI,CAAC,MAAM;YAC1B,uBAAuB,EAAE,eAAe;YACxC,mBAAmB,EAAE,CAAC;YACtB,eAAe,EAAE,CAAC;YAClB,MAAM,EAAE,KAAK;YACb,iBAAiB,EAAE,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,IAAI,iBAAiB,CAAC;IAEpE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,CAAC,KAAK,CAAC,eAAe,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,KAAK,CAAC,OAAO,CAAC,QAAQ,QAAQ,CAAC,CAAC;QACpF,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,yBAAyB,kBAAkB,CAC1F,KAAK,CAAC,OAAO,CAAC,KAAK,CACpB,EAAE,CAAC;QACJ,MAAM,CAAC,KAAK,CAAC,WAAW,QAAQ,IAAI,CAAC,CAAC;QAEtC,MAAM,GAAG,GAAG,CACV,MAAM,gBAAgB,CACpB,uEAAuE,CACxE,CACF;aACE,IAAI,EAAE;aACN,WAAW,EAAE,CAAC;QAEjB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;YACrD,MAAM,CAAC,KAAK,CACV,uEAAuE,CACxE,CAAC;YACF,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,aAAa,EAAE,IAAI,CAAC,MAAM;gBAC1B,uBAAuB,EAAE,eAAe;gBACxC,mBAAmB,EAAE,WAAW;gBAChC,eAAe,EAAE,OAAO;gBACxB,MAAM,EAAE,KAAK;gBACb,iBAAiB,EAAE,SAAS;aAC7B,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;YAClC,MAAM,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QAED,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,MAAM,GAAoB;YAC9B,UAAU,EAAE,GAAG,EAAE;YACjB,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK;YAC1B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;SACjC,CAAC;QACF,MAAM,SAAS,GAAmB;YAChC,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,EAAE,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE;SAC7D,CAAC;QACF,IAAI,CAAC;YACH,yBAAyB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CACV,4CAA4C;gBAC1C,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC1D,CAAC;YACF,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,aAAa,EAAE,IAAI,CAAC,MAAM;gBAC1B,uBAAuB,EAAE,eAAe;gBACxC,mBAAmB,EAAE,WAAW;gBAChC,eAAe,EAAE,OAAO;gBACxB,MAAM,EAAE,KAAK;gBACb,iBAAiB,EAAE,SAAS;aAC7B,CAAC;QACJ,CAAC;QACD,YAAY,GAAG,SAAS,CAAC;QACzB,WAAW,IAAI,CAAC,CAAC;QACjB,MAAM,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,KAAK,iBAAiB,CAAC,CAAC;IACnE,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAO,KAAK,CAAC,IAAI,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACvC,MAAM,UAAU,GAAG,GAAG,YAAY,aAAa,EAAE,MAAM,CAAC;QACxD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC;QAEtE,MAAM,GAAG,GAAG,CACV,MAAM,iBAAiB,CACrB,mCAAmC,YAAY,OAAO,UAAU,UAAU,CAC3E,CACF;aACE,IAAI,EAAE;aACN,WAAW,EAAE,CAAC;QAEjB,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC;YACpD,IAAI,CAAC;gBACH,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;gBACrC,MAAM,CAAC,KAAK,CAAC,0BAA0B,UAAU,KAAK,CAAC,CAAC;YAC1D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,CAAC,KAAK,CACV,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI;oBAC7E,qCAAqC,YAAY,yBAAyB,CAC7E,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CACV,kEAAkE;gBAChE,iDAAiD,CACpD,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CACV,KAAK,WAAW,cAAc,OAAO,gDAAgD,CACtF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,uBAAuB,EAAE,eAAe;QACxC,mBAAmB,EAAE,WAAW;QAChC,eAAe,EAAE,OAAO;QACxB,MAAM,EAAE,KAAK;QACb,iBAAiB,EAAE,SAAS;KAC7B,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,0EAA0E;QACxE,yEAAyE;QACzE,0EAA0E;QAC1E,4DAA4D;QAC5D,wFAAwF,CAC3F;SACA,MAAM,CAAC,WAAW,EAAE,yCAAyC,CAAC;SAC9D,MAAM,CAAC,OAAO,EAAE,sDAAsD,CAAC;SACvE,MAAM,CAAC,gBAAgB,EAAE,uDAAuD,CAAC;SACjF,MAAM,CAAC,SAAS,EAAE,yDAAyD,CAAC;SAC5E,MAAM,CAAC,KAAK,EAAE,IAAwB,EAAE,EAAE;QACzC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9C,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC1B,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACrC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC;AAED,4EAA4E;AAC5E,OAAO,EAAE,uBAAuB,EAAE,CAAC;AAEnC,wEAAwE;AACxE,oEAAoE;AACpE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,UAAU;IACV,WAAW;IACX,YAAY;IACZ,EAAE;CACH,CAAC"}

package/dist/commands/auth-status.d.ts

@@ -1,51 +0,0 @@
-/**
- * Auth credential inspector — reads from auth-service (single source of truth).
- *
- * Falls back to local accounts.json only if needed for token redaction tests.
- * Auth-service is always authoritative; reading local files risks showing
- * phantom credentials that no longer exist in the live vault.
- *
- * Token security (T4): accessToken and refreshToken fields are NEVER read
- * into variables used in output. Only safe fields are touched.
- */
-import { type CredentialState } from '@olam/auth-logic';
-import { EXIT_AUTH_NEEDS_ATTENTION } from '../exit-codes.js';
-import type { AuthAccountSummary } from '@olam/core/src/auth/types.js';
-interface AccountUsage {
-    readonly requestCount5h: number;
-    readonly last429At: string | null;
-}
-interface SafeAccount {
-    readonly id: string;
-    readonly accountLabel?: string;
-    readonly expiresAt?: number;
-    readonly rateLimited?: boolean;
-    readonly rateLimitResetsAt?: string;
-    readonly weeklyResetsAt?: string;
-    readonly lastUsed?: string;
-    readonly state?: CredentialState;
-    readonly usage?: AccountUsage;
-}
-export declare function readAccountsFile(filePath: string): SafeAccount[];
-export interface FormatResult {
-    output: string;
-    /**
-     * 0 = healthy (a credential is picked).
-     * EXIT_AUTH_NEEDS_ATTENTION (= 5) = no credential picked (all cooled-down,
-     * disabled, or expired). Distinct from EXIT_PLERI_NOT_CONFIGURED (= 2)
-     * — see `packages/cli/src/exit-codes.ts` for the CLI-wide registry.
-     */
-    exitCode: 0 | typeof EXIT_AUTH_NEEDS_ATTENTION;
-}
-export declare function formatAuthStatus(accounts: SafeAccount[], now?: number): FormatResult;
-/**
- * Run `olam auth status`.
- *
- * @param getStatus - Injectable status fetcher for tests; defaults to AuthClient.status().
- */
-export declare function runAuthStatus(getStatus?: () => Promise<{
-    reachable: boolean;
-    accounts: readonly AuthAccountSummary[];
-}>): Promise<void>;
-export {};
-//# sourceMappingURL=auth-status.d.ts.map

package/dist/commands/auth-status.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-status.d.ts","sourceRoot":"","sources":["../../src/commands/auth-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAMH,OAAO,EAAqD,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAG3G,OAAO,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC7D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,UAAU,YAAY;IACpB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAGD,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;CAC/B;AAcD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,EAAE,CAmChE;AAqED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,QAAQ,EAAE,CAAC,GAAG,OAAO,yBAAyB,CAAC;CAChD;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,WAAW,EAAE,EACvB,GAAG,GAAE,MAAmB,GACvB,YAAY,CA+Fd;AAqBD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,SAAS,CAAC,EAAE,MAAM,OAAO,CAAC;IAAE,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAAE,CAAC,GACzF,OAAO,CAAC,IAAI,CAAC,CA8Bf"}