@pleri/olam-cli 0.1.201 → 0.1.204

package/dist/commands/auth-upgrade.js

@@ -1,431 +0,0 @@
-/**
- * `olam auth upgrade` — rebuild the olam-auth image and force-recreate the container.
- *
- * Steps:
- *   bash build-auth.sh (rebuilds olam-auth:local with latest source + git SHA)
- *   docker stop olam-auth + docker rm olam-auth
- *   olam auth up logic (docker run with correct env vars via AuthContainerController)
- *   wait for /health
- *   smoke test: POST /credentials/add provider=codex must NOT return a Claude URL
- */
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import { spawnSync } from 'node:child_process';
-import ora from 'ora';
-import pc from 'picocolors';
-import { printError, printSuccess, printInfo, printWarning, printHeader } from '../output.js';
-import { readAuthSecret } from './host-cp.js';
-import { AuthContainerController } from '@olam/core/src/auth/index.js';
-import { loadImageDigests, pullImageWithRetry, realDocker, } from './bootstrap.js';
-import { EXIT_BOOTSTRAP_PULL_FAILED, EXIT_GENERIC_ERROR, EXIT_PROTOCOL_MISMATCH, } from '../exit-codes.js';
-import { checkProtocolOverlap, parseProtocolVersionsLabel } from '../protocol-version.js';
-import { isDevMode, MissingBuildScriptError } from '../install-root.js';
-const AUTH_PORT = 9999;
-const AUTH_HEALTH_URL = `http://127.0.0.1:${AUTH_PORT}/health`;
-const AUTH_ADD_URL = `http://127.0.0.1:${AUTH_PORT}/credentials/add`;
-/** Normalise raw Commander option object into typed opts. */
-export function parseAuthUpgradeOpts(raw) {
-    return {
-        yes: raw.yes === true,
-        skipRecreate: raw.skipRecreate === true,
-        fromSource: raw.fromSource === true,
-    };
-}
-/**
- * Check cwd looks like the olam repo root for auth-service.
- * Verifies packages/auth-service/Dockerfile exists.
- */
-export function validateAuthRepoRoot(cwd) {
-    const marker = path.join(cwd, 'packages/auth-service/Dockerfile');
-    if (!fs.existsSync(marker)) {
-        return {
-            ok: false,
-            error: `Not an olam repo root (expected ${marker}).\n` +
-                'Run `olam auth upgrade` from the root of your olam checkout.',
-        };
-    }
-    return { ok: true };
-}
-/** Block until auth service /health responds OK or timeout expires. */
-export async function waitForAuthHealth(timeoutMs = 10_000) {
-    const deadline = Date.now() + timeoutMs;
-    while (Date.now() < deadline) {
-        try {
-            const res = await fetch(AUTH_HEALTH_URL, {
-                signal: AbortSignal.timeout(2000),
-            });
-            if (res.ok)
-                return true;
-        }
-        catch {
-            // not up yet
-        }
-        await new Promise((r) => setTimeout(r, 500));
-    }
-    return false;
-}
-/**
- * Smoke test: POST /credentials/add with provider=codex.
- *
- * Passes when the response does NOT contain a claude.com/claude.ai loginUrl.
- * A stale (pre-codex) image falls through to the Claude PKCE branch and
- * returns a claude.com URL — this gate catches that.
- */
-export async function smokeTestCodexProvider(authSecret) {
-    const headers = { 'Content-Type': 'application/json' };
-    if (authSecret)
-        headers['X-Olam-Secret'] = authSecret;
-    let res;
-    try {
-        res = await fetch(AUTH_ADD_URL, {
-            method: 'POST',
-            headers,
-            body: JSON.stringify({ provider: 'codex', label: '__smoke-test__' }),
-            signal: AbortSignal.timeout(5000),
-        });
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : 'fetch failed';
-        return { ok: false, error: `Smoke test request failed: ${msg}` };
-    }
-    let body;
-    try {
-        body = await res.json();
-    }
-    catch {
-        return { ok: false, error: `Smoke test: non-JSON response (status ${res.status})` };
-    }
-    const b = body;
-    // A stale image returns a loginUrl pointing to claude.com.
-    const loginUrl = typeof b['loginUrl'] === 'string' ? b['loginUrl'] : '';
-    if (/claude\.com|claude\.ai/.test(loginUrl)) {
-        return {
-            ok: false,
-            error: `Smoke test FAILED: provider=codex returned a Claude OAuth URL (${loginUrl}). ` +
-                'The deployed image is stale — Codex branch is missing from /app/dist.',
-        };
-    }
-    // Could be a 502 (OpenAI unreachable in CI) — that's not a stale-image failure.
-    // We only fail the smoke test on a Claude URL.
-    return { ok: true };
-}
-function runStep(label, cmd, args, opts = {}) {
-    const start = Date.now();
-    process.stdout.write(`  ${pc.dim(label.padEnd(34))}`);
-    const result = spawnSync(cmd, [...args], {
-        encoding: 'utf-8',
-        stdio: ['ignore', 'pipe', 'pipe'],
-        cwd: opts.cwd ?? process.cwd(),
-        env: { ...process.env, ...(opts.env ?? {}) },
-    });
-    const durationMs = Date.now() - start;
-    const ok = result.status === 0 && result.error === undefined;
-    const dur = `${(durationMs / 1000).toFixed(1)}s`;
-    process.stdout.write(`${ok ? pc.green('✓') : pc.red('✗')} ${dur}\n`);
-    return {
-        ok,
-        stdout: result.stdout ?? '',
-        stderr: result.stderr ?? '',
-        durationMs,
-    };
-}
-async function confirm(message) {
-    if (!process.stdin.isTTY)
-        return true;
-    const { createInterface } = await import('node:readline');
-    const rl = createInterface({ input: process.stdin, output: process.stdout });
-    return new Promise((resolve) => {
-        rl.question(`${message} [y/N] `, (answer) => {
-            rl.close();
-            resolve(answer.toLowerCase() === 'y' || answer.toLowerCase() === 'yes');
-        });
-    });
-}
-function printTimings(timings) {
-    const total = timings.reduce((s, t) => s + t.durationMs, 0);
-    process.stdout.write('\n');
-    for (const t of timings) {
-        printInfo(t.label, `${(t.durationMs / 1000).toFixed(1)}s`);
-    }
-    printInfo('total', `${(total / 1000).toFixed(1)}s`);
-}
-export async function runAuthUpgradePullByDigest(deps = {}) {
-    const docker = deps.docker ?? realDocker;
-    const digests = deps.digests ?? loadImageDigests();
-    const registry = deps.registry ?? digests.$registry ?? 'ghcr.io/pleri';
-    printHeader('olam auth upgrade (pull-by-digest)');
-    // Step 1 — daemon smoke.
-    const infoSpinner = ora('Checking docker daemon').start();
-    const info = await docker.info();
-    if (info.exitCode !== 0) {
-        infoSpinner.fail('docker daemon not reachable');
-        process.stderr.write(`${pc.red('error')} docker info exited with ${info.exitCode}.\n` +
-            '  Ensure Docker is running, then retry.\n');
-        return { exitCode: EXIT_GENERIC_ERROR, summary: 'docker daemon not reachable' };
-    }
-    infoSpinner.succeed('docker daemon reachable');
-    // Step 2 — pull olam-auth by digest.
-    const ref = `${registry}/olam-auth@${digests.auth}`;
-    const pullSpinner = ora(`Pulling ${ref.slice(0, 60)}…`).start();
-    const pullResult = await pullImageWithRetry(ref, docker);
-    if (pullResult.exitCode !== 0) {
-        pullSpinner.fail('Pull failed');
-        process.stderr.write(`${pc.red('error')} pull failed (exit ${pullResult.exitCode}):\n` +
-            `  ${pullResult.stderr.split('\n')[0] ?? '(empty)'}\n` +
-            '\n  Remedy: re-run after resolving network / GHCR availability.\n' +
-            '  For monorepo dev, `OLAM_DEV=1 olam auth upgrade --from-source` builds locally.\n');
-        return { exitCode: EXIT_BOOTSTRAP_PULL_FAILED, summary: 'pull failed: auth' };
-    }
-    pullSpinner.succeed('Image pulled');
-    // Step 3 — protocol-version handshake.
-    const handshakeSpinner = ora('Verifying olam.protocol.versions handshake').start();
-    const inspect = await docker.inspectLabel(ref, 'olam.protocol.versions');
-    if (inspect.exitCode !== 0) {
-        handshakeSpinner.fail('Could not inspect auth image');
-        process.stderr.write(`${pc.red('error')} docker inspect ${ref} failed: ${inspect.stderr}\n`);
-        return { exitCode: EXIT_GENERIC_ERROR, summary: 'inspect failed: auth' };
-    }
-    const labelValue = (inspect.stdout || '').trim();
-    const versions = parseProtocolVersionsLabel(labelValue === '<no value>' ? '' : labelValue);
-    const decision = checkProtocolOverlap(versions);
-    if (!decision.compatible) {
-        handshakeSpinner.fail('Protocol mismatch on auth image');
-        process.stderr.write(`${pc.red('error')} ${decision.remedy}\n`);
-        return { exitCode: EXIT_PROTOCOL_MISMATCH, summary: 'protocol mismatch: auth' };
-    }
-    handshakeSpinner.succeed('Protocol handshake passed');
-    // Step 4 — re-tag pulled-by-digest to olam-auth:local.
-    const tagSpinner = ora('Tagging digest → olam-auth:local').start();
-    const tagger = deps.tagImpl ?? defaultTagAuth;
-    const tagResult = tagger(ref, 'olam-auth:local');
-    if (!tagResult.ok) {
-        tagSpinner.fail('docker tag failed');
-        process.stderr.write(`${pc.red('error')} ${tagResult.error ?? 'docker tag failed'}\n`);
-        return { exitCode: EXIT_GENERIC_ERROR, summary: 'tag failed: auth' };
-    }
-    tagSpinner.succeed('Re-tagged → olam-auth:local');
-    // Step 5 — recreate auth-service container.
-    const authSpinner = ora('Recreating auth-service container').start();
-    const recreate = deps.recreateAuth ?? defaultRecreateAuth;
-    const recreateResult = await recreate();
-    if (!recreateResult.ok) {
-        authSpinner.fail('auth-service recreate failed');
-        process.stderr.write(`${pc.red('error')} ${recreateResult.error ?? 'unknown failure'}\n`);
-        return { exitCode: EXIT_GENERIC_ERROR, summary: 'auth recreate failed' };
-    }
-    authSpinner.succeed('auth-service running on new image');
-    printSuccess('Auth upgrade complete (pull-by-digest)');
-    printInfo('digest', digests.auth.slice(0, 32) + '…');
-    return { exitCode: 0, summary: 'auth upgraded' };
-}
-function defaultTagAuth(from, to) {
-    try {
-        const r = spawnSync('docker', ['tag', from, to], {
-            encoding: 'utf-8',
-            stdio: ['ignore', 'ignore', 'pipe'],
-        });
-        if (r.status === 0 && r.error === undefined)
-            return { ok: true };
-        return {
-            ok: false,
-            error: (r.stderr ?? '').trim() || r.error?.message || 'docker tag failed',
-        };
-    }
-    catch (err) {
-        return {
-            ok: false,
-            error: err instanceof Error ? `spawnSync threw: ${err.message}` : 'spawnSync threw',
-        };
-    }
-}
-async function defaultRecreateAuth() {
-    try {
-        spawnSync('docker', ['stop', 'olam-auth'], {
-            encoding: 'utf-8',
-            stdio: ['ignore', 'ignore', 'ignore'],
-        });
-        spawnSync('docker', ['rm', 'olam-auth'], {
-            encoding: 'utf-8',
-            stdio: ['ignore', 'ignore', 'ignore'],
-        });
-        const controller = new AuthContainerController();
-        controller.start();
-        // 60s mirrors upgrade.ts's AUTH_HEALTH_TIMEOUT_MS bump — auth's
-        // post-recreate cold boot can exceed 15s on first sqlite migration.
-        const healthy = await waitForAuthHealth(60_000);
-        if (!healthy) {
-            return { ok: false, error: 'auth-service /health did not respond within 60s' };
-        }
-        return { ok: true };
-    }
-    catch (err) {
-        return { ok: false, error: err instanceof Error ? err.message : String(err) };
-    }
-}
-// ── Main handler ──────────────────────────────────────────────────
-async function handleAuthUpgrade(opts) {
-    const cwd = process.cwd();
-    // 1. Verify repo root.
-    const rootCheck = validateAuthRepoRoot(cwd);
-    if (!rootCheck.ok) {
-        printError(rootCheck.error);
-        process.exitCode = 1;
-        return;
-    }
-    // 2. Print plan.
-    printInfo('olam auth upgrade', '');
-    const steps = [
-        'bash build-auth.sh (docker image)',
-        'stop + remove olam-auth container',
-        'docker run olam-auth:local (force-recreate)',
-        'wait for /health',
-        'smoke test: codex provider → OpenAI URL',
-    ];
-    if (opts.skipRecreate)
-        steps.splice(1, 3, '[skipping container recreate]');
-    printInfo('Steps', steps.join(', '));
-    process.stdout.write('\n');
-    // 3. Confirm unless --yes.
-    if (!opts.yes) {
-        const proceed = await confirm('Proceed?');
-        if (!proceed) {
-            printInfo('Aborted', 'no changes made');
-            return;
-        }
-    }
-    const timings = [];
-    // Step a: build the auth image. Phase B6: resolve the build script via
-    // installRoot + 2-condition dev-mode check (OLAM_DEV=1 + monorepo
-    // siblings). Outside dev mode, surface the named remedy from
-    // MissingBuildScriptError and exit cleanly — published-image upgrades
-    // (Phase C's C6) take the no-flag default path.
-    let buildScript;
-    try {
-        const { resolveBuildScript } = await import('../install-root.js');
-        buildScript = resolveBuildScript({
-            scriptRelPath: 'packages/adapters/src/docker/build-auth.sh',
-        });
-    }
-    catch (err) {
-        printError(err instanceof Error ? err.message : String(err));
-        process.exitCode = 1;
-        return;
-    }
-    const imageResult = runStep('bash build-auth.sh', 'bash', [buildScript], { cwd });
-    timings.push({ label: 'docker image build', durationMs: imageResult.durationMs });
-    if (!imageResult.ok) {
-        printError(`Docker image build failed:\n${imageResult.stderr}`);
-        process.exitCode = 1;
-        return;
-    }
-    if (opts.skipRecreate) {
-        process.stdout.write('\n');
-        printSuccess('Image rebuilt (--skip-recreate: container not touched)');
-        printTimings(timings);
-        return;
-    }
-    // Step b: stop the running container (ignore error if not running).
-    const stopStart = Date.now();
-    process.stdout.write(`  ${pc.dim('docker stop olam-auth'.padEnd(34))}`);
-    spawnSync('docker', ['stop', 'olam-auth'], {
-        encoding: 'utf-8',
-        stdio: ['ignore', 'pipe', 'pipe'],
-    });
-    const stopDurationMs = Date.now() - stopStart;
-    process.stdout.write(`${pc.green('✓')} ${(stopDurationMs / 1000).toFixed(1)}s\n`);
-    timings.push({ label: 'container stop', durationMs: stopDurationMs });
-    // Step c: remove the container so force-recreate with new image is clean.
-    const rmStart = Date.now();
-    process.stdout.write(`  ${pc.dim('docker rm olam-auth'.padEnd(34))}`);
-    spawnSync('docker', ['rm', 'olam-auth'], {
-        encoding: 'utf-8',
-        stdio: ['ignore', 'pipe', 'pipe'],
-    });
-    const rmDurationMs = Date.now() - rmStart;
-    process.stdout.write(`${pc.green('✓')} ${(rmDurationMs / 1000).toFixed(1)}s\n`);
-    timings.push({ label: 'container remove', durationMs: rmDurationMs });
-    // Step d: start the new container via AuthContainerController (handles secret injection).
-    const startStart = Date.now();
-    process.stdout.write(`  ${pc.dim('docker run olam-auth:local'.padEnd(34))}`);
-    try {
-        const controller = new AuthContainerController();
-        controller.start();
-        const startDurationMs = Date.now() - startStart;
-        process.stdout.write(`${pc.green('✓')} ${(startDurationMs / 1000).toFixed(1)}s\n`);
-        timings.push({ label: 'container start', durationMs: startDurationMs });
-    }
-    catch (err) {
-        const startDurationMs = Date.now() - startStart;
-        process.stdout.write(`${pc.red('✗')} ${(startDurationMs / 1000).toFixed(1)}s\n`);
-        timings.push({ label: 'container start', durationMs: startDurationMs });
-        printError(`Failed to start auth container: ${err instanceof Error ? err.message : String(err)}`);
-        process.exitCode = 1;
-        return;
-    }
-    // Step e: wait for /health.
-    process.stdout.write(`  ${pc.dim('waiting for /health'.padEnd(34))}`);
-    const healthStart = Date.now();
-    const healthy = await waitForAuthHealth(10_000);
-    const healthDurationMs = Date.now() - healthStart;
-    const healthDur = `${(healthDurationMs / 1000).toFixed(1)}s`;
-    process.stdout.write(`${healthy ? pc.green('✓') : pc.yellow('?')} ${healthDur}\n`);
-    timings.push({ label: '/health', durationMs: healthDurationMs });
-    if (!healthy) {
-        printWarning('Auth service started but /health did not respond within 10s. Check: docker logs olam-auth');
-        process.exitCode = 1;
-        printTimings(timings);
-        return;
-    }
-    // Step f: smoke test — codex provider must not return a Claude URL.
-    process.stdout.write(`  ${pc.dim('smoke test: codex provider'.padEnd(34))}`);
-    const smokeStart = Date.now();
-    const authSecret = readAuthSecret();
-    const smoke = await smokeTestCodexProvider(authSecret);
-    const smokeDurationMs = Date.now() - smokeStart;
-    const smokeDur = `${(smokeDurationMs / 1000).toFixed(1)}s`;
-    process.stdout.write(`${smoke.ok ? pc.green('✓') : pc.red('✗')} ${smokeDur}\n`);
-    timings.push({ label: 'smoke test', durationMs: smokeDurationMs });
-    if (!smoke.ok) {
-        printError(smoke.error);
-        process.exitCode = 1;
-        printTimings(timings);
-        return;
-    }
-    // 4. Summary.
-    process.stdout.write('\n');
-    printSuccess('Auth upgrade complete');
-    printInfo('Next', 'olam auth login --label primary (if needed)');
-    printTimings(timings);
-}
-// ── Register ──────────────────────────────────────────────────────
-export function registerAuthUpgrade(auth) {
-    auth
-        .command('upgrade')
-        .description('Upgrade the olam-auth container. Default: pull olam-auth@<digest> from ghcr.io and recreate. ' +
-        'Use --from-source to rebuild from monorepo source (requires OLAM_DEV=1).')
-        .option('-y, --yes', 'Skip the confirmation prompt')
-        .option('--skip-recreate', 'Build the image only; skip container stop/rm/start (only with --from-source)')
-        .option('--from-source', 'Build olam-auth from monorepo source (legacy path).\n' +
-        '                              Requires OLAM_DEV=1 + a `packages/` sibling at the install root.')
-        .action(async (opts) => {
-        const parsed = parseAuthUpgradeOpts(opts);
-        if (parsed.fromSource) {
-            if (!isDevMode()) {
-                printError(new MissingBuildScriptError('packages/adapters/src/docker/build-auth.sh').message);
-                process.exitCode = 1;
-                return;
-            }
-            await handleAuthUpgrade(parsed);
-            return;
-        }
-        try {
-            const result = await runAuthUpgradePullByDigest();
-            process.exitCode = result.exitCode;
-        }
-        catch (err) {
-            printError(err instanceof Error ? err.message : String(err));
-            process.exitCode = EXIT_GENERIC_ERROR;
-        }
-    });
-}
-//# sourceMappingURL=auth-upgrade.js.map

package/dist/commands/auth-upgrade.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-upgrade.js","sourceRoot":"","sources":["../../src/commands/auth-upgrade.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9F,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AACvE,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAClB,UAAU,GAGX,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAExE,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,eAAe,GAAG,oBAAoB,SAAS,SAAS,CAAC;AAC/D,MAAM,YAAY,GAAG,oBAAoB,SAAS,kBAAkB,CAAC;AAerE,6DAA6D;AAC7D,MAAM,UAAU,oBAAoB,CAAC,GAIpC;IACC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG,KAAK,IAAI;QACrB,YAAY,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI;QACvC,UAAU,EAAE,GAAG,CAAC,UAAU,KAAK,IAAI;KACpC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EACH,mCAAmC,MAAM,MAAM;gBAC/C,8DAA8D;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,SAAS,GAAG,MAAM;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACxC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,EAAE;gBACvC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;aAClC,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,aAAa;QACf,CAAC;QACD,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,UAAyB;IAEzB,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAC/E,IAAI,UAAU;QAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;IAEtD,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,YAAY,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;YACpE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,GAAG,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,CAAC,GAAG,IAA+B,CAAC;IAE1C,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,kEAAkE,QAAQ,KAAK;gBACpF,uEAAuE;SAC1E,CAAC;IACJ,CAAC;IAED,gFAAgF;IAChF,+CAA+C;IAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAWD,SAAS,OAAO,CACd,KAAa,EACb,GAAW,EACX,IAAuB,EACvB,OAAuD,EAAE;IAEzD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACvC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE;KAC7C,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACtC,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IACrE,OAAO;QACL,EAAE;QACF,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,UAAU;KACX,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAAe;IACpC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,EAAE,CAAC,QAAQ,CAAC,GAAG,OAAO,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE;YAC1C,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAqD;IACzE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAiCD,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAA4B,EAAE;IAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,UAAU,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS,IAAI,eAAe,CAAC;IAEvE,WAAW,CAAC,oCAAoC,CAAC,CAAC;IAElD,yBAAyB;IACzB,MAAM,WAAW,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,KAAK,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACxB,WAAW,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,4BAA4B,IAAI,CAAC,QAAQ,KAAK;YAC9D,2CAA2C,CAC9C,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC;IAClF,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAE/C,qCAAqC;IACrC,MAAM,GAAG,GAAG,GAAG,QAAQ,cAAc,OAAO,CAAC,IAAI,EAAE,CAAC;IACpD,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC9B,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,UAAU,CAAC,QAAQ,MAAM;YAC/D,KAAK,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,IAAI;YACtD,mEAAmE;YACnE,oFAAoF,CACvF,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,0BAA0B,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAChF,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAEpC,uCAAuC;IACvC,MAAM,gBAAgB,GAAG,GAAG,CAAC,4CAA4C,CAAC,CAAC,KAAK,EAAE,CAAC;IACnF,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC3B,gBAAgB,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,mBAAmB,GAAG,YAAY,OAAO,CAAC,MAAM,IAAI,CACvE,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC3E,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,0BAA0B,CACzC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAC9C,CAAC;IACF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC;QACzB,gBAAgB,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;IAClF,CAAC;IACD,gBAAgB,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;IAEtD,uDAAuD;IACvD,MAAM,UAAU,GAAG,GAAG,CAAC,kCAAkC,CAAC,CAAC,KAAK,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,IAAI,cAAc,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,KAAK,IAAI,mBAAmB,IAAI,CAAC,CAAC;QACvF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;IACvE,CAAC;IACD,UAAU,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAElD,4CAA4C;IAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,mCAAmC,CAAC,CAAC,KAAK,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,IAAI,mBAAmB,CAAC;IAC1D,MAAM,cAAc,GAAG,MAAM,QAAQ,EAAE,CAAC;IACxC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;QACvB,WAAW,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,KAAK,IAAI,iBAAiB,IAAI,CACpE,CAAC;QACF,OAAO,EAAE,QAAQ,EAAE,kBAAkB,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC;IAC3E,CAAC;IACD,WAAW,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAEzD,YAAY,CAAC,wCAAwC,CAAC,CAAC;IACvD,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;IACrD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,EAAU;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE;YAC/C,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;SACpC,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,IAAI,mBAAmB;SAC1E,CAAC;IACJ,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,iBAAiB;SACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB;IAChC,IAAI,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;YACzC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;QACH,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;YACvC,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;SACtC,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACjD,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,gEAAgE;QAChE,oEAAoE;QACpE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACjF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAChF,CAAC;AACH,CAAC;AAED,qEAAqE;AAErE,KAAK,UAAU,iBAAiB,CAAC,IAAqB;IACpD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAE1B,uBAAuB;IACvB,MAAM,SAAS,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;QAClB,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,iBAAiB;IACjB,SAAS,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG;QACZ,mCAAmC;QACnC,mCAAmC;QACnC,6CAA6C;QAC7C,kBAAkB;QAClB,yCAAyC;KAC1C,CAAC;IACF,IAAI,IAAI,CAAC,YAAY;QAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,+BAA+B,CAAC,CAAC;IAC3E,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE3B,2BAA2B;IAC3B,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACd,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,SAAS,CAAC,SAAS,EAAE,iBAAiB,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAiD,EAAE,CAAC;IAEjE,uEAAuE;IACvE,kEAAkE;IAClE,6DAA6D;IAC7D,sEAAsE;IACtE,gDAAgD;IAChD,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAClE,WAAW,GAAG,kBAAkB,CAAC;YAC/B,aAAa,EAAE,4CAA4C;SAC5D,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,UAAU,CAAC,+BAA+B,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,YAAY,CAAC,wDAAwD,CAAC,CAAC;QACvE,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACxE,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE;QACzC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtE,0EAA0E;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;QACvC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC;IAEtE,0FAA0F;IAC1F,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,uBAAuB,EAAE,CAAC;QACjD,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACjF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;QACxE,UAAU,CAAC,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,4BAA4B;IAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC/B,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC;IAClD,MAAM,SAAS,GAAG,GAAG,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC7D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC;IACnF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,YAAY,CAAC,2FAA2F,CAAC,CAAC;QAC1G,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACvD,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IAChD,MAAM,QAAQ,GAAG,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,IAAI,CAAC,CAAC;IAChF,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;IAEnE,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;QACd,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,YAAY,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO;IACT,CAAC;IAED,cAAc;IACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,YAAY,CAAC,uBAAuB,CAAC,CAAC;IACtC,SAAS,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;IACjE,YAAY,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC;AAED,qEAAqE;AAErE,MAAM,UAAU,mBAAmB,CAAC,IAAa;IAC/C,IAAI;SACD,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CACV,+FAA+F;QAC7F,0EAA0E,CAC7E;SACA,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;SACnD,MAAM,CAAC,iBAAiB,EAAE,8EAA8E,CAAC;SACzG,MAAM,CACL,eAAe,EACf,uDAAuD;QACrD,gGAAgG,CACnG;SACA,MAAM,CAAC,KAAK,EAAE,IAAqE,EAAE,EAAE;QACtF,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QAE1C,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACjB,UAAU,CACR,IAAI,uBAAuB,CAAC,4CAA4C,CAAC,CAAC,OAAO,CAClF,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YACD,MAAM,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,0BAA0B,EAAE,CAAC;YAClD,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,OAAO,CAAC,QAAQ,GAAG,kBAAkB,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/commands/auth.d.ts

@@ -1,31 +0,0 @@
-/**
- * olam auth — Manage the local auth container (the long-lived Linux container
- * that runs the same OAuth PKCE dance as the Cloudflare Worker and stores
- * Claude tokens in a named docker volume).
- *
- * Subcommands (local):
- *   olam auth up                  — start the auth container (idempotent)
- *   olam auth down                — stop the auth container
- *   olam auth status              — show container state + account summary
- *   olam auth login               — run PKCE login flow (one-time per host)
- *   olam auth logout              — remove an account from the container
- *   olam auth refresh             — force-refresh a token
- *
- * Subcommands (remote auth-worker — e4/e5/e6):
- *   olam auth login --remote <url>                   — print OAuth URL to open in browser (v1 dogfood)
- *   olam auth bind-service-token --remote <url> ...  — bind a CF service token to a user sub
- *   olam auth list --remote <url>                    — list accounts + service tokens on remote worker
- *   olam auth migrate-to-remote --url <url>          — guidance: re-OAuth each local account remotely
- *   olam auth rotate-service-token --url <url> ...   — revoke + re-bind a service token
- *   olam auth doctor --auth-worker <url>             — 4-probe health check against the auth-worker
- *
- * V1 dogfood note (e4/e5):
- *   CF Access cookie-bridging is the core UX constraint.  Full CLI-orchestrated
- *   browser flow (the CLI as its own OAuth client for CF Access) is complex and
- *   deferred to v2.  V1 uses a "print the URL; operator completes in browser;
- *   CLI re-checks via list --remote" model for login, and a "paste cookie from
- *   DevTools" model for service-token binding.
- */
-import type { Command } from 'commander';
-export declare function registerAuth(program: Command): void;
-//# sourceMappingURL=auth.d.ts.map

package/dist/commands/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/commands/auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA+LzC,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkqBnD"}