@productbrain/cli 0.1.0-beta.14 → 0.1.0-beta.14010

package/dist/commands/connect.js

@@ -0,0 +1,424 @@
+/**
+ * pb connect — redeem a short-lived connect token to save an API key locally.
+ *
+ * Part of FEAT-958 Path C: Onboarding flow. Redeems a connect token, saves the API key locally and
+ * names one next step, pb init (TASK-562). It refuses the home folder before the token is spent.
+ */
+import { existsSync, mkdirSync, writeFileSync } from 'fs';
+import { resolve } from 'path';
+import { connectPointer, resolveAppUrl, resolveConnectRedeemUrl } from '../lib/constants.js';
+import { CONNECT_REDEEM_DEFAULT_API_KEY_NAME, trimClientKeyLabelInput, } from '../lib/connectKeyLabel.js';
+import { CONNECT_TOKEN_PREFIX } from '../lib/tokenConstants.js';
+import { CLIError, ErrorCode } from '../lib/errors.js';
+import { createProfile, autoMigrate, profileFileExists, profilePath, resolveNamedProfileConfig, validateProfileName } from '../lib/profiles.js';
+import { connectFolderName, pickConnectProfileName } from '../lib/connectProfileName.js';
+import { withSpinner } from '../lib/spinner.js';
+import { stripControlChars } from '../lib/strip.js';
+import * as clack from '@clack/prompts';
+import { runConnectScreens, runConnectHeadless } from './connect-screens.js';
+import { setLocalProfilePin, readLocalProjectConfig } from '../lib/config.js';
+import { refuseHomeFolder, refuseTrackedPin } from '../lib/projectConfig.js';
+import { CONNECT_TOKEN_TTL_MINUTES } from '../lib/cliFirstRun.js';
+import { discardAllSessions } from '../lib/session.js';
+import { confirm, isInteractive } from '../lib/prompts.js';
+import { sealConnectWrites } from '../lib/productbrain-files.js';
+import { latencyBudgetMsForRoute } from '../generated/routeLatencyBudget.generated.js';
+const APP_URL = resolveAppUrl();
+/** A refused token (RULE-662): a 400 is also a typo, so the sentence never claims expiry alone. */
+const INVALID_TOKEN_MESSAGE = 'This connect command did not work. It expired, was used, or has a typo.';
+const invalidTokenNextStep = () => `A connect command lasts ${CONNECT_TOKEN_TTL_MINUTES} minutes and works once. ${connectPointer()}`;
+/**
+ * Validate token format — must start with pb_ct_ and be at least 30 characters.
+ * @returns error message if invalid, undefined if valid.
+ */
+function validateTokenFormat(token) {
+    if (!token.startsWith(CONNECT_TOKEN_PREFIX)) {
+        return `Invalid token format. Token must start with '${CONNECT_TOKEN_PREFIX}'.`;
+    }
+    if (token.length < 30) {
+        return `Token is too short. Got ${token.length} characters, expected at least 30.`;
+    }
+    return undefined;
+}
+/**
+ * POST /auth/redeem-connect-token with the token.
+ * Returns the API key + workspace info, or throws CLIError on failure.
+ */
+async function redeemToken(token, siteUrl, optionalDisplayName) {
+    return withSpinner('Redeeming token', async () => {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 5000);
+        try {
+            const body = { token };
+            if (optionalDisplayName !== undefined && optionalDisplayName.length > 0) {
+                body.name = optionalDisplayName;
+            }
+            const res = await fetch(`${siteUrl}/auth/redeem-connect-token`, {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                },
+                body: JSON.stringify(body),
+                signal: controller.signal,
+            });
+            clearTimeout(timer);
+            if (!res.ok) {
+                let errorCode = 'unknown_error';
+                let errorMessage = `Server returned ${res.status}`;
+                try {
+                    const errorData = (await res.json());
+                    if (errorData.error?.code) {
+                        errorCode = errorData.error.code;
+                        errorMessage = errorData.error.message ?? errorMessage;
+                    }
+                }
+                catch {
+                    // Failed to parse error JSON — use default message
+                }
+                // Map error codes to user-friendly messages
+                if (errorCode === 'invalid_token' || res.status === 400) {
+                    throw new CLIError(INVALID_TOKEN_MESSAGE, {
+                        code: ErrorCode.AUTH_INVALID,
+                        category: 'auth',
+                        guidance: `${invalidTokenNextStep()}\nTried gateway: ${siteUrl}\n\nIf your token came from a different Convex deployment, use:\n  pb connect --gateway <your-deployment>.convex.site <token>\nor set CONVEX_SITE_URL in your environment.`,
+                    });
+                }
+                if (errorCode === 'workspace_not_found' || res.status === 404) {
+                    throw new CLIError('Workspace not found. The token may be from a deleted workspace.', {
+                        code: ErrorCode.AUTH_DENIED,
+                        category: 'auth',
+                        guidance: 'Contact support for help.',
+                    });
+                }
+                throw new CLIError(`Token redemption failed: ${errorMessage}`, {
+                    code: ErrorCode.AUTH_INVALID,
+                    category: 'auth',
+                    guidance: connectPointer(),
+                });
+            }
+            const json = (await res.json());
+            // Check for error response (has error field)
+            if ('error' in json && json.error) {
+                const errorCode = json.error.code || 'unknown_error';
+                const errorMessage = json.error.message || 'Token redemption failed';
+                throw new CLIError(errorCode === 'invalid_token' ? INVALID_TOKEN_MESSAGE : errorMessage, {
+                    code: ErrorCode.AUTH_INVALID,
+                    category: 'auth',
+                    guidance: errorCode === 'invalid_token' ? invalidTokenNextStep() : connectPointer(),
+                });
+            }
+            return json;
+        }
+        catch (err) {
+            clearTimeout(timer);
+            // Re-throw CLIErrors (validation failures)
+            if (err instanceof CLIError)
+                throw err;
+            // Network/timeout error
+            const msg = err instanceof Error ? err.message : String(err);
+            if (msg === 'fetch failed' || msg.includes('ECONNREFUSED') || msg.includes('ENOTFOUND')) {
+                throw new CLIError('Could not reach ProductBrain. Check your internet connection.', {
+                    code: ErrorCode.NETWORK_UNREACHABLE,
+                    category: 'network',
+                    guidance: 'Check your connection, then try again: pb connect <token>',
+                });
+            }
+            // Unknown error
+            throw new CLIError(`Network error: ${msg}`, {
+                code: ErrorCode.NETWORK_UNREACHABLE,
+                category: 'network',
+                guidance: 'Check your internet connection and try again.',
+            });
+        }
+    });
+}
+/**
+ * Refuse a `PB_PROFILE` target that already exists — BEFORE the one-time token is redeemed, so
+ * the token stays unspent (TASK-638). A redeem always mints a new key, so an existing profile of
+ * that name necessarily holds different credentials; overwriting it would silently cut off
+ * whichever folder uses it. The name is validated before autoMigrate() touches any file
+ * (TEN-4503); migration runs before the occupancy check so a legacy install counts as `default`.
+ */
+function assertEnvProfileIsFree(envProfile) {
+    validateProfileName(envProfile);
+    autoMigrate();
+    if (!profileFileExists(envProfile))
+        return;
+    throw new CLIError(`Profile "${envProfile}" (from PB_PROFILE) already exists — refusing to overwrite it.`, {
+        code: ErrorCode.PROFILE_CREDENTIALS_CONFLICT,
+        category: 'profile',
+        guidance: 'Unset PB_PROFILE to let pb connect name the profile after this workspace and folder, or set ' +
+            'PB_PROFILE to a name no profile uses yet. Your token has not been used — the same token still works.',
+    });
+}
+/**
+ * The profile this connect writes (DEC-1961): PB_PROFILE when set (already checked free before
+ * redeem), else `<workspace>-<folder>` from pickConnectProfileName — this folder's own pin is
+ * replaced in place (a key rotation), another folder's profile is never touched.
+ */
+function resolveConnectProfile(workspaceName, envProfile) {
+    if (envProfile)
+        return { profileName: envProfile, replace: false };
+    autoMigrate();
+    const choice = pickConnectProfileName({
+        workspaceName,
+        folderName: connectFolderName(process.cwd()),
+        ownPin: readLocalProjectConfig()?.profile ?? null,
+        isTaken: profileFileExists,
+    });
+    if (choice)
+        return choice;
+    throw new CLIError(`Every profile name for "${workspaceName}" in this folder is taken.`, {
+        code: ErrorCode.PROFILE_ALREADY_EXISTS,
+        category: 'profile',
+        guidance: 'Delete unused profiles with `pb profile delete <name>`, or set PB_PROFILE=<new-name> and request a fresh onboarding link.',
+    });
+}
+/**
+ * Save the API key under the chosen profile. Does NOT activate it globally — the folder's pin
+ * (config.local.json) selects it. Sets process.env for the current process only (so the
+ * post-connect context sync works).
+ */
+function saveKeyAsProfile(apiKey, siteUrl, profileName, replace) {
+    if (replace)
+        createProfile(profileName, apiKey, siteUrl, { overwrite: true });
+    else
+        createProfile(profileName, apiKey, siteUrl);
+    process.env.PRODUCTBRAIN_API_KEY = apiKey;
+    process.env.CONVEX_SITE_URL = siteUrl;
+}
+/**
+ * Pin `pinFolder` (runConnect's one decider, TASK-648) to the profile. Returns the prior pin so the
+ * caller can detect a redirect.
+ * - config.json (committed): its PRESENCE declares a Product Brain project
+ *   (projectConfig.ts findProjectRoot / projectConfigExists). Created empty when absent; its
+ *   content is never read, so connect never rewrites it (TASK-638: the siteUrl writer had no
+ *   reader since TEN-4500).
+ * - config.local.json (gitignored): the profile pin, via the shared setLocalProfilePin().
+ * Does NOT include the API key anywhere — that stays in profiles, never committed.
+ */
+export function saveProjectConfig(pinFolder, profileName) {
+    const configDir = resolve(pinFolder, '.productbrain');
+    const configPath = resolve(configDir, 'config.json');
+    mkdirSync(configDir, { recursive: true });
+    // Capture the prior repo pin BEFORE we overwrite it (redirect detection).
+    const previous = readLocalProjectConfig()?.profile ?? null;
+    if (!existsSync(configPath))
+        writeFileSync(configPath, '{}\n');
+    // --- config.local.json: profile pin (gitignored) via the shared writer ---
+    setLocalProfilePin(pinFolder, profileName);
+    return { previousProfile: previous && previous !== profileName ? previous : null };
+}
+/**
+ * Refuse a connect that can never run the confirm gate — BEFORE the one-time token is
+ * redeemed (WP-2 / TEN-2561). A non-interactive shell (no TTY / --quiet / --json) without
+ * `--yes` can never see or confirm the workspace, so fail closed here rather than redeeming
+ * first and burning the token on a gate we were always going to fail. Because this runs
+ * pre-redeem, the token is untouched — the same token still works once the caller adds
+ * `--yes` (or moves to an interactive terminal). `assumeYes` (`--yes`) is the explicit
+ * headless opt-in for scripted/CI connects.
+ */
+function assertConnectableNonInteractively(assumeYes) {
+    if (isInteractive() || assumeYes)
+        return;
+    throw new CLIError('Refusing to connect without confirmation — this is not an interactive terminal.', {
+        code: ErrorCode.NON_INTERACTIVE,
+        category: 'config',
+        guidance: 'Run `pb connect <token>` in an interactive terminal to confirm the workspace, or pass ' +
+            '--yes to confirm non-interactively (e.g. in CI). Your token has not been used — the same ' +
+            'token still works.',
+    });
+}
+/**
+ * Confirm-first gate (WP-2 / TEN-2561): bind this folder to the redeemed workspace
+ * only after the operator confirms WHICH workspace they're connecting to — before any
+ * local write (key-as-profile, project pin, context sync). A wrong-Chain bind must never
+ * happen silently; the user only used to learn the workspace *after* it was written.
+ *
+ * The gate sits *after* redeemToken: the workspace name comes from the redeem result, so
+ * the one-time token is already consumed by the time we ask. A decline therefore cannot be
+ * retried with the same token — guidance tells the user to request a fresh onboarding link.
+ *
+ * Non-interactive callers are refused earlier, before the token is redeemed
+ * (assertConnectableNonInteractively), so by here we are interactive — or `assumeYes`
+ * opted out of the prompt. confirm()'s own assertInteractive() remains the fail-closed
+ * backstop.
+ *
+ * @returns true to proceed with local writes, false if the operator declined interactively.
+ */
+async function confirmWorkspaceBinding(workspaceName, assumeYes) {
+    if (assumeYes)
+        return true;
+    // Esc / Ctrl+C is a decline too (cancelValue), so the caller can revoke the key before exiting.
+    return confirm({
+        message: `Connect this folder to "${workspaceName}"?`,
+        initialValue: true,
+        cancelValue: false,
+    });
+}
+/**
+ * Revoke the key the redeem just minted and say whether that worked (DEC-1961, TASK-641,
+ * TASK-648). The key is its own bearer on apiKeys.revokeCallingKey, whose route injects the
+ * caller's key id, so it can only delete itself. Any failure counts as not revoked: the line then
+ * names the key and its Settings page so the person can revoke it, and never prints the key.
+ */
+async function revokeRedeemedKey(result, siteUrl, keyName) {
+    const fn = 'apiKeys.revokeCallingKey';
+    const revoked = await withSpinner('Revoking the new key', async () => {
+        try {
+            const res = await fetch(`${siteUrl}/api/aki`, {
+                method: 'POST',
+                signal: AbortSignal.timeout(latencyBudgetMsForRoute(fn)),
+                headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${result.apiKey}`, 'x-pb-source': 'cli' },
+                body: JSON.stringify({ fn, args: {} }),
+            });
+            const envelope = (await res.json().catch(() => ({})));
+            return res.ok && envelope.ok === true;
+        }
+        catch {
+            return false;
+        }
+    });
+    const settings = result.workspaceSlug ? `${APP_URL}/w/${encodeURIComponent(result.workspaceSlug)}/settings/api-keys` : APP_URL;
+    process.stderr.write(revoked ? `The key this token created was revoked.\n`
+        : `⚠ The key this token created could not be revoked. Revoke "${stripControlChars(keyName)}" in Settings → API keys: ${settings}\n`);
+}
+/**
+ * Optional label to send with redeem — omit when empty or default so server applies `Product Brain CLI`.
+ */
+async function resolveOptionalRedeemDisplayName(options) {
+    const fromFlag = options.name !== undefined ? trimClientKeyLabelInput(options.name) : '';
+    if (fromFlag.length > 0) {
+        return fromFlag;
+    }
+    // Honor the same interactivity gate as the confirm prompt (isInteractive: TTY + not
+    // --quiet/--json). Raw isatty() would prompt for a key label in a TTY even under
+    // --quiet/--json — blocking scripted use right before the gate fails (TEN-2561).
+    if (!isInteractive()) {
+        return undefined;
+    }
+    const entered = await clack.text({
+        message: 'Name this key (optional — shown in workspace settings)',
+        placeholder: CONNECT_REDEEM_DEFAULT_API_KEY_NAME,
+        initialValue: CONNECT_REDEEM_DEFAULT_API_KEY_NAME,
+    });
+    if (clack.isCancel(entered)) {
+        process.exit(130);
+    }
+    const trimmed = typeof entered === 'string' ? trimClientKeyLabelInput(entered) : '';
+    if (trimmed.length === 0 || trimmed === CONNECT_REDEEM_DEFAULT_API_KEY_NAME) {
+        return undefined;
+    }
+    return trimmed;
+}
+/**
+ * Main entrypoint for `pb connect <token>`.
+ * Validates token format, redeems it via /auth/redeem-connect-token,
+ * saves the key, and runs the wizard (S3).
+ */
+export async function runConnect(token, options = {}) {
+    // 1. Validate token format
+    const formatError = validateTokenFormat(token);
+    if (formatError) {
+        throw new CLIError(formatError, {
+            code: ErrorCode.AUTH_INVALID,
+            category: 'auth',
+            guidance: `Usage: pb connect <token>\nToken must start with '${CONNECT_TOKEN_PREFIX}' and be at least 30 characters long.`,
+        });
+    }
+    // 2. Resolve cloud Convex gateway (--gateway → env → CONVEX_SITE_URL → production)
+    const siteUrl = resolveConnectRedeemUrl(options.gateway);
+    // PB_PROFILE is checked BEFORE redeemToken burns the token: a bad name (TEN-4503) or an
+    // existing profile (TASK-638) is refused while the token still works.
+    const envProfile = process.env.PB_PROFILE?.trim() || undefined;
+    if (envProfile)
+        assertEnvProfileIsFree(envProfile);
+    // WP-810 / TASK-648: refuse a tracked pin (TEN-4501) while the token is unspent, both the one the
+    // reader walks up to and the one this connect writes. pinFolder is the only decider of that path.
+    const pinFolder = process.cwd();
+    refuseHomeFolder(pinFolder);
+    readLocalProjectConfig();
+    refuseTrackedPin(pinFolder); // TASK-562: never pin the home folder
+    // 3. Confirm-first gate, part 1 (WP-2): refuse a non-interactive connect that can't run
+    //    the workspace-confirm BEFORE redeeming, so the one-time token is never burned on a
+    //    gate we were always going to fail. --yes is the explicit headless opt-in.
+    assertConnectableNonInteractively(options.assumeYes === true);
+    const redeemLabel = await resolveOptionalRedeemDisplayName(options);
+    const result = await redeemToken(token, siteUrl, redeemLabel);
+    const keyName = redeemLabel ?? CONNECT_REDEEM_DEFAULT_API_KEY_NAME;
+    // workspaceName is server-controlled — strip ANSI/control chars before it reaches any
+    // terminal output (prompt, errors, the wizard) to prevent terminal escape injection
+    // (BET-269 C3 baseline). composeProfileName() independently slugs the profile/file name.
+    const workspaceName = stripControlChars(result.workspaceName);
+    // WP-810 / TASK-648 (DEC-1961, TEN-4516): revoke only a key no profile holds. On any throw, the
+    // profile file is read back: if it holds this key the person owns it, so it is kept and named
+    // (revoking would kill a rotated profile's only key); otherwise it is revoked. Then rethrow.
+    let profileName = '';
+    let replace = false;
+    try {
+        // 4. Confirm-first gate, part 2 (WP-2): name the workspace and bind only after the
+        //    operator confirms — BEFORE any local write. Decline ⇒ nothing written; machine untouched.
+        const confirmed = await confirmWorkspaceBinding(workspaceName, options.assumeYes === true);
+        if (!confirmed) {
+            // DEC-1961: a declined connect never leaves a live key behind — the key revokes itself.
+            process.stderr.write(`Cancelled — nothing saved. This folder is not connected to "${workspaceName}".\n`);
+            await revokeRedeemedKey(result, siteUrl, keyName);
+            process.stderr.write(`Note: the one-time token was already used; request a fresh onboarding link to connect.\n`);
+            return;
+        }
+        // 5. Save API key as named profile + pin project config
+        ({ profileName, replace } = resolveConnectProfile(workspaceName, envProfile));
+        if (envProfile) {
+            process.stderr.write(`PB_PROFILE is set — saving this connection as profile "${profileName}".\n`);
+        }
+        saveKeyAsProfile(result.apiKey, siteUrl, profileName, replace);
+        const { previousProfile } = saveProjectConfig(pinFolder, profileName);
+        if (replace) {
+            // The profile stores no workspace id, so a same-named workspace could sit behind it now: say
+            // which workspace it holds and drop sessions bound to the old key.
+            process.stderr.write(`This folder's profile "${profileName}" now holds a new key for workspace "${workspaceName}".\n`);
+            discardAllSessions();
+        }
+        if (previousProfile) {
+            process.stderr.write(`⚠ This repo was connected to "${previousProfile}"; now redirecting to "${profileName}" (${workspaceName}). Previous session was reset — run \`pb session start\` to begin a new one.\n`);
+            // The repo's effective workspace changed — drop ALL stale session markers (Codex review fix:
+            // not just the current conversation's) so the next `pb session start` on ANY conversation
+            // doesn't auto-resume against the old workspace.
+            discardAllSessions();
+        }
+        // TEN-2598: git-ignore the pin where it lives (repo root or subfolder); no git, no .gitignore. Runs after
+        // the session discard and never throws, so a .gitignore problem only warns (PR #1530 review).
+        const seal = sealConnectWrites(pinFolder);
+        if (seal.added.length)
+            process.stderr.write(`Added to .gitignore: ${seal.added.join(', ')}\n`);
+        if (seal.stillExposed.length) {
+            process.stderr.write(`⚠ Not git-ignored (${seal.writeError ?? 'tracked, or a rule un-ignores it'}): ${seal.stillExposed.join(', ')} — run \`pb files\` to see why.\n`);
+        }
+    }
+    catch (err) {
+        let stored = false;
+        try {
+            stored = profileName !== '' && resolveNamedProfileConfig(profileName)?.apiKey === result.apiKey;
+        }
+        catch { /* unreadable: not stored */ }
+        if (stored) {
+            process.stderr.write(`pb connect stopped after saving the key. The key for "${workspaceName}" is in profile "${profileName}" (${profilePath(profileName)}); ` +
+                `pin this folder to it with \`pb profile use --local ${profileName}\` once the error below is fixed.\n`);
+        }
+        else {
+            process.stderr.write(`pb connect stopped after the token was used. This folder is not connected to "${workspaceName}".\n`);
+            await revokeRedeemedKey(result, siteUrl, keyName);
+        }
+        throw err;
+    }
+    // 6. Post-connect summary with one next step, pb init (TASK-562): its hooks open the session, so
+    //    connect prints no chat sentence and waits on no keypress. An interactive terminal gets the
+    //    lines coloured; a headless `--yes` connect (no TTY, e.g. CI) gets plain text (TEN-2561 / WP-2).
+    if (isInteractive()) {
+        await runConnectScreens(workspaceName, profileName);
+    }
+    else {
+        await runConnectHeadless(workspaceName, profileName);
+    }
+}
+//# sourceMappingURL=connect.js.map

package/dist/commands/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7F,OAAO,EACN,mCAAmC,EACnC,uBAAuB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAChJ,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC7E,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAEhC,mGAAmG;AACnG,MAAM,qBAAqB,GAAG,yEAAyE,CAAC;AACxG,MAAM,oBAAoB,GAAG,GAAG,EAAE,CAAC,2BAA2B,yBAAyB,4BAA4B,cAAc,EAAE,EAAE,CAAC;AAmBtI;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5C,OAAO,gDAAgD,oBAAoB,IAAI,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,OAAO,2BAA2B,KAAK,CAAC,MAAM,oCAAoC,CAAC;IACrF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,KAAa,EACb,OAAe,EACf,mBAA4B;IAE5B,OAAO,WAAW,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,IAAI,GAAqC,EAAE,KAAK,EAAE,CAAC;YACzD,IAAI,mBAAmB,KAAK,SAAS,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;YAClC,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,4BAA4B,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,SAAS,GAAG,eAAe,CAAC;gBAChC,IAAI,YAAY,GAAG,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC;gBAEnD,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0E,CAAC;oBAC9G,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;wBAC1B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;wBACjC,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,YAAY,CAAC;oBACzD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,mDAAmD;gBACrD,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,SAAS,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACxD,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAE;wBACxC,IAAI,EAAE,SAAS,CAAC,YAAY;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,GAAG,oBAAoB,EAAE,oBAAoB,OAAO,4KAA4K;qBAC3O,CAAC,CAAC;gBACL,CAAC;gBAED,IAAI,SAAS,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9D,MAAM,IAAI,QAAQ,CAAC,iEAAiE,EAAE;wBACpF,IAAI,EAAE,SAAS,CAAC,WAAW;wBAC3B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,2BAA2B;qBACtC,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,QAAQ,CAAC,4BAA4B,YAAY,EAAE,EAAE;oBAC7D,IAAI,EAAE,SAAS,CAAC,YAAY;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,cAAc,EAAE;iBAC3B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2F,CAAC;YAE1H,6CAA6C;YAC7C,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;gBACrD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC;gBACrE,MAAM,IAAI,QAAQ,CAChB,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,YAAY,EACpE;oBACE,IAAI,EAAE,SAAS,CAAC,YAAY;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,cAAc,EAAE;iBACpF,CACF,CAAC;YACJ,CAAC;YAED,OAAO,IAAsB,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,2CAA2C;YAC3C,IAAI,GAAG,YAAY,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAEvC,wBAAwB;YACxB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,QAAQ,CAAC,+DAA+D,EAAE;oBAClF,IAAI,EAAE,SAAS,CAAC,mBAAmB;oBACnC,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,2DAA2D;iBACtE,CAAC,CAAC;YACL,CAAC;YAED,gBAAgB;YAChB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,GAAG,EAAE,EAAE;gBAC1C,IAAI,EAAE,SAAS,CAAC,mBAAmB;gBACnC,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,+CAA+C;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,UAAkB;IAChD,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChC,WAAW,EAAE,CAAC;IACd,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAAE,OAAO;IAC3C,MAAM,IAAI,QAAQ,CAAC,YAAY,UAAU,gEAAgE,EAAE;QACzG,IAAI,EAAE,SAAS,CAAC,4BAA4B;QAC5C,QAAQ,EAAE,SAAS;QACnB,QAAQ,EACN,8FAA8F;YAC9F,sGAAsG;KACzG,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,aAAqB,EAAE,UAA8B;IAClF,IAAI,UAAU;QAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,WAAW,EAAE,CAAC;IACd,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,aAAa;QACb,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,EAAE,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI;QACjD,OAAO,EAAE,iBAAiB;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,IAAI,QAAQ,CAAC,2BAA2B,aAAa,4BAA4B,EAAE;QACvF,IAAI,EAAE,SAAS,CAAC,sBAAsB;QACtC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,2HAA2H;KACtI,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAe,EAAE,WAAmB,EAAE,OAAgB;IAC9F,IAAI,OAAO;QAAE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;;QACzE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,WAAmB;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/D,4EAA4E;IAC5E,kBAAkB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAE3C,OAAO,EAAE,eAAe,EAAE,QAAQ,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC;AAeD;;;;;;;;GAQG;AACH,SAAS,iCAAiC,CAAC,SAAkB;IAC3D,IAAI,aAAa,EAAE,IAAI,SAAS;QAAE,OAAO;IACzC,MAAM,IAAI,QAAQ,CAChB,iFAAiF,EACjF;QACE,IAAI,EAAE,SAAS,CAAC,eAAe;QAC/B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EACN,wFAAwF;YACxF,2FAA2F;YAC3F,oBAAoB;KACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,uBAAuB,CAAC,aAAqB,EAAE,SAAkB;IAC9E,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAE3B,gGAAgG;IAChG,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,2BAA2B,aAAa,IAAI;QACrD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAAC,MAAsB,EAAE,OAAe,EAAE,OAAe;IACvF,MAAM,EAAE,GAAG,0BAA0B,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC/G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqB,CAAC;YAC1E,OAAO,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C;QACxE,CAAC,CAAC,8DAA8D,iBAAiB,CAAC,OAAO,CAAC,6BAA6B,QAAQ,IAAI,CAAC,CAAC;AACzI,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gCAAgC,CAAC,OAAuB;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,oFAAoF;IACpF,iFAAiF;IACjF,iFAAiF;IACjF,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;QAC/B,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,mCAAmC;KAClD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,mCAAmC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,UAA0B,EAAE;IAC1E,2BAA2B;IAC3B,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE;YAC9B,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,qDAAqD,oBAAoB,uCAAuC;SAC3H,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzD,wFAAwF;IACxF,sEAAsE;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC/D,IAAI,UAAU;QAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnD,kGAAkG;IAClG,kGAAkG;IAClG,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAChC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAAC,sBAAsB,EAAE,CAAC;IAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC,sCAAsC;IAC1H,wFAAwF;IACxF,wFAAwF;IACxF,+EAA+E;IAC/E,iCAAiC,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,WAAW,IAAI,mCAAmC,CAAC;IAEnE,sFAAsF;IACtF,oFAAoF;IACpF,yFAAyF;IACzF,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE9D,gGAAgG;IAChG,8FAA8F;IAC9F,6FAA6F;IAC7F,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,mFAAmF;QACnF,+FAA+F;QAC/F,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,wFAAwF;YACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,aAAa,MAAM,CAAC,CAAC;YACzG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0FAA0F,CAAC,CAAC;YACjH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9E,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,WAAW,MAAM,CAAC,CAAC;QACpG,CAAC;QACD,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,eAAe,EAAE,GAAG,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,OAAO,EAAE,CAAC;YACZ,6FAA6F;YAC7F,mEAAmE;YACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,WAAW,wCAAwC,aAAa,MAAM,CAAC,CAAC;YACvH,kBAAkB,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,eAAe,0BAA0B,WAAW,MAAM,aAAa,gFAAgF,CACzL,CAAC;YACF,6FAA6F;YAC7F,0FAA0F;YAC1F,iDAAiD;YACjD,kBAAkB,EAAE,CAAC;QACvB,CAAC;QACD,0GAA0G;QAC1G,8FAA8F;QAC9F,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,UAAU,IAAI,kCAAkC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACzK,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,WAAW,KAAK,EAAE,IAAI,yBAAyB,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAC/I,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,aAAa,oBAAoB,WAAW,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK;gBAC3J,uDAAuD,WAAW,qCAAqC,CAAC,CAAC;QAC7G,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iFAAiF,aAAa,MAAM,CAAC,CAAC;YAC3H,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,IAAI,aAAa,EAAE,EAAE,CAAC;QACpB,MAAM,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,kBAAkB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}

package/dist/commands/connect.test.d.ts

@@ -0,0 +1,6 @@
+/**
+ * Tests for pb connect command (FEAT-958 S2).
+ * Covers token parsing, redemption, error handling, and key saving.
+ */
+export {};
+//# sourceMappingURL=connect.test.d.ts.map

package/dist/commands/connect.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.test.d.ts","sourceRoot":"","sources":["../../src/commands/connect.test.ts"],"names":[],"mappings":"AAAA;;;GAGG"}