@productbrain/cli 0.1.0-beta.989 → 0.1.0-beta.9895

package/dist/commands/connect-seal.test.js

@@ -0,0 +1,55 @@
+/**
+ * pb connect seals the folder's pin AFTER it is written and after stale sessions are dropped, and
+ * a .gitignore problem only warns: the connect still completes (TASK-641, TEN-2598, PR #1530 review).
+ * The real-git behaviour of sealConnectWrites lives in lib/productbrain-files.test.ts.
+ */
+import { describe, it, expect, beforeEach, vi } from 'vitest';
+vi.mock('fs', () => ({ mkdirSync: vi.fn(), writeFileSync: vi.fn(), existsSync: vi.fn(() => false), readFileSync: vi.fn() }));
+vi.mock('../lib/spinner.js', () => ({ withSpinner: vi.fn(async (_m, fn) => fn()) }));
+vi.mock('../lib/prompts.js', () => ({ confirm: vi.fn(async () => true), isInteractive: vi.fn(() => true) }));
+vi.mock('@clack/prompts', () => ({ isCancel: vi.fn(() => false), text: vi.fn(async () => '') }));
+vi.mock('../lib/profiles.js', () => ({ createProfile: vi.fn(), autoMigrate: vi.fn(), profileFileExists: vi.fn(() => false), validateProfileName: vi.fn() }));
+vi.mock('../lib/connectProfileName.js', async (importOriginal) => ({ ...(await importOriginal()), connectFolderName: vi.fn(() => 'my-repo') }));
+// A prior pin for another workspace: the redirect path drops every session marker.
+vi.mock('../lib/config.js', () => ({ setLocalProfilePin: vi.fn(), readLocalProjectConfig: vi.fn(() => ({ profile: 'other-ws-my-repo' })) }));
+vi.mock('../lib/session.js', () => ({ discardAllSessions: vi.fn() }));
+vi.mock('../lib/productbrain-files.js', () => ({ sealConnectWrites: vi.fn() }));
+vi.mock('./connect-screens.js', () => ({ runConnectScreens: vi.fn(async () => { }), runConnectHeadless: vi.fn(async () => { }) }));
+vi.mock('./connect-handoff.js', () => ({ detectHandoffMarkers: vi.fn(() => ({})), resolveHandoff: vi.fn(() => null), printHandoff: vi.fn() }));
+import { runConnect } from './connect.js';
+import { sealConnectWrites } from '../lib/productbrain-files.js';
+import { setLocalProfilePin } from '../lib/config.js';
+import { discardAllSessions } from '../lib/session.js';
+import { runConnectScreens } from './connect-screens.js';
+const TOKEN = 'pb_ct_' + 'a'.repeat(40);
+const mockFetch = vi.fn();
+global.fetch = mockFetch;
+describe('pb connect — sealing the pin (TASK-641)', () => {
+    let stderr;
+    beforeEach(() => {
+        vi.clearAllMocks();
+        stderr = '';
+        vi.spyOn(process.stderr, 'write').mockImplementation((chunk) => { stderr += String(chunk); return true; });
+        mockFetch.mockResolvedValueOnce({ ok: true, json: async () => ({ apiKey: 'pb_sk_x', workspaceId: 'ws1', workspaceName: 'Acme' }) });
+    });
+    it('seals once, with the cwd, after the pin is written and after the session discard', async () => {
+        vi.mocked(sealConnectWrites).mockReturnValue({ git: true, added: ['.productbrain/config.local.json'], stillExposed: [] });
+        await runConnect(TOKEN, { gateway: 'https://example.convex.site' });
+        expect(sealConnectWrites).toHaveBeenCalledTimes(1);
+        expect(sealConnectWrites).toHaveBeenCalledWith(process.cwd());
+        const sealAt = vi.mocked(sealConnectWrites).mock.invocationCallOrder[0];
+        expect(vi.mocked(setLocalProfilePin).mock.invocationCallOrder[0]).toBeLessThan(sealAt);
+        expect(vi.mocked(discardAllSessions).mock.invocationCallOrder[0]).toBeLessThan(sealAt);
+        expect(stderr).toContain('Added to .gitignore: .productbrain/config.local.json');
+    });
+    it('a .gitignore that cannot be written only warns: sessions are discarded and the connect completes', async () => {
+        vi.mocked(sealConnectWrites).mockReturnValue({
+            git: true, added: [], stillExposed: ['.productbrain/config.local.json'], writeError: 'could not write /repo/.gitignore: EACCES',
+        });
+        await expect(runConnect(TOKEN, { gateway: 'https://example.convex.site' })).resolves.toBeUndefined();
+        expect(discardAllSessions).toHaveBeenCalled();
+        expect(runConnectScreens).toHaveBeenCalledWith('Acme', 'acme-my-repo');
+        expect(stderr).toContain('Not git-ignored (could not write /repo/.gitignore: EACCES): .productbrain/config.local.json — run `pb files`');
+    });
+});
+//# sourceMappingURL=connect-seal.test.js.map

package/dist/commands/connect-seal.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-seal.test.js","sourceRoot":"","sources":["../../src/commands/connect-seal.test.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9D,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7H,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAU,EAAE,EAA0B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACrH,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7G,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AACjG,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC7J,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,cAAc,EAAU,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AACxJ,mFAAmF;AACnF,EAAE,CAAC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC7I,EAAE,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACtE,EAAE,CAAC,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAChF,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACjI,EAAE,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAE/I,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,KAAK,GAAG,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC1B,MAAM,CAAC,KAAK,GAAG,SAAS,CAAC;AAEzB,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,IAAI,MAAc,CAAC;IACnB,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,GAAG,EAAE,CAAC;QACZ,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,KAA0B,EAAE,EAAE,GAAG,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAChI,SAAS,CAAC,qBAAqB,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,EAAc,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;QAChG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,iCAAiC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC;QAE1H,MAAM,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;QAEpE,MAAM,CAAC,iBAAiB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QACvF,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,sDAAsD,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;QAChH,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,eAAe,CAAC;YAC3C,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,iCAAiC,CAAC,EAAE,UAAU,EAAE,0CAA0C;SAChI,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;QAErG,MAAM,CAAC,kBAAkB,CAAC,CAAC,gBAAgB,EAAE,CAAC;QAC9C,MAAM,CAAC,iBAAiB,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,8GAA8G,CAAC,CAAC;IAC3I,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/connect.d.ts

@@ -6,19 +6,16 @@
  * (WP-433 FEAT-1291).
  */
 /**
- * Write project config files to pin this project to the workspace.
- * Returns the prior repo profile pin so the caller can detect a workspace redirect.
- *
- * Split design:
- * - config.json (committed): siteUrl only — workspace gateway, safe to share with teammates.
- *   Strips any legacy `profile` field that may be present from earlier pb versions.
- * - config.local.json (gitignored): profile pin — machine-local, never committed.
- *   Written via the shared setLocalProfilePin() writer (used by `pb profile use --local`
- *   and `pb connect`).
- *
+ * Pin `pinFolder` (runConnect's one decider, TASK-648) to the profile. Returns the prior pin so the
+ * caller can detect a redirect.
+ * - config.json (committed): its PRESENCE declares a Product Brain project
+ *   (projectConfig.ts findProjectRoot / projectConfigExists). Created empty when absent; its
+ *   content is never read, so connect never rewrites it (TASK-638: the siteUrl writer had no
+ *   reader since TEN-4500).
+ * - config.local.json (gitignored): the profile pin, via the shared setLocalProfilePin().
  * Does NOT include the API key anywhere — that stays in profiles, never committed.
  */
-export declare function saveProjectConfig(siteUrl: string, profileName: string): {
+export declare function saveProjectConfig(pinFolder: string, profileName: string): {
     previousProfile: string | null;
 };
 export interface ConnectOptions {
@@ -26,6 +23,12 @@ export interface ConnectOptions {
     gateway?: string;
     /** Optional API key label for workspace settings (non-TTY: use instead of prompt). */
     name?: string;
+    /**
+     * Skip the interactive workspace-confirm gate (`pb connect --yes`). Required to
+     * connect in a non-interactive shell (e.g. CI), where the gate otherwise fails
+     * closed. Pairs with `--name` for scripted connects.
+     */
+    assumeYes?: boolean;
 }
 /**
  * Main entrypoint for `pb connect <token>`.

package/dist/commands/connect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AA4MH;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG;IAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAoB1G;AAED,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AA4BD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CA0C3F"}
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAkOH;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG;IAAE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAc5G;AAED,MAAM,WAAW,cAAc;IAC7B,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AA8GD;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmH3F"}

package/dist/commands/connect.js

@@ -5,20 +5,25 @@
  * key locally, runs Ink screens, then prints a tailored chat-handoff instruction
  * (WP-433 FEAT-1291).
  */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs';
-import { isatty } from 'node:tty';
+import { existsSync, mkdirSync, writeFileSync } from 'fs';
 import { resolve } from 'path';
 import { resolveAppUrl, resolveConnectRedeemUrl } from '../lib/constants.js';
 import { CONNECT_REDEEM_DEFAULT_API_KEY_NAME, trimClientKeyLabelInput, } from '../lib/connectKeyLabel.js';
 import { CONNECT_TOKEN_PREFIX } from '../lib/tokenConstants.js';
 import { CLIError, ErrorCode } from '../lib/errors.js';
-import { createProfile, listProfiles, PROFILES_DIR } from '../lib/profiles.js';
+import { createProfile, autoMigrate, profileFileExists, profilePath, resolveNamedProfileConfig, validateProfileName } from '../lib/profiles.js';
+import { connectFolderName, pickConnectProfileName } from '../lib/connectProfileName.js';
 import { withSpinner } from '../lib/spinner.js';
+import { stripControlChars } from '../lib/strip.js';
 import * as clack from '@clack/prompts';
-import { runConnectScreens } from './connect-screens.js';
+import { runConnectScreens, runConnectHeadless } from './connect-screens.js';
 import { detectHandoffMarkers, resolveHandoff, printHandoff } from './connect-handoff.js';
 import { setLocalProfilePin, readLocalProjectConfig } from '../lib/config.js';
-import { discardSession } from '../lib/session.js';
+import { refuseTrackedPin } from '../lib/projectConfig.js';
+import { discardAllSessions } from '../lib/session.js';
+import { confirm, isInteractive } from '../lib/prompts.js';
+import { sealConnectWrites } from '../lib/productbrain-files.js';
+import { latencyBudgetMsForRoute } from '../generated/routeLatencyBudget.generated.js';
 const APP_URL = resolveAppUrl();
 /**
  * Validate token format — must start with pb_ct_ and be >20 chars.
@@ -126,76 +131,156 @@ async function redeemToken(token, siteUrl, optionalDisplayName) {
     });
 }
 /**
- * Slugify workspace name for profile naming.
- * Lowercase, replace spaces/special chars with hyphens, max 32 chars.
+ * Refuse a `PB_PROFILE` target that already exists — BEFORE the one-time token is redeemed, so
+ * the token stays unspent (TASK-638). A redeem always mints a new key, so an existing profile of
+ * that name necessarily holds different credentials; overwriting it would silently cut off
+ * whichever folder uses it. The name is validated before autoMigrate() touches any file
+ * (TEN-4503); migration runs before the occupancy check so a legacy install counts as `default`.
  */
-function slugify(name) {
-    return name
-        .toLowerCase()
-        .replace(/[^a-z0-9]+/g, '-')
-        .replace(/^-|-$/g, '')
-        .slice(0, 32) || 'default';
+function assertEnvProfileIsFree(envProfile) {
+    validateProfileName(envProfile);
+    autoMigrate();
+    if (!profileFileExists(envProfile))
+        return;
+    throw new CLIError(`Profile "${envProfile}" (from PB_PROFILE) already exists — refusing to overwrite it.`, {
+        code: ErrorCode.PROFILE_CREDENTIALS_CONFLICT,
+        category: 'profile',
+        guidance: 'Unset PB_PROFILE to let pb connect name the profile after this workspace and folder, or set ' +
+            'PB_PROFILE to a name no profile uses yet. Your token has not been used — the same token still works.',
+    });
 }
 /**
- * Save API key as a named profile. Creates or updates the profile.
- * Does NOT activate the profile globally — project config (.productbrain/config.json)
- * handles per-project resolution. User can switch manually with `pb use <profile>`.
- * Sets process.env for the current process only (so handshake works).
+ * The profile this connect writes (DEC-1961): PB_PROFILE when set (already checked free before
+ * redeem), else `<workspace>-<folder>` from pickConnectProfileName — this folder's own pin is
+ * replaced in place (a key rotation), another folder's profile is never touched.
  */
-function saveKeyAsProfile(apiKey, siteUrl, profileName) {
-    const existing = listProfiles();
-    if (existing.includes(profileName)) {
-        // Overwrite existing profile with fresh credentials (re-connect scenario)
-        const lines = [
-            `# Product Brain CLI profile: ${profileName}`,
-            `PRODUCTBRAIN_API_KEY=${apiKey}`,
-            ...(siteUrl ? [`CONVEX_SITE_URL=${siteUrl}`] : []),
-            '',
-        ];
-        mkdirSync(PROFILES_DIR, { recursive: true });
-        writeFileSync(resolve(PROFILES_DIR, `${profileName}.env`), lines.join('\n'), { mode: 0o600 });
-    }
-    else {
+function resolveConnectProfile(workspaceName, envProfile) {
+    if (envProfile)
+        return { profileName: envProfile, replace: false };
+    autoMigrate();
+    const choice = pickConnectProfileName({
+        workspaceName,
+        folderName: connectFolderName(process.cwd()),
+        ownPin: readLocalProjectConfig()?.profile ?? null,
+        isTaken: profileFileExists,
+    });
+    if (choice)
+        return choice;
+    throw new CLIError(`Every profile name for "${workspaceName}" in this folder is taken.`, {
+        code: ErrorCode.PROFILE_ALREADY_EXISTS,
+        category: 'profile',
+        guidance: 'Delete unused profiles with `pb profile delete <name>`, or set PB_PROFILE=<new-name> and request a fresh onboarding link.',
+    });
+}
+/**
+ * Save the API key under the chosen profile. Does NOT activate it globally — the folder's pin
+ * (config.local.json) selects it. Sets process.env for the current process only (so the
+ * post-connect context sync works).
+ */
+function saveKeyAsProfile(apiKey, siteUrl, profileName, replace) {
+    if (replace)
+        createProfile(profileName, apiKey, siteUrl, { overwrite: true });
+    else
         createProfile(profileName, apiKey, siteUrl);
-    }
-    // Don't call useProfile() — that hijacks the global active profile.
-    // Project config pins the workspace per-project instead.
     process.env.PRODUCTBRAIN_API_KEY = apiKey;
     process.env.CONVEX_SITE_URL = siteUrl;
 }
 /**
- * Write project config files to pin this project to the workspace.
- * Returns the prior repo profile pin so the caller can detect a workspace redirect.
- *
- * Split design:
- * - config.json (committed): siteUrl only — workspace gateway, safe to share with teammates.
- *   Strips any legacy `profile` field that may be present from earlier pb versions.
- * - config.local.json (gitignored): profile pin — machine-local, never committed.
- *   Written via the shared setLocalProfilePin() writer (used by `pb profile use --local`
- *   and `pb connect`).
- *
+ * Pin `pinFolder` (runConnect's one decider, TASK-648) to the profile. Returns the prior pin so the
+ * caller can detect a redirect.
+ * - config.json (committed): its PRESENCE declares a Product Brain project
+ *   (projectConfig.ts findProjectRoot / projectConfigExists). Created empty when absent; its
+ *   content is never read, so connect never rewrites it (TASK-638: the siteUrl writer had no
+ *   reader since TEN-4500).
+ * - config.local.json (gitignored): the profile pin, via the shared setLocalProfilePin().
  * Does NOT include the API key anywhere — that stays in profiles, never committed.
  */
-export function saveProjectConfig(siteUrl, profileName) {
-    const configDir = resolve(process.cwd(), '.productbrain');
+export function saveProjectConfig(pinFolder, profileName) {
+    const configDir = resolve(pinFolder, '.productbrain');
     const configPath = resolve(configDir, 'config.json');
     mkdirSync(configDir, { recursive: true });
     // Capture the prior repo pin BEFORE we overwrite it (redirect detection).
     const previous = readLocalProjectConfig()?.profile ?? null;
-    // --- config.json: siteUrl only (committed). Strip legacy `profile` field. ---
-    let existingCommitted = {};
-    if (existsSync(configPath)) {
-        try {
-            existingCommitted = JSON.parse(readFileSync(configPath, 'utf8'));
-        }
-        catch { /* ignore */ }
-    }
-    delete existingCommitted['profile'];
-    writeFileSync(configPath, JSON.stringify({ ...existingCommitted, siteUrl }, null, 2) + '\n');
+    if (!existsSync(configPath))
+        writeFileSync(configPath, '{}\n');
     // --- config.local.json: profile pin (gitignored) via the shared writer ---
-    setLocalProfilePin(process.cwd(), profileName);
+    setLocalProfilePin(pinFolder, profileName);
     return { previousProfile: previous && previous !== profileName ? previous : null };
 }
+/**
+ * Refuse a connect that can never run the confirm gate — BEFORE the one-time token is
+ * redeemed (WP-2 / TEN-2561). A non-interactive shell (no TTY / --quiet / --json) without
+ * `--yes` can never see or confirm the workspace, so fail closed here rather than redeeming
+ * first and burning the token on a gate we were always going to fail. Because this runs
+ * pre-redeem, the token is untouched — the same token still works once the caller adds
+ * `--yes` (or moves to an interactive terminal). `assumeYes` (`--yes`) is the explicit
+ * headless opt-in for scripted/CI connects.
+ */
+function assertConnectableNonInteractively(assumeYes) {
+    if (isInteractive() || assumeYes)
+        return;
+    throw new CLIError('Refusing to connect without confirmation — this is not an interactive terminal.', {
+        code: ErrorCode.NON_INTERACTIVE,
+        category: 'config',
+        guidance: 'Run `pb connect <token>` in an interactive terminal to confirm the workspace, or pass ' +
+            '--yes to confirm non-interactively (e.g. in CI). Your token has not been used — the same ' +
+            'token still works.',
+    });
+}
+/**
+ * Confirm-first gate (WP-2 / TEN-2561): bind this folder to the redeemed workspace
+ * only after the operator confirms WHICH workspace they're connecting to — before any
+ * local write (key-as-profile, project pin, context sync). A wrong-Chain bind must never
+ * happen silently; the user only used to learn the workspace *after* it was written.
+ *
+ * The gate sits *after* redeemToken: the workspace name comes from the redeem result, so
+ * the one-time token is already consumed by the time we ask. A decline therefore cannot be
+ * retried with the same token — guidance tells the user to request a fresh onboarding link.
+ *
+ * Non-interactive callers are refused earlier, before the token is redeemed
+ * (assertConnectableNonInteractively), so by here we are interactive — or `assumeYes`
+ * opted out of the prompt. confirm()'s own assertInteractive() remains the fail-closed
+ * backstop.
+ *
+ * @returns true to proceed with local writes, false if the operator declined interactively.
+ */
+async function confirmWorkspaceBinding(workspaceName, assumeYes) {
+    if (assumeYes)
+        return true;
+    // Esc / Ctrl+C is a decline too (cancelValue), so the caller can revoke the key before exiting.
+    return confirm({
+        message: `Connect this folder to "${workspaceName}"?`,
+        initialValue: true,
+        cancelValue: false,
+    });
+}
+/**
+ * Revoke the key the redeem just minted and say whether that worked (DEC-1961, TASK-641,
+ * TASK-648). The key is its own bearer on apiKeys.revokeCallingKey, whose route injects the
+ * caller's key id, so it can only delete itself. Any failure counts as not revoked: the line then
+ * names the key and its Settings page so the person can revoke it, and never prints the key.
+ */
+async function revokeRedeemedKey(result, siteUrl, keyName) {
+    const fn = 'apiKeys.revokeCallingKey';
+    const revoked = await withSpinner('Revoking the new key', async () => {
+        try {
+            const res = await fetch(`${siteUrl}/api/aki`, {
+                method: 'POST',
+                signal: AbortSignal.timeout(latencyBudgetMsForRoute(fn)),
+                headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${result.apiKey}`, 'x-pb-source': 'cli' },
+                body: JSON.stringify({ fn, args: {} }),
+            });
+            const envelope = (await res.json().catch(() => ({})));
+            return res.ok && envelope.ok === true;
+        }
+        catch {
+            return false;
+        }
+    });
+    const settings = result.workspaceSlug ? `${APP_URL}/w/${encodeURIComponent(result.workspaceSlug)}/settings/api-keys` : APP_URL;
+    process.stderr.write(revoked ? `The key this token created was revoked.\n`
+        : `⚠ The key this token created could not be revoked. Revoke "${stripControlChars(keyName)}" in Settings → API keys: ${settings}\n`);
+}
 /**
  * Optional label to send with redeem — omit when empty or default so server applies `Product Brain CLI`.
  */
@@ -204,7 +289,10 @@ async function resolveOptionalRedeemDisplayName(options) {
     if (fromFlag.length > 0) {
         return fromFlag;
     }
-    if (!isatty(0) || !isatty(1)) {
+    // Honor the same interactivity gate as the confirm prompt (isInteractive: TTY + not
+    // --quiet/--json). Raw isatty() would prompt for a key label in a TTY even under
+    // --quiet/--json — blocking scripted use right before the gate fails (TEN-2561).
+    if (!isInteractive()) {
         return undefined;
     }
     const entered = await clack.text({
@@ -238,20 +326,99 @@ export async function runConnect(token, options = {}) {
     }
     // 2. Resolve cloud Convex gateway (--gateway → env → CONVEX_SITE_URL → production)
     const siteUrl = resolveConnectRedeemUrl(options.gateway);
+    // PB_PROFILE is checked BEFORE redeemToken burns the token: a bad name (TEN-4503) or an
+    // existing profile (TASK-638) is refused while the token still works.
+    const envProfile = process.env.PB_PROFILE?.trim() || undefined;
+    if (envProfile)
+        assertEnvProfileIsFree(envProfile);
+    // WP-810 / TASK-648: refuse a tracked pin (TEN-4501) while the token is unspent, both the one the
+    // reader walks up to and the one this connect writes. pinFolder is the only decider of that path.
+    const pinFolder = process.cwd();
+    readLocalProjectConfig();
+    refuseTrackedPin(pinFolder);
+    // 3. Confirm-first gate, part 1 (WP-2): refuse a non-interactive connect that can't run
+    //    the workspace-confirm BEFORE redeeming, so the one-time token is never burned on a
+    //    gate we were always going to fail. --yes is the explicit headless opt-in.
+    assertConnectableNonInteractively(options.assumeYes === true);
     const redeemLabel = await resolveOptionalRedeemDisplayName(options);
     const result = await redeemToken(token, siteUrl, redeemLabel);
-    // 4. Save API key as named profile + pin project config
-    const profileName = slugify(result.workspaceName);
-    saveKeyAsProfile(result.apiKey, siteUrl, profileName);
-    const { previousProfile } = saveProjectConfig(siteUrl, profileName);
-    if (previousProfile) {
-        process.stderr.write(`⚠ This repo was connected to "${previousProfile}"; now redirecting to "${profileName}" (${result.workspaceName}). Previous session was reset — run \`pb session start\` to begin a new one.\n`);
-        // The repo's effective workspace changed — drop the stale session so the next
-        // `pb session start` doesn't auto-resume against the old workspace.
-        discardSession();
+    const keyName = redeemLabel ?? CONNECT_REDEEM_DEFAULT_API_KEY_NAME;
+    // workspaceName is server-controlled — strip ANSI/control chars before it reaches any
+    // terminal output (prompt, errors, the wizard) to prevent terminal escape injection
+    // (BET-269 C3 baseline). composeProfileName() independently slugs the profile/file name.
+    const workspaceName = stripControlChars(result.workspaceName);
+    // WP-810 / TASK-648 (DEC-1961, TEN-4516): revoke only a key no profile holds. On any throw, the
+    // profile file is read back: if it holds this key the person owns it, so it is kept and named
+    // (revoking would kill a rotated profile's only key); otherwise it is revoked. Then rethrow.
+    let profileName = '';
+    let replace = false;
+    try {
+        // 4. Confirm-first gate, part 2 (WP-2): name the workspace and bind only after the
+        //    operator confirms — BEFORE any local write. Decline ⇒ nothing written; machine untouched.
+        const confirmed = await confirmWorkspaceBinding(workspaceName, options.assumeYes === true);
+        if (!confirmed) {
+            // DEC-1961: a declined connect never leaves a live key behind — the key revokes itself.
+            process.stderr.write(`Cancelled — nothing saved. This folder is not connected to "${workspaceName}".\n`);
+            await revokeRedeemedKey(result, siteUrl, keyName);
+            process.stderr.write(`Note: the one-time token was already used; request a fresh onboarding link to connect.\n`);
+            return;
+        }
+        // 5. Save API key as named profile + pin project config
+        ({ profileName, replace } = resolveConnectProfile(workspaceName, envProfile));
+        if (envProfile) {
+            process.stderr.write(`PB_PROFILE is set — saving this connection as profile "${profileName}".\n`);
+        }
+        saveKeyAsProfile(result.apiKey, siteUrl, profileName, replace);
+        const { previousProfile } = saveProjectConfig(pinFolder, profileName);
+        if (replace) {
+            // The profile stores no workspace id, so a same-named workspace could sit behind it now: say
+            // which workspace it holds and drop sessions bound to the old key.
+            process.stderr.write(`This folder's profile "${profileName}" now holds a new key for workspace "${workspaceName}".\n`);
+            discardAllSessions();
+        }
+        if (previousProfile) {
+            process.stderr.write(`⚠ This repo was connected to "${previousProfile}"; now redirecting to "${profileName}" (${workspaceName}). Previous session was reset — run \`pb session start\` to begin a new one.\n`);
+            // The repo's effective workspace changed — drop ALL stale session markers (Codex review fix:
+            // not just the current conversation's) so the next `pb session start` on ANY conversation
+            // doesn't auto-resume against the old workspace.
+            discardAllSessions();
+        }
+        // TEN-2598: git-ignore the pin where it lives (repo root or subfolder); no git, no .gitignore. Runs after
+        // the session discard and never throws, so a .gitignore problem only warns (PR #1530 review).
+        const seal = sealConnectWrites(pinFolder);
+        if (seal.added.length)
+            process.stderr.write(`Added to .gitignore: ${seal.added.join(', ')}\n`);
+        if (seal.stillExposed.length) {
+            process.stderr.write(`⚠ Not git-ignored (${seal.writeError ?? 'tracked, or a rule un-ignores it'}): ${seal.stillExposed.join(', ')} — run \`pb files\` to see why.\n`);
+        }
+    }
+    catch (err) {
+        let stored = false;
+        try {
+            stored = profileName !== '' && resolveNamedProfileConfig(profileName)?.apiKey === result.apiKey;
+        }
+        catch { /* unreadable: not stored */ }
+        if (stored) {
+            process.stderr.write(`pb connect stopped after saving the key. The key for "${workspaceName}" is in profile "${profileName}" (${profilePath(profileName)}); ` +
+                `pin this folder to it with \`pb profile use --local ${profileName}\` once the error below is fixed.\n`);
+        }
+        else {
+            process.stderr.write(`pb connect stopped after the token was used. This folder is not connected to "${workspaceName}".\n`);
+            await revokeRedeemedKey(result, siteUrl, keyName);
+        }
+        throw err;
+    }
+    // 6. Post-connect context + summary. Interactive: the Ink wizard (ConnectedScreen +
+    //    ProfileScreen) waits on keypresses via useInput, which needs raw-mode stdin. A
+    //    headless `--yes` connect (no TTY, e.g. CI) can't provide that — rendering Ink there
+    //    throws AFTER the key/config were written — so it gets a plain-text summary instead
+    //    (TEN-2561 / WP-2). Both prepare the same workspace context first.
+    if (isInteractive()) {
+        await runConnectScreens(workspaceName, profileName);
+    }
+    else {
+        await runConnectHeadless(workspaceName, profileName);
     }
-    // 5–7. Ink wizard: ConnectedScreen (with handshake) + ProfileScreen
-    await runConnectScreens(result.workspaceName, profileName);
     // 8. Tailored chat handoff — detect AI tool and print one-line instruction (FEAT-1291).
     //    Replaces the 4-option clack.select menu that exited on cancel (TEN-1992).
     const cwd = process.cwd();

package/dist/commands/connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACN,mCAAmC,EACnC,uBAAuB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAiBhC;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5C,OAAO,gDAAgD,oBAAoB,IAAI,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,OAAO,2BAA2B,KAAK,CAAC,MAAM,uBAAuB,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,KAAa,EACb,OAAe,EACf,mBAA4B;IAE5B,OAAO,WAAW,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,IAAI,GAAqC,EAAE,KAAK,EAAE,CAAC;YACzD,IAAI,mBAAmB,KAAK,SAAS,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;YAClC,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,4BAA4B,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,SAAS,GAAG,eAAe,CAAC;gBAChC,IAAI,YAAY,GAAG,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC;gBAEnD,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0E,CAAC;oBAC9G,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;wBAC1B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;wBACjC,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,YAAY,CAAC;oBACzD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,mDAAmD;gBACrD,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,SAAS,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACxD,MAAM,IAAI,QAAQ,CAChB,wFAAwF,EACxF;wBACE,IAAI,EAAE,SAAS,CAAC,YAAY;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,kBAAkB,OAAO,WAAW,OAAO,8NAA8N;qBACpR,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,SAAS,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9D,MAAM,IAAI,QAAQ,CAAC,iEAAiE,EAAE;wBACpF,IAAI,EAAE,SAAS,CAAC,WAAW;wBAC3B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,2BAA2B;qBACtC,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,QAAQ,CAAC,4BAA4B,YAAY,EAAE,EAAE;oBAC7D,IAAI,EAAE,SAAS,CAAC,YAAY;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,SAAS,OAAO,gCAAgC;iBAC3D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2F,CAAC;YAE1H,6CAA6C;YAC7C,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;gBACrD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC;gBACrE,MAAM,IAAI,QAAQ,CAChB,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,YAAY,EAC5F;oBACE,IAAI,EAAE,SAAS,CAAC,YAAY;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,SAAS,OAAO,gCAAgC;iBAC3D,CACF,CAAC;YACJ,CAAC;YAED,OAAO,IAAsB,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,2CAA2C;YAC3C,IAAI,GAAG,YAAY,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAEvC,wBAAwB;YACxB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,QAAQ,CAAC,+DAA+D,EAAE;oBAClF,IAAI,EAAE,SAAS,CAAC,mBAAmB;oBACnC,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,2DAA2D;iBACtE,CAAC,CAAC;YACL,CAAC;YAED,gBAAgB;YAChB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,GAAG,EAAE,EAAE;gBAC1C,IAAI,EAAE,SAAS,CAAC,mBAAmB;gBACnC,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,+CAA+C;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAe,EAAE,WAAmB;IAC5E,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,0EAA0E;QAC1E,MAAM,KAAK,GAAG;YACZ,gCAAgC,WAAW,EAAE;YAC7C,wBAAwB,MAAM,EAAE;YAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,EAAE;SACH,CAAC;QACF,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,aAAa,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,WAAW,MAAM,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChG,CAAC;SAAM,CAAC;QACN,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,oEAAoE;IACpE,yDAAyD;IACzD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;AACxC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,WAAmB;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,eAAe,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;IAE3D,+EAA+E;IAC/E,IAAI,iBAAiB,GAA4B,EAAE,CAAC;IACpD,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YAAC,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACpC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,iBAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAE7F,4EAA4E;IAC5E,kBAAkB,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IAE/C,OAAO,EAAE,eAAe,EAAE,QAAQ,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC;AASD;;GAEG;AACH,KAAK,UAAU,gCAAgC,CAAC,OAAuB;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;QAC/B,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,mCAAmC;KAClD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,mCAAmC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,UAA0B,EAAE;IAC1E,2BAA2B;IAC3B,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE;YAC9B,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,qDAAqD,oBAAoB,uCAAuC;SAC3H,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzD,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAE9D,wDAAwD;IACxD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAClD,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IACtD,MAAM,EAAE,eAAe,EAAE,GAAG,iBAAiB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpE,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,eAAe,0BAA0B,WAAW,MAAM,MAAM,CAAC,aAAa,gFAAgF,CAChM,CAAC;QACF,8EAA8E;QAC9E,oEAAoE;QACpE,cAAc,EAAE,CAAC;IACnB,CAAC;IAED,oEAAoE;IACpE,MAAM,iBAAiB,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IAE3D,wFAAwF;IACxF,+EAA+E;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../../src/commands/connect.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,IAAI,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACN,mCAAmC,EACnC,uBAAuB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,iBAAiB,EAAE,WAAW,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAChJ,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAC;AACxC,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAC1F,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,8CAA8C,CAAC;AAEvF,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;AAmBhC;;;GAGG;AACH,SAAS,mBAAmB,CAAC,KAAa;IACxC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC5C,OAAO,gDAAgD,oBAAoB,IAAI,CAAC;IAClF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtB,OAAO,2BAA2B,KAAK,CAAC,MAAM,uBAAuB,CAAC;IACxE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,WAAW,CACxB,KAAa,EACb,OAAe,EACf,mBAA4B;IAE5B,OAAO,WAAW,CAAC,iBAAiB,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC;QAEzD,IAAI,CAAC;YACH,MAAM,IAAI,GAAqC,EAAE,KAAK,EAAE,CAAC;YACzD,IAAI,mBAAmB,KAAK,SAAS,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACxE,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;YAClC,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,4BAA4B,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,IAAI,SAAS,GAAG,eAAe,CAAC;gBAChC,IAAI,YAAY,GAAG,mBAAmB,GAAG,CAAC,MAAM,EAAE,CAAC;gBAEnD,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0E,CAAC;oBAC9G,IAAI,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;wBAC1B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC;wBACjC,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,IAAI,YAAY,CAAC;oBACzD,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,mDAAmD;gBACrD,CAAC;gBAED,4CAA4C;gBAC5C,IAAI,SAAS,KAAK,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBACxD,MAAM,IAAI,QAAQ,CAChB,wFAAwF,EACxF;wBACE,IAAI,EAAE,SAAS,CAAC,YAAY;wBAC5B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,kBAAkB,OAAO,WAAW,OAAO,8NAA8N;qBACpR,CACF,CAAC;gBACJ,CAAC;gBAED,IAAI,SAAS,KAAK,qBAAqB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC9D,MAAM,IAAI,QAAQ,CAAC,iEAAiE,EAAE;wBACpF,IAAI,EAAE,SAAS,CAAC,WAAW;wBAC3B,QAAQ,EAAE,MAAM;wBAChB,QAAQ,EAAE,2BAA2B;qBACtC,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,QAAQ,CAAC,4BAA4B,YAAY,EAAE,EAAE;oBAC7D,IAAI,EAAE,SAAS,CAAC,YAAY;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,SAAS,OAAO,gCAAgC;iBAC3D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2F,CAAC;YAE1H,6CAA6C;YAC7C,IAAI,OAAO,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,eAAe,CAAC;gBACrD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,yBAAyB,CAAC;gBACrE,MAAM,IAAI,QAAQ,CAChB,SAAS,KAAK,eAAe,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,YAAY,EAC5F;oBACE,IAAI,EAAE,SAAS,CAAC,YAAY;oBAC5B,QAAQ,EAAE,MAAM;oBAChB,QAAQ,EAAE,SAAS,OAAO,gCAAgC;iBAC3D,CACF,CAAC;YACJ,CAAC;YAED,OAAO,IAAsB,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,KAAK,CAAC,CAAC;YAEpB,2CAA2C;YAC3C,IAAI,GAAG,YAAY,QAAQ;gBAAE,MAAM,GAAG,CAAC;YAEvC,wBAAwB;YACxB,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,IAAI,GAAG,KAAK,cAAc,IAAI,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACxF,MAAM,IAAI,QAAQ,CAAC,+DAA+D,EAAE;oBAClF,IAAI,EAAE,SAAS,CAAC,mBAAmB;oBACnC,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,2DAA2D;iBACtE,CAAC,CAAC;YACL,CAAC;YAED,gBAAgB;YAChB,MAAM,IAAI,QAAQ,CAAC,kBAAkB,GAAG,EAAE,EAAE;gBAC1C,IAAI,EAAE,SAAS,CAAC,mBAAmB;gBACnC,QAAQ,EAAE,SAAS;gBACnB,QAAQ,EAAE,+CAA+C;aAC1D,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,UAAkB;IAChD,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChC,WAAW,EAAE,CAAC;IACd,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC;QAAE,OAAO;IAC3C,MAAM,IAAI,QAAQ,CAAC,YAAY,UAAU,gEAAgE,EAAE;QACzG,IAAI,EAAE,SAAS,CAAC,4BAA4B;QAC5C,QAAQ,EAAE,SAAS;QACnB,QAAQ,EACN,8FAA8F;YAC9F,sGAAsG;KACzG,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,aAAqB,EAAE,UAA8B;IAClF,IAAI,UAAU;QAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACnE,WAAW,EAAE,CAAC;IACd,MAAM,MAAM,GAAG,sBAAsB,CAAC;QACpC,aAAa;QACb,UAAU,EAAE,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAC5C,MAAM,EAAE,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI;QACjD,OAAO,EAAE,iBAAiB;KAC3B,CAAC,CAAC;IACH,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,IAAI,QAAQ,CAAC,2BAA2B,aAAa,4BAA4B,EAAE;QACvF,IAAI,EAAE,SAAS,CAAC,sBAAsB;QACtC,QAAQ,EAAE,SAAS;QACnB,QAAQ,EAAE,2HAA2H;KACtI,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,MAAc,EAAE,OAAe,EAAE,WAAmB,EAAE,OAAgB;IAC9F,IAAI,OAAO;QAAE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;;QACzE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,oBAAoB,GAAG,MAAM,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,OAAO,CAAC;AACxC,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB,EAAE,WAAmB;IACtE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACrD,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,sBAAsB,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;IAE3D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAE/D,4EAA4E;IAC5E,kBAAkB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAE3C,OAAO,EAAE,eAAe,EAAE,QAAQ,IAAI,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC;AAeD;;;;;;;;GAQG;AACH,SAAS,iCAAiC,CAAC,SAAkB;IAC3D,IAAI,aAAa,EAAE,IAAI,SAAS;QAAE,OAAO;IACzC,MAAM,IAAI,QAAQ,CAChB,iFAAiF,EACjF;QACE,IAAI,EAAE,SAAS,CAAC,eAAe;QAC/B,QAAQ,EAAE,QAAQ;QAClB,QAAQ,EACN,wFAAwF;YACxF,2FAA2F;YAC3F,oBAAoB;KACvB,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,uBAAuB,CAAC,aAAqB,EAAE,SAAkB;IAC9E,IAAI,SAAS;QAAE,OAAO,IAAI,CAAC;IAE3B,gGAAgG;IAChG,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,2BAA2B,aAAa,IAAI;QACrD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,KAAK;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,iBAAiB,CAAC,MAAsB,EAAE,OAAe,EAAE,OAAe;IACvF,MAAM,EAAE,GAAG,0BAA0B,CAAC;IACtC,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QACnE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,UAAU,EAAE;gBAC5C,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;gBACxD,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;gBAC/G,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;aACvC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqB,CAAC;YAC1E,OAAO,GAAG,CAAC,EAAE,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,kBAAkB,CAAC,MAAM,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/H,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,2CAA2C;QACxE,CAAC,CAAC,8DAA8D,iBAAiB,CAAC,OAAO,CAAC,6BAA6B,QAAQ,IAAI,CAAC,CAAC;AACzI,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gCAAgC,CAAC,OAAuB;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,oFAAoF;IACpF,iFAAiF;IACjF,iFAAiF;IACjF,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC;QAC/B,OAAO,EAAE,wDAAwD;QACjE,WAAW,EAAE,mCAAmC;QAChD,YAAY,EAAE,mCAAmC;KAClD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,mCAAmC,EAAE,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,KAAa,EAAE,UAA0B,EAAE;IAC1E,2BAA2B;IAC3B,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAE;YAC9B,IAAI,EAAE,SAAS,CAAC,YAAY;YAC5B,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,qDAAqD,oBAAoB,uCAAuC;SAC3H,CAAC,CAAC;IACL,CAAC;IAED,mFAAmF;IACnF,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEzD,wFAAwF;IACxF,sEAAsE;IACtE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAC/D,IAAI,UAAU;QAAE,sBAAsB,CAAC,UAAU,CAAC,CAAC;IACnD,kGAAkG;IAClG,kGAAkG;IAClG,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAChC,sBAAsB,EAAE,CAAC;IAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtD,wFAAwF;IACxF,wFAAwF;IACxF,+EAA+E;IAC/E,iCAAiC,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;IAE9D,MAAM,WAAW,GAAG,MAAM,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAEpE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,WAAW,IAAI,mCAAmC,CAAC;IAEnE,sFAAsF;IACtF,oFAAoF;IACpF,yFAAyF;IACzF,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAE9D,gGAAgG;IAChG,8FAA8F;IAC9F,6FAA6F;IAC7F,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,mFAAmF;QACnF,+FAA+F;QAC/F,MAAM,SAAS,GAAG,MAAM,uBAAuB,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;QAC3F,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,wFAAwF;YACxF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+DAA+D,aAAa,MAAM,CAAC,CAAC;YACzG,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0FAA0F,CAAC,CAAC;YACjH,OAAO;QACT,CAAC;QAED,wDAAwD;QACxD,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,qBAAqB,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;QAC9E,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0DAA0D,WAAW,MAAM,CAAC,CAAC;QACpG,CAAC;QACD,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/D,MAAM,EAAE,eAAe,EAAE,GAAG,iBAAiB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtE,IAAI,OAAO,EAAE,CAAC;YACZ,6FAA6F;YAC7F,mEAAmE;YACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,WAAW,wCAAwC,aAAa,MAAM,CAAC,CAAC;YACvH,kBAAkB,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,iCAAiC,eAAe,0BAA0B,WAAW,MAAM,aAAa,gFAAgF,CACzL,CAAC;YACF,6FAA6F;YAC7F,0FAA0F;YAC1F,iDAAiD;YACjD,kBAAkB,EAAE,CAAC;QACvB,CAAC;QACD,0GAA0G;QAC1G,8FAA8F;QAC9F,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/F,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,IAAI,CAAC,UAAU,IAAI,kCAAkC,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;QACzK,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC;YAAC,MAAM,GAAG,WAAW,KAAK,EAAE,IAAI,yBAAyB,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,4BAA4B,CAAC,CAAC;QAC/I,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,yDAAyD,aAAa,oBAAoB,WAAW,MAAM,WAAW,CAAC,WAAW,CAAC,KAAK;gBAC3J,uDAAuD,WAAW,qCAAqC,CAAC,CAAC;QAC7G,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iFAAiF,aAAa,MAAM,CAAC,CAAC;YAC3H,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,oFAAoF;IACpF,oFAAoF;IACpF,yFAAyF;IACzF,wFAAwF;IACxF,uEAAuE;IACvE,IAAI,aAAa,EAAE,EAAE,CAAC;QACpB,MAAM,iBAAiB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,MAAM,kBAAkB,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;IAED,wFAAwF;IACxF,+EAA+E;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3B,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC"}