@revfleet/hscli 0.8.10 → 0.8.11

package/dist/commands/guide/index.js

@@ -0,0 +1,231 @@
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { printResult } from "../../core/output.js";
+const GOAL_ALIASES = {
+    "1": "portal-migration",
+    "/migration": "portal-migration",
+    migration: "portal-migration",
+    "portal-migration": "portal-migration",
+    "2": "setup",
+    "/setup": "setup",
+    setup: "setup",
+    "3": "read",
+    "/read": "read",
+    read: "read",
+    "4": "write",
+    "/write": "write",
+    write: "write",
+    "5": "guardrails",
+    "/guardrails": "guardrails",
+    guardrails: "guardrails",
+    safety: "guardrails",
+    policy: "guardrails",
+    properties: "property-preflight",
+    "property-preflight": "property-preflight",
+    "6": "property-preflight",
+    audit: "audit-trace",
+    trace: "audit-trace",
+    "audit-trace": "audit-trace",
+    "7": "audit-trace",
+    explore: "explore",
+    help: "explore",
+    "8": "explore",
+};
+function resolveGoal(raw) {
+    const value = raw?.trim().toLowerCase();
+    if (!value)
+        return "portal-migration";
+    return GOAL_ALIASES[value] ?? "portal-migration";
+}
+async function askGoal() {
+    if (!input.isTTY)
+        return "portal-migration";
+    const rl = createInterface({ input, output });
+    try {
+        const answer = await rl.question([
+            "What do you want to do with hscli?",
+            "1) Prepare a portal/schema migration",
+            "2) Set up auth, hublet routing, scopes, and capabilities",
+            "3) Read safely from a source portal",
+            "4) Write safely to a target portal",
+            "5) Configure guardrails",
+            "6) Preflight property migration payloads",
+            "7) Trace/audit writes",
+            "8) Explore available commands",
+            "Choose 1-8: ",
+        ].join("\n"));
+        return resolveGoal(answer);
+    }
+    finally {
+        rl.close();
+    }
+}
+function guidePayload(goal) {
+    if (goal === "setup") {
+        return {
+            goal,
+            purpose: "Create a safe profile, confirm hublet routing, then inspect portal capabilities before any migration work.",
+            nextCommands: [
+                "hscli auth login --profile live --token-stdin --hublet eu1",
+                "hscli auth set-mode live read-only",
+                "hscli --profile live doctor hublet-check",
+                "hscli --profile live doctor scopes diff --required real-mirror-read",
+                "hscli --profile live doctor capabilities --refresh",
+            ],
+            decisions: [
+                "Use read-only mode for live/source portals.",
+                "Use a separate read-write profile for sandbox/target portals.",
+                "Use --hublet eu1|na1|na2|ap1 when token metadata is not enough to infer routing.",
+            ],
+        };
+    }
+    if (goal === "read") {
+        return {
+            goal,
+            purpose: "Read from a source portal without accidental writes.",
+            nextCommands: [
+                "hscli auth set-mode live read-only",
+                "hscli --profile live crm migration export-metadata --out migration-metadata.json",
+                "hscli --profile live crm activities export contacts <contactId> --out contact-activities.json",
+                "hscli --profile live crm properties list contacts --format json > contacts-properties.json",
+                "hscli --profile live trace start --scope read",
+            ],
+            guardrails: [
+                "Profile read-only mode blocks POST/PATCH/PUT/DELETE even if the token has write scopes.",
+                "Use separate source/target profiles instead of switching tokens in place.",
+            ],
+        };
+    }
+    if (goal === "write") {
+        return {
+            goal,
+            purpose: "Write to a sandbox or target portal with dry-runs, change tickets, and traceability.",
+            nextCommands: [
+                "hscli auth set-mode sandbox read-write",
+                "hscli --profile sandbox trace start --scope write --include-bodies",
+                "hscli --profile sandbox --dry-run crm properties batch-create contacts --skip-existing --data @contacts-properties.json",
+                "hscli --profile sandbox --force --change-ticket CHG-123 crm properties batch-create contacts --skip-existing --data @contacts-properties.json",
+                "hscli --profile sandbox trace stop",
+            ],
+            guardrails: [
+                "Writes still require --force.",
+                "Use --dry-run first, then rerun the same command with --force.",
+                "Use --change-ticket when policy requires audited writes.",
+            ],
+        };
+    }
+    if (goal === "guardrails") {
+        return {
+            goal,
+            purpose: "Turn on the safety rails before a client migration or production-adjacent run.",
+            nextCommands: [
+                "hscli auth set-mode live read-only",
+                "hscli policy templates extract read-only --to ./policy.json",
+                "export HSCLI_POLICY_FILE=./policy.json",
+                "hscli trace start --scope all --include-bodies",
+                "hscli --profile live doctor hublet-check",
+                "hscli --profile live doctor scopes diff --required real-mirror-read",
+            ],
+            checks: [
+                "Live/source profiles should be read-only.",
+                "Target profiles can be read-write but still need --force.",
+                "Trace/audit entries include request id, profile, tool name, and change ticket when provided.",
+            ],
+        };
+    }
+    if (goal === "property-preflight") {
+        return {
+            goal,
+            nextCommands: [
+                "hscli --json crm properties list contacts > contacts-properties.json",
+                "hscli --dry-run crm properties batch-create contacts --skip-existing --skip-label-collisions --data @contacts-properties.json",
+                "hscli --dry-run crm properties batch-create contacts --empty-enum demote --data @contacts-properties.json",
+            ],
+            checks: [
+                "Reserved hs_* names are skipped unless --include-reserved is set.",
+                "Read-only/HubSpot-defined properties are skipped unless --include-readonly is set.",
+                "Enum options with blank labels/values are removed before write.",
+            ],
+        };
+    }
+    if (goal === "audit-trace") {
+        return {
+            goal,
+            nextCommands: [
+                "hscli trace start --scope write --include-bodies",
+                "hscli --force --change-ticket CHG-123 crm contacts update <id> --data '{...}'",
+                "hscli trace stop",
+                "hscli audit by-ticket --ticket CHG-123",
+            ],
+            checks: [
+                "Use --change-ticket when policy requires traceable writes.",
+                "Trace bodies are redacted before being written.",
+            ],
+        };
+    }
+    if (goal === "explore") {
+        return {
+            goal,
+            nextCommands: [
+                "hscli doctor capabilities --refresh",
+                "hscli crm describe contacts --refresh-cache",
+                "hscli crm migration export-metadata --out migration-metadata.json",
+                "hscli --help",
+            ],
+        };
+    }
+    return {
+        goal,
+        nextCommands: [
+            "hscli crm migration export-metadata --out migration-metadata.json",
+            "hscli crm activities export contacts <contactId> --out contact-activities.json",
+            "hscli --json crm properties list contacts > contacts-properties.json",
+            "hscli --dry-run crm properties batch-create contacts --skip-existing --skip-label-collisions --data @contacts-properties.json",
+            "hscli crm pipelines list deals",
+            "hscli crm pipelines get deals <pipelineId>",
+        ],
+        capturedByMigrationExport: [
+            "property groups with labels/displayOrder",
+            "property definitions",
+            "deal/ticket pipelines with stage detail",
+            "custom object schemas",
+            "owners, teams, business units, currencies",
+            "standard association labels",
+            "recoverable record activities via crm activities export",
+        ],
+        replayOrder: [
+            "custom schemas",
+            "property groups",
+            "properties",
+            "pipelines and stages",
+            "association labels",
+            "owner/team remapping",
+            "records and associations",
+        ],
+    };
+}
+export function registerGuide(program, getCtx) {
+    program
+        .command("guide")
+        .description("Guided workflows for migration, preflight, and audit tasks")
+        .option("--goal <goal>", "portal-migration|property-preflight|audit-trace|explore")
+        .action(async (opts) => {
+        const ctx = getCtx();
+        const goal = opts.goal ? resolveGoal(opts.goal) : await askGoal();
+        printResult(ctx, guidePayload(goal));
+    });
+    registerSlashGuide(program, getCtx, "/migration", "portal-migration", "Portal/schema migration workflow");
+    registerSlashGuide(program, getCtx, "/setup", "setup", "Initial profile, hublet, scope, and capability setup");
+    registerSlashGuide(program, getCtx, "/read", "read", "Safe source-portal read workflow");
+    registerSlashGuide(program, getCtx, "/write", "write", "Target-portal write workflow with dry-run and trace");
+    registerSlashGuide(program, getCtx, "/guardrails", "guardrails", "Safety policy, read-only, and trace workflow");
+}
+function registerSlashGuide(program, getCtx, name, goal, description) {
+    const action = () => {
+        const ctx = getCtx();
+        printResult(ctx, guidePayload(goal));
+    };
+    program.command(name).description(description).action(action);
+    program.command(name.slice(1)).description(`${description} (alias for ${name})`).action(action);
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/guide/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/guide/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,IAAI,KAAK,EAAE,MAAM,IAAI,MAAM,EAAE,MAAM,cAAc,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAInD,MAAM,YAAY,GAA8B;IAC9C,GAAG,EAAE,kBAAkB;IACvB,YAAY,EAAE,kBAAkB;IAChC,SAAS,EAAE,kBAAkB;IAC7B,kBAAkB,EAAE,kBAAkB;IACtC,GAAG,EAAE,OAAO;IACZ,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,MAAM;IACX,OAAO,EAAE,MAAM;IACf,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,OAAO;IACZ,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAO;IACd,GAAG,EAAE,YAAY;IACjB,aAAa,EAAE,YAAY;IAC3B,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,YAAY;IACpB,UAAU,EAAE,oBAAoB;IAChC,oBAAoB,EAAE,oBAAoB;IAC1C,GAAG,EAAE,oBAAoB;IACzB,KAAK,EAAE,aAAa;IACpB,KAAK,EAAE,aAAa;IACpB,aAAa,EAAE,aAAa;IAC5B,GAAG,EAAE,aAAa;IAClB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,SAAS;CACf,CAAC;AAEF,SAAS,WAAW,CAAC,GAAuB;IAC1C,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC;IACtC,OAAO,YAAY,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC;AACnD,CAAC;AAED,KAAK,UAAU,OAAO;IACpB,IAAI,CAAC,KAAK,CAAC,KAAK;QAAE,OAAO,kBAAkB,CAAC;IAC5C,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC;YAC/B,oCAAoC;YACpC,sCAAsC;YACtC,0DAA0D;YAC1D,qCAAqC;YACrC,oCAAoC;YACpC,yBAAyB;YACzB,0CAA0C;YAC1C,uBAAuB;YACvB,+BAA+B;YAC/B,cAAc;SACf,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACd,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAe;IACnC,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,4GAA4G;YACrH,YAAY,EAAE;gBACZ,4DAA4D;gBAC5D,oCAAoC;gBACpC,0CAA0C;gBAC1C,qEAAqE;gBACrE,oDAAoD;aACrD;YACD,SAAS,EAAE;gBACT,6CAA6C;gBAC7C,+DAA+D;gBAC/D,kFAAkF;aACnF;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,sDAAsD;YAC/D,YAAY,EAAE;gBACZ,oCAAoC;gBACpC,kFAAkF;gBAClF,+FAA+F;gBAC/F,4FAA4F;gBAC5F,+CAA+C;aAChD;YACD,UAAU,EAAE;gBACV,yFAAyF;gBACzF,2EAA2E;aAC5E;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,sFAAsF;YAC/F,YAAY,EAAE;gBACZ,wCAAwC;gBACxC,oEAAoE;gBACpE,yHAAyH;gBACzH,+IAA+I;gBAC/I,oCAAoC;aACrC;YACD,UAAU,EAAE;gBACV,+BAA+B;gBAC/B,gEAAgE;gBAChE,0DAA0D;aAC3D;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI;YACJ,OAAO,EAAE,gFAAgF;YACzF,YAAY,EAAE;gBACZ,oCAAoC;gBACpC,6DAA6D;gBAC7D,wCAAwC;gBACxC,gDAAgD;gBAChD,0CAA0C;gBAC1C,qEAAqE;aACtE;YACD,MAAM,EAAE;gBACN,2CAA2C;gBAC3C,2DAA2D;gBAC3D,8FAA8F;aAC/F;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,OAAO;YACL,IAAI;YACJ,YAAY,EAAE;gBACZ,sEAAsE;gBACtE,+HAA+H;gBAC/H,2GAA2G;aAC5G;YACD,MAAM,EAAE;gBACN,mEAAmE;gBACnE,oFAAoF;gBACpF,iEAAiE;aAClE;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI;YACJ,YAAY,EAAE;gBACZ,kDAAkD;gBAClD,+EAA+E;gBAC/E,kBAAkB;gBAClB,wCAAwC;aACzC;YACD,MAAM,EAAE;gBACN,4DAA4D;gBAC5D,iDAAiD;aAClD;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI;YACJ,YAAY,EAAE;gBACZ,qCAAqC;gBACrC,6CAA6C;gBAC7C,mEAAmE;gBACnE,cAAc;aACf;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI;QACJ,YAAY,EAAE;YACZ,mEAAmE;YACnE,gFAAgF;YAChF,sEAAsE;YACtE,+HAA+H;YAC/H,gCAAgC;YAChC,4CAA4C;SAC7C;QACD,yBAAyB,EAAE;YACzB,0CAA0C;YAC1C,sBAAsB;YACtB,yCAAyC;YACzC,uBAAuB;YACvB,2CAA2C;YAC3C,6BAA6B;YAC7B,yDAAyD;SAC1D;QACD,WAAW,EAAE;YACX,gBAAgB;YAChB,iBAAiB;YACjB,YAAY;YACZ,sBAAsB;YACtB,oBAAoB;YACpB,sBAAsB;YACtB,0BAA0B;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAgB,EAAE,MAAwB;IACtE,OAAO;SACJ,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,4DAA4D,CAAC;SACzE,MAAM,CAAC,eAAe,EAAE,yDAAyD,CAAC;SAClF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;QAClE,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEL,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;IAC1G,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,sDAAsD,CAAC,CAAC;IAC/G,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,kCAAkC,CAAC,CAAC;IACzF,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,qDAAqD,CAAC,CAAC;IAC9G,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,8CAA8C,CAAC,CAAC;AACnH,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAgB,EAAE,MAAwB,EAAE,IAAY,EAAE,IAAe,EAAE,WAAmB;IACxH,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,WAAW,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,WAAW,eAAe,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAClG,CAAC"}

package/dist/commands/settings/index.js

@@ -1,6 +1,183 @@
-import { createClient } from "../../core/http.js";
-import { printResult } from "../../core/output.js";
+import { readFileSync } from "node:fs";
+import { getProfile } from "../../core/auth.js";
+import { createBrowserSessionClient, createClient } from "../../core/http.js";
+import { CliError, printResult } from "../../core/output.js";
 import { encodePathSegment, maybeWrite, parseJsonPayload, parseNumberFlag } from "../crm/shared.js";
+function addBrowserSessionOptions(command) {
+    return command
+        .option("--portal-id <id>", "HubSpot portal ID (or HSCLI_PORTAL_ID / profile.portalId)")
+        .option("--ui-domain <domain>", "HubSpot app domain, e.g. app.hubspot.com or app-eu1.hubspot.com")
+        .option("--cookie <header>", "Browser Cookie header for app.hubspot.com")
+        .option("--cookie-file <path>", "Cookie header, Netscape cookie jar, or JSON cookie export")
+        .option("--csrf <token>", "x-hubspot-csrf-hubspotapi header value");
+}
+function resolvePermissionSetSession(ctx, opts) {
+    const profile = safeProfile(ctx.profile);
+    const portalId = firstString(opts.portalId, process.env.HSCLI_PORTAL_ID, profile?.portalId);
+    if (!portalId) {
+        throw new CliError("SESSION_PORTAL_ID_REQUIRED", "Permission-set commands require --portal-id, HSCLI_PORTAL_ID, or profile.portalId.");
+    }
+    const uiDomain = normalizeUiDomain(firstString(opts.uiDomain, process.env.HSCLI_HUBSPOT_UI_DOMAIN, profile?.uiDomain, "app.hubspot.com") ?? "app.hubspot.com");
+    const cookie = firstString(opts.cookie, process.env.HSCLI_HUBSPOT_COOKIE) ?? readCookieFile(firstString(opts.cookieFile, process.env.HSCLI_HUBSPOT_COOKIE_FILE));
+    if (!cookie) {
+        throw new CliError("SESSION_COOKIE_REQUIRED", "Permission-set commands require --cookie, --cookie-file, HSCLI_HUBSPOT_COOKIE, or HSCLI_HUBSPOT_COOKIE_FILE.");
+    }
+    const csrfToken = firstString(opts.csrf, process.env.HSCLI_HUBSPOT_CSRF, extractCsrfToken(cookie));
+    if (!csrfToken) {
+        throw new CliError("SESSION_CSRF_REQUIRED", "Permission-set commands require --csrf or HSCLI_HUBSPOT_CSRF. A csrf.app cookie is also accepted when present.");
+    }
+    return {
+        portalId,
+        client: createBrowserSessionClient(ctx.profile, {
+            apiBaseUrl: `https://${uiDomain}`,
+            cookie,
+            csrfToken,
+            telemetryFile: ctx.telemetryFile,
+            strictCapabilities: ctx.strictCapabilities,
+        }),
+    };
+}
+function permissionSetsPath(portalId) {
+    return `/api/app-users/v1/permission-sets?portalId=${encodeURIComponent(portalId)}`;
+}
+function permissionSetPath(portalId, id) {
+    return `/api/app-users/v1/permission-sets/${encodePathSegment(id, "permissionSetId")}?portalId=${encodeURIComponent(portalId)}`;
+}
+async function maybeWritePermissionSetWithRoleRetry(ctx, client, method, path, body, stripUnknownRoles) {
+    try {
+        return await maybeWrite(ctx, client, method, path, body);
+    }
+    catch (error) {
+        const missingRoles = stripUnknownRoles ? extractMissingRoles(error) : [];
+        const strippedBody = missingRoles.length > 0 ? stripRoles(body, missingRoles) : undefined;
+        if (!strippedBody)
+            throw error;
+        const result = await maybeWrite(ctx, client, method, path, strippedBody);
+        return {
+            result,
+            strippedRoleNames: missingRoles,
+        };
+    }
+}
+async function findExistingPermissionSetByName(client, portalId, name) {
+    const response = await client.request(permissionSetsPath(portalId));
+    return extractPermissionSets(response).find((item) => item.name === name);
+}
+function extractPermissionSets(response) {
+    if (Array.isArray(response))
+        return response.filter(isRecord);
+    if (!isRecord(response))
+        return [];
+    for (const key of ["results", "permissionSets", "items"]) {
+        const value = response[key];
+        if (Array.isArray(value))
+            return value.filter(isRecord);
+    }
+    return [];
+}
+function extractMissingRoles(error) {
+    if (!(error instanceof CliError) || error.status !== 400)
+        return [];
+    const details = error.details === undefined ? error.message : JSON.stringify(error.details);
+    const match = details.match(/Cannot find roles\s*\[([^\]]+)\]/i);
+    if (!match)
+        return [];
+    return match[1]
+        .split(",")
+        .map((role) => role.trim().replace(/^["']|["']$/g, ""))
+        .filter(Boolean);
+}
+function stripRoles(body, rolesToStrip) {
+    const roles = Array.isArray(body.roleNames) ? body.roleNames.filter((role) => typeof role === "string") : [];
+    if (roles.length === 0)
+        return undefined;
+    const missing = new Set(rolesToStrip);
+    const kept = roles.filter((role) => !missing.has(role));
+    if (kept.length === roles.length)
+        return undefined;
+    return { ...body, roleNames: kept };
+}
+function safeProfile(profile) {
+    try {
+        return getProfile(profile);
+    }
+    catch {
+        return undefined;
+    }
+}
+function firstString(...values) {
+    for (const value of values) {
+        const trimmed = value?.trim();
+        if (trimmed)
+            return trimmed;
+    }
+    return undefined;
+}
+function normalizeUiDomain(raw) {
+    return raw.replace(/^https?:\/\//, "").replace(/\/.*$/, "");
+}
+function readCookieFile(path) {
+    if (!path)
+        return undefined;
+    const raw = readFileSync(path, "utf8").trim();
+    if (!raw)
+        return undefined;
+    return normalizeCookieFile(raw);
+}
+function normalizeCookieFile(raw) {
+    const parsed = parseCookieJson(raw);
+    if (parsed)
+        return parsed;
+    const lines = raw.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+    const netscapeCookies = lines
+        .filter((line) => !line.startsWith("#"))
+        .map((line) => line.split(/\t+/))
+        .filter((parts) => parts.length >= 7)
+        .map((parts) => `${parts[5]}=${parts.slice(6).join("\t")}`);
+    if (netscapeCookies.length > 0)
+        return netscapeCookies.join("; ");
+    return lines.filter((line) => !line.startsWith("#")).join("; ");
+}
+function parseCookieJson(raw) {
+    try {
+        const parsed = JSON.parse(raw);
+        if (typeof parsed === "string")
+            return parsed;
+        if (isRecord(parsed) && typeof parsed.cookie === "string")
+            return parsed.cookie;
+        const cookies = Array.isArray(parsed) ? parsed : isRecord(parsed) && Array.isArray(parsed.cookies) ? parsed.cookies : undefined;
+        if (!cookies)
+            return undefined;
+        const pairs = cookies
+            .filter(isRecord)
+            .map((cookie) => {
+            const name = typeof cookie.name === "string" ? cookie.name.trim() : "";
+            const value = typeof cookie.value === "string" ? cookie.value : "";
+            return name ? `${name}=${value}` : "";
+        })
+            .filter(Boolean);
+        return pairs.length > 0 ? pairs.join("; ") : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function extractCsrfToken(cookieHeader) {
+    const candidates = new Set(["csrf.app", "csrf", "hubspotapi-csrf", "hs-csrf"]);
+    for (const part of cookieHeader.split(";")) {
+        const [rawName, ...rawValue] = part.trim().split("=");
+        if (!rawName || rawValue.length === 0)
+            continue;
+        if (candidates.has(rawName.trim().toLowerCase())) {
+            const value = rawValue.join("=").trim();
+            return value ? decodeURIComponent(value) : undefined;
+        }
+    }
+    return undefined;
+}
+function isRecord(value) {
+    return Boolean(value && typeof value === "object" && !Array.isArray(value));
+}
 export function registerSettings(program, getCtx) {
     const settings = program.command("settings").description("HubSpot Settings APIs");
     // Users
@@ -90,6 +267,65 @@ export function registerSettings(program, getCtx) {
         const res = await client.request("/settings/v3/users/teams");
         printResult(ctx, res);
     });
+    // Permission sets — internal HubSpot endpoint, requires browser session cookies.
+    const permissionSets = settings.command("permission-sets").description("Permission-set management via internal HubSpot session-auth endpoint");
+    addBrowserSessionOptions(permissionSets.command("list"))
+        .action(async (opts) => {
+        const ctx = getCtx();
+        const { client, portalId } = resolvePermissionSetSession(ctx, opts);
+        const res = await client.request(permissionSetsPath(portalId));
+        printResult(ctx, res);
+    });
+    addBrowserSessionOptions(permissionSets.command("get").argument("<id>"))
+        .action(async (id, opts) => {
+        const ctx = getCtx();
+        const { client, portalId } = resolvePermissionSetSession(ctx, opts);
+        const res = await client.request(permissionSetPath(portalId, id));
+        printResult(ctx, res);
+    });
+    addBrowserSessionOptions(permissionSets.command("create")
+        .requiredOption("--data <payload>", "Permission-set payload JSON: { name, description?, roleNames[] }")
+        .option("--skip-existing", "Fetch existing permission sets first and skip when name already exists")
+        .option("--no-strip-unknown-roles", "Do not auto-retry after removing roles rejected by HubSpot")).action(async (opts) => {
+        const ctx = getCtx();
+        const { client, portalId } = resolvePermissionSetSession(ctx, opts);
+        const payload = parseJsonPayload(opts.data);
+        const path = permissionSetsPath(portalId);
+        if (!ctx.dryRun && opts.skipExisting) {
+            const name = typeof payload.name === "string" ? payload.name.trim() : "";
+            if (!name)
+                throw new CliError("PERMISSION_SET_NAME_REQUIRED", "--skip-existing requires payload.name.");
+            const existing = await findExistingPermissionSetByName(client, portalId, name);
+            if (existing) {
+                printResult(ctx, { skipped: true, reason: "permission-set-exists", existing });
+                return;
+            }
+        }
+        const res = await maybeWritePermissionSetWithRoleRetry(ctx, client, "POST", path, payload, opts.stripUnknownRoles !== false);
+        printResult(ctx, res);
+    });
+    addBrowserSessionOptions(permissionSets.command("update")
+        .argument("<id>")
+        .requiredOption("--data <payload>", "Permission-set update payload JSON")
+        .option("--method <method>", "HTTP method for update: PUT|PATCH", "PUT")
+        .option("--no-strip-unknown-roles", "Do not auto-retry after removing roles rejected by HubSpot")).action(async (id, opts) => {
+        const ctx = getCtx();
+        const method = String(opts.method).trim().toUpperCase();
+        if (method !== "PUT" && method !== "PATCH") {
+            throw new CliError("INVALID_FLAG", "--method must be PUT or PATCH");
+        }
+        const { client, portalId } = resolvePermissionSetSession(ctx, opts);
+        const payload = parseJsonPayload(opts.data);
+        const res = await maybeWritePermissionSetWithRoleRetry(ctx, client, method, permissionSetPath(portalId, id), payload, opts.stripUnknownRoles !== false);
+        printResult(ctx, res);
+    });
+    addBrowserSessionOptions(permissionSets.command("delete").argument("<id>"))
+        .action(async (id, opts) => {
+        const ctx = getCtx();
+        const { client, portalId } = resolvePermissionSetSession(ctx, opts);
+        const res = await maybeWrite(ctx, client, "DELETE", permissionSetPath(portalId, id));
+        printResult(ctx, res);
+    });
     // Currencies
     const currencies = settings.command("currencies").description("Multi-currency management");
     currencies

package/dist/commands/settings/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/settings/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEpG,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,MAAwB;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAElF,QAAQ;IACR,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAEzE,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9F,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;SAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAClF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,UAAU,CAAC;SACpB,cAAc,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvH,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,UAAU,CAAC;SACpB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjH,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,iBAAiB;IACjB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAEjG,aAAa;SACV,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,QAAQ;IACR,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAEvE,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,aAAa;IACb,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAE3F,UAAU;SACP,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC5D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,aAAa;IACb,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAEnF,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8EAA8E,CAAC;SAC3F,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;SACvF,MAAM,CAAC,wBAAwB,EAAE,mDAAmD,CAAC;SACrF,MAAM,CAAC,uBAAuB,EAAE,iDAAiD,CAAC;SAClF,MAAM,CAAC,qBAAqB,EAAE,2DAA2D,CAAC;SAC1F,MAAM,CAAC,sBAAsB,EAAE,uDAAuD,CAAC;SACvF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,aAAa;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,wCAAwC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9F,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,OAAO;IACP,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAE3E,IAAI;SACD,OAAO,CAAC,gBAAgB,CAAC;SACzB,cAAc,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE,OAAO,CAAC,CAAC;QACnG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/settings/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,YAAY,EAAiB,MAAM,oBAAoB,CAAC;AAE7F,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUpG,SAAS,wBAAwB,CAAC,OAAgB;IAChD,OAAO,OAAO;SACX,MAAM,CAAC,kBAAkB,EAAE,2DAA2D,CAAC;SACvF,MAAM,CAAC,sBAAsB,EAAE,iEAAiE,CAAC;SACjG,MAAM,CAAC,mBAAmB,EAAE,2CAA2C,CAAC;SACxE,MAAM,CAAC,sBAAsB,EAAE,2DAA2D,CAAC;SAC3F,MAAM,CAAC,gBAAgB,EAAE,wCAAwC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,2BAA2B,CAClC,GAAe,EACf,IAA2B;IAE3B,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,QAAQ,CAAC,4BAA4B,EAAE,oFAAoF,CAAC,CAAC;IACzI,CAAC;IAED,MAAM,QAAQ,GAAG,iBAAiB,CAAC,WAAW,CAC5C,IAAI,CAAC,QAAQ,EACb,OAAO,CAAC,GAAG,CAAC,uBAAuB,EACnC,OAAO,EAAE,QAAQ,EACjB,iBAAiB,CAClB,IAAI,iBAAiB,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,WAAW,CACxB,IAAI,CAAC,MAAM,EACX,OAAO,CAAC,GAAG,CAAC,oBAAoB,CACjC,IAAI,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAChB,yBAAyB,EACzB,8GAA8G,CAC/G,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,QAAQ,CAChB,uBAAuB,EACvB,gHAAgH,CACjH,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,MAAM,EAAE,0BAA0B,CAAC,GAAG,CAAC,OAAO,EAAE;YAC9C,UAAU,EAAE,WAAW,QAAQ,EAAE;YACjC,MAAM;YACN,SAAS;YACT,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,kBAAkB,EAAE,GAAG,CAAC,kBAAkB;SAC3C,CAAC;KACH,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,OAAO,8CAA8C,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAE,EAAU;IACrD,OAAO,qCAAqC,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,aAAa,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAClI,CAAC;AAED,KAAK,UAAU,oCAAoC,CACjD,GAAe,EACf,MAAqB,EACrB,MAAgC,EAChC,IAAY,EACZ,IAA6B,EAC7B,iBAA0B;IAE1B,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1F,IAAI,CAAC,YAAY;YAAE,MAAM,KAAK,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACzE,OAAO;YACL,MAAM;YACN,iBAAiB,EAAE,YAAY;SAChC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,+BAA+B,CAC5C,MAAqB,EACrB,QAAgB,EAChB,IAAY;IAEZ,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpE,OAAO,qBAAqB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAiB;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,CAAC,KAAK,YAAY,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACjE,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,OAAO,KAAK,CAAC,CAAC,CAAC;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;SACtD,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,IAA6B,EAAE,YAAsB;IACvE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7H,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACnD,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAG,MAAiC;IACvD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QAC9B,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,cAAc,CAAC,IAAwB;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,mBAAmB,CAAC,GAAW;IACtC,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5E,MAAM,eAAe,GAAG,KAAK;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;SACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SAChC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;SACpC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAElE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC9C,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC;QAChF,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;QAChI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,KAAK,GAAG,OAAO;aAClB,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACd,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC;aACD,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,YAAoB;IAC5C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/E,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChD,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;YACjD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,MAAwB;IACzE,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAElF,QAAQ;IACR,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC;IAEzE,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC7E,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,sBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9F,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,cAAc,CAAC,kBAAkB,EAAE,4BAA4B,CAAC;SAChE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAC;QAClF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,UAAU,CAAC;SACpB,cAAc,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC7B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,sBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACvH,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,QAAQ,CAAC;SACjB,QAAQ,CAAC,UAAU,CAAC;SACpB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,sBAAsB,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QACjH,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,KAAK;SACF,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,2BAA2B,CAAC;SACxC,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,iBAAiB;IACjB,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;IAEjG,aAAa;SACV,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,gCAAgC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACtF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,QAAQ;IACR,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;IAEvE,KAAK;SACF,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAC7D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,iFAAiF;IACjF,MAAM,cAAc,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,WAAW,CAAC,sEAAsE,CAAC,CAAC;IAE/I,wBAAwB,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;SACrD,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,wBAAwB,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACrE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAClE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,wBAAwB,CACtB,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC7B,cAAc,CAAC,kBAAkB,EAAE,kEAAkE,CAAC;SACtG,MAAM,CAAC,iBAAiB,EAAE,wEAAwE,CAAC;SACnG,MAAM,CAAC,0BAA0B,EAAE,4DAA4D,CAAC,CACpG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAE1C,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,8BAA8B,EAAE,wCAAwC,CAAC,CAAC;YACxG,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC/E,IAAI,QAAQ,EAAE,CAAC;gBACb,WAAW,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC/E,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,oCAAoC,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,iBAAiB,KAAK,KAAK,CAAC,CAAC;QAC7H,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wBAAwB,CACtB,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC7B,QAAQ,CAAC,MAAM,CAAC;SAChB,cAAc,CAAC,kBAAkB,EAAE,oCAAoC,CAAC;SACxE,MAAM,CAAC,mBAAmB,EAAE,mCAAmC,EAAE,KAAK,CAAC;SACvE,MAAM,CAAC,0BAA0B,EAAE,4DAA4D,CAAC,CACpG,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,oCAAoC,CACpD,GAAG,EACH,MAAM,EACN,MAAM,EACN,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAC/B,OAAO,EACP,IAAI,CAAC,iBAAiB,KAAK,KAAK,CACjC,CAAC;QACF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wBAAwB,CAAC,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACxE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACzB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,2BAA2B,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QACrF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,aAAa;IACb,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC;IAE3F,UAAU;SACP,OAAO,CAAC,MAAM,CAAC;SACf,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAC5D,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,aAAa;IACb,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;IAEnF,SAAS;SACN,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,8EAA8E,CAAC;SAC3F,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,KAAK,CAAC;SAC3C,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC;SAC3C,MAAM,CAAC,yBAAyB,EAAE,oDAAoD,CAAC;SACvF,MAAM,CAAC,wBAAwB,EAAE,mDAAmD,CAAC;SACrF,MAAM,CAAC,uBAAuB,EAAE,iDAAiD,CAAC;SAClF,MAAM,CAAC,qBAAqB,EAAE,2DAA2D,CAAC;SAC1F,MAAM,CAAC,sBAAsB,EAAE,uDAAuD,CAAC;SACvF,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,cAAc;YAAE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,aAAa;YAAE,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,YAAY;YAAE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,wCAAwC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9F,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEL,OAAO;IACP,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC;IAE3E,IAAI;SACD,OAAO,CAAC,gBAAgB,CAAC;SACzB,cAAc,CAAC,kBAAkB,EAAE,0BAA0B,CAAC;SAC9D,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,sCAAsC,EAAE,OAAO,CAAC,CAAC;QACnG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/core/auth.d.ts

@@ -5,13 +5,19 @@ export interface AuthProfile {
     scopes?: string[];
     portalId?: string;
     uiDomain?: string;
+    dataHostingLocation?: string;
     apiDomain?: string;
     hublet?: string;
     mode?: "read-only" | "read-write";
 }
+export declare function normalizeHublet(value: string | undefined): string | undefined;
+export declare function normalizeStoredHublet(value: string): string;
+export declare function normalizeApiDomain(value: string): string;
+export declare function normalizeApiBaseUrl(value: string): string;
 /**
  * Detect the hublet from available profile data.
- * Priority: explicit hublet field > uiDomain > token prefix.
+ * Priority: explicit hublet field > dataHostingLocation > uiDomain > token prefix.
+ * NA1 resolves to undefined because public API calls use api.hubapi.com.
  */
 export declare function detectHublet(profile: Partial<AuthProfile>): string | undefined;
 /**

package/dist/core/auth.js

@@ -3,24 +3,61 @@ import { join } from "node:path";
 import { homedir } from "node:os";
 import { CliError } from "./output.js";
 import { isVaultEncrypted, readVaultData, writeVaultData, getVaultPassphrase } from "./vault.js";
+export function normalizeHublet(value) {
+    const normalized = value?.trim().toLowerCase();
+    if (!normalized || normalized === "na" || normalized === "na1" || normalized === "global" || normalized === "prod")
+        return undefined;
+    if (!/^[a-z][a-z0-9]*\d+$/.test(normalized)) {
+        throw new CliError("INVALID_HUBLET", `Invalid hublet '${value}'. Expected values like eu1, na1, na2, ap1.`);
+    }
+    return normalized;
+}
+export function normalizeStoredHublet(value) {
+    const normalized = value.trim().toLowerCase();
+    if (!normalized)
+        throw new CliError("INVALID_HUBLET", "Hublet cannot be empty.");
+    if (normalized === "na" || normalized === "global" || normalized === "prod")
+        return "na1";
+    if (!/^[a-z][a-z0-9]*\d+$/.test(normalized)) {
+        throw new CliError("INVALID_HUBLET", `Invalid hublet '${value}'. Expected values like eu1, na1, na2, ap1.`);
+    }
+    return normalized;
+}
+export function normalizeApiDomain(value) {
+    const normalized = value
+        .trim()
+        .replace(/^https?:\/\//i, "")
+        .replace(/\/+$/, "")
+        .toLowerCase();
+    if (!/^api(?:-[a-z0-9]+)?\.hubapi\.com$/.test(normalized)) {
+        throw new CliError("INVALID_API_DOMAIN", "API domain must be api.hubapi.com or api-<hublet>.hubapi.com.");
+    }
+    return normalized;
+}
+export function normalizeApiBaseUrl(value) {
+    return `https://${normalizeApiDomain(value)}`;
+}
 /**
  * Detect the hublet from available profile data.
- * Priority: explicit hublet field > uiDomain > token prefix.
+ * Priority: explicit hublet field > dataHostingLocation > uiDomain > token prefix.
+ * NA1 resolves to undefined because public API calls use api.hubapi.com.
  */
 export function detectHublet(profile) {
     if (profile.hublet)
-        return profile.hublet;
+        return normalizeHublet(profile.hublet);
+    if (profile.dataHostingLocation)
+        return normalizeHublet(profile.dataHostingLocation);
     // Detect from uiDomain (e.g. "app-eu1.hubspot.com" → "eu1")
     if (profile.uiDomain) {
         const match = profile.uiDomain.match(/^app-([a-z0-9]+)\./);
         if (match)
-            return match[1];
+            return normalizeHublet(match[1]);
     }
     // Detect from token prefix (e.g. "pat-eu1-..." → "eu1")
     if (profile.token) {
         const tokenMatch = profile.token.match(/^pat-([a-z0-9]+)-/);
-        if (tokenMatch && tokenMatch[1] !== "na1")
-            return tokenMatch[1];
+        if (tokenMatch)
+            return normalizeHublet(tokenMatch[1]);
     }
     return undefined;
 }
@@ -29,9 +66,10 @@ export function detectHublet(profile) {
  * NA/default → "api.hubapi.com", EU1 → "api-eu1.hubapi.com", etc.
  */
 export function resolveApiDomain(hublet) {
-    if (!hublet)
+    const normalized = normalizeHublet(hublet);
+    if (!normalized)
         return "api.hubapi.com";
-    return `api-${hublet}.hubapi.com`;
+    return `api-${normalized}.hubapi.com`;
 }
 /**
  * Get the API base URL for a profile (hublet-aware).