@runcofactor/cli 0.10.0

package/dist/credential-COLTBV6D.js

@@ -0,0 +1,450 @@
+import { createRequire as __cr } from "module"; const require = __cr(import.meta.url);
+import {
+  apiRequest,
+  fetchProperties,
+  getApplicationArg
+} from "./chunk-WOHL4FTB.js";
+import "./chunk-SJJW77WN.js";
+import {
+  apiFetch,
+  exitOnFailure
+} from "./chunk-3CZU7XCS.js";
+import {
+  getArgValue,
+  hasFlag,
+  resolveConfig
+} from "./chunk-A4OFTUVV.js";
+import "./chunk-JWHYXEA2.js";
+import "./chunk-VKVL7WBN.js";
+
+// src/credential.ts
+import process from "process";
+import { createParser } from "eventsource-parser";
+async function fetchCredentials(apiUrl, token) {
+  const result = await apiFetch(`${apiUrl}/org/credentials`, {
+    headers: { Authorization: `Bearer ${token}` },
+    token
+  });
+  if (!result.ok) exitOnFailure(result.failure);
+  const data = await result.response.json();
+  return data.items ?? [];
+}
+function printCredentialHelp() {
+  console.log(
+    [
+      "Usage: canary credential <sub-command> [options]",
+      "",
+      "Sub-commands:",
+      "  list [options]                  List credentials with environment info",
+      "  get <credId|name> [options]     Print credential login bundle (URL + instructions + username/password)",
+      "  create [options]                Create a new credential",
+      "  update <credId> [options]       Update credential fields",
+      "  test <credId> [options]         Run the browser login test for a credential",
+      "",
+      "List options:",
+      "  --application <name>  Filter by application name (alias: --property)",
+      "  --json               Output raw JSON",
+      "",
+      "Create options:",
+      "  --application <name|id>      Application to attach to (required; alias: --property)",
+      "  --name <name>                Credential name (required)",
+      "  --login-url <url>            Login URL",
+      "  --login-instructions <text>  Login instructions",
+      "  --username <user>            Username (stored encrypted)",
+      "  --password <pw>              Password (or set CANARY_CRED_PASSWORD)",
+      "  --api-key <key>              API key (or set CANARY_CRED_API_KEY)",
+      "  --mfa-secret <secret>        MFA seed (or set CANARY_CRED_MFA_SECRET)",
+      "  --json                       Output raw JSON",
+      "",
+      "Update options:",
+      "  --login-url <url>          Set the login URL",
+      "  --name <name>              Set the credential name",
+      "  --role <role>              Set the role (admin, user, viewer, custom)",
+      "  --login-instructions <text>  Set login instructions",
+      "  --json                     Output raw JSON",
+      "",
+      "Test options:",
+      "  --application <name|id>    Disambiguate when <credId> is a name (alias: --property)",
+      "  --json                     Stream raw SSE events as JSON",
+      "",
+      "Common options:",
+      "  --env <env>          Target environment (prod, dev, local)",
+      "  --api-url <url>      API URL override",
+      "  --token <key>        API token override"
+    ].join("\n")
+  );
+}
+async function handleList(argv, apiUrl, token) {
+  const jsonFlag = hasFlag(argv, "--json");
+  const propertyFilter = getApplicationArg(argv);
+  let items = await fetchCredentials(apiUrl, token);
+  if (propertyFilter) {
+    const lower = propertyFilter.toLowerCase();
+    items = items.filter(
+      (c) => c.propertyId === propertyFilter || c.propertyName && c.propertyName.toLowerCase().includes(lower)
+    );
+  }
+  items = items.filter((c) => !c.isEphemeral);
+  if (jsonFlag) {
+    console.log(JSON.stringify(items, null, 2));
+    return;
+  }
+  if (items.length === 0) {
+    console.log("No credentials found.");
+    return;
+  }
+  console.log(`
+Credentials (${items.length}):
+`);
+  for (const c of items) {
+    const property = c.propertyName ?? c.propertyId;
+    const env = c.environmentName ? ` | ${c.environmentName}` : "";
+    const baseUrl = c.propertyBaseUrl ? ` | ${c.propertyBaseUrl}` : "";
+    const loginUrl = c.loginUrl ? `    Login URL: ${c.loginUrl}
+` : "";
+    console.log(`  ${c.name}`);
+    console.log(`    ID: ${c.id}`);
+    console.log(`    Application: ${property}${env}${baseUrl}`);
+    if (loginUrl) process.stdout.write(loginUrl);
+    console.log("");
+  }
+}
+async function handleUpdate(argv, apiUrl, token) {
+  const credId = argv.find((a) => !a.startsWith("-"));
+  if (!credId) {
+    console.error("Error: Missing credential ID.");
+    console.error("Usage: canary credential update <credId> --login-url <url> [--name <name>] [--role <role>]");
+    process.exit(1);
+  }
+  const loginUrl = getArgValue(argv, "--login-url");
+  const name = getArgValue(argv, "--name");
+  const role = getArgValue(argv, "--role");
+  const loginInstructions = getArgValue(argv, "--login-instructions");
+  const jsonOutput = hasFlag(argv, "--json");
+  if (!loginUrl && !name && !role && !loginInstructions) {
+    console.error(
+      "Error: No fields to update. Provide at least one of: --login-url, --name, --role, --login-instructions"
+    );
+    process.exit(1);
+  }
+  const validRoles = ["admin", "user", "viewer", "custom"];
+  if (role && !validRoles.includes(role)) {
+    console.error(`Error: Invalid role "${role}". Must be one of: ${validRoles.join(", ")}`);
+    process.exit(1);
+  }
+  const credentials = await fetchCredentials(apiUrl, token);
+  const credential = credentials.find((c) => c.id === credId);
+  if (!credential) {
+    console.error(`Error: Credential ${credId} not found.`);
+    if (credentials.length > 0) {
+      console.error("\nAvailable credentials:");
+      for (const c of credentials.slice(0, 10)) {
+        console.error(`  ${c.id}  ${c.name}  (${c.propertyName ?? c.propertyId})`);
+      }
+    }
+    process.exit(1);
+  }
+  const body = {};
+  if (loginUrl !== void 0) body.loginUrl = loginUrl;
+  if (name !== void 0) body.name = name;
+  if (role !== void 0) body.role = role;
+  if (loginInstructions !== void 0) body.loginInstructions = loginInstructions;
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "PUT",
+    `/org/properties/${credential.propertyId}/credentials/${credId}`,
+    body
+  );
+  if (!result.ok) {
+    if (jsonOutput) {
+      console.log(JSON.stringify({ ok: false, error: result.error ?? "Unknown error" }, null, 2));
+    } else {
+      console.error(`Error: ${result.error ?? "Unknown error"}`);
+    }
+    process.exit(1);
+  }
+  if (jsonOutput) {
+    console.log(JSON.stringify({ ok: true, credentialId: credId, updated: body }, null, 2));
+    return;
+  }
+  console.log(`Updated "${credential.name}" (${credId}):`);
+  if (loginUrl !== void 0) {
+    console.log(`  loginUrl: ${credential.loginUrl ?? "(none)"} -> ${loginUrl}`);
+  }
+  if (name !== void 0) {
+    console.log(`  name: ${credential.name} -> ${name}`);
+  }
+  if (role !== void 0) {
+    console.log(`  role: -> ${role}`);
+  }
+  if (loginInstructions !== void 0) {
+    console.log(`  loginInstructions: updated`);
+  }
+}
+async function handleCreate(argv, apiUrl, token) {
+  const jsonOutput = hasFlag(argv, "--json");
+  const propertyArg = getApplicationArg(argv);
+  const name = getArgValue(argv, "--name");
+  const loginUrl = getArgValue(argv, "--login-url");
+  const loginInstructions = getArgValue(argv, "--login-instructions");
+  const username = getArgValue(argv, "--username");
+  const password = getArgValue(argv, "--password") ?? process.env.CANARY_CRED_PASSWORD;
+  const apiKey = getArgValue(argv, "--api-key") ?? process.env.CANARY_CRED_API_KEY;
+  const mfaSecret = getArgValue(argv, "--mfa-secret") ?? process.env.CANARY_CRED_MFA_SECRET;
+  if (!propertyArg || !name) {
+    console.error("Error: --application and --name are required (alias: --property).");
+    console.error("Usage: canary credential create --application <name|id> --name <name> [options]");
+    process.exit(1);
+  }
+  const properties = await fetchProperties(apiUrl, token);
+  const property = properties.find(
+    (p) => p.id === propertyArg || p.name.toLowerCase() === propertyArg.toLowerCase()
+  );
+  if (!property) {
+    console.error(`Error: Application "${propertyArg}" not found.`);
+    if (properties.length > 0) {
+      console.error("Available applications:");
+      for (const p of properties) console.error(`  - ${p.name} (${p.id})`);
+    }
+    process.exit(1);
+  }
+  const data = {};
+  if (username !== void 0) data.username = username;
+  if (password !== void 0) data.password = password;
+  if (apiKey !== void 0) data.apiKey = apiKey;
+  if (mfaSecret !== void 0) data.mfaSecret = mfaSecret;
+  const body = { name, data };
+  if (loginUrl !== void 0) body.loginUrl = loginUrl;
+  if (loginInstructions !== void 0) body.loginInstructions = loginInstructions;
+  const result = await apiRequest(apiUrl, token, "POST", `/org/properties/${property.id}/credentials`, body);
+  if (!result.ok) {
+    if (jsonOutput) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.error(`Error: ${result.error ?? "Unknown error"}`);
+    }
+    process.exit(1);
+  }
+  if (jsonOutput) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log(`Created credential "${name}" (${result.id}) on application "${property.name}"`);
+}
+async function fetchCredentialDetail(apiUrl, token, propertyId, credId) {
+  const result = await apiRequest(
+    apiUrl,
+    token,
+    "GET",
+    `/org/properties/${propertyId}/credentials/${credId}`
+  );
+  if (!result.ok || !result.credential) return null;
+  return result.credential;
+}
+async function handleGet(argv, apiUrl, token) {
+  const jsonOutput = hasFlag(argv, "--json");
+  const propertyArg = getApplicationArg(argv);
+  const credArg = argv.find((a) => !a.startsWith("-"));
+  if (!credArg) {
+    console.error("Error: Missing credential ID or name.");
+    console.error("Usage: canary credential get <credId|name> [--application <name|id>] [--json]");
+    process.exit(1);
+  }
+  const credentials = await fetchCredentials(apiUrl, token);
+  const candidates = credentials.filter(
+    (c) => c.id === credArg || c.name.toLowerCase() === credArg.toLowerCase()
+  );
+  let credSummary;
+  if (candidates.length === 0) {
+    console.error(`Error: Credential "${credArg}" not found.`);
+    process.exit(1);
+  } else if (candidates.length === 1) {
+    credSummary = candidates[0];
+  } else {
+    if (!propertyArg) {
+      console.error(`Error: Multiple credentials match "${credArg}". Pass --application to disambiguate.`);
+      for (const c of candidates) {
+        console.error(`  - ${c.id}  (${c.propertyName ?? c.propertyId})`);
+      }
+      process.exit(1);
+    }
+    const lower = propertyArg.toLowerCase();
+    credSummary = candidates.find(
+      (c) => c.propertyId === propertyArg || c.propertyName && c.propertyName.toLowerCase() === lower
+    );
+    if (!credSummary) {
+      console.error(`Error: No credential named "${credArg}" on application "${propertyArg}".`);
+      process.exit(1);
+    }
+  }
+  const detail = await fetchCredentialDetail(apiUrl, token, credSummary.propertyId, credSummary.id);
+  if (!detail) {
+    console.error(`Error: Failed to load credential ${credSummary.id}.`);
+    process.exit(1);
+  }
+  if (jsonOutput) {
+    console.log(JSON.stringify(detail, null, 2));
+    return;
+  }
+  const data = detail.data ?? {};
+  const username = data.username ?? data.email ?? data.user ?? "";
+  console.log(`Credential: ${detail.name}  (${detail.id})`);
+  console.log(`  Application:          ${credSummary.propertyName ?? credSummary.propertyId}`);
+  console.log(`  Auth provider:        ${detail.authProvider ?? "(unknown)"}`);
+  console.log(`  Login URL:            ${detail.loginUrl ?? "(not set)"}`);
+  console.log(`  Post-login URL:       ${detail.postLoginStartUrl ?? "(not set)"}`);
+  if (username) console.log(`  Username:             ${username}`);
+  if (data.password) console.log(`  Password:             ${data.password}`);
+  if (data.mfaSecret) console.log(`  MFA secret:           ${data.mfaSecret}`);
+  console.log("");
+  console.log("  Login instructions:");
+  if (detail.loginInstructions) {
+    for (const line of detail.loginInstructions.split("\n")) {
+      console.log(`    ${line}`);
+    }
+  } else {
+    console.log("    (none)");
+  }
+}
+async function handleTest(argv, apiUrl, token) {
+  const jsonOutput = hasFlag(argv, "--json");
+  const propertyArg = getApplicationArg(argv);
+  const credArg = argv.find((a) => !a.startsWith("-"));
+  if (!credArg) {
+    console.error("Error: Missing credential ID or name.");
+    console.error("Usage: canary credential test <credId> [--application <name|id>]");
+    process.exit(1);
+  }
+  const credentials = await fetchCredentials(apiUrl, token);
+  const candidates = credentials.filter(
+    (c) => c.id === credArg || c.name.toLowerCase() === credArg.toLowerCase()
+  );
+  let credSummary;
+  if (candidates.length === 0) {
+    console.error(`Error: Credential "${credArg}" not found.`);
+    process.exit(1);
+  } else if (candidates.length === 1) {
+    credSummary = candidates[0];
+  } else {
+    if (!propertyArg) {
+      console.error(`Error: Multiple credentials match "${credArg}". Pass --application to disambiguate.`);
+      for (const c of candidates) {
+        console.error(`  - ${c.id}  (${c.propertyName ?? c.propertyId})`);
+      }
+      process.exit(1);
+    }
+    const lower = propertyArg.toLowerCase();
+    credSummary = candidates.find(
+      (c) => c.propertyId === propertyArg || c.propertyName && c.propertyName.toLowerCase() === lower
+    );
+    if (!credSummary) {
+      console.error(`Error: No credential named "${credArg}" on application "${propertyArg}".`);
+      process.exit(1);
+    }
+  }
+  const detail = await fetchCredentialDetail(apiUrl, token, credSummary.propertyId, credSummary.id);
+  if (!detail) {
+    console.error(`Error: Failed to load credential ${credSummary.id}.`);
+    process.exit(1);
+  }
+  if (detail.authProvider === "api_key") {
+    console.error(
+      `Error: Credential "${detail.name}" uses the api_key auth provider. The browser login test is only valid for browser credentials.`
+    );
+    process.exit(1);
+  }
+  const startRes = await apiRequest(
+    apiUrl,
+    token,
+    "POST",
+    `/org/properties/${credSummary.propertyId}/credentials/${credSummary.id}/mcp-test/browser-stream`
+  );
+  if (!startRes.ok || !startRes.streamId) {
+    console.error(`Error: ${startRes.error ?? "Failed to start browser login test"}`);
+    process.exit(1);
+  }
+  const { streamId } = startRes;
+  if (!jsonOutput) {
+    console.log(`Starting browser login test for "${detail.name}" (stream ${streamId})...`);
+  }
+  const streamRes = await fetch(`${apiUrl}/browser-stream/${streamId}/stream`, {
+    headers: { Authorization: `Bearer ${token}`, Accept: "text/event-stream" }
+  });
+  if (!streamRes.ok || !streamRes.body) {
+    console.error(`Failed to connect to event stream: ${streamRes.status}`);
+    process.exit(1);
+  }
+  let exitCode = 0;
+  let done = false;
+  const parser = createParser({
+    onEvent: (event) => {
+      if (!event.data) return;
+      let data;
+      try {
+        data = JSON.parse(event.data);
+      } catch {
+        return;
+      }
+      if (jsonOutput) {
+        console.log(JSON.stringify({ event: event.event, data }));
+      } else if (event.event === "browser.action") {
+        const action = data;
+        console.log(`  \u2192 ${action.type ?? "action"}${action.description ? `: ${action.description}` : ""}`);
+      } else if (event.event === "browser.status") {
+        const status = data;
+        if (status.status) {
+          console.log(`[${status.status}]${status.message ? ` ${status.message}` : ""}`);
+        }
+      }
+      if (event.event === "browser.status") {
+        const status = data;
+        if (status.status === "disconnected" || status.status === "error") {
+          done = true;
+          if (status.status === "error") exitCode = 1;
+        }
+      }
+    }
+  });
+  const reader = streamRes.body.getReader();
+  const decoder = new TextDecoder();
+  while (!done) {
+    const { value, done: streamDone } = await reader.read();
+    if (streamDone) break;
+    parser.feed(decoder.decode(value, { stream: true }));
+  }
+  process.exit(exitCode);
+}
+async function runCredential(argv) {
+  const [subCommand, ...rest] = argv;
+  if (!subCommand || subCommand === "help" || hasFlag(argv, "--help", "-h")) {
+    printCredentialHelp();
+    return;
+  }
+  const { apiUrl, token } = await resolveConfig(rest);
+  switch (subCommand) {
+    case "list":
+      await handleList(rest, apiUrl, token);
+      return;
+    case "get":
+      await handleGet(rest, apiUrl, token);
+      return;
+    case "create":
+      await handleCreate(rest, apiUrl, token);
+      return;
+    case "update":
+      await handleUpdate(rest, apiUrl, token);
+      return;
+    case "test":
+      await handleTest(rest, apiUrl, token);
+      return;
+    default:
+      console.error(`Unknown credential sub-command: ${subCommand}`);
+      printCredentialHelp();
+      process.exit(1);
+  }
+}
+export {
+  runCredential
+};
+//# sourceMappingURL=credential-COLTBV6D.js.map

package/dist/credential-COLTBV6D.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/credential.ts"],"sourcesContent":["/**\n * CLI Credential Commands\n *\n * List, inspect, and update credentials for workflow authoring.\n *\n * @module credential\n */\n\nimport process from 'node:process';\nimport { createParser, type EventSourceMessage } from 'eventsource-parser';\nimport { resolveConfig, getArgValue, hasFlag } from './auth.js';\nimport { apiRequest, fetchProperties, getApplicationArg, type CredentialListItem } from './cli-helpers.js';\nimport { apiFetch, exitOnFailure } from './api-fetch.js';\n\nasync function fetchCredentials(apiUrl: string, token: string): Promise<CredentialListItem[]> {\n  const result = await apiFetch(`${apiUrl}/org/credentials`, {\n    headers: { Authorization: `Bearer ${token}` },\n    token,\n  });\n\n  if (!result.ok) exitOnFailure(result.failure);\n\n  const data = (await result.response.json()) as { ok: boolean; items: CredentialListItem[] };\n  return data.items ?? [];\n}\n\nfunction printCredentialHelp(): void {\n  console.log(\n    [\n      'Usage: canary credential <sub-command> [options]',\n      '',\n      'Sub-commands:',\n      '  list [options]                  List credentials with environment info',\n      '  get <credId|name> [options]     Print credential login bundle (URL + instructions + username/password)',\n      '  create [options]                Create a new credential',\n      '  update <credId> [options]       Update credential fields',\n      '  test <credId> [options]         Run the browser login test for a credential',\n      '',\n      'List options:',\n      '  --application <name>  Filter by application name (alias: --property)',\n      '  --json               Output raw JSON',\n      '',\n      'Create options:',\n      '  --application <name|id>      Application to attach to (required; alias: --property)',\n      '  --name <name>                Credential name (required)',\n      '  --login-url <url>            Login URL',\n      '  --login-instructions <text>  Login instructions',\n      '  --username <user>            Username (stored encrypted)',\n      '  --password <pw>              Password (or set CANARY_CRED_PASSWORD)',\n      '  --api-key <key>              API key (or set CANARY_CRED_API_KEY)',\n      '  --mfa-secret <secret>        MFA seed (or set CANARY_CRED_MFA_SECRET)',\n      '  --json                       Output raw JSON',\n      '',\n      'Update options:',\n      '  --login-url <url>          Set the login URL',\n      '  --name <name>              Set the credential name',\n      '  --role <role>              Set the role (admin, user, viewer, custom)',\n      '  --login-instructions <text>  Set login instructions',\n      '  --json                     Output raw JSON',\n      '',\n      'Test options:',\n      '  --application <name|id>    Disambiguate when <credId> is a name (alias: --property)',\n      '  --json                     Stream raw SSE events as JSON',\n      '',\n      'Common options:',\n      '  --env <env>          Target environment (prod, dev, local)',\n      '  --api-url <url>      API URL override',\n      '  --token <key>        API token override',\n    ].join('\\n')\n  );\n}\n\nasync function handleList(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const jsonFlag = hasFlag(argv, '--json');\n  const propertyFilter = getApplicationArg(argv);\n\n  let items = await fetchCredentials(apiUrl, token);\n\n  if (propertyFilter) {\n    const lower = propertyFilter.toLowerCase();\n    items = items.filter(\n      (c) =>\n        c.propertyId === propertyFilter ||\n        (c.propertyName && c.propertyName.toLowerCase().includes(lower))\n    );\n  }\n\n  // Filter out ephemeral credentials for cleaner output\n  items = items.filter((c) => !(c as unknown as { isEphemeral?: boolean }).isEphemeral);\n\n  if (jsonFlag) {\n    console.log(JSON.stringify(items, null, 2));\n    return;\n  }\n\n  if (items.length === 0) {\n    console.log('No credentials found.');\n    return;\n  }\n\n  console.log(`\\nCredentials (${items.length}):\\n`);\n  for (const c of items) {\n    const property = c.propertyName ?? c.propertyId;\n    const env = c.environmentName ? ` | ${c.environmentName}` : '';\n    const baseUrl = c.propertyBaseUrl ? ` | ${c.propertyBaseUrl}` : '';\n    const loginUrl = c.loginUrl ? `    Login URL: ${c.loginUrl}\\n` : '';\n    console.log(`  ${c.name}`);\n    console.log(`    ID: ${c.id}`);\n    console.log(`    Application: ${property}${env}${baseUrl}`);\n    if (loginUrl) process.stdout.write(loginUrl);\n    console.log('');\n  }\n}\n\nasync function handleUpdate(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const credId = argv.find((a) => !a.startsWith('-'));\n  if (!credId) {\n    console.error('Error: Missing credential ID.');\n    console.error('Usage: canary credential update <credId> --login-url <url> [--name <name>] [--role <role>]');\n    process.exit(1);\n  }\n\n  const loginUrl = getArgValue(argv, '--login-url');\n  const name = getArgValue(argv, '--name');\n  const role = getArgValue(argv, '--role');\n  const loginInstructions = getArgValue(argv, '--login-instructions');\n  const jsonOutput = hasFlag(argv, '--json');\n\n  if (!loginUrl && !name && !role && !loginInstructions) {\n    console.error(\n      'Error: No fields to update. Provide at least one of: --login-url, --name, --role, --login-instructions'\n    );\n    process.exit(1);\n  }\n\n  const validRoles = ['admin', 'user', 'viewer', 'custom'];\n  if (role && !validRoles.includes(role)) {\n    console.error(`Error: Invalid role \"${role}\". Must be one of: ${validRoles.join(', ')}`);\n    process.exit(1);\n  }\n\n  // Auto-resolve propertyId from credential list\n  const credentials = await fetchCredentials(apiUrl, token);\n  const credential = credentials.find((c) => c.id === credId);\n  if (!credential) {\n    console.error(`Error: Credential ${credId} not found.`);\n    if (credentials.length > 0) {\n      console.error('\\nAvailable credentials:');\n      for (const c of credentials.slice(0, 10)) {\n        console.error(`  ${c.id}  ${c.name}  (${c.propertyName ?? c.propertyId})`);\n      }\n    }\n    process.exit(1);\n  }\n\n  const body: Record<string, unknown> = {};\n  if (loginUrl !== undefined) body.loginUrl = loginUrl;\n  if (name !== undefined) body.name = name;\n  if (role !== undefined) body.role = role;\n  if (loginInstructions !== undefined) body.loginInstructions = loginInstructions;\n\n  const result = await apiRequest<{ ok: boolean; error?: string }>(\n    apiUrl,\n    token,\n    'PUT',\n    `/org/properties/${credential.propertyId}/credentials/${credId}`,\n    body\n  );\n\n  if (!result.ok) {\n    if (jsonOutput) {\n      console.log(JSON.stringify({ ok: false, error: result.error ?? 'Unknown error' }, null, 2));\n    } else {\n      console.error(`Error: ${result.error ?? 'Unknown error'}`);\n    }\n    process.exit(1);\n  }\n\n  if (jsonOutput) {\n    console.log(JSON.stringify({ ok: true, credentialId: credId, updated: body }, null, 2));\n    return;\n  }\n\n  console.log(`Updated \"${credential.name}\" (${credId}):`);\n  if (loginUrl !== undefined) {\n    console.log(`  loginUrl: ${credential.loginUrl ?? '(none)'} -> ${loginUrl}`);\n  }\n  if (name !== undefined) {\n    console.log(`  name: ${credential.name} -> ${name}`);\n  }\n  if (role !== undefined) {\n    console.log(`  role: -> ${role}`);\n  }\n  if (loginInstructions !== undefined) {\n    console.log(`  loginInstructions: updated`);\n  }\n}\n\nasync function handleCreate(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const jsonOutput = hasFlag(argv, '--json');\n  const propertyArg = getApplicationArg(argv);\n  const name = getArgValue(argv, '--name');\n  const loginUrl = getArgValue(argv, '--login-url');\n  const loginInstructions = getArgValue(argv, '--login-instructions');\n  const username = getArgValue(argv, '--username');\n  const password = getArgValue(argv, '--password') ?? process.env.CANARY_CRED_PASSWORD;\n  const apiKey = getArgValue(argv, '--api-key') ?? process.env.CANARY_CRED_API_KEY;\n  const mfaSecret = getArgValue(argv, '--mfa-secret') ?? process.env.CANARY_CRED_MFA_SECRET;\n\n  if (!propertyArg || !name) {\n    console.error('Error: --application and --name are required (alias: --property).');\n    console.error('Usage: canary credential create --application <name|id> --name <name> [options]');\n    process.exit(1);\n  }\n\n  const properties = await fetchProperties(apiUrl, token);\n  const property = properties.find(\n    (p) => p.id === propertyArg || p.name.toLowerCase() === propertyArg.toLowerCase()\n  );\n  if (!property) {\n    console.error(`Error: Application \"${propertyArg}\" not found.`);\n    if (properties.length > 0) {\n      console.error('Available applications:');\n      for (const p of properties) console.error(`  - ${p.name} (${p.id})`);\n    }\n    process.exit(1);\n  }\n\n  const data: Record<string, unknown> = {};\n  if (username !== undefined) data.username = username;\n  if (password !== undefined) data.password = password;\n  if (apiKey !== undefined) data.apiKey = apiKey;\n  if (mfaSecret !== undefined) data.mfaSecret = mfaSecret;\n\n  const body: Record<string, unknown> = { name, data };\n  if (loginUrl !== undefined) body.loginUrl = loginUrl;\n  if (loginInstructions !== undefined) body.loginInstructions = loginInstructions;\n\n  const result = await apiRequest<{\n    ok: boolean;\n    id?: string;\n    credential?: { id: string };\n    error?: string;\n  }>(apiUrl, token, 'POST', `/org/properties/${property.id}/credentials`, body);\n\n  if (!result.ok) {\n    if (jsonOutput) {\n      console.log(JSON.stringify(result, null, 2));\n    } else {\n      console.error(`Error: ${result.error ?? 'Unknown error'}`);\n    }\n    process.exit(1);\n  }\n\n  if (jsonOutput) {\n    console.log(JSON.stringify(result, null, 2));\n    return;\n  }\n\n  console.log(`Created credential \"${name}\" (${result.id}) on application \"${property.name}\"`);\n}\n\ntype CredentialDetail = {\n  id: string;\n  name: string;\n  authProvider?: string;\n  loginUrl?: string | null;\n  loginInstructions?: string | null;\n  postLoginStartUrl?: string | null;\n  data?: {\n    username?: string;\n    password?: string;\n    email?: string;\n    user?: string;\n    mfaSecret?: string;\n    apiKey?: string;\n    customHeaders?: Record<string, string>;\n    [key: string]: unknown;\n  } | null;\n};\n\nasync function fetchCredentialDetail(\n  apiUrl: string,\n  token: string,\n  propertyId: string,\n  credId: string\n): Promise<CredentialDetail | null> {\n  const result = await apiRequest<{ ok: boolean; credential?: CredentialDetail; error?: string }>(\n    apiUrl,\n    token,\n    'GET',\n    `/org/properties/${propertyId}/credentials/${credId}`\n  );\n  if (!result.ok || !result.credential) return null;\n  return result.credential;\n}\n\nasync function handleGet(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const jsonOutput = hasFlag(argv, '--json');\n  const propertyArg = getApplicationArg(argv);\n  const credArg = argv.find((a) => !a.startsWith('-'));\n\n  if (!credArg) {\n    console.error('Error: Missing credential ID or name.');\n    console.error('Usage: canary credential get <credId|name> [--application <name|id>] [--json]');\n    process.exit(1);\n  }\n\n  const credentials = await fetchCredentials(apiUrl, token);\n  const candidates = credentials.filter(\n    (c) => c.id === credArg || c.name.toLowerCase() === credArg.toLowerCase()\n  );\n\n  let credSummary: CredentialListItem | undefined;\n  if (candidates.length === 0) {\n    console.error(`Error: Credential \"${credArg}\" not found.`);\n    process.exit(1);\n  } else if (candidates.length === 1) {\n    credSummary = candidates[0];\n  } else {\n    if (!propertyArg) {\n      console.error(`Error: Multiple credentials match \"${credArg}\". Pass --application to disambiguate.`);\n      for (const c of candidates) {\n        console.error(`  - ${c.id}  (${c.propertyName ?? c.propertyId})`);\n      }\n      process.exit(1);\n    }\n    const lower = propertyArg.toLowerCase();\n    credSummary = candidates.find(\n      (c) => c.propertyId === propertyArg || (c.propertyName && c.propertyName.toLowerCase() === lower)\n    );\n    if (!credSummary) {\n      console.error(`Error: No credential named \"${credArg}\" on application \"${propertyArg}\".`);\n      process.exit(1);\n    }\n  }\n\n  const detail = await fetchCredentialDetail(apiUrl, token, credSummary.propertyId, credSummary.id);\n  if (!detail) {\n    console.error(`Error: Failed to load credential ${credSummary.id}.`);\n    process.exit(1);\n  }\n\n  if (jsonOutput) {\n    console.log(JSON.stringify(detail, null, 2));\n    return;\n  }\n\n  const data = detail.data ?? {};\n  const username = data.username ?? data.email ?? data.user ?? '';\n  console.log(`Credential: ${detail.name}  (${detail.id})`);\n  console.log(`  Application:          ${credSummary.propertyName ?? credSummary.propertyId}`);\n  console.log(`  Auth provider:        ${detail.authProvider ?? '(unknown)'}`);\n  console.log(`  Login URL:            ${detail.loginUrl ?? '(not set)'}`);\n  console.log(`  Post-login URL:       ${detail.postLoginStartUrl ?? '(not set)'}`);\n  if (username) console.log(`  Username:             ${username}`);\n  if (data.password) console.log(`  Password:             ${data.password}`);\n  if (data.mfaSecret) console.log(`  MFA secret:           ${data.mfaSecret}`);\n  console.log('');\n  console.log('  Login instructions:');\n  if (detail.loginInstructions) {\n    for (const line of detail.loginInstructions.split('\\n')) {\n      console.log(`    ${line}`);\n    }\n  } else {\n    console.log('    (none)');\n  }\n}\n\nasync function handleTest(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const jsonOutput = hasFlag(argv, '--json');\n  const propertyArg = getApplicationArg(argv);\n  const credArg = argv.find((a) => !a.startsWith('-'));\n\n  if (!credArg) {\n    console.error('Error: Missing credential ID or name.');\n    console.error('Usage: canary credential test <credId> [--application <name|id>]');\n    process.exit(1);\n  }\n\n  const credentials = await fetchCredentials(apiUrl, token);\n  const candidates = credentials.filter(\n    (c) => c.id === credArg || c.name.toLowerCase() === credArg.toLowerCase()\n  );\n  let credSummary: CredentialListItem | undefined;\n  if (candidates.length === 0) {\n    console.error(`Error: Credential \"${credArg}\" not found.`);\n    process.exit(1);\n  } else if (candidates.length === 1) {\n    credSummary = candidates[0];\n  } else {\n    if (!propertyArg) {\n      console.error(`Error: Multiple credentials match \"${credArg}\". Pass --application to disambiguate.`);\n      for (const c of candidates) {\n        console.error(`  - ${c.id}  (${c.propertyName ?? c.propertyId})`);\n      }\n      process.exit(1);\n    }\n    const lower = propertyArg.toLowerCase();\n    credSummary = candidates.find(\n      (c) => c.propertyId === propertyArg || (c.propertyName && c.propertyName.toLowerCase() === lower)\n    );\n    if (!credSummary) {\n      console.error(`Error: No credential named \"${credArg}\" on application \"${propertyArg}\".`);\n      process.exit(1);\n    }\n  }\n\n  const detail = await fetchCredentialDetail(apiUrl, token, credSummary.propertyId, credSummary.id);\n  if (!detail) {\n    console.error(`Error: Failed to load credential ${credSummary.id}.`);\n    process.exit(1);\n  }\n\n  if (detail.authProvider === 'api_key') {\n    console.error(\n      `Error: Credential \"${detail.name}\" uses the api_key auth provider. The browser login test is only valid for browser credentials.`\n    );\n    process.exit(1);\n  }\n\n  const startRes = await apiRequest<{ ok: boolean; streamId?: string; error?: string }>(\n    apiUrl,\n    token,\n    'POST',\n    `/org/properties/${credSummary.propertyId}/credentials/${credSummary.id}/mcp-test/browser-stream`\n  );\n\n  if (!startRes.ok || !startRes.streamId) {\n    console.error(`Error: ${startRes.error ?? 'Failed to start browser login test'}`);\n    process.exit(1);\n  }\n\n  const { streamId } = startRes;\n  if (!jsonOutput) {\n    console.log(`Starting browser login test for \"${detail.name}\" (stream ${streamId})...`);\n  }\n\n  const streamRes = await fetch(`${apiUrl}/browser-stream/${streamId}/stream`, {\n    headers: { Authorization: `Bearer ${token}`, Accept: 'text/event-stream' },\n  });\n\n  if (!streamRes.ok || !streamRes.body) {\n    console.error(`Failed to connect to event stream: ${streamRes.status}`);\n    process.exit(1);\n  }\n\n  let exitCode = 0;\n  let done = false;\n\n  const parser = createParser({\n    onEvent: (event: EventSourceMessage) => {\n      if (!event.data) return;\n      let data: unknown;\n      try {\n        data = JSON.parse(event.data);\n      } catch {\n        return;\n      }\n\n      if (jsonOutput) {\n        console.log(JSON.stringify({ event: event.event, data }));\n      } else if (event.event === 'browser.action') {\n        const action = data as { type?: string; description?: string };\n        console.log(`  → ${action.type ?? 'action'}${action.description ? `: ${action.description}` : ''}`);\n      } else if (event.event === 'browser.status') {\n        const status = data as { status?: string; message?: string };\n        if (status.status) {\n          console.log(`[${status.status}]${status.message ? ` ${status.message}` : ''}`);\n        }\n      }\n\n      if (event.event === 'browser.status') {\n        const status = data as { status?: string };\n        if (status.status === 'disconnected' || status.status === 'error') {\n          done = true;\n          if (status.status === 'error') exitCode = 1;\n        }\n      }\n    },\n  });\n\n  const reader = streamRes.body.getReader();\n  const decoder = new TextDecoder();\n  while (!done) {\n    const { value, done: streamDone } = await reader.read();\n    if (streamDone) break;\n    parser.feed(decoder.decode(value, { stream: true }));\n  }\n\n  process.exit(exitCode);\n}\n\nexport async function runCredential(argv: string[]): Promise<void> {\n  const [subCommand, ...rest] = argv;\n\n  if (!subCommand || subCommand === 'help' || hasFlag(argv, '--help', '-h')) {\n    printCredentialHelp();\n    return;\n  }\n\n  const { apiUrl, token } = await resolveConfig(rest);\n\n  switch (subCommand) {\n    case 'list':\n      await handleList(rest, apiUrl, token);\n      return;\n    case 'get':\n      await handleGet(rest, apiUrl, token);\n      return;\n    case 'create':\n      await handleCreate(rest, apiUrl, token);\n      return;\n    case 'update':\n      await handleUpdate(rest, apiUrl, token);\n      return;\n    case 'test':\n      await handleTest(rest, apiUrl, token);\n      return;\n    default:\n      console.error(`Unknown credential sub-command: ${subCommand}`);\n      printCredentialHelp();\n      process.exit(1);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAQA,OAAO,aAAa;AACpB,SAAS,oBAA6C;AAKtD,eAAe,iBAAiB,QAAgB,OAA8C;AAC5F,QAAM,SAAS,MAAM,SAAS,GAAG,MAAM,oBAAoB;AAAA,IACzD,SAAS,EAAE,eAAe,UAAU,KAAK,GAAG;AAAA,IAC5C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,GAAI,eAAc,OAAO,OAAO;AAE5C,QAAM,OAAQ,MAAM,OAAO,SAAS,KAAK;AACzC,SAAO,KAAK,SAAS,CAAC;AACxB;AAEA,SAAS,sBAA4B;AACnC,UAAQ;AAAA,IACN;AAAA,MACE;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,EAAE,KAAK,IAAI;AAAA,EACb;AACF;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAA8B;AACtF,QAAM,WAAW,QAAQ,MAAM,QAAQ;AACvC,QAAM,iBAAiB,kBAAkB,IAAI;AAE7C,MAAI,QAAQ,MAAM,iBAAiB,QAAQ,KAAK;AAEhD,MAAI,gBAAgB;AAClB,UAAM,QAAQ,eAAe,YAAY;AACzC,YAAQ,MAAM;AAAA,MACZ,CAAC,MACC,EAAE,eAAe,kBAChB,EAAE,gBAAgB,EAAE,aAAa,YAAY,EAAE,SAAS,KAAK;AAAA,IAClE;AAAA,EACF;AAGA,UAAQ,MAAM,OAAO,CAAC,MAAM,CAAE,EAA2C,WAAW;AAEpF,MAAI,UAAU;AACZ,YAAQ,IAAI,KAAK,UAAU,OAAO,MAAM,CAAC,CAAC;AAC1C;AAAA,EACF;AAEA,MAAI,MAAM,WAAW,GAAG;AACtB,YAAQ,IAAI,uBAAuB;AACnC;AAAA,EACF;AAEA,UAAQ,IAAI;AAAA,eAAkB,MAAM,MAAM;AAAA,CAAM;AAChD,aAAW,KAAK,OAAO;AACrB,UAAM,WAAW,EAAE,gBAAgB,EAAE;AACrC,UAAM,MAAM,EAAE,kBAAkB,MAAM,EAAE,eAAe,KAAK;AAC5D,UAAM,UAAU,EAAE,kBAAkB,MAAM,EAAE,eAAe,KAAK;AAChE,UAAM,WAAW,EAAE,WAAW,kBAAkB,EAAE,QAAQ;AAAA,IAAO;AACjE,YAAQ,IAAI,KAAK,EAAE,IAAI,EAAE;AACzB,YAAQ,IAAI,WAAW,EAAE,EAAE,EAAE;AAC7B,YAAQ,IAAI,oBAAoB,QAAQ,GAAG,GAAG,GAAG,OAAO,EAAE;AAC1D,QAAI,SAAU,SAAQ,OAAO,MAAM,QAAQ;AAC3C,YAAQ,IAAI,EAAE;AAAA,EAChB;AACF;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,CAAC;AAClD,MAAI,CAAC,QAAQ;AACX,YAAQ,MAAM,+BAA+B;AAC7C,YAAQ,MAAM,4FAA4F;AAC1G,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,YAAY,MAAM,aAAa;AAChD,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,oBAAoB,YAAY,MAAM,sBAAsB;AAClE,QAAM,aAAa,QAAQ,MAAM,QAAQ;AAEzC,MAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,mBAAmB;AACrD,YAAQ;AAAA,MACN;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,CAAC,SAAS,QAAQ,UAAU,QAAQ;AACvD,MAAI,QAAQ,CAAC,WAAW,SAAS,IAAI,GAAG;AACtC,YAAQ,MAAM,wBAAwB,IAAI,sBAAsB,WAAW,KAAK,IAAI,CAAC,EAAE;AACvF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAGA,QAAM,cAAc,MAAM,iBAAiB,QAAQ,KAAK;AACxD,QAAM,aAAa,YAAY,KAAK,CAAC,MAAM,EAAE,OAAO,MAAM;AAC1D,MAAI,CAAC,YAAY;AACf,YAAQ,MAAM,qBAAqB,MAAM,aAAa;AACtD,QAAI,YAAY,SAAS,GAAG;AAC1B,cAAQ,MAAM,0BAA0B;AACxC,iBAAW,KAAK,YAAY,MAAM,GAAG,EAAE,GAAG;AACxC,gBAAQ,MAAM,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,MAAM,EAAE,gBAAgB,EAAE,UAAU,GAAG;AAAA,MAC3E;AAAA,IACF;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAgC,CAAC;AACvC,MAAI,aAAa,OAAW,MAAK,WAAW;AAC5C,MAAI,SAAS,OAAW,MAAK,OAAO;AACpC,MAAI,SAAS,OAAW,MAAK,OAAO;AACpC,MAAI,sBAAsB,OAAW,MAAK,oBAAoB;AAE9D,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,WAAW,UAAU,gBAAgB,MAAM;AAAA,IAC9D;AAAA,EACF;AAEA,MAAI,CAAC,OAAO,IAAI;AACd,QAAI,YAAY;AACd,cAAQ,IAAI,KAAK,UAAU,EAAE,IAAI,OAAO,OAAO,OAAO,SAAS,gBAAgB,GAAG,MAAM,CAAC,CAAC;AAAA,IAC5F,OAAO;AACL,cAAQ,MAAM,UAAU,OAAO,SAAS,eAAe,EAAE;AAAA,IAC3D;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,YAAY;AACd,YAAQ,IAAI,KAAK,UAAU,EAAE,IAAI,MAAM,cAAc,QAAQ,SAAS,KAAK,GAAG,MAAM,CAAC,CAAC;AACtF;AAAA,EACF;AAEA,UAAQ,IAAI,YAAY,WAAW,IAAI,MAAM,MAAM,IAAI;AACvD,MAAI,aAAa,QAAW;AAC1B,YAAQ,IAAI,eAAe,WAAW,YAAY,QAAQ,OAAO,QAAQ,EAAE;AAAA,EAC7E;AACA,MAAI,SAAS,QAAW;AACtB,YAAQ,IAAI,WAAW,WAAW,IAAI,OAAO,IAAI,EAAE;AAAA,EACrD;AACA,MAAI,SAAS,QAAW;AACtB,YAAQ,IAAI,cAAc,IAAI,EAAE;AAAA,EAClC;AACA,MAAI,sBAAsB,QAAW;AACnC,YAAQ,IAAI,8BAA8B;AAAA,EAC5C;AACF;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,aAAa,QAAQ,MAAM,QAAQ;AACzC,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,WAAW,YAAY,MAAM,aAAa;AAChD,QAAM,oBAAoB,YAAY,MAAM,sBAAsB;AAClE,QAAM,WAAW,YAAY,MAAM,YAAY;AAC/C,QAAM,WAAW,YAAY,MAAM,YAAY,KAAK,QAAQ,IAAI;AAChE,QAAM,SAAS,YAAY,MAAM,WAAW,KAAK,QAAQ,IAAI;AAC7D,QAAM,YAAY,YAAY,MAAM,cAAc,KAAK,QAAQ,IAAI;AAEnE,MAAI,CAAC,eAAe,CAAC,MAAM;AACzB,YAAQ,MAAM,mEAAmE;AACjF,YAAQ,MAAM,iFAAiF;AAC/F,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,aAAa,MAAM,gBAAgB,QAAQ,KAAK;AACtD,QAAM,WAAW,WAAW;AAAA,IAC1B,CAAC,MAAM,EAAE,OAAO,eAAe,EAAE,KAAK,YAAY,MAAM,YAAY,YAAY;AAAA,EAClF;AACA,MAAI,CAAC,UAAU;AACb,YAAQ,MAAM,uBAAuB,WAAW,cAAc;AAC9D,QAAI,WAAW,SAAS,GAAG;AACzB,cAAQ,MAAM,yBAAyB;AACvC,iBAAW,KAAK,WAAY,SAAQ,MAAM,OAAO,EAAE,IAAI,KAAK,EAAE,EAAE,GAAG;AAAA,IACrE;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,OAAgC,CAAC;AACvC,MAAI,aAAa,OAAW,MAAK,WAAW;AAC5C,MAAI,aAAa,OAAW,MAAK,WAAW;AAC5C,MAAI,WAAW,OAAW,MAAK,SAAS;AACxC,MAAI,cAAc,OAAW,MAAK,YAAY;AAE9C,QAAM,OAAgC,EAAE,MAAM,KAAK;AACnD,MAAI,aAAa,OAAW,MAAK,WAAW;AAC5C,MAAI,sBAAsB,OAAW,MAAK,oBAAoB;AAE9D,QAAM,SAAS,MAAM,WAKlB,QAAQ,OAAO,QAAQ,mBAAmB,SAAS,EAAE,gBAAgB,IAAI;AAE5E,MAAI,CAAC,OAAO,IAAI;AACd,QAAI,YAAY;AACd,cAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,IAC7C,OAAO;AACL,cAAQ,MAAM,UAAU,OAAO,SAAS,eAAe,EAAE;AAAA,IAC3D;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,YAAY;AACd,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC3C;AAAA,EACF;AAEA,UAAQ,IAAI,uBAAuB,IAAI,MAAM,OAAO,EAAE,qBAAqB,SAAS,IAAI,GAAG;AAC7F;AAqBA,eAAe,sBACb,QACA,OACA,YACA,QACkC;AAClC,QAAM,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,UAAU,gBAAgB,MAAM;AAAA,EACrD;AACA,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,WAAY,QAAO;AAC7C,SAAO,OAAO;AAChB;AAEA,eAAe,UAAU,MAAgB,QAAgB,OAA8B;AACrF,QAAM,aAAa,QAAQ,MAAM,QAAQ;AACzC,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,CAAC;AAEnD,MAAI,CAAC,SAAS;AACZ,YAAQ,MAAM,uCAAuC;AACrD,YAAQ,MAAM,+EAA+E;AAC7F,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,cAAc,MAAM,iBAAiB,QAAQ,KAAK;AACxD,QAAM,aAAa,YAAY;AAAA,IAC7B,CAAC,MAAM,EAAE,OAAO,WAAW,EAAE,KAAK,YAAY,MAAM,QAAQ,YAAY;AAAA,EAC1E;AAEA,MAAI;AACJ,MAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,MAAM,sBAAsB,OAAO,cAAc;AACzD,YAAQ,KAAK,CAAC;AAAA,EAChB,WAAW,WAAW,WAAW,GAAG;AAClC,kBAAc,WAAW,CAAC;AAAA,EAC5B,OAAO;AACL,QAAI,CAAC,aAAa;AAChB,cAAQ,MAAM,sCAAsC,OAAO,wCAAwC;AACnG,iBAAW,KAAK,YAAY;AAC1B,gBAAQ,MAAM,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,GAAG;AAAA,MAClE;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,QAAQ,YAAY,YAAY;AACtC,kBAAc,WAAW;AAAA,MACvB,CAAC,MAAM,EAAE,eAAe,eAAgB,EAAE,gBAAgB,EAAE,aAAa,YAAY,MAAM;AAAA,IAC7F;AACA,QAAI,CAAC,aAAa;AAChB,cAAQ,MAAM,+BAA+B,OAAO,qBAAqB,WAAW,IAAI;AACxF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,sBAAsB,QAAQ,OAAO,YAAY,YAAY,YAAY,EAAE;AAChG,MAAI,CAAC,QAAQ;AACX,YAAQ,MAAM,oCAAoC,YAAY,EAAE,GAAG;AACnE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,YAAY;AACd,YAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC3C;AAAA,EACF;AAEA,QAAM,OAAO,OAAO,QAAQ,CAAC;AAC7B,QAAM,WAAW,KAAK,YAAY,KAAK,SAAS,KAAK,QAAQ;AAC7D,UAAQ,IAAI,eAAe,OAAO,IAAI,MAAM,OAAO,EAAE,GAAG;AACxD,UAAQ,IAAI,2BAA2B,YAAY,gBAAgB,YAAY,UAAU,EAAE;AAC3F,UAAQ,IAAI,2BAA2B,OAAO,gBAAgB,WAAW,EAAE;AAC3E,UAAQ,IAAI,2BAA2B,OAAO,YAAY,WAAW,EAAE;AACvE,UAAQ,IAAI,2BAA2B,OAAO,qBAAqB,WAAW,EAAE;AAChF,MAAI,SAAU,SAAQ,IAAI,2BAA2B,QAAQ,EAAE;AAC/D,MAAI,KAAK,SAAU,SAAQ,IAAI,2BAA2B,KAAK,QAAQ,EAAE;AACzE,MAAI,KAAK,UAAW,SAAQ,IAAI,2BAA2B,KAAK,SAAS,EAAE;AAC3E,UAAQ,IAAI,EAAE;AACd,UAAQ,IAAI,uBAAuB;AACnC,MAAI,OAAO,mBAAmB;AAC5B,eAAW,QAAQ,OAAO,kBAAkB,MAAM,IAAI,GAAG;AACvD,cAAQ,IAAI,OAAO,IAAI,EAAE;AAAA,IAC3B;AAAA,EACF,OAAO;AACL,YAAQ,IAAI,YAAY;AAAA,EAC1B;AACF;AAEA,eAAe,WAAW,MAAgB,QAAgB,OAA8B;AACtF,QAAM,aAAa,QAAQ,MAAM,QAAQ;AACzC,QAAM,cAAc,kBAAkB,IAAI;AAC1C,QAAM,UAAU,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,CAAC;AAEnD,MAAI,CAAC,SAAS;AACZ,YAAQ,MAAM,uCAAuC;AACrD,YAAQ,MAAM,kEAAkE;AAChF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,cAAc,MAAM,iBAAiB,QAAQ,KAAK;AACxD,QAAM,aAAa,YAAY;AAAA,IAC7B,CAAC,MAAM,EAAE,OAAO,WAAW,EAAE,KAAK,YAAY,MAAM,QAAQ,YAAY;AAAA,EAC1E;AACA,MAAI;AACJ,MAAI,WAAW,WAAW,GAAG;AAC3B,YAAQ,MAAM,sBAAsB,OAAO,cAAc;AACzD,YAAQ,KAAK,CAAC;AAAA,EAChB,WAAW,WAAW,WAAW,GAAG;AAClC,kBAAc,WAAW,CAAC;AAAA,EAC5B,OAAO;AACL,QAAI,CAAC,aAAa;AAChB,cAAQ,MAAM,sCAAsC,OAAO,wCAAwC;AACnG,iBAAW,KAAK,YAAY;AAC1B,gBAAQ,MAAM,OAAO,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,GAAG;AAAA,MAClE;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,UAAM,QAAQ,YAAY,YAAY;AACtC,kBAAc,WAAW;AAAA,MACvB,CAAC,MAAM,EAAE,eAAe,eAAgB,EAAE,gBAAgB,EAAE,aAAa,YAAY,MAAM;AAAA,IAC7F;AACA,QAAI,CAAC,aAAa;AAChB,cAAQ,MAAM,+BAA+B,OAAO,qBAAqB,WAAW,IAAI;AACxF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,SAAS,MAAM,sBAAsB,QAAQ,OAAO,YAAY,YAAY,YAAY,EAAE;AAChG,MAAI,CAAC,QAAQ;AACX,YAAQ,MAAM,oCAAoC,YAAY,EAAE,GAAG;AACnE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,OAAO,iBAAiB,WAAW;AACrC,YAAQ;AAAA,MACN,sBAAsB,OAAO,IAAI;AAAA,IACnC;AACA,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB,YAAY,UAAU,gBAAgB,YAAY,EAAE;AAAA,EACzE;AAEA,MAAI,CAAC,SAAS,MAAM,CAAC,SAAS,UAAU;AACtC,YAAQ,MAAM,UAAU,SAAS,SAAS,oCAAoC,EAAE;AAChF,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,EAAE,SAAS,IAAI;AACrB,MAAI,CAAC,YAAY;AACf,YAAQ,IAAI,oCAAoC,OAAO,IAAI,aAAa,QAAQ,MAAM;AAAA,EACxF;AAEA,QAAM,YAAY,MAAM,MAAM,GAAG,MAAM,mBAAmB,QAAQ,WAAW;AAAA,IAC3E,SAAS,EAAE,eAAe,UAAU,KAAK,IAAI,QAAQ,oBAAoB;AAAA,EAC3E,CAAC;AAED,MAAI,CAAC,UAAU,MAAM,CAAC,UAAU,MAAM;AACpC,YAAQ,MAAM,sCAAsC,UAAU,MAAM,EAAE;AACtE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,MAAI,WAAW;AACf,MAAI,OAAO;AAEX,QAAM,SAAS,aAAa;AAAA,IAC1B,SAAS,CAAC,UAA8B;AACtC,UAAI,CAAC,MAAM,KAAM;AACjB,UAAI;AACJ,UAAI;AACF,eAAO,KAAK,MAAM,MAAM,IAAI;AAAA,MAC9B,QAAQ;AACN;AAAA,MACF;AAEA,UAAI,YAAY;AACd,gBAAQ,IAAI,KAAK,UAAU,EAAE,OAAO,MAAM,OAAO,KAAK,CAAC,CAAC;AAAA,MAC1D,WAAW,MAAM,UAAU,kBAAkB;AAC3C,cAAM,SAAS;AACf,gBAAQ,IAAI,YAAO,OAAO,QAAQ,QAAQ,GAAG,OAAO,cAAc,KAAK,OAAO,WAAW,KAAK,EAAE,EAAE;AAAA,MACpG,WAAW,MAAM,UAAU,kBAAkB;AAC3C,cAAM,SAAS;AACf,YAAI,OAAO,QAAQ;AACjB,kBAAQ,IAAI,IAAI,OAAO,MAAM,IAAI,OAAO,UAAU,IAAI,OAAO,OAAO,KAAK,EAAE,EAAE;AAAA,QAC/E;AAAA,MACF;AAEA,UAAI,MAAM,UAAU,kBAAkB;AACpC,cAAM,SAAS;AACf,YAAI,OAAO,WAAW,kBAAkB,OAAO,WAAW,SAAS;AACjE,iBAAO;AACP,cAAI,OAAO,WAAW,QAAS,YAAW;AAAA,QAC5C;AAAA,MACF;AAAA,IACF;AAAA,EACF,CAAC;AAED,QAAM,SAAS,UAAU,KAAK,UAAU;AACxC,QAAM,UAAU,IAAI,YAAY;AAChC,SAAO,CAAC,MAAM;AACZ,UAAM,EAAE,OAAO,MAAM,WAAW,IAAI,MAAM,OAAO,KAAK;AACtD,QAAI,WAAY;AAChB,WAAO,KAAK,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,EACrD;AAEA,UAAQ,KAAK,QAAQ;AACvB;AAEA,eAAsB,cAAc,MAA+B;AACjE,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAE9B,MAAI,CAAC,cAAc,eAAe,UAAU,QAAQ,MAAM,UAAU,IAAI,GAAG;AACzE,wBAAoB;AACpB;AAAA,EACF;AAEA,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,cAAc,IAAI;AAElD,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC;AAAA,IACF,KAAK;AACH,YAAM,UAAU,MAAM,QAAQ,KAAK;AACnC;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,KAAK;AACtC;AAAA,IACF,KAAK;AACH,YAAM,aAAa,MAAM,QAAQ,KAAK;AACtC;AAAA,IACF,KAAK;AACH,YAAM,WAAW,MAAM,QAAQ,KAAK;AACpC;AAAA,IACF;AACE,cAAQ,MAAM,mCAAmC,UAAU,EAAE;AAC7D,0BAAoB;AACpB,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;","names":[]}