@runcofactor/cli 0.52.0 → 0.53.0

package/dist/{proofs-TXJGAP5F.js → chunk-X7SUSIY3.js}

@@ -1,25 +1,27 @@
 import { createRequire as __cr } from "module"; import { fileURLToPath as __fup } from "url"; import { dirname as __dn } from "path"; const require = __cr(import.meta.url); const __filename = __fup(import.meta.url); const __dirname = __dn(__filename);
 import {
   resolveApplicationId
-} from "./chunk-CYSPCGO6.js";
-import "./chunk-775FI436.js";
+} from "./chunk-JEHHEMUL.js";
 import {
   apiRequest,
-  readStdin
-} from "./chunk-LL6TSQWV.js";
-import "./chunk-S3Q7MDCS.js";
+  getArgValues,
+  getGuideSectionArg,
+  readStdin,
+  readTextOrFile
+} from "./chunk-VKZOHJCE.js";
 import {
   formatProofBlock
-} from "./chunk-76Z6E7XX.js";
+} from "./chunk-4UZN6TVT.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
+  PROOFS_GUIDE_SECTIONS,
+  printGuide,
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
-import "./chunk-TOWZAG3I.js";
+} from "./chunk-MJVUMVLO.js";
 
 // src/proofs.ts
 import process from "process";
@@ -29,12 +31,18 @@ var CONNECTION_FLAGS = /* @__PURE__ */ new Set(["--api-url", "--token", "--org",
 var HELP = [
   "Usage: cofactor proofs <sub-command>",
   "",
+  "  guide [--json]   Print the offline guide to proving a change with tests (no login needed)",
   "  block <wf_\u2026> <wrun_\u2026> [<wf_\u2026> <wrun_\u2026> \u2026]   Check each test and the run of it you made, and print the proofs block for the pull request description",
   '  block --none "<reason>"            The block for a pull request no test can prove: say why, and what would make a test possible',
   "  status --application <app>|--repo <owner/repo> --pr <n> [--json]   Proofs attached to the pull request",
-  "  attach --pr <n> --application <app> --criterion <n> --test <wf_\u2026> --run <wrun_\u2026> --asserted <text> [--text <text> --detail <text>] [--node <id>] [--sha <sha> --tree <tree>]",
+  "  attach --pr <n> --application <app> --criterion <n> (--test <wf_\u2026> --run <wrun_\u2026> | --perf-run <prun_\u2026>) --asserted <text> [--text <text> --detail <text>] [--node <id> --base <sha>] [--sha <sha> --tree <tree>]",
+  "    Perf evidence must be completed, faster or no-change, and on --sha; a slower run is refused. Attach a newer run and detach stale evidence.",
+  "    A test with any visual_checkpoint node is a UI test; attach runs it at the PR base and shows checkpoint diffs.",
+  "    An approved test that is not a fork is cited as an existing test: its run proves it still works, and it is never promoted.",
+  "  attach --pr <n> --application <app> --criterion <n> --manual --notes <text|@file> [--artifact <https-url>]... [--text <text> --detail <text>] [--sha <sha>]",
+  "    Only when Cofactor cannot prove the criterion: say what you did and why. Passes the check, marked manual; never promotes anything.",
   "  render --pr <n>                              Print the pull request proof block",
-  "  detach --pr <n> --criterion <n>             Remove a criterion and its evidence",
+  "  detach --pr <n> --criterion <n> [--test <wf_\u2026>|--perf-run <prun_\u2026>|--manual]  Remove a criterion or one evidence item",
   "  check --pr <n> --sha <sha> [--body-file <path>|--body -]  Evaluate the pull request proofs"
 ].join("\n");
 async function runProofs(argv) {
@@ -43,6 +51,10 @@ async function runProofs(argv) {
     console.log(HELP);
     return;
   }
+  if (subCommand === "guide") {
+    printGuide(PROOFS_GUIDE_SECTIONS, getGuideSectionArg(rest), hasFlag(rest, "--json"));
+    return;
+  }
   const none = getArgValue(rest, "--none");
   if (subCommand === "block" && hasFlag(rest, "--none")) {
     if (rest.some((arg, i) => !arg.startsWith("-") && rest[i - 1] !== "--none" && !CONNECTION_FLAGS.has(rest[i - 1] ?? ""))) {
@@ -159,19 +171,34 @@ async function handleStatus(argv, apiUrl, token) {
   writeRawOutput(proof.verdict.summaryMarkdown);
 }
 async function handleAttach(argv, apiUrl, token) {
+  if (hasFlag(argv, "--manual")) return handleAttachManual(argv, apiUrl, token);
   const pr = requiredNumber(argv, "--pr");
   const criterion = requiredNumber(argv, "--criterion");
   const application = getArgValue(argv, "--application");
   const test = getArgValue(argv, "--test");
   const run = getArgValue(argv, "--run");
+  const perfRun = getArgValue(argv, "--perf-run");
   const asserted = getArgValue(argv, "--asserted");
-  if (!application || !test || !run || !asserted) {
-    usageError("Usage: cofactor proofs attach --pr <n> --application <app> --criterion <n> --test <wf_\u2026> --run <wrun_\u2026> --asserted <text> [--text <text> --detail <text>]");
-  }
+  const subjectCount = Number(test !== void 0 || run !== void 0) + Number(perfRun !== void 0);
+  if (["--test", "--run", "--perf-run"].some((flag) => flagCount(argv, flag) > 1))
+    usageError("Pass each evidence subject flag at most once.");
+  if (hasFlag(argv, "--test") && !test || hasFlag(argv, "--run") && !run || hasFlag(argv, "--perf-run") && !perfRun)
+    usageError("--test, --run and --perf-run each require a value.");
+  if (!application || !asserted || subjectCount !== 1 || test === void 0 !== (run === void 0))
+    usageError("Usage: cofactor proofs attach --pr <n> --application <app> --criterion <n> (--test <wf_\u2026> --run <wrun_\u2026> | --perf-run <prun_\u2026>) --asserted <text> [--text <text> --detail <text>]");
+  if (hasFlag(argv, "--perf-run") && (hasFlag(argv, "--node") || hasFlag(argv, "--tree") || hasFlag(argv, "--base")))
+    usageError("--node, --tree and --base can only be used with --test.");
   const applicationId = await resolveApplicationId(argv, apiUrl, token);
   const repo = resolveRepo(argv);
-  const { sha, tree } = resolveCheckoutCommit(argv);
-  const body = { repo, application: applicationId, pr, criterion, test, run, asserted, sha, tree };
+  const body = { repo, application: applicationId, pr, criterion, asserted };
+  if (perfRun !== void 0) {
+    body.sha = resolveCleanCheckoutSha(argv);
+    body.perfRun = perfRun;
+  } else {
+    const { sha, tree } = resolveCheckoutCommit(argv);
+    const base = getArgValue(argv, "--base") ?? resolveDefaultBaseCommit();
+    Object.assign(body, { test, run, sha, tree, ...base ? { base } : {} });
+  }
   const text = getArgValue(argv, "--text");
   const detail = getArgValue(argv, "--detail");
   const node = getArgValue(argv, "--node");
@@ -188,6 +215,45 @@ async function handleAttach(argv, apiUrl, token) {
   if (!res.ok || !res.data) return fail(res.error ?? "could not attach proof evidence");
   writeRawOutput(JSON.stringify(res.data, null, 2));
 }
+var MANUAL_USAGE = "Usage: cofactor proofs attach --pr <n> --application <app> --criterion <n> --manual --notes <text|@file> [--artifact <https-url>]... [--text <text> --detail <text>]";
+async function handleAttachManual(argv, apiUrl, token) {
+  const conflicting = ["--test", "--run", "--perf-run", "--asserted", "--node", "--tree", "--base"].filter((flag) => hasFlag(argv, flag));
+  if (conflicting.length > 0)
+    usageError(`--manual takes --notes instead of a test, run or asserted line; remove ${conflicting.join(", ")}.`);
+  const pr = requiredNumber(argv, "--pr");
+  const criterion = requiredNumber(argv, "--criterion");
+  const application = getArgValue(argv, "--application");
+  const notesValue = getArgValue(argv, "--notes");
+  if (!application || !notesValue) usageError(`--manual requires --application and --notes.
+${MANUAL_USAGE}`);
+  const notes = readTextOrFile(notesValue).trim();
+  if (!notes) usageError("--manual requires non-empty --notes: what you did, and why Cofactor could not prove it.");
+  const artifacts = hasFlag(argv, "--artifact") ? getArgValues(argv, "--artifact") : [];
+  const applicationId = await resolveApplicationId(argv, apiUrl, token);
+  const body = {
+    repo: resolveRepo(argv),
+    application: applicationId,
+    pr,
+    criterion,
+    manual: true,
+    notes,
+    artifacts,
+    sha: resolveCleanCheckoutSha(argv)
+  };
+  const text = getArgValue(argv, "--text");
+  const detail = getArgValue(argv, "--detail");
+  if (text !== void 0) body.text = text;
+  if (detail !== void 0) body.detail = detail;
+  const res = await apiRequest(
+    apiUrl,
+    token,
+    "POST",
+    "/proofs/attach",
+    body
+  );
+  if (!res.ok || !res.data) return fail(res.error ?? "could not attach manual evidence");
+  writeRawOutput(JSON.stringify(res.data, null, 2));
+}
 async function handleRender(argv, apiUrl, token) {
   const pr = requiredNumber(argv, "--pr");
   const repo = resolveRepo(argv);
@@ -205,12 +271,21 @@ async function handleDetach(argv, apiUrl, token) {
   const pr = requiredNumber(argv, "--pr");
   const criterion = requiredNumber(argv, "--criterion");
   const repo = resolveRepo(argv);
+  const test = getArgValue(argv, "--test");
+  const perfRun = getArgValue(argv, "--perf-run");
+  const manual = hasFlag(argv, "--manual");
+  if (flagCount(argv, "--test") > 1 || flagCount(argv, "--perf-run") > 1)
+    usageError("Pass each evidence subject flag at most once.");
+  if (Number(test !== void 0) + Number(perfRun !== void 0) + Number(manual) > 1)
+    usageError("Pass at most one of --test, --perf-run and --manual.");
+  if (hasFlag(argv, "--test") && !test || hasFlag(argv, "--perf-run") && !perfRun)
+    usageError("--test and --perf-run each require a value.");
   const res = await apiRequest(
     apiUrl,
     token,
     "POST",
     "/proofs/detach",
-    { repo, pr, criterion }
+    { repo, pr, criterion, ...test ? { test } : {}, ...perfRun ? { perfRun } : {}, ...manual ? { manual: true } : {} }
   );
   if (!res.ok || !res.data) return fail(res.error ?? "could not detach proof criterion");
   writeRawOutput(JSON.stringify(res.data, null, 2));
@@ -300,6 +375,25 @@ function resolveCheckoutCommit(argv) {
   const tree = explicitTree ?? gitRevision("HEAD^{tree}");
   return { sha, tree };
 }
+function resolveCleanCheckoutSha(argv) {
+  if (gitOutput(["status", "--porcelain"])) return fail("the working tree is dirty; commit and push, sync, and run again");
+  return getArgValue(argv, "--sha") ?? gitRevision("HEAD");
+}
+function resolveDefaultBaseCommit() {
+  try {
+    const defaultRef = execFileSync("git", ["symbolic-ref", "refs/remotes/origin/HEAD"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    return execFileSync("git", ["merge-base", "HEAD", defaultRef], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim() || void 0;
+  } catch {
+    process.stderr.write("Could not resolve the default base commit; the server will resolve the current base.\n");
+    return void 0;
+  }
+}
 function gitOutput(args) {
   try {
     return execFileSync("git", args, { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }).trim();
@@ -320,6 +414,9 @@ function requiredNumber(argv, flag) {
   if (!Number.isSafeInteger(parsed) || parsed < 1) usageError(`${flag} must be a positive integer.`);
   return parsed;
 }
+function flagCount(argv, flag) {
+  return argv.filter((arg) => arg === flag).length;
+}
 function usageError(message) {
   console.error(`Error: ${message}`);
   process.exit(1);
@@ -328,9 +425,10 @@ function fail(message) {
   console.error(`Error: ${message}`);
   process.exit(1);
 }
+
 export {
-  parseRepository,
+  runProofs,
   resolveRepo,
-  runProofs
+  parseRepository
 };
-//# sourceMappingURL=proofs-TXJGAP5F.js.map
+//# sourceMappingURL=chunk-X7SUSIY3.js.map

package/dist/chunk-X7SUSIY3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/proofs.ts"],"sourcesContent":["/**\n * `cofactor proofs`: the Cofactor tests a pull request lists as proving it.\n *\n * - `block <wf…> | --none \"<reason>\"` validates the tests (a new draft, or a\n *   fork of an approved test) and prints the block to paste into the pull\n *   request description, so nobody hand-formats one.\n * - `status --application <app> --pr <n>` shows what the pull request lists.\n *\n * Backed by `/proofs/*` in `apps/api/src/proofs/routes.ts`.\n *\n * @module proofs\n */\n\nimport process from 'node:process';\nimport { execFileSync } from 'node:child_process';\nimport { appendFile, readFile } from 'node:fs/promises';\nimport { formatProofBlock, type ClassifiedProof, type EvaluatedProof, type ProofVerdict } from '@chatsdet/types';\nimport { PROOFS_GUIDE_SECTIONS, printGuide } from '@chatsdet/content';\nimport { getArgValue, hasFlag, resolveConfig } from './auth.js';\nimport { apiRequest, getArgValues, getGuideSectionArg, readStdin, readTextOrFile } from './cli-helpers.js';\nimport { writeRawOutput } from './brand.js';\nimport { resolveApplicationId } from './environment.js';\n\ntype ApiResult<T> = { ok: boolean; error?: string; data?: T };\ntype ProofStatusView = {\n  proof: { headSha: string };\n  verdict: ProofVerdict;\n};\n\n/** Flags `resolveConfig` reads, whose values are not positional. */\nconst CONNECTION_FLAGS = new Set(['--api-url', '--token', '--org', '--env']);\n\nconst HELP = [\n  'Usage: cofactor proofs <sub-command>',\n  '',\n  '  guide [--json]   Print the offline guide to proving a change with tests (no login needed)',\n  '  block <wf_…> <wrun_…> [<wf_…> <wrun_…> …]   Check each test and the run of it you made, and print the proofs block for the pull request description',\n  '  block --none \"<reason>\"            The block for a pull request no test can prove: say why, and what would make a test possible',\n  '  status --application <app>|--repo <owner/repo> --pr <n> [--json]   Proofs attached to the pull request',\n  '  attach --pr <n> --application <app> --criterion <n> (--test <wf_…> --run <wrun_…> | --perf-run <prun_…>) --asserted <text> [--text <text> --detail <text>] [--node <id> --base <sha>] [--sha <sha> --tree <tree>]',\n  '    Perf evidence must be completed, faster or no-change, and on --sha; a slower run is refused. Attach a newer run and detach stale evidence.',\n  '    A test with any visual_checkpoint node is a UI test; attach runs it at the PR base and shows checkpoint diffs.',\n  '    An approved test that is not a fork is cited as an existing test: its run proves it still works, and it is never promoted.',\n  '  attach --pr <n> --application <app> --criterion <n> --manual --notes <text|@file> [--artifact <https-url>]... [--text <text> --detail <text>] [--sha <sha>]',\n  '    Only when Cofactor cannot prove the criterion: say what you did and why. Passes the check, marked manual; never promotes anything.',\n  '  render --pr <n>                              Print the pull request proof block',\n  '  detach --pr <n> --criterion <n> [--test <wf_…>|--perf-run <prun_…>|--manual]  Remove a criterion or one evidence item',\n  '  check --pr <n> --sha <sha> [--body-file <path>|--body -]  Evaluate the pull request proofs',\n].join('\\n');\n\nexport async function runProofs(argv: string[]): Promise<void> {\n  const [subCommand, ...rest] = argv;\n  if (!subCommand || subCommand === 'help' || hasFlag(argv, '--help', '-h')) {\n    console.log(HELP);\n    return;\n  }\n  if (subCommand === 'guide') {\n    printGuide(PROOFS_GUIDE_SECTIONS, getGuideSectionArg(rest), hasFlag(rest, '--json'));\n    return;\n  }\n  const none = getArgValue(rest, '--none');\n  // `block --none` needs no server: the reason is the block.\n  if (subCommand === 'block' && hasFlag(rest, '--none')) {\n    if (rest.some((arg, i) => !arg.startsWith('-') && rest[i - 1] !== '--none' && !CONNECTION_FLAGS.has(rest[i - 1] ?? ''))) {\n      console.error('Error: --none is for a pull request no test can prove; list tests or give --none, not both (quote a reason that has several words).');\n      process.exit(1);\n    }\n    if (!none?.trim()) {\n      console.error('Error: --none takes a reason: say why no test is possible, and what would make one possible.');\n      process.exit(1);\n    }\n    writeRawOutput(formatProofBlock({ kind: 'none', reason: none.trim() }));\n    return;\n  }\n  if (subCommand === 'block' && (positional(rest).length === 0 || positional(rest).length % 2 !== 0)) {\n    console.error('Error: list each test (wf_…) with the run of it that passed (wrun_…), or pass --none \"<reason>\".');\n    process.exit(1);\n  }\n  const { apiUrl, token } = await resolveConfig(argv);\n  switch (subCommand) {\n    case 'block':\n      return handleBlock(rest, apiUrl, token);\n    case 'status':\n      return handleStatus(rest, apiUrl, token);\n    case 'attach':\n      return handleAttach(rest, apiUrl, token);\n    case 'render':\n      return handleRender(rest, apiUrl, token);\n    case 'detach':\n      return handleDetach(rest, apiUrl, token);\n    case 'check':\n      return handleCheck(rest, apiUrl, token);\n    default:\n      console.error(`Unknown proofs sub-command: ${subCommand}\\n\\n${HELP}`);\n      process.exit(1);\n  }\n}\n\n/** The words that are not flags or flag values: test ids, each followed by its run id. */\nconst positional = (argv: string[]) => argv.filter((arg, i) => !arg.startsWith('-') && !CONNECTION_FLAGS.has(argv[i - 1] ?? ''));\n\nconst describe = (proof: ClassifiedProof) =>\n  'refusal' in proof\n    ? `refused: ${proof.message}`\n    : proof.kind === 'fork'\n      ? `fork of ${proof.originName}`\n      : 'new';\n\nasync function handleBlock(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const ids = positional(argv);\n  const tests = Array.from({ length: ids.length / 2 }, (_, i) => ({ workflowId: ids[2 * i]!, runId: ids[2 * i + 1]! }));\n  const res = await apiRequest<ApiResult<{ items: EvaluatedProof[] }>>(apiUrl, token, 'POST', '/proofs/classify', { tests });\n  if (!res.ok || !res.data) {\n    console.error(`Error: ${res.error ?? 'could not check the tests'}`);\n    process.exit(1);\n  }\n  const listed: { workflowId: string; runId: string; description: string }[] = [];\n  let bad = false;\n  for (const { test, proof, runProblem } of res.data.items) {\n    const problem = 'refusal' in proof ? describe(proof) : runProblem;\n    if (problem) {\n      bad = true;\n      console.error(`${test.workflowId}  ${problem}`);\n    } else if (!('refusal' in proof)) {\n      listed.push({ workflowId: test.workflowId, runId: test.runId ?? '', description: `${proof.name} (${describe(proof)})` });\n    }\n  }\n  if (bad) process.exit(1);\n  writeRawOutput(formatProofBlock({ kind: 'workflows', tests: listed }));\n}\n\nasync function handleStatus(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const pr = getArgValue(argv, '--pr');\n  if (!pr) {\n    console.error('Usage: cofactor proofs status --application <app>|--repo <owner/repo> --pr <number> [--json]');\n    process.exit(1);\n  }\n  if (getArgValue(argv, '--application')) {\n    const application = await resolveApplicationId(argv, apiUrl, token);\n    const query = new URLSearchParams({ application, pr });\n    const legacy = await apiRequest<ApiResult<{ prNumber: number; items: ClassifiedProof[] }>>(\n      apiUrl,\n      token,\n      'GET',\n      `/proofs/status?${query}`\n    );\n    if (!legacy.ok || !legacy.data) return fail(legacy.error ?? 'could not read the pull request proofs');\n    if (hasFlag(argv, '--json')) {\n      writeRawOutput(JSON.stringify(legacy.data, null, 2));\n      return;\n    }\n    const { items } = legacy.data;\n    if (items.length === 0) {\n      console.log(`#${pr} lists no tests.`);\n      return;\n    }\n    console.log(`#${pr} lists ${items.length} test${items.length === 1 ? '' : 's'}:`);\n    for (const proof of items) console.log(`  ${proof.id}  ${proof.name ?? ''}  ${describe(proof)}`);\n    return;\n  }\n  const repo = resolveRepo(argv);\n  const query = new URLSearchParams({ repo, pr });\n  const res = await apiRequest<ApiResult<{ proof: ProofStatusView | null }>>(\n    apiUrl,\n    token,\n    'GET',\n    `/proofs/status?${query}`\n  );\n  if (!res.ok || !res.data) {\n    console.error(`Error: ${res.error ?? 'could not read the pull request proofs'}`);\n    process.exit(1);\n  }\n  if (hasFlag(argv, '--json')) {\n    writeRawOutput(JSON.stringify(res.data, null, 2));\n    return;\n  }\n  const proof = res.data.proof;\n  if (!proof) {\n    console.log(`#${pr} has no attached proof criteria.`);\n    return;\n  }\n  console.log(`#${pr} proof status at ${proof.proof.headSha}:`);\n  writeRawOutput(proof.verdict.summaryMarkdown);\n}\n\nasync function handleAttach(argv: string[], apiUrl: string, token: string): Promise<void> {\n  if (hasFlag(argv, '--manual')) return handleAttachManual(argv, apiUrl, token);\n  const pr = requiredNumber(argv, '--pr');\n  const criterion = requiredNumber(argv, '--criterion');\n  const application = getArgValue(argv, '--application');\n  const test = getArgValue(argv, '--test');\n  const run = getArgValue(argv, '--run');\n  const perfRun = getArgValue(argv, '--perf-run');\n  const asserted = getArgValue(argv, '--asserted');\n  const subjectCount = Number(test !== undefined || run !== undefined) + Number(perfRun !== undefined);\n  if (['--test', '--run', '--perf-run'].some((flag) => flagCount(argv, flag) > 1))\n    usageError('Pass each evidence subject flag at most once.');\n  if ((hasFlag(argv, '--test') && !test) || (hasFlag(argv, '--run') && !run) || (hasFlag(argv, '--perf-run') && !perfRun))\n    usageError('--test, --run and --perf-run each require a value.');\n  if (!application || !asserted || subjectCount !== 1 || (test === undefined) !== (run === undefined))\n    usageError('Usage: cofactor proofs attach --pr <n> --application <app> --criterion <n> (--test <wf_…> --run <wrun_…> | --perf-run <prun_…>) --asserted <text> [--text <text> --detail <text>]');\n  if (hasFlag(argv, '--perf-run') && (hasFlag(argv, '--node') || hasFlag(argv, '--tree') || hasFlag(argv, '--base')))\n    usageError('--node, --tree and --base can only be used with --test.');\n  const applicationId = await resolveApplicationId(argv, apiUrl, token);\n  const repo = resolveRepo(argv);\n  const body: Record<string, unknown> = { repo, application: applicationId, pr, criterion, asserted };\n  if (perfRun !== undefined) {\n    body.sha = resolveCleanCheckoutSha(argv);\n    body.perfRun = perfRun;\n  } else {\n    const { sha, tree } = resolveCheckoutCommit(argv);\n    const base = getArgValue(argv, '--base') ?? resolveDefaultBaseCommit();\n    Object.assign(body, { test, run, sha, tree, ...(base ? { base } : {}) });\n  }\n  const text = getArgValue(argv, '--text');\n  const detail = getArgValue(argv, '--detail');\n  const node = getArgValue(argv, '--node');\n  if (text !== undefined) body.text = text;\n  if (detail !== undefined) body.detail = detail;\n  if (node !== undefined) body.node = node;\n  const res = await apiRequest<ApiResult<{ proofId: string; criterion: unknown; evidence: unknown }>>(\n    apiUrl,\n    token,\n    'POST',\n    '/proofs/attach',\n    body\n  );\n  if (!res.ok || !res.data) return fail(res.error ?? 'could not attach proof evidence');\n  writeRawOutput(JSON.stringify(res.data, null, 2));\n}\n\nconst MANUAL_USAGE =\n  'Usage: cofactor proofs attach --pr <n> --application <app> --criterion <n> --manual --notes <text|@file> [--artifact <https-url>]... [--text <text> --detail <text>]';\n\n/** M23: the agent's own account of a criterion Cofactor could not prove. */\nasync function handleAttachManual(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const conflicting = ['--test', '--run', '--perf-run', '--asserted', '--node', '--tree', '--base'].filter((flag) => hasFlag(argv, flag));\n  if (conflicting.length > 0)\n    usageError(`--manual takes --notes instead of a test, run or asserted line; remove ${conflicting.join(', ')}.`);\n  const pr = requiredNumber(argv, '--pr');\n  const criterion = requiredNumber(argv, '--criterion');\n  const application = getArgValue(argv, '--application');\n  const notesValue = getArgValue(argv, '--notes');\n  if (!application || !notesValue) usageError(`--manual requires --application and --notes.\\n${MANUAL_USAGE}`);\n  const notes = readTextOrFile(notesValue).trim();\n  if (!notes) usageError('--manual requires non-empty --notes: what you did, and why Cofactor could not prove it.');\n  const artifacts = hasFlag(argv, '--artifact') ? getArgValues(argv, '--artifact') : [];\n  const applicationId = await resolveApplicationId(argv, apiUrl, token);\n  const body: Record<string, unknown> = {\n    repo: resolveRepo(argv),\n    application: applicationId,\n    pr,\n    criterion,\n    manual: true,\n    notes,\n    artifacts,\n    sha: resolveCleanCheckoutSha(argv),\n  };\n  const text = getArgValue(argv, '--text');\n  const detail = getArgValue(argv, '--detail');\n  if (text !== undefined) body.text = text;\n  if (detail !== undefined) body.detail = detail;\n  const res = await apiRequest<ApiResult<{ proofId: string; criterion: unknown; evidence: unknown }>>(\n    apiUrl,\n    token,\n    'POST',\n    '/proofs/attach',\n    body\n  );\n  if (!res.ok || !res.data) return fail(res.error ?? 'could not attach manual evidence');\n  writeRawOutput(JSON.stringify(res.data, null, 2));\n}\n\nasync function handleRender(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const pr = requiredNumber(argv, '--pr');\n  const repo = resolveRepo(argv);\n  const query = new URLSearchParams({ repo, pr: String(pr) });\n  const res = await apiRequest<ApiResult<{ body: string }>>(\n    apiUrl,\n    token,\n    'GET',\n    `/proofs/render?${query}`\n  );\n  if (!res.ok || !res.data) return fail(res.error ?? 'could not render pull request proofs');\n  writeRawOutput(res.data.body);\n}\n\nasync function handleDetach(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const pr = requiredNumber(argv, '--pr');\n  const criterion = requiredNumber(argv, '--criterion');\n  const repo = resolveRepo(argv);\n  const test = getArgValue(argv, '--test');\n  const perfRun = getArgValue(argv, '--perf-run');\n  const manual = hasFlag(argv, '--manual');\n  if (flagCount(argv, '--test') > 1 || flagCount(argv, '--perf-run') > 1)\n    usageError('Pass each evidence subject flag at most once.');\n  if (Number(test !== undefined) + Number(perfRun !== undefined) + Number(manual) > 1)\n    usageError('Pass at most one of --test, --perf-run and --manual.');\n  if ((hasFlag(argv, '--test') && !test) || (hasFlag(argv, '--perf-run') && !perfRun))\n    usageError('--test and --perf-run each require a value.');\n  const res = await apiRequest<ApiResult<{ deleted: true }>>(\n    apiUrl,\n    token,\n    'POST',\n    '/proofs/detach',\n    { repo, pr, criterion, ...(test ? { test } : {}), ...(perfRun ? { perfRun } : {}), ...(manual ? { manual: true } : {}) }\n  );\n  if (!res.ok || !res.data) return fail(res.error ?? 'could not detach proof criterion');\n  writeRawOutput(JSON.stringify(res.data, null, 2));\n}\n\nasync function handleCheck(argv: string[], apiUrl: string, token: string): Promise<void> {\n  const pr = requiredNumber(argv, '--pr');\n  const sha = getArgValue(argv, '--sha');\n  if (!sha) usageError('Usage: cofactor proofs check --pr <n> --sha <sha> [--body-file <path>|--body -]');\n  const repo = resolveRepo(argv);\n  const bodyInput = getArgValue(argv, '--body');\n  const bodyFile = getArgValue(argv, '--body-file');\n  if (bodyInput !== undefined && (bodyInput !== '-' || bodyFile !== undefined)) {\n    usageError('Use --body - for stdin or --body-file <path>.');\n  }\n  if (bodyInput === undefined && bodyFile === undefined) {\n    usageError('Pass the pull request body with --body - or --body-file <path>.');\n  }\n  let body: string;\n  try {\n    body = bodyInput === '-' ? await readStdin() : await readFile(bodyFile!, 'utf8');\n  } catch (error) {\n    return fail(`could not read pull request body: ${error instanceof Error ? error.message : String(error)}`);\n  }\n  const res = await apiRequest<ApiResult<ProofVerdict | null>>(\n    apiUrl,\n    token,\n    'POST',\n    '/proofs/check',\n    { repo, pr, sha, body }\n  );\n  if (!res.ok) return fail(res.error ?? 'could not check pull request proofs');\n  const verdict = res.data;\n  if (!verdict) return;\n  if (verdict.summaryMarkdown) {\n    writeRawOutput(verdict.summaryMarkdown);\n    const summaryFile = process.env.GITHUB_STEP_SUMMARY;\n    if (summaryFile) {\n      try {\n        await appendFile(summaryFile, `${verdict.summaryMarkdown}\\n`, 'utf8');\n      } catch (error) {\n        return fail(`could not append GitHub step summary: ${error instanceof Error ? error.message : String(error)}`);\n      }\n    }\n  }\n  if (verdict.conclusion === 'failure') process.exit(1);\n}\n\n/** Resolve an explicit repo, Actions context, or the checkout's origin remote. */\nexport function resolveRepo(argv: string[]): string {\n  const explicit = getArgValue(argv, '--repo');\n  const candidate = explicit ?? process.env.GITHUB_REPOSITORY ?? originRepository();\n  const repo = parseRepository(candidate);\n  if (!repo) usageError('Could not determine a GitHub repository. Pass --repo <owner/repo> or set GITHUB_REPOSITORY.');\n  return repo;\n}\n\nexport function parseRepository(value: string): string | null {\n  const normalized = value.trim();\n  const bare = normalized.match(/^([^/\\s:]+)\\/([^/\\s:]+?)(?:\\.git)?$/i);\n  if (bare) return `${bare[1]}/${bare[2]}`.toLowerCase();\n  const scp = normalized.match(/^git@github\\.com:([^/\\s:]+)\\/([^/\\s:]+?)(?:\\.git)?$/i);\n  if (scp) return `${scp[1]}/${scp[2]}`.toLowerCase();\n  try {\n    const url = new URL(normalized);\n    if (!['http:', 'https:', 'ssh:'].includes(url.protocol) || url.hostname.toLowerCase() !== 'github.com') return null;\n    const path = url.pathname.match(/^\\/([^/\\s]+)\\/([^/\\s]+?)(?:\\.git)?\\/?$/i);\n    return path ? `${path[1]}/${path[2]}`.toLowerCase() : null;\n  } catch {\n    return null;\n  }\n}\n\nfunction originRepository(): string {\n  try {\n    return execFileSync('git', ['remote', 'get-url', 'origin'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();\n  } catch {\n    return '';\n  }\n}\n\nfunction resolveCheckoutCommit(argv: string[]): { sha: string; tree: string } {\n  const explicitSha = getArgValue(argv, '--sha');\n  const explicitTree = getArgValue(argv, '--tree');\n  if (explicitSha !== undefined && explicitTree !== undefined) {\n    return { sha: explicitSha, tree: explicitTree };\n  }\n  if (gitOutput(['status', '--porcelain'])) {\n    return fail('the working tree is dirty; commit and push, sync, and run again');\n  }\n  const sha = explicitSha ?? gitRevision('HEAD');\n  const tree = explicitTree ?? gitRevision('HEAD^{tree}');\n  return { sha, tree };\n}\n\nfunction resolveCleanCheckoutSha(argv: string[]): string {\n  if (gitOutput(['status', '--porcelain'])) return fail('the working tree is dirty; commit and push, sync, and run again');\n  return getArgValue(argv, '--sha') ?? gitRevision('HEAD');\n}\n\nfunction resolveDefaultBaseCommit(): string | undefined {\n  try {\n    const defaultRef = execFileSync('git', ['symbolic-ref', 'refs/remotes/origin/HEAD'], {\n      encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim();\n    return execFileSync('git', ['merge-base', 'HEAD', defaultRef], {\n      encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'],\n    }).trim() || undefined;\n  } catch {\n    // The server resolves its current base when the CLI cannot compute a merge base.\n    process.stderr.write('Could not resolve the default base commit; the server will resolve the current base.\\n');\n    return undefined;\n  }\n}\n\nfunction gitOutput(args: string[]): string {\n  try {\n    return execFileSync('git', args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();\n  } catch {\n    return fail('could not inspect the working tree; run this command from a git checkout');\n  }\n}\n\nfunction gitRevision(revision: string): string {\n  try {\n    return execFileSync('git', ['rev-parse', revision], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim();\n  } catch {\n    return fail(`could not resolve ${revision}; run this command from a git checkout`);\n  }\n}\n\nfunction requiredNumber(argv: string[], flag: string): number {\n  const value = getArgValue(argv, flag);\n  const parsed = value ? Number(value) : Number.NaN;\n  if (!Number.isSafeInteger(parsed) || parsed < 1) usageError(`${flag} must be a positive integer.`);\n  return parsed;\n}\n\nfunction flagCount(argv: string[], flag: string): number {\n  return argv.filter((arg) => arg === flag).length;\n}\n\nfunction usageError(message: string): never {\n  console.error(`Error: ${message}`);\n  process.exit(1);\n}\n\nfunction fail(message: string): never {\n  console.error(`Error: ${message}`);\n  process.exit(1);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAaA,OAAO,aAAa;AACpB,SAAS,oBAAoB;AAC7B,SAAS,YAAY,gBAAgB;AAerC,IAAM,mBAAmB,oBAAI,IAAI,CAAC,aAAa,WAAW,SAAS,OAAO,CAAC;AAE3E,IAAM,OAAO;AAAA,EACX;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,EAAE,KAAK,IAAI;AAEX,eAAsB,UAAU,MAA+B;AAC7D,QAAM,CAAC,YAAY,GAAG,IAAI,IAAI;AAC9B,MAAI,CAAC,cAAc,eAAe,UAAU,QAAQ,MAAM,UAAU,IAAI,GAAG;AACzE,YAAQ,IAAI,IAAI;AAChB;AAAA,EACF;AACA,MAAI,eAAe,SAAS;AAC1B,eAAW,uBAAuB,mBAAmB,IAAI,GAAG,QAAQ,MAAM,QAAQ,CAAC;AACnF;AAAA,EACF;AACA,QAAM,OAAO,YAAY,MAAM,QAAQ;AAEvC,MAAI,eAAe,WAAW,QAAQ,MAAM,QAAQ,GAAG;AACrD,QAAI,KAAK,KAAK,CAAC,KAAK,MAAM,CAAC,IAAI,WAAW,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,iBAAiB,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG;AACvH,cAAQ,MAAM,qIAAqI;AACnJ,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,QAAI,CAAC,MAAM,KAAK,GAAG;AACjB,cAAQ,MAAM,8FAA8F;AAC5G,cAAQ,KAAK,CAAC;AAAA,IAChB;AACA,mBAAe,iBAAiB,EAAE,MAAM,QAAQ,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;AACtE;AAAA,EACF;AACA,MAAI,eAAe,YAAY,WAAW,IAAI,EAAE,WAAW,KAAK,WAAW,IAAI,EAAE,SAAS,MAAM,IAAI;AAClG,YAAQ,MAAM,4GAAkG;AAChH,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,EAAE,QAAQ,MAAM,IAAI,MAAM,cAAc,IAAI;AAClD,UAAQ,YAAY;AAAA,IAClB,KAAK;AACH,aAAO,YAAY,MAAM,QAAQ,KAAK;AAAA,IACxC,KAAK;AACH,aAAO,aAAa,MAAM,QAAQ,KAAK;AAAA,IACzC,KAAK;AACH,aAAO,aAAa,MAAM,QAAQ,KAAK;AAAA,IACzC,KAAK;AACH,aAAO,aAAa,MAAM,QAAQ,KAAK;AAAA,IACzC,KAAK;AACH,aAAO,aAAa,MAAM,QAAQ,KAAK;AAAA,IACzC,KAAK;AACH,aAAO,YAAY,MAAM,QAAQ,KAAK;AAAA,IACxC;AACE,cAAQ,MAAM,+BAA+B,UAAU;AAAA;AAAA,EAAO,IAAI,EAAE;AACpE,cAAQ,KAAK,CAAC;AAAA,EAClB;AACF;AAGA,IAAM,aAAa,CAAC,SAAmB,KAAK,OAAO,CAAC,KAAK,MAAM,CAAC,IAAI,WAAW,GAAG,KAAK,CAAC,iBAAiB,IAAI,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;AAE/H,IAAM,WAAW,CAAC,UAChB,aAAa,QACT,YAAY,MAAM,OAAO,KACzB,MAAM,SAAS,SACb,WAAW,MAAM,UAAU,KAC3B;AAER,eAAe,YAAY,MAAgB,QAAgB,OAA8B;AACvF,QAAM,MAAM,WAAW,IAAI;AAC3B,QAAM,QAAQ,MAAM,KAAK,EAAE,QAAQ,IAAI,SAAS,EAAE,GAAG,CAAC,GAAG,OAAO,EAAE,YAAY,IAAI,IAAI,CAAC,GAAI,OAAO,IAAI,IAAI,IAAI,CAAC,EAAG,EAAE;AACpH,QAAM,MAAM,MAAM,WAAmD,QAAQ,OAAO,QAAQ,oBAAoB,EAAE,MAAM,CAAC;AACzH,MAAI,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM;AACxB,YAAQ,MAAM,UAAU,IAAI,SAAS,2BAA2B,EAAE;AAClE,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,QAAM,SAAuE,CAAC;AAC9E,MAAI,MAAM;AACV,aAAW,EAAE,MAAM,OAAO,WAAW,KAAK,IAAI,KAAK,OAAO;AACxD,UAAM,UAAU,aAAa,QAAQ,SAAS,KAAK,IAAI;AACvD,QAAI,SAAS;AACX,YAAM;AACN,cAAQ,MAAM,GAAG,KAAK,UAAU,KAAK,OAAO,EAAE;AAAA,IAChD,WAAW,EAAE,aAAa,QAAQ;AAChC,aAAO,KAAK,EAAE,YAAY,KAAK,YAAY,OAAO,KAAK,SAAS,IAAI,aAAa,GAAG,MAAM,IAAI,KAAK,SAAS,KAAK,CAAC,IAAI,CAAC;AAAA,IACzH;AAAA,EACF;AACA,MAAI,IAAK,SAAQ,KAAK,CAAC;AACvB,iBAAe,iBAAiB,EAAE,MAAM,aAAa,OAAO,OAAO,CAAC,CAAC;AACvE;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,KAAK,YAAY,MAAM,MAAM;AACnC,MAAI,CAAC,IAAI;AACP,YAAQ,MAAM,8FAA8F;AAC5G,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,YAAY,MAAM,eAAe,GAAG;AACtC,UAAM,cAAc,MAAM,qBAAqB,MAAM,QAAQ,KAAK;AAClE,UAAMA,SAAQ,IAAI,gBAAgB,EAAE,aAAa,GAAG,CAAC;AACrD,UAAM,SAAS,MAAM;AAAA,MACnB;AAAA,MACA;AAAA,MACA;AAAA,MACA,kBAAkBA,MAAK;AAAA,IACzB;AACA,QAAI,CAAC,OAAO,MAAM,CAAC,OAAO,KAAM,QAAO,KAAK,OAAO,SAAS,wCAAwC;AACpG,QAAI,QAAQ,MAAM,QAAQ,GAAG;AAC3B,qBAAe,KAAK,UAAU,OAAO,MAAM,MAAM,CAAC,CAAC;AACnD;AAAA,IACF;AACA,UAAM,EAAE,MAAM,IAAI,OAAO;AACzB,QAAI,MAAM,WAAW,GAAG;AACtB,cAAQ,IAAI,IAAI,EAAE,kBAAkB;AACpC;AAAA,IACF;AACA,YAAQ,IAAI,IAAI,EAAE,UAAU,MAAM,MAAM,QAAQ,MAAM,WAAW,IAAI,KAAK,GAAG,GAAG;AAChF,eAAWC,UAAS,MAAO,SAAQ,IAAI,KAAKA,OAAM,EAAE,KAAKA,OAAM,QAAQ,EAAE,KAAK,SAASA,MAAK,CAAC,EAAE;AAC/F;AAAA,EACF;AACA,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,QAAQ,IAAI,gBAAgB,EAAE,MAAM,GAAG,CAAC;AAC9C,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB,KAAK;AAAA,EACzB;AACA,MAAI,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM;AACxB,YAAQ,MAAM,UAAU,IAAI,SAAS,wCAAwC,EAAE;AAC/E,YAAQ,KAAK,CAAC;AAAA,EAChB;AACA,MAAI,QAAQ,MAAM,QAAQ,GAAG;AAC3B,mBAAe,KAAK,UAAU,IAAI,MAAM,MAAM,CAAC,CAAC;AAChD;AAAA,EACF;AACA,QAAM,QAAQ,IAAI,KAAK;AACvB,MAAI,CAAC,OAAO;AACV,YAAQ,IAAI,IAAI,EAAE,kCAAkC;AACpD;AAAA,EACF;AACA,UAAQ,IAAI,IAAI,EAAE,oBAAoB,MAAM,MAAM,OAAO,GAAG;AAC5D,iBAAe,MAAM,QAAQ,eAAe;AAC9C;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,MAAI,QAAQ,MAAM,UAAU,EAAG,QAAO,mBAAmB,MAAM,QAAQ,KAAK;AAC5E,QAAM,KAAK,eAAe,MAAM,MAAM;AACtC,QAAM,YAAY,eAAe,MAAM,aAAa;AACpD,QAAM,cAAc,YAAY,MAAM,eAAe;AACrD,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,MAAM,YAAY,MAAM,OAAO;AACrC,QAAM,UAAU,YAAY,MAAM,YAAY;AAC9C,QAAM,WAAW,YAAY,MAAM,YAAY;AAC/C,QAAM,eAAe,OAAO,SAAS,UAAa,QAAQ,MAAS,IAAI,OAAO,YAAY,MAAS;AACnG,MAAI,CAAC,UAAU,SAAS,YAAY,EAAE,KAAK,CAAC,SAAS,UAAU,MAAM,IAAI,IAAI,CAAC;AAC5E,eAAW,+CAA+C;AAC5D,MAAK,QAAQ,MAAM,QAAQ,KAAK,CAAC,QAAU,QAAQ,MAAM,OAAO,KAAK,CAAC,OAAS,QAAQ,MAAM,YAAY,KAAK,CAAC;AAC7G,eAAW,oDAAoD;AACjE,MAAI,CAAC,eAAe,CAAC,YAAY,iBAAiB,KAAM,SAAS,YAAgB,QAAQ;AACvF,eAAW,kMAAmL;AAChM,MAAI,QAAQ,MAAM,YAAY,MAAM,QAAQ,MAAM,QAAQ,KAAK,QAAQ,MAAM,QAAQ,KAAK,QAAQ,MAAM,QAAQ;AAC9G,eAAW,yDAAyD;AACtE,QAAM,gBAAgB,MAAM,qBAAqB,MAAM,QAAQ,KAAK;AACpE,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,OAAgC,EAAE,MAAM,aAAa,eAAe,IAAI,WAAW,SAAS;AAClG,MAAI,YAAY,QAAW;AACzB,SAAK,MAAM,wBAAwB,IAAI;AACvC,SAAK,UAAU;AAAA,EACjB,OAAO;AACL,UAAM,EAAE,KAAK,KAAK,IAAI,sBAAsB,IAAI;AAChD,UAAM,OAAO,YAAY,MAAM,QAAQ,KAAK,yBAAyB;AACrE,WAAO,OAAO,MAAM,EAAE,MAAM,KAAK,KAAK,MAAM,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,EAAG,CAAC;AAAA,EACzE;AACA,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,SAAS,YAAY,MAAM,UAAU;AAC3C,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,MAAI,SAAS,OAAW,MAAK,OAAO;AACpC,MAAI,WAAW,OAAW,MAAK,SAAS;AACxC,MAAI,SAAS,OAAW,MAAK,OAAO;AACpC,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAM,QAAO,KAAK,IAAI,SAAS,iCAAiC;AACpF,iBAAe,KAAK,UAAU,IAAI,MAAM,MAAM,CAAC,CAAC;AAClD;AAEA,IAAM,eACJ;AAGF,eAAe,mBAAmB,MAAgB,QAAgB,OAA8B;AAC9F,QAAM,cAAc,CAAC,UAAU,SAAS,cAAc,cAAc,UAAU,UAAU,QAAQ,EAAE,OAAO,CAAC,SAAS,QAAQ,MAAM,IAAI,CAAC;AACtI,MAAI,YAAY,SAAS;AACvB,eAAW,0EAA0E,YAAY,KAAK,IAAI,CAAC,GAAG;AAChH,QAAM,KAAK,eAAe,MAAM,MAAM;AACtC,QAAM,YAAY,eAAe,MAAM,aAAa;AACpD,QAAM,cAAc,YAAY,MAAM,eAAe;AACrD,QAAM,aAAa,YAAY,MAAM,SAAS;AAC9C,MAAI,CAAC,eAAe,CAAC,WAAY,YAAW;AAAA,EAAiD,YAAY,EAAE;AAC3G,QAAM,QAAQ,eAAe,UAAU,EAAE,KAAK;AAC9C,MAAI,CAAC,MAAO,YAAW,yFAAyF;AAChH,QAAM,YAAY,QAAQ,MAAM,YAAY,IAAI,aAAa,MAAM,YAAY,IAAI,CAAC;AACpF,QAAM,gBAAgB,MAAM,qBAAqB,MAAM,QAAQ,KAAK;AACpE,QAAM,OAAgC;AAAA,IACpC,MAAM,YAAY,IAAI;AAAA,IACtB,aAAa;AAAA,IACb;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,KAAK,wBAAwB,IAAI;AAAA,EACnC;AACA,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,SAAS,YAAY,MAAM,UAAU;AAC3C,MAAI,SAAS,OAAW,MAAK,OAAO;AACpC,MAAI,WAAW,OAAW,MAAK,SAAS;AACxC,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACA,MAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAM,QAAO,KAAK,IAAI,SAAS,kCAAkC;AACrF,iBAAe,KAAK,UAAU,IAAI,MAAM,MAAM,CAAC,CAAC;AAClD;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,KAAK,eAAe,MAAM,MAAM;AACtC,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,QAAQ,IAAI,gBAAgB,EAAE,MAAM,IAAI,OAAO,EAAE,EAAE,CAAC;AAC1D,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA,kBAAkB,KAAK;AAAA,EACzB;AACA,MAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAM,QAAO,KAAK,IAAI,SAAS,sCAAsC;AACzF,iBAAe,IAAI,KAAK,IAAI;AAC9B;AAEA,eAAe,aAAa,MAAgB,QAAgB,OAA8B;AACxF,QAAM,KAAK,eAAe,MAAM,MAAM;AACtC,QAAM,YAAY,eAAe,MAAM,aAAa;AACpD,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,OAAO,YAAY,MAAM,QAAQ;AACvC,QAAM,UAAU,YAAY,MAAM,YAAY;AAC9C,QAAM,SAAS,QAAQ,MAAM,UAAU;AACvC,MAAI,UAAU,MAAM,QAAQ,IAAI,KAAK,UAAU,MAAM,YAAY,IAAI;AACnE,eAAW,+CAA+C;AAC5D,MAAI,OAAO,SAAS,MAAS,IAAI,OAAO,YAAY,MAAS,IAAI,OAAO,MAAM,IAAI;AAChF,eAAW,sDAAsD;AACnE,MAAK,QAAQ,MAAM,QAAQ,KAAK,CAAC,QAAU,QAAQ,MAAM,YAAY,KAAK,CAAC;AACzE,eAAW,6CAA6C;AAC1D,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,MAAM,IAAI,WAAW,GAAI,OAAO,EAAE,KAAK,IAAI,CAAC,GAAI,GAAI,UAAU,EAAE,QAAQ,IAAI,CAAC,GAAI,GAAI,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC,EAAG;AAAA,EACzH;AACA,MAAI,CAAC,IAAI,MAAM,CAAC,IAAI,KAAM,QAAO,KAAK,IAAI,SAAS,kCAAkC;AACrF,iBAAe,KAAK,UAAU,IAAI,MAAM,MAAM,CAAC,CAAC;AAClD;AAEA,eAAe,YAAY,MAAgB,QAAgB,OAA8B;AACvF,QAAM,KAAK,eAAe,MAAM,MAAM;AACtC,QAAM,MAAM,YAAY,MAAM,OAAO;AACrC,MAAI,CAAC,IAAK,YAAW,iFAAiF;AACtG,QAAM,OAAO,YAAY,IAAI;AAC7B,QAAM,YAAY,YAAY,MAAM,QAAQ;AAC5C,QAAM,WAAW,YAAY,MAAM,aAAa;AAChD,MAAI,cAAc,WAAc,cAAc,OAAO,aAAa,SAAY;AAC5E,eAAW,+CAA+C;AAAA,EAC5D;AACA,MAAI,cAAc,UAAa,aAAa,QAAW;AACrD,eAAW,iEAAiE;AAAA,EAC9E;AACA,MAAI;AACJ,MAAI;AACF,WAAO,cAAc,MAAM,MAAM,UAAU,IAAI,MAAM,SAAS,UAAW,MAAM;AAAA,EACjF,SAAS,OAAO;AACd,WAAO,KAAK,qCAAqC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AAAA,EAC3G;AACA,QAAM,MAAM,MAAM;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,EAAE,MAAM,IAAI,KAAK,KAAK;AAAA,EACxB;AACA,MAAI,CAAC,IAAI,GAAI,QAAO,KAAK,IAAI,SAAS,qCAAqC;AAC3E,QAAM,UAAU,IAAI;AACpB,MAAI,CAAC,QAAS;AACd,MAAI,QAAQ,iBAAiB;AAC3B,mBAAe,QAAQ,eAAe;AACtC,UAAM,cAAc,QAAQ,IAAI;AAChC,QAAI,aAAa;AACf,UAAI;AACF,cAAM,WAAW,aAAa,GAAG,QAAQ,eAAe;AAAA,GAAM,MAAM;AAAA,MACtE,SAAS,OAAO;AACd,eAAO,KAAK,yCAAyC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC,EAAE;AAAA,MAC/G;AAAA,IACF;AAAA,EACF;AACA,MAAI,QAAQ,eAAe,UAAW,SAAQ,KAAK,CAAC;AACtD;AAGO,SAAS,YAAY,MAAwB;AAClD,QAAM,WAAW,YAAY,MAAM,QAAQ;AAC3C,QAAM,YAAY,YAAY,QAAQ,IAAI,qBAAqB,iBAAiB;AAChF,QAAM,OAAO,gBAAgB,SAAS;AACtC,MAAI,CAAC,KAAM,YAAW,6FAA6F;AACnH,SAAO;AACT;AAEO,SAAS,gBAAgB,OAA8B;AAC5D,QAAM,aAAa,MAAM,KAAK;AAC9B,QAAM,OAAO,WAAW,MAAM,sCAAsC;AACpE,MAAI,KAAM,QAAO,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,YAAY;AACrD,QAAM,MAAM,WAAW,MAAM,sDAAsD;AACnF,MAAI,IAAK,QAAO,GAAG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,YAAY;AAClD,MAAI;AACF,UAAM,MAAM,IAAI,IAAI,UAAU;AAC9B,QAAI,CAAC,CAAC,SAAS,UAAU,MAAM,EAAE,SAAS,IAAI,QAAQ,KAAK,IAAI,SAAS,YAAY,MAAM,aAAc,QAAO;AAC/G,UAAM,OAAO,IAAI,SAAS,MAAM,yCAAyC;AACzE,WAAO,OAAO,GAAG,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,YAAY,IAAI;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,mBAA2B;AAClC,MAAI;AACF,WAAO,aAAa,OAAO,CAAC,UAAU,WAAW,QAAQ,GAAG,EAAE,UAAU,QAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ,EAAE,CAAC,EAAE,KAAK;AAAA,EAC9H,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,sBAAsB,MAA+C;AAC5E,QAAM,cAAc,YAAY,MAAM,OAAO;AAC7C,QAAM,eAAe,YAAY,MAAM,QAAQ;AAC/C,MAAI,gBAAgB,UAAa,iBAAiB,QAAW;AAC3D,WAAO,EAAE,KAAK,aAAa,MAAM,aAAa;AAAA,EAChD;AACA,MAAI,UAAU,CAAC,UAAU,aAAa,CAAC,GAAG;AACxC,WAAO,KAAK,iEAAiE;AAAA,EAC/E;AACA,QAAM,MAAM,eAAe,YAAY,MAAM;AAC7C,QAAM,OAAO,gBAAgB,YAAY,aAAa;AACtD,SAAO,EAAE,KAAK,KAAK;AACrB;AAEA,SAAS,wBAAwB,MAAwB;AACvD,MAAI,UAAU,CAAC,UAAU,aAAa,CAAC,EAAG,QAAO,KAAK,iEAAiE;AACvH,SAAO,YAAY,MAAM,OAAO,KAAK,YAAY,MAAM;AACzD;AAEA,SAAS,2BAA+C;AACtD,MAAI;AACF,UAAM,aAAa,aAAa,OAAO,CAAC,gBAAgB,0BAA0B,GAAG;AAAA,MACnF,UAAU;AAAA,MAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACtD,CAAC,EAAE,KAAK;AACR,WAAO,aAAa,OAAO,CAAC,cAAc,QAAQ,UAAU,GAAG;AAAA,MAC7D,UAAU;AAAA,MAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ;AAAA,IACtD,CAAC,EAAE,KAAK,KAAK;AAAA,EACf,QAAQ;AAEN,YAAQ,OAAO,MAAM,wFAAwF;AAC7G,WAAO;AAAA,EACT;AACF;AAEA,SAAS,UAAU,MAAwB;AACzC,MAAI;AACF,WAAO,aAAa,OAAO,MAAM,EAAE,UAAU,QAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ,EAAE,CAAC,EAAE,KAAK;AAAA,EACnG,QAAQ;AACN,WAAO,KAAK,0EAA0E;AAAA,EACxF;AACF;AAEA,SAAS,YAAY,UAA0B;AAC7C,MAAI;AACF,WAAO,aAAa,OAAO,CAAC,aAAa,QAAQ,GAAG,EAAE,UAAU,QAAQ,OAAO,CAAC,UAAU,QAAQ,QAAQ,EAAE,CAAC,EAAE,KAAK;AAAA,EACtH,QAAQ;AACN,WAAO,KAAK,qBAAqB,QAAQ,wCAAwC;AAAA,EACnF;AACF;AAEA,SAAS,eAAe,MAAgB,MAAsB;AAC5D,QAAM,QAAQ,YAAY,MAAM,IAAI;AACpC,QAAM,SAAS,QAAQ,OAAO,KAAK,IAAI,OAAO;AAC9C,MAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,EAAG,YAAW,GAAG,IAAI,8BAA8B;AACjG,SAAO;AACT;AAEA,SAAS,UAAU,MAAgB,MAAsB;AACvD,SAAO,KAAK,OAAO,CAAC,QAAQ,QAAQ,IAAI,EAAE;AAC5C;AAEA,SAAS,WAAW,SAAwB;AAC1C,UAAQ,MAAM,UAAU,OAAO,EAAE;AACjC,UAAQ,KAAK,CAAC;AAChB;AAEA,SAAS,KAAK,SAAwB;AACpC,UAAQ,MAAM,UAAU,OAAO,EAAE;AACjC,UAAQ,KAAK,CAAC;AAChB;","names":["query","proof"]}

package/dist/{chunk-BF3IPGMP.js → chunk-XSSZMG65.js}

@@ -2,15 +2,15 @@ import { createRequire as __cr } from "module"; import { fileURLToPath as __fup
 import {
   apiRequest,
   readStdin
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 
 // src/utilities.ts
 import fs from "fs/promises";
@@ -434,4 +434,4 @@ export {
   parseDurationSeconds,
   runUtilities
 };
-//# sourceMappingURL=chunk-BF3IPGMP.js.map
+//# sourceMappingURL=chunk-XSSZMG65.js.map

package/dist/{credential-TWSWV64F.js → credential-4RFRU6OH.js}

@@ -6,19 +6,19 @@ import {
   fetchProperties,
   findCredential,
   getApplicationArg
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   apiFetch,
   exitOnFailure,
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/credential.ts
@@ -490,4 +490,4 @@ async function runCredential(argv) {
 export {
   runCredential
 };
-//# sourceMappingURL=credential-TWSWV64F.js.map
+//# sourceMappingURL=credential-4RFRU6OH.js.map

package/dist/{credential-template-XO5D5AI3.js → credential-template-36PFUTBN.js}

@@ -4,17 +4,17 @@ import {
   fetchProperties,
   getApplicationArg,
   getPositionalArg
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/credential-template.ts
@@ -418,4 +418,4 @@ async function runCredentialTemplate(argv) {
 export {
   runCredentialTemplate
 };
-//# sourceMappingURL=credential-template-XO5D5AI3.js.map
+//# sourceMappingURL=credential-template-36PFUTBN.js.map

package/dist/{digest-SLEFOLPV.js → digest-THMKFMP7.js}

@@ -5,25 +5,25 @@ import {
   formatSlackChannel,
   loadSlackChannels,
   resolveSlackChannelIds
-} from "./chunk-QA37WVF6.js";
-import "./chunk-LIEADTEF.js";
-import "./chunk-QTYUM4ZB.js";
+} from "./chunk-OQFCZERZ.js";
+import "./chunk-LJFVRJCA.js";
+import "./chunk-EJ3ZPH5U.js";
 import "./chunk-DEK6B6LX.js";
 import {
   apiRequest,
   getPositionalArgs
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   GLOBAL_VALUE_FLAGS,
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/digest.ts
@@ -303,4 +303,4 @@ export {
   formatDigest,
   runDigest
 };
-//# sourceMappingURL=digest-SLEFOLPV.js.map
+//# sourceMappingURL=digest-THMKFMP7.js.map

package/dist/{docs-IDC4V4WQ.js → docs-ZGM53L67.js}

@@ -2,20 +2,20 @@ import { createRequire as __cr } from "module"; import { fileURLToPath as __fup
 import {
   apiRequest,
   getPositionalArgs
-} from "./chunk-LL6TSQWV.js";
+} from "./chunk-VKZOHJCE.js";
 import {
   getSubDir
 } from "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
+import "./chunk-4UZN6TVT.js";
 import {
   GLOBAL_VALUE_FLAGS,
   getArgValue,
   hasFlag,
   resolveConfig
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   writeRawOutput
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/docs.ts
@@ -451,4 +451,4 @@ async function runDocs(argv) {
 export {
   runDocs
 };
-//# sourceMappingURL=docs-IDC4V4WQ.js.map
+//# sourceMappingURL=docs-ZGM53L67.js.map

package/dist/{doctor-SDAYEA6C.js → doctor-Z2XBGBM3.js}

@@ -12,10 +12,10 @@ import {
   printNoSessionForOrg,
   readAllProfiles,
   readStoredAuth
-} from "./chunk-3HI6QC4V.js";
+} from "./chunk-WRBU6TX7.js";
 import {
   readBrandEnv
-} from "./chunk-UEJ2HTKU.js";
+} from "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 
 // src/doctor.ts
@@ -154,4 +154,4 @@ async function runAuthDoctor(argv) {
 export {
   runAuthDoctor
 };
-//# sourceMappingURL=doctor-SDAYEA6C.js.map
+//# sourceMappingURL=doctor-Z2XBGBM3.js.map

package/dist/{environment-VBUIBQ6O.js → environment-5YVZXBN7.js}

@@ -8,13 +8,13 @@ import {
   resolveOrCreateSandboxApplication,
   runEnvironment,
   stdinAssignment
-} from "./chunk-CYSPCGO6.js";
-import "./chunk-775FI436.js";
-import "./chunk-LL6TSQWV.js";
+} from "./chunk-JEHHEMUL.js";
+import "./chunk-RVD6J6IZ.js";
+import "./chunk-VKZOHJCE.js";
 import "./chunk-S3Q7MDCS.js";
-import "./chunk-76Z6E7XX.js";
-import "./chunk-3HI6QC4V.js";
-import "./chunk-UEJ2HTKU.js";
+import "./chunk-4UZN6TVT.js";
+import "./chunk-WRBU6TX7.js";
+import "./chunk-MJVUMVLO.js";
 import "./chunk-TOWZAG3I.js";
 export {
   fetchEnvironments,
@@ -26,4 +26,4 @@ export {
   runEnvironment,
   stdinAssignment
 };
-//# sourceMappingURL=environment-VBUIBQ6O.js.map
+//# sourceMappingURL=environment-5YVZXBN7.js.map