@sente-labs/cli 0.8.1 → 0.10.0

package/dist/commands/webhook.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerWebhookCommands = registerWebhookCommands;
+const client_1 = require("../client");
+const identityRef_1 = require("../identityRef");
+const output_1 = require("../output");
+/**
+ * `sente webhook …` — register YOUR endpoint so Sente pushes message events to it.
+ * Targets the Sente API (`/v1/webhooks`) with the stored API key.
+ */
+function registerWebhookCommands(program, globalOpts) {
+    const webhook = program.command('webhook').description('Manage Sente webhooks (push delivery)');
+    webhook
+        .command('register')
+        .description('Point Sente at your HTTPS endpoint (idempotent per url+identity)')
+        .requiredOption('--url <url>', 'your HTTPS endpoint')
+        .option('--identity <ref>', 'scope to one identity — id, email, or local-part (default: all of the org)')
+        .option('--events <list>', 'comma-separated events', 'message.received')
+        .action(async (cmdOpts) => {
+        const opts = globalOpts();
+        try {
+            const client = new client_1.GatewayClient();
+            const body = {
+                url: cmdOpts.url,
+                events: (cmdOpts.events ?? 'message.received').split(',').map((e) => e.trim()).filter(Boolean),
+            };
+            if (cmdOpts.identity)
+                body.identityId = await (0, identityRef_1.resolveIdentityId)(client, cmdOpts.identity);
+            const w = await client.request('/v1/webhooks', { method: 'POST', body });
+            (0, output_1.printSuccess)(w, () => process.stdout.write(`Registered webhook ${w.id} → ${w.url}\nSecret: ${w.secret ?? '(unchanged)'}\nVerify the X-Sente-Secret header on each delivery.\n`), opts);
+        }
+        catch (err) {
+            process.exit((0, output_1.printError)(err, opts));
+        }
+    });
+    webhook
+        .command('list')
+        .description("List the organization's webhooks")
+        .action(async () => {
+        const opts = globalOpts();
+        try {
+            const rows = await new client_1.GatewayClient().request('/v1/webhooks');
+            (0, output_1.printSuccess)(rows, () => {
+                if (rows.length === 0) {
+                    process.stdout.write('No webhooks. Register one with `sente webhook register --url <url>`.\n');
+                    return;
+                }
+                for (const w of rows) {
+                    process.stdout.write(`${w.id}  ${w.url}  [${w.events.join(',')}]${w.identityId ? `  →${w.identityId}` : ''}\n`);
+                }
+            }, opts);
+        }
+        catch (err) {
+            process.exit((0, output_1.printError)(err, opts));
+        }
+    });
+    webhook
+        .command('delete')
+        .description('Delete a webhook')
+        .argument('<id>', 'webhook id')
+        .action(async (id) => {
+        const opts = globalOpts();
+        try {
+            await new client_1.GatewayClient().request(`/v1/webhooks/${id}`, { method: 'DELETE' });
+            (0, output_1.printSuccess)({ id, deleted: true }, `Deleted webhook ${id}`, opts);
+        }
+        catch (err) {
+            process.exit((0, output_1.printError)(err, opts));
+        }
+    });
+}
+//# sourceMappingURL=webhook.js.map

package/dist/commands/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/commands/webhook.ts"],"names":[],"mappings":";;AAkBA,0DAsEC;AAvFD,sCAA0C;AAC1C,gDAAmD;AACnD,sCAAiE;AAWjE;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,OAAgB,EAAE,UAA4B;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,WAAW,CAAC,uCAAuC,CAAC,CAAC;IAEhG,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,kEAAkE,CAAC;SAC/E,cAAc,CAAC,aAAa,EAAE,qBAAqB,CAAC;SACpD,MAAM,CAAC,kBAAkB,EAAE,4EAA4E,CAAC;SACxG,MAAM,CAAC,iBAAiB,EAAE,wBAAwB,EAAE,kBAAkB,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,OAA4D,EAAE,EAAE;QAC7E,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,sBAAa,EAAE,CAAC;YACnC,MAAM,IAAI,GAA4B;gBACpC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,kBAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;aAC/F,CAAC;YACF,IAAI,OAAO,CAAC,QAAQ;gBAAE,IAAI,CAAC,UAAU,GAAG,MAAM,IAAA,+BAAiB,EAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC1F,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,OAAO,CAAU,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,IAAA,qBAAY,EACV,CAAC,EACD,GAAG,EAAE,CACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,GAAG,aAAa,CAAC,CAAC,MAAM,IAAI,aAAa,wDAAwD,CACpI,EACH,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,MAAM,CAAC;SACf,WAAW,CAAC,kCAAkC,CAAC;SAC/C,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,sBAAa,EAAE,CAAC,OAAO,CAAY,cAAc,CAAC,CAAC;YAC1E,IAAA,qBAAY,EACV,IAAI,EACJ,GAAG,EAAE;gBACH,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;oBAC/F,OAAO;gBACT,CAAC;gBACD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;oBACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;gBAClH,CAAC;YACH,CAAC,EACD,IAAI,CACL,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,OAAO;SACJ,OAAO,CAAC,QAAQ,CAAC;SACjB,WAAW,CAAC,kBAAkB,CAAC;SAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;SAC9B,MAAM,CAAC,KAAK,EAAE,EAAU,EAAE,EAAE;QAC3B,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,sBAAa,EAAE,CAAC,OAAO,CAAO,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpF,IAAA,qBAAY,EAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/config.js

@@ -33,9 +33,10 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CREDENTIALS_PATH = exports.CREDENTIALS_DIR = exports.DEFAULT_GATEWAY_URL = void 0;
+exports.DEFAULT_AUTH0_AUDIENCE = exports.DEFAULT_AUTH0_CLIENT_ID = exports.DEFAULT_AUTH0_DOMAIN = exports.CREDENTIALS_PATH = exports.CREDENTIALS_DIR = exports.DEFAULT_GATEWAY_URL = void 0;
 exports.gatewayUrl = gatewayUrl;
 exports.envToken = envToken;
+exports.auth0Config = auth0Config;
 exports.readLocalProjectId = readLocalProjectId;
 /**
  * CLI runtime configuration. Env vars take precedence over defaults.
@@ -55,6 +56,18 @@ function gatewayUrl() {
 function envToken() {
     return process.env.SENTE_API_TOKEN || undefined;
 }
+// Auth0 config for the browser login flow. These are PUBLIC values (the clientId already
+// ships in the web app); overridable via env for other tenants.
+exports.DEFAULT_AUTH0_DOMAIN = 'dev-ch2iktq4gawwhcom.us.auth0.com';
+exports.DEFAULT_AUTH0_CLIENT_ID = 'U82GLhHVG8Mmh1NWQErOhKY73mkmq5Rs';
+exports.DEFAULT_AUTH0_AUDIENCE = 'https://senteai.com';
+function auth0Config() {
+    return {
+        domain: process.env.SENTE_AUTH0_DOMAIN || exports.DEFAULT_AUTH0_DOMAIN,
+        clientId: process.env.SENTE_AUTH0_CLIENT_ID || exports.DEFAULT_AUTH0_CLIENT_ID,
+        audience: process.env.SENTE_AUTH0_AUDIENCE || exports.DEFAULT_AUTH0_AUDIENCE,
+    };
+}
 /**
  * Read the project id from the local .sente/config.json, walking up from the
  * cwd (same discovery as git/node_modules). Returns null if none is found.

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,gCAEC;AAED,4BAEC;AAOD,gDAgBC;AA3CD;;;;;GAKG;AACH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAEhB,QAAA,mBAAmB,GAAG,uBAAuB,CAAC;AAC9C,QAAA,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpD,QAAA,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAe,EAAE,aAAa,CAAC,CAAC;AAE1E,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,2BAAmB,CAAC;AAC9D,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB;IAChC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC9D,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,SAAS,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAcA,gCAEC;AAED,4BAEC;AAQD,kCAMC;AAOD,gDAgBC;AAzDD;;;;;GAKG;AACH,uCAAyB;AACzB,uCAAyB;AACzB,2CAA6B;AAEhB,QAAA,mBAAmB,GAAG,uBAAuB,CAAC;AAC9C,QAAA,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;AACpD,QAAA,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,uBAAe,EAAE,aAAa,CAAC,CAAC;AAE1E,SAAgB,UAAU;IACxB,OAAO,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,2BAAmB,CAAC;AAC9D,CAAC;AAED,SAAgB,QAAQ;IACtB,OAAO,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,SAAS,CAAC;AAClD,CAAC;AAED,yFAAyF;AACzF,gEAAgE;AACnD,QAAA,oBAAoB,GAAG,mCAAmC,CAAC;AAC3D,QAAA,uBAAuB,GAAG,kCAAkC,CAAC;AAC7D,QAAA,sBAAsB,GAAG,qBAAqB,CAAC;AAE5D,SAAgB,WAAW;IACzB,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,4BAAoB;QAC9D,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,+BAAuB;QACtE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,8BAAsB;KACrE,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB;IAChC,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC1D,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;gBAC9D,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;oBAAE,OAAO,MAAM,CAAC,SAAS,CAAC;YACpE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAChC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/identityRef.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveIdentityId = resolveIdentityId;
+const client_1 = require("./client");
+/**
+ * Resolve an `--identity` value to the `idt_…` id. Accepts:
+ *   - the id itself (`idt_…`)        → returned as-is
+ *   - the full email (`x@agents…`)   → looked up
+ *   - the local-part (`x`)           → looked up (matched against the email's local-part)
+ * Names are NOT accepted — they aren't unique. One list call; cached per process.
+ */
+let cache = null;
+async function resolveIdentityId(client, value) {
+    const v = value.trim();
+    if (/^idt_/.test(v))
+        return v;
+    if (!cache)
+        cache = await client.request('/v1/identities');
+    const needle = v.toLowerCase();
+    const match = cache.find((r) => r.email.toLowerCase() === needle || r.email.toLowerCase().split('@')[0] === needle);
+    if (!match) {
+        throw new client_1.ApiError(404, 'IDENTITY_NOT_FOUND', `No identity matching "${value}". Use its local-part, email, or id — see \`sente identity list\`.`);
+    }
+    return match.id;
+}
+//# sourceMappingURL=identityRef.js.map

package/dist/identityRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identityRef.js","sourceRoot":"","sources":["../src/identityRef.ts"],"names":[],"mappings":";;AAgBA,8CAgBC;AAhCD,qCAAmD;AAOnD;;;;;;GAMG;AACH,IAAI,KAAK,GAAyB,IAAI,CAAC;AAEhC,KAAK,UAAU,iBAAiB,CAAC,MAAqB,EAAE,KAAa;IAC1E,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAgB,gBAAgB,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CACtB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAC1F,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,iBAAQ,CAChB,GAAG,EACH,oBAAoB,EACpB,yBAAyB,KAAK,oEAAoE,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC"}

package/dist/index.js

@@ -11,7 +11,11 @@ const task_1 = require("./commands/task");
 const init_1 = require("./commands/init");
 const secret_1 = require("./commands/secret");
 const schedule_1 = require("./commands/schedule");
+const deployWebhook_1 = require("./commands/deployWebhook");
 const auth_1 = require("./commands/auth");
+const identity_1 = require("./commands/identity");
+const inbox_1 = require("./commands/inbox");
+const webhook_1 = require("./commands/webhook");
 const autoupdate_1 = require("./skill/autoupdate");
 // Silently refresh the installed Claude Code skill to match the running CLI.
 // Synchronous + cheap (a file stat + at most one small write). No-op if the
@@ -44,7 +48,11 @@ const globalOpts = () => program.opts();
 (0, task_1.registerTaskCommands)(program, globalOpts);
 (0, secret_1.registerSecretCommands)(program, globalOpts);
 (0, schedule_1.registerScheduleCommands)(program, globalOpts);
+(0, deployWebhook_1.registerDeployWebhookCommands)(program, globalOpts);
 (0, auth_1.registerAuthCommands)(program, globalOpts);
+(0, identity_1.registerIdentityCommands)(program, globalOpts);
+(0, inbox_1.registerInboxCommands)(program, globalOpts);
+(0, webhook_1.registerWebhookCommands)(program, globalOpts);
 program.parseAsync(process.argv).catch((err) => {
     // Defensive: command actions handle their own errors. This only catches
     // setup-time errors (e.g. unknown subcommand).

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,4CAAwD;AACxD,8CAA0D;AAC1D,gDAAkF;AAClF,kDAA+D;AAC/D,kDAA+D;AAC/D,0CAAuD;AACvD,0CAAmF;AACnF,8CAA2D;AAC3D,kDAA+D;AAC/D,0CAAuD;AACvD,mDAA+E;AAG/E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,IAAA,mCAAsB,GAAE,CAAC;AAEzB,wEAAwE;AACxE,uEAAuE;AACvE,6DAA6D;AAC7D,KAAK,IAAA,8BAAiB,GAAE,CAAC;AAEzB,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,oEAAoE,CAAC;KACjF,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,GAAG,GAAe,EAAE,CAAC,OAAO,CAAC,IAAI,EAAc,CAAC;AAEhE,IAAA,4BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,8BAAqB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,IAAA,0BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,kCAA2B,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACjD,IAAA,iCAAuB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC7C,IAAA,6BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,2BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,+BAAsB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC5C,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,2BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAE1C,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,wEAAwE;IACxE,+CAA+C;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AACA,yCAAoC;AACpC,4CAAwD;AACxD,8CAA0D;AAC1D,gDAAkF;AAClF,kDAA+D;AAC/D,kDAA+D;AAC/D,0CAAuD;AACvD,0CAAmF;AACnF,8CAA2D;AAC3D,kDAA+D;AAC/D,4DAAyE;AACzE,0CAAuD;AACvD,kDAA+D;AAC/D,4CAAyD;AACzD,gDAA6D;AAC7D,mDAA+E;AAG/E,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,IAAA,mCAAsB,GAAE,CAAC;AAEzB,wEAAwE;AACxE,uEAAuE;AACvE,6DAA6D;AAC7D,KAAK,IAAA,8BAAiB,GAAE,CAAC;AAEzB,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,OAAO,CAAC;KACb,WAAW,CAAC,oEAAoE,CAAC;KACjF,OAAO,CAAC,OAAO,CAAC;KAChB,MAAM,CAAC,QAAQ,EAAE,oDAAoD,CAAC,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,GAAG,GAAe,EAAE,CAAC,OAAO,CAAC,IAAI,EAAc,CAAC;AAEhE,IAAA,4BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,8BAAqB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,IAAA,0BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,kCAA2B,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACjD,IAAA,iCAAuB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC7C,IAAA,6BAAmB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACzC,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,2BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,+BAAsB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC5C,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,6CAA6B,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AACnD,IAAA,2BAAoB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC1C,IAAA,mCAAwB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC9C,IAAA,6BAAqB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,IAAA,iCAAuB,EAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAE7C,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IAC7C,wEAAwE;IACxE,+CAA+C;IAC/C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,OAAO,IAAI,GAAG,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/oauth.js

@@ -0,0 +1,179 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loginWithBrowser = loginWithBrowser;
+const node_crypto_1 = require("node:crypto");
+const node_http_1 = require("node:http");
+const node_child_process_1 = require("node:child_process");
+const node_os_1 = require("node:os");
+const config_1 = require("./config");
+const client_1 = require("./client");
+function base64url(buf) {
+    return buf.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+function openBrowser(url) {
+    let cmd;
+    let args;
+    if (process.platform === 'darwin') {
+        cmd = 'open';
+        args = [url];
+    }
+    else if (process.platform === 'win32') {
+        cmd = 'cmd';
+        args = ['/c', 'start', '', url];
+    }
+    else {
+        cmd = 'xdg-open';
+        args = [url];
+    }
+    try {
+        (0, node_child_process_1.spawn)(cmd, args, { stdio: 'ignore', detached: true }).unref();
+    }
+    catch {
+        // Couldn't auto-open; the printed URL is the fallback.
+    }
+}
+// The CLI's OAuth redirect lands on a one-shot local server. We try a small range of ports (all
+// registered as Auth0 callback URLs) so a busy port doesn't break login. Override with SENTE_OAUTH_PORT.
+const OAUTH_PORTS = process.env.SENTE_OAUTH_PORT
+    ? [Number(process.env.SENTE_OAUTH_PORT)]
+    : Array.from({ length: 11 }, (_, i) => 42789 + i); // 42789–42799
+const LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
+// Bind the first available port in the range; resolves with the port actually bound.
+function listenOnAvailablePort(server, ports) {
+    return new Promise((resolve, reject) => {
+        let i = 0;
+        const tryNext = () => {
+            if (i >= ports.length) {
+                return reject(new client_1.ApiError(0, 'NO_PORT', `No free local port for the login callback (tried ${ports[0]}–${ports[ports.length - 1]}).`));
+            }
+            const port = ports[i++];
+            const onError = (err) => {
+                if (err.code === 'EADDRINUSE')
+                    tryNext();
+                else
+                    reject(new client_1.ApiError(0, 'CALLBACK_SERVER', `Login server error: ${err.message}`));
+            };
+            server.once('error', onError);
+            server.listen(port, '127.0.0.1', () => {
+                server.removeListener('error', onError);
+                resolve(port);
+            });
+        };
+        tryNext();
+    });
+}
+/**
+ * Browser sign-in via Auth0 (Authorization Code + PKCE) — the same tenant/login as app.sente.run —
+ * then exchange the one-time code for an access token (JWT).
+ */
+async function getAuth0AccessToken() {
+    const { domain, clientId, audience } = (0, config_1.auth0Config)();
+    const verifier = base64url((0, node_crypto_1.randomBytes)(32));
+    const challenge = base64url((0, node_crypto_1.createHash)('sha256').update(verifier).digest());
+    const state = base64url((0, node_crypto_1.randomBytes)(16));
+    let resolveCode;
+    let rejectCode;
+    const codePromise = new Promise((res, rej) => {
+        resolveCode = res;
+        rejectCode = rej;
+    });
+    const server = (0, node_http_1.createServer)((req, res) => {
+        const url = new URL(req.url ?? '/', 'http://localhost');
+        if (url.pathname !== '/callback') {
+            res.writeHead(404);
+            res.end();
+            return;
+        }
+        const error = url.searchParams.get('error');
+        const returnedState = url.searchParams.get('state');
+        const returnedCode = url.searchParams.get('code');
+        res.writeHead(200, { 'content-type': 'text/html' });
+        res.end('<html><body style="font-family:system-ui;text-align:center;padding-top:3rem">' +
+            '<h2>Signed in to Sente</h2><p>You can close this tab and return to the terminal.</p></body></html>');
+        server.close();
+        if (error)
+            return rejectCode(new client_1.ApiError(401, 'AUTH0_ERROR', `Auth0 returned an error: ${error}`));
+        if (!returnedState || returnedState !== state)
+            return rejectCode(new client_1.ApiError(401, 'STATE_MISMATCH', 'OAuth state mismatch — aborting for safety.'));
+        if (!returnedCode)
+            return rejectCode(new client_1.ApiError(401, 'NO_CODE', 'No authorization code returned.'));
+        resolveCode(returnedCode);
+    });
+    const port = await listenOnAvailablePort(server, OAUTH_PORTS);
+    const redirectUri = `http://localhost:${port}/callback`;
+    const authorizeUrl = `https://${domain}/authorize?` +
+        new URLSearchParams({
+            response_type: 'code',
+            client_id: clientId,
+            redirect_uri: redirectUri,
+            scope: 'openid profile email',
+            audience,
+            code_challenge: challenge,
+            code_challenge_method: 'S256',
+            state,
+        }).toString();
+    process.stderr.write(`Opening your browser to sign in…\nIf it doesn't open, visit:\n\n  ${authorizeUrl}\n\n`);
+    openBrowser(authorizeUrl);
+    const timer = setTimeout(() => {
+        server.close();
+        rejectCode(new client_1.ApiError(408, 'LOGIN_TIMEOUT', 'Login timed out after 5 minutes.'));
+    }, LOGIN_TIMEOUT_MS);
+    timer.unref();
+    let code;
+    try {
+        code = await codePromise;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+    const tokenRes = await fetch(`https://${domain}/oauth/token`, {
+        method: 'POST',
+        headers: { 'content-type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            grant_type: 'authorization_code',
+            client_id: clientId,
+            code,
+            code_verifier: verifier,
+            redirect_uri: redirectUri,
+        }).toString(),
+    });
+    if (!tokenRes.ok) {
+        throw new client_1.ApiError(tokenRes.status, 'TOKEN_EXCHANGE', `Auth0 token exchange failed (${tokenRes.status}).`);
+    }
+    const tok = (await tokenRes.json());
+    if (!tok.access_token)
+        throw new client_1.ApiError(500, 'NO_ACCESS_TOKEN', 'Auth0 did not return an access token.');
+    return tok.access_token;
+}
+/**
+ * Full browser login: sign in (Auth0) → resolve the account's organization → mint a long-lived
+ * Sente API key (`sk_sente_…`). The raw key is returned exactly once.
+ */
+async function loginWithBrowser() {
+    const accessToken = await getAuth0AccessToken();
+    const base = (0, config_1.gatewayUrl)().replace(/\/$/, '');
+    const jsonAuth = { Authorization: `Bearer ${accessToken}`, 'Content-Type': 'application/json' };
+    // Resolve the org — GET /api/organizations is JWT-only (no x-organization-id). Use the first org.
+    const orgsRes = await fetch(`${base}/api/organizations`, { headers: jsonAuth });
+    if (!orgsRes.ok)
+        throw new client_1.ApiError(orgsRes.status, 'ORG_LOOKUP', `Could not list organizations (${orgsRes.status}).`);
+    const orgsBody = (await orgsRes.json());
+    const orgs = Array.isArray(orgsBody) ? orgsBody : orgsBody.organizations ?? [];
+    const org = orgs[0];
+    if (!org)
+        throw new client_1.ApiError(404, 'NO_ORG', 'No organization found for this account.');
+    // Mint a PAT bound to that org (POST /api/api-tokens accepts the Auth0 JWT + x-organization-id).
+    const mintRes = await fetch(`${base}/api/api-tokens`, {
+        method: 'POST',
+        headers: { ...jsonAuth, 'x-organization-id': org.id },
+        body: JSON.stringify({ name: `CLI ${(0, node_os_1.hostname)()}` }),
+    });
+    if (!mintRes.ok) {
+        throw new client_1.ApiError(mintRes.status, 'MINT_FAILED', `Could not create an API key (${mintRes.status}).`);
+    }
+    const mintBody = (await mintRes.json());
+    if (!mintBody.rawToken)
+        throw new client_1.ApiError(500, 'NO_TOKEN', 'The API key was not returned.');
+    return { token: mintBody.rawToken, organizationId: org.id, organizationName: org.name };
+}
+//# sourceMappingURL=oauth.js.map

package/dist/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":";;AAoKA,4CA4BC;AAhMD,6CAAsD;AACtD,yCAAiD;AACjD,2DAA2C;AAC3C,qCAAmC;AACnC,qCAAmD;AACnD,qCAAoC;AAEpC,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAW,CAAC;IAChB,IAAI,IAAc,CAAC;IACnB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,GAAG,GAAG,MAAM,CAAC;QACb,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACxC,GAAG,GAAG,KAAK,CAAC;QACZ,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;SAAM,CAAC;QACN,GAAG,GAAG,UAAU,CAAC;QACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,IAAA,0BAAK,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,uDAAuD;IACzD,CAAC;AACH,CAAC;AAED,gGAAgG;AAChG,yGAAyG;AACzG,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB;IAC9C,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACxC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc;AACnE,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEvC,qFAAqF;AACrF,SAAS,qBAAqB,CAAC,MAAc,EAAE,KAAe;IAC5D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,IAAI,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtB,OAAO,MAAM,CACX,IAAI,iBAAQ,CAAC,CAAC,EAAE,SAAS,EAAE,oDAAoD,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CACxH,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,OAAO,GAAG,CAAC,GAA0B,EAAE,EAAE;gBAC7C,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;oBAAE,OAAO,EAAE,CAAC;;oBACpC,MAAM,CAAC,IAAI,iBAAQ,CAAC,CAAC,EAAE,iBAAiB,EAAE,uBAAuB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YACxF,CAAC,CAAC;YACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;gBACpC,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxC,OAAO,CAAC,IAAI,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB;IAChC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAA,oBAAW,GAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,SAAS,CAAC,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,CAAC;IAEzC,IAAI,WAAoC,CAAC;IACzC,IAAI,UAAiC,CAAC;IACtC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAS,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,WAAW,GAAG,GAAG,CAAC;QAClB,UAAU,GAAG,GAAG,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,aAAa,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,GAAG,CACL,+EAA+E;YAC7E,oGAAoG,CACvG,CAAC;QACF,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,KAAK;YAAE,OAAO,UAAU,CAAC,IAAI,iBAAQ,CAAC,GAAG,EAAE,aAAa,EAAE,4BAA4B,KAAK,EAAE,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,aAAa,IAAI,aAAa,KAAK,KAAK;YAC3C,OAAO,UAAU,CAAC,IAAI,iBAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,6CAA6C,CAAC,CAAC,CAAC;QACxG,IAAI,CAAC,YAAY;YAAE,OAAO,UAAU,CAAC,IAAI,iBAAQ,CAAC,GAAG,EAAE,SAAS,EAAE,iCAAiC,CAAC,CAAC,CAAC;QACtG,WAAW,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,oBAAoB,IAAI,WAAW,CAAC;IAExD,MAAM,YAAY,GAChB,WAAW,MAAM,aAAa;QAC9B,IAAI,eAAe,CAAC;YAClB,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,sBAAsB;YAC7B,QAAQ;YACR,cAAc,EAAE,SAAS;YACzB,qBAAqB,EAAE,MAAM;YAC7B,KAAK;SACN,CAAC,CAAC,QAAQ,EAAE,CAAC;IAEhB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,YAAY,MAAM,CAAC,CAAC;IAC9G,WAAW,CAAC,YAAY,CAAC,CAAC;IAE1B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,iBAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,kCAAkC,CAAC,CAAC,CAAC;IACrF,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACrB,KAAK,CAAC,KAAK,EAAE,CAAC;IAEd,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,WAAW,CAAC;IAC3B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,MAAM,cAAc,EAAE;QAC5D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,QAAQ;YACnB,IAAI;YACJ,aAAa,EAAE,QAAQ;YACvB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC,QAAQ,EAAE;KACd,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,iBAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,gCAAgC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAC;IACjE,IAAI,CAAC,GAAG,CAAC,YAAY;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,EAAE,iBAAiB,EAAE,uCAAuC,CAAC,CAAC;IAC3G,OAAO,GAAG,CAAC,YAAY,CAAC;AAC1B,CAAC;AAQD;;;GAGG;AACI,KAAK,UAAU,gBAAgB;IACpC,MAAM,WAAW,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAChD,MAAM,IAAI,GAAG,IAAA,mBAAU,GAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IAEhG,kGAAkG;IAClG,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,oBAAoB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,IAAI,iBAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,iCAAiC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACvH,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAEC,CAAC;IACxC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC;IAC/E,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,EAAE,QAAQ,EAAE,yCAAyC,CAAC,CAAC;IAEvF,iGAAiG;IACjG,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,iBAAiB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,GAAG,CAAC,EAAE,EAAE;QACrD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,IAAA,kBAAQ,GAAE,EAAE,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,IAAI,iBAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,gCAAgC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IACxG,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAA0B,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,iBAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,+BAA+B,CAAC,CAAC;IAE7F,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,GAAG,CAAC,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;AAC1F,CAAC"}