@superlayer/cli 1.0.67

package/dist/commands/auth/client/add.js

@@ -0,0 +1,409 @@
+import { Effect, Match, Option, Schema } from 'effect';
+import { BadArgsError } from "../../../errors.js";
+import { GlobalOpts } from "../../../context/globalOpts.js";
+import { Args } from "../../../lib/args.js";
+import { runUIEffect, validateRequired } from "../../../lib/ui.js";
+import { addOAuthClient, findName, getClientNameAndProvider, getOrCreateProvider, GoogleAppTypeSchema, OAuthClient, } from "../../../lib/oauth.js";
+import { GOOGLE_AUTHORIZATION_ENDPOINT, GOOGLE_DISCOVERY_ENDPOINT, GOOGLE_TOKEN_ENDPOINT, APPLE_AUTHORIZATION_ENDPOINT, APPLE_DISCOVERY_ENDPOINT, APPLE_TOKEN_ENDPOINT, clerkDomainFromPublishableKey, LINKEDIN_AUTHORIZATION_ENDPOINT, LINKEDIN_DISCOVERY_ENDPOINT, LINKEDIN_TOKEN_ENDPOINT, } from '@superlayer/platform';
+import { getOAuthCallbackUrl } from "../../../lib/config.js";
+import { UI } from "../../../ui/index.js";
+import chalk from 'chalk';
+import boxen from 'boxen';
+import { link } from "../../../logging.js";
+import { appleKeyIdPrompt, applePrivateKeyFilePrompt, appleServicesIdPrompt, appleTeamIdPrompt, clerkPublishableKeyPrompt, clientIdPrompt, clientSecretPrompt, firebaseDiscoveryEndpoint, firebaseProjectIdPrompt, readPrivateKeyFile, redirectSetupMessages, redirectUriPrompt, validateFirebaseProjectId, } from "./shared.js";
+export const ClientTypeSchema = Schema.Literal('google', 'github', 'apple', 'linkedin', 'clerk', 'firebase');
+const googleConsoleUrl = 'https://console.developers.google.com/apis/credentials';
+const githubDeveloperUrl = 'https://github.com/settings/developers';
+const linkedinDeveloperUrl = 'https://www.linkedin.com/developers/apps';
+const optionalRedirectPrompt = (oauthCallbackURL) => redirectUriPrompt({
+    heading: 'Custom redirect URI (optional):',
+    oauthCallbackURL,
+});
+const selectGoogleAppType = (value) => Effect.gen(function* () {
+    const { yes } = yield* GlobalOpts;
+    return yield* Option.fromNullable(value).pipe(Effect.catchTag('NoSuchElementException', () => {
+        if (yes) {
+            return BadArgsError.make({
+                message: `Missing required value for --app-type. Expected one of: ${GoogleAppTypeSchema.literals.join(', ')}`,
+            });
+        }
+        return runUIEffect(new UI.Select({
+            options: [
+                {
+                    label: 'Web' + chalk.dim(' (Redirect Flows or Expo Auth Session)'),
+                    value: 'web',
+                },
+                { label: 'iOS', value: 'ios' },
+                { label: 'Android', value: 'android' },
+                { label: 'Google Button for Web', value: 'button-for-web' },
+            ],
+            promptText: 'Select a Google app type:',
+            modifyOutput: UI.modifiers.piped([
+                UI.modifiers.topPadding,
+                UI.modifiers.dimOnComplete,
+            ]),
+            defaultValue: 'web',
+        })).pipe(Effect.catchTag('UIError', (e) => BadArgsError.make({ message: `UI error: ${e.message}` })));
+    }), Effect.andThen((raw) => Schema.decodeUnknown(GoogleAppTypeSchema)(raw)), Effect.catchTag('ParseError', () => BadArgsError.make({
+        message: 'Invalid app-type, must be one of: web, ios, android, button-for-web',
+    })));
+});
+const selectGoogleCredentialMode = Effect.fn(function* () {
+    return yield* runUIEffect(new UI.Select({
+        options: [
+            {
+                label: 'Use dev credentials' +
+                    chalk.dim(' (works on localhost and Expo, no Google setup)'),
+                value: 'dev',
+            },
+            {
+                label: 'Use my own credentials' +
+                    chalk.dim(' (client ID and secret from Google Console)'),
+                value: 'custom',
+            },
+        ],
+        promptText: 'Select Google credential mode:',
+        modifyOutput: UI.modifiers.piped([
+            UI.modifiers.topPadding,
+            UI.modifiers.dimOnComplete,
+        ]),
+        defaultValue: 'dev',
+    })).pipe(Effect.catchTag('UIError', (e) => BadArgsError.make({ message: `UI error: ${e.message}` })));
+});
+const resolveGoogleCredentialMode = Effect.fn(function* ({ appType, opts, }) {
+    const { yes } = yield* GlobalOpts;
+    const devCredentialsFlag = Args.isTrue(opts, 'dev-credentials');
+    const hasProvidedSomeCustomCredentials = Args.hasAny(opts, [
+        'client-id',
+        'client-secret',
+        'custom-redirect-uri',
+    ]);
+    if (devCredentialsFlag && appType !== 'web') {
+        return yield* BadArgsError.make({
+            message: '--dev-credentials is only supported for --app-type web. Native Google clients need credentials from Google.',
+        });
+    }
+    if (devCredentialsFlag && hasProvidedSomeCustomCredentials) {
+        return yield* BadArgsError.make({
+            message: '--dev-credentials cannot be combined with --client-id, --client-secret, or --custom-redirect-uri.',
+        });
+    }
+    if (appType !== 'web') {
+        return 'custom';
+    }
+    if (hasProvidedSomeCustomCredentials) {
+        return 'custom';
+    }
+    if (devCredentialsFlag) {
+        return 'dev';
+    }
+    if (yes) {
+        return 'dev';
+    }
+    return yield* selectGoogleCredentialMode();
+});
+const printGoogleDevCredentialsClient = Effect.fn(function* ({ appType, client, }) {
+    yield* Effect.log(boxen([
+        `Google OAuth client created: ${client.client_name}`,
+        `App type: ${appType}`,
+        `Credentials: Instant dev credentials`,
+        `ID: ${client.id}`,
+        '',
+        'No Google Console setup required.',
+        'Works on localhost and Expo during development.',
+        '',
+        chalk.bold('Ready for production? Run:'),
+        `  superlayer auth client update --name ${client.client_name} --client-id <id> --client-secret <secret>`,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const printGoogleCustomCredentialsClient = Effect.fn(function* ({ appType, client, clientId, customRedirectUri, redirectUri, oauthCallbackURL, }) {
+    const redirectMessages = [];
+    if (appType === 'web' && redirectUri) {
+        redirectMessages.push(...redirectSetupMessages({
+            prompt: 'Add this redirect URI in Google Console',
+            redirectUri,
+            oauthCallbackURL,
+            showCustomRedirectInstructions: Boolean(customRedirectUri),
+        }));
+    }
+    yield* Effect.log(boxen([
+        `Google OAuth client created: ${client.client_name}`,
+        `App type: ${appType}`,
+        `ID: ${client.id}`,
+        `Google Client ID: ${client.client_id ?? clientId}`,
+        ...redirectMessages,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const handleGoogleClient = Effect.fn(function* (opts, oauthCallbackURL) {
+    // This one requires special logic for getting client name
+    // because the suggested name includes the app type
+    const appType = yield* selectGoogleAppType(opts['app-type']);
+    const credentialMode = yield* resolveGoogleCredentialMode({
+        appType,
+        opts,
+    });
+    const useSharedCredentials = credentialMode === 'dev';
+    const { auth, provider } = yield* getOrCreateProvider('google');
+    const usedClientNames = new Set((auth.oauth_clients ?? []).map((client) => client.client_name));
+    const suggestedClientName = findName(`google-${appType}`, usedClientNames);
+    const clientName = yield* Args.text(opts, 'name').pipe(Args.prompt({
+        prompt: 'Client Name:',
+        defaultValue: suggestedClientName,
+        placeholder: suggestedClientName,
+        validate: validateRequired,
+        modifyOutput: UI.modifiers.piped([
+            UI.modifiers.topPadding,
+            UI.modifiers.dimOnComplete,
+        ]),
+    }), Args.required());
+    if (usedClientNames.has(clientName)) {
+        return yield* BadArgsError.make({
+            message: `The unique name '${clientName}' is already in use.`,
+        });
+    }
+    const clientId = yield* Args.text(opts, 'client-id').pipe(Args.availableWhen(!useSharedCredentials, {
+        message: '--client-id is not compatible with --dev-credentials. Drop one or the other.',
+    }), Args.prompt(clientIdPrompt({ providerUrl: googleConsoleUrl })), Args.required());
+    const usesCustomWebCredentials = !useSharedCredentials && appType === 'web';
+    const clientSecret = yield* Args.text(opts, 'client-secret').pipe(Args.availableWhen(usesCustomWebCredentials, {
+        message: useSharedCredentials
+            ? '--client-secret is not compatible with --dev-credentials. Drop one or the other.'
+            : undefined,
+    }), Args.prompt(clientSecretPrompt({ providerUrl: googleConsoleUrl })), Args.required());
+    const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.availableWhen(usesCustomWebCredentials, {
+        message: useSharedCredentials
+            ? '--custom-redirect-uri is not compatible with --dev-credentials.'
+            : 'Provided custom redirect URI when not using web app type.',
+    }), Args.prompt(optionalRedirectPrompt(oauthCallbackURL)), Args.optional());
+    const redirectUri = useSharedCredentials
+        ? undefined
+        : customRedirectUri || oauthCallbackURL;
+    const response = yield* addOAuthClient({
+        providerId: provider.id,
+        clientName,
+        clientId: useSharedCredentials ? undefined : clientId,
+        clientSecret: useSharedCredentials ? undefined : clientSecret,
+        authorizationEndpoint: GOOGLE_AUTHORIZATION_ENDPOINT,
+        tokenEndpoint: GOOGLE_TOKEN_ENDPOINT,
+        discoveryEndpoint: GOOGLE_DISCOVERY_ENDPOINT,
+        redirectTo: redirectUri,
+        meta: {
+            appType,
+            skipNonceChecks: true,
+        },
+        useSharedCredentials,
+    });
+    if (useSharedCredentials) {
+        yield* printGoogleDevCredentialsClient({
+            appType,
+            client: response.client,
+        });
+        return;
+    }
+    yield* printGoogleCustomCredentialsClient({
+        appType,
+        client: response.client,
+        clientId,
+        customRedirectUri,
+        redirectUri,
+        oauthCallbackURL,
+    });
+});
+const handleGithubClient = Effect.fn(function* (opts, oauthCallbackURL) {
+    const { clientName, provider } = yield* getClientNameAndProvider('github', opts);
+    const clientId = yield* Args.text(opts, 'client-id').pipe(Args.prompt(clientIdPrompt({ providerUrl: githubDeveloperUrl })), Args.required());
+    const clientSecret = yield* Args.text(opts, 'client-secret').pipe(Args.prompt(clientSecretPrompt({ providerUrl: githubDeveloperUrl })), Args.required());
+    const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.prompt(optionalRedirectPrompt(oauthCallbackURL)), Args.optional());
+    const redirectUri = customRedirectUri || oauthCallbackURL;
+    // The backend infers GitHub's authorization/token endpoints from
+    // meta.providerName === 'github', so we don't pass them here.
+    const response = yield* addOAuthClient({
+        providerId: provider.id,
+        clientName,
+        clientId,
+        clientSecret,
+        redirectTo: redirectUri,
+        meta: { providerName: 'github' },
+    });
+    const redirectMessages = redirectSetupMessages({
+        prompt: 'Add this callback URL in your GitHub OAuth App settings',
+        redirectUri,
+        oauthCallbackURL,
+        showCustomRedirectInstructions: Boolean(customRedirectUri),
+    });
+    yield* Effect.log(boxen([
+        `GitHub OAuth client created: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `GitHub Client ID: ${response.client.client_id ?? clientId}`,
+        ...redirectMessages,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const handleLinkedInClient = Effect.fn(function* (opts, oauthCallbackURL) {
+    const { clientName, provider } = yield* getClientNameAndProvider('linkedin', opts);
+    const clientId = yield* Args.text(opts, 'client-id').pipe(Args.prompt(clientIdPrompt({ providerUrl: linkedinDeveloperUrl })), Args.required());
+    const clientSecret = yield* Args.text(opts, 'client-secret').pipe(Args.prompt(clientSecretPrompt({ providerUrl: linkedinDeveloperUrl })), Args.required());
+    const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.prompt(optionalRedirectPrompt(oauthCallbackURL)), Args.optional());
+    const redirectUri = customRedirectUri || oauthCallbackURL;
+    const response = yield* addOAuthClient({
+        providerId: provider.id,
+        clientName,
+        clientId,
+        clientSecret,
+        authorizationEndpoint: LINKEDIN_AUTHORIZATION_ENDPOINT,
+        tokenEndpoint: LINKEDIN_TOKEN_ENDPOINT,
+        discoveryEndpoint: LINKEDIN_DISCOVERY_ENDPOINT,
+        redirectTo: redirectUri,
+    });
+    const redirectMessages = redirectSetupMessages({
+        prompt: 'Add this redirect URI in your LinkedIn app settings',
+        redirectUri,
+        oauthCallbackURL,
+        showCustomRedirectInstructions: Boolean(customRedirectUri),
+    });
+    yield* Effect.log(boxen([
+        `LinkedIn OAuth client created: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `LinkedIn Client ID: ${response.client.client_id ?? clientId}`,
+        ...redirectMessages,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const handleAppleClient = Effect.fn(function* (opts, oauthCallbackURL) {
+    const { clientName, provider } = yield* getClientNameAndProvider('apple', opts);
+    const servicesId = yield* Args.text(opts, 'services-id').pipe(Args.prompt(appleServicesIdPrompt({})), Args.required());
+    // If any web-flow flag is provided, enable web flow; otherwise ask
+    // (non-interactively with --yes we default to native-only).
+    const anyWebFlagProvided = Args.hasAny(opts, [
+        'team-id',
+        'key-id',
+        'private-key-file',
+        'custom-redirect-uri',
+    ]);
+    const configureWeb = anyWebFlagProvided
+        ? true
+        : yield* Args.bool(opts, 'configure-web').pipe(Args.confirm({
+            promptText: 'Configure web redirect flow? ' +
+                chalk.dim('(requires Team ID, Key ID, and a .p8 private key from Apple)'),
+            defaultValue: false,
+        }), Args.required());
+    const skipWeb = !configureWeb;
+    const webSkipMessage = 'requires configuring the web redirect flow (also provide --team-id, --key-id, and --private-key-file).';
+    const teamId = yield* Args.text(opts, 'team-id').pipe(Args.availableWhen(!skipWeb, { message: `--team-id ${webSkipMessage}` }), Args.prompt(appleTeamIdPrompt({})), Args.required());
+    const keyId = yield* Args.text(opts, 'key-id').pipe(Args.availableWhen(!skipWeb, { message: `--key-id ${webSkipMessage}` }), Args.prompt(appleKeyIdPrompt({})), Args.required());
+    const privateKeyPath = yield* Args.text(opts, 'private-key-file').pipe(Args.availableWhen(!skipWeb, {
+        message: `--private-key-file ${webSkipMessage}`,
+    }), Args.prompt(applePrivateKeyFilePrompt({})), Args.required());
+    const privateKey = privateKeyPath
+        ? yield* readPrivateKeyFile(privateKeyPath)
+        : undefined;
+    const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.availableWhen(!skipWeb, {
+        message: `--custom-redirect-uri ${webSkipMessage}`,
+    }), Args.prompt(optionalRedirectPrompt(oauthCallbackURL)), Args.optional());
+    const redirectUri = privateKey
+        ? customRedirectUri || oauthCallbackURL
+        : undefined;
+    const meta = {};
+    if (teamId !== undefined)
+        meta.teamId = teamId;
+    if (keyId !== undefined)
+        meta.keyId = keyId;
+    const response = yield* addOAuthClient({
+        providerId: provider.id,
+        clientName,
+        clientId: servicesId,
+        clientSecret: privateKey,
+        authorizationEndpoint: APPLE_AUTHORIZATION_ENDPOINT,
+        tokenEndpoint: APPLE_TOKEN_ENDPOINT,
+        discoveryEndpoint: APPLE_DISCOVERY_ENDPOINT,
+        redirectTo: redirectUri,
+        ...(Object.keys(meta).length > 0 ? { meta } : {}),
+    });
+    const summaryLines = [
+        `Apple OAuth client created: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `Services ID: ${response.client.client_id ?? servicesId}`,
+    ];
+    if (privateKey && redirectUri) {
+        summaryLines.push(`Team ID: ${teamId}`);
+        summaryLines.push(`Key ID: ${keyId}`);
+        summaryLines.push(...redirectSetupMessages({
+            prompt: `Add this return URL under your Services ID on ${link('https://developer.apple.com', 'developer.apple.com')}`,
+            redirectUri,
+            oauthCallbackURL,
+            showCustomRedirectInstructions: Boolean(customRedirectUri),
+        }));
+    }
+    yield* Effect.log(boxen(summaryLines.join('\n'), {
+        dimBorder: true,
+        padding: { right: 1, left: 1 },
+    }));
+});
+const handleClerkClient = Effect.fn(function* (opts) {
+    const { clientName, provider } = yield* getClientNameAndProvider('clerk', opts);
+    const publishableKey = yield* Args.text(opts, 'publishable-key').pipe(Args.prompt(clerkPublishableKeyPrompt({})), Args.required());
+    const domain = clerkDomainFromPublishableKey(publishableKey);
+    if (!domain) {
+        return yield* BadArgsError.make({
+            message: 'Invalid publishable key. Could not extract domain.',
+        });
+    }
+    const response = yield* addOAuthClient({
+        providerId: provider.id,
+        clientName,
+        discoveryEndpoint: `https://${domain}/.well-known/openid-configuration`,
+        meta: { clerkPublishableKey: publishableKey },
+    });
+    const clerkDomain = response.client.discovery_endpoint?.replace('/.well-known/openid-configuration', '');
+    yield* Effect.log(boxen([
+        `Clerk OAuth client created: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `Clerk Publishable Key: ${response.client.meta?.clerkPublishableKey}`,
+        `Clerk Domain: ${clerkDomain}`,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+    yield* Effect.log('\nNavigate to your Clerk dashboard. On the Sessions page, click the Edit button in the Customize session token section.\nEnsure your Claims field has the email claim:\n' +
+        boxen(`{
+  "email": "{{user.primary_email_address}}",
+  "email_verified": "{{user.email_verified}}"
+}`, { borderStyle: 'none' }));
+});
+const handleFirebaseClient = Effect.fn(function* (opts) {
+    const { clientName, provider } = yield* getClientNameAndProvider('firebase', opts);
+    const projectId = yield* Args.text(opts, 'project-id').pipe(Args.prompt(firebaseProjectIdPrompt({})), Args.validate(validateFirebaseProjectId), Args.required());
+    const response = yield* addOAuthClient({
+        providerId: provider.id,
+        clientName,
+        discoveryEndpoint: firebaseDiscoveryEndpoint(projectId),
+    });
+    yield* Effect.log(boxen([
+        `Firebase OAuth client created: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `Firebase Project ID: ${projectId}`,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+export const authClientAddCmd = Effect.fn(function* (opts) {
+    const { yes } = yield* GlobalOpts;
+    if (!opts.type && yes) {
+        return yield* BadArgsError.make({
+            message: `Missing required value for --type. Expected one of: ${ClientTypeSchema.literals.join(', ')}`,
+        });
+    }
+    const clientType = yield* Option.fromNullable(opts.type).pipe(Effect.catchTag('NoSuchElementException', () => runUIEffect(new UI.Select({
+        options: [
+            { label: 'Google', value: 'google' },
+            { label: 'GitHub', value: 'github' },
+            { label: 'Apple', value: 'apple' },
+            { label: 'LinkedIn', value: 'linkedin' },
+            { label: 'Clerk', value: 'clerk' },
+            { label: 'Firebase', value: 'firebase' },
+        ],
+        promptText: 'Select a client type:',
+        modifyOutput: UI.modifiers.piped([UI.modifiers.dimOnComplete]),
+    }))), Effect.andThen((s) => Schema.decodeUnknown(ClientTypeSchema)(s)), Effect.catchTag('ParseError', () => BadArgsError.make({
+        message: `Invalid client type, must be one of: ${ClientTypeSchema.literals.join(', ')}`,
+    })));
+    const oauthCallbackURL = yield* getOAuthCallbackUrl;
+    yield* Match.value(clientType).pipe(Match.withReturnType(), Match.when('google', () => handleGoogleClient(opts, oauthCallbackURL)), Match.when('github', () => handleGithubClient(opts, oauthCallbackURL)), Match.when('apple', () => handleAppleClient(opts, oauthCallbackURL)), Match.when('linkedin', () => handleLinkedInClient(opts, oauthCallbackURL)), Match.when('clerk', () => handleClerkClient(opts)), Match.when('firebase', () => handleFirebaseClient(opts)), Match.exhaustive);
+}, Effect.catchTag('BadArgsError', (e) => Effect.gen(function* () {
+    yield* Effect.logError(e.message);
+    yield* Effect.log(chalk.dim('hint: run `superlayer auth client add --help` for the list of available arguments'));
+})));
+//# sourceMappingURL=add.js.map

package/dist/commands/auth/client/add.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add.js","sourceRoot":"","sources":["../../../../src/commands/auth/client/add.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EACL,cAAc,EACd,QAAQ,EACR,wBAAwB,EACxB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,qBAAqB,EACrB,4BAA4B,EAC5B,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,+BAA+B,EAC/B,2BAA2B,EAC3B,uBAAuB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAC3C,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAC5C,QAAQ,EACR,QAAQ,EACR,OAAO,EACP,UAAU,EACV,OAAO,EACP,UAAU,CACX,CAAC;AAEF,MAAM,gBAAgB,GACpB,wDAAwD,CAAC;AAC3D,MAAM,kBAAkB,GAAG,wCAAwC,CAAC;AACpE,MAAM,oBAAoB,GAAG,0CAA0C,CAAC;AACxE,MAAM,sBAAsB,GAAG,CAAC,gBAAwB,EAAE,EAAE,CAC1D,iBAAiB,CAAC;IAChB,OAAO,EAAE,iCAAiC;IAC1C,gBAAgB;CACjB,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAE,EAAE,CAC7C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAElC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,IAAI,CAC3C,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAC7C,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,YAAY,CAAC,IAAI,CAAC;gBACvB,OAAO,EAAE,2DAA2D,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC9G,CAAC,CAAC;QACL,CAAC;QAED,OAAO,WAAW,CAChB,IAAI,EAAE,CAAC,MAAM,CAAC;YACZ,OAAO,EAAE;gBACP;oBACE,KAAK,EACH,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC;oBAC7D,KAAK,EAAE,KAAK;iBACb;gBACD,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE;gBAC9B,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE;gBACtC,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,gBAAgB,EAAE;aAC5D;YACD,UAAU,EAAE,2BAA2B;YACvC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;gBAC/B,EAAE,CAAC,SAAS,CAAC,UAAU;gBACvB,EAAE,CAAC,SAAS,CAAC,aAAa;aAC3B,CAAC;YACF,YAAY,EAAE,KAAK;SACpB,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzD,CACF,CAAC;IACJ,CAAC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,EACvE,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CACjC,YAAY,CAAC,IAAI,CAAC;QAChB,OAAO,EACL,qEAAqE;KACxE,CAAC,CACH,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEL,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;IACpD,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,IAAI,EAAE,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE;YACP;gBACE,KAAK,EACH,qBAAqB;oBACrB,KAAK,CAAC,GAAG,CAAC,iDAAiD,CAAC;gBAC9D,KAAK,EAAE,KAAc;aACtB;YACD;gBACE,KAAK,EACH,wBAAwB;oBACxB,KAAK,CAAC,GAAG,CAAC,6CAA6C,CAAC;gBAC1D,KAAK,EAAE,QAAiB;aACzB;SACF;QACD,UAAU,EAAE,gCAAgC;QAC5C,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU;YACvB,EAAE,CAAC,SAAS,CAAC,aAAa;SAC3B,CAAC;QACF,YAAY,EAAE,KAAc;KAC7B,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACvD,OAAO,EACP,IAAI,GAIL;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAClC,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,gCAAgC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QACzD,WAAW;QACX,eAAe;QACf,qBAAqB;KACtB,CAAC,CAAC;IAEH,IAAI,kBAAkB,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,6GAA6G;SAChH,CAAC,CAAC;IACL,CAAC;IAED,IAAI,kBAAkB,IAAI,gCAAgC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,mGAAmG;SACtG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,gCAAgC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,0BAA0B,EAAE,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC3D,OAAO,EACP,MAAM,GAIP;IACC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,gCAAgC,MAAM,CAAC,WAAW,EAAE;QACpD,aAAa,OAAO,EAAE;QACtB,sCAAsC;QACtC,OAAO,MAAM,CAAC,EAAE,EAAE;QAClB,EAAE;QACF,mCAAmC;QACnC,iDAAiD;QACjD,EAAE;QACF,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC;QACxC,0CAA0C,MAAM,CAAC,WAAW,4CAA4C;KACzG,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,kCAAkC,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9D,OAAO,EACP,MAAM,EACN,QAAQ,EACR,iBAAiB,EACjB,WAAW,EACX,gBAAgB,GAQjB;IACC,MAAM,gBAAgB,GAAa,EAAE,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,IAAI,WAAW,EAAE,CAAC;QACrC,gBAAgB,CAAC,IAAI,CACnB,GAAG,qBAAqB,CAAC;YACvB,MAAM,EAAE,yCAAyC;YACjD,WAAW;YACX,gBAAgB;YAChB,8BAA8B,EAAE,OAAO,CAAC,iBAAiB,CAAC;SAC3D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,gCAAgC,MAAM,CAAC,WAAW,EAAE;QACpD,aAAa,OAAO,EAAE;QACtB,OAAO,MAAM,CAAC,EAAE,EAAE;QAClB,qBAAqB,MAAM,CAAC,SAAS,IAAI,QAAQ,EAAE;QACnD,GAAG,gBAAgB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC5C,IAA6B,EAC7B,gBAAwB;IAExB,0DAA0D;IAC1D,mDAAmD;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,2BAA2B,CAAC;QACxD,OAAO;QACP,IAAI;KACL,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,cAAc,KAAK,KAAK,CAAC;IAEtD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAC/D,CAAC;IACF,MAAM,mBAAmB,GAAG,QAAQ,CAAC,UAAU,OAAO,EAAE,EAAE,eAAe,CAAC,CAAC;IAE3E,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,CACpD,IAAI,CAAC,MAAM,CAAC;QACV,MAAM,EAAE,cAAc;QACtB,YAAY,EAAE,mBAAmB;QACjC,WAAW,EAAE,mBAAmB;QAChC,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;YAC/B,EAAE,CAAC,SAAS,CAAC,UAAU;YACvB,EAAE,CAAC,SAAS,CAAC,aAAa;SAC3B,CAAC;KACH,CAAC,EACF,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,IAAI,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,oBAAoB,UAAU,sBAAsB;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CACvD,IAAI,CAAC,aAAa,CAAC,CAAC,oBAAoB,EAAE;QACxC,OAAO,EACL,8EAA8E;KACjF,CAAC,EACF,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAC9D,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,wBAAwB,GAAG,CAAC,oBAAoB,IAAI,OAAO,KAAK,KAAK,CAAC;IAC5E,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAC/D,IAAI,CAAC,aAAa,CAAC,wBAAwB,EAAE;QAC3C,OAAO,EAAE,oBAAoB;YAC3B,CAAC,CAAC,kFAAkF;YACpF,CAAC,CAAC,SAAS;KACd,CAAC,EACF,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAClE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAC1E,IAAI,CAAC,aAAa,CAAC,wBAAwB,EAAE;QAC3C,OAAO,EAAE,oBAAoB;YAC3B,CAAC,CAAC,iEAAiE;YACnE,CAAC,CAAC,2DAA2D;KAChE,CAAC,EACF,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,EACrD,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,WAAW,GAAG,oBAAoB;QACtC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,iBAAiB,IAAI,gBAAgB,CAAC;IAE1C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,UAAU;QACV,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QACrD,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY;QAC7D,qBAAqB,EAAE,6BAA6B;QACpD,aAAa,EAAE,qBAAqB;QACpC,iBAAiB,EAAE,yBAAyB;QAC5C,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE;YACJ,OAAO;YACP,eAAe,EAAE,IAAI;SACtB;QACD,oBAAoB;KACrB,CAAC,CAAC;IAEH,IAAI,oBAAoB,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,+BAA+B,CAAC;YACrC,OAAO;YACP,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,KAAK,CAAC,CAAC,kCAAkC,CAAC;QACxC,OAAO;QACP,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ;QACR,iBAAiB;QACjB,WAAW;QACX,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC5C,IAA6B,EAC7B,gBAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAC9D,QAAQ,EACR,IAAI,CACL,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CACvD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,EAChE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAC/D,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC,CAAC,EACpE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAC1E,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,EACrD,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,WAAW,GAAG,iBAAiB,IAAI,gBAAgB,CAAC;IAE1D,iEAAiE;IACjE,8DAA8D;IAC9D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,UAAU;QACV,QAAQ;QACR,YAAY;QACZ,UAAU,EAAE,WAAW;QACvB,IAAI,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE;KACjC,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,MAAM,EAAE,yDAAyD;QACjE,WAAW;QACX,gBAAgB;QAChB,8BAA8B,EAAE,OAAO,CAAC,iBAAiB,CAAC;KAC3D,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,gCAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC7D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,qBAAqB,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,EAAE;QAC5D,GAAG,gBAAgB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC9C,IAA6B,EAC7B,gBAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAC9D,UAAU,EACV,IAAI,CACL,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CACvD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC,EAClE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAC/D,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,CAAC,EACtE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAC1E,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,EACrD,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,WAAW,GAAG,iBAAiB,IAAI,gBAAgB,CAAC;IAE1D,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,UAAU;QACV,QAAQ;QACR,YAAY;QACZ,qBAAqB,EAAE,+BAA+B;QACtD,aAAa,EAAE,uBAAuB;QACtC,iBAAiB,EAAE,2BAA2B;QAC9C,UAAU,EAAE,WAAW;KACxB,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;QAC7C,MAAM,EAAE,qDAAqD;QAC7D,WAAW;QACX,gBAAgB;QAChB,8BAA8B,EAAE,OAAO,CAAC,iBAAiB,CAAC;KAC3D,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,kCAAkC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC/D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,uBAAuB,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,QAAQ,EAAE;QAC9D,GAAG,gBAAgB;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC3C,IAA6B,EAC7B,gBAAwB;IAExB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAC9D,OAAO,EACP,IAAI,CACL,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,IAAI,CAC3D,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,EACtC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,mEAAmE;IACnE,4DAA4D;IAC5D,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;QAC3C,SAAS;QACT,QAAQ;QACR,kBAAkB;QAClB,qBAAqB;KACtB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,kBAAkB;QACrC,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAC1C,IAAI,CAAC,OAAO,CAAC;YACX,UAAU,EACR,+BAA+B;gBAC/B,KAAK,CAAC,GAAG,CACP,8DAA8D,CAC/D;YACH,YAAY,EAAE,KAAK;SACpB,CAAC,EACF,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEN,MAAM,OAAO,GAAG,CAAC,YAAY,CAAC;IAC9B,MAAM,cAAc,GAClB,wGAAwG,CAAC;IAE3G,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CACnD,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,aAAa,cAAc,EAAE,EAAE,CAAC,EACxE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAClC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjD,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,YAAY,cAAc,EAAE,EAAE,CAAC,EACvE,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EACjC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,IAAI,CACpE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;QAC3B,OAAO,EAAE,sBAAsB,cAAc,EAAE;KAChD,CAAC,EACF,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,EAC1C,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,UAAU,GAAG,cAAc;QAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAC1E,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;QAC3B,OAAO,EAAE,yBAAyB,cAAc,EAAE;KACnD,CAAC,EACF,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,EACrD,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,WAAW,GAAG,UAAU;QAC5B,CAAC,CAAC,iBAAiB,IAAI,gBAAgB;QACvC,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,IAAI,GAAwC,EAAE,CAAC;IACrD,IAAI,MAAM,KAAK,SAAS;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAE5C,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,UAAU;QACV,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,UAAU;QACxB,qBAAqB,EAAE,4BAA4B;QACnD,aAAa,EAAE,oBAAoB;QACnC,iBAAiB,EAAE,wBAAwB;QAC3C,UAAU,EAAE,WAAW;QACvB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClD,CAAC,CAAC;IAEH,MAAM,YAAY,GAAa;QAC7B,+BAA+B,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,gBAAgB,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,UAAU,EAAE;KAC1D,CAAC;IAEF,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;QAC9B,YAAY,CAAC,IAAI,CAAC,YAAY,MAAM,EAAE,CAAC,CAAC;QACxC,YAAY,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACtC,YAAY,CAAC,IAAI,CACf,GAAG,qBAAqB,CAAC;YACvB,MAAM,EAAE,iDAAiD,IAAI,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,EAAE;YACrH,WAAW;YACX,gBAAgB;YAChB,8BAA8B,EAAE,OAAO,CAAC,iBAAiB,CAAC;SAC3D,CAAC,CACH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC7B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,IAA6B;IAC1E,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAC9D,OAAO,EACP,IAAI,CACL,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,IAAI,CACnE,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,EAC1C,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,MAAM,GAAG,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,UAAU;QACV,iBAAiB,EAAE,WAAW,MAAM,mCAAmC;QACvE,IAAI,EAAE,EAAE,mBAAmB,EAAE,cAAc,EAAE;KAC9C,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAC7D,mCAAmC,EACnC,EAAE,CACH,CAAC;IAEF,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,+BAA+B,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,0BAA0B,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,mBAAmB,EAAE;QACrE,iBAAiB,WAAW,EAAE;KAC/B,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;IAEF,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,0KAA0K;QACxK,KAAK,CACH;;;EAGN,EACM,EAAE,WAAW,EAAE,MAAM,EAAE,CACxB,CACJ,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC9C,IAAwE;IAExE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAC9D,UAAU,EACV,IAAI,CACL,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CACzD,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,EACxC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EACxC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACrC,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,UAAU;QACV,iBAAiB,EAAE,yBAAyB,CAAC,SAAS,CAAC;KACxD,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,kCAAkC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC/D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,wBAAwB,SAAS,EAAE;KACpC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,EAAE,CACvC,QAAQ,CAAC,EACP,IAAwE;IAExE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QACtB,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,uDAAuD,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACvG,CAAC,CAAC;IACL,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAC3D,MAAM,CAAC,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAC7C,WAAW,CACT,IAAI,EAAE,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE;YACP,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YACpC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;YACpC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;YAClC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;YACxC,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;YAClC,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE;SACzC;QACD,UAAU,EAAE,uBAAuB;QACnC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;KAC/D,CAAC,CACH,CACF,EACD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,EAChE,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE,CACjC,YAAY,CAAC,IAAI,CAAC;QAChB,OAAO,EAAE,wCAAwC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACxF,CAAC,CACH,CACF,CAAC;IACF,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;IAEpD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CACjC,KAAK,CAAC,cAAc,EAAiC,EACrD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EACtE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EACtE,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EACpE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAC1B,oBAAoB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAC7C,EACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,EAClD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,EACxD,KAAK,CAAC,UAAU,CACjB,CAAC;AACJ,CAAC,EACD,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CACP,mFAAmF,CACpF,CACF,CAAC;AACJ,CAAC,CAAC,CACH,CACF,CAAC","sourcesContent":["import { Effect, Match, Option, Schema } from 'effect';\nimport type { authClientAddDef, OptsFromCommand } from '../../../index.ts';\nimport { BadArgsError } from '../../../errors.ts';\nimport { GlobalOpts } from '../../../context/globalOpts.ts';\nimport { Args } from '../../../lib/args.ts';\nimport { runUIEffect, validateRequired } from '../../../lib/ui.ts';\nimport {\n  addOAuthClient,\n  findName,\n  getClientNameAndProvider,\n  getOrCreateProvider,\n  GoogleAppTypeSchema,\n  OAuthClient,\n} from '../../../lib/oauth.ts';\nimport {\n  GOOGLE_AUTHORIZATION_ENDPOINT,\n  GOOGLE_DISCOVERY_ENDPOINT,\n  GOOGLE_TOKEN_ENDPOINT,\n  APPLE_AUTHORIZATION_ENDPOINT,\n  APPLE_DISCOVERY_ENDPOINT,\n  APPLE_TOKEN_ENDPOINT,\n  clerkDomainFromPublishableKey,\n  LINKEDIN_AUTHORIZATION_ENDPOINT,\n  LINKEDIN_DISCOVERY_ENDPOINT,\n  LINKEDIN_TOKEN_ENDPOINT,\n} from '@superlayer/platform';\nimport { getOAuthCallbackUrl } from '../../../lib/config.ts';\nimport { UI } from '../../../ui/index.ts';\nimport chalk from 'chalk';\nimport boxen from 'boxen';\nimport { link } from '../../../logging.ts';\nimport {\n  appleKeyIdPrompt,\n  applePrivateKeyFilePrompt,\n  appleServicesIdPrompt,\n  appleTeamIdPrompt,\n  clerkPublishableKeyPrompt,\n  clientIdPrompt,\n  clientSecretPrompt,\n  firebaseDiscoveryEndpoint,\n  firebaseProjectIdPrompt,\n  readPrivateKeyFile,\n  redirectSetupMessages,\n  redirectUriPrompt,\n  validateFirebaseProjectId,\n} from './shared.ts';\n\nexport const ClientTypeSchema = Schema.Literal(\n  'google',\n  'github',\n  'apple',\n  'linkedin',\n  'clerk',\n  'firebase',\n);\n\nconst googleConsoleUrl =\n  'https://console.developers.google.com/apis/credentials';\nconst githubDeveloperUrl = 'https://github.com/settings/developers';\nconst linkedinDeveloperUrl = 'https://www.linkedin.com/developers/apps';\nconst optionalRedirectPrompt = (oauthCallbackURL: string) =>\n  redirectUriPrompt({\n    heading: 'Custom redirect URI (optional):',\n    oauthCallbackURL,\n  });\n\nconst selectGoogleAppType = (value: unknown) =>\n  Effect.gen(function* () {\n    const { yes } = yield* GlobalOpts;\n\n    return yield* Option.fromNullable(value).pipe(\n      Effect.catchTag('NoSuchElementException', () => {\n        if (yes) {\n          return BadArgsError.make({\n            message: `Missing required value for --app-type. Expected one of: ${GoogleAppTypeSchema.literals.join(', ')}`,\n          });\n        }\n\n        return runUIEffect(\n          new UI.Select({\n            options: [\n              {\n                label:\n                  'Web' + chalk.dim(' (Redirect Flows or Expo Auth Session)'),\n                value: 'web',\n              },\n              { label: 'iOS', value: 'ios' },\n              { label: 'Android', value: 'android' },\n              { label: 'Google Button for Web', value: 'button-for-web' },\n            ],\n            promptText: 'Select a Google app type:',\n            modifyOutput: UI.modifiers.piped([\n              UI.modifiers.topPadding,\n              UI.modifiers.dimOnComplete,\n            ]),\n            defaultValue: 'web',\n          }),\n        ).pipe(\n          Effect.catchTag('UIError', (e) =>\n            BadArgsError.make({ message: `UI error: ${e.message}` }),\n          ),\n        );\n      }),\n      Effect.andThen((raw) => Schema.decodeUnknown(GoogleAppTypeSchema)(raw)),\n      Effect.catchTag('ParseError', () =>\n        BadArgsError.make({\n          message:\n            'Invalid app-type, must be one of: web, ios, android, button-for-web',\n        }),\n      ),\n    );\n  });\n\nconst selectGoogleCredentialMode = Effect.fn(function* () {\n  return yield* runUIEffect(\n    new UI.Select({\n      options: [\n        {\n          label:\n            'Use dev credentials' +\n            chalk.dim(' (works on localhost and Expo, no Google setup)'),\n          value: 'dev' as const,\n        },\n        {\n          label:\n            'Use my own credentials' +\n            chalk.dim(' (client ID and secret from Google Console)'),\n          value: 'custom' as const,\n        },\n      ],\n      promptText: 'Select Google credential mode:',\n      modifyOutput: UI.modifiers.piped([\n        UI.modifiers.topPadding,\n        UI.modifiers.dimOnComplete,\n      ]),\n      defaultValue: 'dev' as const,\n    }),\n  ).pipe(\n    Effect.catchTag('UIError', (e) =>\n      BadArgsError.make({ message: `UI error: ${e.message}` }),\n    ),\n  );\n});\n\nconst resolveGoogleCredentialMode = Effect.fn(function* ({\n  appType,\n  opts,\n}: {\n  appType: typeof GoogleAppTypeSchema.Type;\n  opts: Record<string, unknown>;\n}): Effect.fn.Return<'custom' | 'dev', BadArgsError, GlobalOpts> {\n  const { yes } = yield* GlobalOpts;\n  const devCredentialsFlag = Args.isTrue(opts, 'dev-credentials');\n  const hasProvidedSomeCustomCredentials = Args.hasAny(opts, [\n    'client-id',\n    'client-secret',\n    'custom-redirect-uri',\n  ]);\n\n  if (devCredentialsFlag && appType !== 'web') {\n    return yield* BadArgsError.make({\n      message:\n        '--dev-credentials is only supported for --app-type web. Native Google clients need credentials from Google.',\n    });\n  }\n\n  if (devCredentialsFlag && hasProvidedSomeCustomCredentials) {\n    return yield* BadArgsError.make({\n      message:\n        '--dev-credentials cannot be combined with --client-id, --client-secret, or --custom-redirect-uri.',\n    });\n  }\n\n  if (appType !== 'web') {\n    return 'custom';\n  }\n\n  if (hasProvidedSomeCustomCredentials) {\n    return 'custom';\n  }\n\n  if (devCredentialsFlag) {\n    return 'dev';\n  }\n\n  if (yes) {\n    return 'dev';\n  }\n\n  return yield* selectGoogleCredentialMode();\n});\n\nconst printGoogleDevCredentialsClient = Effect.fn(function* ({\n  appType,\n  client,\n}: {\n  appType: typeof GoogleAppTypeSchema.Type;\n  client: typeof OAuthClient.Type;\n}) {\n  yield* Effect.log(\n    boxen(\n      [\n        `Google OAuth client created: ${client.client_name}`,\n        `App type: ${appType}`,\n        `Credentials: Instant dev credentials`,\n        `ID: ${client.id}`,\n        '',\n        'No Google Console setup required.',\n        'Works on localhost and Expo during development.',\n        '',\n        chalk.bold('Ready for production? Run:'),\n        `  superlayer auth client update --name ${client.client_name} --client-id <id> --client-secret <secret>`,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nconst printGoogleCustomCredentialsClient = Effect.fn(function* ({\n  appType,\n  client,\n  clientId,\n  customRedirectUri,\n  redirectUri,\n  oauthCallbackURL,\n}: {\n  appType: typeof GoogleAppTypeSchema.Type;\n  client: typeof OAuthClient.Type;\n  clientId: string | undefined;\n  customRedirectUri: string | undefined;\n  redirectUri: string | undefined;\n  oauthCallbackURL: string;\n}) {\n  const redirectMessages: string[] = [];\n  if (appType === 'web' && redirectUri) {\n    redirectMessages.push(\n      ...redirectSetupMessages({\n        prompt: 'Add this redirect URI in Google Console',\n        redirectUri,\n        oauthCallbackURL,\n        showCustomRedirectInstructions: Boolean(customRedirectUri),\n      }),\n    );\n  }\n\n  yield* Effect.log(\n    boxen(\n      [\n        `Google OAuth client created: ${client.client_name}`,\n        `App type: ${appType}`,\n        `ID: ${client.id}`,\n        `Google Client ID: ${client.client_id ?? clientId}`,\n        ...redirectMessages,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nconst handleGoogleClient = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  oauthCallbackURL: string,\n) {\n  // This one requires special logic for getting client name\n  // because the suggested name includes the app type\n  const appType = yield* selectGoogleAppType(opts['app-type']);\n  const credentialMode = yield* resolveGoogleCredentialMode({\n    appType,\n    opts,\n  });\n  const useSharedCredentials = credentialMode === 'dev';\n\n  const { auth, provider } = yield* getOrCreateProvider('google');\n  const usedClientNames = new Set(\n    (auth.oauth_clients ?? []).map((client) => client.client_name),\n  );\n  const suggestedClientName = findName(`google-${appType}`, usedClientNames);\n\n  const clientName = yield* Args.text(opts, 'name').pipe(\n    Args.prompt({\n      prompt: 'Client Name:',\n      defaultValue: suggestedClientName,\n      placeholder: suggestedClientName,\n      validate: validateRequired,\n      modifyOutput: UI.modifiers.piped([\n        UI.modifiers.topPadding,\n        UI.modifiers.dimOnComplete,\n      ]),\n    }),\n    Args.required(),\n  );\n\n  if (usedClientNames.has(clientName)) {\n    return yield* BadArgsError.make({\n      message: `The unique name '${clientName}' is already in use.`,\n    });\n  }\n\n  const clientId = yield* Args.text(opts, 'client-id').pipe(\n    Args.availableWhen(!useSharedCredentials, {\n      message:\n        '--client-id is not compatible with --dev-credentials. Drop one or the other.',\n    }),\n    Args.prompt(clientIdPrompt({ providerUrl: googleConsoleUrl })),\n    Args.required(),\n  );\n\n  const usesCustomWebCredentials = !useSharedCredentials && appType === 'web';\n  const clientSecret = yield* Args.text(opts, 'client-secret').pipe(\n    Args.availableWhen(usesCustomWebCredentials, {\n      message: useSharedCredentials\n        ? '--client-secret is not compatible with --dev-credentials. Drop one or the other.'\n        : undefined,\n    }),\n    Args.prompt(clientSecretPrompt({ providerUrl: googleConsoleUrl })),\n    Args.required(),\n  );\n\n  const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(\n    Args.availableWhen(usesCustomWebCredentials, {\n      message: useSharedCredentials\n        ? '--custom-redirect-uri is not compatible with --dev-credentials.'\n        : 'Provided custom redirect URI when not using web app type.',\n    }),\n    Args.prompt(optionalRedirectPrompt(oauthCallbackURL)),\n    Args.optional(),\n  );\n\n  const redirectUri = useSharedCredentials\n    ? undefined\n    : customRedirectUri || oauthCallbackURL;\n\n  const response = yield* addOAuthClient({\n    providerId: provider.id,\n    clientName,\n    clientId: useSharedCredentials ? undefined : clientId,\n    clientSecret: useSharedCredentials ? undefined : clientSecret,\n    authorizationEndpoint: GOOGLE_AUTHORIZATION_ENDPOINT,\n    tokenEndpoint: GOOGLE_TOKEN_ENDPOINT,\n    discoveryEndpoint: GOOGLE_DISCOVERY_ENDPOINT,\n    redirectTo: redirectUri,\n    meta: {\n      appType,\n      skipNonceChecks: true,\n    },\n    useSharedCredentials,\n  });\n\n  if (useSharedCredentials) {\n    yield* printGoogleDevCredentialsClient({\n      appType,\n      client: response.client,\n    });\n    return;\n  }\n\n  yield* printGoogleCustomCredentialsClient({\n    appType,\n    client: response.client,\n    clientId,\n    customRedirectUri,\n    redirectUri,\n    oauthCallbackURL,\n  });\n});\n\nconst handleGithubClient = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  oauthCallbackURL: string,\n) {\n  const { clientName, provider } = yield* getClientNameAndProvider(\n    'github',\n    opts,\n  );\n\n  const clientId = yield* Args.text(opts, 'client-id').pipe(\n    Args.prompt(clientIdPrompt({ providerUrl: githubDeveloperUrl })),\n    Args.required(),\n  );\n\n  const clientSecret = yield* Args.text(opts, 'client-secret').pipe(\n    Args.prompt(clientSecretPrompt({ providerUrl: githubDeveloperUrl })),\n    Args.required(),\n  );\n\n  const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(\n    Args.prompt(optionalRedirectPrompt(oauthCallbackURL)),\n    Args.optional(),\n  );\n\n  const redirectUri = customRedirectUri || oauthCallbackURL;\n\n  // The backend infers GitHub's authorization/token endpoints from\n  // meta.providerName === 'github', so we don't pass them here.\n  const response = yield* addOAuthClient({\n    providerId: provider.id,\n    clientName,\n    clientId,\n    clientSecret,\n    redirectTo: redirectUri,\n    meta: { providerName: 'github' },\n  });\n\n  const redirectMessages = redirectSetupMessages({\n    prompt: 'Add this callback URL in your GitHub OAuth App settings',\n    redirectUri,\n    oauthCallbackURL,\n    showCustomRedirectInstructions: Boolean(customRedirectUri),\n  });\n\n  yield* Effect.log(\n    boxen(\n      [\n        `GitHub OAuth client created: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        `GitHub Client ID: ${response.client.client_id ?? clientId}`,\n        ...redirectMessages,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nconst handleLinkedInClient = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  oauthCallbackURL: string,\n) {\n  const { clientName, provider } = yield* getClientNameAndProvider(\n    'linkedin',\n    opts,\n  );\n\n  const clientId = yield* Args.text(opts, 'client-id').pipe(\n    Args.prompt(clientIdPrompt({ providerUrl: linkedinDeveloperUrl })),\n    Args.required(),\n  );\n\n  const clientSecret = yield* Args.text(opts, 'client-secret').pipe(\n    Args.prompt(clientSecretPrompt({ providerUrl: linkedinDeveloperUrl })),\n    Args.required(),\n  );\n\n  const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(\n    Args.prompt(optionalRedirectPrompt(oauthCallbackURL)),\n    Args.optional(),\n  );\n\n  const redirectUri = customRedirectUri || oauthCallbackURL;\n\n  const response = yield* addOAuthClient({\n    providerId: provider.id,\n    clientName,\n    clientId,\n    clientSecret,\n    authorizationEndpoint: LINKEDIN_AUTHORIZATION_ENDPOINT,\n    tokenEndpoint: LINKEDIN_TOKEN_ENDPOINT,\n    discoveryEndpoint: LINKEDIN_DISCOVERY_ENDPOINT,\n    redirectTo: redirectUri,\n  });\n\n  const redirectMessages = redirectSetupMessages({\n    prompt: 'Add this redirect URI in your LinkedIn app settings',\n    redirectUri,\n    oauthCallbackURL,\n    showCustomRedirectInstructions: Boolean(customRedirectUri),\n  });\n\n  yield* Effect.log(\n    boxen(\n      [\n        `LinkedIn OAuth client created: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        `LinkedIn Client ID: ${response.client.client_id ?? clientId}`,\n        ...redirectMessages,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nconst handleAppleClient = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  oauthCallbackURL: string,\n) {\n  const { clientName, provider } = yield* getClientNameAndProvider(\n    'apple',\n    opts,\n  );\n\n  const servicesId = yield* Args.text(opts, 'services-id').pipe(\n    Args.prompt(appleServicesIdPrompt({})),\n    Args.required(),\n  );\n\n  // If any web-flow flag is provided, enable web flow; otherwise ask\n  // (non-interactively with --yes we default to native-only).\n  const anyWebFlagProvided = Args.hasAny(opts, [\n    'team-id',\n    'key-id',\n    'private-key-file',\n    'custom-redirect-uri',\n  ]);\n\n  const configureWeb = anyWebFlagProvided\n    ? true\n    : yield* Args.bool(opts, 'configure-web').pipe(\n        Args.confirm({\n          promptText:\n            'Configure web redirect flow? ' +\n            chalk.dim(\n              '(requires Team ID, Key ID, and a .p8 private key from Apple)',\n            ),\n          defaultValue: false,\n        }),\n        Args.required(),\n      );\n\n  const skipWeb = !configureWeb;\n  const webSkipMessage =\n    'requires configuring the web redirect flow (also provide --team-id, --key-id, and --private-key-file).';\n\n  const teamId = yield* Args.text(opts, 'team-id').pipe(\n    Args.availableWhen(!skipWeb, { message: `--team-id ${webSkipMessage}` }),\n    Args.prompt(appleTeamIdPrompt({})),\n    Args.required(),\n  );\n\n  const keyId = yield* Args.text(opts, 'key-id').pipe(\n    Args.availableWhen(!skipWeb, { message: `--key-id ${webSkipMessage}` }),\n    Args.prompt(appleKeyIdPrompt({})),\n    Args.required(),\n  );\n\n  const privateKeyPath = yield* Args.text(opts, 'private-key-file').pipe(\n    Args.availableWhen(!skipWeb, {\n      message: `--private-key-file ${webSkipMessage}`,\n    }),\n    Args.prompt(applePrivateKeyFilePrompt({})),\n    Args.required(),\n  );\n\n  const privateKey = privateKeyPath\n    ? yield* readPrivateKeyFile(privateKeyPath)\n    : undefined;\n\n  const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(\n    Args.availableWhen(!skipWeb, {\n      message: `--custom-redirect-uri ${webSkipMessage}`,\n    }),\n    Args.prompt(optionalRedirectPrompt(oauthCallbackURL)),\n    Args.optional(),\n  );\n\n  const redirectUri = privateKey\n    ? customRedirectUri || oauthCallbackURL\n    : undefined;\n\n  const meta: { teamId?: string; keyId?: string } = {};\n  if (teamId !== undefined) meta.teamId = teamId;\n  if (keyId !== undefined) meta.keyId = keyId;\n\n  const response = yield* addOAuthClient({\n    providerId: provider.id,\n    clientName,\n    clientId: servicesId,\n    clientSecret: privateKey,\n    authorizationEndpoint: APPLE_AUTHORIZATION_ENDPOINT,\n    tokenEndpoint: APPLE_TOKEN_ENDPOINT,\n    discoveryEndpoint: APPLE_DISCOVERY_ENDPOINT,\n    redirectTo: redirectUri,\n    ...(Object.keys(meta).length > 0 ? { meta } : {}),\n  });\n\n  const summaryLines: string[] = [\n    `Apple OAuth client created: ${response.client.client_name}`,\n    `ID: ${response.client.id}`,\n    `Services ID: ${response.client.client_id ?? servicesId}`,\n  ];\n\n  if (privateKey && redirectUri) {\n    summaryLines.push(`Team ID: ${teamId}`);\n    summaryLines.push(`Key ID: ${keyId}`);\n    summaryLines.push(\n      ...redirectSetupMessages({\n        prompt: `Add this return URL under your Services ID on ${link('https://developer.apple.com', 'developer.apple.com')}`,\n        redirectUri,\n        oauthCallbackURL,\n        showCustomRedirectInstructions: Boolean(customRedirectUri),\n      }),\n    );\n  }\n  yield* Effect.log(\n    boxen(summaryLines.join('\\n'), {\n      dimBorder: true,\n      padding: { right: 1, left: 1 },\n    }),\n  );\n});\n\nconst handleClerkClient = Effect.fn(function* (opts: Record<string, unknown>) {\n  const { clientName, provider } = yield* getClientNameAndProvider(\n    'clerk',\n    opts,\n  );\n\n  const publishableKey = yield* Args.text(opts, 'publishable-key').pipe(\n    Args.prompt(clerkPublishableKeyPrompt({})),\n    Args.required(),\n  );\n\n  const domain = clerkDomainFromPublishableKey(publishableKey);\n  if (!domain) {\n    return yield* BadArgsError.make({\n      message: 'Invalid publishable key. Could not extract domain.',\n    });\n  }\n\n  const response = yield* addOAuthClient({\n    providerId: provider.id,\n    clientName,\n    discoveryEndpoint: `https://${domain}/.well-known/openid-configuration`,\n    meta: { clerkPublishableKey: publishableKey },\n  });\n\n  const clerkDomain = response.client.discovery_endpoint?.replace(\n    '/.well-known/openid-configuration',\n    '',\n  );\n\n  yield* Effect.log(\n    boxen(\n      [\n        `Clerk OAuth client created: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        `Clerk Publishable Key: ${response.client.meta?.clerkPublishableKey}`,\n        `Clerk Domain: ${clerkDomain}`,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n\n  yield* Effect.log(\n    '\\nNavigate to your Clerk dashboard. On the Sessions page, click the Edit button in the Customize session token section.\\nEnsure your Claims field has the email claim:\\n' +\n      boxen(\n        `{\n  \"email\": \"{{user.primary_email_address}}\",\n  \"email_verified\": \"{{user.email_verified}}\"\n}`,\n        { borderStyle: 'none' },\n      ),\n  );\n});\n\nconst handleFirebaseClient = Effect.fn(function* (\n  opts: OptsFromCommand<typeof authClientAddDef> & Record<string, unknown>,\n) {\n  const { clientName, provider } = yield* getClientNameAndProvider(\n    'firebase',\n    opts,\n  );\n\n  const projectId = yield* Args.text(opts, 'project-id').pipe(\n    Args.prompt(firebaseProjectIdPrompt({})),\n    Args.validate(validateFirebaseProjectId),\n    Args.required(),\n  );\n  const response = yield* addOAuthClient({\n    providerId: provider.id,\n    clientName,\n    discoveryEndpoint: firebaseDiscoveryEndpoint(projectId),\n  });\n\n  yield* Effect.log(\n    boxen(\n      [\n        `Firebase OAuth client created: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        `Firebase Project ID: ${projectId}`,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nexport const authClientAddCmd = Effect.fn(\n  function* (\n    opts: OptsFromCommand<typeof authClientAddDef> & Record<string, unknown>,\n  ) {\n    const { yes } = yield* GlobalOpts;\n    if (!opts.type && yes) {\n      return yield* BadArgsError.make({\n        message: `Missing required value for --type. Expected one of: ${ClientTypeSchema.literals.join(', ')}`,\n      });\n    }\n    const clientType = yield* Option.fromNullable(opts.type).pipe(\n      Effect.catchTag('NoSuchElementException', () =>\n        runUIEffect(\n          new UI.Select({\n            options: [\n              { label: 'Google', value: 'google' },\n              { label: 'GitHub', value: 'github' },\n              { label: 'Apple', value: 'apple' },\n              { label: 'LinkedIn', value: 'linkedin' },\n              { label: 'Clerk', value: 'clerk' },\n              { label: 'Firebase', value: 'firebase' },\n            ],\n            promptText: 'Select a client type:',\n            modifyOutput: UI.modifiers.piped([UI.modifiers.dimOnComplete]),\n          }),\n        ),\n      ),\n      Effect.andThen((s) => Schema.decodeUnknown(ClientTypeSchema)(s)),\n      Effect.catchTag('ParseError', () =>\n        BadArgsError.make({\n          message: `Invalid client type, must be one of: ${ClientTypeSchema.literals.join(', ')}`,\n        }),\n      ),\n    );\n    const oauthCallbackURL = yield* getOAuthCallbackUrl;\n\n    yield* Match.value(clientType).pipe(\n      Match.withReturnType<Effect.Effect<void, any, any>>(),\n      Match.when('google', () => handleGoogleClient(opts, oauthCallbackURL)),\n      Match.when('github', () => handleGithubClient(opts, oauthCallbackURL)),\n      Match.when('apple', () => handleAppleClient(opts, oauthCallbackURL)),\n      Match.when('linkedin', () =>\n        handleLinkedInClient(opts, oauthCallbackURL),\n      ),\n      Match.when('clerk', () => handleClerkClient(opts)),\n      Match.when('firebase', () => handleFirebaseClient(opts)),\n      Match.exhaustive,\n    );\n  },\n  Effect.catchTag('BadArgsError', (e) =>\n    Effect.gen(function* () {\n      yield* Effect.logError(e.message);\n      yield* Effect.log(\n        chalk.dim(\n          'hint: run `superlayer auth client add --help` for the list of available arguments',\n        ),\n      );\n    }),\n  ),\n);\n"]}

package/dist/commands/auth/client/delete.d.ts

@@ -0,0 +1,11 @@
+import { Effect } from 'effect';
+import { BadArgsError } from '../../../errors.ts';
+import { GlobalOpts } from '../../../context/globalOpts.ts';
+import { InstantHttpAuthed } from '../../../lib/http.ts';
+import { CurrentApp } from '../../../context/currentApp.ts';
+export declare const authClientDeleteCmd: (opts: {
+    id?: string | undefined;
+    name?: string | undefined;
+    app?: string | undefined;
+}) => Effect.Effect<undefined, BadArgsError | import("../../../lib/ui.ts").UIError | import("effect/ParseResult").ParseError | import("../../../lib/http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, GlobalOpts | InstantHttpAuthed | CurrentApp>;
+//# sourceMappingURL=delete.d.ts.map

package/dist/commands/auth/client/delete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.d.ts","sourceRoot":"","sources":["../../../../src/commands/auth/client/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAI5D,OAAO,EAAE,iBAAiB,EAAe,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAE5D,eAAO,MAAM,mBAAmB;;;;2XAuC9B,CAAC"}

package/dist/commands/auth/client/delete.js

@@ -0,0 +1,48 @@
+import { Effect } from 'effect';
+import { BadArgsError } from "../../../errors.js";
+import { findClientByIdOrName, getAppsAuth } from "../../../lib/oauth.js";
+import { GlobalOpts } from "../../../context/globalOpts.js";
+import { runUIEffect } from "../../../lib/ui.js";
+import { UI } from "../../../ui/index.js";
+import chalk from 'chalk';
+import { InstantHttpAuthed, withCommand } from "../../../lib/http.js";
+import { CurrentApp } from "../../../context/currentApp.js";
+export const authClientDeleteCmd = Effect.fn(function* (opts) {
+    if (!opts.id && !opts.name) {
+        const info = yield* getAppsAuth();
+        // user must pick manually
+        const { yes } = yield* GlobalOpts;
+        if (yes) {
+            return yield* BadArgsError.make({
+                message: 'Must specify --id or --name',
+            });
+        }
+        if (!info.oauth_clients) {
+            yield* Effect.log('No OAuth clients found');
+            return;
+        }
+        // Prompt user to select
+        const picked = yield* runUIEffect(new UI.Select({
+            options: info.oauth_clients.map((app) => ({
+                label: app.client_name + chalk.dim(` (${app.id})`),
+                value: app,
+            })),
+            promptText: 'Select a client to delete:',
+        }));
+        yield* deleteOauthClient(picked.id);
+    }
+    else {
+        const { client } = yield* findClientByIdOrName({
+            id: opts.id,
+            name: opts.name,
+        });
+        yield* deleteOauthClient(client.id);
+    }
+    yield* Effect.log('Client Deleted!');
+});
+const deleteOauthClient = Effect.fn(function* (clientDatabaseId) {
+    const http = (yield* InstantHttpAuthed).pipe(withCommand('auth client delete'));
+    const { appId } = yield* CurrentApp;
+    yield* http.del(`/dash/apps/${appId}/oauth_clients/${clientDatabaseId}`);
+});
+//# sourceMappingURL=delete.js.map

package/dist/commands/auth/client/delete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delete.js","sourceRoot":"","sources":["../../../../src/commands/auth/client/delete.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAE5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpD,IAAiD;IAEjD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAClC,0BAA0B;QAC1B,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;QAClC,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;gBAC9B,OAAO,EAAE,6BAA6B;aACvC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QAED,wBAAwB;QACxB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,WAAW,CAC/B,IAAI,EAAE,CAAC,MAAM,CAAC;YACZ,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACxC,KAAK,EAAE,GAAG,CAAC,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC;gBAClD,KAAK,EAAE,GAAG;aACX,CAAC,CAAC;YACH,UAAU,EAAE,4BAA4B;SACzC,CAAC,CACH,CAAC;QAEF,KAAK,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,oBAAoB,CAAC;YAC7C,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,gBAAwB;IACrE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAC1C,WAAW,CAAC,oBAAoB,CAAC,CAClC,CAAC;IACF,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAEpC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,KAAK,kBAAkB,gBAAgB,EAAE,CAAC,CAAC;AAC3E,CAAC,CAAC,CAAC","sourcesContent":["import { Effect } from 'effect';\nimport type { authClientDeleteDef, OptsFromCommand } from '../../../index.ts';\nimport { BadArgsError } from '../../../errors.ts';\nimport { findClientByIdOrName, getAppsAuth } from '../../../lib/oauth.ts';\nimport { GlobalOpts } from '../../../context/globalOpts.ts';\nimport { runUIEffect } from '../../../lib/ui.ts';\nimport { UI } from '../../../ui/index.ts';\nimport chalk from 'chalk';\nimport { InstantHttpAuthed, withCommand } from '../../../lib/http.ts';\nimport { CurrentApp } from '../../../context/currentApp.ts';\n\nexport const authClientDeleteCmd = Effect.fn(function* (\n  opts: OptsFromCommand<typeof authClientDeleteDef>,\n) {\n  if (!opts.id && !opts.name) {\n    const info = yield* getAppsAuth();\n    // user must pick manually\n    const { yes } = yield* GlobalOpts;\n    if (yes) {\n      return yield* BadArgsError.make({\n        message: 'Must specify --id or --name',\n      });\n    }\n\n    if (!info.oauth_clients) {\n      yield* Effect.log('No OAuth clients found');\n      return;\n    }\n\n    // Prompt user to select\n    const picked = yield* runUIEffect(\n      new UI.Select({\n        options: info.oauth_clients.map((app) => ({\n          label: app.client_name + chalk.dim(` (${app.id})`),\n          value: app,\n        })),\n        promptText: 'Select a client to delete:',\n      }),\n    );\n\n    yield* deleteOauthClient(picked.id);\n  } else {\n    const { client } = yield* findClientByIdOrName({\n      id: opts.id,\n      name: opts.name,\n    });\n    yield* deleteOauthClient(client.id);\n  }\n\n  yield* Effect.log('Client Deleted!');\n});\n\nconst deleteOauthClient = Effect.fn(function* (clientDatabaseId: string) {\n  const http = (yield* InstantHttpAuthed).pipe(\n    withCommand('auth client delete'),\n  );\n  const { appId } = yield* CurrentApp;\n\n  yield* http.del(`/dash/apps/${appId}/oauth_clients/${clientDatabaseId}`);\n});\n"]}

package/dist/commands/auth/client/list.d.ts

@@ -0,0 +1,6 @@
+import { Effect } from 'effect';
+export declare const authClientListCmd: (_opts: {
+    app?: string | undefined;
+    json?: true | undefined;
+}) => Effect.Effect<void, import("effect/ParseResult").ParseError | import("../../../lib/http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, import("../../../lib/http.ts").InstantHttpAuthed | import("../../../context/currentApp.ts").CurrentApp>;
+//# sourceMappingURL=list.d.ts.map

package/dist/commands/auth/client/list.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../../src/commands/auth/client/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAMhC,eAAO,MAAM,iBAAiB;;;2XAoD5B,CAAC"}

package/dist/commands/auth/client/list.js

@@ -0,0 +1,38 @@
+import chalk from 'chalk';
+import { Effect } from 'effect';
+import { getAppsAuth } from "../../../lib/oauth.js";
+const formatValue = (value) => value ?? 'n/a';
+export const authClientListCmd = Effect.fn(function* (_opts) {
+    const info = yield* getAppsAuth();
+    if (_opts.json) {
+        yield* Effect.log(JSON.stringify(info.oauth_clients, null, 2));
+        return;
+    }
+    const providersById = new Map((info.oauth_service_providers ?? []).map((provider) => [
+        provider.id,
+        provider,
+    ]));
+    const clients = info.oauth_clients ?? [];
+    if (clients.length === 0) {
+        yield* Effect.log('No OAuth clients configured.');
+        return;
+    }
+    for (const client of clients) {
+        const provider = providersById.get(client.provider_id);
+        yield* Effect.log(chalk.cyan(client.client_name));
+        yield* Effect.log(`  Provider: ${provider?.provider_name ?? client.provider_id}`);
+        const clientAppType = client.meta?.appType;
+        if (clientAppType) {
+            yield* Effect.log(`  App type: ${clientAppType}`);
+        }
+        yield* Effect.log(`  Credentials: ${client.use_shared_credentials ? 'Instant dev credentials' : 'custom'}`);
+        yield* Effect.log(`  ID: ${client.id}`);
+        yield* Effect.log(`  Client id: ${client.use_shared_credentials
+            ? 'managed by Instant'
+            : formatValue(client.client_id)}`);
+        yield* Effect.log(`  Redirect URL: ${client.use_shared_credentials
+            ? 'localhost and Expo allowed automatically'
+            : formatValue(client.redirect_to)}`);
+    }
+});
+//# sourceMappingURL=list.js.map