@superlayer/cli 1.0.67

package/dist/commands/auth/client/update.js

@@ -0,0 +1,445 @@
+import { Effect, Match } from 'effect';
+import { BadArgsError } from "../../../errors.js";
+import { GlobalOpts } from "../../../context/globalOpts.js";
+import { Args } from "../../../lib/args.js";
+import { runUIEffect } from "../../../lib/ui.js";
+import { findClientByIdOrName, getAppsAuth, OAuthClient, updateOAuthClient, } from "../../../lib/oauth.js";
+import { UI } from "../../../ui/index.js";
+import { clerkDomainFromPublishableKey } from '@superlayer/platform';
+import { getOAuthCallbackUrl } from "../../../lib/config.js";
+import chalk from 'chalk';
+import boxen from 'boxen';
+import { appleKeyIdPrompt, applePrivateKeyFilePrompt, appleServicesIdPrompt, appleTeamIdPrompt, clerkPublishableKeyPrompt, clientIdPrompt, clientSecretPrompt, firebaseDiscoveryEndpoint, firebaseProjectIdPrompt, getMetaString, readPrivateKeyFile, redirectSetupMessages, redirectUriPrompt, validateFirebaseProjectId, } from "./shared.js";
+import { link } from "../../../logging.js";
+const redirectPrompt = (oauthCallbackURL) => redirectUriPrompt({
+    heading: 'Custom redirect URI (optional):',
+    oauthCallbackURL,
+});
+const newRedirectPrompt = (oauthCallbackURL) => redirectUriPrompt({ heading: 'New redirect URI:', oauthCallbackURL });
+const googleConsoleUrl = 'https://console.developers.google.com/apis/credentials';
+const resolveClient = Effect.fn(function* (params) {
+    const { yes } = yield* GlobalOpts;
+    if (params.id || params.name) {
+        return yield* findClientByIdOrName({
+            id: params.id,
+            name: params.name,
+        });
+    }
+    if (yes) {
+        return yield* BadArgsError.make({ message: 'Must specify --id or --name' });
+    }
+    const auth = yield* getAppsAuth();
+    const clients = (auth.oauth_clients ?? []);
+    if (clients.length === 0) {
+        return yield* BadArgsError.make({
+            message: 'No OAuth clients found for this app.',
+        });
+    }
+    return yield* runUIEffect(new UI.Select({
+        options: clients.map((client) => ({
+            label: client.client_name +
+                (client.use_shared_credentials
+                    ? chalk.dim(' (dev credentials)')
+                    : '') +
+                chalk.dim(` (${client.id})`),
+            value: client,
+        })),
+        promptText: 'Select a client to update:',
+        modifyOutput: UI.modifiers.dimOnComplete,
+    })).pipe(Effect.catchTag('UIError', (e) => BadArgsError.make({ message: `UI error: ${e.message}` })), Effect.map((client) => ({ auth, client })));
+});
+const selectUpdateAction = Effect.fn(function* (options) {
+    return yield* runUIEffect(new UI.Select({
+        options,
+        promptText: 'What do you want to update?',
+        modifyOutput: UI.modifiers.dimOnComplete,
+    })).pipe(Effect.catchTag('UIError', (e) => BadArgsError.make({ message: `UI error: ${e.message}` })));
+});
+const updateGoogleToDevCredentials = Effect.fn(function* (client) {
+    const response = yield* updateOAuthClient({
+        oauthClientId: client.id,
+        clientId: null,
+        clientSecret: null,
+        useSharedCredentials: true,
+        redirectTo: null,
+    });
+    yield* Effect.log(boxen([
+        `Google OAuth client updated: ${response.client.client_name}`,
+        'Credentials: Instant dev credentials',
+        `ID: ${response.client.id}`,
+        '',
+        'No Google Console setup required.',
+        'Works on localhost and Expo during development.',
+        '',
+        chalk.bold('Ready for production? Run:'),
+        `  superlayer auth client update --name ${response.client.client_name} --client-id <id> --client-secret <secret>`,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const hasGoogleCustomCredentialFlags = (opts) => Args.hasAny(opts, ['client-id', 'client-secret', 'custom-redirect-uri']);
+const hasGoogleUpdateFlags = (opts) => Args.isTrue(opts, 'dev-credentials') || hasGoogleCustomCredentialFlags(opts);
+const selectGoogleUpdateMode = Effect.fn(function* ({ isWeb, switchingFromShared, }) {
+    if (switchingFromShared) {
+        return yield* runUIEffect(new UI.Select({
+            options: [
+                { label: 'Custom Google credentials', value: 'custom' },
+                {
+                    label: 'Instant dev credentials' + chalk.dim(' (current)'),
+                    value: 'none',
+                },
+            ],
+            promptText: 'Choose credential mode:',
+            modifyOutput: UI.modifiers.dimOnComplete,
+        })).pipe(Effect.catchTag('UIError', (e) => BadArgsError.make({ message: `UI error: ${e.message}` })));
+    }
+    const options = [
+        { label: 'Update Client ID and Client Secret', value: 'custom' },
+    ];
+    if (isWeb) {
+        options.push({
+            label: 'Switch to Instant dev credentials' +
+                chalk.dim(' (localhost and Expo, no Google setup)'),
+            value: 'dev',
+        }, { label: 'Update redirect URI', value: 'redirect' });
+    }
+    return yield* selectUpdateAction(options);
+});
+const resolveGoogleUpdateMode = Effect.fn(function* ({ opts, isWeb, switchingFromShared, }) {
+    const { yes } = yield* GlobalOpts;
+    const devCredentialsFlag = Args.isTrue(opts, 'dev-credentials');
+    const hasProvidedSomeCustomCredentials = hasGoogleCustomCredentialFlags(opts);
+    if (devCredentialsFlag && !isWeb) {
+        return yield* BadArgsError.make({
+            message: '--dev-credentials is only supported for Google web clients.',
+        });
+    }
+    if (!isWeb &&
+        (Args.has(opts, 'client-secret') || Args.has(opts, 'custom-redirect-uri'))) {
+        return yield* BadArgsError.make({
+            message: '--client-secret and --custom-redirect-uri are only supported for Google web clients.',
+        });
+    }
+    if (devCredentialsFlag && hasProvidedSomeCustomCredentials) {
+        return yield* BadArgsError.make({
+            message: '--dev-credentials cannot be combined with --client-id, --client-secret, or --custom-redirect-uri.',
+        });
+    }
+    if (devCredentialsFlag) {
+        return 'dev';
+    }
+    const hasAnyUpdateFlag = hasGoogleUpdateFlags(opts);
+    if (yes && !hasAnyUpdateFlag) {
+        return yield* BadArgsError.make({
+            message: 'Must specify at least one of --client-id, --client-secret, --custom-redirect-uri, or --dev-credentials.',
+        });
+    }
+    if (yes &&
+        isWeb &&
+        switchingFromShared &&
+        (!Args.has(opts, 'client-id') || !Args.has(opts, 'client-secret'))) {
+        return yield* BadArgsError.make({
+            message: 'Must specify both --client-id and --client-secret when switching from Instant dev credentials to custom credentials with --yes.',
+        });
+    }
+    if (hasAnyUpdateFlag) {
+        return 'custom';
+    }
+    return yield* selectGoogleUpdateMode({ isWeb, switchingFromShared });
+});
+const updateGoogleRedirect = Effect.fn(function* ({ opts, client, oauthCallbackURL, }) {
+    const redirectTo = yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.prompt(newRedirectPrompt(oauthCallbackURL)), Args.required());
+    const response = yield* updateOAuthClient({
+        oauthClientId: client.id,
+        redirectTo,
+    });
+    yield* Effect.log(boxen([
+        `Google OAuth client updated: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        ...redirectSetupMessages({
+            prompt: 'Add this redirect URI in Google Console',
+            redirectUri: redirectTo,
+            oauthCallbackURL,
+            showCustomRedirectInstructions: true,
+        }),
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const updateGoogleCustomCredentials = Effect.fn(function* ({ opts, client, isWeb, switchingFromShared, promptCredentials, oauthCallbackURL, }) {
+    const mustCollectCredentials = promptCredentials || switchingFromShared;
+    const shouldPromptRedirectUri = isWeb && switchingFromShared && promptCredentials;
+    const clientId = yield* Args.text(opts, 'client-id').pipe(Args.availableWhen(mustCollectCredentials || Args.has(opts, 'client-id')), Args.prompt(clientIdPrompt({ providerUrl: googleConsoleUrl })), Args.required());
+    const clientSecret = yield* Args.text(opts, 'client-secret').pipe(Args.availableWhen(isWeb && (mustCollectCredentials || Args.has(opts, 'client-secret'))), Args.prompt(clientSecretPrompt({ providerUrl: googleConsoleUrl })), Args.required());
+    const customRedirectUri = isWeb
+        ? yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.availableWhen(shouldPromptRedirectUri || Args.has(opts, 'custom-redirect-uri')), Args.prompt(redirectPrompt(oauthCallbackURL)), Args.optional())
+        : undefined;
+    const redirectTo = switchingFromShared
+        ? customRedirectUri || client.redirect_to || oauthCallbackURL
+        : customRedirectUri;
+    const response = yield* updateOAuthClient({
+        oauthClientId: client.id,
+        clientId,
+        clientSecret,
+        redirectTo,
+        useSharedCredentials: switchingFromShared ? false : undefined,
+    });
+    const lines = [
+        `Google OAuth client updated: ${response.client.client_name}`,
+        'Credentials: custom',
+        `ID: ${response.client.id}`,
+    ];
+    if (switchingFromShared) {
+        lines.push('', 'This client no longer uses Instant dev credentials.');
+    }
+    if (isWeb && redirectTo) {
+        lines.push(...redirectSetupMessages({
+            prompt: 'Add this redirect URI in Google Console',
+            redirectUri: redirectTo,
+            oauthCallbackURL,
+            showCustomRedirectInstructions: Boolean(customRedirectUri),
+        }));
+    }
+    yield* Effect.log(boxen(lines.join('\n'), {
+        dimBorder: true,
+        padding: { right: 1, left: 1 },
+    }));
+});
+const handleGoogleUpdate = Effect.fn(function* (opts, client, oauthCallbackURL) {
+    const { yes } = yield* GlobalOpts;
+    const appType = getMetaString(client.meta, 'appType');
+    const isWeb = appType === 'web' || !appType;
+    const switchingFromShared = Boolean(client.use_shared_credentials);
+    const hasAnyUpdateFlag = hasGoogleUpdateFlags(opts);
+    if (!hasAnyUpdateFlag && !yes) {
+        yield* Effect.log(`\nCurrent mode: ${switchingFromShared
+            ? chalk.bold('Instant dev credentials')
+            : 'custom credentials'}`);
+    }
+    const updateMode = yield* resolveGoogleUpdateMode({
+        opts,
+        isWeb,
+        switchingFromShared,
+    });
+    if (updateMode === 'dev') {
+        return yield* updateGoogleToDevCredentials(client);
+    }
+    if (updateMode === 'none') {
+        yield* Effect.log(chalk.dim('No changes made.'));
+        return;
+    }
+    if (updateMode === 'redirect') {
+        return yield* updateGoogleRedirect({ opts, client, oauthCallbackURL });
+    }
+    return yield* updateGoogleCustomCredentials({
+        opts,
+        client,
+        isWeb,
+        switchingFromShared,
+        promptCredentials: !hasAnyUpdateFlag && !yes,
+        oauthCallbackURL,
+    });
+});
+const handleClientIdSecretUpdate = Effect.fn(function* (params) {
+    const { yes } = yield* GlobalOpts;
+    const hasAnyUpdateFlag = Args.hasAny(params.opts, [
+        'client-id',
+        'client-secret',
+        'custom-redirect-uri',
+    ]);
+    if (yes && !hasAnyUpdateFlag) {
+        return yield* BadArgsError.make({
+            message: 'Must specify at least one of --client-id, --client-secret, or --custom-redirect-uri.',
+        });
+    }
+    let promptCredentials = false;
+    let promptRedirect = false;
+    if (!hasAnyUpdateFlag && !yes) {
+        const action = yield* selectUpdateAction([
+            { label: 'Update Client ID and Client Secret', value: 'rotate' },
+            { label: 'Update redirect URI', value: 'redirect' },
+        ]);
+        promptCredentials = action === 'rotate';
+        promptRedirect = action === 'redirect';
+    }
+    const clientId = yield* Args.text(params.opts, 'client-id').pipe(Args.availableWhen(promptCredentials || Args.has(params.opts, 'client-id')), Args.prompt(clientIdPrompt({ providerUrl: params.providerUrl })), Args.required());
+    const clientSecret = yield* Args.text(params.opts, 'client-secret').pipe(Args.availableWhen(promptCredentials || Args.has(params.opts, 'client-secret')), Args.prompt(clientSecretPrompt({ providerUrl: params.providerUrl })), Args.required());
+    const customRedirectUri = yield* Args.text(params.opts, 'custom-redirect-uri').pipe(Args.availableWhen(promptRedirect || Args.has(params.opts, 'custom-redirect-uri')), Args.prompt(promptRedirect
+        ? newRedirectPrompt(params.oauthCallbackURL)
+        : redirectPrompt(params.oauthCallbackURL)), Args.required());
+    const response = yield* updateOAuthClient({
+        oauthClientId: params.client.id,
+        clientId,
+        clientSecret,
+        redirectTo: customRedirectUri,
+    });
+    const lines = [
+        `${params.providerLabel} OAuth client updated: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+    ];
+    if (customRedirectUri) {
+        lines.push(...redirectSetupMessages({
+            prompt: params.redirectSetupPrompt,
+            redirectUri: customRedirectUri,
+            oauthCallbackURL: params.oauthCallbackURL,
+            showCustomRedirectInstructions: true,
+        }));
+    }
+    yield* Effect.log(boxen(lines.join('\n'), {
+        dimBorder: true,
+        padding: { right: 1, left: 1 },
+    }));
+});
+const appleWebFlags = [
+    'team-id',
+    'key-id',
+    'private-key-file',
+    'custom-redirect-uri',
+];
+const appleUpdateFlags = ['services-id', ...appleWebFlags];
+const hasAppleWebFlags = (opts) => Args.hasAny(opts, appleWebFlags);
+const hasAppleUpdateFlags = (opts) => Args.hasAny(opts, appleUpdateFlags);
+const appleClientHasWebConfig = (client) => Boolean(getMetaString(client.meta, 'teamId') ||
+    getMetaString(client.meta, 'keyId') ||
+    client.redirect_to);
+const resolveAppleUpdateConfig = Effect.fn(function* ({ opts, client, yes, }) {
+    const hasAnyUpdateFlag = hasAppleUpdateFlags(opts);
+    if (yes && !hasAnyUpdateFlag) {
+        return yield* BadArgsError.make({
+            message: 'Must specify at least one of --services-id, --team-id, --key-id, --private-key-file, or --custom-redirect-uri.',
+        });
+    }
+    const promptAll = !hasAnyUpdateFlag && !yes;
+    if (!promptAll) {
+        return { promptAll, configureWeb: hasAppleWebFlags(opts) };
+    }
+    const configureWeb = yield* runUIEffect(new UI.Confirmation({
+        promptText: 'Configure web redirect flow? ' +
+            chalk.dim('(requires Team ID, Key ID, and a .p8 private key from Apple)'),
+        defaultValue: appleClientHasWebConfig(client),
+    })).pipe(Effect.catchTag('UIError', (e) => BadArgsError.make({ message: `UI error: ${e.message}` })));
+    return { promptAll, configureWeb };
+});
+const readAppleWebUpdate = Effect.fn(function* ({ opts, client, promptAll, oauthCallbackURL, }) {
+    const teamId = yield* Args.text(opts, 'team-id').pipe(Args.availableWhen(promptAll || Args.has(opts, 'team-id')), Args.prompt(appleTeamIdPrompt({})), Args.required());
+    const keyId = yield* Args.text(opts, 'key-id').pipe(Args.availableWhen(promptAll || Args.has(opts, 'key-id')), Args.prompt(appleKeyIdPrompt({})), Args.required());
+    const privateKeyPath = yield* Args.text(opts, 'private-key-file').pipe(Args.availableWhen(promptAll || Args.has(opts, 'private-key-file')), Args.prompt(applePrivateKeyFilePrompt({})), Args.required());
+    const privateKey = privateKeyPath
+        ? yield* readPrivateKeyFile(privateKeyPath)
+        : undefined;
+    const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(Args.availableWhen(promptAll || Args.has(opts, 'custom-redirect-uri')), Args.prompt(redirectPrompt(oauthCallbackURL)), Args.optional());
+    const meta = {};
+    if (teamId)
+        meta.teamId = teamId;
+    if (keyId)
+        meta.keyId = keyId;
+    return {
+        privateKey,
+        redirectTo: privateKey
+            ? customRedirectUri || client.redirect_to || oauthCallbackURL
+            : customRedirectUri,
+        customRedirectUri,
+        meta: Object.keys(meta).length ? meta : undefined,
+    };
+});
+const handleAppleUpdate = Effect.fn(function* (opts, client, oauthCallbackURL) {
+    const { yes } = yield* GlobalOpts;
+    const { promptAll, configureWeb } = yield* resolveAppleUpdateConfig({
+        opts,
+        client,
+        yes,
+    });
+    const servicesId = yield* Args.text(opts, 'services-id').pipe(Args.availableWhen(promptAll || Args.has(opts, 'services-id')), Args.prompt(appleServicesIdPrompt({})), Args.required());
+    const webUpdate = configureWeb
+        ? yield* readAppleWebUpdate({
+            opts,
+            client,
+            promptAll,
+            oauthCallbackURL,
+        })
+        : {};
+    const response = yield* updateOAuthClient({
+        oauthClientId: client.id,
+        clientId: servicesId,
+        clientSecret: webUpdate.privateKey,
+        redirectTo: webUpdate.redirectTo,
+        meta: webUpdate.meta,
+    });
+    const lines = [
+        `Apple OAuth client updated: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+    ];
+    if (webUpdate.redirectTo) {
+        lines.push(...redirectSetupMessages({
+            prompt: `Add this return URL under your Services ID on ${link('https://developer.apple.com', 'developer.apple.com')}`,
+            redirectUri: webUpdate.redirectTo,
+            oauthCallbackURL,
+            showCustomRedirectInstructions: Boolean(webUpdate.customRedirectUri),
+        }));
+    }
+    yield* Effect.log(boxen(lines.join('\n'), {
+        dimBorder: true,
+        padding: { right: 1, left: 1 },
+    }));
+});
+const handleClerkUpdate = Effect.fn(function* (opts, client) {
+    const publishableKey = yield* Args.text(opts, 'publishable-key').pipe(Args.prompt(clerkPublishableKeyPrompt({})), Args.required());
+    const domain = clerkDomainFromPublishableKey(publishableKey);
+    if (!domain) {
+        return yield* BadArgsError.make({
+            message: 'Invalid publishable key. Could not extract domain.',
+        });
+    }
+    const response = yield* updateOAuthClient({
+        oauthClientId: client.id,
+        discoveryEndpoint: `https://${domain}/.well-known/openid-configuration`,
+        meta: { clerkPublishableKey: publishableKey },
+    });
+    yield* Effect.log(boxen([
+        `Clerk OAuth client updated: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `Clerk Domain: https://${domain}`,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+const handleFirebaseUpdate = Effect.fn(function* (opts, client) {
+    const projectId = yield* Args.text(opts, 'project-id').pipe(Args.prompt(firebaseProjectIdPrompt({})), Args.validate(validateFirebaseProjectId), Args.required());
+    const response = yield* updateOAuthClient({
+        oauthClientId: client.id,
+        discoveryEndpoint: firebaseDiscoveryEndpoint(projectId),
+    });
+    yield* Effect.log(boxen([
+        `Firebase OAuth client updated: ${response.client.client_name}`,
+        `ID: ${response.client.id}`,
+        `Firebase Project ID: ${projectId}`,
+    ].join('\n'), { dimBorder: true, padding: { right: 1, left: 1 } }));
+});
+export const authClientUpdateCmd = Effect.fn(function* (opts) {
+    const { auth, client: resolvedClient } = yield* resolveClient({
+        id: opts.id,
+        name: opts.name,
+    });
+    const provider = (auth.oauth_service_providers ?? []).find((entry) => entry.id === resolvedClient.provider_id);
+    if (!provider) {
+        return yield* BadArgsError.make({
+            message: `OAuth provider not found for client: ${resolvedClient.client_name}`,
+        });
+    }
+    const oauthCallbackURL = yield* getOAuthCallbackUrl;
+    yield* Match.value(provider.provider_name).pipe(Match.withReturnType(), Match.when('google', () => handleGoogleUpdate(opts, resolvedClient, oauthCallbackURL)), Match.when('github', () => handleClientIdSecretUpdate({
+        opts,
+        client: resolvedClient,
+        providerLabel: 'GitHub',
+        providerUrl: 'https://github.com/settings/developers',
+        redirectSetupPrompt: 'Add this callback URL in your GitHub OAuth App settings',
+        oauthCallbackURL,
+    })), Match.when('linkedin', () => handleClientIdSecretUpdate({
+        opts,
+        client: resolvedClient,
+        providerLabel: 'LinkedIn',
+        providerUrl: 'https://www.linkedin.com/developers/apps',
+        redirectSetupPrompt: 'Add this redirect URI in your LinkedIn app settings',
+        oauthCallbackURL,
+    })), Match.when('apple', () => handleAppleUpdate(opts, resolvedClient, oauthCallbackURL)), Match.when('clerk', () => handleClerkUpdate(opts, resolvedClient)), Match.when('firebase', () => handleFirebaseUpdate(opts, resolvedClient)), Match.orElse((providerName) => BadArgsError.make({
+        message: `Updating ${providerName} OAuth clients is not supported.`,
+    })));
+}, Effect.catchTag('BadArgsError', (e) => Effect.gen(function* () {
+    yield* Effect.logError(e.message);
+    yield* Effect.log(chalk.dim('hint: run `superlayer auth client update --help` for available arguments'));
+})));
+//# sourceMappingURL=update.js.map

package/dist/commands/auth/client/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../../../src/commands/auth/client/update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,QAAQ,CAAC;AAEvC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,iBAAiB,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,EAAE,EAAE,MAAM,sBAAsB,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,yBAAyB,EACzB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,EACzB,cAAc,EACd,kBAAkB,EAClB,yBAAyB,EACzB,uBAAuB,EACvB,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,iBAAiB,EACjB,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAS3C,MAAM,cAAc,GAAG,CAAC,gBAAwB,EAAE,EAAE,CAClD,iBAAiB,CAAC;IAChB,OAAO,EAAE,iCAAiC;IAC1C,gBAAgB;CACjB,CAAC,CAAC;AACL,MAAM,iBAAiB,GAAG,CAAC,gBAAwB,EAAE,EAAE,CACrD,iBAAiB,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,CAAC,CAAC;AACxE,MAAM,gBAAgB,GACpB,wDAAwD,CAAC;AAE3D,MAAM,aAAa,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAG1C;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAElC,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC;YACjC,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAqB,CAAC;IAE/D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,sCAAsC;SAChD,CAAC,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,IAAI,EAAE,CAAC,MAAM,CAAC;QACZ,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChC,KAAK,EACH,MAAM,CAAC,WAAW;gBAClB,CAAC,MAAM,CAAC,sBAAsB;oBAC5B,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,oBAAoB,CAAC;oBACjC,CAAC,CAAC,EAAE,CAAC;gBACP,KAAK,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,EAAE,GAAG,CAAC;YAC9B,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;QACH,UAAU,EAAE,4BAA4B;QACxC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa;KACzC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzD,EACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC5C,OAA2D;IAE3D,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,IAAI,EAAE,CAAC,MAAM,CAAC;QACZ,OAAO;QACP,UAAU,EAAE,6BAA6B;QACzC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa;KACzC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,4BAA4B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACtD,MAAsB;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,QAAQ,EAAE,IAAI;QACd,YAAY,EAAE,IAAI;QAClB,oBAAoB,EAAE,IAAI;QAC1B,UAAU,EAAE,IAAI;KACjB,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,gCAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC7D,sCAAsC;QACtC,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,EAAE;QACF,mCAAmC;QACnC,iDAAiD;QACjD,EAAE;QACF,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC;QACxC,0CAA0C,QAAQ,CAAC,MAAM,CAAC,WAAW,4CAA4C;KAClH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAIH,MAAM,8BAA8B,GAAG,CAAC,IAA6B,EAAE,EAAE,CACvE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAE3E,MAAM,oBAAoB,GAAG,CAAC,IAA6B,EAAE,EAAE,CAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,IAAI,8BAA8B,CAAC,IAAI,CAAC,CAAC;AAE/E,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAClD,KAAK,EACL,mBAAmB,GAIpB;IACC,IAAI,mBAAmB,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,CAAC,WAAW,CACvB,IAAI,EAAE,CAAC,MAAM,CAAC;YACZ,OAAO,EAAE;gBACP,EAAE,KAAK,EAAE,2BAA2B,EAAE,KAAK,EAAE,QAAQ,EAAE;gBACvD;oBACE,KAAK,EAAE,yBAAyB,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;oBAC1D,KAAK,EAAE,MAAM;iBACd;aACF;YACD,UAAU,EAAE,yBAAyB;YACrC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,aAAa;SACzC,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzD,CACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAiD;QAC5D,EAAE,KAAK,EAAE,oCAAoC,EAAE,KAAK,EAAE,QAAQ,EAAE;KACjE,CAAC;IAEF,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,CAAC,IAAI,CACV;YACE,KAAK,EACH,mCAAmC;gBACnC,KAAK,CAAC,GAAG,CAAC,wCAAwC,CAAC;YACrD,KAAK,EAAE,KAAK;SACb,EACD,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,UAAU,EAAE,CACpD,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACnD,IAAI,EACJ,KAAK,EACL,mBAAmB,GAKpB;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAClC,MAAM,kBAAkB,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IAChE,MAAM,gCAAgC,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;IAE9E,IAAI,kBAAkB,IAAI,CAAC,KAAK,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IAED,IACE,CAAC,KAAK;QACN,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,EAC1E,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,sFAAsF;SACzF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,kBAAkB,IAAI,gCAAgC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,mGAAmG;SACtG,CAAC,CAAC;IACL,CAAC;IAED,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEpD,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,yGAAyG;SAC5G,CAAC,CAAC;IACL,CAAC;IAED,IACE,GAAG;QACH,KAAK;QACL,mBAAmB;QACnB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,EAClE,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,iIAAiI;SACpI,CAAC,CAAC;IACL,CAAC;IAED,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAChD,IAAI,EACJ,MAAM,EACN,gBAAgB,GAKjB;IACC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CACnE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC,EAChD,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,UAAU;KACX,CAAC,CAAC;IACH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,gCAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC7D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,GAAG,qBAAqB,CAAC;YACvB,MAAM,EAAE,yCAAyC;YACjD,WAAW,EAAE,UAAU;YACvB,gBAAgB;YAChB,8BAA8B,EAAE,IAAI;SACrC,CAAC;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACzD,IAAI,EACJ,MAAM,EACN,KAAK,EACL,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,GAQjB;IACC,MAAM,sBAAsB,GAAG,iBAAiB,IAAI,mBAAmB,CAAC;IACxE,MAAM,uBAAuB,GAC3B,KAAK,IAAI,mBAAmB,IAAI,iBAAiB,CAAC;IAEpD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CACvD,IAAI,CAAC,aAAa,CAAC,sBAAsB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EACzE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAC9D,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CAC/D,IAAI,CAAC,aAAa,CAChB,KAAK,IAAI,CAAC,sBAAsB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CACrE,EACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAC,CAAC,EAClE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,KAAK;QAC7B,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAChD,IAAI,CAAC,aAAa,CAChB,uBAAuB,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CACjE,EACD,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,EAC7C,IAAI,CAAC,QAAQ,EAAE,CAChB;QACH,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,GAAG,mBAAmB;QACpC,CAAC,CAAC,iBAAiB,IAAI,MAAM,CAAC,WAAW,IAAI,gBAAgB;QAC7D,CAAC,CAAC,iBAAiB,CAAC;IAEtB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,QAAQ;QACR,YAAY;QACZ,UAAU;QACV,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAC9D,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,gCAAgC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC7D,qBAAqB;QACrB,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;KAC5B,CAAC;IAEF,IAAI,mBAAmB,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,qDAAqD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,IAAI,UAAU,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CACR,GAAG,qBAAqB,CAAC;YACvB,MAAM,EAAE,yCAAyC;YACjD,WAAW,EAAE,UAAU;YACvB,gBAAgB;YAChB,8BAA8B,EAAE,OAAO,CAAC,iBAAiB,CAAC;SAC3D,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC5C,IAA6B,EAC7B,MAAsB,EACtB,gBAAwB;IAExB,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAClC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC;IAC5C,MAAM,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAEpD,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,mBACE,mBAAmB;YACjB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC;YACvC,CAAC,CAAC,oBACN,EAAE,CACH,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC;QAChD,IAAI;QACJ,KAAK;QACL,mBAAmB;KACpB,CAAC,CAAC;IAEH,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,CAAC,oBAAoB,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,6BAA6B,CAAC;QAC1C,IAAI;QACJ,MAAM;QACN,KAAK;QACL,mBAAmB;QACnB,iBAAiB,EAAE,CAAC,gBAAgB,IAAI,CAAC,GAAG;QAC5C,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,MAOvD;IACC,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAClC,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE;QAChD,WAAW;QACX,eAAe;QACf,qBAAqB;KACtB,CAAC,CAAC;IACH,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,sFAAsF;SACzF,CAAC,CAAC;IACL,CAAC;IAED,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,cAAc,GAAG,KAAK,CAAC;IAE3B,IAAI,CAAC,gBAAgB,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAC;YACvC,EAAE,KAAK,EAAE,oCAAoC,EAAE,KAAK,EAAE,QAAQ,EAAE;YAChE,EAAE,KAAK,EAAE,qBAAqB,EAAE,KAAK,EAAE,UAAU,EAAE;SACpD,CAAC,CAAC;QACH,iBAAiB,GAAG,MAAM,KAAK,QAAQ,CAAC;QACxC,cAAc,GAAG,MAAM,KAAK,UAAU,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAC9D,IAAI,CAAC,aAAa,CAAC,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAC3E,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,EAChE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,IAAI,CACtE,IAAI,CAAC,aAAa,CAChB,iBAAiB,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,eAAe,CAAC,CAC5D,EACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,EACpE,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CACxC,MAAM,CAAC,IAAI,EACX,qBAAqB,CACtB,CAAC,IAAI,CACJ,IAAI,CAAC,aAAa,CAChB,cAAc,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAC/D,EACD,IAAI,CAAC,MAAM,CACT,cAAc;QACZ,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAC5C,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAC5C,EACD,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE;QAC/B,QAAQ;QACR,YAAY;QACZ,UAAU,EAAE,iBAAiB;KAC9B,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,GAAG,MAAM,CAAC,aAAa,0BAA0B,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC9E,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;KAC5B,CAAC;IAEF,IAAI,iBAAiB,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CACR,GAAG,qBAAqB,CAAC;YACvB,MAAM,EAAE,MAAM,CAAC,mBAAmB;YAClC,WAAW,EAAE,iBAAiB;YAC9B,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,8BAA8B,EAAE,IAAI;SACrC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG;IACpB,SAAS;IACT,QAAQ;IACR,kBAAkB;IAClB,qBAAqB;CACtB,CAAC;AACF,MAAM,gBAAgB,GAAG,CAAC,aAAa,EAAE,GAAG,aAAa,CAAC,CAAC;AAE3D,MAAM,gBAAgB,GAAG,CAAC,IAA6B,EAAE,EAAE,CACzD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AAEnC,MAAM,mBAAmB,GAAG,CAAC,IAA6B,EAAE,EAAE,CAC5D,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;AAEtC,MAAM,uBAAuB,GAAG,CAAC,MAAsB,EAAE,EAAE,CACzD,OAAO,CACL,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC;IAClC,aAAa,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC;IACnC,MAAM,CAAC,WAAW,CACrB,CAAC;AASJ,MAAM,wBAAwB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EACpD,IAAI,EACJ,MAAM,EACN,GAAG,GAKJ;IACC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAEnD,IAAI,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EACL,gHAAgH;SACnH,CAAC,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,gBAAgB,IAAI,CAAC,GAAG,CAAC;IAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7D,CAAC;IAED,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,WAAW,CACrC,IAAI,EAAE,CAAC,YAAY,CAAC;QAClB,UAAU,EACR,+BAA+B;YAC/B,KAAK,CAAC,GAAG,CACP,8DAA8D,CAC/D;QACH,YAAY,EAAE,uBAAuB,CAAC,MAAM,CAAC;KAC9C,CAAC,CACH,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAC/B,YAAY,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CACzD,CACF,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAC9C,IAAI,EACJ,MAAM,EACN,SAAS,EACT,gBAAgB,GAMjB;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,IAAI,CACnD,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,EAC1D,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,EAClC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,IAAI,CACjD,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EACzD,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,EACjC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,IAAI,CACpE,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC,EACnE,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,EAC1C,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,UAAU,GAAG,cAAc;QAC/B,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC,cAAc,CAAC;QAC3C,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,iBAAiB,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAC1E,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,EACtE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,EAC7C,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,IAAI,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAE9B,OAAO;QACL,UAAU;QACV,UAAU,EAAE,UAAU;YACpB,CAAC,CAAC,iBAAiB,IAAI,MAAM,CAAC,WAAW,IAAI,gBAAgB;YAC7D,CAAC,CAAC,iBAAiB;QACrB,iBAAiB;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;KACzB,CAAC;AAC7B,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC3C,IAA6B,EAC7B,MAAsB,EACtB,gBAAwB;IAExB,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,UAAU,CAAC;IAClC,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,CAAC,wBAAwB,CAAC;QAClE,IAAI;QACJ,MAAM;QACN,GAAG;KACJ,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,IAAI,CAC3D,IAAI,CAAC,aAAa,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,EAC9D,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC,EACtC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IACF,MAAM,SAAS,GAAmB,YAAY;QAC5C,CAAC,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAAC;YACxB,IAAI;YACJ,MAAM;YACN,SAAS;YACT,gBAAgB;SACjB,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,QAAQ,EAAE,UAAU;QACpB,YAAY,EAAE,SAAS,CAAC,UAAU;QAClC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,IAAI,EAAE,SAAS,CAAC,IAAI;KACrB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG;QACZ,+BAA+B,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;KAC5B,CAAC;IAEF,IAAI,SAAS,CAAC,UAAU,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,GAAG,qBAAqB,CAAC;YACvB,MAAM,EAAE,iDAAiD,IAAI,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,EAAE;YACrH,WAAW,EAAE,SAAS,CAAC,UAAU;YACjC,gBAAgB;YAChB,8BAA8B,EAAE,OAAO,CAAC,SAAS,CAAC,iBAAiB,CAAC;SACrE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACtB,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE;KAC/B,CAAC,CACH,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC3C,IAA6B,EAC7B,MAAsB;IAEtB,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,IAAI,CACnE,IAAI,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,EAC1C,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,MAAM,GAAG,6BAA6B,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,iBAAiB,EAAE,WAAW,MAAM,mCAAmC;QACvE,IAAI,EAAE,EAAE,mBAAmB,EAAE,cAAc,EAAE;KAC9C,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,+BAA+B,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC5D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,yBAAyB,MAAM,EAAE;KAClC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAC9C,IAA6B,EAC7B,MAAsB;IAEtB,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CACzD,IAAI,CAAC,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,EACxC,IAAI,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EACxC,IAAI,CAAC,QAAQ,EAAE,CAChB,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC;QACxC,aAAa,EAAE,MAAM,CAAC,EAAE;QACxB,iBAAiB,EAAE,yBAAyB,CAAC,SAAS,CAAC;KACxD,CAAC,CAAC;IAEH,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CACH;QACE,kCAAkC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE;QAC/D,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE;QAC3B,wBAAwB,SAAS,EAAE;KACpC,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,CACpD,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAC1C,QAAQ,CAAC,EACP,IAA2E;IAE3E,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QAC5D,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,IAAI,EAAE,IAAI,CAAC,IAAI;KAChB,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC,IAAI,CACxD,CAAC,KAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,cAAc,CAAC,WAAW,CAChE,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,KAAK,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;YAC9B,OAAO,EAAE,wCAAwC,cAAc,CAAC,WAAW,EAAE;SAC9E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,CAAC,mBAAmB,CAAC;IAEpD,KAAK,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAC7C,KAAK,CAAC,cAAc,EAAiC,EACrD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CACxB,kBAAkB,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAC3D,EACD,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,CACxB,0BAA0B,CAAC;QACzB,IAAI;QACJ,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,wCAAwC;QACrD,mBAAmB,EACjB,yDAAyD;QAC3D,gBAAgB;KACjB,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAC1B,0BAA0B,CAAC;QACzB,IAAI;QACJ,MAAM,EAAE,cAAc;QACtB,aAAa,EAAE,UAAU;QACzB,WAAW,EAAE,0CAA0C;QACvD,mBAAmB,EACjB,qDAAqD;QACvD,gBAAgB;KACjB,CAAC,CACH,EACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CACvB,iBAAiB,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAC1D,EACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EAClE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC,EACxE,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAC5B,YAAY,CAAC,IAAI,CAAC;QAChB,OAAO,EAAE,YAAY,YAAY,kCAAkC;KACpE,CAAC,CACH,CACF,CAAC;AACJ,CAAC,EACD,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CACf,KAAK,CAAC,GAAG,CACP,0EAA0E,CAC3E,CACF,CAAC;AACJ,CAAC,CAAC,CACH,CACF,CAAC","sourcesContent":["import { Effect, Match } from 'effect';\nimport type { authClientUpdateDef, OptsFromCommand } from '../../../index.ts';\nimport { BadArgsError } from '../../../errors.ts';\nimport { GlobalOpts } from '../../../context/globalOpts.ts';\nimport { Args } from '../../../lib/args.ts';\nimport { runUIEffect } from '../../../lib/ui.ts';\nimport {\n  findClientByIdOrName,\n  getAppsAuth,\n  OAuthClient,\n  updateOAuthClient,\n} from '../../../lib/oauth.ts';\nimport { UI } from '../../../ui/index.ts';\nimport { clerkDomainFromPublishableKey } from '@superlayer/platform';\nimport { getOAuthCallbackUrl } from '../../../lib/config.ts';\nimport chalk from 'chalk';\nimport boxen from 'boxen';\nimport {\n  appleKeyIdPrompt,\n  applePrivateKeyFilePrompt,\n  appleServicesIdPrompt,\n  appleTeamIdPrompt,\n  clerkPublishableKeyPrompt,\n  clientIdPrompt,\n  clientSecretPrompt,\n  firebaseDiscoveryEndpoint,\n  firebaseProjectIdPrompt,\n  getMetaString,\n  readPrivateKeyFile,\n  redirectSetupMessages,\n  redirectUriPrompt,\n  validateFirebaseProjectId,\n} from './shared.ts';\nimport { link } from '../../../logging.ts';\n\ntype OAuthClientRow = typeof OAuthClient.Type;\n\ntype ProviderRow = {\n  id: string;\n  provider_name: string;\n};\n\nconst redirectPrompt = (oauthCallbackURL: string) =>\n  redirectUriPrompt({\n    heading: 'Custom redirect URI (optional):',\n    oauthCallbackURL,\n  });\nconst newRedirectPrompt = (oauthCallbackURL: string) =>\n  redirectUriPrompt({ heading: 'New redirect URI:', oauthCallbackURL });\nconst googleConsoleUrl =\n  'https://console.developers.google.com/apis/credentials';\n\nconst resolveClient = Effect.fn(function* (params: {\n  id?: string;\n  name?: string;\n}) {\n  const { yes } = yield* GlobalOpts;\n\n  if (params.id || params.name) {\n    return yield* findClientByIdOrName({\n      id: params.id,\n      name: params.name,\n    });\n  }\n\n  if (yes) {\n    return yield* BadArgsError.make({ message: 'Must specify --id or --name' });\n  }\n\n  const auth = yield* getAppsAuth();\n  const clients = (auth.oauth_clients ?? []) as OAuthClientRow[];\n\n  if (clients.length === 0) {\n    return yield* BadArgsError.make({\n      message: 'No OAuth clients found for this app.',\n    });\n  }\n\n  return yield* runUIEffect(\n    new UI.Select({\n      options: clients.map((client) => ({\n        label:\n          client.client_name +\n          (client.use_shared_credentials\n            ? chalk.dim(' (dev credentials)')\n            : '') +\n          chalk.dim(` (${client.id})`),\n        value: client,\n      })),\n      promptText: 'Select a client to update:',\n      modifyOutput: UI.modifiers.dimOnComplete,\n    }),\n  ).pipe(\n    Effect.catchTag('UIError', (e) =>\n      BadArgsError.make({ message: `UI error: ${e.message}` }),\n    ),\n    Effect.map((client) => ({ auth, client })),\n  );\n});\n\nconst selectUpdateAction = Effect.fn(function* <T extends string>(\n  options: { label: string; value: T; secondary?: boolean }[],\n) {\n  return yield* runUIEffect(\n    new UI.Select({\n      options,\n      promptText: 'What do you want to update?',\n      modifyOutput: UI.modifiers.dimOnComplete,\n    }),\n  ).pipe(\n    Effect.catchTag('UIError', (e) =>\n      BadArgsError.make({ message: `UI error: ${e.message}` }),\n    ),\n  );\n});\n\nconst updateGoogleToDevCredentials = Effect.fn(function* (\n  client: OAuthClientRow,\n) {\n  const response = yield* updateOAuthClient({\n    oauthClientId: client.id,\n    clientId: null,\n    clientSecret: null,\n    useSharedCredentials: true,\n    redirectTo: null,\n  });\n\n  yield* Effect.log(\n    boxen(\n      [\n        `Google OAuth client updated: ${response.client.client_name}`,\n        'Credentials: Instant dev credentials',\n        `ID: ${response.client.id}`,\n        '',\n        'No Google Console setup required.',\n        'Works on localhost and Expo during development.',\n        '',\n        chalk.bold('Ready for production? Run:'),\n        `  superlayer auth client update --name ${response.client.client_name} --client-id <id> --client-secret <secret>`,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\ntype GoogleUpdateMode = 'dev' | 'custom' | 'redirect' | 'none';\n\nconst hasGoogleCustomCredentialFlags = (opts: Record<string, unknown>) =>\n  Args.hasAny(opts, ['client-id', 'client-secret', 'custom-redirect-uri']);\n\nconst hasGoogleUpdateFlags = (opts: Record<string, unknown>) =>\n  Args.isTrue(opts, 'dev-credentials') || hasGoogleCustomCredentialFlags(opts);\n\nconst selectGoogleUpdateMode = Effect.fn(function* ({\n  isWeb,\n  switchingFromShared,\n}: {\n  isWeb: boolean;\n  switchingFromShared: boolean;\n}) {\n  if (switchingFromShared) {\n    return yield* runUIEffect(\n      new UI.Select({\n        options: [\n          { label: 'Custom Google credentials', value: 'custom' },\n          {\n            label: 'Instant dev credentials' + chalk.dim(' (current)'),\n            value: 'none',\n          },\n        ],\n        promptText: 'Choose credential mode:',\n        modifyOutput: UI.modifiers.dimOnComplete,\n      }),\n    ).pipe(\n      Effect.catchTag('UIError', (e) =>\n        BadArgsError.make({ message: `UI error: ${e.message}` }),\n      ),\n    );\n  }\n\n  const options: { label: string; value: GoogleUpdateMode }[] = [\n    { label: 'Update Client ID and Client Secret', value: 'custom' },\n  ];\n\n  if (isWeb) {\n    options.push(\n      {\n        label:\n          'Switch to Instant dev credentials' +\n          chalk.dim(' (localhost and Expo, no Google setup)'),\n        value: 'dev',\n      },\n      { label: 'Update redirect URI', value: 'redirect' },\n    );\n  }\n\n  return yield* selectUpdateAction(options);\n});\n\nconst resolveGoogleUpdateMode = Effect.fn(function* ({\n  opts,\n  isWeb,\n  switchingFromShared,\n}: {\n  opts: Record<string, unknown>;\n  isWeb: boolean;\n  switchingFromShared: boolean;\n}) {\n  const { yes } = yield* GlobalOpts;\n  const devCredentialsFlag = Args.isTrue(opts, 'dev-credentials');\n  const hasProvidedSomeCustomCredentials = hasGoogleCustomCredentialFlags(opts);\n\n  if (devCredentialsFlag && !isWeb) {\n    return yield* BadArgsError.make({\n      message: '--dev-credentials is only supported for Google web clients.',\n    });\n  }\n\n  if (\n    !isWeb &&\n    (Args.has(opts, 'client-secret') || Args.has(opts, 'custom-redirect-uri'))\n  ) {\n    return yield* BadArgsError.make({\n      message:\n        '--client-secret and --custom-redirect-uri are only supported for Google web clients.',\n    });\n  }\n\n  if (devCredentialsFlag && hasProvidedSomeCustomCredentials) {\n    return yield* BadArgsError.make({\n      message:\n        '--dev-credentials cannot be combined with --client-id, --client-secret, or --custom-redirect-uri.',\n    });\n  }\n\n  if (devCredentialsFlag) {\n    return 'dev';\n  }\n\n  const hasAnyUpdateFlag = hasGoogleUpdateFlags(opts);\n\n  if (yes && !hasAnyUpdateFlag) {\n    return yield* BadArgsError.make({\n      message:\n        'Must specify at least one of --client-id, --client-secret, --custom-redirect-uri, or --dev-credentials.',\n    });\n  }\n\n  if (\n    yes &&\n    isWeb &&\n    switchingFromShared &&\n    (!Args.has(opts, 'client-id') || !Args.has(opts, 'client-secret'))\n  ) {\n    return yield* BadArgsError.make({\n      message:\n        'Must specify both --client-id and --client-secret when switching from Instant dev credentials to custom credentials with --yes.',\n    });\n  }\n\n  if (hasAnyUpdateFlag) {\n    return 'custom';\n  }\n\n  return yield* selectGoogleUpdateMode({ isWeb, switchingFromShared });\n});\n\nconst updateGoogleRedirect = Effect.fn(function* ({\n  opts,\n  client,\n  oauthCallbackURL,\n}: {\n  opts: Record<string, unknown>;\n  client: OAuthClientRow;\n  oauthCallbackURL: string;\n}) {\n  const redirectTo = yield* Args.text(opts, 'custom-redirect-uri').pipe(\n    Args.prompt(newRedirectPrompt(oauthCallbackURL)),\n    Args.required(),\n  );\n\n  const response = yield* updateOAuthClient({\n    oauthClientId: client.id,\n    redirectTo,\n  });\n  yield* Effect.log(\n    boxen(\n      [\n        `Google OAuth client updated: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        ...redirectSetupMessages({\n          prompt: 'Add this redirect URI in Google Console',\n          redirectUri: redirectTo,\n          oauthCallbackURL,\n          showCustomRedirectInstructions: true,\n        }),\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nconst updateGoogleCustomCredentials = Effect.fn(function* ({\n  opts,\n  client,\n  isWeb,\n  switchingFromShared,\n  promptCredentials,\n  oauthCallbackURL,\n}: {\n  opts: Record<string, unknown>;\n  client: OAuthClientRow;\n  isWeb: boolean;\n  switchingFromShared: boolean;\n  promptCredentials: boolean;\n  oauthCallbackURL: string;\n}) {\n  const mustCollectCredentials = promptCredentials || switchingFromShared;\n  const shouldPromptRedirectUri =\n    isWeb && switchingFromShared && promptCredentials;\n\n  const clientId = yield* Args.text(opts, 'client-id').pipe(\n    Args.availableWhen(mustCollectCredentials || Args.has(opts, 'client-id')),\n    Args.prompt(clientIdPrompt({ providerUrl: googleConsoleUrl })),\n    Args.required(),\n  );\n  const clientSecret = yield* Args.text(opts, 'client-secret').pipe(\n    Args.availableWhen(\n      isWeb && (mustCollectCredentials || Args.has(opts, 'client-secret')),\n    ),\n    Args.prompt(clientSecretPrompt({ providerUrl: googleConsoleUrl })),\n    Args.required(),\n  );\n  const customRedirectUri = isWeb\n    ? yield* Args.text(opts, 'custom-redirect-uri').pipe(\n        Args.availableWhen(\n          shouldPromptRedirectUri || Args.has(opts, 'custom-redirect-uri'),\n        ),\n        Args.prompt(redirectPrompt(oauthCallbackURL)),\n        Args.optional(),\n      )\n    : undefined;\n\n  const redirectTo = switchingFromShared\n    ? customRedirectUri || client.redirect_to || oauthCallbackURL\n    : customRedirectUri;\n\n  const response = yield* updateOAuthClient({\n    oauthClientId: client.id,\n    clientId,\n    clientSecret,\n    redirectTo,\n    useSharedCredentials: switchingFromShared ? false : undefined,\n  });\n\n  const lines = [\n    `Google OAuth client updated: ${response.client.client_name}`,\n    'Credentials: custom',\n    `ID: ${response.client.id}`,\n  ];\n\n  if (switchingFromShared) {\n    lines.push('', 'This client no longer uses Instant dev credentials.');\n  }\n  if (isWeb && redirectTo) {\n    lines.push(\n      ...redirectSetupMessages({\n        prompt: 'Add this redirect URI in Google Console',\n        redirectUri: redirectTo,\n        oauthCallbackURL,\n        showCustomRedirectInstructions: Boolean(customRedirectUri),\n      }),\n    );\n  }\n\n  yield* Effect.log(\n    boxen(lines.join('\\n'), {\n      dimBorder: true,\n      padding: { right: 1, left: 1 },\n    }),\n  );\n});\n\nconst handleGoogleUpdate = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  client: OAuthClientRow,\n  oauthCallbackURL: string,\n) {\n  const { yes } = yield* GlobalOpts;\n  const appType = getMetaString(client.meta, 'appType');\n  const isWeb = appType === 'web' || !appType;\n  const switchingFromShared = Boolean(client.use_shared_credentials);\n  const hasAnyUpdateFlag = hasGoogleUpdateFlags(opts);\n\n  if (!hasAnyUpdateFlag && !yes) {\n    yield* Effect.log(\n      `\\nCurrent mode: ${\n        switchingFromShared\n          ? chalk.bold('Instant dev credentials')\n          : 'custom credentials'\n      }`,\n    );\n  }\n\n  const updateMode = yield* resolveGoogleUpdateMode({\n    opts,\n    isWeb,\n    switchingFromShared,\n  });\n\n  if (updateMode === 'dev') {\n    return yield* updateGoogleToDevCredentials(client);\n  }\n\n  if (updateMode === 'none') {\n    yield* Effect.log(chalk.dim('No changes made.'));\n    return;\n  }\n\n  if (updateMode === 'redirect') {\n    return yield* updateGoogleRedirect({ opts, client, oauthCallbackURL });\n  }\n\n  return yield* updateGoogleCustomCredentials({\n    opts,\n    client,\n    isWeb,\n    switchingFromShared,\n    promptCredentials: !hasAnyUpdateFlag && !yes,\n    oauthCallbackURL,\n  });\n});\n\nconst handleClientIdSecretUpdate = Effect.fn(function* (params: {\n  opts: Record<string, unknown>;\n  client: OAuthClientRow;\n  providerLabel: string;\n  providerUrl: string;\n  redirectSetupPrompt: string;\n  oauthCallbackURL: string;\n}) {\n  const { yes } = yield* GlobalOpts;\n  const hasAnyUpdateFlag = Args.hasAny(params.opts, [\n    'client-id',\n    'client-secret',\n    'custom-redirect-uri',\n  ]);\n  if (yes && !hasAnyUpdateFlag) {\n    return yield* BadArgsError.make({\n      message:\n        'Must specify at least one of --client-id, --client-secret, or --custom-redirect-uri.',\n    });\n  }\n\n  let promptCredentials = false;\n  let promptRedirect = false;\n\n  if (!hasAnyUpdateFlag && !yes) {\n    const action = yield* selectUpdateAction([\n      { label: 'Update Client ID and Client Secret', value: 'rotate' },\n      { label: 'Update redirect URI', value: 'redirect' },\n    ]);\n    promptCredentials = action === 'rotate';\n    promptRedirect = action === 'redirect';\n  }\n\n  const clientId = yield* Args.text(params.opts, 'client-id').pipe(\n    Args.availableWhen(promptCredentials || Args.has(params.opts, 'client-id')),\n    Args.prompt(clientIdPrompt({ providerUrl: params.providerUrl })),\n    Args.required(),\n  );\n  const clientSecret = yield* Args.text(params.opts, 'client-secret').pipe(\n    Args.availableWhen(\n      promptCredentials || Args.has(params.opts, 'client-secret'),\n    ),\n    Args.prompt(clientSecretPrompt({ providerUrl: params.providerUrl })),\n    Args.required(),\n  );\n  const customRedirectUri = yield* Args.text(\n    params.opts,\n    'custom-redirect-uri',\n  ).pipe(\n    Args.availableWhen(\n      promptRedirect || Args.has(params.opts, 'custom-redirect-uri'),\n    ),\n    Args.prompt(\n      promptRedirect\n        ? newRedirectPrompt(params.oauthCallbackURL)\n        : redirectPrompt(params.oauthCallbackURL),\n    ),\n    Args.required(),\n  );\n\n  const response = yield* updateOAuthClient({\n    oauthClientId: params.client.id,\n    clientId,\n    clientSecret,\n    redirectTo: customRedirectUri,\n  });\n\n  const lines = [\n    `${params.providerLabel} OAuth client updated: ${response.client.client_name}`,\n    `ID: ${response.client.id}`,\n  ];\n\n  if (customRedirectUri) {\n    lines.push(\n      ...redirectSetupMessages({\n        prompt: params.redirectSetupPrompt,\n        redirectUri: customRedirectUri,\n        oauthCallbackURL: params.oauthCallbackURL,\n        showCustomRedirectInstructions: true,\n      }),\n    );\n  }\n\n  yield* Effect.log(\n    boxen(lines.join('\\n'), {\n      dimBorder: true,\n      padding: { right: 1, left: 1 },\n    }),\n  );\n});\n\nconst appleWebFlags = [\n  'team-id',\n  'key-id',\n  'private-key-file',\n  'custom-redirect-uri',\n];\nconst appleUpdateFlags = ['services-id', ...appleWebFlags];\n\nconst hasAppleWebFlags = (opts: Record<string, unknown>) =>\n  Args.hasAny(opts, appleWebFlags);\n\nconst hasAppleUpdateFlags = (opts: Record<string, unknown>) =>\n  Args.hasAny(opts, appleUpdateFlags);\n\nconst appleClientHasWebConfig = (client: OAuthClientRow) =>\n  Boolean(\n    getMetaString(client.meta, 'teamId') ||\n      getMetaString(client.meta, 'keyId') ||\n      client.redirect_to,\n  );\n\ntype AppleWebUpdate = {\n  privateKey?: string;\n  redirectTo?: string;\n  customRedirectUri?: string;\n  meta?: Record<string, string>;\n};\n\nconst resolveAppleUpdateConfig = Effect.fn(function* ({\n  opts,\n  client,\n  yes,\n}: {\n  opts: Record<string, unknown>;\n  client: OAuthClientRow;\n  yes: boolean;\n}) {\n  const hasAnyUpdateFlag = hasAppleUpdateFlags(opts);\n\n  if (yes && !hasAnyUpdateFlag) {\n    return yield* BadArgsError.make({\n      message:\n        'Must specify at least one of --services-id, --team-id, --key-id, --private-key-file, or --custom-redirect-uri.',\n    });\n  }\n\n  const promptAll = !hasAnyUpdateFlag && !yes;\n  if (!promptAll) {\n    return { promptAll, configureWeb: hasAppleWebFlags(opts) };\n  }\n\n  const configureWeb = yield* runUIEffect(\n    new UI.Confirmation({\n      promptText:\n        'Configure web redirect flow? ' +\n        chalk.dim(\n          '(requires Team ID, Key ID, and a .p8 private key from Apple)',\n        ),\n      defaultValue: appleClientHasWebConfig(client),\n    }),\n  ).pipe(\n    Effect.catchTag('UIError', (e) =>\n      BadArgsError.make({ message: `UI error: ${e.message}` }),\n    ),\n  );\n\n  return { promptAll, configureWeb };\n});\n\nconst readAppleWebUpdate = Effect.fn(function* ({\n  opts,\n  client,\n  promptAll,\n  oauthCallbackURL,\n}: {\n  opts: Record<string, unknown>;\n  client: OAuthClientRow;\n  promptAll: boolean;\n  oauthCallbackURL: string;\n}) {\n  const teamId = yield* Args.text(opts, 'team-id').pipe(\n    Args.availableWhen(promptAll || Args.has(opts, 'team-id')),\n    Args.prompt(appleTeamIdPrompt({})),\n    Args.required(),\n  );\n  const keyId = yield* Args.text(opts, 'key-id').pipe(\n    Args.availableWhen(promptAll || Args.has(opts, 'key-id')),\n    Args.prompt(appleKeyIdPrompt({})),\n    Args.required(),\n  );\n  const privateKeyPath = yield* Args.text(opts, 'private-key-file').pipe(\n    Args.availableWhen(promptAll || Args.has(opts, 'private-key-file')),\n    Args.prompt(applePrivateKeyFilePrompt({})),\n    Args.required(),\n  );\n  const privateKey = privateKeyPath\n    ? yield* readPrivateKeyFile(privateKeyPath)\n    : undefined;\n  const customRedirectUri = yield* Args.text(opts, 'custom-redirect-uri').pipe(\n    Args.availableWhen(promptAll || Args.has(opts, 'custom-redirect-uri')),\n    Args.prompt(redirectPrompt(oauthCallbackURL)),\n    Args.optional(),\n  );\n\n  const meta: Record<string, string> = {};\n  if (teamId) meta.teamId = teamId;\n  if (keyId) meta.keyId = keyId;\n\n  return {\n    privateKey,\n    redirectTo: privateKey\n      ? customRedirectUri || client.redirect_to || oauthCallbackURL\n      : customRedirectUri,\n    customRedirectUri,\n    meta: Object.keys(meta).length ? meta : undefined,\n  } satisfies AppleWebUpdate;\n});\n\nconst handleAppleUpdate = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  client: OAuthClientRow,\n  oauthCallbackURL: string,\n) {\n  const { yes } = yield* GlobalOpts;\n  const { promptAll, configureWeb } = yield* resolveAppleUpdateConfig({\n    opts,\n    client,\n    yes,\n  });\n\n  const servicesId = yield* Args.text(opts, 'services-id').pipe(\n    Args.availableWhen(promptAll || Args.has(opts, 'services-id')),\n    Args.prompt(appleServicesIdPrompt({})),\n    Args.required(),\n  );\n  const webUpdate: AppleWebUpdate = configureWeb\n    ? yield* readAppleWebUpdate({\n        opts,\n        client,\n        promptAll,\n        oauthCallbackURL,\n      })\n    : {};\n\n  const response = yield* updateOAuthClient({\n    oauthClientId: client.id,\n    clientId: servicesId,\n    clientSecret: webUpdate.privateKey,\n    redirectTo: webUpdate.redirectTo,\n    meta: webUpdate.meta,\n  });\n\n  const lines = [\n    `Apple OAuth client updated: ${response.client.client_name}`,\n    `ID: ${response.client.id}`,\n  ];\n\n  if (webUpdate.redirectTo) {\n    lines.push(\n      ...redirectSetupMessages({\n        prompt: `Add this return URL under your Services ID on ${link('https://developer.apple.com', 'developer.apple.com')}`,\n        redirectUri: webUpdate.redirectTo,\n        oauthCallbackURL,\n        showCustomRedirectInstructions: Boolean(webUpdate.customRedirectUri),\n      }),\n    );\n  }\n\n  yield* Effect.log(\n    boxen(lines.join('\\n'), {\n      dimBorder: true,\n      padding: { right: 1, left: 1 },\n    }),\n  );\n});\n\nconst handleClerkUpdate = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  client: OAuthClientRow,\n) {\n  const publishableKey = yield* Args.text(opts, 'publishable-key').pipe(\n    Args.prompt(clerkPublishableKeyPrompt({})),\n    Args.required(),\n  );\n\n  const domain = clerkDomainFromPublishableKey(publishableKey);\n  if (!domain) {\n    return yield* BadArgsError.make({\n      message: 'Invalid publishable key. Could not extract domain.',\n    });\n  }\n\n  const response = yield* updateOAuthClient({\n    oauthClientId: client.id,\n    discoveryEndpoint: `https://${domain}/.well-known/openid-configuration`,\n    meta: { clerkPublishableKey: publishableKey },\n  });\n\n  yield* Effect.log(\n    boxen(\n      [\n        `Clerk OAuth client updated: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        `Clerk Domain: https://${domain}`,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nconst handleFirebaseUpdate = Effect.fn(function* (\n  opts: Record<string, unknown>,\n  client: OAuthClientRow,\n) {\n  const projectId = yield* Args.text(opts, 'project-id').pipe(\n    Args.prompt(firebaseProjectIdPrompt({})),\n    Args.validate(validateFirebaseProjectId),\n    Args.required(),\n  );\n\n  const response = yield* updateOAuthClient({\n    oauthClientId: client.id,\n    discoveryEndpoint: firebaseDiscoveryEndpoint(projectId),\n  });\n\n  yield* Effect.log(\n    boxen(\n      [\n        `Firebase OAuth client updated: ${response.client.client_name}`,\n        `ID: ${response.client.id}`,\n        `Firebase Project ID: ${projectId}`,\n      ].join('\\n'),\n      { dimBorder: true, padding: { right: 1, left: 1 } },\n    ),\n  );\n});\n\nexport const authClientUpdateCmd = Effect.fn(\n  function* (\n    opts: OptsFromCommand<typeof authClientUpdateDef> & Record<string, unknown>,\n  ) {\n    const { auth, client: resolvedClient } = yield* resolveClient({\n      id: opts.id,\n      name: opts.name,\n    });\n    const provider = (auth.oauth_service_providers ?? []).find(\n      (entry: ProviderRow) => entry.id === resolvedClient.provider_id,\n    );\n\n    if (!provider) {\n      return yield* BadArgsError.make({\n        message: `OAuth provider not found for client: ${resolvedClient.client_name}`,\n      });\n    }\n    const oauthCallbackURL = yield* getOAuthCallbackUrl;\n\n    yield* Match.value(provider.provider_name).pipe(\n      Match.withReturnType<Effect.Effect<void, any, any>>(),\n      Match.when('google', () =>\n        handleGoogleUpdate(opts, resolvedClient, oauthCallbackURL),\n      ),\n      Match.when('github', () =>\n        handleClientIdSecretUpdate({\n          opts,\n          client: resolvedClient,\n          providerLabel: 'GitHub',\n          providerUrl: 'https://github.com/settings/developers',\n          redirectSetupPrompt:\n            'Add this callback URL in your GitHub OAuth App settings',\n          oauthCallbackURL,\n        }),\n      ),\n      Match.when('linkedin', () =>\n        handleClientIdSecretUpdate({\n          opts,\n          client: resolvedClient,\n          providerLabel: 'LinkedIn',\n          providerUrl: 'https://www.linkedin.com/developers/apps',\n          redirectSetupPrompt:\n            'Add this redirect URI in your LinkedIn app settings',\n          oauthCallbackURL,\n        }),\n      ),\n      Match.when('apple', () =>\n        handleAppleUpdate(opts, resolvedClient, oauthCallbackURL),\n      ),\n      Match.when('clerk', () => handleClerkUpdate(opts, resolvedClient)),\n      Match.when('firebase', () => handleFirebaseUpdate(opts, resolvedClient)),\n      Match.orElse((providerName) =>\n        BadArgsError.make({\n          message: `Updating ${providerName} OAuth clients is not supported.`,\n        }),\n      ),\n    );\n  },\n  Effect.catchTag('BadArgsError', (e) =>\n    Effect.gen(function* () {\n      yield* Effect.logError(e.message);\n      yield* Effect.log(\n        chalk.dim(\n          'hint: run `superlayer auth client update --help` for available arguments',\n        ),\n      );\n    }),\n  ),\n);\n"]}

package/dist/commands/auth/email/pull.d.ts

@@ -0,0 +1,24 @@
+import { Path } from '@effect/platform';
+import { Effect } from 'effect';
+import { ProjectInfo } from '../../../context/projectInfo.ts';
+import { BadArgsError } from '../../../errors.ts';
+import { InstantHttp } from '../../../lib/http.ts';
+import type { EmailConfig } from '../../../lib/email.ts';
+export declare const authEmailPullCmd: (opts: {
+    app?: string | undefined;
+    file?: string | undefined;
+}) => Effect.Effect<void, BadArgsError | import("effect/Cause").UnknownException | import("effect/ParseResult").ParseError | import("../../../lib/http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError | import("@effect/platform/Error").PlatformError, import("../../../context/globalOpts.ts").GlobalOpts | ProjectInfo | InstantHttp | import("../../../lib/http.ts").InstantHttpAuthed | import("@effect/platform/FileSystem").FileSystem | Path.Path | import("../../../context/currentApp.ts").CurrentApp>;
+export type EmailConfig = (typeof EmailConfig.Type)['authEmail'];
+type WriteEmailTemplateOpts = {
+    emailPath?: string;
+    confirmOverwrite?: boolean;
+};
+export declare const writeEmailTemplate: (emailConfig: EmailConfig, { emailPath, confirmOverwrite }?: WriteEmailTemplateOpts) => Effect.Effect<void, BadArgsError | import("effect/Cause").UnknownException | import("@effect/platform/Error").PlatformError, import("../../../context/globalOpts.ts").GlobalOpts | ProjectInfo | import("@effect/platform/FileSystem").FileSystem | Path.Path>;
+export declare const getDefaultEmailTemplate: Effect.Effect<{
+    subject: string;
+    senderName: string;
+    senderEmail: string | undefined;
+    body: string;
+}, import("effect/ParseResult").ParseError | import("../../../lib/http.ts").InstantHttpError | import("effect/Cause").TimeoutException | import("@effect/platform/HttpClientError").RequestError | import("@effect/platform/HttpClientError").ResponseError, InstantHttp | import("../../../lib/http.ts").InstantHttpAuthed | import("../../../context/currentApp.ts").CurrentApp>;
+export {};
+//# sourceMappingURL=pull.d.ts.map

package/dist/commands/auth/email/pull.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pull.d.ts","sourceRoot":"","sources":["../../../../src/commands/auth/email/pull.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAQlD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,eAAO,MAAM,gBAAgB;;;snBAI3B,CAAC;AAEH,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,CAAC;AAEjE,KAAK,sBAAsB,GAAG;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAeF,eAAO,MAAM,kBAAkB,GAC7B,aAAa,WAAW,EACxB,kCAAwC,sBAA2B,mQAoCjE,CAAC;AAQL,eAAO,MAAM,uBAAuB;;;;;kXAkBlC,CAAC"}