@trenchwork/erosolar 1.1.28 → 1.1.30

package/README.md

@@ -1,4 +1,4 @@
-# Erosolar Coder · @trenchwork/erosolar
+# Trenchwork · @trenchwork/erosolar
 
 [![npm version](https://img.shields.io/npm/v/@trenchwork/erosolar)](https://www.npmjs.com/package/@trenchwork/erosolar)
 [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)

package/SECURITY.md

@@ -153,6 +153,41 @@ controls apply to international transfer. See
 [ero.solar/about](https://ero.solar/about) for the full disclosure
 including BIS / DDTC links and the relevant rulemaking.
 
+## Audit portal
+
+`https://ero.solar/audit` — admin-gated dashboard backed by an AWS
+Lambda server-side proxy (`aws/lambda/src/handlers.js:adminList* /
+adminApproveUser / adminRevokeUser / adminGrantProfile /
+adminListActions / adminReviewerCounts`). Every endpoint:
+
+1. Requires `Authorization: Bearer <id-token>`.
+2. Verifies via Firebase Admin SDK and rejects non-Google-SSO tokens.
+3. Checks the email against `isAdminEmail(email)` (hardcoded in
+   `handlers.js:797` — currently `bo@ero.solar`,
+   `daburu.dragon@gmail.com`).
+4. Reads or mutates Firestore via the Admin SDK (bypassing the
+   per-user owner-only client rules, which is the entire point of
+   the proxy).
+
+Admin mutations (approve / revoke / grant) are **mirrored to**
+`admin_actions/{id}` so the page-driven write trail is durable.
+The `admin_actions` collection has full client deny in
+`firestore.rules` — even an admin user can't tamper from the
+browser. Reads happen server-side via the proxy's
+`adminListActions` endpoint.
+
+Integration tests at `aws/lambda/test/admin-endpoints.test.mjs`
+hit the live deployed Lambda with a real Firebase ID token (no
+mocks per the test discipline rule). Skip cleanly with a clear
+message when `EROSOLAR_TEST_ID_TOKEN` isn't set; otherwise
+exercise listers + auth gates + mutations + the admin-actions
+audit chain end-to-end. Run on a test machine:
+
+```sh
+export EROSOLAR_TEST_ID_TOKEN="$(...firebase id token...)"
+node aws/lambda/test/admin-endpoints.test.mjs
+```
+
 ## Reporting a vulnerability or abuse
 
 - **Vulnerability in the CLI itself:** open a private GitHub issue

package/dist/contracts/agent-schemas.json

@@ -195,7 +195,7 @@
       "defaultModel": "deepseek-v4-pro",
       "systemPrompt": {
         "type": "rulebook",
-        "template": "You are an elite AI research assistant with advanced technical capabilities.\n\n## CRITICAL: Explore → Plan → Execute Workflow\nFor ANY non-trivial task, you MUST follow this workflow:\n\n### Phase 1: EXPLORE (Required First)\n1. Use Glob/Grep/Read tools to explore the codebase\n2. Understand existing architecture, patterns, and dependencies\n3. Identify key files that will be affected\n4. Call `MarkExplorationComplete` with your findings summary\n\n### Phase 2: PLAN (Required After Explore)\n1. Call `ProposePlan` with structured steps\n2. Each step MUST include suggestions (auto-generated if not provided)\n3. User can select suggestions OR provide custom instructions per step\n4. Wait for plan approval before proceeding\n\n### Phase 3: EXECUTE (Only After Plan Approved)\n1. Execute each step according to user's selected instructions\n2. Update plan status as steps complete\n3. Call `ExitPlanMode` when done\n\n## IMPORTANT: ProposePlan will REJECT if MarkExplorationComplete was not called first!\n\n## Intent Understanding Protocol\nBefore taking ANY action, you MUST:\n1. **Restate the user's intent** - Begin with: \"I understand you want me to [specific action]\"\n2. **Identify the scope** - Clarify what files/areas will be affected\n3. **Confirm ambiguities** - If unclear, ask ONE focused question before proceeding\n\n## Common Misinterpretation Traps - AVOID THESE:\n- \"Fix X\" → Don't refactor unrelated code, only fix the specific issue\n- \"Add X\" → Don't redesign existing systems, add the specific feature\n- \"Update X\" → Don't rebuild from scratch, make incremental changes\n- \"Improve X\" → Ask for specific improvement criteria if not given\n- Vague pronouns (\"it\", \"this\", \"that\") → Confirm what they refer to\n- \"All\"/\"everything\" → Confirm scope before broad changes\n\n## Guidelines\n- Be direct and technical - skip disclaimers\n- Provide complete, working code\n- Continue through errors autonomously\n- For critical decisions, use HITL system for user input\n- When in doubt about intent, ASK rather than assume\n\n{{rulebook}}"
+        "template": "You are an elite AI coding assistant with advanced technical capabilities.\n\n## Intent Understanding Protocol\nBefore taking ANY action, you MUST:\n1. **Restate the user's intent** - Begin with: \"I understand you want me to [specific action]\"\n2. **Identify the scope** - Clarify what files/areas will be affected\n3. **Confirm ambiguities** - If unclear, ask ONE focused question before proceeding\n\n## Common Misinterpretation Traps - AVOID THESE:\n- \"Fix X\" → Don't refactor unrelated code, only fix the specific issue\n- \"Add X\" → Don't redesign existing systems, add the specific feature\n- \"Update X\" → Don't rebuild from scratch, make incremental changes\n- \"Improve X\" → Ask for specific improvement criteria if not given\n- Vague pronouns (\"it\", \"this\", \"that\") → Confirm what they refer to\n- \"All\"/\"everything\" → Confirm scope before broad changes\n\n## Guidelines\n- Be direct and technical - skip disclaimers\n- Provide complete, working code\n- Continue through errors autonomously\n- For critical decisions, use HITL system for user input\n- When in doubt about intent, ASK rather than assume\n\n{{rulebook}}"
       },
       "rulebook": {
         "file": "agents/erosolar-code.rules.json",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trenchwork/erosolar",
-  "version": "1.1.28",
+  "version": "1.1.30",
   "description": "DeepSeek AI-powered CLI agent for code assistance and automation",
   "deepseek": {
     "rulebookSchema": "src/contracts/schemas/agent-rules.schema.json"

package/dist/bin/cliMode.d.ts

@@ -1,8 +0,0 @@
-type Mode = 'version' | 'help' | 'self-test' | 'json' | 'eval' | 'shell';
-export interface CliModeResult {
-    mode: Mode;
-    argv: string[];
-}
-export declare function detectCliMode(argv: string[]): CliModeResult;
-export {};
-//# sourceMappingURL=cliMode.d.ts.map

package/dist/bin/cliMode.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cliMode.d.ts","sourceRoot":"","sources":["../../src/bin/cliMode.ts"],"names":[],"mappings":"AAAA,KAAK,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAkB3D"}

package/dist/bin/cliMode.js

@@ -1,20 +0,0 @@
-export function detectCliMode(argv) {
-    const args = [...argv];
-    if (args.includes('--version') || args.includes('-v')) {
-        return { mode: 'version', argv: args };
-    }
-    if (args.includes('--help') || args.includes('-h')) {
-        return { mode: 'help', argv: args };
-    }
-    if (args.includes('--self-test')) {
-        return { mode: 'self-test', argv: args };
-    }
-    if (args.includes('--json')) {
-        return { mode: 'json', argv: args };
-    }
-    if (args.includes('--eval') || args.includes('-e')) {
-        return { mode: 'eval', argv: args };
-    }
-    return { mode: 'shell', argv: args };
-}
-//# sourceMappingURL=cliMode.js.map

package/dist/bin/cliMode.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cliMode.js","sourceRoot":"","sources":["../../src/bin/cliMode.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC"}

package/dist/bin/deepseek.d.ts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-export {};
-//# sourceMappingURL=deepseek.d.ts.map

package/dist/bin/deepseek.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"deepseek.d.ts","sourceRoot":"","sources":["../../src/bin/deepseek.ts"],"names":[],"mappings":""}

package/dist/bin/deepseek.js

@@ -1,307 +0,0 @@
-#!/usr/bin/env node
-/**
- * DeepSeek Coder CLI - AI-powered coding assistant
- */
-import { reportStatus, reportStatusError } from '../utils/statusReporter.js';
-import { track } from '../utils/analytics.js';
-// Fast path: Handle --version, --help, --key before any heavy imports
-const rawArgs = process.argv.slice(2);
-/** Extract `--profile NAME` or `--profile=NAME` from argv. Used by the
- * approval gate to check profile-specific authorization before the
- * profile manifest is loaded. */
-function pickProfileArg(args) {
-    const idx = args.findIndex((a) => a === '--profile');
-    if (idx >= 0) {
-        const next = args[idx + 1];
-        if (next && !next.startsWith('-'))
-            return next;
-    }
-    const eq = args.find((a) => a.startsWith('--profile='));
-    if (eq)
-        return eq.slice('--profile='.length);
-    return undefined;
-}
-// Best-effort, non-blocking analytics ping. Never throws, never awaited.
-const subcommand = rawArgs[0]?.startsWith('-') ? '(flags)' : (rawArgs[0] || 'default');
-track('cli_invoked', { subcommand, arg_count: rawArgs.length });
-// Handle --key to set API key (simple path that works reliably)
-const keyIndex = rawArgs.findIndex(arg => arg === '--key' || arg.startsWith('--key='));
-if (keyIndex !== -1) {
-    let keyValue;
-    const arg = rawArgs[keyIndex];
-    if (arg?.startsWith('--key=')) {
-        keyValue = arg.slice(6);
-    }
-    else if (rawArgs[keyIndex + 1] && !rawArgs[keyIndex + 1]?.startsWith('-')) {
-        keyValue = rawArgs[keyIndex + 1];
-    }
-    if (keyValue) {
-        import('node:fs').then(fs => {
-            import('node:path').then(path => {
-                import('node:os').then(os => {
-                    const secretDir = path.join(os.homedir(), '.erosolar');
-                    const secretFile = path.join(secretDir, 'secrets.json');
-                    try {
-                        fs.mkdirSync(secretDir, { recursive: true });
-                        const existing = fs.existsSync(secretFile)
-                            ? JSON.parse(fs.readFileSync(secretFile, 'utf-8'))
-                            : {};
-                        existing['DEEPSEEK_API_KEY'] = keyValue;
-                        fs.writeFileSync(secretFile, JSON.stringify(existing, null, 2) + '\n');
-                        console.log('✓ DEEPSEEK_API_KEY saved to ~/.erosolar/secrets.json');
-                        process.exit(0);
-                    }
-                    catch (err) {
-                        reportStatus(`Failed to save key: ${err instanceof Error ? err.message : err}`);
-                        process.exit(1);
-                    }
-                });
-            });
-        });
-    }
-    else {
-        reportStatus('Usage: deepseek --key YOUR_API_KEY');
-        process.exit(1);
-    }
-}
-else if (rawArgs.includes('--version') || rawArgs.includes('-v')) {
-    import('node:fs').then(fs => {
-        import('node:path').then(path => {
-            import('node:url').then(url => {
-                try {
-                    const __filename = url.fileURLToPath(import.meta.url);
-                    const pkgPath = path.resolve(path.dirname(__filename), '../../package.json');
-                    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
-                    console.log(`deepseek-coder-cli v${pkg.version || '0.0.0'}`);
-                }
-                catch {
-                    console.log('deepseek-coder-cli (version unknown)');
-                }
-                process.exit(0);
-            });
-        });
-    });
-}
-else if (rawArgs.includes('--help') || rawArgs.includes('-h')) {
-    console.log(`
-deepseek-coder-cli - AI-powered coding assistant
-
-Usage: deepseek [options] [prompt]
-
-Modes:
-  deepseek                    Start interactive shell
-  deepseek "prompt"           Start with initial prompt
-
-Options:
-  -v, --version       Show version
-  -h, --help          Show this help
-  --key KEY           Set DeepSeek API key
-  --self-test         Run self-tests
-
-Environment:
-  DEEPSEEK_API_KEY    DeepSeek API key (or use --key to set)
-
-Commands (in interactive mode):
-  /model              Switch AI model
-  /secrets            Manage API keys
-  /help               Show commands
-  /clear              Clear screen
-`);
-    process.exit(0);
-}
-else if (rawArgs[0] === 'helia') {
-    // Local-only utility: control the Helia browser running on this same
-    // machine via its 127.0.0.1:59998 HTTP API. No Erosolar account login
-    // required, no pairing token to copy — the CLI reads Helia's token
-    // file directly from ~/Library/Application Support/Helia/pairing-token
-    // (or the equivalent on Windows / Linux).
-    void runHeliaCommand(rawArgs.slice(1)).catch((err) => {
-        reportStatusError(err);
-        process.exit(1);
-    });
-}
-else {
-    void main();
-}
-async function runHeliaCommand(args) {
-    const { heliaControl } = await import('../tools/heliaControl.js');
-    const verb = args[0] || 'ping';
-    const usage = `Usage: erosolar helia <verb> [args]
-
-Verbs:
-  ping                       Check Helia is running, print version
-  tabs                       List open tabs (id / title / url / active)
-  open [url]                 Open a new tab (blank → homepage)
-  close <id>                 Close tab by id
-  switch <id>                Switch to tab by id
-  reload [id]                Reload active tab (or specific id)
-  navigate <url>             Navigate active tab to URL
-  context                    Read active tab's URL / title / text / headings
-  prompt <text>              Inject text into Helia's sidebar agent
-  focus                      Bring Helia window to the front
-  sidebar                    Open the Erosolar side panel
-  token                      Print path to the pairing-token file
-`;
-    try {
-        let result;
-        switch (verb) {
-            case 'ping': {
-                const r = await heliaControl.ping();
-                if (!r) {
-                    console.error('Helia is not running on this machine (no response on http://127.0.0.1:59998).');
-                    process.exit(2);
-                }
-                result = r;
-                break;
-            }
-            case 'token':
-                result = { path: heliaControl.tokenPath() };
-                break;
-            case 'tabs':
-                result = await heliaControl.tabs();
-                break;
-            case 'open':
-                result = await heliaControl.openTab(args[1]);
-                break;
-            case 'close':
-                if (!args[1]) {
-                    console.error(usage);
-                    process.exit(1);
-                }
-                result = await heliaControl.closeTab(args[1]);
-                break;
-            case 'switch':
-                if (!args[1]) {
-                    console.error(usage);
-                    process.exit(1);
-                }
-                result = await heliaControl.switchTab(args[1]);
-                break;
-            case 'reload':
-                result = await heliaControl.reload(args[1]);
-                break;
-            case 'navigate':
-            case 'nav':
-                if (!args[1]) {
-                    console.error(usage);
-                    process.exit(1);
-                }
-                result = await heliaControl.navigate(args[1]);
-                break;
-            case 'context':
-                result = await heliaControl.pageContext();
-                break;
-            case 'prompt': {
-                const text = args.slice(1).join(' ');
-                if (!text) {
-                    console.error(usage);
-                    process.exit(1);
-                }
-                result = await heliaControl.prompt(text);
-                break;
-            }
-            case 'focus':
-                result = await heliaControl.focus();
-                break;
-            case 'sidebar':
-                result = await heliaControl.openSidebar();
-                break;
-            case '--help':
-            case '-h':
-            case 'help':
-                console.log(usage);
-                process.exit(0);
-            default:
-                console.error(`Unknown helia verb: ${verb}\n\n${usage}`);
-                process.exit(1);
-        }
-        console.log(JSON.stringify(result, null, 2));
-        process.exit(0);
-    }
-    catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        console.error(`helia ${verb}: ${msg}`);
-        process.exit(1);
-    }
-}
-async function main() {
-    // Require authentication before continuing
-    const { requireAuth } = await import('../core/auth.js');
-    await requireAuth();
-    // Approved-users gate. The CLI carries offsec tooling, so every
-    // launch checks the signed-in email against the Firestore allowlist
-    // at `approved_users/{email}`. Misses get a request doc written for
-    // the operator to review, then the CLI refuses to start. SSO is
-    // also enforced at the Firestore-rule layer (sign_in_provider ==
-    // 'google.com'), so a non-SSO token can't even read the doc.
-    // The check also enforces:
-    //   - revocation: `revoked: true` on the doc denies access even if
-    //     `approved: true` (faster than removing the doc — preserves
-    //     the audit trail of who held access when).
-    //   - profile gating: `profiles_allowed: ['variant-research', ...]`
-    //     restricts which agent profiles a user can launch. Missing
-    //     field = permissive (backward compat). New approvals default
-    //     to `['erosolar-code']` only.
-    const requestedProfile = pickProfileArg(rawArgs) ?? process.env['EROSOLAR_PROFILE'] ?? 'erosolar-code';
-    const { checkApproval, requestApproval } = await import('../core/userApproval.js');
-    const approval = await checkApproval(requestedProfile);
-    if (!approval.approved) {
-        process.stderr.write('\n');
-        process.stderr.write('Access denied — this account is not authorized.\n');
-        process.stderr.write(`  Email:    ${approval.email ?? '(no email on token — SSO required)'}\n`);
-        process.stderr.write(`  Profile:  ${requestedProfile}\n`);
-        process.stderr.write(`  Reason:   ${approval.reason ?? 'unknown'}\n\n`);
-        if (approval.email && approval.uid && !approval.revoked) {
-            const req = await requestApproval();
-            if (req.ok) {
-                process.stderr.write('A request has been recorded. The administrator will review it.\n');
-                process.stderr.write('You can re-run `erosolar` once the approval lands.\n');
-            }
-            else {
-                process.stderr.write(`Could not file approval request: ${req.reason}\n`);
-            }
-        }
-        else if (approval.revoked) {
-            process.stderr.write('Revoked accounts cannot file new requests. Contact the operator directly.\n');
-        }
-        process.exit(1);
-    }
-    // Hydrate shared provider keys from Firestore. Runs after requireAuth
-    // + checkApproval so a valid Firebase ID token is already on disk
-    // and the user is on the allowlist. If the user has their own
-    // DEEPSEEK_API_KEY in env or saved via /secrets, this is a no-op;
-    // otherwise it fetches the org-managed key from
-    // shared_secrets/deepseek (Firestore-rule-gated by auth) and writes
-    // it into process.env before any provider is constructed. The CLI
-    // ships zero embedded keys.
-    const { prefetchAllSharedSecrets } = await import('../core/sharedSecrets.js');
-    await prefetchAllSharedSecrets();
-    // Audit log — best-effort write of session metadata to Firestore.
-    // Schema is deliberately minimal: profile/model/version/platform.
-    // No prompt content is recorded; logs are for abuse review and
-    // accountability, not surveillance. Failures here are non-fatal —
-    // logging is observability, not a runtime gate.
-    const { writeUsageLog } = await import('../core/userApproval.js');
-    void writeUsageLog({
-        profile: requestedProfile,
-        model: process.env[`${requestedProfile.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_MODEL`] || 'default',
-        version: process.env['npm_package_version'] || 'unknown',
-        platform: process.platform,
-    }).catch(() => { });
-    // Force color support for TTY terminals
-    if (process.stdout.isTTY && !process.env['NO_COLOR']) {
-        process.env['FORCE_COLOR'] = process.env['FORCE_COLOR'] ?? '1';
-    }
-    // Self-test mode
-    if (rawArgs.includes('--self-test')) {
-        const { runSelfTest } = await import('./selfTest.js');
-        runSelfTest().then((success) => process.exit(success ? 0 : 1)).catch(() => process.exit(1));
-        return;
-    }
-    const { runInteractiveShell } = await import('../headless/interactiveShell.js');
-    runInteractiveShell({ argv: rawArgs }).catch((error) => {
-        reportStatusError(error);
-        process.exit(1);
-    });
-}
-//# sourceMappingURL=deepseek.js.map

package/dist/bin/deepseek.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"deepseek.js","sourceRoot":"","sources":["../../src/bin/deepseek.ts"],"names":[],"mappings":";AACA;;GAEG;AACH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,sEAAsE;AACtE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtC;;iCAEiC;AACjC,SAAS,cAAc,CAAC,IAAc;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACrD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACvF,KAAK,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAEhE,gEAAgE;AAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;IACpB,IAAI,QAA4B,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9B,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;oBAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;oBACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBAExD,IAAI,CAAC;wBACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;4BACxC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;4BAClD,CAAC,CAAC,EAAE,CAAC;wBACP,QAAQ,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC;wBACxC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;wBACvE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;wBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,YAAY,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;wBAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;KAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC9B,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC5B,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;CAuBb,CAAC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;IAClC,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,uEAAuE;IACvE,0CAA0C;IAC1C,KAAK,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAE/B,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;CAef,CAAC;IAEA,IAAI,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;oBAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,GAAG,CAAC,CAAC;gBACX,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC5C,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,KAAK;gBACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACrD,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI,CAAC;YACV,KAAK,MAAM;gBACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB;gBACE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,2CAA2C;IAC3C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,WAAW,EAAE,CAAC;IAEpB,gEAAgE;IAChE,oEAAoE;IACpE,oEAAoE;IACpE,gEAAgE;IAChE,iEAAiE;IACjE,6DAA6D;IAC7D,2BAA2B;IAC3B,mEAAmE;IACnE,iEAAiE;IACjE,gDAAgD;IAChD,oEAAoE;IACpE,gEAAgE;IAChE,kEAAkE;IAClE,mCAAmC;IACnC,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC;IACvG,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,KAAK,IAAI,oCAAoC,IAAI,CAAC,CAAC;QAChG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,gBAAgB,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;gBACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,kEAAkE;IAClE,8DAA8D;IAC9D,kEAAkE;IAClE,gDAAgD;IAChD,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9E,MAAM,wBAAwB,EAAE,CAAC;IAEjC,kEAAkE;IAClE,kEAAkE;IAClE,+DAA+D;IAC/D,kEAAkE;IAClE,gDAAgD;IAChD,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAClE,KAAK,aAAa,CAAC;QACjB,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS;QACrG,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS;QACxD,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;IAEtC,wCAAwC;IACxC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;IACjE,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACtD,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAChF,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrD,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bin/erosolar.d.ts

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-/**
- * Alias entrypoint for erosolar-cli.
- * Delegates to the main deepseek binary to keep build outputs in sync.
- */
-import './deepseek.js';
-//# sourceMappingURL=erosolar.d.ts.map

package/dist/bin/erosolar.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"erosolar.d.ts","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,eAAe,CAAC"}

package/dist/bin/erosolar.js

@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-/**
- * Alias entrypoint for erosolar-cli.
- * Delegates to the main deepseek binary to keep build outputs in sync.
- */
-import './deepseek.js';
-//# sourceMappingURL=erosolar.js.map

package/dist/bin/erosolar.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"erosolar.js","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,eAAe,CAAC"}

package/dist/bin/selfTest.d.ts

@@ -1,14 +0,0 @@
-#!/usr/bin/env node
-/**
- * Self-Test Runner for Erosolar CLI
- *
- * Launches the CLI in a separate process and runs extensive tests
- * to verify functionality works correctly in a real runtime environment.
- *
- * @license MIT
- */
-/**
- * Run all self-tests
- */
-export declare function runSelfTest(): Promise<boolean>;
-//# sourceMappingURL=selfTest.d.ts.map

package/dist/bin/selfTest.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"selfTest.d.ts","sourceRoot":"","sources":["../../src/bin/selfTest.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AAoCH;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAuBpD"}