@trenchwork/erosolar 1.1.30 → 1.1.31

package/README.md

@@ -38,7 +38,7 @@ erosolar
 
 On first launch the CLI:
 
-1. Pops a browser tab to `https://ero.solar/auth?port=…`. You sign in
+1. Pops a browser tab to `https://trenchwork.org/auth?port=…`. You sign in
    with **Google SSO** (Erosolar Auth — Firebase Auth under the hood,
    project `erosolar-1b0db`). SSO is enforced both at the web auth
    page and at the Firestore-rule layer
@@ -183,7 +183,7 @@ Capabilities are typed wrappers around external tools, registered in
 | Exploit development | `pwntoolsCapability.ts` | `pwn_eval`, `pwn_rop_search`, `pwn_packed` |
 
 The offsec capabilities are guardrail-free per
-[ero.solar/about](https://ero.solar/about) — the operator authorizes
+[trenchwork.org/about](https://trenchwork.org/about) — the operator authorizes
 their own engagements; the CLI does not validate target/argv. Install
 the underlying binaries via `kali-linux-everything` + `ghidra` on Kali
 Linux, or pull the Kali rolling repo on Debian/Ubuntu.
@@ -458,7 +458,7 @@ that range will print an `npm deprecate` warning. Upgrade to ≥
   permissions, in an `0o700` directory. Atomic writes prevent
   half-written JSON from breaking subsequent loads.
 
-See [`/about`](https://ero.solar/about) for the full disclosure
+See [`/about`](https://trenchwork.org/about) for the full disclosure
 including BIS / DDTC links and the relevant rulemaking.
 
 ---
@@ -468,8 +468,8 @@ including BIS / DDTC links and the relevant rulemaking.
 - npm: https://www.npmjs.com/package/@trenchwork/erosolar
 - Source: https://github.com/Aroxora/deepseek-coder-cli
 - Companion research workspace: `Aroxora/patchpivot` (private)
-- Helia (macOS browser companion): https://ero.solar/helia
-- Erosolar Auth: https://ero.solar/auth
-- Project context: https://ero.solar/about
+- Helia (macOS browser companion): https://trenchwork.org/helia
+- Erosolar Auth: https://trenchwork.org/auth
+- Project context: https://trenchwork.org/about
 
 License: MIT (see [LICENSE](LICENSE)).

package/SECURITY.md

@@ -16,7 +16,7 @@ admin script you can run.
 
 ### Google SSO required
 
-The CLI signs the user in via Firebase Auth at `https://ero.solar/auth`
+The CLI signs the user in via Firebase Auth at `https://trenchwork.org/auth`
 which exposes Google as the only provider. SSO is enforced a second
 time at the Firestore rule layer:
 
@@ -150,12 +150,12 @@ The agent surface includes offensive cyber tooling. U.S. export
 classification: EAR-controlled (CCL [ECCN 4D004](https://www.federalregister.gov/documents/2021/10/21/2021-22774/information-security-controls-cybersecurity-items)),
 not USML/ITAR. Domestic development and use is unrestricted; export
 controls apply to international transfer. See
-[ero.solar/about](https://ero.solar/about) for the full disclosure
+[trenchwork.org/about](https://trenchwork.org/about) for the full disclosure
 including BIS / DDTC links and the relevant rulemaking.
 
 ## Audit portal
 
-`https://ero.solar/audit` — admin-gated dashboard backed by an AWS
+`https://trenchwork.org/audit` — admin-gated dashboard backed by an AWS
 Lambda server-side proxy (`aws/lambda/src/handlers.js:adminList* /
 adminApproveUser / adminRevokeUser / adminGrantProfile /
 adminListActions / adminReviewerCounts`). Every endpoint:
@@ -163,7 +163,7 @@ adminListActions / adminReviewerCounts`). Every endpoint:
 1. Requires `Authorization: Bearer <id-token>`.
 2. Verifies via Firebase Admin SDK and rejects non-Google-SSO tokens.
 3. Checks the email against `isAdminEmail(email)` (hardcoded in
-   `handlers.js:797` — currently `bo@ero.solar`,
+   `handlers.js:797` — currently `bo@trenchwork.org`,
    `daburu.dragon@gmail.com`).
 4. Reads or mutates Firestore via the Admin SDK (bypassing the
    per-user owner-only client rules, which is the entire point of

package/dist/bin/cliMode.d.ts

@@ -0,0 +1,8 @@
+type Mode = 'version' | 'help' | 'self-test' | 'json' | 'eval' | 'shell';
+export interface CliModeResult {
+    mode: Mode;
+    argv: string[];
+}
+export declare function detectCliMode(argv: string[]): CliModeResult;
+export {};
+//# sourceMappingURL=cliMode.d.ts.map

package/dist/bin/cliMode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliMode.d.ts","sourceRoot":"","sources":["../../src/bin/cliMode.ts"],"names":[],"mappings":"AAAA,KAAK,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAEzE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,aAAa,CAkB3D"}

package/dist/bin/cliMode.js

@@ -0,0 +1,20 @@
+export function detectCliMode(argv) {
+    const args = [...argv];
+    if (args.includes('--version') || args.includes('-v')) {
+        return { mode: 'version', argv: args };
+    }
+    if (args.includes('--help') || args.includes('-h')) {
+        return { mode: 'help', argv: args };
+    }
+    if (args.includes('--self-test')) {
+        return { mode: 'self-test', argv: args };
+    }
+    if (args.includes('--json')) {
+        return { mode: 'json', argv: args };
+    }
+    if (args.includes('--eval') || args.includes('-e')) {
+        return { mode: 'eval', argv: args };
+    }
+    return { mode: 'shell', argv: args };
+}
+//# sourceMappingURL=cliMode.js.map

package/dist/bin/cliMode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cliMode.js","sourceRoot":"","sources":["../../src/bin/cliMode.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,aAAa,CAAC,IAAc;IAC1C,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC"}

package/dist/bin/deepseek.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=deepseek.d.ts.map

package/dist/bin/deepseek.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek.d.ts","sourceRoot":"","sources":["../../src/bin/deepseek.ts"],"names":[],"mappings":""}

package/dist/bin/deepseek.js

@@ -0,0 +1,332 @@
+#!/usr/bin/env node
+/**
+ * DeepSeek Coder CLI - AI-powered coding assistant
+ */
+import { reportStatus, reportStatusError } from '../utils/statusReporter.js';
+import { track } from '../utils/analytics.js';
+// Fast path: Handle --version, --help, --key before any heavy imports
+const rawArgs = process.argv.slice(2);
+/** Extract `--profile NAME` or `--profile=NAME` from argv. Used by the
+ * approval gate to check profile-specific authorization before the
+ * profile manifest is loaded. */
+function pickProfileArg(args) {
+    const idx = args.findIndex((a) => a === '--profile');
+    if (idx >= 0) {
+        const next = args[idx + 1];
+        if (next && !next.startsWith('-'))
+            return next;
+    }
+    const eq = args.find((a) => a.startsWith('--profile='));
+    if (eq)
+        return eq.slice('--profile='.length);
+    return undefined;
+}
+// Best-effort, non-blocking analytics ping. Never throws, never awaited.
+const subcommand = rawArgs[0]?.startsWith('-') ? '(flags)' : (rawArgs[0] || 'default');
+track('cli_invoked', { subcommand, arg_count: rawArgs.length });
+// Handle --key to set API key (simple path that works reliably)
+const keyIndex = rawArgs.findIndex(arg => arg === '--key' || arg.startsWith('--key='));
+if (keyIndex !== -1) {
+    let keyValue;
+    const arg = rawArgs[keyIndex];
+    if (arg?.startsWith('--key=')) {
+        keyValue = arg.slice(6);
+    }
+    else if (rawArgs[keyIndex + 1] && !rawArgs[keyIndex + 1]?.startsWith('-')) {
+        keyValue = rawArgs[keyIndex + 1];
+    }
+    if (keyValue) {
+        import('node:fs').then(fs => {
+            import('node:path').then(path => {
+                import('node:os').then(os => {
+                    const secretDir = path.join(os.homedir(), '.erosolar');
+                    const secretFile = path.join(secretDir, 'secrets.json');
+                    try {
+                        fs.mkdirSync(secretDir, { recursive: true });
+                        const existing = fs.existsSync(secretFile)
+                            ? JSON.parse(fs.readFileSync(secretFile, 'utf-8'))
+                            : {};
+                        existing['DEEPSEEK_API_KEY'] = keyValue;
+                        fs.writeFileSync(secretFile, JSON.stringify(existing, null, 2) + '\n');
+                        console.log('✓ DEEPSEEK_API_KEY saved to ~/.erosolar/secrets.json');
+                        process.exit(0);
+                    }
+                    catch (err) {
+                        reportStatus(`Failed to save key: ${err instanceof Error ? err.message : err}`);
+                        process.exit(1);
+                    }
+                });
+            });
+        });
+    }
+    else {
+        reportStatus('Usage: deepseek --key YOUR_API_KEY');
+        process.exit(1);
+    }
+}
+else if (rawArgs.includes('--version') || rawArgs.includes('-v')) {
+    import('node:fs').then(fs => {
+        import('node:path').then(path => {
+            import('node:url').then(url => {
+                try {
+                    const __filename = url.fileURLToPath(import.meta.url);
+                    const pkgPath = path.resolve(path.dirname(__filename), '../../package.json');
+                    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+                    console.log(`deepseek-coder-cli v${pkg.version || '0.0.0'}`);
+                }
+                catch {
+                    console.log('deepseek-coder-cli (version unknown)');
+                }
+                process.exit(0);
+            });
+        });
+    });
+}
+else if (rawArgs.includes('--help') || rawArgs.includes('-h')) {
+    console.log(`
+deepseek-coder-cli - AI-powered coding assistant
+
+Usage: deepseek [options] [prompt]
+
+Modes:
+  deepseek                    Start interactive shell
+  deepseek "prompt"           Start with initial prompt
+
+Options:
+  -v, --version       Show version
+  -h, --help          Show this help
+  --key KEY           Set DeepSeek API key
+  --self-test         Run self-tests
+
+Environment:
+  DEEPSEEK_API_KEY    DeepSeek API key (or use --key to set)
+
+Commands (in interactive mode):
+  /model              Switch AI model
+  /secrets            Manage API keys
+  /help               Show commands
+  /clear              Clear screen
+`);
+    process.exit(0);
+}
+else if (rawArgs[0] === 'helia') {
+    // Local-only utility: control the Helia browser running on this same
+    // machine via its 127.0.0.1:59998 HTTP API. No Erosolar account login
+    // required, no pairing token to copy — the CLI reads Helia's token
+    // file directly from ~/Library/Application Support/Helia/pairing-token
+    // (or the equivalent on Windows / Linux).
+    void runHeliaCommand(rawArgs.slice(1)).catch((err) => {
+        reportStatusError(err);
+        process.exit(1);
+    });
+}
+else {
+    void main();
+}
+async function runHeliaCommand(args) {
+    const { heliaControl } = await import('../tools/heliaControl.js');
+    const verb = args[0] || 'ping';
+    const usage = `Usage: erosolar helia <verb> [args]
+
+Verbs:
+  ping                       Check Helia is running, print version
+  tabs                       List open tabs (id / title / url / active)
+  open [url]                 Open a new tab (blank → homepage)
+  close <id>                 Close tab by id
+  switch <id>                Switch to tab by id
+  reload [id]                Reload active tab (or specific id)
+  navigate <url>             Navigate active tab to URL
+  context                    Read active tab's URL / title / text / headings
+  prompt <text>              Inject text into Helia's sidebar agent
+  focus                      Bring Helia window to the front
+  sidebar                    Open the Erosolar side panel
+  token                      Print path to the pairing-token file
+`;
+    try {
+        let result;
+        switch (verb) {
+            case 'ping': {
+                const r = await heliaControl.ping();
+                if (!r) {
+                    console.error('Helia is not running on this machine (no response on http://127.0.0.1:59998).');
+                    process.exit(2);
+                }
+                result = r;
+                break;
+            }
+            case 'token':
+                result = { path: heliaControl.tokenPath() };
+                break;
+            case 'tabs':
+                result = await heliaControl.tabs();
+                break;
+            case 'open':
+                result = await heliaControl.openTab(args[1]);
+                break;
+            case 'close':
+                if (!args[1]) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.closeTab(args[1]);
+                break;
+            case 'switch':
+                if (!args[1]) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.switchTab(args[1]);
+                break;
+            case 'reload':
+                result = await heliaControl.reload(args[1]);
+                break;
+            case 'navigate':
+            case 'nav':
+                if (!args[1]) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.navigate(args[1]);
+                break;
+            case 'context':
+                result = await heliaControl.pageContext();
+                break;
+            case 'prompt': {
+                const text = args.slice(1).join(' ');
+                if (!text) {
+                    console.error(usage);
+                    process.exit(1);
+                }
+                result = await heliaControl.prompt(text);
+                break;
+            }
+            case 'focus':
+                result = await heliaControl.focus();
+                break;
+            case 'sidebar':
+                result = await heliaControl.openSidebar();
+                break;
+            case '--help':
+            case '-h':
+            case 'help':
+                console.log(usage);
+                process.exit(0);
+            default:
+                console.error(`Unknown helia verb: ${verb}\n\n${usage}`);
+                process.exit(1);
+        }
+        console.log(JSON.stringify(result, null, 2));
+        process.exit(0);
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`helia ${verb}: ${msg}`);
+        process.exit(1);
+    }
+}
+async function main() {
+    // Require authentication before continuing
+    const { requireAuth } = await import('../core/auth.js');
+    await requireAuth();
+    // Approved-users gate. The CLI carries offsec tooling, so every
+    // launch checks the signed-in email against the Firestore allowlist
+    // at `approved_users/{email}`. Misses get a request doc written for
+    // the operator to review, then the CLI refuses to start. SSO is
+    // also enforced at the Firestore-rule layer (sign_in_provider ==
+    // 'google.com'), so a non-SSO token can't even read the doc.
+    // The check also enforces:
+    //   - revocation: `revoked: true` on the doc denies access even if
+    //     `approved: true` (faster than removing the doc — preserves
+    //     the audit trail of who held access when).
+    //   - profile gating: `profiles_allowed: ['variant-research', ...]`
+    //     restricts which agent profiles a user can launch. Missing
+    //     field = permissive (backward compat). New approvals default
+    //     to `['erosolar-code']` only.
+    const requestedProfile = pickProfileArg(rawArgs) ?? process.env['EROSOLAR_PROFILE'] ?? 'erosolar-code';
+    const { checkApproval, requestApproval } = await import('../core/userApproval.js');
+    const approval = await checkApproval(requestedProfile);
+    if (!approval.approved) {
+        process.stderr.write('\n');
+        process.stderr.write('Access denied — this account is not authorized.\n');
+        process.stderr.write(`  Email:    ${approval.email ?? '(no email on token — SSO required)'}\n`);
+        process.stderr.write(`  Profile:  ${requestedProfile}\n`);
+        process.stderr.write(`  Reason:   ${approval.reason ?? 'unknown'}\n\n`);
+        if (approval.email && approval.uid && !approval.revoked) {
+            const req = await requestApproval();
+            if (req.ok) {
+                process.stderr.write('A request has been recorded. The administrator will review it.\n');
+                process.stderr.write('You can re-run `erosolar` once the approval lands.\n');
+            }
+            else {
+                process.stderr.write(`Could not file approval request: ${req.reason}\n`);
+            }
+        }
+        else if (approval.revoked) {
+            process.stderr.write('Revoked accounts cannot file new requests. Contact the operator directly.\n');
+        }
+        process.exit(1);
+    }
+    // Hydrate shared provider keys from Firestore. Runs after requireAuth
+    // + checkApproval so a valid Firebase ID token is already on disk
+    // and the user is on the allowlist. If the user has their own
+    // DEEPSEEK_API_KEY in env or saved via /secrets, this is a no-op;
+    // otherwise it fetches the org-managed key from
+    // shared_secrets/deepseek (Firestore-rule-gated by auth) and writes
+    // it into process.env before any provider is constructed. The CLI
+    // ships zero embedded keys.
+    const { prefetchAllSharedSecrets } = await import('../core/sharedSecrets.js');
+    await prefetchAllSharedSecrets();
+    // Project tracking. Idempotently upserts `projects/{projectId}`
+    // (id = sha256(workingDir).slice(0, 12)) and writes the
+    // session-start row with the project FK. The session id is
+    // surfaced via the EROSOLAR_SESSION_ID env so the interactive
+    // shell can patch session-end fields on clean exit.
+    const { registerProject, writeSessionStart } = await import('../core/projectTracker.js');
+    const projectResult = await registerProject(process.cwd());
+    process.env['EROSOLAR_PROJECT_ID'] = projectResult.context.projectId;
+    const cliVersion = process.env['npm_package_version'] || 'unknown';
+    const cliModel = process.env[`${requestedProfile.toUpperCase().replace(/[^A-Z0-9]/g, '_')}_MODEL`] || 'default';
+    const sessionStart = await writeSessionStart({
+        profile: requestedProfile,
+        model: cliModel,
+        version: cliVersion,
+        platform: process.platform,
+        project: projectResult.context,
+    });
+    if (sessionStart.ok && sessionStart.sessionId) {
+        process.env['EROSOLAR_SESSION_ID'] = sessionStart.sessionId;
+    }
+    // Mirror the active profile + model + platform to the Remote
+    // Operations Center so the portal's "Profile" pill shows what the
+    // CLI is currently running. Fire-and-forget; a failed call never
+    // blocks startup.
+    void (async () => {
+        try {
+            const { callLambda } = await import('../utils/lambdaClient.js');
+            await callLambda('cliProfileSet', {
+                profile: requestedProfile,
+                model: cliModel,
+                version: cliVersion,
+                platform: process.platform,
+                projectId: projectResult.context.projectId,
+            });
+        }
+        catch (_) { /* portal mirror is fire-and-forget */ }
+    })();
+    // Force color support for TTY terminals
+    if (process.stdout.isTTY && !process.env['NO_COLOR']) {
+        process.env['FORCE_COLOR'] = process.env['FORCE_COLOR'] ?? '1';
+    }
+    // Self-test mode
+    if (rawArgs.includes('--self-test')) {
+        const { runSelfTest } = await import('./selfTest.js');
+        runSelfTest().then((success) => process.exit(success ? 0 : 1)).catch(() => process.exit(1));
+        return;
+    }
+    const { runInteractiveShell } = await import('../headless/interactiveShell.js');
+    runInteractiveShell({ argv: rawArgs }).catch((error) => {
+        reportStatusError(error);
+        process.exit(1);
+    });
+}
+//# sourceMappingURL=deepseek.js.map

package/dist/bin/deepseek.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deepseek.js","sourceRoot":"","sources":["../../src/bin/deepseek.ts"],"names":[],"mappings":";AACA;;GAEG;AACH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAE9C,sEAAsE;AACtE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEtC;;iCAEiC;AACjC,SAAS,cAAc,CAAC,IAAc;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC;IACrD,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACjD,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IACxD,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;AACvF,KAAK,CAAC,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;AAEhE,gEAAgE;AAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACvF,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;IACpB,IAAI,QAA4B,CAAC;IACjC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,GAAG,EAAE,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1B,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5E,QAAQ,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;IACnC,CAAC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC9B,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;oBAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;oBACvD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBAExD,IAAI,CAAC;wBACH,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;wBAC7C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;4BACxC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;4BAClD,CAAC,CAAC,EAAE,CAAC;wBACP,QAAQ,CAAC,kBAAkB,CAAC,GAAG,QAAQ,CAAC;wBACxC,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;wBACvE,OAAO,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC;wBACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,YAAY,CAAC,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;wBAChF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,YAAY,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;KAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACnE,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;QAC1B,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC9B,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC5B,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAC,CAAC;oBAC7E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;oBAC1D,OAAO,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;gBAC/D,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;gBACtD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;;;;;CAuBb,CAAC,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;KAAM,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;IAClC,qEAAqE;IACrE,sEAAsE;IACtE,mEAAmE;IACnE,uEAAuE;IACvE,0CAA0C;IAC1C,KAAK,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;KAAM,CAAC;IACN,KAAK,IAAI,EAAE,CAAC;AACd,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IAE/B,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;CAef,CAAC;IAEA,IAAI,CAAC;QACH,IAAI,MAAe,CAAC;QACpB,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACpC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACP,OAAO,CAAC,KAAK,CAAC,+EAA+E,CAAC,CAAC;oBAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;gBACD,MAAM,GAAG,CAAC,CAAC;gBACX,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC;gBAC5C,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM;YACR,KAAK,MAAM;gBACT,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC7C,MAAM;YACR,KAAK,OAAO;gBACV,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,QAAQ;gBACX,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAChD,MAAM;YACR,KAAK,QAAQ;gBACX,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5C,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,KAAK;gBACR,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACxD,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;gBAC/C,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACrC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;gBACrD,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzC,MAAM;YACR,CAAC;YACD,KAAK,OAAO;gBACV,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC;gBACpC,MAAM;YACR,KAAK,SAAS;gBACZ,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,CAAC;gBAC1C,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI,CAAC;YACV,KAAK,MAAM;gBACT,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB;gBACE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;gBACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,KAAK,CAAC,SAAS,IAAI,KAAK,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,2CAA2C;IAC3C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACxD,MAAM,WAAW,EAAE,CAAC;IAEpB,gEAAgE;IAChE,oEAAoE;IACpE,oEAAoE;IACpE,gEAAgE;IAChE,iEAAiE;IACjE,6DAA6D;IAC7D,2BAA2B;IAC3B,mEAAmE;IACnE,iEAAiE;IACjE,gDAAgD;IAChD,oEAAoE;IACpE,gEAAgE;IAChE,kEAAkE;IAClE,mCAAmC;IACnC,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,eAAe,CAAC;IACvG,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;QAC1E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,KAAK,IAAI,oCAAoC,IAAI,CAAC,CAAC;QAChG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,gBAAgB,IAAI,CAAC,CAAC;QAC1D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,QAAQ,CAAC,MAAM,IAAI,SAAS,MAAM,CAAC,CAAC;QACxE,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,eAAe,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kEAAkE,CAAC,CAAC;gBACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;YAC/E,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6EAA6E,CAAC,CAAC;QACtG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,sEAAsE;IACtE,kEAAkE;IAClE,8DAA8D;IAC9D,kEAAkE;IAClE,gDAAgD;IAChD,oEAAoE;IACpE,kEAAkE;IAClE,4BAA4B;IAC5B,MAAM,EAAE,wBAAwB,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;IAC9E,MAAM,wBAAwB,EAAE,CAAC;IAEjC,gEAAgE;IAChE,wDAAwD;IACxD,2DAA2D;IAC3D,8DAA8D;IAC9D,oDAAoD;IACpD,MAAM,EAAE,eAAe,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,SAAS,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,SAAS,CAAC;IACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC;IAChH,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC;QAC3C,OAAO,EAAE,gBAAgB;QACzB,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,UAAU;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO,EAAE,aAAa,CAAC,OAAO;KAC/B,CAAC,CAAC;IACH,IAAI,YAAY,CAAC,EAAE,IAAI,YAAY,CAAC,SAAS,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC;IAC9D,CAAC;IAED,6DAA6D;IAC7D,kEAAkE;IAClE,iEAAiE;IACjE,kBAAkB;IAClB,KAAK,CAAC,KAAK,IAAI,EAAE;QACf,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,0BAA0B,CAAC,CAAC;YAChE,MAAM,UAAU,CAAC,eAAe,EAAE;gBAChC,OAAO,EAAE,gBAAgB;gBACzB,KAAK,EAAE,QAAQ;gBACf,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,SAAS;aAC3C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC;IACxD,CAAC,CAAC,EAAE,CAAC;IAEL,wCAAwC;IACxC,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC;IACjE,CAAC;IAED,iBAAiB;IACjB,IAAI,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC;QACtD,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,OAAO;IACT,CAAC;IAED,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAChF,mBAAmB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACrD,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/bin/erosolar.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * Alias entrypoint for erosolar-cli.
+ * Delegates to the main deepseek binary to keep build outputs in sync.
+ */
+import './deepseek.js';
+//# sourceMappingURL=erosolar.d.ts.map

package/dist/bin/erosolar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"erosolar.d.ts","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,eAAe,CAAC"}

package/dist/bin/erosolar.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * Alias entrypoint for erosolar-cli.
+ * Delegates to the main deepseek binary to keep build outputs in sync.
+ */
+import './deepseek.js';
+//# sourceMappingURL=erosolar.js.map

package/dist/bin/erosolar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"erosolar.js","sourceRoot":"","sources":["../../src/bin/erosolar.ts"],"names":[],"mappings":";AACA;;;GAGG;AACH,OAAO,eAAe,CAAC"}

package/dist/bin/selfTest.d.ts

@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+/**
+ * Self-Test Runner for Erosolar CLI
+ *
+ * Launches the CLI in a separate process and runs extensive tests
+ * to verify functionality works correctly in a real runtime environment.
+ *
+ * @license MIT
+ */
+/**
+ * Run all self-tests
+ */
+export declare function runSelfTest(): Promise<boolean>;
+//# sourceMappingURL=selfTest.d.ts.map

package/dist/bin/selfTest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfTest.d.ts","sourceRoot":"","sources":["../../src/bin/selfTest.ts"],"names":[],"mappings":";AACA;;;;;;;GAOG;AAoCH;;GAEG;AACH,wBAAsB,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,CAuBpD"}