@tutti-os/tutti-ops-cli 0.1.4 → 0.1.5

package/README.md

@@ -1,8 +1,55 @@
 # tutti-ops-cli
 
-Internal CLI for Tutti operations. The first workflow is App Center
-release publishing, but the command surface is intentionally broader than app
-uploads so it can grow with admin automation.
+Internal CLI for Tutti admin operations: access, commerce, App Center, market,
+LLM, releases, computers, tasks, and diagnostics.
+
+## Design and development
+
+See [implementation status](docs/implementation-status.md) for delivered capabilities and remaining backend dependencies.
+See [CLI design](docs/cli-design.md) for target commands and compatibility,
+[execution contract](docs/cli-contract.md) for agent-facing behavior, and
+[admin capability inventory](docs/admin-cli-capability-inventory.md) for verified API coverage and gaps.
+Repository contributors start with [AGENTS.md](AGENTS.md).
+
+## Discover and run
+
+```bash
+pnpm install --frozen-lockfile
+pnpm build
+node dist/index.js capabilities --access read
+node dist/index.js schema access.login-code-settings.update
+node dist/index.js skills show tutti-admin
+
+# Offline request preview
+node dist/index.js access login-code-settings update \
+  --scope-app-id example-app --enabled false --dry-run
+
+# Explicitly execute an authorized write
+node dist/index.js access login-code-settings update \
+  --scope-app-id example-app --enabled false --yes
+
+# Read all pages for an operation with verified pagination support
+node dist/index.js --mode read brand list --page-all --page-limit 10
+```
+
+Canonical commands accept `--params` / `--data` as JSON objects, `@file.json`, or
+`-` for stdin. Use schema for required fields and scope. Output defaults to a v1
+JSON envelope; `--format table` produces TSV and `--format ndjson` emits records
+and a summary. Failures use stderr JSON and nonzero exit codes. Exit 6 retains
+partial data or indicates an uncertain write outcome; inspect state before retrying.
+
+Management keys support **Read-only** (`access_mode=read`) and **Full access**
+(`access_mode=write`) with the companion backend changes. New keys default to
+read-only; existing keys retain full access. Server enforcement requires the
+[coordinated rollout](docs/admin-token-permissions.md). Verify the target environment
+before relying on typed key support.
+`--mode read` (or `TUTTI_OPS_MODE=read`) adds a local write restriction and does not
+change the key's actual permission. Existing administrator and business rules apply.
+Session access can use an explicitly supplied `TUTTI_ADMIN_COOKIE`.
+
+Credential fields are redacted by default. If an authorized task needs a newly
+created token or a client config, pass `--show-secrets` on that successful request.
+Dry-run and error output always redact known credential fields.
 
 ## Auth
 
@@ -17,7 +64,7 @@ The CLI stores the token in `~/.config/tutti-ops/config.json` with `0600`
 permissions. CI can provide `TUTTI_ADMIN_TOKEN` instead.
 `admin.nextop.sh` is normalized to the API origin `https://nextop.sh`.
 
-## App Release
+## App Release (legacy commands)
 
 ```bash
 tutti-ops app list --brand nextop --query design
@@ -52,3 +99,17 @@ icon through App Center asset upload, or `--icon-url <url>` when the asset is
 already hosted.
 `app delete` removes the app catalog entry and all version metadata. It does not
 delete previously uploaded CDN artifacts.
+
+## Canonical App workflow
+
+```bash
+tutti-ops app +validate --zip ./output/vibe-design.zip
+tutti-ops app +release --app-id vibe-design --zip ./output/vibe-design.zip \
+  --publish true --latest true --dry-run
+tutti-ops app +release --app-id vibe-design --zip ./output/vibe-design.zip \
+  --publish true --latest true --yes
+```
+
+Legacy App commands retain their original success output and flags. Legacy
+`--brand` does not enforce brand isolation. Use canonical entries for schema,
+dry-run, confirmation, structured output and workflow request history.

package/dist/config.d.ts

@@ -9,8 +9,11 @@ export declare function writeConfig(config: StoredConfig): Promise<void>;
 export declare function resolveRuntimeConfig(options?: {
     adminUrl?: string;
     token?: string;
+    mode?: 'read' | 'write';
 }): Promise<{
     adminUrl: string;
     token: string;
+    cookie: string | undefined;
+    mode: "read" | "write";
 }>;
 export { CONFIG_PATH };

package/dist/config.js

@@ -24,14 +24,19 @@ export async function readConfig() {
 }
 export async function writeConfig(config) {
     await mkdir(dirname(CONFIG_PATH), { recursive: true });
-    await writeFile(CONFIG_PATH, `${JSON.stringify(config, null, 2)}\n`, 'utf8');
+    await writeFile(CONFIG_PATH, `${JSON.stringify(config, null, 2)}\n`, { encoding: 'utf8', mode: 0o600 });
     await chmod(CONFIG_PATH, 0o600);
 }
 export async function resolveRuntimeConfig(options = {}) {
     const stored = await readConfig();
-    const adminUrl = normalizeApiOrigin(options.adminUrl || stored.adminUrl);
-    const token = (options.token || process.env.TUTTI_ADMIN_TOKEN || stored.token || '').trim();
-    return { adminUrl, token };
+    const adminUrl = normalizeApiOrigin(options.adminUrl || process.env.TUTTI_ADMIN_URL || stored.adminUrl);
+    const sameOrigin = !stored.token || adminUrl === normalizeApiOrigin(stored.adminUrl);
+    const token = (options.token || process.env.TUTTI_ADMIN_TOKEN || (sameOrigin ? stored.token : '') || '').trim();
+    const cookie = process.env.TUTTI_ADMIN_COOKIE?.trim();
+    const mode = options.mode || process.env.TUTTI_OPS_MODE || 'write';
+    if (mode !== 'read' && mode !== 'write')
+        throw new Error('Mode must be read or write');
+    return { adminUrl, token, cookie, mode: mode };
 }
 export { CONFIG_PATH };
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAE3E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACvC,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC1C,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7E,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAiD,EAAE;IAC5F,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5F,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAO1C,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;AAE3E,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,mBAAmB,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAEzB,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;QACvC,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,EAAE,CAAC;QAC1C,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB;IACpD,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,MAAM,SAAS,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAC,QAAQ,EAAC,MAAM,EAAC,IAAI,EAAC,KAAK,EAAC,CAAC,CAAC;IACnG,MAAM,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAA0E,EAAE;IACrH,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxG,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,QAAQ,KAAK,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrF,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAChH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;IACnE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IACvF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAwB,EAAE,CAAC;AACrE,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC"}

package/dist/core/commands.d.ts

@@ -0,0 +1,2 @@
+import { Command } from 'commander';
+export declare function registerOperations(program: Command): void;

package/dist/core/commands.js

@@ -0,0 +1,71 @@
+import { readFile } from 'node:fs/promises';
+import { resolveRuntimeConfig } from '../config.js';
+import { operations, findOperation } from '../operations/registry.js';
+import { execute, envelope } from './executor.js';
+import { CliError } from './errors.js';
+import { errorEnvelope, redact, render } from './output.js';
+function child(parent, name) {
+    return parent.commands.find(command => command.name() === name) ?? parent.command(name);
+}
+async function stdin() {
+    let data = '';
+    for await (const chunk of process.stdin)
+        data += chunk;
+    return data;
+}
+export function registerOperations(program) {
+    program.option('--mode <mode>', 'local operation policy: read or write (TUTTI_OPS_MODE)');
+    program.command('capabilities').description('List canonical operations and their read/write classification')
+        .option('--access <access>', 'read or write').option('--module <module>', 'top-level module')
+        .action(options => {
+        if (options.access && !['read', 'write'].includes(options.access))
+            throw new CliError('INVALID_ACCESS', 'Use read or write');
+        const list = operations.filter(op => (!options.access || op.access === options.access) && (!options.module || op.command.split(' ')[0] === options.module));
+        process.stdout.write(render(envelope('capabilities', list.map(({ id, command, access, kind, scope, blocked, permission }) => ({ id, command, access, kind, scope, availability: blocked ? 'blocked' : 'implemented', authorization: 'server-enforced; CLI mode is local only', blocked, permission })), false, true)));
+    });
+    program.command('schema <operation...>').description('Describe one operation (dotted ID or command words)')
+        .action((parts) => {
+        const op = findOperation(parts.join(' '));
+        if (!op)
+            throw new CliError('UNKNOWN_OPERATION', 'Unknown operation; run capabilities', 8);
+        process.stdout.write(render(envelope('schema', op, false, true)));
+    });
+    const skills = program.command('skills').description('Discover bundled agent instructions');
+    skills.command('list').action(() => { process.stdout.write(render(envelope('skills.list', [{ name: 'tutti-admin' }], false, true))); });
+    skills.command('show <name>').action(async (name) => {
+        if (name !== 'tutti-admin')
+            throw new CliError('UNKNOWN_SKILL', 'Use skills list', 8);
+        const text = await readFile(new URL('../../skills/tutti-admin/SKILL.md', import.meta.url), 'utf8');
+        process.stdout.write(text);
+    });
+    for (const op of operations) {
+        let command = program;
+        for (const name of op.command.split(' '))
+            command = child(command, name);
+        command.description(`${op.description} [${op.access}${op.blocked ? ', blocked' : ''}]`)
+            .option('--params <json>', 'query/path JSON, @file, or - for stdin')
+            .option('--data <json>', 'body JSON, @file, or - for stdin')
+            .option('--dry-run', 'validate and print a plan without network requests')
+            .option('--yes', 'execute an authorized write')
+            .option('--format <format>', 'json, table or ndjson', 'json')
+            .option('--show-secrets', 'include credential fields in successful output')
+            .option('--page-all', 'collect pages with a verified pagination contract')
+            .option('--page-limit <count>', 'maximum number of pages', '10')
+            .option('--page-delay <ms>', 'delay between pages', '200');
+        for (const field of op.fields)
+            command.option(`--${field.flag} <value>`, `${field.in}.${field.key}${field.required ? ' (required)' : ''}; ${field.schema.type ?? 'JSON'}`);
+        command.action(async (_, cmd) => {
+            const options = cmd.optsWithGlobals();
+            try {
+                const value = await execute(op, options, { stdin, runtime: () => resolveRuntimeConfig(options) });
+                process.stdout.write(render(options.showSecrets && !options.dryRun ? value : redact(value), String(options.format)));
+            }
+            catch (error) {
+                const failure = errorEnvelope(error, op.id);
+                process.stderr.write(render(failure.value));
+                process.exitCode = failure.exitCode;
+            }
+        });
+    }
+}
+//# sourceMappingURL=commands.js.map

package/dist/core/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/core/commands.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,UAAU,EAAC,aAAa,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,OAAO,EAAC,QAAQ,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,aAAa,EAAC,MAAM,EAAC,MAAM,EAAE,MAAM,aAAa,CAAC;AAG1D,SAAS,KAAK,CAAC,MAAe,EAAC,IAAY;IACzC,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAA,EAAE,CAAA,OAAO,CAAC,IAAI,EAAE,KAAG,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;AACtF,CAAC;AACD,KAAK,UAAU,KAAK;IAClB,IAAI,IAAI,GAAC,EAAE,CAAC;IACZ,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QAAE,IAAI,IAAI,KAAK,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,OAAgB;IACjD,OAAO,CAAC,MAAM,CAAC,eAAe,EAAC,wDAAwD,CAAC,CAAC;IACzF,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,WAAW,CAAC,+DAA+D,CAAC;SACzG,MAAM,CAAC,mBAAmB,EAAC,eAAe,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAC,kBAAkB,CAAC;SAC1F,MAAM,CAAC,OAAO,CAAA,EAAE;QACf,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAC,mBAAmB,CAAC,CAAC;QAC3H,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,CAAA,EAAE,CAAA,CAAC,CAAC,OAAO,CAAC,MAAM,IAAE,EAAE,CAAC,MAAM,KAAG,OAAO,CAAC,MAAM,CAAC,IAAE,CAAC,CAAC,OAAO,CAAC,MAAM,IAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QAChJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,EAAE,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,KAAK,EAAC,OAAO,EAAC,UAAU,EAAC,EAAC,EAAE,CAAA,CAAC,EAAC,EAAE,EAAC,OAAO,EAAC,MAAM,EAAC,IAAI,EAAC,KAAK,EAAC,YAAY,EAAC,OAAO,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,aAAa,EAAC,aAAa,EAAC,yCAAyC,EAAC,OAAO,EAAC,UAAU,EAAC,CAAC,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5R,CAAC,CAAC,CAAC;IACL,OAAO,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,WAAW,CAAC,qDAAqD,CAAC;SACxG,MAAM,CAAC,CAAC,KAAe,EAAC,EAAE;QACzB,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAC,qCAAqC,EAAC,CAAC,CAAC,CAAC;QACzF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAC,EAAE,EAAC,KAAK,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACL,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IAC5F,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAE,EAAE,GAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAC,CAAC,EAAC,IAAI,EAAC,aAAa,EAAC,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC;IAC9H,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAW,EAAC,EAAE;QACxD,IAAG,IAAI,KAAG,aAAa;YAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAC,iBAAiB,EAAC,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,GAAG,CAAC,mCAAmC,EAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,MAAM,CAAC,CAAC;QACjG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,OAAO,GAAG,OAAO,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,KAAK,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;QACxE,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,WAAW,KAAK,EAAE,CAAC,MAAM,GAAG,EAAE,CAAC,OAAO,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,EAAE,GAAG,CAAC;aAChF,MAAM,CAAC,iBAAiB,EAAC,wCAAwC,CAAC;aAClE,MAAM,CAAC,eAAe,EAAC,kCAAkC,CAAC;aAC1D,MAAM,CAAC,WAAW,EAAC,oDAAoD,CAAC;aACxE,MAAM,CAAC,OAAO,EAAC,6BAA6B,CAAC;aAC7C,MAAM,CAAC,mBAAmB,EAAC,uBAAuB,EAAC,MAAM,CAAC;aAC1D,MAAM,CAAC,gBAAgB,EAAC,gDAAgD,CAAC;aACzE,MAAM,CAAC,YAAY,EAAC,mDAAmD,CAAC;aACxE,MAAM,CAAC,sBAAsB,EAAC,yBAAyB,EAAC,IAAI,CAAC;aAC7D,MAAM,CAAC,mBAAmB,EAAC,qBAAqB,EAAC,KAAK,CAAC,CAAC;QAC3D,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,UAAU,EAAC,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAA,CAAC,CAAA,aAAa,CAAA,CAAC,CAAA,EAAE,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,IAAE,MAAM,EAAE,CAAC,CAAC;QACpK,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAU,EAAE,GAAY,EAAC,EAAE;YAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,eAAe,EAAgB,CAAC;YACpD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,EAAE,EAAC,OAAO,EAAC,EAAC,KAAK,EAAC,OAAO,EAAC,GAAE,EAAE,CAAA,oBAAoB,CAAC,OAAO,CAAC,EAAC,CAAC,CAAC;gBAC1F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACtH,CAAC;YAAC,OAAM,KAAK,EAAE,CAAC;gBACd,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC5C,OAAO,CAAC,QAAQ,GAAC,OAAO,CAAC,QAAQ,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/core/errors.d.ts

@@ -0,0 +1,7 @@
+export declare class CliError extends Error {
+    readonly code: string;
+    readonly exitCode: number;
+    readonly details: Record<string, unknown>;
+    constructor(code: string, message: string, exitCode?: number, details?: Record<string, unknown>);
+}
+export declare const errorType: (exit: number) => string;

package/dist/core/errors.js

@@ -0,0 +1,16 @@
+export class CliError extends Error {
+    code;
+    exitCode;
+    details;
+    constructor(code, message, exitCode = 2, details = {}) {
+        super(message);
+        this.code = code;
+        this.exitCode = exitCode;
+        this.details = details;
+    }
+}
+export const errorType = (exit) => ({
+    1: 'internal', 2: 'validation', 3: 'authentication', 4: 'authorization',
+    5: 'upstream', 6: 'partial', 7: 'conflict', 8: 'unsupported', 10: 'confirmation',
+}[exit] ?? 'internal');
+//# sourceMappingURL=errors.js.map

package/dist/core/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/core/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,QAAS,SAAQ,KAAK;IACZ;IAAwC;IAAuB;IAApF,YAAqB,IAAY,EAAE,OAAe,EAAW,WAAW,CAAC,EAAW,UAAmC,EAAE;QACvH,KAAK,CAAC,OAAO,CAAC,CAAC;QADI,SAAI,GAAJ,IAAI,CAAQ;QAA4B,aAAQ,GAAR,QAAQ,CAAI;QAAW,YAAO,GAAP,OAAO,CAA8B;IAEzH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;IAC1C,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,eAAe;IACvE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,cAAc;CACjF,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,CAAC"}

package/dist/core/executor.d.ts

@@ -0,0 +1,32 @@
+import { type HttpClientOptions } from '../http.js';
+import type { JsonObject, Operation } from './types.js';
+export interface Dependencies {
+    runtime: () => Promise<HttpClientOptions>;
+    stdin: () => Promise<string>;
+}
+export declare function envelope(operation: string, data: unknown, executed: boolean, complete: boolean | null, extra?: JsonObject): {
+    ok: boolean;
+    operation: string;
+    identity: {
+        verification: string;
+    };
+    data: unknown;
+    meta: {
+        contractVersion: string;
+        executed: boolean;
+        complete: boolean | null;
+    };
+};
+export declare function execute(op: Operation, options: JsonObject, dependencies: Dependencies): Promise<{
+    ok: boolean;
+    operation: string;
+    identity: {
+        verification: string;
+    };
+    data: unknown;
+    meta: {
+        contractVersion: string;
+        executed: boolean;
+        complete: boolean | null;
+    };
+}>;

package/dist/core/executor.js

@@ -0,0 +1,133 @@
+import { HttpClient, HttpError } from '../http.js';
+import { CliError } from './errors.js';
+import { buildPlan, parseInput } from './input.js';
+import { runWorkflow } from '../workflows/app.js';
+export function envelope(operation, data, executed, complete, extra = {}) {
+    return { ok: true, operation, identity: { verification: executed ? 'request-accepted-by-server' : 'not-checked' }, data, meta: { contractVersion: '1', executed, complete, ...extra } };
+}
+function classify(error, op) {
+    if (error instanceof CliError)
+        return error;
+    if (error instanceof HttpError) {
+        const code = error.status;
+        if (code === 401)
+            return new CliError('UNAUTHENTICATED', 'Server rejected authentication', 3);
+        if (code === 403)
+            return new CliError('FORBIDDEN', 'Server or local mode denied this operation', 4);
+        if (code === 409 || code === 412)
+            return new CliError('CONFLICT', 'Resource version or state has changed', 7);
+        if (code === 400 || code === 422)
+            return new CliError('UPSTREAM_VALIDATION', 'Server rejected the request fields', 2);
+        return new CliError('UPSTREAM_ERROR', `HTTP ${code}`, op.access === 'write' && code >= 500 ? 6 : 5, { status: code, outcome: op.access === 'write' && code >= 500 ? 'unknown' : 'failed' });
+    }
+    return new CliError(op.access === 'write' ? 'WRITE_OUTCOME_UNKNOWN' : 'NETWORK_ERROR', op.access === 'write' ? 'Request failed; inspect resource state before retrying' : 'Request failed', op.access === 'write' ? 6 : 5);
+}
+const get = (value, path) => path.split('.').reduce((v, k) => v && typeof v === 'object' ? (v[k] ?? v[k.replace(/[A-Z]/g, c => '_' + c.toLowerCase())]) : undefined, value);
+export async function execute(op, options, dependencies) {
+    if (op.blocked)
+        throw new CliError('UNSUPPORTED', op.blocked, 8);
+    if (!['json', 'table', 'ndjson'].includes(String(options.format ?? 'json')))
+        throw new CliError('INVALID_FORMAT', 'Use json, table or ndjson');
+    const mode = options.mode ?? process.env.TUTTI_OPS_MODE ?? 'write';
+    if (mode !== 'read' && mode !== 'write')
+        throw new CliError('INVALID_MODE', 'Use read or write');
+    const input = await parseInput(op, options, dependencies.stdin);
+    const plan = buildPlan(op, input);
+    if (options.pageAll && !op.pagination)
+        throw new CliError('UNSUPPORTED_PAGINATION', 'This operation has no verified automatic pagination contract', 8);
+    const limit = Number(options.pageLimit ?? 10), delay = Number(options.pageDelay ?? 200);
+    if (!Number.isInteger(limit) || limit < 1 || limit > 1000 || !Number.isInteger(delay) || delay < 0 || delay > 60000)
+        throw new CliError('INVALID_PAGINATION', 'page-limit: 1..1000; page-delay: 0..60000 ms');
+    if (options.dryRun)
+        return envelope(op.id, plan, false, false, { locallyAllowed: mode === 'write' || op.access === 'read' });
+    if (mode === 'read' && op.access === 'write')
+        throw new CliError('READ_ONLY', 'Write operation denied by local read mode', 4);
+    if (op.confirmation && !options.yes)
+        throw new CliError('CONFIRMATION_REQUIRED', 'Review --dry-run, then pass --yes to execute the authorized write', 10);
+    if (op.kind === 'local')
+        return envelope(op.id, await runWorkflow(op, input, undefined), false, true);
+    const runtime = await dependencies.runtime();
+    if (!runtime.token && !runtime.cookie)
+        throw new CliError('MISSING_AUTH', 'Set TUTTI_ADMIN_TOKEN for supported bearer endpoints or TUTTI_ADMIN_COOKIE for admin session endpoints', 3);
+    const client = new HttpClient({ ...runtime, mode: mode });
+    if (op.kind === 'workflow') {
+        try {
+            return envelope(op.id, await runWorkflow(op, input, client), true, true);
+        }
+        catch (error) {
+            throw classify(error, op);
+        }
+    }
+    const request = plan.request;
+    if (op.id === 'admin-token.create') {
+        let capabilities;
+        try {
+            capabilities = await client.get('/api/admin/api/v1/admin/tokens');
+        }
+        catch (error) {
+            throw classify(error, { ...op, access: 'read' });
+        }
+        const modes = get(capabilities, 'supportedAccessModes');
+        if (!Array.isArray(modes) || !modes.includes('read') || !modes.includes('write'))
+            throw new CliError('UNSUPPORTED_TOKEN_PERMISSIONS', 'Upgrade admin-server before creating a typed management token', 8);
+    }
+    const items = [];
+    let pages = 0;
+    const p = op.pagination;
+    const seen = new Set();
+    if (p) {
+        const target = p.location === 'data' ? request.data : request.params;
+        target[p.size] ??= 20;
+        if (p.kind !== 'cursor')
+            target[p.key] ??= p.kind === 'offset' ? 0 : 1;
+    }
+    let response;
+    let sourceIncomplete = false;
+    for (;;) {
+        try {
+            response = await client.request(request.method, request.path, request.data, { params: request.params, headers: request.headers, access: op.access });
+        }
+        catch (error) {
+            if (pages)
+                throw new CliError('PARTIAL_RESULT', 'Pagination stopped after a request failed', 6, { items, pages, complete: false, cause: classify(error, op).code });
+            throw classify(error, op);
+        }
+        pages++;
+        if (!response || typeof response !== 'object')
+            throw new CliError('INVALID_RESPONSE', 'Expected a JSON response object', 6);
+        if (op.id === 'admin-token.create' && get(response, 'token.accessMode') !== request.data?.access_mode)
+            throw new CliError('TOKEN_MODE_MISMATCH', 'Server returned a different token mode; inspect and revoke the new token', 6, { tokenId: get(response, 'token.tokenId') });
+        const failures = get(response, 'failedCount');
+        const results = get(response, 'results');
+        if (Number(failures) > 0 || (Array.isArray(results) && results.some(r => r && typeof r === 'object' && r.success === false)))
+            throw new CliError('PARTIAL_RESULT', 'Some batch operations failed', 6, { data: response, complete: false });
+        const truncated = ['truncated', 'eventsTruncated', 'sourceTruncated'].some(key => get(response, key) === true);
+        sourceIncomplete ||= truncated;
+        if (!p)
+            return envelope(op.id, response, true, op.access === 'read' ? !truncated : null);
+        const batch = get(response, p.items);
+        if (!Array.isArray(batch))
+            throw new CliError('INVALID_RESPONSE', 'Expected a paginated item array', 6, { items, pages, complete: false });
+        items.push(...batch);
+        const target = p.location === 'data' ? request.data : request.params;
+        const current = target[p.key];
+        const size = Number(target[p.size] ?? 20);
+        const totalValue = p.total ? get(response, p.total) : undefined;
+        const total = totalValue === undefined ? undefined : Number(totalValue);
+        const next = p.next ? get(response, p.next) : undefined;
+        const more = p.kind === 'cursor' ? typeof next === 'string' && next.length > 0 : total !== undefined ? (p.kind === 'offset' ? Number(current ?? 0) : Math.max(0, Number(current ?? 1) - 1) * size) + batch.length < total : batch.length >= size;
+        if (!options.pageAll)
+            return envelope(op.id, response, true, !more && !sourceIncomplete, { pages });
+        if (!more && (sourceIncomplete || get(response, 'hasMore') === true))
+            throw new CliError('PARTIAL_RESULT', 'Source reports incomplete data without a continuation cursor', 6, { items, pages, complete: false });
+        if (!more)
+            return envelope(op.id, { items }, true, true, { pages });
+        if (pages >= limit || batch.length === 0 || (p.kind === 'cursor' && (next === current || seen.has(next))))
+            throw new CliError('PARTIAL_RESULT', 'Pagination limit or stalled cursor reached', 6, { items, pages, complete: false, next });
+        seen.add(next);
+        target[p.key] = p.kind === 'cursor' ? next : p.kind === 'offset' ? Number(current ?? 0) + batch.length : Number(current ?? 1) + 1;
+        if (delay)
+            await new Promise(resolve => setTimeout(resolve, delay));
+    }
+}
+//# sourceMappingURL=executor.js.map

package/dist/core/executor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"executor.js","sourceRoot":"","sources":["../../src/core/executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAA0B,MAAM,YAAY,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAMlD,MAAM,UAAU,QAAQ,CAAC,SAAiB,EAAE,IAAa,EAAE,QAAiB,EAAE,QAAwB,EAAE,QAAoB,EAAE;IAC5H,OAAO,EAAC,EAAE,EAAC,IAAI,EAAC,SAAS,EAAC,QAAQ,EAAC,EAAC,YAAY,EAAC,QAAQ,CAAA,CAAC,CAAA,4BAA4B,CAAA,CAAC,CAAA,aAAa,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,EAAC,eAAe,EAAC,GAAG,EAAC,QAAQ,EAAC,QAAQ,EAAC,GAAG,KAAK,EAAC,EAAC,CAAC;AACpK,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,EAAE,EAAa;IAC7C,IAAI,KAAK,YAAY,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC;QAC1B,IAAI,IAAI,KAAG,GAAG;YAAE,OAAO,IAAI,QAAQ,CAAC,iBAAiB,EAAC,gCAAgC,EAAC,CAAC,CAAC,CAAC;QAC1F,IAAI,IAAI,KAAG,GAAG;YAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,EAAC,4CAA4C,EAAC,CAAC,CAAC,CAAC;QAChG,IAAI,IAAI,KAAG,GAAG,IAAI,IAAI,KAAG,GAAG;YAAE,OAAO,IAAI,QAAQ,CAAC,UAAU,EAAC,uCAAuC,EAAC,CAAC,CAAC,CAAC;QACxG,IAAI,IAAI,KAAG,GAAG,IAAI,IAAI,KAAG,GAAG;YAAE,OAAO,IAAI,QAAQ,CAAC,qBAAqB,EAAC,oCAAoC,EAAC,CAAC,CAAC,CAAC;QAChH,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAC,QAAQ,IAAI,EAAE,EAAC,EAAE,CAAC,MAAM,KAAG,OAAO,IAAI,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,EAAC,EAAC,MAAM,EAAC,IAAI,EAAC,OAAO,EAAC,EAAE,CAAC,MAAM,KAAG,OAAO,IAAE,IAAI,IAAE,GAAG,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,QAAQ,EAAC,CAAC,CAAC;IACpK,CAAC;IACD,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC,MAAM,KAAG,OAAO,CAAA,CAAC,CAAA,uBAAuB,CAAA,CAAC,CAAA,eAAe,EAAC,EAAE,CAAC,MAAM,KAAG,OAAO,CAAA,CAAC,CAAA,wDAAwD,CAAA,CAAC,CAAA,gBAAgB,EAAC,EAAE,CAAC,MAAM,KAAG,OAAO,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,CAAC;AACzM,CAAC;AACD,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,CAAC,EAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAG,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAgB,CAAC,CAAC,CAAC,IAAK,CAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAC,CAAC,CAAA,EAAE,CAAA,GAAG,GAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,EAAC,KAAK,CAAC,CAAC;AAEtO,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,EAAa,EAAE,OAAmB,EAAE,YAA0B;IAC1F,IAAI,EAAE,CAAC,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAC,EAAE,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,MAAM,EAAC,OAAO,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAC,2BAA2B,CAAC,CAAC;IAC5I,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,OAAO,CAAC;IACnE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAC,mBAAmB,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,EAAE,EAAC,OAAO,EAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,EAAC,KAAK,CAAC,CAAC;IACjC,IAAI,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU;QAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAC,8DAA8D,EAAC,CAAC,CAAC,CAAC;IACrJ,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,IAAI,GAAG,CAAC,CAAC;IACxF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC,IAAE,KAAK,GAAC,IAAI,IAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAE,KAAK,GAAC,CAAC,IAAE,KAAK,GAAC,KAAK;QAAE,MAAM,IAAI,QAAQ,CAAC,oBAAoB,EAAC,8CAA8C,CAAC,CAAC;IAC3L,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAC,IAAI,EAAC,KAAK,EAAC,KAAK,EAAC,EAAC,cAAc,EAAC,IAAI,KAAG,OAAO,IAAE,EAAE,CAAC,MAAM,KAAG,MAAM,EAAC,CAAC,CAAC;IAChH,IAAI,IAAI,KAAG,MAAM,IAAI,EAAE,CAAC,MAAM,KAAG,OAAO;QAAE,MAAM,IAAI,QAAQ,CAAC,WAAW,EAAC,2CAA2C,EAAC,CAAC,CAAC,CAAC;IACxH,IAAI,EAAE,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAC,mEAAmE,EAAC,EAAE,CAAC,CAAC;IACxJ,IAAI,EAAE,CAAC,IAAI,KAAG,OAAO;QAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAC,MAAM,WAAW,CAAC,EAAE,EAAC,KAAK,EAAC,SAAS,CAAC,EAAC,KAAK,EAAC,IAAI,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAC,wGAAwG,EAAC,CAAC,CAAC,CAAC;IACrL,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAC,GAAG,OAAO,EAAC,IAAI,EAAC,IAAsB,EAAC,CAAC,CAAC;IACxE,IAAI,EAAE,CAAC,IAAI,KAAG,UAAU,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAC,MAAM,WAAW,CAAC,EAAE,EAAC,KAAK,EAAC,MAAM,CAAC,EAAC,IAAI,EAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAC,MAAM,QAAQ,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC;QAAC,CAAC;IACzH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAQ,CAAC;IAC9B,IAAI,EAAE,CAAC,EAAE,KAAG,oBAAoB,EAAE,CAAC;QACjC,IAAI,YAAqB,CAAC;QAC1B,IAAI,CAAC;YAAC,YAAY,GAAC,MAAM,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAM,KAAK,EAAE,CAAC;YAAA,MAAM,QAAQ,CAAC,KAAK,EAAC,EAAC,GAAG,EAAE,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC;QAAA,CAAC;QACpI,MAAM,KAAK,GAAC,GAAG,CAAC,YAAY,EAAC,sBAAsB,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,+BAA+B,EAAC,+DAA+D,EAAC,CAAC,CAAC,CAAC;IAC1M,CAAC;IACD,MAAM,KAAK,GAAc,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAC,CAAC,CAAC;IACZ,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;IACxB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAW,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACpE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,IAAI,KAAG,QAAQ;YAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,QAAiB,CAAC;IACtB,IAAI,gBAAgB,GAAC,KAAK,CAAC;IAC3B,SAAS,CAAC;QACR,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAC,OAAO,CAAC,IAAI,EAAC,OAAO,CAAC,IAAI,EAAC,EAAC,MAAM,EAAC,OAAO,CAAC,MAAM,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,MAAM,EAAC,EAAE,CAAC,MAAM,EAAC,CAAC,CAAC;QAAC,CAAC;QACnJ,OAAM,KAAK,EAAE,CAAC;YACZ,IAAI,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAC,2CAA2C,EAAC,CAAC,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC,IAAI,EAAC,CAAC,CAAC;YACzJ,MAAM,QAAQ,CAAC,KAAK,EAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAG,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAC,iCAAiC,EAAC,CAAC,CAAC,CAAC;QACxH,IAAG,EAAE,CAAC,EAAE,KAAG,oBAAoB,IAAI,GAAG,CAAC,QAAQ,EAAC,kBAAkB,CAAC,KAAG,OAAO,CAAC,IAAI,EAAE,WAAW;YAAE,MAAM,IAAI,QAAQ,CAAC,qBAAqB,EAAC,0EAA0E,EAAC,CAAC,EAAC,EAAC,OAAO,EAAC,GAAG,CAAC,QAAQ,EAAC,eAAe,CAAC,EAAC,CAAC,CAAC;QAChQ,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAC,aAAa,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAC,SAAS,CAAC,CAAC;QACxC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,IAAI,OAAO,CAAC,KAAG,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAG,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAC,8BAA8B,EAAC,CAAC,EAAC,EAAC,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAC;QAC3N,MAAM,SAAS,GAAG,CAAC,WAAW,EAAC,iBAAiB,EAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA,EAAE,CAAA,GAAG,CAAC,QAAQ,EAAC,GAAG,CAAC,KAAG,IAAI,CAAC,CAAC;QACxG,gBAAgB,KAAK,SAAS,CAAC;QAC/B,IAAI,CAAC,CAAC;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAC,QAAQ,EAAC,IAAI,EAAC,EAAE,CAAC,MAAM,KAAG,MAAM,CAAA,CAAC,CAAA,CAAC,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAC,iCAAiC,EAAC,CAAC,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAC;QACnI,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,KAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,MAAM,KAAK,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,IAAI,KAAG,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,MAAM,CAAC,OAAO,IAAE,CAAC,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,CAAC,EAAC,MAAM,CAAC,OAAO,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC,GAAC,IAAI,CAAC,GAAC,KAAK,CAAC,MAAM,GAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAE,IAAI,CAAC;QACpN,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAC,QAAQ,EAAC,IAAI,EAAC,CAAC,IAAI,IAAE,CAAC,gBAAgB,EAAC,EAAC,KAAK,EAAC,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,QAAQ,EAAC,SAAS,CAAC,KAAG,IAAI,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAC,8DAA8D,EAAC,CAAC,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,CAAC,CAAC;QACtM,IAAI,CAAC,IAAI;YAAE,OAAO,QAAQ,CAAC,EAAE,CAAC,EAAE,EAAC,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,EAAC,KAAK,EAAC,CAAC,CAAC;QAC5D,IAAI,KAAK,IAAE,KAAK,IAAI,KAAK,CAAC,MAAM,KAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAG,QAAQ,IAAI,CAAC,IAAI,KAAG,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAC,4CAA4C,EAAC,CAAC,EAAC,EAAC,KAAK,EAAC,KAAK,EAAC,QAAQ,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC;QACzN,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,CAAC,CAAC,IAAI,KAAG,QAAQ,CAAA,CAAC,CAAA,MAAM,CAAC,OAAO,IAAE,CAAC,CAAC,GAAC,KAAK,CAAC,MAAM,CAAA,CAAC,CAAA,MAAM,CAAC,OAAO,IAAE,CAAC,CAAC,GAAC,CAAC,CAAC;QAC9G,IAAI,KAAK;YAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC"}

package/dist/core/input.d.ts

@@ -0,0 +1,6 @@
+import type { Input, JsonObject, Operation, Plan, Schema } from './types.js';
+export declare const flagKey: (name: string) => string;
+export declare const kebab: (name: string) => string;
+export declare function validate(value: unknown, schema: Schema, path?: string): void;
+export declare function parseInput(op: Operation, options: JsonObject, stdin: () => Promise<string>): Promise<Input>;
+export declare function buildPlan(op: Operation, input: Input): Plan;

package/dist/core/input.js

@@ -0,0 +1,163 @@
+import { readFile } from 'node:fs/promises';
+import { CliError } from './errors.js';
+const own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+export const flagKey = (name) => name.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+export const kebab = (name) => name.replace(/([a-z0-9])([A-Z])/g, '$1-$2').replaceAll('_', '-').toLowerCase();
+export function validate(value, schema, path = 'input') {
+    const fail = (message) => { throw new CliError('INVALID_INPUT', `${path}: ${message}`); };
+    if (schema.anyOf) {
+        if (!schema.anyOf.some((branch) => { try {
+            validate(value, branch, path);
+            return true;
+        }
+        catch {
+            return false;
+        } }))
+            fail('does not match any allowed type');
+        return;
+    }
+    if (schema.enum && !schema.enum.some((item) => item === value))
+        fail(`expected one of ${JSON.stringify(schema.enum)}`);
+    if (schema.type === 'object') {
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            fail('expected an object');
+        const record = value;
+        for (const key of schema.required ?? [])
+            if (!own(record, key))
+                fail(`missing ${key}`);
+        for (const [key, item] of Object.entries(record)) {
+            if (['__proto__', 'constructor', 'prototype'].includes(key))
+                fail('unsafe property');
+            const child = schema.properties?.[key];
+            if (child)
+                validate(item, child, `${path}.${key}`);
+            else if (schema.additionalProperties === false)
+                fail(`unknown property ${key}`);
+            else if (typeof schema.additionalProperties === 'object')
+                validate(item, schema.additionalProperties, `${path}.${key}`);
+        }
+    }
+    else if (schema.type === 'array') {
+        if (!Array.isArray(value))
+            fail('expected an array');
+        value.forEach((item, index) => validate(item, schema.items ?? {}, `${path}[${index}]`));
+    }
+    else if (schema.type === 'null') {
+        if (value !== null)
+            fail('expected null');
+    }
+    else if (schema.type) {
+        const type = schema.type === 'integer' ? 'number' : schema.type;
+        if (typeof value !== type)
+            fail(`expected ${schema.type}`);
+        if (typeof value === 'number' && (!Number.isFinite(value) || (schema.type === 'integer' && !Number.isSafeInteger(value))))
+            fail('expected a finite, safe number');
+    }
+    if (typeof value === 'number') {
+        if (schema.minimum !== undefined && value < schema.minimum)
+            fail(`minimum ${schema.minimum}`);
+        if (schema.maximum !== undefined && value > schema.maximum)
+            fail(`maximum ${schema.maximum}`);
+    }
+    if (typeof value === 'string' && schema.pattern && !new RegExp(schema.pattern).test(value))
+        fail('invalid format');
+}
+async function jsonArg(raw, stdin) {
+    if (raw === undefined)
+        return {};
+    try {
+        const text = raw === '-' ? await stdin() : raw.startsWith('@') ? await readFile(raw.slice(1), 'utf8') : raw;
+        const result = JSON.parse(text);
+        validate(result, { type: 'object' });
+        return result;
+    }
+    catch (error) {
+        if (error instanceof CliError)
+            throw error;
+        throw new CliError('INVALID_JSON', 'Expected a JSON object, @file, or - for stdin');
+    }
+}
+function convert(raw, schema) {
+    if (typeof raw !== 'string')
+        return raw;
+    if (schema.type === 'string' || schema.anyOf?.some(branch => branch.type === 'string'))
+        return raw;
+    try {
+        return JSON.parse(raw);
+    }
+    catch {
+        throw new CliError('INVALID_FLAG', 'Expected a JSON number, boolean, array or object');
+    }
+}
+export async function parseInput(op, options, stdin) {
+    if (options.params === '-' && options.data === '-')
+        throw new CliError('STDIN_CONFLICT', 'Only one argument may consume stdin');
+    const params = await jsonArg(options.params, stdin);
+    const data = op.data ? await jsonArg(options.data, stdin) : undefined;
+    if (!op.data && options.data !== undefined)
+        throw new CliError('UNEXPECTED_BODY', 'This operation does not accept --data');
+    const input = { params, data, headers: {}, local: {} };
+    for (const field of op.fields) {
+        const raw = options[flagKey(field.flag)];
+        const target = input[field.in];
+        if (!target)
+            continue;
+        if (raw !== undefined) {
+            const value = convert(raw, field.schema);
+            if (field.identity && own(target, field.key) && target[field.key] !== value)
+                throw new CliError('SCOPE_CONFLICT', `Conflicting ${field.flag}`);
+            validate(value, field.schema, `--${field.flag}`);
+            target[field.key] = value;
+        }
+    }
+    // A body and a path may both carry an ID. Both must name the same resource.
+    for (const name of op.path?.matchAll(/\{(\w+)\}/g) ?? []) {
+        const key = name[1];
+        if (data && own(data, key) && own(params, key) && data[key] !== params[key])
+            throw new CliError('SCOPE_CONFLICT', `Conflicting ${key} in path and body`);
+        if (data && own(data, key) && !own(params, key))
+            params[key] = data[key];
+        if (data && op.data?.properties?.[key] && own(params, key) && !own(data, key))
+            data[key] = params[key];
+    }
+    for (const field of op.fields) {
+        const target = input[field.in];
+        if (field.required && (!target || !own(target, field.key)))
+            throw new CliError('MISSING_INPUT', `Missing --${field.flag}`);
+        if (field.identity && target && own(target, field.key) && typeof target[field.key] === 'string' && !String(target[field.key]).trim())
+            throw new CliError('EMPTY_SCOPE', `Empty --${field.flag}`);
+    }
+    for (const key of ['appId', 'version']) {
+        const value = input.local[key];
+        if (typeof value === 'string' && (!value.trim() || /[/%\\?#\x00-\x1f]/.test(value) || value === '.' || value === '..'))
+            throw new CliError('INVALID_PATH_PARAMETER', `Invalid ${key}`);
+    }
+    validate(params, op.params, 'params');
+    if (op.data)
+        validate(data, op.data, 'data');
+    return input;
+}
+export function buildPlan(op, input) {
+    let path = op.path;
+    const params = { ...input.params };
+    if (path)
+        path = path.replace(/\{(\w+)\}/g, (_, key) => {
+            const value = params[key];
+            if (typeof value !== 'string' || !value.trim() || /[\/%\\?#\x00-\x1f]/.test(value) || value === '.' || value === '..')
+                throw new CliError('INVALID_PATH_PARAMETER', `Invalid ${key}`);
+            delete params[key];
+            if (key === 'source' && op.command.startsWith('agent-package '))
+                return value === 'tsh-v1' ? 'v1' : 'v2';
+            return encodeURIComponent(value);
+        });
+    if (op.id === 'auth.status' && input.data)
+        input.data.metadata_only = true;
+    if (op.id === 'admin-token.create' && input.data)
+        input.data.access_mode ??= 'read';
+    return {
+        operation: op.id, access: op.access, scope: op.scope, effects: op.effects,
+        ...(path ? { request: { method: op.method, path, params, data: input.data, headers: input.headers } } : { steps: op.steps, localInputs: input.local }),
+        unresolved: op.kind === 'local' ? [] : ['server authentication, authorization and resource state are checked at execution'],
+    };
+}
+//# sourceMappingURL=input.js.map

package/dist/core/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../src/core/input.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACtG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AAEtH,MAAM,UAAU,QAAQ,CAAC,KAAc,EAAE,MAAc,EAAE,IAAI,GAAG,OAAO;IACrE,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE,GAAG,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC;YAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,iCAAiC,CAAC,CAAC;QAC7J,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,IAAI,CAAC,mBAAmB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACvH,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAC5F,MAAM,MAAM,GAAG,KAAmB,CAAC;QACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,IAAI,EAAE;YAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC;gBAAE,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;QACvF,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACrF,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,KAAK;gBAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;iBAC9C,IAAI,MAAM,CAAC,oBAAoB,KAAK,KAAK;gBAAE,IAAI,CAAC,oBAAoB,GAAG,EAAE,CAAC,CAAC;iBAC3E,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;gBAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,oBAAoB,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1H,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,KAAmB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACzG,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAClC,IAAI,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5C,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAChE,IAAI,OAAO,KAAK,KAAK,IAAI;YAAE,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACpK,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,WAAW,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACrH,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAuB,EAAE,KAA4B;IAC1E,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QAC5G,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzC,QAAQ,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrC,OAAO,MAAoB,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,QAAQ;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,+CAA+C,CAAC,CAAC;IACtF,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAY,EAAE,MAAc;IAC3C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC;IACxC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC;IACnG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,QAAQ,CAAC,cAAc,EAAE,kDAAkD,CAAC,CAAC;IAAC,CAAC;AACnI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAa,EAAE,OAAmB,EAAE,KAA4B;IAC/F,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG;QAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;IAChI,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,MAA4B,EAAE,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,IAA0B,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,QAAQ,CAAC,iBAAiB,EAAE,uCAAuC,CAAC,CAAC;IAC3H,MAAM,KAAK,GAAU,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC9D,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK;gBAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,eAAe,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/I,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,MAAqB,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC5C,CAAC;IAEH,CAAC;IAED,4EAA4E;IAC5E,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,eAAe,GAAG,mBAAmB,CAAC,CAAC;QACzJ,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACzE,IAAI,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzG,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,eAAe,EAAE,aAAa,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC3H,IAAI,KAAK,CAAC,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE;YAAE,MAAM,IAAI,QAAQ,CAAC,aAAa,EAAE,WAAW,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACnM,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAG,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAG,GAAG,IAAI,KAAK,KAAG,IAAI,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;IACnL,CAAC;IACD,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACtC,IAAI,EAAE,CAAC,IAAI;QAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,EAAa,EAAE,KAAY;IACnD,IAAI,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACnB,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;IACnC,IAAI,IAAI;QAAE,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,GAAW,EAAE,EAAE;YAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,wBAAwB,EAAE,WAAW,GAAG,EAAE,CAAC,CAAC;YACtL,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;YACnB,IAAI,GAAG,KAAK,QAAQ,IAAI,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC;gBAAE,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YACzG,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACH,IAAG,EAAE,CAAC,EAAE,KAAG,aAAa,IAAI,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAC,IAAI,CAAC;IACtE,IAAG,EAAE,CAAC,EAAE,KAAG,oBAAoB,IAAI,KAAK,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAG,MAAM,CAAC;IAC/E,OAAO;QACL,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO;QACzE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,MAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACvJ,UAAU,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kFAAkF,CAAC;KAC5H,CAAC;AACJ,CAAC"}