@vendure/cloud 0.2.0 → 0.3.0

package/dist/cli/lib/errors.js

@@ -0,0 +1,147 @@
+import * as prompts from "@clack/prompts";
+import { ZodError } from "zod";
+import { foreignCredentialRefusal, } from "./contract/foreign-credentials.js";
+import { formatInlineUserFacingErrorReason } from "./error-output.js";
+import { cloudInvocation, underCurrentInvocation } from "./invocation.js";
+import { logger } from "./logger.js";
+export class ApiError extends Error {
+    status;
+    body;
+    constructor(status, body) {
+        super(`API request failed with status ${status}`);
+        this.status = status;
+        this.body = body;
+        this.name = "ApiError";
+    }
+}
+// A credential another Vendure product issued was supplied as a Cloud API key. Thrown before the
+// value is used, so it never reaches the control plane.
+export class ForeignCredentialError extends Error {
+    kind;
+    constructor(kind) {
+        super(underCurrentInvocation(foreignCredentialRefusal(kind)));
+        this.kind = kind;
+        this.name = "ForeignCredentialError";
+    }
+}
+// Built when it is thrown rather than held as a constant, because it names the program the customer
+// ran and the compatibility executable names itself after this module has already been loaded.
+function sessionRefreshFailedMessage() {
+    return `Could not refresh the CLI session. Run \`${cloudInvocation()} login\` to re-authenticate.`;
+}
+export class SessionRefreshError extends Error {
+    constructor(message = sessionRefreshFailedMessage(), options) {
+        super(message, options);
+        this.name = "SessionRefreshError";
+    }
+}
+// The authentication service rejected the stored refresh token outright — it was revoked, expired,
+// or already consumed. Definitive: the stored credentials are worthless and only a fresh login
+// recovers.
+export class RefreshTokenRejectedError extends SessionRefreshError {
+    constructor(options) {
+        super(`Your CLI session has expired. Run \`${cloudInvocation()} login\` to re-authenticate.`, options);
+        this.name = "RefreshTokenRejectedError";
+    }
+}
+// The refresh could not be completed — network failure, timeout, or an unhealthy service.
+// Transient: the stored refresh token may still be valid, so credentials must survive.
+export class RefreshUnavailableError extends SessionRefreshError {
+    constructor(options) {
+        super(`Could not reach the authentication service to refresh your CLI session. Check your connection and try again — run \`${cloudInvocation()} login\` if it keeps failing.`, options);
+        this.name = "RefreshUnavailableError";
+    }
+}
+// The renewed session could not be stored. A refresh token is single-use, so a write that fails
+// after the exchange leaves the consumed token as the machine's only credential; this is raised
+// before the exchange instead, and nothing on disk was touched.
+export class SessionUnstorableError extends SessionRefreshError {
+    directory;
+    constructor(directory, options) {
+        super(`Cannot save a renewed CLI session to ${directory}. Your stored login was left as it is, so nothing was lost. Check that the directory is writable and has free space, then run the command again.`, options);
+        this.directory = directory;
+        this.name = "SessionUnstorableError";
+    }
+}
+export function toSessionRefreshError(error) {
+    if (error instanceof SessionRefreshError) {
+        return error;
+    }
+    return new SessionRefreshError(sessionRefreshFailedMessage(), { cause: error });
+}
+// What the customer is told a failure was. Separated from writing it so the same classification
+// serves the terminal and `--json`, and so it can be asserted without a process that exits.
+export function formatCommandErrorMessage(error) {
+    if (error instanceof ApiError && error.status === 401) {
+        // Deliberately non-destructive: a 401 here already survived one refresh-and-retry, and the
+        // stored refresh token may still be valid (a revoked org membership, a mis-scoped token, or a
+        // bad `--token` all land here). Only an outright rejected refresh token clears credentials —
+        // see `refreshAccessToken`.
+        return `Session expired. Run \`${cloudInvocation()} login\` to re-authenticate.`;
+    }
+    if (error instanceof SessionRefreshError) {
+        return error.message;
+    }
+    if (error instanceof ApiError) {
+        return `API error (${error.status}): ${formatApiErrorBody(error.body)}`;
+    }
+    if (error instanceof ZodError) {
+        return error.issues.map((issue) => issue.message).join("\n");
+    }
+    if (error instanceof TypeError) {
+        return "Could not reach Vendure Cloud API. Check your connection or API URL.";
+    }
+    if (error instanceof Error) {
+        return error.message;
+    }
+    return "Unknown command error.";
+}
+// Reports the failure and answers with the process exit code it earns. It does not exit: the
+// Vendure CLI host calls `process.exit` with whatever a command action returns, and a command that
+// exited itself would take that decision away from the host mid-run.
+export function reportCommandError(error, options = {}) {
+    logger.error({ error: error instanceof Error ? errorForLog(error) : error }, "Command failed");
+    const message = formatCommandErrorMessage(error);
+    if (options.json === true) {
+        process.stderr.write(`${JSON.stringify({ error: { message } })}\n`);
+        return 1;
+    }
+    prompts.log.error(message);
+    return 1;
+}
+function errorForLog(error) {
+    const cause = error.cause instanceof Error
+        ? { message: error.cause.message, stack: error.cause.stack }
+        : error.cause;
+    return {
+        message: error.message,
+        stack: error.stack,
+        ...(cause === undefined ? {} : { cause }),
+    };
+}
+// NestJS wraps thrown HttpExceptions as `{ message, error, statusCode }`. Surface just the message
+// (or the array of messages for ValidationPipe failures) so the operator sees the actionable text,
+// not the envelope.
+function formatApiErrorBody(body) {
+    if (typeof body === "string")
+        return formatApiErrorMessage(body);
+    if (body && typeof body === "object") {
+        const b = body;
+        if (Array.isArray(b.message)) {
+            return b.message
+                .map((message) => typeof message === "string"
+                ? formatApiErrorMessage(message)
+                : formatApiErrorMessage(JSON.stringify(message) ?? String(message)))
+                .join("\n  ");
+        }
+        if (typeof b.message === "string")
+            return formatApiErrorMessage(b.message);
+        if (typeof b.error === "string")
+            return formatApiErrorMessage(b.error);
+    }
+    return formatApiErrorMessage(JSON.stringify(body) ?? String(body));
+}
+function formatApiErrorMessage(message) {
+    return formatInlineUserFacingErrorReason(message);
+}
+//# sourceMappingURL=errors.js.map

package/dist/cli/lib/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/cli/lib/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,KAAK,CAAC;AAC/B,OAAO,EAEL,wBAAwB,GACzB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,iCAAiC,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,MAAM,OAAO,QAAS,SAAQ,KAAK;IAEf;IACA;IAFlB,YACkB,MAAc,EACd,IAAa;QAE7B,KAAK,CAAC,kCAAkC,MAAM,EAAE,CAAC,CAAC;QAHlC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QAG7B,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;IACzB,CAAC;CACF;AAED,iGAAiG;AACjG,wDAAwD;AACxD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC1B;IAArB,YAAqB,IAAuB;QAC1C,KAAK,CAAC,sBAAsB,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAD3C,SAAI,GAAJ,IAAI,CAAmB;QAE1C,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,oGAAoG;AACpG,+FAA+F;AAC/F,SAAS,2BAA2B;IAClC,OAAO,4CAA4C,eAAe,EAAE,8BAA8B,CAAC;AACrG,CAAC;AAED,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,UAAkB,2BAA2B,EAAE,EAAE,OAA6B;QACxF,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,mGAAmG;AACnG,+FAA+F;AAC/F,YAAY;AACZ,MAAM,OAAO,yBAA0B,SAAQ,mBAAmB;IAChE,YAAY,OAA6B;QACvC,KAAK,CACH,uCAAuC,eAAe,EAAE,8BAA8B,EACtF,OAAO,CACR,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,0FAA0F;AAC1F,uFAAuF;AACvF,MAAM,OAAO,uBAAwB,SAAQ,mBAAmB;IAC9D,YAAY,OAA6B;QACvC,KAAK,CACH,uHAAuH,eAAe,EAAE,+BAA+B,EACvK,OAAO,CACR,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,gGAAgG;AAChG,gGAAgG;AAChG,gEAAgE;AAChE,MAAM,OAAO,sBAAuB,SAAQ,mBAAmB;IAElD;IADX,YACW,SAAiB,EAC1B,OAA6B;QAE7B,KAAK,CACH,wCAAwC,SAAS,kJAAkJ,EACnM,OAAO,CACR,CAAC;QANO,cAAS,GAAT,SAAS,CAAQ;QAO1B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,mBAAmB,CAAC,2BAA2B,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,gGAAgG;AAChG,4FAA4F;AAC5F,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACtD,2FAA2F;QAC3F,8FAA8F;QAC9F,6FAA6F;QAC7F,4BAA4B;QAC5B,OAAO,0BAA0B,eAAe,EAAE,8BAA8B,CAAC;IACnF,CAAC;IACD,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;QACzC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,cAAc,KAAK,CAAC,MAAM,MAAM,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,sEAAsE,CAAC;IAChF,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,OAAO,wBAAwB,CAAC;AAClC,CAAC;AAED,6FAA6F;AAC7F,mGAAmG;AACnG,qEAAqE;AACrE,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,UAA8B,EAAE;IACjF,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,WAAW,CAAC,KAAY;IAK/B,MAAM,KAAK,GACT,KAAK,CAAC,KAAK,YAAY,KAAK;QAC1B,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE;QAC5D,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;IAClB,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,mGAAmG;AACnG,oBAAoB;AACpB,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACjE,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAA8C,CAAC;QACzD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7B,OAAO,CAAC,CAAC,OAAO;iBACb,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,OAAO,OAAO,KAAK,QAAQ;gBACzB,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC;gBAChC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CACtE;iBACA,IAAI,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,OAAO,iCAAiC,CAAC,OAAO,CAAC,CAAC;AACpD,CAAC"}

package/dist/cli/lib/file-lock.d.ts

@@ -0,0 +1,23 @@
+export interface FileLockOptions {
+    staleMs: number;
+    waitMs: number;
+    pollMs?: number;
+    onWait?: () => void;
+    waitNoticeMs?: number;
+}
+/**
+ * Best-effort advisory mutex between concurrent `vcloud` processes, built on
+ * the atomicity of `open(O_CREAT | O_EXCL)`.
+ *
+ * "Best effort" is the important part: if the lock cannot be taken (wait
+ * exhausted, read-only config dir, unsupported filesystem) `fn` still runs,
+ * unserialized. It removes the common race; it does not guarantee exclusion.
+ *
+ * `fn` therefore receives whether the lock was actually held. Anything whose
+ * consequences are unacceptable when two processes do it at once — in this
+ * codebase, discarding stored credentials — must be gated on that flag, and
+ * the caller needs a recovery path for the unlocked case. Ignoring the flag is
+ * how you get a mutex that reads as exclusive but silently isn't.
+ */
+export declare function withFileLock<T>(lockFile: string, options: FileLockOptions, fn: (held: boolean) => Promise<T>): Promise<T>;
+//# sourceMappingURL=file-lock.d.ts.map

package/dist/cli/lib/file-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/file-lock.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,eAAe;IAI9B,OAAO,EAAE,MAAM,CAAC;IAEhB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAIhB,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAKD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAClC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,eAAe,EACxB,EAAE,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,GAChC,OAAO,CAAC,CAAC,CAAC,CASZ"}

package/dist/cli/lib/file-lock.js

@@ -0,0 +1,121 @@
+import { randomBytes } from "node:crypto";
+import { mkdirSync, readFileSync, statSync, unlinkSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+import { logger } from "./logger.js";
+import { sleep } from "./sleep.js";
+const DEFAULT_POLL_MS = 50;
+const DEFAULT_WAIT_NOTICE_MS = 2_000;
+/**
+ * Best-effort advisory mutex between concurrent `vcloud` processes, built on
+ * the atomicity of `open(O_CREAT | O_EXCL)`.
+ *
+ * "Best effort" is the important part: if the lock cannot be taken (wait
+ * exhausted, read-only config dir, unsupported filesystem) `fn` still runs,
+ * unserialized. It removes the common race; it does not guarantee exclusion.
+ *
+ * `fn` therefore receives whether the lock was actually held. Anything whose
+ * consequences are unacceptable when two processes do it at once — in this
+ * codebase, discarding stored credentials — must be gated on that flag, and
+ * the caller needs a recovery path for the unlocked case. Ignoring the flag is
+ * how you get a mutex that reads as exclusive but silently isn't.
+ */
+export async function withFileLock(lockFile, options, fn) {
+    const owner = await acquireLock(lockFile, options);
+    try {
+        return await fn(owner !== null);
+    }
+    finally {
+        if (owner) {
+            releaseLock(lockFile, owner);
+        }
+    }
+}
+async function acquireLock(lockFile, options) {
+    const owner = `${process.pid}-${randomBytes(8).toString("hex")}`;
+    const startedAt = Date.now();
+    const deadline = startedAt + options.waitMs;
+    const noticeAt = startedAt + (options.waitNoticeMs ?? DEFAULT_WAIT_NOTICE_MS);
+    let noticed = false;
+    // The guarded work writes into this directory anyway, but the lock is taken
+    // first — on a fresh machine it would otherwise ENOENT and run unlocked.
+    try {
+        mkdirSync(dirname(lockFile), { recursive: true });
+    }
+    catch (error) {
+        logger.debug({ lockFile, error }, "Could not create lock directory; continuing unlocked");
+        return null;
+    }
+    while (true) {
+        try {
+            writeFileSync(lockFile, owner, { flag: "wx", mode: 0o600 });
+            return owner;
+        }
+        catch (error) {
+            if (errorCode(error) !== "EEXIST") {
+                logger.debug({ lockFile, error }, "Could not create lock file; continuing unlocked");
+                return null;
+            }
+        }
+        if (isStale(lockFile, options.staleMs)) {
+            logger.debug({ lockFile }, "Breaking stale lock");
+            removeLock(lockFile);
+            continue;
+        }
+        if (Date.now() >= deadline) {
+            logger.debug({ lockFile }, "Lock wait exhausted; continuing unlocked");
+            return null;
+        }
+        if (!noticed && options.onWait && Date.now() >= noticeAt) {
+            noticed = true;
+            notifyWaiting(options.onWait, lockFile);
+        }
+        await sleep(options.pollMs ?? DEFAULT_POLL_MS);
+    }
+}
+// Progress reporting must never be what stops the guarded work from running —
+// the sink is usually stderr, and a closed pipe raises EPIPE.
+function notifyWaiting(onWait, lockFile) {
+    try {
+        onWait();
+    }
+    catch (error) {
+        logger.debug({ lockFile, error }, "Wait notice failed");
+    }
+}
+function releaseLock(lockFile, owner) {
+    // Only drop the lock while we still hold it: another process may have
+    // broken ours as stale and taken its own.
+    try {
+        if (readFileSync(lockFile, "utf-8") !== owner) {
+            return;
+        }
+    }
+    catch {
+        return;
+    }
+    removeLock(lockFile);
+}
+function isStale(lockFile, staleMs) {
+    try {
+        return statSync(lockFile).mtimeMs < Date.now() - staleMs;
+    }
+    catch {
+        // Gone between the failed create and this stat — treat as free and retry.
+        return false;
+    }
+}
+function removeLock(lockFile) {
+    try {
+        unlinkSync(lockFile);
+    }
+    catch {
+        // Another process already removed it.
+    }
+}
+function errorCode(error) {
+    if (error instanceof Error && "code" in error && typeof error.code === "string") {
+        return error.code;
+    }
+    return undefined;
+}
+//# sourceMappingURL=file-lock.js.map

package/dist/cli/lib/file-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-lock.js","sourceRoot":"","sources":["../../../src/cli/lib/file-lock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAiBnC,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAErC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAwB,EACxB,EAAiC;IAEjC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAAwB;IACnE,MAAM,KAAK,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;IAC5C,MAAM,QAAQ,GAAG,SAAS,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC,CAAC;IAC9E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,4EAA4E;IAC5E,yEAAyE;IACzE,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,sDAAsD,CAAC,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,SAAS,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAClC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,iDAAiD,CAAC,CAAC;gBACrF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,qBAAqB,CAAC,CAAC;YAClD,UAAU,CAAC,QAAQ,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,0CAA0C,CAAC,CAAC;YACvE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;YACzD,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,8DAA8D;AAC9D,SAAS,aAAa,CAAC,MAAkB,EAAE,QAAgB;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,KAAa;IAClD,sEAAsE;IACtE,0CAA0C;IAC1C,IAAI,CAAC;QACH,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,UAAU,CAAC,QAAQ,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,OAAO,CAAC,QAAgB,EAAE,OAAe;IAChD,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB;IAClC,IAAI,CAAC;QACH,UAAU,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/cli/lib/format.d.ts

@@ -0,0 +1,6 @@
+export declare function formatDateTime(iso: string): string;
+export declare function formatDuration(ms: number): string;
+export declare function formatTable(headers: readonly string[], rows: readonly (readonly string[])[]): string;
+export declare function writeJson(value: unknown): void;
+export { formatBytes } from "./contract/wire-values.js";
+//# sourceMappingURL=format.d.ts.map

package/dist/cli/lib/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/format.ts"],"names":[],"mappings":"AAAA,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAUlD;AAKD,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CASjD;AAMD,wBAAgB,WAAW,CACzB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,IAAI,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,GACnC,MAAM,CASR;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAE9C;AAKD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/cli/lib/format.js

@@ -0,0 +1,44 @@
+export function formatDateTime(iso) {
+    const d = new Date(iso);
+    return d.toLocaleString("en-US", {
+        year: "numeric",
+        month: "2-digit",
+        day: "2-digit",
+        hour: "2-digit",
+        minute: "2-digit",
+        hour12: false,
+    });
+}
+// How long something has been going, for a spinner a customer is watching. Rounded to the unit they
+// would use for the number: "3 minutes" is the honest rendering of 182 seconds, and "182 seconds" is
+// only more precise about a measurement nobody needs to that precision.
+export function formatDuration(ms) {
+    const seconds = Math.max(1, Math.round(ms / 1000));
+    if (seconds < 90)
+        return plural(seconds, "second");
+    const minutes = Math.round(seconds / 60);
+    if (minutes < 60)
+        return plural(minutes, "minute");
+    const hours = Math.floor(minutes / 60);
+    const remainder = minutes % 60;
+    if (remainder === 0)
+        return plural(hours, "hour");
+    return `${plural(hours, "hour")} ${plural(remainder, "minute")}`;
+}
+function plural(count, noun) {
+    return `${count} ${noun}${count === 1 ? "" : "s"}`;
+}
+export function formatTable(headers, rows) {
+    const widths = headers.map((header, column) => Math.max(header.length, ...rows.map((row) => row[column]?.length ?? 0)));
+    return [headers, ...rows]
+        .map((row) => row.map((value, column) => value.padEnd(widths[column] ?? value.length)).join("  "))
+        .join("\n");
+}
+export function writeJson(value) {
+    process.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
+}
+// Re-exported so a command reads every rendering helper from one module. The implementation is
+// shared with the dashboard; see ./contract/README.md for why it is mirrored rather than
+// imported.
+export { formatBytes } from "./contract/wire-values.js";
+//# sourceMappingURL=format.js.map

package/dist/cli/lib/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../../src/cli/lib/format.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,CAAC,CAAC,cAAc,CAAC,OAAO,EAAE;QAC/B,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,SAAS;QAChB,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;AACL,CAAC;AAED,oGAAoG;AACpG,qGAAqG;AACrG,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,EAAU;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACnD,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,OAAO,GAAG,EAAE;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,OAAO,GAAG,EAAE,CAAC;IAC/B,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClD,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY;IACzC,OAAO,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,WAAW,CACzB,OAA0B,EAC1B,IAAoC;IAEpC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAC5C,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,CACxE,CAAC;IACF,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;SACtB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACpF;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AAC9D,CAAC;AAED,+FAA+F;AAC/F,yFAAyF;AACzF,YAAY;AACZ,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/cli/lib/id-prefix.d.ts

@@ -0,0 +1,6 @@
+export interface Identifiable {
+    id: string;
+}
+export declare function isIdPrefix(identifier: string): boolean;
+export declare function resolveUniqueIdPrefix(identifier: string, candidates: readonly Identifiable[], resourceName: string): string;
+//# sourceMappingURL=id-prefix.d.ts.map

package/dist/cli/lib/id-prefix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-prefix.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/id-prefix.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAMtD;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,SAAS,YAAY,EAAE,EACnC,YAAY,EAAE,MAAM,GACnB,MAAM,CAeR"}

package/dist/cli/lib/id-prefix.js

@@ -0,0 +1,18 @@
+import { DEPLOYMENT_ID_PREFIX_MAX_LENGTH, DEPLOYMENT_ID_PREFIX_MIN_LENGTH, DEPLOYMENT_ID_PREFIX_PATTERN, } from "./contract/wire-values.js";
+export function isIdPrefix(identifier) {
+    return (identifier.length >= DEPLOYMENT_ID_PREFIX_MIN_LENGTH &&
+        identifier.length <= DEPLOYMENT_ID_PREFIX_MAX_LENGTH &&
+        DEPLOYMENT_ID_PREFIX_PATTERN.test(identifier));
+}
+export function resolveUniqueIdPrefix(identifier, candidates, resourceName) {
+    const normalized = identifier.toLowerCase();
+    const [match, secondMatch] = candidates.filter((candidate) => candidate.id.toLowerCase().startsWith(normalized));
+    if (!match) {
+        throw new Error(`No ${resourceName} found matching ID prefix "${identifier}".`);
+    }
+    if (secondMatch) {
+        throw new Error(`ID prefix "${identifier}" is ambiguous for ${resourceName}. Pass more characters or the full ID.`);
+    }
+    return match.id;
+}
+//# sourceMappingURL=id-prefix.js.map

package/dist/cli/lib/id-prefix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"id-prefix.js","sourceRoot":"","sources":["../../../src/cli/lib/id-prefix.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,+BAA+B,EAC/B,4BAA4B,GAC7B,MAAM,2BAA2B,CAAC;AAMnC,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC3C,OAAO,CACL,UAAU,CAAC,MAAM,IAAI,+BAA+B;QACpD,UAAU,CAAC,MAAM,IAAI,+BAA+B;QACpD,4BAA4B,CAAC,IAAI,CAAC,UAAU,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,UAAkB,EAClB,UAAmC,EACnC,YAAoB;IAEpB,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAC3D,SAAS,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAClD,CAAC;IAEF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,MAAM,YAAY,8BAA8B,UAAU,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,cAAc,UAAU,sBAAsB,YAAY,wCAAwC,CACnG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,EAAE,CAAC;AAClB,CAAC"}

package/dist/cli/lib/invocation.d.ts

@@ -0,0 +1,6 @@
+export declare const CLOUD_INVOCATIONS: readonly ["vendure", "vcloud"];
+export type CloudInvocation = (typeof CLOUD_INVOCATIONS)[number];
+export declare function setCloudInvocation(name: CloudInvocation): void;
+export declare function cloudInvocation(): CloudInvocation;
+export declare function underCurrentInvocation(message: string): string;
+//# sourceMappingURL=invocation.d.ts.map

package/dist/cli/lib/invocation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/invocation.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,iBAAiB,gCAAiC,CAAC;AAEhE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIjE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,eAAe,GAAG,IAAI,CAE9D;AAED,wBAAgB,eAAe,IAAI,eAAe,CAEjD;AAYD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE9D"}

package/dist/cli/lib/invocation.js

@@ -0,0 +1,34 @@
+// How a message spells a command the customer would type next.
+//
+// One implementation reaches the customer two ways: `vendure <command>` through the
+// `@vendure/cloud` CLI plugin, and `vcloud <command>` through the compatibility executable. Around
+// seventy messages end in one of these, and a hint that names the wrong program sends the customer
+// to one they are not running.
+//
+// The name belongs to the process rather than to a command. Which entry point is running is fixed
+// before the first command starts and cannot differ between two commands in the same process, so it
+// is held here instead of travelling through `CloudCommandInput` — which would mean threading a
+// program name through every error constructor and resolver that builds one of these sentences.
+// `vendure` is the default; the compatibility executable names itself at startup. CLO-638 removes
+// that executable and the reason this is a variable at all.
+export const CLOUD_INVOCATIONS = ["vendure", "vcloud"];
+let invocation = "vendure";
+export function setCloudInvocation(name) {
+    invocation = name;
+}
+export function cloudInvocation() {
+    return invocation;
+}
+// `vcloud` as a whole word, wherever it appears.
+//
+// Anchoring on a following space would leave "run `vcloud`." untouched, and this exists precisely
+// for sentences nobody here writes: they come from `./contract/`, which is compared character for
+// character against `@vendure-cloud/api-types` (`test/cli-contract-drift.test.ts`) because the
+// control plane emits the same words. The contract cannot be reworded for this caller, so the name
+// is substituted as the CLI renders it, and a substitution that matched only some spellings would
+// leave a customer under `vendure` a hint naming a program they do not have.
+const PROGRAM_NAME = /\bvcloud\b/g;
+export function underCurrentInvocation(message) {
+    return message.replace(PROGRAM_NAME, invocation);
+}
+//# sourceMappingURL=invocation.js.map

package/dist/cli/lib/invocation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invocation.js","sourceRoot":"","sources":["../../../src/cli/lib/invocation.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,EAAE;AACF,oFAAoF;AACpF,mGAAmG;AACnG,mGAAmG;AACnG,+BAA+B;AAC/B,EAAE;AACF,kGAAkG;AAClG,oGAAoG;AACpG,gGAAgG;AAChG,gGAAgG;AAChG,kGAAkG;AAClG,4DAA4D;AAE5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAU,CAAC;AAIhE,IAAI,UAAU,GAAoB,SAAS,CAAC;AAE5C,MAAM,UAAU,kBAAkB,CAAC,IAAqB;IACtD,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,iDAAiD;AACjD,EAAE;AACF,kGAAkG;AAClG,kGAAkG;AAClG,+FAA+F;AAC/F,mGAAmG;AACnG,kGAAkG;AAClG,6EAA6E;AAC7E,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/dist/cli/lib/log-stream.d.ts

@@ -0,0 +1,7 @@
+import type { ApiClient } from "./api-client.js";
+import { type LogEntry } from "./contract/logs.js";
+export declare function printLogLine(entry: Pick<LogEntry, "timestamp" | "message">): void;
+export declare function consumeLogStream(client: ApiClient, path: string, options?: {
+    expectTerminalFrame?: boolean;
+}): Promise<boolean>;
+//# sourceMappingURL=log-stream.d.ts.map

package/dist/cli/lib/log-stream.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"log-stream.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/log-stream.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EACL,KAAK,QAAQ,EAKd,MAAM,oBAAoB,CAAC;AA0B5B,wBAAgB,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,SAAS,CAAC,GAAG,IAAI,CAGjF;AAQD,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,mBAAmB,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9C,OAAO,CAAC,OAAO,CAAC,CAgFlB"}