@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/cli/command-io.js

@@ -0,0 +1,38 @@
+/**
+ * What every `vibes auth` command reads at its execute boundary and writes to.
+ *
+ * Commander hands a command its positional values and options as
+ * `CommandOptions` (already parsed to text, numbers, flags and text lists). A
+ * command parses the fields it reads with its own schema through
+ * {@link parseCommandInput}; a value outside the schema refuses `INVALID_INPUT`
+ * `auth-command-input-invalid`, naming the fields, never their values.
+ *
+ * Output goes through the handed runtime's selected host text output
+ * (`runtime/stdio`), never the process console: results on stdout, diagnostics
+ * on stderr. A host without text output refuses `UNAVAILABLE`
+ * `stdio-unavailable` before the command writes.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError, getRuntimeStdio } from '@vibesdotdev/kernel';
+/** The fields of `input` a command reads, parsed with `schema`; anything outside it refuses and names the fields. */
+export function parseCommandInput(schema, input) {
+    const parsed = schema.safeParse(input);
+    if (parsed.success)
+        return parsed.data;
+    const fields = [...new Set(parsed.error.issues.map((issue) => String(issue.path[0] ?? '(input)')))];
+    throw new CapabilityError(`Invalid value for ${fields.map((field) => `'${field}'`).join(', ')}.`, 'INVALID_INPUT', {
+        reason: 'auth-command-input-invalid',
+        retryable: false,
+        details: { fields }
+    });
+}
+/** Resolve the handed runtime's host text output for one command run. */
+export async function openAuthCommandOutput(runtime) {
+    const stdio = await getRuntimeStdio(runtime);
+    return {
+        line: (text = '') => stdio.write('stdout', `${text}\n`),
+        warn: (text) => stdio.write('stderr', `${text}\n`),
+        write: (text) => stdio.write('stdout', text)
+    };
+}
+//# sourceMappingURL=command-io.js.map

package/dist/cli/command-io.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-io.js","sourceRoot":"","sources":["../../src/cli/command-io.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AAExF,qHAAqH;AACrH,MAAM,UAAU,iBAAiB,CAA4B,MAAe,EAAE,KAAqB;IAClG,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACvC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACvC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,IAAI,eAAe,CAAC,qBAAqB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,EAAE;QAClH,MAAM,EAAE,4BAA4B;QACpC,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,MAAM,EAAE;KACnB,CAAC,CAAC;AACJ,CAAC;AAYD,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA8C;IACzF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACN,IAAI,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC;QACvD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,IAAI,CAAC;QAClD,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;KAC5C,CAAC;AACH,CAAC"}

package/dist/cli/commands/login/auth.login.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Auth Login CLI Command Descriptor
+ *
+ * Authenticate with an API key or via browser flow.
+ */
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.login.descriptor.d.ts.map

package/dist/cli/commands/login/auth.login.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.login.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/login/auth.login.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAqBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/login/auth.login.descriptor.js

@@ -0,0 +1,27 @@
+/**
+ * Auth Login CLI Command Descriptor
+ *
+ * Authenticate with an API key or via browser flow.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'auth.login',
+    name: 'login',
+    description: 'Authenticate with the platform',
+    group: 'auth',
+    options: [
+        {
+            flags: '-t, --token <key>',
+            description: 'API key to authenticate with'
+        },
+        {
+            flags: '--no-interactive',
+            description: 'Disable interactive device-authorization flow'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.login.descriptor.js.map

package/dist/cli/commands/login/auth.login.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.login.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/commands/login/auth.login.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,gCAAgC;IAC7C,KAAK,EAAE,MAAM;IAEb,OAAO,EAAE;QACR;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,8BAA8B;SAC3C;QACD;YACC,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,+CAA+C;SAC5D;KACD;IAED,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/login/auth.login.impl.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Auth Login CLI Command Implementation
+ *
+ * Authenticates with API key or browser flow.
+ */
+declare const _default: import("@vibesdotdev/cli").CommandImplementation;
+export default _default;
+//# sourceMappingURL=auth.login.impl.d.ts.map

package/dist/cli/commands/login/auth.login.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.login.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/login/auth.login.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;AAUH,wBAkCG"}

package/dist/cli/commands/login/auth.login.impl.js

@@ -0,0 +1,45 @@
+/**
+ * Auth Login CLI Command Implementation
+ *
+ * Authenticates with API key or browser flow.
+ */
+import * as z from 'zod/v4';
+import { defineCommandImplementation } from '@vibesdotdev/cli';
+import { executeAuthLogin } from "../../services/login.js";
+import { buildAuthCLIContext } from "../../context-bridge.js";
+import { openAuthCommandOutput } from "../../command-io.js";
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { emitAuthLoginSucceeded } from "../../../events/session-established.event.descriptor.js";
+export default defineCommandImplementation({
+    options: z.object({ token: z.string().optional(), interactive: z.boolean().optional() }),
+    async execute(_args, options, command) {
+        const context = await buildAuthCLIContext(command.runtime);
+        const out = await openAuthCommandOutput(context.runtime);
+        const result = await executeAuthLogin({
+            token: options.token,
+            interactive: options.interactive !== false,
+            output: 'table'
+        }, context);
+        if (result.success) {
+            out.line(result.message);
+            if (result.user) {
+                out.line(`  User: ${result.user.email}`);
+                if (result.user.name)
+                    out.line(`  Name: ${result.user.name}`);
+            }
+            // A successful login is a runtime event: forge's auth-login.setup-git
+            // subscription (and any other auth.login.succeeded listener) fires
+            // from here, on the command's runtime.
+            await emitAuthLoginSucceeded(command.runtime, {
+                environment: context.environment.id,
+                method: options.token ? 'api-key' : 'device',
+                surface: 'cli'
+            });
+        }
+        else {
+            out.warn(result.message);
+            requestCLIExit(1);
+        }
+    }
+});
+//# sourceMappingURL=auth.login.impl.js.map

package/dist/cli/commands/login/auth.login.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.login.impl.js","sourceRoot":"","sources":["../../../../src/cli/commands/login/auth.login.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,yDAAyD,CAAC;AAEjG,eAAe,2BAA2B,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACxF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO;QACpC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACpC;YACC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,WAAW,EAAE,OAAO,CAAC,WAAW,KAAK,KAAK;YAC1C,MAAM,EAAE,OAAO;SACf,EACD,OAAO,CACP,CAAC;QAEF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI;oBAAE,GAAG,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,sEAAsE;YACtE,mEAAmE;YACnE,uCAAuC;YACvC,MAAM,sBAAsB,CAAC,OAAO,CAAC,OAAO,EAAE;gBAC7C,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE;gBACnC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;gBAC5C,OAAO,EAAE,KAAK;aACd,CAAC,CAAC;QACJ,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cli/commands/logout/auth.logout.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Auth Logout CLI Command Descriptor
+ *
+ * Clear stored credentials and log out.
+ */
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.logout.descriptor.d.ts.map

package/dist/cli/commands/logout/auth.logout.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.logout.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/logout/auth.logout.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAUjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/logout/auth.logout.descriptor.js

@@ -0,0 +1,17 @@
+/**
+ * Auth Logout CLI Command Descriptor
+ *
+ * Clear stored credentials and log out.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'auth.logout',
+    name: 'logout',
+    description: 'Log out and clear stored credentials',
+    group: 'auth',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.logout.descriptor.js.map

package/dist/cli/commands/logout/auth.logout.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.logout.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/commands/logout/auth.logout.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,aAAa;IACjB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,sCAAsC;IACnD,KAAK,EAAE,MAAM;IAEb,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/logout/auth.logout.impl.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Auth Logout CLI Command Implementation
+ *
+ * Clears stored credentials.
+ */
+declare const _default: import("@vibesdotdev/cli").CommandImplementation;
+export default _default;
+//# sourceMappingURL=auth.logout.impl.d.ts.map

package/dist/cli/commands/logout/auth.logout.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.logout.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/logout/auth.logout.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;AASH,wBAcG"}

package/dist/cli/commands/logout/auth.logout.impl.js

@@ -0,0 +1,27 @@
+/**
+ * Auth Logout CLI Command Implementation
+ *
+ * Clears stored credentials.
+ */
+import { executeAuthLogout } from "../../services/logout.js";
+import * as z from 'zod/v4';
+import { defineCommandImplementation } from '@vibesdotdev/cli';
+import { buildAuthCLIContext } from "../../context-bridge.js";
+import { openAuthCommandOutput } from "../../command-io.js";
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+export default defineCommandImplementation({
+    options: z.object({}),
+    async execute(_args, _options, command) {
+        const context = await buildAuthCLIContext(command.runtime);
+        const out = await openAuthCommandOutput(context.runtime);
+        const result = await executeAuthLogout({ all: false, output: 'table' }, context);
+        if (result.success) {
+            out.line(result.message);
+        }
+        else {
+            out.warn(result.message);
+            requestCLIExit(1);
+        }
+    }
+});
+//# sourceMappingURL=auth.logout.impl.js.map

package/dist/cli/commands/logout/auth.logout.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.logout.impl.js","sourceRoot":"","sources":["../../../../src/cli/commands/logout/auth.logout.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,eAAe,2BAA2B,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACrB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO;QACrC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAEjF,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACzB,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cli/commands/profile/auth.profile.descriptor.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Auth Profile CLI Command Descriptor
+ *
+ * View the authenticated user's profile.
+ */
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.profile.descriptor.d.ts.map

package/dist/cli/commands/profile/auth.profile.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.profile.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/profile/auth.profile.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAUjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/profile/auth.profile.descriptor.js

@@ -0,0 +1,17 @@
+/**
+ * Auth Profile CLI Command Descriptor
+ *
+ * View the authenticated user's profile.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'auth.profile',
+    name: 'profile',
+    description: 'View user profile',
+    group: 'auth',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.profile.descriptor.js.map

package/dist/cli/commands/profile/auth.profile.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.profile.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/commands/profile/auth.profile.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,cAAc;IAClB,IAAI,EAAE,SAAS;IACf,WAAW,EAAE,mBAAmB;IAChC,KAAK,EAAE,MAAM;IAEb,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/profile/auth.profile.impl.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Auth Profile CLI Command Implementation
+ *
+ * Shows the authenticated user's profile and permissions.
+ */
+declare const _default: import("@vibesdotdev/cli").CommandImplementation;
+export default _default;
+//# sourceMappingURL=auth.profile.impl.d.ts.map

package/dist/cli/commands/profile/auth.profile.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.profile.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/profile/auth.profile.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;;AASH,wBAwBG"}

package/dist/cli/commands/profile/auth.profile.impl.js

@@ -0,0 +1,38 @@
+/**
+ * Auth Profile CLI Command Implementation
+ *
+ * Shows the authenticated user's profile and permissions.
+ */
+import { executeAuthProfile } from "../../services/profile.js";
+import * as z from 'zod/v4';
+import { defineCommandImplementation } from '@vibesdotdev/cli';
+import { buildAuthCLIContext } from "../../context-bridge.js";
+import { openAuthCommandOutput } from "../../command-io.js";
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+export default defineCommandImplementation({
+    options: z.object({}),
+    async execute(_args, _options, command) {
+        const context = await buildAuthCLIContext(command.runtime);
+        const out = await openAuthCommandOutput(context.runtime);
+        const result = await executeAuthProfile({ action: 'show', output: 'table' }, context);
+        if (result.authenticated && result.user) {
+            out.line('User Profile');
+            out.line(`  Email: ${result.user.email}`);
+            out.line(`  Name: ${result.user.name || 'N/A'}`);
+            if (result.permissions.length > 0) {
+                out.line(`  Permissions: ${result.permissions.join(', ')}`);
+            }
+            else if (!result.permissionsAvailable) {
+                out.line('  Permissions: unavailable (auth service did not return a grant verdict)');
+            }
+            else {
+                out.line('  Permissions: none');
+            }
+        }
+        else {
+            out.warn('Not authenticated');
+            requestCLIExit(1);
+        }
+    }
+});
+//# sourceMappingURL=auth.profile.impl.js.map

package/dist/cli/commands/profile/auth.profile.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.profile.impl.js","sourceRoot":"","sources":["../../../../src/cli/commands/profile/auth.profile.impl.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,eAAe,2BAA2B,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IACrB,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO;QACrC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;QAEtF,IAAI,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YACzB,GAAG,CAAC,IAAI,CAAC,YAAY,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC;YACjD,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnC,GAAG,CAAC,IAAI,CAAC,kBAAkB,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC7D,CAAC;iBAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBACzC,GAAG,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;YACtF,CAAC;iBAAM,CAAC;gBACP,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;YACjC,CAAC;QACF,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;YAC9B,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cli/commands/seed/auth.seed.descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { CLICommandAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLICommandAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.seed.descriptor.d.ts.map

package/dist/cli/commands/seed/auth.seed.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.seed.descriptor.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/seed/auth.seed.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAEnF,QAAA,MAAM,UAAU,EAAE,yBAqBjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/seed/auth.seed.descriptor.js

@@ -0,0 +1,24 @@
+const descriptor = {
+    kind: 'cli/command',
+    id: 'auth.seed',
+    name: 'seed',
+    description: 'Seed the auth database with a dev user account',
+    group: 'auth',
+    options: [
+        { flags: '-e, --email <email>', description: 'Email address (default: dev@vibes.dev)' },
+        { flags: '-p, --password <password>', description: 'Password (default: vibes123)' },
+        { flags: '-n, --name <name>', description: 'Display name (default: Dev User)' },
+        { flags: '--admin', description: 'Grant admin privileges' },
+        {
+            flags: '--tiered',
+            description: 'Create test users for all subscription tiers (free, plus, pro, ultra) plus org role users'
+        },
+        { flags: '--origin <url>', description: 'Auth server origin (default: the runtime-declared auth service)' },
+        { flags: '--force', description: 'Allow production seeding; still blocks tiered production seeding' }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.seed.descriptor.js.map

package/dist/cli/commands/seed/auth.seed.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.seed.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/commands/seed/auth.seed.descriptor.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,gDAAgD;IAC7D,KAAK,EAAE,MAAM;IACb,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,wCAAwC,EAAE;QACvF,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,8BAA8B,EAAE;QACnF,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,kCAAkC,EAAE;QAC/E,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,wBAAwB,EAAE;QAC3D;YACC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,2FAA2F;SACxG;QACD,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,iEAAiE,EAAE;QAC3G,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,kEAAkE,EAAE;KACrG;IACD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/seed/auth.seed.impl.d.ts

@@ -0,0 +1,3 @@
+declare const _default: import("@vibesdotdev/cli").CommandImplementation;
+export default _default;
+//# sourceMappingURL=auth.seed.impl.d.ts.map

package/dist/cli/commands/seed/auth.seed.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.seed.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/seed/auth.seed.impl.ts"],"names":[],"mappings":";AAeA,wBAmDG"}

package/dist/cli/commands/seed/auth.seed.impl.js

@@ -0,0 +1,146 @@
+import * as z from 'zod/v4';
+import { defineCommandImplementation } from '@vibesdotdev/cli';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { serviceEnvironment } from '@vibesdotdev/infra-core/service';
+import { resolveAuthOrigin } from "../../../config/env.js";
+import { DEV_USER, ORG_ROLE_USERS, SYSTEM_ROLE_USERS, TIER_USERS } from "./seed-users.js";
+/** The user an auth sign-up or admin-create answer carries. */
+const createdUserAnswerSchema = z.object({
+    user: z.object({ id: z.string(), email: z.string(), name: z.string() }).optional()
+});
+export default defineCommandImplementation({
+    options: z.object({
+        force: z.boolean().optional(),
+        origin: z.string().optional(),
+        tiered: z.boolean().optional(),
+        email: z.string().optional(),
+        password: z.string().optional(),
+        name: z.string().optional()
+    }),
+    async execute(_args, options, context) {
+        const { runtime } = context;
+        const ui = await runtime.context('cli/ui');
+        const isProduction = (await serviceEnvironment(runtime)) === 'production';
+        if (isProduction && !options.force) {
+            ui.error('Seed is disabled in production. Use --force to override.');
+            ui.error('Warning: This will create users via admin API with verified emails.');
+            requestCLIExit(1);
+        }
+        if (options.tiered && isProduction) {
+            ui.error('Tiered seeding is not available in production');
+            requestCLIExit(1);
+        }
+        const origin = options.origin || await resolveAuthOrigin(runtime);
+        if (options.tiered) {
+            await seedTieredUsers(ui, origin);
+            return;
+        }
+        const email = options.email || DEV_USER.email;
+        const password = options.password || DEV_USER.password;
+        const name = options.name || DEV_USER.name;
+        ui.info(`Seeding dev user via ${origin} (production: ${isProduction})`);
+        const user = isProduction
+            ? await createAdminUser(runtime, origin, { email, password, name })
+            : await createUser(origin, { email, password, name });
+        if (!user) {
+            ui.info(`User already exists: ${email}`);
+        }
+        else {
+            ui.success(`Created: ${email} (${user.id})`);
+        }
+        ui.info(`  Email:    ${email}`);
+        ui.info(`  Verified: ${isProduction ? 'yes (admin API)' : 'no (public API)'}`);
+    }
+});
+async function seedTieredUsers(ui, origin) {
+    ui.info('Seeding tiered test users...');
+    for (const user of TIER_USERS) {
+        const created = await createUser(origin, user);
+        if (created) {
+            ui.success(`  Created: ${user.email}`);
+        }
+        else {
+            ui.info(`  Exists:  ${user.email}`);
+        }
+    }
+    ui.info('Seeding system-role users...');
+    for (const user of SYSTEM_ROLE_USERS) {
+        const created = await createUser(origin, user);
+        if (created) {
+            ui.success(`  Created: ${user.email}`);
+        }
+        else {
+            ui.info(`  Exists:  ${user.email}`);
+        }
+    }
+    ui.info('Seeding org role users...');
+    for (const user of ORG_ROLE_USERS) {
+        const created = await createUser(origin, user);
+        if (created) {
+            ui.success(`  Created: ${user.email}`);
+        }
+        else {
+            ui.info(`  Exists:  ${user.email}`);
+        }
+    }
+    ui.info('Seed complete. Users:');
+    ui.info('  Tier users:   free, plus, pro, ultra, admin @ *test.vibes.dev');
+    ui.info('  Role users:   readonly, project-admin @ *test.vibes.dev');
+    ui.info('  Org users:    org-owner, org-admin, org-member, org-viewer @ *test.vibes.dev');
+    ui.info('');
+    ui.info('Note: this in-process path does not create the `vibes` org or org-role memberships.');
+    ui.info('Run `bun run apps/auth-web/src/server/cli/seed/run-tiered-seed.ts` for the full flow.');
+}
+/** Refusal diagnostics retain status, never the credential-bearing service answer. */
+function refusedSeed(api, status) {
+    return new CapabilityError(`${api} refused the seed request (${status}).`, 'UNAVAILABLE', {
+        reason: 'seed-auth-refused',
+        retryable: false,
+        details: { api, status }
+    });
+}
+async function createUser(origin, data) {
+    const res = await fetch(`${origin}/api/auth/sign-up/email`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(data)
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        if (body.includes('already') || body.includes('UNIQUE') || res.status === 422) {
+            return null;
+        }
+        throw refusedSeed('Auth API', res.status);
+    }
+    return createdUserAnswerSchema.parse(await res.json()).user ?? null;
+}
+async function createAdminUser(runtime, origin, data) {
+    const r = await runtime.resolveCredential({ source: 'secret', key: 'VIBES_AUTH_ADMIN_TOKEN' });
+    if (!r.ok)
+        throw r.error;
+    const adminToken = r.value;
+    const res = await fetch(`${origin}/api/admin/users`, {
+        method: 'POST',
+        headers: {
+            'Content-Type': 'application/json',
+            Authorization: `Bearer ${adminToken}`
+        },
+        body: JSON.stringify({
+            email: data.email,
+            password: data.password,
+            name: data.name,
+            admin: true,
+            emailVerified: true
+        })
+    });
+    if (!res.ok) {
+        const body = await res.text();
+        if (body.includes('already') || body.includes('existing') || res.status === 200) {
+            return null;
+        }
+        throw refusedSeed('Admin API', res.status);
+    }
+    return createdUserAnswerSchema.parse(await res.json()).user ?? null;
+}
+//# sourceMappingURL=auth.seed.impl.js.map

package/dist/cli/commands/seed/auth.seed.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.seed.impl.js","sourceRoot":"","sources":["../../../../src/cli/commands/seed/auth.seed.impl.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAkB,MAAM,kBAAkB,CAAC;AAC/E,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE1F,+DAA+D;AAC/D,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;CAClF,CAAC,CAAC;AAIH,eAAe,2BAA2B,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO;QACpC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAC5B,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAY,QAAQ,CAAC,CAAC;QAEtD,MAAM,YAAY,GAAG,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,YAAY,CAAC;QAC1E,IAAI,YAAY,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACpC,EAAE,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;YACrE,EAAE,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YAChF,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;YACpC,EAAE,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;YAC1D,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;QAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAElE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,eAAe,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAClC,OAAO;QACR,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC;QAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC;QAE3C,EAAE,CAAC,IAAI,CAAC,wBAAwB,MAAM,iBAAiB,YAAY,GAAG,CAAC,CAAC;QAExE,MAAM,IAAI,GAAG,YAAY;YACxB,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YACnE,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAEvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,EAAE,CAAC,IAAI,CAAC,wBAAwB,KAAK,EAAE,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACP,EAAE,CAAC,OAAO,CAAC,YAAY,KAAK,KAAK,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9C,CAAC;QAED,EAAE,CAAC,IAAI,CAAC,eAAe,KAAK,EAAE,CAAC,CAAC;QAChC,EAAE,CAAC,IAAI,CAAC,eAAe,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAChF,CAAC;CACD,CAAC,CAAC;AAEH,KAAK,UAAU,eAAe,CAC7B,EAAa,EACb,MAAc;IAEd,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAExC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACb,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACP,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,EAAE,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACb,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACP,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,EAAE,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/C,IAAI,OAAO,EAAE,CAAC;YACb,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;aAAM,CAAC;YACP,EAAE,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;IACF,CAAC;IAED,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACjC,EAAE,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;IAC3E,EAAE,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;IACrE,EAAE,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;IAC1F,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,EAAE,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAC/F,EAAE,CAAC,IAAI,CAAC,uFAAuF,CAAC,CAAC;AAClG,CAAC;AAED,sFAAsF;AACtF,SAAS,WAAW,CAAC,GAAW,EAAE,MAAc;IAC/C,OAAO,IAAI,eAAe,CAAC,GAAG,GAAG,8BAA8B,MAAM,IAAI,EAAE,aAAa,EAAE;QACzF,MAAM,EAAE,mBAAmB;QAC3B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE;KACxB,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CACxB,MAAc,EACd,IAAuD;IAEvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,yBAAyB,EAAE;QAC3D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC1B,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/E,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,WAAW,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC;IAED,OAAO,uBAAuB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,eAAe,CAC7B,OAAqB,EACrB,MAAc,EACd,IAAuD;IAEvD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC;IAC/F,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,CAAC,CAAC,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC;IAE3B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,kBAAkB,EAAE;QACpD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACR,cAAc,EAAE,kBAAkB;YAClC,aAAa,EAAE,UAAU,UAAU,EAAE;SACrC;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI;YACX,aAAa,EAAE,IAAI;SACnB,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACjF,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,uBAAuB,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;AACrE,CAAC"}