@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.3

package/dist/cli/commands/token/auth.token.descriptor.js

@@ -0,0 +1,24 @@
+/**
+ * Auth Token CLI Command Descriptor
+ *
+ * Show or validate the current authentication token.
+ */
+const descriptor = {
+    kind: 'cli/command',
+    id: 'auth.token',
+    name: 'token',
+    description: 'Show, validate, or mint (app) authentication token',
+    group: 'auth',
+    options: [
+        {
+            flags: '--action <action>',
+            description: 'Action to perform: show, validate, app (mint app JWT for app APIs)',
+            default: 'show'
+        }
+    ],
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.token.descriptor.js.map

package/dist/cli/commands/token/auth.token.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.token.descriptor.js","sourceRoot":"","sources":["../../../../src/cli/commands/token/auth.token.descriptor.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,UAAU,GAA8B;IAC7C,IAAI,EAAE,aAAa;IACnB,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,oDAAoD;IACjE,KAAK,EAAE,MAAM;IAEb,OAAO,EAAE;QACR;YACC,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,oEAAoE;YACjF,OAAO,EAAE,MAAM;SACf;KACD;IAED,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/commands/token/auth.token.impl.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Auth Token CLI Command Implementation
+ *
+ * Shows or validates the current authentication token, or mints a
+ * short-lived app JWT (`--action app`) for scripted callers of app APIs.
+ *
+ * Exit contract (dogfood friction_h2vztvmy5rhy):
+ * - `validate` is a pass/fail probe — exit 1 when `valid === false`
+ *   (unauthenticated / missing / expired / unreachable). Exit 0 only when
+ *   the token is confirmed valid.
+ * - `app` is a pass/fail mint — exit 1 when no app token is mintable
+ *   (not logged in), so scripted callers can gate on exit code.
+ * - `show` / `refresh` remain informational for presence (exit 0 when a
+ *   token is stored; exit 1 when none / refresh fails).
+ */
+declare const _default: import("@vibesdotdev/cli").CommandImplementation;
+export default _default;
+//# sourceMappingURL=auth.token.impl.d.ts.map

package/dist/cli/commands/token/auth.token.impl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.token.impl.d.ts","sourceRoot":"","sources":["../../../../src/cli/commands/token/auth.token.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;;AAUH,wBAgCG"}

package/dist/cli/commands/token/auth.token.impl.js

@@ -0,0 +1,51 @@
+/**
+ * Auth Token CLI Command Implementation
+ *
+ * Shows or validates the current authentication token, or mints a
+ * short-lived app JWT (`--action app`) for scripted callers of app APIs.
+ *
+ * Exit contract (dogfood friction_h2vztvmy5rhy):
+ * - `validate` is a pass/fail probe — exit 1 when `valid === false`
+ *   (unauthenticated / missing / expired / unreachable). Exit 0 only when
+ *   the token is confirmed valid.
+ * - `app` is a pass/fail mint — exit 1 when no app token is mintable
+ *   (not logged in), so scripted callers can gate on exit code.
+ * - `show` / `refresh` remain informational for presence (exit 0 when a
+ *   token is stored; exit 1 when none / refresh fails).
+ */
+import * as z from 'zod/v4';
+import { defineCommandImplementation } from '@vibesdotdev/cli';
+import { writeJson } from '@vibesdotdev/cli/output';
+import { requestCLIExit } from '@vibesdotdev/cli/providers';
+import { executeAuthToken } from "../../services/token.js";
+import { buildAuthCLIContext } from "../../context-bridge.js";
+import { openAuthCommandOutput } from "../../command-io.js";
+export default defineCommandImplementation({
+    options: z.object({
+        action: z.enum(['show', 'validate', 'refresh', 'app']).default('show'),
+        json: z.boolean().optional(),
+        format: z.string().optional()
+    }),
+    async execute(_args, options, command) {
+        const action = options.action;
+        const context = await buildAuthCLIContext(command.runtime);
+        const out = await openAuthCommandOutput(context.runtime);
+        const result = await executeAuthToken({
+            action,
+            output: options.json === true || options.format === 'json' ? 'json' : 'table'
+        }, context);
+        const asJson = options.json === true || options.format === 'json';
+        if (asJson) {
+            await writeJson(context.runtime, result);
+        }
+        else {
+            out.line(result.message);
+        }
+        // Fail closed for unauthenticated / invalid states so scripts can gate:
+        //   vibes auth token --action validate && do_privileged_work
+        if (result.valid === false) {
+            requestCLIExit(1);
+        }
+    }
+});
+//# sourceMappingURL=auth.token.impl.js.map

package/dist/cli/commands/token/auth.token.impl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.token.impl.js","sourceRoot":"","sources":["../../../../src/cli/commands/token/auth.token.impl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,eAAe,2BAA2B,CAAC;IAC1C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACtE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CACpC;YACC,MAAM;YACN,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;SAC7E,EACD,OAAO,CACP,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;QAClE,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;aAAM,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;QAED,wEAAwE;QACxE,6DAA6D;QAC7D,IAAI,MAAM,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC5B,cAAc,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACF,CAAC;CACD,CAAC,CAAC"}

package/dist/cli/context-bridge.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Auth CLI Context Bridge
+ *
+ * Constructs an AuthCLIContext on the command's runtime for the auth CLI
+ * services. It is the consumer context (`buildAuthConsumerContext`): the
+ * environment comes from `config/environment` (`apps.auth`), authentication
+ * from `auth/provider`, API access from `api/client#auth`, all on the runtime
+ * handed in. There is no default runtime and no fallback origin: an
+ * environment without `apps.auth` fails `NOT_FOUND` `auth-origin-unresolved`.
+ */
+import { type AuthConsumerRuntime } from '../client/consumer-context.ts';
+import type { AuthCLIContext } from './schemas/types.ts';
+/** Build an AuthCLIContext on `runtime` (a command's `context.runtime`). */
+export declare function buildAuthCLIContext(runtime: AuthConsumerRuntime): Promise<AuthCLIContext>;
+//# sourceMappingURL=context-bridge.d.ts.map

package/dist/cli/context-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-bridge.d.ts","sourceRoot":"","sources":["../../src/cli/context-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAA4B,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAEzD,4EAA4E;AAC5E,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,CAAC,CAG/F"}

package/dist/cli/context-bridge.js

@@ -0,0 +1,17 @@
+/**
+ * Auth CLI Context Bridge
+ *
+ * Constructs an AuthCLIContext on the command's runtime for the auth CLI
+ * services. It is the consumer context (`buildAuthConsumerContext`): the
+ * environment comes from `config/environment` (`apps.auth`), authentication
+ * from `auth/provider`, API access from `api/client#auth`, all on the runtime
+ * handed in. There is no default runtime and no fallback origin: an
+ * environment without `apps.auth` fails `NOT_FOUND` `auth-origin-unresolved`.
+ */
+import { buildAuthConsumerContext } from "../client/consumer-context.js";
+/** Build an AuthCLIContext on `runtime` (a command's `context.runtime`). */
+export async function buildAuthCLIContext(runtime) {
+    const context = await buildAuthConsumerContext(runtime);
+    return { ...context, runtime };
+}
+//# sourceMappingURL=context-bridge.js.map

package/dist/cli/context-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-bridge.js","sourceRoot":"","sources":["../../src/cli/context-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,wBAAwB,EAA4B,MAAM,+BAA+B,CAAC;AAGnG,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA4B;IACrE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC;AAChC,CAAC"}

package/dist/cli/groups/auth.cli-group.descriptor.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Auth CLI Group Descriptor
+ *
+ * Root group for authentication commands.
+ * Commands: login, logout, status
+ */
+import type { CLIGroupAssetDescriptor } from '@vibesdotdev/kernel/schemas/asset';
+declare const descriptor: CLIGroupAssetDescriptor;
+export default descriptor;
+//# sourceMappingURL=auth.cli-group.descriptor.d.ts.map

package/dist/cli/groups/auth.cli-group.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.cli-group.descriptor.d.ts","sourceRoot":"","sources":["../../../src/cli/groups/auth.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF,QAAA,MAAM,UAAU,EAAE,uBAQjB,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/groups/auth.cli-group.descriptor.js

@@ -0,0 +1,17 @@
+/**
+ * Auth CLI Group Descriptor
+ *
+ * Root group for authentication commands.
+ * Commands: login, logout, status
+ */
+const descriptor = {
+    kind: 'cli/group',
+    id: 'auth',
+    name: 'auth',
+    description: 'Authentication and credential management',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    enabled: true
+};
+export default descriptor;
+//# sourceMappingURL=auth.cli-group.descriptor.js.map

package/dist/cli/groups/auth.cli-group.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.cli-group.descriptor.js","sourceRoot":"","sources":["../../../src/cli/groups/auth.cli-group.descriptor.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,MAAM,UAAU,GAA4B;IAC3C,IAAI,EAAE,WAAW;IACjB,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,MAAM;IACZ,WAAW,EAAE,0CAA0C;IACvD,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,OAAO,EAAE,IAAI;CACb,CAAC;AAEF,eAAe,UAAU,CAAC"}

package/dist/cli/runtime/plugin/cli.d.ts

@@ -0,0 +1,3 @@
+declare const defaultExport: import("@vibesdotdev/kernel").RuntimePlugin;
+export default defaultExport;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli/runtime/plugin/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../../../src/cli/runtime/plugin/cli.ts"],"names":[],"mappings":"AA8CA,QAAA,MAAM,aAAa,6CAwDjB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/cli/runtime/plugin/cli.js

@@ -0,0 +1,95 @@
+import { createRuntimePlugin, loader, valueFreeFailure } from '@vibesdotdev/kernel';
+import { getLogger } from '@vibesdotdev/logging';
+import { attempt } from "../../../features/utils/attempt.js";
+import { failureMessage } from "../../../client/request-failure.js";
+import authGroup from "../../groups/auth.cli-group.descriptor.js";
+import authApiKeyGroup from "../../api-key/auth.api-key.cli-group.descriptor.js";
+import authLogin from "../../commands/login/auth.login.descriptor.js";
+import authLogout from "../../commands/logout/auth.logout.descriptor.js";
+import authProfile from "../../commands/profile/auth.profile.descriptor.js";
+import authStatus from "../../commands/status/auth.status.descriptor.js";
+import authToken from "../../commands/token/auth.token.descriptor.js";
+import authSeed from "../../commands/seed/auth.seed.descriptor.js";
+import authSetup from "../../commands/setup/auth.setup.descriptor.js";
+import authApiKeyCreate from "../../api-key/create/auth.api-key-create.descriptor.js";
+import authApiKeyList from "../../api-key/list/auth.api-key-list.descriptor.js";
+import authApiKeyRevoke from "../../api-key/revoke/auth.api-key-revoke.descriptor.js";
+const CLI_COMMAND = { kind: 'cli/command' };
+/** The failure's class and its message on one line. */
+function describeFailure(failure) {
+    return `${valueFreeFailure(failure).name ?? 'Error'}: ${failureMessage(failure)}`;
+}
+/** Store the install sign-in the host carries, reporting every outcome but success and absence. */
+async function adoptInstallSignIn(runtime) {
+    const log = getLogger('auth.cli', runtime);
+    const adopted = await attempt(async () => {
+        const { adoptBootstrapSession } = await import("../../services/bootstrap-session.js");
+        return adoptBootstrapSession(runtime);
+    });
+    if (!adopted.ok) {
+        const reason = describeFailure(adopted.failure);
+        log.error(`Could not keep the install sign-in. ${reason} Run: vibes auth login`);
+        return { status: 'failed', reason };
+    }
+    const adoption = adopted.value;
+    if (adoption.status === 'skipped' || adoption.status === 'failed') {
+        log.warn(`Did not keep the install sign-in: ${adoption.reason}. Run: vibes auth login`);
+    }
+    return adoption;
+}
+// Hoisted const: tsc rewriteRelativeImportExtensions does not rewrite `.ts` specifiers inside `export default <expr>` (TS 6.0.3).
+const defaultExport = createRuntimePlugin({
+    id: 'auth-cli',
+    name: 'Auth CLI',
+    description: 'Authentication CLI commands and implementations',
+    descriptors: [
+        authGroup,
+        authApiKeyGroup,
+        authLogin,
+        authLogout,
+        authProfile,
+        authStatus,
+        authToken,
+        authSeed,
+        authSetup,
+        authApiKeyCreate,
+        authApiKeyList,
+        authApiKeyRevoke
+    ],
+    async onActivate(runtime) {
+        // The signed-in user's bearer is served on demand by the
+        // `auth/device-session` secrets store (auth-consumer), through
+        // `resolveCallerBearer`; activation binds nothing into the runtime env.
+        //
+        // A first install hands over the session the thin shim signed in with,
+        // as runtime-local context the CLI host bound from `startHost`'s
+        // `bootstrap` argument (`services/bootstrap-session.ts`). It is stored
+        // here, so the device-session store's first read serves it, and then
+        // announced for post-login projections.
+        const adoption = await adoptInstallSignIn(runtime);
+        if (adoption.status === 'adopted') {
+            const { invalidateDeviceSession } = await import("../../../device-session/device-session.store.js");
+            invalidateDeviceSession(runtime, adoption.environment);
+            const { emitAuthLoginSucceeded } = await import("../../../events/session-established.event.descriptor.js");
+            await emitAuthLoginSucceeded(runtime, {
+                environment: adoption.environment,
+                method: 'device',
+                surface: 'cli'
+            });
+        }
+    },
+    loaders: [
+        loader('auth.login', CLI_COMMAND, () => import("../../commands/login/auth.login.impl.js")),
+        loader('auth.logout', CLI_COMMAND, () => import("../../commands/logout/auth.logout.impl.js")),
+        loader('auth.profile', CLI_COMMAND, () => import("../../commands/profile/auth.profile.impl.js")),
+        loader('auth.status', CLI_COMMAND, () => import("../../commands/status/auth.status.impl.js")),
+        loader('auth.token', CLI_COMMAND, () => import("../../commands/token/auth.token.impl.js")),
+        loader('auth.seed', CLI_COMMAND, () => import("../../commands/seed/auth.seed.impl.js")),
+        loader('auth.setup', CLI_COMMAND, () => import("../../commands/setup/auth.setup.impl.js")),
+        loader('auth.api-key-create', CLI_COMMAND, () => import("../../api-key/create/auth.api-key-create.impl.js")),
+        loader('auth.api-key-list', CLI_COMMAND, () => import("../../api-key/list/auth.api-key-list.impl.js")),
+        loader('auth.api-key-revoke', CLI_COMMAND, () => import("../../api-key/revoke/auth.api-key-revoke.impl.js"))
+    ]
+});
+export default defaultExport;
+//# sourceMappingURL=cli.js.map

package/dist/cli/runtime/plugin/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../../../src/cli/runtime/plugin/cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,EAAuC,MAAM,qBAAqB,CAAC;AACzH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAEjD,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AAEpE,OAAO,SAAS,MAAM,2CAA2C,CAAC;AAClE,OAAO,eAAe,MAAM,oDAAoD,CAAC;AACjF,OAAO,SAAS,MAAM,+CAA+C,CAAC;AACtE,OAAO,UAAU,MAAM,iDAAiD,CAAC;AACzE,OAAO,WAAW,MAAM,mDAAmD,CAAC;AAC5E,OAAO,UAAU,MAAM,iDAAiD,CAAC;AACzE,OAAO,SAAS,MAAM,+CAA+C,CAAC;AACtE,OAAO,QAAQ,MAAM,6CAA6C,CAAC;AACnE,OAAO,SAAS,MAAM,+CAA+C,CAAC;AACtE,OAAO,gBAAgB,MAAM,wDAAwD,CAAC;AACtF,OAAO,cAAc,MAAM,oDAAoD,CAAC;AAChF,OAAO,gBAAgB,MAAM,wDAAwD,CAAC;AAEtF,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,aAAa,EAAW,CAAC;AAErD,uDAAuD;AACvD,SAAS,eAAe,CAAC,OAAsB;IAC9C,OAAO,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,IAAI,IAAI,OAAO,KAAK,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,kBAAkB,CAAC,OAAmB;IACpD,MAAM,GAAG,GAAG,SAAS,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;QACtF,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,GAAG,CAAC,KAAK,CAAC,uCAAuC,MAAM,wBAAwB,CAAC,CAAC;QACjF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;IAC/B,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,qCAAqC,QAAQ,CAAC,MAAM,yBAAyB,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,kIAAkI;AAClI,MAAM,aAAa,GAAG,mBAAmB,CAAC;IACzC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,iDAAiD;IAC9D,WAAW,EAAE;QACZ,SAAS;QACT,eAAe;QACf,SAAS;QACT,UAAU;QACV,WAAW;QACX,UAAU;QACV,SAAS;QACT,QAAQ;QACR,SAAS;QACT,gBAAgB;QAChB,cAAc;QACd,gBAAgB;KAChB;IACD,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,yDAAyD;QACzD,+DAA+D;QAC/D,wEAAwE;QACxE,EAAE;QACF,uEAAuE;QACvE,iEAAiE;QACjE,uEAAuE;QACvE,qEAAqE;QACrE,wCAAwC;QACxC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACnC,MAAM,EAAE,uBAAuB,EAAE,GAAG,MAAM,MAAM,CAC/C,iDAAiD,CACjD,CAAC;YACF,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;YACvD,MAAM,EAAE,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAC9C,yDAAyD,CACzD,CAAC;YACF,MAAM,sBAAsB,CAAC,OAAO,EAAE;gBACrC,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,KAAK;aACd,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,OAAO,EAAE;QACR,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC1F,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC7F,MAAM,CAAC,cAAc,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CAAC;QAChG,MAAM,CAAC,aAAa,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,2CAA2C,CAAC,CAAC;QAC7F,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC1F,MAAM,CAAC,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;QACvF,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,yCAAyC,CAAC,CAAC;QAC1F,MAAM,CAAC,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;QAC5G,MAAM,CAAC,mBAAmB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,8CAA8C,CAAC,CAAC;QACtG,MAAM,CAAC,qBAAqB,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,kDAAkD,CAAC,CAAC;KAC5G;CACD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/cli/schemas/commands.d.ts

@@ -0,0 +1,165 @@
+import * as z from 'zod/v4';
+export declare const authStatusSchema: z.ZodObject<{
+    output: z.ZodDefault<z.ZodEnum<{
+        json: "json";
+        table: "table";
+        yaml: "yaml";
+    }>>;
+}, z.core.$strip>;
+export type AuthStatusInput = z.infer<typeof authStatusSchema>;
+export declare const authLoginSchema: z.ZodObject<{
+    email: z.ZodOptional<z.ZodEmail>;
+    password: z.ZodOptional<z.ZodString>;
+    token: z.ZodOptional<z.ZodString>;
+    interactive: z.ZodDefault<z.ZodBoolean>;
+    output: z.ZodDefault<z.ZodEnum<{
+        json: "json";
+        table: "table";
+        yaml: "yaml";
+    }>>;
+}, z.core.$strip>;
+export type AuthLoginInput = z.infer<typeof authLoginSchema>;
+export declare const authLogoutSchema: z.ZodObject<{
+    all: z.ZodDefault<z.ZodBoolean>;
+    output: z.ZodDefault<z.ZodEnum<{
+        json: "json";
+        table: "table";
+        yaml: "yaml";
+    }>>;
+}, z.core.$strip>;
+export type AuthLogoutInput = z.infer<typeof authLogoutSchema>;
+export declare const authTokenSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodEnum<{
+        refresh: "refresh";
+        validate: "validate";
+        app: "app";
+        show: "show";
+    }>>;
+    output: z.ZodDefault<z.ZodEnum<{
+        json: "json";
+        table: "table";
+        yaml: "yaml";
+    }>>;
+}, z.core.$strip>;
+export type AuthTokenInput = z.infer<typeof authTokenSchema>;
+export declare const authProfileSchema: z.ZodObject<{
+    action: z.ZodDefault<z.ZodEnum<{
+        set: "set";
+        list: "list";
+        show: "show";
+    }>>;
+    profile: z.ZodOptional<z.ZodString>;
+    output: z.ZodDefault<z.ZodEnum<{
+        json: "json";
+        table: "table";
+        yaml: "yaml";
+    }>>;
+}, z.core.$strip>;
+export type AuthProfileInput = z.infer<typeof authProfileSchema>;
+export declare const authApiKeySchema: z.ZodObject<{
+    action: z.ZodEnum<{
+        list: "list";
+        create: "create";
+        delete: "delete";
+        revoke: "revoke";
+    }>;
+    name: z.ZodOptional<z.ZodString>;
+    id: z.ZodOptional<z.ZodString>;
+    keyId: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    expiresAt: z.ZodOptional<z.ZodDate>;
+    expiresIn: z.ZodOptional<z.ZodString>;
+    store: z.ZodOptional<z.ZodBoolean>;
+    output: z.ZodDefault<z.ZodEnum<{
+        json: "json";
+        table: "table";
+        yaml: "yaml";
+    }>>;
+}, z.core.$strip>;
+export type AuthApiKeyInput = z.infer<typeof authApiKeySchema>;
+export declare const authStatusResultSchema: z.ZodObject<{
+    authenticated: z.ZodBoolean;
+    user: z.ZodNullable<z.ZodObject<{
+        userId: z.ZodOptional<z.ZodString>;
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    message: z.ZodString;
+    reason: z.ZodOptional<z.ZodNullable<z.ZodEnum<{
+        unknown: "unknown";
+        unauthorized: "unauthorized";
+        unreachable: "unreachable";
+    }>>>;
+    origin: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    subscription: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        tierSlug: z.ZodString;
+        tierName: z.ZodString;
+        planSlug: z.ZodString;
+        status: z.ZodString;
+        periodEnd: z.ZodNullable<z.ZodString>;
+    }, z.core.$strip>>>;
+}, z.core.$strip>;
+export type AuthStatusResult = z.infer<typeof authStatusResultSchema>;
+export declare const authLoginResultSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    message: z.ZodString;
+    token: z.ZodNullable<z.ZodString>;
+    user: z.ZodOptional<z.ZodObject<{
+        userId: z.ZodOptional<z.ZodString>;
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    profile: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        environment: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type AuthLoginResult = z.infer<typeof authLoginResultSchema>;
+export declare const authLogoutResultSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    message: z.ZodString;
+    clearedSessions: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+export type AuthLogoutResult = z.infer<typeof authLogoutResultSchema>;
+export declare const authTokenResultSchema: z.ZodObject<{
+    token: z.ZodNullable<z.ZodString>;
+    valid: z.ZodBoolean;
+    expiresAt: z.ZodNullable<z.ZodDate>;
+    message: z.ZodString;
+}, z.core.$strip>;
+export type AuthTokenResult = z.infer<typeof authTokenResultSchema>;
+export declare const authProfileResultSchema: z.ZodObject<{
+    user: z.ZodNullable<z.ZodObject<{
+        userId: z.ZodOptional<z.ZodString>;
+        email: z.ZodString;
+        name: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        displayName: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    permissions: z.ZodArray<z.ZodString>;
+    permissionsAvailable: z.ZodBoolean;
+    authenticated: z.ZodBoolean;
+}, z.core.$strip>;
+export type AuthProfileResult = z.infer<typeof authProfileResultSchema>;
+export declare const authApiKeyResultSchema: z.ZodObject<{
+    success: z.ZodBoolean;
+    action: z.ZodEnum<{
+        list: "list";
+        create: "create";
+        delete: "delete";
+        revoke: "revoke";
+    }>;
+    apiKeys: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        key: z.ZodString;
+        createdAt: z.ZodDate;
+        expiresAt: z.ZodNullable<z.ZodDate>;
+        lastUsedAt: z.ZodNullable<z.ZodDate>;
+    }, z.core.$strip>>;
+    message: z.ZodString;
+    newKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type AuthApiKeyResult = z.infer<typeof authApiKeyResultSchema>;
+//# sourceMappingURL=commands.d.ts.map

package/dist/cli/schemas/commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../src/cli/schemas/commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,eAAO,MAAM,gBAAgB;;;;;;iBAE3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG/D,eAAO,MAAM,eAAe;;;;;;;;;;iBAM1B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG7D,eAAO,MAAM,gBAAgB;;;;;;;iBAG3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG/D,eAAO,MAAM,eAAe;;;;;;;;;;;;iBAG1B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAG7D,eAAO,MAAM,iBAAiB;;;;;;;;;;;;iBAI5B,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAGjE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;iBAU3B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAsC/D,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;iBAsBjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;iBAMhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,uBAAuB;;;;;;;;;;iBAMlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAGxE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;iBAMjC,CAAC;AAEH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC"}

package/dist/cli/schemas/commands.js

@@ -0,0 +1,134 @@
+import * as z from 'zod/v4';
+// INPUT SCHEMAS
+// Auth Status Command
+export const authStatusSchema = z.object({
+    output: z.enum(['json', 'yaml', 'table']).default('table')
+});
+// Auth Login Command
+export const authLoginSchema = z.object({
+    email: z.email().optional(),
+    password: z.string().optional(),
+    token: z.string().optional(),
+    interactive: z.boolean().default(true),
+    output: z.enum(['json', 'yaml', 'table']).default('table')
+});
+// Auth Logout Command
+export const authLogoutSchema = z.object({
+    all: z.boolean().default(false),
+    output: z.enum(['json', 'yaml', 'table']).default('table')
+});
+// Auth Token Command
+export const authTokenSchema = z.object({
+    action: z.enum(['show', 'refresh', 'validate', 'app']).default('show'),
+    output: z.enum(['json', 'yaml', 'table']).default('table')
+});
+// Auth Profile Command
+export const authProfileSchema = z.object({
+    action: z.enum(['show', 'set', 'list']).default('show'),
+    profile: z.string().optional(),
+    output: z.enum(['json', 'yaml', 'table']).default('table')
+});
+// Auth API Key Commands
+export const authApiKeySchema = z.object({
+    action: z.enum(['create', 'list', 'revoke', 'delete']),
+    name: z.string().optional(),
+    id: z.string().optional(),
+    keyId: z.string().optional(),
+    description: z.string().optional(),
+    expiresAt: z.date().optional(),
+    expiresIn: z.string().optional(),
+    store: z.boolean().optional(),
+    output: z.enum(['json', 'yaml', 'table']).default('table')
+});
+// RESULT SCHEMAS
+// User schema (shared across results)
+const userSchema = z.object({
+    userId: z.string().optional(),
+    email: z.string(),
+    name: z.string().nullable().optional(),
+    displayName: z.string().optional()
+});
+// Profile schema
+const profileSchema = z.object({
+    name: z.string(),
+    environment: z.string().optional()
+});
+// API Key schema
+const apiKeySchema = z.object({
+    id: z.string(),
+    name: z.string(),
+    key: z.string(),
+    createdAt: z.date(),
+    expiresAt: z.date().nullable(),
+    lastUsedAt: z.date().nullable()
+});
+// Subscription/Billing schema for status
+const subscriptionSummarySchema = z.object({
+    tierSlug: z.string(),
+    tierName: z.string(),
+    planSlug: z.string(),
+    status: z.string(),
+    periodEnd: z.string().nullable()
+});
+// Auth Status Result
+export const authStatusResultSchema = z.object({
+    authenticated: z.boolean(),
+    user: userSchema.nullable(),
+    message: z.string(),
+    /**
+     * Why live verification failed (only when authenticated=false).
+     * - unauthorized: server rejected credentials (re-login may help)
+     * - unreachable: could not reach auth server (do NOT re-login; fix network/service)
+     * - unknown: indeterminate probe failure
+     * - null: authenticated successfully
+     */
+    reason: z
+        .enum(['unauthorized', 'unreachable', 'unknown'])
+        .nullable()
+        .optional(),
+    /**
+     * The auth origin the live probe actually contacted. Failure text names it
+     * so "unreachable" can never read as a production outage when the resolved
+     * origin was the local dev daemon.
+     */
+    origin: z.string().nullable().optional(),
+    subscription: subscriptionSummarySchema.nullable().optional()
+});
+// Auth Login Result
+export const authLoginResultSchema = z.object({
+    success: z.boolean(),
+    message: z.string(),
+    token: z.string().nullable(),
+    user: userSchema.optional(),
+    profile: profileSchema.optional()
+});
+// Auth Logout Result
+export const authLogoutResultSchema = z.object({
+    success: z.boolean(),
+    message: z.string(),
+    clearedSessions: z.boolean().optional()
+});
+// Auth Token Result
+export const authTokenResultSchema = z.object({
+    token: z.string().nullable(),
+    valid: z.boolean(),
+    expiresAt: z.date().nullable(),
+    message: z.string()
+});
+// Auth Profile Result
+export const authProfileResultSchema = z.object({
+    user: userSchema.nullable(),
+    permissions: z.array(z.string()),
+    /** False means permission enrichment failed; it is not an empty grant set. */
+    permissionsAvailable: z.boolean(),
+    authenticated: z.boolean()
+});
+// Auth API Key Result
+export const authApiKeyResultSchema = z.object({
+    success: z.boolean(),
+    action: z.enum(['create', 'list', 'revoke', 'delete']),
+    apiKeys: z.array(apiKeySchema),
+    message: z.string(),
+    newKey: z.string().optional()
+});
+//# sourceMappingURL=commands.js.map

package/dist/cli/schemas/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../../src/cli/schemas/commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,gBAAgB;AAEhB,sBAAsB;AACtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC1D,CAAC,CAAC;AAIH,qBAAqB;AACrB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC1D,CAAC,CAAC;AAIH,sBAAsB;AACtB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC1D,CAAC,CAAC;AAIH,qBAAqB;AACrB,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC1D,CAAC,CAAC;AAIH,uBAAuB;AACvB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC1D,CAAC,CAAC;AAIH,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;CAC1D,CAAC,CAAC;AAIH,iBAAiB;AAEjB,sCAAsC;AACtC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,iBAAiB;AACjB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,iBAAiB;AACjB,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,yCAAyC;AACzC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC;AAEH,qBAAqB;AACrB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB;;;;;;OAMG;IACH,MAAM,EAAE,CAAC;SACP,IAAI,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;SAChD,QAAQ,EAAE;SACV,QAAQ,EAAE;IACZ;;;;OAIG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,YAAY,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC7D,CAAC,CAAC;AAIH,oBAAoB;AACpB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,qBAAqB;AACrB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAIH,oBAAoB;AACpB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC;AAIH,sBAAsB;AACtB,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC3B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAChC,8EAA8E;IAC9E,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC,CAAC;AAIH,sBAAsB;AACtB,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC"}