@whatcha/cli 0.0.0-stage → 0.1.0

package/dist/auth/token-store.js

@@ -0,0 +1,165 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileTokenStore = void 0;
+exports.candidateStores = candidateStores;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+const config_1 = require("../config");
+function execFileText(cmd, args, input) {
+    return new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.execFile)(cmd, args, { encoding: "utf8", maxBuffer: 1024 * 1024 }, (err, stdout) => {
+            if (err)
+                reject(err);
+            else
+                resolve(stdout);
+        });
+        if (input !== undefined)
+            child.stdin?.end(input);
+    });
+}
+async function commandExists(cmd) {
+    try {
+        await execFileText(process.platform === "win32" ? "where" : "which", [cmd]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const SERVICE = "whatcha-cli";
+const ACCOUNT = "whatcha";
+/**
+ * macOS Keychain, via the `security` CLI (no native module -- `keytar` and
+ * friends need a node-gyp build per platform, which is a lot to ask of
+ * `npm ci` for one command most sessions never touch). The whole session
+ * (both tokens, the email, the expiry) is stored as one JSON blob under a
+ * single fixed account name; this is a one-account CLI, not a credential
+ * manager for several.
+ */
+class MacKeychainStore {
+    name = "macOS Keychain";
+    async isAvailable() {
+        return process.platform === "darwin" && (await commandExists("security"));
+    }
+    async save(session) {
+        // -U: update in place if an entry already exists, instead of erroring.
+        await execFileText("security", [
+            "add-generic-password",
+            "-a",
+            ACCOUNT,
+            "-s",
+            SERVICE,
+            "-w",
+            JSON.stringify(session),
+            "-U",
+        ]);
+    }
+    async load() {
+        try {
+            const out = await execFileText("security", ["find-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-w"]);
+            return JSON.parse(out.trim());
+        }
+        catch {
+            return null;
+        }
+    }
+    async clear() {
+        try {
+            await execFileText("security", ["delete-generic-password", "-a", ACCOUNT, "-s", SERVICE]);
+        }
+        catch {
+            // Nothing stored -- clearing an already-empty store is not an error.
+        }
+    }
+}
+/**
+ * Linux, via `secret-tool` (libsecret) -- GNOME Keyring, KWallet's libsecret
+ * shim, etc. Only actually works when a secret service is running, which a
+ * plain SSH session or a container usually does not have; `isAvailable`
+ * only checks the binary exists, so a headless box falls through to the
+ * file store the first time `save` throws (see auth/session.ts).
+ */
+class LinuxSecretToolStore {
+    name = "the Secret Service (secret-tool)";
+    async isAvailable() {
+        return process.platform === "linux" && (await commandExists("secret-tool"));
+    }
+    async save(session) {
+        await execFileText("secret-tool", ["store", "--label=whatcha CLI session", "service", SERVICE, "account", ACCOUNT], JSON.stringify(session));
+    }
+    async load() {
+        try {
+            const out = await execFileText("secret-tool", ["lookup", "service", SERVICE, "account", ACCOUNT]);
+            const trimmed = out.trim();
+            return trimmed ? JSON.parse(trimmed) : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async clear() {
+        try {
+            await execFileText("secret-tool", ["clear", "service", SERVICE, "account", ACCOUNT]);
+        }
+        catch {
+            // Nothing stored.
+        }
+    }
+}
+/**
+ * The fallback the task asks for by name: a 0600 file under the config dir.
+ * Always available, so it is always last in the candidate list and never
+ * itself falls back to anything.
+ */
+class FileTokenStore {
+    name = `file (${(0, config_1.credentialsFilePath)()})`;
+    async isAvailable() {
+        return true;
+    }
+    async save(session) {
+        const file = (0, config_1.credentialsFilePath)();
+        await promises_1.default.mkdir(node_path_1.default.dirname(file), { recursive: true, mode: 0o700 });
+        await promises_1.default.writeFile(file, JSON.stringify(session, null, 2), { mode: 0o600 });
+        // Belt and suspenders: writeFile's mode only applies when it creates the
+        // file. An existing file (re-login) keeps whatever mode it already had,
+        // so set it explicitly every time.
+        await promises_1.default.chmod(file, 0o600);
+    }
+    async load() {
+        try {
+            const text = await promises_1.default.readFile((0, config_1.credentialsFilePath)(), "utf8");
+            return JSON.parse(text);
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return null;
+            throw err;
+        }
+    }
+    async clear() {
+        await promises_1.default.rm((0, config_1.credentialsFilePath)(), { force: true });
+    }
+}
+exports.FileTokenStore = FileTokenStore;
+/**
+ * Platform-appropriate OS store first, file store always last. `save`
+ * picks the first available candidate and actually uses it; if that
+ * candidate's `save` throws (keychain present but locked, no Secret
+ * Service running, etc.) the caller falls back to the next one -- see
+ * `saveSession` in auth/session.ts, which is what prints "saved to <store
+ * name>" and is what tests/token-store.test.ts exercises.
+ */
+function candidateStores() {
+    const stores = [];
+    if (process.platform === "darwin")
+        stores.push(new MacKeychainStore());
+    if (process.platform === "linux")
+        stores.push(new LinuxSecretToolStore());
+    stores.push(new FileTokenStore());
+    return stores;
+}
+//# sourceMappingURL=token-store.js.map

package/dist/auth/token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../../src/auth/token-store.ts"],"names":[],"mappings":";;;;;;AA8LA,0CAMC;AApMD,2DAA8C;AAC9C,gEAAkC;AAClC,0DAA6B;AAC7B,sCAAgD;AAgChD,SAAS,YAAY,CAAC,GAAW,EAAE,IAAc,EAAE,KAAc;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,6BAAQ,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9F,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B;;;;;;;GAOG;AACH,MAAM,gBAAgB;IACX,IAAI,GAAG,gBAAgB,CAAC;IAEjC,KAAK,CAAC,WAAW;QACf,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB;QAC/B,uEAAuE;QACvE,MAAM,YAAY,CAAC,UAAU,EAAE;YAC7B,sBAAsB;YACtB,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1G,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,oBAAoB;IACf,IAAI,GAAG,kCAAkC,CAAC;IAEnD,KAAK,CAAC,WAAW;QACf,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB;QAC/B,MAAM,YAAY,CAChB,aAAa,EACb,CAAC,OAAO,EAAE,6BAA6B,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAChF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAClG,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAa,cAAc;IAChB,IAAI,GAAG,SAAS,IAAA,4BAAmB,GAAE,GAAG,CAAC;IAElD,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB;QAC/B,MAAM,IAAI,GAAG,IAAA,4BAAmB,GAAE,CAAC;QACnC,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,4BAAmB,GAAE,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAA,4BAAmB,GAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AA9BD,wCA8BC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe;IAC7B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const errors_1 = require("./errors");
+const login_1 = require("./commands/login");
+const diaries_1 = require("./commands/diaries");
+const write_1 = require("./commands/write");
+const read_1 = require("./commands/read");
+const profiles_1 = require("./commands/profiles");
+const output_1 = require("./lib/output");
+const USAGE = `whatcha -- command-line client for what-are-you-do-ing
+
+Usage:
+  whatcha login [--email <email>] [--password <password>] [--json]
+  whatcha login --token <refresh-token> [--json]
+  whatcha diaries [--json]
+  whatcha write <diary> --text "..." [--time HH:MM] [--date YYYY-MM-DD] [--json]
+  whatcha read <diary> [--date YYYY-MM-DD] [--json]
+  whatcha profiles [--json]
+  whatcha switch <@handle> [--json]
+  whatcha switch --account [--json]
+  whatcha profile-rm <@handle> [--json]
+
+Every command accepts --json for machine-readable output.
+Credentials for login can also come from WHATCHA_EMAIL / WHATCHA_PASSWORD,
+or WHATCHA_TOKEN for a pre-issued refresh token (see README.md -- this is
+the escape hatch for a headless machine that cannot pass a captcha
+challenge, issue #1428).
+`;
+/**
+ * The whole CLI as one testable function: argv in, exit code out, nothing
+ * printed that isn't part of the documented contract. index.ts is the only
+ * thing that calls this against real process.argv/exit -- everything in
+ * tests/cli.test.ts calls it directly with a fake argv instead.
+ */
+async function run(argv) {
+    const [command, ...rest] = argv;
+    if (!command || command === "--help" || command === "-h") {
+        process.stdout.write(USAGE);
+        return command ? 0 : 1;
+    }
+    if (command === "--version") {
+        // require() rather than an import so this stays the one place that
+        // touches package.json -- no build-time JSON import wiring needed.
+        process.stdout.write(`${require("../package.json").version}\n`);
+        return 0;
+    }
+    // Only used to decide how to *format* a parse-time error below, before a
+    // command has had a chance to parse --json itself -- not a substitute for
+    // each command's own parseArgs, which is what actually validates it.
+    const wantsJson = rest.includes("--json");
+    try {
+        switch (command) {
+            case "login":
+                return (await (0, login_1.runLogin)((0, login_1.parseLoginArgs)(rest))).exitCode;
+            case "diaries":
+                return (await (0, diaries_1.runDiaries)((0, diaries_1.parseDiariesArgs)(rest))).exitCode;
+            case "write":
+                return (await (0, write_1.runWrite)((0, write_1.parseWriteArgs)(rest))).exitCode;
+            case "read":
+                return (await (0, read_1.runRead)((0, read_1.parseReadArgs)(rest))).exitCode;
+            // Sub-accounts (#1538). After a switch every command above acts as
+            // the profile switched into -- the saved session simply is it.
+            case "profiles":
+                return (await (0, profiles_1.runProfiles)((0, profiles_1.parseProfilesArgs)(rest))).exitCode;
+            case "switch":
+                return (await (0, profiles_1.runSwitch)((0, profiles_1.parseSwitchArgs)(rest))).exitCode;
+            case "profile-rm":
+                return (await (0, profiles_1.runRemove)((0, profiles_1.parseRemoveArgs)(rest))).exitCode;
+            default:
+                throw new errors_1.CliUsageError(`Unknown command "${command}". Run \`whatcha --help\` for usage.`);
+        }
+    }
+    catch (err) {
+        return reportError(err, wantsJson);
+    }
+}
+function reportError(err, wantsJson) {
+    if (err instanceof errors_1.CliUsageError) {
+        if (wantsJson)
+            (0, output_1.printJson)({ ok: false, error: { code: "USAGE", message: err.message } });
+        else
+            (0, output_1.printErrorLine)(err.message);
+        return 1;
+    }
+    if (err instanceof errors_1.ApiError) {
+        if (wantsJson)
+            (0, output_1.printJson)({ ok: false, error: { code: err.code, message: err.message } });
+        else
+            (0, output_1.printErrorLine)(`${err.code}: ${err.message}`);
+        return 1;
+    }
+    // Anything else is a bug in this CLI, not a user or API problem --
+    // surfaced in full (never swallowed), but still never as a raw uncaught
+    // exception stack trace to stdout in --json mode.
+    const message = err instanceof Error ? err.message : String(err);
+    if (wantsJson)
+        (0, output_1.printJson)({ ok: false, error: { code: "INTERNAL", message } });
+    else
+        (0, output_1.printErrorLine)(`whatcha: internal error: ${message}`);
+    return 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AAyCA,kBA2CC;AApFD,qCAAmD;AACnD,4CAA4D;AAC5D,gDAAkE;AAClE,4CAA4D;AAC5D,0CAAyD;AACzD,kDAO6B;AAC7B,yCAAyD;AAEzD,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;CAkBb,CAAC;AAEF;;;;;GAKG;AACI,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,mEAAmE;QACnE,mEAAmE;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,IAAI,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO;gBACV,OAAO,CAAC,MAAM,IAAA,gBAAQ,EAAC,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,KAAK,SAAS;gBACZ,OAAO,CAAC,MAAM,IAAA,oBAAU,EAAC,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7D,KAAK,OAAO;gBACV,OAAO,CAAC,MAAM,IAAA,gBAAQ,EAAC,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,KAAK,MAAM;gBACT,OAAO,CAAC,MAAM,IAAA,cAAO,EAAC,IAAA,oBAAa,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvD,mEAAmE;YACnE,+DAA+D;YAC/D,KAAK,UAAU;gBACb,OAAO,CAAC,MAAM,IAAA,sBAAW,EAAC,IAAA,4BAAiB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/D,KAAK,QAAQ;gBACX,OAAO,CAAC,MAAM,IAAA,oBAAS,EAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D,KAAK,YAAY;gBACf,OAAO,CAAC,MAAM,IAAA,oBAAS,EAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D;gBACE,MAAM,IAAI,sBAAa,CAAC,oBAAoB,OAAO,sCAAsC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,SAAkB;IACnD,IAAI,GAAG,YAAY,sBAAa,EAAE,CAAC;QACjC,IAAI,SAAS;YAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;;YACnF,IAAA,uBAAc,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,YAAY,iBAAQ,EAAE,CAAC;QAC5B,IAAI,SAAS;YAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;;YACpF,IAAA,uBAAc,EAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,SAAS;QAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;;QACzE,IAAA,uBAAc,EAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/diaries.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDiariesArgs = parseDiariesArgs;
+exports.runDiaries = runDiaries;
+const node_util_1 = require("node:util");
+const session_1 = require("../auth/session");
+const errors_1 = require("../errors");
+const diary_resolve_1 = require("../lib/diary-resolve");
+const output_1 = require("../lib/output");
+function parseDiariesArgs(argv) {
+    let values;
+    try {
+        ({ values } = (0, node_util_1.parseArgs)({
+            args: argv,
+            options: { json: { type: "boolean", default: false } },
+            allowPositionals: false,
+        }));
+    }
+    catch (err) {
+        throw new errors_1.CliUsageError(err.message);
+    }
+    return { json: values.json };
+}
+async function runDiaries(opts, deps = {}) {
+    const client = deps.client ?? (await (0, session_1.authenticatedClient)()).client;
+    const diaries = await (0, diary_resolve_1.listAllDiaries)(client);
+    if (opts.json) {
+        (0, output_1.printJson)({ ok: true, diaries });
+        return { exitCode: 0 };
+    }
+    if (diaries.length === 0) {
+        (0, output_1.printLine)("No diaries.");
+        return { exitCode: 0 };
+    }
+    for (const d of diaries) {
+        const entries = d.entryCount === 1 ? "1 entry" : `${d.entryCount} entries`;
+        (0, output_1.printLine)(`${d.id}  ${d.name}  [${d.groupName}]  ${entries}  tz=${d.timezone}`);
+    }
+    return { exitCode: 0 };
+}
+//# sourceMappingURL=diaries.js.map

package/dist/commands/diaries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diaries.js","sourceRoot":"","sources":["../../src/commands/diaries.ts"],"names":[],"mappings":";;AAWA,4CAYC;AAED,gCAqBC;AA9CD,yCAAsC;AACtC,6CAAsD;AACtD,sCAA0C;AAE1C,wDAAsD;AACtD,0CAAqD;AAMrD,SAAgB,gBAAgB,CAAC,IAAc;IAC7C,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAS,EAAC;YACtB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACtD,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAa,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAe,EAAE,CAAC;AAC1C,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,IAAoB,EACpB,OAAmC,EAAE;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAA,6BAAmB,GAAE,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,OAAO,GAAG,MAAM,IAAA,8BAAc,EAAC,MAAM,CAAC,CAAC;IAE7C,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAA,kBAAS,EAAC,aAAa,CAAC,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,UAAU,CAAC;QAC3E,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,MAAM,OAAO,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC"}

package/dist/commands/login.js

@@ -0,0 +1,217 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseLoginArgs = parseLoginArgs;
+exports.runLogin = runLogin;
+const node_util_1 = require("node:util");
+const node_readline_1 = __importDefault(require("node:readline"));
+const session_1 = require("../auth/session");
+const config_1 = require("../config");
+const errors_1 = require("../errors");
+const token_store_1 = require("../auth/token-store");
+const gotrue_client_1 = require("../auth/gotrue-client");
+const jwt_1 = require("../lib/jwt");
+const output_1 = require("../lib/output");
+function parseLoginArgs(argv) {
+    let values;
+    try {
+        ({ values } = (0, node_util_1.parseArgs)({
+            args: argv,
+            options: {
+                json: { type: "boolean", default: false },
+                email: { type: "string" },
+                password: { type: "string" },
+                token: { type: "string" },
+                "api-url": { type: "string" },
+            },
+            allowPositionals: false,
+        }));
+    }
+    catch (err) {
+        throw new errors_1.CliUsageError(err.message);
+    }
+    return {
+        json: values.json,
+        email: values.email,
+        password: values.password,
+        token: values.token,
+        apiUrl: values["api-url"] ?? (0, config_1.apiBaseUrl)(),
+    };
+}
+/** Masked stdin prompt -- readline has no built-in for this, so each keystroke is intercepted and only a literal newline is let through to the terminal. */
+function promptHidden(question) {
+    return new Promise((resolve) => {
+        const rl = node_readline_1.default.createInterface({ input: process.stdin, output: process.stdout });
+        const rlWithOutput = rl;
+        const originalWrite = rlWithOutput._writeToOutput?.bind(rl);
+        let hidden = false;
+        rlWithOutput._writeToOutput = (str) => {
+            if (!hidden)
+                originalWrite?.(str);
+        };
+        rl.question(question, (answer) => {
+            rl.close();
+            process.stdout.write("\n");
+            resolve(answer);
+        });
+        hidden = true;
+    });
+}
+function prompt(question) {
+    return new Promise((resolve) => {
+        const rl = node_readline_1.default.createInterface({ input: process.stdin, output: process.stdout });
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer);
+        });
+    });
+}
+/**
+ * Non-interactive credentials, for the exact audience this CLI is for: an
+ * AI agent (or a script) invoking `whatcha` as a subprocess has no TTY to
+ * answer an interactive prompt at. `--email`/`--password` and
+ * `WHATCHA_EMAIL`/`WHATCHA_PASSWORD` are the same idea twice -- flags for a
+ * one-off, env vars for something that runs `whatcha login` from a config
+ * it does not want to put a password directly into.
+ */
+async function resolveCredentials(opts) {
+    const email = opts.email ?? process.env.WHATCHA_EMAIL ?? (await prompt("Email: "));
+    const password = opts.password ?? process.env.WHATCHA_PASSWORD ?? (await promptHidden("Password: "));
+    if (!email || !password)
+        throw new errors_1.CliUsageError("Both an email and a password are required.");
+    return { email, password };
+}
+async function runLogin(opts, deps = {}) {
+    const token = opts.token ?? process.env.WHATCHA_TOKEN;
+    if (token)
+        return finishLogin(await loginWithToken(opts, deps, token), opts, deps);
+    const { email, password } = deps.credentials ?? (await resolveCredentials(opts));
+    const supabase = (0, config_1.supabaseCredentials)();
+    try {
+        const session = supabase
+            ? await loginWithPasswordViaGoTrue(supabase, email, password)
+            : await loginWithPasswordViaApi(opts, deps, email, password);
+        return finishLogin(session, opts, deps);
+    }
+    catch (err) {
+        return reportRefusal(err, opts);
+    }
+}
+/**
+ * The escape hatch issue #1428 asks for: skip the password grant (and
+ * whatever captcha it is gated behind) entirely by handing `whatcha` a
+ * refresh token minted some other way -- by an ops flow, a support-issued
+ * token, or a browser sign-in on a device that could actually solve the
+ * challenge. `POST /auth/refresh` is GoTrue's own rotation and is not
+ * captcha-gated (openapi.yaml's /auth/refresh), so this is the one login
+ * path that does not depend on Turnstile letting an automated caller
+ * through at all -- verified against openapi.yaml's documented contract,
+ * not against a live server (no test account for this task -- see the PR
+ * description).
+ *
+ * `/auth/refresh` returns no user info, so the id/email shown to the
+ * person come from decoding the access token's own JWT payload -- display
+ * only, not a trust decision (the server verifies the token on every real
+ * request regardless of what this reads out of it).
+ */
+async function loginWithToken(opts, deps, refreshToken) {
+    const anon = deps.client ?? (0, session_1.anonymousClient)(opts.apiUrl);
+    let refreshed;
+    try {
+        refreshed = await anon.post("/auth/refresh", { refreshToken });
+    }
+    catch (err) {
+        throw new errors_1.CliUsageError("That token could not be used to start a session (it may be expired, already rotated, or not a " +
+            `refresh token at all). ${err instanceof errors_1.ApiError ? err.message : err.message}`);
+    }
+    const claims = (0, jwt_1.decodeJwtPayloadUnsafe)(refreshed.accessToken);
+    return {
+        userId: typeof claims?.sub === "string" ? claims.sub : "(unknown)",
+        email: typeof claims?.email === "string" ? claims.email : null,
+        accessToken: refreshed.accessToken,
+        refreshToken: refreshed.refreshToken,
+        expiresIn: refreshed.expiresIn,
+    };
+}
+/** Opt-in direct-GoTrue path -- see auth/gotrue-client.ts's header comment for why this needs WHATCHA_SUPABASE_URL/WHATCHA_SUPABASE_ANON_KEY set. */
+async function loginWithPasswordViaGoTrue(supabase, email, password) {
+    const res = await (0, gotrue_client_1.signInWithPassword)(supabase.url, supabase.anonKey, email, password);
+    return {
+        userId: res.userId,
+        email: res.email,
+        accessToken: res.accessToken,
+        refreshToken: res.refreshToken,
+        expiresIn: res.expiresIn,
+    };
+}
+/**
+ * Default path: `POST /auth/login`, the API's own thin wrapper over the
+ * same GoTrue password grant (apps/api/src/modules/account/routes/auth.ts).
+ * It collapses *every* GoTrue failure into one generic 401
+ * INVALID_CREDENTIALS -- wrong password, unverified email, and a Turnstile
+ * captcha rejection all read identically from here, because the route only
+ * checks `status >= 400` and never looks at the GoTrue error body. See
+ * reportRefusal for what the CLI can and cannot tell the person because of
+ * that.
+ */
+async function loginWithPasswordViaApi(opts, deps, email, password) {
+    const client = deps.client ?? (0, session_1.anonymousClient)(opts.apiUrl);
+    const res = await client.post("/auth/login", { email, password });
+    return {
+        userId: res.user.id,
+        email: res.user.email ?? email,
+        accessToken: res.accessToken,
+        refreshToken: res.refreshToken,
+        expiresIn: res.expiresIn,
+    };
+}
+function reportRefusal(err, opts) {
+    let message;
+    if (err instanceof gotrue_client_1.GoTrueError) {
+        // The direct-GoTrue path: its error body actually says whether this was
+        // a captcha rejection, unlike /auth/login's generic 401.
+        message = err.looksLikeCaptchaFailure()
+            ? "Sign-in needs a captcha challenge (Cloudflare Turnstile) that this terminal cannot solve " +
+                "(issue #1428). This account needs a token issued another way -- ask whoever manages it to sign " +
+                "in once from a browser that can pass the challenge, then run `whatcha login --token <refresh-token>` " +
+                "or set WHATCHA_TOKEN, instead of retrying a password sign-in here."
+            : `Sign-in was refused: ${err.message}`;
+    }
+    else if (err instanceof errors_1.ApiError && err.status === 401) {
+        message =
+            "Sign-in was refused. This could be a wrong email/password, or it could be that GoTrue is demanding " +
+                "a captcha challenge (Cloudflare Turnstile) this terminal cannot solve (issue #1428) -- /auth/login " +
+                "answers both the same generic way, so whatcha cannot tell them apart here. If the password is right, " +
+                "do not keep retrying it: this account needs a token issued another way. Sign in once from a browser " +
+                "that can pass the challenge, then run `whatcha login --token <refresh-token>` or set WHATCHA_TOKEN.";
+    }
+    else {
+        throw err;
+    }
+    if (opts.json)
+        (0, output_1.printJson)({ ok: false, error: { code: "LOGIN_REFUSED", message } });
+    else
+        (0, output_1.printErrorLine)(message);
+    return { exitCode: 1 };
+}
+async function finishLogin(session, opts, deps) {
+    const { store } = await (0, session_1.saveSession)({
+        apiBaseUrl: opts.apiUrl,
+        userId: session.userId,
+        email: session.email,
+        accessToken: session.accessToken,
+        refreshToken: session.refreshToken,
+        expiresAt: Date.now() + session.expiresIn * 1000,
+    }, deps.stores ?? (0, token_store_1.candidateStores)());
+    // Never the tokens themselves -- see lib/output.ts's header comment.
+    if (opts.json) {
+        (0, output_1.printJson)({ ok: true, userId: session.userId, email: session.email, credentialStore: store.name });
+    }
+    else {
+        (0, output_1.printLine)(`Logged in as ${session.email ?? session.userId}. Session saved to ${store.name}.`);
+    }
+    return { exitCode: 0 };
+}
+//# sourceMappingURL=login.js.map

package/dist/commands/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../src/commands/login.ts"],"names":[],"mappings":";;;;;AAqBA,wCAwBC;AAgED,4BAeC;AA5HD,yCAAsC;AACtC,kEAAqC;AACrC,6CAA+D;AAC/D,sCAA4D;AAC5D,sCAAoD;AAEpD,qDAAkE;AAClE,yDAAwE;AACxE,oCAAoD;AAEpD,0CAAqE;AAWrE,SAAgB,cAAc,CAAC,IAAc;IAC3C,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAS,EAAC;YACtB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE;gBACzC,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;aAC9B;YACD,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAa,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAe;QAC5B,KAAK,EAAE,MAAM,CAAC,KAA2B;QACzC,QAAQ,EAAE,MAAM,CAAC,QAA8B;QAC/C,KAAK,EAAE,MAAM,CAAC,KAA2B;QACzC,MAAM,EAAG,MAAM,CAAC,SAAS,CAAwB,IAAI,IAAA,mBAAU,GAAE;KAClE,CAAC;AACJ,CAAC;AAED,4JAA4J;AAC5J,SAAS,YAAY,CAAC,QAAgB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,uBAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAKtF,MAAM,YAAY,GAAG,EAA8B,CAAC;QACpD,MAAM,aAAa,GAAG,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5D,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,YAAY,CAAC,cAAc,GAAG,CAAC,GAAW,EAAE,EAAE;YAC5C,IAAI,CAAC,MAAM;gBAAE,aAAa,EAAE,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC,CAAC;QACF,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,MAAM,CAAC,QAAgB;IAC9B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,uBAAQ,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACtF,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,EAAE;YAC/B,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,kBAAkB,CAAC,IAAkB;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAa,CAAC,4CAA4C,CAAC,CAAC;IAC/F,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAgBM,KAAK,UAAU,QAAQ,CAAC,IAAkB,EAAE,OAAa,EAAE;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IACtD,IAAI,KAAK;QAAE,OAAO,WAAW,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAEnF,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,IAAA,4BAAmB,GAAE,CAAC;IAEvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,QAAQ;YACtB,CAAC,CAAC,MAAM,0BAA0B,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC;YAC7D,CAAC,CAAC,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC/D,OAAO,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,KAAK,UAAU,cAAc,CAAC,IAAkB,EAAE,IAAU,EAAE,YAAoB;IAChF,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,IAAA,yBAAe,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzD,IAAI,SAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,eAAe,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAa,CACrB,gGAAgG;YAC9F,0BAA0B,GAAG,YAAY,iBAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,4BAAsB,EAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7D,OAAO;QACL,MAAM,EAAE,OAAO,MAAM,EAAE,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW;QAClE,KAAK,EAAE,OAAO,MAAM,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAC9D,WAAW,EAAE,SAAS,CAAC,WAAW;QAClC,YAAY,EAAE,SAAS,CAAC,YAAY;QACpC,SAAS,EAAE,SAAS,CAAC,SAAS;KAC/B,CAAC;AACJ,CAAC;AAED,qJAAqJ;AACrJ,KAAK,UAAU,0BAA0B,CACvC,QAA0C,EAC1C,KAAa,EACb,QAAgB;IAEhB,MAAM,GAAG,GAAG,MAAM,IAAA,kCAAkB,EAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtF,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAkB,EAClB,IAAU,EACV,KAAa,EACb,QAAgB;IAEhB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAA,yBAAe,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAK1B,aAAa,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvC,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE;QACnB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK;QAC9B,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,SAAS,EAAE,GAAG,CAAC,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,GAAY,EAAE,IAAkB;IACrD,IAAI,OAAe,CAAC;IACpB,IAAI,GAAG,YAAY,2BAAW,EAAE,CAAC;QAC/B,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,GAAG,GAAG,CAAC,uBAAuB,EAAE;YACrC,CAAC,CAAC,2FAA2F;gBAC3F,iGAAiG;gBACjG,uGAAuG;gBACvG,oEAAoE;YACtE,CAAC,CAAC,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC;SAAM,IAAI,GAAG,YAAY,iBAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzD,OAAO;YACL,qGAAqG;gBACrG,qGAAqG;gBACrG,uGAAuG;gBACvG,sGAAsG;gBACtG,qGAAqG,CAAC;IAC1G,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI;QAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;;QAC9E,IAAA,uBAAc,EAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,OAAgB,EAAE,IAAkB,EAAE,IAAU;IACzE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAA,qBAAW,EACjC;QACE,UAAU,EAAE,IAAI,CAAC,MAAM;QACvB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI;KACjD,EACD,IAAI,CAAC,MAAM,IAAI,IAAA,6BAAe,GAAE,CACjC,CAAC;IAEF,qEAAqE;IACrE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACrG,CAAC;SAAM,CAAC;QACN,IAAA,kBAAS,EAAC,gBAAgB,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,sBAAsB,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC"}