@whatcha/cli 0.0.0-stage → 0.3.0

package/dist/auth/session.js

@@ -0,0 +1,147 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeyErrorClient = void 0;
+exports.saveSession = saveSession;
+exports.loadSession = loadSession;
+exports.clearSession = clearSession;
+exports.authenticatedClient = authenticatedClient;
+exports.personalAccessTokenClient = personalAccessTokenClient;
+exports.anonymousClient = anonymousClient;
+const http_client_1 = require("../http-client");
+const config_1 = require("../config");
+const errors_1 = require("../errors");
+const personal_access_token_1 = require("../lib/personal-access-token");
+const token_store_1 = require("./token-store");
+/** Refresh this many seconds before actual expiry, so a call in flight does not race the token dying mid-request. */
+const REFRESH_MARGIN_SECONDS = 60;
+/**
+ * Tries each candidate store in order (OS keychain first where one exists
+ * for the platform, the 0600 file always last) and uses the first one that
+ * actually accepts the write. A keychain that exists but is locked, or a
+ * Secret Service that is not running, throws on `save` rather than on
+ * `isAvailable` -- both are caught here, not just the availability check.
+ */
+async function saveSession(session, stores = (0, token_store_1.candidateStores)()) {
+    const errors = [];
+    for (const store of stores) {
+        if (!(await store.isAvailable()))
+            continue;
+        try {
+            await store.save(session);
+            return { store };
+        }
+        catch (err) {
+            errors.push(`${store.name}: ${err.message}`);
+        }
+    }
+    throw new Error(`Could not save the session to any credential store. Tried:\n${errors.join("\n")}`);
+}
+/** First candidate store that actually has a session, or null if none do. */
+async function loadSession(stores = (0, token_store_1.candidateStores)()) {
+    for (const store of stores) {
+        if (!(await store.isAvailable()))
+            continue;
+        const session = await store.load();
+        if (session)
+            return session;
+    }
+    return null;
+}
+/** Best-effort clear from every candidate, not just whichever one currently holds the session -- avoids a stale copy surviving a store switch. */
+async function clearSession(stores = (0, token_store_1.candidateStores)()) {
+    for (const store of stores) {
+        if (await store.isAvailable())
+            await store.clear();
+    }
+}
+/**
+ * A client wired to a saved session, refreshing the access token first if
+ * it is at or near expiry. Every command but `login` starts here.
+ *
+ * Throws CliUsageError (not ApiError) when there is no session or the
+ * refresh itself fails -- both are "run `whatcha login`" situations, not
+ * something a command should try to recover from.
+ */
+async function authenticatedClient(stores = (0, token_store_1.candidateStores)()) {
+    let session = await loadSession(stores);
+    if (!session) {
+        throw new errors_1.CliUsageError("Not logged in. Run `whatcha login` first.");
+    }
+    const baseUrl = session.apiBaseUrl || (0, config_1.apiBaseUrl)();
+    if (session.authKind === "key") {
+        // A personal access key is the Bearer itself: nothing to refresh, and
+        // its refusals are reworded as the key's (KEY_REVOKED / KEY_EXPIRED).
+        return { client: personalAccessTokenClient(baseUrl, session.accessToken), session };
+    }
+    const nowSeconds = Date.now() / 1000;
+    if (session.expiresAt / 1000 - nowSeconds < REFRESH_MARGIN_SECONDS) {
+        const anon = new http_client_1.FetchWhatchaClient(baseUrl, async () => undefined);
+        let refreshed;
+        try {
+            refreshed = await anon.post("/auth/refresh", { refreshToken: session.refreshToken });
+        }
+        catch {
+            throw new errors_1.CliUsageError("The saved session has expired and could not be refreshed. Run `whatcha login` again.");
+        }
+        session = {
+            ...session,
+            accessToken: refreshed.accessToken,
+            refreshToken: refreshed.refreshToken,
+            expiresAt: Date.now() + refreshed.expiresIn * 1000,
+        };
+        // Best-effort: a save failure here must not fail the command that
+        // triggered the refresh -- worst case, the next command refreshes
+        // again. Whichever store answered `load()` above is where this goes
+        // back to.
+        await saveSession(session, stores).catch(() => undefined);
+    }
+    const client = new http_client_1.FetchWhatchaClient(baseUrl, async () => `Bearer ${session.accessToken}`);
+    return { client, session };
+}
+/**
+ * A client that sends a personal access key (#1663) as its Bearer and
+ * reports a 401 as the key's problem -- see lib/personal-access-token.ts.
+ */
+function personalAccessTokenClient(baseUrl, key) {
+    return new KeyErrorClient(new http_client_1.FetchWhatchaClient(baseUrl, async () => `Bearer ${key}`));
+}
+/** Wraps any client so a 401 reads as KEY_REVOKED/KEY_EXPIRED. Exported for tests. */
+class KeyErrorClient {
+    inner;
+    constructor(inner) {
+        this.inner = inner;
+    }
+    wrap(p) {
+        return p.catch((err) => {
+            throw (0, personal_access_token_1.translateKeyError)(err);
+        });
+    }
+    get(path, query) {
+        return this.wrap(this.inner.get(path, query));
+    }
+    post(path, body) {
+        return this.wrap(this.inner.post(path, body));
+    }
+    put(path, body) {
+        return this.wrap(this.inner.put(path, body));
+    }
+    patch(path, body) {
+        return this.wrap(this.inner.patch(path, body));
+    }
+    delete(path) {
+        return this.wrap(this.inner.delete(path));
+    }
+    getPage(path, query) {
+        return this.wrap(this.inner.getPage(path, query));
+    }
+    /** Not wrapped: the signed URL carries no key, so its 401/403 is never the key's. */
+    putBytes(url, headers, bytes) {
+        return this.inner.putBytes(url, headers, bytes);
+    }
+}
+exports.KeyErrorClient = KeyErrorClient;
+/** An unauthenticated client for `/auth/login` itself, or for `--api-url` probing. */
+function anonymousClient(baseUrl = (0, config_1.apiBaseUrl)()) {
+    return new http_client_1.FetchWhatchaClient(baseUrl, async () => undefined);
+}
+//# sourceMappingURL=session.js.map

package/dist/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":";;;AAqBA,kCAYC;AAGD,kCAOC;AAGD,oCAIC;AAUD,kDAyCC;AAMD,8DAEC;AAmCD,0CAEC;AAlJD,gDAAyE;AACzE,sCAAuC;AACvC,sCAA0C;AAC1C,wEAAiE;AAEjE,+CAA2E;AAE3E,qHAAqH;AACrH,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAMlC;;;;;;GAMG;AACI,KAAK,UAAU,WAAW,CAAC,OAAsB,EAAE,SAAuB,IAAA,6BAAe,GAAE;IAChG,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,EAAE,KAAK,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAM,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+DAA+D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtG,CAAC;AAED,6EAA6E;AACtE,KAAK,UAAU,WAAW,CAAC,SAAuB,IAAA,6BAAe,GAAE;IACxE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;YAAE,SAAS;QAC3C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,OAAO;YAAE,OAAO,OAAO,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kJAAkJ;AAC3I,KAAK,UAAU,YAAY,CAAC,SAAuB,IAAA,6BAAe,GAAE;IACzE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,MAAM,KAAK,CAAC,WAAW,EAAE;YAAE,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;IACrD,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CAAC,SAAuB,IAAA,6BAAe,GAAE;IAIhF,IAAI,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,sBAAa,CAAC,2CAA2C,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,IAAA,mBAAU,GAAE,CAAC;IAEnD,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC/B,sEAAsE;QACtE,sEAAsE;QACtE,OAAO,EAAE,MAAM,EAAE,yBAAyB,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;IACtF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACrC,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,GAAG,UAAU,GAAG,sBAAsB,EAAE,CAAC;QACnE,MAAM,IAAI,GAAG,IAAI,gCAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,SAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAgB,eAAe,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QACtG,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,sBAAa,CAAC,sFAAsF,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,GAAG;YACR,GAAG,OAAO;YACV,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,SAAS,GAAG,IAAI;SACnD,CAAC;QACF,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,WAAW;QACX,MAAM,WAAW,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,gCAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,OAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,OAAe,EAAE,GAAW;IACpE,OAAO,IAAI,cAAc,CAAC,IAAI,gCAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,sFAAsF;AACtF,MAAa,cAAc;IACI;IAA7B,YAA6B,KAAoB;QAApB,UAAK,GAAL,KAAK,CAAe;IAAG,CAAC;IAC7C,IAAI,CAAI,CAAa;QAC3B,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAC9B,MAAM,IAAA,yCAAiB,EAAC,GAAG,CAAC,CAAC;QAC/B,CAAC,CAAC,CAAC;IACL,CAAC;IACD,GAAG,CAAI,IAAY,EAAE,KAA0C;QAC7D,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,CAAI,IAAY,EAAE,IAAc;QAClC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,GAAG,CAAI,IAAY,EAAE,IAAc;QACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,KAAK,CAAI,IAAY,EAAE,IAAc;QACnC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,CAAI,IAAY;QACpB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAI,IAAI,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,CAAI,IAAY,EAAE,KAA0C;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,qFAAqF;IACrF,QAAQ,CAAC,GAAW,EAAE,OAA+B,EAAE,KAAiB;QACtE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC;CACF;AA7BD,wCA6BC;AAED,sFAAsF;AACtF,SAAgB,eAAe,CAAC,UAAkB,IAAA,mBAAU,GAAE;IAC5D,OAAO,IAAI,gCAAkB,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC;AAChE,CAAC"}

package/dist/auth/token-store.js

@@ -0,0 +1,165 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileTokenStore = void 0;
+exports.candidateStores = candidateStores;
+const node_child_process_1 = require("node:child_process");
+const promises_1 = __importDefault(require("node:fs/promises"));
+const node_path_1 = __importDefault(require("node:path"));
+const config_1 = require("../config");
+function execFileText(cmd, args, input) {
+    return new Promise((resolve, reject) => {
+        const child = (0, node_child_process_1.execFile)(cmd, args, { encoding: "utf8", maxBuffer: 1024 * 1024 }, (err, stdout) => {
+            if (err)
+                reject(err);
+            else
+                resolve(stdout);
+        });
+        if (input !== undefined)
+            child.stdin?.end(input);
+    });
+}
+async function commandExists(cmd) {
+    try {
+        await execFileText(process.platform === "win32" ? "where" : "which", [cmd]);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+const SERVICE = "whatcha-cli";
+const ACCOUNT = "whatcha";
+/**
+ * macOS Keychain, via the `security` CLI (no native module -- `keytar` and
+ * friends need a node-gyp build per platform, which is a lot to ask of
+ * `npm ci` for one command most sessions never touch). The whole session
+ * (both tokens, the email, the expiry) is stored as one JSON blob under a
+ * single fixed account name; this is a one-account CLI, not a credential
+ * manager for several.
+ */
+class MacKeychainStore {
+    name = "macOS Keychain";
+    async isAvailable() {
+        return process.platform === "darwin" && (await commandExists("security"));
+    }
+    async save(session) {
+        // -U: update in place if an entry already exists, instead of erroring.
+        await execFileText("security", [
+            "add-generic-password",
+            "-a",
+            ACCOUNT,
+            "-s",
+            SERVICE,
+            "-w",
+            JSON.stringify(session),
+            "-U",
+        ]);
+    }
+    async load() {
+        try {
+            const out = await execFileText("security", ["find-generic-password", "-a", ACCOUNT, "-s", SERVICE, "-w"]);
+            return JSON.parse(out.trim());
+        }
+        catch {
+            return null;
+        }
+    }
+    async clear() {
+        try {
+            await execFileText("security", ["delete-generic-password", "-a", ACCOUNT, "-s", SERVICE]);
+        }
+        catch {
+            // Nothing stored -- clearing an already-empty store is not an error.
+        }
+    }
+}
+/**
+ * Linux, via `secret-tool` (libsecret) -- GNOME Keyring, KWallet's libsecret
+ * shim, etc. Only actually works when a secret service is running, which a
+ * plain SSH session or a container usually does not have; `isAvailable`
+ * only checks the binary exists, so a headless box falls through to the
+ * file store the first time `save` throws (see auth/session.ts).
+ */
+class LinuxSecretToolStore {
+    name = "the Secret Service (secret-tool)";
+    async isAvailable() {
+        return process.platform === "linux" && (await commandExists("secret-tool"));
+    }
+    async save(session) {
+        await execFileText("secret-tool", ["store", "--label=whatcha CLI session", "service", SERVICE, "account", ACCOUNT], JSON.stringify(session));
+    }
+    async load() {
+        try {
+            const out = await execFileText("secret-tool", ["lookup", "service", SERVICE, "account", ACCOUNT]);
+            const trimmed = out.trim();
+            return trimmed ? JSON.parse(trimmed) : null;
+        }
+        catch {
+            return null;
+        }
+    }
+    async clear() {
+        try {
+            await execFileText("secret-tool", ["clear", "service", SERVICE, "account", ACCOUNT]);
+        }
+        catch {
+            // Nothing stored.
+        }
+    }
+}
+/**
+ * The fallback the task asks for by name: a 0600 file under the config dir.
+ * Always available, so it is always last in the candidate list and never
+ * itself falls back to anything.
+ */
+class FileTokenStore {
+    name = `file (${(0, config_1.credentialsFilePath)()})`;
+    async isAvailable() {
+        return true;
+    }
+    async save(session) {
+        const file = (0, config_1.credentialsFilePath)();
+        await promises_1.default.mkdir(node_path_1.default.dirname(file), { recursive: true, mode: 0o700 });
+        await promises_1.default.writeFile(file, JSON.stringify(session, null, 2), { mode: 0o600 });
+        // Belt and suspenders: writeFile's mode only applies when it creates the
+        // file. An existing file (re-login) keeps whatever mode it already had,
+        // so set it explicitly every time.
+        await promises_1.default.chmod(file, 0o600);
+    }
+    async load() {
+        try {
+            const text = await promises_1.default.readFile((0, config_1.credentialsFilePath)(), "utf8");
+            return JSON.parse(text);
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                return null;
+            throw err;
+        }
+    }
+    async clear() {
+        await promises_1.default.rm((0, config_1.credentialsFilePath)(), { force: true });
+    }
+}
+exports.FileTokenStore = FileTokenStore;
+/**
+ * Platform-appropriate OS store first, file store always last. `save`
+ * picks the first available candidate and actually uses it; if that
+ * candidate's `save` throws (keychain present but locked, no Secret
+ * Service running, etc.) the caller falls back to the next one -- see
+ * `saveSession` in auth/session.ts, which is what prints "saved to <store
+ * name>" and is what tests/token-store.test.ts exercises.
+ */
+function candidateStores() {
+    const stores = [];
+    if (process.platform === "darwin")
+        stores.push(new MacKeychainStore());
+    if (process.platform === "linux")
+        stores.push(new LinuxSecretToolStore());
+    stores.push(new FileTokenStore());
+    return stores;
+}
+//# sourceMappingURL=token-store.js.map

package/dist/auth/token-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.js","sourceRoot":"","sources":["../../src/auth/token-store.ts"],"names":[],"mappings":";;;;;;AA2MA,0CAMC;AAjND,2DAA8C;AAC9C,gEAAkC;AAClC,0DAA6B;AAC7B,sCAAgD;AA6ChD,SAAS,YAAY,CAAC,GAAW,EAAE,IAAc,EAAE,KAAc;IAC/D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,IAAA,6BAAQ,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC9F,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;QACH,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW;IACtC,IAAI,CAAC;QACH,MAAM,YAAY,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,OAAO,GAAG,aAAa,CAAC;AAC9B,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B;;;;;;;GAOG;AACH,MAAM,gBAAgB;IACX,IAAI,GAAG,gBAAgB,CAAC;IAEjC,KAAK,CAAC,WAAW;QACf,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB;QAC/B,uEAAuE;QACvE,MAAM,YAAY,CAAC,UAAU,EAAE;YAC7B,sBAAsB;YACtB,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,OAAO;YACP,IAAI;YACJ,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACvB,IAAI;SACL,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAC1G,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,UAAU,EAAE,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAC5F,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;QACvE,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,oBAAoB;IACf,IAAI,GAAG,kCAAkC,CAAC;IAEnD,KAAK,CAAC,WAAW;QACf,OAAO,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB;QAC/B,MAAM,YAAY,CAChB,aAAa,EACb,CAAC,OAAO,EAAE,6BAA6B,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAChF,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;YAClG,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAmB,CAAC,CAAC,CAAC,IAAI,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC;YACH,MAAM,YAAY,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACP,kBAAkB;QACpB,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAa,cAAc;IAChB,IAAI,GAAG,SAAS,IAAA,4BAAmB,GAAE,GAAG,CAAC;IAElD,KAAK,CAAC,WAAW;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAsB;QAC/B,MAAM,IAAI,GAAG,IAAA,4BAAmB,GAAE,CAAC;QACnC,MAAM,kBAAE,CAAC,KAAK,CAAC,mBAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,MAAM,kBAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,yEAAyE;QACzE,wEAAwE;QACxE,mCAAmC;QACnC,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,QAAQ,CAAC,IAAA,4BAAmB,GAAE,EAAE,MAAM,CAAC,CAAC;YAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAkB,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAClE,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAA,4BAAmB,GAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,CAAC;CACF;AA9BD,wCA8BC;AAED;;;;;;;GAOG;AACH,SAAgB,eAAe;IAC7B,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,gBAAgB,EAAE,CAAC,CAAC;IACvE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IAC1E,MAAM,CAAC,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cli.js

@@ -0,0 +1,134 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.run = run;
+const errors_1 = require("./errors");
+const login_1 = require("./commands/login");
+const diaries_1 = require("./commands/diaries");
+const write_1 = require("./commands/write");
+const read_1 = require("./commands/read");
+const profiles_1 = require("./commands/profiles");
+const shared_diary_1 = require("./commands/shared-diary");
+const publish_1 = require("./commands/publish");
+const whoami_1 = require("./commands/whoami");
+const wiki_1 = require("./commands/wiki");
+const output_1 = require("./lib/output");
+const USAGE = `whatcha -- command-line client for what-are-you-do-ing
+
+Usage:
+  whatcha login [--email <email>] [--password <password>] [--json]
+  whatcha login --key <personal-access-key> [--json]
+  whatcha login --token <refresh-token> [--json]
+  whatcha whoami [--json]
+  whatcha diaries [--json]
+  whatcha diary-new <name> [--with <@handle>]... [--timezone <tz>] [--description "..."] [--json]
+  whatcha invite <diary> <@handle> [--json]
+  whatcha publish <diary> [--off] [--json]
+  whatcha write <diary> --text "..." [--title "..."] [--tag <tag>]... [--time HH:MM] [--date YYYY-MM-DD] [--json]
+  whatcha read <diary> [--date YYYY-MM-DD] [--json]
+  whatcha profiles [--json]
+  whatcha switch <@handle> [--json]
+  whatcha switch --account [--json]
+  whatcha profile-add <@handle> --name <display name> [--avatar <file>] [--json]
+  whatcha profile-rm <@handle> [--json]
+  whatcha wiki list [--search <text>] [--group <group-id>] [--limit N] [--cursor <c>] [--json]
+  whatcha wiki read <page> [--group <group-id>] [--json]
+  whatcha wiki write <page> --text "..." [--image <file>]... [--cover <file>] [--replace] [--message "..."] [--group <group-id>] [--json]
+  whatcha wiki cover <page> <file> | --clear [--group <group-id>] [--json]
+
+Every command accepts --json for machine-readable output.
+For scripts and servers, log in with a personal access key (issue one in
+Profile -> Connected apps and keys): --key, or WHATCHA_KEY. A key is used
+as-is, never refreshed, and stops working the moment it is revoked
+(error code KEY_REVOKED). Credentials for login can also come from
+WHATCHA_EMAIL / WHATCHA_PASSWORD, or WHATCHA_TOKEN for a refresh token
+(which may also hold a key).
+`;
+/**
+ * The whole CLI as one testable function: argv in, exit code out, nothing
+ * printed that isn't part of the documented contract. index.ts is the only
+ * thing that calls this against real process.argv/exit -- everything in
+ * tests/cli.test.ts calls it directly with a fake argv instead.
+ */
+async function run(argv) {
+    const [command, ...rest] = argv;
+    if (!command || command === "--help" || command === "-h") {
+        process.stdout.write(USAGE);
+        return command ? 0 : 1;
+    }
+    if (command === "--version") {
+        // require() rather than an import so this stays the one place that
+        // touches package.json -- no build-time JSON import wiring needed.
+        process.stdout.write(`${require("../package.json").version}\n`);
+        return 0;
+    }
+    // Only used to decide how to *format* a parse-time error below, before a
+    // command has had a chance to parse --json itself -- not a substitute for
+    // each command's own parseArgs, which is what actually validates it.
+    const wantsJson = rest.includes("--json");
+    try {
+        switch (command) {
+            case "login":
+                return (await (0, login_1.runLogin)((0, login_1.parseLoginArgs)(rest))).exitCode;
+            case "diaries":
+                return (await (0, diaries_1.runDiaries)((0, diaries_1.parseDiariesArgs)(rest))).exitCode;
+            // A diary written together, and putting it on the web (#1700, #1701).
+            case "diary-new":
+                return (await (0, shared_diary_1.runDiaryNew)((0, shared_diary_1.parseDiaryNewArgs)(rest))).exitCode;
+            case "invite":
+                return (await (0, shared_diary_1.runInvite)((0, shared_diary_1.parseInviteArgs)(rest))).exitCode;
+            case "publish":
+                return (await (0, publish_1.runPublish)((0, publish_1.parsePublishArgs)(rest))).exitCode;
+            case "write":
+                return (await (0, write_1.runWrite)((0, write_1.parseWriteArgs)(rest))).exitCode;
+            case "read":
+                return (await (0, read_1.runRead)((0, read_1.parseReadArgs)(rest))).exitCode;
+            case "whoami":
+                return (await (0, whoami_1.runWhoami)((0, whoami_1.parseWhoamiArgs)(rest))).exitCode;
+            // Experience Wiki (#1664). Public Square's pages, or a group's with
+            // --group; images and covers from local files (#1667).
+            case "wiki":
+                return (await (0, wiki_1.runWiki)((0, wiki_1.parseWikiArgs)(rest))).exitCode;
+            // Sub-accounts (#1538). After a switch every command above acts as
+            // the profile switched into -- the saved session simply is it.
+            case "profiles":
+                return (await (0, profiles_1.runProfiles)((0, profiles_1.parseProfilesArgs)(rest))).exitCode;
+            case "switch":
+                return (await (0, profiles_1.runSwitch)((0, profiles_1.parseSwitchArgs)(rest))).exitCode;
+            case "profile-add":
+                return (await (0, profiles_1.runAdd)((0, profiles_1.parseAddArgs)(rest))).exitCode;
+            case "profile-rm":
+                return (await (0, profiles_1.runRemove)((0, profiles_1.parseRemoveArgs)(rest))).exitCode;
+            default:
+                throw new errors_1.CliUsageError(`Unknown command "${command}". Run \`whatcha --help\` for usage.`);
+        }
+    }
+    catch (err) {
+        return reportError(err, wantsJson);
+    }
+}
+function reportError(err, wantsJson) {
+    if (err instanceof errors_1.CliUsageError) {
+        if (wantsJson)
+            (0, output_1.printJson)({ ok: false, error: { code: "USAGE", message: err.message } });
+        else
+            (0, output_1.printErrorLine)(err.message);
+        return 1;
+    }
+    if (err instanceof errors_1.ApiError) {
+        if (wantsJson)
+            (0, output_1.printJson)({ ok: false, error: { code: err.code, message: err.message } });
+        else
+            (0, output_1.printErrorLine)(`${err.code}: ${err.message}`);
+        return 1;
+    }
+    // Anything else is a bug in this CLI, not a user or API problem --
+    // surfaced in full (never swallowed), but still never as a raw uncaught
+    // exception stack trace to stdout in --json mode.
+    const message = err instanceof Error ? err.message : String(err);
+    if (wantsJson)
+        (0, output_1.printJson)({ ok: false, error: { code: "INTERNAL", message } });
+    else
+        (0, output_1.printErrorLine)(`whatcha: internal error: ${message}`);
+    return 1;
+}
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";;AA2DA,kBA0DC;AArHD,qCAAmD;AACnD,4CAA4D;AAC5D,gDAAkE;AAClE,4CAA4D;AAC5D,0CAAyD;AACzD,kDAS6B;AAC7B,0DAAqG;AACrG,gDAAkE;AAClE,8CAA+D;AAC/D,0CAAyD;AACzD,yCAAyD;AAEzD,MAAM,KAAK,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA8Bb,CAAC;AAEF;;;;;GAKG;AACI,KAAK,UAAU,GAAG,CAAC,IAAc;IACtC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAEhC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC5B,mEAAmE;QACnE,mEAAmE;QACnE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAI,OAAO,CAAC,iBAAiB,CAAyB,CAAC,OAAO,IAAI,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,OAAO;gBACV,OAAO,CAAC,MAAM,IAAA,gBAAQ,EAAC,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,KAAK,SAAS;gBACZ,OAAO,CAAC,MAAM,IAAA,oBAAU,EAAC,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7D,sEAAsE;YACtE,KAAK,WAAW;gBACd,OAAO,CAAC,MAAM,IAAA,0BAAW,EAAC,IAAA,gCAAiB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/D,KAAK,QAAQ;gBACX,OAAO,CAAC,MAAM,IAAA,wBAAS,EAAC,IAAA,8BAAe,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D,KAAK,SAAS;gBACZ,OAAO,CAAC,MAAM,IAAA,oBAAU,EAAC,IAAA,0BAAgB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7D,KAAK,OAAO;gBACV,OAAO,CAAC,MAAM,IAAA,gBAAQ,EAAC,IAAA,sBAAc,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,KAAK,MAAM;gBACT,OAAO,CAAC,MAAM,IAAA,cAAO,EAAC,IAAA,oBAAa,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvD,KAAK,QAAQ;gBACX,OAAO,CAAC,MAAM,IAAA,kBAAS,EAAC,IAAA,wBAAe,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D,oEAAoE;YACpE,uDAAuD;YACvD,KAAK,MAAM;gBACT,OAAO,CAAC,MAAM,IAAA,cAAO,EAAC,IAAA,oBAAa,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACvD,mEAAmE;YACnE,+DAA+D;YAC/D,KAAK,UAAU;gBACb,OAAO,CAAC,MAAM,IAAA,sBAAW,EAAC,IAAA,4BAAiB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/D,KAAK,QAAQ;gBACX,OAAO,CAAC,MAAM,IAAA,oBAAS,EAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D,KAAK,aAAa;gBAChB,OAAO,CAAC,MAAM,IAAA,iBAAM,EAAC,IAAA,uBAAY,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrD,KAAK,YAAY;gBACf,OAAO,CAAC,MAAM,IAAA,oBAAS,EAAC,IAAA,0BAAe,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC3D;gBACE,MAAM,IAAI,sBAAa,CAAC,oBAAoB,OAAO,sCAAsC,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAY,EAAE,SAAkB;IACnD,IAAI,GAAG,YAAY,sBAAa,EAAE,CAAC;QACjC,IAAI,SAAS;YAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;;YACnF,IAAA,uBAAc,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjC,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,GAAG,YAAY,iBAAQ,EAAE,CAAC;QAC5B,IAAI,SAAS;YAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;;YACpF,IAAA,uBAAc,EAAC,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,mEAAmE;IACnE,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,IAAI,SAAS;QAAE,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;;QACzE,IAAA,uBAAc,EAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/commands/diaries.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseDiariesArgs = parseDiariesArgs;
+exports.runDiaries = runDiaries;
+const node_util_1 = require("node:util");
+const session_1 = require("../auth/session");
+const config_1 = require("../config");
+const errors_1 = require("../errors");
+const diary_resolve_1 = require("../lib/diary-resolve");
+const output_1 = require("../lib/output");
+const publication_1 = require("../lib/publication");
+function parseDiariesArgs(argv) {
+    let values;
+    try {
+        ({ values } = (0, node_util_1.parseArgs)({
+            args: argv,
+            options: { json: { type: "boolean", default: false } },
+            allowPositionals: false,
+        }));
+    }
+    catch (err) {
+        throw new errors_1.CliUsageError(err.message);
+    }
+    return { json: values.json };
+}
+async function runDiaries(opts, deps = {}) {
+    const resolved = deps.client ? null : await (0, session_1.authenticatedClient)();
+    const client = deps.client ?? resolved.client;
+    const base = deps.apiBaseUrl ?? (resolved?.session.apiBaseUrl || (0, config_1.apiBaseUrl)());
+    const listed = await (0, diary_resolve_1.listAllDiaries)(client);
+    // #1701: whether each diary is published, and where it is read.
+    const published = await (0, publication_1.publicDiaryIds)(client, listed);
+    const diaries = listed.map((d) => {
+        const isPublic = published.has(d.id);
+        return { ...d, isPublic, publicUrl: isPublic ? (0, publication_1.publicDiaryUrl)(base, d.id) : null };
+    });
+    if (opts.json) {
+        (0, output_1.printJson)({ ok: true, diaries });
+        return { exitCode: 0 };
+    }
+    if (diaries.length === 0) {
+        (0, output_1.printLine)("No diaries.");
+        return { exitCode: 0 };
+    }
+    for (const d of diaries) {
+        const entries = d.entryCount === 1 ? "1 entry" : `${d.entryCount} entries`;
+        const pub = d.publicUrl ? `  public: ${d.publicUrl}` : "";
+        (0, output_1.printLine)(`${d.id}  ${d.name}  [${d.groupName}]  ${entries}  tz=${d.timezone}${pub}`);
+    }
+    return { exitCode: 0 };
+}
+//# sourceMappingURL=diaries.js.map

package/dist/commands/diaries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diaries.js","sourceRoot":"","sources":["../../src/commands/diaries.ts"],"names":[],"mappings":";;AAaA,4CAYC;AAED,gCA8BC;AAzDD,yCAAsC;AACtC,6CAAsD;AACtD,sCAAuC;AACvC,sCAA0C;AAE1C,wDAAsD;AACtD,0CAAqD;AACrD,oDAAoE;AAMpE,SAAgB,gBAAgB,CAAC,IAAc;IAC7C,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,CAAC,EAAE,MAAM,EAAE,GAAG,IAAA,qBAAS,EAAC;YACtB,IAAI,EAAE,IAAI;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YACtD,gBAAgB,EAAE,KAAK;SACxB,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,sBAAa,CAAE,GAAa,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAe,EAAE,CAAC;AAC1C,CAAC;AAEM,KAAK,UAAU,UAAU,CAC9B,IAAoB,EACpB,OAAwD,EAAE;IAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAA,6BAAmB,GAAE,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,QAAS,CAAC,MAAM,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,UAAU,IAAI,IAAA,mBAAU,GAAE,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAc,EAAC,MAAM,CAAC,CAAC;IAC5C,gEAAgE;IAChE,MAAM,SAAS,GAAG,MAAM,IAAA,4BAAc,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/B,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAA,4BAAc,EAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,IAAA,kBAAS,EAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,IAAA,kBAAS,EAAC,aAAa,CAAC,CAAC;QACzB,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IACzB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,UAAU,CAAC;QAC3E,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,IAAA,kBAAS,EAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,MAAM,OAAO,QAAQ,CAAC,CAAC,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACzB,CAAC"}