convex 1.46.0 → 1.48.0-alpha.0

package/dist/cjs/cli/login.js

@@ -1,9 +1,7 @@
 "use strict";
-var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -17,22 +15,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var login_exports = {};
 __export(login_exports, {
+  createLoginCommand: () => createLoginCommand,
   login: () => login
 });
 module.exports = __toCommonJS(login_exports);
 var import_extra_typings = require("@commander-js/extra-typings");
-var dotenv = __toESM(require("dotenv"), 1);
 var import_context = require("../bundler/context.js");
 var import_log = require("../bundler/log.js");
 var import_login = require("./lib/login.js");
@@ -46,25 +36,16 @@ var import_deploymentSelection = require("./lib/deploymentSelection.js");
 var import_deployment = require("./lib/deployment.js");
 var import_globalConfig = require("./lib/utils/globalConfig.js");
 var import_api = require("./lib/api.js");
-function deployKeyEnvFile(ctx, envVarName, value) {
-  for (const file of [import_utils.ENV_VAR_FILE_PATH, ".env"]) {
-    if (!ctx.fs.exists(file)) {
-      continue;
-    }
-    if (dotenv.parse(ctx.fs.readUtf8File(file))[envVarName] === value) {
-      return file;
-    }
-  }
-  return null;
-}
+var import_profiles = require("./lib/profiles.js");
+var import_envvars = require("./lib/envvars.js");
+var import_profileManagement = require("./lib/profileManagement.js");
+var import_deployKeyWarning = require("./lib/deployKeyWarning.js");
 async function reportDeployKeyInWorkingDirectory(ctx, auth) {
   if (auth === null || auth.kind === "accessToken" || auth.kind === "previewDeployKey") {
     return;
   }
   const key = auth.kind === "projectKey" ? auth.projectKey : auth.deploymentKey;
-  const envVarName = process.env[import_utils.CONVEX_DEPLOY_KEY_ENV_VAR_NAME] ? import_utils.CONVEX_DEPLOY_KEY_ENV_VAR_NAME : import_utils.CONVEX_DEPLOYMENT_TOKEN_ENV_VAR_NAME;
-  const envFile = deployKeyEnvFile(ctx, envVarName, key);
-  const source = envFile ?? "shell environment";
+  const { envVarName, source } = (0, import_envvars.getDeployKeySource)(key);
   const secret = key.slice(key.indexOf("|") + 1);
   if (await (0, import_login.isAuthorizedHeader)(ctx, `Bearer ${secret}`)) {
     (0, import_log.logMessage)(`Working Directory: Valid ${envVarName} in ${source}`);
@@ -72,103 +53,221 @@ async function reportDeployKeyInWorkingDirectory(ctx, auth) {
   }
   (0, import_log.logWarning)(`Working Directory: Invalid ${envVarName} in ${source}`);
 }
-const loginStatus = new import_extra_typings.Command("status").description("Check login status and list accessible teams").allowExcessArguments(false).action(async () => {
-  const ctx = await (0, import_context.oneoffContext)({
-    url: void 0,
-    adminKey: void 0,
-    envFile: void 0
-  });
-  const auth = ctx.bigBrainAuth();
-  const globalConfig = (0, import_globalConfig.readGlobalConfig)(ctx);
-  if (globalConfig === null) {
-    (0, import_log.logMessage)(`No Convex account token found in: ${(0, import_globalConfig.globalConfigPath)()}`);
-    (0, import_log.logMessage)("Status: Not logged in");
-    await reportDeployKeyInWorkingDirectory(ctx, auth);
-    return;
-  }
-  (0, import_log.logMessage)(`Convex account token found in: ${(0, import_globalConfig.globalConfigPath)()}`);
-  const accessToken = globalConfig.accessToken;
-  if (!await (0, import_login.isAuthorizedHeader)(ctx, `Bearer ${accessToken}`)) {
-    (0, import_log.logMessage)("Status: Not logged in");
-    await reportDeployKeyInWorkingDirectory(ctx, auth);
-    return;
-  }
-  (0, import_log.logMessage)("Status: Logged in");
-  ctx._updateBigBrainAuth({
-    kind: "accessToken",
-    header: `Bearer ${accessToken}`,
-    accessToken
-  });
-  const teams = await (0, import_api.getTeamsForUser)(ctx);
-  (0, import_log.logMessage)(
-    `Teams: ${teams.length} team${teams.length === 1 ? "" : "s"} accessible`
-  );
-  for (const team of teams) {
-    (0, import_log.logMessage)(`  - ${team.name} (${team.slug})`);
-  }
-  await reportDeployKeyInWorkingDirectory(ctx, auth);
-});
-const login = new import_extra_typings.Command("login").description("Login to Convex").allowExcessArguments(false).option(
-  "--device-name <name>",
-  "Provide a name for the device being authorized"
-).option(
-  "-f, --force",
-  "Proceed with login even if a valid access token already exists for this device"
-).option(
-  "--no-open",
-  "Don't automatically open the login link in the default browser"
-).addOption(
-  new import_extra_typings.Option(
-    "--login-flow <mode>",
-    `How to log in; defaults to guessing based on the environment.`
-  ).choices(["paste", "auto", "poll"]).default("auto")
-).addOption(new import_extra_typings.Option("--link-deployments").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-url <url>").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-client <id>").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-username <username>").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-password <password>").hideHelp()).addOption(new import_extra_typings.Option("--override-access-token <token>").hideHelp()).addOption(new import_extra_typings.Option("--accept-opt-ins").hideHelp()).addOption(new import_extra_typings.Option("--dump-access-token").hideHelp()).addOption(new import_extra_typings.Option("--check-login").hideHelp()).addOption(
-  new import_extra_typings.Option(
-    "--vercel",
-    "Redirect to Vercel SSO integration for login"
-  ).hideHelp()
-).addOption(new import_extra_typings.Option("--vercel-override <slug>").hideHelp()).addCommand(loginStatus).addHelpCommand(false).action(async (options, cmd) => {
-  const ctx = await (0, import_context.oneoffContext)({
-    url: void 0,
-    adminKey: void 0,
-    envFile: void 0
-  });
-  if (!options.force && await (0, import_login.checkAuthorization)(ctx, !!options.acceptOptIns)) {
-    (0, import_log.logFinishedStep)(
-      "This device has previously been authorized and is ready for use with Convex."
-    );
-    await handleLinkingDeployments(ctx, {
-      interactive: !!options.linkDeployments
+function createLoginStatusCommand() {
+  return new import_extra_typings.Command("status").description(
+    "Check login status and list accessible teams. Exits with code 1 when not logged in."
+  ).allowExcessArguments(false).action(async () => {
+    const ctx = await (0, import_context.oneoffContext)({
+      url: void 0,
+      adminKey: void 0,
+      envFile: void 0
     });
-    return;
-  }
-  if (!options.force && options.checkLogin) {
-    const isLoggedIn = await (0, import_login.checkAuthorization)(ctx, !!options.acceptOptIns);
-    if (!isLoggedIn) {
-      return ctx.crash({
+    const auth = ctx.bigBrainAuth();
+    let accountAuth = auth?.kind === "accessToken" ? auth : null;
+    if (accountAuth === null) {
+      const profile = await (0, import_profiles.getProfileSelection)(ctx);
+      if (profile !== null) {
+        accountAuth = await (0, import_profiles.readProfileAuth)(ctx, profile);
+      } else {
+        const globalConfig = (0, import_globalConfig.readGlobalConfig)(ctx);
+        if (globalConfig !== null) {
+          accountAuth = {
+            kind: "accessToken",
+            accessToken: globalConfig.accessToken,
+            header: `Bearer ${globalConfig.accessToken}`,
+            profile: null
+          };
+        }
+      }
+    }
+    if (accountAuth === null) {
+      (0, import_log.logMessage)(`No Convex account token found in: ${(0, import_globalConfig.globalConfigPath)()}`);
+      (0, import_log.logMessage)("Status: Not logged in");
+      await reportDeployKeyInWorkingDirectory(ctx, auth);
+      return await ctx.crash({
         exitCode: 1,
         errorType: "fatal",
-        errForSentry: "You are not logged in.",
-        printedMessage: "You are not logged in."
+        printedMessage: null
       });
     }
-  }
-  if (!!options.overrideAuthUsername !== !!options.overrideAuthPassword) {
-    cmd.error(
-      "If overriding credentials, both username and password must be provided"
+    (0, import_deployKeyWarning.warnIfDeployKeyOverridesLogin)(ctx, true);
+    if (accountAuth.profile) {
+      (0, import_log.logMessage)(`Account: ${accountAuth.profile.name}`);
+      (0, import_log.logMessage)(`Selected by: ${accountAuth.profile.source}`);
+      (0, import_log.logMessage)(
+        `Convex account token found in: ${(0, import_profiles.profileConfigPath)(accountAuth.profile.name)}`
+      );
+    } else if (process.env.CONVEX_OVERRIDE_ACCESS_TOKEN) {
+      (0, import_log.logMessage)("Using CONVEX_OVERRIDE_ACCESS_TOKEN from the environment");
+    } else {
+      (0, import_log.logMessage)(`Convex account token found in: ${(0, import_globalConfig.globalConfigPath)()}`);
+    }
+    if (!await (0, import_login.isAuthorizedHeader)(ctx, accountAuth.header)) {
+      (0, import_log.logMessage)("Status: Not logged in");
+      await reportDeployKeyInWorkingDirectory(ctx, auth);
+      return await ctx.crash({
+        exitCode: 1,
+        errorType: "fatal",
+        printedMessage: null
+      });
+    }
+    (0, import_log.logMessage)("Status: Logged in");
+    ctx._updateBigBrainAuth(accountAuth);
+    const teams = await (0, import_api.getTeamsForUser)(ctx);
+    (0, import_log.logMessage)(
+      `Teams: ${teams.length} team${teams.length === 1 ? "" : "s"} accessible`
     );
-  }
-  const uuid = (0, import_filePaths.loadUuidForAnonymousUser)(ctx);
-  await (0, import_login.performLogin)(ctx, {
-    ...options,
-    anonymousId: uuid,
-    vercel: options.vercel,
-    vercelOverride: options.vercelOverride
+    for (const team of teams) {
+      (0, import_log.logMessage)(`  - ${team.name} (${team.slug})`);
+    }
+    await reportDeployKeyInWorkingDirectory(ctx, auth);
   });
-  await handleLinkingDeployments(ctx, {
-    interactive: !!options.linkDeployments
+}
+function createLoginCommand() {
+  return new import_extra_typings.Command("login").description("Login to Convex").allowExcessArguments(false).option("--account <name>", "Log in to a named account").option(
+    "--select",
+    "Select this account for this directory and its subdirectories"
+  ).option(
+    "--device-name <name>",
+    "Provide a name for the device being authorized"
+  ).option(
+    "-f, --force",
+    "Proceed with login even if a valid access token already exists for this device"
+  ).option(
+    "--no-open",
+    "Don't automatically open the login link in the default browser"
+  ).addOption(
+    new import_extra_typings.Option(
+      "--login-flow <mode>",
+      `How to log in; defaults to guessing based on the environment.`
+    ).choices(["paste", "auto", "poll"]).default("auto")
+  ).addOption(new import_extra_typings.Option("--link-deployments").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-url <url>").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-client <id>").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-username <username>").hideHelp()).addOption(new import_extra_typings.Option("--override-auth-password <password>").hideHelp()).addOption(new import_extra_typings.Option("--override-access-token <token>").hideHelp()).addOption(new import_extra_typings.Option("--accept-opt-ins").hideHelp()).addOption(new import_extra_typings.Option("--dump-access-token").hideHelp()).addOption(new import_extra_typings.Option("--check-login").hideHelp()).addOption(
+    new import_extra_typings.Option(
+      "--vercel",
+      "Redirect to Vercel SSO integration for login"
+    ).hideHelp()
+  ).addOption(new import_extra_typings.Option("--vercel-override <slug>").hideHelp()).addCommand(createLoginStatusCommand()).addHelpCommand(false).action(async (options, cmd) => {
+    const ctx = await (0, import_context.oneoffContext)({
+      url: void 0,
+      adminKey: void 0,
+      envFile: void 0,
+      skipAuth: true
+    });
+    const profile = await (0, import_profiles.getProfileSelection)(ctx, {
+      name: options.account
+    });
+    if (options.select && profile === null) {
+      cmd.error("Pass --account <name> with --select to name this login.");
+    }
+    (0, import_envvars.loadProjectEnvironmentVariables)();
+    let namingLegacyAccount = false;
+    if (profile !== null) {
+      let auth2 = options.force ? null : await (0, import_profiles.readProfileAuth)(ctx, profile, true);
+      if (auth2 === null && !options.force && !options.overrideAccessToken && !options.overrideAuthUsername && !process.env.CONVEX_OVERRIDE_ACCESS_TOKEN) {
+        auth2 = await (0, import_profiles.legacyAuthForFirstProfile)(ctx, profile);
+        namingLegacyAccount = auth2 !== null;
+      }
+      ctx._updateBigBrainAuth(auth2);
+    } else {
+      const accessToken = process.env.CONVEX_OVERRIDE_ACCESS_TOKEN || (0, import_globalConfig.readGlobalConfig)(ctx)?.accessToken;
+      ctx._updateBigBrainAuth(
+        accessToken ? {
+          kind: "accessToken",
+          accessToken,
+          header: `Bearer ${accessToken}`,
+          profile: null
+        } : null
+      );
+    }
+    (0, import_deployKeyWarning.warnIfDeployKeyOverridesLogin)(ctx, ctx.bigBrainAuth() !== null);
+    if (!options.force && await (0, import_login.checkAuthorization)(ctx, !!options.acceptOptIns)) {
+      const auth2 = ctx.bigBrainAuth();
+      if (namingLegacyAccount && profile !== null && auth2?.kind === "accessToken") {
+        await (0, import_profiles.writeProfileCredentials)(
+          ctx,
+          profile.name,
+          auth2.accessToken,
+          {},
+          null
+        );
+      }
+      (0, import_log.logFinishedStep)(
+        profile !== null ? namingLegacyAccount ? `Saved account "${profile.name}" using your existing login.` : `Account "${profile.name}" is already logged in.` : "This device has previously been authorized and is ready for use with Convex."
+      );
+      if (profile !== null && auth2?.kind === "accessToken") {
+        await (0, import_profiles.initializeDefaultProfile)(
+          ctx,
+          profile,
+          namingLegacyAccount,
+          !!options.select
+        );
+      }
+      if (options.select && profile !== null) {
+        if (!await (0, import_profileManagement.bindProfileToDirectory)(ctx, profile.name)) {
+          return await ctx.crash({
+            exitCode: 1,
+            errorType: "fatal",
+            printedMessage: `Logged in as "${profile.name}", but the directory selection could not be changed.`
+          });
+        }
+      }
+      await handleLinkingDeployments(ctx, {
+        interactive: !!options.linkDeployments
+      });
+      return;
+    }
+    if (!options.force && options.checkLogin) {
+      const isLoggedIn = await (0, import_login.checkAuthorization)(
+        ctx,
+        !!options.acceptOptIns
+      );
+      if (!isLoggedIn) {
+        return ctx.crash({
+          exitCode: 1,
+          errorType: "fatal",
+          errForSentry: "You are not logged in.",
+          printedMessage: "You are not logged in."
+        });
+      }
+    }
+    if (!!options.overrideAuthUsername !== !!options.overrideAuthPassword) {
+      cmd.error(
+        "If overriding credentials, both username and password must be provided"
+      );
+    }
+    const uuid = (0, import_filePaths.loadUuidForAnonymousUser)(ctx);
+    await (0, import_login.performLogin)(ctx, {
+      ...options,
+      profile,
+      anonymousId: uuid,
+      vercel: options.vercel,
+      vercelOverride: options.vercelOverride
+    });
+    const auth = ctx.bigBrainAuth();
+    if (profile !== null && auth?.kind === "accessToken") {
+      await (0, import_profiles.initializeDefaultProfile)(
+        ctx,
+        profile,
+        namingLegacyAccount,
+        !!options.select
+      );
+    }
+    if (options.select && profile !== null) {
+      if (!await (0, import_profileManagement.bindProfileToDirectory)(ctx, profile.name)) {
+        return await ctx.crash({
+          exitCode: 1,
+          errorType: "fatal",
+          printedMessage: `Logged in as "${profile.name}", but the directory selection could not be changed.`
+        });
+      }
+    }
+    (0, import_deployKeyWarning.warnIfDeployKeyOverridesLogin)(ctx, true);
+    await handleLinkingDeployments(ctx, {
+      interactive: !!options.linkDeployments
+    });
   });
-});
+}
+const login = createLoginCommand();
 async function handleLinkingDeployments(ctx, args) {
   if (!(0, import_deploymentSelection.shouldAllowAnonymousDevelopment)()) {
     return;

package/dist/cjs/cli/login.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/cli/login.ts"],
-  "sourcesContent": ["import { Command, Option } from \"@commander-js/extra-typings\";\nimport * as dotenv from \"dotenv\";\nimport { BigBrainAuth, Context, oneoffContext } from \"../bundler/context.js\";\nimport { logFinishedStep, logMessage, logWarning } from \"../bundler/log.js\";\nimport {\n  checkAuthorization,\n  isAuthorizedHeader,\n  performLogin,\n} from \"./lib/login.js\";\nimport {\n  loadProjectLocalConfig,\n  loadUuidForAnonymousUser,\n} from \"./lib/localDeployment/filePaths.js\";\nimport {\n  handleLinkToProject,\n  listLegacyAnonymousDeployments,\n} from \"./lib/localDeployment/anonymous.js\";\nimport {\n  DASHBOARD_HOST,\n  deploymentDashboardUrlPage,\n  teamDashboardUrl,\n} from \"./lib/dashboard.js\";\nimport { promptSearch, promptYesNo } from \"./lib/utils/prompts.js\";\nimport {\n  CONVEX_DEPLOY_KEY_ENV_VAR_NAME,\n  CONVEX_DEPLOYMENT_TOKEN_ENV_VAR_NAME,\n  ENV_VAR_FILE_PATH,\n  validateOrSelectTeam,\n} from \"./lib/utils/utils.js\";\nimport {\n  selectProject,\n  updateEnvAndConfigForDeploymentSelection,\n} from \"./configure.js\";\nimport {\n  getDeploymentSelection,\n  shouldAllowAnonymousDevelopment,\n} from \"./lib/deploymentSelection.js\";\nimport {\n  isAnonymousDeployment,\n  removeAnonymousPrefix,\n} from \"./lib/deployment.js\";\nimport {\n  readGlobalConfig,\n  globalConfigPath,\n} from \"./lib/utils/globalConfig.js\";\nimport { getTeamsForUser } from \"./lib/api.js\";\n\n/**\n * The env file a deploy key came from, or null if it came from the shell.\n * `dotenv` doesn't overwrite variables that are already set, so a value from\n * the shell outranks these files -- match on the value to tell them apart.\n */\nfunction deployKeyEnvFile(\n  ctx: Context,\n  envVarName: string,\n  value: string,\n): string | null {\n  for (const file of [ENV_VAR_FILE_PATH, \".env\"]) {\n    if (!ctx.fs.exists(file)) {\n      continue;\n    }\n    if (dotenv.parse(ctx.fs.readUtf8File(file))[envVarName] === value) {\n      return file;\n    }\n  }\n  return null;\n}\n\n/**\n * A project or deployment key in the environment outranks the account token for\n * commands run from this directory, and an expired one makes the CLI look\n * logged out, so report it separately from the account.\n */\nasync function reportDeployKeyInWorkingDirectory(\n  ctx: Context,\n  auth: BigBrainAuth | null,\n) {\n  // A preview deploy key is only used when there's no account token at all.\n  if (\n    auth === null ||\n    auth.kind === \"accessToken\" ||\n    auth.kind === \"previewDeployKey\"\n  ) {\n    return;\n  }\n  const key = auth.kind === \"projectKey\" ? auth.projectKey : auth.deploymentKey;\n  const envVarName = process.env[CONVEX_DEPLOY_KEY_ENV_VAR_NAME]\n    ? CONVEX_DEPLOY_KEY_ENV_VAR_NAME\n    : CONVEX_DEPLOYMENT_TOKEN_ENV_VAR_NAME;\n  const envFile = deployKeyEnvFile(ctx, envVarName, key);\n  const source = envFile ?? \"shell environment\";\n  // Big Brain only strips a `project:`/`team:` prefix itself, so a deployment\n  // key authorizes only without its `dev:`/`prod:` prefix. Split on the first\n  // `|` like the server does, so a secret containing one survives.\n  const secret = key.slice(key.indexOf(\"|\") + 1);\n  if (await isAuthorizedHeader(ctx, `Bearer ${secret}`)) {\n    logMessage(`Working Directory: Valid ${envVarName} in ${source}`);\n    return;\n  }\n  logWarning(`Working Directory: Invalid ${envVarName} in ${source}`);\n}\n\nconst loginStatus = new Command(\"status\")\n  .description(\"Check login status and list accessible teams\")\n  .allowExcessArguments(false)\n  .action(async () => {\n    const ctx = await oneoffContext({\n      url: undefined,\n      adminKey: undefined,\n      envFile: undefined,\n    });\n\n    // `_updateBigBrainAuth` below replaces any deploy key in `ctx` with the\n    // account token, so read the deploy key first.\n    const auth = ctx.bigBrainAuth();\n\n    const globalConfig = readGlobalConfig(ctx);\n    if (globalConfig === null) {\n      logMessage(`No Convex account token found in: ${globalConfigPath()}`);\n      logMessage(\"Status: Not logged in\");\n      await reportDeployKeyInWorkingDirectory(ctx, auth);\n      return;\n    }\n    logMessage(`Convex account token found in: ${globalConfigPath()}`);\n\n    const accessToken = globalConfig.accessToken;\n    if (!(await isAuthorizedHeader(ctx, `Bearer ${accessToken}`))) {\n      logMessage(\"Status: Not logged in\");\n      await reportDeployKeyInWorkingDirectory(ctx, auth);\n      return;\n    }\n\n    logMessage(\"Status: Logged in\");\n    // Describe the account, even if a deploy key outranks it for other commands.\n    ctx._updateBigBrainAuth({\n      kind: \"accessToken\",\n      header: `Bearer ${accessToken}`,\n      accessToken,\n    });\n    const teams = await getTeamsForUser(ctx);\n    logMessage(\n      `Teams: ${teams.length} team${teams.length === 1 ? \"\" : \"s\"} accessible`,\n    );\n    for (const team of teams) {\n      logMessage(`  - ${team.name} (${team.slug})`);\n    }\n    await reportDeployKeyInWorkingDirectory(ctx, auth);\n  });\n\nexport const login = new Command(\"login\")\n  .description(\"Login to Convex\")\n  .allowExcessArguments(false)\n  .option(\n    \"--device-name <name>\",\n    \"Provide a name for the device being authorized\",\n  )\n  .option(\n    \"-f, --force\",\n    \"Proceed with login even if a valid access token already exists for this device\",\n  )\n  .option(\n    \"--no-open\",\n    \"Don't automatically open the login link in the default browser\",\n  )\n  .addOption(\n    new Option(\n      \"--login-flow <mode>\",\n      `How to log in; defaults to guessing based on the environment.`,\n    )\n      .choices([\"paste\", \"auto\", \"poll\"] as const)\n      .default(\"auto\" as const),\n  )\n  .addOption(new Option(\"--link-deployments\").hideHelp())\n  // These options are hidden from the help/usage message, but allow overriding settings for testing.\n  // Change the auth credentials with the auth provider\n  .addOption(new Option(\"--override-auth-url <url>\").hideHelp())\n  .addOption(new Option(\"--override-auth-client <id>\").hideHelp())\n  .addOption(new Option(\"--override-auth-username <username>\").hideHelp())\n  .addOption(new Option(\"--override-auth-password <password>\").hideHelp())\n  // Skip the auth provider login and directly use this access token\n  .addOption(new Option(\"--override-access-token <token>\").hideHelp())\n  // Automatically accept opt ins without prompting\n  .addOption(new Option(\"--accept-opt-ins\").hideHelp())\n  // Dump the access token from the auth provider and skip authorization with Convex\n  .addOption(new Option(\"--dump-access-token\").hideHelp())\n  // Hidden option for tests to check if the user is logged in.\n  .addOption(new Option(\"--check-login\").hideHelp())\n  // Redirect to Vercel SSO integration URL\n  .addOption(\n    new Option(\n      \"--vercel\",\n      \"Redirect to Vercel SSO integration for login\",\n    ).hideHelp(),\n  )\n  // Override the Vercel URL slug (defaults to 'convex')\n  .addOption(new Option(\"--vercel-override <slug>\").hideHelp())\n  .addCommand(loginStatus)\n  .addHelpCommand(false)\n  .action(async (options, cmd: Command) => {\n    const ctx = await oneoffContext({\n      url: undefined,\n      adminKey: undefined,\n      envFile: undefined,\n    });\n    if (\n      !options.force &&\n      (await checkAuthorization(ctx, !!options.acceptOptIns))\n    ) {\n      logFinishedStep(\n        \"This device has previously been authorized and is ready for use with Convex.\",\n      );\n      await handleLinkingDeployments(ctx, {\n        interactive: !!options.linkDeployments,\n      });\n      return;\n    }\n    if (!options.force && options.checkLogin) {\n      const isLoggedIn = await checkAuthorization(ctx, !!options.acceptOptIns);\n      if (!isLoggedIn) {\n        return ctx.crash({\n          exitCode: 1,\n          errorType: \"fatal\",\n          errForSentry: \"You are not logged in.\",\n          printedMessage: \"You are not logged in.\",\n        });\n      }\n    }\n    if (!!options.overrideAuthUsername !== !!options.overrideAuthPassword) {\n      cmd.error(\n        \"If overriding credentials, both username and password must be provided\",\n      );\n    }\n\n    const uuid = loadUuidForAnonymousUser(ctx);\n    await performLogin(ctx, {\n      ...options,\n      anonymousId: uuid,\n      vercel: options.vercel,\n      vercelOverride: options.vercelOverride,\n    });\n\n    await handleLinkingDeployments(ctx, {\n      interactive: !!options.linkDeployments,\n    });\n  });\n\nasync function handleLinkingDeployments(\n  ctx: Context,\n  args: {\n    interactive: boolean;\n  },\n) {\n  if (!shouldAllowAnonymousDevelopment()) {\n    return;\n  }\n\n  // Check for project-local anonymous deployment first - this takes priority\n  const projectLocal = loadProjectLocalConfig(ctx);\n  if (\n    projectLocal !== null &&\n    isAnonymousDeployment(projectLocal.deploymentName)\n  ) {\n    const shouldLink = await promptYesNo(ctx, {\n      message: `Would you like to link your existing deployment to your account? (\"${projectLocal.deploymentName}\")`,\n      default: true,\n    });\n    if (!shouldLink) {\n      logMessage(\n        \"Not linking your existing deployment. If you want to link it later, run `npx convex login --link-deployments`.\",\n      );\n      logMessage(\n        `Visit ${DASHBOARD_HOST} or run \\`npx convex dev\\` to get started with your new account.`,\n      );\n      return;\n    }\n\n    const { dashboardUrl } = await linkSingleDeployment(\n      ctx,\n      projectLocal.deploymentName,\n      projectLocal.deploymentName,\n    );\n    logFinishedStep(`Visit ${dashboardUrl} to get started.`);\n    return;\n  }\n\n  // No project-local deployment - check for legacy deployments\n  const legacyDeployments = listLegacyAnonymousDeployments(ctx);\n  if (legacyDeployments.length === 0) {\n    if (args.interactive) {\n      logMessage(\n        \"It doesn't look like you have any deployments to link. You can run `npx convex dev` to set up a new project or select an existing one.\",\n      );\n    }\n    return;\n  }\n\n  // Get the currently configured deployment (if any) for env var updates\n  const deploymentSelection = await getDeploymentSelection(ctx, {\n    url: undefined,\n    adminKey: undefined,\n    envFile: undefined,\n  });\n  const configuredDeployment =\n    deploymentSelection.kind === \"anonymous\"\n      ? deploymentSelection.deploymentName\n      : null;\n\n  if (!args.interactive) {\n    // Non-interactive: link all legacy deployments automatically\n    const message = getMessage(legacyDeployments.map((d) => d.deploymentName));\n    const createProjects = await promptYesNo(ctx, {\n      message,\n      default: true,\n    });\n    if (!createProjects) {\n      logMessage(\n        \"Not linking your existing deployments. If you want to link them later, run `npx convex login --link-deployments`.\",\n      );\n      logMessage(\n        `Visit ${DASHBOARD_HOST} or run \\`npx convex dev\\` to get started with your new account.`,\n      );\n      return;\n    }\n\n    const {\n      team: { slug: teamSlug },\n    } = await validateOrSelectTeam(\n      ctx,\n      undefined,\n      \"Choose a team for your deployments:\",\n    );\n    let dashboardUrl = teamDashboardUrl(teamSlug);\n    for (const deployment of legacyDeployments) {\n      const result = await linkSingleDeployment(\n        ctx,\n        deployment.deploymentName,\n        configuredDeployment,\n        { teamSlug, projectSlug: null },\n      );\n      if (deployment.deploymentName === configuredDeployment) {\n        dashboardUrl = result.dashboardUrl;\n      }\n    }\n    logFinishedStep(\n      `Successfully linked your deployments! Visit ${dashboardUrl} to get started.`,\n    );\n    return;\n  }\n\n  // Interactive mode: let user choose which legacy deployments to link\n  while (true) {\n    const currentLegacyDeployments = listLegacyAnonymousDeployments(ctx);\n    if (currentLegacyDeployments.length === 0) {\n      logMessage(\"All deployments have been linked.\");\n      break;\n    }\n    logMessage(\n      getDeploymentListMessage(\n        currentLegacyDeployments.map((d) => d.deploymentName),\n      ),\n    );\n    const deploymentToLink = await promptSearch(ctx, {\n      message: \"Which deployment would you like to link to your account?\",\n      choices: currentLegacyDeployments.map((d) => ({\n        name: d.deploymentName,\n        value: d.deploymentName,\n      })),\n    });\n\n    await linkSingleDeployment(ctx, deploymentToLink, configuredDeployment);\n\n    const shouldContinue = await promptYesNo(ctx, {\n      message: \"Would you like to link another deployment?\",\n      default: true,\n    });\n    if (!shouldContinue) {\n      break;\n    }\n  }\n}\n\n/**\n * Link a single deployment to a project, prompting for team and project selection.\n * Updates env vars if this is the currently configured deployment.\n */\nasync function linkSingleDeployment(\n  ctx: Context,\n  deploymentName: string,\n  configuredDeployment: string | null,\n  options?: {\n    teamSlug?: string;\n    projectSlug?: string | null;\n  },\n): Promise<{ dashboardUrl: string }> {\n  const { team } = await validateOrSelectTeam(\n    ctx,\n    options?.teamSlug,\n    \"Choose a team for your deployment:\",\n  );\n\n  const projectSlug =\n    options?.projectSlug ??\n    (\n      await selectProject(ctx, \"ask\", {\n        team: team.slug,\n        devDeployment: \"local\",\n        defaultProjectName: removeAnonymousPrefix(deploymentName),\n      })\n    ).projectSlug;\n\n  const linkedDeployment = await handleLinkToProject(ctx, {\n    deploymentName,\n    teamSlug: team.slug,\n    teamId: team.id,\n    projectSlug,\n  });\n\n  if (deploymentName === configuredDeployment) {\n    await updateEnvAndConfigForDeploymentSelection(\n      ctx,\n      {\n        url: linkedDeployment.deploymentUrl,\n        deploymentName: linkedDeployment.deploymentName,\n        teamSlug: team.slug,\n        projectSlug: linkedDeployment.projectSlug,\n        deploymentType: \"local\",\n      },\n      configuredDeployment,\n    );\n  }\n\n  return {\n    dashboardUrl: deploymentDashboardUrlPage(\n      linkedDeployment.deploymentName,\n      \"\",\n    ),\n  };\n}\n\nfunction getDeploymentListMessage(anonymousDeploymentNames: string[]) {\n  let message = `You have ${anonymousDeploymentNames.length} existing deployments.`;\n  message += `\\n\\nDeployments:`;\n  for (const deploymentName of anonymousDeploymentNames) {\n    message += `\\n- ${deploymentName}`;\n  }\n  return message;\n}\n\nfunction getMessage(anonymousDeploymentNames: string[]) {\n  if (anonymousDeploymentNames.length === 1) {\n    return `Would you like to link your existing deployment to your account? (\"${anonymousDeploymentNames[0]}\")`;\n  }\n  let message = `You have ${anonymousDeploymentNames.length} existing deployments. Would you like to link them to your account?`;\n  message += `\\n\\nDeployments:`;\n  for (const deploymentName of anonymousDeploymentNames) {\n    message += `\\n- ${deploymentName}`;\n  }\n  message += `\\n\\nYou can alternatively run \\`npx convex login --link-deployments\\` to interactively choose which deployments to add.`;\n  return message;\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAAgC;AAChC,aAAwB;AACxB,qBAAqD;AACrD,iBAAwD;AACxD,mBAIO;AACP,uBAGO;AACP,uBAGO;AACP,uBAIO;AACP,qBAA0C;AAC1C,mBAKO;AACP,uBAGO;AACP,iCAGO;AACP,wBAGO;AACP,0BAGO;AACP,iBAAgC;AAOhC,SAAS,iBACP,KACA,YACA,OACe;AACf,aAAW,QAAQ,CAAC,gCAAmB,MAAM,GAAG;AAC9C,QAAI,CAAC,IAAI,GAAG,OAAO,IAAI,GAAG;AACxB;AAAA,IACF;AACA,QAAI,OAAO,MAAM,IAAI,GAAG,aAAa,IAAI,CAAC,EAAE,UAAU,MAAM,OAAO;AACjE,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAOA,eAAe,kCACb,KACA,MACA;AAEA,MACE,SAAS,QACT,KAAK,SAAS,iBACd,KAAK,SAAS,oBACd;AACA;AAAA,EACF;AACA,QAAM,MAAM,KAAK,SAAS,eAAe,KAAK,aAAa,KAAK;AAChE,QAAM,aAAa,QAAQ,IAAI,2CAA8B,IACzD,8CACA;AACJ,QAAM,UAAU,iBAAiB,KAAK,YAAY,GAAG;AACrD,QAAM,SAAS,WAAW;AAI1B,QAAM,SAAS,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,CAAC;AAC7C,MAAI,UAAM,iCAAmB,KAAK,UAAU,MAAM,EAAE,GAAG;AACrD,+BAAW,4BAA4B,UAAU,OAAO,MAAM,EAAE;AAChE;AAAA,EACF;AACA,6BAAW,8BAA8B,UAAU,OAAO,MAAM,EAAE;AACpE;AAEA,MAAM,cAAc,IAAI,6BAAQ,QAAQ,EACrC,YAAY,8CAA8C,EAC1D,qBAAqB,KAAK,EAC1B,OAAO,YAAY;AAClB,QAAM,MAAM,UAAM,8BAAc;AAAA,IAC9B,KAAK;AAAA,IACL,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AAID,QAAM,OAAO,IAAI,aAAa;AAE9B,QAAM,mBAAe,sCAAiB,GAAG;AACzC,MAAI,iBAAiB,MAAM;AACzB,+BAAW,yCAAqC,sCAAiB,CAAC,EAAE;AACpE,+BAAW,uBAAuB;AAClC,UAAM,kCAAkC,KAAK,IAAI;AACjD;AAAA,EACF;AACA,6BAAW,sCAAkC,sCAAiB,CAAC,EAAE;AAEjE,QAAM,cAAc,aAAa;AACjC,MAAI,CAAE,UAAM,iCAAmB,KAAK,UAAU,WAAW,EAAE,GAAI;AAC7D,+BAAW,uBAAuB;AAClC,UAAM,kCAAkC,KAAK,IAAI;AACjD;AAAA,EACF;AAEA,6BAAW,mBAAmB;AAE9B,MAAI,oBAAoB;AAAA,IACtB,MAAM;AAAA,IACN,QAAQ,UAAU,WAAW;AAAA,IAC7B;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,UAAM,4BAAgB,GAAG;AACvC;AAAA,IACE,UAAU,MAAM,MAAM,QAAQ,MAAM,WAAW,IAAI,KAAK,GAAG;AAAA,EAC7D;AACA,aAAW,QAAQ,OAAO;AACxB,+BAAW,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG;AAAA,EAC9C;AACA,QAAM,kCAAkC,KAAK,IAAI;AACnD,CAAC;AAEI,MAAM,QAAQ,IAAI,6BAAQ,OAAO,EACrC,YAAY,iBAAiB,EAC7B,qBAAqB,KAAK,EAC1B;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC,IAAI;AAAA,IACF;AAAA,IACA;AAAA,EACF,EACG,QAAQ,CAAC,SAAS,QAAQ,MAAM,CAAU,EAC1C,QAAQ,MAAe;AAC5B,EACC,UAAU,IAAI,4BAAO,oBAAoB,EAAE,SAAS,CAAC,EAGrD,UAAU,IAAI,4BAAO,2BAA2B,EAAE,SAAS,CAAC,EAC5D,UAAU,IAAI,4BAAO,6BAA6B,EAAE,SAAS,CAAC,EAC9D,UAAU,IAAI,4BAAO,qCAAqC,EAAE,SAAS,CAAC,EACtE,UAAU,IAAI,4BAAO,qCAAqC,EAAE,SAAS,CAAC,EAEtE,UAAU,IAAI,4BAAO,iCAAiC,EAAE,SAAS,CAAC,EAElE,UAAU,IAAI,4BAAO,kBAAkB,EAAE,SAAS,CAAC,EAEnD,UAAU,IAAI,4BAAO,qBAAqB,EAAE,SAAS,CAAC,EAEtD,UAAU,IAAI,4BAAO,eAAe,EAAE,SAAS,CAAC,EAEhD;AAAA,EACC,IAAI;AAAA,IACF;AAAA,IACA;AAAA,EACF,EAAE,SAAS;AACb,EAEC,UAAU,IAAI,4BAAO,0BAA0B,EAAE,SAAS,CAAC,EAC3D,WAAW,WAAW,EACtB,eAAe,KAAK,EACpB,OAAO,OAAO,SAAS,QAAiB;AACvC,QAAM,MAAM,UAAM,8BAAc;AAAA,IAC9B,KAAK;AAAA,IACL,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AACD,MACE,CAAC,QAAQ,SACR,UAAM,iCAAmB,KAAK,CAAC,CAAC,QAAQ,YAAY,GACrD;AACA;AAAA,MACE;AAAA,IACF;AACA,UAAM,yBAAyB,KAAK;AAAA,MAClC,aAAa,CAAC,CAAC,QAAQ;AAAA,IACzB,CAAC;AACD;AAAA,EACF;AACA,MAAI,CAAC,QAAQ,SAAS,QAAQ,YAAY;AACxC,UAAM,aAAa,UAAM,iCAAmB,KAAK,CAAC,CAAC,QAAQ,YAAY;AACvE,QAAI,CAAC,YAAY;AACf,aAAO,IAAI,MAAM;AAAA,QACf,UAAU;AAAA,QACV,WAAW;AAAA,QACX,cAAc;AAAA,QACd,gBAAgB;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,CAAC,CAAC,QAAQ,yBAAyB,CAAC,CAAC,QAAQ,sBAAsB;AACrE,QAAI;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WAAO,2CAAyB,GAAG;AACzC,YAAM,2BAAa,KAAK;AAAA,IACtB,GAAG;AAAA,IACH,aAAa;AAAA,IACb,QAAQ,QAAQ;AAAA,IAChB,gBAAgB,QAAQ;AAAA,EAC1B,CAAC;AAED,QAAM,yBAAyB,KAAK;AAAA,IAClC,aAAa,CAAC,CAAC,QAAQ;AAAA,EACzB,CAAC;AACH,CAAC;AAEH,eAAe,yBACb,KACA,MAGA;AACA,MAAI,KAAC,4DAAgC,GAAG;AACtC;AAAA,EACF;AAGA,QAAM,mBAAe,yCAAuB,GAAG;AAC/C,MACE,iBAAiB,YACjB,yCAAsB,aAAa,cAAc,GACjD;AACA,UAAM,aAAa,UAAM,4BAAY,KAAK;AAAA,MACxC,SAAS,sEAAsE,aAAa,cAAc;AAAA,MAC1G,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,YAAY;AACf;AAAA,QACE;AAAA,MACF;AACA;AAAA,QACE,SAAS,+BAAc;AAAA,MACzB;AACA;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,MAAM;AAAA,MAC7B;AAAA,MACA,aAAa;AAAA,MACb,aAAa;AAAA,IACf;AACA,oCAAgB,SAAS,YAAY,kBAAkB;AACvD;AAAA,EACF;AAGA,QAAM,wBAAoB,iDAA+B,GAAG;AAC5D,MAAI,kBAAkB,WAAW,GAAG;AAClC,QAAI,KAAK,aAAa;AACpB;AAAA,QACE;AAAA,MACF;AAAA,IACF;AACA;AAAA,EACF;AAGA,QAAM,sBAAsB,UAAM,mDAAuB,KAAK;AAAA,IAC5D,KAAK;AAAA,IACL,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AACD,QAAM,uBACJ,oBAAoB,SAAS,cACzB,oBAAoB,iBACpB;AAEN,MAAI,CAAC,KAAK,aAAa;AAErB,UAAM,UAAU,WAAW,kBAAkB,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC;AACzE,UAAM,iBAAiB,UAAM,4BAAY,KAAK;AAAA,MAC5C;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,gBAAgB;AACnB;AAAA,QACE;AAAA,MACF;AACA;AAAA,QACE,SAAS,+BAAc;AAAA,MACzB;AACA;AAAA,IACF;AAEA,UAAM;AAAA,MACJ,MAAM,EAAE,MAAM,SAAS;AAAA,IACzB,IAAI,UAAM;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,mBAAe,mCAAiB,QAAQ;AAC5C,eAAW,cAAc,mBAAmB;AAC1C,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,EAAE,UAAU,aAAa,KAAK;AAAA,MAChC;AACA,UAAI,WAAW,mBAAmB,sBAAsB;AACtD,uBAAe,OAAO;AAAA,MACxB;AAAA,IACF;AACA;AAAA,MACE,+CAA+C,YAAY;AAAA,IAC7D;AACA;AAAA,EACF;AAGA,SAAO,MAAM;AACX,UAAM,+BAA2B,iDAA+B,GAAG;AACnE,QAAI,yBAAyB,WAAW,GAAG;AACzC,iCAAW,mCAAmC;AAC9C;AAAA,IACF;AACA;AAAA,MACE;AAAA,QACE,yBAAyB,IAAI,CAAC,MAAM,EAAE,cAAc;AAAA,MACtD;AAAA,IACF;AACA,UAAM,mBAAmB,UAAM,6BAAa,KAAK;AAAA,MAC/C,SAAS;AAAA,MACT,SAAS,yBAAyB,IAAI,CAAC,OAAO;AAAA,QAC5C,MAAM,EAAE;AAAA,QACR,OAAO,EAAE;AAAA,MACX,EAAE;AAAA,IACJ,CAAC;AAED,UAAM,qBAAqB,KAAK,kBAAkB,oBAAoB;AAEtE,UAAM,iBAAiB,UAAM,4BAAY,KAAK;AAAA,MAC5C,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,gBAAgB;AACnB;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,qBACb,KACA,gBACA,sBACA,SAImC;AACnC,QAAM,EAAE,KAAK,IAAI,UAAM;AAAA,IACrB;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EACF;AAEA,QAAM,cACJ,SAAS,gBAEP,UAAM,gCAAc,KAAK,OAAO;AAAA,IAC9B,MAAM,KAAK;AAAA,IACX,eAAe;AAAA,IACf,wBAAoB,yCAAsB,cAAc;AAAA,EAC1D,CAAC,GACD;AAEJ,QAAM,mBAAmB,UAAM,sCAAoB,KAAK;AAAA,IACtD;AAAA,IACA,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb;AAAA,EACF,CAAC;AAED,MAAI,mBAAmB,sBAAsB;AAC3C,cAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,KAAK,iBAAiB;AAAA,QACtB,gBAAgB,iBAAiB;AAAA,QACjC,UAAU,KAAK;AAAA,QACf,aAAa,iBAAiB;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,kBAAc;AAAA,MACZ,iBAAiB;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,0BAAoC;AACpE,MAAI,UAAU,YAAY,yBAAyB,MAAM;AACzD,aAAW;AAAA;AAAA;AACX,aAAW,kBAAkB,0BAA0B;AACrD,eAAW;AAAA,IAAO,cAAc;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,WAAW,0BAAoC;AACtD,MAAI,yBAAyB,WAAW,GAAG;AACzC,WAAO,sEAAsE,yBAAyB,CAAC,CAAC;AAAA,EAC1G;AACA,MAAI,UAAU,YAAY,yBAAyB,MAAM;AACzD,aAAW;AAAA;AAAA;AACX,aAAW,kBAAkB,0BAA0B;AACrD,eAAW;AAAA,IAAO,cAAc;AAAA,EAClC;AACA,aAAW;AAAA;AAAA;AACX,SAAO;AACT;",
-  "names": []
+  "sourcesContent": ["import { Command, Option } from \"@commander-js/extra-typings\";\nimport { BigBrainAuth, Context, oneoffContext } from \"../bundler/context.js\";\nimport { logFinishedStep, logMessage, logWarning } from \"../bundler/log.js\";\nimport {\n  checkAuthorization,\n  isAuthorizedHeader,\n  performLogin,\n} from \"./lib/login.js\";\nimport {\n  loadProjectLocalConfig,\n  loadUuidForAnonymousUser,\n} from \"./lib/localDeployment/filePaths.js\";\nimport {\n  handleLinkToProject,\n  listLegacyAnonymousDeployments,\n} from \"./lib/localDeployment/anonymous.js\";\nimport {\n  DASHBOARD_HOST,\n  deploymentDashboardUrlPage,\n  teamDashboardUrl,\n} from \"./lib/dashboard.js\";\nimport { promptSearch, promptYesNo } from \"./lib/utils/prompts.js\";\nimport { validateOrSelectTeam } from \"./lib/utils/utils.js\";\nimport {\n  selectProject,\n  updateEnvAndConfigForDeploymentSelection,\n} from \"./configure.js\";\nimport {\n  getDeploymentSelection,\n  shouldAllowAnonymousDevelopment,\n} from \"./lib/deploymentSelection.js\";\nimport {\n  isAnonymousDeployment,\n  removeAnonymousPrefix,\n} from \"./lib/deployment.js\";\nimport {\n  globalConfigPath,\n  readGlobalConfig,\n} from \"./lib/utils/globalConfig.js\";\nimport { getTeamsForUser } from \"./lib/api.js\";\nimport {\n  getProfileSelection,\n  initializeDefaultProfile,\n  legacyAuthForFirstProfile,\n  profileConfigPath,\n  readProfileAuth,\n  writeProfileCredentials,\n} from \"./lib/profiles.js\";\nimport {\n  getDeployKeySource,\n  loadProjectEnvironmentVariables,\n} from \"./lib/envvars.js\";\nimport { bindProfileToDirectory } from \"./lib/profileManagement.js\";\nimport { warnIfDeployKeyOverridesLogin } from \"./lib/deployKeyWarning.js\";\n\n/**\n * A project or deployment key in the environment outranks the account token for\n * commands run from this directory, and an expired one makes the CLI look\n * logged out, so report it separately from the account.\n */\nasync function reportDeployKeyInWorkingDirectory(\n  ctx: Context,\n  auth: BigBrainAuth | null,\n) {\n  // A preview deploy key is only used when there's no account token at all.\n  if (\n    auth === null ||\n    auth.kind === \"accessToken\" ||\n    auth.kind === \"previewDeployKey\"\n  ) {\n    return;\n  }\n  const key = auth.kind === \"projectKey\" ? auth.projectKey : auth.deploymentKey;\n  const { envVarName, source } = getDeployKeySource(key);\n  // Big Brain only strips a `project:`/`team:` prefix itself, so a deployment\n  // key authorizes only without its `dev:`/`prod:` prefix. Split on the first\n  // `|` like the server does, so a secret containing one survives.\n  const secret = key.slice(key.indexOf(\"|\") + 1);\n  if (await isAuthorizedHeader(ctx, `Bearer ${secret}`)) {\n    logMessage(`Working Directory: Valid ${envVarName} in ${source}`);\n    return;\n  }\n  logWarning(`Working Directory: Invalid ${envVarName} in ${source}`);\n}\n\nfunction createLoginStatusCommand() {\n  return new Command(\"status\")\n    .description(\n      \"Check login status and list accessible teams. Exits with code 1 when not logged in.\",\n    )\n    .allowExcessArguments(false)\n    .action(async () => {\n      const ctx = await oneoffContext({\n        url: undefined,\n        adminKey: undefined,\n        envFile: undefined,\n      });\n\n      // Keep the directory's deploy key for separate reporting after selecting\n      // the account whose teams will be listed.\n      const auth = ctx.bigBrainAuth();\n      let accountAuth = auth?.kind === \"accessToken\" ? auth : null;\n      if (accountAuth === null) {\n        const profile = await getProfileSelection(ctx);\n        if (profile !== null) {\n          accountAuth = await readProfileAuth(ctx, profile);\n        } else {\n          const globalConfig = readGlobalConfig(ctx);\n          if (globalConfig !== null) {\n            accountAuth = {\n              kind: \"accessToken\",\n              accessToken: globalConfig.accessToken,\n              header: `Bearer ${globalConfig.accessToken}`,\n              profile: null,\n            };\n          }\n        }\n      }\n      if (accountAuth === null) {\n        logMessage(`No Convex account token found in: ${globalConfigPath()}`);\n        logMessage(\"Status: Not logged in\");\n        await reportDeployKeyInWorkingDirectory(ctx, auth);\n        return await ctx.crash({\n          exitCode: 1,\n          errorType: \"fatal\",\n          printedMessage: null,\n        });\n      }\n      warnIfDeployKeyOverridesLogin(ctx, true);\n      if (accountAuth.profile) {\n        logMessage(`Account: ${accountAuth.profile.name}`);\n        logMessage(`Selected by: ${accountAuth.profile.source}`);\n        logMessage(\n          `Convex account token found in: ${profileConfigPath(accountAuth.profile.name)}`,\n        );\n      } else if (process.env.CONVEX_OVERRIDE_ACCESS_TOKEN) {\n        logMessage(\"Using CONVEX_OVERRIDE_ACCESS_TOKEN from the environment\");\n      } else {\n        logMessage(`Convex account token found in: ${globalConfigPath()}`);\n      }\n\n      if (!(await isAuthorizedHeader(ctx, accountAuth.header))) {\n        logMessage(\"Status: Not logged in\");\n        await reportDeployKeyInWorkingDirectory(ctx, auth);\n        return await ctx.crash({\n          exitCode: 1,\n          errorType: \"fatal\",\n          printedMessage: null,\n        });\n      }\n\n      logMessage(\"Status: Logged in\");\n      ctx._updateBigBrainAuth(accountAuth);\n      const teams = await getTeamsForUser(ctx);\n      logMessage(\n        `Teams: ${teams.length} team${teams.length === 1 ? \"\" : \"s\"} accessible`,\n      );\n      for (const team of teams) {\n        logMessage(`  - ${team.name} (${team.slug})`);\n      }\n      await reportDeployKeyInWorkingDirectory(ctx, auth);\n    });\n}\n\nexport function createLoginCommand() {\n  return (\n    new Command(\"login\")\n      .description(\"Login to Convex\")\n      .allowExcessArguments(false)\n      .option(\"--account <name>\", \"Log in to a named account\")\n      .option(\n        \"--select\",\n        \"Select this account for this directory and its subdirectories\",\n      )\n      .option(\n        \"--device-name <name>\",\n        \"Provide a name for the device being authorized\",\n      )\n      .option(\n        \"-f, --force\",\n        \"Proceed with login even if a valid access token already exists for this device\",\n      )\n      .option(\n        \"--no-open\",\n        \"Don't automatically open the login link in the default browser\",\n      )\n      .addOption(\n        new Option(\n          \"--login-flow <mode>\",\n          `How to log in; defaults to guessing based on the environment.`,\n        )\n          .choices([\"paste\", \"auto\", \"poll\"] as const)\n          .default(\"auto\" as const),\n      )\n      .addOption(new Option(\"--link-deployments\").hideHelp())\n      // These options are hidden from the help/usage message, but allow overriding settings for testing.\n      // Change the auth credentials with the auth provider\n      .addOption(new Option(\"--override-auth-url <url>\").hideHelp())\n      .addOption(new Option(\"--override-auth-client <id>\").hideHelp())\n      .addOption(new Option(\"--override-auth-username <username>\").hideHelp())\n      .addOption(new Option(\"--override-auth-password <password>\").hideHelp())\n      // Skip the auth provider login and directly use this access token\n      .addOption(new Option(\"--override-access-token <token>\").hideHelp())\n      // Automatically accept opt ins without prompting\n      .addOption(new Option(\"--accept-opt-ins\").hideHelp())\n      // Dump the access token from the auth provider and skip authorization with Convex\n      .addOption(new Option(\"--dump-access-token\").hideHelp())\n      // Hidden option for tests to check if the user is logged in.\n      .addOption(new Option(\"--check-login\").hideHelp())\n      // Redirect to Vercel SSO integration URL\n      .addOption(\n        new Option(\n          \"--vercel\",\n          \"Redirect to Vercel SSO integration for login\",\n        ).hideHelp(),\n      )\n      // Override the Vercel URL slug (defaults to 'convex')\n      .addOption(new Option(\"--vercel-override <slug>\").hideHelp())\n      .addCommand(createLoginStatusCommand())\n      .addHelpCommand(false)\n      .action(async (options, cmd: Command) => {\n        const ctx = await oneoffContext({\n          url: undefined,\n          adminKey: undefined,\n          envFile: undefined,\n          skipAuth: true,\n        });\n        const profile = await getProfileSelection(ctx, {\n          name: options.account,\n        });\n        if (options.select && profile === null) {\n          cmd.error(\"Pass --account <name> with --select to name this login.\");\n        }\n        loadProjectEnvironmentVariables();\n        let namingLegacyAccount = false;\n        if (profile !== null) {\n          let auth = options.force\n            ? null\n            : await readProfileAuth(ctx, profile, true);\n          if (\n            auth === null &&\n            !options.force &&\n            !options.overrideAccessToken &&\n            !options.overrideAuthUsername &&\n            !process.env.CONVEX_OVERRIDE_ACCESS_TOKEN\n          ) {\n            auth = await legacyAuthForFirstProfile(ctx, profile);\n            namingLegacyAccount = auth !== null;\n          }\n          ctx._updateBigBrainAuth(auth);\n        } else {\n          const accessToken =\n            process.env.CONVEX_OVERRIDE_ACCESS_TOKEN ||\n            readGlobalConfig(ctx)?.accessToken;\n          ctx._updateBigBrainAuth(\n            accessToken\n              ? {\n                  kind: \"accessToken\",\n                  accessToken,\n                  header: `Bearer ${accessToken}`,\n                  profile: null,\n                }\n              : null,\n          );\n        }\n        warnIfDeployKeyOverridesLogin(ctx, ctx.bigBrainAuth() !== null);\n        if (\n          !options.force &&\n          (await checkAuthorization(ctx, !!options.acceptOptIns))\n        ) {\n          const auth = ctx.bigBrainAuth();\n          if (\n            namingLegacyAccount &&\n            profile !== null &&\n            auth?.kind === \"accessToken\"\n          ) {\n            await writeProfileCredentials(\n              ctx,\n              profile.name,\n              auth.accessToken,\n              {},\n              null,\n            );\n          }\n          logFinishedStep(\n            profile !== null\n              ? namingLegacyAccount\n                ? `Saved account \"${profile.name}\" using your existing login.`\n                : `Account \"${profile.name}\" is already logged in.`\n              : \"This device has previously been authorized and is ready for use with Convex.\",\n          );\n          if (profile !== null && auth?.kind === \"accessToken\") {\n            await initializeDefaultProfile(\n              ctx,\n              profile,\n              namingLegacyAccount,\n              !!options.select,\n            );\n          }\n          if (options.select && profile !== null) {\n            if (!(await bindProfileToDirectory(ctx, profile.name))) {\n              return await ctx.crash({\n                exitCode: 1,\n                errorType: \"fatal\",\n                printedMessage: `Logged in as \"${profile.name}\", but the directory selection could not be changed.`,\n              });\n            }\n          }\n          await handleLinkingDeployments(ctx, {\n            interactive: !!options.linkDeployments,\n          });\n          return;\n        }\n        if (!options.force && options.checkLogin) {\n          const isLoggedIn = await checkAuthorization(\n            ctx,\n            !!options.acceptOptIns,\n          );\n          if (!isLoggedIn) {\n            return ctx.crash({\n              exitCode: 1,\n              errorType: \"fatal\",\n              errForSentry: \"You are not logged in.\",\n              printedMessage: \"You are not logged in.\",\n            });\n          }\n        }\n        if (!!options.overrideAuthUsername !== !!options.overrideAuthPassword) {\n          cmd.error(\n            \"If overriding credentials, both username and password must be provided\",\n          );\n        }\n\n        const uuid = loadUuidForAnonymousUser(ctx);\n        await performLogin(ctx, {\n          ...options,\n          profile,\n          anonymousId: uuid,\n          vercel: options.vercel,\n          vercelOverride: options.vercelOverride,\n        });\n\n        const auth = ctx.bigBrainAuth();\n        if (profile !== null && auth?.kind === \"accessToken\") {\n          await initializeDefaultProfile(\n            ctx,\n            profile,\n            namingLegacyAccount,\n            !!options.select,\n          );\n        }\n        if (options.select && profile !== null) {\n          if (!(await bindProfileToDirectory(ctx, profile.name))) {\n            return await ctx.crash({\n              exitCode: 1,\n              errorType: \"fatal\",\n              printedMessage: `Logged in as \"${profile.name}\", but the directory selection could not be changed.`,\n            });\n          }\n        }\n        warnIfDeployKeyOverridesLogin(ctx, true);\n\n        await handleLinkingDeployments(ctx, {\n          interactive: !!options.linkDeployments,\n        });\n      })\n  );\n}\n\nexport const login = createLoginCommand();\n\nasync function handleLinkingDeployments(\n  ctx: Context,\n  args: {\n    interactive: boolean;\n  },\n) {\n  if (!shouldAllowAnonymousDevelopment()) {\n    return;\n  }\n\n  // Check for project-local anonymous deployment first - this takes priority\n  const projectLocal = loadProjectLocalConfig(ctx);\n  if (\n    projectLocal !== null &&\n    isAnonymousDeployment(projectLocal.deploymentName)\n  ) {\n    const shouldLink = await promptYesNo(ctx, {\n      message: `Would you like to link your existing deployment to your account? (\"${projectLocal.deploymentName}\")`,\n      default: true,\n    });\n    if (!shouldLink) {\n      logMessage(\n        \"Not linking your existing deployment. If you want to link it later, run `npx convex login --link-deployments`.\",\n      );\n      logMessage(\n        `Visit ${DASHBOARD_HOST} or run \\`npx convex dev\\` to get started with your new account.`,\n      );\n      return;\n    }\n\n    const { dashboardUrl } = await linkSingleDeployment(\n      ctx,\n      projectLocal.deploymentName,\n      projectLocal.deploymentName,\n    );\n    logFinishedStep(`Visit ${dashboardUrl} to get started.`);\n    return;\n  }\n\n  // No project-local deployment - check for legacy deployments\n  const legacyDeployments = listLegacyAnonymousDeployments(ctx);\n  if (legacyDeployments.length === 0) {\n    if (args.interactive) {\n      logMessage(\n        \"It doesn't look like you have any deployments to link. You can run `npx convex dev` to set up a new project or select an existing one.\",\n      );\n    }\n    return;\n  }\n\n  // Get the currently configured deployment (if any) for env var updates\n  const deploymentSelection = await getDeploymentSelection(ctx, {\n    url: undefined,\n    adminKey: undefined,\n    envFile: undefined,\n  });\n  const configuredDeployment =\n    deploymentSelection.kind === \"anonymous\"\n      ? deploymentSelection.deploymentName\n      : null;\n\n  if (!args.interactive) {\n    // Non-interactive: link all legacy deployments automatically\n    const message = getMessage(legacyDeployments.map((d) => d.deploymentName));\n    const createProjects = await promptYesNo(ctx, {\n      message,\n      default: true,\n    });\n    if (!createProjects) {\n      logMessage(\n        \"Not linking your existing deployments. If you want to link them later, run `npx convex login --link-deployments`.\",\n      );\n      logMessage(\n        `Visit ${DASHBOARD_HOST} or run \\`npx convex dev\\` to get started with your new account.`,\n      );\n      return;\n    }\n\n    const {\n      team: { slug: teamSlug },\n    } = await validateOrSelectTeam(\n      ctx,\n      undefined,\n      \"Choose a team for your deployments:\",\n    );\n    let dashboardUrl = teamDashboardUrl(teamSlug);\n    for (const deployment of legacyDeployments) {\n      const result = await linkSingleDeployment(\n        ctx,\n        deployment.deploymentName,\n        configuredDeployment,\n        { teamSlug, projectSlug: null },\n      );\n      if (deployment.deploymentName === configuredDeployment) {\n        dashboardUrl = result.dashboardUrl;\n      }\n    }\n    logFinishedStep(\n      `Successfully linked your deployments! Visit ${dashboardUrl} to get started.`,\n    );\n    return;\n  }\n\n  // Interactive mode: let user choose which legacy deployments to link\n  while (true) {\n    const currentLegacyDeployments = listLegacyAnonymousDeployments(ctx);\n    if (currentLegacyDeployments.length === 0) {\n      logMessage(\"All deployments have been linked.\");\n      break;\n    }\n    logMessage(\n      getDeploymentListMessage(\n        currentLegacyDeployments.map((d) => d.deploymentName),\n      ),\n    );\n    const deploymentToLink = await promptSearch(ctx, {\n      message: \"Which deployment would you like to link to your account?\",\n      choices: currentLegacyDeployments.map((d) => ({\n        name: d.deploymentName,\n        value: d.deploymentName,\n      })),\n    });\n\n    await linkSingleDeployment(ctx, deploymentToLink, configuredDeployment);\n\n    const shouldContinue = await promptYesNo(ctx, {\n      message: \"Would you like to link another deployment?\",\n      default: true,\n    });\n    if (!shouldContinue) {\n      break;\n    }\n  }\n}\n\n/**\n * Link a single deployment to a project, prompting for team and project selection.\n * Updates env vars if this is the currently configured deployment.\n */\nasync function linkSingleDeployment(\n  ctx: Context,\n  deploymentName: string,\n  configuredDeployment: string | null,\n  options?: {\n    teamSlug?: string;\n    projectSlug?: string | null;\n  },\n): Promise<{ dashboardUrl: string }> {\n  const { team } = await validateOrSelectTeam(\n    ctx,\n    options?.teamSlug,\n    \"Choose a team for your deployment:\",\n  );\n\n  const projectSlug =\n    options?.projectSlug ??\n    (\n      await selectProject(ctx, \"ask\", {\n        team: team.slug,\n        devDeployment: \"local\",\n        defaultProjectName: removeAnonymousPrefix(deploymentName),\n      })\n    ).projectSlug;\n\n  const linkedDeployment = await handleLinkToProject(ctx, {\n    deploymentName,\n    teamSlug: team.slug,\n    teamId: team.id,\n    projectSlug,\n  });\n\n  if (deploymentName === configuredDeployment) {\n    await updateEnvAndConfigForDeploymentSelection(\n      ctx,\n      {\n        url: linkedDeployment.deploymentUrl,\n        deploymentName: linkedDeployment.deploymentName,\n        teamSlug: team.slug,\n        projectSlug: linkedDeployment.projectSlug,\n        deploymentType: \"local\",\n      },\n      configuredDeployment,\n    );\n  }\n\n  return {\n    dashboardUrl: deploymentDashboardUrlPage(\n      linkedDeployment.deploymentName,\n      \"\",\n    ),\n  };\n}\n\nfunction getDeploymentListMessage(anonymousDeploymentNames: string[]) {\n  let message = `You have ${anonymousDeploymentNames.length} existing deployments.`;\n  message += `\\n\\nDeployments:`;\n  for (const deploymentName of anonymousDeploymentNames) {\n    message += `\\n- ${deploymentName}`;\n  }\n  return message;\n}\n\nfunction getMessage(anonymousDeploymentNames: string[]) {\n  if (anonymousDeploymentNames.length === 1) {\n    return `Would you like to link your existing deployment to your account? (\"${anonymousDeploymentNames[0]}\")`;\n  }\n  let message = `You have ${anonymousDeploymentNames.length} existing deployments. Would you like to link them to your account?`;\n  message += `\\n\\nDeployments:`;\n  for (const deploymentName of anonymousDeploymentNames) {\n    message += `\\n- ${deploymentName}`;\n  }\n  message += `\\n\\nYou can alternatively run \\`npx convex login --link-deployments\\` to interactively choose which deployments to add.`;\n  return message;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,2BAAgC;AAChC,qBAAqD;AACrD,iBAAwD;AACxD,mBAIO;AACP,uBAGO;AACP,uBAGO;AACP,uBAIO;AACP,qBAA0C;AAC1C,mBAAqC;AACrC,uBAGO;AACP,iCAGO;AACP,wBAGO;AACP,0BAGO;AACP,iBAAgC;AAChC,sBAOO;AACP,qBAGO;AACP,+BAAuC;AACvC,8BAA8C;AAO9C,eAAe,kCACb,KACA,MACA;AAEA,MACE,SAAS,QACT,KAAK,SAAS,iBACd,KAAK,SAAS,oBACd;AACA;AAAA,EACF;AACA,QAAM,MAAM,KAAK,SAAS,eAAe,KAAK,aAAa,KAAK;AAChE,QAAM,EAAE,YAAY,OAAO,QAAI,mCAAmB,GAAG;AAIrD,QAAM,SAAS,IAAI,MAAM,IAAI,QAAQ,GAAG,IAAI,CAAC;AAC7C,MAAI,UAAM,iCAAmB,KAAK,UAAU,MAAM,EAAE,GAAG;AACrD,+BAAW,4BAA4B,UAAU,OAAO,MAAM,EAAE;AAChE;AAAA,EACF;AACA,6BAAW,8BAA8B,UAAU,OAAO,MAAM,EAAE;AACpE;AAEA,SAAS,2BAA2B;AAClC,SAAO,IAAI,6BAAQ,QAAQ,EACxB;AAAA,IACC;AAAA,EACF,EACC,qBAAqB,KAAK,EAC1B,OAAO,YAAY;AAClB,UAAM,MAAM,UAAM,8BAAc;AAAA,MAC9B,KAAK;AAAA,MACL,UAAU;AAAA,MACV,SAAS;AAAA,IACX,CAAC;AAID,UAAM,OAAO,IAAI,aAAa;AAC9B,QAAI,cAAc,MAAM,SAAS,gBAAgB,OAAO;AACxD,QAAI,gBAAgB,MAAM;AACxB,YAAM,UAAU,UAAM,qCAAoB,GAAG;AAC7C,UAAI,YAAY,MAAM;AACpB,sBAAc,UAAM,iCAAgB,KAAK,OAAO;AAAA,MAClD,OAAO;AACL,cAAM,mBAAe,sCAAiB,GAAG;AACzC,YAAI,iBAAiB,MAAM;AACzB,wBAAc;AAAA,YACZ,MAAM;AAAA,YACN,aAAa,aAAa;AAAA,YAC1B,QAAQ,UAAU,aAAa,WAAW;AAAA,YAC1C,SAAS;AAAA,UACX;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,QAAI,gBAAgB,MAAM;AACxB,iCAAW,yCAAqC,sCAAiB,CAAC,EAAE;AACpE,iCAAW,uBAAuB;AAClC,YAAM,kCAAkC,KAAK,IAAI;AACjD,aAAO,MAAM,IAAI,MAAM;AAAA,QACrB,UAAU;AAAA,QACV,WAAW;AAAA,QACX,gBAAgB;AAAA,MAClB,CAAC;AAAA,IACH;AACA,+DAA8B,KAAK,IAAI;AACvC,QAAI,YAAY,SAAS;AACvB,iCAAW,YAAY,YAAY,QAAQ,IAAI,EAAE;AACjD,iCAAW,gBAAgB,YAAY,QAAQ,MAAM,EAAE;AACvD;AAAA,QACE,sCAAkC,mCAAkB,YAAY,QAAQ,IAAI,CAAC;AAAA,MAC/E;AAAA,IACF,WAAW,QAAQ,IAAI,8BAA8B;AACnD,iCAAW,yDAAyD;AAAA,IACtE,OAAO;AACL,iCAAW,sCAAkC,sCAAiB,CAAC,EAAE;AAAA,IACnE;AAEA,QAAI,CAAE,UAAM,iCAAmB,KAAK,YAAY,MAAM,GAAI;AACxD,iCAAW,uBAAuB;AAClC,YAAM,kCAAkC,KAAK,IAAI;AACjD,aAAO,MAAM,IAAI,MAAM;AAAA,QACrB,UAAU;AAAA,QACV,WAAW;AAAA,QACX,gBAAgB;AAAA,MAClB,CAAC;AAAA,IACH;AAEA,+BAAW,mBAAmB;AAC9B,QAAI,oBAAoB,WAAW;AACnC,UAAM,QAAQ,UAAM,4BAAgB,GAAG;AACvC;AAAA,MACE,UAAU,MAAM,MAAM,QAAQ,MAAM,WAAW,IAAI,KAAK,GAAG;AAAA,IAC7D;AACA,eAAW,QAAQ,OAAO;AACxB,iCAAW,OAAO,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG;AAAA,IAC9C;AACA,UAAM,kCAAkC,KAAK,IAAI;AAAA,EACnD,CAAC;AACL;AAEO,SAAS,qBAAqB;AACnC,SACE,IAAI,6BAAQ,OAAO,EAChB,YAAY,iBAAiB,EAC7B,qBAAqB,KAAK,EAC1B,OAAO,oBAAoB,2BAA2B,EACtD;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC;AAAA,IACA;AAAA,EACF,EACC;AAAA,IACC,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF,EACG,QAAQ,CAAC,SAAS,QAAQ,MAAM,CAAU,EAC1C,QAAQ,MAAe;AAAA,EAC5B,EACC,UAAU,IAAI,4BAAO,oBAAoB,EAAE,SAAS,CAAC,EAGrD,UAAU,IAAI,4BAAO,2BAA2B,EAAE,SAAS,CAAC,EAC5D,UAAU,IAAI,4BAAO,6BAA6B,EAAE,SAAS,CAAC,EAC9D,UAAU,IAAI,4BAAO,qCAAqC,EAAE,SAAS,CAAC,EACtE,UAAU,IAAI,4BAAO,qCAAqC,EAAE,SAAS,CAAC,EAEtE,UAAU,IAAI,4BAAO,iCAAiC,EAAE,SAAS,CAAC,EAElE,UAAU,IAAI,4BAAO,kBAAkB,EAAE,SAAS,CAAC,EAEnD,UAAU,IAAI,4BAAO,qBAAqB,EAAE,SAAS,CAAC,EAEtD,UAAU,IAAI,4BAAO,eAAe,EAAE,SAAS,CAAC,EAEhD;AAAA,IACC,IAAI;AAAA,MACF;AAAA,MACA;AAAA,IACF,EAAE,SAAS;AAAA,EACb,EAEC,UAAU,IAAI,4BAAO,0BAA0B,EAAE,SAAS,CAAC,EAC3D,WAAW,yBAAyB,CAAC,EACrC,eAAe,KAAK,EACpB,OAAO,OAAO,SAAS,QAAiB;AACvC,UAAM,MAAM,UAAM,8BAAc;AAAA,MAC9B,KAAK;AAAA,MACL,UAAU;AAAA,MACV,SAAS;AAAA,MACT,UAAU;AAAA,IACZ,CAAC;AACD,UAAM,UAAU,UAAM,qCAAoB,KAAK;AAAA,MAC7C,MAAM,QAAQ;AAAA,IAChB,CAAC;AACD,QAAI,QAAQ,UAAU,YAAY,MAAM;AACtC,UAAI,MAAM,yDAAyD;AAAA,IACrE;AACA,wDAAgC;AAChC,QAAI,sBAAsB;AAC1B,QAAI,YAAY,MAAM;AACpB,UAAIA,QAAO,QAAQ,QACf,OACA,UAAM,iCAAgB,KAAK,SAAS,IAAI;AAC5C,UACEA,UAAS,QACT,CAAC,QAAQ,SACT,CAAC,QAAQ,uBACT,CAAC,QAAQ,wBACT,CAAC,QAAQ,IAAI,8BACb;AACA,QAAAA,QAAO,UAAM,2CAA0B,KAAK,OAAO;AACnD,8BAAsBA,UAAS;AAAA,MACjC;AACA,UAAI,oBAAoBA,KAAI;AAAA,IAC9B,OAAO;AACL,YAAM,cACJ,QAAQ,IAAI,oCACZ,sCAAiB,GAAG,GAAG;AACzB,UAAI;AAAA,QACF,cACI;AAAA,UACE,MAAM;AAAA,UACN;AAAA,UACA,QAAQ,UAAU,WAAW;AAAA,UAC7B,SAAS;AAAA,QACX,IACA;AAAA,MACN;AAAA,IACF;AACA,+DAA8B,KAAK,IAAI,aAAa,MAAM,IAAI;AAC9D,QACE,CAAC,QAAQ,SACR,UAAM,iCAAmB,KAAK,CAAC,CAAC,QAAQ,YAAY,GACrD;AACA,YAAMA,QAAO,IAAI,aAAa;AAC9B,UACE,uBACA,YAAY,QACZA,OAAM,SAAS,eACf;AACA,kBAAM;AAAA,UACJ;AAAA,UACA,QAAQ;AAAA,UACRA,MAAK;AAAA,UACL,CAAC;AAAA,UACD;AAAA,QACF;AAAA,MACF;AACA;AAAA,QACE,YAAY,OACR,sBACE,kBAAkB,QAAQ,IAAI,iCAC9B,YAAY,QAAQ,IAAI,4BAC1B;AAAA,MACN;AACA,UAAI,YAAY,QAAQA,OAAM,SAAS,eAAe;AACpD,kBAAM;AAAA,UACJ;AAAA,UACA;AAAA,UACA;AAAA,UACA,CAAC,CAAC,QAAQ;AAAA,QACZ;AAAA,MACF;AACA,UAAI,QAAQ,UAAU,YAAY,MAAM;AACtC,YAAI,CAAE,UAAM,iDAAuB,KAAK,QAAQ,IAAI,GAAI;AACtD,iBAAO,MAAM,IAAI,MAAM;AAAA,YACrB,UAAU;AAAA,YACV,WAAW;AAAA,YACX,gBAAgB,iBAAiB,QAAQ,IAAI;AAAA,UAC/C,CAAC;AAAA,QACH;AAAA,MACF;AACA,YAAM,yBAAyB,KAAK;AAAA,QAClC,aAAa,CAAC,CAAC,QAAQ;AAAA,MACzB,CAAC;AACD;AAAA,IACF;AACA,QAAI,CAAC,QAAQ,SAAS,QAAQ,YAAY;AACxC,YAAM,aAAa,UAAM;AAAA,QACvB;AAAA,QACA,CAAC,CAAC,QAAQ;AAAA,MACZ;AACA,UAAI,CAAC,YAAY;AACf,eAAO,IAAI,MAAM;AAAA,UACf,UAAU;AAAA,UACV,WAAW;AAAA,UACX,cAAc;AAAA,UACd,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH;AAAA,IACF;AACA,QAAI,CAAC,CAAC,QAAQ,yBAAyB,CAAC,CAAC,QAAQ,sBAAsB;AACrE,UAAI;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,UAAM,WAAO,2CAAyB,GAAG;AACzC,cAAM,2BAAa,KAAK;AAAA,MACtB,GAAG;AAAA,MACH;AAAA,MACA,aAAa;AAAA,MACb,QAAQ,QAAQ;AAAA,MAChB,gBAAgB,QAAQ;AAAA,IAC1B,CAAC;AAED,UAAM,OAAO,IAAI,aAAa;AAC9B,QAAI,YAAY,QAAQ,MAAM,SAAS,eAAe;AACpD,gBAAM;AAAA,QACJ;AAAA,QACA;AAAA,QACA;AAAA,QACA,CAAC,CAAC,QAAQ;AAAA,MACZ;AAAA,IACF;AACA,QAAI,QAAQ,UAAU,YAAY,MAAM;AACtC,UAAI,CAAE,UAAM,iDAAuB,KAAK,QAAQ,IAAI,GAAI;AACtD,eAAO,MAAM,IAAI,MAAM;AAAA,UACrB,UAAU;AAAA,UACV,WAAW;AAAA,UACX,gBAAgB,iBAAiB,QAAQ,IAAI;AAAA,QAC/C,CAAC;AAAA,MACH;AAAA,IACF;AACA,+DAA8B,KAAK,IAAI;AAEvC,UAAM,yBAAyB,KAAK;AAAA,MAClC,aAAa,CAAC,CAAC,QAAQ;AAAA,IACzB,CAAC;AAAA,EACH,CAAC;AAEP;AAEO,MAAM,QAAQ,mBAAmB;AAExC,eAAe,yBACb,KACA,MAGA;AACA,MAAI,KAAC,4DAAgC,GAAG;AACtC;AAAA,EACF;AAGA,QAAM,mBAAe,yCAAuB,GAAG;AAC/C,MACE,iBAAiB,YACjB,yCAAsB,aAAa,cAAc,GACjD;AACA,UAAM,aAAa,UAAM,4BAAY,KAAK;AAAA,MACxC,SAAS,sEAAsE,aAAa,cAAc;AAAA,MAC1G,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,YAAY;AACf;AAAA,QACE;AAAA,MACF;AACA;AAAA,QACE,SAAS,+BAAc;AAAA,MACzB;AACA;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,MAAM;AAAA,MAC7B;AAAA,MACA,aAAa;AAAA,MACb,aAAa;AAAA,IACf;AACA,oCAAgB,SAAS,YAAY,kBAAkB;AACvD;AAAA,EACF;AAGA,QAAM,wBAAoB,iDAA+B,GAAG;AAC5D,MAAI,kBAAkB,WAAW,GAAG;AAClC,QAAI,KAAK,aAAa;AACpB;AAAA,QACE;AAAA,MACF;AAAA,IACF;AACA;AAAA,EACF;AAGA,QAAM,sBAAsB,UAAM,mDAAuB,KAAK;AAAA,IAC5D,KAAK;AAAA,IACL,UAAU;AAAA,IACV,SAAS;AAAA,EACX,CAAC;AACD,QAAM,uBACJ,oBAAoB,SAAS,cACzB,oBAAoB,iBACpB;AAEN,MAAI,CAAC,KAAK,aAAa;AAErB,UAAM,UAAU,WAAW,kBAAkB,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC;AACzE,UAAM,iBAAiB,UAAM,4BAAY,KAAK;AAAA,MAC5C;AAAA,MACA,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,gBAAgB;AACnB;AAAA,QACE;AAAA,MACF;AACA;AAAA,QACE,SAAS,+BAAc;AAAA,MACzB;AACA;AAAA,IACF;AAEA,UAAM;AAAA,MACJ,MAAM,EAAE,MAAM,SAAS;AAAA,IACzB,IAAI,UAAM;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AACA,QAAI,mBAAe,mCAAiB,QAAQ;AAC5C,eAAW,cAAc,mBAAmB;AAC1C,YAAM,SAAS,MAAM;AAAA,QACnB;AAAA,QACA,WAAW;AAAA,QACX;AAAA,QACA,EAAE,UAAU,aAAa,KAAK;AAAA,MAChC;AACA,UAAI,WAAW,mBAAmB,sBAAsB;AACtD,uBAAe,OAAO;AAAA,MACxB;AAAA,IACF;AACA;AAAA,MACE,+CAA+C,YAAY;AAAA,IAC7D;AACA;AAAA,EACF;AAGA,SAAO,MAAM;AACX,UAAM,+BAA2B,iDAA+B,GAAG;AACnE,QAAI,yBAAyB,WAAW,GAAG;AACzC,iCAAW,mCAAmC;AAC9C;AAAA,IACF;AACA;AAAA,MACE;AAAA,QACE,yBAAyB,IAAI,CAAC,MAAM,EAAE,cAAc;AAAA,MACtD;AAAA,IACF;AACA,UAAM,mBAAmB,UAAM,6BAAa,KAAK;AAAA,MAC/C,SAAS;AAAA,MACT,SAAS,yBAAyB,IAAI,CAAC,OAAO;AAAA,QAC5C,MAAM,EAAE;AAAA,QACR,OAAO,EAAE;AAAA,MACX,EAAE;AAAA,IACJ,CAAC;AAED,UAAM,qBAAqB,KAAK,kBAAkB,oBAAoB;AAEtE,UAAM,iBAAiB,UAAM,4BAAY,KAAK;AAAA,MAC5C,SAAS;AAAA,MACT,SAAS;AAAA,IACX,CAAC;AACD,QAAI,CAAC,gBAAgB;AACnB;AAAA,IACF;AAAA,EACF;AACF;AAMA,eAAe,qBACb,KACA,gBACA,sBACA,SAImC;AACnC,QAAM,EAAE,KAAK,IAAI,UAAM;AAAA,IACrB;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EACF;AAEA,QAAM,cACJ,SAAS,gBAEP,UAAM,gCAAc,KAAK,OAAO;AAAA,IAC9B,MAAM,KAAK;AAAA,IACX,eAAe;AAAA,IACf,wBAAoB,yCAAsB,cAAc;AAAA,EAC1D,CAAC,GACD;AAEJ,QAAM,mBAAmB,UAAM,sCAAoB,KAAK;AAAA,IACtD;AAAA,IACA,UAAU,KAAK;AAAA,IACf,QAAQ,KAAK;AAAA,IACb;AAAA,EACF,CAAC;AAED,MAAI,mBAAmB,sBAAsB;AAC3C,cAAM;AAAA,MACJ;AAAA,MACA;AAAA,QACE,KAAK,iBAAiB;AAAA,QACtB,gBAAgB,iBAAiB;AAAA,QACjC,UAAU,KAAK;AAAA,QACf,aAAa,iBAAiB;AAAA,QAC9B,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL,kBAAc;AAAA,MACZ,iBAAiB;AAAA,MACjB;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,yBAAyB,0BAAoC;AACpE,MAAI,UAAU,YAAY,yBAAyB,MAAM;AACzD,aAAW;AAAA;AAAA;AACX,aAAW,kBAAkB,0BAA0B;AACrD,eAAW;AAAA,IAAO,cAAc;AAAA,EAClC;AACA,SAAO;AACT;AAEA,SAAS,WAAW,0BAAoC;AACtD,MAAI,yBAAyB,WAAW,GAAG;AACzC,WAAO,sEAAsE,yBAAyB,CAAC,CAAC;AAAA,EAC1G;AACA,MAAI,UAAU,YAAY,yBAAyB,MAAM;AACzD,aAAW;AAAA;AAAA;AACX,aAAW,kBAAkB,0BAA0B;AACrD,eAAW;AAAA,IAAO,cAAc;AAAA,EAClC;AACA,aAAW;AAAA;AAAA;AACX,SAAO;AACT;",
+  "names": ["auth"]
 }