expandai 0.0.2 → 0.0.3

package/build/esm/main.js

@@ -3,21 +3,34 @@ import { CliConfig, Command, ValidationError } from '@effect/cli';
 import { Terminal } from '@effect/platform';
 import { NodeContext, NodeRuntime } from '@effect/platform-node';
 import { Cause, Config, Console, Effect, Layer, Logger, LogLevel, Option, Schema, String } from 'effect';
+import { ManualAuthorization } from './Auth/ManualAuthorization.js';
+import { PendingInitStore } from './Auth/PendingInit.js';
+import { SetupGrantAuthorization } from './Auth/SetupGrantAuthorization.js';
 import { Authentication, LoginCommand, LogoutCommand, WhoamiCommand } from './Authentication.js';
+import { commandFromArgv } from './CommandPath.js';
 import { FetchCommand } from './Commands/Fetch.js';
 import { AgentHookCommand, HumanHookCommand } from './Commands/Hook.js';
+import { AgentInitCommand, HumanInitCommand, InitTerminalInteraction, preflightAgentInitArgv, resolveInitExecutionMode, } from './Commands/Init.js';
 import { InstallSubCommand, UninstallSubCommand } from './Commands/Mcp.js';
 import { McpRunCommand } from './Commands/McpRun.js';
 import { SearchCommand } from './Commands/Search.js';
 import { SkillCommand } from './Commands/Skill.js';
+import { AgentStatusCommand, HumanStatusCommand, preflightAgentStatusArgv, resolveStatusExecutionMode, StatusTerminalInteraction, } from './Commands/Status.js';
+import { TelemetryCommand } from './Commands/Telemetry.js';
 import { UninstallCommand } from './Commands/Uninstall.js';
-import { ConfigManager } from './Config.js';
+import { ConfigManager, envFlag, envLiteral } from './Config.js';
 import { ClaudeHook } from './Hook/Claude.js';
 import { OpencodeHook } from './Hook/Opencode.js';
+import { HarnessDetector } from './Init/HarnessDetector.js';
+import { HarnessRegistry } from './Init/HarnessRegistry.js';
+import { InitService } from './Init/Service.js';
+import { StatusService } from './Init/Status.js';
 import { HookInstaller } from './Install/Hook.js';
 import { Mcp } from './Install/Mcp.js';
 import { Skill as SkillInstaller } from './Install/Skill.js';
 import { Uninstall } from './Install/Uninstall.js';
+import { Telemetry } from './Telemetry.js';
+import { CLI_VERSION } from './Version.js';
 /**
  * Where this process is running:
  *  - 'human': interactive terminal use. Setup commands (`mcp install`, `skill install`) are visible.
@@ -25,16 +38,38 @@ import { Uninstall } from './Install/Uninstall.js';
  *            the CLI. Setup commands are hidden because the integration is already wired up.
  *  - 'mcp':   the binary is serving as the MCP transport. MCP only runs in agents.
  */
+// envFlag / envLiteral read leniently: a malformed value (CLAUDECODE=banana,
+// EXPANDAI_CLI_CONTEXT=bogus) must degrade instead of crashing the CLI —
+// Config.option / Config.withDefault only absorb missing data, not invalid.
 const EnvironmentSignals = Config.all({
-    override: Schema.Config('EXPANDAI_CLI_CONTEXT', Schema.Literal('human', 'agent')).pipe(Config.option),
+    override: envLiteral('EXPANDAI_CLI_CONTEXT', Schema.Literal('human', 'agent')),
     mcpTransport: Config.string('MCP_TRANSPORT').pipe(Config.option, Config.map(Option.isSome)),
-    claudeCode: Config.boolean('CLAUDECODE').pipe(Config.withDefault(false)),
+    claudeCode: envFlag('CLAUDECODE'),
     cursor: Config.string('CURSOR_TRACE_ID').pipe(Config.option, Config.map(Option.isSome)),
     codex: Config.string('CODEX_RUN_ID').pipe(Config.option, Config.map(Option.isSome)),
 });
-const detectContext = Effect.gen(function* () {
+const detectContext = Effect.fnUntraced(function* (command) {
+    const initMode = resolveInitExecutionMode({
+        argv: process.argv,
+        environment: process.env,
+        stdinIsTty: process.stdin.isTTY === true,
+        stdoutIsTty: process.stdout.isTTY === true,
+    });
+    if (initMode !== undefined)
+        return initMode === 'machine' ? 'agent' : 'human';
+    const statusMode = resolveStatusExecutionMode({
+        argv: process.argv,
+        environment: process.env,
+        stdinIsTty: process.stdin.isTTY === true,
+        stdoutIsTty: process.stdout.isTTY === true,
+    });
+    if (statusMode !== undefined)
+        return statusMode === 'machine' ? 'agent' : 'human';
     const signals = yield* EnvironmentSignals;
-    const mcp = signals.mcpTransport ? Option.some('mcp') : Option.none();
+    // Installed MCP entries invoke `expandai mcp run` without any transport env
+    // var, so the resolved command is the reliable signal; MCP_TRANSPORT stays
+    // as a secondary hint for hand-written configs that set it.
+    const mcp = command === 'mcp run' || signals.mcpTransport ? Option.some('mcp') : Option.none();
     // Authentication.logout uses both stdout and stdin TTY checks because Prompt
     // reads from stdin; for context detection a non-TTY stdout alone is enough
     // to identify a non-interactive caller.
@@ -45,35 +80,90 @@ const detectContext = Effect.gen(function* () {
 });
 const HumanMcp = Command.make('mcp').pipe(Command.withDescription('Run or install the expandai MCP server'), Command.withSubcommands([McpRunCommand, InstallSubCommand, UninstallSubCommand]));
 const AgentMcp = Command.make('mcp').pipe(Command.withDescription('Run the expandai MCP server'), Command.withSubcommands([McpRunCommand]));
+const InitServiceLive = InitService.DefaultWithoutDependencies.pipe(Layer.provide(Layer.mergeAll(Authentication.Default, ManualAuthorization.Default, SetupGrantAuthorization.Default, HarnessRegistry.Default)));
+const StatusServiceLive = StatusService.DefaultWithoutDependencies.pipe(Layer.provide(Layer.mergeAll(ConfigManager.Default, PendingInitStore.Default, HarnessRegistry.Default)));
 const HumanCli = Command.make('expandai').pipe(Command.withDescription('expand.ai CLI and MCP server'), Command.withSubcommands([
     FetchCommand,
     SearchCommand,
     LoginCommand,
     WhoamiCommand,
     LogoutCommand,
+    HumanInitCommand,
+    HumanStatusCommand,
     UninstallCommand,
     HumanMcp,
     SkillCommand,
     HumanHookCommand,
-]), Command.provide(Layer.mergeAll(ConfigManager.Default, Authentication.Default, Mcp.Default, HookInstaller.Default, SkillInstaller.Default, Uninstall.Default, ClaudeHook.Default, OpencodeHook.Default)));
+    TelemetryCommand,
+]), Command.provide(Layer.mergeAll(ConfigManager.Default, Authentication.Default, Mcp.Default, HookInstaller.Default, SkillInstaller.Default, Uninstall.Default, ClaudeHook.Default, OpencodeHook.Default, InitServiceLive, HarnessDetector.Default, InitTerminalInteraction.Default, StatusServiceLive, StatusTerminalInteraction.Default)));
 const AgentCli = Command.make('expandai').pipe(Command.withDescription('expand.ai CLI and MCP server'), Command.withSubcommands([
     FetchCommand,
     SearchCommand,
     LoginCommand,
     WhoamiCommand,
     LogoutCommand,
+    AgentInitCommand,
+    AgentStatusCommand,
+    // The consent step tells the user `expandai uninstall` is how to undo
+    // setup — including removing the machine-wide `WebFetch` deny rule. That
+    // text is read by an agent, so the command has to exist in this tree too;
+    // it was human-only, and an agent running it got "Invalid subcommand".
+    UninstallCommand,
     AgentMcp,
     AgentHookCommand,
-]), Command.provide(Layer.mergeAll(ConfigManager.Default, Authentication.Default, ClaudeHook.Default, OpencodeHook.Default)));
+    TelemetryCommand,
+]), Command.provide(Layer.mergeAll(ConfigManager.Default, Authentication.Default, ClaudeHook.Default, OpencodeHook.Default, Mcp.Default, HookInstaller.Default, SkillInstaller.Default, Uninstall.Default, InitServiceLive, HarnessDetector.Default, StatusServiceLive)));
 const LoggerLive = Layer.unwrapEffect(Effect.gen(function* () {
     const isDebug = yield* Config.boolean('DEBUG').pipe(Config.withDefault(false));
-    return Logger.minimumLogLevel(isDebug ? LogLevel.All : LogLevel.Info);
+    // stdout is a protocol/data surface (hook JSON payloads, fetched
+    // markdown) — a log line ahead of the payload corrupts it for the
+    // consumer, so diagnostics go to stderr.
+    return Layer.mergeAll(Logger.replace(Logger.defaultLogger, Logger.prettyLogger({ stderr: true })), Logger.minimumLogLevel(isDebug ? LogLevel.All : LogLevel.Info));
+}));
+// Status is a read-only diagnostic contract, and `init --detect` documents itself
+// as changing nothing — the guide prints "This changes nothing:" directly above
+// it. Select the no-op service before layer acquisition so Telemetry.Default
+// cannot persist a distinct id, repair config permissions, display a notice, or
+// send a request. A brand-new HOME came back from `--detect` with a config.json
+// holding a telemetry id, which is a write however small. Other commands retain
+// the ordinary telemetry service unchanged.
+const writesNothing = commandFromArgv(process.argv) === 'status' ||
+    (commandFromArgv(process.argv) === 'init' && process.argv.includes('--detect'));
+const TelemetryLive = writesNothing ? Telemetry.DISABLED : Telemetry.Default;
+const Env = Layer.mergeAll(NodeContext.layer, CliConfig.layer({ showBuiltIns: false }), LoggerLive, TelemetryLive);
+const errorTagFromCause = (cause) => Cause.failureOption(cause).pipe(Option.match({
+    onNone: () => 'Defect',
+    onSome: (error) => typeof error === 'object' && error !== null && '_tag' in error && typeof error._tag === 'string'
+        ? error._tag
+        : 'UnknownError',
 }));
-const Env = Layer.mergeAll(NodeContext.layer, CliConfig.layer({ showBuiltIns: false }), LoggerLive);
+function startupOnboardingPreflightError() {
+    const initMode = resolveInitExecutionMode({
+        argv: process.argv,
+        environment: process.env,
+        stdinIsTty: process.stdin.isTTY === true,
+        stdoutIsTty: process.stdout.isTTY === true,
+    });
+    if (initMode === 'machine')
+        return preflightAgentInitArgv(process.argv);
+    const statusMode = resolveStatusExecutionMode({
+        argv: process.argv,
+        environment: process.env,
+        stdinIsTty: process.stdin.isTTY === true,
+        stdoutIsTty: process.stdout.isTTY === true,
+    });
+    return statusMode === 'machine' ? preflightAgentStatusArgv(process.argv) : undefined;
+}
 const program = Effect.gen(function* () {
-    const context = yield* detectContext;
+    const command = commandFromArgv(process.argv);
+    const context = yield* detectContext(command);
+    const telemetry = yield* Telemetry;
+    if (context === 'human') {
+        yield* telemetry.showNoticeIfNeeded();
+    }
+    yield* telemetry.capture('cli_command_run', { command, context });
     const cli = context === 'human' ? HumanCli : AgentCli;
-    return yield* Command.run(cli, { name: 'expand.ai CLI', version: '0.0.1' })(process.argv);
+    return yield* Command.run(cli, { name: 'expand.ai CLI', version: CLI_VERSION })(process.argv);
 }).pipe(Effect.catchAllCause((cause) => {
     const failure = Cause.failureOption(cause);
     // Ctrl-C during a `Prompt` surfaces as a `QuitException` failure rather
@@ -91,7 +181,25 @@ const program = Effect.gen(function* () {
 						|${Cause.pretty(cause)}`)),
     });
     const debug = Effect.logDebug('Error cause').pipe(Effect.annotateLogs({ cause: Cause.pretty(cause) }));
-    return print.pipe(Effect.zipRight(debug), Effect.zipRight(Effect.failCause(cause)));
-}), Effect.provide(Env));
-NodeRuntime.runMain(program, { disableErrorReporting: true });
+    const trackFailure = Effect.flatMap(Telemetry, (telemetry) => telemetry.capture('cli_command_failed', {
+        command: commandFromArgv(process.argv),
+        error_tag: errorTagFromCause(cause),
+    }));
+    return print.pipe(Effect.zipRight(debug), Effect.zipRight(trackFailure), Effect.zipRight(Effect.failCause(cause)));
+}), 
+// Deliver any pending telemetry before the process exits; capped at 1s by
+// Telemetry.flush so it can never hold a short-lived invocation open.
+Effect.ensuring(Effect.flatMap(Telemetry, (telemetry) => telemetry.flush)), Effect.provide(Env));
+// disablePrettyLogger: runMain's own pretty logger writes to stdout, which
+// would put diagnostics back on the protocol/data stream LoggerLive keeps clean.
+const preflightError = startupOnboardingPreflightError();
+if (preflightError !== undefined) {
+    // This validation must finish before the Effect runtime acquires Telemetry,
+    // otherwise an invalid machine command could still create local state.
+    process.stderr.write(`${preflightError}\n`);
+    process.exitCode = 2;
+}
+else {
+    NodeRuntime.runMain(program, { disableErrorReporting: true, disablePrettyLogger: true });
+}
 //# sourceMappingURL=main.js.map

package/build/esm/main.js.map

@@ -1 +1 @@
-{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACxG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAChG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAElD;;;;;;GAMG;AAEH,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;IACrG,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3F,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACxE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CACnF,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACzC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAA;IAEzC,MAAM,GAAG,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAS,CAAA;IACrF,6EAA6E;IAC7E,2EAA2E;IAC3E,wCAAwC;IACxC,MAAM,KAAK,GACV,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAC7E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAgB,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,EAAW,CAAA;IAE1B,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAgB,CAAC,CAAC,CAAA;AACzG,CAAC,CAAC,CAAA;AAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACxC,OAAO,CAAC,eAAe,CAAC,wCAAwC,CAAC,EACjE,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAChF,CAAA;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACxC,OAAO,CAAC,eAAe,CAAC,6BAA6B,CAAC,EACtD,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,CAAC,CACxC,CAAA;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,EACvD,OAAO,CAAC,eAAe,CAAC;IACvB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,gBAAgB;CAChB,CAAC,EACF,OAAO,CAAC,OAAO,CACd,KAAK,CAAC,QAAQ,CACb,aAAa,CAAC,OAAO,EACrB,cAAc,CAAC,OAAO,EACtB,GAAG,CAAC,OAAO,EACX,aAAa,CAAC,OAAO,EACrB,cAAc,CAAC,OAAO,EACtB,SAAS,CAAC,OAAO,EACjB,UAAU,CAAC,OAAO,EAClB,YAAY,CAAC,OAAO,CACpB,CACD,CACD,CAAA;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,EACvD,OAAO,CAAC,eAAe,CAAC;IACvB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,aAAa;IACb,QAAQ;IACR,gBAAgB;CAChB,CAAC,EACF,OAAO,CAAC,OAAO,CACd,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CACvG,CACD,CAAA;AAED,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,OAAO,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACtE,CAAC,CAAC,CACF,CAAA;AAED,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,CAAA;AAEnG,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAA;IACpC,MAAM,GAAG,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACrD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAC1F,CAAC,CAAC,CAAC,IAAI,CACN,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1C,wEAAwE;IACxE,sEAAsE;IACtE,gFAAgF;IAChF,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,MAAM,CAAC,IAAI,CAAA;IACnB,CAAC;IACD,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAW,KAAe,CAAC,OAAO,EAAE,CAAC;QAC7G,MAAM,EAAE,GAAG,EAAE,CACZ,OAAO,CAAC,KAAK,CACZ,MAAM,CAAC,WAAW,CAAC;;SAEf,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAC1B;KACF,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;IACtG,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACpF,CAAC,CAAC,EACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CACnB,CAAA;AAED,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,CAAC,CAAA"}
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../src/main.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACjE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC3C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AACxG,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAA;AAC3E,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAChG,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EACN,gBAAgB,EAChB,gBAAgB,EAChB,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,GACxB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EACN,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,GACzB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAA;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACjD,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAA;AACtC,OAAO,EAAE,KAAK,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAE1C;;;;;;GAMG;AAEH,6EAA6E;AAC7E,yEAAyE;AACzE,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,MAAM,CAAC,GAAG,CAAC;IACrC,QAAQ,EAAE,UAAU,CAAC,sBAAsB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9E,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3F,UAAU,EAAE,OAAO,CAAC,YAAY,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvF,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;CACnF,CAAC,CAAA;AAEF,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAe;IACjE,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACzC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;KAC1C,CAAC,CAAA;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,OAAiB,CAAA;IACnG,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;KAC1C,CAAC,CAAA;IACF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAE,OAAiB,CAAC,CAAC,CAAE,OAAiB,CAAA;IAEvG,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,kBAAkB,CAAA;IAEzC,4EAA4E;IAC5E,2EAA2E;IAC3E,4DAA4D;IAC5D,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAS,CAAA;IAC9G,6EAA6E;IAC7E,2EAA2E;IAC3E,wCAAwC;IACxC,MAAM,KAAK,GACV,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;QAC7E,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAgB,CAAC;QAC/B,CAAC,CAAC,MAAM,CAAC,IAAI,EAAW,CAAA;IAE1B,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,OAAgB,CAAC,CAAC,CAAA;AACzG,CAAC,CAAC,CAAA;AAEF,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACxC,OAAO,CAAC,eAAe,CAAC,wCAAwC,CAAC,EACjE,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,CAAC,CAChF,CAAA;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CACxC,OAAO,CAAC,eAAe,CAAC,6BAA6B,CAAC,EACtD,OAAO,CAAC,eAAe,CAAC,CAAC,aAAa,CAAC,CAAC,CACxC,CAAA;AAED,MAAM,eAAe,GAAG,WAAW,CAAC,0BAA0B,CAAC,IAAI,CAClE,KAAK,CAAC,OAAO,CACZ,KAAK,CAAC,QAAQ,CACb,cAAc,CAAC,OAAO,EACtB,mBAAmB,CAAC,OAAO,EAC3B,uBAAuB,CAAC,OAAO,EAC/B,eAAe,CAAC,OAAO,CACvB,CACD,CACD,CAAA;AAED,MAAM,iBAAiB,GAAG,aAAa,CAAC,0BAA0B,CAAC,IAAI,CACtE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CACvG,CAAA;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,EACvD,OAAO,CAAC,eAAe,CAAC;IACvB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,QAAQ;IACR,YAAY;IACZ,gBAAgB;IAChB,gBAAgB;CAChB,CAAC,EACF,OAAO,CAAC,OAAO,CACd,KAAK,CAAC,QAAQ,CACb,aAAa,CAAC,OAAO,EACrB,cAAc,CAAC,OAAO,EACtB,GAAG,CAAC,OAAO,EACX,aAAa,CAAC,OAAO,EACrB,cAAc,CAAC,OAAO,EACtB,SAAS,CAAC,OAAO,EACjB,UAAU,CAAC,OAAO,EAClB,YAAY,CAAC,OAAO,EACpB,eAAe,EACf,eAAe,CAAC,OAAO,EACvB,uBAAuB,CAAC,OAAO,EAC/B,iBAAiB,EACjB,yBAAyB,CAAC,OAAO,CACjC,CACD,CACD,CAAA;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAC7C,OAAO,CAAC,eAAe,CAAC,8BAA8B,CAAC,EACvD,OAAO,CAAC,eAAe,CAAC;IACvB,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,aAAa;IACb,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,sEAAsE;IACtE,yEAAyE;IACzE,0EAA0E;IAC1E,uEAAuE;IACvE,gBAAgB;IAChB,QAAQ;IACR,gBAAgB;IAChB,gBAAgB;CAChB,CAAC,EACF,OAAO,CAAC,OAAO,CACd,KAAK,CAAC,QAAQ,CACb,aAAa,CAAC,OAAO,EACrB,cAAc,CAAC,OAAO,EACtB,UAAU,CAAC,OAAO,EAClB,YAAY,CAAC,OAAO,EACpB,GAAG,CAAC,OAAO,EACX,aAAa,CAAC,OAAO,EACrB,cAAc,CAAC,OAAO,EACtB,SAAS,CAAC,OAAO,EACjB,eAAe,EACf,eAAe,CAAC,OAAO,EACvB,iBAAiB,CACjB,CACD,CACD,CAAA;AAED,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IAC9E,iEAAiE;IACjE,kEAAkE;IAClE,yCAAyC;IACzC,OAAO,KAAK,CAAC,QAAQ,CACpB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAC3E,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC9D,CAAA;AACF,CAAC,CAAC,CACF,CAAA;AAED,kFAAkF;AAClF,gFAAgF;AAChF,6EAA6E;AAC7E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,4CAA4C;AAC5C,MAAM,aAAa,GAClB,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ;IAC1C,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAA;AAChF,MAAM,aAAa,GAAG,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAA;AAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;AAElH,MAAM,iBAAiB,GAAG,CAAC,KAA2B,EAAU,EAAE,CACjE,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAC9B,MAAM,CAAC,KAAK,CAAC;IACZ,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ;IACtB,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC/F,CAAC,CAAC,KAAK,CAAC,IAAI;QACZ,CAAC,CAAC,cAAc;CAClB,CAAC,CACF,CAAA;AAEF,SAAS,+BAA+B;IACvC,MAAM,QAAQ,GAAG,wBAAwB,CAAC;QACzC,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;KAC1C,CAAC,CAAA;IACF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,MAAM,UAAU,GAAG,0BAA0B,CAAC;QAC7C,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,WAAW,EAAE,OAAO,CAAC,GAAG;QACxB,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QACxC,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI;KAC1C,CAAC,CAAA;IACF,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACrF,CAAC;AAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IACnC,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,SAAS,CAAA;IAClC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACzB,KAAK,CAAC,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAA;IACtC,CAAC;IACD,KAAK,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAA;IACjE,MAAM,GAAG,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAA;IACrD,OAAO,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAC9F,CAAC,CAAC,CAAC,IAAI,CACN,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,EAAE,EAAE;IAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1C,wEAAwE;IACxE,sEAAsE;IACtE,gFAAgF;IAChF,IAAI,KAAK,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC3G,OAAO,MAAM,CAAC,IAAI,CAAA;IACnB,CAAC;IACD,yEAAyE;IACzE,oEAAoE;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;QACnC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CACjB,eAAe,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAW,KAAe,CAAC,OAAO,EAAE,CAAC;QAC7G,MAAM,EAAE,GAAG,EAAE,CACZ,OAAO,CAAC,KAAK,CACZ,MAAM,CAAC,WAAW,CAAC;;SAEf,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAC1B;KACF,CAAC,CAAA;IACF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;IACtG,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CAC5D,SAAS,CAAC,OAAO,CAAC,oBAAoB,EAAE;QACvC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC;KACnC,CAAC,CACF,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACnH,CAAC,CAAC;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAC1E,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CACnB,CAAA;AAED,2EAA2E;AAC3E,iFAAiF;AACjF,MAAM,cAAc,GAAG,+BAA+B,EAAE,CAAA;AACxD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;IAClC,4EAA4E;IAC5E,uEAAuE;IACvE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,cAAc,IAAI,CAAC,CAAA;IAC3C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAA;AACrB,CAAC;KAAM,CAAC;IACP,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAA;AACzF,CAAC"}

package/build/skills/expandai/SKILL.md

@@ -1,6 +1,8 @@
 ---
 name: expandai
 description: Fetch any URL as clean markdown using the `expandai` CLI. Use when reading documentation, articles, GitHub READMEs, blog posts, or any web page — the output is rendered from the live page so it handles SPAs and bot-protected sites that plain `curl` does not.
+metadata:
+  expandai-profile-version: 0.0.2
 ---
 
 # expandai
@@ -49,9 +51,29 @@ prefer `expandai search` (or `fetch_search`), which reuses the existing capture.
 
 ## Citations
 
-Search results include enough location data to audit the cited passage. In text output,
-`expandai search` and `expandai fetch --search` print a public playground citation link above
-each snippet. MCP tool results expose `citationUrl` fields directly.
+Cite every claim you take from a fetched page. This is not optional, and it applies however
+the page arrived — `expandai fetch`, `expandai search`, the MCP tools, or the WebFetch hook.
+
+Captured markdown stamps an evidence id next to the text it belongs to, written as `{1199}`.
+For each sentence you use, take the id nearest that text and end your answer with:
+
+```
+**Sources**
+[1] [<page title>](<playground>?id=<evidence id>)
+```
+
+Number the markers `[1]`, `[2]`, … in the order they appear, one per sentence. Search snippets
+and MCP results carry a ready-made `citationUrl` with the right `?id=` already on it — prefer it
+verbatim.
+
+If the sentence you want carries no evidence id, do not fall back to linking the original page — that looks like a citation and is not one. Quote a nearby sentence that does carry an id, or say plainly that the capture has no id for it.
+
+The link points at expand.ai's stored capture, never at the original site. Do not
+build it by appending `?id=` to the page you fetched — copy the capture URL, or the snippet's
+`citationUrl`, character for character.
+
+Never invent an evidence id, and never reuse an id from different text. A bare capture link
+without `?id=` is not a citation: the reader cannot check the sentence against the page.
 
 ## Common patterns
 
@@ -68,5 +90,6 @@ expandai fetch https://docs.example.com/api --format json
 
 ## Failure modes
 
+- `command not found: expandai` — install the CLI globally with npm, restart Claude Code so it inherits the updated PATH, then retry.
 - Exit code non-zero with `Not authenticated` — the user has not run `expandai login`. Tell them to run it; do not attempt to authenticate yourself.
 - Empty markdown output — try `--format json` to inspect the response shape.

package/package.json

@@ -1,7 +1,7 @@
 {
 	"name": "expandai",
 	"type": "module",
-	"version": "0.0.2",
+	"version": "0.0.3",
 	"private": false,
 	"description": "Unified CLI and MCP server for ExpandAI",
 	"author": "ExpandAI",
@@ -30,13 +30,13 @@
 			"import": "./build/esm/index.js"
 		},
 		"./*": {
-			"types": "./build/dts/*.d.ts",
+			"types": "./src/*.ts",
 			"import": "./build/esm/*.js"
 		}
 	},
 	"scripts": {
 		"dev": "tsx --watch src/main.ts",
-		"build": "tsc -b tsconfig.build.json && cp -R skills build/skills && cp src/Install/Opencode/expandai-webfetch.js build/esm/Install/Opencode/expandai-webfetch.js && chmod +x build/esm/main.js",
+		"build": "tsc -b tsconfig.build.json && rm -rf build/skills && cp -R skills build/skills && cp src/Install/Opencode/expandai-webfetch.js build/esm/Install/Opencode/expandai-webfetch.js && chmod +x build/esm/main.js",
 		"build:bin": "bun ./scripts/build.ts --single",
 		"build:bin:all": "bun ./scripts/build.ts",
 		"check": "tsc -b tsconfig.json",
@@ -54,7 +54,7 @@
 		"@effect/cli": "0.75.1",
 		"@effect/platform": "0.96.1",
 		"@effect/platform-node": "0.106.0",
-		"@expandai/sdk": "0.17.2",
+		"@expandai/sdk": "0.18.0",
 		"effect": "3.21.2",
 		"open": "^11.0.0",
 		"smol-toml": "^1.6.1"

package/src/ApiClient.ts

@@ -4,10 +4,76 @@ import { fetchObjectModeJson, fetchSnapshotSearch } from '@expandai/sdk/FetchJso
 import * as Generated from '@expandai/sdk/Generated'
 import { decodeError, unexpectedStatus } from '@expandai/sdk/HttpClientHelpers'
 import { Data, DateTime, Duration, Effect, flow, Match, Option, Redacted, Schema } from 'effect'
+import { CLI_AUTHORIZATION_CLIENT_ID } from './Auth/Domain.js'
 import { BrowserOAuthService } from './BrowserOAuth.js'
 import { ConfigManager, OAuthConfig, OAuthTokenExpired } from './Config.js'
 import { CurrentRequestHeaders } from './Mcp/RequestHeaders.js'
 
+export class DeviceAuthorizationCreated extends Schema.Class<DeviceAuthorizationCreated>('DeviceAuthorizationCreated')({
+	deviceCode: Schema.Redacted(Schema.NonEmptyString),
+	userCode: Schema.NonEmptyString,
+	// `Schema.URL` decodes to a `URL`; the wire form stays a string. The CLI
+	// hands this to the user to open, so a malformed `appUrls.app` should fail
+	// here rather than in a browser.
+	verificationUri: Schema.URL,
+	// Whole seconds. A zero or negative `expiresIn` is a window that has already
+	// closed, so it must be positive.
+	expiresIn: Schema.Int.pipe(Schema.positive()),
+	// `interval` is RFC 8628's *minimum* wait between polls, so zero is
+	// meaningful — poll without delay. Only negative is nonsense, and it would
+	// make `nextPollAt` drift backwards forever.
+	interval: Schema.Int.pipe(Schema.nonNegative()),
+}) {}
+
+const ManualAuthorizationTokenResponse = Schema.Struct({
+	access_token: Schema.Redacted(Schema.NonEmptyString),
+	refresh_token: Schema.Redacted(Schema.NonEmptyString),
+	token_type: Schema.NonEmptyString,
+	expires_in: Schema.Number.pipe(Schema.positive()),
+	scope: Schema.optional(Schema.String),
+})
+
+export type ManualAuthorizationTokenResponse = typeof ManualAuthorizationTokenResponse.Type
+
+/**
+ * RFC 8628 §3.5 poll outcomes. These are results, not errors: an agent-driven
+ * CLI returns immediately on every one of them, and only a transport failure
+ * is exceptional.
+ */
+export type DevicePollOutcome =
+	| { readonly _tag: 'Tokens'; readonly token: ManualAuthorizationTokenResponse }
+	| { readonly _tag: 'Pending' }
+	| { readonly _tag: 'SlowDown' }
+	| { readonly _tag: 'Denied' }
+	| { readonly _tag: 'Expired' }
+	| { readonly _tag: 'Invalid' }
+	/**
+	 * The server refused for a reason a fresh code cannot fix — a misconfigured
+	 * client, resource, or scope. Distinct from `Invalid` because the recovery is
+	 * opposite: `Invalid` means start over, this means stop and report. Carries
+	 * the server's own `error` so the message names the actual cause instead of
+	 * guessing.
+	 */
+	| { readonly _tag: 'Refused'; readonly error: string; readonly description?: string }
+
+const ManualAuthorizationOperation = Schema.Literal('create', 'poll')
+
+export class ManualAuthorizationApiError extends Schema.TaggedError<ManualAuthorizationApiError>()(
+	'ManualAuthorizationApiError',
+	{
+		operation: ManualAuthorizationOperation,
+		kind: Schema.Literal('request_failed', 'rejected', 'invalid_response'),
+		status: Schema.optional(Schema.Number),
+		recoverable: Schema.Boolean,
+	},
+) {
+	get message() {
+		return this.kind === 'rejected'
+			? `Manual authorization ${this.operation} was rejected. Restart authorization if the problem persists.`
+			: `Manual authorization ${this.operation} could not be completed safely. Try again.`
+	}
+}
+
 /**
  * Single user-facing error for any failure crossing the API boundary. The
  * generated client raises a half-dozen status-specific tagged classes plus
@@ -56,18 +122,18 @@ function getUnsupportedFields(value: unknown): string[] {
 	return Array.isArray(unsupportedFields) ? unsupportedFields.filter((field) => typeof field === 'string') : []
 }
 
-const formatIssue = Effect.fn('ApiClient.formatIssue')(function* ({ path, message }: Issue) {
+function formatIssue({ path, message }: Issue): string {
 	const prefix = path.map((segment) => (typeof segment === 'object' ? segment.key : String(segment))).join('.')
 	return prefix ? `${prefix}: ${message}` : message
-})
+}
 
-const formatApiFailure = Effect.fn('ApiClient.formatApiFailure')(function* (error: ClientError) {
+function formatApiFailure(error: ClientError): string {
 	switch (getStringField(error, '_tag')) {
 		case 'HttpApiDecodeError': {
 			const issues = getIssueList(error)
-			return yield* issues.length === 0
-				? Effect.succeed(getStringField(error, 'message') ?? 'Invalid request')
-				: Effect.forEach(issues, formatIssue).pipe(Effect.map((parts) => parts.join('; ')))
+			return issues.length === 0
+				? (getStringField(error, 'message') ?? 'Invalid request')
+				: issues.map(formatIssue).join('; ')
 		}
 		case 'AuthFailed':
 			return `Authentication failed (${getStringField(error, 'reason') ?? 'unknown'}). Run \`expandai login\` to re-authenticate.`
@@ -88,14 +154,139 @@ const formatApiFailure = Effect.fn('ApiClient.formatApiFailure')(function* (erro
 		default:
 			return error instanceof Error ? error.message : (getStringField(error, 'message') ?? 'Expand API request failed.')
 	}
-})
+}
 
 const liftApiError = <A, R>(self: Effect.Effect<A, ClientError, R>) =>
-	self.pipe(
-		Effect.catchAll((error) =>
-			formatApiFailure(error).pipe(Effect.flatMap((detail) => Effect.fail(new ApiRequestFailed({ detail })))),
-		),
-	)
+	self.pipe(Effect.catchAll((error) => new ApiRequestFailed({ detail: formatApiFailure(error) })))
+
+/** Public, unauthenticated HTTP boundary for device-flow CLI authorization. */
+export class ManualAuthorizationApiClient extends Effect.Service<ManualAuthorizationApiClient>()(
+	'@expandai/cli/ManualAuthorizationApiClient',
+	{
+		dependencies: [NodeHttpClient.layer, ConfigManager.Default],
+		effect: Effect.gen(function* () {
+			const httpClient = yield* HttpClient.HttpClient
+			const configManager = yield* ConfigManager
+
+			const apiError = (
+				operation: typeof ManualAuthorizationOperation.Type,
+				kind: 'request_failed' | 'rejected' | 'invalid_response',
+				status?: number,
+			) =>
+				new ManualAuthorizationApiError({
+					operation,
+					kind,
+					status,
+					recoverable: kind !== 'invalid_response',
+				})
+
+			const create = Effect.fn('ManualAuthorizationApiClient.create')(function* (input: {
+				readonly harness: 'agent-harnesses'
+				readonly scope: 'project' | 'global'
+				readonly platform: string
+				readonly machineLabel: string
+				readonly cliVersion: string
+			}) {
+				const apiUrl = yield* configManager.getApiUrl()
+				const request = yield* HttpClientRequest.post(new URL('/v1/cli-authorization/device', apiUrl)).pipe(
+					HttpClientRequest.bodyJson(input),
+					Effect.mapError(() => apiError('create', 'request_failed')),
+				)
+				return yield* httpClient.execute(request).pipe(
+					Effect.flatMap((response) =>
+						response.status >= 200 && response.status < 300
+							? HttpClientResponse.schemaBodyJson(DeviceAuthorizationCreated)(response).pipe(
+									Effect.mapError(() => apiError('create', 'invalid_response')),
+								)
+							: Effect.fail(apiError('create', 'rejected', response.status)),
+					),
+					Effect.catchAll((error) =>
+						error instanceof ManualAuthorizationApiError
+							? Effect.fail(error)
+							: Effect.fail(apiError('create', 'request_failed')),
+					),
+				)
+			})
+
+			const PollErrorBody = Schema.Struct({
+				error: Schema.String,
+				error_description: Schema.optional(Schema.String),
+			})
+
+			/**
+			 * RFC 6749/8628 errors that describe the *request* rather than the state
+			 * of this particular code. Re-minting produces a code that fails
+			 * identically, so treating these as "expired" is what turns a
+			 * misconfiguration into an endless approve loop.
+			 */
+			const PERMANENT_REFUSALS = new Set([
+				'invalid_target',
+				'invalid_client',
+				'invalid_scope',
+				'unsupported_grant_type',
+				'unauthorized_client',
+				'invalid_request',
+			])
+
+			/**
+			 * One poll of the OAuth token endpoint (RFC 8628). Form-encoded, and
+			 * always against `/oauth2/token`: `/device/token` is the first-party
+			 * session path and the server rejects our client there by design.
+			 */
+			const poll = Effect.fn('ManualAuthorizationApiClient.poll')(function* (deviceCode: Redacted.Redacted<string>) {
+				const apiUrl = yield* configManager.getApiUrl()
+				const request = HttpClientRequest.post(new URL('/api/auth/oauth2/token', apiUrl)).pipe(
+					HttpClientRequest.bodyUrlParams({
+						grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+						device_code: Redacted.value(deviceCode),
+						client_id: CLI_AUTHORIZATION_CLIENT_ID,
+					}),
+				)
+				return yield* httpClient.execute(request).pipe(
+					Effect.flatMap(
+						Effect.fnUntraced(function* (response) {
+							if (response.status >= 200 && response.status < 300) {
+								const token = yield* HttpClientResponse.schemaBodyJson(ManualAuthorizationTokenResponse)(response).pipe(
+									Effect.mapError(() => apiError('poll', 'invalid_response')),
+								)
+								return { _tag: 'Tokens', token } satisfies DevicePollOutcome
+							}
+							if (response.status >= 500) return yield* apiError('poll', 'rejected', response.status)
+							const body = yield* HttpClientResponse.schemaBodyJson(PollErrorBody)(response).pipe(
+								Effect.mapError(() => apiError('poll', 'invalid_response')),
+							)
+							switch (body.error) {
+								case 'authorization_pending':
+									return { _tag: 'Pending' } satisfies DevicePollOutcome
+								case 'slow_down':
+									return { _tag: 'SlowDown' } satisfies DevicePollOutcome
+								case 'access_denied':
+									return { _tag: 'Denied' } satisfies DevicePollOutcome
+								case 'expired_token':
+									return { _tag: 'Expired' } satisfies DevicePollOutcome
+								default:
+									return PERMANENT_REFUSALS.has(body.error)
+										? ({
+												_tag: 'Refused',
+												error: body.error,
+												...(body.error_description === undefined ? {} : { description: body.error_description }),
+											} satisfies DevicePollOutcome)
+										: ({ _tag: 'Invalid' } satisfies DevicePollOutcome)
+							}
+						}),
+					),
+					Effect.catchAll((error) =>
+						error instanceof ManualAuthorizationApiError
+							? Effect.fail(error)
+							: Effect.fail(apiError('poll', 'request_failed')),
+					),
+				)
+			})
+
+			return { create, poll } as const
+		}),
+	},
+) {}
 
 /**
  * Resolves outgoing API auth per call. When the current request scope carries
@@ -126,13 +317,14 @@ export class ApiClient extends Effect.Service<ApiClient>()('@expandai/cli/ApiCli
 		const refreshOAuthToken = Effect.fn('ApiClient.refreshOAuthToken')(function* ({
 			refreshToken,
 			expiresAt,
+			clientId,
 		}: OAuthAuthMethod) {
 			if (refreshToken === undefined) {
 				return yield* new OAuthTokenExpired({ expiredAt: expiresAt })
 			}
 
 			const now = yield* DateTime.now
-			const token = yield* browserOAuth.refreshToken(Redacted.value(refreshToken))
+			const token = yield* browserOAuth.refreshToken(Redacted.value(refreshToken), clientId)
 			if (token === undefined) {
 				return yield* new OAuthTokenExpired({ expiredAt: expiresAt })
 			}
@@ -143,6 +335,7 @@ export class ApiClient extends Effect.Service<ApiClient>()('@expandai/cli/ApiCli
 					accessToken: Redacted.make(token.access_token),
 					refreshToken: nextRefreshToken,
 					expiresAt: refreshedExpiresAt,
+					clientId,
 				}),
 			})