gcb-client 0.0.0-stage → 0.0.1

package/CHANGELOG.md

@@ -0,0 +1,9 @@
+# gcb-client
+
+## 0.0.1
+
+### Patch Changes
+
+- [#33](https://github.com/code-vaults/git-credential-broker/pull/33) [`4bab834`](https://github.com/code-vaults/git-credential-broker/commit/4bab834c781e6175b6b6e588ad542fa09d532be7) Thanks [@JounQin](https://github.com/JounQin)! - Prepare the first public release of the renamed packages.
+- Updated dependencies [[`4bab834`](https://github.com/code-vaults/git-credential-broker/commit/4bab834c781e6175b6b6e588ad542fa09d532be7)]:
+  - gcb-core@0.0.1

package/bin/gcb.js

@@ -0,0 +1,12 @@
+#!/usr/bin/env node
+import { runCli } from 'gcb-core';
+import { clientBackend, runHelper } from 'gcb-client';
+
+const argv = process.argv.slice(2);
+const operation = argv[0];
+
+if (operation === 'get' || operation === 'store' || operation === 'erase') {
+  process.exitCode = await runHelper(argv);
+} else {
+  process.exitCode = await runCli(argv, clientBackend);
+}

package/lib/commands/gh.d.ts

@@ -0,0 +1,13 @@
+/** Usage text for `gh`. */
+export declare const GH_USAGE: string;
+/**
+ * Run the `gh` command.
+ *
+ * @param argv - arguments after `gh`.
+ * @returns the process exit code: 0 success, 1 refusal, and the requested unreachable code
+ *          (1 by default; `pr` passes 3 for runPr's contract).
+ */
+export declare function runGh(argv: readonly string[], options?: {
+    readonly unreachableExitCode?: number;
+}): Promise<number>;
+//# sourceMappingURL=gh.d.ts.map

package/lib/commands/gh.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.d.ts","sourceRoot":"","sources":["../../src/commands/gh.ts"],"names":[],"mappings":"AA8CA,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,QAcL,CAAC;AAEjB;;;;;;GAMG;AACH,wBAAsB,KAAK,CACzB,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,OAAO,GAAE;IAAE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,OAAO,CAAC,MAAM,CAAC,CA6LjB"}

package/lib/commands/gh.js

@@ -0,0 +1,261 @@
+/**
+ * `gh` — run one catalogued GitHub action through the broker.
+ *
+ * The action catalog defines the command, flags, positionals and permissions. The client only
+ * parses names and values; the broker rebuilds the canonical argv and runs gh with its own token.
+ */
+import { GH_ACTIONS, getGhAction, parseArgs, say, fail } from 'gcb-core';
+import { requestOverSocket, resolveSocketPath } from '../helper.js';
+import { remoteRepo } from './remotes.js';
+const ACTION_LINES = Object.values(GH_ACTIONS)
+    .map((action) => {
+    const positionals = action.positionals
+        .map((positional) => (positional.required === true ? `<${positional.name}>` : `[${positional.name}]`))
+        .join(' ');
+    const flags = action.flags
+        .map((flag) => {
+        const spelling = `--${flag.name}${flag.type === 'boolean' ? '' : ` <${flag.type}>`}`;
+        return flag.required === true ? spelling : `[${spelling}]`;
+    })
+        .join(' ');
+    const modes = action.exactlyOneOf === undefined
+        ? ''
+        : ` (one of ${action.exactlyOneOf.map((flag) => `--${flag}`).join(', ')})`;
+    const body = action.bodyRequiredWith === undefined
+        ? ''
+        : ` (--body required with ${action.bodyRequiredWith.map((flag) => `--${flag}`).join(', ')})`;
+    return `  ${action.command.join(' ')}${positionals ? ` ${positionals}` : ''}${flags ? ` ${flags}` : ''}${modes}${body}`;
+})
+    .join('\n');
+/**
+ * Read owner/repo from the checkout's `origin` remote.
+ *
+ * The URL parsing lives in `remotes.ts`, beside `--head origin:branch`, so the two cannot disagree
+ * about what a remote points at.
+ *
+ * @param cwd - the checkout to ask.
+ * @returns the normalized repository, or undefined when no remote names one.
+ */
+function repoFromCheckout(cwd) {
+    const found = remoteRepo('origin', cwd);
+    return found === undefined ? undefined : { repo: `${found.owner}/${found.repo}`, host: found.host };
+}
+/** Usage text for `gh`. */
+export const GH_USAGE = `Usage: gcb gh <domain> <command> [options]
+
+Run a catalogued GitHub action through the broker.
+gcb pr <subcommand> and gcb run <subcommand> are shorthands for the same actions.
+
+Common
+  -R, --repo <owner/name>  Repository the action belongs to (default: origin remote)
+  --host <host>            Host as configured, e.g. github.com (default: github.com)
+  --socket <path>          Broker socket (default: GIT_BROKER_SOCKET)
+  --proxy <url>            Use this proxy for this action
+  --no-proxy               Reach GitHub directly for this action
+  -h, --help               Show this help
+
+Commands, from the action catalog
+${ACTION_LINES}`;
+/**
+ * Run the `gh` command.
+ *
+ * @param argv - arguments after `gh`.
+ * @returns the process exit code: 0 success, 1 refusal, and the requested unreachable code
+ *          (1 by default; `pr` passes 3 for runPr's contract).
+ */
+export async function runGh(argv, options = {}) {
+    if (argv.length === 0) {
+        say(GH_USAGE);
+        return 1;
+    }
+    const [domain, command, ...rawRest] = argv;
+    if (domain === '--help' || domain === '-h' || command === '--help' || command === '-h') {
+        say(GH_USAGE);
+        return 0;
+    }
+    if (domain === undefined || command === undefined) {
+        // A caller with a domain and no command (`gcb run`, `gcb gh pr`) gets the catalog rather than one
+        // example: the answer is every action, and the example would only be right for one of them.
+        say(GH_USAGE);
+        return 1;
+    }
+    const actionName = `${domain}:${command}`;
+    let action;
+    try {
+        action = getGhAction(actionName);
+    }
+    catch {
+        if (rawRest.includes('--help') || rawRest.includes('-h')) {
+            say(GH_USAGE);
+            return 0;
+        }
+        fail(`unknown gh action ${JSON.stringify(actionName)}`);
+    }
+    // A known value-taking flag consumes the next token only when that token is a value. A following
+    // known flag is not taken as a value (so a missing value fails as missing), except a literal
+    // --help/-h: a body that is exactly one of those is data, not a help request. The parser then
+    // sees --body=--help.
+    const valueFlags = new Set([
+        ...action.flags.filter((flag) => flag.type !== 'boolean').map((flag) => flag.name),
+        'repo',
+        'R',
+        'host',
+        'socket',
+        'proxy',
+    ]);
+    const allowed = new Set([
+        ...action.flags.map((flag) => flag.name),
+        'repo',
+        'R',
+        'host',
+        'socket',
+        'proxy',
+        'no-proxy',
+    ]);
+    const knownFlags = new Set([...allowed, 'help']);
+    const rest = [];
+    let missingValue;
+    let help = false;
+    for (let index = 0; index < rawRest.length; index += 1) {
+        const raw = rawRest[index];
+        // Match parseArgs: -h is help everywhere; any other single-dash letter is its long flag. A
+        // single-dash operand belongs to a preceding value flag and was consumed before this point.
+        const argument = raw?.replace(/^-h$/, '--help').replace(/^-(?=[A-Za-z])/, '--');
+        if (argument === undefined)
+            continue;
+        if (argument === '--') {
+            rest.push(...rawRest.slice(index));
+            break;
+        }
+        if (argument === '--help') {
+            help = true;
+            rest.push(argument);
+            continue;
+        }
+        const name = argument.startsWith('--') && !argument.includes('=') ? argument.slice(2) : undefined;
+        if (name === undefined || !valueFlags.has(name)) {
+            rest.push(argument);
+            continue;
+        }
+        const next = rawRest[index + 1];
+        if (next === undefined) {
+            missingValue ??= `${raw} needs a value`;
+            rest.push(argument);
+            continue;
+        }
+        if (next === '--help' || next === '-h') {
+            if (name === 'body') {
+                rest.push(`${argument}=${next}`);
+                index += 1;
+            }
+            else {
+                help = true;
+                rest.push(argument);
+            }
+            continue;
+        }
+        if (next.startsWith('--')) {
+            const nextName = next.slice(2).split('=')[0];
+            if (nextName !== undefined && knownFlags.has(nextName)) {
+                missingValue ??= `${raw} needs a value`;
+            }
+            // Leave both tokens alone: a known flag is a missing value, an unknown one must reach the
+            // unknown-option check rather than becoming a value.
+            rest.push(argument);
+            continue;
+        }
+        rest.push(`${argument}=${next}`);
+        index += 1;
+    }
+    if (help) {
+        say(GH_USAGE);
+        return 0;
+    }
+    if (missingValue !== undefined)
+        fail(missingValue);
+    const booleans = action.flags.filter((flag) => flag.type === 'boolean').map((flag) => flag.name);
+    const args = parseArgs(rest, { booleans: [...booleans, 'no-proxy'] });
+    if (args.has('no-proxy') && args.value('proxy') !== undefined)
+        fail('--proxy and --no-proxy are mutually exclusive');
+    const proxy = args.has('no-proxy') ? null : args.value('proxy');
+    const host = args.value('host') ?? 'github.com';
+    let repo = args.value('repo') ?? args.value('R');
+    if (repo === undefined) {
+        const found = repoFromCheckout(process.cwd());
+        if (found === undefined)
+            fail('--repo is required when the checkout has no usable origin remote');
+        if (found.host !== host.toLowerCase()) {
+            fail(`the checkout's remote is on ${found.host}, but --host is ${host}; pass --repo or --host`);
+        }
+        repo = found.repo;
+    }
+    const socketPath = resolveSocketPath(args.value('socket'), process.env);
+    if (socketPath === undefined)
+        fail('no broker socket is configured');
+    for (const argument of rest) {
+        if (argument === '--')
+            break;
+        const match = /^--([^=]+)/.exec(argument);
+        if (match?.[1] !== undefined && !allowed.has(match[1])) {
+            fail(`unknown option --${match[1]} for gcb gh ${domain} ${command}`);
+        }
+    }
+    const values = {};
+    for (const [index, positional] of action.positionals.entries()) {
+        const value = args.positionals[index];
+        if (value === undefined) {
+            if (positional.required === true)
+                fail(`gcb gh ${domain} ${command} needs ${positional.name}`);
+            continue;
+        }
+        values[positional.name] = value;
+    }
+    if (args.positionals.length > action.positionals.length) {
+        fail(`gcb gh ${domain} ${command} has too many positional arguments`);
+    }
+    for (const flag of action.flags) {
+        if (flag.type === 'boolean') {
+            if (args.has(flag.name))
+                values[flag.name] = true;
+            continue;
+        }
+        const entries = args.values(flag.name);
+        if (entries.length === 0) {
+            if (flag.required === true)
+                fail(`gcb gh ${domain} ${command} needs --${flag.name}`);
+            continue;
+        }
+        if (flag.repeatable === true)
+            values[flag.name] = entries;
+        else
+            values[flag.name] = entries[0];
+    }
+    let response;
+    try {
+        response = await requestOverSocket(socketPath, { op: 'action', host, path: repo, ghAction: actionName, values: values, proxy, session: 'gh', pid: process.pid }, action.timeoutSeconds * 1000 + 30_000);
+    }
+    catch (error) {
+        process.stderr.write(`unreachable: ${error.message}\n`);
+        return options.unreachableExitCode ?? 1;
+    }
+    if (response.ok !== true) {
+        if (response.warning)
+            process.stderr.write(`warning: ${response.warning}\n`);
+        fail(`refused [${response.code ?? 'unknown'}]: ${response.reason ?? 'no reason'}`);
+    }
+    if (response.stdout)
+        process.stdout.write(response.stdout);
+    if (response.stderr)
+        process.stderr.write(response.stderr);
+    if (response.warning)
+        process.stderr.write(`warning: ${response.warning}\n`);
+    if (response.truncated === true) {
+        process.stderr.write('warning: the action output was truncated at the broker\x27s limit\n');
+    }
+    if (response.timedOut === true) {
+        process.stderr.write(`warning: the action timed out after ${action.timeoutSeconds}s; a write may have completed before it was killed\n`);
+        return 1;
+    }
+    return response.exitCode === 0 ? 0 : 1;
+}
+//# sourceMappingURL=gh.js.map

package/lib/commands/gh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gh.js","sourceRoot":"","sources":["../../src/commands/gh.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAqB,MAAM,UAAU,CAAC;AAE5F,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE1C,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;KAC3C,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;IACd,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW;SACnC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC;SACrG,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK;SACvB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACrF,OAAO,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,QAAQ,GAAG,CAAC;IAC7D,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,KAAK,SAAS;QAC7C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,YAAY,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,CAAC,gBAAgB,KAAK,SAAS;QAChD,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,0BAA0B,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC/F,OAAO,KAAK,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC;AAC1H,CAAC,CAAC;KACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAEd;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxC,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AACtG,CAAC;AAED,2BAA2B;AAC3B,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;EActB,YAAY,EAAE,CAAC;AAEjB;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CACzB,IAAuB,EACvB,OAAO,GAA8C,EAAE;IAEvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,QAAQ,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC;IAC3C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAClD,kGAAkG;QAClG,4FAA4F;QAC5F,GAAG,CAAC,QAAQ,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;IAC1C,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,QAAQ,CAAC,CAAC;YACd,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED,iGAAiG;IACjG,6FAA6F;IAC7F,8FAA8F;IAC9F,sBAAsB;IACtB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QAClF,MAAM;QACN,GAAG;QACH,MAAM;QACN,QAAQ;QACR,OAAO;KACR,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;QACxC,MAAM;QACN,GAAG;QACH,MAAM;QACN,QAAQ;QACR,OAAO;QACP,UAAU;KACX,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAEjD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,YAAgC,CAAC;IACrC,IAAI,IAAI,GAAG,KAAK,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,2FAA2F;QAC3F,4FAA4F;QAC5F,MAAM,QAAQ,GAAG,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAS;QACrC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YACnC,MAAM;QACR,CAAC;QACD,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClG,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,YAAY,KAAK,GAAG,GAAG,gBAAgB,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;gBACjC,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,IAAI,CAAC;gBACZ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,CAAC;YACD,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvD,YAAY,KAAK,GAAG,GAAG,gBAAgB,CAAC;YAC1C,CAAC;YACD,0FAA0F;YAC1F,qDAAqD;YACrD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC;QACjC,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,IAAI,IAAI,EAAE,CAAC;QACT,GAAG,CAAC,QAAQ,CAAC,CAAC;QACd,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,YAAY,KAAK,SAAS;QAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAEnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC;IAChD,IAAI,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9C,IAAI,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAClG,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,mBAAmB,IAAI,yBAAyB,CAAC,CAAC;QAClG,CAAC;QACD,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACpB,CAAC;IACD,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,UAAU,KAAK,SAAS;QAAE,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAErE,KAAK,MAAM,QAAQ,IAAI,IAAI,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,IAAI;YAAE,MAAM;QAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,IAAI,CAAC,oBAAoB,KAAK,CAAC,CAAC,CAAC,eAAe,MAAM,IAAI,OAAO,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAgD,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,QAAQ,KAAK,IAAI;gBAAE,IAAI,CAAC,UAAU,MAAM,IAAI,OAAO,UAAU,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;QACxD,IAAI,CAAC,UAAU,MAAM,IAAI,OAAO,oCAAoC,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAClD,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;gBAAE,IAAI,CAAC,UAAU,MAAM,IAAI,OAAO,YAAY,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;;YACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,CAAW,CAAC;IAChD,CAAC;IAED,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,iBAAiB,CAChC,UAAU,EACV,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAChI,MAAM,CAAC,cAAc,GAAG,IAAI,GAAG,MAAM,CACtC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAiB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QACnE,OAAO,OAAO,CAAC,mBAAmB,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACzB,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;QAC7E,IAAI,CAAC,YAAY,QAAQ,CAAC,IAAI,IAAI,SAAS,MAAM,QAAQ,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,OAAO,IAAI,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uCAAuC,MAAM,CAAC,cAAc,sDAAsD,CACnH,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/lib/commands/logs.d.ts

@@ -0,0 +1,10 @@
+/** Usage text for `logs`. */
+export declare const LOGS_USAGE = "Usage: gcb logs [options]\n\nRead a workflow job log through the broker, without the credential ever reaching this side.\n\n  --socket <path>      Broker socket (default: $GIT_BROKER_SOCKET or the socket file)\n  --host <host>        Host as configured, e.g. github.com          [required]\n  --repo <owner/name>  Repository the job belongs to                [required]\n  --job <id>           Workflow job id, which is also the check run id   [required]\n  --proxy <url>        Use this proxy for this request\n  --no-proxy           Reach GitHub directly for this request\n  -h, --help           Show this help\n";
+/**
+ * Run the `logs` command.
+ *
+ * @param argv - arguments after the command name.
+ * @returns the process exit code: 0 read, 1 refused, 3 unreachable.
+ */
+export declare function runLogs(argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=logs.d.ts.map

package/lib/commands/logs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.d.ts","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAoBA,6BAA6B;AAC7B,eAAO,MAAM,UAAU,2mBAWtB,CAAC;AAEF;;;;;GAKG;AACH,wBAAsB,OAAO,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDtE"}

package/lib/commands/logs.js

@@ -0,0 +1,94 @@
+/**
+ * `logs` — read one workflow job's log through the broker.
+ *
+ * The credential never leaves the broker. The broker mints a read-only, single-repository token
+ * narrowed to `actions: read`, fetches the log itself, and answers with the text: the agent gets the
+ * log without ever holding something that could read anything else.
+ *
+ * Exit codes: 0 read, 1 refused, 3 broker unreachable.
+ */
+import { requestOverSocket, resolveSocketPath } from '../helper.js';
+import { fail, parseArgs, say } from 'gcb-core';
+/**
+ * How long to wait for the broker.
+ *
+ * Longer than a credential request: this is three API round trips (a token, a repository-scoped job
+ * lookup, then the log), and the first one after a restart can be slow.
+ */
+const LOGS_TIMEOUT_MS = 60_000;
+/** Usage text for `logs`. */
+export const LOGS_USAGE = `Usage: gcb logs [options]
+
+Read a workflow job log through the broker, without the credential ever reaching this side.
+
+  --socket <path>      Broker socket (default: $GIT_BROKER_SOCKET or the socket file)
+  --host <host>        Host as configured, e.g. github.com          [required]
+  --repo <owner/name>  Repository the job belongs to                [required]
+  --job <id>           Workflow job id, which is also the check run id   [required]
+  --proxy <url>        Use this proxy for this request
+  --no-proxy           Reach GitHub directly for this request
+  -h, --help           Show this help
+`;
+/**
+ * Run the `logs` command.
+ *
+ * @param argv - arguments after the command name.
+ * @returns the process exit code: 0 read, 1 refused, 3 unreachable.
+ */
+export async function runLogs(argv) {
+    const args = parseArgs(argv, { booleans: ['help', 'no-proxy'] });
+    if (args.has('no-proxy') && args.value('proxy') !== undefined)
+        fail('--proxy and --no-proxy are mutually exclusive');
+    if (args.has('proxy') && args.value('proxy') === undefined)
+        fail('--proxy needs a value');
+    const proxy = args.has('no-proxy') ? null : args.value('proxy');
+    if (args.has('help') || args.has('h')) {
+        say(LOGS_USAGE);
+        return 0;
+    }
+    const socketPath = resolveSocketPath(args.value('socket'), process.env);
+    const host = args.value('host');
+    const repo = args.value('repo');
+    const rawJob = args.value('job');
+    if (!socketPath) {
+        fail('no broker socket: pass --socket, set GIT_BROKER_SOCKET, or run `gcb setup`');
+    }
+    if (!host)
+        fail('--host is required (e.g. github.com)');
+    if (!repo)
+        fail('--repo is required (e.g. owner/name)');
+    if (!rawJob)
+        fail('--job is required (the workflow job id, which is also the check run id)');
+    const jobId = Number(rawJob);
+    if (!Number.isInteger(jobId) || jobId <= 0) {
+        fail(`--job must be a positive integer, got ${JSON.stringify(rawJob)}`);
+    }
+    let response;
+    try {
+        response = await requestOverSocket(socketPath, {
+            v: 1,
+            op: 'logs',
+            host,
+            path: repo,
+            jobId,
+            proxy,
+            session: 'logs',
+            pid: process.pid,
+        }, LOGS_TIMEOUT_MS);
+    }
+    catch (error) {
+        process.stderr.write(`unreachable: ${error.message}\n`);
+        return 3;
+    }
+    if (!response.ok) {
+        process.stderr.write(`refused [${response.code ?? 'unknown'}]: ${response.reason ?? 'no reason given'}\n`);
+        return 1;
+    }
+    if (response.truncated === true) {
+        process.stderr.write('note: the broker truncated this log\n');
+    }
+    const text = response.log ?? '';
+    process.stdout.write(text.endsWith('\n') || text === '' ? text : `${text}\n`);
+    return 0;
+}
+//# sourceMappingURL=logs.js.map

package/lib/commands/logs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logs.js","sourceRoot":"","sources":["../../src/commands/logs.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,UAAU,CAAC;AAEhD;;;;;GAKG;AACH,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,6BAA6B;AAC7B,MAAM,CAAC,MAAM,UAAU,GAAG;;;;;;;;;;;CAWzB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,IAAuB;IACnD,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACrH,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC1F,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChB,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,4EAA4E,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxD,IAAI,CAAC,IAAI;QAAE,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM;QAAE,IAAI,CAAC,yEAAyE,CAAC,CAAC;IAC7F,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,yCAAyC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,iBAAiB,CAChC,UAAU,EACV;YACE,CAAC,EAAE,CAAC;YACJ,EAAE,EAAE,MAAM;YACV,IAAI;YACJ,IAAI,EAAE,IAAI;YACV,KAAK;YACL,KAAK;YACL,OAAO,EAAE,MAAM;YACf,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,EACD,eAAe,CAChB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAiB,KAAe,CAAC,OAAO,IAAI,CAAC,CAAC;QACnE,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,QAAQ,CAAC,IAAI,IAAI,SAAS,MAAM,QAAQ,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,CAAC;QAC3G,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,IAAI,EAAE,CAAC;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;IAC9E,OAAO,CAAC,CAAC;AACX,CAAC"}

package/lib/commands/pr.d.ts

@@ -0,0 +1,10 @@
+/** Usage text for `pr`. */
+export declare const PR_USAGE = "Usage: gcb pr [options]\n\nOpen, update or inspect a pull request through the broker, without the credential\never reaching this side.\n\nA subcommand the gh action catalog has (pr view, pr close, \u2026) runs as that action instead;\ngcb gh --help lists them. The flags below are the flag-only lifecycle gh cannot express.\n\nOpening (the default)\n  --head <branch>      The branch holding the change                 [required]\n                       May be <remote>:<branch>, e.g. origin:feat/x, to name a fork\n  --base <branch>      The branch to merge into (default: main)\n                       A <remote>:<branch> here names the same repository as --repo\n  --title <text>       The title                                     [required]\n  --body <text>        The body, inline\n  --body-file <path>   The body, read from a file \u2014 a pull request body is usually long\n  --draft              Open it as a draft\n  --via-host           Ask a host-side opener to create it, as you, instead of as the app\n                       (run 'gcb host-opener' on the host to provide one)\n\nActing on one\n  --number <n>         The pull request number                       [required]\n  --proxy <url>        Use this proxy for this request\n  --no-proxy           Reach GitHub directly for this request\n  --status             Report its state, mergeability and the runs for its commit\n  --comment            Post an anchored review comment (also needs --file and --line);\n                       for a plain comment use: gcb gh pr comment <number> --body ...\n  --file <path>        Anchor that comment to a line of this file, repository-relative\n  --line <n>           The line to anchor to, in the new file unless --side says otherwise\n  --side <left|right>  Which side of the diff --line counts on (default: right)\n  --threads            List its review threads: their ids, whether they are resolved, and the comments\n  --reply-to <id>      Reply inside the thread that comment id belongs to, with --body/--body-file\n  --edit <id>          Replace the body of that review comment, with --body/--body-file\n                       (an id --threads prints; no --number is needed)\n  --resolve <thread>   Mark that review thread resolved (the id --threads prints)\n  With --number and none of the above, the title, body or base is updated.\n\nCommon\n  --socket <path>      Broker socket (default: $GIT_BROKER_SOCKET or the socket file)\n  --host <host>        Host as configured, e.g. github.com (default: github.com)\n  --repo <owner/name>  Repository the pull request belongs to (default: origin remote)\n  -h, --help           Show this help\n";
+/**
+ * Run the `pr` command.
+ *
+ * @param argv - arguments after the command name.
+ * @returns the process exit code: 0 done, 1 refused, 3 unreachable.
+ */
+export declare function runPr(argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=pr.d.ts.map

package/lib/commands/pr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.d.ts","sourceRoot":"","sources":["../../src/commands/pr.ts"],"names":[],"mappings":"AAuCA,2BAA2B;AAC3B,eAAO,MAAM,QAAQ,smFA0CpB,CAAC;AAyBF;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CA4PpE"}