gws-axi 0.1.0

package/dist/src/auth/setup-html.js

@@ -0,0 +1,245 @@
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { configDir, getDefaultAccount, listAccounts, profilePathForAccount, readSetupState, tokensPathForAccount, SETUP_STEP_ORDER, } from "../config.js";
+import { consoleUrl } from "./steps.js";
+import { REQUIRED_APIS, SERVICES } from "./scopes.js";
+const STEP_LABELS = {
+    gcp_project: "Choose or create GCP project",
+    apis_enabled: "Enable Google Workspace APIs",
+    oauth_client: "Create Desktop OAuth client",
+    credentials_saved: "Save credentials JSON to config dir",
+    consent_screen: "Configure OAuth consent screen",
+    test_user_added: "Add test users (each Google account you'll authenticate)",
+    tokens_obtained: "Run OAuth loopback flow to obtain tokens",
+};
+function linksForStep(key, projectId) {
+    switch (key) {
+        case "gcp_project":
+            return [
+                {
+                    label: "Create project in Console",
+                    url: "https://console.cloud.google.com/projectcreate",
+                },
+            ];
+        case "apis_enabled":
+            return SERVICES.map((s) => ({
+                label: `Enable ${s}`,
+                url: consoleUrl(`/apis/library/${REQUIRED_APIS[s]}`, projectId),
+            }));
+        case "oauth_client":
+            return [
+                {
+                    label: "OAuth clients → Create client",
+                    url: consoleUrl("/auth/clients", projectId),
+                },
+            ];
+        case "consent_screen":
+            return [
+                {
+                    label: "Branding (app name, emails)",
+                    url: consoleUrl("/auth/branding", projectId),
+                },
+                {
+                    label: "Audience (user type)",
+                    url: consoleUrl("/auth/audience", projectId),
+                },
+            ];
+        case "test_user_added":
+            return [
+                {
+                    label: "Audience → Test users",
+                    url: consoleUrl("/auth/audience", projectId),
+                },
+            ];
+        default:
+            return [];
+    }
+}
+export function setupHtmlPath() {
+    return join(configDir(), "setup.html");
+}
+function readAccountRows() {
+    const emails = listAccounts();
+    const defaultAccount = getDefaultAccount();
+    return emails.map((email) => {
+        const row = {
+            email,
+            scopeCount: 0,
+            isDefault: email === defaultAccount,
+        };
+        try {
+            const profile = JSON.parse(readFileSync(profilePathForAccount(email), "utf-8"));
+            row.name = profile.name;
+        }
+        catch {
+            // no profile yet
+        }
+        try {
+            const tokens = JSON.parse(readFileSync(tokensPathForAccount(email), "utf-8"));
+            row.obtainedAt = tokens.obtained_at;
+            row.scopeCount = tokens.scope
+                ? tokens.scope.split(" ").filter(Boolean).length
+                : 0;
+        }
+        catch {
+            // no tokens file
+        }
+        return row;
+    });
+}
+export function writeSetupHtml(options = {}) {
+    const state = readSetupState();
+    const projectId = state.steps.gcp_project.project_id;
+    const nextKey = SETUP_STEP_ORDER.find((k) => !state.steps[k].done);
+    const progress = SETUP_STEP_ORDER.filter((k) => state.steps[k].done).length;
+    const initialSetupDone = nextKey === undefined;
+    const accounts = readAccountRows();
+    const rows = SETUP_STEP_ORDER.map((key, idx) => {
+        const step = state.steps[key];
+        const isNext = key === nextKey;
+        const status = step.done ? "✓ done" : isNext ? "→ next" : "… pending";
+        const statusClass = step.done ? "done" : isNext ? "next" : "pending";
+        const links = linksForStep(key, projectId)
+            .map((l) => `<a href="${l.url}" target="_blank" rel="noopener">${l.label}</a>`)
+            .join(" · ");
+        return `<tr class="${statusClass}">
+      <td class="num">${idx + 1}</td>
+      <td class="status">${status}</td>
+      <td class="name">${STEP_LABELS[key]}</td>
+      <td class="links">${links || "<em>no external action needed</em>"}</td>
+    </tr>`;
+    }).join("\n");
+    const now = new Date();
+    const nowLabel = now.toLocaleTimeString();
+    const pendingAuthBlock = options.pendingAuth
+        ? `<div class="pending-auth">
+  <div class="pending-auth-title">Waiting for authentication${options.pendingAuth.account ? ` as <code>${options.pendingAuth.account}</code>` : ""}</div>
+  <p><strong>Wrong browser profile?</strong> If you're not currently signed into ${options.pendingAuth.account ? `<code>${options.pendingAuth.account}</code>` : "the target account"} in this browser, open <code>~/.config/gws-axi/setup.html</code> in the correct profile before clicking below — Google will pick up whichever account is active here.</p>
+  <a class="auth-button" href="${options.pendingAuth.url}" target="_blank" rel="noopener">Authenticate with Google &rarr;</a>
+  <p class="pending-auth-note">The CLI is listening for the callback on 127.0.0.1 — this button only works while <code>gws-axi auth login --wait</code> is blocking in your terminal. Sign in${options.pendingAuth.account ? ` as <code>${options.pendingAuth.account}</code>` : ""} at Google's prompt and approve the scopes.</p>
+</div>`
+        : "";
+    const accountsBlock = accounts.length
+        ? `<div class="accounts-section">
+  <h2>Accounts (${accounts.length})</h2>
+  <table class="accounts">
+    <thead><tr><th>Email</th><th>Name</th><th>Scopes</th><th>Added</th><th>Default</th></tr></thead>
+    <tbody>
+${accounts
+            .map((a) => `      <tr>
+        <td><code>${a.email}</code></td>
+        <td>${a.name ?? "<em>—</em>"}</td>
+        <td>${a.scopeCount}</td>
+        <td>${a.obtainedAt ? new Date(a.obtainedAt).toLocaleString() : "<em>pending</em>"}</td>
+        <td>${a.isDefault ? "<span class=\"default-badge\">default</span>" : ""}</td>
+      </tr>`)
+            .join("\n")}
+    </tbody>
+  </table>
+</div>`
+        : "";
+    const addAnotherBlock = initialSetupDone
+        ? `<div class="add-another">
+  <h3>Add another Google account</h3>
+  <p>The same OAuth client handles multiple Google accounts (e.g. personal + work). To add one:</p>
+  <ol>
+    <li>Make sure the account is added as a test user on the <a href="${consoleUrl("/auth/audience", projectId)}" target="_blank" rel="noopener">Audience page</a> (otherwise Google rejects with access_denied)</li>
+    <li>In your terminal, run <code>gws-axi auth login --account &lt;email&gt;</code></li>
+    <li>This page will show an "Authenticate with Google" button within 10 seconds — click it to consent as that account</li>
+  </ol>
+</div>`
+        : "";
+    const footerText = initialSetupDone
+        ? `Setup is complete. Keep this tab open — it will show an "Authenticate" button when you run <code>gws-axi auth login --account &lt;email&gt;</code> to add a new account. Regenerated every time a gws-axi auth command runs.`
+        : `Click the links above to complete each step in <em>this</em> browser (so you stay in the Google account you're signed into). Regenerated every time you run <code>gws-axi auth setup</code>.`;
+    const summaryContent = initialSetupDone
+        ? `<strong>Status:</strong> Setup complete · OAuth client ready<br>
+  <strong>Project:</strong> ${projectId ? `<code>${projectId}</code>` : "(not set)"}<br>
+  <strong>Accounts:</strong> ${accounts.length} authenticated${accounts.length > 1 ? ` · write protection active (writes require <code>--account</code>)` : ""}`
+        : `<strong>Project:</strong> ${projectId ? `<code>${projectId}</code>` : "(not set yet)"}<br>
+  <strong>Progress:</strong> ${progress} of ${SETUP_STEP_ORDER.length} steps complete
+  ${nextKey ? `<br><strong>Next step:</strong> <code>${STEP_LABELS[nextKey]}</code> — click the buttons below, then run <code>gws-axi auth setup</code> to continue` : ""}`;
+    const html = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta http-equiv="refresh" content="10">
+<title>gws-axi — setup</title>
+<style>
+  body { font-family: -apple-system, system-ui, "Segoe UI", sans-serif; max-width: 900px; margin: 40px auto; padding: 24px; color: #222; }
+  h1 { margin-top: 0; }
+  h2 { margin-top: 28px; margin-bottom: 12px; font-size: 18px; }
+  h3 { margin-top: 24px; margin-bottom: 8px; font-size: 16px; }
+  .summary { background: #f4f8fb; border-left: 4px solid #3b82f6; padding: 12px 16px; border-radius: 4px; margin-bottom: 24px; }
+  .refresh { font-size: 12px; color: #6b7280; margin-top: 6px; }
+  .pending-auth { background: #fef3c7; border: 2px solid #f59e0b; padding: 20px 24px; border-radius: 6px; margin-bottom: 24px; }
+  .pending-auth-title { font-size: 18px; font-weight: 600; color: #92400e; margin-bottom: 8px; }
+  .pending-auth p { margin: 8px 0; }
+  .pending-auth-note { font-size: 13px; color: #78350f; }
+  .auth-button { display: inline-block; padding: 10px 20px; background: #4285f4; color: white; text-decoration: none; border-radius: 6px; font-weight: 500; margin: 8px 0; }
+  .auth-button:hover { background: #3367d6; }
+  table { width: 100%; border-collapse: collapse; }
+  th, td { padding: 10px 12px; text-align: left; border-bottom: 1px solid #e4e4e7; vertical-align: top; }
+  th { background: #fafafa; font-size: 13px; color: #555; text-transform: uppercase; letter-spacing: 0.5px; }
+  tr.done { opacity: 0.55; }
+  tr.done .status { color: #1a7f37; font-weight: 500; }
+  tr.next { background: #fffbeb; }
+  tr.next .status { color: #b45309; font-weight: 600; }
+  tr.pending .status { color: #8a5a00; }
+  td.num { font-family: ui-monospace, Menlo, monospace; color: #999; width: 32px; }
+  td.name { font-weight: 500; width: 260px; }
+  td.links { font-size: 14px; }
+  td.links a { display: inline-block; margin-right: 8px; padding: 4px 10px; border-radius: 4px; background: #eff6ff; color: #1d4ed8; text-decoration: none; font-size: 13px; }
+  td.links a:hover { background: #dbeafe; }
+  tr.done td.links a { background: #f4f4f5; color: #6b7280; }
+  .accounts-section { margin-top: 24px; }
+  .accounts { margin-bottom: 8px; }
+  .accounts td, .accounts th { font-size: 14px; }
+  .accounts td { vertical-align: middle; }
+  .default-badge { background: #dbeafe; color: #1d4ed8; font-size: 12px; padding: 2px 8px; border-radius: 10px; font-weight: 500; }
+  .add-another { margin-top: 24px; padding: 16px 20px; background: #f9fafb; border: 1px solid #e5e7eb; border-radius: 6px; }
+  .add-another ol { margin: 8px 0 0 20px; padding: 0; }
+  .add-another li { margin: 6px 0; }
+  details.steps { margin-top: 24px; }
+  details.steps summary { cursor: pointer; color: #4b5563; font-size: 14px; padding: 6px 0; }
+  details.steps summary:hover { color: #111827; }
+  footer { margin-top: 32px; font-size: 13px; color: #666; }
+  code { background: #f4f4f5; padding: 2px 6px; border-radius: 3px; font-size: 13px; }
+</style>
+</head>
+<body>
+<h1>gws-axi · setup</h1>
+${pendingAuthBlock}
+<div class="summary">
+  ${summaryContent}
+  <div class="refresh">Auto-refreshes every 10 seconds · last rendered at ${nowLabel}</div>
+</div>
+${accountsBlock}
+${addAnotherBlock}
+${initialSetupDone
+        ? `<details class="steps"><summary>Show initial setup steps (all complete)</summary>
+<table>
+<thead><tr><th>#</th><th>Status</th><th>Step</th><th>Console links</th></tr></thead>
+<tbody>
+${rows}
+</tbody>
+</table>
+</details>`
+        : `<table>
+<thead><tr><th>#</th><th>Status</th><th>Step</th><th>Console links</th></tr></thead>
+<tbody>
+${rows}
+</tbody>
+</table>`}
+<footer>
+  ${footerText}
+</footer>
+</body>
+</html>
+`;
+    const path = setupHtmlPath();
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, html);
+    return path;
+}
+//# sourceMappingURL=setup-html.js.map

package/dist/src/auth/setup-html.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup-html.js","sourceRoot":"","sources":["../../../src/auth/setup-html.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,SAAS,EACT,iBAAiB,EACjB,YAAY,EACZ,qBAAqB,EACrB,cAAc,EACd,oBAAoB,EACpB,gBAAgB,GAEjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOtD,MAAM,WAAW,GAAiC;IAChD,WAAW,EAAE,8BAA8B;IAC3C,YAAY,EAAE,8BAA8B;IAC5C,YAAY,EAAE,6BAA6B;IAC3C,iBAAiB,EAAE,qCAAqC;IACxD,cAAc,EAAE,gCAAgC;IAChD,eAAe,EAAE,0DAA0D;IAC3E,eAAe,EAAE,0CAA0C;CAC5D,CAAC;AAEF,SAAS,YAAY,CACnB,GAAiB,EACjB,SAA6B;IAE7B,QAAQ,GAAG,EAAE,CAAC;QACZ,KAAK,aAAa;YAChB,OAAO;gBACL;oBACE,KAAK,EAAE,2BAA2B;oBAClC,GAAG,EAAE,gDAAgD;iBACtD;aACF,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1B,KAAK,EAAE,UAAU,CAAC,EAAE;gBACpB,GAAG,EAAE,UAAU,CAAC,iBAAiB,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;aAChE,CAAC,CAAC,CAAC;QACN,KAAK,cAAc;YACjB,OAAO;gBACL;oBACE,KAAK,EAAE,+BAA+B;oBACtC,GAAG,EAAE,UAAU,CAAC,eAAe,EAAE,SAAS,CAAC;iBAC5C;aACF,CAAC;QACJ,KAAK,gBAAgB;YACnB,OAAO;gBACL;oBACE,KAAK,EAAE,6BAA6B;oBACpC,GAAG,EAAE,UAAU,CAAC,gBAAgB,EAAE,SAAS,CAAC;iBAC7C;gBACD;oBACE,KAAK,EAAE,sBAAsB;oBAC7B,GAAG,EAAE,UAAU,CAAC,gBAAgB,EAAE,SAAS,CAAC;iBAC7C;aACF,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL;oBACE,KAAK,EAAE,uBAAuB;oBAC9B,GAAG,EAAE,UAAU,CAAC,gBAAgB,EAAE,SAAS,CAAC;iBAC7C;aACF,CAAC;QACJ;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,CAAC,CAAC;AACzC,CAAC;AAsBD,SAAS,eAAe;IACtB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,cAAc,GAAG,iBAAiB,EAAE,CAAC;IAC3C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAe;YACtB,KAAK;YACL,UAAU,EAAE,CAAC;YACb,SAAS,EAAE,KAAK,KAAK,cAAc;SACpC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,YAAY,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAC/B,CAAC;YACvB,GAAG,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,YAAY,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CACP,CAAC;YAC9C,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC;YACpC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK;gBAC3B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM;gBAChD,CAAC,CAAC,CAAC,CAAC;QACR,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAA4B,EAAE;IAC3D,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,UAAgC,CAAC;IAE3E,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CACtC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAC3B,CAAC,MAAM,CAAC;IACT,MAAM,gBAAgB,GAAG,OAAO,KAAK,SAAS,CAAC;IAC/C,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IAEnC,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,KAAK,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;QACtE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC;aACvC,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,YAAY,CAAC,CAAC,GAAG,oCAAoC,CAAC,CAAC,KAAK,MAAM,CACrE;aACA,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,OAAO,cAAc,WAAW;wBACZ,GAAG,GAAG,CAAC;2BACJ,MAAM;yBACR,WAAW,CAAC,GAAG,CAAC;0BACf,KAAK,IAAI,oCAAoC;UAC7D,CAAC;IACT,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,QAAQ,GAAG,GAAG,CAAC,kBAAkB,EAAE,CAAC;IAE1C,MAAM,gBAAgB,GAAG,OAAO,CAAC,WAAW;QAC1C,CAAC,CAAC;8DACwD,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE;mFAC/D,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,CAAC,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,oBAAoB;iCACpJ,OAAO,CAAC,WAAW,CAAC,GAAG;+LACuI,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,OAAO,CAAC,WAAW,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,EAAE;OAC5Q;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM;QACnC,CAAC,CAAC;kBACY,QAAQ,CAAC,MAAM;;;;EAI/B,QAAQ;aACP,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CAAC;oBACS,CAAC,CAAC,KAAK;cACb,CAAC,CAAC,IAAI,IAAI,YAAY;cACtB,CAAC,CAAC,UAAU;cACZ,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,kBAAkB;cAC3E,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,EAAE;YACnE,CACT;aACA,IAAI,CAAC,IAAI,CAAC;;;OAGN;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,eAAe,GAAG,gBAAgB;QACtC,CAAC,CAAC;;;;wEAIkE,UAAU,CAAC,gBAAgB,EAAE,SAAS,CAAC;;;;OAIxG;QACH,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,UAAU,GAAG,gBAAgB;QACjC,CAAC,CAAC,8NAA8N;QAChO,CAAC,CAAC,8LAA8L,CAAC;IAEnM,MAAM,cAAc,GAAG,gBAAgB;QACrC,CAAC,CAAC;8BACwB,SAAS,CAAC,CAAC,CAAC,SAAS,SAAS,SAAS,CAAC,CAAC,CAAC,WAAW;+BACpD,QAAQ,CAAC,MAAM,iBAAiB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oEAAoE,CAAC,CAAC,CAAC,EAAE,EAAE;QAC5J,CAAC,CAAC,6BAA6B,SAAS,CAAC,CAAC,CAAC,SAAS,SAAS,SAAS,CAAC,CAAC,CAAC,eAAe;+BAC7D,QAAQ,OAAO,gBAAgB,CAAC,MAAM;IACjE,OAAO,CAAC,CAAC,CAAC,yCAAyC,WAAW,CAAC,OAAO,CAAC,yFAAyF,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAE1K,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkDb,gBAAgB;;IAEd,cAAc;4EAC0D,QAAQ;;EAElF,aAAa;EACb,eAAe;EACf,gBAAgB;QAChB,CAAC,CAAC;;;;EAIF,IAAI;;;WAGK;QACT,CAAC,CAAC;;;EAGF,IAAI;;SAEG;;IAEL,UAAU;;;;CAIb,CAAC;IAEA,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/auth/state.d.ts

@@ -0,0 +1,4 @@
+import { type SetupState, type SetupStepKey } from "../config.js";
+export declare function markStepDone(key: SetupStepKey, detail?: Record<string, unknown>): SetupState;
+export declare function updateStepMetadata(key: SetupStepKey, detail: Record<string, unknown>): SetupState;
+export declare function resetFrom(key: SetupStepKey | null): SetupState;

package/dist/src/auth/state.js

@@ -0,0 +1,41 @@
+import { readSetupState, writeSetupState, SETUP_STEP_ORDER, } from "../config.js";
+export function markStepDone(key, detail = {}) {
+    const state = readSetupState();
+    state.steps[key] = {
+        ...state.steps[key],
+        ...detail,
+        done: true,
+        at: new Date().toISOString(),
+    };
+    updateResumeHint(state);
+    writeSetupState(state);
+    return state;
+}
+export function updateStepMetadata(key, detail) {
+    const state = readSetupState();
+    state.steps[key] = { ...state.steps[key], ...detail };
+    updateResumeHint(state);
+    writeSetupState(state);
+    return state;
+}
+export function resetFrom(key) {
+    const state = readSetupState();
+    const startIndex = key ? SETUP_STEP_ORDER.indexOf(key) : 0;
+    for (let i = startIndex; i < SETUP_STEP_ORDER.length; i++) {
+        state.steps[SETUP_STEP_ORDER[i]] = { done: false };
+    }
+    updateResumeHint(state);
+    writeSetupState(state);
+    return state;
+}
+function updateResumeHint(state) {
+    const next = SETUP_STEP_ORDER.find((k) => !state.steps[k].done);
+    if (!next) {
+        state.last_action = "complete";
+        state.resume_hint = "Run `gws-axi doctor` to verify runtime health";
+        return;
+    }
+    state.last_action = `awaiting:${next}`;
+    state.resume_hint = `Run \`gws-axi auth setup\` to continue at step ${next}`;
+}
+//# sourceMappingURL=state.js.map

package/dist/src/auth/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/auth/state.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,eAAe,EAGf,gBAAgB,GACjB,MAAM,cAAc,CAAC;AAEtB,MAAM,UAAU,YAAY,CAC1B,GAAiB,EACjB,SAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;QACjB,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;QACnB,GAAG,MAAM;QACT,IAAI,EAAE,IAAI;QACV,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KAC7B,CAAC;IACF,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAiB,EACjB,MAA+B;IAE/B,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;IACtD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAwB;IAChD,MAAM,KAAK,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,UAAU,GAAG,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1D,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACrD,CAAC;IACD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACzC,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,KAAK,CAAC,WAAW,GAAG,UAAU,CAAC;QAC/B,KAAK,CAAC,WAAW,GAAG,+CAA+C,CAAC;QACpE,OAAO;IACT,CAAC;IACD,KAAK,CAAC,WAAW,GAAG,YAAY,IAAI,EAAE,CAAC;IACvC,KAAK,CAAC,WAAW,GAAG,kDAAkD,IAAI,EAAE,CAAC;AAC/E,CAAC"}

package/dist/src/auth/steps.d.ts

@@ -0,0 +1,30 @@
+import { type SetupState, type SetupStepKey } from "../config.js";
+export interface SetupFlags {
+    projectId?: string;
+    createProject?: string;
+    projectName?: string;
+    credentialsJson?: string;
+    testUserEmail?: string;
+    port?: number;
+}
+export interface DeepLink {
+    label: string;
+    url: string;
+}
+export interface StepOutcome {
+    step: SetupStepKey;
+    advanced: boolean;
+    title: string;
+    detail?: Record<string, unknown>;
+    instructions?: string[];
+    deep_links?: DeepLink[];
+    error?: string;
+    code?: string;
+}
+export declare function consoleUrl(path: string, projectId?: string): string;
+export declare function advanceGcpProject(flags: SetupFlags): Promise<StepOutcome>;
+export declare function advanceApisEnabled(_flags: SetupFlags, state: SetupState): Promise<StepOutcome>;
+export declare function advanceOauthClient(_flags: SetupFlags, _state: SetupState): Promise<StepOutcome>;
+export declare function advanceCredentialsSaved(flags: SetupFlags): Promise<StepOutcome>;
+export declare function advanceConsentScreen(_flags: SetupFlags, _state: SetupState): Promise<StepOutcome>;
+export declare function advanceTestUserAdded(flags: SetupFlags, _state: SetupState): Promise<StepOutcome>;

package/dist/src/auth/steps.js

@@ -0,0 +1,306 @@
+import { copyFileSync, existsSync, readFileSync, mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { credentialsPath, } from "../config.js";
+import { markStepDone, updateStepMetadata } from "./state.js";
+import { createProject, enableApis, gcloudAccount, isGcloudInstalled, listEnabledApis, listProjects, } from "./gcloud.js";
+import { allApis, REQUIRED_APIS, SERVICES } from "./scopes.js";
+export function consoleUrl(path, projectId) {
+    const base = `https://console.cloud.google.com${path}`;
+    return projectId ? `${base}?project=${encodeURIComponent(projectId)}` : base;
+}
+// STEP 1 — gcp_project ─────────────────────────────────────────────
+export async function advanceGcpProject(flags) {
+    const step = "gcp_project";
+    if (flags.projectId) {
+        if (isGcloudInstalled()) {
+            const projects = listProjects();
+            if (projects.ok) {
+                const found = projects.value.find((p) => p.projectId === flags.projectId);
+                if (!found) {
+                    return {
+                        step,
+                        advanced: false,
+                        title: "Project not found",
+                        error: `No project with ID '${flags.projectId}' in this gcloud account`,
+                        code: "PROJECT_NOT_FOUND",
+                        instructions: [
+                            "List available projects: `gcloud projects list`",
+                            "Or create a new one: `gws-axi auth setup --create-project <id>`",
+                        ],
+                    };
+                }
+            }
+        }
+        markStepDone(step, {
+            project_id: flags.projectId,
+            created_by_us: false,
+        });
+        return {
+            step,
+            advanced: true,
+            title: "GCP project selected",
+            detail: { project_id: flags.projectId },
+        };
+    }
+    if (flags.createProject) {
+        if (!isGcloudInstalled()) {
+            return {
+                step,
+                advanced: false,
+                title: "gcloud CLI required for project creation",
+                error: "Cannot create a GCP project without the gcloud CLI",
+                code: "GCLOUD_REQUIRED",
+                instructions: [
+                    "Install the gcloud CLI: https://cloud.google.com/sdk/docs/install",
+                    "Or in your gws-axi setup page tab, click 'Create project in Console', then re-run with --project <id>",
+                ],
+            };
+        }
+        const displayName = flags.projectName ?? flags.createProject;
+        const result = createProject(flags.createProject, displayName);
+        if (!result.ok) {
+            return {
+                step,
+                advanced: false,
+                title: "Failed to create GCP project",
+                error: result.message,
+                code: result.code,
+                instructions: [
+                    "Try a different project ID (must be globally unique, 6-30 chars)",
+                    "Or create via Console and re-run with --project <id>",
+                ],
+            };
+        }
+        markStepDone(step, {
+            project_id: flags.createProject,
+            created_by_us: true,
+            display_name: displayName,
+        });
+        return {
+            step,
+            advanced: true,
+            title: "GCP project created",
+            detail: { project_id: flags.createProject },
+        };
+    }
+    if (!isGcloudInstalled()) {
+        return {
+            step,
+            advanced: false,
+            title: "Step 1 of 7: Choose a Google Cloud project",
+            instructions: [
+                "In your gws-axi setup page tab, click 'Create project in Console'",
+                "Copy the project ID once the project is created",
+                "Re-run: `gws-axi auth setup --project <your-project-id>`",
+            ],
+        };
+    }
+    const account = gcloudAccount();
+    if (!account.ok) {
+        return {
+            step,
+            advanced: false,
+            title: "gcloud not authenticated",
+            error: account.message,
+            code: account.code,
+            instructions: ["Run: `gcloud auth login`", "Then re-run: `gws-axi auth setup`"],
+        };
+    }
+    const projects = listProjects();
+    const projectList = projects.ok ? projects.value.slice(0, 10) : [];
+    return {
+        step,
+        advanced: false,
+        title: "Step 1 of 7: Choose or create a GCP project",
+        detail: {
+            gcloud_account: account.value,
+            existing_projects: projectList.map((p) => p.projectId),
+        },
+        instructions: [
+            `Use an existing project: \`gws-axi auth setup --project <id>\``,
+            `Or create a new one: \`gws-axi auth setup --create-project <id> --project-name "Name"\``,
+            `Project IDs must be globally unique, 6-30 chars, lowercase`,
+        ],
+    };
+}
+// STEP 2 — apis_enabled ────────────────────────────────────────────
+export async function advanceApisEnabled(_flags, state) {
+    const step = "apis_enabled";
+    const projectId = state.steps.gcp_project.project_id;
+    if (typeof projectId !== "string") {
+        return {
+            step,
+            advanced: false,
+            title: "Cannot enable APIs — project not set",
+            error: "Step 1 must be completed before Step 2",
+            code: "PRECONDITION_FAILED",
+            instructions: ["Run `gws-axi auth setup --project <id>` first"],
+        };
+    }
+    if (!isGcloudInstalled()) {
+        return {
+            step,
+            advanced: false,
+            title: "Step 2 of 7: Enable required APIs",
+            instructions: [
+                "In your gws-axi setup page tab, click each 'Enable <service>' button to enable these APIs:",
+                ...SERVICES.map((s) => `  - ${s} (${REQUIRED_APIS[s]})`),
+                "Then re-run: `gws-axi auth setup`",
+            ],
+        };
+    }
+    const enabled = listEnabledApis(projectId);
+    const enabledSet = new Set(enabled.ok ? enabled.value : []);
+    const missing = allApis().filter((api) => !enabledSet.has(api));
+    if (missing.length > 0) {
+        const result = enableApis(projectId, missing);
+        if (!result.ok) {
+            return {
+                step,
+                advanced: false,
+                title: "Failed to enable APIs",
+                error: result.message,
+                code: result.code,
+                instructions: [
+                    `Try enabling manually via: gcloud services enable ${missing.join(" ")} --project=${projectId}`,
+                    "Or enable via Console and re-run `gws-axi auth setup`",
+                ],
+            };
+        }
+    }
+    markStepDone(step, { apis: allApis(), project_id: projectId });
+    return {
+        step,
+        advanced: true,
+        title: "APIs enabled",
+        detail: { apis: allApis(), project_id: projectId },
+    };
+}
+// STEP 3 — oauth_client (manual only) ──────────────────────────────
+export async function advanceOauthClient(_flags, _state) {
+    const step = "oauth_client";
+    return {
+        step,
+        advanced: false,
+        title: "Step 3 of 7: Create a Desktop OAuth client (manual)",
+        instructions: [
+            "Google does not allow Desktop OAuth clients to be created via CLI/API — this step must be done in the Console",
+            "In your gws-axi setup page tab, click the 'OAuth clients → Create client' link",
+            "On the OAuth clients page, click '+ CREATE CLIENT'",
+            "If prompted to configure the consent screen first, complete Step 5 now and return",
+            'Application type: "Desktop app", Name: "gws-axi" (or any name)',
+            "Click Create, then DOWNLOAD the credentials JSON",
+            "Re-run: `gws-axi auth setup --credentials-json <path-to-downloaded-json>`",
+        ],
+    };
+}
+// STEP 4 — credentials_saved ───────────────────────────────────────
+export async function advanceCredentialsSaved(flags) {
+    const step = "credentials_saved";
+    if (!flags.credentialsJson) {
+        return {
+            step,
+            advanced: false,
+            title: "Step 4 of 7: Save OAuth credentials JSON",
+            instructions: [
+                "Re-run with: `gws-axi auth setup --credentials-json <path>`",
+                "Point to the JSON file you downloaded from the OAuth client creation page",
+            ],
+        };
+    }
+    if (!existsSync(flags.credentialsJson)) {
+        return {
+            step,
+            advanced: false,
+            title: "Credentials file not found",
+            error: `No file at: ${flags.credentialsJson}`,
+            code: "FILE_NOT_FOUND",
+            instructions: ["Check the path and re-run `gws-axi auth setup --credentials-json <path>`"],
+        };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(flags.credentialsJson, "utf-8"));
+    }
+    catch {
+        return {
+            step,
+            advanced: false,
+            title: "Credentials file is not valid JSON",
+            error: "JSON parse failed",
+            code: "INVALID_JSON",
+            instructions: ["Re-download the credentials file from the Google Cloud Console"],
+        };
+    }
+    if (!parsed.installed?.client_id || !parsed.installed?.client_secret) {
+        return {
+            step,
+            advanced: false,
+            title: "Credentials file is not a Desktop OAuth client",
+            error: 'Expected an "installed" field with client_id and client_secret',
+            code: "WRONG_CLIENT_TYPE",
+            instructions: [
+                'Make sure the OAuth client type was "Desktop app" (not Web/Service account)',
+                "Recreate the credentials in the Console if needed",
+            ],
+        };
+    }
+    const destPath = credentialsPath();
+    mkdirSync(dirname(destPath), { recursive: true });
+    copyFileSync(flags.credentialsJson, destPath);
+    markStepDone(step, {
+        path: destPath,
+        client_id: parsed.installed.client_id,
+    });
+    return {
+        step,
+        advanced: true,
+        title: "Credentials saved",
+        detail: { path: destPath },
+    };
+}
+// STEP 5 — consent_screen (manual only) ────────────────────────────
+export async function advanceConsentScreen(_flags, _state) {
+    const step = "consent_screen";
+    return {
+        step,
+        advanced: false,
+        title: "Step 5 of 7: Configure the OAuth consent screen (manual)",
+        instructions: [
+            "Google split the OAuth consent screen into two pages — you'll need both",
+            "In your gws-axi setup page tab, click the 'Branding (app name, emails)' link",
+            "  → App name: 'gws-axi' (or anything)",
+            "  → User support email + Developer contact email: your email",
+            "  → Leave logo / homepage / privacy policy blank (optional for Testing mode)",
+            "  → Save",
+            "Then back on the setup page, click the 'Audience (user type)' link",
+            "  → Verify 'Publishing status' shows 'Testing' — if it says 'In production', click 'Back to testing' (do NOT publish)",
+            "  → Verify 'User type' shows 'External' — if it says 'Internal', click 'Make external' (required unless you have a Google Workspace domain and only want to use Workspace accounts)",
+            "  → This page has no Save button — state changes take effect when you click those toggle buttons",
+            "  → Staying in Testing mode means tokens expire every 7 days (expected, we'll handle this later)",
+            "When done, mark this step complete: `gws-axi auth setup --confirm-step consent_screen`",
+        ],
+    };
+}
+// STEP 6 — test_user_added (manual only) ───────────────────────────
+export async function advanceTestUserAdded(flags, _state) {
+    const step = "test_user_added";
+    if (flags.testUserEmail) {
+        updateStepMetadata(step, { email: flags.testUserEmail });
+    }
+    return {
+        step,
+        advanced: false,
+        title: "Step 6 of 7: Add yourself as a test user (manual)",
+        instructions: [
+            "In your gws-axi setup page tab, click the 'Audience → Test users' link",
+            'On that page, scroll to "Test users" and click "+ ADD USERS"',
+            "Enter each Google account you plan to authenticate (personal, work, etc.) and click Save",
+            "gws-axi supports multiple accounts with the same OAuth client — add them all now",
+            "Without this, the OAuth flow will reject those users with access_denied",
+            "When done, mark complete: `gws-axi auth setup --confirm-step test_user_added --test-user <primary-email>`",
+            "After setup completes, use `gws-axi auth login --account <email>` to authenticate each additional account",
+        ],
+    };
+}
+//# sourceMappingURL=steps.js.map

package/dist/src/auth/steps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"steps.js","sourceRoot":"","sources":["../../../src/auth/steps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,eAAe,GAIhB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC9D,OAAO,EACL,aAAa,EACb,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,YAAY,GACb,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AA2B/D,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,SAAkB;IACzD,MAAM,IAAI,GAAG,mCAAmC,IAAI,EAAE,CAAC;IACvD,OAAO,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAiB;IAEjB,MAAM,IAAI,GAAiB,aAAa,CAAC;IAEzC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,IAAI,iBAAiB,EAAE,EAAE,CAAC;YACxB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;YAChC,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO;wBACL,IAAI;wBACJ,QAAQ,EAAE,KAAK;wBACf,KAAK,EAAE,mBAAmB;wBAC1B,KAAK,EAAE,uBAAuB,KAAK,CAAC,SAAS,0BAA0B;wBACvE,IAAI,EAAE,mBAAmB;wBACzB,YAAY,EAAE;4BACZ,iDAAiD;4BACjD,iEAAiE;yBAClE;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,YAAY,CAAC,IAAI,EAAE;YACjB,UAAU,EAAE,KAAK,CAAC,SAAS;YAC3B,aAAa,EAAE,KAAK;SACrB,CAAC,CAAC;QACH,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,sBAAsB;YAC7B,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE;SACxC,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;YACzB,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,0CAA0C;gBACjD,KAAK,EAAE,oDAAoD;gBAC3D,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE;oBACZ,mEAAmE;oBACnE,uGAAuG;iBACxG;aACF,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,CAAC;QAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,8BAA8B;gBACrC,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE;oBACZ,kEAAkE;oBAClE,sDAAsD;iBACvD;aACF,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,IAAI,EAAE;YACjB,UAAU,EAAE,KAAK,CAAC,aAAa;YAC/B,aAAa,EAAE,IAAI;YACnB,YAAY,EAAE,WAAW;SAC1B,CAAC,CAAC;QACH,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,qBAAqB;YAC5B,MAAM,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,aAAa,EAAE;SAC5C,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,4CAA4C;YACnD,YAAY,EAAE;gBACZ,mEAAmE;gBACnE,iDAAiD;gBACjD,0DAA0D;aAC3D;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,EAAE,CAAC;IAChC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,0BAA0B;YACjC,KAAK,EAAE,OAAO,CAAC,OAAO;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,CAAC,0BAA0B,EAAE,mCAAmC,CAAC;SAChF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAEnE,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,6CAA6C;QACpD,MAAM,EAAE;YACN,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,iBAAiB,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;SACvD;QACD,YAAY,EAAE;YACZ,gEAAgE;YAChE,yFAAyF;YACzF,4DAA4D;SAC7D;KACF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,KAAiB;IAEjB,MAAM,IAAI,GAAiB,cAAc,CAAC;IAC1C,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAClC,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,sCAAsC;YAC7C,KAAK,EAAE,wCAAwC;YAC/C,IAAI,EAAE,qBAAqB;YAC3B,YAAY,EAAE,CAAC,+CAA+C,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,mCAAmC;YAC1C,YAAY,EAAE;gBACZ,4FAA4F;gBAC5F,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC;gBACxD,mCAAmC;aACpC;SACF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO;gBACL,IAAI;gBACJ,QAAQ,EAAE,KAAK;gBACf,KAAK,EAAE,uBAAuB;gBAC9B,KAAK,EAAE,MAAM,CAAC,OAAO;gBACrB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE;oBACZ,qDAAqD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,SAAS,EAAE;oBAC/F,uDAAuD;iBACxD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,YAAY,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;IAC/D,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAkB,EAClB,MAAkB;IAElB,MAAM,IAAI,GAAiB,cAAc,CAAC;IAE1C,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,qDAAqD;QAC5D,YAAY,EAAE;YACZ,+GAA+G;YAC/G,gFAAgF;YAChF,oDAAoD;YACpD,mFAAmF;YACnF,gEAAgE;YAChE,kDAAkD;YAClD,2EAA2E;SAC5E;KACF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAiB;IAEjB,MAAM,IAAI,GAAiB,mBAAmB,CAAC;IAE/C,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,0CAA0C;YACjD,YAAY,EAAE;gBACZ,6DAA6D;gBAC7D,2EAA2E;aAC5E;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,4BAA4B;YACnC,KAAK,EAAE,eAAe,KAAK,CAAC,eAAe,EAAE;YAC7C,IAAI,EAAE,gBAAgB;YACtB,YAAY,EAAE,CAAC,0EAA0E,CAAC;SAC3F,CAAC;IACJ,CAAC;IAED,IAAI,MAAsE,CAAC;IAC3E,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,oCAAoC;YAC3C,KAAK,EAAE,mBAAmB;YAC1B,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE,CAAC,gEAAgE,CAAC;SACjF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC;QACrE,OAAO;YACL,IAAI;YACJ,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,gDAAgD;YACvD,KAAK,EAAE,gEAAgE;YACvE,IAAI,EAAE,mBAAmB;YACzB,YAAY,EAAE;gBACZ,6EAA6E;gBAC7E,mDAAmD;aACpD;SACF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,YAAY,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAE9C,YAAY,CAAC,IAAI,EAAE;QACjB,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;KACtC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,IAAI;QACd,KAAK,EAAE,mBAAmB;QAC1B,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC3B,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAkB,EAClB,MAAkB;IAElB,MAAM,IAAI,GAAiB,gBAAgB,CAAC;IAE5C,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,0DAA0D;QACjE,YAAY,EAAE;YACZ,yEAAyE;YACzE,8EAA8E;YAC9E,uCAAuC;YACvC,8DAA8D;YAC9D,8EAA8E;YAC9E,UAAU;YACV,oEAAoE;YACpE,uHAAuH;YACvH,qLAAqL;YACrL,kGAAkG;YAClG,kGAAkG;YAClG,wFAAwF;SACzF;KACF,CAAC;AACJ,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAiB,EACjB,MAAkB;IAElB,MAAM,IAAI,GAAiB,iBAAiB,CAAC;IAE7C,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,kBAAkB,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,KAAK;QACf,KAAK,EAAE,mDAAmD;QAC1D,YAAY,EAAE;YACZ,wEAAwE;YACxE,8DAA8D;YAC9D,0FAA0F;YAC1F,kFAAkF;YAClF,yEAAyE;YACzE,2GAA2G;YAC3G,2GAA2G;SAC5G;KACF,CAAC;AACJ,CAAC"}