monday-cli 0.2.0 → 0.4.0

package/dist/api/people.js.map

@@ -1 +1 @@
-{"version":3,"file":"people.js","sourceRoot":"","sources":["../../src/api/people.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAiG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,GAAW,EACX,QAAgB,EAChB,GAA4B,EACA,EAAE;IAC9B,MAAM,MAAM,GAAG,GAAG;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,gEAAgE;IAChE,gDAAgD;IAChD,IAAI,QAA4B,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,IAAqB,EAAE;QAChD,QAAQ,KAAK,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAA4B,EAAE,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,+DAA+D;YAC/D,0DAA0D;YAC1D,+DAA+D;YAC/D,8BAA8B;YAC9B,MAAM,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,EAAE,GACN,SAAS,CAAC,KAAK,CAAC;YACd,CAAC,CAAC,MAAM,aAAa,EAAE;YACvB,CAAC,CAAC,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO;QACL,OAAO,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE;QACrC,UAAU,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;KACzC,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAa,EAAU,EAAE;IAC/E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,gEAAgE;QAChE,4DAA4D;QAC5D,gEAAgE;QAChE,4DAA4D;QAC5D,4DAA4D;QAC5D,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,kBAAkB,QAAQ,qBAAqB,KAAK,SAAS;YAC3D,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,sBAAsB;YAC/D,8DAA8D;YAC9D,mBAAmB,EACrB;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,QAAQ;gBACrB,KAAK;gBACL,WAAW,EAAE,EAAE;gBACf,IAAI,EACF,0DAA0D;oBAC1D,0DAA0D;oBAC1D,8CAA8C;aACjD;SACF,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAClB,kBAAkB,QAAQ,6BAA6B,EAAE,IAAI;YAC3D,gBAAgB,KAAK,4CAA4C;YACjE,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,UAAU,EACZ;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,QAAQ;gBACrB,KAAK;gBACL,WAAW,EAAE,EAAE;gBACf,IAAI,EACF,2DAA2D;oBAC3D,6DAA6D;oBAC7D,qDAAqD;oBACrD,GAAG,QAAQ,+BAA+B,EAAE,wBAAwB;aACvE;SACF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAGF;;;;;;;;;GASG;AACH,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAE,GAAW,EAAc,EAAE,CAC1E,IAAI,UAAU,CACZ,kBAAkB,QAAQ,2CAA2C;IACnE,eAAe,GAAG,mCAAmC;IACrD,6BAA6B,QAAQ,6BAA6B,EACpE;IACE,OAAO,EAAE;QACP,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,GAAG;QACd,IAAI,EACF,oDAAoD;YACpD,GAAG,QAAQ,0CAA0C;YACrD,SAAS,QAAQ,0CAA0C;YAC3D,2DAA2D;YAC3D,YAAY;KACf;CACF,CACF,CAAC;AAEJ;;;;;;;;;;;GAWG;AACH,MAAM,uBAAuB,GAAG,CAC9B,QAAgB,EAChB,KAAa,EACb,GAAW,EACC,EAAE,CACd,IAAI,UAAU,CACZ,kBAAkB,QAAQ,wBAAwB,KAAK,WAAW;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,6DAA6D;IAC7D,oBAAoB,EACtB;IACE,OAAO,EAAE;QACP,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,KAAK;QACL,SAAS,EAAE,GAAG;QACd,IAAI,EACF,6CAA6C,QAAQ,GAAG;YACxD,wCAAwC,QAAQ,GAAG;YACnD,8BAA8B,KAAK,uBAAuB;KAC7D;CACF,CACF,CAAC"}
+{"version":3,"file":"people.js","sourceRoot":"","sources":["../../src/api/people.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAEH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAuB,MAAM,wBAAwB,CAAC;AAsJ/E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,GAAW,EACX,QAAgB,EAChB,GAA4B,EACA,EAAE;IAC9B,MAAM,MAAM,GAAG,GAAG;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;SAChC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,qBAAqB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC;IAED,gEAAgE;IAChE,gDAAgD;IAChD,IAAI,QAA4B,CAAC;IACjC,MAAM,aAAa,GAAG,KAAK,IAAqB,EAAE;QAChD,QAAQ,KAAK,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC;QACnC,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,iEAAiE;IACjE,kEAAkE;IAClE,+DAA+D;IAC/D,iEAAiE;IACjE,+DAA+D;IAC/D,+DAA+D;IAC/D,gEAAgE;IAChE,kDAAkD;IAClD,MAAM,SAAS,GAAG,IAAI,gBAAgB,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,MAAM,gBAAgB,GAA4B,EAAE,CAAC;IACrD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,+DAA+D;YAC/D,0DAA0D;YAC1D,+DAA+D;YAC/D,8BAA8B;YAC9B,MAAM,uBAAuB,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,EAAU,CAAC;QACf,IAAI,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,EAAE,GAAG,MAAM,aAAa,EAAE,CAAC;YAC3B,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/C,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC;YACjB,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,gBAAgB,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5E,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,kEAAkE;IAClE,gEAAgE;IAChE,iEAAiE;IACjE,2CAA2C;IAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC;IACrC,OAAO;QACL,OAAO,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE;QACrC,UAAU,EAAE,EAAE,MAAM,EAAE,gBAAgB,EAAE;QACxC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,eAAe,EAAE,SAAS,CAAC,eAAe;KAC3C,CAAC;AACJ,CAAC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,QAAQ,CAAC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,gBAAgB,GAAG,CAAC,EAAU,EAAE,QAAgB,EAAE,KAAa,EAAU,EAAE;IAC/E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,gEAAgE;QAChE,4DAA4D;QAC5D,gEAAgE;QAChE,4DAA4D;QAC5D,4DAA4D;QAC5D,MAAM,IAAI,QAAQ,CAChB,gBAAgB,EAChB,kBAAkB,QAAQ,qBAAqB,KAAK,SAAS;YAC3D,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,sBAAsB;YAC/D,8DAA8D;YAC9D,mBAAmB,EACrB;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,QAAQ;gBACrB,KAAK;gBACL,WAAW,EAAE,EAAE;gBACf,IAAI,EACF,0DAA0D;oBAC1D,0DAA0D;oBAC1D,8CAA8C;aACjD;SACF,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,UAAU,CAClB,kBAAkB,QAAQ,6BAA6B,EAAE,IAAI;YAC3D,gBAAgB,KAAK,4CAA4C;YACjE,iEAAiE;YACjE,8DAA8D;YAC9D,4DAA4D;YAC5D,UAAU,EACZ;YACE,OAAO,EAAE;gBACP,SAAS,EAAE,QAAQ;gBACnB,WAAW,EAAE,QAAQ;gBACrB,KAAK;gBACL,WAAW,EAAE,EAAE;gBACf,IAAI,EACF,2DAA2D;oBAC3D,6DAA6D;oBAC7D,qDAAqD;oBACrD,GAAG,QAAQ,+BAA+B,EAAE,wBAAwB;aACvE;SACF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAGF;;;;;;;;;GASG;AACH,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAE,GAAW,EAAc,EAAE,CAC1E,IAAI,UAAU,CACZ,kBAAkB,QAAQ,2CAA2C;IACnE,eAAe,GAAG,mCAAmC;IACrD,6BAA6B,QAAQ,6BAA6B,EACpE;IACE,OAAO,EAAE;QACP,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,SAAS,EAAE,GAAG;QACd,IAAI,EACF,oDAAoD;YACpD,GAAG,QAAQ,0CAA0C;YACrD,SAAS,QAAQ,0CAA0C;YAC3D,2DAA2D;YAC3D,YAAY;KACf;CACF,CACF,CAAC;AAEJ;;;;;;;;;;;GAWG;AACH,MAAM,uBAAuB,GAAG,CAC9B,QAAgB,EAChB,KAAa,EACb,GAAW,EACC,EAAE,CACd,IAAI,UAAU,CACZ,kBAAkB,QAAQ,wBAAwB,KAAK,WAAW;IAChE,+DAA+D;IAC/D,iEAAiE;IACjE,6DAA6D;IAC7D,oBAAoB,EACtB;IACE,OAAO,EAAE;QACP,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,QAAQ;QACrB,KAAK;QACL,SAAS,EAAE,GAAG;QACd,IAAI,EACF,6CAA6C,QAAQ,GAAG;YACxD,wCAAwC,QAAQ,GAAG;YACnD,8BAA8B,KAAK,uBAAuB;KAC7D;CACF,CACF,CAAC"}

package/dist/api/probes.d.ts

@@ -0,0 +1,487 @@
+/**
+ * Per-probe primitives for the v0.3-M22 `monday status` verb
+ * (cli-design §11.5 — Decision 7 closure: probe by default,
+ * `--no-probe` opts out).
+ *
+ * **What `monday status` answers:** "is everything I need to talk to
+ * Monday working, without touching account state?" The verb runs
+ * a short, deterministic probe matrix:
+ *
+ *   1. **DNS** — resolve the configured Monday hostname.
+ *   2. **TCP** — open a TCP connection to port 443.
+ *   3. **TLS** — complete a TLS handshake (cert validity, SNI).
+ *   4. **Auth** — issue the cheapest possible GraphQL read
+ *      (`query { me { id } }`) against the resolved transport.
+ *   5. **Cache writability** — verify the local cache directory
+ *      (`~/.monday-cli/`) exists with mode `0700` and is writable.
+ *   6. **Redaction self-test** — pass a known-fixture token through
+ *      `redact()` and assert the bytes don't appear in the output.
+ *   7. **Env-var pickup summary** — local-only; reports which
+ *      MONDAY_* env vars influenced the run (set/unset, never
+ *      values). Helps an agent diagnose "why is the wrong profile
+ *      being selected?" without spelunking dotfiles.
+ *
+ * **`--no-probe` semantics.** Skips probes 1–4 (the network-touching
+ * ones); probes 5–7 still run because they're local-only and don't
+ * touch account state. Use case: offline sanity check after rotating
+ * credentials, where the agent wants to confirm the cache + redaction
+ * + env-var resolution without firing a real Monday API call.
+ *
+ * **Empirical probe findings (2026-05-10, against `api.monday.com`,
+ * API version `2026-01`) — `scripts/probe/m22-status.ts`:**
+ *
+ *   - **401 envelope shape (auth probe).** Status `401`, content-type
+ *     `application/json; charset=utf-8`, body
+ *     `{"errors":[{"message":"Not authenticated","extensions":
+ *     {"code":"NOT_AUTHENTICATED"}}]}`. Identical envelope for
+ *     missing-`Authorization` and bad-`Authorization`. The auth-probe
+ *     step maps this verbatim to `unauthorized` (existing error code;
+ *     NO new code needed for M22).
+ *   - **`Bearer <token>` prefix DOES work** on `api.monday.com`
+ *     alongside bare `<token>`. The CLI's `.claude/rules/security.md`
+ *     rule against the prefix remains precautionary (proxies / logs
+ *     sometimes split on `Bearer ` differently), not API-enforced.
+ *
+ * **Why no new ERROR_CODE for probes.** Each probe maps cleanly to
+ * an existing code: DNS / TCP / TLS / network failures →
+ * `network_error`; 401 → `unauthorized`; cache-writability failure
+ * → `config_error`; redaction self-test failure → `internal_error`
+ * (a serious bug, not a user-facing condition). Adding a
+ * `probe_failed` umbrella would widen the 29-code registry for
+ * marginal benefit; each probe's failure mode is best described by
+ * the existing semantic-domain code per cli-design §6.5.
+ *
+ * **Mockable-seam pattern.** Each probe accepts a per-probe seam
+ * (`lookupImpl` / `tcpConnectImpl` / `tlsConnectImpl` / `redactImpl`
+ * etc.) so tests don't bind real sockets / open real fetch handles /
+ * touch real DNS. Mirrors `src/api/transport.ts`'s `fetchImpl?` slot
+ * and the M21 `__test_oauth_helper` env seam: production callers
+ * leave the slot unset and the runner uses the real stdlib primitive.
+ */
+import { z } from 'zod';
+import type { Transport } from './transport.js';
+/** Enum of the probe steps `monday status` runs. */
+export type ProbeName = 'dns' | 'tcp' | 'tls' | 'auth' | 'cache_writability' | 'redaction_self_test' | 'env_var_pickup';
+/** A probe step that completed successfully. */
+export interface ProbeOk {
+    readonly kind: 'ok';
+    readonly probe: ProbeName;
+    readonly elapsed_ms: number;
+    readonly details: Readonly<Record<string, unknown>>;
+}
+/**
+ * A probe step that failed. `reason` is a stable snake_case
+ * discriminant per cli-design §6.5 details-shape convention. Agents
+ * key off `reason`, never the English `message`.
+ */
+export interface ProbeFail {
+    readonly kind: 'fail';
+    readonly probe: ProbeName;
+    readonly elapsed_ms: number;
+    readonly reason: string;
+    readonly message: string;
+    readonly details: Readonly<Record<string, unknown>>;
+}
+/**
+ * A probe step that was skipped (e.g., network probes under
+ * `--no-probe`). Surfaces so the envelope is complete-by-probe-name
+ * regardless of `--no-probe`; agents don't need to know which
+ * probes were skipped at the wire level.
+ */
+export interface ProbeSkipped {
+    readonly kind: 'skipped';
+    readonly probe: ProbeName;
+    readonly reason: string;
+}
+export type ProbeResult = ProbeOk | ProbeFail | ProbeSkipped;
+/**
+ * Stable iteration order for the status envelope's `probes` record.
+ * Matches the cli-design §11.5 probe-matrix narrative.
+ */
+export declare const STATUS_PROBE_ORDER: readonly ProbeName[];
+/**
+ * The set of probes a `--no-probe` invocation skips (the network
+ * touching ones). Local-only probes always run.
+ */
+export declare const NO_PROBE_SKIP_SET: ReadonlySet<ProbeName>;
+/**
+ * The fixture canary token the redaction self-test scrubs. **Never a
+ * real token** — the byte sequence is deliberately distinctive so a
+ * leak-test assertion can scan every emitted byte for it.
+ */
+export declare const REDACTION_SELF_TEST_FIXTURE_TOKEN = "tok-probe-redaction-self-test-DO-NOT-USE";
+/** Default DNS / TCP / TLS host the probe matrix targets. */
+export declare const DEFAULT_PROBE_HOSTNAME = "api.monday.com";
+/** Default port for TCP / TLS probes. */
+export declare const DEFAULT_PROBE_PORT = 443;
+/** Default per-probe timeout (ms). */
+export declare const DEFAULT_PROBE_TIMEOUT_MS = 5000;
+/**
+ * The MONDAY_* env-var names the env-var-pickup probe summarises.
+ * Each entry maps to `{set: boolean}` in the probe's `details` —
+ * the **values are never echoed**, only the set/unset signal.
+ */
+export declare const ENV_VAR_PICKUP_KEYS: readonly string[];
+/**
+ * Common options shared by every probe — the `signal` opt lets the
+ * caller cancel mid-probe (e.g., on SIGINT); the `timeoutMs` opt
+ * scopes the probe-specific deadline.
+ */
+export interface ProbeCommonOptions {
+    readonly signal?: AbortSignal;
+    readonly timeoutMs?: number;
+}
+/** DNS lookup return shape — narrowed view of `node:dns` `LookupAddress`. */
+export interface DnsLookupResult {
+    readonly address: string;
+    readonly family: number;
+}
+export interface DnsProbeInputs extends ProbeCommonOptions {
+    readonly hostname?: string;
+    /**
+     * Test seam — replaces `node:dns/promises.lookup`. Production
+     * callers leave it unset and the probe binds to the OS resolver.
+     */
+    readonly lookupImpl?: (hostname: string) => Promise<DnsLookupResult>;
+}
+export interface TcpConnectArgs {
+    readonly host: string;
+    readonly port: number;
+    readonly signal: AbortSignal;
+}
+export interface TcpProbeInputs extends ProbeCommonOptions {
+    readonly hostname?: string;
+    readonly port?: number;
+    /**
+     * Test seam — replaces `node:net.createConnection`. Resolves on
+     * successful connect, rejects with a code-bearing `Error` on
+     * failure. The probe closes the underlying socket via the
+     * supplied `signal` (firing when the per-probe deadline or the
+     * outer signal aborts).
+     */
+    readonly tcpConnectImpl?: (args: TcpConnectArgs) => Promise<void>;
+}
+export interface TlsCertDetails {
+    readonly subject: string;
+    readonly issuer: string;
+    readonly valid_to: string;
+}
+export interface TlsProbeInputs extends ProbeCommonOptions {
+    readonly hostname?: string;
+    readonly port?: number;
+    /**
+     * Test seam — replaces `node:tls.connect`. Resolves with the peer
+     * cert summary on successful handshake; rejects with a code-bearing
+     * `Error` on failure.
+     */
+    readonly tlsConnectImpl?: (args: TcpConnectArgs) => Promise<TlsCertDetails>;
+}
+export interface AuthProbeInputs extends ProbeCommonOptions {
+    readonly transport: Transport;
+    /**
+     * Optional server-reported API version the probe captured from
+     * the response (or its meta). When absent, the auth probe falls
+     * back to the resolved pin in the command action.
+     */
+    readonly apiVersionHint?: string;
+}
+export interface CacheWritabilityProbeInputs {
+    readonly env: NodeJS.ProcessEnv;
+    /** Optional HOME override; tests inject a tmp dir. */
+    readonly home?: string;
+}
+export interface RedactionSelfTestInputs {
+    /**
+     * Process env passed through to {@link collectSecrets}. The probe
+     * exercises BOTH redaction-layer halves per cli-design §7.4.3
+     * (Codex M21 P1 finding): a canary is folded into `runtimeSecrets`
+     * AND the env-token value-scan path (`collectSecrets` reads
+     * `env.MONDAY_API_TOKEN` to extend the scrub bag) is exercised
+     * inside the same probe step. Mirrors
+     * `collectSecrets(env, runtimeSecrets)`'s real signature so the
+     * probe can't drift away from the production redaction shape.
+     */
+    readonly env: NodeJS.ProcessEnv;
+    /**
+     * Mutable runtime-secrets bag (mirrors {@link import('../cli/run.js').RunContext.runtimeSecrets}).
+     * The probe folds the canary into this bag, runs a sample emission
+     * through `redact()`, asserts the canary bytes are scrubbed, then
+     * removes the canary again before returning.
+     */
+    readonly runtimeSecrets: string[];
+    /**
+     * Test seam — replaces `src/utils/redact.ts redact`. Lets the
+     * leak-path test inject a tampered redactor (one that misses the
+     * canary) so the canary_leaked branch surfaces without rewriting
+     * production redaction.
+     */
+    readonly redactImpl?: (value: unknown, options: {
+        secrets: readonly string[];
+    }) => unknown;
+}
+export interface EnvVarPickupProbeInputs {
+    readonly env: NodeJS.ProcessEnv;
+}
+/**
+ * Resolves `inputs.hostname` (default {@link DEFAULT_PROBE_HOSTNAME})
+ * via `node:dns/promises.lookup` (or the injected `lookupImpl` test
+ * seam). Maps `EAI_NONAME` / `ENOTFOUND` → `not_found`; `EAI_AGAIN`
+ * → `temporary_failure`; timeout → `timeout`; anything else →
+ * `lookup_failed`.
+ */
+export declare const runDnsProbe: (inputs?: DnsProbeInputs) => Promise<ProbeResult>;
+/**
+ * Opens a TCP connection to `inputs.hostname:inputs.port` (defaults
+ * {@link DEFAULT_PROBE_HOSTNAME} / {@link DEFAULT_PROBE_PORT}) via
+ * `node:net.createConnection` (or the injected seam). The socket is
+ * destroyed in every exit path; the per-probe deadline aborts the
+ * connection via the threaded signal.
+ */
+export declare const runTcpProbe: (inputs?: TcpProbeInputs) => Promise<ProbeResult>;
+/**
+ * Completes a TLS handshake against `inputs.hostname:inputs.port`
+ * with SNI set + cert validation on. Captures the peer cert summary
+ * (`subject`/`issuer`/`valid_to`) into `details` on success; maps
+ * `CERT_HAS_EXPIRED` → `cert_expired`, `UNABLE_TO_VERIFY_LEAF_SIGNATURE`
+ * → `cert_untrusted`, `ERR_TLS_CERT_ALTNAME_INVALID` →
+ * `cert_name_mismatch`, anything else → `tls_handshake_failed`.
+ */
+export declare const runTlsProbe: (inputs?: TlsProbeInputs) => Promise<ProbeResult>;
+/**
+ * Issues `query { me { id } }` against the supplied transport. Maps
+ * the empirical-probe-confirmed 401 envelope to `unauthorized`;
+ * 5xx HTTP status / transport failures (DNS recovery, TCP reset, TLS
+ * handshake error mid-flight) to `network_error` per cli-design
+ * §11.5.1's per-probe error-code table.
+ *
+ * The probe's contract is "can we authenticate?", not "can we
+ * complete a request budget-wise?". A `complexity_exceeded` from
+ * `me { id }` would mean the budget is pathological; the auth probe
+ * surfaces it as `auth_failed` rather than mapping into the §11.5.1
+ * table's two reasons, so the verb-level envelope reads cleanly.
+ */
+export declare const runAuthProbe: (inputs: AuthProbeInputs) => Promise<ProbeResult>;
+/**
+ * Verifies the local cache directory (`<HOME>/.monday-cli/`) exists,
+ * is mode `0700`, and is writable. Stat + access(W_OK) + probe-write
+ * (`<dir>/.probe-<rand>`) → delete dance — `access(W_OK)` is advisory
+ * on some Unix filesystems, so a probe-write confirms true writability.
+ */
+export declare const runCacheWritabilityProbe: (inputs: CacheWritabilityProbeInputs) => Promise<ProbeResult>;
+/**
+ * Folds {@link REDACTION_SELF_TEST_FIXTURE_TOKEN} into
+ * `inputs.runtimeSecrets`, runs a sample object (carrying the
+ * canary in `error.message`, `error.stack`, a nested
+ * `error.cause.message`, a URL, and a lowercase
+ * `authorization` header value, plus a mixed-content debug string)
+ * through `redact()` with `collectSecrets(env, runtimeSecrets)`, and
+ * asserts the canary is absent from every byte of the redacted
+ * output. Removes the canary from `runtimeSecrets` before returning
+ * so the caller's state is unchanged.
+ *
+ * Failure here indicates a regression in the redaction layer
+ * itself (a serious bug); the probe surfaces `canary_leaked` with
+ * `details.contexts_leaked` listing which §7.4.3 enumerated
+ * carrier paths still hold the canary.
+ */
+export declare const runRedactionSelfTest: (inputs: RedactionSelfTestInputs) => Promise<ProbeResult>;
+/**
+ * Summarises which of {@link ENV_VAR_PICKUP_KEYS} are set on
+ * `inputs.env`. **Values are NEVER included** — an env var's value
+ * is potentially a token. Wrapped in a Promise so callers can
+ * `Promise.allSettled` the full matrix without special-casing this
+ * step.
+ */
+export declare const summariseEnvVarPickup: (inputs: EnvVarPickupProbeInputs) => Promise<ProbeResult>;
+/**
+ * Schema validating an individual probe result for the
+ * `monday status` envelope. Mirrors the runtime
+ * {@link ProbeResult} union so the envelope is parse-safe at every
+ * emission path (in particular `monday schema` introspection).
+ */
+export declare const probeResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"ok">;
+    probe: z.ZodString;
+    elapsed_ms: z.ZodNumber;
+    details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"fail">;
+    probe: z.ZodString;
+    elapsed_ms: z.ZodNumber;
+    reason: z.ZodString;
+    message: z.ZodString;
+    details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+}, z.core.$strip>, z.ZodObject<{
+    kind: z.ZodLiteral<"skipped">;
+    probe: z.ZodString;
+    reason: z.ZodString;
+}, z.core.$strip>], "kind">;
+/**
+ * Top-level `monday status` envelope-data schema. `probes` requires
+ * every {@link STATUS_PROBE_ORDER} entry to be populated (default
+ * run AND `--no-probe` run — `--no-probe` emits `ProbeSkipped` slots
+ * for the four network probes; local probes still produce real
+ * entries). Catchall allows additive future probes (per cli-design
+ * §6.1) WITHOUT a schema-version bump; missing-slot drift gets
+ * caught at parse time.
+ */
+export declare const statusOutputSchema: z.ZodObject<{
+    probes: z.ZodObject<{
+        dns: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        tcp: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        tls: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        cache_writability: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        redaction_self_test: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+        env_var_pickup: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"ok">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"fail">;
+            probe: z.ZodString;
+            elapsed_ms: z.ZodNumber;
+            reason: z.ZodString;
+            message: z.ZodString;
+            details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            kind: z.ZodLiteral<"skipped">;
+            probe: z.ZodString;
+            reason: z.ZodString;
+        }, z.core.$strip>], "kind">;
+    }, z.core.$catchall<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"ok">;
+        probe: z.ZodString;
+        elapsed_ms: z.ZodNumber;
+        details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"fail">;
+        probe: z.ZodString;
+        elapsed_ms: z.ZodNumber;
+        reason: z.ZodString;
+        message: z.ZodString;
+        details: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"skipped">;
+        probe: z.ZodString;
+        reason: z.ZodString;
+    }, z.core.$strip>], "kind">>>;
+    overall: z.ZodEnum<{
+        ok: "ok";
+        degraded: "degraded";
+        down: "down";
+    }>;
+    api_version: z.ZodString;
+}, z.core.$strict>;
+/**
+ * The `monday status` envelope shape (`data` payload). Derived from
+ * {@link statusOutputSchema} above per `.claude/rules/validation.md`
+ * "schema-driven types" — the schema is the source of truth.
+ *
+ * `probes` is keyed by {@link ProbeName} with every
+ * {@link STATUS_PROBE_ORDER} entry required; additional probe names
+ * land via the schema's `catchall` so future probes (e.g.,
+ * `cache_freshness`) are additive per cli-design §6.1. `overall`
+ * rules + the per-probe error-code mapping live in cli-design §11.5.2
+ * + §11.5.1's table; the auth probe captures the resolved
+ * `api_version` so agents detect drift between the pin and server.
+ */
+export type StatusOutput = z.infer<typeof statusOutputSchema>;
+//# sourceMappingURL=probes.d.ts.map

package/dist/api/probes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"probes.d.ts","sourceRoot":"","sources":["../../src/api/probes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAeH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,oDAAoD;AACpD,MAAM,MAAM,SAAS,GACjB,KAAK,GACL,KAAK,GACL,KAAK,GACL,MAAM,GACN,mBAAmB,GACnB,qBAAqB,GACrB,gBAAgB,CAAC;AAErB,gDAAgD;AAChD,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,SAAS,GAAG,YAAY,CAAC;AAG7D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,SAAS,EAQzC,CAAC;AAEX;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,SAAS,CAKnD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,iCAAiC,6CACF,CAAC;AAE7C,6DAA6D;AAC7D,eAAO,MAAM,sBAAsB,mBAAmB,CAAC;AAEvD,yCAAyC;AACzC,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC,sCAAsC;AACtC,eAAO,MAAM,wBAAwB,OAAQ,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAOvC,CAAC;AA8BX;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,eAAgB,SAAQ,kBAAkB;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC;;;;;;;;;OASG;IACH,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,CACpB,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;QAAE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,KACpC,OAAO,CAAC;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACjC;AAiHD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GACtB,SAAQ,cAAmB,KAC1B,OAAO,CAAC,WAAW,CA8DrB,CAAC;AAsCF;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,GACtB,SAAQ,cAAmB,KAC1B,OAAO,CAAC,WAAW,CAqDrB,CAAC;AAuDF;;;;;;;GAOG;AACH,eAAO,MAAM,WAAW,GACtB,SAAQ,cAAmB,KAC1B,OAAO,CAAC,WAAW,CA0DrB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,YAAY,GACvB,QAAQ,eAAe,KACtB,OAAO,CAAC,WAAW,CA8IrB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,GACnC,QAAQ,2BAA2B,KAClC,OAAO,CAAC,WAAW,CAoGrB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,oBAAoB,GAC/B,QAAQ,uBAAuB,KAC9B,OAAO,CAAC,WAAW,CAAsD,CAAC;AAqG7E;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,GAChC,QAAQ,uBAAuB,KAC9B,OAAO,CAAC,WAAW,CAQrB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;2BAoB5B,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAgBpB,CAAC;AAEZ;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}