rekor-cli 0.1.17 → 0.1.19

package/dist/index.js

@@ -13,34 +13,194 @@ import { homedir } from "os";
 var CONFIG_DIR = join(homedir(), ".config", "rekor");
 var CONFIG_FILE = join(CONFIG_DIR, "config.json");
 function loadConfig() {
-  const envToken = process.env["REKOR_TOKEN"];
   const envUrl = process.env["REKOR_API_URL"];
   try {
     const raw = readFileSync(CONFIG_FILE, "utf-8");
-    const config = JSON.parse(raw);
+    const stored = JSON.parse(raw);
     return {
-      ...config,
-      token: envToken ?? config.token,
-      api_url: envUrl ?? config.api_url
+      api_url: envUrl ?? stored.api_url ?? "http://localhost:8787",
+      default_workspace: stored.default_workspace,
+      org_id: stored.org_id
     };
   } catch {
     return {
-      api_url: envUrl ?? "http://localhost:8787",
-      token: envToken ?? ""
+      api_url: envUrl ?? "http://localhost:8787"
     };
   }
 }
 function saveConfig(config) {
   mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
-  writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 });
+  let existing = {};
+  try {
+    existing = JSON.parse(readFileSync(CONFIG_FILE, "utf-8"));
+  } catch {
+    existing = {};
+  }
+  const merged = { ...existing, ...config };
+  writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2), { mode: 384 });
+}
+
+// src/token-store.ts
+import * as fs from "fs";
+var KEYRING_SERVICE = "rekor";
+var KEYRING_ACCOUNT = "rec_token";
+var keyringCache;
+async function getKeyring() {
+  if (keyringCache !== void 0) return keyringCache;
+  try {
+    const mod = await import("@napi-rs/keyring");
+    const Entry = mod.Entry;
+    keyringCache = {
+      async getPassword(service, account) {
+        try {
+          return new Entry(service, account).getPassword();
+        } catch {
+          return null;
+        }
+      },
+      async setPassword(service, account, password) {
+        new Entry(service, account).setPassword(password);
+      },
+      async deletePassword(service, account) {
+        try {
+          return new Entry(service, account).deletePassword();
+        } catch {
+          return false;
+        }
+      }
+    };
+  } catch {
+    keyringCache = null;
+  }
+  return keyringCache;
+}
+function manualCleanupCommand() {
+  if (process.platform === "darwin") {
+    return `security delete-generic-password -s ${KEYRING_SERVICE} -a ${KEYRING_ACCOUNT}`;
+  }
+  if (process.platform === "win32") {
+    return `cmdkey /delete:${KEYRING_SERVICE}/${KEYRING_ACCOUNT}`;
+  }
+  if (process.platform === "linux") {
+    return `secret-tool clear service ${KEYRING_SERVICE} account ${KEYRING_ACCOUNT}`;
+  }
+  return `(remove the entry with service="${KEYRING_SERVICE}" account="${KEYRING_ACCOUNT}" from your OS credential store)`;
+}
+function readConfigFile() {
+  if (!fs.existsSync(CONFIG_FILE)) return null;
+  try {
+    return JSON.parse(fs.readFileSync(CONFIG_FILE, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function writeConfigFile(data) {
+  if (!fs.existsSync(CONFIG_DIR)) {
+    fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 448 });
+  }
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2), { mode: 384 });
+}
+function stripTokenFromFile() {
+  const existing = readConfigFile();
+  if (!existing || existing.token === void 0) return;
+  delete existing.token;
+  writeConfigFile(existing);
+}
+async function migrateLegacyToken(keyring) {
+  const existing = readConfigFile();
+  if (!existing?.token) return null;
+  const token = existing.token;
+  if (!keyring) return token;
+  let keyringHasToken = false;
+  try {
+    keyringHasToken = await keyring.getPassword(KEYRING_SERVICE, KEYRING_ACCOUNT) !== null;
+  } catch {
+    keyringHasToken = false;
+  }
+  if (keyringHasToken) {
+    try {
+      stripTokenFromFile();
+    } catch (err) {
+      console.warn(`rekor: failed to strip stale token from ${CONFIG_FILE} (${err.message}); will retry next run.`);
+    }
+    return null;
+  }
+  try {
+    await keyring.setPassword(KEYRING_SERVICE, KEYRING_ACCOUNT, token);
+    try {
+      stripTokenFromFile();
+    } catch (err) {
+      console.warn(`rekor: failed to strip legacy token from ${CONFIG_FILE} (${err.message}); will retry next run.`);
+    }
+  } catch (err) {
+    console.warn(`rekor: keyring migration failed (${err.message}); continuing with file-backed token.`);
+  }
+  return token;
+}
+async function getToken() {
+  const envToken = process.env["REKOR_TOKEN"];
+  if (envToken) return envToken;
+  const keyring = await getKeyring();
+  const migrated = await migrateLegacyToken(keyring);
+  if (migrated) return migrated;
+  if (keyring) {
+    const stored = await keyring.getPassword(KEYRING_SERVICE, KEYRING_ACCOUNT);
+    if (stored) return stored;
+  }
+  const existing = readConfigFile();
+  return existing?.token ?? null;
+}
+async function setToken(token) {
+  const keyring = await getKeyring();
+  if (keyring) {
+    try {
+      await keyring.setPassword(KEYRING_SERVICE, KEYRING_ACCOUNT, token);
+      try {
+        stripTokenFromFile();
+      } catch (err) {
+        console.warn(`rekor: failed to strip stale token from ${CONFIG_FILE} (${err.message}).`);
+      }
+      return;
+    } catch (err) {
+      console.warn(`rekor: keyring write failed (${err.message}); falling back to file storage.`);
+    }
+  }
+  const existing = readConfigFile() ?? {};
+  existing.token = token;
+  writeConfigFile(existing);
+}
+async function clearToken() {
+  const keyring = await getKeyring();
+  if (keyring) {
+    const deleted = await keyring.deletePassword(KEYRING_SERVICE, KEYRING_ACCOUNT);
+    if (!deleted) {
+      let stillThere = true;
+      try {
+        stillThere = await keyring.getPassword(KEYRING_SERVICE, KEYRING_ACCOUNT) !== null;
+      } catch {
+        stillThere = true;
+      }
+      if (stillThere) {
+        console.warn(
+          `rekor: could not clear keyring slot. Subsequent commands may still pick the stale token. Manually:
+  ${manualCleanupCommand()}`
+        );
+      }
+    }
+  }
+  const existing = readConfigFile();
+  if (existing && existing.token !== void 0) {
+    delete existing.token;
+    writeConfigFile(existing);
+  }
 }
 
 // src/auth.ts
-function login(token, apiUrl) {
+async function login(token, apiUrl) {
+  await setToken(token);
   const config = loadConfig();
   saveConfig({
     ...config,
-    token,
     api_url: apiUrl ?? config.api_url
   });
 }
@@ -50,10 +210,12 @@ import { createServer } from "http";
 import { randomBytes } from "crypto";
 var DEFAULT_APP_URL = "https://rekor.pro";
 var TIMEOUT_MS = 12e4;
+var FALLBACK_URL_DELAY_MS = 5e3;
 async function browserLogin(apiUrl) {
   const open = await import("open").then((m) => m.default);
   const state = randomBytes(32).toString("hex");
   const config = loadConfig();
+  let handled = false;
   return new Promise((resolve, reject) => {
     const server = createServer((req, res) => {
       const url = new URL(req.url, `http://127.0.0.1`);
@@ -62,9 +224,15 @@ async function browserLogin(apiUrl) {
         res.end();
         return;
       }
+      if (handled) {
+        res.writeHead(409);
+        res.end();
+        return;
+      }
       const token = url.searchParams.get("token");
       const returnedState = url.searchParams.get("state");
       if (returnedState !== state) {
+        handled = true;
         res.writeHead(400, { "Content-Type": "text/html" });
         res.end(errorPage("Authentication failed: state mismatch. Please try again."));
         cleanup();
@@ -72,30 +240,54 @@ async function browserLogin(apiUrl) {
         return;
       }
       if (!token) {
+        handled = true;
         res.writeHead(400, { "Content-Type": "text/html" });
         res.end(errorPage("Authentication failed: no token received."));
         cleanup();
         reject(new Error("No token in callback"));
         return;
       }
+      handled = true;
       const orgId = url.searchParams.get("org_id") ?? void 0;
-      saveConfig({
-        ...config,
-        token,
-        api_url: apiUrl ?? config.api_url,
-        org_id: orgId
-      });
-      res.writeHead(200, { "Content-Type": "text/html" });
-      res.end(successPage());
-      cleanup();
-      resolve();
+      const persist = async () => {
+        await setToken(token);
+        saveConfig({
+          ...config,
+          api_url: apiUrl ?? config.api_url,
+          org_id: orgId
+        });
+      };
+      persist().then(
+        () => {
+          res.writeHead(200, { "Content-Type": "text/html" });
+          res.end(successPage());
+          cleanup();
+          resolve();
+        },
+        (err) => {
+          const safeMessage = err.message.replace(/rec_[A-Za-z0-9_-]+/g, "rec_[REDACTED]");
+          console.error(`rekor: failed to store credentials \u2014 ${safeMessage}`);
+          res.writeHead(500, { "Content-Type": "text/html" });
+          res.end(errorPage("Failed to store credentials. Check your terminal for details."));
+          cleanup();
+          reject(err);
+        }
+      );
     });
     const timeout = setTimeout(() => {
       cleanup();
       reject(new Error("Login timed out \u2014 no response from browser within 2 minutes"));
     }, TIMEOUT_MS);
+    let fallbackTimer;
+    let cleanedUp = false;
     function cleanup() {
+      if (cleanedUp) return;
+      cleanedUp = true;
       clearTimeout(timeout);
+      if (fallbackTimer) {
+        clearTimeout(fallbackTimer);
+        fallbackTimer = void 0;
+      }
       server.close();
     }
     server.listen(0, "127.0.0.1", () => {
@@ -109,9 +301,16 @@ async function browserLogin(apiUrl) {
       const appUrl = process.env["REKOR_APP_URL"] || DEFAULT_APP_URL;
       const authUrl = `${appUrl}/cli-auth?port=${port}&state=${state}`;
       console.log("Opening browser for authentication...");
-      console.log(`If the browser doesn't open, visit: ${authUrl}`);
+      fallbackTimer = setTimeout(() => {
+        fallbackTimer = void 0;
+        console.log(`If the browser didn't open, visit: ${authUrl}`);
+      }, FALLBACK_URL_DELAY_MS);
       open(authUrl).catch(() => {
+        if (!fallbackTimer) return;
+        clearTimeout(fallbackTimer);
+        fallbackTimer = void 0;
         console.log("Could not open browser automatically.");
+        console.log(`Visit: ${authUrl}`);
       });
     });
   });
@@ -144,7 +343,7 @@ function errorPage(message) {
 // src/commands/login.ts
 var loginCommand = new Command("login").description("Authenticate with Rekor").option("--token <token>", "API key for headless/CI authentication (rec_...)").option("--api-url <url>", "API base URL").action(async (opts) => {
   if (opts.token) {
-    login(opts.token, opts.apiUrl);
+    await login(opts.token, opts.apiUrl);
     console.log("Authenticated successfully");
   } else {
     try {
@@ -161,9 +360,8 @@ var loginCommand = new Command("login").description("Authenticate with Rekor").o
 
 // src/commands/logout.ts
 import { Command as Command2 } from "commander";
-var logoutCommand = new Command2("logout").description("Remove stored authentication credentials").action(() => {
-  const config = loadConfig();
-  saveConfig({ ...config, token: "" });
+var logoutCommand = new Command2("logout").description("Remove stored authentication credentials").action(async () => {
+  await clearToken();
   console.log("Logged out successfully");
 });
 
@@ -173,17 +371,24 @@ import { Command as Command3 } from "commander";
 // src/client.ts
 var ApiClient = class {
   baseUrl;
-  token;
+  _tokenPromise;
   constructor() {
     const config = loadConfig();
     this.baseUrl = config.api_url;
-    this.token = config.token;
+  }
+  getToken() {
+    if (!this._tokenPromise) this._tokenPromise = getToken();
+    return this._tokenPromise;
+  }
+  async authHeaders() {
+    const token = await this.getToken();
+    return token ? { "Authorization": `Bearer ${token}` } : {};
   }
   async request(method, path, body) {
     const res = await fetch(`${this.baseUrl}${path}`, {
       method,
       headers: {
-        "Authorization": `Bearer ${this.token}`,
+        ...await this.authHeaders(),
         "Content-Type": "application/json"
       },
       body: body ? JSON.stringify(body) : void 0
@@ -194,6 +399,19 @@ var ApiClient = class {
     }
     return json.data;
   }
+  async uploadFile(url, body, contentType) {
+    const res = await fetch(url, {
+      method: "PUT",
+      headers: {
+        ...await this.authHeaders(),
+        "Content-Type": contentType
+      },
+      body
+    });
+    if (!res.ok) {
+      throw new Error(`Upload failed: HTTP ${res.status}`);
+    }
+  }
 };
 
 // src/output.ts
@@ -235,10 +453,10 @@ function formatKeyValue(obj) {
 }
 
 // src/helpers.ts
-import { readFileSync as readFileSync2 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 function parseData(data) {
   if (data.startsWith("@")) {
-    const content = readFileSync2(data.slice(1), "utf-8");
+    const content = readFileSync3(data.slice(1), "utf-8");
     return JSON.parse(content);
   }
   return JSON.parse(data);
@@ -393,13 +611,13 @@ recordsCommand.command("delete <collection> <id>").description("Delete a record"
 
 // src/commands/sql.ts
 import { Command as Command6 } from "commander";
-import { readFileSync as readFileSync3 } from "fs";
+import { readFileSync as readFileSync4 } from "fs";
 var sqlCommand = new Command6("sql").description("Execute a read-only SQL query against workspace data").argument("[query]", "SQL query (SELECT only)").option("--file <path>", "Read SQL from a file instead of argument").option("--param <kv...>", "Named parameters as key=value pairs (e.g., --param status=issued)").action(async function(queryArg, opts) {
   const ws = getWorkspace(this);
   const client = new ApiClient();
   let query;
   if (opts.file) {
-    query = readFileSync3(opts.file, "utf-8").trim();
+    query = readFileSync4(opts.file, "utf-8").trim();
   } else if (queryArg) {
     query = queryArg;
   } else {
@@ -474,7 +692,7 @@ var queryRelationshipsCommand = new Command8("query-relationships").description(
 
 // src/commands/attachments.ts
 import { Command as Command9 } from "commander";
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync5 } from "fs";
 var attachmentsCommand = new Command9("attachments").description("Manage record attachments");
 attachmentsCommand.command("upload <collection> <id>").description("Get a presigned upload URL for a record attachment. With --file, uploads the file content in one step.").requiredOption("--filename <name>", "File name or path (e.g. docs/guide.md)").option("--content-type <type>", "MIME type", "application/octet-stream").option("--file <path>", "Local file to upload (skips presigned URL output, uploads directly)").action(async function(collection, id, opts) {
   const ws = getWorkspace(this);
@@ -484,16 +702,9 @@ attachmentsCommand.command("upload <collection> <id>").description("Get a presig
     content_type: opts.contentType
   });
   if (opts.file) {
-    const body = readFileSync4(opts.file);
+    const body = readFileSync5(opts.file);
     const uploadUrl = data.upload_url.startsWith("http") ? data.upload_url : `${client.baseUrl}${data.upload_url}`;
-    const uploadRes = await fetch(uploadUrl, {
-      method: "PUT",
-      headers: { "Content-Type": opts.contentType, "Authorization": `Bearer ${client.token}` },
-      body
-    });
-    if (!uploadRes.ok) {
-      throw new Error(`Upload failed: HTTP ${uploadRes.status}`);
-    }
+    await client.uploadFile(uploadUrl, body, opts.contentType);
     console.log(formatOutput({ ...data, uploaded: true }, getFormat(this)));
   } else {
     console.log(formatOutput(data, getFormat(this)));
@@ -712,8 +923,8 @@ providersCommand.command("export <provider>").description(`Export collections as
   const query = opts.collections ? `?collections=${opts.collections}` : "";
   const data = await client.request("GET", `/v1/${ws}/providers/${provider}/export${query}`);
   if (opts.output) {
-    const { writeFileSync: writeFileSync2 } = await import("fs");
-    writeFileSync2(opts.output, JSON.stringify(data, null, 2));
+    const { writeFileSync: writeFileSync3 } = await import("fs");
+    writeFileSync3(opts.output, JSON.stringify(data, null, 2));
     console.log(`Written to ${opts.output}`);
   } else {
     console.log(formatOutput(data, getFormat(this)));
@@ -761,8 +972,11 @@ tokensCommand.command("revoke <token_id>").description("Revoke an API token").ac
 // package.json
 var package_default = {
   name: "rekor-cli",
-  version: "0.1.17",
+  version: "0.1.19",
   type: "module",
+  engines: {
+    node: ">=20.0.0"
+  },
   bin: {
     rekor: "dist/index.js"
   },
@@ -776,6 +990,7 @@ var package_default = {
     dev: "tsup --watch"
   },
   dependencies: {
+    "@napi-rs/keyring": "^1.1.6",
     chalk: "^5.4.1",
     "cli-table3": "^0.6.5",
     commander: "^13.1.0",

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/program.ts","../src/commands/login.ts","../src/config.ts","../src/auth.ts","../src/browser-login.ts","../src/commands/logout.ts","../src/commands/workspaces.ts","../src/client.ts","../src/output.ts","../src/helpers.ts","../src/commands/collections.ts","../src/commands/records.ts","../src/commands/sql.ts","../src/commands/relationships.ts","../src/commands/query-relationships.ts","../src/commands/attachments.ts","../src/commands/hooks.ts","../src/commands/triggers.ts","../src/commands/endpoints.ts","../src/commands/batch.ts","../src/commands/providers.ts","../src/commands/tokens.ts","../package.json","../src/index.ts"],"sourcesContent":["import { Command } from 'commander';\nimport { loginCommand } from './commands/login.js';\nimport { logoutCommand } from './commands/logout.js';\nimport { workspacesCommand } from './commands/workspaces.js';\nimport { collectionsCommand } from './commands/collections.js';\nimport { recordsCommand } from './commands/records.js';\nimport { sqlCommand } from './commands/sql.js';\nimport { relationshipsCommand } from './commands/relationships.js';\nimport { queryRelationshipsCommand } from './commands/query-relationships.js';\nimport { attachmentsCommand } from './commands/attachments.js';\nimport { hooksCommand } from './commands/hooks.js';\nimport { triggersCommand } from './commands/triggers.js';\nimport { endpointsCommand } from './commands/endpoints.js';\nimport { batchCommand } from './commands/batch.js';\nimport { providersCommand } from './commands/providers.js';\nimport { tokensCommand } from './commands/tokens.js';\nimport pkg from '../package.json' with { type: 'json' };\n\nexport const program = new Command('rekor')\n  .description('Rekor CLI — System of Record for AI agents')\n  .version(pkg.version)\n  .option('--workspace <id>', 'Workspace ID')\n  .option('--output <format>', 'Output format: json or table', 'table');\n\nprogram.addCommand(loginCommand);\nprogram.addCommand(logoutCommand);\nprogram.addCommand(workspacesCommand);\nprogram.addCommand(collectionsCommand);\nprogram.addCommand(recordsCommand);\nprogram.addCommand(sqlCommand);\nprogram.addCommand(relationshipsCommand);\nprogram.addCommand(queryRelationshipsCommand);\nprogram.addCommand(attachmentsCommand);\nprogram.addCommand(hooksCommand);\nprogram.addCommand(triggersCommand);\nprogram.addCommand(batchCommand);\nprogram.addCommand(providersCommand);\nprogram.addCommand(tokensCommand);\nprogram.addCommand(endpointsCommand);\n","import { Command } from 'commander';\nimport { login } from '../auth.js';\nimport { browserLogin } from '../browser-login.js';\n\nexport const loginCommand = new Command('login')\n  .description('Authenticate with Rekor')\n  .option('--token <token>', 'API key for headless/CI authentication (rec_...)')\n  .option('--api-url <url>', 'API base URL')\n  .action(async (opts: { token?: string; apiUrl?: string }) => {\n    if (opts.token) {\n      login(opts.token, opts.apiUrl);\n      console.log('Authenticated successfully');\n    } else {\n      try {\n        await browserLogin(opts.apiUrl);\n        console.log('Authenticated successfully');\n      } catch (err) {\n        console.error(\n          `Login failed: ${err instanceof Error ? err.message : 'Unknown error'}`,\n        );\n        process.exit(1);\n      }\n    }\n  });\n","import { readFileSync, writeFileSync, mkdirSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\n\nconst CONFIG_DIR = join(homedir(), '.config', 'rekor');\nconst CONFIG_FILE = join(CONFIG_DIR, 'config.json');\n\nexport interface Config {\n  api_url: string;\n  token: string;\n  default_workspace?: string;\n  org_id?: string;\n}\n\nexport function loadConfig(): Config {\n  const envToken = process.env['REKOR_TOKEN'];\n  const envUrl = process.env['REKOR_API_URL'];\n\n  try {\n    const raw = readFileSync(CONFIG_FILE, 'utf-8');\n    const config = JSON.parse(raw) as Config;\n    return {\n      ...config,\n      token: envToken ?? config.token,\n      api_url: envUrl ?? config.api_url,\n    };\n  } catch {\n    return {\n      api_url: envUrl ?? 'http://localhost:8787',\n      token: envToken ?? '',\n    };\n  }\n}\n\nexport function saveConfig(config: Config): void {\n  mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 0o600 });\n}\n\nexport { CONFIG_DIR, CONFIG_FILE };\n","import { loadConfig, saveConfig } from './config.js';\n\nexport function login(token: string, apiUrl?: string): void {\n  const config = loadConfig();\n  saveConfig({\n    ...config,\n    token,\n    api_url: apiUrl ?? config.api_url,\n  });\n}\n\nexport function isAuthenticated(): boolean {\n  const config = loadConfig();\n  return !!config.token;\n}\n","import { createServer } from 'node:http';\nimport { randomBytes } from 'node:crypto';\nimport { loadConfig, saveConfig } from './config.js';\n\nconst DEFAULT_APP_URL = 'https://rekor.pro';\nconst TIMEOUT_MS = 120_000;\n\nexport async function browserLogin(apiUrl?: string): Promise<void> {\n  const open = await import('open').then((m) => m.default);\n\n  const state = randomBytes(32).toString('hex');\n  const config = loadConfig();\n\n  return new Promise<void>((resolve, reject) => {\n    const server = createServer((req, res) => {\n      const url = new URL(req.url!, `http://127.0.0.1`);\n\n      if (url.pathname !== '/callback') {\n        res.writeHead(404);\n        res.end();\n        return;\n      }\n\n      const token = url.searchParams.get('token');\n      const returnedState = url.searchParams.get('state');\n\n      if (returnedState !== state) {\n        res.writeHead(400, { 'Content-Type': 'text/html' });\n        res.end(errorPage('Authentication failed: state mismatch. Please try again.'));\n        cleanup();\n        reject(new Error('State mismatch — possible CSRF attempt'));\n        return;\n      }\n\n      if (!token) {\n        res.writeHead(400, { 'Content-Type': 'text/html' });\n        res.end(errorPage('Authentication failed: no token received.'));\n        cleanup();\n        reject(new Error('No token in callback'));\n        return;\n      }\n\n      const orgId = url.searchParams.get('org_id') ?? undefined;\n\n      saveConfig({\n        ...config,\n        token,\n        api_url: apiUrl ?? config.api_url,\n        org_id: orgId,\n      });\n\n      res.writeHead(200, { 'Content-Type': 'text/html' });\n      res.end(successPage());\n      cleanup();\n      resolve();\n    });\n\n    const timeout = setTimeout(() => {\n      cleanup();\n      reject(new Error('Login timed out — no response from browser within 2 minutes'));\n    }, TIMEOUT_MS);\n\n    function cleanup() {\n      clearTimeout(timeout);\n      server.close();\n    }\n\n    server.listen(0, '127.0.0.1', () => {\n      const addr = server.address();\n      if (!addr || typeof addr === 'string') {\n        cleanup();\n        reject(new Error('Failed to start local server'));\n        return;\n      }\n\n      const port = addr.port;\n      const appUrl = process.env['REKOR_APP_URL'] || DEFAULT_APP_URL;\n      const authUrl = `${appUrl}/cli-auth?port=${port}&state=${state}`;\n\n      console.log('Opening browser for authentication...');\n      console.log(`If the browser doesn't open, visit: ${authUrl}`);\n\n      open(authUrl).catch(() => {\n        console.log('Could not open browser automatically.');\n      });\n    });\n  });\n}\n\nfunction successPage(): string {\n  return `<!DOCTYPE html>\n<html>\n<head><title>Rekor CLI</title></head>\n<body style=\"font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #fafafa;\">\n  <div style=\"text-align: center;\">\n    <h1 style=\"font-size: 1.25rem; font-weight: 600;\">Authentication successful</h1>\n    <p style=\"color: #666; margin-top: 0.5rem;\">You can close this tab and return to your terminal.</p>\n  </div>\n</body>\n</html>`;\n}\n\nfunction errorPage(message: string): string {\n  return `<!DOCTYPE html>\n<html>\n<head><title>Rekor CLI</title></head>\n<body style=\"font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #fafafa;\">\n  <div style=\"text-align: center;\">\n    <h1 style=\"font-size: 1.25rem; font-weight: 600; color: #dc2626;\">Authentication failed</h1>\n    <p style=\"color: #666; margin-top: 0.5rem;\">${message}</p>\n  </div>\n</body>\n</html>`;\n}\n","import { Command } from 'commander';\nimport { loadConfig, saveConfig } from '../config.js';\n\nexport const logoutCommand = new Command('logout')\n  .description('Remove stored authentication credentials')\n  .action(() => {\n    const config = loadConfig();\n    saveConfig({ ...config, token: '' });\n    console.log('Logged out successfully');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getFormat } from '../helpers.js';\n\nexport const workspacesCommand = new Command('workspaces')\n  .description('Manage workspaces');\n\nworkspacesCommand.command('list')\n  .description('List all workspaces')\n  .option('--tag <tag>', 'Filter by tag')\n  .action(async function (this: Command, opts: { tag?: string }) {\n    const client = new ApiClient();\n    const qs = opts.tag ? `?tag=${encodeURIComponent(opts.tag)}` : '';\n    const data = await client.request('GET', `/v1/workspaces${qs}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('get <id>')\n  .description('Get a workspace')\n  .action(async function (this: Command, id: string) {\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/workspaces/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('create <id>')\n  .description('Create a workspace')\n  .requiredOption('--name <name>', 'Workspace name')\n  .option('--description <desc>', 'Description')\n  .option('--tags <tags>', 'Comma-separated tags (e.g., client:acme,billing)')\n  .action(async function (this: Command, id: string, opts: { name: string; description?: string; tags?: string }) {\n    const client = new ApiClient();\n    const body: Record<string, unknown> = {\n      name: opts.name,\n      description: opts.description,\n    };\n    if (opts.tags) {\n      body['tags'] = opts.tags.split(',').map(t => t.trim());\n    }\n    const data = await client.request('PUT', `/v1/workspaces/${id}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('tag <id>')\n  .description('Set tags on a workspace')\n  .requiredOption('--tags <tags>', 'Comma-separated tags (e.g., client:acme,billing)')\n  .action(async function (this: Command, id: string, opts: { tags: string }) {\n    const client = new ApiClient();\n    const data = await client.request('PUT', `/v1/workspaces/${id}`, {\n      tags: opts.tags.split(',').map(t => t.trim()),\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('delete <id>')\n  .description('Delete a workspace')\n  .action(async (_id: string) => {\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/workspaces/${_id}`);\n    console.log('Deleted');\n  });\n\n// --- Environment commands ---\n\nworkspacesCommand.command('create-preview <production-id>')\n  .description('Create a preview workspace linked to a production workspace')\n  .requiredOption('--name <name>', 'Preview workspace name')\n  .option('--description <desc>', 'Description')\n  .action(async function (this: Command, productionId: string, opts: { name: string; description?: string }) {\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${productionId}/preview`, {\n      name: opts.name,\n      description: opts.description,\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('list-previews <production-id>')\n  .description('List preview workspaces for a production workspace')\n  .action(async function (this: Command, productionId: string) {\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${productionId}/previews`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('promote <production-id>')\n  .description('Promote config from a preview workspace to production (human-only)')\n  .requiredOption('--from <preview-id>', 'Source preview workspace ID')\n  .option('--dry-run', 'Show what would change without applying')\n  .option('--collections <ids>', 'Comma-separated collection IDs to promote', (v: string) => v.split(','))\n  .option('--triggers <ids>', 'Comma-separated trigger IDs to promote', (v: string) => v.split(','))\n  .option('--hooks <ids>', 'Comma-separated hook IDs to promote', (v: string) => v.split(','))\n  .action(async function (\n    this: Command,\n    productionId: string,\n    opts: { from: string; dryRun?: boolean; collections?: string[]; triggers?: string[]; hooks?: string[] },\n  ) {\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${productionId}/promote`, {\n      source_workspace_id: opts.from,\n      dry_run: opts.dryRun ?? false,\n      collections: opts.collections,\n      triggers: opts.triggers,\n      hooks: opts.hooks,\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('rollback <production-id>')\n  .description('Rollback a promotion (human-only)')\n  .requiredOption('--promotion <promotion-id>', 'Promotion ID to rollback')\n  .action(async function (this: Command, productionId: string, opts: { promotion: string }) {\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${productionId}/promote/rollback`, {\n      promotion_id: opts.promotion,\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('promotions <production-id>')\n  .description('List promotion history for a production workspace')\n  .action(async function (this: Command, productionId: string) {\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${productionId}/promotions`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { loadConfig } from './config.js';\n\nexport class ApiClient {\n  readonly baseUrl: string;\n  readonly token: string;\n\n  constructor() {\n    const config = loadConfig();\n    this.baseUrl = config.api_url;\n    this.token = config.token;\n  }\n\n  async request<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n    const res = await fetch(`${this.baseUrl}${path}`, {\n      method,\n      headers: {\n        'Authorization': `Bearer ${this.token}`,\n        'Content-Type': 'application/json',\n      },\n      body: body ? JSON.stringify(body) : undefined,\n    });\n\n    const json = await res.json() as { data?: T; error?: { message: string } };\n    if (!res.ok) {\n      throw new Error(json.error?.message ?? `HTTP ${res.status}`);\n    }\n    return json.data as T;\n  }\n}\n","import chalk from 'chalk';\nimport Table from 'cli-table3';\n\nexport type OutputFormat = 'json' | 'table';\n\nexport function formatOutput(data: unknown, format: OutputFormat): string {\n  if (format === 'json') {\n    return JSON.stringify(data, null, 2);\n  }\n\n  if (Array.isArray(data)) {\n    return formatTable(data as Record<string, unknown>[]);\n  }\n\n  if (typeof data === 'object' && data !== null) {\n    return formatKeyValue(data as Record<string, unknown>);\n  }\n\n  return String(data);\n}\n\nfunction formatTable(rows: Record<string, unknown>[]): string {\n  if (rows.length === 0) return chalk.dim('No results');\n\n  const keys = Object.keys(rows[0]!);\n  const table = new Table({ head: keys.map(k => chalk.bold(k)) });\n\n  for (const row of rows) {\n    table.push(keys.map(k => {\n      const val = row[k];\n      if (val === null || val === undefined) return '';\n      if (typeof val === 'object') return JSON.stringify(val);\n      return String(val);\n    }));\n  }\n\n  return table.toString();\n}\n\nfunction formatKeyValue(obj: Record<string, unknown>): string {\n  const table = new Table();\n  for (const [key, value] of Object.entries(obj)) {\n    const displayValue = typeof value === 'object' ? JSON.stringify(value) : String(value ?? '');\n    table.push({ [chalk.bold(key)]: displayValue });\n  }\n  return table.toString();\n}\n","import { readFileSync } from 'fs';\nimport { Command } from 'commander';\nimport { type OutputFormat } from './output.js';\n\nexport function parseData(data: string): Record<string, unknown> {\n  if (data.startsWith('@')) {\n    const content = readFileSync(data.slice(1), 'utf-8');\n    return JSON.parse(content) as Record<string, unknown>;\n  }\n  return JSON.parse(data) as Record<string, unknown>;\n}\n\nexport function getWorkspace(cmd: Command): string {\n  // Walk up the command chain to find --workspace on the root program\n  let current: Command | null = cmd;\n  while (current) {\n    const ws = current.opts().workspace as string | undefined;\n    if (ws) return ws;\n    current = current.parent;\n  }\n  console.error('Error: --workspace is required');\n  return process.exit(1);\n}\n\nexport function getFormat(cmd: Command): OutputFormat {\n  return (cmd.parent?.parent?.opts().output ?? cmd.parent?.opts().output ?? 'table') as OutputFormat;\n}\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const collectionsCommand = new Command('collections')\n  .description('Manage collections');\n\ncollectionsCommand.command('list')\n  .description('List all collections in a workspace')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/collections`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ncollectionsCommand.command('get <id>')\n  .description('Get a collection')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/collections/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ncollectionsCommand.command('upsert <id>')\n  .description('Create or update a collection')\n  .requiredOption('--name <name>', 'Collection name')\n  .option('--description <desc>', 'Description')\n  .option('--schema <json>', 'JSON Schema (inline JSON or @filename)')\n  .option('--icon <icon>', 'Icon name')\n  .option('--color <color>', 'Hex color')\n  .option('--sources <json>', 'External sources config (inline JSON or @filename)')\n  .action(async function (this: Command, id: string, opts: { name: string; description?: string; schema?: string; icon?: string; color?: string; sources?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const body: Record<string, unknown> = { name: opts.name };\n    if (opts.description) body['description'] = opts.description;\n    if (opts.schema) body['json_schema'] = parseData(opts.schema);\n    if (opts.icon) body['icon'] = opts.icon;\n    if (opts.color) body['color'] = opts.color;\n    if (opts.sources) body['sources'] = parseData(opts.sources);\n    const data = await client.request('PUT', `/v1/${ws}/collections/${id}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ncollectionsCommand.command('delete <id>')\n  .description('Delete a collection')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/collections/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const recordsCommand = new Command('records')\n  .description('Manage records');\n\nrecordsCommand.command('upsert <collection>')\n  .description('Create or update a record')\n  .requiredOption('--data <json>', 'Record data (inline JSON or @filename)')\n  .option('--id <id>', 'Internal record ID (UUID) to update a known record')\n  .option('--external-id <id>', 'External/agent-supplied ID for idempotent upsert')\n  .option('--external-source <source>', 'Source system for external_id (e.g. stripe)')\n  .action(async function (this: Command, collection: string, opts: { data: string; id?: string; externalId?: string; externalSource?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const body: Record<string, unknown> = { data: parseData(opts.data) };\n    if (opts.externalId) body['external_id'] = opts.externalId;\n    if (opts.externalSource) body['external_source'] = opts.externalSource;\n    const path = opts.id\n      ? `/v1/${ws}/records/${collection}/${opts.id}`\n      : `/v1/${ws}/records/${collection}`;\n    const data = await client.request('PUT', path, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrecordsCommand.command('get <collection> <id>')\n  .description('Get a record by ID')\n  .action(async function (this: Command, collection: string, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/records/${collection}/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrecordsCommand.command('delete <collection> <id>')\n  .description('Delete a record')\n  .action(async function (this: Command, collection: string, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/records/${collection}/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { readFileSync } from 'fs';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const sqlCommand = new Command('sql')\n  .description('Execute a read-only SQL query against workspace data')\n  .argument('[query]', 'SQL query (SELECT only)')\n  .option('--file <path>', 'Read SQL from a file instead of argument')\n  .option('--param <kv...>', 'Named parameters as key=value pairs (e.g., --param status=issued)')\n  .action(async function (this: Command, queryArg: string | undefined, opts: { file?: string; param?: string[] }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n\n    let query: string;\n    if (opts.file) {\n      query = readFileSync(opts.file, 'utf-8').trim();\n    } else if (queryArg) {\n      query = queryArg;\n    } else {\n      console.error('Error: provide a SQL query as argument or via --file');\n      process.exit(1);\n    }\n\n    const params: Record<string, unknown> = {};\n    if (opts.param) {\n      for (const kv of opts.param) {\n        const eqIdx = kv.indexOf('=');\n        if (eqIdx === -1) {\n          console.error(`Error: invalid param format \"${kv}\", expected key=value`);\n          process.exit(1);\n        }\n        params[kv.slice(0, eqIdx)] = kv.slice(eqIdx + 1);\n      }\n    }\n\n    const body: Record<string, unknown> = { query };\n    if (Object.keys(params).length > 0) body.params = params;\n\n    const data = await client.request('POST', `/v1/${ws}/sql`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const relationshipsCommand = new Command('relationships')\n  .description('Manage relationships between records');\n\nrelationshipsCommand.command('upsert')\n  .description('Create or update a relationship')\n  .requiredOption('--source <collection/id>', 'Source record (collection/id)')\n  .requiredOption('--target <collection/id>', 'Target record (collection/id)')\n  .requiredOption('--type <type>', 'Relationship type')\n  .option('--id <id>', 'Relationship ID')\n  .option('--data <json>', 'Relationship metadata (inline JSON or @filename)')\n  .action(async function (this: Command, opts: { source: string; target: string; type: string; id?: string; data?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const [sourceCollection, sourceId] = opts.source.split('/');\n    const [targetCollection, targetId] = opts.target.split('/');\n    const body: Record<string, unknown> = {\n      rel_type: opts.type,\n      source_collection: sourceCollection,\n      source_id: sourceId,\n      target_collection: targetCollection,\n      target_id: targetId,\n    };\n    if (opts.id) body['id'] = opts.id;\n    if (opts.data) body['data'] = parseData(opts.data);\n    const path = opts.id ? `/v1/${ws}/relationships/${opts.id}` : `/v1/${ws}/relationships`;\n    const data = await client.request('PUT', path, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrelationshipsCommand.command('get <id>')\n  .description('Get a relationship by ID')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/relationships/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrelationshipsCommand.command('delete <id>')\n  .description('Delete a relationship')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/relationships/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const queryRelationshipsCommand = new Command('query-relationships')\n  .description('Query related records')\n  .argument('<collection>', 'Collection of the source record')\n  .argument('<id>', 'Source record ID')\n  .option('--type <type>', 'Filter by relationship type')\n  .option('--direction <dir>', 'Direction: outgoing, incoming, or both', 'both')\n  .option('--limit <n>', 'Max results', '50')\n  .option('--offset <n>', 'Skip results', '0')\n  .action(async function (this: Command, collection: string, id: string, opts: { type?: string; direction: string; limit: string; offset: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const params = new URLSearchParams();\n    if (opts.type) params.set('rel_type', opts.type);\n    // Map user-friendly direction names to backend API terms\n    const directionMap: Record<string, string> = { outgoing: 'source', incoming: 'target', both: 'both' };\n    params.set('direction', directionMap[opts.direction] ?? opts.direction);\n    params.set('limit', opts.limit);\n    params.set('offset', opts.offset);\n    const data = await client.request('GET', `/v1/${ws}/records/${collection}/${id}/related?${params.toString()}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { readFileSync } from 'node:fs';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const attachmentsCommand = new Command('attachments')\n  .description('Manage record attachments');\n\nattachmentsCommand.command('upload <collection> <id>')\n  .description('Get a presigned upload URL for a record attachment. With --file, uploads the file content in one step.')\n  .requiredOption('--filename <name>', 'File name or path (e.g. docs/guide.md)')\n  .option('--content-type <type>', 'MIME type', 'application/octet-stream')\n  .option('--file <path>', 'Local file to upload (skips presigned URL output, uploads directly)')\n  .action(async function (this: Command, collection: string, id: string, opts: { filename: string; contentType: string; file?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${ws}/records/${collection}/${id}/attachments`, {\n      filename: opts.filename,\n      content_type: opts.contentType,\n    }) as { upload_url: string; [key: string]: unknown };\n\n    if (opts.file) {\n      const body = readFileSync(opts.file);\n      const uploadUrl = data.upload_url.startsWith('http') ? data.upload_url : `${client.baseUrl}${data.upload_url}`;\n      const uploadRes = await fetch(uploadUrl, {\n        method: 'PUT',\n        headers: { 'Content-Type': opts.contentType, 'Authorization': `Bearer ${client.token}` },\n        body,\n      });\n      if (!uploadRes.ok) {\n        throw new Error(`Upload failed: HTTP ${uploadRes.status}`);\n      }\n      console.log(formatOutput({ ...data, uploaded: true }, getFormat(this)));\n    } else {\n      console.log(formatOutput(data, getFormat(this)));\n    }\n  });\n\nattachmentsCommand.command('url <collection> <id>')\n  .description('Get a download URL for an attachment by filename')\n  .requiredOption('--filename <name>', 'File name or path (e.g. docs/guide.md)')\n  .action(async function (this: Command, collection: string, id: string, opts: { filename: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const attachments = await client.request<Array<{ key: string; size: number; uploaded: string }>>('GET', `/v1/${ws}/records/${collection}/${id}/attachments`);\n    const match = attachments.find(a => a.key.endsWith(`/${opts.filename}`));\n    if (!match) {\n      throw new Error(`Attachment \"${opts.filename}\" not found`);\n    }\n    const downloadUrl = `${client.baseUrl}/v1/${ws}/attachments/${match.key}`;\n    console.log(formatOutput({ download_url: downloadUrl, ...match }, getFormat(this)));\n  });\n\nattachmentsCommand.command('list <collection> <id>')\n  .description('List attachments for a record')\n  .option('--prefix <path>', 'Filter by path prefix (e.g. docs/)')\n  .action(async function (this: Command, collection: string, id: string, opts: { prefix?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const query = opts.prefix ? `?prefix=${encodeURIComponent(opts.prefix)}` : '';\n    const data = await client.request('GET', `/v1/${ws}/records/${collection}/${id}/attachments${query}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nattachmentsCommand.command('delete <collection> <id> <attachment-id>')\n  .description('Delete an attachment')\n  .action(async function (this: Command, collection: string, id: string, attachmentId: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/records/${collection}/${id}/attachments/${attachmentId}`);\n    console.log('Deleted');\n  });\n","import { randomUUID } from 'crypto';\nimport { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const hooksCommand = new Command('hooks')\n  .description('Manage inbound webhook endpoints');\n\nhooksCommand.command('create')\n  .description('Create a new inbound hook')\n  .requiredOption('--name <name>', 'Hook name')\n  .requiredOption('--secret <secret>', 'HMAC shared secret')\n  .option('--id <id>', 'Hook ID (auto-generated if omitted)')\n  .option('--collection-scope <collections>', 'Comma-separated collection scope')\n  .action(async function (this: Command, opts: { name: string; secret: string; id?: string; collectionScope?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const hookId = opts.id ?? randomUUID();\n    const body: Record<string, unknown> = {\n      name: opts.name,\n      secret: opts.secret,\n      enabled: true,\n    };\n    if (opts.collectionScope) {\n      body['collection_scope'] = opts.collectionScope.split(',');\n    }\n    const data = await client.request('PUT', `/v1/${ws}/hooks/${hookId}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nhooksCommand.command('get <id>')\n  .description('Get a hook')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/hooks/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nhooksCommand.command('list')\n  .description('List all hooks')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/hooks`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nhooksCommand.command('delete <id>')\n  .description('Delete a hook')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/hooks/${id}`);\n    console.log('Deleted');\n  });\n","import { randomUUID } from 'crypto';\nimport { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const triggersCommand = new Command('triggers')\n  .description('Manage outbound triggers');\n\ntriggersCommand.command('create')\n  .description('Create an outbound trigger')\n  .requiredOption('--name <name>', 'Trigger name')\n  .requiredOption('--url <url>', 'Target URL')\n  .requiredOption('--secret <secret>', 'HMAC signing secret')\n  .requiredOption('--events <events>', 'Comma-separated event types')\n  .option('--id <id>', 'Trigger ID (auto-generated if omitted)')\n  .option('--collection-scope <collections>', 'Comma-separated collection scope')\n  .option('--filter <json>', 'Filter expression (JSON)')\n  .action(async function (this: Command, opts: { name: string; url: string; secret: string; events: string; id?: string; collectionScope?: string; filter?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const triggerId = opts.id ?? randomUUID();\n    const body: Record<string, unknown> = {\n      name: opts.name,\n      url: opts.url,\n      secret: opts.secret,\n      events: opts.events.split(','),\n      enabled: true,\n    };\n    if (opts.collectionScope) {\n      body['collection_scope'] = opts.collectionScope.split(',');\n    }\n    if (opts.filter) {\n      body['filter'] = JSON.parse(opts.filter);\n    }\n    const data = await client.request('PUT', `/v1/${ws}/triggers/${triggerId}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntriggersCommand.command('get <id>')\n  .description('Get a trigger')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/triggers/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntriggersCommand.command('list')\n  .description('List all triggers')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/triggers`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntriggersCommand.command('delete <id>')\n  .description('Delete a trigger')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/triggers/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const endpointsCommand = new Command('endpoints')\n  .description('Manage MCP Factory endpoints');\n\nendpointsCommand.command('upsert <slug>')\n  .description('Create or update an MCP endpoint')\n  .option('--name <name>', 'Endpoint display name (required unless using --config)')\n  .option('--description <desc>', 'Endpoint description')\n  .option('--tool <spec>', 'Collection tool spec: collection:op1,op2 (repeatable)', collect, [])\n  .option('--relationship <spec>', 'Relationship tool spec: rel_type:op1,op2 (repeatable)', collect, [])\n  .option('--batch <spec>', 'Batch operation spec: collection_or_rel:op1,op2 (repeatable)', collect, [])\n  .option('--sql-query', 'Enable sql_query tool')\n  .option('--config <json>', 'Full endpoint config as JSON (supports name_override, description_override per tool). Use @file.json to read from file.')\n  .action(async function (this: Command, slug: string, opts: {\n    name?: string;\n    description?: string;\n    tool: string[];\n    relationship: string[];\n    batch: string[];\n    sqlQuery?: boolean;\n    config?: string;\n  }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n\n    let body: Record<string, unknown>;\n\n    if (opts.config) {\n      // Full JSON config — supports name_override, description_override per tool\n      body = JSON.parse(opts.config);\n    } else {\n      if (!opts.name) {\n        throw new Error('--name is required (or use --config for full JSON config)');\n      }\n      body = {\n        name: opts.name,\n        tools: opts.tool.map(parseToolSpec),\n      };\n\n      if (opts.description) body.description = opts.description;\n\n      if (opts.relationship.length > 0) {\n        body.relationships = opts.relationship.map(parseRelSpec);\n      }\n\n      if (opts.batch.length > 0) {\n        const operations: Record<string, string[]> = {};\n        for (const spec of opts.batch) {\n          const parsed = parseSpec(spec);\n          operations[parsed.key] = parsed.ops;\n        }\n        body.batch = { enabled: true, operations };\n      }\n\n      if (opts.sqlQuery) body.sql_query = true;\n    }\n\n    const data = await client.request('PUT', `/v1/${ws}/endpoints/${slug}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nendpointsCommand.command('get <slug>')\n  .description('Get an endpoint')\n  .option('--resolved', 'Include resolved collection schemas')\n  .action(async function (this: Command, slug: string, opts: { resolved?: boolean }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const path = opts.resolved\n      ? `/v1/${ws}/endpoints/${slug}/resolved`\n      : `/v1/${ws}/endpoints/${slug}`;\n    const data = await client.request('GET', path);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nendpointsCommand.command('list')\n  .description('List all endpoints')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/endpoints`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nendpointsCommand.command('delete <slug>')\n  .description('Delete an endpoint')\n  .action(async function (this: Command, slug: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/endpoints/${slug}`);\n    console.log('Deleted');\n  });\n\nendpointsCommand.command('url <slug>')\n  .description('Get the MCP connection URL for an endpoint')\n  .option('--transport <type>', 'Transport: mcp or sse', 'mcp')\n  .action((_slug: string, opts: { transport: string }) => {\n    const transport = opts.transport === 'sse' ? 'sse' : 'mcp';\n    console.log(`https://mcp.rekor.pro/e/${_slug}/${transport}`);\n  });\n\n// ---- Helpers ----\n\nfunction collect(value: string, previous: string[]): string[] {\n  return [...previous, value];\n}\n\nfunction parseSpec(spec: string): { key: string; ops: string[] } {\n  const [key, opsStr] = spec.split(':');\n  if (!key || !opsStr) {\n    throw new Error(`Invalid spec '${spec}'. Expected format: name:op1,op2`);\n  }\n  return { key, ops: opsStr.split(',') };\n}\n\nfunction parseToolSpec(spec: string): Record<string, unknown> {\n  const { key, ops } = parseSpec(spec);\n  return { collection: key, operations: ops };\n}\n\nfunction parseRelSpec(spec: string): Record<string, unknown> {\n  const { key, ops } = parseSpec(spec);\n  return { rel_type: key, operations: ops };\n}\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const batchCommand = new Command('batch')\n  .description('Execute atomic batch operations (up to 1,000 operations)')\n  .requiredOption('--operations <json>', 'Operations array (inline JSON or @filename)')\n  .action(async function (this: Command, opts: { operations: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const operations = parseData(opts.operations);\n    const data = await client.request('POST', `/v1/${ws}/batch`, {\n      operations: Array.isArray(operations) ? operations : [operations],\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\nconst VALID_PROVIDERS = 'openai, anthropic, google, mcp';\n\nexport const providersCommand = new Command('providers')\n  .description('Import/export tool definitions between LLM providers and Record collections');\n\nprovidersCommand.command('import <provider>')\n  .description(`Import tool definitions as collections. Providers: ${VALID_PROVIDERS}`)\n  .requiredOption('--tools <json>', 'Tool definitions (inline JSON or @filename)')\n  .action(async function (this: Command, provider: string, opts: { tools: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const tools = parseData(opts.tools);\n    const data = await client.request('POST', `/v1/${ws}/providers/${provider}/import`, {\n      tools: Array.isArray(tools) ? tools : [tools],\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nprovidersCommand.command('export <provider>')\n  .description(`Export collections as tool definitions. Providers: ${VALID_PROVIDERS}`)\n  .option('--collections <ids>', 'Comma-separated collection IDs (omit for all)')\n  .option('--output <file>', 'Write output to file')\n  .action(async function (this: Command, provider: string, opts: { collections?: string; output?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const query = opts.collections ? `?collections=${opts.collections}` : '';\n    const data = await client.request('GET', `/v1/${ws}/providers/${provider}/export${query}`);\n\n    if (opts.output) {\n      const { writeFileSync } = await import('fs');\n      writeFileSync(opts.output, JSON.stringify(data, null, 2));\n      console.log(`Written to ${opts.output}`);\n    } else {\n      console.log(formatOutput(data, getFormat(this)));\n    }\n  });\n\nprovidersCommand.command('import-call <provider> <collection>')\n  .description(`Create a record from a tool call in provider format. Providers: ${VALID_PROVIDERS}`)\n  .requiredOption('--data <json>', 'Tool call data in provider format (inline JSON or @filename)')\n  .option('--external-id <id>', 'External ID for idempotent upsert')\n  .option('--external-source <source>', 'External source identifier')\n  .action(async function (this: Command, provider: string, collection: string, opts: { data: string; externalId?: string; externalSource?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const callData = parseData(opts.data);\n    const queryParts: string[] = [];\n    if (opts.externalId) queryParts.push(`external_id=${encodeURIComponent(opts.externalId)}`);\n    if (opts.externalSource) queryParts.push(`external_source=${encodeURIComponent(opts.externalSource)}`);\n    const qs = queryParts.length ? `?${queryParts.join('&')}` : '';\n    const data = await client.request('POST', `/v1/${ws}/providers/${provider}/records/${collection}${qs}`, callData);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getFormat } from '../helpers.js';\n\nexport const tokensCommand = new Command('tokens')\n  .description('Manage API tokens');\n\ntokensCommand.command('create')\n  .description('Create a scoped API token')\n  .requiredOption('--name <name>', 'Token name')\n  .requiredOption('--grants <json>', 'Grant definitions as JSON array')\n  .option('--expires-at <date>', 'Expiration date (ISO 8601, e.g., 2026-06-01T00:00:00Z)')\n  .action(async function (this: Command, opts: { name: string; grants: string; expiresAt?: string }) {\n    const client = new ApiClient();\n    let grants: unknown;\n    try {\n      grants = JSON.parse(opts.grants);\n    } catch {\n      throw new Error('--grants must be valid JSON');\n    }\n    const body: Record<string, unknown> = { name: opts.name, grants };\n    if (opts.expiresAt) body.expires_at = opts.expiresAt;\n    const data = await client.request('POST', '/v1/tokens', body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntokensCommand.command('list')\n  .description('List API tokens')\n  .action(async function (this: Command) {\n    const client = new ApiClient();\n    const data = await client.request('GET', '/v1/tokens');\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntokensCommand.command('revoke <token_id>')\n  .description('Revoke an API token')\n  .action(async function (this: Command, tokenId: string) {\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/tokens/${tokenId}`);\n    console.log('Token revoked');\n  });\n","{\n  \"name\": \"rekor-cli\",\n  \"version\": \"0.1.17\",\n  \"type\": \"module\",\n  \"bin\": {\n    \"rekor\": \"dist/index.js\"\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"typecheck\": \"tsc --noEmit\",\n    \"test\": \"vitest run\",\n    \"dev\": \"tsup --watch\"\n  },\n  \"dependencies\": {\n    \"chalk\": \"^5.4.1\",\n    \"cli-table3\": \"^0.6.5\",\n    \"commander\": \"^13.1.0\",\n    \"open\": \"^11.0.0\"\n  },\n  \"devDependencies\": {\n    \"@types/node\": \"^25.5.0\",\n    \"tsup\": \"^8.4.0\",\n    \"typescript\": \"^5.8.2\",\n    \"vitest\": \"~3.0.9\"\n  }\n}\n","import { program } from './program.js';\n\nprogram.parse();\n"],"mappings":";;;AAAA,SAAS,WAAAA,iBAAe;;;ACAxB,SAAS,eAAe;;;ACAxB,SAAS,cAAc,eAAe,iBAAiB;AACvD,SAAS,YAAY;AACrB,SAAS,eAAe;AAExB,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,OAAO;AACrD,IAAM,cAAc,KAAK,YAAY,aAAa;AAS3C,SAAS,aAAqB;AACnC,QAAM,WAAW,QAAQ,IAAI,aAAa;AAC1C,QAAM,SAAS,QAAQ,IAAI,eAAe;AAE1C,MAAI;AACF,UAAM,MAAM,aAAa,aAAa,OAAO;AAC7C,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO;AAAA,MACL,GAAG;AAAA,MACH,OAAO,YAAY,OAAO;AAAA,MAC1B,SAAS,UAAU,OAAO;AAAA,IAC5B;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,MACL,SAAS,UAAU;AAAA,MACnB,OAAO,YAAY;AAAA,IACrB;AAAA,EACF;AACF;AAEO,SAAS,WAAW,QAAsB;AAC/C,YAAU,YAAY,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtD,gBAAc,aAAa,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAC7E;;;ACnCO,SAAS,MAAM,OAAe,QAAuB;AAC1D,QAAM,SAAS,WAAW;AAC1B,aAAW;AAAA,IACT,GAAG;AAAA,IACH;AAAA,IACA,SAAS,UAAU,OAAO;AAAA,EAC5B,CAAC;AACH;;;ACTA,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAG5B,IAAM,kBAAkB;AACxB,IAAM,aAAa;AAEnB,eAAsB,aAAa,QAAgC;AACjE,QAAM,OAAO,MAAM,OAAO,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAEvD,QAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,KAAK;AAC5C,QAAM,SAAS,WAAW;AAE1B,SAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,UAAM,SAAS,aAAa,CAAC,KAAK,QAAQ;AACxC,YAAM,MAAM,IAAI,IAAI,IAAI,KAAM,kBAAkB;AAEhD,UAAI,IAAI,aAAa,aAAa;AAChC,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI;AACR;AAAA,MACF;AAEA,YAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,YAAM,gBAAgB,IAAI,aAAa,IAAI,OAAO;AAElD,UAAI,kBAAkB,OAAO;AAC3B,YAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,YAAI,IAAI,UAAU,0DAA0D,CAAC;AAC7E,gBAAQ;AACR,eAAO,IAAI,MAAM,6CAAwC,CAAC;AAC1D;AAAA,MACF;AAEA,UAAI,CAAC,OAAO;AACV,YAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,YAAI,IAAI,UAAU,2CAA2C,CAAC;AAC9D,gBAAQ;AACR,eAAO,IAAI,MAAM,sBAAsB,CAAC;AACxC;AAAA,MACF;AAEA,YAAM,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAEhD,iBAAW;AAAA,QACT,GAAG;AAAA,QACH;AAAA,QACA,SAAS,UAAU,OAAO;AAAA,QAC1B,QAAQ;AAAA,MACV,CAAC;AAED,UAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,UAAI,IAAI,YAAY,CAAC;AACrB,cAAQ;AACR,cAAQ;AAAA,IACV,CAAC;AAED,UAAM,UAAU,WAAW,MAAM;AAC/B,cAAQ;AACR,aAAO,IAAI,MAAM,kEAA6D,CAAC;AAAA,IACjF,GAAG,UAAU;AAEb,aAAS,UAAU;AACjB,mBAAa,OAAO;AACpB,aAAO,MAAM;AAAA,IACf;AAEA,WAAO,OAAO,GAAG,aAAa,MAAM;AAClC,YAAM,OAAO,OAAO,QAAQ;AAC5B,UAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,gBAAQ;AACR,eAAO,IAAI,MAAM,8BAA8B,CAAC;AAChD;AAAA,MACF;AAEA,YAAM,OAAO,KAAK;AAClB,YAAM,SAAS,QAAQ,IAAI,eAAe,KAAK;AAC/C,YAAM,UAAU,GAAG,MAAM,kBAAkB,IAAI,UAAU,KAAK;AAE9D,cAAQ,IAAI,uCAAuC;AACnD,cAAQ,IAAI,uCAAuC,OAAO,EAAE;AAE5D,WAAK,OAAO,EAAE,MAAM,MAAM;AACxB,gBAAQ,IAAI,uCAAuC;AAAA,MACrD,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,cAAsB;AAC7B,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUT;AAEA,SAAS,UAAU,SAAyB;AAC1C,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kDAMyC,OAAO;AAAA;AAAA;AAAA;AAIzD;;;AH7GO,IAAM,eAAe,IAAI,QAAQ,OAAO,EAC5C,YAAY,yBAAyB,EACrC,OAAO,mBAAmB,kDAAkD,EAC5E,OAAO,mBAAmB,cAAc,EACxC,OAAO,OAAO,SAA8C;AAC3D,MAAI,KAAK,OAAO;AACd,UAAM,KAAK,OAAO,KAAK,MAAM;AAC7B,YAAQ,IAAI,4BAA4B;AAAA,EAC1C,OAAO;AACL,QAAI;AACF,YAAM,aAAa,KAAK,MAAM;AAC9B,cAAQ,IAAI,4BAA4B;AAAA,IAC1C,SAAS,KAAK;AACZ,cAAQ;AAAA,QACN,iBAAiB,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,MACvE;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AACF,CAAC;;;AIvBH,SAAS,WAAAC,gBAAe;AAGjB,IAAM,gBAAgB,IAAIC,SAAQ,QAAQ,EAC9C,YAAY,0CAA0C,EACtD,OAAO,MAAM;AACZ,QAAM,SAAS,WAAW;AAC1B,aAAW,EAAE,GAAG,QAAQ,OAAO,GAAG,CAAC;AACnC,UAAQ,IAAI,yBAAyB;AACvC,CAAC;;;ACTH,SAAS,WAAAC,gBAAe;;;ACEjB,IAAM,YAAN,MAAgB;AAAA,EACZ;AAAA,EACA;AAAA,EAET,cAAc;AACZ,UAAM,SAAS,WAAW;AAC1B,SAAK,UAAU,OAAO;AACtB,SAAK,QAAQ,OAAO;AAAA,EACtB;AAAA,EAEA,MAAM,QAAqB,QAAgB,MAAc,MAA4B;AACnF,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAChD;AAAA,MACA,SAAS;AAAA,QACP,iBAAiB,UAAU,KAAK,KAAK;AAAA,QACrC,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,KAAK,OAAO,WAAW,QAAQ,IAAI,MAAM,EAAE;AAAA,IAC7D;AACA,WAAO,KAAK;AAAA,EACd;AACF;;;AC5BA,OAAO,WAAW;AAClB,OAAO,WAAW;AAIX,SAAS,aAAa,MAAe,QAA8B;AACxE,MAAI,WAAW,QAAQ;AACrB,WAAO,KAAK,UAAU,MAAM,MAAM,CAAC;AAAA,EACrC;AAEA,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,WAAO,YAAY,IAAiC;AAAA,EACtD;AAEA,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,WAAO,eAAe,IAA+B;AAAA,EACvD;AAEA,SAAO,OAAO,IAAI;AACpB;AAEA,SAAS,YAAY,MAAyC;AAC5D,MAAI,KAAK,WAAW,EAAG,QAAO,MAAM,IAAI,YAAY;AAEpD,QAAM,OAAO,OAAO,KAAK,KAAK,CAAC,CAAE;AACjC,QAAM,QAAQ,IAAI,MAAM,EAAE,MAAM,KAAK,IAAI,OAAK,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;AAE9D,aAAW,OAAO,MAAM;AACtB,UAAM,KAAK,KAAK,IAAI,OAAK;AACvB,YAAM,MAAM,IAAI,CAAC;AACjB,UAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAC9C,UAAI,OAAO,QAAQ,SAAU,QAAO,KAAK,UAAU,GAAG;AACtD,aAAO,OAAO,GAAG;AAAA,IACnB,CAAC,CAAC;AAAA,EACJ;AAEA,SAAO,MAAM,SAAS;AACxB;AAEA,SAAS,eAAe,KAAsC;AAC5D,QAAM,QAAQ,IAAI,MAAM;AACxB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,UAAM,eAAe,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI,OAAO,SAAS,EAAE;AAC3F,UAAM,KAAK,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC;AAAA,EAChD;AACA,SAAO,MAAM,SAAS;AACxB;;;AC9CA,SAAS,gBAAAC,qBAAoB;AAItB,SAAS,UAAU,MAAuC;AAC/D,MAAI,KAAK,WAAW,GAAG,GAAG;AACxB,UAAM,UAAUA,cAAa,KAAK,MAAM,CAAC,GAAG,OAAO;AACnD,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B;AACA,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,SAAS,aAAa,KAAsB;AAEjD,MAAI,UAA0B;AAC9B,SAAO,SAAS;AACd,UAAM,KAAK,QAAQ,KAAK,EAAE;AAC1B,QAAI,GAAI,QAAO;AACf,cAAU,QAAQ;AAAA,EACpB;AACA,UAAQ,MAAM,gCAAgC;AAC9C,SAAO,QAAQ,KAAK,CAAC;AACvB;AAEO,SAAS,UAAU,KAA4B;AACpD,SAAQ,IAAI,QAAQ,QAAQ,KAAK,EAAE,UAAU,IAAI,QAAQ,KAAK,EAAE,UAAU;AAC5E;;;AHrBO,IAAM,oBAAoB,IAAIC,SAAQ,YAAY,EACtD,YAAY,mBAAmB;AAElC,kBAAkB,QAAQ,MAAM,EAC7B,YAAY,qBAAqB,EACjC,OAAO,eAAe,eAAe,EACrC,OAAO,eAA+B,MAAwB;AAC7D,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,KAAK,KAAK,MAAM,QAAQ,mBAAmB,KAAK,GAAG,CAAC,KAAK;AAC/D,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,iBAAiB,EAAE,EAAE;AAC9D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,UAAU,EACjC,YAAY,iBAAiB,EAC7B,OAAO,eAA+B,IAAY;AACjD,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,kBAAkB,EAAE,EAAE;AAC/D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,aAAa,EACpC,YAAY,oBAAoB,EAChC,eAAe,iBAAiB,gBAAgB,EAChD,OAAO,wBAAwB,aAAa,EAC5C,OAAO,iBAAiB,kDAAkD,EAC1E,OAAO,eAA+B,IAAY,MAA6D;AAC9G,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAgC;AAAA,IACpC,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,EACpB;AACA,MAAI,KAAK,MAAM;AACb,SAAK,MAAM,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AAAA,EACvD;AACA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,kBAAkB,EAAE,IAAI,IAAI;AACrE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,UAAU,EACjC,YAAY,yBAAyB,EACrC,eAAe,iBAAiB,kDAAkD,EAClF,OAAO,eAA+B,IAAY,MAAwB;AACzE,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,kBAAkB,EAAE,IAAI;AAAA,IAC/D,MAAM,KAAK,KAAK,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AAAA,EAC9C,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,aAAa,EACpC,YAAY,oBAAoB,EAChC,OAAO,OAAO,QAAgB;AAC7B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,kBAAkB,GAAG,EAAE;AACtD,UAAQ,IAAI,SAAS;AACvB,CAAC;AAIH,kBAAkB,QAAQ,gCAAgC,EACvD,YAAY,6DAA6D,EACzE,eAAe,iBAAiB,wBAAwB,EACxD,OAAO,wBAAwB,aAAa,EAC5C,OAAO,eAA+B,cAAsB,MAA8C;AACzG,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,YAAY,YAAY;AAAA,IACvE,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,EACpB,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,+BAA+B,EACtD,YAAY,oDAAoD,EAChE,OAAO,eAA+B,cAAsB;AAC3D,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,YAAY,WAAW;AACvE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,yBAAyB,EAChD,YAAY,oEAAoE,EAChF,eAAe,uBAAuB,6BAA6B,EACnE,OAAO,aAAa,yCAAyC,EAC7D,OAAO,uBAAuB,6CAA6C,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC,EACtG,OAAO,oBAAoB,0CAA0C,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC,EAChG,OAAO,iBAAiB,uCAAuC,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC,EAC1F,OAAO,eAEN,cACA,MACA;AACA,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,YAAY,YAAY;AAAA,IACvE,qBAAqB,KAAK;AAAA,IAC1B,SAAS,KAAK,UAAU;AAAA,IACxB,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,EACd,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,0BAA0B,EACjD,YAAY,mCAAmC,EAC/C,eAAe,8BAA8B,0BAA0B,EACvE,OAAO,eAA+B,cAAsB,MAA6B;AACxF,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,YAAY,qBAAqB;AAAA,IAChF,cAAc,KAAK;AAAA,EACrB,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,4BAA4B,EACnD,YAAY,mDAAmD,EAC/D,OAAO,eAA+B,cAAsB;AAC3D,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,YAAY,aAAa;AACzE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;AI9HH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,qBAAqB,IAAIC,SAAQ,aAAa,EACxD,YAAY,oBAAoB;AAEnC,mBAAmB,QAAQ,MAAM,EAC9B,YAAY,qCAAqC,EACjD,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,cAAc;AAChE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,UAAU,EAClC,YAAY,kBAAkB,EAC9B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,gBAAgB,EAAE,EAAE;AACtE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,aAAa,EACrC,YAAY,+BAA+B,EAC3C,eAAe,iBAAiB,iBAAiB,EACjD,OAAO,wBAAwB,aAAa,EAC5C,OAAO,mBAAmB,wCAAwC,EAClE,OAAO,iBAAiB,WAAW,EACnC,OAAO,mBAAmB,WAAW,EACrC,OAAO,oBAAoB,oDAAoD,EAC/E,OAAO,eAA+B,IAAY,MAAgH;AACjK,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAgC,EAAE,MAAM,KAAK,KAAK;AACxD,MAAI,KAAK,YAAa,MAAK,aAAa,IAAI,KAAK;AACjD,MAAI,KAAK,OAAQ,MAAK,aAAa,IAAI,UAAU,KAAK,MAAM;AAC5D,MAAI,KAAK,KAAM,MAAK,MAAM,IAAI,KAAK;AACnC,MAAI,KAAK,MAAO,MAAK,OAAO,IAAI,KAAK;AACrC,MAAI,KAAK,QAAS,MAAK,SAAS,IAAI,UAAU,KAAK,OAAO;AAC1D,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,gBAAgB,EAAE,IAAI,IAAI;AAC5E,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,aAAa,EACrC,YAAY,qBAAqB,EACjC,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,gBAAgB,EAAE,EAAE;AAC5D,UAAQ,IAAI,SAAS;AACvB,CAAC;;;ACtDH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,iBAAiB,IAAIC,SAAQ,SAAS,EAChD,YAAY,gBAAgB;AAE/B,eAAe,QAAQ,qBAAqB,EACzC,YAAY,2BAA2B,EACvC,eAAe,iBAAiB,wCAAwC,EACxE,OAAO,aAAa,oDAAoD,EACxE,OAAO,sBAAsB,kDAAkD,EAC/E,OAAO,8BAA8B,6CAA6C,EAClF,OAAO,eAA+B,YAAoB,MAAmF;AAC5I,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAgC,EAAE,MAAM,UAAU,KAAK,IAAI,EAAE;AACnE,MAAI,KAAK,WAAY,MAAK,aAAa,IAAI,KAAK;AAChD,MAAI,KAAK,eAAgB,MAAK,iBAAiB,IAAI,KAAK;AACxD,QAAM,OAAO,KAAK,KACd,OAAO,EAAE,YAAY,UAAU,IAAI,KAAK,EAAE,KAC1C,OAAO,EAAE,YAAY,UAAU;AACnC,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,MAAM,IAAI;AACnD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,eAAe,QAAQ,uBAAuB,EAC3C,YAAY,oBAAoB,EAChC,OAAO,eAA+B,YAAoB,IAAY;AACrE,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,EAAE;AAChF,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,eAAe,QAAQ,0BAA0B,EAC9C,YAAY,iBAAiB,EAC7B,OAAO,eAA+B,YAAoB,IAAY;AACrE,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,EAAE;AACtE,UAAQ,IAAI,SAAS;AACvB,CAAC;;;AC3CH,SAAS,WAAAC,gBAAe;AACxB,SAAS,gBAAAC,qBAAoB;AAKtB,IAAM,aAAa,IAAIC,SAAQ,KAAK,EACxC,YAAY,sDAAsD,EAClE,SAAS,WAAW,yBAAyB,EAC7C,OAAO,iBAAiB,0CAA0C,EAClE,OAAO,mBAAmB,mEAAmE,EAC7F,OAAO,eAA+B,UAA8B,MAA2C;AAC9G,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAE7B,MAAI;AACJ,MAAI,KAAK,MAAM;AACb,YAAQC,cAAa,KAAK,MAAM,OAAO,EAAE,KAAK;AAAA,EAChD,WAAW,UAAU;AACnB,YAAQ;AAAA,EACV,OAAO;AACL,YAAQ,MAAM,sDAAsD;AACpE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAkC,CAAC;AACzC,MAAI,KAAK,OAAO;AACd,eAAW,MAAM,KAAK,OAAO;AAC3B,YAAM,QAAQ,GAAG,QAAQ,GAAG;AAC5B,UAAI,UAAU,IAAI;AAChB,gBAAQ,MAAM,gCAAgC,EAAE,uBAAuB;AACvE,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC;AAAA,IACjD;AAAA,EACF;AAEA,QAAM,OAAgC,EAAE,MAAM;AAC9C,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,EAAG,MAAK,SAAS;AAElD,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,QAAQ,IAAI;AAC/D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;AC1CH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,uBAAuB,IAAIC,SAAQ,eAAe,EAC5D,YAAY,sCAAsC;AAErD,qBAAqB,QAAQ,QAAQ,EAClC,YAAY,iCAAiC,EAC7C,eAAe,4BAA4B,+BAA+B,EAC1E,eAAe,4BAA4B,+BAA+B,EAC1E,eAAe,iBAAiB,mBAAmB,EACnD,OAAO,aAAa,iBAAiB,EACrC,OAAO,iBAAiB,kDAAkD,EAC1E,OAAO,eAA+B,MAAoF;AACzH,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,CAAC,kBAAkB,QAAQ,IAAI,KAAK,OAAO,MAAM,GAAG;AAC1D,QAAM,CAAC,kBAAkB,QAAQ,IAAI,KAAK,OAAO,MAAM,GAAG;AAC1D,QAAM,OAAgC;AAAA,IACpC,UAAU,KAAK;AAAA,IACf,mBAAmB;AAAA,IACnB,WAAW;AAAA,IACX,mBAAmB;AAAA,IACnB,WAAW;AAAA,EACb;AACA,MAAI,KAAK,GAAI,MAAK,IAAI,IAAI,KAAK;AAC/B,MAAI,KAAK,KAAM,MAAK,MAAM,IAAI,UAAU,KAAK,IAAI;AACjD,QAAM,OAAO,KAAK,KAAK,OAAO,EAAE,kBAAkB,KAAK,EAAE,KAAK,OAAO,EAAE;AACvE,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,MAAM,IAAI;AACnD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,qBAAqB,QAAQ,UAAU,EACpC,YAAY,0BAA0B,EACtC,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,kBAAkB,EAAE,EAAE;AACxE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,qBAAqB,QAAQ,aAAa,EACvC,YAAY,uBAAuB,EACnC,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,kBAAkB,EAAE,EAAE;AAC9D,UAAQ,IAAI,SAAS;AACvB,CAAC;;;AClDH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,4BAA4B,IAAIC,SAAQ,qBAAqB,EACvE,YAAY,uBAAuB,EACnC,SAAS,gBAAgB,iCAAiC,EAC1D,SAAS,QAAQ,kBAAkB,EACnC,OAAO,iBAAiB,6BAA6B,EACrD,OAAO,qBAAqB,0CAA0C,MAAM,EAC5E,OAAO,eAAe,eAAe,IAAI,EACzC,OAAO,gBAAgB,gBAAgB,GAAG,EAC1C,OAAO,eAA+B,YAAoB,IAAY,MAA2E;AAChJ,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,SAAS,IAAI,gBAAgB;AACnC,MAAI,KAAK,KAAM,QAAO,IAAI,YAAY,KAAK,IAAI;AAE/C,QAAM,eAAuC,EAAE,UAAU,UAAU,UAAU,UAAU,MAAM,OAAO;AACpG,SAAO,IAAI,aAAa,aAAa,KAAK,SAAS,KAAK,KAAK,SAAS;AACtE,SAAO,IAAI,SAAS,KAAK,KAAK;AAC9B,SAAO,IAAI,UAAU,KAAK,MAAM;AAChC,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,YAAY,OAAO,SAAS,CAAC,EAAE;AAC7G,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;ACzBH,SAAS,WAAAC,gBAAe;AACxB,SAAS,gBAAAC,qBAAoB;AAKtB,IAAM,qBAAqB,IAAIC,SAAQ,aAAa,EACxD,YAAY,2BAA2B;AAE1C,mBAAmB,QAAQ,0BAA0B,EAClD,YAAY,wGAAwG,EACpH,eAAe,qBAAqB,wCAAwC,EAC5E,OAAO,yBAAyB,aAAa,0BAA0B,EACvE,OAAO,iBAAiB,qEAAqE,EAC7F,OAAO,eAA+B,YAAoB,IAAY,MAAgE;AACrI,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,gBAAgB;AAAA,IAC7F,UAAU,KAAK;AAAA,IACf,cAAc,KAAK;AAAA,EACrB,CAAC;AAED,MAAI,KAAK,MAAM;AACb,UAAM,OAAOC,cAAa,KAAK,IAAI;AACnC,UAAM,YAAY,KAAK,WAAW,WAAW,MAAM,IAAI,KAAK,aAAa,GAAG,OAAO,OAAO,GAAG,KAAK,UAAU;AAC5G,UAAM,YAAY,MAAM,MAAM,WAAW;AAAA,MACvC,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,KAAK,aAAa,iBAAiB,UAAU,OAAO,KAAK,GAAG;AAAA,MACvF;AAAA,IACF,CAAC;AACD,QAAI,CAAC,UAAU,IAAI;AACjB,YAAM,IAAI,MAAM,uBAAuB,UAAU,MAAM,EAAE;AAAA,IAC3D;AACA,YAAQ,IAAI,aAAa,EAAE,GAAG,MAAM,UAAU,KAAK,GAAG,UAAU,IAAI,CAAC,CAAC;AAAA,EACxE,OAAO;AACL,YAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AAAA,EACjD;AACF,CAAC;AAEH,mBAAmB,QAAQ,uBAAuB,EAC/C,YAAY,kDAAkD,EAC9D,eAAe,qBAAqB,wCAAwC,EAC5E,OAAO,eAA+B,YAAoB,IAAY,MAA4B;AACjG,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,cAAc,MAAM,OAAO,QAAgE,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,cAAc;AAC3J,QAAM,QAAQ,YAAY,KAAK,OAAK,EAAE,IAAI,SAAS,IAAI,KAAK,QAAQ,EAAE,CAAC;AACvE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,eAAe,KAAK,QAAQ,aAAa;AAAA,EAC3D;AACA,QAAM,cAAc,GAAG,OAAO,OAAO,OAAO,EAAE,gBAAgB,MAAM,GAAG;AACvE,UAAQ,IAAI,aAAa,EAAE,cAAc,aAAa,GAAG,MAAM,GAAG,UAAU,IAAI,CAAC,CAAC;AACpF,CAAC;AAEH,mBAAmB,QAAQ,wBAAwB,EAChD,YAAY,+BAA+B,EAC3C,OAAO,mBAAmB,oCAAoC,EAC9D,OAAO,eAA+B,YAAoB,IAAY,MAA2B;AAChG,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,QAAQ,KAAK,SAAS,WAAW,mBAAmB,KAAK,MAAM,CAAC,KAAK;AAC3E,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,eAAe,KAAK,EAAE;AACpG,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,0CAA0C,EAClE,YAAY,sBAAsB,EAClC,OAAO,eAA+B,YAAoB,IAAY,cAAsB;AAC3F,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,gBAAgB,YAAY,EAAE;AAClG,UAAQ,IAAI,SAAS;AACvB,CAAC;;;ACxEH,SAAS,kBAAkB;AAC3B,SAAS,WAAAC,iBAAe;AAKjB,IAAM,eAAe,IAAIC,UAAQ,OAAO,EAC5C,YAAY,kCAAkC;AAEjD,aAAa,QAAQ,QAAQ,EAC1B,YAAY,2BAA2B,EACvC,eAAe,iBAAiB,WAAW,EAC3C,eAAe,qBAAqB,oBAAoB,EACxD,OAAO,aAAa,qCAAqC,EACzD,OAAO,oCAAoC,kCAAkC,EAC7E,OAAO,eAA+B,MAA+E;AACpH,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,SAAS,KAAK,MAAM,WAAW;AACrC,QAAM,OAAgC;AAAA,IACpC,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,EACX;AACA,MAAI,KAAK,iBAAiB;AACxB,SAAK,kBAAkB,IAAI,KAAK,gBAAgB,MAAM,GAAG;AAAA,EAC3D;AACA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,UAAU,MAAM,IAAI,IAAI;AAC1E,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,aAAa,QAAQ,UAAU,EAC5B,YAAY,YAAY,EACxB,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,UAAU,EAAE,EAAE;AAChE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,aAAa,QAAQ,MAAM,EACxB,YAAY,gBAAgB,EAC5B,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,QAAQ;AAC1D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,aAAa,QAAQ,aAAa,EAC/B,YAAY,eAAe,EAC3B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,UAAU,EAAE,EAAE;AACtD,UAAQ,IAAI,SAAS;AACvB,CAAC;;;ACxDH,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,WAAAC,iBAAe;AAKjB,IAAM,kBAAkB,IAAIC,UAAQ,UAAU,EAClD,YAAY,0BAA0B;AAEzC,gBAAgB,QAAQ,QAAQ,EAC7B,YAAY,4BAA4B,EACxC,eAAe,iBAAiB,cAAc,EAC9C,eAAe,eAAe,YAAY,EAC1C,eAAe,qBAAqB,qBAAqB,EACzD,eAAe,qBAAqB,6BAA6B,EACjE,OAAO,aAAa,wCAAwC,EAC5D,OAAO,oCAAoC,kCAAkC,EAC7E,OAAO,mBAAmB,0BAA0B,EACpD,OAAO,eAA+B,MAA6H;AAClK,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,YAAY,KAAK,MAAMC,YAAW;AACxC,QAAM,OAAgC;AAAA,IACpC,MAAM,KAAK;AAAA,IACX,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK,OAAO,MAAM,GAAG;AAAA,IAC7B,SAAS;AAAA,EACX;AACA,MAAI,KAAK,iBAAiB;AACxB,SAAK,kBAAkB,IAAI,KAAK,gBAAgB,MAAM,GAAG;AAAA,EAC3D;AACA,MAAI,KAAK,QAAQ;AACf,SAAK,QAAQ,IAAI,KAAK,MAAM,KAAK,MAAM;AAAA,EACzC;AACA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,aAAa,SAAS,IAAI,IAAI;AAChF,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,gBAAgB,QAAQ,UAAU,EAC/B,YAAY,eAAe,EAC3B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,aAAa,EAAE,EAAE;AACnE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,gBAAgB,QAAQ,MAAM,EAC3B,YAAY,mBAAmB,EAC/B,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,WAAW;AAC7D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,gBAAgB,QAAQ,aAAa,EAClC,YAAY,kBAAkB,EAC9B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,aAAa,EAAE,EAAE;AACzD,UAAQ,IAAI,SAAS;AACvB,CAAC;;;AChEH,SAAS,WAAAC,iBAAe;AAKjB,IAAM,mBAAmB,IAAIC,UAAQ,WAAW,EACpD,YAAY,8BAA8B;AAE7C,iBAAiB,QAAQ,eAAe,EACrC,YAAY,kCAAkC,EAC9C,OAAO,iBAAiB,wDAAwD,EAChF,OAAO,wBAAwB,sBAAsB,EACrD,OAAO,iBAAiB,yDAAyD,SAAS,CAAC,CAAC,EAC5F,OAAO,yBAAyB,yDAAyD,SAAS,CAAC,CAAC,EACpG,OAAO,kBAAkB,gEAAgE,SAAS,CAAC,CAAC,EACpG,OAAO,eAAe,uBAAuB,EAC7C,OAAO,mBAAmB,yHAAyH,EACnJ,OAAO,eAA+B,MAAc,MAQlD;AACD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAE7B,MAAI;AAEJ,MAAI,KAAK,QAAQ;AAEf,WAAO,KAAK,MAAM,KAAK,MAAM;AAAA,EAC/B,OAAO;AACL,QAAI,CAAC,KAAK,MAAM;AACd,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AACA,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,OAAO,KAAK,KAAK,IAAI,aAAa;AAAA,IACpC;AAEA,QAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAE9C,QAAI,KAAK,aAAa,SAAS,GAAG;AAChC,WAAK,gBAAgB,KAAK,aAAa,IAAI,YAAY;AAAA,IACzD;AAEA,QAAI,KAAK,MAAM,SAAS,GAAG;AACzB,YAAM,aAAuC,CAAC;AAC9C,iBAAW,QAAQ,KAAK,OAAO;AAC7B,cAAM,SAAS,UAAU,IAAI;AAC7B,mBAAW,OAAO,GAAG,IAAI,OAAO;AAAA,MAClC;AACA,WAAK,QAAQ,EAAE,SAAS,MAAM,WAAW;AAAA,IAC3C;AAEA,QAAI,KAAK,SAAU,MAAK,YAAY;AAAA,EACtC;AAEA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,cAAc,IAAI,IAAI,IAAI;AAC5E,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,YAAY,EAClC,YAAY,iBAAiB,EAC7B,OAAO,cAAc,qCAAqC,EAC1D,OAAO,eAA+B,MAAc,MAA8B;AACjF,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,KAAK,WACd,OAAO,EAAE,cAAc,IAAI,cAC3B,OAAO,EAAE,cAAc,IAAI;AAC/B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,IAAI;AAC7C,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,MAAM,EAC5B,YAAY,oBAAoB,EAChC,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY;AAC9D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,eAAe,EACrC,YAAY,oBAAoB,EAChC,OAAO,eAA+B,MAAc;AACnD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,cAAc,IAAI,EAAE;AAC5D,UAAQ,IAAI,SAAS;AACvB,CAAC;AAEH,iBAAiB,QAAQ,YAAY,EAClC,YAAY,4CAA4C,EACxD,OAAO,sBAAsB,yBAAyB,KAAK,EAC3D,OAAO,CAAC,OAAe,SAAgC;AACtD,QAAM,YAAY,KAAK,cAAc,QAAQ,QAAQ;AACrD,UAAQ,IAAI,2BAA2B,KAAK,IAAI,SAAS,EAAE;AAC7D,CAAC;AAIH,SAAS,QAAQ,OAAe,UAA8B;AAC5D,SAAO,CAAC,GAAG,UAAU,KAAK;AAC5B;AAEA,SAAS,UAAU,MAA8C;AAC/D,QAAM,CAAC,KAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AACpC,MAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,UAAM,IAAI,MAAM,iBAAiB,IAAI,kCAAkC;AAAA,EACzE;AACA,SAAO,EAAE,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE;AACvC;AAEA,SAAS,cAAc,MAAuC;AAC5D,QAAM,EAAE,KAAK,IAAI,IAAI,UAAU,IAAI;AACnC,SAAO,EAAE,YAAY,KAAK,YAAY,IAAI;AAC5C;AAEA,SAAS,aAAa,MAAuC;AAC3D,QAAM,EAAE,KAAK,IAAI,IAAI,UAAU,IAAI;AACnC,SAAO,EAAE,UAAU,KAAK,YAAY,IAAI;AAC1C;;;AC9HA,SAAS,WAAAC,iBAAe;AAKjB,IAAM,eAAe,IAAIC,UAAQ,OAAO,EAC5C,YAAY,0DAA0D,EACtE,eAAe,uBAAuB,6CAA6C,EACnF,OAAO,eAA+B,MAA8B;AACnE,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,aAAa,UAAU,KAAK,UAAU;AAC5C,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,UAAU;AAAA,IAC3D,YAAY,MAAM,QAAQ,UAAU,IAAI,aAAa,CAAC,UAAU;AAAA,EAClE,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;AChBH,SAAS,WAAAC,iBAAe;AAIxB,IAAM,kBAAkB;AAEjB,IAAM,mBAAmB,IAAIC,UAAQ,WAAW,EACpD,YAAY,6EAA6E;AAE5F,iBAAiB,QAAQ,mBAAmB,EACzC,YAAY,sDAAsD,eAAe,EAAE,EACnF,eAAe,kBAAkB,6CAA6C,EAC9E,OAAO,eAA+B,UAAkB,MAAyB;AAChF,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,QAAQ,UAAU,KAAK,KAAK;AAClC,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,cAAc,QAAQ,WAAW;AAAA,IAClF,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAAA,EAC9C,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,mBAAmB,EACzC,YAAY,sDAAsD,eAAe,EAAE,EACnF,OAAO,uBAAuB,+CAA+C,EAC7E,OAAO,mBAAmB,sBAAsB,EAChD,OAAO,eAA+B,UAAkB,MAAiD;AACxG,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,QAAQ,KAAK,cAAc,gBAAgB,KAAK,WAAW,KAAK;AACtE,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,cAAc,QAAQ,UAAU,KAAK,EAAE;AAEzF,MAAI,KAAK,QAAQ;AACf,UAAM,EAAE,eAAAC,eAAc,IAAI,MAAM,OAAO,IAAI;AAC3C,IAAAA,eAAc,KAAK,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AACxD,YAAQ,IAAI,cAAc,KAAK,MAAM,EAAE;AAAA,EACzC,OAAO;AACL,YAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AAAA,EACjD;AACF,CAAC;AAEH,iBAAiB,QAAQ,qCAAqC,EAC3D,YAAY,mEAAmE,eAAe,EAAE,EAChG,eAAe,iBAAiB,8DAA8D,EAC9F,OAAO,sBAAsB,mCAAmC,EAChE,OAAO,8BAA8B,4BAA4B,EACjE,OAAO,eAA+B,UAAkB,YAAoB,MAAsE;AACjJ,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,WAAW,UAAU,KAAK,IAAI;AACpC,QAAM,aAAuB,CAAC;AAC9B,MAAI,KAAK,WAAY,YAAW,KAAK,eAAe,mBAAmB,KAAK,UAAU,CAAC,EAAE;AACzF,MAAI,KAAK,eAAgB,YAAW,KAAK,mBAAmB,mBAAmB,KAAK,cAAc,CAAC,EAAE;AACrG,QAAM,KAAK,WAAW,SAAS,IAAI,WAAW,KAAK,GAAG,CAAC,KAAK;AAC5D,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,cAAc,QAAQ,YAAY,UAAU,GAAG,EAAE,IAAI,QAAQ;AAChH,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;ACxDH,SAAS,WAAAC,iBAAe;AAKjB,IAAM,gBAAgB,IAAIC,UAAQ,QAAQ,EAC9C,YAAY,mBAAmB;AAElC,cAAc,QAAQ,QAAQ,EAC3B,YAAY,2BAA2B,EACvC,eAAe,iBAAiB,YAAY,EAC5C,eAAe,mBAAmB,iCAAiC,EACnE,OAAO,uBAAuB,wDAAwD,EACtF,OAAO,eAA+B,MAA4D;AACjG,QAAM,SAAS,IAAI,UAAU;AAC7B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,KAAK,MAAM;AAAA,EACjC,QAAQ;AACN,UAAM,IAAI,MAAM,6BAA6B;AAAA,EAC/C;AACA,QAAM,OAAgC,EAAE,MAAM,KAAK,MAAM,OAAO;AAChE,MAAI,KAAK,UAAW,MAAK,aAAa,KAAK;AAC3C,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,cAAc,IAAI;AAC5D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,cAAc,QAAQ,MAAM,EACzB,YAAY,iBAAiB,EAC7B,OAAO,iBAA+B;AACrC,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,YAAY;AACrD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,cAAc,QAAQ,mBAAmB,EACtC,YAAY,qBAAqB,EACjC,OAAO,eAA+B,SAAiB;AACtD,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,cAAc,OAAO,EAAE;AACtD,UAAQ,IAAI,eAAe;AAC7B,CAAC;;;ACzCH;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,MAAQ;AAAA,EACR,KAAO;AAAA,IACL,OAAS;AAAA,EACX;AAAA,EACA,OAAS;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAW;AAAA,IACT,OAAS;AAAA,IACT,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,KAAO;AAAA,EACT;AAAA,EACA,cAAgB;AAAA,IACd,OAAS;AAAA,IACT,cAAc;AAAA,IACd,WAAa;AAAA,IACb,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,eAAe;AAAA,IACf,MAAQ;AAAA,IACR,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AACF;;;AtBVO,IAAM,UAAU,IAAIC,UAAQ,OAAO,EACvC,YAAY,iDAA4C,EACxD,QAAQ,gBAAI,OAAO,EACnB,OAAO,oBAAoB,cAAc,EACzC,OAAO,qBAAqB,gCAAgC,OAAO;AAEtE,QAAQ,WAAW,YAAY;AAC/B,QAAQ,WAAW,aAAa;AAChC,QAAQ,WAAW,iBAAiB;AACpC,QAAQ,WAAW,kBAAkB;AACrC,QAAQ,WAAW,cAAc;AACjC,QAAQ,WAAW,UAAU;AAC7B,QAAQ,WAAW,oBAAoB;AACvC,QAAQ,WAAW,yBAAyB;AAC5C,QAAQ,WAAW,kBAAkB;AACrC,QAAQ,WAAW,YAAY;AAC/B,QAAQ,WAAW,eAAe;AAClC,QAAQ,WAAW,YAAY;AAC/B,QAAQ,WAAW,gBAAgB;AACnC,QAAQ,WAAW,aAAa;AAChC,QAAQ,WAAW,gBAAgB;;;AuBpCnC,QAAQ,MAAM;","names":["Command","Command","Command","Command","readFileSync","Command","Command","Command","Command","Command","Command","readFileSync","Command","readFileSync","Command","Command","Command","Command","Command","readFileSync","Command","readFileSync","Command","Command","randomUUID","Command","Command","randomUUID","Command","Command","Command","Command","Command","Command","writeFileSync","Command","Command","Command"]}
+{"version":3,"sources":["../src/program.ts","../src/commands/login.ts","../src/config.ts","../src/token-store.ts","../src/auth.ts","../src/browser-login.ts","../src/commands/logout.ts","../src/commands/workspaces.ts","../src/client.ts","../src/output.ts","../src/helpers.ts","../src/commands/collections.ts","../src/commands/records.ts","../src/commands/sql.ts","../src/commands/relationships.ts","../src/commands/query-relationships.ts","../src/commands/attachments.ts","../src/commands/hooks.ts","../src/commands/triggers.ts","../src/commands/endpoints.ts","../src/commands/batch.ts","../src/commands/providers.ts","../src/commands/tokens.ts","../package.json","../src/index.ts"],"sourcesContent":["import { Command } from 'commander';\nimport { loginCommand } from './commands/login.js';\nimport { logoutCommand } from './commands/logout.js';\nimport { workspacesCommand } from './commands/workspaces.js';\nimport { collectionsCommand } from './commands/collections.js';\nimport { recordsCommand } from './commands/records.js';\nimport { sqlCommand } from './commands/sql.js';\nimport { relationshipsCommand } from './commands/relationships.js';\nimport { queryRelationshipsCommand } from './commands/query-relationships.js';\nimport { attachmentsCommand } from './commands/attachments.js';\nimport { hooksCommand } from './commands/hooks.js';\nimport { triggersCommand } from './commands/triggers.js';\nimport { endpointsCommand } from './commands/endpoints.js';\nimport { batchCommand } from './commands/batch.js';\nimport { providersCommand } from './commands/providers.js';\nimport { tokensCommand } from './commands/tokens.js';\nimport pkg from '../package.json' with { type: 'json' };\n\nexport const program = new Command('rekor')\n  .description('Rekor CLI — System of Record for AI agents')\n  .version(pkg.version)\n  .option('--workspace <id>', 'Workspace ID')\n  .option('--output <format>', 'Output format: json or table', 'table');\n\nprogram.addCommand(loginCommand);\nprogram.addCommand(logoutCommand);\nprogram.addCommand(workspacesCommand);\nprogram.addCommand(collectionsCommand);\nprogram.addCommand(recordsCommand);\nprogram.addCommand(sqlCommand);\nprogram.addCommand(relationshipsCommand);\nprogram.addCommand(queryRelationshipsCommand);\nprogram.addCommand(attachmentsCommand);\nprogram.addCommand(hooksCommand);\nprogram.addCommand(triggersCommand);\nprogram.addCommand(batchCommand);\nprogram.addCommand(providersCommand);\nprogram.addCommand(tokensCommand);\nprogram.addCommand(endpointsCommand);\n","import { Command } from 'commander';\nimport { login } from '../auth.js';\nimport { browserLogin } from '../browser-login.js';\n\nexport const loginCommand = new Command('login')\n  .description('Authenticate with Rekor')\n  .option('--token <token>', 'API key for headless/CI authentication (rec_...)')\n  .option('--api-url <url>', 'API base URL')\n  .action(async (opts: { token?: string; apiUrl?: string }) => {\n    if (opts.token) {\n      await login(opts.token, opts.apiUrl);\n      console.log('Authenticated successfully');\n    } else {\n      try {\n        await browserLogin(opts.apiUrl);\n        console.log('Authenticated successfully');\n      } catch (err) {\n        console.error(\n          `Login failed: ${err instanceof Error ? err.message : 'Unknown error'}`,\n        );\n        process.exit(1);\n      }\n    }\n  });\n","import { readFileSync, writeFileSync, mkdirSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\n\nconst CONFIG_DIR = join(homedir(), '.config', 'rekor');\nconst CONFIG_FILE = join(CONFIG_DIR, 'config.json');\n\nexport interface Config {\n  api_url: string;\n  default_workspace?: string;\n  org_id?: string;\n}\n\ninterface ConfigFile extends Config {\n  // Tokens may linger here from older CLI versions until token-store migrates them.\n  token?: string;\n  [key: string]: unknown;\n}\n\nexport function loadConfig(): Config {\n  const envUrl = process.env['REKOR_API_URL'];\n\n  try {\n    const raw = readFileSync(CONFIG_FILE, 'utf-8');\n    const stored = JSON.parse(raw) as ConfigFile;\n    return {\n      api_url: envUrl ?? stored.api_url ?? 'http://localhost:8787',\n      default_workspace: stored.default_workspace,\n      org_id: stored.org_id,\n    };\n  } catch {\n    return {\n      api_url: envUrl ?? 'http://localhost:8787',\n    };\n  }\n}\n\nexport function saveConfig(config: Config): void {\n  mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  let existing: ConfigFile = {} as ConfigFile;\n  try {\n    existing = JSON.parse(readFileSync(CONFIG_FILE, 'utf-8')) as ConfigFile;\n  } catch {\n    existing = {} as ConfigFile;\n  }\n  const merged: ConfigFile = { ...existing, ...config };\n  writeFileSync(CONFIG_FILE, JSON.stringify(merged, null, 2), { mode: 0o600 });\n}\n\nexport { CONFIG_DIR, CONFIG_FILE };\n","import * as fs from 'node:fs';\nimport { CONFIG_DIR, CONFIG_FILE } from './config.js';\n\nconst KEYRING_SERVICE = 'rekor';\nconst KEYRING_ACCOUNT = 'rec_token';\n\ninterface KeyringBinding {\n  getPassword(service: string, account: string): Promise<string | null>;\n  setPassword(service: string, account: string, password: string): Promise<void>;\n  deletePassword(service: string, account: string): Promise<boolean>;\n}\n\nlet keyringCache: KeyringBinding | null | undefined;\n\nasync function getKeyring(): Promise<KeyringBinding | null> {\n  if (keyringCache !== undefined) return keyringCache;\n  try {\n    const mod = await import('@napi-rs/keyring');\n    const Entry = mod.Entry;\n    keyringCache = {\n      async getPassword(service, account) {\n        try { return new Entry(service, account).getPassword(); } catch { return null; }\n      },\n      async setPassword(service, account, password) {\n        new Entry(service, account).setPassword(password);\n      },\n      async deletePassword(service, account) {\n        try { return new Entry(service, account).deletePassword(); } catch { return false; }\n      },\n    };\n  } catch {\n    keyringCache = null;\n  }\n  return keyringCache;\n}\n\nfunction manualCleanupCommand(): string {\n  if (process.platform === 'darwin') {\n    return `security delete-generic-password -s ${KEYRING_SERVICE} -a ${KEYRING_ACCOUNT}`;\n  }\n  if (process.platform === 'win32') {\n    return `cmdkey /delete:${KEYRING_SERVICE}/${KEYRING_ACCOUNT}`;\n  }\n  if (process.platform === 'linux') {\n    return `secret-tool clear service ${KEYRING_SERVICE} account ${KEYRING_ACCOUNT}`;\n  }\n  return `(remove the entry with service=\"${KEYRING_SERVICE}\" account=\"${KEYRING_ACCOUNT}\" from your OS credential store)`;\n}\n\ninterface LegacyConfigFile {\n  api_url?: string;\n  token?: string;\n  default_workspace?: string;\n  org_id?: string;\n  [key: string]: unknown;\n}\n\nfunction readConfigFile(): LegacyConfigFile | null {\n  if (!fs.existsSync(CONFIG_FILE)) return null;\n  try {\n    return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf-8')) as LegacyConfigFile;\n  } catch {\n    return null;\n  }\n}\n\nfunction writeConfigFile(data: LegacyConfigFile): void {\n  if (!fs.existsSync(CONFIG_DIR)) {\n    fs.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });\n  }\n  fs.writeFileSync(CONFIG_FILE, JSON.stringify(data, null, 2), { mode: 0o600 });\n}\n\nfunction stripTokenFromFile(): void {\n  const existing = readConfigFile();\n  if (!existing || existing.token === undefined) return;\n  delete existing.token;\n  writeConfigFile(existing);\n}\n\nasync function migrateLegacyToken(keyring: KeyringBinding | null): Promise<string | null> {\n  const existing = readConfigFile();\n  if (!existing?.token) return null;\n  const token = existing.token;\n  if (!keyring) return token;\n  // Keyring wins on conflict — strip stale file copy without overwriting.\n  let keyringHasToken = false;\n  try {\n    keyringHasToken = (await keyring.getPassword(KEYRING_SERVICE, KEYRING_ACCOUNT)) !== null;\n  } catch {\n    keyringHasToken = false;\n  }\n  if (keyringHasToken) {\n    try { stripTokenFromFile(); } catch (err) {\n      console.warn(`rekor: failed to strip stale token from ${CONFIG_FILE} (${(err as Error).message}); will retry next run.`);\n    }\n    return null;\n  }\n  try {\n    await keyring.setPassword(KEYRING_SERVICE, KEYRING_ACCOUNT, token);\n    try { stripTokenFromFile(); } catch (err) {\n      console.warn(`rekor: failed to strip legacy token from ${CONFIG_FILE} (${(err as Error).message}); will retry next run.`);\n    }\n  } catch (err) {\n    console.warn(`rekor: keyring migration failed (${(err as Error).message}); continuing with file-backed token.`);\n  }\n  return token;\n}\n\nexport async function getToken(): Promise<string | null> {\n  const envToken = process.env['REKOR_TOKEN'];\n  if (envToken) return envToken;\n\n  const keyring = await getKeyring();\n\n  const migrated = await migrateLegacyToken(keyring);\n  if (migrated) return migrated;\n\n  if (keyring) {\n    const stored = await keyring.getPassword(KEYRING_SERVICE, KEYRING_ACCOUNT);\n    if (stored) return stored;\n  }\n\n  const existing = readConfigFile();\n  return existing?.token ?? null;\n}\n\nexport async function setToken(token: string): Promise<void> {\n  const keyring = await getKeyring();\n  if (keyring) {\n    try {\n      await keyring.setPassword(KEYRING_SERVICE, KEYRING_ACCOUNT, token);\n      try { stripTokenFromFile(); } catch (err) {\n        console.warn(`rekor: failed to strip stale token from ${CONFIG_FILE} (${(err as Error).message}).`);\n      }\n      return;\n    } catch (err) {\n      console.warn(`rekor: keyring write failed (${(err as Error).message}); falling back to file storage.`);\n    }\n  }\n  const existing = readConfigFile() ?? {};\n  existing.token = token;\n  writeConfigFile(existing);\n}\n\nexport async function clearToken(): Promise<void> {\n  const keyring = await getKeyring();\n  if (keyring) {\n    const deleted = await keyring.deletePassword(KEYRING_SERVICE, KEYRING_ACCOUNT);\n    // Only verify on reported failure — success path doesn't need a second RPC.\n    if (!deleted) {\n      let stillThere = true;\n      try {\n        stillThere = (await keyring.getPassword(KEYRING_SERVICE, KEYRING_ACCOUNT)) !== null;\n      } catch {\n        stillThere = true;\n      }\n      if (stillThere) {\n        console.warn(\n          `rekor: could not clear keyring slot. Subsequent commands may still pick the stale token. Manually:\\n  ${manualCleanupCommand()}`,\n        );\n      }\n    }\n  }\n  const existing = readConfigFile();\n  if (existing && existing.token !== undefined) {\n    delete existing.token;\n    writeConfigFile(existing);\n  }\n}\n\nexport function __setKeyringForTesting(binding: KeyringBinding | null): void {\n  keyringCache = binding;\n}\n\nexport function __resetKeyringForTesting(): void {\n  keyringCache = undefined;\n}\n","import { loadConfig, saveConfig } from './config.js';\nimport { setToken } from './token-store.js';\n\nexport async function login(token: string, apiUrl?: string): Promise<void> {\n  await setToken(token);\n  const config = loadConfig();\n  saveConfig({\n    ...config,\n    api_url: apiUrl ?? config.api_url,\n  });\n}\n","import { createServer } from 'node:http';\nimport { randomBytes } from 'node:crypto';\nimport { loadConfig, saveConfig } from './config.js';\nimport { setToken } from './token-store.js';\n\nconst DEFAULT_APP_URL = 'https://rekor.pro';\nconst TIMEOUT_MS = 120_000;\nexport const FALLBACK_URL_DELAY_MS = 5_000;\n\nexport async function browserLogin(apiUrl?: string): Promise<void> {\n  const open = await import('open').then((m) => m.default);\n\n  const state = randomBytes(32).toString('hex');\n  const config = loadConfig();\n\n  let handled = false;\n\n  return new Promise<void>((resolve, reject) => {\n    const server = createServer((req, res) => {\n      const url = new URL(req.url!, `http://127.0.0.1`);\n\n      if (url.pathname !== '/callback') {\n        res.writeHead(404);\n        res.end();\n        return;\n      }\n\n      // Async persist() lets a second callback sneak in before the first finishes.\n      if (handled) {\n        res.writeHead(409);\n        res.end();\n        return;\n      }\n\n      const token = url.searchParams.get('token');\n      const returnedState = url.searchParams.get('state');\n\n      if (returnedState !== state) {\n        handled = true;\n        res.writeHead(400, { 'Content-Type': 'text/html' });\n        res.end(errorPage('Authentication failed: state mismatch. Please try again.'));\n        cleanup();\n        reject(new Error('State mismatch — possible CSRF attempt'));\n        return;\n      }\n\n      if (!token) {\n        handled = true;\n        res.writeHead(400, { 'Content-Type': 'text/html' });\n        res.end(errorPage('Authentication failed: no token received.'));\n        cleanup();\n        reject(new Error('No token in callback'));\n        return;\n      }\n\n      handled = true;\n      const orgId = url.searchParams.get('org_id') ?? undefined;\n\n      const persist = async () => {\n        await setToken(token);\n        saveConfig({\n          ...config,\n          api_url: apiUrl ?? config.api_url,\n          org_id: orgId,\n        });\n      };\n\n      persist().then(\n        () => {\n          res.writeHead(200, { 'Content-Type': 'text/html' });\n          res.end(successPage());\n          cleanup();\n          resolve();\n        },\n        (err: Error) => {\n          // Keyring error messages can include the credential value on some platforms — redact rec_* before logging.\n          const safeMessage = err.message.replace(/rec_[A-Za-z0-9_-]+/g, 'rec_[REDACTED]');\n          console.error(`rekor: failed to store credentials — ${safeMessage}`);\n          res.writeHead(500, { 'Content-Type': 'text/html' });\n          res.end(errorPage('Failed to store credentials. Check your terminal for details.'));\n          cleanup();\n          reject(err);\n        },\n      );\n    });\n\n    const timeout = setTimeout(() => {\n      cleanup();\n      reject(new Error('Login timed out — no response from browser within 2 minutes'));\n    }, TIMEOUT_MS);\n\n    let fallbackTimer: ReturnType<typeof setTimeout> | undefined;\n    let cleanedUp = false;\n\n    function cleanup() {\n      if (cleanedUp) return;\n      cleanedUp = true;\n      clearTimeout(timeout);\n      if (fallbackTimer) {\n        clearTimeout(fallbackTimer);\n        fallbackTimer = undefined;\n      }\n      server.close();\n    }\n\n    server.listen(0, '127.0.0.1', () => {\n      const addr = server.address();\n      if (!addr || typeof addr === 'string') {\n        cleanup();\n        reject(new Error('Failed to start local server'));\n        return;\n      }\n\n      const port = addr.port;\n      const appUrl = process.env['REKOR_APP_URL'] || DEFAULT_APP_URL;\n      const authUrl = `${appUrl}/cli-auth?port=${port}&state=${state}`;\n\n      console.log('Opening browser for authentication...');\n\n      // open() resolves on spawn, not browser launch — .catch() won't fire on SSH/headless even when no browser appears.\n      fallbackTimer = setTimeout(() => {\n        fallbackTimer = undefined;\n        console.log(`If the browser didn't open, visit: ${authUrl}`);\n      }, FALLBACK_URL_DELAY_MS);\n\n      // fallbackTimer === undefined means either the timer already printed the URL,\n      // or cleanup() ran because login completed.\n      open(authUrl).catch(() => {\n        if (!fallbackTimer) return;\n        clearTimeout(fallbackTimer);\n        fallbackTimer = undefined;\n        console.log('Could not open browser automatically.');\n        console.log(`Visit: ${authUrl}`);\n      });\n    });\n  });\n}\n\nfunction successPage(): string {\n  return `<!DOCTYPE html>\n<html>\n<head><title>Rekor CLI</title></head>\n<body style=\"font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #fafafa;\">\n  <div style=\"text-align: center;\">\n    <h1 style=\"font-size: 1.25rem; font-weight: 600;\">Authentication successful</h1>\n    <p style=\"color: #666; margin-top: 0.5rem;\">You can close this tab and return to your terminal.</p>\n  </div>\n</body>\n</html>`;\n}\n\nfunction errorPage(message: string): string {\n  return `<!DOCTYPE html>\n<html>\n<head><title>Rekor CLI</title></head>\n<body style=\"font-family: system-ui, sans-serif; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; background: #fafafa;\">\n  <div style=\"text-align: center;\">\n    <h1 style=\"font-size: 1.25rem; font-weight: 600; color: #dc2626;\">Authentication failed</h1>\n    <p style=\"color: #666; margin-top: 0.5rem;\">${message}</p>\n  </div>\n</body>\n</html>`;\n}\n","import { Command } from 'commander';\nimport { clearToken } from '../token-store.js';\n\nexport const logoutCommand = new Command('logout')\n  .description('Remove stored authentication credentials')\n  .action(async () => {\n    await clearToken();\n    console.log('Logged out successfully');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getFormat } from '../helpers.js';\n\nexport const workspacesCommand = new Command('workspaces')\n  .description('Manage workspaces');\n\nworkspacesCommand.command('list')\n  .description('List all workspaces')\n  .option('--tag <tag>', 'Filter by tag')\n  .action(async function (this: Command, opts: { tag?: string }) {\n    const client = new ApiClient();\n    const qs = opts.tag ? `?tag=${encodeURIComponent(opts.tag)}` : '';\n    const data = await client.request('GET', `/v1/workspaces${qs}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('get <id>')\n  .description('Get a workspace')\n  .action(async function (this: Command, id: string) {\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/workspaces/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('create <id>')\n  .description('Create a workspace')\n  .requiredOption('--name <name>', 'Workspace name')\n  .option('--description <desc>', 'Description')\n  .option('--tags <tags>', 'Comma-separated tags (e.g., client:acme,billing)')\n  .action(async function (this: Command, id: string, opts: { name: string; description?: string; tags?: string }) {\n    const client = new ApiClient();\n    const body: Record<string, unknown> = {\n      name: opts.name,\n      description: opts.description,\n    };\n    if (opts.tags) {\n      body['tags'] = opts.tags.split(',').map(t => t.trim());\n    }\n    const data = await client.request('PUT', `/v1/workspaces/${id}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('tag <id>')\n  .description('Set tags on a workspace')\n  .requiredOption('--tags <tags>', 'Comma-separated tags (e.g., client:acme,billing)')\n  .action(async function (this: Command, id: string, opts: { tags: string }) {\n    const client = new ApiClient();\n    const data = await client.request('PUT', `/v1/workspaces/${id}`, {\n      tags: opts.tags.split(',').map(t => t.trim()),\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('delete <id>')\n  .description('Delete a workspace')\n  .action(async (_id: string) => {\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/workspaces/${_id}`);\n    console.log('Deleted');\n  });\n\n// --- Environment commands ---\n\nworkspacesCommand.command('create-preview <production-id>')\n  .description('Create a preview workspace linked to a production workspace')\n  .requiredOption('--name <name>', 'Preview workspace name')\n  .option('--description <desc>', 'Description')\n  .action(async function (this: Command, productionId: string, opts: { name: string; description?: string }) {\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${productionId}/preview`, {\n      name: opts.name,\n      description: opts.description,\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('list-previews <production-id>')\n  .description('List preview workspaces for a production workspace')\n  .action(async function (this: Command, productionId: string) {\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${productionId}/previews`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('promote <production-id>')\n  .description('Promote config from a preview workspace to production (human-only)')\n  .requiredOption('--from <preview-id>', 'Source preview workspace ID')\n  .option('--dry-run', 'Show what would change without applying')\n  .option('--collections <ids>', 'Comma-separated collection IDs to promote', (v: string) => v.split(','))\n  .option('--triggers <ids>', 'Comma-separated trigger IDs to promote', (v: string) => v.split(','))\n  .option('--hooks <ids>', 'Comma-separated hook IDs to promote', (v: string) => v.split(','))\n  .action(async function (\n    this: Command,\n    productionId: string,\n    opts: { from: string; dryRun?: boolean; collections?: string[]; triggers?: string[]; hooks?: string[] },\n  ) {\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${productionId}/promote`, {\n      source_workspace_id: opts.from,\n      dry_run: opts.dryRun ?? false,\n      collections: opts.collections,\n      triggers: opts.triggers,\n      hooks: opts.hooks,\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('rollback <production-id>')\n  .description('Rollback a promotion (human-only)')\n  .requiredOption('--promotion <promotion-id>', 'Promotion ID to rollback')\n  .action(async function (this: Command, productionId: string, opts: { promotion: string }) {\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${productionId}/promote/rollback`, {\n      promotion_id: opts.promotion,\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nworkspacesCommand.command('promotions <production-id>')\n  .description('List promotion history for a production workspace')\n  .action(async function (this: Command, productionId: string) {\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${productionId}/promotions`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { loadConfig } from './config.js';\nimport { getToken } from './token-store.js';\n\nexport class ApiClient {\n  readonly baseUrl: string;\n  private _tokenPromise: Promise<string | null> | undefined;\n\n  constructor() {\n    const config = loadConfig();\n    this.baseUrl = config.api_url;\n  }\n\n  private getToken(): Promise<string | null> {\n    if (!this._tokenPromise) this._tokenPromise = getToken();\n    return this._tokenPromise;\n  }\n\n  private async authHeaders(): Promise<Record<string, string>> {\n    const token = await this.getToken();\n    return token ? { 'Authorization': `Bearer ${token}` } : {};\n  }\n\n  async request<T = unknown>(method: string, path: string, body?: unknown): Promise<T> {\n    const res = await fetch(`${this.baseUrl}${path}`, {\n      method,\n      headers: {\n        ...(await this.authHeaders()),\n        'Content-Type': 'application/json',\n      },\n      body: body ? JSON.stringify(body) : undefined,\n    });\n\n    const json = await res.json() as { data?: T; error?: { message: string } };\n    if (!res.ok) {\n      throw new Error(json.error?.message ?? `HTTP ${res.status}`);\n    }\n    return json.data as T;\n  }\n\n  async uploadFile(url: string, body: BodyInit, contentType: string): Promise<void> {\n    const res = await fetch(url, {\n      method: 'PUT',\n      headers: {\n        ...(await this.authHeaders()),\n        'Content-Type': contentType,\n      },\n      body,\n    });\n    if (!res.ok) {\n      throw new Error(`Upload failed: HTTP ${res.status}`);\n    }\n  }\n}\n","import chalk from 'chalk';\nimport Table from 'cli-table3';\n\nexport type OutputFormat = 'json' | 'table';\n\nexport function formatOutput(data: unknown, format: OutputFormat): string {\n  if (format === 'json') {\n    return JSON.stringify(data, null, 2);\n  }\n\n  if (Array.isArray(data)) {\n    return formatTable(data as Record<string, unknown>[]);\n  }\n\n  if (typeof data === 'object' && data !== null) {\n    return formatKeyValue(data as Record<string, unknown>);\n  }\n\n  return String(data);\n}\n\nfunction formatTable(rows: Record<string, unknown>[]): string {\n  if (rows.length === 0) return chalk.dim('No results');\n\n  const keys = Object.keys(rows[0]!);\n  const table = new Table({ head: keys.map(k => chalk.bold(k)) });\n\n  for (const row of rows) {\n    table.push(keys.map(k => {\n      const val = row[k];\n      if (val === null || val === undefined) return '';\n      if (typeof val === 'object') return JSON.stringify(val);\n      return String(val);\n    }));\n  }\n\n  return table.toString();\n}\n\nfunction formatKeyValue(obj: Record<string, unknown>): string {\n  const table = new Table();\n  for (const [key, value] of Object.entries(obj)) {\n    const displayValue = typeof value === 'object' ? JSON.stringify(value) : String(value ?? '');\n    table.push({ [chalk.bold(key)]: displayValue });\n  }\n  return table.toString();\n}\n","import { readFileSync } from 'fs';\nimport { Command } from 'commander';\nimport { type OutputFormat } from './output.js';\n\nexport function parseData(data: string): Record<string, unknown> {\n  if (data.startsWith('@')) {\n    const content = readFileSync(data.slice(1), 'utf-8');\n    return JSON.parse(content) as Record<string, unknown>;\n  }\n  return JSON.parse(data) as Record<string, unknown>;\n}\n\nexport function getWorkspace(cmd: Command): string {\n  // Walk up the command chain to find --workspace on the root program\n  let current: Command | null = cmd;\n  while (current) {\n    const ws = current.opts().workspace as string | undefined;\n    if (ws) return ws;\n    current = current.parent;\n  }\n  console.error('Error: --workspace is required');\n  return process.exit(1);\n}\n\nexport function getFormat(cmd: Command): OutputFormat {\n  return (cmd.parent?.parent?.opts().output ?? cmd.parent?.opts().output ?? 'table') as OutputFormat;\n}\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const collectionsCommand = new Command('collections')\n  .description('Manage collections');\n\ncollectionsCommand.command('list')\n  .description('List all collections in a workspace')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/collections`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ncollectionsCommand.command('get <id>')\n  .description('Get a collection')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/collections/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ncollectionsCommand.command('upsert <id>')\n  .description('Create or update a collection')\n  .requiredOption('--name <name>', 'Collection name')\n  .option('--description <desc>', 'Description')\n  .option('--schema <json>', 'JSON Schema (inline JSON or @filename)')\n  .option('--icon <icon>', 'Icon name')\n  .option('--color <color>', 'Hex color')\n  .option('--sources <json>', 'External sources config (inline JSON or @filename)')\n  .action(async function (this: Command, id: string, opts: { name: string; description?: string; schema?: string; icon?: string; color?: string; sources?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const body: Record<string, unknown> = { name: opts.name };\n    if (opts.description) body['description'] = opts.description;\n    if (opts.schema) body['json_schema'] = parseData(opts.schema);\n    if (opts.icon) body['icon'] = opts.icon;\n    if (opts.color) body['color'] = opts.color;\n    if (opts.sources) body['sources'] = parseData(opts.sources);\n    const data = await client.request('PUT', `/v1/${ws}/collections/${id}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ncollectionsCommand.command('delete <id>')\n  .description('Delete a collection')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/collections/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const recordsCommand = new Command('records')\n  .description('Manage records');\n\nrecordsCommand.command('upsert <collection>')\n  .description('Create or update a record')\n  .requiredOption('--data <json>', 'Record data (inline JSON or @filename)')\n  .option('--id <id>', 'Internal record ID (UUID) to update a known record')\n  .option('--external-id <id>', 'External/agent-supplied ID for idempotent upsert')\n  .option('--external-source <source>', 'Source system for external_id (e.g. stripe)')\n  .action(async function (this: Command, collection: string, opts: { data: string; id?: string; externalId?: string; externalSource?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const body: Record<string, unknown> = { data: parseData(opts.data) };\n    if (opts.externalId) body['external_id'] = opts.externalId;\n    if (opts.externalSource) body['external_source'] = opts.externalSource;\n    const path = opts.id\n      ? `/v1/${ws}/records/${collection}/${opts.id}`\n      : `/v1/${ws}/records/${collection}`;\n    const data = await client.request('PUT', path, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrecordsCommand.command('get <collection> <id>')\n  .description('Get a record by ID')\n  .action(async function (this: Command, collection: string, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/records/${collection}/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrecordsCommand.command('delete <collection> <id>')\n  .description('Delete a record')\n  .action(async function (this: Command, collection: string, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/records/${collection}/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { readFileSync } from 'fs';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const sqlCommand = new Command('sql')\n  .description('Execute a read-only SQL query against workspace data')\n  .argument('[query]', 'SQL query (SELECT only)')\n  .option('--file <path>', 'Read SQL from a file instead of argument')\n  .option('--param <kv...>', 'Named parameters as key=value pairs (e.g., --param status=issued)')\n  .action(async function (this: Command, queryArg: string | undefined, opts: { file?: string; param?: string[] }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n\n    let query: string;\n    if (opts.file) {\n      query = readFileSync(opts.file, 'utf-8').trim();\n    } else if (queryArg) {\n      query = queryArg;\n    } else {\n      console.error('Error: provide a SQL query as argument or via --file');\n      process.exit(1);\n    }\n\n    const params: Record<string, unknown> = {};\n    if (opts.param) {\n      for (const kv of opts.param) {\n        const eqIdx = kv.indexOf('=');\n        if (eqIdx === -1) {\n          console.error(`Error: invalid param format \"${kv}\", expected key=value`);\n          process.exit(1);\n        }\n        params[kv.slice(0, eqIdx)] = kv.slice(eqIdx + 1);\n      }\n    }\n\n    const body: Record<string, unknown> = { query };\n    if (Object.keys(params).length > 0) body.params = params;\n\n    const data = await client.request('POST', `/v1/${ws}/sql`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const relationshipsCommand = new Command('relationships')\n  .description('Manage relationships between records');\n\nrelationshipsCommand.command('upsert')\n  .description('Create or update a relationship')\n  .requiredOption('--source <collection/id>', 'Source record (collection/id)')\n  .requiredOption('--target <collection/id>', 'Target record (collection/id)')\n  .requiredOption('--type <type>', 'Relationship type')\n  .option('--id <id>', 'Relationship ID')\n  .option('--data <json>', 'Relationship metadata (inline JSON or @filename)')\n  .action(async function (this: Command, opts: { source: string; target: string; type: string; id?: string; data?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const [sourceCollection, sourceId] = opts.source.split('/');\n    const [targetCollection, targetId] = opts.target.split('/');\n    const body: Record<string, unknown> = {\n      rel_type: opts.type,\n      source_collection: sourceCollection,\n      source_id: sourceId,\n      target_collection: targetCollection,\n      target_id: targetId,\n    };\n    if (opts.id) body['id'] = opts.id;\n    if (opts.data) body['data'] = parseData(opts.data);\n    const path = opts.id ? `/v1/${ws}/relationships/${opts.id}` : `/v1/${ws}/relationships`;\n    const data = await client.request('PUT', path, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrelationshipsCommand.command('get <id>')\n  .description('Get a relationship by ID')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/relationships/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nrelationshipsCommand.command('delete <id>')\n  .description('Delete a relationship')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/relationships/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const queryRelationshipsCommand = new Command('query-relationships')\n  .description('Query related records')\n  .argument('<collection>', 'Collection of the source record')\n  .argument('<id>', 'Source record ID')\n  .option('--type <type>', 'Filter by relationship type')\n  .option('--direction <dir>', 'Direction: outgoing, incoming, or both', 'both')\n  .option('--limit <n>', 'Max results', '50')\n  .option('--offset <n>', 'Skip results', '0')\n  .action(async function (this: Command, collection: string, id: string, opts: { type?: string; direction: string; limit: string; offset: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const params = new URLSearchParams();\n    if (opts.type) params.set('rel_type', opts.type);\n    // Map user-friendly direction names to backend API terms\n    const directionMap: Record<string, string> = { outgoing: 'source', incoming: 'target', both: 'both' };\n    params.set('direction', directionMap[opts.direction] ?? opts.direction);\n    params.set('limit', opts.limit);\n    params.set('offset', opts.offset);\n    const data = await client.request('GET', `/v1/${ws}/records/${collection}/${id}/related?${params.toString()}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { readFileSync } from 'node:fs';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const attachmentsCommand = new Command('attachments')\n  .description('Manage record attachments');\n\nattachmentsCommand.command('upload <collection> <id>')\n  .description('Get a presigned upload URL for a record attachment. With --file, uploads the file content in one step.')\n  .requiredOption('--filename <name>', 'File name or path (e.g. docs/guide.md)')\n  .option('--content-type <type>', 'MIME type', 'application/octet-stream')\n  .option('--file <path>', 'Local file to upload (skips presigned URL output, uploads directly)')\n  .action(async function (this: Command, collection: string, id: string, opts: { filename: string; contentType: string; file?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('POST', `/v1/${ws}/records/${collection}/${id}/attachments`, {\n      filename: opts.filename,\n      content_type: opts.contentType,\n    }) as { upload_url: string; [key: string]: unknown };\n\n    if (opts.file) {\n      const body = readFileSync(opts.file);\n      const uploadUrl = data.upload_url.startsWith('http') ? data.upload_url : `${client.baseUrl}${data.upload_url}`;\n      await client.uploadFile(uploadUrl, body, opts.contentType);\n      console.log(formatOutput({ ...data, uploaded: true }, getFormat(this)));\n    } else {\n      console.log(formatOutput(data, getFormat(this)));\n    }\n  });\n\nattachmentsCommand.command('url <collection> <id>')\n  .description('Get a download URL for an attachment by filename')\n  .requiredOption('--filename <name>', 'File name or path (e.g. docs/guide.md)')\n  .action(async function (this: Command, collection: string, id: string, opts: { filename: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const attachments = await client.request<Array<{ key: string; size: number; uploaded: string }>>('GET', `/v1/${ws}/records/${collection}/${id}/attachments`);\n    const match = attachments.find(a => a.key.endsWith(`/${opts.filename}`));\n    if (!match) {\n      throw new Error(`Attachment \"${opts.filename}\" not found`);\n    }\n    const downloadUrl = `${client.baseUrl}/v1/${ws}/attachments/${match.key}`;\n    console.log(formatOutput({ download_url: downloadUrl, ...match }, getFormat(this)));\n  });\n\nattachmentsCommand.command('list <collection> <id>')\n  .description('List attachments for a record')\n  .option('--prefix <path>', 'Filter by path prefix (e.g. docs/)')\n  .action(async function (this: Command, collection: string, id: string, opts: { prefix?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const query = opts.prefix ? `?prefix=${encodeURIComponent(opts.prefix)}` : '';\n    const data = await client.request('GET', `/v1/${ws}/records/${collection}/${id}/attachments${query}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nattachmentsCommand.command('delete <collection> <id> <attachment-id>')\n  .description('Delete an attachment')\n  .action(async function (this: Command, collection: string, id: string, attachmentId: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/records/${collection}/${id}/attachments/${attachmentId}`);\n    console.log('Deleted');\n  });\n","import { randomUUID } from 'crypto';\nimport { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const hooksCommand = new Command('hooks')\n  .description('Manage inbound webhook endpoints');\n\nhooksCommand.command('create')\n  .description('Create a new inbound hook')\n  .requiredOption('--name <name>', 'Hook name')\n  .requiredOption('--secret <secret>', 'HMAC shared secret')\n  .option('--id <id>', 'Hook ID (auto-generated if omitted)')\n  .option('--collection-scope <collections>', 'Comma-separated collection scope')\n  .action(async function (this: Command, opts: { name: string; secret: string; id?: string; collectionScope?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const hookId = opts.id ?? randomUUID();\n    const body: Record<string, unknown> = {\n      name: opts.name,\n      secret: opts.secret,\n      enabled: true,\n    };\n    if (opts.collectionScope) {\n      body['collection_scope'] = opts.collectionScope.split(',');\n    }\n    const data = await client.request('PUT', `/v1/${ws}/hooks/${hookId}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nhooksCommand.command('get <id>')\n  .description('Get a hook')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/hooks/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nhooksCommand.command('list')\n  .description('List all hooks')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/hooks`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nhooksCommand.command('delete <id>')\n  .description('Delete a hook')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/hooks/${id}`);\n    console.log('Deleted');\n  });\n","import { randomUUID } from 'crypto';\nimport { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const triggersCommand = new Command('triggers')\n  .description('Manage outbound triggers');\n\ntriggersCommand.command('create')\n  .description('Create an outbound trigger')\n  .requiredOption('--name <name>', 'Trigger name')\n  .requiredOption('--url <url>', 'Target URL')\n  .requiredOption('--secret <secret>', 'HMAC signing secret')\n  .requiredOption('--events <events>', 'Comma-separated event types')\n  .option('--id <id>', 'Trigger ID (auto-generated if omitted)')\n  .option('--collection-scope <collections>', 'Comma-separated collection scope')\n  .option('--filter <json>', 'Filter expression (JSON)')\n  .action(async function (this: Command, opts: { name: string; url: string; secret: string; events: string; id?: string; collectionScope?: string; filter?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const triggerId = opts.id ?? randomUUID();\n    const body: Record<string, unknown> = {\n      name: opts.name,\n      url: opts.url,\n      secret: opts.secret,\n      events: opts.events.split(','),\n      enabled: true,\n    };\n    if (opts.collectionScope) {\n      body['collection_scope'] = opts.collectionScope.split(',');\n    }\n    if (opts.filter) {\n      body['filter'] = JSON.parse(opts.filter);\n    }\n    const data = await client.request('PUT', `/v1/${ws}/triggers/${triggerId}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntriggersCommand.command('get <id>')\n  .description('Get a trigger')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/triggers/${id}`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntriggersCommand.command('list')\n  .description('List all triggers')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/triggers`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntriggersCommand.command('delete <id>')\n  .description('Delete a trigger')\n  .action(async function (this: Command, id: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/triggers/${id}`);\n    console.log('Deleted');\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getWorkspace, getFormat } from '../helpers.js';\n\nexport const endpointsCommand = new Command('endpoints')\n  .description('Manage MCP Factory endpoints');\n\nendpointsCommand.command('upsert <slug>')\n  .description('Create or update an MCP endpoint')\n  .option('--name <name>', 'Endpoint display name (required unless using --config)')\n  .option('--description <desc>', 'Endpoint description')\n  .option('--tool <spec>', 'Collection tool spec: collection:op1,op2 (repeatable)', collect, [])\n  .option('--relationship <spec>', 'Relationship tool spec: rel_type:op1,op2 (repeatable)', collect, [])\n  .option('--batch <spec>', 'Batch operation spec: collection_or_rel:op1,op2 (repeatable)', collect, [])\n  .option('--sql-query', 'Enable sql_query tool')\n  .option('--config <json>', 'Full endpoint config as JSON (supports name_override, description_override per tool). Use @file.json to read from file.')\n  .action(async function (this: Command, slug: string, opts: {\n    name?: string;\n    description?: string;\n    tool: string[];\n    relationship: string[];\n    batch: string[];\n    sqlQuery?: boolean;\n    config?: string;\n  }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n\n    let body: Record<string, unknown>;\n\n    if (opts.config) {\n      // Full JSON config — supports name_override, description_override per tool\n      body = JSON.parse(opts.config);\n    } else {\n      if (!opts.name) {\n        throw new Error('--name is required (or use --config for full JSON config)');\n      }\n      body = {\n        name: opts.name,\n        tools: opts.tool.map(parseToolSpec),\n      };\n\n      if (opts.description) body.description = opts.description;\n\n      if (opts.relationship.length > 0) {\n        body.relationships = opts.relationship.map(parseRelSpec);\n      }\n\n      if (opts.batch.length > 0) {\n        const operations: Record<string, string[]> = {};\n        for (const spec of opts.batch) {\n          const parsed = parseSpec(spec);\n          operations[parsed.key] = parsed.ops;\n        }\n        body.batch = { enabled: true, operations };\n      }\n\n      if (opts.sqlQuery) body.sql_query = true;\n    }\n\n    const data = await client.request('PUT', `/v1/${ws}/endpoints/${slug}`, body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nendpointsCommand.command('get <slug>')\n  .description('Get an endpoint')\n  .option('--resolved', 'Include resolved collection schemas')\n  .action(async function (this: Command, slug: string, opts: { resolved?: boolean }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const path = opts.resolved\n      ? `/v1/${ws}/endpoints/${slug}/resolved`\n      : `/v1/${ws}/endpoints/${slug}`;\n    const data = await client.request('GET', path);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nendpointsCommand.command('list')\n  .description('List all endpoints')\n  .action(async function (this: Command) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const data = await client.request('GET', `/v1/${ws}/endpoints`);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nendpointsCommand.command('delete <slug>')\n  .description('Delete an endpoint')\n  .action(async function (this: Command, slug: string) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/${ws}/endpoints/${slug}`);\n    console.log('Deleted');\n  });\n\nendpointsCommand.command('url <slug>')\n  .description('Get the MCP connection URL for an endpoint')\n  .option('--transport <type>', 'Transport: mcp or sse', 'mcp')\n  .action((_slug: string, opts: { transport: string }) => {\n    const transport = opts.transport === 'sse' ? 'sse' : 'mcp';\n    console.log(`https://mcp.rekor.pro/e/${_slug}/${transport}`);\n  });\n\n// ---- Helpers ----\n\nfunction collect(value: string, previous: string[]): string[] {\n  return [...previous, value];\n}\n\nfunction parseSpec(spec: string): { key: string; ops: string[] } {\n  const [key, opsStr] = spec.split(':');\n  if (!key || !opsStr) {\n    throw new Error(`Invalid spec '${spec}'. Expected format: name:op1,op2`);\n  }\n  return { key, ops: opsStr.split(',') };\n}\n\nfunction parseToolSpec(spec: string): Record<string, unknown> {\n  const { key, ops } = parseSpec(spec);\n  return { collection: key, operations: ops };\n}\n\nfunction parseRelSpec(spec: string): Record<string, unknown> {\n  const { key, ops } = parseSpec(spec);\n  return { rel_type: key, operations: ops };\n}\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\n\nexport const batchCommand = new Command('batch')\n  .description('Execute atomic batch operations (up to 1,000 operations)')\n  .requiredOption('--operations <json>', 'Operations array (inline JSON or @filename)')\n  .action(async function (this: Command, opts: { operations: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const operations = parseData(opts.operations);\n    const data = await client.request('POST', `/v1/${ws}/batch`, {\n      operations: Array.isArray(operations) ? operations : [operations],\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { parseData, getWorkspace, getFormat } from '../helpers.js';\nconst VALID_PROVIDERS = 'openai, anthropic, google, mcp';\n\nexport const providersCommand = new Command('providers')\n  .description('Import/export tool definitions between LLM providers and Record collections');\n\nprovidersCommand.command('import <provider>')\n  .description(`Import tool definitions as collections. Providers: ${VALID_PROVIDERS}`)\n  .requiredOption('--tools <json>', 'Tool definitions (inline JSON or @filename)')\n  .action(async function (this: Command, provider: string, opts: { tools: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const tools = parseData(opts.tools);\n    const data = await client.request('POST', `/v1/${ws}/providers/${provider}/import`, {\n      tools: Array.isArray(tools) ? tools : [tools],\n    });\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\nprovidersCommand.command('export <provider>')\n  .description(`Export collections as tool definitions. Providers: ${VALID_PROVIDERS}`)\n  .option('--collections <ids>', 'Comma-separated collection IDs (omit for all)')\n  .option('--output <file>', 'Write output to file')\n  .action(async function (this: Command, provider: string, opts: { collections?: string; output?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const query = opts.collections ? `?collections=${opts.collections}` : '';\n    const data = await client.request('GET', `/v1/${ws}/providers/${provider}/export${query}`);\n\n    if (opts.output) {\n      const { writeFileSync } = await import('fs');\n      writeFileSync(opts.output, JSON.stringify(data, null, 2));\n      console.log(`Written to ${opts.output}`);\n    } else {\n      console.log(formatOutput(data, getFormat(this)));\n    }\n  });\n\nprovidersCommand.command('import-call <provider> <collection>')\n  .description(`Create a record from a tool call in provider format. Providers: ${VALID_PROVIDERS}`)\n  .requiredOption('--data <json>', 'Tool call data in provider format (inline JSON or @filename)')\n  .option('--external-id <id>', 'External ID for idempotent upsert')\n  .option('--external-source <source>', 'External source identifier')\n  .action(async function (this: Command, provider: string, collection: string, opts: { data: string; externalId?: string; externalSource?: string }) {\n    const ws = getWorkspace(this);\n    const client = new ApiClient();\n    const callData = parseData(opts.data);\n    const queryParts: string[] = [];\n    if (opts.externalId) queryParts.push(`external_id=${encodeURIComponent(opts.externalId)}`);\n    if (opts.externalSource) queryParts.push(`external_source=${encodeURIComponent(opts.externalSource)}`);\n    const qs = queryParts.length ? `?${queryParts.join('&')}` : '';\n    const data = await client.request('POST', `/v1/${ws}/providers/${provider}/records/${collection}${qs}`, callData);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n","import { Command } from 'commander';\nimport { ApiClient } from '../client.js';\nimport { formatOutput } from '../output.js';\nimport { getFormat } from '../helpers.js';\n\nexport const tokensCommand = new Command('tokens')\n  .description('Manage API tokens');\n\ntokensCommand.command('create')\n  .description('Create a scoped API token')\n  .requiredOption('--name <name>', 'Token name')\n  .requiredOption('--grants <json>', 'Grant definitions as JSON array')\n  .option('--expires-at <date>', 'Expiration date (ISO 8601, e.g., 2026-06-01T00:00:00Z)')\n  .action(async function (this: Command, opts: { name: string; grants: string; expiresAt?: string }) {\n    const client = new ApiClient();\n    let grants: unknown;\n    try {\n      grants = JSON.parse(opts.grants);\n    } catch {\n      throw new Error('--grants must be valid JSON');\n    }\n    const body: Record<string, unknown> = { name: opts.name, grants };\n    if (opts.expiresAt) body.expires_at = opts.expiresAt;\n    const data = await client.request('POST', '/v1/tokens', body);\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntokensCommand.command('list')\n  .description('List API tokens')\n  .action(async function (this: Command) {\n    const client = new ApiClient();\n    const data = await client.request('GET', '/v1/tokens');\n    console.log(formatOutput(data, getFormat(this)));\n  });\n\ntokensCommand.command('revoke <token_id>')\n  .description('Revoke an API token')\n  .action(async function (this: Command, tokenId: string) {\n    const client = new ApiClient();\n    await client.request('DELETE', `/v1/tokens/${tokenId}`);\n    console.log('Token revoked');\n  });\n","{\n  \"name\": \"rekor-cli\",\n  \"version\": \"0.1.19\",\n  \"type\": \"module\",\n  \"engines\": {\n    \"node\": \">=20.0.0\"\n  },\n  \"bin\": {\n    \"rekor\": \"dist/index.js\"\n  },\n  \"files\": [\n    \"dist\"\n  ],\n  \"scripts\": {\n    \"build\": \"tsup\",\n    \"typecheck\": \"tsc --noEmit\",\n    \"test\": \"vitest run\",\n    \"dev\": \"tsup --watch\"\n  },\n  \"dependencies\": {\n    \"@napi-rs/keyring\": \"^1.1.6\",\n    \"chalk\": \"^5.4.1\",\n    \"cli-table3\": \"^0.6.5\",\n    \"commander\": \"^13.1.0\",\n    \"open\": \"^11.0.0\"\n  },\n  \"devDependencies\": {\n    \"@types/node\": \"^25.5.0\",\n    \"tsup\": \"^8.4.0\",\n    \"typescript\": \"^5.8.2\",\n    \"vitest\": \"~3.0.9\"\n  }\n}\n","import { program } from './program.js';\n\nprogram.parse();\n"],"mappings":";;;AAAA,SAAS,WAAAA,iBAAe;;;ACAxB,SAAS,eAAe;;;ACAxB,SAAS,cAAc,eAAe,iBAAiB;AACvD,SAAS,YAAY;AACrB,SAAS,eAAe;AAExB,IAAM,aAAa,KAAK,QAAQ,GAAG,WAAW,OAAO;AACrD,IAAM,cAAc,KAAK,YAAY,aAAa;AAc3C,SAAS,aAAqB;AACnC,QAAM,SAAS,QAAQ,IAAI,eAAe;AAE1C,MAAI;AACF,UAAM,MAAM,aAAa,aAAa,OAAO;AAC7C,UAAM,SAAS,KAAK,MAAM,GAAG;AAC7B,WAAO;AAAA,MACL,SAAS,UAAU,OAAO,WAAW;AAAA,MACrC,mBAAmB,OAAO;AAAA,MAC1B,QAAQ,OAAO;AAAA,IACjB;AAAA,EACF,QAAQ;AACN,WAAO;AAAA,MACL,SAAS,UAAU;AAAA,IACrB;AAAA,EACF;AACF;AAEO,SAAS,WAAW,QAAsB;AAC/C,YAAU,YAAY,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AACtD,MAAI,WAAuB,CAAC;AAC5B,MAAI;AACF,eAAW,KAAK,MAAM,aAAa,aAAa,OAAO,CAAC;AAAA,EAC1D,QAAQ;AACN,eAAW,CAAC;AAAA,EACd;AACA,QAAM,SAAqB,EAAE,GAAG,UAAU,GAAG,OAAO;AACpD,gBAAc,aAAa,KAAK,UAAU,QAAQ,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAC7E;;;AC/CA,YAAY,QAAQ;AAGpB,IAAM,kBAAkB;AACxB,IAAM,kBAAkB;AAQxB,IAAI;AAEJ,eAAe,aAA6C;AAC1D,MAAI,iBAAiB,OAAW,QAAO;AACvC,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,kBAAkB;AAC3C,UAAM,QAAQ,IAAI;AAClB,mBAAe;AAAA,MACb,MAAM,YAAY,SAAS,SAAS;AAClC,YAAI;AAAE,iBAAO,IAAI,MAAM,SAAS,OAAO,EAAE,YAAY;AAAA,QAAG,QAAQ;AAAE,iBAAO;AAAA,QAAM;AAAA,MACjF;AAAA,MACA,MAAM,YAAY,SAAS,SAAS,UAAU;AAC5C,YAAI,MAAM,SAAS,OAAO,EAAE,YAAY,QAAQ;AAAA,MAClD;AAAA,MACA,MAAM,eAAe,SAAS,SAAS;AACrC,YAAI;AAAE,iBAAO,IAAI,MAAM,SAAS,OAAO,EAAE,eAAe;AAAA,QAAG,QAAQ;AAAE,iBAAO;AAAA,QAAO;AAAA,MACrF;AAAA,IACF;AAAA,EACF,QAAQ;AACN,mBAAe;AAAA,EACjB;AACA,SAAO;AACT;AAEA,SAAS,uBAA+B;AACtC,MAAI,QAAQ,aAAa,UAAU;AACjC,WAAO,uCAAuC,eAAe,OAAO,eAAe;AAAA,EACrF;AACA,MAAI,QAAQ,aAAa,SAAS;AAChC,WAAO,kBAAkB,eAAe,IAAI,eAAe;AAAA,EAC7D;AACA,MAAI,QAAQ,aAAa,SAAS;AAChC,WAAO,6BAA6B,eAAe,YAAY,eAAe;AAAA,EAChF;AACA,SAAO,mCAAmC,eAAe,cAAc,eAAe;AACxF;AAUA,SAAS,iBAA0C;AACjD,MAAI,CAAI,cAAW,WAAW,EAAG,QAAO;AACxC,MAAI;AACF,WAAO,KAAK,MAAS,gBAAa,aAAa,OAAO,CAAC;AAAA,EACzD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEA,SAAS,gBAAgB,MAA8B;AACrD,MAAI,CAAI,cAAW,UAAU,GAAG;AAC9B,IAAG,aAAU,YAAY,EAAE,WAAW,MAAM,MAAM,IAAM,CAAC;AAAA,EAC3D;AACA,EAAG,iBAAc,aAAa,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG,EAAE,MAAM,IAAM,CAAC;AAC9E;AAEA,SAAS,qBAA2B;AAClC,QAAM,WAAW,eAAe;AAChC,MAAI,CAAC,YAAY,SAAS,UAAU,OAAW;AAC/C,SAAO,SAAS;AAChB,kBAAgB,QAAQ;AAC1B;AAEA,eAAe,mBAAmB,SAAwD;AACxF,QAAM,WAAW,eAAe;AAChC,MAAI,CAAC,UAAU,MAAO,QAAO;AAC7B,QAAM,QAAQ,SAAS;AACvB,MAAI,CAAC,QAAS,QAAO;AAErB,MAAI,kBAAkB;AACtB,MAAI;AACF,sBAAmB,MAAM,QAAQ,YAAY,iBAAiB,eAAe,MAAO;AAAA,EACtF,QAAQ;AACN,sBAAkB;AAAA,EACpB;AACA,MAAI,iBAAiB;AACnB,QAAI;AAAE,yBAAmB;AAAA,IAAG,SAAS,KAAK;AACxC,cAAQ,KAAK,2CAA2C,WAAW,KAAM,IAAc,OAAO,yBAAyB;AAAA,IACzH;AACA,WAAO;AAAA,EACT;AACA,MAAI;AACF,UAAM,QAAQ,YAAY,iBAAiB,iBAAiB,KAAK;AACjE,QAAI;AAAE,yBAAmB;AAAA,IAAG,SAAS,KAAK;AACxC,cAAQ,KAAK,4CAA4C,WAAW,KAAM,IAAc,OAAO,yBAAyB;AAAA,IAC1H;AAAA,EACF,SAAS,KAAK;AACZ,YAAQ,KAAK,oCAAqC,IAAc,OAAO,uCAAuC;AAAA,EAChH;AACA,SAAO;AACT;AAEA,eAAsB,WAAmC;AACvD,QAAM,WAAW,QAAQ,IAAI,aAAa;AAC1C,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,MAAM,WAAW;AAEjC,QAAM,WAAW,MAAM,mBAAmB,OAAO;AACjD,MAAI,SAAU,QAAO;AAErB,MAAI,SAAS;AACX,UAAM,SAAS,MAAM,QAAQ,YAAY,iBAAiB,eAAe;AACzE,QAAI,OAAQ,QAAO;AAAA,EACrB;AAEA,QAAM,WAAW,eAAe;AAChC,SAAO,UAAU,SAAS;AAC5B;AAEA,eAAsB,SAAS,OAA8B;AAC3D,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,SAAS;AACX,QAAI;AACF,YAAM,QAAQ,YAAY,iBAAiB,iBAAiB,KAAK;AACjE,UAAI;AAAE,2BAAmB;AAAA,MAAG,SAAS,KAAK;AACxC,gBAAQ,KAAK,2CAA2C,WAAW,KAAM,IAAc,OAAO,IAAI;AAAA,MACpG;AACA;AAAA,IACF,SAAS,KAAK;AACZ,cAAQ,KAAK,gCAAiC,IAAc,OAAO,kCAAkC;AAAA,IACvG;AAAA,EACF;AACA,QAAM,WAAW,eAAe,KAAK,CAAC;AACtC,WAAS,QAAQ;AACjB,kBAAgB,QAAQ;AAC1B;AAEA,eAAsB,aAA4B;AAChD,QAAM,UAAU,MAAM,WAAW;AACjC,MAAI,SAAS;AACX,UAAM,UAAU,MAAM,QAAQ,eAAe,iBAAiB,eAAe;AAE7E,QAAI,CAAC,SAAS;AACZ,UAAI,aAAa;AACjB,UAAI;AACF,qBAAc,MAAM,QAAQ,YAAY,iBAAiB,eAAe,MAAO;AAAA,MACjF,QAAQ;AACN,qBAAa;AAAA,MACf;AACA,UAAI,YAAY;AACd,gBAAQ;AAAA,UACN;AAAA,IAAyG,qBAAqB,CAAC;AAAA,QACjI;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,QAAM,WAAW,eAAe;AAChC,MAAI,YAAY,SAAS,UAAU,QAAW;AAC5C,WAAO,SAAS;AAChB,oBAAgB,QAAQ;AAAA,EAC1B;AACF;;;ACtKA,eAAsB,MAAM,OAAe,QAAgC;AACzE,QAAM,SAAS,KAAK;AACpB,QAAM,SAAS,WAAW;AAC1B,aAAW;AAAA,IACT,GAAG;AAAA,IACH,SAAS,UAAU,OAAO;AAAA,EAC5B,CAAC;AACH;;;ACVA,SAAS,oBAAoB;AAC7B,SAAS,mBAAmB;AAI5B,IAAM,kBAAkB;AACxB,IAAM,aAAa;AACZ,IAAM,wBAAwB;AAErC,eAAsB,aAAa,QAAgC;AACjE,QAAM,OAAO,MAAM,OAAO,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;AAEvD,QAAM,QAAQ,YAAY,EAAE,EAAE,SAAS,KAAK;AAC5C,QAAM,SAAS,WAAW;AAE1B,MAAI,UAAU;AAEd,SAAO,IAAI,QAAc,CAAC,SAAS,WAAW;AAC5C,UAAM,SAAS,aAAa,CAAC,KAAK,QAAQ;AACxC,YAAM,MAAM,IAAI,IAAI,IAAI,KAAM,kBAAkB;AAEhD,UAAI,IAAI,aAAa,aAAa;AAChC,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI;AACR;AAAA,MACF;AAGA,UAAI,SAAS;AACX,YAAI,UAAU,GAAG;AACjB,YAAI,IAAI;AACR;AAAA,MACF;AAEA,YAAM,QAAQ,IAAI,aAAa,IAAI,OAAO;AAC1C,YAAM,gBAAgB,IAAI,aAAa,IAAI,OAAO;AAElD,UAAI,kBAAkB,OAAO;AAC3B,kBAAU;AACV,YAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,YAAI,IAAI,UAAU,0DAA0D,CAAC;AAC7E,gBAAQ;AACR,eAAO,IAAI,MAAM,6CAAwC,CAAC;AAC1D;AAAA,MACF;AAEA,UAAI,CAAC,OAAO;AACV,kBAAU;AACV,YAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,YAAI,IAAI,UAAU,2CAA2C,CAAC;AAC9D,gBAAQ;AACR,eAAO,IAAI,MAAM,sBAAsB,CAAC;AACxC;AAAA,MACF;AAEA,gBAAU;AACV,YAAM,QAAQ,IAAI,aAAa,IAAI,QAAQ,KAAK;AAEhD,YAAM,UAAU,YAAY;AAC1B,cAAM,SAAS,KAAK;AACpB,mBAAW;AAAA,UACT,GAAG;AAAA,UACH,SAAS,UAAU,OAAO;AAAA,UAC1B,QAAQ;AAAA,QACV,CAAC;AAAA,MACH;AAEA,cAAQ,EAAE;AAAA,QACR,MAAM;AACJ,cAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,cAAI,IAAI,YAAY,CAAC;AACrB,kBAAQ;AACR,kBAAQ;AAAA,QACV;AAAA,QACA,CAAC,QAAe;AAEd,gBAAM,cAAc,IAAI,QAAQ,QAAQ,uBAAuB,gBAAgB;AAC/E,kBAAQ,MAAM,6CAAwC,WAAW,EAAE;AACnE,cAAI,UAAU,KAAK,EAAE,gBAAgB,YAAY,CAAC;AAClD,cAAI,IAAI,UAAU,+DAA+D,CAAC;AAClF,kBAAQ;AACR,iBAAO,GAAG;AAAA,QACZ;AAAA,MACF;AAAA,IACF,CAAC;AAED,UAAM,UAAU,WAAW,MAAM;AAC/B,cAAQ;AACR,aAAO,IAAI,MAAM,kEAA6D,CAAC;AAAA,IACjF,GAAG,UAAU;AAEb,QAAI;AACJ,QAAI,YAAY;AAEhB,aAAS,UAAU;AACjB,UAAI,UAAW;AACf,kBAAY;AACZ,mBAAa,OAAO;AACpB,UAAI,eAAe;AACjB,qBAAa,aAAa;AAC1B,wBAAgB;AAAA,MAClB;AACA,aAAO,MAAM;AAAA,IACf;AAEA,WAAO,OAAO,GAAG,aAAa,MAAM;AAClC,YAAM,OAAO,OAAO,QAAQ;AAC5B,UAAI,CAAC,QAAQ,OAAO,SAAS,UAAU;AACrC,gBAAQ;AACR,eAAO,IAAI,MAAM,8BAA8B,CAAC;AAChD;AAAA,MACF;AAEA,YAAM,OAAO,KAAK;AAClB,YAAM,SAAS,QAAQ,IAAI,eAAe,KAAK;AAC/C,YAAM,UAAU,GAAG,MAAM,kBAAkB,IAAI,UAAU,KAAK;AAE9D,cAAQ,IAAI,uCAAuC;AAGnD,sBAAgB,WAAW,MAAM;AAC/B,wBAAgB;AAChB,gBAAQ,IAAI,sCAAsC,OAAO,EAAE;AAAA,MAC7D,GAAG,qBAAqB;AAIxB,WAAK,OAAO,EAAE,MAAM,MAAM;AACxB,YAAI,CAAC,cAAe;AACpB,qBAAa,aAAa;AAC1B,wBAAgB;AAChB,gBAAQ,IAAI,uCAAuC;AACnD,gBAAQ,IAAI,UAAU,OAAO,EAAE;AAAA,MACjC,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,cAAsB;AAC7B,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUT;AAEA,SAAS,UAAU,SAAyB;AAC1C,SAAO;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kDAMyC,OAAO;AAAA;AAAA;AAAA;AAIzD;;;AJ9JO,IAAM,eAAe,IAAI,QAAQ,OAAO,EAC5C,YAAY,yBAAyB,EACrC,OAAO,mBAAmB,kDAAkD,EAC5E,OAAO,mBAAmB,cAAc,EACxC,OAAO,OAAO,SAA8C;AAC3D,MAAI,KAAK,OAAO;AACd,UAAM,MAAM,KAAK,OAAO,KAAK,MAAM;AACnC,YAAQ,IAAI,4BAA4B;AAAA,EAC1C,OAAO;AACL,QAAI;AACF,YAAM,aAAa,KAAK,MAAM;AAC9B,cAAQ,IAAI,4BAA4B;AAAA,IAC1C,SAAS,KAAK;AACZ,cAAQ;AAAA,QACN,iBAAiB,eAAe,QAAQ,IAAI,UAAU,eAAe;AAAA,MACvE;AACA,cAAQ,KAAK,CAAC;AAAA,IAChB;AAAA,EACF;AACF,CAAC;;;AKvBH,SAAS,WAAAC,gBAAe;AAGjB,IAAM,gBAAgB,IAAIC,SAAQ,QAAQ,EAC9C,YAAY,0CAA0C,EACtD,OAAO,YAAY;AAClB,QAAM,WAAW;AACjB,UAAQ,IAAI,yBAAyB;AACvC,CAAC;;;ACRH,SAAS,WAAAC,gBAAe;;;ACGjB,IAAM,YAAN,MAAgB;AAAA,EACZ;AAAA,EACD;AAAA,EAER,cAAc;AACZ,UAAM,SAAS,WAAW;AAC1B,SAAK,UAAU,OAAO;AAAA,EACxB;AAAA,EAEQ,WAAmC;AACzC,QAAI,CAAC,KAAK,cAAe,MAAK,gBAAgB,SAAS;AACvD,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAc,cAA+C;AAC3D,UAAM,QAAQ,MAAM,KAAK,SAAS;AAClC,WAAO,QAAQ,EAAE,iBAAiB,UAAU,KAAK,GAAG,IAAI,CAAC;AAAA,EAC3D;AAAA,EAEA,MAAM,QAAqB,QAAgB,MAAc,MAA4B;AACnF,UAAM,MAAM,MAAM,MAAM,GAAG,KAAK,OAAO,GAAG,IAAI,IAAI;AAAA,MAChD;AAAA,MACA,SAAS;AAAA,QACP,GAAI,MAAM,KAAK,YAAY;AAAA,QAC3B,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,OAAO,KAAK,UAAU,IAAI,IAAI;AAAA,IACtC,CAAC;AAED,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,KAAK,OAAO,WAAW,QAAQ,IAAI,MAAM,EAAE;AAAA,IAC7D;AACA,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,MAAM,WAAW,KAAa,MAAgB,aAAoC;AAChF,UAAM,MAAM,MAAM,MAAM,KAAK;AAAA,MAC3B,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,GAAI,MAAM,KAAK,YAAY;AAAA,QAC3B,gBAAgB;AAAA,MAClB;AAAA,MACA;AAAA,IACF,CAAC;AACD,QAAI,CAAC,IAAI,IAAI;AACX,YAAM,IAAI,MAAM,uBAAuB,IAAI,MAAM,EAAE;AAAA,IACrD;AAAA,EACF;AACF;;;ACpDA,OAAO,WAAW;AAClB,OAAO,WAAW;AAIX,SAAS,aAAa,MAAe,QAA8B;AACxE,MAAI,WAAW,QAAQ;AACrB,WAAO,KAAK,UAAU,MAAM,MAAM,CAAC;AAAA,EACrC;AAEA,MAAI,MAAM,QAAQ,IAAI,GAAG;AACvB,WAAO,YAAY,IAAiC;AAAA,EACtD;AAEA,MAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C,WAAO,eAAe,IAA+B;AAAA,EACvD;AAEA,SAAO,OAAO,IAAI;AACpB;AAEA,SAAS,YAAY,MAAyC;AAC5D,MAAI,KAAK,WAAW,EAAG,QAAO,MAAM,IAAI,YAAY;AAEpD,QAAM,OAAO,OAAO,KAAK,KAAK,CAAC,CAAE;AACjC,QAAM,QAAQ,IAAI,MAAM,EAAE,MAAM,KAAK,IAAI,OAAK,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;AAE9D,aAAW,OAAO,MAAM;AACtB,UAAM,KAAK,KAAK,IAAI,OAAK;AACvB,YAAM,MAAM,IAAI,CAAC;AACjB,UAAI,QAAQ,QAAQ,QAAQ,OAAW,QAAO;AAC9C,UAAI,OAAO,QAAQ,SAAU,QAAO,KAAK,UAAU,GAAG;AACtD,aAAO,OAAO,GAAG;AAAA,IACnB,CAAC,CAAC;AAAA,EACJ;AAEA,SAAO,MAAM,SAAS;AACxB;AAEA,SAAS,eAAe,KAAsC;AAC5D,QAAM,QAAQ,IAAI,MAAM;AACxB,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,UAAM,eAAe,OAAO,UAAU,WAAW,KAAK,UAAU,KAAK,IAAI,OAAO,SAAS,EAAE;AAC3F,UAAM,KAAK,EAAE,CAAC,MAAM,KAAK,GAAG,CAAC,GAAG,aAAa,CAAC;AAAA,EAChD;AACA,SAAO,MAAM,SAAS;AACxB;;;AC9CA,SAAS,gBAAAC,qBAAoB;AAItB,SAAS,UAAU,MAAuC;AAC/D,MAAI,KAAK,WAAW,GAAG,GAAG;AACxB,UAAM,UAAUA,cAAa,KAAK,MAAM,CAAC,GAAG,OAAO;AACnD,WAAO,KAAK,MAAM,OAAO;AAAA,EAC3B;AACA,SAAO,KAAK,MAAM,IAAI;AACxB;AAEO,SAAS,aAAa,KAAsB;AAEjD,MAAI,UAA0B;AAC9B,SAAO,SAAS;AACd,UAAM,KAAK,QAAQ,KAAK,EAAE;AAC1B,QAAI,GAAI,QAAO;AACf,cAAU,QAAQ;AAAA,EACpB;AACA,UAAQ,MAAM,gCAAgC;AAC9C,SAAO,QAAQ,KAAK,CAAC;AACvB;AAEO,SAAS,UAAU,KAA4B;AACpD,SAAQ,IAAI,QAAQ,QAAQ,KAAK,EAAE,UAAU,IAAI,QAAQ,KAAK,EAAE,UAAU;AAC5E;;;AHrBO,IAAM,oBAAoB,IAAIC,SAAQ,YAAY,EACtD,YAAY,mBAAmB;AAElC,kBAAkB,QAAQ,MAAM,EAC7B,YAAY,qBAAqB,EACjC,OAAO,eAAe,eAAe,EACrC,OAAO,eAA+B,MAAwB;AAC7D,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,KAAK,KAAK,MAAM,QAAQ,mBAAmB,KAAK,GAAG,CAAC,KAAK;AAC/D,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,iBAAiB,EAAE,EAAE;AAC9D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,UAAU,EACjC,YAAY,iBAAiB,EAC7B,OAAO,eAA+B,IAAY;AACjD,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,kBAAkB,EAAE,EAAE;AAC/D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,aAAa,EACpC,YAAY,oBAAoB,EAChC,eAAe,iBAAiB,gBAAgB,EAChD,OAAO,wBAAwB,aAAa,EAC5C,OAAO,iBAAiB,kDAAkD,EAC1E,OAAO,eAA+B,IAAY,MAA6D;AAC9G,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAgC;AAAA,IACpC,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,EACpB;AACA,MAAI,KAAK,MAAM;AACb,SAAK,MAAM,IAAI,KAAK,KAAK,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AAAA,EACvD;AACA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,kBAAkB,EAAE,IAAI,IAAI;AACrE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,UAAU,EACjC,YAAY,yBAAyB,EACrC,eAAe,iBAAiB,kDAAkD,EAClF,OAAO,eAA+B,IAAY,MAAwB;AACzE,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,kBAAkB,EAAE,IAAI;AAAA,IAC/D,MAAM,KAAK,KAAK,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC;AAAA,EAC9C,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,aAAa,EACpC,YAAY,oBAAoB,EAChC,OAAO,OAAO,QAAgB;AAC7B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,kBAAkB,GAAG,EAAE;AACtD,UAAQ,IAAI,SAAS;AACvB,CAAC;AAIH,kBAAkB,QAAQ,gCAAgC,EACvD,YAAY,6DAA6D,EACzE,eAAe,iBAAiB,wBAAwB,EACxD,OAAO,wBAAwB,aAAa,EAC5C,OAAO,eAA+B,cAAsB,MAA8C;AACzG,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,YAAY,YAAY;AAAA,IACvE,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,EACpB,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,+BAA+B,EACtD,YAAY,oDAAoD,EAChE,OAAO,eAA+B,cAAsB;AAC3D,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,YAAY,WAAW;AACvE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,yBAAyB,EAChD,YAAY,oEAAoE,EAChF,eAAe,uBAAuB,6BAA6B,EACnE,OAAO,aAAa,yCAAyC,EAC7D,OAAO,uBAAuB,6CAA6C,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC,EACtG,OAAO,oBAAoB,0CAA0C,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC,EAChG,OAAO,iBAAiB,uCAAuC,CAAC,MAAc,EAAE,MAAM,GAAG,CAAC,EAC1F,OAAO,eAEN,cACA,MACA;AACA,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,YAAY,YAAY;AAAA,IACvE,qBAAqB,KAAK;AAAA,IAC1B,SAAS,KAAK,UAAU;AAAA,IACxB,aAAa,KAAK;AAAA,IAClB,UAAU,KAAK;AAAA,IACf,OAAO,KAAK;AAAA,EACd,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,0BAA0B,EACjD,YAAY,mCAAmC,EAC/C,eAAe,8BAA8B,0BAA0B,EACvE,OAAO,eAA+B,cAAsB,MAA6B;AACxF,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,YAAY,qBAAqB;AAAA,IAChF,cAAc,KAAK;AAAA,EACrB,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,kBAAkB,QAAQ,4BAA4B,EACnD,YAAY,mDAAmD,EAC/D,OAAO,eAA+B,cAAsB;AAC3D,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,YAAY,aAAa;AACzE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;AI9HH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,qBAAqB,IAAIC,SAAQ,aAAa,EACxD,YAAY,oBAAoB;AAEnC,mBAAmB,QAAQ,MAAM,EAC9B,YAAY,qCAAqC,EACjD,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,cAAc;AAChE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,UAAU,EAClC,YAAY,kBAAkB,EAC9B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,gBAAgB,EAAE,EAAE;AACtE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,aAAa,EACrC,YAAY,+BAA+B,EAC3C,eAAe,iBAAiB,iBAAiB,EACjD,OAAO,wBAAwB,aAAa,EAC5C,OAAO,mBAAmB,wCAAwC,EAClE,OAAO,iBAAiB,WAAW,EACnC,OAAO,mBAAmB,WAAW,EACrC,OAAO,oBAAoB,oDAAoD,EAC/E,OAAO,eAA+B,IAAY,MAAgH;AACjK,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAgC,EAAE,MAAM,KAAK,KAAK;AACxD,MAAI,KAAK,YAAa,MAAK,aAAa,IAAI,KAAK;AACjD,MAAI,KAAK,OAAQ,MAAK,aAAa,IAAI,UAAU,KAAK,MAAM;AAC5D,MAAI,KAAK,KAAM,MAAK,MAAM,IAAI,KAAK;AACnC,MAAI,KAAK,MAAO,MAAK,OAAO,IAAI,KAAK;AACrC,MAAI,KAAK,QAAS,MAAK,SAAS,IAAI,UAAU,KAAK,OAAO;AAC1D,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,gBAAgB,EAAE,IAAI,IAAI;AAC5E,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,aAAa,EACrC,YAAY,qBAAqB,EACjC,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,gBAAgB,EAAE,EAAE;AAC5D,UAAQ,IAAI,SAAS;AACvB,CAAC;;;ACtDH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,iBAAiB,IAAIC,SAAQ,SAAS,EAChD,YAAY,gBAAgB;AAE/B,eAAe,QAAQ,qBAAqB,EACzC,YAAY,2BAA2B,EACvC,eAAe,iBAAiB,wCAAwC,EACxE,OAAO,aAAa,oDAAoD,EACxE,OAAO,sBAAsB,kDAAkD,EAC/E,OAAO,8BAA8B,6CAA6C,EAClF,OAAO,eAA+B,YAAoB,MAAmF;AAC5I,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAgC,EAAE,MAAM,UAAU,KAAK,IAAI,EAAE;AACnE,MAAI,KAAK,WAAY,MAAK,aAAa,IAAI,KAAK;AAChD,MAAI,KAAK,eAAgB,MAAK,iBAAiB,IAAI,KAAK;AACxD,QAAM,OAAO,KAAK,KACd,OAAO,EAAE,YAAY,UAAU,IAAI,KAAK,EAAE,KAC1C,OAAO,EAAE,YAAY,UAAU;AACnC,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,MAAM,IAAI;AACnD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,eAAe,QAAQ,uBAAuB,EAC3C,YAAY,oBAAoB,EAChC,OAAO,eAA+B,YAAoB,IAAY;AACrE,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,EAAE;AAChF,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,eAAe,QAAQ,0BAA0B,EAC9C,YAAY,iBAAiB,EAC7B,OAAO,eAA+B,YAAoB,IAAY;AACrE,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,EAAE;AACtE,UAAQ,IAAI,SAAS;AACvB,CAAC;;;AC3CH,SAAS,WAAAC,gBAAe;AACxB,SAAS,gBAAAC,qBAAoB;AAKtB,IAAM,aAAa,IAAIC,SAAQ,KAAK,EACxC,YAAY,sDAAsD,EAClE,SAAS,WAAW,yBAAyB,EAC7C,OAAO,iBAAiB,0CAA0C,EAClE,OAAO,mBAAmB,mEAAmE,EAC7F,OAAO,eAA+B,UAA8B,MAA2C;AAC9G,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAE7B,MAAI;AACJ,MAAI,KAAK,MAAM;AACb,YAAQC,cAAa,KAAK,MAAM,OAAO,EAAE,KAAK;AAAA,EAChD,WAAW,UAAU;AACnB,YAAQ;AAAA,EACV,OAAO;AACL,YAAQ,MAAM,sDAAsD;AACpE,YAAQ,KAAK,CAAC;AAAA,EAChB;AAEA,QAAM,SAAkC,CAAC;AACzC,MAAI,KAAK,OAAO;AACd,eAAW,MAAM,KAAK,OAAO;AAC3B,YAAM,QAAQ,GAAG,QAAQ,GAAG;AAC5B,UAAI,UAAU,IAAI;AAChB,gBAAQ,MAAM,gCAAgC,EAAE,uBAAuB;AACvE,gBAAQ,KAAK,CAAC;AAAA,MAChB;AACA,aAAO,GAAG,MAAM,GAAG,KAAK,CAAC,IAAI,GAAG,MAAM,QAAQ,CAAC;AAAA,IACjD;AAAA,EACF;AAEA,QAAM,OAAgC,EAAE,MAAM;AAC9C,MAAI,OAAO,KAAK,MAAM,EAAE,SAAS,EAAG,MAAK,SAAS;AAElD,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,QAAQ,IAAI;AAC/D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;AC1CH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,uBAAuB,IAAIC,SAAQ,eAAe,EAC5D,YAAY,sCAAsC;AAErD,qBAAqB,QAAQ,QAAQ,EAClC,YAAY,iCAAiC,EAC7C,eAAe,4BAA4B,+BAA+B,EAC1E,eAAe,4BAA4B,+BAA+B,EAC1E,eAAe,iBAAiB,mBAAmB,EACnD,OAAO,aAAa,iBAAiB,EACrC,OAAO,iBAAiB,kDAAkD,EAC1E,OAAO,eAA+B,MAAoF;AACzH,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,CAAC,kBAAkB,QAAQ,IAAI,KAAK,OAAO,MAAM,GAAG;AAC1D,QAAM,CAAC,kBAAkB,QAAQ,IAAI,KAAK,OAAO,MAAM,GAAG;AAC1D,QAAM,OAAgC;AAAA,IACpC,UAAU,KAAK;AAAA,IACf,mBAAmB;AAAA,IACnB,WAAW;AAAA,IACX,mBAAmB;AAAA,IACnB,WAAW;AAAA,EACb;AACA,MAAI,KAAK,GAAI,MAAK,IAAI,IAAI,KAAK;AAC/B,MAAI,KAAK,KAAM,MAAK,MAAM,IAAI,UAAU,KAAK,IAAI;AACjD,QAAM,OAAO,KAAK,KAAK,OAAO,EAAE,kBAAkB,KAAK,EAAE,KAAK,OAAO,EAAE;AACvE,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,MAAM,IAAI;AACnD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,qBAAqB,QAAQ,UAAU,EACpC,YAAY,0BAA0B,EACtC,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,kBAAkB,EAAE,EAAE;AACxE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,qBAAqB,QAAQ,aAAa,EACvC,YAAY,uBAAuB,EACnC,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,kBAAkB,EAAE,EAAE;AAC9D,UAAQ,IAAI,SAAS;AACvB,CAAC;;;AClDH,SAAS,WAAAC,gBAAe;AAKjB,IAAM,4BAA4B,IAAIC,SAAQ,qBAAqB,EACvE,YAAY,uBAAuB,EACnC,SAAS,gBAAgB,iCAAiC,EAC1D,SAAS,QAAQ,kBAAkB,EACnC,OAAO,iBAAiB,6BAA6B,EACrD,OAAO,qBAAqB,0CAA0C,MAAM,EAC5E,OAAO,eAAe,eAAe,IAAI,EACzC,OAAO,gBAAgB,gBAAgB,GAAG,EAC1C,OAAO,eAA+B,YAAoB,IAAY,MAA2E;AAChJ,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,SAAS,IAAI,gBAAgB;AACnC,MAAI,KAAK,KAAM,QAAO,IAAI,YAAY,KAAK,IAAI;AAE/C,QAAM,eAAuC,EAAE,UAAU,UAAU,UAAU,UAAU,MAAM,OAAO;AACpG,SAAO,IAAI,aAAa,aAAa,KAAK,SAAS,KAAK,KAAK,SAAS;AACtE,SAAO,IAAI,SAAS,KAAK,KAAK;AAC9B,SAAO,IAAI,UAAU,KAAK,MAAM;AAChC,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,YAAY,OAAO,SAAS,CAAC,EAAE;AAC7G,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;ACzBH,SAAS,WAAAC,gBAAe;AACxB,SAAS,gBAAAC,qBAAoB;AAKtB,IAAM,qBAAqB,IAAIC,SAAQ,aAAa,EACxD,YAAY,2BAA2B;AAE1C,mBAAmB,QAAQ,0BAA0B,EAClD,YAAY,wGAAwG,EACpH,eAAe,qBAAqB,wCAAwC,EAC5E,OAAO,yBAAyB,aAAa,0BAA0B,EACvE,OAAO,iBAAiB,qEAAqE,EAC7F,OAAO,eAA+B,YAAoB,IAAY,MAAgE;AACrI,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,gBAAgB;AAAA,IAC7F,UAAU,KAAK;AAAA,IACf,cAAc,KAAK;AAAA,EACrB,CAAC;AAED,MAAI,KAAK,MAAM;AACb,UAAM,OAAOC,cAAa,KAAK,IAAI;AACnC,UAAM,YAAY,KAAK,WAAW,WAAW,MAAM,IAAI,KAAK,aAAa,GAAG,OAAO,OAAO,GAAG,KAAK,UAAU;AAC5G,UAAM,OAAO,WAAW,WAAW,MAAM,KAAK,WAAW;AACzD,YAAQ,IAAI,aAAa,EAAE,GAAG,MAAM,UAAU,KAAK,GAAG,UAAU,IAAI,CAAC,CAAC;AAAA,EACxE,OAAO;AACL,YAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AAAA,EACjD;AACF,CAAC;AAEH,mBAAmB,QAAQ,uBAAuB,EAC/C,YAAY,kDAAkD,EAC9D,eAAe,qBAAqB,wCAAwC,EAC5E,OAAO,eAA+B,YAAoB,IAAY,MAA4B;AACjG,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,cAAc,MAAM,OAAO,QAAgE,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,cAAc;AAC3J,QAAM,QAAQ,YAAY,KAAK,OAAK,EAAE,IAAI,SAAS,IAAI,KAAK,QAAQ,EAAE,CAAC;AACvE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,MAAM,eAAe,KAAK,QAAQ,aAAa;AAAA,EAC3D;AACA,QAAM,cAAc,GAAG,OAAO,OAAO,OAAO,EAAE,gBAAgB,MAAM,GAAG;AACvE,UAAQ,IAAI,aAAa,EAAE,cAAc,aAAa,GAAG,MAAM,GAAG,UAAU,IAAI,CAAC,CAAC;AACpF,CAAC;AAEH,mBAAmB,QAAQ,wBAAwB,EAChD,YAAY,+BAA+B,EAC3C,OAAO,mBAAmB,oCAAoC,EAC9D,OAAO,eAA+B,YAAoB,IAAY,MAA2B;AAChG,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,QAAQ,KAAK,SAAS,WAAW,mBAAmB,KAAK,MAAM,CAAC,KAAK;AAC3E,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,eAAe,KAAK,EAAE;AACpG,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,mBAAmB,QAAQ,0CAA0C,EAClE,YAAY,sBAAsB,EAClC,OAAO,eAA+B,YAAoB,IAAY,cAAsB;AAC3F,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,YAAY,UAAU,IAAI,EAAE,gBAAgB,YAAY,EAAE;AAClG,UAAQ,IAAI,SAAS;AACvB,CAAC;;;ACjEH,SAAS,kBAAkB;AAC3B,SAAS,WAAAC,iBAAe;AAKjB,IAAM,eAAe,IAAIC,UAAQ,OAAO,EAC5C,YAAY,kCAAkC;AAEjD,aAAa,QAAQ,QAAQ,EAC1B,YAAY,2BAA2B,EACvC,eAAe,iBAAiB,WAAW,EAC3C,eAAe,qBAAqB,oBAAoB,EACxD,OAAO,aAAa,qCAAqC,EACzD,OAAO,oCAAoC,kCAAkC,EAC7E,OAAO,eAA+B,MAA+E;AACpH,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,SAAS,KAAK,MAAM,WAAW;AACrC,QAAM,OAAgC;AAAA,IACpC,MAAM,KAAK;AAAA,IACX,QAAQ,KAAK;AAAA,IACb,SAAS;AAAA,EACX;AACA,MAAI,KAAK,iBAAiB;AACxB,SAAK,kBAAkB,IAAI,KAAK,gBAAgB,MAAM,GAAG;AAAA,EAC3D;AACA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,UAAU,MAAM,IAAI,IAAI;AAC1E,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,aAAa,QAAQ,UAAU,EAC5B,YAAY,YAAY,EACxB,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,UAAU,EAAE,EAAE;AAChE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,aAAa,QAAQ,MAAM,EACxB,YAAY,gBAAgB,EAC5B,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,QAAQ;AAC1D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,aAAa,QAAQ,aAAa,EAC/B,YAAY,eAAe,EAC3B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,UAAU,EAAE,EAAE;AACtD,UAAQ,IAAI,SAAS;AACvB,CAAC;;;ACxDH,SAAS,cAAAC,mBAAkB;AAC3B,SAAS,WAAAC,iBAAe;AAKjB,IAAM,kBAAkB,IAAIC,UAAQ,UAAU,EAClD,YAAY,0BAA0B;AAEzC,gBAAgB,QAAQ,QAAQ,EAC7B,YAAY,4BAA4B,EACxC,eAAe,iBAAiB,cAAc,EAC9C,eAAe,eAAe,YAAY,EAC1C,eAAe,qBAAqB,qBAAqB,EACzD,eAAe,qBAAqB,6BAA6B,EACjE,OAAO,aAAa,wCAAwC,EAC5D,OAAO,oCAAoC,kCAAkC,EAC7E,OAAO,mBAAmB,0BAA0B,EACpD,OAAO,eAA+B,MAA6H;AAClK,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,YAAY,KAAK,MAAMC,YAAW;AACxC,QAAM,OAAgC;AAAA,IACpC,MAAM,KAAK;AAAA,IACX,KAAK,KAAK;AAAA,IACV,QAAQ,KAAK;AAAA,IACb,QAAQ,KAAK,OAAO,MAAM,GAAG;AAAA,IAC7B,SAAS;AAAA,EACX;AACA,MAAI,KAAK,iBAAiB;AACxB,SAAK,kBAAkB,IAAI,KAAK,gBAAgB,MAAM,GAAG;AAAA,EAC3D;AACA,MAAI,KAAK,QAAQ;AACf,SAAK,QAAQ,IAAI,KAAK,MAAM,KAAK,MAAM;AAAA,EACzC;AACA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,aAAa,SAAS,IAAI,IAAI;AAChF,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,gBAAgB,QAAQ,UAAU,EAC/B,YAAY,eAAe,EAC3B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,aAAa,EAAE,EAAE;AACnE,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,gBAAgB,QAAQ,MAAM,EAC3B,YAAY,mBAAmB,EAC/B,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,WAAW;AAC7D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,gBAAgB,QAAQ,aAAa,EAClC,YAAY,kBAAkB,EAC9B,OAAO,eAA+B,IAAY;AACjD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,aAAa,EAAE,EAAE;AACzD,UAAQ,IAAI,SAAS;AACvB,CAAC;;;AChEH,SAAS,WAAAC,iBAAe;AAKjB,IAAM,mBAAmB,IAAIC,UAAQ,WAAW,EACpD,YAAY,8BAA8B;AAE7C,iBAAiB,QAAQ,eAAe,EACrC,YAAY,kCAAkC,EAC9C,OAAO,iBAAiB,wDAAwD,EAChF,OAAO,wBAAwB,sBAAsB,EACrD,OAAO,iBAAiB,yDAAyD,SAAS,CAAC,CAAC,EAC5F,OAAO,yBAAyB,yDAAyD,SAAS,CAAC,CAAC,EACpG,OAAO,kBAAkB,gEAAgE,SAAS,CAAC,CAAC,EACpG,OAAO,eAAe,uBAAuB,EAC7C,OAAO,mBAAmB,yHAAyH,EACnJ,OAAO,eAA+B,MAAc,MAQlD;AACD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAE7B,MAAI;AAEJ,MAAI,KAAK,QAAQ;AAEf,WAAO,KAAK,MAAM,KAAK,MAAM;AAAA,EAC/B,OAAO;AACL,QAAI,CAAC,KAAK,MAAM;AACd,YAAM,IAAI,MAAM,2DAA2D;AAAA,IAC7E;AACA,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,OAAO,KAAK,KAAK,IAAI,aAAa;AAAA,IACpC;AAEA,QAAI,KAAK,YAAa,MAAK,cAAc,KAAK;AAE9C,QAAI,KAAK,aAAa,SAAS,GAAG;AAChC,WAAK,gBAAgB,KAAK,aAAa,IAAI,YAAY;AAAA,IACzD;AAEA,QAAI,KAAK,MAAM,SAAS,GAAG;AACzB,YAAM,aAAuC,CAAC;AAC9C,iBAAW,QAAQ,KAAK,OAAO;AAC7B,cAAM,SAAS,UAAU,IAAI;AAC7B,mBAAW,OAAO,GAAG,IAAI,OAAO;AAAA,MAClC;AACA,WAAK,QAAQ,EAAE,SAAS,MAAM,WAAW;AAAA,IAC3C;AAEA,QAAI,KAAK,SAAU,MAAK,YAAY;AAAA,EACtC;AAEA,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,cAAc,IAAI,IAAI,IAAI;AAC5E,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,YAAY,EAClC,YAAY,iBAAiB,EAC7B,OAAO,cAAc,qCAAqC,EAC1D,OAAO,eAA+B,MAAc,MAA8B;AACjF,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,KAAK,WACd,OAAO,EAAE,cAAc,IAAI,cAC3B,OAAO,EAAE,cAAc,IAAI;AAC/B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,IAAI;AAC7C,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,MAAM,EAC5B,YAAY,oBAAoB,EAChC,OAAO,iBAA+B;AACrC,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,YAAY;AAC9D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,eAAe,EACrC,YAAY,oBAAoB,EAChC,OAAO,eAA+B,MAAc;AACnD,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,OAAO,EAAE,cAAc,IAAI,EAAE;AAC5D,UAAQ,IAAI,SAAS;AACvB,CAAC;AAEH,iBAAiB,QAAQ,YAAY,EAClC,YAAY,4CAA4C,EACxD,OAAO,sBAAsB,yBAAyB,KAAK,EAC3D,OAAO,CAAC,OAAe,SAAgC;AACtD,QAAM,YAAY,KAAK,cAAc,QAAQ,QAAQ;AACrD,UAAQ,IAAI,2BAA2B,KAAK,IAAI,SAAS,EAAE;AAC7D,CAAC;AAIH,SAAS,QAAQ,OAAe,UAA8B;AAC5D,SAAO,CAAC,GAAG,UAAU,KAAK;AAC5B;AAEA,SAAS,UAAU,MAA8C;AAC/D,QAAM,CAAC,KAAK,MAAM,IAAI,KAAK,MAAM,GAAG;AACpC,MAAI,CAAC,OAAO,CAAC,QAAQ;AACnB,UAAM,IAAI,MAAM,iBAAiB,IAAI,kCAAkC;AAAA,EACzE;AACA,SAAO,EAAE,KAAK,KAAK,OAAO,MAAM,GAAG,EAAE;AACvC;AAEA,SAAS,cAAc,MAAuC;AAC5D,QAAM,EAAE,KAAK,IAAI,IAAI,UAAU,IAAI;AACnC,SAAO,EAAE,YAAY,KAAK,YAAY,IAAI;AAC5C;AAEA,SAAS,aAAa,MAAuC;AAC3D,QAAM,EAAE,KAAK,IAAI,IAAI,UAAU,IAAI;AACnC,SAAO,EAAE,UAAU,KAAK,YAAY,IAAI;AAC1C;;;AC9HA,SAAS,WAAAC,iBAAe;AAKjB,IAAM,eAAe,IAAIC,UAAQ,OAAO,EAC5C,YAAY,0DAA0D,EACtE,eAAe,uBAAuB,6CAA6C,EACnF,OAAO,eAA+B,MAA8B;AACnE,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,aAAa,UAAU,KAAK,UAAU;AAC5C,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,UAAU;AAAA,IAC3D,YAAY,MAAM,QAAQ,UAAU,IAAI,aAAa,CAAC,UAAU;AAAA,EAClE,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;AChBH,SAAS,WAAAC,iBAAe;AAIxB,IAAM,kBAAkB;AAEjB,IAAM,mBAAmB,IAAIC,UAAQ,WAAW,EACpD,YAAY,6EAA6E;AAE5F,iBAAiB,QAAQ,mBAAmB,EACzC,YAAY,sDAAsD,eAAe,EAAE,EACnF,eAAe,kBAAkB,6CAA6C,EAC9E,OAAO,eAA+B,UAAkB,MAAyB;AAChF,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,QAAQ,UAAU,KAAK,KAAK;AAClC,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,cAAc,QAAQ,WAAW;AAAA,IAClF,OAAO,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC,KAAK;AAAA,EAC9C,CAAC;AACD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,iBAAiB,QAAQ,mBAAmB,EACzC,YAAY,sDAAsD,eAAe,EAAE,EACnF,OAAO,uBAAuB,+CAA+C,EAC7E,OAAO,mBAAmB,sBAAsB,EAChD,OAAO,eAA+B,UAAkB,MAAiD;AACxG,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,QAAQ,KAAK,cAAc,gBAAgB,KAAK,WAAW,KAAK;AACtE,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,OAAO,EAAE,cAAc,QAAQ,UAAU,KAAK,EAAE;AAEzF,MAAI,KAAK,QAAQ;AACf,UAAM,EAAE,eAAAC,eAAc,IAAI,MAAM,OAAO,IAAI;AAC3C,IAAAA,eAAc,KAAK,QAAQ,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC;AACxD,YAAQ,IAAI,cAAc,KAAK,MAAM,EAAE;AAAA,EACzC,OAAO;AACL,YAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AAAA,EACjD;AACF,CAAC;AAEH,iBAAiB,QAAQ,qCAAqC,EAC3D,YAAY,mEAAmE,eAAe,EAAE,EAChG,eAAe,iBAAiB,8DAA8D,EAC9F,OAAO,sBAAsB,mCAAmC,EAChE,OAAO,8BAA8B,4BAA4B,EACjE,OAAO,eAA+B,UAAkB,YAAoB,MAAsE;AACjJ,QAAM,KAAK,aAAa,IAAI;AAC5B,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,WAAW,UAAU,KAAK,IAAI;AACpC,QAAM,aAAuB,CAAC;AAC9B,MAAI,KAAK,WAAY,YAAW,KAAK,eAAe,mBAAmB,KAAK,UAAU,CAAC,EAAE;AACzF,MAAI,KAAK,eAAgB,YAAW,KAAK,mBAAmB,mBAAmB,KAAK,cAAc,CAAC,EAAE;AACrG,QAAM,KAAK,WAAW,SAAS,IAAI,WAAW,KAAK,GAAG,CAAC,KAAK;AAC5D,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,OAAO,EAAE,cAAc,QAAQ,YAAY,UAAU,GAAG,EAAE,IAAI,QAAQ;AAChH,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;;;ACxDH,SAAS,WAAAC,iBAAe;AAKjB,IAAM,gBAAgB,IAAIC,UAAQ,QAAQ,EAC9C,YAAY,mBAAmB;AAElC,cAAc,QAAQ,QAAQ,EAC3B,YAAY,2BAA2B,EACvC,eAAe,iBAAiB,YAAY,EAC5C,eAAe,mBAAmB,iCAAiC,EACnE,OAAO,uBAAuB,wDAAwD,EACtF,OAAO,eAA+B,MAA4D;AACjG,QAAM,SAAS,IAAI,UAAU;AAC7B,MAAI;AACJ,MAAI;AACF,aAAS,KAAK,MAAM,KAAK,MAAM;AAAA,EACjC,QAAQ;AACN,UAAM,IAAI,MAAM,6BAA6B;AAAA,EAC/C;AACA,QAAM,OAAgC,EAAE,MAAM,KAAK,MAAM,OAAO;AAChE,MAAI,KAAK,UAAW,MAAK,aAAa,KAAK;AAC3C,QAAM,OAAO,MAAM,OAAO,QAAQ,QAAQ,cAAc,IAAI;AAC5D,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,cAAc,QAAQ,MAAM,EACzB,YAAY,iBAAiB,EAC7B,OAAO,iBAA+B;AACrC,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,MAAM,OAAO,QAAQ,OAAO,YAAY;AACrD,UAAQ,IAAI,aAAa,MAAM,UAAU,IAAI,CAAC,CAAC;AACjD,CAAC;AAEH,cAAc,QAAQ,mBAAmB,EACtC,YAAY,qBAAqB,EACjC,OAAO,eAA+B,SAAiB;AACtD,QAAM,SAAS,IAAI,UAAU;AAC7B,QAAM,OAAO,QAAQ,UAAU,cAAc,OAAO,EAAE;AACtD,UAAQ,IAAI,eAAe;AAC7B,CAAC;;;ACzCH;AAAA,EACE,MAAQ;AAAA,EACR,SAAW;AAAA,EACX,MAAQ;AAAA,EACR,SAAW;AAAA,IACT,MAAQ;AAAA,EACV;AAAA,EACA,KAAO;AAAA,IACL,OAAS;AAAA,EACX;AAAA,EACA,OAAS;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAW;AAAA,IACT,OAAS;AAAA,IACT,WAAa;AAAA,IACb,MAAQ;AAAA,IACR,KAAO;AAAA,EACT;AAAA,EACA,cAAgB;AAAA,IACd,oBAAoB;AAAA,IACpB,OAAS;AAAA,IACT,cAAc;AAAA,IACd,WAAa;AAAA,IACb,MAAQ;AAAA,EACV;AAAA,EACA,iBAAmB;AAAA,IACjB,eAAe;AAAA,IACf,MAAQ;AAAA,IACR,YAAc;AAAA,IACd,QAAU;AAAA,EACZ;AACF;;;AvBdO,IAAM,UAAU,IAAIC,UAAQ,OAAO,EACvC,YAAY,iDAA4C,EACxD,QAAQ,gBAAI,OAAO,EACnB,OAAO,oBAAoB,cAAc,EACzC,OAAO,qBAAqB,gCAAgC,OAAO;AAEtE,QAAQ,WAAW,YAAY;AAC/B,QAAQ,WAAW,aAAa;AAChC,QAAQ,WAAW,iBAAiB;AACpC,QAAQ,WAAW,kBAAkB;AACrC,QAAQ,WAAW,cAAc;AACjC,QAAQ,WAAW,UAAU;AAC7B,QAAQ,WAAW,oBAAoB;AACvC,QAAQ,WAAW,yBAAyB;AAC5C,QAAQ,WAAW,kBAAkB;AACrC,QAAQ,WAAW,YAAY;AAC/B,QAAQ,WAAW,eAAe;AAClC,QAAQ,WAAW,YAAY;AAC/B,QAAQ,WAAW,gBAAgB;AACnC,QAAQ,WAAW,aAAa;AAChC,QAAQ,WAAW,gBAAgB;;;AwBpCnC,QAAQ,MAAM;","names":["Command","Command","Command","Command","readFileSync","Command","Command","Command","Command","Command","Command","readFileSync","Command","readFileSync","Command","Command","Command","Command","Command","readFileSync","Command","readFileSync","Command","Command","randomUUID","Command","Command","randomUUID","Command","Command","Command","Command","Command","Command","writeFileSync","Command","Command","Command"]}

package/package.json

@@ -1,7 +1,10 @@
 {
   "name": "rekor-cli",
-  "version": "0.1.17",
+  "version": "0.1.19",
   "type": "module",
+  "engines": {
+    "node": ">=20.0.0"
+  },
   "bin": {
     "rekor": "dist/index.js"
   },
@@ -15,6 +18,7 @@
     "dev": "tsup --watch"
   },
   "dependencies": {
+    "@napi-rs/keyring": "^1.1.6",
     "chalk": "^5.4.1",
     "cli-table3": "^0.6.5",
     "commander": "^13.1.0",