@ankhorage/studio 0.3.0 → 0.5.0

package/dist/projectAuthApi.js

@@ -0,0 +1,203 @@
+import { validateStudioAuthSettings } from './authSettings';
+import { findRawSecretResponseKey } from './secretResponseGuard';
+export class ProjectAuthApiError extends Error {
+    code;
+    status;
+    constructor(args) {
+        super(args.message);
+        this.name = 'ProjectAuthApiError';
+        this.code = args.code;
+        this.status = args.status;
+    }
+}
+export async function getProjectAuthSettings(projectId) {
+    const value = await requestJson(`/projects/${encodeURIComponent(projectId)}/auth/config`);
+    return parseProjectAuthSettingsResponse(value, 'loaded');
+}
+export async function saveProjectAuthSettings(input) {
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/auth/config`, {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ config: input.config }),
+    });
+    const result = parseProjectAuthSettingsResponse(value, 'saved');
+    if (!result) {
+        throw new ProjectAuthApiError({
+            code: 'invalid_response',
+            message: 'Saved auth configuration response did not contain configuration data.',
+            status: 502,
+        });
+    }
+    return result;
+}
+export async function getProjectAuthHealth(input) {
+    const query = createQuery({ environment: input.environment });
+    const value = await requestJson(`/projects/${encodeURIComponent(input.projectId)}/auth/health${query}`);
+    return parseProjectAuthHealthResponse(value);
+}
+export function parseProjectAuthSettingsResponse(value, expectedState) {
+    rejectRawSecretResponse(value, 'Project auth response was invalid.');
+    const record = asRecord(value);
+    if (record?.ok !== true || record.state !== expectedState) {
+        throw invalidResponse('Project auth response was invalid.');
+    }
+    if (record.data === null && expectedState === 'loaded')
+        return null;
+    const parsed = validateStudioAuthSettings(record.data);
+    if (!parsed.ok)
+        throw invalidResponse(parsed.error.message);
+    return parsed.data;
+}
+export function parseProjectAuthHealthResponse(value) {
+    rejectRawSecretResponse(value, 'Project auth health response was invalid.');
+    const record = asRecord(value);
+    if (record?.ok !== true || record.state !== 'loaded') {
+        throw invalidResponse('Project auth health response was invalid.');
+    }
+    return parseProjectAuthHealth(record.data);
+}
+async function requestJson(path, init) {
+    const { API_BASE } = await import('./core/constants');
+    const response = await fetch(`${API_BASE}${path}`, init);
+    const value = await readJson(response);
+    if (!response.ok)
+        throw parseHttpError(value, response.status);
+    return value;
+}
+async function readJson(response) {
+    try {
+        return await response.json();
+    }
+    catch {
+        throw new ProjectAuthApiError({
+            code: 'invalid_response',
+            message: 'The Studio host returned a non-JSON auth response.',
+            status: response.status,
+        });
+    }
+}
+function parseHttpError(value, status) {
+    return parseProjectAuthHttpErrorResponse(value, status);
+}
+export function parseProjectAuthHttpErrorResponse(value, status) {
+    rejectRawSecretResponse(value, 'Project auth error response was invalid.');
+    const record = asRecord(value);
+    const error = asRecord(record?.error);
+    return new ProjectAuthApiError({
+        code: typeof error?.code === 'string' ? error.code : 'request_failed',
+        message: typeof error?.message === 'string'
+            ? error.message
+            : 'The Studio authentication configuration request failed.',
+        status,
+    });
+}
+function invalidResponse(message) {
+    return new ProjectAuthApiError({ code: 'invalid_response', message, status: 502 });
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function parseProjectAuthHealth(value) {
+    const record = asRecord(value);
+    const callbackUrls = asRecord(record?.callbackUrls);
+    if (record === null ||
+        !isProjectAuthHealthStatus(record.status) ||
+        !Array.isArray(record.diagnostics) ||
+        !Array.isArray(record.providers) ||
+        callbackUrls === null ||
+        typeof callbackUrls.appCallbackRoute !== 'string' ||
+        (callbackUrls.providerRedirectUrl !== undefined &&
+            typeof callbackUrls.providerRedirectUrl !== 'string')) {
+        throw invalidResponse('Project auth health data was invalid.');
+    }
+    return {
+        status: record.status,
+        diagnostics: record.diagnostics.map(parseProjectAuthDiagnostic),
+        providers: record.providers.map(parseProjectOAuthProviderHealth),
+        callbackUrls: {
+            appCallbackRoute: callbackUrls.appCallbackRoute,
+            ...(typeof callbackUrls.providerRedirectUrl === 'string'
+                ? { providerRedirectUrl: callbackUrls.providerRedirectUrl }
+                : {}),
+        },
+    };
+}
+function parseProjectAuthDiagnostic(value) {
+    const record = asRecord(value);
+    if (record === null ||
+        typeof record.code !== 'string' ||
+        !isProjectAuthDiagnosticSeverity(record.severity) ||
+        typeof record.message !== 'string' ||
+        (record.path !== undefined && typeof record.path !== 'string') ||
+        (record.providerId !== undefined && typeof record.providerId !== 'string') ||
+        (record.credentialsRef !== undefined && typeof record.credentialsRef !== 'string')) {
+        throw invalidResponse('Project auth diagnostic was invalid.');
+    }
+    return {
+        code: record.code,
+        severity: record.severity,
+        message: record.message,
+        ...(typeof record.path === 'string' ? { path: record.path } : {}),
+        ...(typeof record.providerId === 'string' ? { providerId: record.providerId } : {}),
+        ...(typeof record.credentialsRef === 'string' ? { credentialsRef: record.credentialsRef } : {}),
+    };
+}
+function parseProjectOAuthProviderHealth(value) {
+    const record = asRecord(value);
+    if (record === null ||
+        typeof record.providerId !== 'string' ||
+        typeof record.label !== 'string' ||
+        typeof record.enabled !== 'boolean' ||
+        (record.credentialsRef !== undefined && typeof record.credentialsRef !== 'string') ||
+        !isProjectOAuthProviderHealthStatus(record.status) ||
+        !isStringArray(record.requiredFields) ||
+        !isStringArray(record.configuredFields) ||
+        !isStringArray(record.missingFields)) {
+        throw invalidResponse('Project OAuth provider health was invalid.');
+    }
+    return {
+        providerId: record.providerId,
+        label: record.label,
+        enabled: record.enabled,
+        ...(typeof record.credentialsRef === 'string' ? { credentialsRef: record.credentialsRef } : {}),
+        status: record.status,
+        requiredFields: [...record.requiredFields],
+        configuredFields: [...record.configuredFields],
+        missingFields: [...record.missingFields],
+    };
+}
+function createQuery(values) {
+    const params = new URLSearchParams();
+    for (const [key, value] of Object.entries(values)) {
+        const normalized = value?.trim();
+        if (normalized)
+            params.set(key, normalized);
+    }
+    const query = params.toString();
+    return query ? `?${query}` : '';
+}
+function rejectRawSecretResponse(value, message) {
+    const match = findRawSecretResponseKey(value);
+    if (match) {
+        throw invalidResponse(`${message} Raw secret-shaped response field "${match.key}" was present.`);
+    }
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+}
+function isProjectAuthHealthStatus(value) {
+    return (value === 'healthy' || value === 'warning' || value === 'error' || value === 'unconfigured');
+}
+function isProjectAuthDiagnosticSeverity(value) {
+    return value === 'info' || value === 'warning' || value === 'error';
+}
+function isProjectOAuthProviderHealthStatus(value) {
+    return (value === 'disabled' ||
+        value === 'configured' ||
+        value === 'incomplete' ||
+        value === 'missing' ||
+        value === 'invalid');
+}
+//# sourceMappingURL=projectAuthApi.js.map

package/dist/projectAuthApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthApi.js","sourceRoot":"","sources":["../src/projectAuthApi.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAS5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IACnC,IAAI,CAAS;IACb,MAAM,CAAS;IAExB,YAAY,IAAkF;QAC5F,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,SAAiB;IAEjB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,kBAAkB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAC1F,OAAO,gCAAgC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,KAG7C;IACC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE;QAC9F,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;KAC/C,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,gCAAgC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,mBAAmB,CAAC;YAC5B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,uEAAuE;YAChF,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,KAG1C;IACC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,aAAa,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,KAAK,EAAE,CACvE,CAAC;IACF,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc,EACd,aAAiC;IAEjC,uBAAuB,CAAC,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QAC1D,MAAM,eAAe,CAAC,oCAAoC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEpE,MAAM,MAAM,GAAG,0BAA0B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,KAAc;IAC3D,uBAAuB,CAAC,KAAK,EAAE,2CAA2C,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,EAAE,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,eAAe,CAAC,2CAA2C,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,IAAkB;IACzD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,CAAC;QACH,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,mBAAmB,CAAC;YAC5B,IAAI,EAAE,kBAAkB;YACxB,OAAO,EAAE,oDAAoD;YAC7D,MAAM,EAAE,QAAQ,CAAC,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,MAAc;IACpD,OAAO,iCAAiC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAAc,EACd,MAAc;IAEd,uBAAuB,CAAC,KAAK,EAAE,0CAA0C,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,OAAO,IAAI,mBAAmB,CAAC;QAC7B,IAAI,EAAE,OAAO,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;QACrE,OAAO,EACL,OAAO,KAAK,EAAE,OAAO,KAAK,QAAQ;YAChC,CAAC,CAAC,KAAK,CAAC,OAAO;YACf,CAAC,CAAC,yDAAyD;QAC/D,MAAM;KACP,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,mBAAmB,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACpD,IACE,MAAM,KAAK,IAAI;QACf,CAAC,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC;QACzC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC;QAClC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAChC,YAAY,KAAK,IAAI;QACrB,OAAO,YAAY,CAAC,gBAAgB,KAAK,QAAQ;QACjD,CAAC,YAAY,CAAC,mBAAmB,KAAK,SAAS;YAC7C,OAAO,YAAY,CAAC,mBAAmB,KAAK,QAAQ,CAAC,EACvD,CAAC;QACD,MAAM,eAAe,CAAC,uCAAuC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,0BAA0B,CAAC;QAC/D,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAChE,YAAY,EAAE;YACZ,gBAAgB,EAAE,YAAY,CAAC,gBAAgB;YAC/C,GAAG,CAAC,OAAO,YAAY,CAAC,mBAAmB,KAAK,QAAQ;gBACtD,CAAC,CAAC,EAAE,mBAAmB,EAAE,YAAY,CAAC,mBAAmB,EAAE;gBAC3D,CAAC,CAAC,EAAE,CAAC;SACR;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,CAAC,+BAA+B,CAAC,MAAM,CAAC,QAAQ,CAAC;QACjD,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;QAC9D,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC;QAC1E,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,EAClF,CAAC;QACD,MAAM,eAAe,CAAC,sCAAsC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChG,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ;QACrC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAChC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QACnC,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC;QAClF,CAAC,kCAAkC,CAAC,MAAM,CAAC,MAAM,CAAC;QAClD,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC;QACrC,CAAC,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACvC,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,EACpC,CAAC;QACD,MAAM,eAAe,CAAC,4CAA4C,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,GAAG,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC;QAC1C,gBAAgB,EAAE,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC9C,aAAa,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,MAAoD;IACvE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;QACjC,IAAI,UAAU;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,OAAe;IAC9D,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,eAAe,CACnB,GAAG,OAAO,sCAAsC,KAAK,CAAC,GAAG,gBAAgB,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,yBAAyB,CAAC,KAAc;IAC/C,OAAO,CACL,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,cAAc,CAC5F,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAc;IACrD,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,OAAO,CAAC;AACtE,CAAC;AAED,SAAS,kCAAkC,CACzC,KAAc;IAEd,OAAO,CACL,KAAK,KAAK,UAAU;QACpB,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,YAAY;QACtB,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,SAAS,CACpB,CAAC;AACJ,CAAC"}

package/dist/projectAuthHealth.d.ts

@@ -0,0 +1,38 @@
+import type { AppManifest } from '@ankhorage/contracts';
+import type { SecretMetadata } from '@ankhorage/contracts/secrets';
+export type ProjectAuthHealthStatus = 'healthy' | 'warning' | 'error' | 'unconfigured';
+export type ProjectAuthDiagnosticSeverity = 'info' | 'warning' | 'error';
+export interface ProjectAuthDiagnostic {
+    readonly code: string;
+    readonly severity: ProjectAuthDiagnosticSeverity;
+    readonly message: string;
+    readonly path?: string;
+    readonly providerId?: string;
+    readonly credentialsRef?: string;
+}
+export type ProjectOAuthProviderHealthStatus = 'disabled' | 'configured' | 'incomplete' | 'missing' | 'invalid';
+export interface ProjectOAuthProviderHealth {
+    readonly providerId: string;
+    readonly label: string;
+    readonly enabled: boolean;
+    readonly credentialsRef?: string;
+    readonly status: ProjectOAuthProviderHealthStatus;
+    readonly requiredFields: readonly string[];
+    readonly configuredFields: readonly string[];
+    readonly missingFields: readonly string[];
+}
+export interface ProjectAuthHealth {
+    readonly status: ProjectAuthHealthStatus;
+    readonly diagnostics: readonly ProjectAuthDiagnostic[];
+    readonly providers: readonly ProjectOAuthProviderHealth[];
+    readonly callbackUrls: {
+        readonly appCallbackRoute: string;
+        readonly providerRedirectUrl?: string;
+    };
+}
+export declare function analyzeProjectAuthHealth(input: {
+    readonly manifest: AppManifest;
+    readonly secretMetadata: readonly SecretMetadata[];
+    readonly secretStoreAvailable?: boolean;
+}): ProjectAuthHealth;
+//# sourceMappingURL=projectAuthHealth.d.ts.map

package/dist/projectAuthHealth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthHealth.d.ts","sourceRoot":"","sources":["../src/projectAuthHealth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAA2B,MAAM,sBAAsB,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAKnE,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,cAAc,CAAC;AAEvF,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;AAEzE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,6BAA6B,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,MAAM,gCAAgC,GAC1C,UAAU,GAAG,YAAY,GAAG,YAAY,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3C;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC1D,QAAQ,CAAC,YAAY,EAAE;QACrB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;KACvC,CAAC;CACH;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,SAAS,cAAc,EAAE,CAAC;IACnD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC,GAAG,iBAAiB,CA4FpB"}

package/dist/projectAuthHealth.js

@@ -0,0 +1,219 @@
+import { getSupabaseOAuthProviderDefinition } from '@ankhorage/supabase-auth';
+import { validateStudioAuthSettings } from './authSettings';
+export function analyzeProjectAuthHealth(input) {
+    const diagnostics = [];
+    const { auth } = input.manifest.infra;
+    const secretMetadataByRef = new Map(input.secretMetadata.map((metadata) => [metadata.ref, metadata]));
+    if (input.secretStoreAvailable === false) {
+        diagnostics.push({
+            code: 'secret_store_unavailable',
+            severity: 'error',
+            message: 'The local project secret store is unavailable.',
+        });
+    }
+    if (!auth) {
+        diagnostics.push({
+            code: 'auth_unconfigured',
+            severity: 'info',
+            message: 'Authentication is not configured for this project.',
+            path: 'infra.auth',
+        });
+        return {
+            status: 'unconfigured',
+            diagnostics: sortDiagnostics(diagnostics),
+            providers: [],
+            callbackUrls: { appCallbackRoute: '/auth/callback' },
+        };
+    }
+    const settingsValidation = validateStudioAuthSettings({
+        scope: auth.scope,
+        provider: auth.provider,
+        flow: auth.flow,
+        signIn: auth.signIn,
+        ...(auth.signUp ? { signUp: auth.signUp } : {}),
+        ...(auth.oauth ? { oauth: auth.oauth } : {}),
+        ...(auth.profile ? { profile: auth.profile } : {}),
+    });
+    if (!settingsValidation.ok) {
+        diagnostics.push({
+            code: resolveAuthValidationCode(settingsValidation.error.message),
+            severity: 'error',
+            message: settingsValidation.error.message,
+            path: 'infra.auth',
+        });
+    }
+    if (!auth.profile) {
+        diagnostics.push({
+            code: 'profile_not_configured',
+            severity: 'warning',
+            message: 'Auth profile configuration is not configured.',
+            path: 'infra.auth.profile',
+        });
+    }
+    const { oauth } = auth;
+    const providers = oauth?.providers ?? [];
+    const providerHealth = providers.map((provider, index) => analyzeProviderHealth({
+        provider,
+        index,
+        secretMetadata: provider.credentialsRef
+            ? secretMetadataByRef.get(provider.credentialsRef)
+            : undefined,
+        diagnostics,
+    }));
+    if (oauth?.enabled && providers.filter((provider) => provider.enabled === true).length === 0) {
+        diagnostics.push({
+            code: 'oauth_enabled_without_providers',
+            severity: 'warning',
+            message: 'OAuth is enabled but no OAuth provider is enabled.',
+            path: 'infra.auth.oauth.providers',
+        });
+    }
+    addDuplicateDiagnostics(providers, diagnostics);
+    const sortedDiagnostics = sortDiagnostics(diagnostics);
+    return {
+        status: resolveHealthStatus(sortedDiagnostics),
+        diagnostics: sortedDiagnostics,
+        providers: providerHealth.sort((left, right) => left.providerId.localeCompare(right.providerId)),
+        callbackUrls: {
+            appCallbackRoute: oauth?.callbackRoute ?? '/auth/callback',
+        },
+    };
+}
+function analyzeProviderHealth(input) {
+    const { provider, secretMetadata } = input;
+    const definition = getSupabaseOAuthProviderDefinition(provider.id);
+    const enabled = provider.enabled === true;
+    const { credentialsRef } = provider;
+    const path = `infra.auth.oauth.providers[${input.index}]`;
+    const requiredFields = definition?.secretFields.map((field) => field.name) ?? [];
+    const configuredFields = secretMetadata?.configuredFields ?? [];
+    const missingFields = requiredFields.filter((field) => !configuredFields.includes(field));
+    if (!definition) {
+        input.diagnostics.push({
+            code: 'invalid_provider',
+            severity: 'error',
+            message: `OAuth provider "${provider.id}" is not supported.`,
+            path,
+            providerId: provider.id,
+            ...(credentialsRef ? { credentialsRef } : {}),
+        });
+    }
+    if (enabled && !credentialsRef) {
+        input.diagnostics.push({
+            code: 'provider_enabled_without_credentials_ref',
+            severity: 'error',
+            message: `Enabled OAuth provider "${provider.id}" does not configure credentialsRef.`,
+            path: `${path}.credentialsRef`,
+            providerId: provider.id,
+        });
+    }
+    if (credentialsRef && !secretMetadata) {
+        input.diagnostics.push({
+            code: 'referenced_secret_missing',
+            severity: enabled ? 'error' : 'warning',
+            message: `OAuth provider "${provider.id}" references missing secret metadata.`,
+            path: `${path}.credentialsRef`,
+            providerId: provider.id,
+            credentialsRef,
+        });
+    }
+    if (secretMetadata && missingFields.length > 0) {
+        input.diagnostics.push({
+            code: 'provider_secret_incomplete',
+            severity: enabled ? 'error' : 'warning',
+            message: `OAuth provider "${provider.id}" secret metadata is missing required fields: ${missingFields.join(', ')}.`,
+            path: `${path}.credentialsRef`,
+            providerId: provider.id,
+            ...(credentialsRef ? { credentialsRef } : {}),
+        });
+    }
+    return {
+        providerId: provider.id,
+        label: provider.label ?? definition?.label ?? provider.id,
+        enabled,
+        ...(credentialsRef ? { credentialsRef } : {}),
+        status: resolveProviderStatus({
+            enabled,
+            definitionExists: definition !== null,
+            credentialsRef,
+            secretMetadata,
+            missingFields,
+        }),
+        requiredFields,
+        configuredFields: [...configuredFields].sort(),
+        missingFields,
+    };
+}
+function resolveProviderStatus(input) {
+    if (!input.enabled)
+        return 'disabled';
+    if (!input.definitionExists || !input.credentialsRef)
+        return 'invalid';
+    if (!input.secretMetadata)
+        return 'missing';
+    if (input.missingFields.length > 0)
+        return 'incomplete';
+    return 'configured';
+}
+function addDuplicateDiagnostics(providers, diagnostics) {
+    const seenProviderIds = new Set();
+    const refsByOwner = new Map();
+    providers.forEach((provider, index) => {
+        const path = `infra.auth.oauth.providers[${index}]`;
+        if (seenProviderIds.has(provider.id)) {
+            diagnostics.push({
+                code: 'duplicate_provider_id',
+                severity: 'error',
+                message: `OAuth provider "${provider.id}" is configured more than once.`,
+                path,
+                providerId: provider.id,
+            });
+        }
+        seenProviderIds.add(provider.id);
+        if (!provider.credentialsRef)
+            return;
+        const existingOwner = refsByOwner.get(provider.credentialsRef);
+        if (existingOwner && existingOwner !== provider.id) {
+            diagnostics.push({
+                code: 'duplicate_incompatible_secret_ref',
+                severity: 'error',
+                message: `Secret reference "${provider.credentialsRef}" is shared by incompatible providers.`,
+                path: `${path}.credentialsRef`,
+                providerId: provider.id,
+                credentialsRef: provider.credentialsRef,
+            });
+            return;
+        }
+        refsByOwner.set(provider.credentialsRef, provider.id);
+    });
+}
+function resolveAuthValidationCode(message) {
+    if (message.includes('callback'))
+        return 'invalid_callback_route';
+    if (message.includes('configured more than once'))
+        return 'duplicate_provider_id';
+    if (message.includes('shared by incompatible providers'))
+        return 'duplicate_incompatible_secret_ref';
+    if (message.includes('requires credentialsRef'))
+        return 'provider_enabled_without_credentials_ref';
+    return 'invalid_auth_config';
+}
+function resolveHealthStatus(diagnostics) {
+    if (diagnostics.some((diagnostic) => diagnostic.severity === 'error'))
+        return 'error';
+    if (diagnostics.some((diagnostic) => diagnostic.severity === 'warning'))
+        return 'warning';
+    return 'healthy';
+}
+function sortDiagnostics(diagnostics) {
+    const severityRank = {
+        error: 0,
+        warning: 1,
+        info: 2,
+    };
+    return [...diagnostics].sort((left, right) => severityRank[left.severity] - severityRank[right.severity] ||
+        left.code.localeCompare(right.code) ||
+        (left.path ?? '').localeCompare(right.path ?? '') ||
+        (left.providerId ?? '').localeCompare(right.providerId ?? ''));
+}
+//# sourceMappingURL=projectAuthHealth.js.map

package/dist/projectAuthHealth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthHealth.js","sourceRoot":"","sources":["../src/projectAuthHealth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAE9E,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAuC5D,MAAM,UAAU,wBAAwB,CAAC,KAIxC;IACC,MAAM,WAAW,GAA4B,EAAE,CAAC;IAChD,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;IACtC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CACjC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CACjE,CAAC;IAEF,IAAI,KAAK,CAAC,oBAAoB,KAAK,KAAK,EAAE,CAAC;QACzC,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,MAAM;YAChB,OAAO,EAAE,oDAAoD;YAC7D,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;QACH,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,eAAe,CAAC,WAAW,CAAC;YACzC,SAAS,EAAE,EAAE;YACb,YAAY,EAAE,EAAE,gBAAgB,EAAE,gBAAgB,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;QACpD,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC,CAAC;IACH,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;QAC3B,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,yBAAyB,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC;YACjE,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,kBAAkB,CAAC,KAAK,CAAC,OAAO;YACzC,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClB,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,wBAAwB;YAC9B,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,oBAAoB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IACvB,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IACzC,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CACvD,qBAAqB,CAAC;QACpB,QAAQ;QACR,KAAK;QACL,cAAc,EAAE,QAAQ,CAAC,cAAc;YACrC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC;YAClD,CAAC,CAAC,SAAS;QACb,WAAW;KACZ,CAAC,CACH,CAAC;IAEF,IAAI,KAAK,EAAE,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7F,WAAW,CAAC,IAAI,CAAC;YACf,IAAI,EAAE,iCAAiC;YACvC,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,oDAAoD;YAC7D,IAAI,EAAE,4BAA4B;SACnC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEhD,MAAM,iBAAiB,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO;QACL,MAAM,EAAE,mBAAmB,CAAC,iBAAiB,CAAC;QAC9C,WAAW,EAAE,iBAAiB;QAC9B,SAAS,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC7C,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAChD;QACD,YAAY,EAAE;YACZ,gBAAgB,EAAE,KAAK,EAAE,aAAa,IAAI,gBAAgB;SAC3D;KACF,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAK9B;IACC,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC;IAC3C,MAAM,UAAU,GAAG,kCAAkC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC;IAC1C,MAAM,EAAE,cAAc,EAAE,GAAG,QAAQ,CAAC;IACpC,MAAM,IAAI,GAAG,8BAA8B,KAAK,CAAC,KAAK,GAAG,CAAC;IAC1D,MAAM,cAAc,GAAG,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,gBAAgB,GAAG,cAAc,EAAE,gBAAgB,IAAI,EAAE,CAAC;IAChE,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAE1F,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,mBAAmB,QAAQ,CAAC,EAAE,qBAAqB;YAC5D,IAAI;YACJ,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/B,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,0CAA0C;YAChD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,2BAA2B,QAAQ,CAAC,EAAE,sCAAsC;YACrF,IAAI,EAAE,GAAG,IAAI,iBAAiB;YAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,2BAA2B;YACjC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACvC,OAAO,EAAE,mBAAmB,QAAQ,CAAC,EAAE,uCAAuC;YAC9E,IAAI,EAAE,GAAG,IAAI,iBAAiB;YAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,cAAc;SACf,CAAC,CAAC;IACL,CAAC;IAED,IAAI,cAAc,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;YACrB,IAAI,EAAE,4BAA4B;YAClC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACvC,OAAO,EAAE,mBAAmB,QAAQ,CAAC,EAAE,iDAAiD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;YACnH,IAAI,EAAE,GAAG,IAAI,iBAAiB;YAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,UAAU,EAAE,QAAQ,CAAC,EAAE;QACvB,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,UAAU,EAAE,KAAK,IAAI,QAAQ,CAAC,EAAE;QACzD,OAAO;QACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,EAAE,qBAAqB,CAAC;YAC5B,OAAO;YACP,gBAAgB,EAAE,UAAU,KAAK,IAAI;YACrC,cAAc;YACd,cAAc;YACd,aAAa;SACd,CAAC;QACF,cAAc;QACd,gBAAgB,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE;QAC9C,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,KAM9B;IACC,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,UAAU,CAAC;IACtC,IAAI,CAAC,KAAK,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,cAAc;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC;IACxD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAA6C,EAC7C,WAAoC;IAEpC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACpC,MAAM,IAAI,GAAG,8BAA8B,KAAK,GAAG,CAAC;QACpD,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,uBAAuB;gBAC7B,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,mBAAmB,QAAQ,CAAC,EAAE,iCAAiC;gBACxE,IAAI;gBACJ,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAEjC,IAAI,CAAC,QAAQ,CAAC,cAAc;YAAE,OAAO;QACrC,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAC/D,IAAI,aAAa,IAAI,aAAa,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YACnD,WAAW,CAAC,IAAI,CAAC;gBACf,IAAI,EAAE,mCAAmC;gBACzC,QAAQ,EAAE,OAAO;gBACjB,OAAO,EAAE,qBAAqB,QAAQ,CAAC,cAAc,wCAAwC;gBAC7F,IAAI,EAAE,GAAG,IAAI,iBAAiB;gBAC9B,UAAU,EAAE,QAAQ,CAAC,EAAE;gBACvB,cAAc,EAAE,QAAQ,CAAC,cAAc;aACxC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,OAAe;IAChD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,wBAAwB,CAAC;IAClE,IAAI,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAClF,IAAI,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC;QACtD,OAAO,mCAAmC,CAAC;IAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC7C,OAAO,0CAA0C,CAAC;IACpD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAC1B,WAA6C;IAE7C,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACtF,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CACtB,WAA6C;IAE7C,MAAM,YAAY,GAAkD;QAClE,KAAK,EAAE,CAAC;QACR,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,CAAC;KACR,CAAC;IAEF,OAAO,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAC1B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC1D,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC;QACnC,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;QACjD,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,IAAI,EAAE,CAAC,CAChE,CAAC;AACJ,CAAC"}

package/dist/projectSecretApi.d.ts

@@ -1,5 +1,6 @@
 import type { AuthOAuthProviderId } from '@ankhorage/contracts';
 import type { SecretMetadata, SecretPayload } from '@ankhorage/contracts/secrets';
+import { type ProjectSecretUsageSummary } from './projectSecretUsage';
 export interface ProjectSecretCreateInput {
     readonly projectId: string;
     readonly environment?: string;
@@ -18,11 +19,14 @@ export interface ProjectSecretRemoveInput {
     readonly projectId: string;
     readonly environment?: string;
     readonly ref: string;
+    readonly confirmBrokenReferences?: boolean;
 }
 export interface ConfigureProjectOAuthProviderInput {
     readonly projectId: string;
     readonly providerId: AuthOAuthProviderId;
     readonly environment?: string;
+    readonly authScope?: 'global' | 'none' | 'integrated';
+    readonly oauthEnabled?: boolean;
     readonly credentialsRef?: string;
     readonly enabled?: boolean;
     readonly label?: string;
@@ -48,10 +52,12 @@ export type ConfigureProjectOAuthProviderResponse = {
 export declare class ProjectSecretApiError extends Error {
     readonly code: string;
     readonly status: number;
+    readonly data?: unknown;
     constructor(args: {
         readonly code: string;
         readonly message: string;
         readonly status: number;
+        readonly data?: unknown;
     });
 }
 export declare function listProjectSecrets(input: {
@@ -62,9 +68,16 @@ export declare function listProjectSecrets(input: {
 }): Promise<readonly SecretMetadata[]>;
 export declare function createProjectSecret(input: ProjectSecretCreateInput): Promise<SecretMetadata>;
 export declare function replaceProjectSecret(input: ProjectSecretReplaceInput): Promise<SecretMetadata>;
-export declare function removeProjectSecret(input: ProjectSecretRemoveInput): Promise<void>;
+export declare function getProjectSecretUsages(input: {
+    readonly projectId: string;
+    readonly environment?: string;
+    readonly ref: string;
+}): Promise<ProjectSecretUsageSummary>;
+export declare function removeProjectSecret(input: ProjectSecretRemoveInput): Promise<ProjectSecretUsageSummary>;
 export declare function configureProjectOAuthProvider(input: ConfigureProjectOAuthProviderInput): Promise<ConfigureProjectOAuthProviderResponse>;
 export declare function parseProjectSecretListResponse(value: unknown): readonly SecretMetadata[];
 export declare function parseProjectSecretMetadataResponse(value: unknown): SecretMetadata;
+export declare function parseProjectSecretUsageSummaryResponse(value: unknown): ProjectSecretUsageSummary;
 export declare function parseConfigureProjectOAuthProviderResponse(value: unknown): ConfigureProjectOAuthProviderResponse;
+export declare function parseProjectSecretHttpErrorResponse(value: unknown, status: number): ProjectSecretApiError;
 //# sourceMappingURL=projectSecretApi.d.ts.map

package/dist/projectSecretApi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectSecretApi.d.ts","sourceRoot":"","sources":["../src/projectSecretApi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAalF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,MAAM,qCAAqC,GAC7C;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,8BAA8B,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEN,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE;CAM/F;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAUrC;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAazB;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOxF;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,qCAAqC,CAAC,CAmBhD;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,cAAc,EAAE,CAMxF;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAMjF;AASD,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,qCAAqC,CA6BvC"}
+{"version":3,"file":"projectSecretApi.d.ts","sourceRoot":"","sources":["../src/projectSecretApi.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAChE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElF,OAAO,EAGL,KAAK,yBAAyB,EAC/B,MAAM,sBAAsB,CAAC;AAG9B,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,uBAAuB,CAAC,EAAE,OAAO,CAAC;CAC5C;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,QAAQ,GAAG,MAAM,GAAG,YAAY,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,MAAM,qCAAqC,GAC7C;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,GAAG,8BAA8B,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpE,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC,CAAC;AAEN,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;gBAEZ,IAAI,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;KACzB;CAOF;AAED,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAUrC;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAazB;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,cAAc,CAAC,CAWzB;AAED,wBAAsB,sBAAsB,CAAC,KAAK,EAAE;IAClD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAMrC;AAED,wBAAsB,mBAAmB,CACvC,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,yBAAyB,CAAC,CAWpC;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,qCAAqC,CAAC,CAqBhD;AAED,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,cAAc,EAAE,CAOxF;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAOjF;AAED,wBAAgB,sCAAsC,CAAC,KAAK,EAAE,OAAO,GAAG,yBAAyB,CAOhG;AAWD,wBAAgB,0CAA0C,CACxD,KAAK,EAAE,OAAO,GACb,qCAAqC,CA8BvC;AAwCD,wBAAgB,mCAAmC,CACjD,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,MAAM,GACb,qBAAqB,CAkBvB"}