@apexops/capabilities 0.10.0-next.0

package/dist/test/native-iac-providers.test.js

@@ -0,0 +1,594 @@
+import assert from "node:assert/strict";
+import { mkdtemp, readFile, rm, stat, writeFile } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import test from "node:test";
+import { Value } from "@sinclair/typebox/value";
+import { FormatRegistry } from "@sinclair/typebox";
+import { ExecutionPlanAttestationV1Schema, } from "@apexops/contracts";
+import { IacOutputParseError, IacProviderError, LocalEncryptedPlanTransport, NativeBicepProvider, NativeTerraformProvider, normalizeAzureWhatIf, normalizeTerraformPlan, selectAzureDeploymentStack, } from "../index.js";
+const hashes = {
+    head: "a".repeat(64),
+    input: "b".repeat(64),
+    iac: "c".repeat(64),
+    policy: "d".repeat(64),
+    lock: "e".repeat(64),
+};
+if (!FormatRegistry.Has("date-time")) {
+    FormatRegistry.Set("date-time", (value) => !Number.isNaN(Date.parse(value)));
+}
+const clock = { value: new Date("2026-07-13T01:00:00.000Z") };
+const authority = {
+    head: hashes.head,
+    dependencyRevision: hashes.head,
+    ownerEpoch: 3,
+    recipientIdentity: "writer@example.com",
+};
+function request(overrides = {}) {
+    return {
+        projectId: "project",
+        runId: "run",
+        environment: "dev",
+        target: "/subscriptions/sub/resourceGroups/rg",
+        commit: hashes.head,
+        dependencyRevision: hashes.head,
+        ownerEpoch: 3,
+        inputHash: hashes.input,
+        iacHash: hashes.iac,
+        policyHash: hashes.policy,
+        resources: [],
+        ttlMs: 60_000,
+        ...overrides,
+    };
+}
+function approval(preview) {
+    return {
+        schemaVersion: "1.0.0",
+        projectId: preview.projectId,
+        runId: preview.runId,
+        gate: 4,
+        decision: "approved",
+        actor: "approver@example.com",
+        mechanism: "tty",
+        dependencyHash: preview.previewHash,
+        previewHash: preview.previewHash,
+        writerEpoch: authority.ownerEpoch,
+        recipientIdentity: authority.recipientIdentity,
+        decidedAt: clock.value.toISOString(),
+        expiresAt: "2026-07-13T02:00:00.000Z",
+    };
+}
+class FakeRunner {
+    respond;
+    requests = [];
+    constructor(respond) {
+        this.respond = respond;
+    }
+    async run(request) {
+        this.requests.push(request);
+        return {
+            exitCode: 0,
+            signal: null,
+            stdout: await this.respond(request),
+            stderr: "",
+            timedOut: false,
+            outputTruncated: false,
+        };
+    }
+}
+class MemoryBindingStore {
+    values = new Map();
+    latest = new Map();
+    async save(previewHash, binding) {
+        this.values.set(previewHash, binding);
+        this.latest.set(`${binding.preview.projectId}\u0000${binding.preview.runId}\u0000${binding.preview.operation}`, binding);
+    }
+    async load(previewHash) {
+        return this.values.get(previewHash);
+    }
+    async loadLatest(projectId, runId, operation) {
+        return this.latest.get(`${projectId}\u0000${runId}\u0000${operation}`);
+    }
+}
+class MemoryArtifactStore {
+    values = new Map();
+    async put(reference, artifact) {
+        this.values.set(reference, artifact);
+    }
+    async get(reference) {
+        return this.values.get(reference);
+    }
+}
+test("Azure and Terraform normalizers block unknown or unevaluated changes", () => {
+    const azure = normalizeAzureWhatIf({
+        properties: {
+            changes: [
+                { resourceId: "/created", changeType: "Create" },
+                { resourceId: "/ignored", changeType: "Ignore" },
+                { resourceId: "/unknown", changeType: "Unsupported" },
+            ],
+        },
+    });
+    assert.deepEqual(azure.changes.map((change) => change.action), ["create", "no-op", "unknown"]);
+    assert.equal(azure.blockers.length, 1);
+    const terraform = normalizeTerraformPlan({
+        resource_changes: [
+            { address: "azurerm_resource_group.main", change: { actions: ["no-op"] } },
+            { address: "azurerm_storage_account.main", change: { actions: ["delete", "create"] } },
+            { address: "unknown.main", change: { actions: ["forget"] } },
+        ],
+        deferred_changes: [{}],
+    });
+    assert.deepEqual(terraform.changes.map((change) => change.action), ["no-op", "replace", "unknown"]);
+    assert.equal(terraform.blockers.length, 2);
+    assert.throws(() => normalizeAzureWhatIf({}), IacOutputParseError);
+});
+test("normalizers block missing, duplicate, and malformed material change identities", () => {
+    const azure = normalizeAzureWhatIf({
+        changes: [
+            { changeType: "Create" },
+            { resourceId: "/duplicate", changeType: "Delete" },
+            { resourceId: "/duplicate", changeType: "Modify" },
+            null,
+        ],
+    });
+    assert.match(azure.blockers.join("\n"), /no stable resource ID|duplicate material|not a JSON object/);
+    const terraform = normalizeTerraformPlan({
+        resource_changes: [
+            { change: { actions: ["create"] } },
+            { address: "duplicate.main", change: { actions: ["update"] } },
+            { address: "duplicate.main", change: { actions: ["delete"] } },
+            { address: "broken.main", change: {} },
+        ],
+    });
+    assert.match(terraform.blockers.join("\n"), /no stable resource address|duplicate material|malformed/);
+});
+function stack(name, resourceGroup = "rg", resources = []) {
+    return {
+        id: `/subscriptions/sub/resourceGroups/${resourceGroup}/providers/Microsoft.Resources/deploymentStacks/${name}`,
+        name,
+        properties: { resources },
+    };
+}
+test("Azure stack selection distinguishes absent, exact, malformed, duplicate, and wrong-scope results", () => {
+    const exact = stack("workload");
+    const failedStack = {
+        ...stack("failed"),
+        properties: { provisioningState: "failed" },
+        resources: [{ id: "/subscriptions/sub/resourceGroups/rg/providers/Microsoft.Storage/storageAccounts/example" }],
+    };
+    assert.equal(selectAzureDeploymentStack([stack("other")], "rg", "workload"), null);
+    assert.equal(selectAzureDeploymentStack([stack("other"), exact], "rg", "Workload"), exact);
+    assert.equal(selectAzureDeploymentStack([failedStack], "rg", "failed"), failedStack);
+    assert.throws(() => selectAzureDeploymentStack({}, "rg", "workload"), /must be a JSON array/);
+    assert.throws(() => selectAzureDeploymentStack([{}], "rg", "workload"), /entry 0 is malformed/);
+    assert.throws(() => selectAzureDeploymentStack([exact, stack("WORKLOAD")], "rg", "workload"), /duplicate name/);
+    assert.throws(() => selectAzureDeploymentStack([stack("workload", "other")], "rg", "workload"), /outside/);
+    assert.throws(() => selectAzureDeploymentStack([{ ...exact, properties: {} }], "rg", "workload"), /malformed managed resources/);
+});
+test("native Bicep first preview binds empty stack state and creates only after approval", async (context) => {
+    const root = await mkdtemp(join(tmpdir(), "apex-native-bicep-first-"));
+    context.after(async () => rm(root, { recursive: true, force: true }));
+    await writeFile(join(root, "main.bicep"), "targetScope = 'resourceGroup'\n");
+    let created = false;
+    const runner = new FakeRunner((process) => {
+        if (process.args.includes("what-if")) {
+            return JSON.stringify({ properties: { changes: [{ resourceId: "/resource", changeType: "Create" }] } });
+        }
+        if (process.args[2] === "list") {
+            return JSON.stringify(created ? [stack("workload", "rg", [{ id: "/resource", name: "resource", type: "Example/type" }])] : []);
+        }
+        if (process.args[2] === "create") {
+            created = true;
+            return JSON.stringify({ id: "/stack/workload" });
+        }
+        return "";
+    });
+    const provider = new NativeBicepProvider({
+        runner,
+        currentAuthority: async () => authority,
+        now: () => clock.value,
+        nextId: () => "operation",
+        bindingStore: new MemoryBindingStore(),
+        target: {
+            cwd: root,
+            resourceGroup: "rg",
+            deploymentName: "preview",
+            stackName: "workload",
+            templateFile: "main.bicep",
+            denySettingsMode: "denyDelete",
+        },
+    });
+    const preview = await provider.previewApply(request());
+    assert.equal(created, false);
+    assert.equal((await provider.apply(preview, approval(preview), authority)).state, "succeeded");
+    assert.equal(created, true);
+    assert.equal((await provider.inventory("project", "run")).resources.length, 1);
+    const listCommands = runner.requests.filter((entry) => entry.args[2] === "list");
+    assert.ok(listCommands.length >= 3);
+    assert.equal(listCommands.some((entry) => entry.args.includes("--name")), false);
+});
+test("native Bicep lifecycle binds fallback preview inputs/state and exact stack commands", async (context) => {
+    const root = await mkdtemp(join(tmpdir(), "apex-native-bicep-"));
+    context.after(async () => rm(root, { recursive: true, force: true }));
+    await writeFile(join(root, "main.bicep"), "targetScope = 'resourceGroup'\n");
+    await writeFile(join(root, "main.bicepparam"), "using './main.bicep'\n");
+    const runner = new FakeRunner((process) => {
+        if (process.args.includes("what-if")) {
+            return JSON.stringify({ properties: { changes: [{ resourceId: "/resource", changeType: "Create" }] } });
+        }
+        if (process.args[2] === "list") {
+            return JSON.stringify([stack("workload", "rg", [{ id: "/resource", name: "resource", type: "Example/type" }])]);
+        }
+        return JSON.stringify({ id: "/stack/workload" });
+    });
+    let current = authority;
+    const bindings = new MemoryBindingStore();
+    const options = {
+        runner,
+        currentAuthority: async () => current,
+        now: () => clock.value,
+        nextId: () => "operation",
+        bindingStore: bindings,
+        target: {
+            cwd: root,
+            resourceGroup: "rg",
+            deploymentName: "preview",
+            stackName: "workload",
+            templateFile: "main.bicep",
+            parametersFile: "main.bicepparam",
+            actionOnUnmanage: "deleteResources",
+            ownershipAuthorizesDeleteResources: true,
+            denySettingsMode: "denyWriteAndDelete",
+        },
+    };
+    const provider = new NativeBicepProvider(options);
+    const applyPreview = await provider.previewApply(request());
+    const restarted = new NativeBicepProvider(options);
+    const applyOperation = await restarted.apply(applyPreview, approval(applyPreview), authority);
+    assert.deepEqual(restarted.executionEvidence(applyOperation.operationId), {
+        mode: "native",
+        operationId: applyOperation.operationId,
+        previewHash: applyPreview.previewHash,
+        validatorIds: ["deploy:bicep-stack-ownership"],
+    });
+    assert.equal(runner.requests.some((entry) => entry.args[2] === "create"), true);
+    assert.equal(runner.requests.flatMap((entry) => entry.args).includes("--bypass-stack-out-of-sync-error"), false);
+    const previewCommand = runner.requests.find((entry) => entry.args.includes("what-if"));
+    const applyCommand = runner.requests.find((entry) => entry.args[2] === "create");
+    for (const flag of ["--resource-group", "--template-file", "--parameters"]) {
+        assert.equal(applyCommand.args[applyCommand.args.indexOf(flag) + 1], previewCommand.args[previewCommand.args.indexOf(flag) + 1]);
+    }
+    assert.equal(applyCommand.args[applyCommand.args.indexOf("--name") + 1], "workload");
+    assert.equal(applyCommand.args[applyCommand.args.indexOf("--action-on-unmanage") + 1], "deleteResources");
+    assert.equal(applyCommand.args[applyCommand.args.indexOf("--deny-settings-mode") + 1], "denyWriteAndDelete");
+    assert.equal((await provider.inventory("project", "run")).resources.length, 1);
+    const destroyPreview = await provider.previewDestroy(request());
+    await provider.destroy(destroyPreview, approval(destroyPreview), authority);
+    const deleteRequest = runner.requests.find((entry) => entry.args[2] === "delete");
+    assert.deepEqual(deleteRequest?.args.slice(0, 7), [
+        "stack",
+        "group",
+        "delete",
+        "--resource-group",
+        "rg",
+        "--name",
+        "workload",
+    ]);
+    const stalePreview = await provider.previewApply(request());
+    current = { ...authority, ownerEpoch: 4 };
+    await assert.rejects(provider.apply(stalePreview, approval(stalePreview), authority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_OWNER_EPOCH_MISMATCH");
+    current = authority;
+    const superseded = await provider.previewApply(request({ runId: "superseded" }));
+    await provider.previewApply(request({ runId: "superseded", commit: "e".repeat(64), dependencyRevision: "e".repeat(64) }));
+    const supersededRestart = new NativeBicepProvider(options);
+    await assert.rejects(supersededRestart.apply(superseded, approval(superseded), authority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_SUPERSEDED");
+    const mutationPreview = await provider.previewApply(request({ runId: "mutated" }));
+    await writeFile(join(root, "main.bicep"), "targetScope = 'subscription'\n");
+    await assert.rejects(restarted.apply(mutationPreview, approval(mutationPreview), authority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_HASH_MISMATCH");
+});
+test("Bicep fallback blocks unrepresented managed resources and enforces safe action defaults", async (context) => {
+    const root = await mkdtemp(join(tmpdir(), "apex-native-bicep-safety-"));
+    context.after(async () => rm(root, { recursive: true, force: true }));
+    await writeFile(join(root, "main.bicep"), "targetScope = 'resourceGroup'\n");
+    const runner = new FakeRunner((process) => process.args.includes("what-if")
+        ? JSON.stringify({ changes: [{ resourceId: "/represented", changeType: "Modify" }] })
+        : JSON.stringify([stack("workload", "rg", [{ id: "/removed", name: "removed", type: "Example/type" }])]));
+    const base = {
+        runner,
+        currentAuthority: async () => authority,
+        now: () => clock.value,
+        target: {
+            cwd: root,
+            resourceGroup: "rg",
+            deploymentName: "preview",
+            stackName: "workload",
+            templateFile: "main.bicep",
+            denySettingsMode: "none",
+        },
+    };
+    const provider = new NativeBicepProvider(base);
+    const preview = await provider.previewApply(request());
+    assert.match(preview.blockers.join("\n"), /cannot prove action-on-unmanage.*\/removed/);
+    assert.throws(() => new NativeBicepProvider({ ...base, target: { ...base.target, actionOnUnmanage: "deleteResources" } }), /ownership authorization/);
+    assert.throws(() => new NativeBicepProvider({ ...base, target: { ...base.target, actionOnUnmanage: "deleteAll" } }), /dedicated sandbox/);
+});
+test("native Terraform encrypts immediately and restores exact-plan binding after restart", async (context) => {
+    const root = await mkdtemp(join(tmpdir(), "apex-native-terraform-"));
+    context.after(async () => rm(root, { recursive: true, force: true }));
+    const applyPath = join(root, "apply.tfplan");
+    const destroyPath = join(root, "destroy.tfplan");
+    let stateSerial = 7;
+    const runner = new FakeRunner(async (process) => {
+        const outputArg = process.args.find((argument) => argument.startsWith("-out="));
+        if (outputArg !== undefined) {
+            await writeFile(outputArg.slice(5), process.args.includes("-destroy") ? "destroy-plan" : "apply-plan", {
+                mode: 0o600,
+            });
+            return "";
+        }
+        if (process.args[0] === "show" && process.args[1] === "-json") {
+            return JSON.stringify({
+                resource_changes: [{ address: "azurerm_resource_group.main", change: { actions: ["create"] } }],
+            });
+        }
+        if (process.args[0] === "state" && process.args[1] === "pull") {
+            return JSON.stringify({ lineage: "lineage-1", serial: stateSerial });
+        }
+        return "";
+    });
+    const bindings = new MemoryBindingStore();
+    const artifacts = new MemoryArtifactStore();
+    const key = Buffer.alloc(32, 9);
+    let configHash = hashes.iac;
+    let lockfileHash = hashes.lock;
+    const target = {
+        cwd: root,
+        target: "dev",
+        planPath: (_request, operation) => (operation === "apply" ? applyPath : destroyPath),
+        get lockfileHash() {
+            return lockfileHash;
+        },
+        configHash: async () => configHash,
+    };
+    const options = {
+        runner,
+        currentAuthority: async () => authority,
+        now: () => clock.value,
+        nextId: () => "terraform-operation",
+        target,
+        bindingStore: bindings,
+        artifactStore: artifacts,
+        keyProvider: async () => key,
+    };
+    const provider = new NativeTerraformProvider(options);
+    const applyPreview = await provider.previewApply(request());
+    await assert.rejects(stat(applyPath), /ENOENT/);
+    assert.equal(artifacts.values.size, 1);
+    assert.equal(provider.attestation(applyPreview.previewHash)?.lockfileHash, hashes.lock);
+    assert.equal(applyPreview.stateLineage, "lineage-1");
+    assert.equal(applyPreview.stateSerial, 7);
+    const attestation = provider.attestation(applyPreview.previewHash);
+    assert.equal(Value.Check(ExecutionPlanAttestationV1Schema, attestation), true, JSON.stringify([...Value.Errors(ExecutionPlanAttestationV1Schema, attestation)]));
+    assert.equal("savedPlanPath" in (provider.attestation(applyPreview.previewHash) ?? {}), false);
+    const restarted = new NativeTerraformProvider(options);
+    const applyOperation = await restarted.apply(applyPreview, approval(applyPreview), authority);
+    assert.deepEqual(restarted.executionEvidence(applyOperation.operationId), {
+        mode: "native",
+        operationId: applyOperation.operationId,
+        previewHash: applyPreview.previewHash,
+        validatorIds: ["deploy:exact-saved-plan", "deploy:state-lineage-and-serial"],
+    });
+    const exactApply = runner.requests.at(-1);
+    assert.equal(exactApply?.args[0], "apply");
+    assert.match(exactApply?.args[2] ?? "", /apex-local-plan-/);
+    await assert.rejects(stat(exactApply?.args[2] ?? ""), /ENOENT/);
+    const mutationPreview = await provider.previewApply(request({ runId: "mutation" }));
+    configHash = "f".repeat(64);
+    await assert.rejects(restarted.apply(mutationPreview, approval(mutationPreview), authority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_HASH_MISMATCH");
+    configHash = hashes.iac;
+    lockfileHash = "1".repeat(64);
+    await assert.rejects(restarted.apply(mutationPreview, approval(mutationPreview), authority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_HASH_MISMATCH");
+    lockfileHash = hashes.lock;
+    stateSerial = 8;
+    await assert.rejects(restarted.apply(mutationPreview, approval(mutationPreview), authority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_HASH_MISMATCH");
+    stateSerial = 7;
+    const wrongKey = new NativeTerraformProvider({ ...options, keyProvider: async () => Buffer.alloc(32, 8) });
+    await assert.rejects(wrongKey.apply(mutationPreview, approval(mutationPreview), authority));
+    const binding = bindings.values.get(mutationPreview.previewHash);
+    assert.equal(binding?.kind, "terraform");
+    if (binding?.kind === "terraform") {
+        const encrypted = artifacts.values.get(binding.attestation.artifactRef);
+        const first = encrypted.ciphertext[0] === "A" ? "B" : "A";
+        artifacts.values.set(binding.attestation.artifactRef, {
+            ...encrypted,
+            ciphertext: `${first}${encrypted.ciphertext.slice(1)}`,
+        });
+        await assert.rejects(restarted.apply(mutationPreview, approval(mutationPreview), authority));
+    }
+});
+test("native Terraform encrypts for the planned post-preview recipient", async (context) => {
+    const root = await mkdtemp(join(tmpdir(), "apex-native-terraform-recipient-"));
+    context.after(async () => rm(root, { recursive: true, force: true }));
+    const planPath = join(root, "apply.tfplan");
+    const runner = new FakeRunner(async (process) => {
+        const outputArg = process.args.find((argument) => argument.startsWith("-out="));
+        if (outputArg !== undefined) {
+            await writeFile(outputArg.slice(5), "recipient-plan", { mode: 0o600 });
+            return "";
+        }
+        if (process.args[0] === "show")
+            return JSON.stringify({ resource_changes: [] });
+        return "";
+    });
+    const claimHash = "9".repeat(64);
+    let currentAuthority = authority;
+    const provider = new NativeTerraformProvider({
+        runner,
+        currentAuthority: async () => currentAuthority,
+        now: () => clock.value,
+        target: {
+            cwd: root,
+            target: "dev",
+            planPath: () => planPath,
+            lockfileHash: hashes.lock,
+            configHash: async () => hashes.iac,
+        },
+        bindingStore: new MemoryBindingStore(),
+        artifactStore: new MemoryArtifactStore(),
+        keyProvider: async () => Buffer.alloc(32, 7),
+    });
+    const preview = await provider.previewApply(request({ executionRecipientIdentity: "apply@example.com" }));
+    assert.equal(provider.attestation(preview.previewHash)?.recipient, "apply@example.com");
+    currentAuthority = {
+        ...authority,
+        ownerEpoch: 4,
+        previousOwnerEpoch: 3,
+        writerTransferClaimHash: claimHash,
+        recipientIdentity: "apply@example.com",
+    };
+    const transferredApproval = {
+        ...approval(preview),
+        writerEpoch: 4,
+        writerTransferClaimHash: claimHash,
+        recipientIdentity: "apply@example.com",
+    };
+    assert.equal((await provider.apply(preview, transferredApproval, currentAuthority)).state, "succeeded");
+    const missingClaim = { ...transferredApproval };
+    delete missingClaim.writerTransferClaimHash;
+    await assert.rejects(provider.apply(preview, missingClaim, currentAuthority), (error) => error instanceof IacProviderError && error.code === "PREVIEW_OWNER_EPOCH_MISMATCH");
+    await assert.rejects(provider.apply(preview, transferredApproval, { ...currentAuthority, recipientIdentity: "wrong@example.com" }), (error) => error instanceof IacProviderError && error.code === "PREVIEW_OWNER_EPOCH_MISMATCH");
+});
+test("native Terraform cleans decrypted temp plans when apply fails", async (context) => {
+    const root = await mkdtemp(join(tmpdir(), "apex-native-terraform-failure-"));
+    context.after(async () => rm(root, { recursive: true, force: true }));
+    const planPath = join(root, "apply.tfplan");
+    let appliedPath = "";
+    const runner = {
+        async run(process) {
+            const outputArg = process.args.find((argument) => argument.startsWith("-out="));
+            if (outputArg !== undefined)
+                await writeFile(outputArg.slice(5), "apply-plan", { mode: 0o600 });
+            if (process.args[0] === "show") {
+                return result(JSON.stringify({ resource_changes: [], prior_state: { lineage: "lineage", serial: 1 } }));
+            }
+            if (process.args[0] === "apply") {
+                appliedPath = process.args[2] ?? "";
+                throw new Error("apply failed");
+            }
+            return result("");
+        },
+    };
+    const bindings = new MemoryBindingStore();
+    const provider = new NativeTerraformProvider({
+        runner,
+        currentAuthority: async () => authority,
+        now: () => clock.value,
+        target: {
+            cwd: root,
+            target: "dev",
+            planPath: () => planPath,
+            lockfileHash: hashes.lock,
+            configHash: async () => hashes.iac,
+        },
+        bindingStore: bindings,
+        artifactStore: new MemoryArtifactStore(),
+        keyProvider: async () => Buffer.alloc(32, 9),
+    });
+    const preview = await provider.previewApply(request());
+    await assert.rejects(provider.apply(preview, approval(preview), authority), /apply failed/);
+    await assert.rejects(stat(appliedPath), /ENOENT/);
+});
+test("Terraform inventory recursively removes sensitive and secret-denylisted state properties", async () => {
+    const runner = new FakeRunner(() => JSON.stringify({
+        values: {
+            outputs: { password: { value: "output-secret", sensitive: true } },
+            root_module: {
+                resources: [
+                    {
+                        address: "azurerm_example.main",
+                        provider_name: "registry.terraform.io/hashicorp/azurerm",
+                        type: "azurerm_example",
+                        values: {
+                            name: "safe",
+                            resourceId: "/subscriptions/sub/resourceGroups/rg/providers/example/main",
+                            eventHubAuthorizationRuleId: null,
+                            nested: { visible: "yes", hidden: "nested-secret" },
+                            clientSecret: "denylisted-secret",
+                        },
+                        sensitive_values: { nested: { hidden: true } },
+                    },
+                ],
+                child_modules: [
+                    {
+                        resources: [
+                            {
+                                address: "module.child.azurerm_example.child",
+                                type: "azurerm_example",
+                                values: { name: "child", token: "denylisted-token" },
+                                sensitive_values: {},
+                            },
+                        ],
+                    },
+                ],
+            },
+        },
+    }));
+    const provider = new NativeTerraformProvider({
+        runner,
+        currentAuthority: async () => authority,
+        now: () => clock.value,
+        target: {
+            cwd: "/tmp",
+            target: "dev",
+            planPath: () => "/tmp/unused.tfplan",
+            lockfileHash: hashes.lock,
+            configHash: async () => hashes.iac,
+        },
+    });
+    const inventory = await provider.inventory("project", "run");
+    assert.equal(inventory.resources.length, 2);
+    assert.deepEqual(inventory.resources[0]?.properties, {
+        name: "safe",
+        resourceId: "/subscriptions/sub/resourceGroups/rg/providers/example/main",
+        nested: { visible: "yes" },
+    });
+    assert.deepEqual(inventory.resources[1]?.properties, { name: "child" });
+    assert.doesNotMatch(JSON.stringify(inventory), /output-secret|nested-secret|denylisted/);
+});
+function result(stdout) {
+    return { exitCode: 0, signal: null, stdout, stderr: "", timedOut: false, outputTruncated: false };
+}
+test("local reference plan transport authenticates metadata, recipient, expiry, and temp mode", async (context) => {
+    const key = Buffer.alloc(32, 7);
+    const transport = new LocalEncryptedPlanTransport(() => clock.value);
+    const encrypted = transport.encrypt(Buffer.from("saved-plan"), key, {
+        recipient: authority.recipientIdentity,
+        ttlMs: 60_000,
+    });
+    assert.equal(encrypted.metadata.implementation, "local-reference");
+    assert.equal(transport.decrypt(encrypted, key, authority.recipientIdentity).toString(), "saved-plan");
+    const persisted = {
+        ...encrypted,
+        metadata: {
+            algorithm: encrypted.metadata.algorithm,
+            createdAt: encrypted.metadata.createdAt,
+            digest: encrypted.metadata.digest,
+            expiresAt: encrypted.metadata.expiresAt,
+            implementation: encrypted.metadata.implementation,
+            recipient: encrypted.metadata.recipient,
+        },
+    };
+    assert.equal(transport.decrypt(persisted, key, authority.recipientIdentity).toString(), "saved-plan");
+    assert.throws(() => transport.decrypt(encrypted, key, "other@example.com"), /recipient/);
+    assert.throws(() => transport.decrypt({ ...encrypted, ciphertext: `${encrypted.ciphertext.slice(0, -2)}AA` }, key, authority.recipientIdentity));
+    const handle = await transport.decryptToRestrictiveTemp(encrypted, key, authority.recipientIdentity);
+    context.after(async () => handle.dispose());
+    assert.equal((await stat(handle.path)).mode & 0o777, 0o600);
+    assert.equal((await readFile(handle.path)).toString(), "saved-plan");
+    await handle.dispose();
+    clock.value = new Date("2026-07-13T01:02:00.000Z");
+    assert.throws(() => transport.decrypt(encrypted, key, authority.recipientIdentity), /expired/);
+    clock.value = new Date("2026-07-13T01:00:00.000Z");
+});
+//# sourceMappingURL=native-iac-providers.test.js.map

package/dist/test/native-iac-providers.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-iac-providers.test.js","sourceRoot":"","sources":["../../src/test/native-iac-providers.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EACL,gCAAgC,GAGjC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,mBAAmB,EACnB,gBAAgB,EAChB,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,GAS3B,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,GAAG;IACb,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACpB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACrB,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACnB,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACtB,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;CACrB,CAAC;AACF,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;IACrC,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AACD,MAAM,KAAK,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,0BAA0B,CAAC,EAAE,CAAC;AAC9D,MAAM,SAAS,GAA+B;IAC5C,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,kBAAkB,EAAE,MAAM,CAAC,IAAI;IAC/B,UAAU,EAAE,CAAC;IACb,iBAAiB,EAAE,oBAAoB;CACxC,CAAC;AAEF,SAAS,OAAO,CAAC,SAAS,GAA4B,EAAE;IACtD,OAAO;QACL,SAAS,EAAE,SAAS;QACpB,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,KAAK;QAClB,MAAM,EAAE,sCAAsC;QAC9C,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,kBAAkB,EAAE,MAAM,CAAC,IAAI;QAC/B,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,MAAM,CAAC,KAAK;QACvB,OAAO,EAAE,MAAM,CAAC,GAAG;QACnB,UAAU,EAAE,MAAM,CAAC,MAAM;QACzB,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,MAAM;QACb,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,OAA4B;IAC5C,OAAO;QACL,aAAa,EAAE,OAAO;QACtB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,sBAAsB;QAC7B,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,OAAO,CAAC,WAAW;QACnC,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,SAAS,CAAC,UAAU;QACjC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;QAC9C,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE;QACpC,SAAS,EAAE,0BAA0B;KACtC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU;IAEe,OAAO;IAD3B,QAAQ,GAAqB,EAAE,CAAC;IACzC,YAA6B,OAA8D;uBAA9D,OAAO;IAA0D,CAAC;IAE/F,KAAK,CAAC,GAAG,CAAC,OAAuB;QAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YACnC,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;YACf,eAAe,EAAE,KAAK;SACvB,CAAC;IACJ,CAAC;CACF;AAED,MAAM,kBAAkB;IACb,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IACpD,MAAM,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,WAAmB,EAAE,OAAgC;QAC9D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,GAAG,CACb,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,SAAS,OAAO,CAAC,OAAO,CAAC,KAAK,SAAS,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAC9F,OAAO,CACR,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IACD,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,KAAa,EACb,SAA8B;QAE9B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,SAAS,SAAS,KAAK,SAAS,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;CACF;AAED,MAAM,mBAAmB;IACd,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,KAAK,CAAC,GAAG,CAAC,SAAiB,EAAE,QAA4B;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,SAAiB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;CACF;AAED,IAAI,CAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,KAAK,GAAG,oBAAoB,CAAC;QACjC,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;gBAChD,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE;gBAChD,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE;aACtD;SACF;KACF,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CACd,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5C,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAC/B,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAEvC,MAAM,SAAS,GAAG,sBAAsB,CAAC;QACvC,gBAAgB,EAAE;YAChB,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,EAAE;YAC1E,EAAE,OAAO,EAAE,8BAA8B,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE;YACtF,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;SAC7D;QACD,gBAAgB,EAAE,CAAC,EAAE,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CACd,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAChD,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAChC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,EAAE,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,KAAK,GAAG,oBAAoB,CAAC;QACjC,OAAO,EAAE;YACP,EAAE,UAAU,EAAE,QAAQ,EAAE;YACxB,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE;YAClD,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE;YAClD,IAAI;SACL;KACF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,4DAA4D,CAAC,CAAC;IAEtG,MAAM,SAAS,GAAG,sBAAsB,CAAC;QACvC,gBAAgB,EAAE;YAChB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;YACnC,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC9D,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC9D,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,EAAE;SACvC;KACF,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,yDAAyD,CAAC,CAAC;AACzG,CAAC,CAAC,CAAC;AAEH,SAAS,KAAK,CAAC,IAAY,EAAE,aAAa,GAAG,IAAI,EAAE,SAAS,GAAc,EAAE;IAC1E,OAAO;QACL,EAAE,EAAE,qCAAqC,aAAa,mDAAmD,IAAI,EAAE;QAC/G,IAAI;QACJ,UAAU,EAAE,EAAE,SAAS,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,IAAI,CAAC,kGAAkG,EAAE,GAAG,EAAE;IAC5G,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,WAAW,GAAG;QAClB,GAAG,KAAK,CAAC,QAAQ,CAAC;QAClB,UAAU,EAAE,EAAE,iBAAiB,EAAE,QAAQ,EAAE;QAC3C,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,0FAA0F,EAAE,CAAC;KAChH,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;IACnF,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3F,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,WAAW,CAAC,CAAC;IACrF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAC9F,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAChG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAChH,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3G,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,EAClF,6BAA6B,CAC9B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,oFAAoF,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAC3G,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC7E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,SAAS,CACnB,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CACxG,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC;QACvC,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACvC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW;QACzB,YAAY,EAAE,IAAI,kBAAkB,EAAE;QACtC,MAAM,EAAE;YACN,GAAG,EAAE,IAAI;YACT,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,SAAS;YACzB,SAAS,EAAE,UAAU;YACrB,YAAY,EAAE,YAAY;YAC1B,gBAAgB,EAAE,YAAY;SAC/B;KACF,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC/F,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IACjF,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CACV,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAC3D,KAAK,CACN,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAC5G,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACjE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC7E,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC,CAAC;IACzE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE;QACxC,IAAI,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,SAAS,CAAC;IACxB,MAAM,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG;QACd,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO;QACrC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW;QACzB,YAAY,EAAE,QAAQ;QACtB,MAAM,EAAE;YACN,GAAG,EAAE,IAAI;YACT,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,SAAS;YACzB,SAAS,EAAE,UAAU;YACrB,YAAY,EAAE,YAAY;YAC1B,cAAc,EAAE,iBAAiB;YACjC,gBAAgB,EAAE,iBAAiB;YACnC,kCAAkC,EAAE,IAAI;YACxC,gBAAgB,EAAE,oBAAoB;SACvC;KACO,CAAC;IACX,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9F,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE;QACxE,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc,CAAC,WAAW;QACvC,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,YAAY,EAAE,CAAC,8BAA8B,CAAC;KAC/C,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CACV,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAC3D,IAAI,CACL,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,kCAAkC,CAAC,EAAE,KAAK,CAAC,CAAC;IACjH,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAE,CAAC;IACxF,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAE,CAAC;IAClF,KAAK,MAAM,IAAI,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,cAAc,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,KAAK,CACV,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EACtD,cAAc,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC1G,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;IAC7G,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE/E,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;IAClF,MAAM,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QAChD,OAAO;QACP,OAAO;QACP,QAAQ;QACR,kBAAkB;QAClB,IAAI;QACJ,QAAQ;QACR,UAAU;KACX,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,OAAO,GAAG,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;IAC1C,MAAM,MAAM,CAAC,OAAO,CAClB,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,EAC/D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAC9F,CAAC;IAEF,OAAO,GAAG,SAAS,CAAC;IAEpB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,CAAC,YAAY,CACzB,OAAO,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAC7F,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3D,MAAM,MAAM,CAAC,OAAO,CAClB,iBAAiB,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,EACpE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,CACpF,CAAC;IACF,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACnF,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,gCAAgC,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,OAAO,CAClB,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CACvF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAC;IACxE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,iCAAiC,CAAC,CAAC;IAC7E,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,OAAO,EAAE,EAAE,CACxC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9B,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACrF,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3G,CAAC;IACF,MAAM,IAAI,GAAG;QACX,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACvC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE;YACN,GAAG,EAAE,IAAI;YACT,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,SAAS;YACzB,SAAS,EAAE,UAAU;YACrB,YAAY,EAAE,YAAY;YAC1B,gBAAgB,EAAE,MAAe;SAClC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,4CAA4C,CAAC,CAAC;IACxF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,EAAE,CAAC,EAC3G,yBAAyB,CAC1B,CAAC;IACF,MAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAI,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,EAAE,CAAC,EACrG,mBAAmB,CACpB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qFAAqF,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAC5G,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACrE,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACjD,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,EAAE;gBACrG,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,SAAS,CAAC;gBACpB,gBAAgB,EAAE,CAAC,EAAE,OAAO,EAAE,6BAA6B,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;aAChG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,IAAI,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC;IAC5B,IAAI,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IAC/B,MAAM,MAAM,GAA0B;QACpC,GAAG,EAAE,IAAI;QACT,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;QACpF,IAAI,YAAY;YACd,OAAO,YAAY,CAAC;QACtB,CAAC;QACD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU;KACnC,CAAC;IACF,MAAM,OAAO,GAAG;QACd,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACvC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE,GAAG,EAAE,CAAC,qBAAqB;QACnC,MAAM;QACN,YAAY,EAAE,QAAQ;QACtB,aAAa,EAAE,SAAS;QACxB,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,GAAG;KAC7B,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEtD,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5D,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACxF,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CACV,KAAK,CAAC,KAAK,CAAC,gCAAgC,EAAE,WAAW,CAAC,EAC1D,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,gCAAgC,EAAE,WAAW,CAAC,CAAC,CAAC,CACjF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAE/F,MAAM,SAAS,GAAG,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9F,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,iBAAiB,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE;QACxE,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,cAAc,CAAC,WAAW;QACvC,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,YAAY,EAAE,CAAC,yBAAyB,EAAE,iCAAiC,CAAC;KAC7E,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;IAEhE,MAAM,eAAe,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;IACpF,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,MAAM,MAAM,CAAC,OAAO,CAClB,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CACvF,CAAC;IACF,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC;IACxB,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,CAAC,OAAO,CAClB,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CACvF,CAAC;IACF,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC;IAE3B,WAAW,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,CAAC,OAAO,CAClB,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,EACtE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,uBAAuB,CACvF,CAAC;IACF,WAAW,GAAG,CAAC,CAAC;IAEhB,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC3G,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAE5F,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACzC,IAAI,OAAO,EAAE,IAAI,KAAK,WAAW,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAE,CAAC;QACzE,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1D,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE;YACpD,GAAG,SAAS;YACZ,UAAU,EAAE,GAAG,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;SACvD,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/F,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kEAAkE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IACzF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC,CAAC;IAC/E,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACvE,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC;QAChF,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,gBAAgB,GAA+B,SAAS,CAAC;IAC7D,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC;QAC3C,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,gBAAgB;QAC9C,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE;YACN,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;YACxB,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG;SACnC;QACD,YAAY,EAAE,IAAI,kBAAkB,EAAE;QACtC,aAAa,EAAE,IAAI,mBAAmB,EAAE;QACxC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAC1G,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC;IACxF,gBAAgB,GAAG;QACjB,GAAG,SAAS;QACZ,UAAU,EAAE,CAAC;QACb,kBAAkB,EAAE,CAAC;QACrB,uBAAuB,EAAE,SAAS;QAClC,iBAAiB,EAAE,mBAAmB;KACvC,CAAC;IACF,MAAM,mBAAmB,GAAuB;QAC9C,GAAG,QAAQ,CAAC,OAAO,CAAC;QACpB,WAAW,EAAE,CAAC;QACd,uBAAuB,EAAE,SAAS;QAClC,iBAAiB,EAAE,mBAAmB;KACvC,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAExG,MAAM,YAAY,GAAG,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAChD,OAAO,YAAY,CAAC,uBAAuB,CAAC;IAC5C,MAAM,MAAM,CAAC,OAAO,CAClB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,YAAY,EAAE,gBAAgB,CAAC,EACvD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAC9F,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAClB,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,GAAG,gBAAgB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,CAAC,EAC7G,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,8BAA8B,CAC9F,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+DAA+D,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IACtF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC5C,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,MAAM,GAAsB;QAChC,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YAChF,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAM,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAChG,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1G,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBAChC,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACpC,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;KACF,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC;QAC3C,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACvC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE;YACN,GAAG,EAAE,IAAI;YACT,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;YACxB,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG;SACnC;QACD,YAAY,EAAE,QAAQ;QACtB,aAAa,EAAE,IAAI,mBAAmB,EAAE;QACxC,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;KAC7C,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IAC5F,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;IAC1G,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,GAAG,EAAE,CACjC,IAAI,CAAC,SAAS,CAAC;QACb,MAAM,EAAE;YACN,OAAO,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;YAClE,WAAW,EAAE;gBACX,SAAS,EAAE;oBACT;wBACE,OAAO,EAAE,sBAAsB;wBAC/B,aAAa,EAAE,yCAAyC;wBACxD,IAAI,EAAE,iBAAiB;wBACvB,MAAM,EAAE;4BACN,IAAI,EAAE,MAAM;4BACZ,UAAU,EAAE,6DAA6D;4BACzE,2BAA2B,EAAE,IAAI;4BACjC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE;4BACnD,YAAY,EAAE,mBAAmB;yBAClC;wBACD,gBAAgB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;qBAC/C;iBACF;gBACD,aAAa,EAAE;oBACb;wBACE,SAAS,EAAE;4BACT;gCACE,OAAO,EAAE,oCAAoC;gCAC7C,IAAI,EAAE,iBAAiB;gCACvB,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE;gCACpD,gBAAgB,EAAE,EAAE;6BACrB;yBACF;qBACF;iBACF;aACF;SACF;KACF,CAAC,CACH,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,uBAAuB,CAAC;QAC3C,MAAM;QACN,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QACvC,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK;QACtB,MAAM,EAAE;YACN,GAAG,EAAE,MAAM;YACX,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,GAAG,EAAE,CAAC,oBAAoB;YACpC,YAAY,EAAE,MAAM,CAAC,IAAI;YACzB,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,GAAG;SACnC;KACF,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAC7D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE;QACnD,IAAI,EAAE,MAAM;QACZ,UAAU,EAAE,6DAA6D;QACzE,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;KAC3B,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,wCAAwC,CAAC,CAAC;AAC3F,CAAC,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;AACpG,CAAC;AAED,IAAI,CAAC,yFAAyF,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAChH,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,2BAA2B,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE;QAClE,SAAS,EAAE,SAAS,CAAC,iBAAiB;QACtC,KAAK,EAAE,MAAM;KACd,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;IACtG,MAAM,SAAS,GAAG;QAChB,GAAG,SAAS;QACZ,QAAQ,EAAE;YACR,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;YACvC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;YACvC,MAAM,EAAE,SAAS,CAAC,QAAQ,CAAC,MAAM;YACjC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;YACvC,cAAc,EAAE,SAAS,CAAC,QAAQ,CAAC,cAAc;YACjD,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,SAAS;SACxC;KACF,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;IACtG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,mBAAmB,CAAC,EAAE,WAAW,CAAC,CAAC;IACzF,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CACjB,SAAS,CAAC,OAAO,CACf,EAAE,GAAG,SAAS,EAAE,UAAU,EAAE,GAAG,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EACtE,GAAG,EACH,SAAS,CAAC,iBAAiB,CAC5B,CACF,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACrG,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,EAAE,KAAK,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;IACrE,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;IAEvB,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/F,KAAK,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,0BAA0B,CAAC,CAAC;AACrD,CAAC,CAAC,CAAC"}

package/dist/test/operations-placeholders.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=operations-placeholders.test.d.ts.map