@calltelemetry/ct-lab-mcp 0.8.106 → 0.8.108

package/README.md

@@ -724,11 +724,13 @@ next steps. The usual fixes are:
   Doppler CLI with no login prompt; the reference is not a secret), or
 - start the harness itself under `doppler run --project ai-workspace --config dev --`.
 
-The aggregate resolver needs a shared appliance login (`LAB_VM_CREDENTIALS`, or
-`LAB_VM_CREDENTIALS_USERNAME` + `LAB_VM_CREDENTIALS_PASSWORD`). Per-VM
-`LAB_VM_CREDENTIALS_<UUID>` secrets belong to the canonical CLI and do not
-satisfy it. `list_hosts`, `list_inventory` and the ApplianceClaim tools do not
-need the aggregate bundle; legacy tools such as `list_slots` do.
+The aggregate resolver needs only the Proxmox host credentials (`proxmox-lab`,
+`proxmox-mini`). A shared appliance login (`LAB_VM_CREDENTIALS`, or
+`LAB_VM_CREDENTIALS_USERNAME` + `LAB_VM_CREDENTIALS_PASSWORD`) is optional and
+is used only when supplied: guests are dynamic and carry per-VM credentials
+(`LAB_VM_CREDENTIALS_<UUID>`) owned by the canonical CLI, and the direct SSH
+appliance executor is retired. `list_hosts`, `list_inventory` and the
+ApplianceClaim tools never needed the aggregate bundle.
 
 ### Governed Call Telemetry workspace
 

package/assets/stig/SHA256SUMS

@@ -13,7 +13,20 @@ eb119e742a4791404ca298c962515ffe3492814dfc72aecac16c420ccb3b0ccc  guest/keyhash.
 9abadcf3c9a1334447a6f349c6c78105d090550d6e8c09adb0320fc1a73e5019  guest/shred-recovery.sh
 0af1b98d2acf8827ac3861a0ec25f507483a3dc902f00ed215ce13b6dc4db0dc  guest/test-recovery.sh
 6a63f43c312eed5941f0b86044ebe8b3457ce9412c5d9a1ceda67316d16a4209  guest/trim.sh
-6b3eab512392c9b68499cb3b4a753377bcc499b810e7259d8ede5e10861bf674  guest/verify-root.sh
+6155386f59eb807256b9ab5a9f61136821cb43bf629b06304c4279922a4d30f3  guest/verify-root.sh
 770cbf1c4ea374772d6e80734b1fe4d7d7f5826c8c528a5371f4dfea196479d7  guest/verify-user.sh
 b4a37a0425369c99dfe9b63086155b7ffaa0ef73f98b158143ecb0cd84d45d94  guest/scan-disa.sh
 65e5a3ca041b44d496e81cd961c3fa70ac0bf6804ef9b3f48a9997fa83902d07  image/verify-image.sh
+b16398f652108b9c80f310b98484d23f7f7ac0db9dfd6bb42ca19392ffc2e3d0  guest/collect-fips-state.sh
+f965a01e2010fbdc67418ac65f0b5652fa0a73bd11527930dbbd53b4bf0db31e  guest/collect-hardware.sh
+8c7a455289c18ef63b23c8fead2122db9e31399e8490501e8933f62b5a9c4008  guest/collect-host-checks.sh
+9a3d629763624d831b945507ba32d2e08f5a41b9d8e00dd7563b9707746aa09e  guest/collect-network-services.sh
+799bedfcce87a51e1b2a82724aae64f2ba0586efbe71b51877e214c6f8396024  guest/collect-repolist.sh
+ed5647566b45fca581e1eed8cfcac3c431ea6d2a6ab405ab2d6aafc7a9eb7af4  guest/collect-rpm-inventory.sh
+99576ee9e80cb7d2d18c4efb624c69429d67a560f151a22da2b9f12681bdb3a3  guest/collect-rpm-nevra.sh
+58e22eb71b7e508207acd61719c63a35dffc87973dd540321dc49e4b4f8de46e  guest/collect-rpmlist.sh
+01c34fa475ae254dec8c4a091901406f7f338591a1215cc097206e02249f54b2  guest/collect-updateinfo-all.sh
+0ad1521d199b7912a2c6490f44ee945b643ea88c33ecae16bb283ab39f22eb9e  guest/collect-updateinfo-security.sh
+48d22a1c247bc1d58fc7d0820c4f045eb4a7e4234721d47094e51db7fd04dcef  guest/collect-updateinfo-summary.sh
+b720ee63cac8ff74a68589f23ca57f98aed1ec39a7bc023f93f29e588821ccdc  guest/oval-eval.sh
+10f120dc3ab761227a211c74207ad0ef2f2109e85502413e0b90595fc5794912  guest/oval-prep.sh

package/assets/stig/guest/collect-fips-state.sh

@@ -0,0 +1,6 @@
+#!/bin/bash
+# Read-only host facts for fips-state.txt. Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+echo "### FIPS"; fips-mode-setup --check; update-crypto-policies --show; cat /proc/sys/crypto/fips_enabled; echo
+    echo "### NEVRA"; rpm -q --qf "%{NAME}-%{VERSION}-%{RELEASE}.%{ARCH}\n" kernel kernel-core openssl openssl-libs openssl-pkcs11 libgcrypt gnutls nss nss-softokn nss-softokn-freebl nss-util libkcapi libkcapi-hmaccalc openssh openssh-server nettle gmp dracut-fips 2>&1
+    echo; echo "### KCOMP"; rpm -q --qf "%{NAME}-%|EPOCH?{%{EPOCH}}:{(none)}|:%{VERSION}-%{RELEASE}.%{ARCH} %{INSTALLTIME:date} %{RSAHEADER:pgpsig}\n" nss-softokn kernel-core libgcrypt gnutls openssh libkcapi openssl-libs
+    echo; echo "### OSREL"; head -3 /etc/os-release

package/assets/stig/guest/collect-hardware.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only host facts for hardware.txt. Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+dmidecode -t system 2>&1 | head -20; lscpu; free -b; lsblk -b; ip -br a; uname -r; cat /etc/redhat-release; ls /dev/tpm0 /dev/tpmrm0 2>&1; [ -d /sys/firmware/efi ] && echo EFI-boot || echo BIOS-boot; mokutil --sb-state 2>&1

package/assets/stig/guest/collect-host-checks.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only host facts for host-checks.txt. Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+getent shadow root | cut -d: -f4,5; rpm -q kernel-core | wc -l; grubby --default-kernel; id -Z; grep -hE "^(deny|fail_interval|unlock_time|even_deny_root|silent|audit)" /etc/security/faillock.conf

package/assets/stig/guest/collect-network-services.sh

@@ -0,0 +1,15 @@
+#!/bin/bash
+# Read-only host facts for network-services.txt. Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+echo "### SS"; ss -tulpn; echo; echo "### DEFZONE"; firewall-cmd --get-default-zone; firewall-cmd --get-active-zones; echo; echo "### ZONES"; firewall-cmd --list-all-zones
+    echo; echo "### RUNNING"; systemctl list-units --type=service --state=running --no-legend --no-pager
+    echo; echo "### ENABLED"; systemctl list-unit-files --state=enabled --no-legend --no-pager
+    echo; echo "### SOCKETS"; systemctl list-units --type=socket --no-legend --no-pager
+    echo; echo "### RESOLV"; cat /etc/resolv.conf; grep -r . /etc/NetworkManager/conf.d/ 2>/dev/null
+    echo; echo "### CHRONY"; grep -vE "^(#|$)" /etc/chrony.conf; chronyc sources 2>&1 | head -12
+    echo; echo "### RSYSLOG"; grep -nE "^[^#]*@" /etc/rsyslog.conf
+    echo; echo "### REPOS"; ls /etc/yum.repos.d; dnf -C repolist --all 2>&1 | tail -3
+    echo; echo "### RHSM"; subscription-manager status 2>&1 | tail -5
+    echo; echo "### SSHD"; sshd -T 2>&1 | grep -E "^(port|listenaddress|permitrootlogin|ciphers|macs|banner|kexalgorithms)"
+    echo; echo "### SSHD-CRYPTO-POLICY-BACKEND"; cat /etc/crypto-policies/back-ends/opensshserver.config
+    echo; echo "### TIMERS"; systemctl list-timers --no-pager --no-legend
+    echo; echo "### RSYSLOG-FILE"; grep -n "@@" /etc/rsyslog.conf

package/assets/stig/guest/collect-repolist.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: dnf repolist, cache only (repolist.txt). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rc=0; dnf -C repolist --all 2>&1 || rc=$?; echo rc=$rc; head -3 /etc/os-release

package/assets/stig/guest/collect-rpm-inventory.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: rpm inventory rows (rpm-inventory.tsv; the caller writes the header row). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rpm -qa --qf '%{NAME}\t%|EPOCH?{%{EPOCH}}:{0}|\t%{VERSION}\t%{RELEASE}\t%{ARCH}\t%{VENDOR}\t%{LICENSE}\t%{SOURCERPM}\t%{RSAHEADER:pgpsig}\t%{SIGPGP:pgpsig}\t%{DSAHEADER:pgpsig}\t%{SHA256HEADER}\t%{PACKAGER}\n' | LC_ALL=C sort

package/assets/stig/guest/collect-rpm-nevra.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: rpm NEVRA list (rpm-nevra.txt). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rpm -qa --qf '%{NAME}-%|EPOCH?{%{EPOCH}}:{0}|:%{VERSION}-%{RELEASE}.%{ARCH}\n' | LC_ALL=C sort

package/assets/stig/guest/collect-rpmlist.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: rpm list with vendor (rpmlist.txt). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rpm -qa --qf '%{NAME}|%|EPOCH?{%{EPOCH}}:{(none)}|%|VERSION?{%{VERSION}}:{(none)}|%{RELEASE}|%|ARCH?{%{ARCH}}:{(none)}|%{VENDOR}\n' | LC_ALL=C sort

package/assets/stig/guest/collect-updateinfo-all.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: dnf updateinfo all, cache only (updateinfo-all.txt). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rc=0; dnf -C updateinfo list --all --security 2>&1 || rc=$?; echo rc=$rc

package/assets/stig/guest/collect-updateinfo-security.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: dnf updateinfo security, cache only (updateinfo-security.txt). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rc=0; dnf -C updateinfo list security 2>&1 || rc=$?; echo rc=$rc

package/assets/stig/guest/collect-updateinfo-summary.sh

@@ -0,0 +1,3 @@
+#!/bin/bash
+# Read-only: dnf updateinfo summary, cache only (updateinfo-summary.txt). Run as root; stdout is the evidence file. Faithful to the `do_collect` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+rc=0; dnf -C updateinfo summary 2>&1 || rc=$?; echo rc=$rc

package/assets/stig/guest/oval-eval.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+# Evaluate the uploaded Red Hat OVAL v2 RHEL 8 feed on the clone (oscap oval eval). Run as root.
+# Read-only on the system: oscap reads the RPM database; output stays under /var/tmp/ct-oval.
+# Faithful to the `do_oval` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+e=/var/tmp/ct-oval
+cd $e; rc=0; oscap oval eval --results $e/oval-results.xml --report $e/oval-report.html $e/rhel-8.oval.xml > $e/oval-stdout.txt 2>&1 || rc=$?
+{ echo oval_exit=$rc; echo oval_true=$(grep -c ': true$' $e/oval-stdout.txt || true); echo oval_false=$(grep -c ': false$' $e/oval-stdout.txt || true)
+  echo oval_other=$(grep '^Definition' $e/oval-stdout.txt | grep -vcE ': (true|false)$' || true); } > $e/oval-summary.txt
+grep ': true$' $e/oval-stdout.txt > $e/oval-true-definitions.txt || true
+rm -f $e/rhel-8.oval.xml; sha256sum $e/oval-results.xml | cut -d' ' -f1 > $e/oval-results.xml.raw.sha256; xz -9e -f $e/oval-results.xml; sha256sum $e/oval-results.xml.xz | cut -d' ' -f1 > $e/oval-results.xml.xz.sha256
+chown -R ctadmin $e

package/assets/stig/guest/oval-prep.sh

@@ -0,0 +1,4 @@
+#!/bin/bash
+# Scratch directory for the OVAL evaluation (the Red Hat feed is uploaded here by the caller). Run as root.
+# Faithful to the `do_oval` block of the known-good clone.sh (ct-meta rhel8-stig-template).
+install -d -o ctadmin -m 0700 /var/tmp/ct-oval

package/assets/stig/guest/verify-root.sh

@@ -7,3 +7,16 @@ echo luks_passphrase_slots=$(cryptsetup luksDump $dev | grep -cE "^  [0-9]+: luk
 echo clevis_tpm2_tokens=$(cryptsetup luksDump $dev | grep -c "clevis")
 echo bootstrap_key_file=$(test -e /etc/ct-luks-bootstrap.key && echo present || echo absent)
 echo tpm_bound=$(clevis luks list -d $dev | grep -c tpm2)
+echo root_min_days=$(getent shadow root | cut -d: -f4)
+echo root_max_days=$(getent shadow root | cut -d: -f5)
+echo kernels_installed=$(rpm -q kernel-core | wc -l)
+echo kernel_packages=$(rpm -qa "kernel*" | sort | paste -sd,)
+echo boot_entries=$(grubby --info=ALL | grep -c ^kernel=)
+echo default_kernel=$(grubby --default-kernel)
+echo bls_entries=$(ls /boot/loader/entries | paste -sd,)
+echo sudo_nopasswd_entries=$(cat /etc/sudoers /etc/sudoers.d/* | grep -v "^#" | grep -c NOPASSWD)
+echo repo_files=$(ls /etc/yum.repos.d | paste -sd,)
+echo ct_offline_repo_enabled=$(sed -n "s/^enabled=//p" /etc/yum.repos.d/ct-offline.repo)
+echo gpgcheck_global=$(sed -n "s/^gpgcheck[ ]*=[ ]*//p" /etc/dnf/dnf.conf)
+echo localpkg_gpgcheck=$(sed -n "s/^localpkg_gpgcheck[ ]*=[ ]*//p" /etc/dnf/dnf.conf)
+echo stale_boot_files=$(ls /boot | grep -c rescue)

package/dist/src/credentials/remediation.d.ts

@@ -14,6 +14,12 @@ import type { CredentialResolutionError } from "./errors.js";
 export interface CredentialGroupStatus {
     group: "proxmox-lab" | "proxmox-mini" | "appliance-ssh";
     present: boolean;
+    /**
+     * True when the group never gates the aggregate bundle. The shared appliance
+     * login is optional: guests are dynamic and carry per-VM credentials owned
+     * by the canonical CLI.
+     */
+    optional?: boolean;
     /** Variable names that satisfy this group (name-only; never values). */
     needs: string;
 }

package/dist/src/credentials/remediation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remediation.d.ts","sourceRoot":"","sources":["../../../src/credentials/remediation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,aAAa,GAAG,cAAc,GAAG,eAAe,CAAC;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0EAA0E;IAC1E,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAe9C,wBAAgB,4BAA4B,CAAC,GAAG,GAAE,GAAiB,GAAG,qBAAqB,EAAE,CAqB5F;AAcD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,EACpF,GAAG,GAAE,GAAiB,GACrB,qBAAqB,CAqEvB"}
+{"version":3,"file":"remediation.d.ts","sourceRoot":"","sources":["../../../src/credentials/remediation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAE7D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,aAAa,GAAG,cAAc,GAAG,eAAe,CAAC;IACxD,OAAO,EAAE,OAAO,CAAC;IACjB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,wEAAwE;IACxE,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0EAA0E;IAC1E,SAAS,EAAE,qBAAqB,EAAE,CAAC;IACnC,qBAAqB,EAAE,OAAO,CAAC;CAChC;AAED,KAAK,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAe9C,wBAAgB,4BAA4B,CAAC,GAAG,GAAE,GAAiB,GAAG,qBAAqB,EAAE,CAsB5F;AAeD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,IAAI,CAAC,yBAAyB,EAAE,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC,GAAG,SAAS,EACpF,GAAG,GAAE,GAAiB,GACrB,qBAAqB,CA8DvB"}

package/dist/src/credentials/remediation.js

@@ -34,6 +34,7 @@ export function inspectCredentialEnvironment(env = process.env) {
         },
         {
             group: "appliance-ssh",
+            optional: true,
             present: anySet(env, ["LAB_VM_CREDENTIALS", "VM_CREDENTIALS"]) ||
                 (anySet(env, ["LAB_VM_CREDENTIALS_USERNAME", "LAB_VM_CREDENTIALS_USER", "LAB_VM_USER", "VM_USER"]) &&
                     anySet(env, ["LAB_VM_CREDENTIALS_PASSWORD", "LAB_VM_CREDENTIALS_PASS", "LAB_VM_PASS", "VM_PASS"])),
@@ -44,14 +45,15 @@ export function inspectCredentialEnvironment(env = process.env) {
 const CANONICAL_ALTERNATIVE = "Reads that do not need this aggregate bundle: list_hosts and list_inventory (target-scoped credentials via the " +
     "canonical lab-inventory CLI), the ApplianceClaim tools, and `lab-inventory` itself. Legacy tools such as " +
     "list_slots stay blocked with CREDENTIALS_UNAVAILABLE until the bundle resolves; do not inject unrelated hosts' " +
-    "credentials just to unblock one VM.";
+    "credentials just to unblock one VM. A shared appliance login is not required: guests are dynamic, and their " +
+    "per-VM `LAB_VM_CREDENTIALS_<UUID>` secrets belong to the canonical CLI.";
 const VERIFY_STEP = "Reload the server (manage_mcp_server reload, or restart the harness) and call credential_status again: the " +
     "tier should read direct_env or doppler_api and the legacy aggregate source resolved. A host listed here as " +
     "reachable is the only evidence the credentials work; mock mode (CT_LAB_MCP_ALLOW_MOCK=1) is for offline tests " +
     "and its results are not evidence.";
 export function buildCredentialRemediation(error, env = process.env) {
     const inspected = inspectCredentialEnvironment(env);
-    const missingGroups = inspected.filter((g) => !g.present);
+    const missingGroups = inspected.filter((g) => !g.present && !g.optional);
     const dopplerTokenInProcess = set(env, "DOPPLER_TOKEN");
     const reason = error?.reason ?? "no_credentials_found";
     const steps = [];
@@ -85,19 +87,14 @@ export function buildCredentialRemediation(error, env = process.env) {
             missingGroups.map((g) => `${g.group} (${g.needs})`).join("; ") +
             ".");
     }
-    if (missingGroups.some((g) => g.group === "appliance-ssh")) {
-        steps.push("Note: the aggregate resolver reads one shared appliance login (LAB_VM_CREDENTIALS or the _USERNAME/_PASSWORD " +
-            "pair). Per-VM `LAB_VM_CREDENTIALS_<UUID>` secrets are consumed only by the canonical CLI and do not satisfy " +
-            "it; if the secret store has no shared entry the aggregate bundle cannot resolve from it.");
-    }
     steps.push(CANONICAL_ALTERNATIVE, VERIFY_STEP);
     const groupSummary = missingGroups.length
         ? `no ${missingGroups.map((g) => g.group).join(", ")} variables reached this process`
         : "the expected variables are present but did not resolve";
     const headline = reason === "doppler_unreachable"
         ? "The Doppler API tier failed; fix the token/connectivity or inject LAB_* variables directly."
-        : `Aggregate lab credentials unavailable: ${groupSummary}. Inject LAB_PROXMOX_*, LAB_PROXMOX_MINIS_* and ` +
-            "LAB_VM_CREDENTIALS from the parent (doppler:// env refs in the MCP config, or run the harness under " +
+        : `Aggregate lab credentials unavailable: ${groupSummary}. Inject LAB_PROXMOX_* and LAB_PROXMOX_MINIS_* ` +
+            "(a shared LAB_VM_CREDENTIALS login is optional) from the parent (doppler:// env refs in the MCP config, or run the harness under " +
             "`doppler run`); credential_status lists the exact steps. list_hosts/list_inventory and claim tools do " +
             "not need this bundle.";
     return { headline, steps, inspected, dopplerTokenInProcess };

package/dist/src/credentials/remediation.js.map

@@ -1 +1 @@
-{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../../src/credentials/remediation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAuBH,MAAM,GAAG,GAAG,CAAC,GAAQ,EAAE,GAAW,EAAW,EAAE,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACrG,MAAM,MAAM,GAAG,CAAC,GAAQ,EAAE,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAExF,SAAS,mBAAmB,CAAC,GAAQ,EAAE,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,KAAK,EAAE,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,IAAI,GACR,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,CAAC;QAC9B,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,cAAc,EAAE,GAAG,MAAM,kBAAkB,CAAC,CAAC,CAAC;QACtE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO,QAAQ,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAW,OAAO,CAAC,GAAG;IACjE,OAAO;QACL;YACE,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC;YACjD,KAAK,EAAE,6EAA6E;SACrF;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,CAAC,IAAI,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,CAAC;YACxG,KAAK,EAAE,yFAAyF;SACjG;QACD;YACE,KAAK,EAAE,eAAe;YACtB,OAAO,EACL,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;gBACrD,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;oBAChG,MAAM,CAAC,GAAG,EAAE,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;YACtG,KAAK,EAAE,qGAAqG;SAC7G;KACF,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GACzB,iHAAiH;IACjH,2GAA2G;IAC3G,iHAAiH;IACjH,qCAAqC,CAAC;AAExC,MAAM,WAAW,GACf,6GAA6G;IAC7G,6GAA6G;IAC7G,gHAAgH;IAChH,mCAAmC,CAAC;AAEtC,MAAM,UAAU,0BAA0B,CACxC,KAAoF,EACpF,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,SAAS,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,qBAAqB,GAAG,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,sBAAsB,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,WAAW,GAAG,GAAa,EAAE,CAAC;QAClC,sEAAsE;YACpE,gHAAgH;QAClH,0GAA0G;YACxG,yGAAyG;YACzG,0GAA0G;YAC1G,uGAAuG;YACvG,wEAAwE;YACxE,uDAAuD;QACzD,qBAAqB;YACnB,CAAC,CAAC,oGAAoG;gBACpG,4FAA4F;YAC9F,CAAC,CAAC,uGAAuG;gBACvG,wGAAwG;KAC7G,CAAC;IAEF,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,6GAA6G;YAC3G,gGAAgG,EAClG,iHAAiH,EACjH,+EAA+E,CAChF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,iFACE,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAC5F,GAAG,EACH,GAAG,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,mDAAmD;YACjD,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,GAAG,CACN,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CACR,+GAA+G;YAC7G,8GAA8G;YAC9G,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM;QACvC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC;QACrF,CAAC,CAAC,wDAAwD,CAAC;IAC7D,MAAM,QAAQ,GACZ,MAAM,KAAK,qBAAqB;QAC9B,CAAC,CAAC,6FAA6F;QAC/F,CAAC,CAAC,0CAA0C,YAAY,kDAAkD;YACxG,sGAAsG;YACtG,wGAAwG;YACxG,uBAAuB,CAAC;IAE9B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC;AAC/D,CAAC"}
+{"version":3,"file":"remediation.js","sourceRoot":"","sources":["../../../src/credentials/remediation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA6BH,MAAM,GAAG,GAAG,CAAC,GAAQ,EAAE,GAAW,EAAW,EAAE,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AACrG,MAAM,MAAM,GAAG,CAAC,GAAQ,EAAE,IAAc,EAAW,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAExF,SAAS,mBAAmB,CAAC,GAAQ,EAAE,MAAc;IACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,KAAK,EAAE,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC;IACpG,MAAM,IAAI,GACR,GAAG,CAAC,GAAG,EAAE,GAAG,MAAM,WAAW,CAAC;QAC9B,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,cAAc,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,cAAc,EAAE,GAAG,MAAM,kBAAkB,CAAC,CAAC,CAAC;QACtE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO,QAAQ,IAAI,IAAI,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAW,OAAO,CAAC,GAAG;IACjE,OAAO;QACL;YACE,KAAK,EAAE,aAAa;YACpB,OAAO,EAAE,mBAAmB,CAAC,GAAG,EAAE,cAAc,CAAC;YACjD,KAAK,EAAE,6EAA6E;SACrF;QACD;YACE,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,mBAAmB,CAAC,GAAG,EAAE,oBAAoB,CAAC,IAAI,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,CAAC;YACxG,KAAK,EAAE,yFAAyF;SACjG;QACD;YACE,KAAK,EAAE,eAAe;YACtB,QAAQ,EAAE,IAAI;YACd,OAAO,EACL,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;gBACrD,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;oBAChG,MAAM,CAAC,GAAG,EAAE,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;YACtG,KAAK,EAAE,qGAAqG;SAC7G;KACF,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GACzB,iHAAiH;IACjH,2GAA2G;IAC3G,iHAAiH;IACjH,8GAA8G;IAC9G,yEAAyE,CAAC;AAE5E,MAAM,WAAW,GACf,6GAA6G;IAC7G,6GAA6G;IAC7G,gHAAgH;IAChH,mCAAmC,CAAC;AAEtC,MAAM,UAAU,0BAA0B,CACxC,KAAoF,EACpF,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,SAAS,GAAG,4BAA4B,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,qBAAqB,GAAG,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,IAAI,sBAAsB,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,MAAM,WAAW,GAAG,GAAa,EAAE,CAAC;QAClC,sEAAsE;YACpE,gHAAgH;QAClH,0GAA0G;YACxG,yGAAyG;YACzG,0GAA0G;YAC1G,uGAAuG;YACvG,wEAAwE;YACxE,uDAAuD;QACzD,qBAAqB;YACnB,CAAC,CAAC,oGAAoG;gBACpG,4FAA4F;YAC9F,CAAC,CAAC,uGAAuG;gBACvG,wGAAwG;KAC7G,CAAC;IAEF,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACrC,KAAK,CAAC,IAAI,CACR,6GAA6G;YAC3G,gGAAgG,EAClG,iHAAiH,EACjH,+EAA+E,CAChF,CAAC;IACJ,CAAC;SAAM,IAAI,MAAM,KAAK,qBAAqB,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CACR,iFACE,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAC5F,GAAG,EACH,GAAG,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAC1B,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,mDAAmD;YACjD,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9D,GAAG,CACN,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IAE/C,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM;QACvC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC;QACrF,CAAC,CAAC,wDAAwD,CAAC;IAC7D,MAAM,QAAQ,GACZ,MAAM,KAAK,qBAAqB;QAC9B,CAAC,CAAC,6FAA6F;QAC/F,CAAC,CAAC,0CAA0C,YAAY,iDAAiD;YACvG,mIAAmI;YACnI,wGAAwG;YACxG,uBAAuB,CAAC;IAE9B,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,qBAAqB,EAAE,CAAC;AAC/D,CAAC"}

package/dist/src/credentials/resolver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/credentials/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,iBAAiB,EAEjB,cAAc,EAEd,iBAAiB,EACjB,0BAA0B,EAE1B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAcpB,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAChD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAMvF;AAkCD;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,iBAAiB,GAAG,cAAc,EACxC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,sBAAsB,CAiCxB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAA6B;IACtE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAwB;IAClE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAmB;IAE9D;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,eAAe;IASvB;;;;;;;;;OASG;IACG,OAAO,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IA2MnF;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAgHhC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAM7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA+F5B,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,qBAAqB;IAsB7B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,kBAAkB;CAwB3B;AAED,eAAO,MAAM,kBAAkB,oBAA2B,CAAC"}
+{"version":3,"file":"resolver.d.ts","sourceRoot":"","sources":["../../../src/credentials/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,iBAAiB,EAEjB,cAAc,EAEd,iBAAiB,EACjB,0BAA0B,EAE1B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAcpB,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAChD,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAC1C,eAAO,MAAM,sBAAsB,QAAS,CAAC;AAE7C,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,MAAM,CAMvF;AAkCD;;;;GAIG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,iBAAiB,GAAG,cAAc,EACxC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,sBAAsB,CAiCxB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAA6B;IACtE,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAwB;IAClE,OAAO,CAAC,QAAQ,CAAC,0BAA0B,CAAmB;IAE9D;;;;;;OAMG;IACH,OAAO,CAAC,WAAW;IASnB,OAAO,CAAC,eAAe;IASvB;;;;;;;;;OASG;IACG,OAAO,CAAC,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,0BAA0B,CAAC;IAuMnF;;OAEG;IACH,OAAO,CAAC,wBAAwB;IAgHhC;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAM7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA+F5B,OAAO,CAAC,gBAAgB;IAiBxB,OAAO,CAAC,qBAAqB;IAsB7B,OAAO,CAAC,uBAAuB;IAQ/B,OAAO,CAAC,kBAAkB;CAwB3B;AAED,eAAO,MAAM,kBAAkB,oBAA2B,CAAC"}

package/dist/src/credentials/resolver.js

@@ -149,23 +149,23 @@ export class CredentialResolver {
         // when a Doppler token is set and either is missing directly we fall through
         // to Tier 2, which merges direct env over Doppler.
         const dopplerTokenPresent = Boolean(options.dopplerToken || env.DOPPLER_TOKEN);
-        const directComplete = Boolean(directLab && directMini && directVmCreds);
-        const dopplerHasNothingToAdd = !dopplerTokenPresent || (directComplete && Boolean(directIbm64));
+        // The shared appliance login (vmCredentials) is optional: guests are
+        // dynamic and carry per-VM credentials owned by the canonical CLI, and the
+        // direct SSH executor that would consume a shared login is retired. A
+        // shared login is still honoured when one is supplied.
+        const directComplete = Boolean(directLab && directMini);
+        const dopplerHasNothingToAdd = !dopplerTokenPresent || (directComplete && Boolean(directIbm64) && Boolean(directVmCreds));
         const buildDirectResult = () => {
             const proxmoxHosts = [directLab, directMini, ...(directIbm64 ? [directIbm64] : [])];
             const esxiHosts = directEsxi ? [directEsxi] : [];
-            const vmCredentials = directVmCreds || (mockPermitted ? this.createMockVmCredentials() : null);
-            if (!vmCredentials) {
-                throw new CredentialResolutionError("Proxmox hypervisor credentials resolved, but no appliance SSH " +
-                    "credentials (LAB_VM_CREDENTIALS / LAB_VM_CREDENTIALS_USERNAME+PASSWORD) were found.", "partial_credentials", ALLOW_MOCK_REMEDIATION, ["vmCredentials"]);
-            }
+            const vmCredentials = directVmCreds ?? undefined;
             this.registerAllSecrets(proxmoxHosts, esxiHosts, vmCredentials);
             return {
                 tier: "direct_env",
                 hosts: proxmoxHosts,
                 proxmoxHosts,
                 esxiHosts,
-                vmCredentials
+                ...(vmCredentials ? { vmCredentials } : {})
             };
         };
         if (directLab && directMini && dopplerHasNothingToAdd) {
@@ -198,15 +198,14 @@ export class CredentialResolver {
                 const dopplerVmCreds = directVmCreds || this.extractVmCredentials(mergedSecrets);
                 if (dopplerLab || dopplerMini || dopplerEsxi) {
                     // ESXi is retired and optional (REL-1722): it never gates completeness.
-                    const fullyResolved = Boolean(dopplerLab && dopplerMini && dopplerVmCreds);
+                    // vmCredentials is optional (see Tier 1): it never gates completeness.
+                    const fullyResolved = Boolean(dopplerLab && dopplerMini);
                     if (!fullyResolved && !mockPermitted) {
                         const missing = [];
                         if (!dopplerLab)
                             missing.push("proxmox-lab");
                         if (!dopplerMini)
                             missing.push("proxmox-mini");
-                        if (!dopplerVmCreds)
-                            missing.push("vmCredentials");
                         throw new CredentialResolutionError(`Doppler API resolved credentials for [${[dopplerLab && "proxmox-lab", dopplerMini && "proxmox-mini", dopplerEsxi && "esxi"]
                             .filter(Boolean)
                             .join(", ") || "none"}] but is missing [${missing.join(", ")}].`, "partial_credentials", ALLOW_MOCK_REMEDIATION, missing);
@@ -217,7 +216,7 @@ export class CredentialResolver {
                     if (dopplerIbm64)
                         proxmoxHosts.push(dopplerIbm64);
                     const esxiHosts = dopplerEsxi ? [dopplerEsxi] : [];
-                    const vmCredentials = dopplerVmCreds || this.createMockVmCredentials();
+                    const vmCredentials = dopplerVmCreds ?? (mockPermitted ? this.createMockVmCredentials() : undefined);
                     this.registerAllSecrets(proxmoxHosts, esxiHosts, vmCredentials);
                     logger.info(`Resolved credentials via Doppler API (Tier 2). Secrets count: ${Object.keys(dopplerSecrets).length}`);
                     return {
@@ -225,7 +224,7 @@ export class CredentialResolver {
                         hosts: proxmoxHosts,
                         proxmoxHosts,
                         esxiHosts,
-                        vmCredentials,
+                        ...(vmCredentials ? { vmCredentials } : {}),
                         dopplerSecretsCount: Object.keys(dopplerSecrets).length
                     };
                 }
@@ -521,10 +520,10 @@ export class CredentialResolver {
         for (const esxi of esxiHosts) {
             registerSecret(esxi.password);
         }
-        if (vmCreds.password) {
+        if (vmCreds?.password) {
             registerSecret(vmCreds.password);
         }
-        if (vmCreds.privateKey) {
+        if (vmCreds?.privateKey) {
             registerSecret(vmCreds.privateKey);
         }
     }

package/dist/src/credentials/resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/credentials/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,sBAAsB,GAC1B,wEAAwE;IACxE,sEAAsE;IACtE,+DAA+D;IAC/D,0IAA0I;IAC1I,wEAAwE;IACxE,sEAAsE,CAAC;AAEzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,UAAU,uBAAuB,CAAC,GAAuC;IAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,wBAAwB,GAA2B;IACvD,aAAa,EAAE,cAAc;IAC7B,cAAc,EAAE,oBAAoB;IACpC,mBAAmB,EAAE,oBAAoB;IACzC,eAAe,EAAE,oBAAoB;CACtC,CAAC;AAEF,SAAS,WAAW,CAClB,GAAuC,EACvC,GAAW,EACX,OAA2B;IAE3B,sEAAsE;IACtE,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS;SACzD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAwC,EACxC,MAA0C,OAAO,CAAC,GAAG;IAErD,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAE3B,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAuC;YACjD,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;gBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,wFAAwF;IACxF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrD,yBAAyB,GAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,0BAA0B,GAAa,CAAC,GAAG,CAAC,CAAC;IAE9D;;;;;;OAMG;IACK,WAAW,CAAC,OAA0B,EAAE,GAAuC;QACrF,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS;YACf,GAAG,CAAC,gBAAgB,KAAK,MAAM;YAC/B,GAAG,CAAC,iBAAiB,KAAK,MAAM;YAChC,GAAG,CAAC,QAAQ,KAAK,WAAW,CAC/B,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,OAA0B,EAAE,GAAuC;QACzF,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAC1B,GAAG,CAAC,qBAAqB,KAAK,GAAG;YACjC,GAAG,CAAC,qBAAqB,KAAK,MAAM,CACrC,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,UAA6B,EAAE;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAEzD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnH,MAAM,UAAU,GACd,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,yBAAyB,CAAC;YACxG,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1G,MAAM,WAAW,GAAG,IAAI,CAAC,wBAAwB,CAAC,eAAe,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAE/H,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAErD,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,mDAAmD;QACnD,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/E,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,IAAI,aAAa,CAAC,CAAC;QACzE,MAAM,sBAAsB,GAAG,CAAC,mBAAmB,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAChG,MAAM,iBAAiB,GAAG,GAA+B,EAAE;YACzD,MAAM,YAAY,GAAG,CAAC,SAAU,EAAE,UAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,aAAa,GAAG,aAAa,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/F,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,yBAAyB,CACjC,gEAAgE;oBAC9D,qFAAqF,EACvF,qBAAqB,EACrB,sBAAsB,EACtB,CAAC,eAAe,CAAC,CAClB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAChE,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,YAAY;gBACnB,YAAY;gBACZ,SAAS;gBACT,aAAa;aACd,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,SAAS,IAAI,UAAU,IAAI,sBAAsB,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;YACvG,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QAED,sCAAsC;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;gBAC7E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;oBACtC,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,eAAe;oBACtD,MAAM,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,cAAc;oBACnD,SAAS,EAAE,uBAAuB,CAAC,GAAG,CAAC;iBACxC,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,eAAe,EAAE,CAAC;gBAC7D,mEAAmE;gBACnE,MAAM,aAAa,GAAuC,EAAE,GAAG,cAAc,EAAE,GAAG,GAAG,EAAE,CAAC;gBAExF,MAAM,UAAU,GACd,SAAS;oBACT,IAAI,CAAC,wBAAwB,CAAC,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAE7G,MAAM,WAAW,GACf,UAAU;oBACV,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,CAAC,yBAAyB,CAAC;oBAClH,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAEpH,MAAM,YAAY,GAChB,WAAW;oBACX,IAAI,CAAC,wBAAwB,CAAC,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAEvH,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAC5E,MAAM,cAAc,GAAG,aAAa,IAAI,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;gBAEjF,IAAI,UAAU,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;oBAC7C,wEAAwE;oBACxE,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,IAAI,cAAc,CAAC,CAAC;oBAE3E,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;wBACrC,MAAM,OAAO,GAAa,EAAE,CAAC;wBAC7B,IAAI,CAAC,UAAU;4BAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;wBAC7C,IAAI,CAAC,WAAW;4BAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;wBAC/C,IAAI,CAAC,cAAc;4BAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;wBACnD,MAAM,IAAI,yBAAyB,CACjC,yCACE,CAAC,UAAU,IAAI,aAAa,EAAE,WAAW,IAAI,cAAc,EAAE,WAAW,IAAI,MAAM,CAAC;6BAChF,MAAM,CAAC,OAAO,CAAC;6BACf,IAAI,CAAC,IAAI,CAAC,IAAI,MACnB,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAC3C,qBAAqB,EACrB,sBAAsB,EACtB,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,MAAM,YAAY,GAAwB,EAAE,CAAC;oBAC7C,YAAY,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;oBAC1G,YAAY,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAC7G,IAAI,YAAY;wBAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAElD,MAAM,SAAS,GAAqB,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAErE,MAAM,aAAa,GAAG,cAAc,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;oBACvE,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;oBAEhE,MAAM,CAAC,IAAI,CACT,iEAAiE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CACtG,CAAC;oBAEF,OAAO;wBACL,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,YAAY;wBACnB,YAAY;wBACZ,SAAS;wBACT,aAAa;wBACb,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM;qBACxD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,cAAc,EAAE,CAAC;oBACnB,yEAAyE;oBACzE,mEAAmE;oBACnE,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,8DAA8D,CAAC,CAAC;oBACjH,OAAO,iBAAiB,EAAE,CAAC;gBAC7B,CAAC;gBACD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,GAAG,EAAE,EACvC,qBAAqB,EACrB,sBAAsB,CACvB,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,yEAAyE,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,SAAS,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC5C,IAAI,CAAC,UAAU;oBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC9C,MAAM,IAAI,yBAAyB,CACjC,wDACE,CAAC,SAAS,IAAI,aAAa,EAAE,UAAU,IAAI,cAAc,EAAE,UAAU,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAC5G,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EACxC,qBAAqB,EACrB,sBAAsB,EACtB,OAAO,CACR,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;YAC7H,MAAM,YAAY,GAAwB,EAAE,CAAC;YAC7C,YAAY,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACzG,YAAY,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAE5G,MAAM,SAAS,GAAqB,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEnE,MAAM,aAAa,GAAG,aAAa,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtE,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAEhE,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,YAAY;gBACnB,YAAY;gBACZ,SAAS;gBACT,aAAa;aACd,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,yBAAyB,CACjC,+EAA+E;gBAC7E,iEAAiE,EACnE,sBAAsB,EACtB,sBAAsB,CACvB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,iHAAiH,CAAC,CAAC;QAC/H,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,wBAAwB,CAC9B,EAAoD,EACpD,MAAc,EACd,MAA0C,EAC1C,cAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;QAEjE,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,OAAO,GAAG,GAAG,OAAO,YAAY,CAAC;YACnC,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,MAAM,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,OAAO,CAAC;YACxD,OAAO,GAAG,GAAG,QAAQ,MAAM,IAAI,IAAI,IAAI,YAAY,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wEAAwE;QACxE,+EAA+E;QAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC;QAC7E,IAAI,WAAW,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,SAAS,EAAE,CAAC;YAC5C,uEAAuE;YACvE,4DAA4D;YAC5D,gEAAgE;YAChE,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,GAAuB,IAAI,CAAC;QAEpC,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YAC3B,IAAI,GAAG;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBACvB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;aAChC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,KAAK,CAAC;YAEhD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,GAAG;oBACL,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;oBACzB,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;oBACzB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GACZ,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC;YAC5B,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,MAAM,gBAAgB,GACpB,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,KAAK,OAAO,CAAC;QAC/F,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QAE5F,MAAM,QAAQ,GACZ,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB;YAC5C,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,mBAAmB;gBAC9C,CAAC,CAAC,mBAAmB,CAAC;QAExB,0CAA0C;QAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QAC3D,IAAI,kBAAkB,GAAG,cAAc,CAAC;QACxC,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtG,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO;YACL,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,OAAO;YACP,QAAQ;YACR,IAAI;YACJ,UAAU,EAAE,IAAI;YAChB,gBAAgB;YAChB,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAClE,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,OAA2C;QAE3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,MAA0C;QAE1C,kDAAkD;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,cAAc,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClD,OAAO;wBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO;wBACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI;wBACxC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM;wBACpE,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;gBAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC/D,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO;wBACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GACZ,MAAM,CAAC,2BAA2B;YAClC,MAAM,CAAC,uBAAuB;YAC9B,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,OAAO,CAAC;QAEjB,MAAM,QAAQ,GACZ,MAAM,CAAC,2BAA2B;YAClC,MAAM,CAAC,uBAAuB;YAC9B,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,OAAO,CAAC;QAEjB,MAAM,UAAU,GACd,MAAM,CAAC,8BAA8B;YACrC,MAAM,CAAC,0BAA0B;YACjC,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,UAAU,CAAC;QAEpB,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,IAAI,MAAM,CAAC,iBAAiB,CAAC;QAEpF,MAAM,OAAO,GACX,MAAM,CAAC,uBAAuB;YAC9B,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,OAAO,CAAC;QAEjB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpD,IAAI,QAAQ,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe;gBACtD,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBAChD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACtD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,0FAA0F;QAC1F,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnG,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,MAAM,EAAE,GAAG,EAAE,QAAQ,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;wBAC9C,OAAO;4BACL,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,eAAe;4BACpE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;4BACjD,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;4BACvD,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;yBACxD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC9D,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,gCAAgC,IAAI,eAAe;oBACpE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE;oBACpB,IAAI,EAAE,IAAI;iBACX,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB;QACtB,MAAM,YAAY,GAAG;YACnB,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC;YACxE,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,yBAAyB,CAAC;SAC3E,CAAC;QACF,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAErD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,YAAY;YACnB,YAAY;YACZ,SAAS;YACT,aAAa;SACd,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAC3B,EAAkC,EAClC,cAAwB;QAExB,MAAM,KAAK,GAAG,EAAE,KAAK,aAAa,CAAC;QACnC,OAAO;YACL,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B;YACvE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,wCAAwC;YACpG,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;YAC5C,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;gBAChD,WAAW,EAAE,sCAAsC;aACpD;YACD,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,IAAI;YACtB,cAAc;YACd,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAEO,uBAAuB;QAC7B,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,yBAAyB;YACnC,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,YAAiC,EACjC,SAA2B,EAC3B,OAA2B;QAE3B,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"resolver.js","sourceRoot":"","sources":["../../../src/credentials/resolver.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAmB,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,MAAM,sBAAsB,GAC1B,wEAAwE;IACxE,sEAAsE;IACtE,+DAA+D;IAC/D,0IAA0I;IAC1I,wEAAwE;IACxE,sEAAsE,CAAC;AAEzE,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAE7C,MAAM,UAAU,uBAAuB,CAAC,GAAuC;IAC7E,MAAM,GAAG,GAAG,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC5D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,0BAA0B,CAAC;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;QAAE,OAAO,0BAA0B,CAAC;IACzE,OAAO,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,wBAAwB,GAA2B;IACvD,aAAa,EAAE,cAAc;IAC7B,cAAc,EAAE,oBAAoB;IACpC,mBAAmB,EAAE,oBAAoB;IACzC,eAAe,EAAE,oBAAoB;CACtC,CAAC;AAEF,SAAS,WAAW,CAClB,GAAuC,EACvC,GAAW,EACX,OAA2B;IAE3B,sEAAsE;IACtE,2EAA2E;IAC3E,uCAAuC;IACvC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,SAAS;YAClC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;YAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,SAAS;SACzD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CACzC,IAAwC,EACxC,MAA0C,OAAO,CAAC,GAAG;IAErD,IAAI,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAE3B,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,wBAAwB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAuC;YACjD,GAAG,EAAE,IAAI,CAAC,OAAO;YACjB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;QACF,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO;gBACnB,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;YACrC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;YAC/B,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC;QACvC,CAAC;QACD,MAAM,SAAS,GAA2B,EAAE,CAAC;QAC7C,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,GAAG,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC;YAC/D,IAAI,QAAQ,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC;QACzE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,wFAAwF;IACxF,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,OAAO,kBAAkB;IACZ,wBAAwB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrD,yBAAyB,GAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjD,0BAA0B,GAAa,CAAC,GAAG,CAAC,CAAC;IAE9D;;;;;;OAMG;IACK,WAAW,CAAC,OAA0B,EAAE,GAAuC;QACrF,OAAO,OAAO,CACZ,OAAO,CAAC,SAAS;YACf,GAAG,CAAC,gBAAgB,KAAK,MAAM;YAC/B,GAAG,CAAC,iBAAiB,KAAK,MAAM;YAChC,GAAG,CAAC,QAAQ,KAAK,WAAW,CAC/B,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,OAA0B,EAAE,GAAuC;QACzF,OAAO,CACL,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC;YAC9B,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;YAC1B,GAAG,CAAC,qBAAqB,KAAK,GAAG;YACjC,GAAG,CAAC,qBAAqB,KAAK,MAAM,CACrC,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,OAAO,CAAC,UAA6B,EAAE;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACjD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QAEzD,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,uEAAuE,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;QAED,+CAA+C;QAC/C,MAAM,SAAS,GAAG,IAAI,CAAC,wBAAwB,CAAC,aAAa,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnH,MAAM,UAAU,GACd,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,yBAAyB,CAAC;YACxG,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,mBAAmB,EAAE,GAAG,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1G,MAAM,WAAW,GAAG,IAAI,CAAC,wBAAwB,CAAC,eAAe,EAAE,oBAAoB,EAAE,GAAG,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAE/H,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAErD,2EAA2E;QAC3E,0EAA0E;QAC1E,0EAA0E;QAC1E,6EAA6E;QAC7E,mDAAmD;QACnD,MAAM,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;QAC/E,qEAAqE;QACrE,2EAA2E;QAC3E,sEAAsE;QACtE,uDAAuD;QACvD,MAAM,cAAc,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,CAAC;QACxD,MAAM,sBAAsB,GAC1B,CAAC,mBAAmB,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;QAC7F,MAAM,iBAAiB,GAAG,GAA+B,EAAE;YACzD,MAAM,YAAY,GAAG,CAAC,SAAU,EAAE,UAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACtF,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,MAAM,aAAa,GAAG,aAAa,IAAI,SAAS,CAAC;YACjD,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAChE,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,YAAY;gBACnB,YAAY;gBACZ,SAAS;gBACT,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC;QACJ,CAAC,CAAC;QAEF,IAAI,SAAS,IAAI,UAAU,IAAI,sBAAsB,EAAE,CAAC;YACtD,MAAM,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;YACvG,OAAO,iBAAiB,EAAE,CAAC;QAC7B,CAAC;QAED,sCAAsC;QACtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC,aAAa,CAAC;QAC/D,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;gBAC7E,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;oBACtC,KAAK,EAAE,YAAY;oBACnB,OAAO,EAAE,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,eAAe;oBACtD,MAAM,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,CAAC,cAAc;oBACnD,SAAS,EAAE,uBAAuB,CAAC,GAAG,CAAC;iBACxC,CAAC,CAAC;gBAEH,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,eAAe,EAAE,CAAC;gBAC7D,mEAAmE;gBACnE,MAAM,aAAa,GAAuC,EAAE,GAAG,cAAc,EAAE,GAAG,GAAG,EAAE,CAAC;gBAExF,MAAM,UAAU,GACd,SAAS;oBACT,IAAI,CAAC,wBAAwB,CAAC,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAE7G,MAAM,WAAW,GACf,UAAU;oBACV,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,CAAC,yBAAyB,CAAC;oBAClH,IAAI,CAAC,wBAAwB,CAAC,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC;gBAEpH,MAAM,YAAY,GAChB,WAAW;oBACX,IAAI,CAAC,wBAAwB,CAAC,eAAe,EAAE,oBAAoB,EAAE,aAAa,EAAE,IAAI,CAAC,0BAA0B,CAAC,CAAC;gBAEvH,MAAM,WAAW,GAAG,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,aAAa,CAAC,CAAC;gBAC5E,MAAM,cAAc,GAAG,aAAa,IAAI,IAAI,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;gBAEjF,IAAI,UAAU,IAAI,WAAW,IAAI,WAAW,EAAE,CAAC;oBAC7C,wEAAwE;oBACxE,uEAAuE;oBACvE,MAAM,aAAa,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,CAAC;oBAEzD,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,EAAE,CAAC;wBACrC,MAAM,OAAO,GAAa,EAAE,CAAC;wBAC7B,IAAI,CAAC,UAAU;4BAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;wBAC7C,IAAI,CAAC,WAAW;4BAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;wBAC/C,MAAM,IAAI,yBAAyB,CACjC,yCACE,CAAC,UAAU,IAAI,aAAa,EAAE,WAAW,IAAI,cAAc,EAAE,WAAW,IAAI,MAAM,CAAC;6BAChF,MAAM,CAAC,OAAO,CAAC;6BACf,IAAI,CAAC,IAAI,CAAC,IAAI,MACnB,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAC3C,qBAAqB,EACrB,sBAAsB,EACtB,OAAO,CACR,CAAC;oBACJ,CAAC;oBAED,MAAM,YAAY,GAAwB,EAAE,CAAC;oBAC7C,YAAY,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;oBAC1G,YAAY,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAC7G,IAAI,YAAY;wBAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;oBAElD,MAAM,SAAS,GAAqB,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAErE,MAAM,aAAa,GAAG,cAAc,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACrG,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;oBAEhE,MAAM,CAAC,IAAI,CACT,iEAAiE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE,CACtG,CAAC;oBAEF,OAAO;wBACL,IAAI,EAAE,aAAa;wBACnB,KAAK,EAAE,YAAY;wBACnB,YAAY;wBACZ,SAAS;wBACT,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC3C,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM;qBACxD,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,OAAO,GAAY,EAAE,CAAC;gBACtB,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,MAAM,GAAG,CAAC;gBACZ,CAAC;gBACD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAC7D,IAAI,cAAc,EAAE,CAAC;oBACnB,yEAAyE;oBACzE,mEAAmE;oBACnE,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,8DAA8D,CAAC,CAAC;oBACjH,OAAO,iBAAiB,EAAE,CAAC;gBAC7B,CAAC;gBACD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,yBAAyB,CACjC,kCAAkC,GAAG,EAAE,EACvC,qBAAqB,EACrB,sBAAsB,CACvB,CAAC;gBACJ,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,kCAAkC,GAAG,yEAAyE,CAAC,CAAC;YAC9H,CAAC;QACH,CAAC;QAED,sCAAsC;QACtC,IAAI,SAAS,IAAI,UAAU,IAAI,UAAU,EAAE,CAAC;YAC1C,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,IAAI,CAAC,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBAC5C,IAAI,CAAC,UAAU;oBAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC9C,MAAM,IAAI,yBAAyB,CACjC,wDACE,CAAC,SAAS,IAAI,aAAa,EAAE,UAAU,IAAI,cAAc,EAAE,UAAU,IAAI,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAC5G,kBAAkB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EACxC,qBAAqB,EACrB,sBAAsB,EACtB,OAAO,CACR,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;YAC7H,MAAM,YAAY,GAAwB,EAAE,CAAC;YAC7C,YAAY,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACzG,YAAY,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAE5G,MAAM,SAAS,GAAqB,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAEnE,MAAM,aAAa,GAAG,aAAa,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC;YACtE,IAAI,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;YAEhE,OAAO;gBACL,IAAI,EAAE,YAAY;gBAClB,KAAK,EAAE,YAAY;gBACnB,YAAY;gBACZ,SAAS;gBACT,aAAa;aACd,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,yBAAyB,CACjC,+EAA+E;gBAC7E,iEAAiE,EACnE,sBAAsB,EACtB,sBAAsB,CACvB,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,iHAAiH,CAAC,CAAC;QAC/H,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,wBAAwB,CAC9B,EAAoD,EACpD,MAAc,EACd,MAA0C,EAC1C,cAAwB;QAExB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC;QACrE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;QAEjE,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,OAAO,GAAG,GAAG,OAAO,YAAY,CAAC;YACnC,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,IAAI,MAAM,CAAC;YAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,OAAO,CAAC;YACxD,OAAO,GAAG,GAAG,QAAQ,MAAM,IAAI,IAAI,IAAI,YAAY,CAAC;QACtD,CAAC;QAED,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QAED,wEAAwE;QACxE,+EAA+E;QAC/E,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,CAAC;QAC/C,IAAI,OAAO,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC;QAC7E,IAAI,WAAW,GAAG,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,CAAC;QACzF,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,SAAS,EAAE,CAAC;YAC5C,uEAAuE;YACvE,4DAA4D;YAC5D,gEAAgE;YAChE,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACtC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBACX,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjC,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,IAAI,IAAI,GAAuB,IAAI,CAAC;QAEpC,IAAI,OAAO,IAAI,WAAW,EAAE,CAAC;YAC3B,IAAI,GAAG;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;gBACvB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;aAChC,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,CAAC;YACxE,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,KAAK,CAAC;YAEhD,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;gBACzB,IAAI,GAAG;oBACL,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;oBACzB,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;oBACzB,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE;iBACpB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GACZ,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC;YACvB,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC;YAC5B,CAAC,EAAE,KAAK,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACxF,MAAM,gBAAgB,GACpB,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,OAAO,IAAI,MAAM,CAAC,GAAG,MAAM,oBAAoB,CAAC,KAAK,OAAO,CAAC;QAC/F,MAAM,cAAc,GAAG,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,IAAI,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QAE5F,MAAM,QAAQ,GACZ,EAAE,KAAK,aAAa,CAAC,CAAC,CAAC,qBAAqB;YAC5C,CAAC,CAAC,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,mBAAmB;gBAC9C,CAAC,CAAC,mBAAmB,CAAC;QAExB,0CAA0C;QAC1C,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QAC3D,IAAI,kBAAkB,GAAG,cAAc,CAAC;QACxC,IAAI,eAAe,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;gBAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1B,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;gBACvF,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACtG,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,cAAc,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YAC3E,CAAC;QACH,CAAC;QAED,OAAO;YACL,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,OAAO;YACP,QAAQ;YACR,IAAI;YACJ,UAAU,EAAE,IAAI;YAChB,gBAAgB;YAChB,cAAc,EAAE,cAAc,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;YAClE,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,qBAAqB,CAC3B,OAA2C;QAE3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACK,oBAAoB,CAC1B,MAA0C;QAE1C,kDAAkD;QAClD,MAAM,UAAU,GAAG,MAAM,CAAC,kBAAkB,IAAI,MAAM,CAAC,cAAc,CAAC;QACtE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClD,OAAO;wBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,OAAO;wBACnD,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI;wBACxC,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,MAAM;wBACpE,UAAU,EAAE,MAAM,CAAC,UAAU;wBAC7B,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;gBAChD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC/D,IAAI,KAAK,EAAE,CAAC;oBACV,OAAO;wBACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClB,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;qBAC/C,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,MAAM,QAAQ,GACZ,MAAM,CAAC,2BAA2B;YAClC,MAAM,CAAC,uBAAuB;YAC9B,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,OAAO,CAAC;QAEjB,MAAM,QAAQ,GACZ,MAAM,CAAC,2BAA2B;YAClC,MAAM,CAAC,uBAAuB;YAC9B,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,OAAO,CAAC;QAEjB,MAAM,UAAU,GACd,MAAM,CAAC,8BAA8B;YACrC,MAAM,CAAC,0BAA0B;YACjC,MAAM,CAAC,UAAU;YACjB,MAAM,CAAC,UAAU,CAAC;QAEpB,MAAM,UAAU,GAAG,MAAM,CAAC,6BAA6B,IAAI,MAAM,CAAC,iBAAiB,CAAC;QAEpF,MAAM,OAAO,GACX,MAAM,CAAC,uBAAuB;YAC9B,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,OAAO,CAAC;QAEjB,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAEpD,IAAI,QAAQ,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,eAAe;gBACtD,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBAChD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACtD,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS;gBACtD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;aAChC,CAAC;QACJ,CAAC;QAED,0FAA0F;QAC1F,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,IAAI,GAAG,CAAC,UAAU,CAAC,qBAAqB,CAAC,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnG,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC/B,IAAI,MAAM,EAAE,GAAG,EAAE,QAAQ,IAAI,MAAM,EAAE,QAAQ,EAAE,CAAC;wBAC9C,OAAO;4BACL,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,eAAe;4BACpE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;4BACjD,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;4BACvD,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;yBACxD,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC9D,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,gCAAgC,IAAI,eAAe;oBACpE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE;oBACpB,IAAI,EAAE,IAAI;iBACX,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,gBAAgB;QACtB,MAAM,YAAY,GAAG;YACnB,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,IAAI,CAAC,wBAAwB,CAAC;YACxE,IAAI,CAAC,qBAAqB,CAAC,cAAc,EAAE,IAAI,CAAC,yBAAyB,CAAC;SAC3E,CAAC;QACF,MAAM,SAAS,GAAqB,EAAE,CAAC;QACvC,MAAM,aAAa,GAAG,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAErD,OAAO;YACL,IAAI,EAAE,eAAe;YACrB,KAAK,EAAE,YAAY;YACnB,YAAY;YACZ,SAAS;YACT,aAAa;SACd,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAC3B,EAAkC,EAClC,cAAwB;QAExB,MAAM,KAAK,GAAG,EAAE,KAAK,aAAa,CAAC;QACnC,OAAO;YACL,EAAE;YACF,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,0BAA0B;YACvE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,wCAAwC;YACpG,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc;YAC5C,IAAI,EAAE;gBACJ,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE;gBAChD,WAAW,EAAE,sCAAsC;aACpD;YACD,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,IAAI;YACtB,cAAc;YACd,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAEO,uBAAuB;QAC7B,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,yBAAyB;YACnC,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC;IAEO,kBAAkB,CACxB,YAAiC,EACjC,SAA2B,EAC3B,OAA4B;QAE5B,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC/B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxC,CAAC;iBAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,CAAC;QAED,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACtB,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,OAAO,EAAE,UAAU,EAAE,CAAC;YACxB,cAAc,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;CACF;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/src/credentials/types.d.ts

@@ -83,7 +83,11 @@ export interface CredentialResolutionResult {
     hosts: ProxmoxHostConfig[];
     proxmoxHosts: ProxmoxHostConfig[];
     esxiHosts: EsxiHostConfig[];
-    vmCredentials: VmCredentialConfig;
+    /**
+     * Optional shared appliance login. Guests are dynamic and carry per-VM
+     * credentials owned by the canonical CLI, so no shared login is required.
+     */
+    vmCredentials?: VmCredentialConfig;
     dopplerSecretsCount?: number;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/src/credentials/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/credentials/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,mBAAmB,GAAG,MAAM,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,aAAa,GAAG,eAAe,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,aAAa,EAAE,kBAAkB,CAAC;IAClC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/credentials/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,mBAAmB,GAAG,MAAM,CAAC;AAE1F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,QAAQ,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,MAAM,WAAW,GAAG,gBAAgB,GAAG,iBAAiB,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,WAAW,CAAC;IAClB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,aAAa,GAAG,eAAe,CAAC;AAE5E;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAC3B,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B;;;OAGG;IACH,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B"}

package/dist/src/generated-version.d.ts

@@ -2,5 +2,5 @@
  * Auto-synced package version fallback for non-filesystem runtimes (Cloudflare Workers).
  * Updated automatically during release publication in .github/workflows/publish.yml.
  */
-export declare const PACKAGE_VERSION = "0.8.106";
+export declare const PACKAGE_VERSION = "0.8.108";
 //# sourceMappingURL=generated-version.d.ts.map

package/dist/src/generated-version.js

@@ -2,5 +2,5 @@
  * Auto-synced package version fallback for non-filesystem runtimes (Cloudflare Workers).
  * Updated automatically during release publication in .github/workflows/publish.yml.
  */
-export const PACKAGE_VERSION = "0.8.106";
+export const PACKAGE_VERSION = "0.8.108";
 //# sourceMappingURL=generated-version.js.map

package/dist/src/stig/distribution.d.ts

@@ -1,5 +1,5 @@
 import { type StigNodeName } from "./nodes.js";
-import type { StigDeps } from "./ports.js";
+import type { ClaimRecord, StigDeps } from "./ports.js";
 export declare const SYNC_CLAIM_TTL_HOURS = 6;
 /** The detached job outlived the poll budget; it keeps running and nothing is cleaned up. Re-apply to keep waiting. */
 export declare class StillRunningError extends Error {
@@ -40,6 +40,21 @@ export interface SyncPlan {
 }
 export declare const PUBLISH_STEPS: readonly ["verify-published", "export", "template-json", "sign", "index", "upload", "prune", "verify", "receipt"];
 export declare const SYNC_STEPS: readonly ["claim", "verify", "qm-create", "template", "renew", "receipt"];
+/**
+ * Golden-image guard: a publishable template is a sealed Proxmox template built by build_stig_template or build.sh (a claim with
+ * descriptor mode build-template on the same VMID). A clone, and anything a clone claim describes, is an experiment and can
+ * never become an image. `requireClaim` (publish) also refuses a template with no such claim; sync's adoption path only
+ * refuses the clone tag and a clone-mode claim.
+ */
+export declare function assertGoldenCandidate(guest: {
+    name: string;
+    vmid?: number;
+    tags?: string;
+} | undefined, claim: ClaimRecord | null, opts?: {
+    requireClaim?: boolean;
+}): void;
+/** A receipt file (receipts/<template>.json) for this template and VMID that shows fail=0 and error=0 on the template's SSG and DISA scans. */
+export declare function receiptFilePasses(path: string, template: string, vmid?: number): boolean;
 export declare class StigDistribution {
     private readonly d;
     constructor(d: StigDeps);

package/dist/src/stig/distribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../../src/stig/distribution.ts"],"names":[],"mappings":"AAUA,OAAO,EAEU,KAAK,YAAY,EACjC,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAItC,uHAAuH;AACvH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,IAAI,EAAE,MAAM;CACzB;AASD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAChI,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CACxH;AACD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxH,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CAC5H;AAED,eAAO,MAAM,aAAa,mHAAoH,CAAC;AAC/I,eAAO,MAAM,UAAU,2EAA4E,CAAC;AAEpG,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,QAAQ;IAExC,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,OAAO;IAEf,uHAAuH;YACzG,UAAU;IAMlB,WAAW,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IA2B3E,OAAO,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;YA2F1I,IAAI;IAKlB,gFAAgF;YAClE,gBAAgB;IASxB,QAAQ,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IA+BlE,IAAI,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IA+DrG,0IAA0I;YAC5H,OAAO;CAatB"}
+{"version":3,"file":"distribution.d.ts","sourceRoot":"","sources":["../../../src/stig/distribution.ts"],"names":[],"mappings":"AAUA,OAAO,EAEU,KAAK,YAAY,EACjC,MAAM,YAAY,CAAC;AAOpB,OAAO,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExD,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAItC,uHAAuH;AACvH,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,IAAI,EAAE,MAAM;CACzB;AASD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAChI,IAAI,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,YAAY,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CACxH;AACD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxH,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAC;IACtH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CAC5H;AAED,eAAO,MAAM,aAAa,mHAAoH,CAAC;AAC/I,eAAO,MAAM,UAAU,2EAA4E,CAAC;AAEpG;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,EAAE,IAAI,GAAE;IAAE,YAAY,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,IAAI,CAS/K;AAED,+IAA+I;AAC/I,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAOxF;AAED,qBAAa,gBAAgB;IACf,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAAD,CAAC,EAAE,QAAQ;IAExC,OAAO,CAAC,GAAG;IACX,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,SAAS;IACjB,OAAO,CAAC,OAAO;IAEf,uHAAuH;YACzG,UAAU;IAMlB,WAAW,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,WAAW,CAAC;IA4B3E,OAAO,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;YAsG1I,IAAI;IAKlB,gFAAgF;YAClE,gBAAgB;IASxB,QAAQ,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC;IAgClE,IAAI,CAAC,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IA+DrG,0IAA0I;YAC5H,OAAO;CAatB"}