@catladder/cli 0.0.0-main-8dbb6c76 → 0.0.0-main-a6b45abe

package/dist/apps/cli/src/commands/project/secrets/scope.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.formatScope = exports.getScopedSecretKeys = exports.getDeclaredSecretKeys = exports.secretsScopeChoices = exports.resolveSecretsScope = void 0;
+const getProjectConfig_1 = require("../../../config/getProjectConfig");
+/**
+ * resolves a scope expression to component → envs:
+ * - (empty): all components, all envs
+ * - `env:component`: one env of one component
+ * - `env` / `env:`: one env, every component that has it
+ * - `:component`: every env of one component
+ */
+const resolveSecretsScope = async (scope) => {
+    const all = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsHierarchical)();
+    if (Object.keys(all).length === 0) {
+        throw new Error("no catladder config found");
+    }
+    if (!scope) {
+        return all;
+    }
+    const [env, componentName] = scope.split(":").map((x) => x || null);
+    if (componentName && !(componentName in all)) {
+        throw new Error(`unknown component "${componentName}" — components: ${Object.keys(all).join(", ")}`);
+    }
+    const scoped = Object.fromEntries(Object.entries(all)
+        .filter(([name]) => !componentName || name === componentName)
+        .map(([name, envs]) => [
+        name,
+        env ? envs.filter((e) => e === env) : envs,
+    ])
+        .filter(([, envs]) => envs.length > 0));
+    if (Object.keys(scoped).length === 0) {
+        const allEnvs = [...new Set(Object.values(all).flat())];
+        throw new Error(`no component has the environment "${env}" — environments: ${allEnvs.join(", ")}`);
+    }
+    return scoped;
+};
+exports.resolveSecretsScope = resolveSecretsScope;
+/**
+ * all valid scope expressions, for autocompletion: `env:component`
+ * pairs plus the `env:` (one env, all components) and `:component`
+ * (one component, all envs) forms
+ */
+const secretsScopeChoices = async () => {
+    const all = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsHierarchical)();
+    const pairs = Object.entries(all).flatMap(([componentName, envs]) => envs.map((env) => `${env}:${componentName}`));
+    const envs = [...new Set(Object.values(all).flat())];
+    return [
+        ...pairs,
+        ...envs.map((env) => `${env}:`),
+        ...Object.keys(all).map((componentName) => `:${componentName}`),
+    ];
+};
+exports.secretsScopeChoices = secretsScopeChoices;
+/** the secret keys declared in the config for one env of one component */
+const getDeclaredSecretKeys = async (env, componentName) => {
+    const { secretEnvVarKeys, jobOnlyVars } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
+    return [
+        ...jobOnlyVars.build.secretEnvVarKeys,
+        ...jobOnlyVars.deploy.secretEnvVarKeys,
+        ...secretEnvVarKeys,
+    ]
+        .filter((k) => !k.hidden)
+        .map((k) => k.key);
+};
+exports.getDeclaredSecretKeys = getDeclaredSecretKeys;
+/**
+ * expands a scope to its declared secret keys, optionally filtered to
+ * `onlyKeys`. Throws when a requested key is not declared anywhere in
+ * the scope (typo protection); env/component pairs without matching
+ * keys are dropped.
+ */
+const getScopedSecretKeys = async (scope, onlyKeys) => {
+    const scoped = [];
+    const declaredAnywhere = new Set();
+    for (const [componentName, envs] of Object.entries(scope)) {
+        for (const env of envs) {
+            const declared = await (0, exports.getDeclaredSecretKeys)(env, componentName);
+            declared.forEach((key) => declaredAnywhere.add(key));
+            const keys = onlyKeys
+                ? declared.filter((key) => onlyKeys.includes(key))
+                : declared;
+            if (keys.length > 0) {
+                scoped.push({ env, componentName, keys });
+            }
+        }
+    }
+    const unknownKeys = (onlyKeys !== null && onlyKeys !== void 0 ? onlyKeys : []).filter((key) => !declaredAnywhere.has(key));
+    if (unknownKeys.length > 0) {
+        throw new Error(`these secrets are not declared in this scope: ${unknownKeys.join(", ")}` +
+            `\ndeclared secrets: ${[...declaredAnywhere].join(", ")}`);
+    }
+    if (scoped.length === 0) {
+        throw new Error("there are no secrets to configure in this scope");
+    }
+    return scoped;
+};
+exports.getScopedSecretKeys = getScopedSecretKeys;
+/** human-readable one-line-per-component summary of a scope */
+const formatScope = (scoped) => {
+    var _a;
+    const byComponent = new Map();
+    for (const { env, componentName } of scoped) {
+        byComponent.set(componentName, [
+            ...((_a = byComponent.get(componentName)) !== null && _a !== void 0 ? _a : []),
+            env,
+        ]);
+    }
+    return [...byComponent.entries()]
+        .map(([componentName, envs]) => `- ${componentName}: ${envs.join(", ")}`)
+        .join("\n");
+};
+exports.formatScope = formatScope;
+//# sourceMappingURL=scope.js.map

package/dist/apps/cli/src/commands/project/secrets/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope.js","sourceRoot":"","sources":["../../../../../../../src/commands/project/secrets/scope.ts"],"names":[],"mappings":";;;AAAA,uEAG0C;AAO1C;;;;;;GAMG;AACI,MAAM,mBAAmB,GAAG,KAAK,EACtC,KAAc,EACS,EAAE;IACzB,MAAM,GAAG,GAAG,MAAM,IAAA,0DAAuC,GAAE,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAEpE,IAAI,aAAa,IAAI,CAAC,CAAC,aAAa,IAAI,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,sBAAsB,aAAa,mBAAmB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC/B,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;SAChB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI,KAAK,aAAa,CAAC;SAC5D,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAsB,EAAE,CAAC;QACzC,IAAI;QACJ,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;KAC3C,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CACzC,CAAC;IAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,qBAAqB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AApCW,QAAA,mBAAmB,uBAoC9B;AAEF;;;;GAIG;AACI,MAAM,mBAAmB,GAAG,KAAK,IAAuB,EAAE;IAC/D,MAAM,GAAG,GAAG,MAAM,IAAA,0DAAuC,GAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAClE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,aAAa,EAAE,CAAC,CAC7C,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACrD,OAAO;QACL,GAAG,KAAK;QACR,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC;QAC/B,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,aAAa,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,mBAAmB,uBAW9B;AASF,0EAA0E;AACnE,MAAM,qBAAqB,GAAG,KAAK,EACxC,GAAW,EACX,aAAqB,EACF,EAAE;IACrB,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,iCAAc,EAC5D,GAAG,EACH,aAAa,CACd,CAAC;IACF,OAAO;QACL,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB;QACrC,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB;QACtC,GAAG,gBAAgB;KACpB;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC;AAfW,QAAA,qBAAqB,yBAehC;AAEF;;;;;GAKG;AACI,MAAM,mBAAmB,GAAG,KAAK,EACtC,KAAmB,EACnB,QAAmB,EACQ,EAAE;IAC7B,MAAM,MAAM,GAAqB,EAAE,CAAC;IACpC,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,MAAM,IAAA,6BAAqB,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACjE,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ;gBACnB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAClD,CAAC,CAAC,QAAQ,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,CAAC,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,EAAE,CAAC,CAAC,MAAM,CACzC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CACpC,CAAC;IACF,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,iDAAiD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvE,uBAAuB,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAhCW,QAAA,mBAAmB,uBAgC9B;AAEF,+DAA+D;AACxD,MAAM,WAAW,GAAG,CAAC,MAAwB,EAAU,EAAE;;IAC9D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,MAAM,EAAE,CAAC;QAC5C,WAAW,CAAC,GAAG,CAAC,aAAa,EAAE;YAC7B,GAAG,CAAC,MAAA,WAAW,CAAC,GAAG,CAAC,aAAa,CAAC,mCAAI,EAAE,CAAC;YACzC,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SAC9B,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SACxE,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC,CAAC;AAXW,QAAA,WAAW,eAWtB"}

package/dist/apps/cli/src/commands/security/commandSecurityAuditCiJob.d.ts

@@ -0,0 +1,27 @@
+export declare const commandSecurityAuditCiJob: import("../../core").CommandDef<{
+    readonly path: {
+        readonly type: "string";
+        readonly message: "path to project root";
+        readonly positional: true;
+    };
+    readonly token: {
+        readonly type: "string";
+        readonly message: "GitLab token (api scope)";
+        readonly positional: true;
+    };
+    readonly mainBranch: {
+        readonly type: "string";
+        readonly message: "main branch name";
+        readonly positional: true;
+    };
+    readonly projectId: {
+        readonly type: "string";
+        readonly message: "GitLab project ID";
+        readonly positional: true;
+    };
+    readonly userId: {
+        readonly type: "string";
+        readonly message: "GitLab user ID (assignee)";
+        readonly positional: true;
+    };
+}>;

package/dist/apps/cli/src/commands/security/commandSecurityAuditCiJob.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandSecurityAuditCiJob = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const rest_1 = require("@gitbeaker/rest");
+const evaluateSecurityAudit_1 = require("../../security/evaluateSecurityAudit");
+const createSecurityAuditMergeRequest_1 = require("../../security/createSecurityAuditMergeRequest");
+const gitlabHost_1 = require("../../utils/gitlabHost");
+exports.commandSecurityAuditCiJob = (0, defineCommand_1.defineCommand)({
+    name: "security audit ci-job",
+    description: "Evaluates security audit document. Creates MR with template if missing.",
+    group: "security",
+    inputs: {
+        path: { type: "string", message: "path to project root", positional: true },
+        token: {
+            type: "string",
+            message: "GitLab token (api scope)",
+            positional: true,
+        },
+        mainBranch: {
+            type: "string",
+            message: "main branch name",
+            positional: true,
+        },
+        projectId: {
+            type: "string",
+            message: "GitLab project ID",
+            positional: true,
+        },
+        userId: {
+            type: "string",
+            message: "GitLab user ID (assignee)",
+            positional: true,
+        },
+    },
+    execute: async (ctx) => {
+        const path = await ctx.get("path");
+        const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path });
+        if (evaluation.isErr()) {
+            ctx.log("could not evaluate security audit document");
+            ctx.log("creating new merge request with security audit template...");
+            const token = await ctx.get("token");
+            const mainBranch = await ctx.get("mainBranch");
+            const projectId = await ctx.get("projectId");
+            const userId = await ctx.get("userId");
+            const api = new rest_1.Gitlab({ host: await (0, gitlabHost_1.getGitlabHostUrl)(), token });
+            const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+                api,
+                mainBranch,
+                projectId,
+                userId: parseInt(userId),
+            });
+            if (mr.isErr()) {
+                ctx.log(`could not create merge request with security audit template: ${mr.error}`);
+                process.exitCode = 1;
+                return;
+            }
+            ctx.log("security audit merge request created successfully");
+            ctx.log(`please finish the MR by updating SECURITY.md document: ${mr.value.web_url}`);
+            process.exitCode = 1;
+            return;
+        }
+        if (evaluation.value.score.answeredTopics === 0) {
+            ctx.log("audit document has no answered topics");
+            ctx.log(`please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
+            process.exitCode = 1;
+            return;
+        }
+        ctx.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
+    },
+});
+//# sourceMappingURL=commandSecurityAuditCiJob.js.map

package/dist/apps/cli/src/commands/security/commandSecurityAuditCiJob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityAuditCiJob.js","sourceRoot":"","sources":["../../../../../../src/commands/security/commandSecurityAuditCiJob.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,0CAAyC;AACzC,gFAG8C;AAC9C,oGAGwD;AACxD,uDAA0D;AAE7C,QAAA,yBAAyB,GAAG,IAAA,6BAAa,EAAC;IACrD,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EACT,yEAAyE;IAC3E,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE;QACN,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE;QAC3E,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0BAA0B;YACnC,UAAU,EAAE,IAAI;SACjB;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2BAA2B;YACpC,UAAU,EAAE,IAAI;SACjB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QAEzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAEtE,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEvC,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,MAAM,IAAA,6BAAgB,GAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAElE,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;gBAC/C,GAAG;gBACH,UAAU;gBACV,SAAS;gBACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;aACzB,CAAC,CAAC;YAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;gBACf,GAAG,CAAC,GAAG,CACL,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;gBACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;YAED,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAC7D,GAAG,CAAC,GAAG,CACL,0DAA0D,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAC7E,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACjD,GAAG,CAAC,GAAG,CACL,oCAAoC,0DAAwB,4DAA4D,CACzH,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/security/commandSecurityAuditCreate.d.ts

@@ -0,0 +1,22 @@
+export declare const commandSecurityAuditCreate: import("../../core").CommandDef<{
+    readonly token: {
+        readonly type: "string";
+        readonly message: "GitLab token (api scope)";
+        readonly positional: true;
+    };
+    readonly mainBranch: {
+        readonly type: "string";
+        readonly message: "main branch name";
+        readonly positional: true;
+    };
+    readonly projectId: {
+        readonly type: "string";
+        readonly message: "GitLab project ID";
+        readonly positional: true;
+    };
+    readonly userId: {
+        readonly type: "string";
+        readonly message: "GitLab user ID (assignee)";
+        readonly positional: true;
+    };
+}>;

package/dist/apps/cli/src/commands/security/commandSecurityAuditCreate.js

@@ -0,0 +1,56 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandSecurityAuditCreate = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const rest_1 = require("@gitbeaker/rest");
+const createSecurityAuditMergeRequest_1 = require("../../security/createSecurityAuditMergeRequest");
+const gitlabHost_1 = require("../../utils/gitlabHost");
+exports.commandSecurityAuditCreate = (0, defineCommand_1.defineCommand)({
+    name: "security audit create",
+    description: "Creates a MR with the latest security audit template document",
+    group: "security",
+    inputs: {
+        token: {
+            type: "string",
+            message: "GitLab token (api scope)",
+            positional: true,
+        },
+        mainBranch: {
+            type: "string",
+            message: "main branch name",
+            positional: true,
+        },
+        projectId: {
+            type: "string",
+            message: "GitLab project ID",
+            positional: true,
+        },
+        userId: {
+            type: "string",
+            message: "GitLab user ID (assignee)",
+            positional: true,
+        },
+    },
+    execute: async (ctx) => {
+        const token = await ctx.get("token");
+        const mainBranch = await ctx.get("mainBranch");
+        const projectId = await ctx.get("projectId");
+        const userId = await ctx.get("userId");
+        const api = new rest_1.Gitlab({ host: await (0, gitlabHost_1.getGitlabHostUrl)(), token });
+        const result = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+            api,
+            mainBranch,
+            projectId,
+            userId: parseInt(userId),
+        });
+        if (result.isErr()) {
+            ctx.log(`could not create security audit merge request: ${result.error}`);
+            process.exitCode = 1;
+        }
+        else {
+            ctx.log("security audit merge request created successfully");
+            ctx.log(`please finish the MR by updating SECURITY.md document: ${result.value.web_url}`);
+        }
+    },
+});
+//# sourceMappingURL=commandSecurityAuditCreate.js.map

package/dist/apps/cli/src/commands/security/commandSecurityAuditCreate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityAuditCreate.js","sourceRoot":"","sources":["../../../../../../src/commands/security/commandSecurityAuditCreate.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,0CAAyC;AACzC,oGAAiG;AACjG,uDAA0D;AAE7C,QAAA,0BAA0B,GAAG,IAAA,6BAAa,EAAC;IACtD,IAAI,EAAE,uBAAuB;IAC7B,WAAW,EAAE,+DAA+D;IAC5E,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE;QACN,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0BAA0B;YACnC,UAAU,EAAE,IAAI;SACjB;QACD,UAAU,EAAE;YACV,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kBAAkB;YAC3B,UAAU,EAAE,IAAI;SACjB;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mBAAmB;YAC5B,UAAU,EAAE,IAAI;SACjB;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2BAA2B;YACpC,UAAU,EAAE,IAAI;SACjB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEvC,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,MAAM,IAAA,6BAAgB,GAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAElE,MAAM,MAAM,GAAG,MAAM,IAAA,iEAA+B,EAAC;YACnD,GAAG;YACH,UAAU;YACV,SAAS;YACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;SACzB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,kDAAkD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC1E,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YAC7D,GAAG,CAAC,GAAG,CACL,0DAA0D,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/security/commandSecurityAuditEvaluate.d.ts

@@ -0,0 +1,7 @@
+export declare const commandSecurityAuditEvaluate: import("../../core").CommandDef<{
+    readonly path: {
+        readonly type: "string";
+        readonly message: "path to project root";
+        readonly positional: true;
+    };
+}>;

package/dist/apps/cli/src/commands/security/commandSecurityAuditEvaluate.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandSecurityAuditEvaluate = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const evaluateSecurityAudit_1 = require("../../security/evaluateSecurityAudit");
+const createSecurityAuditMergeRequest_1 = require("../../security/createSecurityAuditMergeRequest");
+exports.commandSecurityAuditEvaluate = (0, defineCommand_1.defineCommand)({
+    name: "security audit evaluate",
+    description: "Evaluates security audit document in given path",
+    group: "security",
+    inputs: {
+        path: { type: "string", message: "path to project root", positional: true },
+    },
+    execute: async (ctx) => {
+        const path = await ctx.get("path");
+        ctx.log("evaluating security audit document...");
+        const result = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path });
+        if (result.isErr()) {
+            ctx.log(`${result.error}`);
+            ctx.log(`please make sure the security audit document ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} is in the repository`);
+            process.exitCode = 1;
+        }
+        else {
+            ctx.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
+        }
+    },
+});
+//# sourceMappingURL=commandSecurityAuditEvaluate.js.map

package/dist/apps/cli/src/commands/security/commandSecurityAuditEvaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityAuditEvaluate.js","sourceRoot":"","sources":["../../../../../../src/commands/security/commandSecurityAuditEvaluate.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,gFAG8C;AAC9C,oGAA0F;AAE7E,QAAA,4BAA4B,GAAG,IAAA,6BAAa,EAAC;IACxD,IAAI,EAAE,yBAAyB;IAC/B,WAAW,EAAE,iDAAiD;IAC9D,KAAK,EAAE,UAAU;IACjB,MAAM,EAAE;QACN,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,UAAU,EAAE,IAAI,EAAE;KAC5E;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3B,GAAG,CAAC,GAAG,CACL,gDAAgD,0DAAwB,uBAAuB,CAChG,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/completion.d.ts

@@ -0,0 +1,24 @@
+import type { CommandDef } from "./core/types";
+/**
+ * Generate completions for the current command line.
+ *
+ * @param allCommands - All registered command definitions
+ * @param words - The words typed so far (argv without the binary name)
+ * @param cursorWord - The word currently being completed (may be empty)
+ * @returns Array of completion strings
+ */
+export declare function getCompletions(allCommands: CommandDef[], words: string[], cursorWord: string): Promise<string[]>;
+/**
+ * Generate the zsh completion script.
+ * The script discovers the local catladder binary at completion time,
+ * so it works without a global install.
+ */
+export declare function generateZshCompletionScript(): string;
+/**
+ * Install completions by writing the script directly into .zshrc.
+ */
+export declare function installCompletions(): Promise<void>;
+/**
+ * Remove completions from .zshrc.
+ */
+export declare function uninstallCompletions(): Promise<void>;

package/dist/apps/cli/src/completion.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.uninstallCompletions = exports.installCompletions = exports.generateZshCompletionScript = exports.getCompletions = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+/**
+ * Generate completions for the current command line.
+ *
+ * @param allCommands - All registered command definitions
+ * @param words - The words typed so far (argv without the binary name)
+ * @param cursorWord - The word currently being completed (may be empty)
+ * @returns Array of completion strings
+ */
+async function getCompletions(allCommands, words, cursorWord) {
+    // Try to find a command by matching the longest prefix of words.
+    // E.g., for words ["project", "cloudsql", "restore-db", "--source"],
+    // we match "project cloudsql restore-db" and treat ["--source"] as args.
+    const matched = findCommand(allCommands, words);
+    if (matched) {
+        const { command, argsAfterCommand } = matched;
+        // Check if cursor is a --flag name
+        if (cursorWord.startsWith("--")) {
+            return getFlagCompletions(command, cursorWord);
+        }
+        // Check if previous word was a --flag (complete its value)
+        const prevWord = argsAfterCommand[argsAfterCommand.length - 1];
+        if (prevWord === null || prevWord === void 0 ? void 0 : prevWord.startsWith("--")) {
+            const flagName = prevWord.replace(/^--/, "");
+            const inputName = flagNameToInputName(flagName);
+            const inputDef = command.inputs[inputName];
+            if (inputDef && "choices" in inputDef && inputDef.choices) {
+                return resolveChoicesForCompletion(inputDef, cursorWord);
+            }
+            return [];
+        }
+        // Complete positional inputs
+        const positionalInputs = getPositionalInputs(command);
+        const positionalArgs = argsAfterCommand.filter((w) => !w.startsWith("--"));
+        const positionalIndex = positionalArgs.length;
+        const targetInput = positionalInputs[positionalIndex];
+        if (targetInput) {
+            const [, inputDef] = targetInput;
+            if ("choices" in inputDef && inputDef.choices) {
+                return resolveChoicesForCompletion(inputDef, cursorWord);
+            }
+        }
+        return [];
+    }
+    // No command matched. Complete subcommand names at the current level.
+    const typed = words.join(" ");
+    const prefix = typed ? typed + " " : "";
+    const nextParts = new Set();
+    for (const cmd of allCommands) {
+        if (cmd.name.startsWith(prefix)) {
+            const rest = cmd.name.slice(prefix.length);
+            const nextPart = rest.split(" ")[0];
+            if (nextPart && nextPart.startsWith(cursorWord)) {
+                nextParts.add(nextPart);
+            }
+        }
+    }
+    return [...nextParts].sort();
+}
+exports.getCompletions = getCompletions;
+/**
+ * Find a command by matching the longest prefix of words against command names.
+ * Returns the matched command and the remaining words (args/flags after the command name).
+ */
+function findCommand(allCommands, words) {
+    // Try longest match first
+    for (let i = words.length; i >= 1; i--) {
+        const candidate = words.slice(0, i).join(" ");
+        const command = allCommands.find((c) => c.name === candidate);
+        if (command) {
+            return { command, argsAfterCommand: words.slice(i) };
+        }
+    }
+    return null;
+}
+function getPositionalInputs(command) {
+    return Object.entries(command.inputs).filter(([, def]) => def.positional);
+}
+function getFlagCompletions(command, cursorWord) {
+    const flags = [];
+    for (const [name, inputDef] of Object.entries(command.inputs)) {
+        if (inputDef.positional)
+            continue;
+        const flagName = `--${name.replace(/([A-Z])/g, "-$1").toLowerCase()}`;
+        flags.push(flagName);
+    }
+    flags.push("--inputs");
+    flags.push("--yes");
+    return flags.filter((f) => f.startsWith(cursorWord));
+}
+function flagNameToInputName(flagName) {
+    return flagName.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
+}
+async function resolveChoicesForCompletion(inputDef, cursorWord) {
+    if (!("choices" in inputDef) || !inputDef.choices)
+        return [];
+    try {
+        // Create a minimal ctx that returns empty for any get() call.
+        // This works for choices functions that don't depend on other inputs
+        // (like envAndComponents). For dependent choices, completion won't work
+        // but that's acceptable -- those are typically non-positional.
+        const noopCtx = {
+            get: () => Promise.reject(new Error("not available during completion")),
+            log: () => { },
+            confirm: () => Promise.resolve(true),
+            promptDirect: () => Promise.reject(new Error("not available during completion")),
+        };
+        const choices = await inputDef.choices(noopCtx);
+        return choices
+            .map((c) => (typeof c === "string" ? c : c.value))
+            .filter((v) => v.startsWith(cursorWord));
+    }
+    catch (_a) {
+        // If choices function fails (e.g., needs other inputs), return nothing
+        return [];
+    }
+}
+/**
+ * Generate the zsh completion script.
+ * The script discovers the local catladder binary at completion time,
+ * so it works without a global install.
+ */
+function generateZshCompletionScript() {
+    return `
+###-begin-catladder-completions-###
+# Find catladder binary by walking up from cwd
+_catladder_find_binary() {
+  local dir="$PWD"
+  while [[ "$dir" != "/" ]]; do
+    if [[ -x "$dir/node_modules/.bin/catladder" ]]; then
+      echo "$dir/node_modules/.bin/catladder"
+      return
+    fi
+    # Also check for catladder-dev (monorepo development)
+    if [[ -x "$dir/apps/cli/bin/catladder-dev" ]]; then
+      echo "$dir/apps/cli/bin/catladder-dev"
+      return
+    fi
+    dir="\${dir:h}"
+  done
+  # Fall back to global
+  if command -v catladder &>/dev/null; then
+    echo "catladder"
+  elif command -v catladder-dev &>/dev/null; then
+    echo "catladder-dev"
+  fi
+}
+
+# Run completion with given offset (number of words to skip before CLI args)
+_catladder_do_complete() {
+  local skip=$1
+  local catladder_bin=$(_catladder_find_binary)
+  [[ -z "$catladder_bin" ]] && return
+
+  local -a completions
+  local current_word="\${words[$CURRENT]}"
+  local -a cmd_words=(\${words:$skip:$((CURRENT-skip-1))})
+
+  completions=(\${(f)"$($catladder_bin __complete -- "\${cmd_words[*]}" "$current_word" 2>/dev/null)"})
+
+  if [[ \${#completions[@]} -gt 0 ]]; then
+    compadd -a completions
+  fi
+}
+
+# catladder <TAB>
+_catladder_completions() { _catladder_do_complete 1; }
+
+# yarn catladder <TAB>
+_yarn_catladder_completions() {
+  [[ $CURRENT -le 2 || "\${words[2]}" != "catladder" ]] && return
+  _catladder_do_complete 2
+}
+
+compdef _catladder_completions catladder
+compdef _catladder_completions catladder-dev
+compdef _yarn_catladder_completions yarn
+###-end-catladder-completions-###
+`.trim();
+}
+exports.generateZshCompletionScript = generateZshCompletionScript;
+const BEGIN_MARKER = "###-begin-catladder-completions-###";
+const END_MARKER = "###-end-catladder-completions-###";
+function getZshrcPath() {
+    return (0, path_1.join)((0, os_1.homedir)(), ".zshrc");
+}
+/**
+ * Install completions by writing the script directly into .zshrc.
+ */
+async function installCompletions() {
+    const zshrcPath = getZshrcPath();
+    let content = "";
+    if ((0, fs_1.existsSync)(zshrcPath)) {
+        content = (0, fs_1.readFileSync)(zshrcPath, "utf-8");
+    }
+    if (content.includes(BEGIN_MARKER)) {
+        // Replace existing
+        const startIdx = content.indexOf(BEGIN_MARKER);
+        const endIdx = content.indexOf(END_MARKER) + END_MARKER.length;
+        content =
+            content.slice(0, startIdx) +
+                generateZshCompletionScript() +
+                content.slice(endIdx);
+        (0, fs_1.writeFileSync)(zshrcPath, content);
+        console.log(`Updated catladder completions in ${zshrcPath}`);
+    }
+    else {
+        (0, fs_1.writeFileSync)(zshrcPath, content + "\n" + generateZshCompletionScript() + "\n");
+        console.log(`Installed catladder completions in ${zshrcPath}`);
+    }
+    console.log(`Restart your shell or run: source ${zshrcPath}`);
+}
+exports.installCompletions = installCompletions;
+/**
+ * Remove completions from .zshrc.
+ */
+async function uninstallCompletions() {
+    const zshrcPath = getZshrcPath();
+    if (!(0, fs_1.existsSync)(zshrcPath)) {
+        console.log("No .zshrc found");
+        return;
+    }
+    const content = (0, fs_1.readFileSync)(zshrcPath, "utf-8");
+    if (!content.includes(BEGIN_MARKER)) {
+        console.log("No catladder completions found in " + zshrcPath);
+        return;
+    }
+    const startIdx = content.indexOf(BEGIN_MARKER);
+    const endIdx = content.indexOf(END_MARKER) + END_MARKER.length;
+    const cleaned = (content.slice(0, startIdx) + content.slice(endIdx)).replace(/\n{3,}/g, "\n\n");
+    (0, fs_1.writeFileSync)(zshrcPath, cleaned);
+    console.log(`Removed catladder completions from ${zshrcPath}`);
+    console.log(`Restart your shell or run: source ${zshrcPath}`);
+}
+exports.uninstallCompletions = uninstallCompletions;
+//# sourceMappingURL=completion.js.map

package/dist/apps/cli/src/completion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"completion.js","sourceRoot":"","sources":["../../../../src/completion.ts"],"names":[],"mappings":";;;AAAA,2BAA6D;AAC7D,+BAA4B;AAC5B,2BAA6B;AAG7B;;;;;;;GAOG;AACI,KAAK,UAAU,cAAc,CAClC,WAAyB,EACzB,KAAe,EACf,UAAkB;IAElB,iEAAiE;IACjE,qEAAqE;IACrE,yEAAyE;IACzE,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAEhD,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;QAE9C,mCAAmC;QACnC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,kBAAkB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjD,CAAC;QAED,2DAA2D;QAC3D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/D,IAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC7C,MAAM,SAAS,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;YAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,QAAQ,IAAI,SAAS,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC1D,OAAO,2BAA2B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,6BAA6B;QAC7B,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtD,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC;QAC9C,MAAM,WAAW,GAAG,gBAAgB,CAAC,eAAe,CAAC,CAAC;QAEtD,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,CAAC,EAAE,QAAQ,CAAC,GAAG,WAAW,CAAC;YACjC,IAAI,SAAS,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC9C,OAAO,2BAA2B,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,sEAAsE;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAExC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAChD,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AA7DD,wCA6DC;AAED;;;GAGG;AACH,SAAS,WAAW,CAClB,WAAyB,EACzB,KAAe;IAEf,0BAA0B;IAC1B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAmB;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAmB,EAAE,UAAkB;IACjE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9D,IAAI,QAAQ,CAAC,UAAU;YAAE,SAAS;QAClC,MAAM,QAAQ,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAClE,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,QAAkB,EAClB,UAAkB;IAElB,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAC7D,IAAI,CAAC;QACH,8DAA8D;QAC9D,qEAAqE;QACrE,wEAAwE;QACxE,+DAA+D;QAC/D,MAAM,OAAO,GAAG;YACd,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACvE,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;YACb,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;YACpC,YAAY,EAAE,GAAG,EAAE,CACjB,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;SAC/D,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,OAAO,OAAO;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;aACjD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,WAAM,CAAC;QACP,uEAAuE;QACvE,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,2BAA2B;IACzC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDR,CAAC,IAAI,EAAE,CAAC;AACT,CAAC;AAzDD,kEAyDC;AAED,MAAM,YAAY,GAAG,qCAAqC,CAAC;AAC3D,MAAM,UAAU,GAAG,mCAAmC,CAAC;AAEvD,SAAS,YAAY;IACnB,OAAO,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,QAAQ,CAAC,CAAC;AACnC,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB;IACtC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IAEjC,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC1B,OAAO,GAAG,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACnC,mBAAmB;QACnB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;QAC/D,OAAO;YACL,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;gBAC1B,2BAA2B,EAAE;gBAC7B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACxB,IAAA,kBAAa,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,IAAA,kBAAa,EACX,SAAS,EACT,OAAO,GAAG,IAAI,GAAG,2BAA2B,EAAE,GAAG,IAAI,CACtD,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;AAChE,CAAC;AA1BD,gDA0BC;AAED;;GAEG;AACI,KAAK,UAAU,oBAAoB;IACxC,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;IACjC,IAAI,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC/B,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAA,iBAAY,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEjD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,oCAAoC,GAAG,SAAS,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC;IAC/D,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAC1E,SAAS,EACT,MAAM,CACP,CAAC;IAEF,IAAA,kBAAa,EAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,sCAAsC,SAAS,EAAE,CAAC,CAAC;IAC/D,OAAO,CAAC,GAAG,CAAC,qCAAqC,SAAS,EAAE,CAAC,CAAC;AAChE,CAAC;AAxBD,oDAwBC"}