@catladder/cli 0.0.0-next-aea5d3ad → 0.0.0-next-2b60440e

package/src/commands/project/secrets/document.ts

@@ -0,0 +1,269 @@
+import type { Config } from "@catladder/pipeline";
+import {
+  getEnabledPipelineTypes,
+  getSecretVarName,
+  getVaultConfig,
+} from "@catladder/pipeline";
+import {
+  getEnvironment,
+  getProjectConfig,
+} from "../../../config/getProjectConfig";
+import type { IO } from "../../../core/types";
+import { isGhAuthenticated } from "../../../utils/github";
+import { upsertAllVariables } from "../../../utils/gitlab";
+import {
+  collectSecretTargets,
+  getConfiguredGithubRepo,
+  pushSecretsToGithub,
+} from "../commandSecretsSyncGithub";
+import type { ScopedSecretKeys } from "./scope";
+
+/** placeholder for secrets that have no value in the vault yet */
+export const FILL_ME = "🚨 FILL ME";
+
+/**
+ * component → env → key → value: the document shape shared by the
+ * editor, `secrets-pull` and `secrets-push`
+ */
+export type SecretsDocument = {
+  [componentName: string]: {
+    [env: string]: Record<string, unknown>;
+  };
+};
+
+/** secrets of one env of one component, ready to be written */
+export type SecretsWrite = {
+  env: string;
+  componentName: string;
+  secrets: Record<string, unknown>;
+};
+
+/* for convenience, parse json values. that makes it easier to edit secrets that are objects */
+const parseJsonValue = (value: string): unknown => {
+  try {
+    return JSON.parse(value);
+  } catch (e) {
+    return value;
+  }
+};
+
+/**
+ * builds the document for the given scope with the current values from
+ * the vault; unset secrets appear as the FILL_ME placeholder
+ */
+export const buildSecretsDocument = async (
+  io: IO,
+  scoped: ScopedSecretKeys,
+): Promise<SecretsDocument> => {
+  const names = scoped.flatMap(({ env, componentName, keys }) =>
+    keys.map((key) => getSecretVarName(env, componentName, key)),
+  );
+  const values = await (await io.getVaultManager()).readSecrets(names, io);
+
+  const document: SecretsDocument = {};
+  for (const { env, componentName, keys } of scoped) {
+    document[componentName] ??= {};
+    document[componentName][env] = Object.fromEntries(
+      keys.map((key) => {
+        const value = values[getSecretVarName(env, componentName, key)];
+        return [key, value === undefined ? FILL_ME : parseJsonValue(value)];
+      }),
+    );
+  }
+  return document;
+};
+
+/**
+ * validates a document against the scope. Undeclared components, envs
+ * or keys are always problems; missing keys only when `requireComplete`
+ * (the guided editor flow) — pushes may be partial.
+ */
+export const checkSecretsDocument = (
+  document: SecretsDocument,
+  scoped: ScopedSecretKeys,
+  { requireComplete }: { requireComplete: boolean },
+): string[] => {
+  const problems: string[] = [];
+
+  const scopedKeys = new Map<string, string[]>();
+  scoped.forEach(({ env, componentName, keys }) =>
+    scopedKeys.set(`${env}:${componentName}`, keys),
+  );
+  const scopedComponents = new Set(scoped.map((s) => s.componentName));
+
+  for (const [componentName, envs] of Object.entries(document ?? {})) {
+    if (!scopedComponents.has(componentName)) {
+      problems.push(
+        `"${componentName}" is not a component in this scope — remove it or widen the scope`,
+      );
+      continue;
+    }
+    for (const [env, secrets] of Object.entries(envs ?? {})) {
+      const keys = scopedKeys.get(`${env}:${componentName}`);
+      if (!keys) {
+        problems.push(
+          `"${env}:${componentName}" is not in this scope — remove it or widen the scope`,
+        );
+        continue;
+      }
+      const extraneous = Object.keys(secrets ?? {}).filter(
+        (key) => !keys.includes(key),
+      );
+      extraneous.forEach((key) =>
+        problems.push(
+          `"${env}:${componentName}": "${key}" is not declared in the config (or filtered out by --key)`,
+        ),
+      );
+    }
+  }
+
+  if (requireComplete) {
+    for (const { env, componentName, keys } of scoped) {
+      const provided = Object.keys(document?.[componentName]?.[env] ?? {});
+      keys
+        .filter((key) => !provided.includes(key))
+        .forEach((key) =>
+          problems.push(
+            `"${env}:${componentName}": "${key}" has not been provided`,
+          ),
+        );
+    }
+  }
+
+  return problems;
+};
+
+/**
+ * turns a (validated) document into writes. FILL_ME placeholders and
+ * empty (null) values are skipped, so an untouched placeholder can
+ * never end up as a live secret value.
+ */
+export const collectSecretsWrites = (
+  document: SecretsDocument,
+  scoped: ScopedSecretKeys,
+): { writes: SecretsWrite[]; skipped: string[] } => {
+  const writes: SecretsWrite[] = [];
+  const skipped: string[] = [];
+  for (const { env, componentName, keys } of scoped) {
+    const provided = document?.[componentName]?.[env] ?? {};
+    const secrets: Record<string, unknown> = {};
+    for (const key of keys) {
+      if (!(key in provided)) {
+        continue;
+      }
+      const value = provided[key];
+      if (value === FILL_ME || value === null || value === undefined) {
+        skipped.push(`${env}:${componentName} ${key}`);
+        continue;
+      }
+      secrets[key] = value;
+    }
+    if (Object.keys(secrets).length > 0) {
+      writes.push({ env, componentName, secrets });
+    }
+  }
+  return { writes, skipped };
+};
+
+/**
+ * writes secrets to the vault (the source of truth) and mirrors them
+ * to every enabled CI backend — which backends exist is invisible to
+ * the caller
+ */
+export const writeSecretsAndMirror = async (
+  io: IO,
+  writes: SecretsWrite[],
+): Promise<void> => {
+  const config = await getProjectConfig();
+  if (!config) {
+    throw new Error("no catladder config found");
+  }
+
+  io.log("");
+  io.log("writing secrets to the vault, please wait...");
+  io.log("");
+  for (const { env, componentName, secrets } of writes) {
+    io.log("writing " + env + ":" + componentName + "...\n");
+    await (
+      await io.getVaultManager()
+    ).writeSecrets(env, componentName, secrets);
+    io.log("");
+    io.log("✅ " + env + ":" + componentName);
+    io.log("--------------------------------\n");
+  }
+
+  await mirrorSecretsToCiBackends(io, config, writes);
+};
+
+/**
+ * the vault is the source of truth; every enabled CI backend receives
+ * a mirrored copy of the written secrets (gitlab variables, github
+ * secrets), so all CI systems stay in sync
+ */
+const mirrorSecretsToCiBackends = async (
+  io: IO,
+  config: Config,
+  writes: SecretsWrite[],
+) => {
+  const enabled = getEnabledPipelineTypes(config);
+
+  // gitlab mirror (unless gitlab is the vault itself, then it is
+  // already written)
+  if (getVaultConfig(config).type !== "gitlab" && enabled.includes("gitlab")) {
+    for (const { env, componentName, secrets } of writes) {
+      await upsertAllVariables(io, secrets, env, componentName);
+    }
+    io.log("✅ mirrored to gitlab");
+  }
+
+  if (!enabled.includes("github")) {
+    return;
+  }
+  const kinds = new Map<string, "secret" | "variable">();
+  for (const { env, componentName } of writes) {
+    const { secretEnvVarKeys, jobOnlyVars } = await getEnvironment(
+      env,
+      componentName,
+    );
+    [
+      ...secretEnvVarKeys,
+      ...jobOnlyVars.build.secretEnvVarKeys,
+      ...jobOnlyVars.deploy.secretEnvVarKeys,
+    ].forEach(({ key, kind }) =>
+      kinds.set(getSecretVarName(env, componentName, key), kind ?? "secret"),
+    );
+  }
+  const secrets = writes.flatMap(({ env, componentName, secrets }) =>
+    Object.entries(secrets).map(([key, value]) => {
+      const name = getSecretVarName(env, componentName, key);
+      return {
+        name,
+        value: typeof value === "string" ? value : JSON.stringify(value ?? ""),
+        kind: kinds.get(name) ?? ("secret" as const),
+      };
+    }),
+  );
+  if (secrets.length === 0) {
+    return;
+  }
+  if (!(await isGhAuthenticated())) {
+    io.log(
+      "⚠️ github pipeline is enabled, but the github cli (gh) is not authenticated — run `project secrets-sync-github` later to mirror the secrets",
+    );
+    return;
+  }
+  const repo = await getConfiguredGithubRepo();
+  if (!repo) {
+    io.log(
+      "⚠️ github pipeline is enabled, but no github repository was found — run `project secrets-sync-github` later to mirror the secrets",
+    );
+    return;
+  }
+  io.log(`mirroring ${secrets.length} secrets to github ('${repo}')...`);
+  await pushSecretsToGithub(
+    io,
+    repo,
+    secrets,
+    await collectSecretTargets(config),
+  );
+};

package/src/commands/project/secrets/parseKeysInput.ts

@@ -0,0 +1,8 @@
+/** parses a comma-separated `--key` input into a list of keys */
+export const parseKeysInput = (input?: string): string[] | undefined => {
+  const keys = input
+    ?.split(",")
+    .map((key) => key.trim())
+    .filter(Boolean);
+  return keys && keys.length > 0 ? keys : undefined;
+};

package/src/commands/project/secrets/scope.ts

@@ -0,0 +1,151 @@
+import {
+  getAllComponentsWithAllEnvsHierarchical,
+  getEnvironment,
+} from "../../../config/getProjectConfig";
+
+/** which envs of which components a secrets command operates on */
+export type SecretsScope = {
+  [componentName: string]: string[];
+};
+
+/**
+ * resolves a scope expression to component → envs:
+ * - (empty): all components, all envs
+ * - `env:component`: one env of one component
+ * - `env` / `env:`: one env, every component that has it
+ * - `:component`: every env of one component
+ */
+export const resolveSecretsScope = async (
+  scope?: string,
+): Promise<SecretsScope> => {
+  const all = await getAllComponentsWithAllEnvsHierarchical();
+  if (Object.keys(all).length === 0) {
+    throw new Error("no catladder config found");
+  }
+  if (!scope) {
+    return all;
+  }
+
+  const [env, componentName] = scope.split(":").map((x) => x || null);
+
+  if (componentName && !(componentName in all)) {
+    throw new Error(
+      `unknown component "${componentName}" — components: ${Object.keys(all).join(", ")}`,
+    );
+  }
+
+  const scoped = Object.fromEntries(
+    Object.entries(all)
+      .filter(([name]) => !componentName || name === componentName)
+      .map(([name, envs]): [string, string[]] => [
+        name,
+        env ? envs.filter((e) => e === env) : envs,
+      ])
+      .filter(([, envs]) => envs.length > 0),
+  );
+
+  if (Object.keys(scoped).length === 0) {
+    const allEnvs = [...new Set(Object.values(all).flat())];
+    throw new Error(
+      `no component has the environment "${env}" — environments: ${allEnvs.join(", ")}`,
+    );
+  }
+  return scoped;
+};
+
+/**
+ * all valid scope expressions, for autocompletion: `env:component`
+ * pairs plus the `env:` (one env, all components) and `:component`
+ * (one component, all envs) forms
+ */
+export const secretsScopeChoices = async (): Promise<string[]> => {
+  const all = await getAllComponentsWithAllEnvsHierarchical();
+  const pairs = Object.entries(all).flatMap(([componentName, envs]) =>
+    envs.map((env) => `${env}:${componentName}`),
+  );
+  const envs = [...new Set(Object.values(all).flat())];
+  return [
+    ...pairs,
+    ...envs.map((env) => `${env}:`),
+    ...Object.keys(all).map((componentName) => `:${componentName}`),
+  ];
+};
+
+/** one env of one component together with its (filtered) secret keys */
+export type ScopedSecretKeys = Array<{
+  env: string;
+  componentName: string;
+  keys: string[];
+}>;
+
+/** the secret keys declared in the config for one env of one component */
+export const getDeclaredSecretKeys = async (
+  env: string,
+  componentName: string,
+): Promise<string[]> => {
+  const { secretEnvVarKeys, jobOnlyVars } = await getEnvironment(
+    env,
+    componentName,
+  );
+  return [
+    ...jobOnlyVars.build.secretEnvVarKeys,
+    ...jobOnlyVars.deploy.secretEnvVarKeys,
+    ...secretEnvVarKeys,
+  ]
+    .filter((k) => !k.hidden)
+    .map((k) => k.key);
+};
+
+/**
+ * expands a scope to its declared secret keys, optionally filtered to
+ * `onlyKeys`. Throws when a requested key is not declared anywhere in
+ * the scope (typo protection); env/component pairs without matching
+ * keys are dropped.
+ */
+export const getScopedSecretKeys = async (
+  scope: SecretsScope,
+  onlyKeys?: string[],
+): Promise<ScopedSecretKeys> => {
+  const scoped: ScopedSecretKeys = [];
+  const declaredAnywhere = new Set<string>();
+  for (const [componentName, envs] of Object.entries(scope)) {
+    for (const env of envs) {
+      const declared = await getDeclaredSecretKeys(env, componentName);
+      declared.forEach((key) => declaredAnywhere.add(key));
+      const keys = onlyKeys
+        ? declared.filter((key) => onlyKeys.includes(key))
+        : declared;
+      if (keys.length > 0) {
+        scoped.push({ env, componentName, keys });
+      }
+    }
+  }
+
+  const unknownKeys = (onlyKeys ?? []).filter(
+    (key) => !declaredAnywhere.has(key),
+  );
+  if (unknownKeys.length > 0) {
+    throw new Error(
+      `these secrets are not declared in this scope: ${unknownKeys.join(", ")}` +
+        `\ndeclared secrets: ${[...declaredAnywhere].join(", ")}`,
+    );
+  }
+  if (scoped.length === 0) {
+    throw new Error("there are no secrets to configure in this scope");
+  }
+  return scoped;
+};
+
+/** human-readable one-line-per-component summary of a scope */
+export const formatScope = (scoped: ScopedSecretKeys): string => {
+  const byComponent = new Map<string, string[]>();
+  for (const { env, componentName } of scoped) {
+    byComponent.set(componentName, [
+      ...(byComponent.get(componentName) ?? []),
+      env,
+    ]);
+  }
+  return [...byComponent.entries()]
+    .map(([componentName, envs]) => `- ${componentName}: ${envs.join(", ")}`)
+    .join("\n");
+};

package/src/utils/readStdin.ts

@@ -0,0 +1,8 @@
+/** reads the whole stdin stream (for piped input in non-interactive use) */
+export const readStdin = async (): Promise<string> => {
+  const chunks: Buffer[] = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(chunk as Buffer);
+  }
+  return Buffer.concat(chunks).toString("utf-8");
+};

package/dist/cli/src/apps/cli/commands/project/commandConfigSecrets.d.ts

@@ -1,2 +0,0 @@
-import type { IO } from "../../../../core/types";
-export declare const projectConfigSecrets: (io: IO, envComponent?: string) => Promise<void>;

package/dist/cli/src/apps/cli/commands/project/commandConfigSecrets.js

@@ -1,206 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.projectConfigSecrets = void 0;
-const pipeline_1 = require("../../../../../../pipeline/src/index.js");
-const common_tags_1 = require("common-tags");
-const lodash_es_1 = require("lodash-es");
-const getProjectConfig_1 = require("../../../../config/getProjectConfig");
-const commandSecretsSyncGithub_1 = require("../../../../commands/project/commandSecretsSyncGithub");
-const editAsFile_1 = require("../../../../utils/editAsFile");
-const github_1 = require("../../../../utils/github");
-const gitlab_1 = require("../../../../utils/gitlab");
-const promise_1 = require("../../../../utils/promise");
-/* for convenience, parse json objects. that makes it easier to edit secrets that are object */
-const resolveJson = (v) => Object.fromEntries(Object.entries(v).map(([componentName, envs]) => {
-    return [
-        componentName,
-        Object.fromEntries(Object.entries(envs).map(([env, secrets]) => [
-            env,
-            Object.fromEntries(Object.entries(secrets).map(([key, value]) => {
-                try {
-                    return [key, JSON.parse(value)];
-                }
-                catch (e) {
-                    return [key, value];
-                }
-            })),
-        ])),
-    ];
-}));
-const getSecretEnvVarKeysToConfigure = async (env, componentName) => {
-    const { secretEnvVarKeys, jobOnlyVars } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
-    return [
-        ...jobOnlyVars.build.secretEnvVarKeys,
-        ...jobOnlyVars.deploy.secretEnvVarKeys,
-        ...secretEnvVarKeys,
-    ]
-        .filter((k) => !k.hidden)
-        .map((k) => k.key);
-};
-const getEnvVarsToEdit = async (instance, env, componentName) => {
-    const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(env, componentName);
-    const normalEnvVars = await (0, getProjectConfig_1.getEnvVarsResolved)(instance, env, componentName);
-    const jobOnlyEnvVars = await (0, getProjectConfig_1.getJobOnlyEnvVarsResolved)(instance, env, componentName);
-    const allEnvVars = {
-        ...normalEnvVars,
-        ...jobOnlyEnvVars,
-    };
-    return Object.fromEntries(secretEnvVarKeys.map((key) => {
-        const value = allEnvVars[key];
-        // due to some quirky way to resolve these variables, unset variables have the $CL_ prefix, so we remove thouse here
-        const variableIsNotSet = value === "$" + (0, pipeline_1.getSecretVarName)(env, componentName, key);
-        return [key, variableIsNotSet ? "🚨 FILL ME" : value];
-    }));
-};
-const doItFor = async (instance, envAndComponents) => {
-    let valuesToEdit = Object.fromEntries(await Promise.all(Object.entries(envAndComponents).map(async ([componentName, envs]) => [
-        componentName,
-        Object.fromEntries(await Promise.all(envs.map(async (env) => [
-            env,
-            await getEnvVarsToEdit(instance, env, componentName),
-        ]))),
-    ])));
-    let hasErrors = true;
-    while (hasErrors) {
-        valuesToEdit = await (0, editAsFile_1.editAsFile)(resolveJson(valuesToEdit), (0, common_tags_1.stripIndents) `
-        Please fill in all secrets for: 
-
-        ${Object.entries(envAndComponents)
-            .map(([componentName, envs]) => `- ${componentName}: ${envs.join(", ")}`)
-            .join("\n")}
-
-        `);
-        // check for errors
-        hasErrors = false;
-        for (const [componentName, envs] of Object.entries(envAndComponents)) {
-            for (const env of envs) {
-                const usedKeys = valuesToEdit[componentName][env]
-                    ? Object.keys(valuesToEdit[componentName][env])
-                    : [];
-                // check whether newValues have the exact number of keys
-                const secretEnvVarKeys = await getSecretEnvVarKeysToConfigure(env, componentName);
-                const extranous = (0, lodash_es_1.difference)(usedKeys, secretEnvVarKeys);
-                const missing = (0, lodash_es_1.difference)(secretEnvVarKeys, usedKeys);
-                if (extranous.length > 0 || missing.length > 0) {
-                    instance.log("");
-                    instance.log(`😿 Oh no! There is something wrong with "${componentName}"`);
-                    instance.log("");
-                    if (extranous.length > 0) {
-                        instance.log("these secrets are not declared in the config");
-                        extranous.forEach((key) => instance.log(key));
-                        instance.log("");
-                    }
-                    if (missing.length > 0) {
-                        instance.log("these secrets have not been provided:");
-                        missing.forEach((key) => instance.log(key));
-                        instance.log("");
-                    }
-                    await (0, promise_1.delay)(1000);
-                    const shouldContinue = await instance.confirm("Try again? 🤔");
-                    if (!shouldContinue) {
-                        throw new Error("abort");
-                    }
-                    hasErrors = true;
-                }
-            }
-        }
-    }
-    const config = await (0, getProjectConfig_1.getProjectConfig)();
-    if (!config) {
-        throw new Error("no catladder config found");
-    }
-    instance.log("");
-    instance.log("writing all secrets to the vault, please wait...");
-    instance.log("");
-    for (const [componentName, envs] of Object.entries(envAndComponents)) {
-        for (const env of envs) {
-            instance.log("writing " + env + ":" + componentName + "...\n");
-            await (await instance.getVaultManager()).writeSecrets(env, componentName, valuesToEdit[componentName][env]);
-            instance.log("");
-            instance.log("✅ " + env + ":" + componentName);
-            instance.log("--------------------------------\n");
-        }
-    }
-    await mirrorSecretsToCiBackends(instance, config, envAndComponents, valuesToEdit);
-    instance.log("done! 😻");
-    instance.log("");
-};
-/**
- * the vault is the source of truth; every enabled CI backend receives
- * a mirrored copy of the edited secrets (gitlab variables, github
- * secrets), so all CI systems stay in sync
- */
-const mirrorSecretsToCiBackends = async (instance, config, envAndComponents, valuesToEdit) => {
-    const enabled = (0, pipeline_1.getEnabledPipelineTypes)(config);
-    // gitlab mirror (unless gitlab is the vault itself, then it is
-    // already written)
-    if ((0, pipeline_1.getVaultConfig)(config).type !== "gitlab" && enabled.includes("gitlab")) {
-        for (const [componentName, envs] of Object.entries(envAndComponents)) {
-            for (const env of envs) {
-                await (0, gitlab_1.upsertAllVariables)(instance, valuesToEdit[componentName][env], env, componentName);
-            }
-        }
-        instance.log("✅ mirrored to gitlab");
-    }
-    if (!enabled.includes("github")) {
-        return;
-    }
-    const kinds = new Map();
-    for (const [componentName, envs] of Object.entries(envAndComponents)) {
-        for (const env of envs) {
-            const { secretEnvVarKeys, jobOnlyVars } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
-            [
-                ...secretEnvVarKeys,
-                ...jobOnlyVars.build.secretEnvVarKeys,
-                ...jobOnlyVars.deploy.secretEnvVarKeys,
-            ].forEach(({ key, kind }) => kinds.set((0, pipeline_1.getSecretVarName)(env, componentName, key), kind !== null && kind !== void 0 ? kind : "secret"));
-        }
-    }
-    const secrets = Object.entries(envAndComponents).flatMap(([componentName, envs]) => envs.flatMap((env) => {
-        var _a;
-        return Object.entries((_a = valuesToEdit[componentName][env]) !== null && _a !== void 0 ? _a : {}).map(([key, value]) => {
-            var _a;
-            const name = (0, pipeline_1.getSecretVarName)(env, componentName, key);
-            return {
-                name,
-                value: typeof value === "string" ? value : JSON.stringify(value !== null && value !== void 0 ? value : ""),
-                kind: (_a = kinds.get(name)) !== null && _a !== void 0 ? _a : "secret",
-            };
-        });
-    }));
-    if (secrets.length === 0) {
-        return;
-    }
-    if (!(await (0, github_1.isGhAuthenticated)())) {
-        instance.log("⚠️ github pipeline is enabled, but the github cli (gh) is not authenticated — run `project secrets-sync-github` later to mirror the secrets");
-        return;
-    }
-    const repo = await (0, commandSecretsSyncGithub_1.getConfiguredGithubRepo)();
-    if (!repo) {
-        instance.log("⚠️ github pipeline is enabled, but no github repository was found — run `project secrets-sync-github` later to mirror the secrets");
-        return;
-    }
-    instance.log(`mirroring ${secrets.length} secrets to github ('${repo}')...`);
-    await (0, commandSecretsSyncGithub_1.pushSecretsToGithub)(instance, repo, secrets, await (0, commandSecretsSyncGithub_1.collectSecretTargets)(config));
-};
-const projectConfigSecrets = async (io, envComponent) => {
-    if (!envComponent) {
-        const allEnvAndcomponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsHierarchical)();
-        await doItFor(io, allEnvAndcomponents);
-    }
-    else {
-        const { env, componentName } = (0, getProjectConfig_1.parseChoice)(envComponent);
-        // componentName can be null. in this case, iterate over all  components
-        if (!componentName) {
-            const components = await (0, getProjectConfig_1.getProjectComponents)();
-            await doItFor(io, Object.fromEntries(components.map((c) => [c, [env]])));
-        }
-        if (componentName) {
-            await doItFor(io, {
-                [componentName]: [env],
-            });
-        }
-    }
-};
-exports.projectConfigSecrets = projectConfigSecrets;
-//# sourceMappingURL=commandConfigSecrets.js.map

package/dist/cli/src/apps/cli/commands/project/commandConfigSecrets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"commandConfigSecrets.js","sourceRoot":"","sources":["../../../../../../../src/apps/cli/commands/project/commandConfigSecrets.ts"],"names":[],"mappings":";;;AAAA,kDAI6B;AAE7B,6CAA2C;AAC3C,yCAAuC;AAEvC,0EAQ6C;AAC7C,oGAI+D;AAC/D,6DAA0D;AAC1D,qDAA6D;AAC7D,qDAA8D;AAC9D,uDAAkD;AAOlD,+FAA+F;AAC/F,MAAM,WAAW,GAAG,CAAC,CAAO,EAAE,EAAE,CAC9B,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE;IAC9C,OAAO;QACL,aAAa;QACb,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;YAC3C,GAAG;YACH,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBAC3C,IAAI,CAAC;oBACH,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClC,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC,CAAC,CACH;SACF,CAAC,CACH;KACF,CAAC;AACJ,CAAC,CAAC,CACH,CAAC;AAEJ,MAAM,8BAA8B,GAAG,KAAK,EAC1C,GAAW,EACX,aAAqB,EACrB,EAAE;IACF,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,iCAAc,EAC5D,GAAG,EACH,aAAa,CACd,CAAC;IACF,OAAO;QACL,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB;QACrC,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB;QACtC,GAAG,gBAAgB;KACpB;SACE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC;AACF,MAAM,gBAAgB,GAAG,KAAK,EAC5B,QAAY,EACZ,GAAW,EACX,aAAqB,EACrB,EAAE;IACF,MAAM,gBAAgB,GAAG,MAAM,8BAA8B,CAC3D,GAAG,EACH,aAAa,CACd,CAAC;IAEF,MAAM,aAAa,GAAG,MAAM,IAAA,qCAAkB,EAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC,CAAC;IAC7E,MAAM,cAAc,GAAG,MAAM,IAAA,4CAAyB,EACpD,QAAQ,EACR,GAAG,EACH,aAAa,CACd,CAAC;IACF,MAAM,UAAU,GAAG;QACjB,GAAG,aAAa;QAChB,GAAG,cAAc;KAClB,CAAC;IACF,OAAO,MAAM,CAAC,WAAW,CACvB,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC9B,oHAAoH;QACpH,MAAM,gBAAgB,GACpB,KAAK,KAAK,GAAG,GAAG,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AACF,MAAM,OAAO,GAAG,KAAK,EACnB,QAAY,EACZ,gBAEC,EACD,EAAE;IACF,IAAI,YAAY,GAAS,MAAM,CAAC,WAAW,CACzC,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;QACpE,aAAa;QACb,MAAM,CAAC,WAAW,CAChB,MAAM,OAAO,CAAC,GAAG,CACf,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;YACtB,GAAG;YACH,MAAM,gBAAgB,CAAC,QAAQ,EAAE,GAAG,EAAE,aAAa,CAAC;SACrD,CAAC,CACH,CACF;KACF,CAAC,CACH,CACF,CAAC;IACF,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,OAAO,SAAS,EAAE,CAAC;QACjB,YAAY,GAAG,MAAM,IAAA,uBAAU,EAC7B,WAAW,CAAC,YAAY,CAAC,EACzB,IAAA,0BAAY,EAAA;;;UAGR,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC;aAC/B,GAAG,CACF,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,aAAa,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpE;aACA,IAAI,CAAC,IAAI,CAAC;;SAEZ,CACJ,CAAC;QACF,mBAAmB;QACnB,SAAS,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,QAAQ,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;oBAC/C,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC;oBAC/C,CAAC,CAAC,EAAE,CAAC;gBACP,wDAAwD;gBACxD,MAAM,gBAAgB,GAAG,MAAM,8BAA8B,CAC3D,GAAG,EACH,aAAa,CACd,CAAC;gBAEF,MAAM,SAAS,GAAG,IAAA,sBAAU,EAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;gBACzD,MAAM,OAAO,GAAG,IAAA,sBAAU,EAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;gBAEvD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC/C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,QAAQ,CAAC,GAAG,CACV,4CAA4C,aAAa,GAAG,CAC7D,CAAC;oBACF,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACjB,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACzB,QAAQ,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;wBAC7D,SAAS,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC9C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;oBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,QAAQ,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;wBACtD,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;wBAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACnB,CAAC;oBAED,MAAM,IAAA,eAAK,EAAC,IAAI,CAAC,CAAC;oBAClB,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;oBAE/D,IAAI,CAAC,cAAc,EAAE,CAAC;wBACpB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;oBAC3B,CAAC;oBACD,SAAS,GAAG,IAAI,CAAC;gBACnB,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC/C,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,UAAU,GAAG,GAAG,GAAG,GAAG,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;YAC/D,MAAM,CACJ,MAAM,QAAQ,CAAC,eAAe,EAAE,CACjC,CAAC,YAAY,CAAC,GAAG,EAAE,aAAa,EAAE,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACjB,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,aAAa,CAAC,CAAC;YAC/C,QAAQ,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,MAAM,yBAAyB,CAC7B,QAAQ,EACR,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;IAEF,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,yBAAyB,GAAG,KAAK,EACrC,QAAY,EACZ,MAAc,EACd,gBAAuD,EACvD,YAAkB,EAClB,EAAE;IACF,MAAM,OAAO,GAAG,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;IAEhD,+DAA+D;IAC/D,mBAAmB;IACnB,IAAI,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,IAAA,2BAAkB,EACtB,QAAQ,EACR,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,EAChC,GAAG,EACH,aAAa,CACd,CAAC;YACJ,CAAC;QACH,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,iCAAc,EAC5D,GAAG,EACH,aAAa,CACd,CAAC;YACF;gBACE,GAAG,gBAAgB;gBACnB,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB;gBACrC,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB;aACvC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAC1B,KAAK,CAAC,GAAG,CAAC,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,QAAQ,CAAC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,OAAO,CACtD,CAAC,CAAC,aAAa,EAAE,IAAI,CAAC,EAAE,EAAE,CACxB,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;;QACnB,OAAA,MAAM,CAAC,OAAO,CAAC,MAAA,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,mCAAI,EAAE,CAAC,CAAC,GAAG,CACxD,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;;YACf,MAAM,IAAI,GAAG,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO;gBACL,IAAI;gBACJ,KAAK,EACH,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,aAAL,KAAK,cAAL,KAAK,GAAI,EAAE,CAAC;gBACjE,IAAI,EAAE,MAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAK,QAAkB;aAC7C,CAAC;QACJ,CAAC,CACF,CAAA;KAAA,CACF,CACJ,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAA,0BAAiB,GAAE,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,GAAG,CACV,6IAA6I,CAC9I,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,IAAA,kDAAuB,GAAE,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,QAAQ,CAAC,GAAG,CACV,mIAAmI,CACpI,CAAC;QACF,OAAO;IACT,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,aAAa,OAAO,CAAC,MAAM,wBAAwB,IAAI,OAAO,CAAC,CAAC;IAC7E,MAAM,IAAA,8CAAmB,EACvB,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,MAAM,IAAA,+CAAoB,EAAC,MAAM,CAAC,CACnC,CAAC;AACJ,CAAC,CAAC;AAEK,MAAM,oBAAoB,GAAG,KAAK,EAAE,EAAM,EAAE,YAAqB,EAAE,EAAE;IAC1E,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,mBAAmB,GAAG,MAAM,IAAA,0DAAuC,GAAE,CAAC;QAC5E,MAAM,OAAO,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAA,8BAAW,EAAC,YAAY,CAAC,CAAC;QAEzD,wEAAwE;QACxE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,UAAU,GAAG,MAAM,IAAA,uCAAoB,GAAE,CAAC;YAChD,MAAM,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,MAAM,OAAO,CAAC,EAAE,EAAE;gBAChB,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG,CAAC;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAlBW,QAAA,oBAAoB,wBAkB/B"}