@centient/secrets 0.2.0

package/dist/cli/secrets-cli.js

@@ -0,0 +1,532 @@
+/**
+ * Secrets CLI Commands
+ *
+ * CLI commands for managing the encrypted secrets vault and environments.
+ * These commands are only available to human operators (blocked from AI agents).
+ *
+ * Vault Commands:
+ *   centient secrets init              Initialize a new encrypted vault
+ *   centient secrets unlock            Unlock the vault (prompts biometric)
+ *   centient secrets lock              Lock the vault
+ *   centient secrets list              List secret names (not values)
+ *   centient secrets set <name>        Add/update a secret (prompts for value)
+ *   centient secrets get <name>        Get a secret value
+ *   centient secrets delete <name>     Delete a secret
+ *   centient secrets status            Show vault status
+ *
+ * Environment Commands:
+ *   centient secrets env-list          List all environments
+ *   centient secrets env-switch <name> Switch to an environment
+ *   centient secrets env-create <name> Create a new environment
+ *   centient secrets env-current       Show current environment
+ *
+ * Security:
+ *   - All commands check for AI agent environment and refuse to run
+ *   - Vault is encrypted with AES-256-GCM
+ *   - Key stored in macOS Keychain (requires biometric/PIN)
+ *   - 4-hour session timeout, 30-minute idle timeout
+ */
+import { createInterface } from "readline";
+import { join } from "path";
+import { homedir } from "os";
+import { existsSync } from "fs";
+// =============================================================================
+// Agent Detection (Local Implementation)
+// =============================================================================
+/**
+ * Check if running in an AI agent environment.
+ * If detected, refuse to run secrets commands.
+ */
+function isAgentEnvironment() {
+    return !!(process.env.CLAUDE_PROJECT_DIR ||
+        process.env.MCP_CONTEXT ||
+        process.env.CLAUDE_CODE_SESSION ||
+        process.env.CLAUDE_CODE_ENTRY_POINT);
+}
+// =============================================================================
+// Simple Encrypted Vault
+// =============================================================================
+import { readFileSync, writeFileSync, mkdirSync } from "fs";
+import { randomBytes } from "crypto";
+import { encryptObject, decryptObject, getKeyFromKeychain as vaultGetKey, storeKeyInKeychain as vaultStoreKey, } from "../crypto/vault-common.js";
+const VAULT_PATH = join(homedir(), ".centient", "secrets", "vault.enc");
+const KEYCHAIN_SERVICE = "centient-vault";
+const KEYCHAIN_ACCOUNT = "vault-key";
+const KEY_LENGTH = 32;
+// Session state
+let sessionKey = null;
+let sessionUnlockedAt = null;
+const SESSION_TTL = 4 * 60 * 60 * 1000; // 4 hours
+function isSessionValid() {
+    if (!sessionKey || !sessionUnlockedAt)
+        return false;
+    return Date.now() - sessionUnlockedAt < SESSION_TTL;
+}
+function encrypt(data, key) {
+    const result = encryptObject(data, key);
+    if (!result)
+        throw new Error("Encryption failed");
+    return result;
+}
+function decrypt(data, key) {
+    const parsed = decryptObject(data, key);
+    if (!parsed)
+        return null;
+    // Validate all values are strings
+    const result = {};
+    for (const [k, v] of Object.entries(parsed)) {
+        if (typeof v !== "string")
+            return null;
+        result[k] = v;
+    }
+    return result;
+}
+function getKeyFromKeychain() {
+    return vaultGetKey(KEYCHAIN_SERVICE, KEYCHAIN_ACCOUNT);
+}
+function storeKeyInKeychain(key) {
+    return vaultStoreKey(KEYCHAIN_SERVICE, KEYCHAIN_ACCOUNT, key);
+}
+// =============================================================================
+// CLI Handlers
+// =============================================================================
+/**
+ * Prompt for input (with optional hidden mode for passwords)
+ */
+async function prompt(message, hidden = false) {
+    const rl = createInterface({
+        input: process.stdin,
+        output: process.stdout,
+    });
+    return new Promise((resolve) => {
+        if (hidden) {
+            // For hidden input, we need to handle it differently
+            process.stdout.write(message);
+            let input = "";
+            const stdin = process.stdin;
+            const wasRaw = stdin.isRaw;
+            stdin.setRawMode?.(true);
+            stdin.resume();
+            stdin.setEncoding("utf8");
+            const onData = (char) => {
+                if (char === "\n" || char === "\r") {
+                    stdin.setRawMode?.(wasRaw || false);
+                    stdin.pause();
+                    stdin.removeListener("data", onData);
+                    process.stdout.write("\n"); // New line after hidden input
+                    rl.close();
+                    resolve(input);
+                }
+                else if (char === "\u0003") {
+                    // Ctrl+C
+                    process.exit(0);
+                }
+                else if (char === "\u007F" || char === "\b") {
+                    // Backspace
+                    if (input.length > 0) {
+                        input = input.slice(0, -1);
+                    }
+                }
+                else {
+                    input += char;
+                }
+            };
+            stdin.on("data", onData);
+        }
+        else {
+            rl.question(message, (answer) => {
+                rl.close();
+                resolve(answer);
+            });
+        }
+    });
+}
+/**
+ * Initialize a new vault
+ */
+async function initVault() {
+    process.stdout.write("\n🔐 Initializing Centient Secrets Vault\n\n");
+    if (existsSync(VAULT_PATH)) {
+        const confirm = await prompt("⚠️  Vault already exists. Overwrite? (yes/no): ");
+        if (confirm.toLowerCase() !== "yes") {
+            process.stdout.write("Aborted.\n");
+            return;
+        }
+    }
+    // Generate key
+    const key = randomBytes(KEY_LENGTH);
+    // Store in Keychain
+    process.stdout.write("Storing encryption key in macOS Keychain...\n");
+    if (!storeKeyInKeychain(key)) {
+        console.error("❌ Failed to store key in Keychain");
+        return;
+    }
+    // Create empty vault
+    const secrets = {};
+    const encrypted = encrypt(secrets, key);
+    // Ensure directory exists
+    const dir = join(homedir(), ".centient", "secrets");
+    mkdirSync(dir, { recursive: true });
+    // Write vault
+    writeFileSync(VAULT_PATH, encrypted);
+    // Set session
+    sessionKey = key;
+    sessionUnlockedAt = Date.now();
+    process.stdout.write("\n✅ Vault initialized successfully!\n");
+    process.stdout.write(`   Location: ${VAULT_PATH}\n`);
+    process.stdout.write("   The vault is now unlocked. Use 'centient secrets set' to add secrets.\n\n");
+}
+/**
+ * Unlock the vault
+ */
+async function unlockVault() {
+    process.stdout.write("\n🔓 Unlocking vault...\n\n");
+    if (!existsSync(VAULT_PATH)) {
+        console.error("❌ Vault not found. Run 'centient secrets init' first.");
+        return false;
+    }
+    // Get key from Keychain (may prompt for biometric/PIN)
+    process.stdout.write("Retrieving key from Keychain (Touch ID/password may be required)...\n");
+    const key = getKeyFromKeychain();
+    if (!key) {
+        console.error("❌ Failed to retrieve key from Keychain");
+        return false;
+    }
+    // Verify key works
+    const data = readFileSync(VAULT_PATH);
+    const secrets = decrypt(data, key);
+    if (!secrets) {
+        console.error("❌ Failed to decrypt vault - key may be incorrect");
+        return false;
+    }
+    // Set session
+    sessionKey = key;
+    sessionUnlockedAt = Date.now();
+    process.stdout.write("✅ Vault unlocked successfully!\n");
+    process.stdout.write(`   Session valid for 4 hours.\n\n`);
+    return true;
+}
+/**
+ * Lock the vault
+ */
+function lockVault() {
+    if (sessionKey) {
+        sessionKey.fill(0);
+    }
+    sessionKey = null;
+    sessionUnlockedAt = null;
+    process.stdout.write("\n🔒 Vault locked.\n\n");
+}
+/**
+ * List secrets
+ */
+async function listSecrets() {
+    if (!isSessionValid()) {
+        process.stdout.write("\n🔒 Vault is locked. Unlocking...\n");
+        if (!(await unlockVault()))
+            return;
+    }
+    const data = readFileSync(VAULT_PATH);
+    const secrets = decrypt(data, sessionKey);
+    if (!secrets) {
+        console.error("❌ Failed to decrypt vault");
+        return;
+    }
+    const names = Object.keys(secrets).sort();
+    process.stdout.write(`\n📋 Secrets in vault (${names.length}):\n\n`);
+    if (names.length === 0) {
+        process.stdout.write("   (empty - use 'centient secrets set <name>' to add secrets)\n");
+    }
+    else {
+        for (const name of names) {
+            const value = secrets[name] ?? "";
+            const preview = value.length > 0 ? "•".repeat(Math.min(value.length, 20)) : "(empty)";
+            process.stdout.write(`   ${name.padEnd(30)} ${preview}\n`);
+        }
+    }
+    process.stdout.write("\n");
+}
+/**
+ * Set a secret
+ */
+async function setSecret(name) {
+    if (!name) {
+        console.error("❌ Secret name required. Usage: centient secrets set <name>");
+        return;
+    }
+    if (!isSessionValid()) {
+        process.stdout.write("\n🔒 Vault is locked. Unlocking...\n");
+        if (!(await unlockVault()))
+            return;
+    }
+    const data = readFileSync(VAULT_PATH);
+    const secrets = decrypt(data, sessionKey);
+    if (!secrets) {
+        console.error("❌ Failed to decrypt vault");
+        return;
+    }
+    const exists = name in secrets;
+    const action = exists ? "update" : "add";
+    process.stdout.write(`\n${exists ? "✏️  Updating" : "➕ Adding"} secret: ${name}\n\n`);
+    const value = await prompt(`Enter value for ${name}: `, true);
+    if (!value) {
+        process.stdout.write("Aborted - empty value.\n");
+        return;
+    }
+    secrets[name] = value;
+    // Re-encrypt and save
+    const encrypted = encrypt(secrets, sessionKey);
+    writeFileSync(VAULT_PATH, encrypted);
+    process.stdout.write(`\n✅ Secret '${name}' ${action}d successfully!\n\n`);
+}
+/**
+ * Get a secret
+ */
+async function getSecret(name) {
+    if (!name) {
+        console.error("❌ Secret name required. Usage: centient secrets get <name>");
+        return;
+    }
+    if (!isSessionValid()) {
+        process.stdout.write("\n🔒 Vault is locked. Unlocking...\n");
+        if (!(await unlockVault()))
+            return;
+    }
+    const data = readFileSync(VAULT_PATH);
+    const secrets = decrypt(data, sessionKey);
+    if (!secrets) {
+        console.error("❌ Failed to decrypt vault");
+        return;
+    }
+    if (!(name in secrets)) {
+        console.error(`❌ Secret '${name}' not found`);
+        return;
+    }
+    // Print without newline for piping
+    const secretValue = secrets[name];
+    if (secretValue !== undefined) {
+        process.stdout.write(secretValue);
+    }
+    process.stdout.write("\n");
+}
+/**
+ * Delete a secret
+ */
+async function deleteSecret(name) {
+    if (!name) {
+        console.error("❌ Secret name required. Usage: centient secrets delete <name>");
+        return;
+    }
+    if (!isSessionValid()) {
+        process.stdout.write("\n🔒 Vault is locked. Unlocking...\n");
+        if (!(await unlockVault()))
+            return;
+    }
+    const data = readFileSync(VAULT_PATH);
+    const secrets = decrypt(data, sessionKey);
+    if (!secrets) {
+        console.error("❌ Failed to decrypt vault");
+        return;
+    }
+    if (!(name in secrets)) {
+        console.error(`❌ Secret '${name}' not found`);
+        return;
+    }
+    const confirm = await prompt(`Delete secret '${name}'? (yes/no): `);
+    if (confirm.toLowerCase() !== "yes") {
+        process.stdout.write("Aborted.\n");
+        return;
+    }
+    delete secrets[name];
+    // Re-encrypt and save
+    const encrypted = encrypt(secrets, sessionKey);
+    writeFileSync(VAULT_PATH, encrypted);
+    process.stdout.write(`\n✅ Secret '${name}' deleted.\n\n`);
+}
+/**
+ * List all environments
+ */
+async function listEnvironments() {
+    const { EnvironmentManager } = await import("../environment/EnvironmentManager.js");
+    const manager = new EnvironmentManager();
+    const result = manager.listEnvironments();
+    if (!result.success) {
+        console.error(`\n❌ ${result.message}\n`);
+        return;
+    }
+    const environments = result.environments;
+    process.stdout.write(`\n🌍 Environments (${environments.length}):\n\n`);
+    if (environments.length === 0) {
+        process.stdout.write("   (no environments found)\n");
+        process.stdout.write("   Run 'centient secrets env-create <name>' to create one.\n\n");
+        return;
+    }
+    for (const env of environments) {
+        const current = env.isActive ? " ← current" : "";
+        const vault = env.hasVault ? " [vault]" : "";
+        process.stdout.write(`   ${env.isActive ? "●" : "○"} ${env.name}${vault}${current}\n`);
+    }
+    process.stdout.write("\n");
+}
+/**
+ * Switch to a different environment
+ */
+async function switchEnvironment(name) {
+    if (!name) {
+        console.error("❌ Environment name required. Usage: centient secrets env-switch <name>");
+        return;
+    }
+    const { EnvironmentManager } = await import("../environment/EnvironmentManager.js");
+    const manager = new EnvironmentManager();
+    const result = manager.switchEnvironment(name);
+    if (!result.success) {
+        console.error(`\n❌ ${result.message}\n`);
+        if (result.nextAction) {
+            process.stdout.write(`   ${result.nextAction}\n\n`);
+        }
+        return;
+    }
+    process.stdout.write(`\n✅ ${result.message}\n\n`);
+}
+/**
+ * Create a new environment
+ */
+async function createEnvironment(name) {
+    if (!name) {
+        console.error("❌ Environment name required. Usage: centient secrets env-create <name>");
+        return;
+    }
+    const { EnvironmentManager } = await import("../environment/EnvironmentManager.js");
+    const manager = new EnvironmentManager();
+    const result = manager.createEnvironment(name);
+    if (!result.success) {
+        console.error(`\n❌ ${result.message}\n`);
+        return;
+    }
+    process.stdout.write(`\n✅ ${result.message}\n`);
+    if (result.nextAction) {
+        process.stdout.write(`   ${result.nextAction}\n\n`);
+    }
+    else {
+        process.stdout.write("\n");
+    }
+}
+/**
+ * Show current environment
+ */
+async function showCurrentEnvironment() {
+    const { EnvironmentManager } = await import("../environment/EnvironmentManager.js");
+    const manager = new EnvironmentManager();
+    const currentName = manager.getCurrentEnvironment();
+    if (!currentName) {
+        process.stdout.write("\n🌍 No environment is currently active.\n\n");
+        process.stdout.write("   Run 'centient secrets env-list' to see available environments.\n");
+        process.stdout.write("   Run 'centient secrets env-create <name>' to create one.\n\n");
+        return;
+    }
+    const env = manager.getEnvironment(currentName);
+    if (!env) {
+        console.error(`\n❌ Failed to load environment '${currentName}'\n`);
+        return;
+    }
+    process.stdout.write(`\n🌍 Current Environment: ${env.name}\n\n`);
+    process.stdout.write("\u2500".repeat(40) + "\n");
+    process.stdout.write(`Path:         ${env.path}\n`);
+    process.stdout.write(`Has Config:   ${env.hasConfig ? "✅ yes" : "❌ no"}\n`);
+    process.stdout.write(`Has Vault:    ${env.hasVault ? "✅ yes" : "❌ no"}\n`);
+    if (env.lastModified) {
+        process.stdout.write(`Modified:     ${env.lastModified.toLocaleString()}\n`);
+    }
+    process.stdout.write("\u2500".repeat(40) + "\n");
+    process.stdout.write("\n");
+}
+/**
+ * Show vault status
+ */
+async function showStatus() {
+    process.stdout.write("\n📊 Vault Status\n\n");
+    process.stdout.write("\u2500".repeat(40) + "\n");
+    // Check vault exists
+    const vaultExists = existsSync(VAULT_PATH);
+    process.stdout.write(`Vault file:     ${vaultExists ? "✅ exists" : "❌ not found"}\n`);
+    process.stdout.write(`Location:       ${VAULT_PATH}\n`);
+    // Check session
+    const sessionValid = isSessionValid();
+    process.stdout.write(`Session:        ${sessionValid ? "🔓 unlocked" : "🔒 locked"}\n`);
+    if (sessionValid && sessionUnlockedAt) {
+        const remaining = SESSION_TTL - (Date.now() - sessionUnlockedAt);
+        const hours = Math.floor(remaining / (60 * 60 * 1000));
+        const minutes = Math.floor((remaining % (60 * 60 * 1000)) / (60 * 1000));
+        process.stdout.write(`Expires in:     ${hours}h ${minutes}m\n`);
+    }
+    // Check Keychain
+    const hasKey = getKeyFromKeychain() !== null;
+    process.stdout.write(`Keychain key:   ${hasKey ? "✅ found" : "❌ not found"}\n`);
+    // Count secrets if unlocked
+    if (sessionValid && vaultExists) {
+        const data = readFileSync(VAULT_PATH);
+        const secrets = decrypt(data, sessionKey);
+        if (secrets) {
+            process.stdout.write(`Secrets count:  ${Object.keys(secrets).length}\n`);
+        }
+    }
+    process.stdout.write("\u2500".repeat(40) + "\n");
+    process.stdout.write("\n");
+}
+// =============================================================================
+// Main Handler
+// =============================================================================
+/**
+ * Run secrets command
+ */
+export async function runSecrets(options) {
+    // Security: Block AI agents
+    if (isAgentEnvironment()) {
+        console.error("\n❌ Secrets commands are not available to AI agents.");
+        console.error("   This is a security measure to protect your secrets.\n");
+        process.exit(1);
+    }
+    switch (options.command) {
+        case "init":
+            await initVault();
+            break;
+        case "unlock":
+            await unlockVault();
+            break;
+        case "lock":
+            lockVault();
+            break;
+        case "list":
+            await listSecrets();
+            break;
+        case "set":
+            await setSecret(options.secretName || "");
+            break;
+        case "get":
+            await getSecret(options.secretName || "");
+            break;
+        case "delete":
+            await deleteSecret(options.secretName || "");
+            break;
+        case "status":
+            await showStatus();
+            break;
+        case "env-list":
+            await listEnvironments();
+            break;
+        case "env-switch":
+            await switchEnvironment(options.secretName || "");
+            break;
+        case "env-create":
+            await createEnvironment(options.secretName || "");
+            break;
+        case "env-current":
+            await showCurrentEnvironment();
+            break;
+        default:
+            console.error(`Unknown secrets command: ${options.command}`);
+            console.error("Available: init, unlock, lock, list, set, get, delete, status, env-list, env-switch, env-create, env-current");
+            process.exit(1);
+    }
+}
+//# sourceMappingURL=secrets-cli.js.map

package/dist/cli/secrets-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-cli.js","sourceRoot":"","sources":["../../src/cli/secrets-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,IAAI,CAAC;AAwBhC,gFAAgF;AAChF,yCAAyC;AACzC,gFAAgF;AAEhF;;;GAGG;AACH,SAAS,kBAAkB;IACzB,OAAO,CAAC,CAAC,CACP,OAAO,CAAC,GAAG,CAAC,kBAAkB;QAC9B,OAAO,CAAC,GAAG,CAAC,WAAW;QACvB,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAC/B,OAAO,CAAC,GAAG,CAAC,uBAAuB,CACpC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EACL,aAAa,EACb,aAAa,EACb,kBAAkB,IAAI,WAAW,EACjC,kBAAkB,IAAI,aAAa,GACpC,MAAM,2BAA2B,CAAC;AAEnC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACxE,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAC1C,MAAM,gBAAgB,GAAG,WAAW,CAAC;AACrC,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,gBAAgB;AAChB,IAAI,UAAU,GAAkB,IAAI,CAAC;AACrC,IAAI,iBAAiB,GAAkB,IAAI,CAAC;AAC5C,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,UAAU;AAElD,SAAS,cAAc;IACrB,IAAI,CAAC,UAAU,IAAI,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACpD,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,GAAG,WAAW,CAAC;AACtD,CAAC;AAED,SAAS,OAAO,CAAC,IAA4B,EAAE,GAAW;IACxD,MAAM,MAAM,GAAG,aAAa,CAAC,IAA+B,EAAE,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,GAAW;IACxC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,kCAAkC;IAClC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,WAAW,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,OAAO,aAAa,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAC;AAChE,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF;;GAEG;AACH,KAAK,UAAU,MAAM,CAAC,OAAe,EAAE,MAAM,GAAG,KAAK;IACnD,MAAM,EAAE,GAAG,eAAe,CAAC;QACzB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACvB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,IAAI,MAAM,EAAE,CAAC;YACX,qDAAqD;YACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9B,IAAI,KAAK,GAAG,EAAE,CAAC;YAEf,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;YAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;YAC3B,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;YACzB,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAE1B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;gBAC9B,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBACnC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC;oBACpC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACd,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACrC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B;oBAC1D,EAAE,CAAC,KAAK,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;qBAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAC7B,SAAS;oBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAClB,CAAC;qBAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;oBAC9C,YAAY;oBACZ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACrB,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,KAAK,IAAI,IAAI,CAAC;gBAChB,CAAC;YACH,CAAC,CAAC;YAEF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE;gBAC9B,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS;IACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAErE,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,MAAM,CAC1B,iDAAiD,CAClD,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;YACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACnC,OAAO;QACT,CAAC;IACH,CAAC;IAED,eAAe;IACf,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEpC,oBAAoB;IACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACtE,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnD,OAAO;IACT,CAAC;IAED,qBAAqB;IACrB,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAExC,0BAA0B;IAC1B,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACpD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpC,cAAc;IACd,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAErC,cAAc;IACd,UAAU,GAAG,GAAG,CAAC;IACjB,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC9D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,UAAU,IAAI,CAAC,CAAC;IACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8EAA8E,CAAC,CAAC;AACvG,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAEpD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACvE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,uDAAuD;IACvD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC9F,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IAEjC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mBAAmB;IACnB,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEnC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,KAAK,CAAC;IACf,CAAC;IAED,cAAc;IACd,UAAU,GAAG,GAAG,CAAC;IACjB,iBAAiB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACzD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,SAAS;IAChB,IAAI,UAAU,EAAE,CAAC;QACf,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,UAAU,GAAG,IAAI,CAAC;IAClB,iBAAiB,GAAG,IAAI,CAAC;IACzB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW;IACxB,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC;YAAE,OAAO;IACrC,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,UAAW,CAAC,CAAC;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;IAErE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iEAAiE,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC;YAAE,OAAO;IACrC,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,UAAW,CAAC,CAAC;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAEzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,YAAY,IAAI,MAAM,CAAC,CAAC;IAEtF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,mBAAmB,IAAI,IAAI,EAAE,IAAI,CAAC,CAAC;IAE9D,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACjD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAEtB,sBAAsB;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,UAAW,CAAC,CAAC;IAChD,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAErC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,KAAK,MAAM,qBAAqB,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CAAC,IAAY;IACnC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC;YAAE,OAAO;IACrC,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,UAAW,CAAC,CAAC;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,mCAAmC;IACnC,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC7D,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC;YAAE,OAAO;IACrC,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,UAAW,CAAC,CAAC;IAE3C,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC3C,OAAO;IACT,CAAC;IAED,IAAI,CAAC,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC;QAC9C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,kBAAkB,IAAI,eAAe,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IAED,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC;IAErB,sBAAsB;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,EAAE,UAAW,CAAC,CAAC;IAChD,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAErC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,gBAAgB,CAAC,CAAC;AAC5D,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,gBAAgB;IAC7B,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,YAAY,CAAC,MAAM,QAAQ,CAAC,CAAC;IAExE,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACrD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,GAAG,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,MAAM,CAAC,CAAC;QACtD,CAAC;QACD,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,MAAM,CAAC,CAAC;AACpD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,wEAAwE,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IAED,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEzC,MAAM,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;IAEhD,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,UAAU,MAAM,CAAC,CAAC;IACtD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,sBAAsB;IACnC,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,sCAAsC,CAAC,CAAC;IACpF,MAAM,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAEzC,MAAM,WAAW,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IACpD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;QAC5F,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACvF,OAAO;IACT,CAAC;IAED,MAAM,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,CAAC,KAAK,CAAC,mCAAmC,WAAW,KAAK,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,GAAG,CAAC,IAAI,MAAM,CAAC,CAAC;IAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAC5E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,GAAG,CAAC,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,UAAU;IACvB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAEjD,qBAAqB;IACrB,MAAM,WAAW,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;IACtF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,UAAU,IAAI,CAAC,CAAC;IAExD,gBAAgB;IAChB,MAAM,YAAY,GAAG,cAAc,EAAE,CAAC;IACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC;IAExF,IAAI,YAAY,IAAI,iBAAiB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAG,WAAW,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,iBAAiB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,KAAK,OAAO,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,iBAAiB;IACjB,MAAM,MAAM,GAAG,kBAAkB,EAAE,KAAK,IAAI,CAAC;IAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC;IAEhF,4BAA4B;IAC5B,IAAI,YAAY,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,UAAW,CAAC,CAAC;QAC3C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IACjD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,gFAAgF;AAChF,eAAe;AACf,gFAAgF;AAEhF;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAuB;IACtD,4BAA4B;IAC5B,IAAI,kBAAkB,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACtE,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC1E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,QAAQ,OAAO,CAAC,OAAO,EAAE,CAAC;QACxB,KAAK,MAAM;YACT,MAAM,SAAS,EAAE,CAAC;YAClB,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,WAAW,EAAE,CAAC;YACpB,MAAM;QACR,KAAK,MAAM;YACT,SAAS,EAAE,CAAC;YACZ,MAAM;QACR,KAAK,MAAM;YACT,MAAM,WAAW,EAAE,CAAC;YACpB,MAAM;QACR,KAAK,KAAK;YACR,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC1C,MAAM;QACR,KAAK,KAAK;YACR,MAAM,SAAS,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC1C,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,YAAY,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAC7C,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,UAAU,EAAE,CAAC;YACnB,MAAM;QACR,KAAK,UAAU;YACb,MAAM,gBAAgB,EAAE,CAAC;YACzB,MAAM;QACR,KAAK,YAAY;YACf,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM;QACR,KAAK,YAAY;YACf,MAAM,iBAAiB,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM;QACR,KAAK,aAAa;YAChB,MAAM,sBAAsB,EAAE,CAAC;YAC/B,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,4BAA4B,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,OAAO,CAAC,KAAK,CAAC,8GAA8G,CAAC,CAAC;YAC9H,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/crypto/vault-common.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Crypto — Vault Common Helpers
+ *
+ * Shared encryption/decryption utilities and Keychain accessor functions
+ * used by both the auth vault and the secrets CLI.
+ *
+ * Zero duplication rule: encrypt, decrypt, getKeyFromKeychain, and
+ * storeKeyInKeychain must NOT be copied into any other file — import from here.
+ */
+export declare const ALGORITHM: "aes-256-gcm";
+export declare const IV_LENGTH = 12;
+export declare const AUTH_TAG_LENGTH = 16;
+export declare const KEY_LENGTH = 32;
+/**
+ * Encrypt a string value with AES-256-GCM.
+ *
+ * The returned Buffer layout is:
+ *   [IV (12 bytes)] [AuthTag (16 bytes)] [Ciphertext (variable)]
+ */
+export declare function encrypt(plaintext: string, key: Buffer): Buffer;
+/**
+ * Decrypt a Buffer produced by `encrypt()`.
+ * Returns the plaintext string, or null if decryption fails.
+ */
+export declare function decrypt(data: Buffer, key: Buffer): string | null;
+/**
+ * Encrypt a JSON-serializable object. Convenience wrapper over `encrypt()`.
+ * Returns null if serialization fails (should not happen with plain objects).
+ */
+export declare function encryptObject(data: Record<string, unknown>, key: Buffer): Buffer | null;
+/**
+ * Decrypt a Buffer to a JSON object. Convenience wrapper over `decrypt()`.
+ * Returns null if decryption or parsing fails.
+ */
+export declare function decryptObject(data: Buffer, key: Buffer): Record<string, unknown> | null;
+/**
+ * Read a hex-encoded key from the macOS Keychain.
+ * Returns the key as a Buffer, or null if not found / command fails.
+ */
+export declare function getKeyFromKeychain(service: string, account: string): Buffer | null;
+/**
+ * Store a hex-encoded key in the macOS Keychain.
+ * Deletes any existing entry first to avoid duplicates.
+ * Returns true on success, false on failure.
+ */
+export declare function storeKeyInKeychain(service: string, account: string, key: Buffer): boolean;
+/**
+ * Store an arbitrary string value directly in the macOS Keychain
+ * (not hex-encoded — intended for short credential strings like tokens).
+ * Returns true on success, false on failure.
+ */
+export declare function storeStringInKeychain(service: string, account: string, value: string): boolean;
+/**
+ * Read an arbitrary string value from the macOS Keychain.
+ * Returns the stored string, or null if not found / command fails.
+ */
+export declare function getStringFromKeychain(service: string, account: string): string | null;
+/**
+ * Delete an entry from the macOS Keychain.
+ * Returns true if deleted (or did not exist), false if command fails unexpectedly.
+ */
+export declare function deleteFromKeychain(service: string, account: string): boolean;
+//# sourceMappingURL=vault-common.d.ts.map

package/dist/crypto/vault-common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-common.d.ts","sourceRoot":"","sources":["../../src/crypto/vault-common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAaH,eAAO,MAAM,SAAS,EAAG,aAAsB,CAAC;AAChD,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,eAAO,MAAM,eAAe,KAAK,CAAC;AAClC,eAAO,MAAM,UAAU,KAAK,CAAC;AAM7B;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS9D;AAED;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAgBhE;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,IAAI,CAMf;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAYhC;AAMD;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CAYf;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAsBT;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,MAAM,GACZ,OAAO,CAqBT;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,MAAM,GAAG,IAAI,CAWf;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAYT"}