@centient/secrets 0.2.0

package/dist/crypto/vault-common.js

@@ -0,0 +1,180 @@
+/**
+ * Crypto — Vault Common Helpers
+ *
+ * Shared encryption/decryption utilities and Keychain accessor functions
+ * used by both the auth vault and the secrets CLI.
+ *
+ * Zero duplication rule: encrypt, decrypt, getKeyFromKeychain, and
+ * storeKeyInKeychain must NOT be copied into any other file — import from here.
+ */
+import { createCipheriv, createDecipheriv, randomBytes, } from "crypto";
+import { execFileSync } from "child_process";
+// =============================================================================
+// Constants
+// =============================================================================
+export const ALGORITHM = "aes-256-gcm";
+export const IV_LENGTH = 12;
+export const AUTH_TAG_LENGTH = 16;
+export const KEY_LENGTH = 32;
+// =============================================================================
+// Encryption / Decryption
+// =============================================================================
+/**
+ * Encrypt a string value with AES-256-GCM.
+ *
+ * The returned Buffer layout is:
+ *   [IV (12 bytes)] [AuthTag (16 bytes)] [Ciphertext (variable)]
+ */
+export function encrypt(plaintext, key) {
+    const iv = randomBytes(IV_LENGTH);
+    const cipher = createCipheriv(ALGORITHM, key, iv);
+    const encrypted = Buffer.concat([
+        cipher.update(plaintext, "utf8"),
+        cipher.final(),
+    ]);
+    const authTag = cipher.getAuthTag();
+    return Buffer.concat([iv, authTag, encrypted]);
+}
+/**
+ * Decrypt a Buffer produced by `encrypt()`.
+ * Returns the plaintext string, or null if decryption fails.
+ */
+export function decrypt(data, key) {
+    try {
+        if (data.length < IV_LENGTH + AUTH_TAG_LENGTH)
+            return null;
+        const iv = data.subarray(0, IV_LENGTH);
+        const authTag = data.subarray(IV_LENGTH, IV_LENGTH + AUTH_TAG_LENGTH);
+        const ciphertext = data.subarray(IV_LENGTH + AUTH_TAG_LENGTH);
+        const decipher = createDecipheriv(ALGORITHM, key, iv);
+        decipher.setAuthTag(authTag);
+        const decrypted = Buffer.concat([
+            decipher.update(ciphertext),
+            decipher.final(),
+        ]);
+        return decrypted.toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Encrypt a JSON-serializable object. Convenience wrapper over `encrypt()`.
+ * Returns null if serialization fails (should not happen with plain objects).
+ */
+export function encryptObject(data, key) {
+    try {
+        return encrypt(JSON.stringify(data), key);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Decrypt a Buffer to a JSON object. Convenience wrapper over `decrypt()`.
+ * Returns null if decryption or parsing fails.
+ */
+export function decryptObject(data, key) {
+    const plaintext = decrypt(data, key);
+    if (plaintext === null)
+        return null;
+    try {
+        const parsed = JSON.parse(plaintext);
+        if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+            return null;
+        }
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+// =============================================================================
+// Keychain operations (macOS `security` CLI)
+// =============================================================================
+/**
+ * Read a hex-encoded key from the macOS Keychain.
+ * Returns the key as a Buffer, or null if not found / command fails.
+ */
+export function getKeyFromKeychain(service, account) {
+    try {
+        const result = execFileSync("security", ["find-generic-password", "-s", service, "-a", account, "-w"], { encoding: "utf8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+        if (!result)
+            return null;
+        return Buffer.from(result, "hex");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Store a hex-encoded key in the macOS Keychain.
+ * Deletes any existing entry first to avoid duplicates.
+ * Returns true on success, false on failure.
+ */
+export function storeKeyInKeychain(service, account, key) {
+    try {
+        const keyHex = key.toString("hex");
+        // Delete existing entry (ignore errors — it may not exist)
+        try {
+            execFileSync("security", ["delete-generic-password", "-s", service, "-a", account], { stdio: ["pipe", "pipe", "pipe"] });
+        }
+        catch {
+            // Intentionally ignored
+        }
+        execFileSync("security", ["add-generic-password", "-s", service, "-a", account, "-w", keyHex, "-T", ""], { stdio: ["pipe", "pipe", "pipe"] });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Store an arbitrary string value directly in the macOS Keychain
+ * (not hex-encoded — intended for short credential strings like tokens).
+ * Returns true on success, false on failure.
+ */
+export function storeStringInKeychain(service, account, value) {
+    try {
+        // Delete existing entry
+        try {
+            execFileSync("security", ["delete-generic-password", "-s", service, "-a", account], { stdio: ["pipe", "pipe", "pipe"] });
+        }
+        catch {
+            // Intentionally ignored
+        }
+        execFileSync("security", ["add-generic-password", "-s", service, "-a", account, "-w", value, "-T", ""], { stdio: ["pipe", "pipe", "pipe"] });
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Read an arbitrary string value from the macOS Keychain.
+ * Returns the stored string, or null if not found / command fails.
+ */
+export function getStringFromKeychain(service, account) {
+    try {
+        const result = execFileSync("security", ["find-generic-password", "-s", service, "-a", account, "-w"], { encoding: "utf8", stdio: ["pipe", "pipe", "pipe"] }).trim();
+        return result || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Delete an entry from the macOS Keychain.
+ * Returns true if deleted (or did not exist), false if command fails unexpectedly.
+ */
+export function deleteFromKeychain(service, account) {
+    try {
+        execFileSync("security", ["delete-generic-password", "-s", service, "-a", account], { stdio: ["pipe", "pipe", "pipe"] });
+        return true;
+    }
+    catch {
+        // exit 44 = item not found — treat as success
+        return true;
+    }
+}
+//# sourceMappingURL=vault-common.js.map

package/dist/crypto/vault-common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault-common.js","sourceRoot":"","sources":["../../src/crypto/vault-common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,WAAW,GACZ,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,gFAAgF;AAChF,YAAY;AACZ,gFAAgF;AAEhF,MAAM,CAAC,MAAM,SAAS,GAAG,aAAsB,CAAC;AAChD,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC;AAClC,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAE7B,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,GAAW;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,GAAW;IAC/C,IAAI,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,eAAe;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,GAAG,eAAe,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACtD,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;YAC9B,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC;YAC3B,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAA6B,EAC7B,GAAW;IAEX,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,GAAW;IAEX,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3E,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,MAAiC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,6CAA6C;AAC7C,gFAAgF;AAEhF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CACzB,UAAU,EACV,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAC7D,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACtD,CAAC,IAAI,EAAE,CAAC;QACT,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,OAAe,EACf,GAAW;IAEX,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACnC,2DAA2D;QAC3D,IAAI,CAAC;YACH,YAAY,CACV,UAAU,EACV,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EACzD,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACpC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,YAAY,CACV,UAAU,EACV,CAAC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,EAC9E,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACpC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAAe,EACf,KAAa;IAEb,IAAI,CAAC;QACH,wBAAwB;QACxB,IAAI,CAAC;YACH,YAAY,CACV,UAAU,EACV,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EACzD,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACpC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,wBAAwB;QAC1B,CAAC;QACD,YAAY,CACV,UAAU,EACV,CAAC,sBAAsB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,EAC7E,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACpC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,EACf,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CACzB,UAAU,EACV,CAAC,uBAAuB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAC7D,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACtD,CAAC,IAAI,EAAE,CAAC;QACT,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAe,EACf,OAAe;IAEf,IAAI,CAAC;QACH,YAAY,CACV,UAAU,EACV,CAAC,yBAAyB,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EACzD,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CACpC,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,8CAA8C;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/environment/EnvironmentManager.d.ts

@@ -0,0 +1,171 @@
+/**
+ * Environment Manager
+ *
+ * Manages multi-environment support for the secrets management system.
+ * Provides isolated configuration and vault storage per environment.
+ *
+ * Directory structure:
+ *   ~/.centient/environments/
+ *     ├── dev/
+ *     │   ├── config.json
+ *     │   └── vault.enc
+ *     ├── staging/
+ *     │   ├── config.json
+ *     │   └── vault.enc
+ *     └── prod/
+ *         ├── config.json
+ *         └── vault.enc
+ *   ~/.centient/current -> environments/dev/  (symlink)
+ *
+ * Security:
+ *   - All operations that modify environments check for AI agent context
+ *   - Agents can read/list environments but cannot switch or create
+ *   - This prevents accidental environment changes during AI sessions
+ */
+export interface Environment {
+    /** Environment name (e.g., "dev", "staging", "prod") */
+    name: string;
+    /** Absolute path to environment directory */
+    path: string;
+    /** Whether this is the currently active environment */
+    isActive: boolean;
+    /** Whether the environment has a config.json */
+    hasConfig: boolean;
+    /** Whether the environment has a vault.enc */
+    hasVault: boolean;
+    /** Last modified timestamp of the environment directory */
+    lastModified?: Date;
+}
+export interface EnvironmentResult {
+    success: boolean;
+    message: string;
+    environment?: Environment;
+    nextAction?: string;
+}
+export interface ListEnvironmentsResult {
+    success: boolean;
+    environments: Environment[];
+    currentEnvironment: string | null;
+    message?: string;
+}
+export interface EnvironmentConfig {
+    /** Optional description of this environment */
+    description?: string;
+    /** When this environment was created */
+    createdAt: string;
+    /** Who created this environment */
+    createdBy?: string;
+}
+export declare class EnvironmentManager {
+    /**
+     * List all available environments
+     *
+     * Returns information about each environment including:
+     * - Name
+     * - Path
+     * - Whether it's currently active
+     * - Whether it has config and vault files
+     */
+    listEnvironments(): ListEnvironmentsResult;
+    /**
+     * Get the currently active environment name
+     *
+     * Returns the name of the environment that the 'current' symlink points to,
+     * or null if no environment is set.
+     */
+    getCurrentEnvironment(): string | null;
+    /**
+     * Get details about a specific environment
+     */
+    getEnvironment(name: string): Environment | null;
+    /**
+     * Switch to a different environment
+     *
+     * Updates the 'current' symlink to point to the specified environment.
+     * This operation is blocked for AI agents to prevent accidental
+     * environment changes during automated sessions.
+     *
+     * @param name - Name of the environment to switch to
+     */
+    switchEnvironment(name: string): EnvironmentResult;
+    /**
+     * Create a new environment
+     *
+     * Creates the environment directory with initial config.json.
+     * Optionally sets it as the current environment.
+     * This operation is blocked for AI agents.
+     *
+     * @param name - Name for the new environment
+     * @param options - Creation options
+     */
+    createEnvironment(name: string, options?: {
+        /** Set as current environment after creation */
+        setAsCurrent?: boolean;
+        /** Optional description for the environment */
+        description?: string;
+        /** Copy config from another environment */
+        copyFrom?: string;
+    }): EnvironmentResult;
+    /**
+     * Delete an environment
+     *
+     * Removes the environment directory and all its contents.
+     * Cannot delete the currently active environment.
+     * This operation is blocked for AI agents.
+     *
+     * @param name - Name of the environment to delete
+     * @param options - Deletion options
+     */
+    deleteEnvironment(name: string, options?: {
+        /** Force deletion even if environment has vault.enc */
+        force?: boolean;
+    }): EnvironmentResult;
+    /**
+     * Initialize the environment system
+     *
+     * Creates the default 'dev' environment if no environments exist.
+     * Sets up the 'current' symlink to point to 'dev'.
+     * This operation is blocked for AI agents.
+     */
+    initialize(): EnvironmentResult;
+    /**
+     * Get the path to the current environment's directory
+     *
+     * Returns the resolved path that the 'current' symlink points to,
+     * or null if no current environment is set.
+     */
+    getCurrentEnvironmentPath(): string | null;
+    /**
+     * Get the path to the current environment's config.json
+     */
+    getCurrentConfigPath(): string | null;
+    /**
+     * Get the path to the current environment's vault.enc
+     */
+    getCurrentVaultPath(): string | null;
+    /**
+     * Check if the environment system is initialized
+     */
+    isInitialized(): boolean;
+}
+/**
+ * Get the singleton EnvironmentManager instance
+ */
+export declare function getEnvironmentManager(): EnvironmentManager;
+/**
+ * Reset the singleton instance (for testing)
+ */
+export declare function resetEnvironmentManager(): void;
+/**
+ * Get the environments directory path
+ */
+export declare function getEnvironmentsDir(): string;
+/**
+ * Get the current symlink path
+ */
+export declare function getCurrentLinkPath(): string;
+/**
+ * Get the default environment name
+ */
+export declare function getDefaultEnvironmentName(): string;
+//# sourceMappingURL=EnvironmentManager.d.ts.map

package/dist/environment/EnvironmentManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EnvironmentManager.d.ts","sourceRoot":"","sources":["../../src/environment/EnvironmentManager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAqBH,MAAM,WAAW,WAAW;IAC1B,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,IAAI,EAAE,MAAM,CAAC;IACb,uDAAuD;IACvD,QAAQ,EAAE,OAAO,CAAC;IAClB,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;IACnB,8CAA8C;IAC9C,QAAQ,EAAE,OAAO,CAAC;IAClB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA0GD,qBAAa,kBAAkB;IAC7B;;;;;;;;OAQG;IACH,gBAAgB,IAAI,sBAAsB;IAiE1C;;;;;OAKG;IACH,qBAAqB,IAAI,MAAM,GAAG,IAAI;IA4BtC;;OAEG;IACH,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAiChD;;;;;;;;OAQG;IACH,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB;IAmElD;;;;;;;;;OASG;IACH,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,gDAAgD;QAChD,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,+CAA+C;QAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,2CAA2C;QAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GACA,iBAAiB;IAgHpB;;;;;;;;;OASG;IACH,iBAAiB,CACf,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;QACR,uDAAuD;QACvD,KAAK,CAAC,EAAE,OAAO,CAAC;KACjB,GACA,iBAAiB;IAmEpB;;;;;;OAMG;IACH,UAAU,IAAI,iBAAiB;IAwC/B;;;;;OAKG;IACH,yBAAyB,IAAI,MAAM,GAAG,IAAI;IAQ1C;;OAEG;IACH,oBAAoB,IAAI,MAAM,GAAG,IAAI;IAQrC;;OAEG;IACH,mBAAmB,IAAI,MAAM,GAAG,IAAI;IAQpC;;OAEG;IACH,aAAa,IAAI,OAAO;CAGzB;AAQD;;GAEG;AACH,wBAAgB,qBAAqB,IAAI,kBAAkB,CAK1D;AAED;;GAEG;AACH,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAMD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CAE3C;AAED;;GAEG;AACH,wBAAgB,yBAAyB,IAAI,MAAM,CAElD"}