@centient/secrets 0.9.0 → 0.11.0

package/dist/audit/hmac-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hmac-chain.js","sourceRoot":"","sources":["../../src/audit/hmac-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAW1D,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAC7B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAC/B,MAAM,mBAAmB,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,kBAAkB,GAAG,qCAAqC,CAAC;AACjE,MAAM,0BAA0B,GAAG,IAAI,GAAG,CAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAgB7E,2EAA2E;AAC3E,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAEtB;IADlB,YACkB,IAAyB,EACzC,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAqB;QAIzC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AA2ED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,EAAE,CAAC;gBACxC,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;YACzE,CAAC;YACD,KAAK,EAAE,CAAC;QACV,CAAC;aAAM,IAAI,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IAEpC,MAAM,KAAK,GAAG,CAAC,OAAgB,EAAE,KAAa,EAAU,EAAE;QACxD,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAEpC,QAAQ,OAAO,OAAO,EAAE,CAAC;YACvB,KAAK,SAAS;gBACZ,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YACpC,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9B,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACjC,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YACD,KAAK,QAAQ;gBACX,MAAM;YACR;gBACE,MAAM,IAAI,SAAS,CAAC,0BAA0B,OAAO,OAAO,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAED,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAa,EAAE,CAAC;gBAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;oBACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;wBAC1D,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;oBAC3D,CAAC;oBACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/C,CAAC;gBACD,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAChC,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;YACxE,CAAC;YACD,IAAI,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YACzC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,uBAAuB,CAAC,GAAG,CAAC,CAAC;gBAC7B,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACpC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;gBACjE,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;YACD,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,CAAC;gBAAS,CAAC;YACT,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,mBAAmB,EAAE,CAAC;QAC/D,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,KAA0B;IAClE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,eAAe,CACvB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,gBAAgB,EAC3D,GAAG,KAAK,sCAAsC,CAC/C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,GAAe;IAC9B,IAAI,CAAC,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;QACtE,MAAM,IAAI,eAAe,CACvB,aAAa,EACb,mCAAmC,cAAc,QAAQ,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO;QACL,YAAY,EAAE,EAAE;QAChB,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,CAAC;QACd,gBAAgB,EAAE,CAAC;QACnB,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAgC;IAC1D,6EAA6E;IAC7E,0EAA0E;IAC1E,8BAA8B;IAC9B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,MAAM,cAAc,GAAG,UAAU,CAAC,cAAc,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,MAAM,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACvC,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;QAC/B,MAAM,aAAa,GAAY,UAAU,CAAC,UAAU,CAAC;QACrD,MAAM,sBAAsB,GAAY,UAAU,CAAC,mBAAmB,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC5E,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,wCAAwC,CACzC,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAyB;YACtC,OAAO;YACP,cAAc;YACd,QAAQ;YACR,SAAS;YACT,OAAO;YACP,KAAK;YACL,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;YACrC,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC;SACxD,CAAC;QACF,kBAAkB,CAAC,SAAS,CAAC,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,SAAS;YACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;YACpD,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAAC;SACvE,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC5E,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,iDAAiD,CAClD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAgC;IAC1D,IAAI,CAAC;QACH,gBAAgB,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChD,gBAAgB,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAC5E,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,cAAc,CAAC;QAChD,UAAU,CAAC,cAAc,GAAG,CAAC;QAC7B,OAAO,UAAU,CAAC,QAAQ,KAAK,QAAQ;QACvC,UAAU,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAChC,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC;QAClC,CAAC,wBAAwB,CAAC,UAAU,CAAC,OAAO,CAAC;QAC7C,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;QACrC,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAClC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAC9C,UAAU,CAAC,mBAAmB,CAAC,MAAM,KAAK,UAAU,CAAC,UAAU,CAAC,MAAM,EACtE,CAAC;QACD,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,qCAAqC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClE,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC;QAC5C,MAAM,cAAc,GAAG,UAAU,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CAAC,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,gBAAgB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACvC,CAAC;IACD,IACE,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAC3B,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,UAAU,CAAC,KAAK,EAC5E,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,gDAAgD,CACjD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ,EAAE,OAAO,IAAI,GAAG,EAAU;IACvD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;QACpE,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAA8B;IAC1D,MAAM,YAAY,GAAG,KAAK,CAAC,gBAAgB,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,mBAAmB,EAAE,GAAG,OAAO,CAAC;IACtE,OAAO;QACL,GAAG,KAAK;QACR,gBAAgB,EAAE,CAAC,mBAAmB,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,GAAe,EAAE,SAAiB;IACpD,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,GAAe,EAAE,SAAiB;IACjD,OAAO,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe,EAAE,GAAe;IAC9D,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC;SAC7B,MAAM,CAAC,2CAA2C,EAAE,MAAM,CAAC;SAC3D,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC;SACvB,MAAM,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CACzB,KAA2B,EAC3B,OAAe,EACf,KAAa,EACb,cAAsB,EACtB,QAAkC;IAElC,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClF,MAAM,IAAI,eAAe,CACvB,uBAAuB,EACvB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,KAAK;QACR,QAAQ,EAAE;YACR,GAAG,KAAK,CAAC,QAAQ;YACjB,QAAQ,EAAE,cAAc;YACxB,QAAQ,EAAE,CAAC,kBAAkB,CAAC;SAC/B;QACD,QAAQ,EAAE;YACR,GAAG,KAAK,CAAC,QAAQ;YACjB,6BAA6B,EAAE,KAAK;SACrC;QACD,gBAAgB,EAAE;YAChB;gBACE,SAAS,EAAE,OAAO;gBAClB,GAAG,CAAC,QAAQ;oBACV,CAAC,CAAC;wBACE,UAAU,EAAE;4BACV,GAAG,EAAE,QAAQ,CAAC,QAAQ;4BACtB,QAAQ,EAAE,QAAQ,CAAC,OAAO;4BAC1B,WAAW,EAAE,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;yBACjD;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;aACR;SACF;KACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,oBAAoB,CAClC,OAAoC;IAEpC,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,MAAM,YAAY,GAAG,OAAO,CAAC,KAAK,CAAC;IACnC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC;IAC/B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IACtC,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACrC,gBAAgB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAExC,IAAI,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC9B,IAAI,KAAK,GAAG,YAAY,CAAC;IACzB,IAAI,cAAc,GAAG,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC1D,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,KAAK,GAA6B,IAAI,CAAC;IAC3C,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAE5C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,iBAAiB,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,iBAAiB,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;gBAC1C,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,0DAA0D,CAC3D,CAAC;YACJ,CAAC;YACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBACzE,MAAM,SAAS,GAAG,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC;gBACvD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,KAAK,CAAE,CAAC;gBACzE,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBAC1B,mBAAmB,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAC5C,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC9B,sBAAsB,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAClD,CAAC;YACD,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,iBAAiB,CAAC,KAAK,EAAE,CAAC;gBAC/D,MAAM,IAAI,eAAe,CACvB,cAAc,EACd,gDAAgD,CACjD,CAAC;YACJ,CAAC;YACD,MAAM,wBAAwB,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC;YAC/E,IACE,KAAK,KAAK,iBAAiB,CAAC,KAAK;gBACjC,cAAc,KAAK,wBAAwB,EAC3C,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,yBAAyB,EACzB,mEAAmE,CACpE,CAAC;YACJ,CAAC;YACD,IACE,KAAK,KAAK,iBAAiB,CAAC,KAAK;gBACjC,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,EACvC,CAAC;gBACD,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,uEAAuE,CACxE,CAAC;YACJ,CAAC;YACD,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtB,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACxC,KAAK,GAAG;gBACN,cAAc,EAAE,iBAAiB,CAAC,cAAc;gBAChD,QAAQ,EAAE,iBAAiB,CAAC,QAAQ;gBACpC,SAAS,EAAE,iBAAiB,CAAC,SAAS;gBACtC,OAAO,EAAE,iBAAiB,CAAC,OAAO;gBAClC,KAAK,EAAE,iBAAiB,CAAC,KAAK;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;SAAM,CAAC;QACN,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACtB,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,UAAU,GAAG,GAAS,EAAE;QAC5B,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,eAAe,CAAC,iBAAiB,EAAE,gCAAgC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,MAAM,CAAC,KAAK;YACV,UAAU,EAAE,CAAC;YACb,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC1C,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,uDAAuD,CACxD,CAAC;YACJ,CAAC;YAED,MAAM,iBAAiB,GAAG,kBAAkB,CAC1C,KAAK,EACL,OAAO,EACP,KAAK,EACL,cAAc,EACd,KAAK,CACN,CAAC;YAEF,IAAI,SAAiB,CAAC;YACtB,IAAI,aAAsC,CAAC;YAC3C,IAAI,CAAC;gBACH,SAAS,GAAG,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;gBACtD,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA4B,CAAC;YACnE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,eAAe,CACvB,yBAAyB,EACzB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qCAAqC,CAC/E,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YAC1C,MAAM,mBAAmB,GACvB,aAAa,CAAC,gBACf,CAAC,CAAC,CAAE,CAAC;YACN,MAAM,MAAM,GAAG;gBACb,GAAG,aAAa;gBAChB,gBAAgB,EAAE;oBAChB;wBACE,GAAG,mBAAmB;wBACtB,WAAW,EAAE,eAAe,CAAC,SAAS,CAAC;qBACxC;iBACF;aACwC,CAAC;YAE5C,uEAAuE;YACvE,yEAAyE;YACzE,oDAAoD;YACpD,KAAK,GAAG;gBACN,cAAc;gBACd,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG;gBAC7B,SAAS;gBACT,OAAO,EAAE,MAAM,CAAC,QAAQ;gBACxB,KAAK;aACN,CAAC;YACF,IAAI,aAAa,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;gBACtD,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAC1B,sBAAsB,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC9C,CAAC;YACD,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5B,CAAC;QAED,MAAM,CAAC,IAAI;YACT,UAAU,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;YAC7B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC;YAC9B,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CACvB,cAAc,EACd,sCAAsC,CACvC,CAAC;YACJ,CAAC;YACD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,kBAAkB,GAAG,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACpE,IAAI,mBAAmB,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChB,MAAM,IAAI,eAAe,CACvB,oBAAoB,EACpB,2CAA2C,CAC5C,CAAC;YACJ,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,GAAG,GAAG,OAAO,CAAC;YACd,KAAK,GAAG,SAAS,CAAC;YAClB,cAAc,GAAG,kBAAkB,CAAC;YACpC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtB,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,CAAC;QAED,UAAU;YACR,UAAU,EAAE,CAAC;YACb,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,OAAO,kBAAkB,CAAC;gBACxB,OAAO;gBACP,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,UAAU,EAAE,CAAC,GAAG,aAAa,CAAC;gBAC9B,mBAAmB,EAAE,CAAC,GAAG,sBAAsB,CAAC;aACjD,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,IAAI,SAAS;gBAAE,OAAO;YACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACZ,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;KACF,CAAC;AACJ,CAAC;AAqDD,SAAS,mBAAmB,CAC1B,IAAuC,EACvC,OAAe,EACf,KAAa,EACb,cAAuB;IAEvB,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE;YACL,IAAI;YACJ,OAAO;YACP,KAAK;YACL,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D;KACF,CAAC;AACJ,CAAC;AAiBD,SAAS,gBAAgB,CAAC,KAAc;IAOtC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,EAAE,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,EAAE,CAAC;QACpE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,uBAAuB;YAC7B,OAAO,EAAE,+CAA+C;SACzD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,gBAAgB,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,8BAA8B;YACpC,OAAO,EAAE,+CAA+C;SACzD,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,uDAAuD;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAmC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IAQzC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,cAAc,CAAC,IAAK,cAAyB,GAAG,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,+BAA+B;YACxC,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACvC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACpC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,kBAAkB,EACjD,CAAC;QACD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,qCAAqC;YAC9C,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,qCAAqC;YAC9C,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;IAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjE,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,+BAA+B;YACxC,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,0CAA0C;YACnD,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,uCAAuC;YAChD,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,iBAAiB;YACvB,OAAO,EAAE,uCAAuC;YAChD,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC9D,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC;QACpB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,OAAO,EAAE,WAAW,CAAC,OAAO;YAC5B,cAAc,EAAE,cAAwB;SACzC,CAAC;IACJ,CAAC;IAED,IAAI,aAAoD,CAAC;IACzD,IAAI,WAAW,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3C,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,qCAAqC;gBAC9C,cAAc,EAAE,cAAwB;aACzC,CAAC;QACJ,CAAC;QACD,MAAM,mBAAmB,GAAG,gBAAgB,CAAC,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,CAAC;YAC5B,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,mBAAmB,CAAC,IAAI;gBAC9B,OAAO,EAAE,mBAAmB,CAAC,OAAO;gBACpC,cAAc,EAAE,cAAwB;aACzC,CAAC;QACJ,CAAC;QACD,IACE,OAAO,WAAW,CAAC,UAAU,CAAC,GAAG,KAAK,QAAQ;YAC9C,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;YACvC,CAAC,wBAAwB,CAAC,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,EAC1D,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE,mCAAmC;gBAC5C,cAAc,EAAE,cAAwB;aACzC,CAAC;QACJ,CAAC;QACD,aAAa,GAAG;YACd,GAAG,EAAE,WAAW,CAAC,UAAU,CAAC,GAAG;YAC/B,OAAO,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ;YACxC,WAAW,EAAE,mBAAmB,CAAC,KAAK;SACvC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,MAAM,EAAE,KAAK;YACb,cAAc,EAAE,cAAwB;YACxC,OAAO,EAAE,WAAW,CAAC,SAAS;YAC9B,KAAK;YACL,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG;YAC5B,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,WAAW,EAAE,WAAW,CAAC,KAAK;YAC9B,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAmC,EACnC,QAA8B;IAE9B,OAAO,CACL,MAAM,KAAK,IAAI;QACf,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QACnC,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc;QACjD,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;QACrC,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QACvC,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QACnC,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC/B,MAAM,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,CAAC,MAAM;QACvD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/E,MAAM,CAAC,mBAAmB,CAAC,MAAM,KAAK,QAAQ,CAAC,mBAAmB,CAAC,MAAM;QACzE,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAC9B,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,KAAK,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAC5E,CACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAA0B,EAC1B,OAAgC;IAEhC,IAAI,QAAQ,GAAgC,IAAI,CAAC;IACjD,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9C,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtD,IAAI,eAAmC,CAAC;IACxC,IAAI,uBAAyD,CAAC;IAC9D,IAAI,UAAiD,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,yBAAyB,GAAG,OAAO,CAAC,eAAe,CAAC;QAC1D,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;QACpD,MAAM,eAAe,GAAG,OAAO,CAAC,uBAAuB,CAAC;QACxD,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QAChC,IAAI,yBAAyB,KAAK,SAAS,EAAE,CAAC;YAC5C,gBAAgB,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;YACvD,eAAe,GAAG,yBAAyB,CAAC;QAC9C,CAAC;QACD,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,wBAAwB,GAAG,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;YACvE,QAAQ,GAAG,wBAAwB,CAAC;YACpC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;gBAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC;gBAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,mBAAmB,CAAC,KAAK,CAAE,CAAC;gBAC5D,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtB,mBAAmB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gBACxC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACjD,CAAC;YACD,IAAI,eAAe,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAC1E,OAAO,mBAAmB,CACxB,mBAAmB,EACnB,yDAAyD,EACzD,CAAC,CAAC,EACF,QAAQ,CAAC,cAAc,CACxB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,sBAAsB,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAC;YACnE,uBAAuB,GAAG,sBAAsB,CAAC;YACjD,IACE,eAAe,KAAK,SAAS;gBAC7B,uBAAuB,CAAC,OAAO,KAAK,eAAe,EACnD,CAAC;gBACD,OAAO,mBAAmB,CACxB,mBAAmB,EACnB,uDAAuD,EACvD,CAAC,CAAC,EACF,uBAAuB,CAAC,cAAc,CACvC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,mBAAmB,CACxB,iBAAiB,EACjB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,EACxE,CAAC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACnD,IAAI,YAAoD,CAAC;QACzD,IAAI,CAAC;YACH,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,mBAAmB,CAAC,iBAAiB,EAAE,iCAAiC,EAAE,KAAK,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,mBAAmB,CACxB,YAAY,CAAC,IAAI,EACjB,YAAY,CAAC,OAAO,EACpB,KAAK,EACL,YAAY,CAAC,cAAc,CAC5B,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC;QAElC,IAAI,eAAe,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;YACxE,OAAO,mBAAmB,CACxB,mBAAmB,EACnB,kDAAkD,EAClD,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QAED,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,cAAc,KAAK,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACtE,OAAO,mBAAmB,CACxB,oBAAoB,EACpB,4DAA4D,EAC5D,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;gBACxC,OAAO,mBAAmB,CACxB,mBAAmB,EACnB,8BAA8B,EAC9B,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;gBAC1D,OAAO,mBAAmB,CACxB,yBAAyB,EACzB,sDAAsD,EACtD,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;gBAC1B,OAAO,mBAAmB,CACxB,yBAAyB,EACzB,qDAAqD,EACrD,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;YACD,IACE,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ;gBAC9C,MAAM,CAAC,aAAa,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EACjD,CAAC;gBACD,OAAO,mBAAmB,CACxB,yBAAyB,EACzB,6CAA6C,EAC7C,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;gBAClE,OAAO,mBAAmB,CACxB,wBAAwB,EACxB,iDAAiD,EACjD,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,QAAQ,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC;QACxE,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,mBAAmB,CACxB,cAAc,EACd,sCAAsC,EACtC,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,QAAgC,CAAC;QACrC,IAAI,CAAC;YACH,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,mBAAmB,CACxB,uBAAuB,EACvB,0CAA0C,EAC1C,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,mBAAmB,CACxB,gBAAgB,EAChB,sCAAsC,EACtC,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,cAAc,EAAE,CAAC;YAChF,OAAO,mBAAmB,CACxB,aAAa,EACb,iDAAiD,EACjD,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,sBAAsB,GAAG,sBAAsB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChF,MAAM,mBAAmB,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,IACE,mBAAmB,KAAK,SAAS;YACjC,mBAAmB,KAAK,sBAAsB,EAC9C,CAAC;YACD,OAAO,mBAAmB,CACxB,0BAA0B,EAC1B,iDAAiD,EACjD,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QACD,IACE,mBAAmB,KAAK,SAAS;YACjC,mBAAmB,CAAC,GAAG,CAAC,sBAAsB,CAAC,EAC/C,CAAC;YACD,OAAO,mBAAmB,CACxB,oBAAoB,EACpB,6DAA6D,EAC7D,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QACD,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;YACtC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,mBAAmB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAChD,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,UAAU;YAAE,SAAS,EAAE,CAAC;QAE5B,IAAI,SAAiB,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,GAAG,sBAAsB,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,mBAAmB,CACxB,iBAAiB,EACjB,qCAAqC,EACrC,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACzC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,OAAO,mBAAmB,CACxB,eAAe,EACf,iCAAiC,EACjC,KAAK,EACL,MAAM,CAAC,cAAc,CACtB,CAAC;QACJ,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEjB,QAAQ,GAAG,kBAAkB,CAAC;YAC5B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK;YACnC,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC;YAC3B,mBAAmB,EAAE,CAAC,GAAG,mBAAmB,CAAC;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,IACE,uBAAuB,KAAK,SAAS;QACrC,CAAC,gBAAgB,CAAC,QAAQ,EAAE,uBAAuB,CAAC,EACpD,CAAC;QACD,OAAO,mBAAmB,CACxB,2BAA2B,EAC3B,0DAA0D,EAC1D,MAAM,CAAC,MAAM,EACb,QAAQ,EAAE,cAAc,CACzB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,KAAK,EAAE;YACL,aAAa,EAAE,MAAM,CAAC,MAAM;YAC5B,SAAS;YACT,UAAU,EAAE,QAAQ;SACrB;KACF,CAAC;AACJ,CAAC"}

package/dist/audit/ocsf.d.ts

@@ -0,0 +1,108 @@
+import type { SecretsEvent, SecretsEventType } from "../vault/policy.js";
+/** Released schema version this projection is pinned to. */
+export declare const OCSF_SCHEMA_VERSION: "1.9.0";
+export declare const OCSF_IAM_CATEGORY_UID: 3;
+export declare const OCSF_ENTITY_MANAGEMENT_CLASS_UID: 3004;
+export type CredentialAuditActivityId = 2 | 4 | 99;
+export type CredentialAuditActivityName = "Read" | "Delete" | "Store" | "Enumerate";
+export type CredentialAuditTypeUid = 300402 | 300404 | 300499;
+export type CredentialAuditActionId = 1 | 2;
+export type CredentialAuditStatusId = 1 | 2;
+export interface OcsfProduct {
+    readonly name: "@centient/secrets";
+    readonly vendor_name: "Centient Labs";
+}
+export interface CredentialAuditMetadata {
+    /** OCSF schema version, not the npm package version. */
+    readonly version: typeof OCSF_SCHEMA_VERSION;
+    readonly product: OcsfProduct;
+    /** Stable identifier for this record. */
+    readonly uid: string;
+    /** Added by the OCSF Record Integrity profile when chaining is enabled. */
+    readonly sequence?: number;
+    readonly profiles?: readonly ["record_integrity"];
+}
+export interface OcsfFingerprint {
+    /** 99 = Other; OCSF has no built-in HMAC-SHA-256 algorithm identifier. */
+    readonly algorithm_id: 99;
+    readonly algorithm: "HMAC-SHA-256";
+    /** 1 = hexadecimal encoding. */
+    readonly encoding_id: 1;
+    /** 2 = RFC 8785 JSON Canonicalization Scheme. */
+    readonly serialization_id: 2;
+    readonly value: string;
+}
+export interface OcsfPreviousEvent {
+    readonly uid: string;
+    readonly type_uid: CredentialAuditTypeUid;
+    readonly fingerprint: OcsfFingerprint;
+}
+export interface OcsfAttestation {
+    readonly chain_uid: string;
+    readonly fingerprint: OcsfFingerprint;
+    readonly prev_event?: OcsfPreviousEvent;
+}
+export interface CredentialAuditUnmapped {
+    /** ADR-002 names retained as explicit Centient extension attributes. */
+    readonly "credential.name": string;
+    readonly "credential.vault.name": string;
+    readonly "centient.secrets.event_type": SecretsEventType;
+    readonly "centient.secrets.operation.duration_ms": number;
+    readonly "centient.secrets.operation.type": SecretsEvent["operation"]["type"];
+    readonly "centient.secrets.caller.kind"?: string;
+    readonly "centient.secrets.key_count"?: number;
+    readonly "centient.secrets.prefix"?: string;
+    readonly "centient.secrets.error_code"?: "CREDENTIAL_NOT_FOUND" | "OPERATION_FAILED" | "POLICY_DENIED";
+    /** HMAC key identifiers are not represented by the OCSF attestation object. */
+    readonly "centient.audit_chain.key_id"?: string;
+}
+/**
+ * OCSF 1.9 Entity Management event used for local credential auditing.
+ *
+ * ADR-002 called this "Credential Activity (category 3004)". In the released
+ * schema, 3 is the IAM category and 3004 is the Entity Management class. The
+ * credential/provider names requested by the ADR are vendor extensions under
+ * `unmapped`; the required managed entity uses `entity.name`.
+ */
+export interface CredentialAuditEvent {
+    readonly category_uid: typeof OCSF_IAM_CATEGORY_UID;
+    readonly class_uid: typeof OCSF_ENTITY_MANAGEMENT_CLASS_UID;
+    readonly type_uid: CredentialAuditTypeUid;
+    readonly activity_id: CredentialAuditActivityId;
+    readonly activity_name: CredentialAuditActivityName;
+    readonly action_id: CredentialAuditActionId;
+    readonly action: "Allowed" | "Denied";
+    readonly status_id: CredentialAuditStatusId;
+    readonly status: "Success" | "Failure";
+    readonly status_detail?: "Credential not found" | "Operation failed" | "Policy denied operation";
+    /** 1 = Informational. Audit outcomes are represented by `status_id`. */
+    readonly severity_id: 1;
+    /** Operation start, as Unix epoch milliseconds. */
+    readonly time: number;
+    readonly metadata: CredentialAuditMetadata;
+    readonly actor: {
+        readonly user: {
+            readonly uid: string;
+        };
+    };
+    readonly entity: {
+        readonly name: string;
+        readonly type: "Credential";
+        /** 99 = Other; OCSF does not define a credential managed-entity type. */
+        readonly type_id: 99;
+        readonly data: {
+            readonly vault_name: string;
+        };
+    };
+    readonly unmapped: CredentialAuditUnmapped;
+    readonly attestation_list?: readonly [OcsfAttestation];
+}
+export interface OcsfProjectionOptions {
+    /** Used only when the operation has no explicit caller identity. */
+    readonly defaultActor?: string;
+    /** Injectable UUID seam for deterministic consumers and tests. */
+    readonly uid?: () => string;
+}
+/** Convert the value-free policy event into one allowlisted OCSF record. */
+export declare function toCredentialAuditEvent(event: SecretsEvent, options?: OcsfProjectionOptions): CredentialAuditEvent;
+//# sourceMappingURL=ocsf.d.ts.map

package/dist/audit/ocsf.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocsf.d.ts","sourceRoot":"","sources":["../../src/audit/ocsf.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEzE,4DAA4D;AAC5D,eAAO,MAAM,mBAAmB,EAAG,OAAgB,CAAC;AACpD,eAAO,MAAM,qBAAqB,EAAG,CAAU,CAAC;AAChD,eAAO,MAAM,gCAAgC,EAAG,IAAa,CAAC;AA6D9D,MAAM,MAAM,yBAAyB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;AACnD,MAAM,MAAM,2BAA2B,GACnC,MAAM,GACN,QAAQ,GACR,OAAO,GACP,WAAW,CAAC;AAChB,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAC9D,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,CAAC,CAAC;AAE5C,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;CACvC;AAED,MAAM,WAAW,uBAAuB;IACtC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,EAAE,OAAO,mBAAmB,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,yCAAyC;IACzC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,kBAAkB,CAAC,CAAC;CACnD;AAED,MAAM,WAAW,eAAe;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IACnC,gCAAgC;IAChC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;CACvC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,uBAAuB,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,6BAA6B,EAAE,gBAAgB,CAAC;IACzD,QAAQ,CAAC,wCAAwC,EAAE,MAAM,CAAC;IAC1D,QAAQ,CAAC,iCAAiC,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9E,QAAQ,CAAC,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACjD,QAAQ,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC;IAC/C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,6BAA6B,CAAC,EACnC,sBAAsB,GACtB,kBAAkB,GAClB,eAAe,CAAC;IACpB,+EAA+E;IAC/E,QAAQ,CAAC,6BAA6B,CAAC,EAAE,MAAM,CAAC;CACjD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,OAAO,qBAAqB,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,OAAO,gCAAgC,CAAC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,yBAAyB,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EACnB,sBAAsB,GACtB,kBAAkB,GAClB,yBAAyB,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE;YACb,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;SACtB,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;QAC5B,yEAAyE;QACzE,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,EAAE;YACb,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;SAC7B,CAAC;KACH,CAAC;IACF,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,qBAAqB;IACpC,oEAAoE;IACpE,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AA0FD,4EAA4E;AAC5E,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,qBAA0B,GAClC,oBAAoB,CAuFtB"}

package/dist/audit/ocsf.js

@@ -0,0 +1,204 @@
+import { randomUUID } from "node:crypto";
+/** Released schema version this projection is pinned to. */
+export const OCSF_SCHEMA_VERSION = "1.9.0";
+export const OCSF_IAM_CATEGORY_UID = 3;
+export const OCSF_ENTITY_MANAGEMENT_CLASS_UID = 3004;
+const EXPLICIT_ZONE_TIMESTAMP = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d{1,9})?(?:Z|[+-](\d{2}):(\d{2}))$/;
+function isLeapYear(year) {
+    return year % 4 === 0 && (year % 100 !== 0 || year % 400 === 0);
+}
+function parseAuditTimestamp(timestamp) {
+    const match = EXPLICIT_ZONE_TIMESTAMP.exec(timestamp);
+    if (match === null) {
+        throw new TypeError("credential audit timestamp must be a valid ISO-8601 instant with an explicit UTC or numeric offset");
+    }
+    const year = Number(match[1]);
+    const month = Number(match[2]);
+    const day = Number(match[3]);
+    const hour = Number(match[4]);
+    const minute = Number(match[5]);
+    const second = Number(match[6]);
+    const offsetHour = match[7] === undefined ? 0 : Number(match[7]);
+    const offsetMinute = match[8] === undefined ? 0 : Number(match[8]);
+    const daysInMonth = [
+        31,
+        isLeapYear(year) ? 29 : 28,
+        31,
+        30,
+        31,
+        30,
+        31,
+        31,
+        30,
+        31,
+        30,
+        31,
+    ];
+    const time = Date.parse(timestamp);
+    if (month < 1 ||
+        month > 12 ||
+        day < 1 ||
+        day > (daysInMonth[month - 1] ?? 0) ||
+        hour > 23 ||
+        minute > 59 ||
+        second > 59 ||
+        offsetHour > 23 ||
+        offsetMinute > 59 ||
+        !Number.isFinite(time)) {
+        throw new TypeError("credential audit timestamp must be a valid ISO-8601 instant with an explicit UTC or numeric offset");
+    }
+    return time;
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
+        for (const child of Object.values(value)) {
+            deepFreeze(child);
+        }
+        Object.freeze(value);
+    }
+    return value;
+}
+function activityFor(event) {
+    switch (event.operation.type) {
+        case "read":
+            return { activityId: 2, activityName: "Read", typeUid: 300402 };
+        case "delete":
+            return { activityId: 4, activityName: "Delete", typeUid: 300404 };
+        case "write":
+            // The provider SPI is an upsert and does not report create-vs-update.
+            // OCSF 3004 has no upsert activity, so claiming either would be false.
+            return { activityId: 99, activityName: "Store", typeUid: 300499 };
+        case "enumerate":
+            // OCSF 3004 has no enumerate activity.
+            return { activityId: 99, activityName: "Enumerate", typeUid: 300499 };
+        default: {
+            const unreachable = event.operation.type;
+            throw new Error(`unhandled credential audit operation: ${String(unreachable)}`);
+        }
+    }
+}
+function outcomeFor(event) {
+    if (event.type.endsWith("_rejected")) {
+        return {
+            actionId: 2,
+            action: "Denied",
+            statusId: 2,
+            status: "Failure",
+            statusDetail: "Policy denied operation",
+            errorCode: "POLICY_DENIED",
+        };
+    }
+    if (event.type.endsWith("_failed")) {
+        return {
+            actionId: 1,
+            action: "Allowed",
+            statusId: 2,
+            status: "Failure",
+            statusDetail: "Operation failed",
+            errorCode: "OPERATION_FAILED",
+        };
+    }
+    if (event.type === "credential_read_missing") {
+        return {
+            actionId: 1,
+            action: "Allowed",
+            statusId: 2,
+            status: "Failure",
+            statusDetail: "Credential not found",
+            errorCode: "CREDENTIAL_NOT_FOUND",
+        };
+    }
+    return {
+        actionId: 1,
+        action: "Allowed",
+        statusId: 1,
+        status: "Success",
+    };
+}
+function assertFiniteDuration(durationMs) {
+    if (!Number.isFinite(durationMs) || durationMs < 0) {
+        throw new TypeError("credential audit durationMs must be a finite non-negative number");
+    }
+}
+/** Convert the value-free policy event into one allowlisted OCSF record. */
+export function toCredentialAuditEvent(event, options = {}) {
+    assertFiniteDuration(event.durationMs);
+    const time = parseAuditTimestamp(event.timestamp);
+    const activity = activityFor(event);
+    const outcome = outcomeFor(event);
+    const actorUid = event.operation.caller?.id ?? options.defaultActor ?? `process:${process.pid}`;
+    if (actorUid.length === 0) {
+        throw new TypeError("credential audit actor identity must not be empty");
+    }
+    if (event.key !== undefined &&
+        event.operation.key !== undefined &&
+        event.key !== event.operation.key) {
+        throw new TypeError("credential audit key disagrees with its operation descriptor");
+    }
+    if (event.prefix !== undefined &&
+        event.operation.prefix !== undefined &&
+        event.prefix !== event.operation.prefix) {
+        throw new TypeError("credential audit prefix disagrees with its operation descriptor");
+    }
+    const credentialName = event.operation.key ??
+        event.key ??
+        event.operation.prefix ??
+        event.prefix ??
+        "*";
+    const uid = (options.uid ?? randomUUID)();
+    if (uid.length === 0) {
+        throw new TypeError("credential audit uid must not be empty");
+    }
+    const unmapped = {
+        "credential.name": credentialName,
+        "credential.vault.name": event.backend,
+        "centient.secrets.event_type": event.type,
+        "centient.secrets.operation.duration_ms": event.durationMs,
+        "centient.secrets.operation.type": event.operation.type,
+        ...(event.operation.caller?.kind !== undefined
+            ? { "centient.secrets.caller.kind": event.operation.caller.kind }
+            : {}),
+        ...(event.keyCount !== undefined
+            ? { "centient.secrets.key_count": event.keyCount }
+            : {}),
+        ...(event.prefix !== undefined
+            ? { "centient.secrets.prefix": event.prefix }
+            : {}),
+        ...(outcome.errorCode !== undefined
+            ? { "centient.secrets.error_code": outcome.errorCode }
+            : {}),
+    };
+    return deepFreeze({
+        category_uid: OCSF_IAM_CATEGORY_UID,
+        class_uid: OCSF_ENTITY_MANAGEMENT_CLASS_UID,
+        type_uid: activity.typeUid,
+        activity_id: activity.activityId,
+        activity_name: activity.activityName,
+        action_id: outcome.actionId,
+        action: outcome.action,
+        status_id: outcome.statusId,
+        status: outcome.status,
+        ...(outcome.statusDetail !== undefined
+            ? { status_detail: outcome.statusDetail }
+            : {}),
+        severity_id: 1,
+        time,
+        metadata: {
+            version: OCSF_SCHEMA_VERSION,
+            product: {
+                name: "@centient/secrets",
+                vendor_name: "Centient Labs",
+            },
+            uid,
+        },
+        actor: { user: { uid: actorUid } },
+        entity: {
+            name: credentialName,
+            type: "Credential",
+            type_id: 99,
+            data: { vault_name: event.backend },
+        },
+        unmapped,
+    });
+}
+//# sourceMappingURL=ocsf.js.map

package/dist/audit/ocsf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ocsf.js","sourceRoot":"","sources":["../../src/audit/ocsf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,4DAA4D;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAU,CAAC;AAChD,MAAM,CAAC,MAAM,gCAAgC,GAAG,IAAa,CAAC;AAE9D,MAAM,uBAAuB,GAC3B,0FAA0F,CAAC;AAE7F,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,SAAS,CACjB,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,MAAM,WAAW,GAAG;QAClB,EAAE;QACF,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;QAC1B,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;QACF,EAAE;KACH,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAEnC,IACE,KAAK,GAAG,CAAC;QACT,KAAK,GAAG,EAAE;QACV,GAAG,GAAG,CAAC;QACP,GAAG,GAAG,CAAC,WAAW,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,GAAG,EAAE;QACT,MAAM,GAAG,EAAE;QACX,MAAM,GAAG,EAAE;QACX,UAAU,GAAG,EAAE;QACf,YAAY,GAAG,EAAE;QACjB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EACtB,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,oGAAoG,CACrG,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAyHD,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpE,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD,SAAS,WAAW,CAAC,KAAmB;IACtC,QAAQ,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC7B,KAAK,MAAM;YACT,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAClE,KAAK,QAAQ;YACX,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpE,KAAK,OAAO;YACV,sEAAsE;YACtE,uEAAuE;YACvE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACpE,KAAK,WAAW;YACd,uCAAuC;YACvC,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QACxE,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,yCAAyC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAmB;IAQrC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,yBAAyB;YACvC,SAAS,EAAE,eAAe;SAC3B,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,kBAAkB;YAChC,SAAS,EAAE,kBAAkB;SAC9B,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;QAC7C,OAAO;YACL,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,SAAS;YACjB,YAAY,EAAE,sBAAsB;YACpC,SAAS,EAAE,sBAAsB;SAClC,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,SAAS;QACjB,QAAQ,EAAE,CAAC;QACX,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CAAC,kEAAkE,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,sBAAsB,CACpC,KAAmB,EACnB,UAAiC,EAAE;IAEnC,oBAAoB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAElD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,OAAO,CAAC,YAAY,IAAI,WAAW,OAAO,CAAC,GAAG,EAAE,CAAC;IAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;IACD,IACE,KAAK,CAAC,GAAG,KAAK,SAAS;QACvB,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS;QACjC,KAAK,CAAC,GAAG,KAAK,KAAK,CAAC,SAAS,CAAC,GAAG,EACjC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,IACE,KAAK,CAAC,MAAM,KAAK,SAAS;QAC1B,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;QACpC,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,EACvC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,cAAc,GAClB,KAAK,CAAC,SAAS,CAAC,GAAG;QACnB,KAAK,CAAC,GAAG;QACT,KAAK,CAAC,SAAS,CAAC,MAAM;QACtB,KAAK,CAAC,MAAM;QACZ,GAAG,CAAC;IACN,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,QAAQ,GAA4B;QACxC,iBAAiB,EAAE,cAAc;QACjC,uBAAuB,EAAE,KAAK,CAAC,OAAO;QACtC,6BAA6B,EAAE,KAAK,CAAC,IAAI;QACzC,wCAAwC,EAAE,KAAK,CAAC,UAAU;QAC1D,iCAAiC,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI;QACvD,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,KAAK,SAAS;YAC5C,CAAC,CAAC,EAAE,8BAA8B,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;YACjE,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,4BAA4B,EAAE,KAAK,CAAC,QAAQ,EAAE;YAClD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE,yBAAyB,EAAE,KAAK,CAAC,MAAM,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE,6BAA6B,EAAE,OAAO,CAAC,SAAS,EAAE;YACtD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,OAAO,UAAU,CAAC;QAChB,YAAY,EAAE,qBAAqB;QACnC,SAAS,EAAE,gCAAgC;QAC3C,QAAQ,EAAE,QAAQ,CAAC,OAAO;QAC1B,WAAW,EAAE,QAAQ,CAAC,UAAU;QAChC,aAAa,EAAE,QAAQ,CAAC,YAAY;QACpC,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS;YACpC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,YAAY,EAAE;YACzC,CAAC,CAAC,EAAE,CAAC;QACP,WAAW,EAAE,CAAC;QACd,IAAI;QACJ,QAAQ,EAAE;YACR,OAAO,EAAE,mBAAmB;YAC5B,OAAO,EAAE;gBACP,IAAI,EAAE,mBAAmB;gBACzB,WAAW,EAAE,eAAe;aAC7B;YACD,GAAG;SACJ;QACD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE;QAClC,MAAM,EAAE;YACN,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,EAAE;YACX,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE;SACpC;QACD,QAAQ;KACT,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/hidden-prompt.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hidden-prompt.d.ts","sourceRoot":"","sources":["../../src/cli/hidden-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,IAAI,OAAO,CAAC;IAClB,MAAM,CAAC,IAAI,OAAO,CAAC;IACnB,UAAU,CAAC,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;CACrC;AAED,UAAU,YAAY;IACpB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,eAAO,MAAM,qCAAqC,+KAC4H,CAAC;AAE/K;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,eAAO,MAAM,6BAA6B,8EAAmG,CAAC;AAQ9I;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,mBAAwB,GAChC,MAAM,GAAG,IAAI,CAqFf"}
+{"version":3,"file":"hidden-prompt.d.ts","sourceRoot":"","sources":["../../src/cli/hidden-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAWH,UAAU,WAAW;IACnB,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,KAAK,CAAC,IAAI,OAAO,CAAC;IAClB,MAAM,CAAC,IAAI,OAAO,CAAC;IACnB,UAAU,CAAC,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;CACrC;AAED,UAAU,YAAY;IACpB,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE,YAAY,CAAC;CACvB;AAED,qBAAa,iBAAkB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI5B;AAED,eAAO,MAAM,qCAAqC,+KAC4H,CAAC;AAE/K;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAC;AAE9C,eAAO,MAAM,6BAA6B,8EAAmG,CAAC;AAuC9I;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,mBAAwB,GAChC,MAAM,GAAG,IAAI,CAoGf"}

package/dist/cli/hidden-prompt.js

@@ -28,6 +28,36 @@ const PROMPT_SIGNALS = [
     "SIGTERM",
     "SIGHUP",
 ];
+/**
+ * How long to park the thread when the fd has no byte ready (issue #284).
+ * Short enough that typing latency is imperceptible, long enough that an idle
+ * prompt does not spin a core.
+ */
+const WOULD_BLOCK_RETRY_MS = 10;
+const retryWaitCell = new Int32Array(new SharedArrayBuffer(4));
+/**
+ * `readSync` that blocks even when the fd is non-blocking.
+ *
+ * libuv puts a TTY fd into O_NONBLOCK as soon as `process.stdin` is
+ * constructed (not only on `resume()`), so a plain `readSync` throws EAGAIN
+ * whenever no byte is buffered. Retry with a synchronous sleep instead:
+ * KeyProvider is synchronous, so the prompt cannot yield to the event loop.
+ * `Atomics.wait` never dispatches JS, so an external signal stays queued
+ * exactly as it would during a blocking read (see onSignal below).
+ */
+function readBlockingSync(fd, buffer) {
+    while (true) {
+        try {
+            return readSync(fd, buffer, 0, buffer.length, null);
+        }
+        catch (err) {
+            const code = err.code;
+            if (code !== "EAGAIN" && code !== "EWOULDBLOCK")
+                throw err;
+            Atomics.wait(retryWaitCell, 0, 0, WOULD_BLOCK_RETRY_MS);
+        }
+    }
+}
 /**
  * Prompt for a hidden single-line value from a real TTY.
  *
@@ -70,10 +100,10 @@ export function promptHiddenSync(message, options = {}) {
     // received here is queued by libuv and dispatched only after the prompt
     // unwinds. Installing the listeners suppresses the immediate default kill
     // (protecting raw mode); the deferred handler then re-raises so the default
-    // exit behavior is preserved. That is also why removal is deferred one tick
-    // in `finally` below: removing the listeners synchronously would drop the
-    // queued dispatch and the process would silently ignore a kill received
-    // during the prompt.
+    // exit behavior is preserved. That is also why removal is deferred in
+    // `finally` below: removing the last listener stops Node's libuv signal
+    // handle, and libuv drops a queued signal whose handle has stopped, so the
+    // process would silently ignore a kill received during the prompt.
     const onSignal = (signal) => {
         // Remove ALL prompt listeners (not just this signal's spent `once`
         // wrapper) before re-raising, so the re-raised signal hits the default
@@ -95,7 +125,7 @@ export function promptHiddenSync(message, options = {}) {
     input.resume?.();
     try {
         while (true) {
-            const bytesRead = readSync(input.fd, buffer, 0, buffer.length, null);
+            const bytesRead = readBlockingSync(input.fd, buffer);
             if (bytesRead === 0)
                 return null;
             const chunk = decoder.write(buffer.subarray(0, bytesRead));
@@ -117,11 +147,26 @@ export function promptHiddenSync(message, options = {}) {
         buffer.fill(0);
         restoreTerminal();
         // Deferred (see the comment on onSignal): a signal received while
-        // readSync blocked has not been dispatched yet — removing the listeners
-        // now would swallow it. One tick later either the queued handler has
-        // re-raised (process is exiting) or there was no signal and this is a
-        // plain cleanup.
-        setImmediate(removeSignalHandlers);
+        // readSync blocked sits unread in libuv's signal pipe, and only the event
+        // loop's poll phase reads that pipe and dispatches the JS handler. Removal
+        // must therefore wait until a poll phase has run (issue #287).
+        //
+        // A single setImmediate does not guarantee that. It runs in the next check
+        // phase, and when the prompt returns inside a poll-phase callback (an fs
+        // or network callback, or an ESM entry module under Node 20), that check
+        // phase comes BEFORE the next poll, so the handle stops with the signal
+        // still unread. A nested setImmediate always works: an immediate queued
+        // while the check phase runs waits for the next loop iteration, and that
+        // iteration polls first. The poll reads the pipe even with a zero timeout,
+        // because pipe readiness is level-triggered and the pipe was written when
+        // the signal arrived. After that poll, either the handler has re-raised
+        // (the process is exiting) or no signal came and this is plain cleanup.
+        //
+        // A signal that arrives after the prompt returns, but between that poll
+        // and the removal, can still be dropped. This is the libuv behavior for
+        // removing any last signal listener, and the window stays within one loop
+        // iteration after the prompt.
+        setImmediate(() => setImmediate(removeSignalHandlers));
     }
 }
 //# sourceMappingURL=hidden-prompt.js.map

package/dist/cli/hidden-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"hidden-prompt.js","sourceRoot":"","sources":["../../src/cli/hidden-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAoB3B,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qCAAqC,GAChD,4KAA4K,CAAC;AAE/K;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,uBAAuB,gDAAgD,CAAC;AAE9I,MAAM,cAAc,GAA8B;IAChD,QAAQ;IACR,SAAS;IACT,QAAQ;CACT,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,UAA+B,EAAE;IAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAEhD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;IAEpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,oBAAoB;IACpB,EAAE;IACF,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,wEAAwE;IACxE,qBAAqB;IACrB,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,oBAAoB,EAAE,CAAC;QACvB,eAAe,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,GAAS,EAAE;QACtC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtB,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;IAEjB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACrE,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;YAC5C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBACjD,qEAAqE;gBACrE,sEAAsE;gBACtE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,kEAAkE;QAClE,wEAAwE;QACxE,qEAAqE;QACrE,sEAAsE;QACtE,iBAAiB;QACjB,YAAY,CAAC,oBAAoB,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}
+{"version":3,"file":"hidden-prompt.js","sourceRoot":"","sources":["../../src/cli/hidden-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAoB3B,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,qCAAqC,GAChD,4KAA4K,CAAC;AAE/K;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAE9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,yBAAyB,uBAAuB,gDAAgD,CAAC;AAE9I,MAAM,cAAc,GAA8B;IAChD,QAAQ;IACR,SAAS;IACT,QAAQ;CACT,CAAC;AAEF;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,EAAE,CAAC;AAEhC,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/D;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,EAAU,EAAE,MAAc;IAClD,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;YACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,aAAa;gBAAE,MAAM,GAAG,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,EACf,UAA+B,EAAE;IAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;IAEhD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QACzD,MAAM,IAAI,iBAAiB,CAAC,qCAAqC,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,KAAK,IAAI,CAAC;IAEpC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,eAAe,GAAG,GAAS,EAAE;QACjC,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3B,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,0EAA0E;IAC1E,4EAA4E;IAC5E,4EAA4E;IAC5E,0EAA0E;IAC1E,oBAAoB;IACpB,EAAE;IACF,sEAAsE;IACtE,qEAAqE;IACrE,wEAAwE;IACxE,0EAA0E;IAC1E,4EAA4E;IAC5E,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,MAAsB,EAAQ,EAAE;QAChD,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,oBAAoB,EAAE,CAAC;QACvB,eAAe,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IACF,MAAM,oBAAoB,GAAG,GAAS,EAAE;QACtC,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;YACpC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC;IACF,KAAK,MAAM,MAAM,IAAI,cAAc;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAEpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtB,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACrC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;IAEjB,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YACrD,IAAI,SAAS,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAEjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAChD,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,MAAM,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC,KAAK,CAAC;YAC5C,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;gBACjD,qEAAqE;gBACrE,sEAAsE;gBACtE,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjB,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,wEAAwE;QACxE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACf,eAAe,EAAE,CAAC;QAClB,kEAAkE;QAClE,0EAA0E;QAC1E,2EAA2E;QAC3E,+DAA+D;QAC/D,EAAE;QACF,2EAA2E;QAC3E,yEAAyE;QACzE,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,EAAE;QACF,wEAAwE;QACxE,wEAAwE;QACxE,0EAA0E;QAC1E,8BAA8B;QAC9B,YAAY,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/cli/messages.d.ts

@@ -1,14 +1,40 @@
 /**
- * Auth Module - Centralized Message Strings
+ * Auth CLI message catalog — the shared strings for the credential lifecycle a
+ * consuming CLI drives on top of this vault (`login`, `logout`, `auth status`,
+ * `auth refresh`, device flow, api-key entry).
  *
- * All user-visible strings for the auth module are defined here.
- * This module is i18n-ready: message values do not contain interpolated
- * strings — template functions accept parameters and return formatted strings.
+ * Scope (#217 C6-34). The previous header claimed "all user-visible strings for
+ * the auth module", which was never true of this package — there is no auth
+ * module here, and only one entry had an in-package call site. The verified
+ * scope is:
+ *
+ *   - IN — the auth/device-flow/token lifecycle listed above, driven by the
+ *     consuming CLI, plus the one credential-storage warning this package
+ *     itself emits: `warning.envVaultNoStorage`, from `EnvVault.store()` in
+ *     `../vault/vault-env.ts`.
+ *   - OUT — the `centient secrets …` operator CLI in `./secrets-cli.ts` and the
+ *     `[secrets] …` vault diagnostics under `../vault/`. Those are
+ *     command-specific and carry their own next-step lines; funnelling them
+ *     through a flat catalog would drop that specificity, so they are
+ *     deliberately not catalog entries.
+ *
+ * This catalog is part of the package's public surface — import it, do not copy
+ * it. It is exported precisely so a consuming CLI stops maintaining a fork:
+ * before #217, `centient` carried a byte-identical copy at
+ * `packages/centient/src/auth/messages.ts` that had already drifted on
+ * `warning.envVaultNoStorage` (the single entry this package consumes, and so
+ * the single entry that had been updated here).
+ *
+ * i18n-ready: no message value interpolates at the call site. Parameterized
+ * messages are template functions that take their parameters and return the
+ * finished string, so a translation layer can replace the catalog wholesale.
  *
  * Usage:
- *   import { AUTH_MESSAGES } from './messages.js';
- *   process.stderr.write(AUTH_MESSAGES.error.vaultWriteFailed + '\n');
- *   process.stderr.write(AUTH_MESSAGES.info.loginPrompt('https://auth.example.com') + '\n');
+ *   import { AUTH_MESSAGES } from "@centient/secrets";
+ *   process.stderr.write(AUTH_MESSAGES.error.vaultWriteFailed + "\n");
+ *   process.stderr.write(
+ *     AUTH_MESSAGES.info.loginPrompt("https://auth.example.com") + "\n",
+ *   );
  */
 export declare const AUTH_MESSAGES: {
     readonly success: {
@@ -42,7 +68,7 @@ export declare const AUTH_MESSAGES: {
         readonly revokeNetworkFailure: "Could not reach server to revoke token — local credentials have been removed.";
         readonly noCredentialsFound: "No stored credentials found. Run `centient login` to authenticate.";
         readonly sessionExpiredIdle: "Session expired due to inactivity.";
-        readonly envVaultNoStorage: "No secure credential storage available. Install libsecret (Linux: apt install libsecret-tools) or GPG for persistent storage. Using ENGRAM_API_KEY environment variable only.";
+        readonly envVaultNoStorage: "No secure credential storage available. Install libsecret (Linux: apt install libsecret-tools) or GPG for persistent storage. The environment fallback is read-only; set ENGRAM_API_KEY for auth-token or the key's CENTIENT_SECRET_* variable.";
     };
     readonly info: {
         readonly loginPrompt: (verificationUri: string) => string;
@@ -57,4 +83,10 @@ export declare const AUTH_MESSAGES: {
         readonly loginStarting: "Starting device authorization flow...";
     };
 };
+/**
+ * Shape of {@link AUTH_MESSAGES} — literal string values for fixed messages,
+ * template functions for parameterized ones. Exported so a consumer can type a
+ * translation table, or a narrowing helper, against the catalog it imports.
+ */
+export type AuthMessages = typeof AUTH_MESSAGES;
 //# sourceMappingURL=messages.d.ts.map

package/dist/cli/messages.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/cli/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;4CAwBK,MAAM,KAAG,MAAM;;0CAIjB,MAAM,KAAG,MAAM;;;8CAKX,MAAM,KAAG,MAAM;;;;;;;gDAYb,MAAM,KAAG,MAAM;6CAElB,MAAM,KAAG,MAAM;wCAEpB,MAAM,KAAG,MAAM;;sDAID,MAAM,KAAG,MAAM;;mDAGlB,MAAM,KAAG,MAAM;wCAE1B,MAAM,KAAG,MAAM;;;;CAIhC,CAAC"}
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/cli/messages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;4CAwBK,MAAM,KAAG,MAAM;;0CAIjB,MAAM,KAAG,MAAM;;;8CAKX,MAAM,KAAG,MAAM;;;;;;;gDAYb,MAAM,KAAG,MAAM;6CAElB,MAAM,KAAG,MAAM;wCAEpB,MAAM,KAAG,MAAM;;sDAID,MAAM,KAAG,MAAM;;mDAGlB,MAAM,KAAG,MAAM;wCAE1B,MAAM,KAAG,MAAM;;;;CAIhC,CAAC;AAEX;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,aAAa,CAAC"}