@dealdesk/server 2026.527.0-canary.0

package/dist/secrets/aws-secrets-manager-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aws-secrets-manager-provider.js","sourceRoot":"","sources":["../../src/secrets/aws-secrets-manager-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAY7C,OAAO,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAC;AAEvD,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AAC5D,MAAM,cAAc,GAAG,UAAU,CAAC;AAClC,MAAM,iBAAiB,GAAG,UAAU,CAAC;AACrC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAC3C,MAAM,8BAA8B,GAAG,kBAAkB,CAAC;AAC1D,MAAM,mCAAmC,GAAG,EAAE,CAAC;AAC/C,MAAM,sCAAsC,GAAG,MAAM,CAAC;AACtD,MAAM,2BAA2B,GAAG,CAAC,GAAG,MAAM,CAAC;AAC/C,MAAM,iCAAiC,GAAG,MAAM,CAAC;AACjD,MAAM,8BAA8B,GAClC,gRAAgR,CAAC;AACnR,MAAM,8BAA8B,GAClC,+OAA+O,CAAC;AAoDlP,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAuC,CAAC;AAyD9E,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,IAAI,CAAC,GAAoB,EAAE,KAAa;IAC/C,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IACpC,MAAM,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO;QACL,OAAO,EAAE,GAAG;QACZ,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;KAC3B,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,4BAA4B,CAAC,KAMrC;IACC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,YAAY,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,4BAA4B;QAC5C,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;QACzB,sBAAsB,EAAE,WAAW;QACnC,YAAY,EAAE,OAAO;QACrB,cAAc,EAAE,kBAAkB,KAAK,CAAC,SAAS,EAAE;KACpD,CAAC;IACF,IAAI,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC;QACnC,OAAO,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC;IACnE,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACtD,MAAM,gBAAgB,GAAG,iBAAiB;SACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,IAAI,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;SACvE,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAG;QACvB,MAAM;QACN,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,GAAG;QAC9B,EAAE;QACF,gBAAgB;QAChB,aAAa;QACb,WAAW;KACZ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,eAAe,GAAG,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,8BAA8B,CAAC;IACnF,MAAM,YAAY,GAAG;QACnB,kBAAkB;QAClB,OAAO;QACP,eAAe;QACf,SAAS,CAAC,gBAAgB,CAAC;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,SAAS,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtF,OAAO;QACL,GAAG,OAAO;QACV,aAAa,EACX,+BAA+B,KAAK,CAAC,WAAW,CAAC,WAAW,IAAI,eAAe,IAAI;YACnF,iBAAiB,aAAa,eAAe,SAAS,EAAE;KAC3D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAc;IAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,wFAAwF;QACxF,kGAAkG;QAClG,MAAM,GAAG;YACP,MAAM,EAAE,IAAI,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;YAChC,WAAW,EAAE,IAAI;YACjB,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,IAAI;SACd,CAAC;QACF,sBAAsB,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5E,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAE1C,MAAM,CAAC,OAAO,GAAG,CAAC,KAAK,IAAI,EAAE;QAC3B,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,gBAAgB,KAAK,UAAU;YACxD,CAAC,CAAC,MAAM,gBAAgB,EAAE;YAC1B,CAAC,CAAC,MAAM,gBAAgB,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,WAAW,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,QAAQ,GAAG;YACf,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,eAAe,EAAE,WAAW,CAAC,eAAe;YAC5C,YAAY,EAAE,WAAW,CAAC,YAAY;SACvC,CAAC;QACF,MAAM,UAAU,GAAI,WAAqC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC;QAChF,MAAM,CAAC,WAAW,GAAG,QAAQ,CAAC;QAC9B,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,CACzB,GAAG,GAAG,2BAA2B,EACjC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,iCAAiC,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CACvF,CAAC;QACF,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QAChB,IAAI,MAAM;YAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,qCAAqC;IAC5C,OAAO;QACL,EAAE,EAAE,qBAA8B;QAClC,KAAK,EAAE,qBAAqB;QAC5B,mBAAmB,EAAE,KAAK;QAC1B,qBAAqB,EAAE,IAAI;QAC3B,0BAA0B,EAAE,IAAI;QAChC,UAAU,EAAE,8BAA8B,EAAE;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,8BAA8B;IACrC,OAAO,qBAAqB,EAAE,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACpF,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAuC;IACtE,IAAI,KAAK,CAAC,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QAC7C,MAAM,aAAa,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,aAAa,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;QACnC,MAAM,aAAa,CAAC,wEAAwE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,uEAAuE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,IAAI,EAAE,CAAC;IACxF,MAAM,cAAc,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC;IAC3G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,EAAE,EAAE,CAAC;QAClF,MAAM,aAAa,CACjB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE;YACjD,0BAA0B,MAAM,gBAAgB;QAClD,YAAY,EAAE,mBAAmB,CAC/B,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAC7D;QACD,MAAM,EAAE,mBAAmB,CACzB,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,cAAc,CAC1E;QACD,QAAQ,EAAE,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACzD,cAAc,EACZ,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC;YACrD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC5B,SAAS;QACX,gBAAgB,EACd,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,iBAAiB;QACtE,wBAAwB,EAAE,cAAc;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,MAAM,GAAG,CACb,OAAO,CAAC,GAAG,CAAC,2BAA2B;QACvC,OAAO,CAAC,GAAG,CAAC,UAAU;QACtB,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAC/B,EAAE,IAAI,EAAE,CAAC;IACV,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,aAAa,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,aAAa,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACxD,CAAC;IAED,OAAO;QACL,aAAa;QACb,MAAM,EAAE,MAAM,IAAI,IAAI;QACtB,YAAY,EAAE,YAAY,IAAI,IAAI;QAClC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC;QACnC,iBAAiB,EAAE,oCAAoC,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,oCAAoC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,EAAE,CAAC;QACvF,OAAO,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,CAAC;QACxF,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACzC,CAAC;IACD,IACE,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,IAAI,EAAE;QAC1D,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,EAAE,EACtD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,EAAE,CAAC;QAC3F,OAAO,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,2BAA2B;IAClC,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;IAC1C,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE;QAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE;QAC9B,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,CAAC;IACzC,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,IAAI,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,IAAI,EAAE,CAAC;IAErE,IAAI,SAAS,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvC,MAAM,aAAa,CACjB,4DAA4D,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,aAAa,CACjB,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,aAAa,CACjB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,aAAa,CACjB,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,IAAI,EAAE,CAAC;IACxF,MAAM,cAAc,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,mCAAmC,CAAC;IAC3G,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,cAAc,GAAG,CAAC,IAAI,cAAc,GAAG,EAAE,EAAE,CAAC;QAClF,MAAM,aAAa,CACjB,+EAA+E,CAChF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM;QACN,QAAQ,EACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE;YACjD,0BAA0B,MAAM,gBAAgB;QAClD,YAAY;QACZ,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,cAAc,CAAC;QAC9F,QAAQ;QACR,cAAc,EACZ,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,IAAI,EAAE;YACpD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE;YAC5B,SAAS;QACX,gBAAgB,EACd,OAAO,CAAC,GAAG,CAAC,mCAAmC,EAAE,IAAI,EAAE,IAAI,iBAAiB;QAC9E,wBAAwB,EAAE,cAAc;KACzC,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,OAAO,CAAC,uBAAuB,EAAE,GAAG,CAAC;SACrC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;SACpB,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA+B,EAC/B,OAAkD;IAElD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,aAAa,CAAC,yEAAyE,CAAC,CAAC;IACjG,CAAC;IACD,OAAO;QACL,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC;QACxC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC;QACtC,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC;KACvC;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,MAA+B,EAC/B,OAAkD;IAElD,OAAO,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,QAAQ,GAAG,qDAAqD,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrF,OAAO,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;AAClC,CAAC;AAED,SAAS,4BAA4B,CACnC,MAA+B,EAC/B,OAAkD,EAClD,WAAsC;IAEtC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,YAAY,GAAG,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,OAAO,IAAI,MAAM,CAAC,IAAI,YAAY,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,2BAA2B,CAClC,MAA+B,EAC/B,WAAsC;IAEtC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,eAAe,GAAG;QACtB,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC;KACzC;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACrD,OAAO,UAAU,KAAK,eAAe,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,eAAe,GAAG,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,oCAAoC,CAC3C,MAA+B,EAC/B,WAAmB;IAEnB,IAAI,CAAC,2BAA2B,CAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO;IAC9D,MAAM,aAAa,CACjB,kFAAkF,CACnF,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAIhC;IACC,IAAI,sBAAsB,GAAG,KAAK,CAAC;IACnC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAI,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;YACxB,sBAAsB,GAAG,IAAI,CAAC;QAChC,CAAC;QACD,IAAI,WAAW,EAAE,IAAI,EAAE,IAAI,4BAA4B,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YAClG,OAAO,WAAW,CAAC,IAAI,EAAE,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,IAAI,sBAAsB,EAAE,CAAC;QAC3B,MAAM,aAAa,CACjB,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAA+B,EAC/B,OAA+C;IAE/C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IACxB,OAAO;QACL,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,UAAU,EAAE;QACjD,EAAE,GAAG,EAAE,yBAAyB,EAAE,KAAK,EAAE,MAAM,CAAC,gBAAgB,EAAE;QAClE,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE;QAC7D,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;QACxD,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;QACxD,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE;KAC9D,CAAC;AACJ,CAAC;AAED,SAAS,+BAA+B,CACtC,WAAmB,EACnB,kBAAiC;IAEjC,MAAM,qBAAqB,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACjD,MAAM,4BAA4B,GAAG,kBAAkB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;IACxE,MAAM,WAAW,GAAG,SAAS,CAC3B,GAAG,0BAA0B,IAAI,qBAAqB,IAAI,4BAA4B,IAAI,EAAE,EAAE,CAC/F,CAAC;IACF,OAAO;QACL,QAAQ,EAAE;YACR,MAAM,EAAE,0BAA0B;YAClC,QAAQ,EAAE,qBAAqB;YAC/B,SAAS,EAAE,4BAA4B;YACvC,MAAM,EAAE,oBAAoB;SAC7B;QACD,WAAW,EAAE,WAAW;QACxB,iBAAiB,EAAE,WAAW;QAC9B,WAAW,EAAE,qBAAqB;QAClC,kBAAkB,EAAE,4BAA4B;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB,EAAE,SAAwB;IACvE,OAAO;QACL,MAAM,EAAE,0BAA0B;QAClC,QAAQ;QACR,SAAS;QACT,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyC;IACjE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAuC;IACzE,OAAO;QACL,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC;QAChD,gBAAgB,EAAE,gBAAgB,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1D,eAAe,EAAE,gBAAgB,CAAC,KAAK,CAAC,eAAe,CAAC;QACxD,WAAW,EAAE,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC;QAChD,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC;QAC1C,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAClC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAkC;IACrE,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,0BAA0B;QAC3C,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC;QACjE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,CAAC,EACrE,CAAC;QACD,OAAO,KAAkC,CAAC;IAC5C,CAAC;IACD,MAAM,aAAa,CAAC,sCAAsC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,wBAAwB,CAAC,OAAe;IAC/C,IAAI,wCAAwC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9E,IAAI,qCAAqC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5E,IAAI,qGAAqG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxH,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,6DAA6D,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,WAAW,CAAC;IACpG,IAAI,sDAAsD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACnG,IAAI,yDAAyD,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC3G,OAAO,gBAAgB,CAAC;AAC1B,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAmC;IACjE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,wFAAwF,CAAC;QAClG,KAAK,WAAW;YACd,OAAO,gEAAgE,CAAC;QAC1E,KAAK,WAAW;YACd,OAAO,0DAA0D,CAAC;QACpE,KAAK,UAAU;YACb,OAAO,wEAAwE,CAAC;QAClF,KAAK,iBAAiB;YACpB,OAAO,2CAA2C,CAAC;QACrD,KAAK,sBAAsB;YACzB,OAAO,+CAA+C,CAAC;QACzD,KAAK,gBAAgB,CAAC;QACtB;YACE,OAAO,qCAAqC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB,EAAE,KAAc;IAC1D,MAAM,UAAU,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,IAAI,yBAAyB,CAAC;QAClC,IAAI;QACJ,QAAQ,EAAE,qBAAqB;QAC/B,SAAS;QACT,OAAO,EAAE,sBAAsB,CAAC,IAAI,CAAC;QACrC,UAAU;QACV,KAAK,EAAE,KAAK;KACb,CAAC,CAAC;AACL,CAAC;AAED,MAAM,4BAA4B;IAGH;IAFZ,QAAQ,CAAM;IAE/B,YAA6B,MAA+B;QAA/B,WAAM,GAAN,MAAM,CAAyB;QAC1D,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,YAAY,CAAC,KAMZ;QACC,OAAO,IAAI,CAAC,IAAI,CAIb,cAAc,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,cAAc,CAAC,KAId;QACC,OAAO,IAAI,CAAC,IAAI,CAIb,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,cAAc,CAAC,KAId;QACC,OAAO,IAAI,CAAC,IAAI,CAKb,gBAAgB,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IAED,YAAY,CAAC,KAGZ;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,wBAAwB,CAAC,KAKxB;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,WAAW,CAAC,KAQX;QACC,OAAO,IAAI,CAAC,IAAI,CAGb,aAAa,EAAE,KAAK,CAAC,CAAC;IAC3B,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,SAAiB,EAAE,OAAgC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,4BAA4B,CAAC;YAC3C,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC1B,SAAS;YACT,IAAI;YACJ,WAAW;SACZ,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC1C,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI;YACJ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,sCAAsC,CAAC;SACpE,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAA6B,CAAC,CAAC,CAAC,EAAE,CAAC;QAEzE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,QAAQ,CAAC,UAAU,IAAI,cAAc,CAAC,CAAC;YAC1G,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;YACjE,MAAM,UAAU,GAAG,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;YACzC,MAAM,UAAU,GAAG,wBAAwB,CAAC,UAAU,CAAC,CAAC;YACxD,MAAM,IAAI,yBAAyB,CAAC;gBAClC,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,qBAAqB;gBAC/B,SAAS;gBACT,OAAO,EAAE,sBAAsB,CAAC,UAAU,CAAC;gBAC3C,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QAED,OAAO,MAAW,CAAC;IACrB,CAAC;CACF;AAED,MAAM,UAAU,+BAA+B,CAC7C,OAGC;IAED,SAAS,aAAa,CAAC,cAAwD;QAC7E,IAAI,cAAc;YAAE,OAAO,uBAAuB,CAAC,cAAc,CAAC,CAAC;QACnE,OAAO,OAAO,EAAE,MAAM,IAAI,2BAA2B,EAAE,CAAC;IAC1D,CAAC;IAED,SAAS,cAAc,CAAC,MAA+B;QACrD,OAAO,OAAO,EAAE,OAAO,IAAI,IAAI,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,UAAU,cAAc,CAC3B,KAIC;QAED,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,KAAK,EAAE,cAAc,KAAK,eAAe,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,KAIC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1C,IACE,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE;gBACrC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE,EACzC,CAAC;gBACD,QAAQ,CAAC,IAAI,CACX,8KAA8K,CAC/K,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,qBAAqB;gBAC/B,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;gBAC3C,OAAO,EACL,2JAA2J;gBAC7J,QAAQ;gBACR,OAAO,EAAE;oBACP,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAC1C,gBAAgB,EAAE,2CAA2C;oBAC7D,yBAAyB,EAAE,SAAS,CAAC,iBAAiB;iBACvD;gBACD,cAAc,EAAE;oBACd,gEAAgE;oBAChE,yGAAyG;iBAC1G;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;YAC1C,MAAM,qBAAqB,GAAG,KAAK,EAAE,cAAc,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC;gBAClH,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACZ,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,aAAa,GAAG,KAAK,EAAE,cAAc,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;YAC9F,OAAO;gBACL,QAAQ,EAAE,qBAAqB;gBAC/B,MAAM,EAAE,MAAM;gBACd,OAAO,EACL,aAAa,CAAC,MAAM,GAAG,CAAC;oBACtB,CAAC,CAAC,sDAAsD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACnF,CAAC,CAAC,KAAK,YAAY,KAAK;wBACtB,CAAC,CAAC,KAAK,CAAC,OAAO;wBACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;gBACrB,QAAQ,EAAE;oBACR,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;wBAC1B,CAAC,CAAC,CAAC,oDAAoD,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;wBACnF,CAAC,CAAC,EAAE,CAAC;oBACP,8BAA8B;oBAC9B,8BAA8B;oBAC9B,oGAAoG;iBACrG;gBACD,OAAO,EAAE;oBACP,aAAa;oBACb,sBAAsB,EAAE,KAAK,EAAE,cAAc;wBAC3C,CAAC,CAAC,CAAC,QAAQ,CAAC;wBACZ,CAAC,CAAC;4BACE,8DAA8D;4BAC9D,oCAAoC;4BACpC,iCAAiC;yBAClC;oBACL,sBAAsB,EAAE;wBACtB,6BAA6B;wBAC7B,kCAAkC;wBAClC,qCAAqC;wBACrC,+BAA+B;wBAC/B,2CAA2C;qBAC5C;oBACD,gBAAgB,EAAE,2CAA2C;oBAC7D,yBAAyB,EAAE,SAAS,CAAC,iBAAiB;iBACvD;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,qBAAqB;QACzB,UAAU;YACR,OAAO,qCAAqC,EAAE,CAAC;QACjD,CAAC;QACD,cAAc;QACd,KAAK,CAAC,YAAY,CAAC,KAAK;YACtB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAE7D,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG;oBAClB,IAAI,EAAE,QAAQ;oBACd,YAAY,EAAE,KAAK,CAAC,KAAK;oBACzB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS;oBACtF,IAAI,EAAE,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC;iBACpD,CAAC;gBACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC;oBACzC,GAAG,WAAW;iBACf,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;gBACnE,OAAO;oBACL,QAAQ,EAAE,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;oBAC9E,WAAW;oBACX,iBAAiB,EAAE,WAAW;oBAC9B,WAAW,EAAE,kBAAkB;oBAC/B,kBAAkB,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;iBAC9C,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,QAAQ,GAAG,uBAAuB,CAAC;gBACvC,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,YAAY,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;aAClC,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC3C,QAAQ,EAAE,QAAQ;oBAClB,YAAY,EAAE,KAAK,CAAC,KAAK;oBACzB,aAAa,EAAE,CAAC,8BAA8B,CAAC;iBAChD,CAAC,CAAC;gBACH,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,IAAI,IAAI,QAAQ,CAAC;gBACnE,OAAO;oBACL,QAAQ,EAAE,qBAAqB,CAAC,kBAAkB,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC;oBAC9E,WAAW;oBACX,iBAAiB,EAAE,WAAW;oBAC9B,WAAW,EAAE,kBAAkB;oBAC/B,kBAAkB,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;iBAC9C,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,KAAK;YAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,oCAAoC,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;YAChE,OAAO,+BAA+B,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,kBAAkB,IAAI,IAAI,CAAC,CAAC;QAC9F,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,KAAK;YAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAClC,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC/C,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC;gBACxD,CAAC,CAAC,EAAE,CAAC;YAET,IAAI,CAAC;gBACH,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAClE,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC;oBACvC,UAAU,EAAE,QAAQ;oBACpB,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,SAAS;oBAC/C,sBAAsB,EAAE,KAAK;oBAC7B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;iBAC/D,CAAC,CAAC;gBACH,OAAO;oBACL,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI;oBACnC,OAAO,EAAE,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;yBAC/B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;yBACnD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACf,WAAW,EAAE,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE;wBAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,IAAI,EAAE;wBACnC,kBAAkB,EAAE,IAAI;wBACxB,QAAQ,EAAE,0BAA0B,CAAC,KAAK,CAAC;qBAC5C,CAAC,CAAC;iBACN,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,KAAK;YACxB,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7D,MAAM,QAAQ,GACZ,QAAQ,CAAC,MAAM,KAAK,SAAS;gBAC3B,CAAC,CAAC,uBAAuB,CAAC;oBACtB,MAAM;oBACN,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,YAAY,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;iBACrD,CAAC;gBACJ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAE/C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC;oBAC5C,QAAQ,EAAE,QAAQ;oBAClB,SAAS,EAAE,KAAK,CAAC,kBAAkB,IAAI,QAAQ,CAAC,SAAS,IAAI,SAAS;oBACtE,YAAY,EACV,KAAK,CAAC,kBAAkB,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB;iBACrF,CAAC,CAAC;gBACH,IAAI,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;oBAC9C,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC5C,CAAC;gBACD,OAAO,QAAQ,CAAC,YAAY,CAAC;YAC/B,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,KAAK;YACzB,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;gBAClD,CAAC,CAAC,2BAA2B,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC7C,CAAC,CAAC,IAAI,CAAC;YAEX,IAAI,QAAQ,EAAE,MAAM,KAAK,SAAS;gBAAE,OAAO;YAE3C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YACnD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,uBAAuB,CAAC;gBACvC,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,YAAY,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC;aACrD,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC7B,IAAI,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,wBAAwB,EAAE,CAAC;wBAC3D,MAAM,OAAO,CAAC,wBAAwB,CAAC;4BACrC,QAAQ,EAAE,QAAQ;4BAClB,YAAY,EAAE,8BAA8B;4BAC5C,mBAAmB,EAAE,QAAQ,CAAC,SAAS;yBACxC,CAAC,CAAC;oBACL,CAAC;oBACD,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,CAAC,YAAY,CAAC;oBACzB,QAAQ,EAAE,QAAQ;oBAClB,oBAAoB,EAAE,MAAM,CAAC,wBAAwB;iBACtD,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACnG,CAAC;QACH,CAAC;QACD,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,+BAA+B,EAAE,CAAC"}

package/dist/secrets/configured-provider.d.ts

@@ -0,0 +1,3 @@
+import { type SecretProvider } from "@dealdesk/shared";
+export declare function getConfiguredSecretProvider(): SecretProvider;
+//# sourceMappingURL=configured-provider.d.ts.map

package/dist/secrets/configured-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configured-provider.d.ts","sourceRoot":"","sources":["../../src/secrets/configured-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEzE,wBAAgB,2BAA2B,IAAI,cAAc,CAK5D"}

package/dist/secrets/configured-provider.js

@@ -0,0 +1,8 @@
+import { SECRET_PROVIDERS } from "@dealdesk/shared";
+export function getConfiguredSecretProvider() {
+    const configuredProvider = process.env.DEALDESK_SECRETS_PROVIDER;
+    return configuredProvider && SECRET_PROVIDERS.includes(configuredProvider)
+        ? configuredProvider
+        : "local_encrypted";
+}
+//# sourceMappingURL=configured-provider.js.map

package/dist/secrets/configured-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configured-provider.js","sourceRoot":"","sources":["../../src/secrets/configured-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAuB,MAAM,kBAAkB,CAAC;AAEzE,MAAM,UAAU,2BAA2B;IACzC,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IACjE,OAAO,kBAAkB,IAAI,gBAAgB,CAAC,QAAQ,CAAC,kBAAoC,CAAC;QAC1F,CAAC,CAAC,kBAAoC;QACtC,CAAC,CAAC,iBAAiB,CAAC;AACxB,CAAC"}

package/dist/secrets/external-stub-providers.d.ts

@@ -0,0 +1,5 @@
+import type { SecretProviderModule } from "./types.js";
+export declare const awsSecretsManagerProvider: SecretProviderModule;
+export declare const gcpSecretManagerProvider: SecretProviderModule;
+export declare const vaultProvider: SecretProviderModule;
+//# sourceMappingURL=external-stub-providers.d.ts.map

package/dist/secrets/external-stub-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-stub-providers.d.ts","sourceRoot":"","sources":["../../src/secrets/external-stub-providers.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAyB,oBAAoB,EAAE,MAAM,YAAY,CAAC;AA6E9E,eAAO,MAAM,yBAAyB,sBAGrC,CAAC;AACF,eAAO,MAAM,wBAAwB,sBAGpC,CAAC;AACF,eAAO,MAAM,aAAa,sBAAkD,CAAC"}

package/dist/secrets/external-stub-providers.js

@@ -0,0 +1,71 @@
+import { unprocessable } from "../errors.js";
+import { createHash } from "node:crypto";
+function unavailableProvider(id, label) {
+    function externalFingerprint(externalRef, providerVersionRef) {
+        return createHash("sha256")
+            .update(`${id}:${externalRef}:${providerVersionRef ?? ""}`)
+            .digest("hex");
+    }
+    function prepareExternalReference(input) {
+        const externalRef = input.externalRef.trim();
+        const providerVersionRef = input.providerVersionRef?.trim() || null;
+        const fingerprint = externalFingerprint(externalRef, providerVersionRef);
+        return {
+            material: {
+                scheme: "external_reference_v1",
+                provider: id,
+                externalRef,
+                providerVersionRef,
+            },
+            valueSha256: fingerprint,
+            fingerprintSha256: fingerprint,
+            externalRef,
+            providerVersionRef,
+        };
+    }
+    return {
+        id,
+        descriptor() {
+            return {
+                id,
+                label,
+                requiresExternalRef: true,
+                supportsManagedValues: false,
+                supportsExternalReferences: true,
+                configured: false,
+            };
+        },
+        async validateConfig() {
+            return { ok: false, warnings: [`${id} provider is not configured in this deployment`] };
+        },
+        async createSecret() {
+            throw unprocessable(`${id} provider is not configured for DealDesk-managed values`);
+        },
+        async createVersion() {
+            throw unprocessable(`${id} provider is not configured for DealDesk-managed values`);
+        },
+        async linkExternalSecret(input) {
+            return prepareExternalReference(input);
+        },
+        async resolveVersion() {
+            throw unprocessable(`${id} provider is not configured in this deployment`);
+        },
+        async deleteOrArchive() {
+            // External references are metadata-only in DealDesk for unconfigured providers.
+        },
+        async healthCheck() {
+            return {
+                provider: id,
+                status: "warn",
+                message: `${id} provider is available for external references but not configured for runtime resolution`,
+                warnings: [
+                    "Linked external references can be stored as metadata, but runtime resolution will fail until this provider is configured.",
+                ],
+            };
+        },
+    };
+}
+export const awsSecretsManagerProvider = unavailableProvider("aws_secrets_manager", "AWS Secrets Manager");
+export const gcpSecretManagerProvider = unavailableProvider("gcp_secret_manager", "GCP Secret Manager");
+export const vaultProvider = unavailableProvider("vault", "HashiCorp Vault");
+//# sourceMappingURL=external-stub-providers.js.map

package/dist/secrets/external-stub-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-stub-providers.js","sourceRoot":"","sources":["../../src/secrets/external-stub-providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,SAAS,mBAAmB,CAC1B,EAA0D,EAC1D,KAAa;IAEb,SAAS,mBAAmB,CAAC,WAAmB,EAAE,kBAAiC;QACjF,OAAO,UAAU,CAAC,QAAQ,CAAC;aACxB,MAAM,CAAC,GAAG,EAAE,IAAI,WAAW,IAAI,kBAAkB,IAAI,EAAE,EAAE,CAAC;aAC1D,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IAED,SAAS,wBAAwB,CAAC,KAGjC;QACC,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,kBAAkB,GAAG,KAAK,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;QACpE,MAAM,WAAW,GAAG,mBAAmB,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;QACzE,OAAO;YACL,QAAQ,EAAE;gBACR,MAAM,EAAE,uBAAuB;gBAC/B,QAAQ,EAAE,EAAE;gBACZ,WAAW;gBACX,kBAAkB;aACnB;YACD,WAAW,EAAE,WAAW;YACxB,iBAAiB,EAAE,WAAW;YAC9B,WAAW;YACX,kBAAkB;SACnB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,EAAE;QACF,UAAU;YACR,OAAO;gBACL,EAAE;gBACF,KAAK;gBACL,mBAAmB,EAAE,IAAI;gBACzB,qBAAqB,EAAE,KAAK;gBAC5B,0BAA0B,EAAE,IAAI;gBAChC,UAAU,EAAE,KAAK;aAClB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,GAAG,EAAE,gDAAgD,CAAC,EAAE,CAAC;QAC1F,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,MAAM,aAAa,CAAC,GAAG,EAAE,yDAAyD,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,CAAC,aAAa;YACjB,MAAM,aAAa,CAAC,GAAG,EAAE,yDAAyD,CAAC,CAAC;QACtF,CAAC;QACD,KAAK,CAAC,kBAAkB,CAAC,KAAK;YAC5B,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,cAAc;YAClB,MAAM,aAAa,CAAC,GAAG,EAAE,gDAAgD,CAAC,CAAC;QAC7E,CAAC;QACD,KAAK,CAAC,eAAe;YACnB,gFAAgF;QAClF,CAAC;QACD,KAAK,CAAC,WAAW;YACf,OAAO;gBACL,QAAQ,EAAE,EAAE;gBACZ,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,GAAG,EAAE,0FAA0F;gBACxG,QAAQ,EAAE;oBACR,2HAA2H;iBAC5H;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAAmB,CAC1D,qBAAqB,EACrB,qBAAqB,CACtB,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CACzD,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;AACF,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC"}

package/dist/secrets/local-encrypted-provider.d.ts

@@ -0,0 +1,3 @@
+import type { SecretProviderModule } from "./types.js";
+export declare const localEncryptedProvider: SecretProviderModule;
+//# sourceMappingURL=local-encrypted-provider.d.ts.map

package/dist/secrets/local-encrypted-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-encrypted-provider.d.ts","sourceRoot":"","sources":["../../src/secrets/local-encrypted-provider.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAGV,oBAAoB,EAGrB,MAAM,YAAY,CAAC;AA6NpB,eAAO,MAAM,sBAAsB,EAAE,oBA2CpC,CAAC"}

package/dist/secrets/local-encrypted-provider.js

@@ -0,0 +1,244 @@
+import { createCipheriv, createDecipheriv, createHash, randomBytes } from "node:crypto";
+import { chmodSync, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { resolveDefaultSecretsKeyFilePath } from "../home-paths.js";
+import { badRequest } from "../errors.js";
+function resolveMasterKeyFilePath() {
+    const fromEnv = process.env.DEALDESK_SECRETS_MASTER_KEY_FILE;
+    if (fromEnv && fromEnv.trim().length > 0)
+        return path.resolve(fromEnv.trim());
+    return resolveDefaultSecretsKeyFilePath();
+}
+function decodeMasterKey(raw) {
+    const trimmed = raw.trim();
+    if (!trimmed)
+        return null;
+    if (/^[A-Fa-f0-9]{64}$/.test(trimmed)) {
+        return Buffer.from(trimmed, "hex");
+    }
+    try {
+        const decoded = Buffer.from(trimmed, "base64");
+        if (decoded.length === 32)
+            return decoded;
+    }
+    catch {
+        // ignored
+    }
+    if (Buffer.byteLength(trimmed, "utf8") === 32) {
+        return Buffer.from(trimmed, "utf8");
+    }
+    return null;
+}
+function loadOrCreateMasterKey() {
+    const envKeyRaw = process.env.DEALDESK_SECRETS_MASTER_KEY;
+    if (envKeyRaw && envKeyRaw.trim().length > 0) {
+        const fromEnv = decodeMasterKey(envKeyRaw);
+        if (!fromEnv) {
+            throw badRequest("Invalid DEALDESK_SECRETS_MASTER_KEY (expected 32-byte base64, 64-char hex, or raw 32-char string)");
+        }
+        return fromEnv;
+    }
+    const keyPath = resolveMasterKeyFilePath();
+    if (existsSync(keyPath)) {
+        enforceKeyFilePermissionsBestEffort(keyPath);
+        const raw = readFileSync(keyPath, "utf8");
+        const decoded = decodeMasterKey(raw);
+        if (!decoded) {
+            throw badRequest(`Invalid secrets master key at ${keyPath}`);
+        }
+        return decoded;
+    }
+    const dir = path.dirname(keyPath);
+    mkdirSync(dir, { recursive: true });
+    const generated = randomBytes(32);
+    writeFileSync(keyPath, generated.toString("base64"), { encoding: "utf8", mode: 0o600 });
+    try {
+        chmodSync(keyPath, 0o600);
+    }
+    catch {
+        // best effort
+    }
+    return generated;
+}
+function enforceKeyFilePermissionsBestEffort(keyPath) {
+    try {
+        const mode = statSync(keyPath).mode & 0o777;
+        if ((mode & 0o077) !== 0) {
+            chmodSync(keyPath, 0o600);
+        }
+    }
+    catch {
+        // best effort only; health checks surface persistent permission problems.
+    }
+}
+function sha256Hex(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function prepareManagedVersion(value) {
+    const masterKey = loadOrCreateMasterKey();
+    const valueSha256 = sha256Hex(value);
+    return {
+        material: encryptValue(masterKey, value),
+        valueSha256,
+        fingerprintSha256: valueSha256,
+        externalRef: null,
+    };
+}
+async function inspectLocalEncryptedHealth() {
+    const envKeyRaw = process.env.DEALDESK_SECRETS_MASTER_KEY;
+    if (envKeyRaw && envKeyRaw.trim().length > 0) {
+        if (!decodeMasterKey(envKeyRaw)) {
+            return {
+                provider: "local_encrypted",
+                status: "error",
+                message: "DEALDESK_SECRETS_MASTER_KEY is invalid; expected 32-byte base64, 64-char hex, or raw 32-char string",
+            };
+        }
+        return {
+            provider: "local_encrypted",
+            status: "ok",
+            message: "Local encrypted provider is using DEALDESK_SECRETS_MASTER_KEY",
+            backupGuidance: [
+                "Back up the configured master key separately from the database.",
+                "A restore needs both the database metadata and the same master key.",
+            ],
+            details: { keySource: "env" },
+        };
+    }
+    const keyPath = resolveMasterKeyFilePath();
+    if (!existsSync(keyPath)) {
+        return {
+            provider: "local_encrypted",
+            status: "warn",
+            message: `Secrets key file does not exist yet: ${keyPath}`,
+            warnings: ["The first managed secret write will create this key file with 0600 permissions."],
+            backupGuidance: [
+                "Back up the key file together with database backups.",
+                "The database alone cannot restore local encrypted secret values.",
+            ],
+            details: { keySource: "file", keyFilePath: keyPath },
+        };
+    }
+    let mode = null;
+    try {
+        mode = statSync(keyPath).mode & 0o777;
+    }
+    catch (err) {
+        return {
+            provider: "local_encrypted",
+            status: "error",
+            message: `Could not stat secrets key file: ${err instanceof Error ? err.message : String(err)}`,
+            details: { keySource: "file", keyFilePath: keyPath },
+        };
+    }
+    try {
+        const raw = readFileSync(keyPath, "utf8");
+        if (!decodeMasterKey(raw)) {
+            return {
+                provider: "local_encrypted",
+                status: "error",
+                message: `Invalid key material in ${keyPath}`,
+                details: { keySource: "file", keyFilePath: keyPath },
+            };
+        }
+    }
+    catch (err) {
+        return {
+            provider: "local_encrypted",
+            status: "error",
+            message: `Could not read secrets key file: ${err instanceof Error ? err.message : String(err)}`,
+            details: { keySource: "file", keyFilePath: keyPath },
+        };
+    }
+    const warnings = mode !== null && (mode & 0o077) !== 0
+        ? [`Secrets key file permissions are ${mode.toString(8)}; run chmod 600 ${keyPath}`]
+        : [];
+    return {
+        provider: "local_encrypted",
+        status: warnings.length > 0 ? "warn" : "ok",
+        message: `Local encrypted provider configured with key file ${keyPath}`,
+        warnings,
+        backupGuidance: [
+            "Back up the key file together with database backups.",
+            "The database alone cannot restore local encrypted secret values.",
+        ],
+        details: { keySource: "file", keyFilePath: keyPath },
+    };
+}
+function encryptValue(masterKey, value) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", masterKey, iv);
+    const ciphertext = Buffer.concat([cipher.update(value, "utf8"), cipher.final()]);
+    const tag = cipher.getAuthTag();
+    return {
+        scheme: "local_encrypted_v1",
+        iv: iv.toString("base64"),
+        tag: tag.toString("base64"),
+        ciphertext: ciphertext.toString("base64"),
+    };
+}
+function decryptValue(masterKey, material) {
+    const iv = Buffer.from(material.iv, "base64");
+    const tag = Buffer.from(material.tag, "base64");
+    const ciphertext = Buffer.from(material.ciphertext, "base64");
+    const decipher = createDecipheriv("aes-256-gcm", masterKey, iv);
+    decipher.setAuthTag(tag);
+    const plain = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+    return plain.toString("utf8");
+}
+function asLocalEncryptedMaterial(value) {
+    if (value &&
+        typeof value === "object" &&
+        value.scheme === "local_encrypted_v1" &&
+        typeof value.iv === "string" &&
+        typeof value.tag === "string" &&
+        typeof value.ciphertext === "string") {
+        return value;
+    }
+    throw badRequest("Invalid local_encrypted secret material");
+}
+export const localEncryptedProvider = {
+    id: "local_encrypted",
+    descriptor() {
+        return {
+            id: "local_encrypted",
+            label: "Local encrypted (default)",
+            requiresExternalRef: false,
+            supportsManagedValues: true,
+            supportsExternalReferences: false,
+            configured: true,
+        };
+    },
+    async validateConfig(input) {
+        const warnings = [];
+        if (input?.deploymentMode === "authenticated" && input.strictMode !== true) {
+            warnings.push("Strict secret mode should be enabled for authenticated deployments");
+        }
+        const health = await inspectLocalEncryptedHealth();
+        if (health.status === "error") {
+            throw badRequest(health.message);
+        }
+        warnings.push(...(health.warnings ?? []));
+        return { ok: true, warnings };
+    },
+    async createSecret(input) {
+        return prepareManagedVersion(input.value);
+    },
+    async createVersion(input) {
+        return prepareManagedVersion(input.value);
+    },
+    async linkExternalSecret() {
+        throw badRequest("local_encrypted does not support external reference secrets");
+    },
+    async resolveVersion(input) {
+        const masterKey = loadOrCreateMasterKey();
+        return decryptValue(masterKey, asLocalEncryptedMaterial(input.material));
+    },
+    async deleteOrArchive() {
+        // Secret metadata deletion is handled in DealDesk DB; the local key is shared and must remain.
+    },
+    async healthCheck() {
+        return inspectLocalEncryptedHealth();
+    },
+};
+//# sourceMappingURL=local-encrypted-provider.js.map

package/dist/secrets/local-encrypted-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-encrypted-provider.js","sourceRoot":"","sources":["../../src/secrets/local-encrypted-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gCAAgC,EAAE,MAAM,kBAAkB,CAAC;AAQpE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAS1C,SAAS,wBAAwB;IAC/B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gCAAgC,CAAC;IAC7D,IAAI,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,OAAO,gCAAgC,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,eAAe,CAAC,GAAW;IAClC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,OAAO,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,UAAU;IACZ,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,qBAAqB;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC1D,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,UAAU,CACd,mGAAmG,CACpG,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAC3C,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,mCAAmC,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,UAAU,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAClC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAClC,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC;QACH,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mCAAmC,CAAC,OAAe;IAC1D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;IAC5E,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACrC,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC;QACxC,WAAW;QACX,iBAAiB,EAAE,WAAW;QAC9B,WAAW,EAAE,IAAI;KAClB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,2BAA2B;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC;IAC1D,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,MAAM,EAAE,OAAO;gBACf,OAAO,EACL,qGAAqG;aACxG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,+DAA+D;YACxE,cAAc,EAAE;gBACd,iEAAiE;gBACjE,qEAAqE;aACtE;YACD,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;SAC9B,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,wBAAwB,EAAE,CAAC;IAC3C,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,wCAAwC,OAAO,EAAE;YAC1D,QAAQ,EAAE,CAAC,iFAAiF,CAAC;YAC7F,cAAc,EAAE;gBACd,sDAAsD;gBACtD,kEAAkE;aACnE;YACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,IAAI,CAAC;QACH,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;IACxC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC/F,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,QAAQ,EAAE,iBAAiB;gBAC3B,MAAM,EAAE,OAAO;gBACf,OAAO,EAAE,2BAA2B,OAAO,EAAE;gBAC7C,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE;aACrD,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,oCAAoC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;YAC/F,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE;SACrD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GACZ,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,CAAC,oCAAoC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,OAAO,EAAE,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC;IACT,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC3C,OAAO,EAAE,qDAAqD,OAAO,EAAE;QACvE,QAAQ;QACR,cAAc,EAAE;YACd,sDAAsD;YACtD,kEAAkE;SACnE;QACD,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAa;IACpD,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjF,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IAChC,OAAO;QACL,MAAM,EAAE,oBAAoB;QAC5B,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACzB,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC3B,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,QAAgC;IACvE,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAChE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAkC;IAClE,IACE,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,oBAAoB;QACrC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAC5B,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;QAC7B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,EACpC,CAAC;QACD,OAAO,KAA+B,CAAC;IACzC,CAAC;IACD,MAAM,UAAU,CAAC,yCAAyC,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAyB;IAC1D,EAAE,EAAE,iBAAiB;IACrB,UAAU;QACR,OAAO;YACL,EAAE,EAAE,iBAAiB;YACrB,KAAK,EAAE,2BAA2B;YAClC,mBAAmB,EAAE,KAAK;YAC1B,qBAAqB,EAAE,IAAI;YAC3B,0BAA0B,EAAE,KAAK;YACjC,UAAU,EAAE,IAAI;SACjB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,KAAK;QACxB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,KAAK,EAAE,cAAc,KAAK,eAAe,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,2BAA2B,EAAE,CAAC;QACnD,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,KAAK;QACtB,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,KAAK;QACvB,OAAO,qBAAqB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK,CAAC,kBAAkB;QACtB,MAAM,UAAU,CAAC,6DAA6D,CAAC,CAAC;IAClF,CAAC;IACD,KAAK,CAAC,cAAc,CAAC,KAAK;QACxB,MAAM,SAAS,GAAG,qBAAqB,EAAE,CAAC;QAC1C,OAAO,YAAY,CAAC,SAAS,EAAE,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,CAAC,eAAe;QACnB,+FAA+F;IACjG,CAAC;IACD,KAAK,CAAC,WAAW;QACf,OAAO,2BAA2B,EAAE,CAAC;IACvC,CAAC;CACF,CAAC"}

package/dist/secrets/provider-registry.d.ts

@@ -0,0 +1,6 @@
+import type { SecretProvider, SecretProviderDescriptor } from "@dealdesk/shared";
+import type { SecretProviderHealthCheck, SecretProviderModule } from "./types.js";
+export declare function getSecretProvider(id: SecretProvider): SecretProviderModule;
+export declare function listSecretProviders(): SecretProviderDescriptor[];
+export declare function checkSecretProviders(): Promise<SecretProviderHealthCheck[]>;
+//# sourceMappingURL=provider-registry.d.ts.map

package/dist/secrets/provider-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../src/secrets/provider-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAOjF,OAAO,KAAK,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAclF,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,cAAc,GAAG,oBAAoB,CAI1E;AAED,wBAAgB,mBAAmB,IAAI,wBAAwB,EAAE,CAEhE;AAED,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC,CAEjF"}

package/dist/secrets/provider-registry.js

@@ -0,0 +1,24 @@
+import { awsSecretsManagerProvider } from "./aws-secrets-manager-provider.js";
+import { localEncryptedProvider } from "./local-encrypted-provider.js";
+import { gcpSecretManagerProvider, vaultProvider, } from "./external-stub-providers.js";
+import { unprocessable } from "../errors.js";
+const providers = [
+    localEncryptedProvider,
+    awsSecretsManagerProvider,
+    gcpSecretManagerProvider,
+    vaultProvider,
+];
+const providerById = new Map(providers.map((provider) => [provider.id, provider]));
+export function getSecretProvider(id) {
+    const provider = providerById.get(id);
+    if (!provider)
+        throw unprocessable(`Unsupported secret provider: ${id}`);
+    return provider;
+}
+export function listSecretProviders() {
+    return providers.map((provider) => provider.descriptor());
+}
+export async function checkSecretProviders() {
+    return Promise.all(providers.map((provider) => provider.healthCheck()));
+}
+//# sourceMappingURL=provider-registry.js.map

package/dist/secrets/provider-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../src/secrets/provider-registry.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,EACL,wBAAwB,EACxB,aAAa,GACd,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,SAAS,GAA2B;IACxC,sBAAsB;IACtB,yBAAyB;IACzB,wBAAwB;IACxB,aAAa;CACd,CAAC;AAEF,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CACrD,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,EAAkB;IAClD,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,QAAQ;QAAE,MAAM,aAAa,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,OAAO,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAC1E,CAAC"}

package/dist/secrets/types.d.ts

@@ -0,0 +1,131 @@
+import type { SecretProvider, SecretProviderDescriptor } from "@dealdesk/shared";
+import type { DeploymentMode } from "@dealdesk/shared";
+export interface StoredSecretVersionMaterial {
+    [key: string]: unknown;
+}
+export type SecretProviderHealthStatus = "ok" | "warn" | "error";
+export interface SecretProviderHealthCheck {
+    provider: SecretProvider;
+    status: SecretProviderHealthStatus;
+    message: string;
+    warnings?: string[];
+    backupGuidance?: string[];
+    details?: Record<string, unknown>;
+}
+export interface SecretProviderValidationResult {
+    ok: boolean;
+    warnings: string[];
+}
+export interface PreparedSecretVersion {
+    material: StoredSecretVersionMaterial;
+    valueSha256: string;
+    fingerprintSha256?: string;
+    externalRef: string | null;
+    providerVersionRef?: string | null;
+}
+export interface RemoteSecretListEntry {
+    externalRef: string;
+    name: string;
+    providerVersionRef?: string | null;
+    metadata?: Record<string, unknown> | null;
+}
+export interface RemoteSecretListResult {
+    secrets: RemoteSecretListEntry[];
+    nextToken?: string | null;
+}
+export type SecretProviderClientErrorCode = "access_denied" | "throttled" | "not_found" | "conflict" | "invalid_request" | "provider_unavailable" | "provider_error";
+export interface SecretProviderClientErrorOptions {
+    code: SecretProviderClientErrorCode;
+    provider: SecretProvider;
+    operation: string;
+    message: string;
+    status?: number;
+    rawMessage?: string | null;
+    cause?: unknown;
+}
+export declare class SecretProviderClientError extends Error {
+    readonly code: SecretProviderClientErrorCode;
+    readonly provider: SecretProvider;
+    readonly operation: string;
+    readonly status: number;
+    readonly rawMessage: string | null;
+    constructor(options: SecretProviderClientErrorOptions);
+}
+export declare function isSecretProviderClientError(error: unknown): error is SecretProviderClientError;
+export interface SecretProviderRuntimeContext {
+    companyId: string;
+    secretId: string;
+    secretKey: string;
+    version: number;
+}
+export interface SecretProviderVaultRuntimeConfig {
+    id: string;
+    provider: SecretProvider;
+    status: string;
+    config: Record<string, unknown>;
+}
+export interface SecretProviderWriteContext {
+    companyId: string;
+    secretKey: string;
+    secretName: string;
+    version: number;
+}
+export interface SecretProviderModule {
+    id: SecretProvider;
+    descriptor(): SecretProviderDescriptor;
+    validateConfig(input?: {
+        deploymentMode?: DeploymentMode;
+        strictMode?: boolean;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<SecretProviderValidationResult>;
+    createSecret(input: {
+        value: string;
+        externalRef?: string | null;
+        context?: SecretProviderWriteContext;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<PreparedSecretVersion>;
+    createVersion(input: {
+        value: string;
+        externalRef?: string | null;
+        context?: SecretProviderWriteContext;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<PreparedSecretVersion>;
+    linkExternalSecret(input: {
+        externalRef: string;
+        providerVersionRef?: string | null;
+        context?: SecretProviderWriteContext;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<PreparedSecretVersion>;
+    listRemoteSecrets?(input: {
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+        query?: string | null;
+        nextToken?: string | null;
+        pageSize?: number;
+    }): Promise<RemoteSecretListResult>;
+    resolveVersion(input: {
+        material: StoredSecretVersionMaterial;
+        externalRef: string | null;
+        providerVersionRef?: string | null;
+        context?: SecretProviderRuntimeContext;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<string>;
+    rotate?(input: {
+        material: StoredSecretVersionMaterial;
+        externalRef: string | null;
+        providerVersionRef?: string | null;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<PreparedSecretVersion>;
+    deleteOrArchive(input: {
+        material?: StoredSecretVersionMaterial | null;
+        externalRef: string | null;
+        context?: SecretProviderWriteContext;
+        mode: "archive" | "delete";
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<void>;
+    healthCheck(input?: {
+        deploymentMode?: DeploymentMode;
+        strictMode?: boolean;
+        providerConfig?: SecretProviderVaultRuntimeConfig | null;
+    }): Promise<SecretProviderHealthCheck>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/secrets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/secrets/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,WAAW,2BAA2B;IAC1C,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC;AAEjE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,0BAA0B,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,8BAA8B;IAC7C,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,2BAA2B,CAAC;IACtC,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC3C;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,qBAAqB,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,MAAM,6BAA6B,GACrC,eAAe,GACf,WAAW,GACX,WAAW,GACX,UAAU,GACV,iBAAiB,GACjB,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,MAAM,WAAW,gCAAgC;IAC/C,IAAI,EAAE,6BAA6B,CAAC;IACpC,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEvB,OAAO,EAAE,gCAAgC;CAgBtD;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAE9F;AAED,MAAM,WAAW,4BAA4B;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gCAAgC;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,cAAc,CAAC;IACnB,UAAU,IAAI,wBAAwB,CAAC;IACvC,cAAc,CAAC,KAAK,CAAC,EAAE;QACrB,cAAc,CAAC,EAAE,cAAc,CAAC;QAChC,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC5C,YAAY,CAAC,KAAK,EAAE;QAClB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,aAAa,CAAC,KAAK,EAAE;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,kBAAkB,CAAC,KAAK,EAAE;QACxB,WAAW,EAAE,MAAM,CAAC;QACpB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,iBAAiB,CAAC,CAAC,KAAK,EAAE;QACxB,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;QACzD,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,cAAc,CAAC,KAAK,EAAE;QACpB,QAAQ,EAAE,2BAA2B,CAAC;QACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,OAAO,CAAC,EAAE,4BAA4B,CAAC;QACvC,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,MAAM,CAAC,CAAC,KAAK,EAAE;QACb,QAAQ,EAAE,2BAA2B,CAAC;QACtC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnC,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,eAAe,CAAC,KAAK,EAAE;QACrB,QAAQ,CAAC,EAAE,2BAA2B,GAAG,IAAI,CAAC;QAC9C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;QAC3B,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,WAAW,CAAC,KAAK,CAAC,EAAE;QAClB,cAAc,CAAC,EAAE,cAAc,CAAC;QAChC,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,cAAc,CAAC,EAAE,gCAAgC,GAAG,IAAI,CAAC;KAC1D,GAAG,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACxC"}