@decaf-ts/integrations 0.11.0 → 0.12.0

package/lib/cjs/secrets/model/ModelSecretService.cjs

@@ -1,16 +1,17 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ModelSecretService = void 0;
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-        r = Reflect.decorate(decorators, target, key, desc);
-    else
-        for (var i = decorators.length - 1; i >= 0; i--)
-            if (d = decorators[i])
-                r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
+/**
+ * @module integrations/secrets/model/service
+ * @summary Model-backed encrypted secret service.
+ * @description Implements the `{@link ModelSecretService}`, an undecorated
+ * `ClientBasedSecretService` that
+ * persists AES-encrypted payloads as `{@link Secret}` rows through a
+ * decaf `Repository` (tenant/org-unit/owner scoping included). Encryption
+ * keys derive from a master `keySecret` via `CryptoService`; configuration
+ * comes from the `secrets.model` Environment slice or an explicit boot
+ * config (see `ModelSecretServiceConfig`).
+ */
 const index_js_1 = require("./../core/index.cjs");
 const index_js_2 = require("./../core/index.cjs");
 const index_js_3 = require("./../core/index.cjs");
@@ -22,11 +23,50 @@ const core_2 = require("@decaf-ts/core");
 const crypto_1 = require("@decaf-ts/crypto/integration/services/crypto");
 const db_decorators_1 = require("@decaf-ts/db-decorators");
 const DEFAULT_KEY_ID = "default-key";
-let ModelSecretService = class ModelSecretService extends index_js_1.ClientBasedSecretService {
+/**
+ * @description Model-backed encrypted secret service
+ * @summary Stores each secret as a `{@link Secret}` row (encrypted payload,
+ * key id/iv/salt metadata, version, enablement flag, and optional
+ * tenant/org-unit/owner scope) through the repository booted as the service
+ * client. Names are validated and normalized before persistence;
+ * `(name, version)` is unique (enforced by a `SECRET_ALREADY_EXISTS`
+ * conflict in `store`/`rotate` and backed by the `uq_secrets_name_version`
+ * database index); retrieval only considers enabled rows, supports version
+ * pinning, and resolves multiple matches deterministically by `updatedAt
+ * DESC`. Delete is soft by default (sets `enabled: false`) unless
+ * `options.force` is set. Errors from the repository are translated into
+ * typed {@link SecretError}s by `parseError`.
+ *
+ * Undecorated and Environment-configurable
+ * through the `secrets.model` slice; the credential service
+ * (`CredentialService`) delegates user/runtime credential storage to this
+ * service.
+ * @class ModelSecretService
+ * @category Secrets
+ * @example
+ * ```ts
+ * import { ModelSecretService } from "@decaf-ts/integrations/secrets";
+ *
+ * const modelSecrets = await new ModelSecretService().boot({
+ *   keySecret: "model-master-key",
+ * });
+ * await modelSecrets.store("my-secret", { value: "s3cr3t" });
+ * const payload = await modelSecrets.retrieve<{ value: string }>("my-secret");
+ * ```
+ */
+class ModelSecretService extends index_js_1.ClientBasedSecretService {
     constructor() {
-        super(...arguments);
+        super();
         this.provider = "model";
     }
+    /**
+     * @description Builds the model secret configuration from the Environment
+     * @summary Reads the `secrets.model` Environment slice and returns a
+     * `ModelSecretServiceConfig` when a `keySecret` is configured; returns
+     * `undefined` otherwise, letting boot fall back to explicit arguments.
+     * @returns {ModelSecretServiceConfig | undefined} The Environment-derived configuration, or `undefined`.
+     * @override
+     */
     configFromEnvironment() {
         const env = ModelSecretEnvironment_js_1.ModelSecretEnvironment.secrets.model;
         const keySecret = (0, environmentValue_js_1.envString)(env?.keySecret);
@@ -38,16 +78,43 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
             keyId: (0, environmentValue_js_1.envString)(env.keyId),
         };
     }
+    /**
+     * @description Boots the crypto service and resolves the backing repository
+     * @summary Accepts the configuration (explicit args, merged with the
+     * Environment slice by the base) and an optional `Repository<Secret>` as the
+     * second argument; when absent, creates one via `Repository.forModel(Secret)`.
+     * Returns the config and repository as the service client.
+     * @param {ContextualArgs} args - Configuration and optional `Repository`/`Context` arguments.
+     * @returns {Promise<{config: ModelSecretServiceConfig, client: Repository<Secret, any>}>} The resolved config and repository client.
+     */
     async initialize(...args) {
         const config = this.getConfigFromArgs(...args);
         const repository = args[1] ||
-            new core_1.Repository(undefined, Secret_js_1.Secret);
+            core_1.Repository.forModel(Secret_js_1.Secret);
         this.cryptoService = new crypto_1.CryptoService();
-        await this.cryptoService.initialize(config);
+        await this.cryptoService.boot({});
         return { config, client: repository };
     }
+    /**
+     * @description Encrypts and persists a secret row
+     * @summary Validates and normalizes the name, serializes the payload, and
+     * encrypts it with a key derived from the master `keySecret`, embedding the
+     * key id/iv/salt in the row's `encryption` metadata. The row carries the
+     * optional tenant/org-unit/owner scoping and version. `(name, version)` is
+     * unique: an application-level pre-check rejects a duplicate combination
+     * with a `SECRET_ALREADY_EXISTS` {@link SecretError} before the insert, and
+     * the `uq_secrets_name_version` database index (which treats `NULL`
+     * versions as `''`) backstops the same rule against concurrent writers.
+     * @template T - The secret payload type.
+     * @param {SecretName} name - The secret name (validated and normalized).
+     * @param {T} value - The payload to encrypt and store.
+     * @param {StoreSecretOptions} [options] - Optional content type, tags, version, and tenant/org/owner scoping.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretReference>} A reference to the persisted secret.
+     * @throws {SecretError} `SECRET_ALREADY_EXISTS` when a row with the same normalized name and version already exists, or `SECRET_NOT_FOUND`/`SECRET_PROVIDER_CONFLICT` when the name is invalid or the repository insert fails.
+     */
     async store(name, value, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "store", true)).for(this.store);
+        const { log, ctxArgs } = (await this.logCtx(args, "store", true)).for(this.store);
         log.verbose(`Storing secret ${name}`);
         try {
             (0, index_js_2.validateSecretName)(name);
@@ -58,7 +125,8 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         const normalizedName = (0, index_js_2.normalizeSecretName)(name);
         const serialized = (0, index_js_3.serializeSecretPayload)(value);
         const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
-        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(serialized.value, this.config.keyId || DEFAULT_KEY_ID, this.cryptoService.extractKeyFromDerivedKey(derivedKey).key);
+        const extracted = this.cryptoService.extractKeyFromDerivedKey(derivedKey);
+        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(JSON.stringify(serialized), this.config.keyId || DEFAULT_KEY_ID, extracted.key);
         const now = new Date();
         const secret = new Secret_js_1.Secret({
             name: normalizedName,
@@ -67,20 +135,29 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
             encryption: {
                 keyId: metadata.keyId,
                 iv: metadata.iv,
+                salt: extracted.salt,
             },
             contentType: options.contentType,
             tags: options.tags,
             enabled: true,
             version: options.version,
+            tenantId: options.tenantId,
+            orgUnitId: options.orgUnitId,
+            ownerPrincipalId: options.ownerPrincipalId,
         });
+        const targetVersion = options.version ?? "";
+        const existing = await this.client
+            .select()
+            .where(core_2.Condition.attr("name").eq(normalizedName))
+            .execute(...ctxArgs);
+        const duplicate = existing.some((row) => (row.version ?? "") === targetVersion);
+        if (duplicate) {
+            throw new index_js_1.SecretError("SECRET_ALREADY_EXISTS", `Secret ${JSON.stringify(normalizedName)}${targetVersion ? ` version ${JSON.stringify(targetVersion)}` : ""} already exists`);
+        }
         try {
-            await this.client.create(secret);
+            await this.client.create(secret, ...ctxArgs);
         }
         catch (error) {
-            if (error?.message?.toLowerCase()?.includes?.("already") ||
-                error?.name === "ConflictError") {
-                throw this.parseError(error);
-            }
             throw this.parseError(error);
         }
         return {
@@ -92,8 +169,28 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
             },
         };
     }
+    /**
+     * @description Reads, decrypts, and deserializes an enabled secret row
+     * @summary Queries the newest matching enabled row (by normalized name and,
+     * optionally, version), re-derives the key using the row's salt, and decrypts
+     * the payload. Rows are ordered by `updatedAt DESC`, so when several rows
+     * share a name the most recently updated enabled row is resolved
+     * deterministically. The repository SELECT runs inside a principal-bound
+     * transaction (see {@link ModelSecretService.withinPrincipalTransaction}):
+     * it joins an in-flight `transactionLock` on the context or begins one,
+     * binding the context's principal to `app.principal_id` on TypeORM adapters
+     * so namespace RLS applies to the read. Missing rows throw
+     * {@link NotFoundError}; decryption and JSON parse failures throw
+     * `InternalError`.
+     * @template T - The secret payload type.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {RetrieveSecretOptions} [options] - Optional version filter.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<T>} The decrypted payload.
+     * @throws {NotFoundError} When no enabled secret matches the name/version.
+     */
     async retrieve(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
+        const { log, ctx, ctxArgs } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Retrieving secret ${nameStr}`);
         let name;
@@ -118,12 +215,17 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
             condition = condition.and(core_2.Condition.attr("version").eq(version));
         }
         condition = condition.and(core_2.Condition.attr("enabled").eq(true));
-        const results = await this.client.select().where(condition).execute();
+        const results = await this.withinPrincipalTransaction(ctx, (lock) => this.client
+            .override({ transactionLock: lock })
+            .select()
+            .where(condition)
+            .orderBy(["updatedAt", core_2.OrderDirection.DSC])
+            .execute(...ctxArgs));
         const existing = results[0];
         if (!existing) {
             throw new db_decorators_1.NotFoundError(`Secret "${normalizedName}" not found`);
         }
-        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
+        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret, existing.encryption?.salt);
         let decryptedValue;
         try {
             decryptedValue = await this.cryptoService.decryptPayload(existing.encryptedPayload, this.cryptoService.extractKeyFromDerivedKey(derivedKey).key);
@@ -131,14 +233,82 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         catch (error) {
             throw new db_decorators_1.InternalError(`Failed to decrypt secret "${normalizedName}": ${error.message}`);
         }
-        const payload = {
-            encoding: "utf8",
-            value: decryptedValue,
-        };
+        let payload;
+        try {
+            payload = JSON.parse(decryptedValue);
+        }
+        catch (error) {
+            throw new db_decorators_1.InternalError(`Failed to deserialize secret "${normalizedName}": ${error.message}`);
+        }
         return (0, index_js_3.deserializeSecretPayload)(payload);
     }
+    /**
+     * @description Runs a repository operation inside a principal-bound transaction
+     * @summary Mirrors core's `@transactional()` proxy for single reads: reuses
+     * the `transactionLock` already cached on the context (nested call), or
+     * resolves a fresh lock for the service client via `resolveTransactionLock`
+     * and calls `begin(context)` - which, on a TypeORM adapter, binds the
+     * context's principal to `app.principal_id` for the new transaction.
+     * Increments the lock depth for the duration of the operation; on failure,
+     * rolls back and zeroes the depth (skipping a redundant rollback when an
+     * inner frame already ended the transaction) and rethrows the original
+     * error; on success, commits when the outermost frame completes.
+     * @template R - The operation result type.
+     * @param {Context} context - The request context, carrying any in-flight transaction lock.
+     * @param {function(ContextLock): Promise<R>} operation - The repository operation to run, receiving the active lock.
+     * @returns {Promise<R>} The operation result.
+     * @throws {InternalError} When the final commit fails; operation errors are rethrown after rollback.
+     */
+    async withinPrincipalTransaction(context, operation) {
+        const existing = context.getOrUndefined("transactionLock");
+        const lock = existing ?? (0, core_1.resolveTransactionLock)(this.client);
+        lock.depth++;
+        if (!existing) {
+            await lock.begin(context);
+            context.cache.put("transactionLock", lock);
+        }
+        let result;
+        try {
+            result = await operation(lock);
+        }
+        catch (error) {
+            const alreadyEnded = lock.depth === 0;
+            lock.depth = 0;
+            if (!alreadyEnded) {
+                try {
+                    await lock.rollback(error, context);
+                }
+                catch (rollbackError) {
+                    void rollbackError;
+                }
+            }
+            throw error;
+        }
+        lock.depth--;
+        if (lock.depth === 0) {
+            try {
+                await lock.commit(context);
+            }
+            catch (error) {
+                throw new db_decorators_1.InternalError(`Failed to commit transaction: ${error}`);
+            }
+        }
+        return result;
+    }
+    /**
+     * @description Deletes (or disables) a secret row
+     * @summary Soft-deletes by default: the row is disabled and stamped with a
+     * new `updatedAt`. With `options.force`, the row is hard-deleted from the
+     * repository. Rows are ordered by `updatedAt DESC`, so the most recently
+     * updated matching row is resolved deterministically. A missing secret
+     * resolves silently.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {DeleteSecretOptions} [options] - Optional version filter and `force` hard-delete flag.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<void>} Resolves once the row is deleted or disabled.
+     */
     async delete(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "delete", true)).for(this.delete);
+        const { log, ctxArgs } = (await this.logCtx(args, "delete", true)).for(this.delete);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Deleting secret ${nameStr}`);
         let name;
@@ -160,22 +330,35 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         if (version) {
             filter = filter.and(core_2.Condition.attr("version").eq(version));
         }
-        const results = await this.client.select().where(filter).execute();
+        const results = await this.client
+            .select()
+            .where(filter)
+            .orderBy(["updatedAt", core_2.OrderDirection.DSC])
+            .execute(...ctxArgs);
         const existing = results[0];
         if (!existing) {
             return;
         }
         if (options.force) {
-            await this.client.delete(normalizedName);
+            await this.client.delete(existing.id, ...ctxArgs);
         }
         else {
             existing.enabled = false;
             existing.updatedAt = new Date();
-            await this.client.update(existing);
+            await this.client.update(existing, ...ctxArgs);
         }
     }
+    /**
+     * @description Checks whether an enabled secret exists (optionally at a version)
+     * @summary Counts enabled rows matching the normalized name (plus any
+     * requested version) and returns whether the count is positive.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {ExistsSecretOptions} [options] - Optional version filter.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<boolean>} `true` when at least one enabled row matches.
+     */
     async exists(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "exists", true)).for(this.exists);
+        const { log, ctxArgs } = (await this.logCtx(args, "exists", true)).for(this.exists);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Checking if secret ${nameStr} exists`);
         let name;
@@ -199,11 +382,19 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         if (version) {
             filter = filter.and(core_2.Condition.attr("version").eq(version));
         }
-        const count = await this.client.count().where(filter).execute();
+        const count = await this.client.count().where(filter).execute(...ctxArgs);
         return count > 0;
     }
+    /**
+     * @description Lists secret metadata across stored rows
+     * @summary Selects rows filtered by the `enabled` flag (when supplied) and
+     * maps them to `SecretMetadata` records (no payloads).
+     * @param {ListSecretsOptions} [options] - Optional `enabled` filter.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretMetadata[]>} Metadata for every matching secret.
+     */
     async list(options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "list", true)).for(this.list);
+        const { log, ctxArgs } = (await this.logCtx(args, "list", true)).for(this.list);
         log.verbose("Listing secrets");
         let condition = null;
         if (options.enabled !== undefined) {
@@ -212,7 +403,7 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         const secrets = await this.client
             .select()
             .where(condition || core_2.Condition.attr("name").dif(null))
-            .execute();
+            .execute(...ctxArgs);
         return secrets.map((secret) => ({
             provider: secret.provider,
             name: secret.name,
@@ -224,8 +415,20 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
             tags: secret.tags,
         }));
     }
+    /**
+     * @description Reads one secret's metadata without its payload
+     * @summary Selects the row matching the normalized name (and optional
+     * version) and maps it to `SecretMetadata`; tags are included only when
+     * `options.includeTags` is set. Rows are ordered by `updatedAt DESC`, so
+     * the most recently updated matching row is resolved deterministically.
+     * Returns `undefined` when no row matches.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {SecretMetadataOptions} [options] - Optional version filter and `includeTags` flag.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretMetadata | undefined>} The metadata, or `undefined` when absent.
+     */
     async metadata(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
+        const { log, ctxArgs } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Getting metadata for secret ${nameStr}`);
         let name;
@@ -251,7 +454,8 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         const results = await this.client
             .select()
             .where(filter)
-            .execute();
+            .orderBy(["updatedAt", core_2.OrderDirection.DSC])
+            .execute(...ctxArgs);
         const secret = results[0];
         if (!secret) {
             return undefined;
@@ -270,6 +474,94 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         }
         return meta;
     }
+    /**
+     * @description Re-encrypts an enabled secret row with a new payload
+     * @summary Locates the enabled row (optionally pinned to
+     * `options.oldVersion`), encrypts the new payload with a freshly derived
+     * key (optionally tagged with `options.keyId`), and updates the row's
+     * payload, encryption metadata, version (`options.newVersion`), and
+     * `updatedAt`. When `options.newVersion` differs from the row's current
+     * version, a `(name, version)` duplicate check rejects the rotation with a
+     * `SECRET_ALREADY_EXISTS` {@link SecretError}; otherwise the target version
+     * is reused and the row is updated in place. Matching rows are ordered by
+     * `updatedAt DESC`, so the most recently updated enabled row is resolved
+     * deterministically.
+     * @template T - The secret payload type.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {T} value - The new payload.
+     * @param {RotateSecretOptions} [options] - Optional `newVersion`, `oldVersion`, and `keyId`.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretReference>} A reference reflecting the updated row.
+     * @throws {NotFoundError} When no enabled secret matches the name/version.
+     * @throws {SecretError} `SECRET_ALREADY_EXISTS` when the target `newVersion` is already held by another row with the same normalized name, or `SECRET_PROVIDER_CONFLICT` when the repository update fails.
+     */
+    async rotate(nameOrRef, value, options = {}, ...args) {
+        const { log, ctxArgs } = (await this.logCtx(args, "rotate", true)).for(this.rotate);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Rotating secret ${nameStr}`);
+        const normalizedName = (0, index_js_2.normalizeSecretName)(nameStr);
+        let condition = core_2.Condition.attr("name").eq(normalizedName);
+        condition = condition.and(core_2.Condition.attr("enabled").eq(true));
+        const version = options.oldVersion ??
+            (typeof nameOrRef === "object" ? nameOrRef.version : undefined);
+        if (version) {
+            condition = condition.and(core_2.Condition.attr("version").eq(version));
+        }
+        const results = await this.client
+            .select()
+            .where(condition)
+            .orderBy(["updatedAt", core_2.OrderDirection.DSC])
+            .execute(...ctxArgs);
+        const existing = results[0];
+        if (!existing) {
+            throw new db_decorators_1.NotFoundError(`Secret "${normalizedName}" not found`);
+        }
+        const nextVersion = options.newVersion ?? existing.version;
+        const targetVersion = nextVersion ?? "";
+        if (targetVersion !== (existing.version ?? "")) {
+            const rows = await this.client
+                .select()
+                .where(core_2.Condition.attr("name").eq(normalizedName))
+                .execute(...ctxArgs);
+            const duplicate = rows.some((row) => row.id !== existing.id && (row.version ?? "") === targetVersion);
+            if (duplicate) {
+                throw new index_js_1.SecretError("SECRET_ALREADY_EXISTS", `Secret ${JSON.stringify(normalizedName)}${targetVersion ? ` version ${JSON.stringify(targetVersion)}` : ""} already exists`);
+            }
+        }
+        const serialized = (0, index_js_3.serializeSecretPayload)(value);
+        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
+        const extracted = this.cryptoService.extractKeyFromDerivedKey(derivedKey);
+        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(JSON.stringify(serialized), options.keyId || this.config.keyId || DEFAULT_KEY_ID, extracted.key);
+        existing.encryptedPayload = encryptedData;
+        existing.encryption = {
+            keyId: metadata.keyId,
+            iv: metadata.iv,
+            salt: extracted.salt,
+        };
+        existing.version = nextVersion;
+        existing.updatedAt = new Date();
+        try {
+            await this.client.update(existing, ...ctxArgs);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        return {
+            provider: this.provider,
+            name: normalizedName,
+            version: existing.version,
+        };
+    }
+    /**
+     * @description Translates repository errors into typed secret errors
+     * @summary Inspects the error message for "not found"/404, "already
+     * exists"/conflict/409, and decryption-related markers and maps them to
+     * `SECRET_NOT_FOUND`, `SECRET_ALREADY_EXISTS`,
+     * `SECRET_DECRYPTION_FAILED`, or a generic `SECRET_PROVIDER_CONFLICT`
+     * {@link SecretError}.
+     * @param {unknown} error - The raw error thrown by the repository.
+     * @returns {SecretError} The typed secret error.
+     */
     parseError(error) {
         const err = error;
         const message = err.message || err.name || "Unknown error";
@@ -279,7 +571,10 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         }
         if (lowerMessage.includes("already exists") ||
             lowerMessage.includes("conflict") ||
-            lowerMessage.includes("409")) {
+            lowerMessage.includes("409") ||
+            lowerMessage.includes("duplicate key") ||
+            lowerMessage.includes("unique constraint") ||
+            err.code === "23505") {
             return new index_js_1.SecretError("SECRET_ALREADY_EXISTS", `Secret already exists: ${message}`, err);
         }
         if (lowerMessage.includes("decryption") ||
@@ -288,10 +583,7 @@ let ModelSecretService = class ModelSecretService extends index_js_1.ClientBased
         }
         return new index_js_1.SecretError("SECRET_PROVIDER_CONFLICT", `Provider error: ${message}`, err);
     }
-};
+}
 exports.ModelSecretService = ModelSecretService;
-exports.ModelSecretService = ModelSecretService = __decorate([
-    (0, core_1.service)("secret-model")
-], ModelSecretService);
 //# sourceMappingURL=ModelSecretService.js.map
 //# sourceMappingURL=ModelSecretService.cjs.map

package/lib/cjs/secrets/model/ModelSecretService.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"secrets/model/ModelSecretService.cjs","sourceRoot":"","sources":["secrets/model/ModelSecretService.js"],"names":[],"mappings":";;;AAAA,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,UAAU,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI;IACjF,IAAI,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7H,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,UAAU;QAAE,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;;QAC1H,KAAK,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;gBAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;IAClJ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC,CAAC;AACF,iDAA2E;AAC3E,iDAA6E;AAC7E,iDAAuF;AACvF,2CAAqC;AACrC,yCAAsD;AACtD,2EAAqE;AACrE,4EAA+D;AAC/D,yCAA2C;AAC3C,yEAA6E;AAC7E,2DAAuE;AACvE,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,IAAI,kBAAkB,GAAG,MAAM,kBAAmB,SAAQ,mCAAwB;IAC9E;QACI,KAAK,CAAC,GAAG,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IACD,qBAAqB;QACjB,MAAM,GAAG,GAAG,kDAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,MAAM,SAAS,GAAG,IAAA,+BAAS,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS;YACV,OAAO,SAAS,CAAC;QACrB,OAAO;YACH,QAAQ,EAAE,OAAO;YACjB,SAAS;YACT,KAAK,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,KAAK,CAAC;SAC9B,CAAC;IACN,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;YACtB,IAAI,iBAAU,CAAC,SAAS,EAAE,kBAAM,CAAC,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAa,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC1C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvF,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC;QAChM,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,kBAAM,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,aAAa;YAC/B,UAAU,EAAE;gBACR,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;aAClB;YACD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,IAAI,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACpD,KAAK,EAAE,IAAI,KAAK,eAAe,EAAE,CAAC;gBAClC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE;gBACN,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC/B;SACJ,CAAC;IACN,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,CAAC;QACZ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC9B,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YACtB,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAChC,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACV,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvF,IAAI,cAAc,CAAC;QACnB,IAAI,CAAC;YACD,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC;QACrJ,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,6BAAa,CAAC,6BAA6B,cAAc,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,OAAO,GAAG;YACZ,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,cAAc;SACxB,CAAC;QACF,OAAO,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO;QACX,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,CAAC;aACI,CAAC;YACF,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;YACzB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC3B,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAChE,OAAO,KAAK,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/B,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,SAAS,GAAG,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC5B,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,IAAI,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACpD,OAAO,EAAE,CAAC;QACf,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;SACpB,CAAC,CAAC,CAAC;IACR,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC3B,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC5B,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,KAAK;QACZ,MAAM,GAAG,GAAG,KAAK,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,sBAAW,CAAC,kBAAkB,EAAE,qBAAqB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,sBAAW,CAAC,uBAAuB,EAAE,0BAA0B,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,sBAAW,CAAC,0BAA0B,EAAE,sBAAsB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,IAAI,sBAAW,CAAC,0BAA0B,EAAE,mBAAmB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1F,CAAC;CACJ,CAAC;AAIO,gDAAkB;AAH3B,6BAAA,kBAAkB,GAAG,UAAU,CAAC;IAC5B,IAAA,cAAO,EAAC,cAAc,CAAC;CAC1B,EAAE,kBAAkB,CAAC,CAAC;AAEvB,8CAA8C"}
+{"version":3,"file":"secrets/model/ModelSecretService.cjs","sourceRoot":"","sources":["secrets/model/ModelSecretService.js"],"names":[],"mappings":";;;AAAA;;;;;;;;;;GAUG;AACH,iDAA2E;AAC3E,iDAA6E;AAC7E,iDAAuF;AACvF,2CAAqC;AACrC,yCAAqE;AACrE,2EAAqE;AACrE,4EAA+D;AAC/D,yCAA2D;AAC3D,yEAA6E;AAC7E,2DAAuE;AACvE,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAa,kBAAmB,SAAQ,mCAAwB;IAC5D;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;IACD;;;;;;;OAOG;IACH,qBAAqB;QACjB,MAAM,GAAG,GAAG,kDAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,MAAM,SAAS,GAAG,IAAA,+BAAS,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS;YACV,OAAO,SAAS,CAAC;QACrB,OAAO;YACH,QAAQ,EAAE,OAAO;YACjB,SAAS;YACT,KAAK,EAAE,IAAA,+BAAS,EAAC,GAAG,CAAC,KAAK,CAAC;SAC9B,CAAC;IACN,CAAC;IACD;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI;QACpB,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC;YACtB,iBAAU,CAAC,QAAQ,CAAC,kBAAM,CAAC,CAAC;QAChC,IAAI,CAAC,aAAa,GAAG,IAAI,sBAAa,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC1C,CAAC;IACD;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC1C,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5J,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,kBAAM,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,aAAa;YAC/B,UAAU,EAAE;gBACR,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,SAAS,CAAC,IAAI;aACvB;YACD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC7C,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM;aAC7B,MAAM,EAAE;aACR,KAAK,CAAC,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;aAChD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,aAAa,CAAC,CAAC;QAChF,IAAI,SAAS,EAAE,CAAC;YACZ,MAAM,IAAI,sBAAW,CAAC,uBAAuB,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACjL,CAAC;QACD,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE;gBACN,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC/B;SACJ,CAAC;IACN,CAAC;IACD;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,CAAC;QACZ,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC9B,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YACtB,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAChC,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,SAAS,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,OAAO,EAAE,CAAC;YACV,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM;aAC3E,QAAQ,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;aACnC,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,CAAC;aAChB,OAAO,CAAC,CAAC,WAAW,EAAE,qBAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAClH,IAAI,cAAc,CAAC;QACnB,IAAI,CAAC;YACD,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC;QACrJ,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,6BAAa,CAAC,6BAA6B,cAAc,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,6BAAa,CAAC,iCAAiC,cAAc,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,IAAA,mCAAwB,EAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IACD;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,0BAA0B,CAAC,OAAO,EAAE,SAAS;QAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC;QAC3D,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAA,6BAAsB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,MAAM,CAAC;QACX,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,YAAY,EAAE,CAAC;gBAChB,IAAI,CAAC;oBACD,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBACxC,CAAC;gBACD,OAAO,aAAa,EAAE,CAAC;oBACnB,KAAK,aAAa,CAAC;gBACvB,CAAC;YACL,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACnB,IAAI,CAAC;gBACD,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,6BAAa,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACtE,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC;IAClB,CAAC;IACD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC5B,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,CAAC,CAAC,WAAW,EAAE,qBAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,OAAO;QACX,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACtD,CAAC;aACI,CAAC;YACF,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;YACzB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;QACnD,CAAC;IACL,CAAC;IACD;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QACzC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC3B,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QAC1E,OAAO,KAAK,GAAG,CAAC,CAAC;IACrB,CAAC;IACD;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC5B,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC/B,IAAI,SAAS,GAAG,IAAI,CAAC;QACrB,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,SAAS,GAAG,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC5B,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,IAAI,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACpD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5B,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;SACpB,CAAC,CAAC,CAAC;IACR,CAAC;IACD;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAC3C,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QACtD,IAAI,IAAI,CAAC;QACT,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,GAAG,SAAS,CAAC;QACrB,CAAC;aACI,CAAC;YACF,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC;YACD,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,IAAI,CAAC,CAAC;QACjD,IAAI,MAAM,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;YAC3B,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACV,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC5B,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,CAAC,CAAC,WAAW,EAAE,qBAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,SAAS,CAAC;QACrB,CAAC;QACD,MAAM,IAAI,GAAG;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAClC,CAAC;QACF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC5B,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IACD;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,EAAE,GAAG,IAAI;QAChD,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAC1C,MAAM,cAAc,GAAG,IAAA,8BAAmB,EAAC,OAAO,CAAC,CAAC;QACpD,IAAI,SAAS,GAAG,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC1D,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU;YAC9B,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,OAAO,EAAE,CAAC;YACV,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,gBAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC5B,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,CAAC;aAChB,OAAO,CAAC,CAAC,WAAW,EAAE,qBAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,MAAM,IAAI,6BAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC;QAC3D,MAAM,aAAa,GAAG,WAAW,IAAI,EAAE,CAAC;QACxC,IAAI,aAAa,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM;iBACzB,MAAM,EAAE;iBACR,KAAK,CAAC,gBAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;iBAChD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;YACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,aAAa,CAAC,CAAC;YACtG,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,IAAI,sBAAW,CAAC,uBAAuB,EAAE,UAAU,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YACjL,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,IAAA,iCAAsB,EAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACvF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;QAC7K,QAAQ,CAAC,gBAAgB,GAAG,aAAa,CAAC;QAC1C,QAAQ,CAAC,UAAU,GAAG;YAClB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,SAAS,CAAC,IAAI;SACvB,CAAC;QACF,QAAQ,CAAC,OAAO,GAAG,WAAW,CAAC;QAC/B,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAChC,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QACD,OAAO;YACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC5B,CAAC;IACN,CAAC;IACD;;;;;;;;;OASG;IACH,UAAU,CAAC,KAAK;QACZ,MAAM,GAAG,GAAG,KAAK,CAAC;QAClB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,sBAAW,CAAC,kBAAkB,EAAE,qBAAqB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5B,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;YACtC,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC1C,GAAG,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACvB,OAAO,IAAI,sBAAW,CAAC,uBAAuB,EAAE,0BAA0B,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9F,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnC,OAAO,IAAI,sBAAW,CAAC,0BAA0B,EAAE,sBAAsB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,IAAI,sBAAW,CAAC,0BAA0B,EAAE,mBAAmB,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1F,CAAC;CACJ;AAjhBD,gDAihBC;AACD,8CAA8C"}