@decaf-ts/integrations 0.11.0 → 0.14.0

package/lib/esm/secrets/model/ModelSecretService.js

@@ -1,25 +1,69 @@
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
+/**
+ * @module integrations/secrets/model/service
+ * @summary Model-backed encrypted secret service.
+ * @description Implements the `{@link ModelSecretService}`, an undecorated
+ * `ClientBasedSecretService` that
+ * persists AES-encrypted payloads as `{@link Secret}` rows through a
+ * decaf `Repository` (tenant/org-unit/owner scoping included). Encryption
+ * keys derive from a master `keySecret` via `CryptoService`; configuration
+ * comes from the `secrets.model` Environment slice or an explicit boot
+ * config (see `ModelSecretServiceConfig`).
+ */
 import { ClientBasedSecretService, SecretError } from "./../core/index.js";
 import { validateSecretName, normalizeSecretName } from "./../core/index.js";
 import { serializeSecretPayload, deserializeSecretPayload, } from "./../core/index.js";
 import { Secret } from "./Secret.js";
-import { Repository, service, } from "@decaf-ts/core";
+import { Repository, resolveTransactionLock, } from "@decaf-ts/core";
 import { ModelSecretEnvironment } from "./ModelSecretEnvironment.js";
 import { envString } from "./../../shared/environmentValue.js";
-import { Condition } from "@decaf-ts/core";
+import { Condition, OrderDirection } from "@decaf-ts/core";
 import { CryptoService } from "@decaf-ts/crypto/integration/services/crypto";
 import { InternalError, NotFoundError } from "@decaf-ts/db-decorators";
 const DEFAULT_KEY_ID = "default-key";
-let ModelSecretService = class ModelSecretService extends ClientBasedSecretService {
+/**
+ * @description Model-backed encrypted secret service
+ * @summary Stores each secret as a `{@link Secret}` row (encrypted payload,
+ * key id/iv/salt metadata, version, enablement flag, and optional
+ * tenant/org-unit/owner scope) through the repository booted as the service
+ * client. Names are validated and normalized before persistence;
+ * `(name, version)` is unique (enforced by a `SECRET_ALREADY_EXISTS`
+ * conflict in `store`/`rotate` and backed by the `uq_secrets_name_version`
+ * database index); retrieval only considers enabled rows, supports version
+ * pinning, and resolves multiple matches deterministically by `updatedAt
+ * DESC`. Delete is soft by default (sets `enabled: false`) unless
+ * `options.force` is set. Errors from the repository are translated into
+ * typed {@link SecretError}s by `parseError`.
+ *
+ * Undecorated and Environment-configurable
+ * through the `secrets.model` slice; the credential service
+ * (`CredentialService`) delegates user/runtime credential storage to this
+ * service.
+ * @class ModelSecretService
+ * @category Secrets
+ * @example
+ * ```ts
+ * import { ModelSecretService } from "@decaf-ts/integrations/secrets";
+ *
+ * const modelSecrets = await new ModelSecretService().boot({
+ *   keySecret: "model-master-key",
+ * });
+ * await modelSecrets.store("my-secret", { value: "s3cr3t" });
+ * const payload = await modelSecrets.retrieve<{ value: string }>("my-secret");
+ * ```
+ */
+export class ModelSecretService extends ClientBasedSecretService {
     constructor() {
-        super(...arguments);
+        super();
         this.provider = "model";
     }
+    /**
+     * @description Builds the model secret configuration from the Environment
+     * @summary Reads the `secrets.model` Environment slice and returns a
+     * `ModelSecretServiceConfig` when a `keySecret` is configured; returns
+     * `undefined` otherwise, letting boot fall back to explicit arguments.
+     * @returns {ModelSecretServiceConfig | undefined} The Environment-derived configuration, or `undefined`.
+     * @override
+     */
     configFromEnvironment() {
         const env = ModelSecretEnvironment.secrets.model;
         const keySecret = envString(env?.keySecret);
@@ -31,16 +75,43 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
             keyId: envString(env.keyId),
         };
     }
+    /**
+     * @description Boots the crypto service and resolves the backing repository
+     * @summary Accepts the configuration (explicit args, merged with the
+     * Environment slice by the base) and an optional `Repository<Secret>` as the
+     * second argument; when absent, creates one via `Repository.forModel(Secret)`.
+     * Returns the config and repository as the service client.
+     * @param {ContextualArgs} args - Configuration and optional `Repository`/`Context` arguments.
+     * @returns {Promise<{config: ModelSecretServiceConfig, client: Repository<Secret, any>}>} The resolved config and repository client.
+     */
     async initialize(...args) {
         const config = this.getConfigFromArgs(...args);
         const repository = args[1] ||
-            new Repository(undefined, Secret);
+            Repository.forModel(Secret);
         this.cryptoService = new CryptoService();
-        await this.cryptoService.initialize(config);
+        await this.cryptoService.boot({});
         return { config, client: repository };
     }
+    /**
+     * @description Encrypts and persists a secret row
+     * @summary Validates and normalizes the name, serializes the payload, and
+     * encrypts it with a key derived from the master `keySecret`, embedding the
+     * key id/iv/salt in the row's `encryption` metadata. The row carries the
+     * optional tenant/org-unit/owner scoping and version. `(name, version)` is
+     * unique: an application-level pre-check rejects a duplicate combination
+     * with a `SECRET_ALREADY_EXISTS` {@link SecretError} before the insert, and
+     * the `uq_secrets_name_version` database index (which treats `NULL`
+     * versions as `''`) backstops the same rule against concurrent writers.
+     * @template T - The secret payload type.
+     * @param {SecretName} name - The secret name (validated and normalized).
+     * @param {T} value - The payload to encrypt and store.
+     * @param {StoreSecretOptions} [options] - Optional content type, tags, version, and tenant/org/owner scoping.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretReference>} A reference to the persisted secret.
+     * @throws {SecretError} `SECRET_ALREADY_EXISTS` when a row with the same normalized name and version already exists, or `SECRET_NOT_FOUND`/`SECRET_PROVIDER_CONFLICT` when the name is invalid or the repository insert fails.
+     */
     async store(name, value, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "store", true)).for(this.store);
+        const { log, ctxArgs } = (await this.logCtx(args, "store", true)).for(this.store);
         log.verbose(`Storing secret ${name}`);
         try {
             validateSecretName(name);
@@ -51,7 +122,8 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         const normalizedName = normalizeSecretName(name);
         const serialized = serializeSecretPayload(value);
         const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
-        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(serialized.value, this.config.keyId || DEFAULT_KEY_ID, this.cryptoService.extractKeyFromDerivedKey(derivedKey).key);
+        const extracted = this.cryptoService.extractKeyFromDerivedKey(derivedKey);
+        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(JSON.stringify(serialized), this.config.keyId || DEFAULT_KEY_ID, extracted.key);
         const now = new Date();
         const secret = new Secret({
             name: normalizedName,
@@ -60,20 +132,29 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
             encryption: {
                 keyId: metadata.keyId,
                 iv: metadata.iv,
+                salt: extracted.salt,
             },
             contentType: options.contentType,
             tags: options.tags,
             enabled: true,
             version: options.version,
+            tenantId: options.tenantId,
+            orgUnitId: options.orgUnitId,
+            ownerPrincipalId: options.ownerPrincipalId,
         });
+        const targetVersion = options.version ?? "";
+        const existing = await this.client
+            .select()
+            .where(Condition.attr("name").eq(normalizedName))
+            .execute(...ctxArgs);
+        const duplicate = existing.some((row) => (row.version ?? "") === targetVersion);
+        if (duplicate) {
+            throw new SecretError("SECRET_ALREADY_EXISTS", `Secret ${JSON.stringify(normalizedName)}${targetVersion ? ` version ${JSON.stringify(targetVersion)}` : ""} already exists`);
+        }
         try {
-            await this.client.create(secret);
+            await this.client.create(secret, ...ctxArgs);
         }
         catch (error) {
-            if (error?.message?.toLowerCase()?.includes?.("already") ||
-                error?.name === "ConflictError") {
-                throw this.parseError(error);
-            }
             throw this.parseError(error);
         }
         return {
@@ -85,8 +166,28 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
             },
         };
     }
+    /**
+     * @description Reads, decrypts, and deserializes an enabled secret row
+     * @summary Queries the newest matching enabled row (by normalized name and,
+     * optionally, version), re-derives the key using the row's salt, and decrypts
+     * the payload. Rows are ordered by `updatedAt DESC`, so when several rows
+     * share a name the most recently updated enabled row is resolved
+     * deterministically. The repository SELECT runs inside a principal-bound
+     * transaction (see {@link ModelSecretService.withinPrincipalTransaction}):
+     * it joins an in-flight `transactionLock` on the context or begins one,
+     * binding the context's principal to `app.principal_id` on TypeORM adapters
+     * so namespace RLS applies to the read. Missing rows throw
+     * {@link NotFoundError}; decryption and JSON parse failures throw
+     * `InternalError`.
+     * @template T - The secret payload type.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {RetrieveSecretOptions} [options] - Optional version filter.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<T>} The decrypted payload.
+     * @throws {NotFoundError} When no enabled secret matches the name/version.
+     */
     async retrieve(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
+        const { log, ctx, ctxArgs } = (await this.logCtx(args, "retrieve", true)).for(this.retrieve);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Retrieving secret ${nameStr}`);
         let name;
@@ -111,12 +212,17 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
             condition = condition.and(Condition.attr("version").eq(version));
         }
         condition = condition.and(Condition.attr("enabled").eq(true));
-        const results = await this.client.select().where(condition).execute();
+        const results = await this.withinPrincipalTransaction(ctx, (lock) => this.client
+            .override({ transactionLock: lock })
+            .select()
+            .where(condition)
+            .orderBy(["updatedAt", OrderDirection.DSC])
+            .execute(...ctxArgs));
         const existing = results[0];
         if (!existing) {
             throw new NotFoundError(`Secret "${normalizedName}" not found`);
         }
-        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
+        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret, existing.encryption?.salt);
         let decryptedValue;
         try {
             decryptedValue = await this.cryptoService.decryptPayload(existing.encryptedPayload, this.cryptoService.extractKeyFromDerivedKey(derivedKey).key);
@@ -124,14 +230,82 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         catch (error) {
             throw new InternalError(`Failed to decrypt secret "${normalizedName}": ${error.message}`);
         }
-        const payload = {
-            encoding: "utf8",
-            value: decryptedValue,
-        };
+        let payload;
+        try {
+            payload = JSON.parse(decryptedValue);
+        }
+        catch (error) {
+            throw new InternalError(`Failed to deserialize secret "${normalizedName}": ${error.message}`);
+        }
         return deserializeSecretPayload(payload);
     }
+    /**
+     * @description Runs a repository operation inside a principal-bound transaction
+     * @summary Mirrors core's `@transactional()` proxy for single reads: reuses
+     * the `transactionLock` already cached on the context (nested call), or
+     * resolves a fresh lock for the service client via `resolveTransactionLock`
+     * and calls `begin(context)` - which, on a TypeORM adapter, binds the
+     * context's principal to `app.principal_id` for the new transaction.
+     * Increments the lock depth for the duration of the operation; on failure,
+     * rolls back and zeroes the depth (skipping a redundant rollback when an
+     * inner frame already ended the transaction) and rethrows the original
+     * error; on success, commits when the outermost frame completes.
+     * @template R - The operation result type.
+     * @param {Context} context - The request context, carrying any in-flight transaction lock.
+     * @param {function(ContextLock): Promise<R>} operation - The repository operation to run, receiving the active lock.
+     * @returns {Promise<R>} The operation result.
+     * @throws {InternalError} When the final commit fails; operation errors are rethrown after rollback.
+     */
+    async withinPrincipalTransaction(context, operation) {
+        const existing = context.getOrUndefined("transactionLock");
+        const lock = existing ?? resolveTransactionLock(this.client);
+        lock.depth++;
+        if (!existing) {
+            await lock.begin(context);
+            context.cache.put("transactionLock", lock);
+        }
+        let result;
+        try {
+            result = await operation(lock);
+        }
+        catch (error) {
+            const alreadyEnded = lock.depth === 0;
+            lock.depth = 0;
+            if (!alreadyEnded) {
+                try {
+                    await lock.rollback(error, context);
+                }
+                catch (rollbackError) {
+                    void rollbackError;
+                }
+            }
+            throw error;
+        }
+        lock.depth--;
+        if (lock.depth === 0) {
+            try {
+                await lock.commit(context);
+            }
+            catch (error) {
+                throw new InternalError(`Failed to commit transaction: ${error}`);
+            }
+        }
+        return result;
+    }
+    /**
+     * @description Deletes (or disables) a secret row
+     * @summary Soft-deletes by default: the row is disabled and stamped with a
+     * new `updatedAt`. With `options.force`, the row is hard-deleted from the
+     * repository. Rows are ordered by `updatedAt DESC`, so the most recently
+     * updated matching row is resolved deterministically. A missing secret
+     * resolves silently.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {DeleteSecretOptions} [options] - Optional version filter and `force` hard-delete flag.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<void>} Resolves once the row is deleted or disabled.
+     */
     async delete(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "delete", true)).for(this.delete);
+        const { log, ctxArgs } = (await this.logCtx(args, "delete", true)).for(this.delete);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Deleting secret ${nameStr}`);
         let name;
@@ -153,22 +327,35 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         if (version) {
             filter = filter.and(Condition.attr("version").eq(version));
         }
-        const results = await this.client.select().where(filter).execute();
+        const results = await this.client
+            .select()
+            .where(filter)
+            .orderBy(["updatedAt", OrderDirection.DSC])
+            .execute(...ctxArgs);
         const existing = results[0];
         if (!existing) {
             return;
         }
         if (options.force) {
-            await this.client.delete(normalizedName);
+            await this.client.delete(existing.id, ...ctxArgs);
         }
         else {
             existing.enabled = false;
             existing.updatedAt = new Date();
-            await this.client.update(existing);
+            await this.client.update(existing, ...ctxArgs);
         }
     }
+    /**
+     * @description Checks whether an enabled secret exists (optionally at a version)
+     * @summary Counts enabled rows matching the normalized name (plus any
+     * requested version) and returns whether the count is positive.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {ExistsSecretOptions} [options] - Optional version filter.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<boolean>} `true` when at least one enabled row matches.
+     */
     async exists(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "exists", true)).for(this.exists);
+        const { log, ctxArgs } = (await this.logCtx(args, "exists", true)).for(this.exists);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Checking if secret ${nameStr} exists`);
         let name;
@@ -192,11 +379,19 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         if (version) {
             filter = filter.and(Condition.attr("version").eq(version));
         }
-        const count = await this.client.count().where(filter).execute();
+        const count = await this.client.count().where(filter).execute(...ctxArgs);
         return count > 0;
     }
+    /**
+     * @description Lists secret metadata across stored rows
+     * @summary Selects rows filtered by the `enabled` flag (when supplied) and
+     * maps them to `SecretMetadata` records (no payloads).
+     * @param {ListSecretsOptions} [options] - Optional `enabled` filter.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretMetadata[]>} Metadata for every matching secret.
+     */
     async list(options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "list", true)).for(this.list);
+        const { log, ctxArgs } = (await this.logCtx(args, "list", true)).for(this.list);
         log.verbose("Listing secrets");
         let condition = null;
         if (options.enabled !== undefined) {
@@ -205,7 +400,7 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         const secrets = await this.client
             .select()
             .where(condition || Condition.attr("name").dif(null))
-            .execute();
+            .execute(...ctxArgs);
         return secrets.map((secret) => ({
             provider: secret.provider,
             name: secret.name,
@@ -217,8 +412,20 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
             tags: secret.tags,
         }));
     }
+    /**
+     * @description Reads one secret's metadata without its payload
+     * @summary Selects the row matching the normalized name (and optional
+     * version) and maps it to `SecretMetadata`; tags are included only when
+     * `options.includeTags` is set. Rows are ordered by `updatedAt DESC`, so
+     * the most recently updated matching row is resolved deterministically.
+     * Returns `undefined` when no row matches.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {SecretMetadataOptions} [options] - Optional version filter and `includeTags` flag.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretMetadata | undefined>} The metadata, or `undefined` when absent.
+     */
     async metadata(nameOrRef, options = {}, ...args) {
-        const { log } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
+        const { log, ctxArgs } = (await this.logCtx(args, "metadata", true)).for(this.metadata);
         const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
         log.verbose(`Getting metadata for secret ${nameStr}`);
         let name;
@@ -244,7 +451,8 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         const results = await this.client
             .select()
             .where(filter)
-            .execute();
+            .orderBy(["updatedAt", OrderDirection.DSC])
+            .execute(...ctxArgs);
         const secret = results[0];
         if (!secret) {
             return undefined;
@@ -263,6 +471,94 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         }
         return meta;
     }
+    /**
+     * @description Re-encrypts an enabled secret row with a new payload
+     * @summary Locates the enabled row (optionally pinned to
+     * `options.oldVersion`), encrypts the new payload with a freshly derived
+     * key (optionally tagged with `options.keyId`), and updates the row's
+     * payload, encryption metadata, version (`options.newVersion`), and
+     * `updatedAt`. When `options.newVersion` differs from the row's current
+     * version, a `(name, version)` duplicate check rejects the rotation with a
+     * `SECRET_ALREADY_EXISTS` {@link SecretError}; otherwise the target version
+     * is reused and the row is updated in place. Matching rows are ordered by
+     * `updatedAt DESC`, so the most recently updated enabled row is resolved
+     * deterministically.
+     * @template T - The secret payload type.
+     * @param {SecretName | SecretReference} nameOrRef - The secret name or reference.
+     * @param {T} value - The new payload.
+     * @param {RotateSecretOptions} [options] - Optional `newVersion`, `oldVersion`, and `keyId`.
+     * @param {MaybeContextualArg} args - Optional trailing decaf `Context` forwarded to the repository.
+     * @returns {Promise<SecretReference>} A reference reflecting the updated row.
+     * @throws {NotFoundError} When no enabled secret matches the name/version.
+     * @throws {SecretError} `SECRET_ALREADY_EXISTS` when the target `newVersion` is already held by another row with the same normalized name, or `SECRET_PROVIDER_CONFLICT` when the repository update fails.
+     */
+    async rotate(nameOrRef, value, options = {}, ...args) {
+        const { log, ctxArgs } = (await this.logCtx(args, "rotate", true)).for(this.rotate);
+        const nameStr = typeof nameOrRef === "string" ? nameOrRef : nameOrRef.name;
+        log.verbose(`Rotating secret ${nameStr}`);
+        const normalizedName = normalizeSecretName(nameStr);
+        let condition = Condition.attr("name").eq(normalizedName);
+        condition = condition.and(Condition.attr("enabled").eq(true));
+        const version = options.oldVersion ??
+            (typeof nameOrRef === "object" ? nameOrRef.version : undefined);
+        if (version) {
+            condition = condition.and(Condition.attr("version").eq(version));
+        }
+        const results = await this.client
+            .select()
+            .where(condition)
+            .orderBy(["updatedAt", OrderDirection.DSC])
+            .execute(...ctxArgs);
+        const existing = results[0];
+        if (!existing) {
+            throw new NotFoundError(`Secret "${normalizedName}" not found`);
+        }
+        const nextVersion = options.newVersion ?? existing.version;
+        const targetVersion = nextVersion ?? "";
+        if (targetVersion !== (existing.version ?? "")) {
+            const rows = await this.client
+                .select()
+                .where(Condition.attr("name").eq(normalizedName))
+                .execute(...ctxArgs);
+            const duplicate = rows.some((row) => row.id !== existing.id && (row.version ?? "") === targetVersion);
+            if (duplicate) {
+                throw new SecretError("SECRET_ALREADY_EXISTS", `Secret ${JSON.stringify(normalizedName)}${targetVersion ? ` version ${JSON.stringify(targetVersion)}` : ""} already exists`);
+            }
+        }
+        const serialized = serializeSecretPayload(value);
+        const derivedKey = await this.cryptoService.deriveKeyFromSecret(this.config.keySecret);
+        const extracted = this.cryptoService.extractKeyFromDerivedKey(derivedKey);
+        const { encryptedData, metadata } = await this.cryptoService.encryptPayload(JSON.stringify(serialized), options.keyId || this.config.keyId || DEFAULT_KEY_ID, extracted.key);
+        existing.encryptedPayload = encryptedData;
+        existing.encryption = {
+            keyId: metadata.keyId,
+            iv: metadata.iv,
+            salt: extracted.salt,
+        };
+        existing.version = nextVersion;
+        existing.updatedAt = new Date();
+        try {
+            await this.client.update(existing, ...ctxArgs);
+        }
+        catch (error) {
+            throw this.parseError(error);
+        }
+        return {
+            provider: this.provider,
+            name: normalizedName,
+            version: existing.version,
+        };
+    }
+    /**
+     * @description Translates repository errors into typed secret errors
+     * @summary Inspects the error message for "not found"/404, "already
+     * exists"/conflict/409, and decryption-related markers and maps them to
+     * `SECRET_NOT_FOUND`, `SECRET_ALREADY_EXISTS`,
+     * `SECRET_DECRYPTION_FAILED`, or a generic `SECRET_PROVIDER_CONFLICT`
+     * {@link SecretError}.
+     * @param {unknown} error - The raw error thrown by the repository.
+     * @returns {SecretError} The typed secret error.
+     */
     parseError(error) {
         const err = error;
         const message = err.message || err.name || "Unknown error";
@@ -272,7 +568,10 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         }
         if (lowerMessage.includes("already exists") ||
             lowerMessage.includes("conflict") ||
-            lowerMessage.includes("409")) {
+            lowerMessage.includes("409") ||
+            lowerMessage.includes("duplicate key") ||
+            lowerMessage.includes("unique constraint") ||
+            err.code === "23505") {
             return new SecretError("SECRET_ALREADY_EXISTS", `Secret already exists: ${message}`, err);
         }
         if (lowerMessage.includes("decryption") ||
@@ -281,9 +580,5 @@ let ModelSecretService = class ModelSecretService extends ClientBasedSecretServi
         }
         return new SecretError("SECRET_PROVIDER_CONFLICT", `Provider error: ${message}`, err);
     }
-};
-ModelSecretService = __decorate([
-    service("secret-model")
-], ModelSecretService);
-export { ModelSecretService };
+}
 //# sourceMappingURL=ModelSecretService.js.map

package/lib/esm/secrets/model/ModelSecretService.js.map

@@ -1 +1 @@
-{"version":3,"file":"ModelSecretService.js","sourceRoot":"","sources":["../../../../src/secrets/model/ModelSecretService.ts"],"names":[],"mappings":";;;;;;AAAA,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAkB,2BAAgB;AAehF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAAgB;AAClE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GAEzB,2BAAgB;AACjB,OAAO,EAAE,MAAM,EAAE,oBAAiB;AAClC,OAAO,EAGL,UAAU,EACV,OAAO,GACR,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,oCAAiC;AAClE,OAAO,EAAE,SAAS,EAAE,2CAAsC;AAC1D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,cAAc,GAAG,aAAa,CAAC;AAG9B,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,wBAGvC;IAHM;;QAII,aAAQ,GAAmB,OAAO,CAAC;IA2X9C,CAAC;IAxXW,qBAAqB;QAC7B,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,SAAS;YACT,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,GAAG,IAAyB;QAI3C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAA2B,GAAG,IAAI,CAAC,CAAC;QACzE,MAAM,UAAU,GACb,IAAI,CAAC,CAAC,CAAyC;YAChD,IAAI,UAAU,CAAc,SAAS,EAAE,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,IAAgB,EAChB,KAAQ,EACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzE,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,CAChC,CAAC;QACF,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACzE,UAAU,CAAC,KAAK,EAChB,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EACnC,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,aAAa;YAC/B,UAAU,EAAE;gBACV,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;aAChB;YACD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IACE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;gBACpD,KAAK,EAAE,IAAI,KAAK,eAAe,EAC/B,CAAC;gBACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE;gBACR,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,UAAiC,EAAE,EACnC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5C,IAAI,IAAY,CAAC;QACjB,IAAI,OAA2B,CAAC;QAEhC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YACtB,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,CAChC,CAAC;QACF,IAAI,cAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACtD,QAAQ,CAAC,gBAAgB,EACzB,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CACrB,6BAA6B,cAAc,MAAO,KAAe,CAAC,OAAO,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAA4B;YACvC,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,cAAc;SACtB,CAAC;QAEF,OAAO,wBAAwB,CAAC,OAAO,CAAM,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAE1C,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;YACzB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QAEpD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhE,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAEhE,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,IAAI,CACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvE,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE/B,IAAI,SAAS,GAA6B,IAAI,CAAC;QAE/C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,MAAM;aACxC,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAC5D,OAAO,EAAE,CAAC;QAEb,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAC,QAA0B;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,UAAiC,EAAE,EACnC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAEtD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAE/D,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,MAAM;aACxC,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAmB;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAA0B;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAES,UAAU,CAAC,KAAc;QACjC,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,WAAW,CACpB,kBAAkB,EAClB,qBAAqB,OAAO,EAAE,EAC9B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC5B,CAAC;YACD,OAAO,IAAI,WAAW,CACpB,uBAAuB,EACvB,0BAA0B,OAAO,EAAE,EACnC,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,WAAW,CACpB,0BAA0B,EAC1B,sBAAsB,OAAO,EAAE,EAC/B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,WAAW,CACpB,0BAA0B,EAC1B,mBAAmB,OAAO,EAAE,EAC5B,GAAG,CACJ,CAAC;IACJ,CAAC;CACF,CAAA;AA/XY,kBAAkB;IAD9B,OAAO,CAAC,cAAc,CAAC;GACX,kBAAkB,CA+X9B"}
+{"version":3,"file":"ModelSecretService.js","sourceRoot":"","sources":["../../../../src/secrets/model/ModelSecretService.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,wBAAwB,EAAE,WAAW,EAAkB,2BAAgB;AAgBhF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,2BAAgB;AAClE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GAEzB,2BAAgB;AACjB,OAAO,EAAE,MAAM,EAAE,oBAAiB;AAClC,OAAO,EAKL,UAAU,EACV,sBAAsB,GACvB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,oCAAiC;AAClE,OAAO,EAAE,SAAS,EAAE,2CAAsC;AAC1D,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEvE,MAAM,cAAc,GAAG,aAAa,CAAC;AAErC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,OAAO,kBAAmB,SAAQ,wBAGvC;IAIC;QACE,KAAK,EAAE,CAAC;QAJD,aAAQ,GAAmB,OAAO,CAAC;IAK5C,CAAC;IAED;;;;;;;OAOG;IACO,qBAAqB;QAC7B,MAAM,GAAG,GAAG,sBAAsB,CAAC,OAAO,CAAC,KAAK,CAAC;QACjD,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS;YAAE,OAAO,SAAS,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,SAAS;YACT,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;SAC5B,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,CAAC,GAAG,IAAyB;QAI3C,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,CAA2B,GAAG,IAAI,CAAC,CAAC;QACzE,MAAM,UAAU,GACb,IAAI,CAAC,CAAC,CAAyC;YAChD,UAAU,CAAC,QAAQ,CAAkC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACxC,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,KAAK,CACT,IAAgB,EAChB,KAAQ,EACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CACnE,IAAI,CAAC,KAAK,CACX,CAAC;QACF,GAAG,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,CAChC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACzE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAC1B,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EACnC,SAAS,CAAC,GAAG,CACd,CAAC;QAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,IAAI,EAAE,cAAc;YACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,aAAa;YAC/B,UAAU,EAAE;gBACV,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;gBACf,IAAI,EAAE,SAAS,CAAC,IAAI;aACrB;YACD,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;SAC3C,CAAC,CAAC;QAEH,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM;aAC/B,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;aACxD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACvB,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAC7B,CAAC,GAAW,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,aAAa,CACvD,CAAC;QACF,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,UAAU,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GACtC,aAAa,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAChE,iBAAiB,CAClB,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,QAAQ,EAAE;gBACR,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE;aAC7B;SACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,UAAiC,EAAE,EACnC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAC5B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAC1C,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,qBAAqB,OAAO,EAAE,CAAC,CAAC;QAE5C,IAAI,IAAY,CAAC;QACjB,IAAI,OAA2B,CAAC;QAEhC,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;YACjB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;YACtB,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAElE,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAClE,IAAI,CAAC,MAAM;aACR,QAAQ,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;aACnC,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,CAAC;aAChB,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CACvB,CAAC;QACF,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,EAC/B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAC1B,CAAC;QACF,IAAI,cAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,cAAc,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACtD,QAAQ,CAAC,gBAAgB,EACzB,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC,GAAG,CAC5D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CACrB,6BAA6B,cAAc,MAAO,KAAe,CAAC,OAAO,EAAE,CAC5E,CAAC;QACJ,CAAC;QAED,IAAI,OAAgC,CAAC;QACrC,IAAI,CAAC;YACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,cAAc,CAA4B,CAAC;QAClE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,aAAa,CACrB,iCAAiC,cAAc,MAAO,KAAe,CAAC,OAAO,EAAE,CAChF,CAAC;QACJ,CAAC;QAED,OAAO,wBAAwB,CAAC,OAAO,CAAM,CAAC;IAChD,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACK,KAAK,CAAC,0BAA0B,CACtC,OAAqB,EACrB,SAA4C;QAE5C,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,iBAAiB,CAE5C,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC1B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,MAAS,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;YACf,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAc,EAAE,OAAO,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,aAAsB,EAAE,CAAC;oBAChC,KAAK,aAAa,CAAC;gBACrB,CAAC;YACH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7B,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACxB,MAAM,IAAI,aAAa,CAAC,iCAAiC,KAAK,EAAE,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CACpE,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAE1C,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC9B,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,CAAC;QACpD,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAC;YACzB,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CACpE,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,sBAAsB,OAAO,SAAS,CAAC,CAAC;QAEpD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAC/D,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEhE,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QAE1E,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,IAAI,CACR,UAA8B,EAAE,EAChC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAClE,IAAI,CAAC,IAAI,CACV,CAAC;QACF,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE/B,IAAI,SAAS,GAA6B,IAAI,CAAC;QAE/C,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAClC,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,MAAM;aACxC,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aAC5D,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QAEvB,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC;YACtC,QAAQ,EAAE,MAAM,CAAC,QAA0B;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,QAAQ,CACZ,SAAuC,EACvC,UAAiC,EAAE,EACnC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CACtE,IAAI,CAAC,QAAQ,CACd,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,+BAA+B,OAAO,EAAE,CAAC,CAAC;QAEtD,IAAI,IAAY,CAAC;QAEjB,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClC,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAc,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,cAAc,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAEjD,IAAI,MAAM,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAE/D,MAAM,OAAO,GACX,OAAO,CAAC,OAAO;YACf,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,CAAC;QAED,MAAM,OAAO,GAAa,MAAM,IAAI,CAAC,MAAM;aACxC,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC;aACb,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE1B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAmB;YAC3B,QAAQ,EAAE,MAAM,CAAC,QAA0B;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;QAEF,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YACxB,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,KAAK,CAAC,MAAM,CACV,SAAuC,EACvC,KAAQ,EACR,UAA+B,EAAE,EACjC,GAAG,IAA6B;QAEhC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CACpE,IAAI,CAAC,MAAM,CACZ,CAAC;QACF,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;QAC3E,GAAG,CAAC,OAAO,CAAC,mBAAmB,OAAO,EAAE,CAAC,CAAC;QAE1C,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACpD,IAAI,SAAS,GAAG,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;QAClE,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;QAEtE,MAAM,OAAO,GACX,OAAO,CAAC,UAAU;YAClB,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClE,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAS,SAAS,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM;aAC9B,MAAM,EAAE;aACR,KAAK,CAAC,SAAS,CAAC;aAChB,OAAO,CAAC,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC;aAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;QACvB,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE5B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,aAAa,CAAC,WAAW,cAAc,aAAa,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC,OAAO,CAAC;QAC3D,MAAM,aAAa,GAAG,WAAW,IAAI,EAAE,CAAC;QACxC,IAAI,aAAa,KAAK,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM;iBAC3B,MAAM,EAAE;iBACR,KAAK,CAAC,SAAS,CAAC,IAAI,CAAS,MAAM,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC;iBACxD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,CAAC,GAAW,EAAE,EAAE,CACd,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,KAAK,aAAa,CAClE,CAAC;YACF,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,UAAU,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,GACtC,aAAa,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAChE,iBAAiB,CAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAC7D,IAAI,CAAC,MAAM,CAAC,SAAmB,CAChC,CAAC;QACF,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,wBAAwB,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,cAAc,CACzE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAC1B,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,cAAc,EACpD,SAAS,CAAC,GAAG,CACd,CAAC;QAEF,QAAQ,CAAC,gBAAgB,GAAG,aAAa,CAAC;QAC1C,QAAQ,CAAC,UAAU,GAAG;YACpB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,EAAE,EAAE,QAAQ,CAAC,EAAE;YACf,IAAI,EAAE,SAAS,CAAC,IAAI;SACrB,CAAC;QACF,QAAQ,CAAC,OAAO,GAAG,WAAW,CAAC;QAC/B,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,cAAc;YACpB,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACO,UAAU,CAAC,KAAc;QACjC,MAAM,GAAG,GAAG,KAAc,CAAC;QAC3B,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,eAAe,CAAC;QAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,IAAI,WAAW,CACpB,kBAAkB,EAClB,qBAAqB,OAAO,EAAE,EAC9B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YACvC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC;YACjC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC5B,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC;YACtC,YAAY,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YACzC,GAA0B,CAAC,IAAI,KAAK,OAAO,EAC5C,CAAC;YACD,OAAO,IAAI,WAAW,CACpB,uBAAuB,EACvB,0BAA0B,OAAO,EAAE,EACnC,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IACE,YAAY,CAAC,QAAQ,CAAC,YAAY,CAAC;YACnC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAChC,CAAC;YACD,OAAO,IAAI,WAAW,CACpB,0BAA0B,EAC1B,sBAAsB,OAAO,EAAE,EAC/B,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,WAAW,CACpB,0BAA0B,EAC1B,mBAAmB,OAAO,EAAE,EAC5B,GAAG,CACJ,CAAC;IACJ,CAAC;CACF"}