@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2

package/src/cli/personal-secret-runtime.js

@@ -0,0 +1,567 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PersonalSecretRuntimeError = void 0;
+exports.encodePersonalSstSecretEnvelope = encodePersonalSstSecretEnvelope;
+exports.detectDelegatedAgentOrCi = detectDelegatedAgentOrCi;
+exports.createHumanSecretCeremony = createHumanSecretCeremony;
+exports.loadPersonalOperatorSecret = loadPersonalOperatorSecret;
+exports.createPersonalSecretAwsEnvironment = createPersonalSecretAwsEnvironment;
+exports.resolveCurrentAwsAccountId = resolveCurrentAwsAccountId;
+exports.developmentFoundationAccountIdFromEventBusArn = developmentFoundationAccountIdFromEventBusArn;
+exports.resolveDevelopmentFoundationAccountId = resolveDevelopmentFoundationAccountId;
+exports.createPersonalSecretValueValidator = createPersonalSecretValueValidator;
+exports.resolveWorkspaceSstRuntime = resolveWorkspaceSstRuntime;
+exports.buildWorkspaceSstSecretInvocation = buildWorkspaceSstSecretInvocation;
+exports.createWorkspacePinnedSstSecretStore = createWorkspacePinnedSstSecretStore;
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const promises_1 = require("node:fs/promises");
+const node_path_1 = require("node:path");
+const node_util_1 = require("node:util");
+const discovery_js_1 = require("../foundation/discovery.js");
+const preflight_js_1 = require("../foundation/preflight.js");
+const stages_js_1 = require("../foundation/stages.js");
+const tool_versions_js_1 = require("../generators/preset/tool-versions.js");
+const local_context_js_1 = require("../local-dev/local-context.js");
+const index_js_1 = require("../secrets/index.js");
+const personal_command_js_1 = require("../secrets/personal-command.js");
+const execFileAsync = (0, node_util_1.promisify)(node_child_process_1.execFile);
+const accountIdPattern = /^\d{12}$/;
+const logicalNamePattern = /^[A-Za-z][A-Za-z0-9]{0,63}$/;
+const personalSecretEnvelopePrefix = new TextEncoder().encode('ebk-personal-secret-v1:');
+const personalSecretKindCode = {
+    binary: 1,
+    json: 2,
+    string: 3,
+};
+const base64Alphabet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+class PersonalSecretRuntimeError extends Error {
+    code;
+    constructor(code) {
+        super(`Personal secret runtime failed (${code}).`);
+        this.code = code;
+        this.name = 'PersonalSecretRuntimeError';
+    }
+}
+exports.PersonalSecretRuntimeError = PersonalSecretRuntimeError;
+const agentEnvironmentNames = [
+    'BUILDKITE',
+    'CI',
+    'CLAUDECODE',
+    'CLAUDE_CODE_ENTRYPOINT',
+    'CODEBUILD_BUILD_ID',
+    'CODEX_SANDBOX',
+    'CODEX_THREAD_ID',
+    'CURSOR_AGENT',
+    'EBK_AGENT_DELEGATED',
+    'GITHUB_ACTIONS',
+    'JENKINS_URL',
+    'TF_BUILD',
+];
+function enabledEnvironmentFlag(value) {
+    if (!value)
+        return false;
+    return !['0', 'false', 'no', 'off'].includes(value.trim().toLowerCase());
+}
+function encodeBase64Bytes(input) {
+    const output = new Uint8Array(Math.ceil(input.byteLength / 3) * 4);
+    let source = 0;
+    let target = 0;
+    while (source < input.byteLength) {
+        const first = input[source] ?? 0;
+        const hasSecond = source + 1 < input.byteLength;
+        const hasThird = source + 2 < input.byteLength;
+        const second = input[source + 1] ?? 0;
+        const third = input[source + 2] ?? 0;
+        const bits = (first << 16) | (second << 8) | third;
+        output[target] = base64Alphabet.charCodeAt((bits >>> 18) & 0x3f);
+        output[target + 1] = base64Alphabet.charCodeAt((bits >>> 12) & 0x3f);
+        output[target + 2] = hasSecond
+            ? base64Alphabet.charCodeAt((bits >>> 6) & 0x3f)
+            : 0x3d;
+        output[target + 3] = hasThird
+            ? base64Alphabet.charCodeAt(bits & 0x3f)
+            : 0x3d;
+        source += 3;
+        target += 4;
+    }
+    return output;
+}
+/**
+ * Binds the stored SST value to one personal stage, declaration, and value
+ * shape. Raw SST values and values inherited from another stage cannot satisfy
+ * the runtime adapter.
+ */
+function encodePersonalSstSecretEnvelope(input) {
+    if (!ArrayBuffer.isView(input.bytes) ||
+        input.bytes.BYTES_PER_ELEMENT !== 1 ||
+        !logicalNamePattern.test(input.logicalName) ||
+        !(0, stages_js_1.isPersonalStage)(input.stage) ||
+        !['binary', 'json', 'string'].includes(input.valueKind)) {
+        throw new PersonalSecretRuntimeError('personal-secret-sst-runtime-invalid');
+    }
+    const stage = new TextEncoder().encode(input.stage);
+    const logicalName = new TextEncoder().encode(input.logicalName);
+    const envelope = new Uint8Array(4 + stage.byteLength + logicalName.byteLength + input.bytes.byteLength);
+    envelope[0] = 1;
+    envelope[1] = stage.byteLength;
+    envelope[2] = logicalName.byteLength;
+    envelope[3] = personalSecretKindCode[input.valueKind];
+    envelope.set(stage, 4);
+    envelope.set(logicalName, 4 + stage.byteLength);
+    envelope.set(input.bytes, 4 + stage.byteLength + logicalName.byteLength);
+    try {
+        const encoded = encodeBase64Bytes(envelope);
+        const result = new Uint8Array(personalSecretEnvelopePrefix.byteLength + encoded.byteLength);
+        result.set(personalSecretEnvelopePrefix);
+        result.set(encoded, personalSecretEnvelopePrefix.byteLength);
+        encoded.fill(0);
+        return result;
+    }
+    finally {
+        stage.fill(0);
+        logicalName.fill(0);
+        envelope.fill(0);
+    }
+}
+function detectDelegatedAgentOrCi(environment) {
+    return agentEnvironmentNames.some((name) => environment[name] !== undefined &&
+        (name !== 'CI' || enabledEnvironmentFlag(environment[name])));
+}
+function createHumanSecretCeremony(environment, stdinIsTty, outputIsTty) {
+    return (0, personal_command_js_1.issueHumanSecretCeremony)({
+        agentDelegated: detectDelegatedAgentOrCi(environment),
+        interactive: stdinIsTty && outputIsTty,
+        stdinIsTty,
+    });
+}
+function invalidDeclaration() {
+    throw new PersonalSecretRuntimeError('personal-secret-declaration-invalid');
+}
+function containedPath(root, candidate) {
+    const fromRoot = (0, node_path_1.relative)(root, candidate);
+    return (fromRoot === '' || (!fromRoot.startsWith('..') && !(0, node_path_1.isAbsolute)(fromRoot)));
+}
+async function defaultReadJson(path) {
+    let source;
+    try {
+        source = await (0, promises_1.readFile)(path, 'utf8');
+    }
+    catch {
+        return invalidDeclaration();
+    }
+    try {
+        return JSON.parse(source);
+    }
+    catch {
+        return invalidDeclaration();
+    }
+}
+async function loadPersonalOperatorSecret(input) {
+    const project = input.plan.projects[input.slice];
+    if (!project?.tags?.includes('type:slice') ||
+        typeof project.root !== 'string' ||
+        !logicalNamePattern.test(input.logicalName)) {
+        return invalidDeclaration();
+    }
+    let workspaceRoot;
+    let projectRoot;
+    try {
+        workspaceRoot = (0, node_fs_1.realpathSync)(input.workspaceRoot);
+        projectRoot = (0, node_fs_1.realpathSync)((0, node_path_1.isAbsolute)(project.root)
+            ? project.root
+            : (0, node_path_1.resolve)(workspaceRoot, project.root));
+    }
+    catch {
+        return invalidDeclaration();
+    }
+    if (!containedPath(workspaceRoot, projectRoot)) {
+        return invalidDeclaration();
+    }
+    let registry;
+    try {
+        registry = (0, index_js_1.parseSecretMetadataRegistry)(await (input.readJson ?? defaultReadJson)((0, node_path_1.join)(projectRoot, index_js_1.SECRET_METADATA_REGISTRY_PATH)));
+    }
+    catch {
+        return invalidDeclaration();
+    }
+    if (!(await (input.verifyDeclarations ??
+        ((root) => (0, index_js_1.verifyDeclaredSecretContract)({ projectRoot: root })))(projectRoot))) {
+        return invalidDeclaration();
+    }
+    const declaration = (0, index_js_1.operatorSecretMetadataDeclarations)(registry).find(({ logicalName }) => logicalName === input.logicalName);
+    if (!declaration || !declaration.requiredStages.includes('development')) {
+        return invalidDeclaration();
+    }
+    return Object.freeze({ declaration, projectRoot });
+}
+function requireAwsContext(context) {
+    try {
+        return {
+            profile: (0, local_context_js_1.normalizeLocalDevProfile)(context.profile),
+            region: (0, local_context_js_1.normalizeLocalDevRegion)(context.region),
+        };
+    }
+    catch {
+        throw new PersonalSecretRuntimeError('personal-secret-account-unavailable');
+    }
+}
+function safeInheritedEnvironment(environment) {
+    const inherited = {};
+    for (const name of [
+        'APPDATA',
+        'AWS_CA_BUNDLE',
+        'AWS_CONFIG_FILE',
+        'AWS_SHARED_CREDENTIALS_FILE',
+        'HOME',
+        'LOCALAPPDATA',
+        'PATH',
+        'PATHEXT',
+        'SystemRoot',
+        'TEMP',
+        'TMP',
+        'TMPDIR',
+        'USERPROFILE',
+        'XDG_CONFIG_HOME',
+    ]) {
+        const value = environment[name];
+        if (value)
+            inherited[name] = value;
+    }
+    return inherited;
+}
+function createPersonalSecretAwsEnvironment(context, environment = process.env) {
+    const validated = requireAwsContext(context);
+    return {
+        ...safeInheritedEnvironment(environment),
+        AWS_DEFAULT_REGION: validated.region,
+        AWS_EC2_METADATA_DISABLED: 'true',
+        AWS_PROFILE: validated.profile,
+        AWS_REGION: validated.region,
+        AWS_SDK_LOAD_CONFIG: '1',
+    };
+}
+async function resolveCurrentAwsAccountId(context, environment = process.env) {
+    const validated = requireAwsContext(context);
+    try {
+        const result = await execFileAsync('aws', [
+            'sts',
+            'get-caller-identity',
+            '--profile',
+            validated.profile,
+            '--region',
+            validated.region,
+            '--query',
+            'Account',
+            '--output',
+            'text',
+            '--no-cli-pager',
+        ], {
+            encoding: 'utf8',
+            env: createPersonalSecretAwsEnvironment(validated, environment),
+            maxBuffer: 4 * 1024,
+            timeout: 15_000,
+            windowsHide: true,
+        });
+        const accountId = result.stdout.trim();
+        if (!accountIdPattern.test(accountId)) {
+            throw new Error('invalid account');
+        }
+        return accountId;
+    }
+    catch {
+        throw new PersonalSecretRuntimeError('personal-secret-account-unavailable');
+    }
+}
+function developmentFoundationAccountIdFromEventBusArn(arn, region) {
+    let validatedRegion;
+    try {
+        validatedRegion = (0, local_context_js_1.normalizeLocalDevRegion)(region);
+    }
+    catch {
+        throw new PersonalSecretRuntimeError('personal-secret-foundation-account-invalid');
+    }
+    const match = /^arn:(?:aws|aws-us-gov|aws-cn):events:([a-z0-9-]+):(\d{12}):event-bus\/[A-Za-z0-9._/-]+$/.exec(arn);
+    if (!match ||
+        match[1] !== validatedRegion ||
+        !accountIdPattern.test(match[2])) {
+        throw new PersonalSecretRuntimeError('personal-secret-foundation-account-invalid');
+    }
+    return match[2];
+}
+async function resolveDevelopmentFoundationAccountId(context) {
+    const validated = requireAwsContext(context);
+    try {
+        const parameter = (0, discovery_js_1.foundationSsmPath)('development', 'eventBusArn');
+        const reader = (0, preflight_js_1.createFoundationParameterReader)(validated);
+        const result = await reader.read([parameter]);
+        const value = result.values.get(parameter);
+        if (result.invalidNames.includes(parameter) || !value) {
+            throw new Error('Foundation account discovery is absent.');
+        }
+        return developmentFoundationAccountIdFromEventBusArn(value, validated.region);
+    }
+    catch (error) {
+        if (error instanceof PersonalSecretRuntimeError)
+            throw error;
+        throw new PersonalSecretRuntimeError('personal-secret-foundation-account-invalid');
+    }
+}
+function createPersonalSecretValueValidator(input) {
+    if (!(0, node_path_1.isAbsolute)(input.projectRoot) ||
+        !logicalNamePattern.test(input.logicalName) ||
+        !['binary', 'json', 'string'].includes(input.valueKind)) {
+        throw new PersonalSecretRuntimeError('personal-secret-declaration-invalid');
+    }
+    const spawnProcess = input.spawnProcess ?? node_child_process_1.spawn;
+    return {
+        validate({ bytes, valueKind }) {
+            if (valueKind !== input.valueKind) {
+                return Promise.resolve(false);
+            }
+            let script;
+            try {
+                script = (0, index_js_1.resolvePersonalSecretValidatorPath)(input.projectRoot);
+            }
+            catch {
+                return Promise.resolve(false);
+            }
+            return new Promise((resolvePromise) => {
+                let child;
+                try {
+                    child = spawnProcess(process.execPath, [
+                        '--experimental-strip-types',
+                        script,
+                        input.logicalName,
+                        input.valueKind,
+                    ], {
+                        cwd: input.projectRoot,
+                        env: safeInheritedEnvironment(input.environment ?? process.env),
+                        shell: false,
+                        stdio: ['pipe', 'pipe', 'ignore'],
+                        windowsHide: true,
+                    });
+                }
+                catch {
+                    resolvePromise(false);
+                    return;
+                }
+                let settled = false;
+                let output = '';
+                const settle = (valid) => {
+                    if (settled)
+                        return;
+                    settled = true;
+                    clearTimeout(timeout);
+                    resolvePromise(valid);
+                };
+                const timeout = setTimeout(() => {
+                    try {
+                        child.kill();
+                    }
+                    catch {
+                        // A concurrent exit is represented by close.
+                    }
+                    settle(false);
+                }, 10_000);
+                child.stdout?.setEncoding('utf8');
+                child.stdout?.on('data', (chunk) => {
+                    output += chunk;
+                    if (output.length > 32) {
+                        try {
+                            child.kill();
+                        }
+                        catch {
+                            // A concurrent exit is represented by close.
+                        }
+                        settle(false);
+                    }
+                });
+                child.once('error', () => settle(false));
+                child.once('close', (code) => settle(code === 0 && output === 'valid\n'));
+                if (!child.stdin) {
+                    settle(false);
+                    return;
+                }
+                child.stdin.once('error', () => settle(false));
+                child.stdin.end(bytes);
+            });
+        },
+    };
+}
+function resolveWorkspaceSstRuntime(workspaceRoot) {
+    try {
+        const root = (0, node_fs_1.realpathSync)(workspaceRoot);
+        const workspaceManifest = JSON.parse((0, node_fs_1.readFileSync)((0, node_path_1.join)(root, 'package.json'), 'utf8'));
+        const declared = workspaceManifest.devDependencies?.['sst'] ??
+            workspaceManifest.dependencies?.['sst'];
+        if (declared !== tool_versions_js_1.WORKSPACE_SST_VERSION) {
+            throw new Error('SST is not exact-pinned.');
+        }
+        const manifestPath = (0, node_fs_1.realpathSync)((0, node_path_1.join)(root, 'node_modules', 'sst', 'package.json'));
+        const packageDirectory = (0, node_fs_1.realpathSync)((0, node_path_1.dirname)(manifestPath));
+        const manifest = JSON.parse((0, node_fs_1.readFileSync)(manifestPath, 'utf8'));
+        const binary = (0, node_fs_1.realpathSync)((0, node_path_1.join)(packageDirectory, 'bin', 'sst.mjs'));
+        if (manifest.version !== tool_versions_js_1.WORKSPACE_SST_VERSION ||
+            !containedPath(packageDirectory, binary)) {
+            throw new Error('Installed SST does not match the pin.');
+        }
+        return Object.freeze({
+            binary,
+            version: tool_versions_js_1.WORKSPACE_SST_VERSION,
+        });
+    }
+    catch {
+        throw new PersonalSecretRuntimeError('personal-secret-sst-runtime-invalid');
+    }
+}
+function buildWorkspaceSstSecretInvocation(input) {
+    const aws = requireAwsContext(input.aws);
+    if (!(0, node_path_1.isAbsolute)(input.projectRoot) ||
+        !(0, node_path_1.isAbsolute)(input.runtime.binary) ||
+        input.runtime.version !== tool_versions_js_1.WORKSPACE_SST_VERSION ||
+        !logicalNamePattern.test(input.logicalName) ||
+        !(0, stages_js_1.isPersonalStage)(input.stage)) {
+        throw new PersonalSecretRuntimeError('personal-secret-sst-runtime-invalid');
+    }
+    return Object.freeze({
+        args: Object.freeze([
+            input.runtime.binary,
+            'secret',
+            input.operation,
+            input.logicalName,
+            '--stage',
+            input.stage,
+            '--profile',
+            aws.profile,
+        ]),
+        cwd: input.projectRoot,
+        environment: Object.freeze({
+            ...createPersonalSecretAwsEnvironment(aws, input.environment ?? process.env),
+            EBK_CONSUMER_STAGE: input.stage,
+            EBK_FOUNDATION_STAGE: 'development',
+            EBK_STAGE: input.stage,
+            SST_TELEMETRY_DISABLED: '1',
+        }),
+        executable: process.execPath,
+        logicalName: input.logicalName,
+        operation: input.operation,
+    });
+}
+function runSstSecretInvocation(invocation, spawnProcess, bytes, signal) {
+    return new Promise((resolvePromise, rejectPromise) => {
+        let child;
+        try {
+            const options = {
+                cwd: invocation.cwd,
+                env: invocation.environment,
+                ...(signal ? { signal } : {}),
+                shell: false,
+                stdio: invocation.operation === 'set'
+                    ? ['pipe', 'ignore', 'ignore']
+                    : ['ignore', 'pipe', 'pipe'],
+                windowsHide: true,
+            };
+            child = spawnProcess(invocation.executable, [...invocation.args], options);
+        }
+        catch {
+            rejectPromise(new PersonalSecretRuntimeError('personal-secret-sst-command-failed'));
+            return;
+        }
+        let settled = false;
+        let removeOutputBytes = 0;
+        let removeOutputOverflow = false;
+        const removeOutput = [];
+        const timer = {};
+        const terminate = () => {
+            try {
+                child.kill();
+            }
+            catch {
+                // A concurrent child exit is already represented by the close event.
+            }
+        };
+        const settle = (success) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer.timeout)
+                clearTimeout(timer.timeout);
+            if (success) {
+                resolvePromise();
+            }
+            else {
+                rejectPromise(new PersonalSecretRuntimeError('personal-secret-sst-command-failed'));
+            }
+        };
+        timer.timeout = setTimeout(() => {
+            terminate();
+            settle(false);
+        }, 60_000);
+        timer.timeout.unref();
+        child.once('error', () => settle(false));
+        if (invocation.operation === 'remove') {
+            const capture = (chunk) => {
+                const captured = Buffer.isBuffer(chunk)
+                    ? Buffer.from(chunk)
+                    : Buffer.from(chunk, 'utf8');
+                removeOutputBytes += captured.byteLength;
+                if (removeOutputBytes > index_js_1.SST_SECRET_REMOVE_OUTPUT_MAX_BYTES) {
+                    removeOutputOverflow = true;
+                    removeOutput.length = 0;
+                    return;
+                }
+                if (!removeOutputOverflow)
+                    removeOutput.push(captured);
+            };
+            child.stdout?.on('data', capture);
+            child.stderr?.on('data', capture);
+        }
+        child.once('close', (code) => settle(code === 0 ||
+            (invocation.operation === 'remove' &&
+                !removeOutputOverflow &&
+                (0, index_js_1.isExactSstSecretAlreadyAbsent)(Buffer.concat(removeOutput), invocation.logicalName))));
+        if (invocation.operation === 'set') {
+            if (!bytes || !child.stdin) {
+                terminate();
+                settle(false);
+                return;
+            }
+            child.stdin.once('error', () => {
+                terminate();
+                settle(false);
+            });
+            child.stdin.end(bytes);
+        }
+    });
+}
+function createWorkspacePinnedSstSecretStore(input) {
+    const spawnProcess = input.spawnProcess ?? node_child_process_1.spawn;
+    const invocation = (operation, logicalName, stage) => buildWorkspaceSstSecretInvocation({
+        aws: input.aws,
+        ...(input.environment ? { environment: input.environment } : {}),
+        logicalName,
+        operation,
+        projectRoot: input.projectRoot,
+        runtime: input.runtime,
+        stage,
+    });
+    return {
+        remove: ({ logicalName, stage }) => runSstSecretInvocation(invocation('remove', logicalName, stage), spawnProcess, undefined, input.signal),
+        async setFromHiddenInput({ logicalName, stage, valueKind }, bytes) {
+            const encoded = encodePersonalSstSecretEnvelope({
+                bytes,
+                logicalName,
+                stage,
+                valueKind,
+            });
+            try {
+                await runSstSecretInvocation(invocation('set', logicalName, stage), spawnProcess, encoded, input.signal);
+            }
+            finally {
+                encoded.fill(0);
+            }
+        },
+    };
+}
+//# sourceMappingURL=personal-secret-runtime.js.map

package/src/cli/personal-secret-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"personal-secret-runtime.js","sourceRoot":"","sources":["../../../../../packages/nx/src/cli/personal-secret-runtime.ts"],"names":[],"mappings":";;;AAwIA,0EA0CC;AAED,4DAQC;AAED,8DAUC;AA2BD,gEA0DC;AAyCD,gFAaC;AAED,gEAqCC;AAED,sGA0BC;AAED,sFAsBC;AAED,gFA0FC;AAED,gEAsCC;AAED,8EA6CC;AA2GD,kFAqDC;AAjwBD,2DAAwE;AACxE,qCAAoE;AACpE,+CAA4C;AAC5C,yCAAyE;AACzE,yCAAsC;AAEtC,6DAA+D;AAC/D,6DAA6E;AAC7E,uDAA0D;AAC1D,4EAA8E;AAC9E,oEAGuC;AAEvC,kDAS6B;AAC7B,wEAKwC;AAExC,MAAM,aAAa,GAAG,IAAA,qBAAS,EAAC,6BAAQ,CAAC,CAAC;AAC1C,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AACzD,MAAM,4BAA4B,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAC3D,yBAAyB,CAC1B,CAAC;AACF,MAAM,sBAAsB,GAAG;IAC7B,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,MAAM,EAAE,CAAC;CACD,CAAC;AACX,MAAM,cAAc,GAClB,kEAAkE,CAAC;AAErE,MAAa,0BAA2B,SAAQ,KAAK;IAExC;IADX,YACW,IAKgC;QAEzC,KAAK,CAAC,mCAAmC,IAAI,IAAI,CAAC,CAAC;QAP1C,SAAI,GAAJ,IAAI,CAK4B;QAGzC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAZD,gEAYC;AA4BD,MAAM,qBAAqB,GAAG;IAC5B,WAAW;IACX,IAAI;IACJ,YAAY;IACZ,wBAAwB;IACxB,oBAAoB;IACpB,eAAe;IACf,iBAAiB;IACjB,cAAc;IACd,qBAAqB;IACrB,gBAAgB;IAChB,aAAa;IACb,UAAU;CACF,CAAC;AAEX,SAAS,sBAAsB,CAAC,KAAyB;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiB;IAC1C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;QAC/C,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,SAAS;YAC5B,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,QAAQ;YAC3B,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC;YACxC,CAAC,CAAC,IAAI,CAAC;QACT,MAAM,IAAI,CAAC,CAAC;QACZ,MAAM,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,SAAgB,+BAA+B,CAAC,KAK/C;IACC,IACE,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAChC,KAAK,CAAC,KAAK,CAAC,iBAAiB,KAAK,CAAC;QACnC,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC,IAAA,2BAAe,EAAC,KAAK,CAAC,KAAK,CAAC;QAC7B,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,UAAU,CAC7B,CAAC,GAAG,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CACvE,CAAC;IACF,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,QAAQ,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;IAC/B,QAAQ,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC;IACrC,QAAQ,CAAC,CAAC,CAAC,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvB,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAEzE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,4BAA4B,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAC7D,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,4BAA4B,CAAC,UAAU,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAgB,wBAAwB,CACtC,WAA8B;IAE9B,OAAO,qBAAqB,CAAC,IAAI,CAC/B,CAAC,IAAI,EAAE,EAAE,CACP,WAAW,CAAC,IAAI,CAAC,KAAK,SAAS;QAC/B,CAAC,IAAI,KAAK,IAAI,IAAI,sBAAsB,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAgB,yBAAyB,CACvC,WAA8B,EAC9B,UAAmB,EACnB,WAAoB;IAEpB,OAAO,IAAA,8CAAwB,EAAC;QAC9B,cAAc,EAAE,wBAAwB,CAAC,WAAW,CAAC;QACrD,WAAW,EAAE,UAAU,IAAI,WAAW;QACtC,UAAU;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB;IACzB,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,SAAiB;IACpD,MAAM,QAAQ,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,CACL,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAA,sBAAU,EAAC,QAAQ,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAc;IAC3C,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,IAAA,mBAAQ,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAAC,KAOhD;IACC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjD,IACE,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC;QACtC,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;QAChC,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAC3C,CAAC;QACD,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,aAAqB,CAAC;IAC1B,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,aAAa,GAAG,IAAA,sBAAY,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAClD,WAAW,GAAG,IAAA,sBAAY,EACxB,IAAA,sBAAU,EAAC,OAAO,CAAC,IAAI,CAAC;YACtB,CAAC,CAAC,OAAO,CAAC,IAAI;YACd,CAAC,CAAC,IAAA,mBAAO,EAAC,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,CACzC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,WAAW,CAAC,EAAE,CAAC;QAC/C,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IAED,IAAI,QAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,sCAA2B,EACpC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,eAAe,CAAC,CACvC,IAAA,gBAAI,EAAC,WAAW,EAAE,wCAA6B,CAAC,CACjD,CACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,IACE,CAAC,CAAC,MAAM,CACN,KAAK,CAAC,kBAAkB;QACxB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,uCAA4B,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAChE,CAAC,WAAW,CAAC,CAAC,EACf,CAAC;QACD,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,6CAAkC,EAAC,QAAQ,CAAC,CAAC,IAAI,CACnE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CACvD,CAAC;IACF,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACxE,OAAO,kBAAkB,EAAE,CAAC;IAC9B,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,iBAAiB,CACxB,OAAiC;IAEjC,IAAI,CAAC;QACH,OAAO;YACL,OAAO,EAAE,IAAA,2CAAwB,EAAC,OAAO,CAAC,OAAO,CAAC;YAClD,MAAM,EAAE,IAAA,0CAAuB,EAAC,OAAO,CAAC,MAAM,CAAC;SAChD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAC/B,WAA8B;IAE9B,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI;QACjB,SAAS;QACT,eAAe;QACf,iBAAiB;QACjB,6BAA6B;QAC7B,MAAM;QACN,cAAc;QACd,MAAM;QACN,SAAS;QACT,YAAY;QACZ,MAAM;QACN,KAAK;QACL,QAAQ;QACR,aAAa;QACb,iBAAiB;KACT,EAAE,CAAC;QACX,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK;YAAE,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,kCAAkC,CAChD,OAAiC,EACjC,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO;QACL,GAAG,wBAAwB,CAAC,WAAW,CAAC;QACxC,kBAAkB,EAAE,SAAS,CAAC,MAAM;QACpC,yBAAyB,EAAE,MAAM;QACjC,WAAW,EAAE,SAAS,CAAC,OAAO;QAC9B,UAAU,EAAE,SAAS,CAAC,MAAM;QAC5B,mBAAmB,EAAE,GAAG;KACzB,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,0BAA0B,CAC9C,OAAiC,EACjC,cAAiC,OAAO,CAAC,GAAG;IAE5C,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAChC,KAAK,EACL;YACE,KAAK;YACL,qBAAqB;YACrB,WAAW;YACX,SAAS,CAAC,OAAO;YACjB,UAAU;YACV,SAAS,CAAC,MAAM;YAChB,SAAS;YACT,SAAS;YACT,UAAU;YACV,MAAM;YACN,gBAAgB;SACjB,EACD;YACE,QAAQ,EAAE,MAAM;YAChB,GAAG,EAAE,kCAAkC,CAAC,SAAS,EAAE,WAAW,CAAC;YAC/D,SAAS,EAAE,CAAC,GAAG,IAAI;YACnB,OAAO,EAAE,MAAM;YACf,WAAW,EAAE,IAAI;SAClB,CACF,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACvC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAgB,6CAA6C,CAC3D,GAAW,EACX,MAAc;IAEd,IAAI,eAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,eAAe,GAAG,IAAA,0CAAuB,EAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAClC,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GACT,0FAA0F,CAAC,IAAI,CAC7F,GAAG,CACJ,CAAC;IACJ,IACE,CAAC,KAAK;QACN,KAAK,CAAC,CAAC,CAAC,KAAK,eAAe;QAC5B,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,0BAA0B,CAClC,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAEM,KAAK,UAAU,qCAAqC,CACzD,OAAiC;IAEjC,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAA,gCAAiB,EAAC,aAAa,EAAE,aAAa,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,IAAA,8CAA+B,EAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,6CAA6C,CAClD,KAAK,EACL,SAAS,CAAC,MAAM,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,IAAI,0BAA0B,CAClC,4CAA4C,CAC7C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,kCAAkC,CAAC,KAMlD;IACC,IACE,CAAC,IAAA,sBAAU,EAAC,KAAK,CAAC,WAAW,CAAC;QAC9B,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,0BAAK,CAAC;IACjD,OAAO;QACL,QAAQ,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE;YAC3B,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;gBAClC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAA,6CAAkC,EAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACjE,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,IAAI,OAAO,CAAU,CAAC,cAAc,EAAE,EAAE;gBAC7C,IAAI,KAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,KAAK,GAAG,YAAY,CAClB,OAAO,CAAC,QAAQ,EAChB;wBACE,4BAA4B;wBAC5B,MAAM;wBACN,KAAK,CAAC,WAAW;wBACjB,KAAK,CAAC,SAAS;qBAChB,EACD;wBACE,GAAG,EAAE,KAAK,CAAC,WAAW;wBACtB,GAAG,EAAE,wBAAwB,CAAC,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;wBAC/D,KAAK,EAAE,KAAK;wBACZ,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;wBACjC,WAAW,EAAE,IAAI;qBAClB,CACF,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,cAAc,CAAC,KAAK,CAAC,CAAC;oBACtB,OAAO;gBACT,CAAC;gBACD,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,IAAI,MAAM,GAAG,EAAE,CAAC;gBAChB,MAAM,MAAM,GAAG,CAAC,KAAc,EAAE,EAAE;oBAChC,IAAI,OAAO;wBAAE,OAAO;oBACpB,OAAO,GAAG,IAAI,CAAC;oBACf,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,cAAc,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC,CAAC;gBACF,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;oBAC9B,IAAI,CAAC;wBACH,KAAK,CAAC,IAAI,EAAE,CAAC;oBACf,CAAC;oBAAC,MAAM,CAAC;wBACP,6CAA6C;oBAC/C,CAAC;oBACD,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC,EAAE,MAAM,CAAC,CAAC;gBACX,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;gBAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;oBACzC,MAAM,IAAI,KAAK,CAAC;oBAChB,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;wBACvB,IAAI,CAAC;4BACH,KAAK,CAAC,IAAI,EAAE,CAAC;wBACf,CAAC;wBAAC,MAAM,CAAC;4BACP,6CAA6C;wBAC/C,CAAC;wBACD,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,KAAK,SAAS,CAAC,CAC3C,CAAC;gBACF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBACjB,MAAM,CAAC,KAAK,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/C,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACzB,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,aAAqB;IAErB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;QACzC,MAAM,iBAAiB,GAAG,IAAI,CAAC,KAAK,CAClC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAIjD,CAAC;QACF,MAAM,QAAQ,GACZ,iBAAiB,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC;YAC1C,iBAAiB,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,wCAAqB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,YAAY,GAAG,IAAA,sBAAY,EAC/B,IAAA,gBAAI,EAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,CAAC,CAClD,CAAC;QACF,MAAM,gBAAgB,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,YAAY,CAAC,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,YAAY,EAAE,MAAM,CAAC,CAE7D,CAAC;QACF,MAAM,MAAM,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,gBAAgB,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;QACtE,IACE,QAAQ,CAAC,OAAO,KAAK,wCAAqB;YAC1C,CAAC,aAAa,CAAC,gBAAgB,EAAE,MAAM,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM;YACN,OAAO,EAAE,wCAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAgB,iCAAiC,CAAC,KAQjD;IACC,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACzC,IACE,CAAC,IAAA,sBAAU,EAAC,KAAK,CAAC,WAAW,CAAC;QAC9B,CAAC,IAAA,sBAAU,EAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,wCAAqB;QAC/C,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAC3C,CAAC,IAAA,2BAAe,EAAC,KAAK,CAAC,KAAK,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YAClB,KAAK,CAAC,OAAO,CAAC,MAAM;YACpB,QAAQ;YACR,KAAK,CAAC,SAAS;YACf,KAAK,CAAC,WAAW;YACjB,SAAS;YACT,KAAK,CAAC,KAAK;YACX,WAAW;YACX,GAAG,CAAC,OAAO;SACZ,CAAC;QACF,GAAG,EAAE,KAAK,CAAC,WAAW;QACtB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC;YACzB,GAAG,kCAAkC,CACnC,GAAG,EACH,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CACjC;YACD,kBAAkB,EAAE,KAAK,CAAC,KAAK;YAC/B,oBAAoB,EAAE,aAAa;YACnC,SAAS,EAAE,KAAK,CAAC,KAAK;YACtB,sBAAsB,EAAE,GAAG;SAC5B,CAAC;QACF,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,sBAAsB,CAC7B,UAAwC,EACxC,YAA0C,EAC1C,KAAkB,EAClB,MAAoB;IAEpB,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,IAAI,KAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,OAAO,GAAiB;gBAC5B,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,GAAG,EAAE,UAAU,CAAC,WAAW;gBAC3B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,KAAK,EAAE,KAAK;gBACZ,KAAK,EACH,UAAU,CAAC,SAAS,KAAK,KAAK;oBAC5B,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC;oBAC9B,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;gBAChC,WAAW,EAAE,IAAI;aAClB,CAAC;YACF,KAAK,GAAG,YAAY,CAClB,UAAU,CAAC,UAAU,EACrB,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EACpB,OAAO,CACR,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,CACX,IAAI,0BAA0B,CAAC,oCAAoC,CAAC,CACrE,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,IAAI,oBAAoB,GAAG,KAAK,CAAC;QACjC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,KAAK,GAAiC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,GAAG,EAAE;YACrB,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;YAAC,MAAM,CAAC;gBACP,qEAAqE;YACvE,CAAC;QACH,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,OAAgB,EAAE,EAAE;YAClC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK,CAAC,OAAO;gBAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,cAAc,EAAE,CAAC;YACnB,CAAC;iBAAM,CAAC;gBACN,aAAa,CACX,IAAI,0BAA0B,CAAC,oCAAoC,CAAC,CACrE,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,SAAS,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CAAC,CAAC;QAChB,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACzC,IAAI,UAAU,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,CAAC,KAAsB,EAAE,EAAE;gBACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACrC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;oBACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC/B,iBAAiB,IAAI,QAAQ,CAAC,UAAU,CAAC;gBACzC,IAAI,iBAAiB,GAAG,6CAAkC,EAAE,CAAC;oBAC3D,oBAAoB,GAAG,IAAI,CAAC;oBAC5B,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,oBAAoB;oBAAE,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACzD,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAC3B,MAAM,CACJ,IAAI,KAAK,CAAC;YACR,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ;gBAChC,CAAC,oBAAoB;gBACrB,IAAA,wCAA6B,EAC3B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAC3B,UAAU,CAAC,WAAW,CACvB,CAAC,CACP,CACF,CAAC;QAEF,IAAI,UAAU,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACnC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBAC3B,SAAS,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,CAAC;gBACd,OAAO;YACT,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;gBAC7B,SAAS,EAAE,CAAC;gBACZ,MAAM,CAAC,KAAK,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,mCAAmC,CAAC,KAOnD;IACC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,IAAI,0BAAK,CAAC;IACjD,MAAM,UAAU,GAAG,CACjB,SAAoD,EACpD,WAAmB,EACnB,KAAa,EACb,EAAE,CACF,iCAAiC,CAAC;QAChC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,WAAW;QACX,SAAS;QACT,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK;KACN,CAAC,CAAC;IACL,OAAO;QACL,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,CACjC,sBAAsB,CACpB,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,EACxC,YAAY,EACZ,SAAS,EACT,KAAK,CAAC,MAAM,CACb;QACH,KAAK,CAAC,kBAAkB,CACtB,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,EACjC,KAAK;YAEL,MAAM,OAAO,GAAG,+BAA+B,CAAC;gBAC9C,KAAK;gBACL,WAAW;gBACX,KAAK;gBACL,SAAS;aACV,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,sBAAsB,CAC1B,UAAU,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,EACrC,YAAY,EACZ,OAAO,EACP,KAAK,CAAC,MAAM,CACb,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/src/cli/secret-terminal.d.ts

@@ -0,0 +1,12 @@
+import type { ReadStream, WriteStream } from 'node:tty';
+import type { HiddenSecretInputReader, PersonalSecretConfirmation } from '../secrets/personal-command.js';
+export declare class SecretTerminalError extends Error {
+    constructor();
+}
+interface SecretTerminal {
+    input: ReadStream;
+    output: WriteStream;
+}
+export declare function createTtyHiddenSecretInputReader(terminal?: SecretTerminal): HiddenSecretInputReader;
+export declare function createTtySecretConfirmation(terminal?: SecretTerminal): PersonalSecretConfirmation;
+export {};