@empire-builder-kit/nx 1.0.0-rc.30 → 1.0.0-rc.31

package/src/secrets/operator.js

@@ -2,7 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SecretOperatorControlPlaneError = void 0;
 exports.runSecretMetadataOperator = runSecretMetadataOperator;
+exports.runGeneratedSecretInitializer = runGeneratedSecretInitializer;
 exports.runSecretDeployPreflight = runSecretDeployPreflight;
+exports.runGeneratedSecretRetirement = runGeneratedSecretRetirement;
 exports.runProtectedSecretLifecycle = runProtectedSecretLifecycle;
 const deterministic_order_js_1 = require("../deterministic-order.js");
 const metadata_js_1 = require("./metadata.js");
@@ -30,6 +32,11 @@ function safeControlPlaneError(error, code, operation) {
 }
 async function collectSecretMetadata(controlPlane, scope, options = {}) {
     const namePrefix = canonicalPrefix(scope);
+    const exactNames = [...new Set(options.exactNames ?? [])].sort(deterministic_order_js_1.compareUtf16);
+    if (exactNames.length !== (options.exactNames ?? []).length ||
+        exactNames.some((name) => !name.startsWith(namePrefix))) {
+        throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+    }
     let listed;
     try {
         listed = await controlPlane.list({
@@ -64,7 +71,7 @@ async function collectSecretMetadata(controlPlane, scope, options = {}) {
         }
     }
     try {
-        return await Promise.all(inventory
+        const described = await Promise.all(inventory
             .sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.name, right.name))
             .map(async (item) => {
             const description = await controlPlane.describe({ arn: item.arn });
@@ -74,6 +81,24 @@ async function collectSecretMetadata(controlPlane, scope, options = {}) {
             }
             return description;
         }));
+        for (const name of exactNames) {
+            if (described.some((secret) => secret.name === name))
+                continue;
+            const exact = await controlPlane.describeExact({
+                ...(options.includePlannedDeletion === undefined
+                    ? {}
+                    : { includePlannedDeletion: options.includePlannedDeletion }),
+                name,
+            });
+            if (exact === undefined)
+                continue;
+            (0, model_js_1.validateObservedSecretMetadata)(exact);
+            if (exact.name !== name || !exact.arn.includes(`:secret:${name}-`)) {
+                throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'describe');
+            }
+            described.push(exact);
+        }
+        return described.sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.name, right.name));
     }
     catch (error) {
         throw safeControlPlaneError(error, 'secret-control-plane-inventory-failed', 'describe');
@@ -106,11 +131,34 @@ async function applyMutation(controlPlane, mutation) {
 }
 async function runSecretMetadataOperator(input) {
     const mode = input.mode ?? 'report';
-    const observed = await collectSecretMetadata(input.controlPlane, input.scope);
+    (0, model_js_1.validateSecretManagementScope)(input.scope);
+    const logicalNames = new Set();
+    for (const declaration of input.declarations) {
+        (0, model_js_1.validateSecretMetadataDeclaration)(declaration);
+        if (logicalNames.has(declaration.logicalName)) {
+            throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+        }
+        logicalNames.add(declaration.logicalName);
+    }
+    // A generated secret's container and first value are one CreateSecret
+    // transaction. Keep it entirely out of the value-free metadata operator so
+    // this path cannot pre-create or retag the generated container.
+    const generatedNames = new Set(input.declarations
+        .filter((declaration) => declaration.source === 'generated' &&
+        declaration.requiredStages.includes(input.scope.stage))
+        .map((declaration) => (0, model_js_1.canonicalOperatorSecretName)(input.scope, declaration.logicalName)));
+    const declarations = input.declarations.filter((declaration) => declaration.source !== 'generated');
+    const exactNames = declarations
+        .filter((declaration) => declaration.requiredStages.includes(input.scope.stage))
+        .map((declaration) => (0, model_js_1.canonicalOperatorSecretName)(input.scope, declaration.logicalName));
+    const observed = await collectSecretMetadata(input.controlPlane, input.scope, {
+        exactNames,
+    });
+    const operatorObserved = observed.filter((secret) => !generatedNames.has(secret.name));
     const before = (0, metadata_js_1.reconcileSecretMetadata)({
-        declarations: input.declarations,
+        declarations,
         mode,
-        observed,
+        observed: operatorObserved,
         scope: input.scope,
     });
     if (mode === 'report') {
@@ -137,11 +185,11 @@ async function runSecretMetadataOperator(input) {
             newlyCreated.push(created);
         applied.push(mutation);
     }
-    const afterObserved = await collectSecretMetadata(input.controlPlane, input.scope, { newlyCreated });
+    const afterObserved = await collectSecretMetadata(input.controlPlane, input.scope, { exactNames, newlyCreated });
     const after = (0, metadata_js_1.reconcileSecretMetadata)({
-        declarations: input.declarations,
+        declarations,
         mode: 'report',
-        observed: afterObserved,
+        observed: afterObserved.filter((secret) => !generatedNames.has(secret.name)),
         scope: input.scope,
     });
     return Object.freeze({
@@ -152,6 +200,137 @@ async function runSecretMetadataOperator(input) {
         outcome: after.status === 'clean' ? 'applied' : 'applied-with-findings',
     });
 }
+async function runGeneratedSecretInitializer(input) {
+    const mode = input.mode ?? 'report';
+    if (mode !== 'apply' && mode !== 'report') {
+        throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'initialize-generated');
+    }
+    (0, model_js_1.validateSecretManagementScope)(input.scope);
+    const names = new Set();
+    for (const declaration of input.declarations) {
+        (0, model_js_1.validateSecretMetadataDeclaration)(declaration);
+        if (names.has(declaration.logicalName)) {
+            throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'initialize-generated');
+        }
+        names.add(declaration.logicalName);
+    }
+    const declaration = input.declarations.find(({ logicalName }) => logicalName === input.logicalName);
+    if (declaration?.source !== 'generated' ||
+        declaration.generation === undefined ||
+        !declaration.requiredStages.includes(input.scope.stage)) {
+        throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'initialize-generated');
+    }
+    const name = (0, model_js_1.canonicalOperatorSecretName)(input.scope, declaration.logicalName);
+    const description = `EBK ${declaration.source} secret ${declaration.logicalName}`;
+    const expectedTags = (0, model_js_1.canonicalOperatorSecretTags)(input.scope, declaration);
+    const observed = await collectSecretMetadata(input.metadataControlPlane, input.scope, { exactNames: [name] });
+    // This operation owns exactly one generated declaration. Other operator or
+    // generated containers in the same Slice are outside its reconciliation
+    // scope and must not be misclassified as orphans.
+    const targetObserved = observed.filter((item) => item.name === name);
+    const findings = (0, metadata_js_1.preflightSecretMetadata)({
+        declarations: [declaration],
+        observed: targetObserved,
+        scope: input.scope,
+    }).findings;
+    const actual = targetObserved[0];
+    const missingContainer = actual === undefined &&
+        findings.length === 1 &&
+        findings[0]?.code === 'missing-container';
+    const blocking = !missingContainer &&
+        (actual === undefined ||
+            findings.some(({ code }) => code !== 'missing-current-version') ||
+            Object.entries(expectedTags).some(([key, value]) => actual?.tags[key] !== value));
+    let inspection = missingContainer
+        ? 'missing'
+        : 'conflicting';
+    if (!blocking && !missingContainer) {
+        try {
+            inspection = await input.initializationControlPlane.inspect({
+                description,
+                generation: declaration.generation.kind,
+                name,
+                tags: expectedTags,
+            });
+        }
+        catch (error) {
+            throw safeControlPlaneError(error, 'secret-control-plane-inventory-failed', 'initialize-generated');
+        }
+    }
+    const metadataCurrent = findings.length === 0;
+    const stateConsistent = missingContainer || (metadataCurrent && inspection === 'current');
+    const proposed = stateConsistent && inspection === 'missing'
+        ? [{ logicalName: declaration.logicalName, name }]
+        : [];
+    const effectiveBlocking = blocking || !stateConsistent;
+    if (mode === 'report') {
+        return Object.freeze({
+            findings: Object.freeze(findings),
+            initialized: Object.freeze([]),
+            mode,
+            outcome: effectiveBlocking ? 'blocked' : 'reported',
+            proposed: Object.freeze(proposed),
+        });
+    }
+    if (effectiveBlocking) {
+        return Object.freeze({
+            findings: Object.freeze(findings),
+            initialized: Object.freeze([]),
+            mode,
+            outcome: 'blocked',
+            proposed: Object.freeze([]),
+        });
+    }
+    if (inspection === 'current') {
+        return Object.freeze({
+            findings: Object.freeze([]),
+            initialized: Object.freeze([]),
+            mode,
+            outcome: 'unchanged',
+            proposed: Object.freeze([]),
+        });
+    }
+    let initializationOutcome;
+    try {
+        initializationOutcome =
+            await input.initializationControlPlane.initializeGenerated({
+                description,
+                generation: declaration.generation.kind,
+                name,
+                tags: expectedTags,
+            });
+    }
+    catch (error) {
+        throw safeControlPlaneError(error, 'secret-control-plane-apply-failed', 'initialize-generated');
+    }
+    let finalInspection;
+    try {
+        finalInspection = await input.initializationControlPlane.inspect({
+            description,
+            generation: declaration.generation.kind,
+            name,
+            tags: expectedTags,
+        });
+    }
+    catch (error) {
+        throw safeControlPlaneError(error, 'secret-control-plane-inventory-failed', 'initialize-generated');
+    }
+    if (finalInspection !== 'current') {
+        throw new SecretOperatorControlPlaneError('secret-control-plane-apply-failed', 'initialize-generated');
+    }
+    // The exact-name control-plane inspection above is the postcondition.
+    // ListSecrets is eventually consistent and can omit a newly created secret
+    // for minutes, so it is not safe evidence for this just-completed mutation.
+    return Object.freeze({
+        findings: Object.freeze([]),
+        initialized: Object.freeze(initializationOutcome === 'applied'
+            ? [{ logicalName: declaration.logicalName, name }]
+            : []),
+        mode,
+        outcome: initializationOutcome,
+        proposed: Object.freeze(proposed),
+    });
+}
 async function runSecretDeployPreflight(input) {
     if (input.action !== 'deploy') {
         return Object.freeze({
@@ -161,7 +340,12 @@ async function runSecretDeployPreflight(input) {
             ready: true,
         });
     }
-    const observed = await collectSecretMetadata(input.controlPlane, input.scope);
+    const exactNames = input.declarations
+        .filter((declaration) => declaration.requiredStages.includes(input.scope.stage))
+        .map((declaration) => (0, model_js_1.canonicalOperatorSecretName)(input.scope, declaration.logicalName));
+    const observed = await collectSecretMetadata(input.controlPlane, input.scope, {
+        exactNames,
+    });
     const result = (0, metadata_js_1.preflightSecretMetadata)({
         declarations: input.declarations,
         observed,
@@ -173,6 +357,232 @@ async function runSecretDeployPreflight(input) {
         bypassed: false,
     });
 }
+function hasExactTags(actual, expected) {
+    const actualKeys = Object.keys(actual).sort(deterministic_order_js_1.compareUtf16);
+    const expectedKeys = Object.keys(expected).sort(deterministic_order_js_1.compareUtf16);
+    return (actualKeys.length === expectedKeys.length &&
+        actualKeys.every((key, index) => key === expectedKeys[index] && actual[key] === expected[key]));
+}
+function isExactGeneratedSecret(observed, declaration, scope, authority) {
+    const name = (0, model_js_1.canonicalOperatorSecretName)(scope, declaration.logicalName);
+    const arnPrefix = `arn:${authority.partition}:secretsmanager:${authority.region}:${authority.accountId}:secret:${name}-`;
+    const tags = (0, model_js_1.canonicalOperatorSecretTags)(scope, declaration);
+    return (declaration.source === 'generated' &&
+        declaration.generation?.kind === 'hmac-key-ring-v1' &&
+        tags[model_js_1.SECRET_METADATA_TAG_KEYS.management] ===
+            model_js_1.GENERATED_SECRET_MANAGEMENT_CLASS &&
+        observed.name === name &&
+        observed.arn.startsWith(arnPrefix) &&
+        /^[A-Za-z0-9]{6}$/.test(observed.arn.slice(arnPrefix.length)) &&
+        hasExactTags(observed.tags, tags));
+}
+const GENERATED_SECRET_ABSENCE_POLL_INTERVAL_MS = 2_000;
+const GENERATED_SECRET_ABSENCE_TIMEOUT_MS = 10 * 60 * 1_000;
+const GENERATED_SECRET_FORCE_DELETE_CLOCK_SKEW_MS = 5 * 60 * 1_000;
+const GENERATED_SECRET_RECOVERY_WINDOW_MS = 7 * 24 * 60 * 60 * 1_000;
+function isWithinGeneratedSecretRecoveryWindow(recoveryUntil, observedAt) {
+    if (typeof recoveryUntil !== 'string')
+        return false;
+    const recoveryUntilTimestamp = Date.parse(recoveryUntil);
+    return (!Number.isNaN(recoveryUntilTimestamp) &&
+        recoveryUntilTimestamp <=
+            observedAt +
+                GENERATED_SECRET_RECOVERY_WINDOW_MS +
+                GENERATED_SECRET_FORCE_DELETE_CLOCK_SKEW_MS);
+}
+/**
+ * Retires only exact framework-generated stage secrets after a
+ * successful native Slice removal. This path never reads a secret value,
+ * inventories a prefix, or operates on operator/database-bootstrap secrets.
+ */
+async function runGeneratedSecretRetirement(input) {
+    (0, model_js_1.validateSecretManagementScope)(input.scope);
+    if (!/^\d{12}$/.test(input.accountId) ||
+        !/^[a-z]{2}(?:-gov)?-[a-z]+-\d$/.test(input.region)) {
+        throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'retire');
+    }
+    const logicalNames = new Set();
+    for (const declaration of input.declarations) {
+        (0, model_js_1.validateSecretMetadataDeclaration)(declaration);
+        if (logicalNames.has(declaration.logicalName)) {
+            throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+        }
+        logicalNames.add(declaration.logicalName);
+    }
+    const declarations = input.declarations
+        .filter((declaration) => declaration.source === 'generated' &&
+        declaration.generation?.kind === 'hmac-key-ring-v1' &&
+        declaration.logicalName === model_js_1.GENERATED_HMAC_SECRET_LOGICAL_NAME &&
+        declaration.requiredStages.includes(input.scope.stage))
+        .sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.logicalName, right.logicalName));
+    const deletionMode = input.scope.stage === 'production' ? 'recovery-window' : 'immediate';
+    const secrets = [];
+    for (const declaration of declarations) {
+        const name = (0, model_js_1.canonicalOperatorSecretName)(input.scope, declaration.logicalName);
+        let observed;
+        try {
+            observed = await input.controlPlane.describeExact({
+                includePlannedDeletion: true,
+                name,
+            });
+        }
+        catch (error) {
+            throw safeControlPlaneError(error, 'secret-control-plane-inventory-failed', 'describe');
+        }
+        if (observed === undefined) {
+            secrets.push(Object.freeze({
+                generation: 'hmac-key-ring-v1',
+                logicalName: declaration.logicalName,
+                name,
+                outcome: 'not-found',
+                source: 'generated',
+            }));
+            continue;
+        }
+        try {
+            (0, model_js_1.validateObservedSecretMetadata)(observed);
+        }
+        catch {
+            throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+        }
+        if (!isExactGeneratedSecret(observed, declaration, input.scope, {
+            accountId: input.accountId,
+            partition: input.partition,
+            region: input.region,
+        })) {
+            throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+        }
+        const now = input.now ?? Date.now;
+        if (observed.deletionPendingUntil !== undefined &&
+            deletionMode === 'recovery-window') {
+            const observedAt = now();
+            if (!isWithinGeneratedSecretRecoveryWindow(observed.deletionPendingUntil, observedAt)) {
+                throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+            }
+            secrets.push(Object.freeze({
+                generation: 'hmac-key-ring-v1',
+                logicalName: declaration.logicalName,
+                name,
+                outcome: 'already-scheduled',
+                recoveryUntil: observed.deletionPendingUntil,
+                source: 'generated',
+            }));
+            continue;
+        }
+        if (deletionMode === 'immediate') {
+            const waitBeforeRetry = input.waitBeforeRetry ??
+                ((delayMs) => new Promise((resolve) => setTimeout(resolve, delayMs)));
+            const waitForState = async (expected) => {
+                const deadline = now() + GENERATED_SECRET_ABSENCE_TIMEOUT_MS;
+                while (true) {
+                    let remaining;
+                    try {
+                        remaining = await input.controlPlane.describeExact({
+                            includePlannedDeletion: true,
+                            name,
+                        });
+                    }
+                    catch (error) {
+                        throw safeControlPlaneError(error, 'secret-control-plane-inventory-failed', 'describe');
+                    }
+                    if (remaining === undefined) {
+                        if (expected === 'absent')
+                            return;
+                    }
+                    else {
+                        try {
+                            (0, model_js_1.validateObservedSecretMetadata)(remaining);
+                        }
+                        catch {
+                            throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+                        }
+                        if (!isExactGeneratedSecret(remaining, declaration, input.scope, {
+                            accountId: input.accountId,
+                            partition: input.partition,
+                            region: input.region,
+                        })) {
+                            throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');
+                        }
+                        if (expected === 'active' &&
+                            remaining.deletionPendingUntil === undefined) {
+                            return;
+                        }
+                    }
+                    if (now() >= deadline) {
+                        throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'retire');
+                    }
+                    await waitBeforeRetry(GENERATED_SECRET_ABSENCE_POLL_INTERVAL_MS);
+                }
+            };
+            if (observed.deletionPendingUntil !== undefined) {
+                if (Date.parse(observed.deletionPendingUntil) <=
+                    now() + GENERATED_SECRET_FORCE_DELETE_CLOCK_SKEW_MS) {
+                    await waitForState('absent');
+                    secrets.push(Object.freeze({
+                        generation: 'hmac-key-ring-v1',
+                        logicalName: declaration.logicalName,
+                        name,
+                        outcome: 'deleted',
+                        source: 'generated',
+                    }));
+                    continue;
+                }
+                try {
+                    await input.controlPlane.restore({ arn: observed.arn });
+                }
+                catch (error) {
+                    throw safeControlPlaneError(error, 'secret-control-plane-protected-action-failed', 'recover');
+                }
+                await waitForState('active');
+            }
+            try {
+                await input.controlPlane.deleteImmediately({ arn: observed.arn });
+            }
+            catch (error) {
+                throw safeControlPlaneError(error, 'secret-control-plane-protected-action-failed', 'retire');
+            }
+            await waitForState('absent');
+            secrets.push(Object.freeze({
+                generation: 'hmac-key-ring-v1',
+                logicalName: declaration.logicalName,
+                name,
+                outcome: 'deleted',
+                source: 'generated',
+            }));
+            continue;
+        }
+        let scheduled;
+        try {
+            scheduled = await input.controlPlane.scheduleRetirement({
+                arn: observed.arn,
+                recoveryWindowDays: 7,
+            });
+        }
+        catch (error) {
+            throw safeControlPlaneError(error, 'secret-control-plane-protected-action-failed', 'retire');
+        }
+        if (!isWithinGeneratedSecretRecoveryWindow(scheduled.recoveryUntil, now())) {
+            throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'retire');
+        }
+        secrets.push(Object.freeze({
+            generation: 'hmac-key-ring-v1',
+            logicalName: declaration.logicalName,
+            name,
+            outcome: 'scheduled',
+            recoveryUntil: scheduled.recoveryUntil,
+            source: 'generated',
+        }));
+    }
+    return Object.freeze({
+        deletionMode,
+        outcome: declarations.length === 0 ? 'not-applicable' : 'retired',
+        ...(deletionMode === 'recovery-window'
+            ? { recoveryWindowDays: 7 }
+            : {}),
+        secrets: Object.freeze(secrets),
+        stage: input.scope.stage,
+    });
+}
 const canonicalStages = new Set(['development', 'staging', 'production']);
 const logicalNamePattern = /^[A-Za-z][A-Za-z0-9]{0,63}$/;
 function validateProtectedAuthorization(authorization, logicalName, scope) {
@@ -204,7 +614,10 @@ async function runProtectedSecretLifecycle(input) {
             input.recoveryWindowDays > 30)) {
         throw new SecretOperatorControlPlaneError('secret-control-plane-protected-action-failed', 'retire');
     }
-    const observed = await collectSecretMetadata(input.controlPlane, input.scope, { includePlannedDeletion: true });
+    const observed = await collectSecretMetadata(input.controlPlane, input.scope, {
+        exactNames: [(0, model_js_1.canonicalOperatorSecretName)(input.scope, input.logicalName)],
+        includePlannedDeletion: true,
+    });
     const matches = observed.filter((secret) => isOwnedOperatorSecret(secret, input.logicalName, input.scope));
     if (matches.length !== 1) {
         throw new SecretOperatorControlPlaneError('secret-control-plane-inventory-invalid', 'inventory');

package/src/secrets/operator.js.map

@@ -1 +1 @@
-{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/operator.ts"],"names":[],"mappings":";;;AAkQA,8DA0DC;AAED,4DA0BC;AAwCD,kEAsGC;AAteD,sEAAyD;AACzD,+CAOuB;AACvB,yCASoB;AA8CpB,MAAa,+BAAgC,SAAQ,KAAK;IAS7C;IARF,IAAI,CAIsC;IAEnD,YACE,IAA6C,EACpC,SAOA;QAET,KAAK,CAAC,mBAAmB,SAAS,YAAY,IAAI,IAAI,CAAC,CAAC;QAT/C,cAAS,GAAT,SAAS,CAOT;QAGT,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAtBD,0EAsBC;AA+BD,SAAS,eAAe,CAAC,KAA4B;IACnD,IAAA,wCAA6B,EAAC,KAAK,CAAC,CAAC;IACrC,OAAO,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,IAA6C,EAC7C,SAAuD;IAEvD,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,YAAwC,EACxC,KAA4B,EAC5B,UAGI,EAAE;IAEN,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,CAAC;YAC/D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC5B,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CACpC,EACD,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACjD,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAC/B,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAChC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,IACE,CAAC,SAAS,CAAC,IAAI,CACb,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAChE,EACD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,SAAS;aACN,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aAC1D,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAClB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACnE,IAAA,yCAA8B,EAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,WAAW,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnE,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CACL,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,UAAU,CACX,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA0C;IAE1C,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACX,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,qBAAqB,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,YAAwC,EACxC,QAAsC;IAEtC,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC;gBAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,CAAC,GAAG,CAAC;gBACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,mCAAmC,EACnC,QAAQ,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAA,qCAAuB,EAAC;QACrC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI;QACJ,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,EAAE;YACX,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,EAAE;YACX,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,OAAO;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAC/C,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,KAAK,EACX,EAAE,YAAY,EAAE,CACjB,CAAC;IACF,MAAM,KAAK,GAAG,IAAA,qCAAuB,EAAC;QACpC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,aAAa;QACvB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM;QACN,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;KACxE,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAA,qCAAuB,EAAC;QACrC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,MAAM;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD,SAAS,8BAA8B,CACrC,aAAmD,EACnD,WAAmB,EACnB,KAA4B;IAE5B,IACE,aAAa,CAAC,QAAQ,KAAK,IAAI;QAC/B,aAAa,CAAC,SAAS,KAAK,2BAA2B;QACvD,aAAa,CAAC,WAAW,KAAK,WAAW;QACzC,aAAa,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QACnC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,WAAW,CACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgC,EAChC,WAAmB,EACnB,KAA4B;IAE5B,OAAO,CACL,QAAQ,CAAC,IAAI,KAAK,IAAA,sCAA2B,EAAC,KAAK,EAAE,WAAW,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,SAAS;QACrE,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK;QAC7D,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK;QAC7D,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,WAAW,CAAC,KAAK,WAAW;QACnE,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,UAAU,CAAC;YAChD,2CAAgC,CACnC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAC/C,KAeK;IAEL,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,8BAA8B,CAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,IACE,KAAK,CAAC,MAAM,KAAK,QAAQ;QACzB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC9C,KAAK,CAAC,kBAAkB,GAAG,CAAC;YAC5B,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,KAAK,EACX,EAAE,sBAAsB,EAAE,IAAI,EAAE,CACjC,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAC9D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;aACzB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,kBAAkB,CAAC;YAC5D,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C,CAAC,CAAC;QACH,IACE,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ;YAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EACjD,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,8CAA8C,EAC9C,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"operator.js","sourceRoot":"","sources":["../../../../../packages/nx/src/secrets/operator.ts"],"names":[],"mappings":";;;AAiWA,8DAyGC;AAED,sEAiLC;AAED,4DAuCC;AAmED,oEAuRC;AAwCD,kEAyGC;AAjpCD,sEAAyD;AACzD,+CAOuB;AACvB,yCAaoB;AAmFpB,MAAa,+BAAgC,SAAQ,KAAK;IAS7C;IARF,IAAI,CAIsC;IAEnD,YACE,IAA6C,EACpC,SAQA;QAET,KAAK,CAAC,mBAAmB,SAAS,YAAY,IAAI,IAAI,CAAC,CAAC;QAV/C,cAAS,GAAT,SAAS,CAQT;QAGT,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAvBD,0EAuBC;AAsDD,SAAS,eAAe,CAAC,KAA4B;IACnD,IAAA,wCAA6B,EAAC,KAAK,CAAC,CAAC;IACrC,OAAO,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,IAA6C,EAC7C,SAAuD;IAEvD,IAAI,KAAK,YAAY,+BAA+B,EAAE,CAAC;QACrD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,YAAwC,EACxC,KAA4B,EAC5B,UAII,EAAE;IAEN,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,qCAAY,CAAC,CAAC;IAC7E,IACE,UAAU,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM;QACvD,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC;YAC/B,GAAG,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS;gBAC9C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,CAAC;YAC/D,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IACD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtB,MAAM,CAAC,IAAI,CACT,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,KAAK,IAAI;YACb,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC5B,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;YAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CACpC,EACD,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;QACjD,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAC/B,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ;YAChC,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,IACE,CAAC,SAAS,CAAC,IAAI,CACb,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,IAAI,IAAI,KAAK,OAAO,CAAC,IAAI,CAChE,EACD,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CACjC,SAAS;aACN,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;aAC1D,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YAClB,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YACnE,IAAA,yCAA8B,EAAC,WAAW,CAAC,CAAC;YAC5C,IAAI,WAAW,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;gBACnE,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC,CACL,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,SAAS;YAC/D,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC;gBAC7C,GAAG,CAAC,OAAO,CAAC,sBAAsB,KAAK,SAAS;oBAC9C,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,CAAC;gBAC/D,IAAI;aACL,CAAC,CAAC;YACH,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,IAAA,yCAA8B,EAAC,KAAK,CAAC,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,CAAC;QACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,UAAU,CACX,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA0C;IAE1C,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACX,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,qBAAqB,CACjE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,YAAwC,EACxC,QAAsC;IAEtC,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC;gBAC7C,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,CAAC;aAAM,CAAC;YACN,MAAM,YAAY,CAAC,GAAG,CAAC;gBACrB,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;aACpB,CAAC,CAAC;YACH,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,mCAAmC,EACnC,QAAQ,CAAC,IAAI,KAAK,wBAAwB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAAC,KAK/C;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;IACpC,IAAA,wCAA6B,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAA,4CAAiC,EAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,gEAAgE;IAChE,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,KAAK,CAAC,YAAY;SACf,MAAM,CACL,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,MAAM,KAAK,WAAW;QAClC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CACzD;SACA,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CACnB,IAAA,sCAA2B,EAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAClE,CACJ,CAAC;IACF,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC,MAAM,CAC5C,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,WAAW,CACpD,CAAC;IACF,MAAM,UAAU,GAAG,YAAY;SAC5B,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CACtB,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CACvD;SACA,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CACnB,IAAA,sCAA2B,EAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAClE,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,KAAK,EACX;QACE,UAAU;KACX,CACF,CAAC;IACF,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CACtC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAC7C,CAAC;IACF,MAAM,MAAM,GAAG,IAAA,qCAAuB,EAAC;QACrC,YAAY;QACZ,IAAI;QACJ,QAAQ,EAAE,gBAAgB;QAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IAEH,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,EAAE;YACX,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,UAAU;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,EAAE;YACX,MAAM;YACN,IAAI;YACJ,OAAO,EAAE,SAAS;SACnB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAmC,EAAE,CAAC;IACnD,MAAM,YAAY,GAA4B,EAAE,CAAC;IACjD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAClE,IAAI,OAAO;YAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAC/C,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,KAAK,EACX,EAAE,UAAU,EAAE,YAAY,EAAE,CAC7B,CAAC;IACF,MAAM,KAAK,GAAG,IAAA,qCAAuB,EAAC;QACpC,YAAY;QACZ,IAAI,EAAE,QAAQ;QACd,QAAQ,EAAE,aAAa,CAAC,MAAM,CAC5B,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAC7C;QACD,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM;QACN,IAAI;QACJ,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;KACxE,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,6BAA6B,CAAC,KAOnD;IACC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,QAAQ,CAAC;IACpC,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,sBAAsB,CACvB,CAAC;IACJ,CAAC;IACD,IAAA,wCAA6B,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAA,4CAAiC,EAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,sBAAsB,CACvB,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CACzC,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CACvD,CAAC;IACF,IACE,WAAW,EAAE,MAAM,KAAK,WAAW;QACnC,WAAW,CAAC,UAAU,KAAK,SAAS;QACpC,CAAC,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,sBAAsB,CACvB,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,sCAA2B,EACtC,KAAK,CAAC,KAAK,EACX,WAAW,CAAC,WAAW,CACxB,CAAC;IACF,MAAM,WAAW,GAAG,OAAO,WAAW,CAAC,MAAM,WAAW,WAAW,CAAC,WAAW,EAAE,CAAC;IAClF,MAAM,YAAY,GAAG,IAAA,sCAA2B,EAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,KAAK,CAAC,oBAAoB,EAC1B,KAAK,CAAC,KAAK,EACX,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CACvB,CAAC;IACF,2EAA2E;IAC3E,wEAAwE;IACxE,kDAAkD;IAClD,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAA,qCAAuB,EAAC;QACvC,YAAY,EAAE,CAAC,WAAW,CAAC;QAC3B,QAAQ,EAAE,cAAc;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC,QAAQ,CAAC;IACZ,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,MAAM,gBAAgB,GACpB,MAAM,KAAK,SAAS;QACpB,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,mBAAmB,CAAC;IAC5C,MAAM,QAAQ,GACZ,CAAC,gBAAgB;QACjB,CAAC,MAAM,KAAK,SAAS;YACnB,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,yBAAyB,CAAC;YAC/D,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAC9C,CAAC,CAAC;IACP,IAAI,UAAU,GAA0C,gBAAgB;QACtE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,aAAa,CAAC;IAClB,IAAI,CAAC,QAAQ,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,OAAO,CAAC;gBAC1D,WAAW;gBACX,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI;gBACvC,IAAI;gBACJ,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,sBAAsB,CACvB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IAC9C,MAAM,eAAe,GACnB,gBAAgB,IAAI,CAAC,eAAe,IAAI,UAAU,KAAK,SAAS,CAAC,CAAC;IACpE,MAAM,QAAQ,GACZ,eAAe,IAAI,UAAU,KAAK,SAAS;QACzC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,iBAAiB,GAAG,QAAQ,IAAI,CAAC,eAAe,CAAC;IACvD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI;YACJ,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU;YACnD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,iBAAiB,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI;YACJ,OAAO,EAAE,SAAS;YAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YAC9B,IAAI;YACJ,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,IAAI,qBAA8C,CAAC;IACnD,IAAI,CAAC;QACH,qBAAqB;YACnB,MAAM,KAAK,CAAC,0BAA0B,CAAC,mBAAmB,CAAC;gBACzD,WAAW;gBACX,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI;gBACvC,IAAI;gBACJ,IAAI,EAAE,YAAY;aACnB,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,mCAAmC,EACnC,sBAAsB,CACvB,CAAC;IACJ,CAAC;IACD,IAAI,eAAsD,CAAC;IAC3D,IAAI,CAAC;QACH,eAAe,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,OAAO,CAAC;YAC/D,WAAW;YACX,UAAU,EAAE,WAAW,CAAC,UAAU,CAAC,IAAI;YACvC,IAAI;YACJ,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,sBAAsB,CACvB,CAAC;IACJ,CAAC;IACD,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,IAAI,+BAA+B,CACvC,mCAAmC,EACnC,sBAAsB,CACvB,CAAC;IACJ,CAAC;IACD,sEAAsE;IACtE,2EAA2E;IAC3E,4EAA4E;IAC5E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,WAAW,EAAE,MAAM,CAAC,MAAM,CACxB,qBAAqB,KAAK,SAAS;YACjC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;YAClD,CAAC,CAAC,EAAE,CACP;QACD,IAAI;QACJ,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,wBAAwB,CAAC,KAK9C;IACC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,IAAI;SACZ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY;SAClC,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CACtB,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CACvD;SACA,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CACnB,IAAA,sCAA2B,EAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAClE,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,KAAK,EACX;QACE,UAAU;KACX,CACF,CAAC;IACF,MAAM,MAAM,GAAG,IAAA,qCAAuB,EAAC;QACrC,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,QAAQ;QACR,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,MAAM;QACT,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CACnB,MAAwC,EACxC,QAA0C;IAE1C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qCAAY,CAAC,CAAC;IAC1D,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,qCAAY,CAAC,CAAC;IAC9D,OAAO,CACL,UAAU,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM;QACzC,UAAU,CAAC,KAAK,CACd,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACb,GAAG,KAAK,YAAY,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,QAAQ,CAAC,GAAG,CAAC,CAC/D,CACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,QAAgC,EAChC,WAAsC,EACtC,KAA4B,EAC5B,SAIC;IAED,MAAM,IAAI,GAAG,IAAA,sCAA2B,EAAC,KAAK,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,SAAS,mBAAmB,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,SAAS,WAAW,IAAI,GAAG,CAAC;IACzH,MAAM,IAAI,GAAG,IAAA,sCAA2B,EAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAC7D,OAAO,CACL,WAAW,CAAC,MAAM,KAAK,WAAW;QAClC,WAAW,CAAC,UAAU,EAAE,IAAI,KAAK,kBAAkB;QACnD,IAAI,CAAC,mCAAwB,CAAC,UAAU,CAAC;YACvC,4CAAiC;QACnC,QAAQ,CAAC,IAAI,KAAK,IAAI;QACtB,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC;QAClC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7D,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,yCAAyC,GAAG,KAAK,CAAC;AACxD,MAAM,mCAAmC,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC5D,MAAM,2CAA2C,GAAG,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AACnE,MAAM,mCAAmC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAErE,SAAS,qCAAqC,CAC5C,aAAsB,EACtB,UAAkB;IAElB,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACpD,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IACzD,OAAO,CACL,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC;QACrC,sBAAsB;YACpB,UAAU;gBACR,mCAAmC;gBACnC,2CAA2C,CAChD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,4BAA4B,CAAC,KASlD;IACC,IAAA,wCAA6B,EAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,IACE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACjC,CAAC,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EACnD,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC7C,IAAA,4CAAiC,EAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY;SACpC,MAAM,CACL,CAAC,WAAW,EAAE,EAAE,CACd,WAAW,CAAC,MAAM,KAAK,WAAW;QAClC,WAAW,CAAC,UAAU,EAAE,IAAI,KAAK,kBAAkB;QACnD,WAAW,CAAC,WAAW,KAAK,6CAAkC;QAC9D,WAAW,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CACzD;SACA,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5E,MAAM,YAAY,GAChB,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,WAAW,CAAC;IACvE,MAAM,OAAO,GAAyD,EAAE,CAAC;IAEzE,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,IAAA,sCAA2B,EACtC,KAAK,CAAC,KAAK,EACX,WAAW,CAAC,WAAW,CACxB,CAAC;QACF,IAAI,QAA4C,CAAC;QACjD,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC;gBAChD,sBAAsB,EAAE,IAAI;gBAC5B,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,UAAU,CACX,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;gBACZ,UAAU,EAAE,kBAAkB;gBAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,IAAI;gBACJ,OAAO,EAAE,WAAW;gBACpB,MAAM,EAAE,WAAW;aACpB,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,IAAA,yCAA8B,EAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,IACE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE;YAC1D,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,EACF,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAClC,IACE,QAAQ,CAAC,oBAAoB,KAAK,SAAS;YAC3C,YAAY,KAAK,iBAAiB,EAClC,CAAC;YACD,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC;YACzB,IACE,CAAC,qCAAqC,CACpC,QAAQ,CAAC,oBAAoB,EAC7B,UAAU,CACX,EACD,CAAC;gBACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;gBACZ,UAAU,EAAE,kBAAkB;gBAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,IAAI;gBACJ,OAAO,EAAE,mBAAmB;gBAC5B,aAAa,EAAE,QAAQ,CAAC,oBAAoB;gBAC5C,MAAM,EAAE,WAAW;aACpB,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;YACjC,MAAM,eAAe,GACnB,KAAK,CAAC,eAAe;gBACrB,CAAC,CAAC,OAAe,EAAE,EAAE,CACnB,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;YAClE,MAAM,YAAY,GAAG,KAAK,EACxB,QAA6B,EACd,EAAE;gBACjB,MAAM,QAAQ,GAAG,GAAG,EAAE,GAAG,mCAAmC,CAAC;gBAC7D,OAAO,IAAI,EAAE,CAAC;oBACZ,IAAI,SAA6C,CAAC;oBAClD,IAAI,CAAC;wBACH,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC;4BACjD,sBAAsB,EAAE,IAAI;4BAC5B,IAAI;yBACL,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,MAAM,qBAAqB,CACzB,KAAK,EACL,uCAAuC,EACvC,UAAU,CACX,CAAC;oBACJ,CAAC;oBACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;wBAC5B,IAAI,QAAQ,KAAK,QAAQ;4BAAE,OAAO;oBACpC,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC;4BACH,IAAA,yCAA8B,EAAC,SAAS,CAAC,CAAC;wBAC5C,CAAC;wBAAC,MAAM,CAAC;4BACP,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;wBACJ,CAAC;wBACD,IACE,CAAC,sBAAsB,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,EAAE;4BAC3D,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;yBACrB,CAAC,EACF,CAAC;4BACD,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;wBACJ,CAAC;wBACD,IACE,QAAQ,KAAK,QAAQ;4BACrB,SAAS,CAAC,oBAAoB,KAAK,SAAS,EAC5C,CAAC;4BACD,OAAO;wBACT,CAAC;oBACH,CAAC;oBACD,IAAI,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;wBACtB,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;oBACJ,CAAC;oBACD,MAAM,eAAe,CAAC,yCAAyC,CAAC,CAAC;gBACnE,CAAC;YACH,CAAC,CAAC;YAEF,IAAI,QAAQ,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBAChD,IACE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC;oBACzC,GAAG,EAAE,GAAG,2CAA2C,EACnD,CAAC;oBACD,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;oBAC7B,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;wBACZ,UAAU,EAAE,kBAAkB;wBAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;wBACpC,IAAI;wBACJ,OAAO,EAAE,SAAS;wBAClB,MAAM,EAAE,WAAW;qBACpB,CAAC,CACH,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC1D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,qBAAqB,CACzB,KAAK,EACL,8CAA8C,EAC9C,SAAS,CACV,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC/B,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;YACpE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,qBAAqB,CACzB,KAAK,EACL,8CAA8C,EAC9C,QAAQ,CACT,CAAC;YACJ,CAAC;YACD,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;gBACZ,UAAU,EAAE,kBAAkB;gBAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;gBACpC,IAAI;gBACJ,OAAO,EAAE,SAAS;gBAClB,MAAM,EAAE,WAAW;aACpB,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QAED,IAAI,SAAoC,CAAC;QACzC,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,kBAAkB,CAAC;gBACtD,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,kBAAkB,EAAE,CAAC;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,qBAAqB,CACzB,KAAK,EACL,8CAA8C,EAC9C,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,IACE,CAAC,qCAAqC,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,EACtE,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CACV,MAAM,CAAC,MAAM,CAAC;YACZ,UAAU,EAAE,kBAAkB;YAC9B,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,IAAI;YACJ,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,MAAM,EAAE,WAAW;SACpB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY;QACZ,OAAO,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QACjE,GAAG,CAAC,YAAY,KAAK,iBAAiB;YACpC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAU,EAAE;YACpC,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC/B,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;KACzB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC;AAC1E,MAAM,kBAAkB,GAAG,6BAA6B,CAAC;AAEzD,SAAS,8BAA8B,CACrC,aAAmD,EACnD,WAAmB,EACnB,KAA4B;IAE5B,IACE,aAAa,CAAC,QAAQ,KAAK,IAAI;QAC/B,aAAa,CAAC,SAAS,KAAK,2BAA2B;QACvD,aAAa,CAAC,WAAW,KAAK,WAAW;QACzC,aAAa,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;QACnC,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EACjC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,WAAW,CACZ,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgC,EAChC,WAAmB,EACnB,KAA4B;IAE5B,OAAO,CACL,QAAQ,CAAC,IAAI,KAAK,IAAA,sCAA2B,EAAC,KAAK,EAAE,WAAW,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,SAAS,CAAC,KAAK,KAAK,CAAC,SAAS;QACrE,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK;QAC7D,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,KAAK;QAC7D,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,WAAW,CAAC,KAAK,WAAW;QACnE,QAAQ,CAAC,IAAI,CAAC,mCAAwB,CAAC,UAAU,CAAC;YAChD,2CAAgC,CACnC,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAC/C,KAeK;IAEL,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,8BAA8B,CAC5B,KAAK,CAAC,aAAa,EACnB,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,KAAK,CACZ,CAAC;IACF,IACE,KAAK,CAAC,MAAM,KAAK,QAAQ;QACzB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAC9C,KAAK,CAAC,kBAAkB,GAAG,CAAC;YAC5B,KAAK,CAAC,kBAAkB,GAAG,EAAE,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAC1C,KAAK,CAAC,YAAY,EAClB,KAAK,CAAC,KAAK,EACX;QACE,UAAU,EAAE,CAAC,IAAA,sCAA2B,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QACzE,sBAAsB,EAAE,IAAI;KAC7B,CACF,CAAC;IACF,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CACzC,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAC9D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,+BAA+B,CACvC,wCAAwC,EACxC,WAAW,CACZ,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7D,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,OAAO,EAAE,UAAU;gBACnB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;aACzB,CAAC,CAAC;QACL,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,kBAAkB,CAAC;YAC5D,GAAG,EAAE,aAAa,CAAC,GAAG;YACtB,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;SAC7C,CAAC,CAAC;QACH,IACE,OAAO,SAAS,CAAC,aAAa,KAAK,QAAQ;YAC3C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,EACjD,CAAC;YACD,MAAM,IAAI,+BAA+B,CACvC,8CAA8C,EAC9C,QAAQ,CACT,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,SAAS,CAAC,aAAa;YACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;YAC5C,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK;SACzB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,qBAAqB,CACzB,KAAK,EACL,8CAA8C,EAC9C,KAAK,CAAC,MAAM,CACb,CAAC;IACJ,CAAC;AACH,CAAC"}

package/src/secrets/registry.d.ts

@@ -1,9 +1,10 @@
 import { type SecretMetadataDeclaration } from './model.js';
 export declare const SECRET_METADATA_REGISTRY_PATH: "secrets/metadata.json";
-export declare const SECRET_METADATA_REGISTRY_SCHEMA_VERSION: 1;
+export declare const SECRET_METADATA_REGISTRY_SCHEMA_VERSION: 2;
 export interface SecretMetadataRegistry {
     declarations: readonly SecretMetadataDeclaration[];
     schemaVersion: typeof SECRET_METADATA_REGISTRY_SCHEMA_VERSION;
 }
 export declare function parseSecretMetadataRegistry(value: unknown): SecretMetadataRegistry;
 export declare function operatorSecretMetadataDeclarations(registry: SecretMetadataRegistry): readonly SecretMetadataDeclaration[];
+export declare function deployedSecretMetadataDeclarations(registry: SecretMetadataRegistry): readonly SecretMetadataDeclaration[];

package/src/secrets/registry.js

@@ -3,10 +3,11 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.SECRET_METADATA_REGISTRY_SCHEMA_VERSION = exports.SECRET_METADATA_REGISTRY_PATH = void 0;
 exports.parseSecretMetadataRegistry = parseSecretMetadataRegistry;
 exports.operatorSecretMetadataDeclarations = operatorSecretMetadataDeclarations;
+exports.deployedSecretMetadataDeclarations = deployedSecretMetadataDeclarations;
 const deterministic_order_js_1 = require("../deterministic-order.js");
 const model_js_1 = require("./model.js");
 exports.SECRET_METADATA_REGISTRY_PATH = 'secrets/metadata.json';
-exports.SECRET_METADATA_REGISTRY_SCHEMA_VERSION = 1;
+exports.SECRET_METADATA_REGISTRY_SCHEMA_VERSION = 2;
 function isRecord(value) {
     return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
@@ -19,6 +20,7 @@ function invalidRegistry(path, reason) {
 function parseDeclaration(value, index) {
     if (!isRecord(value) ||
         !hasOnlyProperties(value, [
+            'generation',
             'logicalName',
             'owner',
             'requiredStages',
@@ -36,6 +38,7 @@ function parseDeclaration(value, index) {
             value['rotation']['mode'] !== 'provider-managed') ||
         (value['source'] !== 'aws-managed' &&
             value['source'] !== 'database-bootstrap' &&
+            value['source'] !== 'generated' &&
             value['source'] !== 'operator') ||
         (value['valueKind'] !== 'binary' &&
             value['valueKind'] !== 'json' &&
@@ -43,6 +46,17 @@ function parseDeclaration(value, index) {
         invalidRegistry(`declarations.${index}`, 'must contain only the supported value-free declaration metadata');
     }
     const declaration = Object.freeze({
+        ...(value['generation'] === undefined
+            ? {}
+            : isRecord(value['generation']) &&
+                hasOnlyProperties(value['generation'], ['kind']) &&
+                value['generation']['kind'] === 'hmac-key-ring-v1'
+                ? {
+                    generation: Object.freeze({
+                        kind: value['generation']['kind'],
+                    }),
+                }
+                : invalidRegistry(`declarations.${index}.generation`, 'must select one supported value-blind generator')),
         logicalName: value['logicalName'],
         owner: value['owner'],
         requiredStages: Object.freeze([...value['requiredStages']]),
@@ -83,4 +97,7 @@ function parseSecretMetadataRegistry(value) {
 function operatorSecretMetadataDeclarations(registry) {
     return Object.freeze(registry.declarations.filter(({ source }) => source === 'operator'));
 }
+function deployedSecretMetadataDeclarations(registry) {
+    return Object.freeze(registry.declarations.filter(({ source }) => source === 'operator' || source === 'generated'));
+}
 //# sourceMappingURL=registry.js.map