npm - @geekmidas/cli - Versions diffs - 10.0.0-alpha.10 → 10.0.0-alpha.11 - Mend

@geekmidas/cli 10.0.0-alpha.10 → 10.0.0-alpha.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (138) hide show

package/dist/storage-B020InPW.mjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"storage-B020InPW.mjs","names":["stage: string","secrets: StageSecrets","keyHex: string","data: EncryptedSecretsFile","key: string","value: string","updated: StageSecrets","password: string","requiredVars: string[]","missing: string[]","provided: string[]"],"sources":["../src/secrets/storage.ts"],"sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\nimport { existsSync } from 'node:fs';\nimport { mkdir, readFile, writeFile } from 'node:fs/promises';\nimport { basename, join } from 'node:path';\nimport { getOrCreateKey, readKey } from './keystore';\nimport type { EmbeddableSecrets, StageSecrets } from './types';\n\n/** Default secrets directory relative to project root */\nconst SECRETS_DIR = '.gkm/secrets';\n\n/** AES-256-GCM configuration */\nconst ALGORITHM = 'aes-256-gcm';\nconst IV_LENGTH = 12; // 96 bits for GCM\nconst AUTH_TAG_LENGTH = 16; // 128 bits\n\n/** Encrypted secrets file structure */\ninterface EncryptedSecretsFile {\n\t/** Version for future format changes */\n\tversion: 1;\n\t/** Base64 encoded encrypted data (ciphertext + auth tag) */\n\tencrypted: string;\n\t/** Hex encoded IV */\n\tiv: string;\n}\n\n/**\n * Get the secrets directory path.\n */\nexport function getSecretsDir(cwd = process.cwd()): string {\n\treturn join(cwd, SECRETS_DIR);\n}\n\n/**\n * Get the secrets file path for a stage.\n */\nexport function getSecretsPath(stage: string, cwd = process.cwd()): string {\n\treturn join(getSecretsDir(cwd), `${stage}.json`);\n}\n\n/**\n * Check if secrets exist for a stage.\n */\nexport function secretsExist(stage: string, cwd = process.cwd()): boolean {\n\treturn existsSync(getSecretsPath(stage, cwd));\n}\n\n/**\n * Initialize an empty StageSecrets object for a stage.\n */\nexport function initStageSecrets(stage: string): StageSecrets {\n\tconst now = new Date().toISOString();\n\treturn {\n\t\tstage,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t\tservices: {},\n\t\turls: {},\n\t\tcustom: {},\n\t};\n}\n\n/**\n * Encrypt secrets using a key.\n */\nfunction encryptSecretsData(\n\tsecrets: StageSecrets,\n\tkeyHex: string,\n): EncryptedSecretsFile {\n\tconst key = Buffer.from(keyHex, 'hex');\n\tconst iv = randomBytes(IV_LENGTH);\n\n\t// Serialize secrets to JSON\n\tconst plaintext = JSON.stringify(secrets);\n\n\t// Encrypt\n\tconst cipher = createCipheriv(ALGORITHM, key, iv);\n\tconst ciphertext = Buffer.concat([\n\t\tcipher.update(plaintext, 'utf-8'),\n\t\tcipher.final(),\n\t]);\n\n\t// Get auth tag\n\tconst authTag = cipher.getAuthTag();\n\n\t// Combine ciphertext + auth tag\n\tconst combined = Buffer.concat([ciphertext, authTag]);\n\n\treturn {\n\t\tversion: 1,\n\t\tencrypted: combined.toString('base64'),\n\t\tiv: iv.toString('hex'),\n\t};\n}\n\n/**\n * Decrypt secrets using a key.\n */\nfunction decryptSecretsData(\n\tdata: EncryptedSecretsFile,\n\tkeyHex: string,\n): StageSecrets {\n\tconst key = Buffer.from(keyHex, 'hex');\n\tconst ivBuffer = Buffer.from(data.iv, 'hex');\n\tconst combined = Buffer.from(data.encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt\n\tconst decipher = createDecipheriv(ALGORITHM, key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8')) as StageSecrets;\n}\n\n/**\n * Read secrets for a stage (encrypted).\n * Requires the decryption key to be present at ~/.gkm/{project}/{stage}.key\n *\n * @returns StageSecrets or null if not found\n */\nexport async function readStageSecrets(\n\tstage: string,\n\tcwd = process.cwd(),\n): Promise<StageSecrets | null> {\n\tconst path = getSecretsPath(stage, cwd);\n\n\tif (!existsSync(path)) {\n\t\treturn null;\n\t}\n\n\tconst content = await readFile(path, 'utf-8');\n\tconst data = JSON.parse(content);\n\n\t// Check if this is an encrypted file (has version field)\n\tif (data.version === 1 && data.encrypted && data.iv) {\n\t\tconst projectName = basename(cwd);\n\t\tconst key = await readKey(stage, projectName);\n\n\t\tif (!key) {\n\t\t\tthrow new Error(\n\t\t\t\t`Decryption key not found for stage \"${stage}\". ` +\n\t\t\t\t\t`Expected key at: ~/.gkm/${projectName}/${stage}.key`,\n\t\t\t);\n\t\t}\n\n\t\treturn decryptSecretsData(data as EncryptedSecretsFile, key);\n\t}\n\n\t// Legacy: unencrypted format (for backwards compatibility)\n\treturn data as StageSecrets;\n}\n\n/**\n * Write secrets for a stage (encrypted).\n * Creates or uses existing encryption key at ~/.gkm/{project}/{stage}.key\n */\nexport async function writeStageSecrets(\n\tsecrets: StageSecrets,\n\tcwd = process.cwd(),\n): Promise<void> {\n\tconst dir = getSecretsDir(cwd);\n\tconst path = getSecretsPath(secrets.stage, cwd);\n\tconst projectName = basename(cwd);\n\n\t// Ensure directory exists\n\tawait mkdir(dir, { recursive: true });\n\n\t// Get or create encryption key\n\tconst key = await getOrCreateKey(secrets.stage, projectName);\n\n\t// Encrypt and write\n\tconst encrypted = encryptSecretsData(secrets, key);\n\tawait writeFile(path, JSON.stringify(encrypted, null, 2), 'utf-8');\n}\n\n/**\n * Convert StageSecrets to embeddable format (flat key-value pairs).\n * This is what gets encrypted and embedded in the bundle.\n */\nexport function toEmbeddableSecrets(secrets: StageSecrets): EmbeddableSecrets {\n\treturn {\n\t\t...secrets.urls,\n\t\t...secrets.custom,\n\t\t// Also include individual service credentials if needed\n\t\t...(secrets.services.postgres && {\n\t\t\tPOSTGRES_USER: secrets.services.postgres.username,\n\t\t\tPOSTGRES_PASSWORD: secrets.services.postgres.password,\n\t\t\tPOSTGRES_DB: secrets.services.postgres.database ?? 'app',\n\t\t\tPOSTGRES_HOST: secrets.services.postgres.host,\n\t\t\tPOSTGRES_PORT: String(secrets.services.postgres.port),\n\t\t}),\n\t\t...(secrets.services.redis && {\n\t\t\tREDIS_PASSWORD: secrets.services.redis.password,\n\t\t\tREDIS_HOST: secrets.services.redis.host,\n\t\t\tREDIS_PORT: String(secrets.services.redis.port),\n\t\t}),\n\t\t...(secrets.services.rabbitmq && {\n\t\t\tRABBITMQ_USER: secrets.services.rabbitmq.username,\n\t\t\tRABBITMQ_PASSWORD: secrets.services.rabbitmq.password,\n\t\t\tRABBITMQ_HOST: secrets.services.rabbitmq.host,\n\t\t\tRABBITMQ_PORT: String(secrets.services.rabbitmq.port),\n\t\t\tRABBITMQ_VHOST: secrets.services.rabbitmq.vhost ?? '/',\n\t\t}),\n\t\t...(secrets.services.minio && {\n\t\t\tSTORAGE_ACCESS_KEY_ID: secrets.services.minio.username,\n\t\t\tSTORAGE_SECRET_ACCESS_KEY: secrets.services.minio.password,\n\t\t\tSTORAGE_BUCKET: secrets.services.minio.bucket ?? 'app',\n\t\t\tSTORAGE_REGION: 'eu-west-1',\n\t\t\tSTORAGE_FORCE_PATH_STYLE: 'true',\n\t\t}),\n\t\t...(secrets.services.mailpit && {\n\t\t\tSMTP_HOST: secrets.services.mailpit.host,\n\t\t\tSMTP_PORT: String(secrets.services.mailpit.port),\n\t\t\tSMTP_USER: secrets.services.mailpit.username,\n\t\t\tSMTP_PASS: secrets.services.mailpit.password,\n\t\t\tSMTP_SECURE: 'false',\n\t\t\tMAIL_FROM: 'noreply@localhost',\n\t\t}),\n\t\t...(secrets.services.localstack && {\n\t\t\tAWS_ACCESS_KEY_ID:\n\t\t\t\tsecrets.services.localstack.accessKeyId ??\n\t\t\t\tsecrets.services.localstack.username,\n\t\t\tAWS_SECRET_ACCESS_KEY: secrets.services.localstack.password,\n\t\t\tAWS_REGION: secrets.services.localstack.region ?? 'us-east-1',\n\t\t\tAWS_ENDPOINT_URL: `http://${secrets.services.localstack.host}:${secrets.services.localstack.port}`,\n\t\t}),\n\t\t...(secrets.services.pgboss && {\n\t\t\tPGBOSS_DB_USER: secrets.services.pgboss.username,\n\t\t\tPGBOSS_DB_PASSWORD: secrets.services.pgboss.password,\n\t\t}),\n\t};\n}\n\n/**\n * Update a custom secret in the secrets file.\n */\nexport async function setCustomSecret(\n\tstage: string,\n\tkey: string,\n\tvalue: string,\n\tcwd = process.cwd(),\n): Promise<StageSecrets> {\n\tconst secrets = await readStageSecrets(stage, cwd);\n\n\tif (!secrets) {\n\t\tthrow new Error(\n\t\t\t`Secrets not found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t);\n\t}\n\n\tconst updated: StageSecrets = {\n\t\t...secrets,\n\t\tupdatedAt: new Date().toISOString(),\n\t\tcustom: {\n\t\t\t...secrets.custom,\n\t\t\t[key]: value,\n\t\t},\n\t};\n\n\tawait writeStageSecrets(updated, cwd);\n\treturn updated;\n}\n\n/**\n * Mask a password for display (show first 4 and last 2 chars).\n */\nexport function maskPassword(password: string): string {\n\tif (password.length <= 8) {\n\t\treturn '********';\n\t}\n\treturn `${password.slice(0, 4)}${'*'.repeat(password.length - 6)}${password.slice(-2)}`;\n}\n\n/**\n * Result of environment variable validation.\n */\nexport interface EnvValidationResult {\n\t/** Whether all required environment variables are present */\n\tvalid: boolean;\n\t/** List of missing environment variable names */\n\tmissing: string[];\n\t/** List of environment variables that are provided */\n\tprovided: string[];\n\t/** List of environment variables that were required */\n\trequired: string[];\n}\n\n/**\n * Validate that all required environment variables are present in secrets.\n *\n * @param requiredVars - Array of environment variable names required by the application\n * @param secrets - Stage secrets to validate against\n * @returns Validation result with missing and provided variables\n *\n * @example\n * ```typescript\n * const required = ['DATABASE_URL', 'API_KEY', 'JWT_SECRET'];\n * const secrets = await readStageSecrets('production');\n * const result = validateEnvironmentVariables(required, secrets);\n *\n * if (!result.valid) {\n * console.error(`Missing environment variables: ${result.missing.join(', ')}`);\n * }\n * ```\n */\nexport function validateEnvironmentVariables(\n\trequiredVars: string[],\n\tsecrets: StageSecrets,\n): EnvValidationResult {\n\tconst embeddable = toEmbeddableSecrets(secrets);\n\tconst availableVars = new Set(Object.keys(embeddable));\n\n\tconst missing: string[] = [];\n\tconst provided: string[] = [];\n\n\tfor (const varName of requiredVars) {\n\t\tif (availableVars.has(varName)) {\n\t\t\tprovided.push(varName);\n\t\t} else {\n\t\t\tmissing.push(varName);\n\t\t}\n\t}\n\n\treturn {\n\t\tvalid: missing.length === 0,\n\t\tmissing: missing.sort(),\n\t\tprovided: provided.sort(),\n\t\trequired: [...requiredVars].sort(),\n\t};\n}\n"],"mappings":";;;;;;;;AAQA,MAAM,cAAc;;AAGpB,MAAM,YAAY;AAClB,MAAM,YAAY;AAClB,MAAM,kBAAkB;;;;AAexB,SAAgB,cAAc,MAAM,QAAQ,KAAK,EAAU;AAC1D,QAAO,KAAK,KAAK,YAAY;AAC7B;;;;AAKD,SAAgB,eAAeA,OAAe,MAAM,QAAQ,KAAK,EAAU;AAC1E,QAAO,KAAK,cAAc,IAAI,GAAG,EAAE,MAAM,OAAO;AAChD;;;;AAKD,SAAgB,aAAaA,OAAe,MAAM,QAAQ,KAAK,EAAW;AACzE,QAAO,WAAW,eAAe,OAAO,IAAI,CAAC;AAC7C;;;;AAKD,SAAgB,iBAAiBA,OAA6B;CAC7D,MAAM,MAAM,qBAAI,QAAO,aAAa;AACpC,QAAO;EACN;EACA,WAAW;EACX,WAAW;EACX,UAAU,CAAE;EACZ,MAAM,CAAE;EACR,QAAQ,CAAE;CACV;AACD;;;;AAKD,SAAS,mBACRC,SACAC,QACuB;CACvB,MAAM,MAAM,OAAO,KAAK,QAAQ,MAAM;CACtC,MAAM,KAAK,YAAY,UAAU;CAGjC,MAAM,YAAY,KAAK,UAAU,QAAQ;CAGzC,MAAM,SAAS,eAAe,WAAW,KAAK,GAAG;CACjD,MAAM,aAAa,OAAO,OAAO,CAChC,OAAO,OAAO,WAAW,QAAQ,EACjC,OAAO,OAAO,AACd,EAAC;CAGF,MAAM,UAAU,OAAO,YAAY;CAGnC,MAAM,WAAW,OAAO,OAAO,CAAC,YAAY,OAAQ,EAAC;AAErD,QAAO;EACN,SAAS;EACT,WAAW,SAAS,SAAS,SAAS;EACtC,IAAI,GAAG,SAAS,MAAM;CACtB;AACD;;;;AAKD,SAAS,mBACRC,MACAD,QACe;CACf,MAAM,MAAM,OAAO,KAAK,QAAQ,MAAM;CACtC,MAAM,WAAW,OAAO,KAAK,KAAK,IAAI,MAAM;CAC5C,MAAM,WAAW,OAAO,KAAK,KAAK,WAAW,SAAS;CAGtD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,iBAAiB,WAAW,KAAK,SAAS;AAC3D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;AAQD,eAAsB,iBACrBF,OACA,MAAM,QAAQ,KAAK,EACY;CAC/B,MAAM,OAAO,eAAe,OAAO,IAAI;AAEvC,MAAK,WAAW,KAAK,CACpB,QAAO;CAGR,MAAM,UAAU,MAAM,SAAS,MAAM,QAAQ;CAC7C,MAAM,OAAO,KAAK,MAAM,QAAQ;AAGhC,KAAI,KAAK,YAAY,KAAK,KAAK,aAAa,KAAK,IAAI;EACpD,MAAM,cAAc,SAAS,IAAI;EACjC,MAAM,MAAM,MAAM,QAAQ,OAAO,YAAY;AAE7C,OAAK,IACJ,OAAM,IAAI,OACR,sCAAsC,MAAM,6BACjB,YAAY,GAAG,MAAM;AAInD,SAAO,mBAAmB,MAA8B,IAAI;CAC5D;AAGD,QAAO;AACP;;;;;AAMD,eAAsB,kBACrBC,SACA,MAAM,QAAQ,KAAK,EACH;CAChB,MAAM,MAAM,cAAc,IAAI;CAC9B,MAAM,OAAO,eAAe,QAAQ,OAAO,IAAI;CAC/C,MAAM,cAAc,SAAS,IAAI;AAGjC,OAAM,MAAM,KAAK,EAAE,WAAW,KAAM,EAAC;CAGrC,MAAM,MAAM,MAAM,eAAe,QAAQ,OAAO,YAAY;CAG5D,MAAM,YAAY,mBAAmB,SAAS,IAAI;AAClD,OAAM,UAAU,MAAM,KAAK,UAAU,WAAW,MAAM,EAAE,EAAE,QAAQ;AAClE;;;;;AAMD,SAAgB,oBAAoBA,SAA0C;AAC7E,QAAO;EACN,GAAG,QAAQ;EACX,GAAG,QAAQ;EAEX,GAAI,QAAQ,SAAS,YAAY;GAChC,eAAe,QAAQ,SAAS,SAAS;GACzC,mBAAmB,QAAQ,SAAS,SAAS;GAC7C,aAAa,QAAQ,SAAS,SAAS,YAAY;GACnD,eAAe,QAAQ,SAAS,SAAS;GACzC,eAAe,OAAO,QAAQ,SAAS,SAAS,KAAK;EACrD;EACD,GAAI,QAAQ,SAAS,SAAS;GAC7B,gBAAgB,QAAQ,SAAS,MAAM;GACvC,YAAY,QAAQ,SAAS,MAAM;GACnC,YAAY,OAAO,QAAQ,SAAS,MAAM,KAAK;EAC/C;EACD,GAAI,QAAQ,SAAS,YAAY;GAChC,eAAe,QAAQ,SAAS,SAAS;GACzC,mBAAmB,QAAQ,SAAS,SAAS;GAC7C,eAAe,QAAQ,SAAS,SAAS;GACzC,eAAe,OAAO,QAAQ,SAAS,SAAS,KAAK;GACrD,gBAAgB,QAAQ,SAAS,SAAS,SAAS;EACnD;EACD,GAAI,QAAQ,SAAS,SAAS;GAC7B,uBAAuB,QAAQ,SAAS,MAAM;GAC9C,2BAA2B,QAAQ,SAAS,MAAM;GAClD,gBAAgB,QAAQ,SAAS,MAAM,UAAU;GACjD,gBAAgB;GAChB,0BAA0B;EAC1B;EACD,GAAI,QAAQ,SAAS,WAAW;GAC/B,WAAW,QAAQ,SAAS,QAAQ;GACpC,WAAW,OAAO,QAAQ,SAAS,QAAQ,KAAK;GAChD,WAAW,QAAQ,SAAS,QAAQ;GACpC,WAAW,QAAQ,SAAS,QAAQ;GACpC,aAAa;GACb,WAAW;EACX;EACD,GAAI,QAAQ,SAAS,cAAc;GAClC,mBACC,QAAQ,SAAS,WAAW,eAC5B,QAAQ,SAAS,WAAW;GAC7B,uBAAuB,QAAQ,SAAS,WAAW;GACnD,YAAY,QAAQ,SAAS,WAAW,UAAU;GAClD,mBAAmB,SAAS,QAAQ,SAAS,WAAW,KAAK,GAAG,QAAQ,SAAS,WAAW,KAAK;EACjG;EACD,GAAI,QAAQ,SAAS,UAAU;GAC9B,gBAAgB,QAAQ,SAAS,OAAO;GACxC,oBAAoB,QAAQ,SAAS,OAAO;EAC5C;CACD;AACD;;;;AAKD,eAAsB,gBACrBD,OACAI,KACAC,OACA,MAAM,QAAQ,KAAK,EACK;CACxB,MAAM,UAAU,MAAM,iBAAiB,OAAO,IAAI;AAElD,MAAK,QACJ,OAAM,IAAI,OACR,+BAA+B,MAAM,mCAAmC,MAAM;CAIjF,MAAMC,UAAwB;EAC7B,GAAG;EACH,WAAW,qBAAI,QAAO,aAAa;EACnC,QAAQ;GACP,GAAG,QAAQ;IACV,MAAM;EACP;CACD;AAED,OAAM,kBAAkB,SAAS,IAAI;AACrC,QAAO;AACP;;;;AAKD,SAAgB,aAAaC,UAA0B;AACtD,KAAI,SAAS,UAAU,EACtB,QAAO;AAER,SAAQ,EAAE,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,IAAI,OAAO,SAAS,SAAS,EAAE,CAAC,EAAE,SAAS,MAAM,GAAG,CAAC;AACtF;;;;;;;;;;;;;;;;;;;AAkCD,SAAgB,6BACfC,cACAP,SACsB;CACtB,MAAM,aAAa,oBAAoB,QAAQ;CAC/C,MAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,WAAW;CAErD,MAAMQ,UAAoB,CAAE;CAC5B,MAAMC,WAAqB,CAAE;AAE7B,MAAK,MAAM,WAAW,aACrB,KAAI,cAAc,IAAI,QAAQ,CAC7B,UAAS,KAAK,QAAQ;KAEtB,SAAQ,KAAK,QAAQ;AAIvB,QAAO;EACN,OAAO,QAAQ,WAAW;EAC1B,SAAS,QAAQ,MAAM;EACvB,UAAU,SAAS,MAAM;EACzB,UAAU,CAAC,GAAG,YAAa,EAAC,MAAM;CAClC;AACD"}

package/dist/{storage-BJmzYxt8.cjs → storage-CSNplaJn.cjs} RENAMED Viewed

@@ -1,85 +1,10 @@
 const require_chunk = require('./chunk-CUT6urMc.cjs');
+const require_keystore = require('./keystore-C9rint2E.cjs');
 const node_fs = require_chunk.__toESM(require("node:fs"));
 const node_path = require_chunk.__toESM(require("node:path"));
 const node_fs_promises = require_chunk.__toESM(require("node:fs/promises"));
-const node_os = require_chunk.__toESM(require("node:os"));
 const node_crypto = require_chunk.__toESM(require("node:crypto"));
-//#region src/secrets/keystore.ts
-/** Key length for AES-256 encryption */
-const KEY_LENGTH = 32;
-/**
-* Get the keystore directory for a project.
-* Keys are stored at ~/.gkm/{project-name}/
-*
-* @param projectName - Name of the project (defaults to current directory name)
-* @returns Path to the keystore directory
-*/
-function getKeystoreDir(projectName) {
-	const name = projectName ?? (0, node_path.basename)(process.cwd());
-	return (0, node_path.join)((0, node_os.homedir)(), ".gkm", name);
-}
-/**
-* Get the path to a stage's encryption key.
-*
-* @param stage - Stage name (e.g., 'development', 'production')
-* @param projectName - Name of the project (defaults to current directory name)
-* @returns Path to the key file
-*/
-function getKeyPath(stage, projectName) {
-	return (0, node_path.join)(getKeystoreDir(projectName), `${stage}.key`);
-}
-/**
-* Generate a new encryption key for a stage.
-* The key is stored at ~/.gkm/{project-name}/{stage}.key with restricted permissions.
-*
-* @param stage - Stage name
-* @param projectName - Project name (defaults to current directory name)
-* @returns The generated key as a hex string
-*/
-async function generateKey(stage, projectName) {
-	const keyDir = getKeystoreDir(projectName);
-	const keyPath = getKeyPath(stage, projectName);
-	await (0, node_fs_promises.mkdir)(keyDir, {
-		recursive: true,
-		mode: 448
-	});
-	const key = (0, node_crypto.randomBytes)(KEY_LENGTH).toString("hex");
-	await (0, node_fs_promises.writeFile)(keyPath, key, {
-		mode: 384,
-		encoding: "utf-8"
-	});
-	await (0, node_fs_promises.chmod)(keyPath, 384);
-	return key;
-}
-/**
-* Read an encryption key for a stage.
-*
-* @param stage - Stage name
-* @param projectName - Project name (defaults to current directory name)
-* @returns The key as a hex string, or null if not found
-*/
-async function readKey(stage, projectName) {
-	const keyPath = getKeyPath(stage, projectName);
-	if (!(0, node_fs.existsSync)(keyPath)) return null;
-	const key = await (0, node_fs_promises.readFile)(keyPath, "utf-8");
-	return key.trim();
-}
-/**
-* Get or create a key for a stage.
-* If the key already exists, it is returned. Otherwise, a new key is generated.
-*
-* @param stage - Stage name
-* @param projectName - Project name (defaults to current directory name)
-* @returns The key as a hex string
-*/
-async function getOrCreateKey(stage, projectName) {
-	const existingKey = await readKey(stage, projectName);
-	if (existingKey) return existingKey;
-	return generateKey(stage, projectName);
-}
-//#endregion
 //#region src/secrets/storage.ts
 /** Default secrets directory relative to project root */
 const SECRETS_DIR = ".gkm/secrets";
@@ -163,7 +88,7 @@ async function readStageSecrets(stage, cwd = process.cwd()) {
 	const data = JSON.parse(content);
 	if (data.version === 1 && data.encrypted && data.iv) {
 		const projectName = (0, node_path.basename)(cwd);
-		const key = await readKey(stage, projectName);
+		const key = await require_keystore.readKey(stage, projectName);
 		if (!key) throw new Error(`Decryption key not found for stage "${stage}". Expected key at: ~/.gkm/${projectName}/${stage}.key`);
 		return decryptSecretsData(data, key);
 	}
@@ -178,7 +103,7 @@ async function writeStageSecrets(secrets, cwd = process.cwd()) {
 	const path = getSecretsPath(secrets.stage, cwd);
 	const projectName = (0, node_path.basename)(cwd);
 	await (0, node_fs_promises.mkdir)(dir, { recursive: true });
-	const key = await getOrCreateKey(secrets.stage, projectName);
+	const key = await require_keystore.getOrCreateKey(secrets.stage, projectName);
 	const encrypted = encryptSecretsData(secrets, key);
 	await (0, node_fs_promises.writeFile)(path, JSON.stringify(encrypted, null, 2), "utf-8");
 }
@@ -294,12 +219,6 @@ function validateEnvironmentVariables(requiredVars, secrets) {
 }
 //#endregion
-Object.defineProperty(exports, 'getKeyPath', {
-  enumerable: true,
-  get: function () {
-    return getKeyPath;
-  }
-});
 Object.defineProperty(exports, 'getSecretsDir', {
   enumerable: true,
   get: function () {
@@ -360,4 +279,4 @@ Object.defineProperty(exports, 'writeStageSecrets', {
     return writeStageSecrets;
   }
 });
-//# sourceMappingURL=storage-BJmzYxt8.cjs.map
+//# sourceMappingURL=storage-CSNplaJn.cjs.map

package/dist/storage-CSNplaJn.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"storage-CSNplaJn.cjs","names":["stage: string","secrets: StageSecrets","keyHex: string","data: EncryptedSecretsFile","key: string","value: string","updated: StageSecrets","password: string","requiredVars: string[]","missing: string[]","provided: string[]"],"sources":["../src/secrets/storage.ts"],"sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'node:crypto';\nimport { existsSync } from 'node:fs';\nimport { mkdir, readFile, writeFile } from 'node:fs/promises';\nimport { basename, join } from 'node:path';\nimport { getOrCreateKey, readKey } from './keystore';\nimport type { EmbeddableSecrets, StageSecrets } from './types';\n\n/** Default secrets directory relative to project root */\nconst SECRETS_DIR = '.gkm/secrets';\n\n/** AES-256-GCM configuration */\nconst ALGORITHM = 'aes-256-gcm';\nconst IV_LENGTH = 12; // 96 bits for GCM\nconst AUTH_TAG_LENGTH = 16; // 128 bits\n\n/** Encrypted secrets file structure */\ninterface EncryptedSecretsFile {\n\t/** Version for future format changes */\n\tversion: 1;\n\t/** Base64 encoded encrypted data (ciphertext + auth tag) */\n\tencrypted: string;\n\t/** Hex encoded IV */\n\tiv: string;\n}\n\n/**\n * Get the secrets directory path.\n */\nexport function getSecretsDir(cwd = process.cwd()): string {\n\treturn join(cwd, SECRETS_DIR);\n}\n\n/**\n * Get the secrets file path for a stage.\n */\nexport function getSecretsPath(stage: string, cwd = process.cwd()): string {\n\treturn join(getSecretsDir(cwd), `${stage}.json`);\n}\n\n/**\n * Check if secrets exist for a stage.\n */\nexport function secretsExist(stage: string, cwd = process.cwd()): boolean {\n\treturn existsSync(getSecretsPath(stage, cwd));\n}\n\n/**\n * Initialize an empty StageSecrets object for a stage.\n */\nexport function initStageSecrets(stage: string): StageSecrets {\n\tconst now = new Date().toISOString();\n\treturn {\n\t\tstage,\n\t\tcreatedAt: now,\n\t\tupdatedAt: now,\n\t\tservices: {},\n\t\turls: {},\n\t\tcustom: {},\n\t};\n}\n\n/**\n * Encrypt secrets using a key.\n */\nfunction encryptSecretsData(\n\tsecrets: StageSecrets,\n\tkeyHex: string,\n): EncryptedSecretsFile {\n\tconst key = Buffer.from(keyHex, 'hex');\n\tconst iv = randomBytes(IV_LENGTH);\n\n\t// Serialize secrets to JSON\n\tconst plaintext = JSON.stringify(secrets);\n\n\t// Encrypt\n\tconst cipher = createCipheriv(ALGORITHM, key, iv);\n\tconst ciphertext = Buffer.concat([\n\t\tcipher.update(plaintext, 'utf-8'),\n\t\tcipher.final(),\n\t]);\n\n\t// Get auth tag\n\tconst authTag = cipher.getAuthTag();\n\n\t// Combine ciphertext + auth tag\n\tconst combined = Buffer.concat([ciphertext, authTag]);\n\n\treturn {\n\t\tversion: 1,\n\t\tencrypted: combined.toString('base64'),\n\t\tiv: iv.toString('hex'),\n\t};\n}\n\n/**\n * Decrypt secrets using a key.\n */\nfunction decryptSecretsData(\n\tdata: EncryptedSecretsFile,\n\tkeyHex: string,\n): StageSecrets {\n\tconst key = Buffer.from(keyHex, 'hex');\n\tconst ivBuffer = Buffer.from(data.iv, 'hex');\n\tconst combined = Buffer.from(data.encrypted, 'base64');\n\n\t// Split ciphertext and auth tag\n\tconst ciphertext = combined.subarray(0, -AUTH_TAG_LENGTH);\n\tconst authTag = combined.subarray(-AUTH_TAG_LENGTH);\n\n\t// Decrypt\n\tconst decipher = createDecipheriv(ALGORITHM, key, ivBuffer);\n\tdecipher.setAuthTag(authTag);\n\n\tconst plaintext = Buffer.concat([\n\t\tdecipher.update(ciphertext),\n\t\tdecipher.final(),\n\t]);\n\n\treturn JSON.parse(plaintext.toString('utf-8')) as StageSecrets;\n}\n\n/**\n * Read secrets for a stage (encrypted).\n * Requires the decryption key to be present at ~/.gkm/{project}/{stage}.key\n *\n * @returns StageSecrets or null if not found\n */\nexport async function readStageSecrets(\n\tstage: string,\n\tcwd = process.cwd(),\n): Promise<StageSecrets | null> {\n\tconst path = getSecretsPath(stage, cwd);\n\n\tif (!existsSync(path)) {\n\t\treturn null;\n\t}\n\n\tconst content = await readFile(path, 'utf-8');\n\tconst data = JSON.parse(content);\n\n\t// Check if this is an encrypted file (has version field)\n\tif (data.version === 1 && data.encrypted && data.iv) {\n\t\tconst projectName = basename(cwd);\n\t\tconst key = await readKey(stage, projectName);\n\n\t\tif (!key) {\n\t\t\tthrow new Error(\n\t\t\t\t`Decryption key not found for stage \"${stage}\". ` +\n\t\t\t\t\t`Expected key at: ~/.gkm/${projectName}/${stage}.key`,\n\t\t\t);\n\t\t}\n\n\t\treturn decryptSecretsData(data as EncryptedSecretsFile, key);\n\t}\n\n\t// Legacy: unencrypted format (for backwards compatibility)\n\treturn data as StageSecrets;\n}\n\n/**\n * Write secrets for a stage (encrypted).\n * Creates or uses existing encryption key at ~/.gkm/{project}/{stage}.key\n */\nexport async function writeStageSecrets(\n\tsecrets: StageSecrets,\n\tcwd = process.cwd(),\n): Promise<void> {\n\tconst dir = getSecretsDir(cwd);\n\tconst path = getSecretsPath(secrets.stage, cwd);\n\tconst projectName = basename(cwd);\n\n\t// Ensure directory exists\n\tawait mkdir(dir, { recursive: true });\n\n\t// Get or create encryption key\n\tconst key = await getOrCreateKey(secrets.stage, projectName);\n\n\t// Encrypt and write\n\tconst encrypted = encryptSecretsData(secrets, key);\n\tawait writeFile(path, JSON.stringify(encrypted, null, 2), 'utf-8');\n}\n\n/**\n * Convert StageSecrets to embeddable format (flat key-value pairs).\n * This is what gets encrypted and embedded in the bundle.\n */\nexport function toEmbeddableSecrets(secrets: StageSecrets): EmbeddableSecrets {\n\treturn {\n\t\t...secrets.urls,\n\t\t...secrets.custom,\n\t\t// Also include individual service credentials if needed\n\t\t...(secrets.services.postgres && {\n\t\t\tPOSTGRES_USER: secrets.services.postgres.username,\n\t\t\tPOSTGRES_PASSWORD: secrets.services.postgres.password,\n\t\t\tPOSTGRES_DB: secrets.services.postgres.database ?? 'app',\n\t\t\tPOSTGRES_HOST: secrets.services.postgres.host,\n\t\t\tPOSTGRES_PORT: String(secrets.services.postgres.port),\n\t\t}),\n\t\t...(secrets.services.redis && {\n\t\t\tREDIS_PASSWORD: secrets.services.redis.password,\n\t\t\tREDIS_HOST: secrets.services.redis.host,\n\t\t\tREDIS_PORT: String(secrets.services.redis.port),\n\t\t}),\n\t\t...(secrets.services.rabbitmq && {\n\t\t\tRABBITMQ_USER: secrets.services.rabbitmq.username,\n\t\t\tRABBITMQ_PASSWORD: secrets.services.rabbitmq.password,\n\t\t\tRABBITMQ_HOST: secrets.services.rabbitmq.host,\n\t\t\tRABBITMQ_PORT: String(secrets.services.rabbitmq.port),\n\t\t\tRABBITMQ_VHOST: secrets.services.rabbitmq.vhost ?? '/',\n\t\t}),\n\t\t...(secrets.services.minio && {\n\t\t\tSTORAGE_ACCESS_KEY_ID: secrets.services.minio.username,\n\t\t\tSTORAGE_SECRET_ACCESS_KEY: secrets.services.minio.password,\n\t\t\tSTORAGE_BUCKET: secrets.services.minio.bucket ?? 'app',\n\t\t\tSTORAGE_REGION: 'eu-west-1',\n\t\t\tSTORAGE_FORCE_PATH_STYLE: 'true',\n\t\t}),\n\t\t...(secrets.services.mailpit && {\n\t\t\tSMTP_HOST: secrets.services.mailpit.host,\n\t\t\tSMTP_PORT: String(secrets.services.mailpit.port),\n\t\t\tSMTP_USER: secrets.services.mailpit.username,\n\t\t\tSMTP_PASS: secrets.services.mailpit.password,\n\t\t\tSMTP_SECURE: 'false',\n\t\t\tMAIL_FROM: 'noreply@localhost',\n\t\t}),\n\t\t...(secrets.services.localstack && {\n\t\t\tAWS_ACCESS_KEY_ID:\n\t\t\t\tsecrets.services.localstack.accessKeyId ??\n\t\t\t\tsecrets.services.localstack.username,\n\t\t\tAWS_SECRET_ACCESS_KEY: secrets.services.localstack.password,\n\t\t\tAWS_REGION: secrets.services.localstack.region ?? 'us-east-1',\n\t\t\tAWS_ENDPOINT_URL: `http://${secrets.services.localstack.host}:${secrets.services.localstack.port}`,\n\t\t}),\n\t\t...(secrets.services.pgboss && {\n\t\t\tPGBOSS_DB_USER: secrets.services.pgboss.username,\n\t\t\tPGBOSS_DB_PASSWORD: secrets.services.pgboss.password,\n\t\t}),\n\t};\n}\n\n/**\n * Update a custom secret in the secrets file.\n */\nexport async function setCustomSecret(\n\tstage: string,\n\tkey: string,\n\tvalue: string,\n\tcwd = process.cwd(),\n): Promise<StageSecrets> {\n\tconst secrets = await readStageSecrets(stage, cwd);\n\n\tif (!secrets) {\n\t\tthrow new Error(\n\t\t\t`Secrets not found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t);\n\t}\n\n\tconst updated: StageSecrets = {\n\t\t...secrets,\n\t\tupdatedAt: new Date().toISOString(),\n\t\tcustom: {\n\t\t\t...secrets.custom,\n\t\t\t[key]: value,\n\t\t},\n\t};\n\n\tawait writeStageSecrets(updated, cwd);\n\treturn updated;\n}\n\n/**\n * Mask a password for display (show first 4 and last 2 chars).\n */\nexport function maskPassword(password: string): string {\n\tif (password.length <= 8) {\n\t\treturn '********';\n\t}\n\treturn `${password.slice(0, 4)}${'*'.repeat(password.length - 6)}${password.slice(-2)}`;\n}\n\n/**\n * Result of environment variable validation.\n */\nexport interface EnvValidationResult {\n\t/** Whether all required environment variables are present */\n\tvalid: boolean;\n\t/** List of missing environment variable names */\n\tmissing: string[];\n\t/** List of environment variables that are provided */\n\tprovided: string[];\n\t/** List of environment variables that were required */\n\trequired: string[];\n}\n\n/**\n * Validate that all required environment variables are present in secrets.\n *\n * @param requiredVars - Array of environment variable names required by the application\n * @param secrets - Stage secrets to validate against\n * @returns Validation result with missing and provided variables\n *\n * @example\n * ```typescript\n * const required = ['DATABASE_URL', 'API_KEY', 'JWT_SECRET'];\n * const secrets = await readStageSecrets('production');\n * const result = validateEnvironmentVariables(required, secrets);\n *\n * if (!result.valid) {\n * console.error(`Missing environment variables: ${result.missing.join(', ')}`);\n * }\n * ```\n */\nexport function validateEnvironmentVariables(\n\trequiredVars: string[],\n\tsecrets: StageSecrets,\n): EnvValidationResult {\n\tconst embeddable = toEmbeddableSecrets(secrets);\n\tconst availableVars = new Set(Object.keys(embeddable));\n\n\tconst missing: string[] = [];\n\tconst provided: string[] = [];\n\n\tfor (const varName of requiredVars) {\n\t\tif (availableVars.has(varName)) {\n\t\t\tprovided.push(varName);\n\t\t} else {\n\t\t\tmissing.push(varName);\n\t\t}\n\t}\n\n\treturn {\n\t\tvalid: missing.length === 0,\n\t\tmissing: missing.sort(),\n\t\tprovided: provided.sort(),\n\t\trequired: [...requiredVars].sort(),\n\t};\n}\n"],"mappings":";;;;;;;;;AAQA,MAAM,cAAc;;AAGpB,MAAM,YAAY;AAClB,MAAM,YAAY;AAClB,MAAM,kBAAkB;;;;AAexB,SAAgB,cAAc,MAAM,QAAQ,KAAK,EAAU;AAC1D,QAAO,oBAAK,KAAK,YAAY;AAC7B;;;;AAKD,SAAgB,eAAeA,OAAe,MAAM,QAAQ,KAAK,EAAU;AAC1E,QAAO,oBAAK,cAAc,IAAI,GAAG,EAAE,MAAM,OAAO;AAChD;;;;AAKD,SAAgB,aAAaA,OAAe,MAAM,QAAQ,KAAK,EAAW;AACzE,QAAO,wBAAW,eAAe,OAAO,IAAI,CAAC;AAC7C;;;;AAKD,SAAgB,iBAAiBA,OAA6B;CAC7D,MAAM,MAAM,qBAAI,QAAO,aAAa;AACpC,QAAO;EACN;EACA,WAAW;EACX,WAAW;EACX,UAAU,CAAE;EACZ,MAAM,CAAE;EACR,QAAQ,CAAE;CACV;AACD;;;;AAKD,SAAS,mBACRC,SACAC,QACuB;CACvB,MAAM,MAAM,OAAO,KAAK,QAAQ,MAAM;CACtC,MAAM,KAAK,6BAAY,UAAU;CAGjC,MAAM,YAAY,KAAK,UAAU,QAAQ;CAGzC,MAAM,SAAS,gCAAe,WAAW,KAAK,GAAG;CACjD,MAAM,aAAa,OAAO,OAAO,CAChC,OAAO,OAAO,WAAW,QAAQ,EACjC,OAAO,OAAO,AACd,EAAC;CAGF,MAAM,UAAU,OAAO,YAAY;CAGnC,MAAM,WAAW,OAAO,OAAO,CAAC,YAAY,OAAQ,EAAC;AAErD,QAAO;EACN,SAAS;EACT,WAAW,SAAS,SAAS,SAAS;EACtC,IAAI,GAAG,SAAS,MAAM;CACtB;AACD;;;;AAKD,SAAS,mBACRC,MACAD,QACe;CACf,MAAM,MAAM,OAAO,KAAK,QAAQ,MAAM;CACtC,MAAM,WAAW,OAAO,KAAK,KAAK,IAAI,MAAM;CAC5C,MAAM,WAAW,OAAO,KAAK,KAAK,WAAW,SAAS;CAGtD,MAAM,aAAa,SAAS,SAAS,IAAI,gBAAgB;CACzD,MAAM,UAAU,SAAS,UAAU,gBAAgB;CAGnD,MAAM,WAAW,kCAAiB,WAAW,KAAK,SAAS;AAC3D,UAAS,WAAW,QAAQ;CAE5B,MAAM,YAAY,OAAO,OAAO,CAC/B,SAAS,OAAO,WAAW,EAC3B,SAAS,OAAO,AAChB,EAAC;AAEF,QAAO,KAAK,MAAM,UAAU,SAAS,QAAQ,CAAC;AAC9C;;;;;;;AAQD,eAAsB,iBACrBF,OACA,MAAM,QAAQ,KAAK,EACY;CAC/B,MAAM,OAAO,eAAe,OAAO,IAAI;AAEvC,MAAK,wBAAW,KAAK,CACpB,QAAO;CAGR,MAAM,UAAU,MAAM,+BAAS,MAAM,QAAQ;CAC7C,MAAM,OAAO,KAAK,MAAM,QAAQ;AAGhC,KAAI,KAAK,YAAY,KAAK,KAAK,aAAa,KAAK,IAAI;EACpD,MAAM,cAAc,wBAAS,IAAI;EACjC,MAAM,MAAM,MAAM,yBAAQ,OAAO,YAAY;AAE7C,OAAK,IACJ,OAAM,IAAI,OACR,sCAAsC,MAAM,6BACjB,YAAY,GAAG,MAAM;AAInD,SAAO,mBAAmB,MAA8B,IAAI;CAC5D;AAGD,QAAO;AACP;;;;;AAMD,eAAsB,kBACrBC,SACA,MAAM,QAAQ,KAAK,EACH;CAChB,MAAM,MAAM,cAAc,IAAI;CAC9B,MAAM,OAAO,eAAe,QAAQ,OAAO,IAAI;CAC/C,MAAM,cAAc,wBAAS,IAAI;AAGjC,OAAM,4BAAM,KAAK,EAAE,WAAW,KAAM,EAAC;CAGrC,MAAM,MAAM,MAAM,gCAAe,QAAQ,OAAO,YAAY;CAG5D,MAAM,YAAY,mBAAmB,SAAS,IAAI;AAClD,OAAM,gCAAU,MAAM,KAAK,UAAU,WAAW,MAAM,EAAE,EAAE,QAAQ;AAClE;;;;;AAMD,SAAgB,oBAAoBA,SAA0C;AAC7E,QAAO;EACN,GAAG,QAAQ;EACX,GAAG,QAAQ;EAEX,GAAI,QAAQ,SAAS,YAAY;GAChC,eAAe,QAAQ,SAAS,SAAS;GACzC,mBAAmB,QAAQ,SAAS,SAAS;GAC7C,aAAa,QAAQ,SAAS,SAAS,YAAY;GACnD,eAAe,QAAQ,SAAS,SAAS;GACzC,eAAe,OAAO,QAAQ,SAAS,SAAS,KAAK;EACrD;EACD,GAAI,QAAQ,SAAS,SAAS;GAC7B,gBAAgB,QAAQ,SAAS,MAAM;GACvC,YAAY,QAAQ,SAAS,MAAM;GACnC,YAAY,OAAO,QAAQ,SAAS,MAAM,KAAK;EAC/C;EACD,GAAI,QAAQ,SAAS,YAAY;GAChC,eAAe,QAAQ,SAAS,SAAS;GACzC,mBAAmB,QAAQ,SAAS,SAAS;GAC7C,eAAe,QAAQ,SAAS,SAAS;GACzC,eAAe,OAAO,QAAQ,SAAS,SAAS,KAAK;GACrD,gBAAgB,QAAQ,SAAS,SAAS,SAAS;EACnD;EACD,GAAI,QAAQ,SAAS,SAAS;GAC7B,uBAAuB,QAAQ,SAAS,MAAM;GAC9C,2BAA2B,QAAQ,SAAS,MAAM;GAClD,gBAAgB,QAAQ,SAAS,MAAM,UAAU;GACjD,gBAAgB;GAChB,0BAA0B;EAC1B;EACD,GAAI,QAAQ,SAAS,WAAW;GAC/B,WAAW,QAAQ,SAAS,QAAQ;GACpC,WAAW,OAAO,QAAQ,SAAS,QAAQ,KAAK;GAChD,WAAW,QAAQ,SAAS,QAAQ;GACpC,WAAW,QAAQ,SAAS,QAAQ;GACpC,aAAa;GACb,WAAW;EACX;EACD,GAAI,QAAQ,SAAS,cAAc;GAClC,mBACC,QAAQ,SAAS,WAAW,eAC5B,QAAQ,SAAS,WAAW;GAC7B,uBAAuB,QAAQ,SAAS,WAAW;GACnD,YAAY,QAAQ,SAAS,WAAW,UAAU;GAClD,mBAAmB,SAAS,QAAQ,SAAS,WAAW,KAAK,GAAG,QAAQ,SAAS,WAAW,KAAK;EACjG;EACD,GAAI,QAAQ,SAAS,UAAU;GAC9B,gBAAgB,QAAQ,SAAS,OAAO;GACxC,oBAAoB,QAAQ,SAAS,OAAO;EAC5C;CACD;AACD;;;;AAKD,eAAsB,gBACrBD,OACAI,KACAC,OACA,MAAM,QAAQ,KAAK,EACK;CACxB,MAAM,UAAU,MAAM,iBAAiB,OAAO,IAAI;AAElD,MAAK,QACJ,OAAM,IAAI,OACR,+BAA+B,MAAM,mCAAmC,MAAM;CAIjF,MAAMC,UAAwB;EAC7B,GAAG;EACH,WAAW,qBAAI,QAAO,aAAa;EACnC,QAAQ;GACP,GAAG,QAAQ;IACV,MAAM;EACP;CACD;AAED,OAAM,kBAAkB,SAAS,IAAI;AACrC,QAAO;AACP;;;;AAKD,SAAgB,aAAaC,UAA0B;AACtD,KAAI,SAAS,UAAU,EACtB,QAAO;AAER,SAAQ,EAAE,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,IAAI,OAAO,SAAS,SAAS,EAAE,CAAC,EAAE,SAAS,MAAM,GAAG,CAAC;AACtF;;;;;;;;;;;;;;;;;;;AAkCD,SAAgB,6BACfC,cACAP,SACsB;CACtB,MAAM,aAAa,oBAAoB,QAAQ;CAC/C,MAAM,gBAAgB,IAAI,IAAI,OAAO,KAAK,WAAW;CAErD,MAAMQ,UAAoB,CAAE;CAC5B,MAAMC,WAAqB,CAAE;AAE7B,MAAK,MAAM,WAAW,aACrB,KAAI,cAAc,IAAI,QAAQ,CAC7B,UAAS,KAAK,QAAQ;KAEtB,SAAQ,KAAK,QAAQ;AAIvB,QAAO;EACN,OAAO,QAAQ,WAAW;EAC1B,SAAS,QAAQ,MAAM;EACvB,UAAU,SAAS,MAAM;EACzB,UAAU,CAAC,GAAG,YAAa,EAAC,MAAM;CAClC;AACD"}

package/dist/{storage-CYlGwWTj.mjs → storage-DGBzMLZa.mjs} RENAMED Viewed

@@ -1,3 +1,4 @@
-import { getSecretsDir, getSecretsPath, initStageSecrets, maskPassword, readStageSecrets, secretsExist, setCustomSecret, toEmbeddableSecrets, validateEnvironmentVariables, writeStageSecrets } from "./storage-Bi24WfoW.mjs";
+import "./keystore-TxeYM7an.mjs";
+import { getSecretsDir, getSecretsPath, initStageSecrets, maskPassword, readStageSecrets, secretsExist, setCustomSecret, toEmbeddableSecrets, validateEnvironmentVariables, writeStageSecrets } from "./storage-B020InPW.mjs";
 export { initStageSecrets, readStageSecrets, toEmbeddableSecrets, validateEnvironmentVariables, writeStageSecrets };

package/dist/{storage-BM9hGpgv.cjs → storage-DlVol_oj.cjs} RENAMED Viewed

@@ -1,4 +1,5 @@
-const require_storage = require('./storage-BJmzYxt8.cjs');
+require('./keystore-C9rint2E.cjs');
+const require_storage = require('./storage-CSNplaJn.cjs');
 exports.initStageSecrets = require_storage.initStageSecrets;
 exports.readStageSecrets = require_storage.readStageSecrets;

package/dist/{sync-SizaChmC.cjs → sync-0ILCb-1S.cjs} RENAMED Viewed

@@ -30,7 +30,7 @@ async function pushSecrets(stage, workspace) {
 	if (!workspace.name) throw new Error("Workspace name is required for SSM secrets sync. Set \"name\" in gkm.config.ts.");
 	const client = createSSMClient(config);
 	const parameterName = getSecretsParameterName(workspace.name, stage);
-	const { readStageSecrets } = await Promise.resolve().then(() => require("./storage-BM9hGpgv.cjs"));
+	const { readStageSecrets } = await Promise.resolve().then(() => require("./storage-DlVol_oj.cjs"));
 	const secrets = await readStageSecrets(stage, workspace.root);
 	if (!secrets) throw new Error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 	await client.send(new __aws_sdk_client_ssm.PutParameterCommand({
@@ -90,4 +90,4 @@ Object.defineProperty(exports, 'pushSecrets', {
     return pushSecrets;
   }
 });
-//# sourceMappingURL=sync-SizaChmC.cjs.map
+//# sourceMappingURL=sync-0ILCb-1S.cjs.map

package/dist/{sync-SizaChmC.cjs.map → sync-0ILCb-1S.cjs.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sync-~~SizaChmC~~.cjs","names":["workspaceName: string","stage: string","config: SSMStateConfig","clientConfig: SSMClientConfig","SSMClient","workspace: NormalizedWorkspace","PutParameterCommand","GetParameterCommand","ParameterNotFound"],"sources":["../src/secrets/sync.ts"],"sourcesContent":["/*\n Secrets Sync via AWS SSM Parameter Store\n \n Stores and retrieves encrypted StageSecrets as SecureString parameters.\n * Reuses the SSM infrastructure from the state provider.\n \n Parameter naming: /gkm/{workspaceName}/{stage}/secrets\n /\n\nimport {\n\tGetParameterCommand,\n\tParameterNotFound,\n\tPutParameterCommand,\n\tSSMClient,\n\ttype SSMClientConfig,\n} from '@aws-sdk/client-ssm';\nimport type { SSMStateConfig } from '../deploy/StateProvider.js';\nimport type { NormalizedWorkspace } from '../workspace/types.js';\nimport type { StageSecrets } from './types.js';\n\n/\n Get the SSM parameter name for secrets.\n /\nfunction getSecretsParameterName(workspaceName: string, stage: string): string {\n\treturn `/gkm/${workspaceName}/${stage}/secrets`;\n}\n\n/\n Create an SSM client from workspace state config.\n /\nfunction createSSMClient(config: SSMStateConfig): SSMClient {\n\tconst clientConfig: SSMClientConfig = {\n\t\tregion: config.region,\n\t};\n\n\tif (config.profile) {\n\t\tconst { fromIni } = require('@aws-sdk/credential-providers');\n\t\tclientConfig.credentials = fromIni({ profile: config.profile });\n\t}\n\n\treturn new SSMClient(clientConfig);\n}\n\n/\n Push secrets to SSM Parameter Store.\n \n Stores the full StageSecrets object as a SecureString parameter.\n /\nexport async function pushSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<void> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\tthrow new Error(\n\t\t\t'SSM state provider not configured. Add state: { provider: \"ssm\", region: \"...\" } to gkm.config.ts.',\n\t\t);\n\t}\n\n\tif (!workspace.name) {\n\t\tthrow new Error(\n\t\t\t'Workspace name is required for SSM secrets sync. Set \"name\" in gkm.config.ts.',\n\t\t);\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\tconst { readStageSecrets } = await import('./storage.js');\n\tconst secrets = await readStageSecrets(stage, workspace.root);\n\n\tif (!secrets) {\n\t\tthrow new Error(\n\t\t\t`No secrets found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t);\n\t}\n\n\tawait client.send(\n\t\tnew PutParameterCommand({\n\t\t\tName: parameterName,\n\t\t\tValue: JSON.stringify(secrets),\n\t\t\tType: 'SecureString',\n\t\t\tOverwrite: true,\n\t\t\tDescription: `GKM secrets for ${workspace.name}/${stage}`,\n\t\t}),\n\t);\n}\n\n/\n Pull secrets from SSM Parameter Store.\n \n @returns StageSecrets or null if no secrets are stored remotely\n /\nexport async function pullSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<StageSecrets \| null> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\treturn null;\n\t}\n\n\tif (!workspace.name) {\n\t\treturn null;\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\ttry {\n\t\tconst response = await client.send(\n\t\t\tnew GetParameterCommand({\n\t\t\t\tName: parameterName,\n\t\t\t\tWithDecryption: true,\n\t\t\t}),\n\t\t);\n\n\t\tif (!response.Parameter?.Value) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn JSON.parse(response.Parameter.Value) as StageSecrets;\n\t} catch (error) {\n\t\tif (error instanceof ParameterNotFound) {\n\t\t\treturn null;\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/\n Check if SSM is configured for the workspace.\n */\nexport function isSSMConfigured(workspace: NormalizedWorkspace): boolean {\n\treturn !!workspace.state && workspace.state.provider === 'ssm';\n}\n"],"mappings":";;;;;;;AAuBA,SAAS,wBAAwBA,eAAuBC,OAAuB;AAC9E,SAAQ,OAAO,cAAc,GAAG,MAAM;AACtC;;;;AAKD,SAAS,gBAAgBC,QAAmC;CAC3D,MAAMC,eAAgC,EACrC,QAAQ,OAAO,OACf;AAED,KAAI,OAAO,SAAS;EACnB,MAAM,EAAE,SAAS,GAAG,QAAQ,gCAAgC;AAC5D,eAAa,cAAc,QAAQ,EAAE,SAAS,OAAO,QAAS,EAAC;CAC/D;AAED,QAAO,IAAIC,+BAAU;AACrB;;;;;;AAOD,eAAsB,YACrBH,OACAI,WACgB;CAChB,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,OAAM,IAAI,MACT;AAIF,MAAK,UAAU,KACd,OAAM,IAAI,MACT;CAIF,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;CAEpE,MAAM,EAAE,kBAAkB,GAAG,2CAAM;CACnC,MAAM,UAAU,MAAM,iBAAiB,OAAO,UAAU,KAAK;AAE7D,MAAK,QACJ,OAAM,IAAI,OACR,8BAA8B,MAAM,mCAAmC,MAAM;AAIhF,OAAM,OAAO,KACZ,IAAIC,yCAAoB;EACvB,MAAM;EACN,OAAO,KAAK,UAAU,QAAQ;EAC9B,MAAM;EACN,WAAW;EACX,cAAc,kBAAkB,UAAU,KAAK,GAAG,MAAM;CACxD,GACD;AACD;;;;;;AAOD,eAAsB,YACrBL,OACAI,WAC+B;CAC/B,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,QAAO;AAGR,MAAK,UAAU,KACd,QAAO;CAGR,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;AAEpE,KAAI;EACH,MAAM,WAAW,MAAM,OAAO,KAC7B,IAAIE,yCAAoB;GACvB,MAAM;GACN,gBAAgB;EAChB,GACD;AAED,OAAK,SAAS,WAAW,MACxB,QAAO;AAGR,SAAO,KAAK,MAAM,SAAS,UAAU,MAAM;CAC3C,SAAQ,OAAO;AACf,MAAI,iBAAiBC,uCACpB,QAAO;AAER,QAAM;CACN;AACD;;;;AAKD,SAAgB,gBAAgBH,WAAyC;AACxE,UAAS,UAAU,SAAS,UAAU,MAAM,aAAa;AACzD"}
1	+ {"version":3,"file":"sync-0ILCb-1S.cjs","names":["workspaceName: string","stage: string","config: SSMStateConfig","clientConfig: SSMClientConfig","SSMClient","workspace: NormalizedWorkspace","PutParameterCommand","GetParameterCommand","ParameterNotFound"],"sources":["../src/secrets/sync.ts"],"sourcesContent":["/*\n Secrets Sync via AWS SSM Parameter Store\n \n Stores and retrieves encrypted StageSecrets as SecureString parameters.\n * Reuses the SSM infrastructure from the state provider.\n \n Parameter naming: /gkm/{workspaceName}/{stage}/secrets\n /\n\nimport {\n\tGetParameterCommand,\n\tParameterNotFound,\n\tPutParameterCommand,\n\tSSMClient,\n\ttype SSMClientConfig,\n} from '@aws-sdk/client-ssm';\nimport type { SSMStateConfig } from '../deploy/StateProvider.js';\nimport type { NormalizedWorkspace } from '../workspace/types.js';\nimport type { StageSecrets } from './types.js';\n\n/\n Get the SSM parameter name for secrets.\n /\nfunction getSecretsParameterName(workspaceName: string, stage: string): string {\n\treturn `/gkm/${workspaceName}/${stage}/secrets`;\n}\n\n/\n Create an SSM client from workspace state config.\n /\nfunction createSSMClient(config: SSMStateConfig): SSMClient {\n\tconst clientConfig: SSMClientConfig = {\n\t\tregion: config.region,\n\t};\n\n\tif (config.profile) {\n\t\tconst { fromIni } = require('@aws-sdk/credential-providers');\n\t\tclientConfig.credentials = fromIni({ profile: config.profile });\n\t}\n\n\treturn new SSMClient(clientConfig);\n}\n\n/\n Push secrets to SSM Parameter Store.\n \n Stores the full StageSecrets object as a SecureString parameter.\n /\nexport async function pushSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<void> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\tthrow new Error(\n\t\t\t'SSM state provider not configured. Add state: { provider: \"ssm\", region: \"...\" } to gkm.config.ts.',\n\t\t);\n\t}\n\n\tif (!workspace.name) {\n\t\tthrow new Error(\n\t\t\t'Workspace name is required for SSM secrets sync. Set \"name\" in gkm.config.ts.',\n\t\t);\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\tconst { readStageSecrets } = await import('./storage.js');\n\tconst secrets = await readStageSecrets(stage, workspace.root);\n\n\tif (!secrets) {\n\t\tthrow new Error(\n\t\t\t`No secrets found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t);\n\t}\n\n\tawait client.send(\n\t\tnew PutParameterCommand({\n\t\t\tName: parameterName,\n\t\t\tValue: JSON.stringify(secrets),\n\t\t\tType: 'SecureString',\n\t\t\tOverwrite: true,\n\t\t\tDescription: `GKM secrets for ${workspace.name}/${stage}`,\n\t\t}),\n\t);\n}\n\n/\n Pull secrets from SSM Parameter Store.\n \n @returns StageSecrets or null if no secrets are stored remotely\n /\nexport async function pullSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<StageSecrets \| null> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\treturn null;\n\t}\n\n\tif (!workspace.name) {\n\t\treturn null;\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\ttry {\n\t\tconst response = await client.send(\n\t\t\tnew GetParameterCommand({\n\t\t\t\tName: parameterName,\n\t\t\t\tWithDecryption: true,\n\t\t\t}),\n\t\t);\n\n\t\tif (!response.Parameter?.Value) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn JSON.parse(response.Parameter.Value) as StageSecrets;\n\t} catch (error) {\n\t\tif (error instanceof ParameterNotFound) {\n\t\t\treturn null;\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/\n Check if SSM is configured for the workspace.\n */\nexport function isSSMConfigured(workspace: NormalizedWorkspace): boolean {\n\treturn !!workspace.state && workspace.state.provider === 'ssm';\n}\n"],"mappings":";;;;;;;AAuBA,SAAS,wBAAwBA,eAAuBC,OAAuB;AAC9E,SAAQ,OAAO,cAAc,GAAG,MAAM;AACtC;;;;AAKD,SAAS,gBAAgBC,QAAmC;CAC3D,MAAMC,eAAgC,EACrC,QAAQ,OAAO,OACf;AAED,KAAI,OAAO,SAAS;EACnB,MAAM,EAAE,SAAS,GAAG,QAAQ,gCAAgC;AAC5D,eAAa,cAAc,QAAQ,EAAE,SAAS,OAAO,QAAS,EAAC;CAC/D;AAED,QAAO,IAAIC,+BAAU;AACrB;;;;;;AAOD,eAAsB,YACrBH,OACAI,WACgB;CAChB,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,OAAM,IAAI,MACT;AAIF,MAAK,UAAU,KACd,OAAM,IAAI,MACT;CAIF,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;CAEpE,MAAM,EAAE,kBAAkB,GAAG,2CAAM;CACnC,MAAM,UAAU,MAAM,iBAAiB,OAAO,UAAU,KAAK;AAE7D,MAAK,QACJ,OAAM,IAAI,OACR,8BAA8B,MAAM,mCAAmC,MAAM;AAIhF,OAAM,OAAO,KACZ,IAAIC,yCAAoB;EACvB,MAAM;EACN,OAAO,KAAK,UAAU,QAAQ;EAC9B,MAAM;EACN,WAAW;EACX,cAAc,kBAAkB,UAAU,KAAK,GAAG,MAAM;CACxD,GACD;AACD;;;;;;AAOD,eAAsB,YACrBL,OACAI,WAC+B;CAC/B,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,QAAO;AAGR,MAAK,UAAU,KACd,QAAO;CAGR,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;AAEpE,KAAI;EACH,MAAM,WAAW,MAAM,OAAO,KAC7B,IAAIE,yCAAoB;GACvB,MAAM;GACN,gBAAgB;EAChB,GACD;AAED,OAAK,SAAS,WAAW,MACxB,QAAO;AAGR,SAAO,KAAK,MAAM,SAAS,UAAU,MAAM;CAC3C,SAAQ,OAAO;AACf,MAAI,iBAAiBC,uCACpB,QAAO;AAER,QAAM;CACN;AACD;;;;AAKD,SAAgB,gBAAgBH,WAAyC;AACxE,UAAS,UAAU,SAAS,UAAU,MAAM,aAAa;AACzD"}

package/dist/{sync-CmEuNZsB.mjs → sync-CzHXiR9c.mjs} RENAMED Viewed

@@ -30,7 +30,7 @@ async function pushSecrets(stage, workspace) {
 	if (!workspace.name) throw new Error("Workspace name is required for SSM secrets sync. Set \"name\" in gkm.config.ts.");
 	const client = createSSMClient(config);
 	const parameterName = getSecretsParameterName(workspace.name, stage);
-	const { readStageSecrets } = await import("./storage-CYlGwWTj.mjs");
+	const { readStageSecrets } = await import("./storage-DGBzMLZa.mjs");
 	const secrets = await readStageSecrets(stage, workspace.root);
 	if (!secrets) throw new Error(`No secrets found for stage "${stage}". Run "gkm secrets:init --stage ${stage}" first.`);
 	await client.send(new PutParameterCommand({
@@ -73,4 +73,4 @@ function isSSMConfigured(workspace) {
 //#endregion
 export { isSSMConfigured, pullSecrets, pushSecrets };
-//# sourceMappingURL=sync-CmEuNZsB.mjs.map
+//# sourceMappingURL=sync-CzHXiR9c.mjs.map

package/dist/{sync-CmEuNZsB.mjs.map → sync-CzHXiR9c.mjs.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"sync-~~CmEuNZsB~~.mjs","names":["workspaceName: string","stage: string","config: SSMStateConfig","clientConfig: SSMClientConfig","workspace: NormalizedWorkspace"],"sources":["../src/secrets/sync.ts"],"sourcesContent":["/*\n Secrets Sync via AWS SSM Parameter Store\n \n Stores and retrieves encrypted StageSecrets as SecureString parameters.\n * Reuses the SSM infrastructure from the state provider.\n \n Parameter naming: /gkm/{workspaceName}/{stage}/secrets\n /\n\nimport {\n\tGetParameterCommand,\n\tParameterNotFound,\n\tPutParameterCommand,\n\tSSMClient,\n\ttype SSMClientConfig,\n} from '@aws-sdk/client-ssm';\nimport type { SSMStateConfig } from '../deploy/StateProvider.js';\nimport type { NormalizedWorkspace } from '../workspace/types.js';\nimport type { StageSecrets } from './types.js';\n\n/\n Get the SSM parameter name for secrets.\n /\nfunction getSecretsParameterName(workspaceName: string, stage: string): string {\n\treturn `/gkm/${workspaceName}/${stage}/secrets`;\n}\n\n/\n Create an SSM client from workspace state config.\n /\nfunction createSSMClient(config: SSMStateConfig): SSMClient {\n\tconst clientConfig: SSMClientConfig = {\n\t\tregion: config.region,\n\t};\n\n\tif (config.profile) {\n\t\tconst { fromIni } = require('@aws-sdk/credential-providers');\n\t\tclientConfig.credentials = fromIni({ profile: config.profile });\n\t}\n\n\treturn new SSMClient(clientConfig);\n}\n\n/\n Push secrets to SSM Parameter Store.\n \n Stores the full StageSecrets object as a SecureString parameter.\n /\nexport async function pushSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<void> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\tthrow new Error(\n\t\t\t'SSM state provider not configured. Add state: { provider: \"ssm\", region: \"...\" } to gkm.config.ts.',\n\t\t);\n\t}\n\n\tif (!workspace.name) {\n\t\tthrow new Error(\n\t\t\t'Workspace name is required for SSM secrets sync. Set \"name\" in gkm.config.ts.',\n\t\t);\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\tconst { readStageSecrets } = await import('./storage.js');\n\tconst secrets = await readStageSecrets(stage, workspace.root);\n\n\tif (!secrets) {\n\t\tthrow new Error(\n\t\t\t`No secrets found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t);\n\t}\n\n\tawait client.send(\n\t\tnew PutParameterCommand({\n\t\t\tName: parameterName,\n\t\t\tValue: JSON.stringify(secrets),\n\t\t\tType: 'SecureString',\n\t\t\tOverwrite: true,\n\t\t\tDescription: `GKM secrets for ${workspace.name}/${stage}`,\n\t\t}),\n\t);\n}\n\n/\n Pull secrets from SSM Parameter Store.\n \n @returns StageSecrets or null if no secrets are stored remotely\n /\nexport async function pullSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<StageSecrets \| null> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\treturn null;\n\t}\n\n\tif (!workspace.name) {\n\t\treturn null;\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\ttry {\n\t\tconst response = await client.send(\n\t\t\tnew GetParameterCommand({\n\t\t\t\tName: parameterName,\n\t\t\t\tWithDecryption: true,\n\t\t\t}),\n\t\t);\n\n\t\tif (!response.Parameter?.Value) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn JSON.parse(response.Parameter.Value) as StageSecrets;\n\t} catch (error) {\n\t\tif (error instanceof ParameterNotFound) {\n\t\t\treturn null;\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/\n Check if SSM is configured for the workspace.\n */\nexport function isSSMConfigured(workspace: NormalizedWorkspace): boolean {\n\treturn !!workspace.state && workspace.state.provider === 'ssm';\n}\n"],"mappings":";;;;;;;AAuBA,SAAS,wBAAwBA,eAAuBC,OAAuB;AAC9E,SAAQ,OAAO,cAAc,GAAG,MAAM;AACtC;;;;AAKD,SAAS,gBAAgBC,QAAmC;CAC3D,MAAMC,eAAgC,EACrC,QAAQ,OAAO,OACf;AAED,KAAI,OAAO,SAAS;EACnB,MAAM,EAAE,SAAS,GAAG,UAAQ,gCAAgC;AAC5D,eAAa,cAAc,QAAQ,EAAE,SAAS,OAAO,QAAS,EAAC;CAC/D;AAED,QAAO,IAAI,UAAU;AACrB;;;;;;AAOD,eAAsB,YACrBF,OACAG,WACgB;CAChB,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,OAAM,IAAI,MACT;AAIF,MAAK,UAAU,KACd,OAAM,IAAI,MACT;CAIF,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;CAEpE,MAAM,EAAE,kBAAkB,GAAG,MAAM,OAAO;CAC1C,MAAM,UAAU,MAAM,iBAAiB,OAAO,UAAU,KAAK;AAE7D,MAAK,QACJ,OAAM,IAAI,OACR,8BAA8B,MAAM,mCAAmC,MAAM;AAIhF,OAAM,OAAO,KACZ,IAAI,oBAAoB;EACvB,MAAM;EACN,OAAO,KAAK,UAAU,QAAQ;EAC9B,MAAM;EACN,WAAW;EACX,cAAc,kBAAkB,UAAU,KAAK,GAAG,MAAM;CACxD,GACD;AACD;;;;;;AAOD,eAAsB,YACrBH,OACAG,WAC+B;CAC/B,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,QAAO;AAGR,MAAK,UAAU,KACd,QAAO;CAGR,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;AAEpE,KAAI;EACH,MAAM,WAAW,MAAM,OAAO,KAC7B,IAAI,oBAAoB;GACvB,MAAM;GACN,gBAAgB;EAChB,GACD;AAED,OAAK,SAAS,WAAW,MACxB,QAAO;AAGR,SAAO,KAAK,MAAM,SAAS,UAAU,MAAM;CAC3C,SAAQ,OAAO;AACf,MAAI,iBAAiB,kBACpB,QAAO;AAER,QAAM;CACN;AACD;;;;AAKD,SAAgB,gBAAgBA,WAAyC;AACxE,UAAS,UAAU,SAAS,UAAU,MAAM,aAAa;AACzD"}
1	+ {"version":3,"file":"sync-CzHXiR9c.mjs","names":["workspaceName: string","stage: string","config: SSMStateConfig","clientConfig: SSMClientConfig","workspace: NormalizedWorkspace"],"sources":["../src/secrets/sync.ts"],"sourcesContent":["/*\n Secrets Sync via AWS SSM Parameter Store\n \n Stores and retrieves encrypted StageSecrets as SecureString parameters.\n * Reuses the SSM infrastructure from the state provider.\n \n Parameter naming: /gkm/{workspaceName}/{stage}/secrets\n /\n\nimport {\n\tGetParameterCommand,\n\tParameterNotFound,\n\tPutParameterCommand,\n\tSSMClient,\n\ttype SSMClientConfig,\n} from '@aws-sdk/client-ssm';\nimport type { SSMStateConfig } from '../deploy/StateProvider.js';\nimport type { NormalizedWorkspace } from '../workspace/types.js';\nimport type { StageSecrets } from './types.js';\n\n/\n Get the SSM parameter name for secrets.\n /\nfunction getSecretsParameterName(workspaceName: string, stage: string): string {\n\treturn `/gkm/${workspaceName}/${stage}/secrets`;\n}\n\n/\n Create an SSM client from workspace state config.\n /\nfunction createSSMClient(config: SSMStateConfig): SSMClient {\n\tconst clientConfig: SSMClientConfig = {\n\t\tregion: config.region,\n\t};\n\n\tif (config.profile) {\n\t\tconst { fromIni } = require('@aws-sdk/credential-providers');\n\t\tclientConfig.credentials = fromIni({ profile: config.profile });\n\t}\n\n\treturn new SSMClient(clientConfig);\n}\n\n/\n Push secrets to SSM Parameter Store.\n \n Stores the full StageSecrets object as a SecureString parameter.\n /\nexport async function pushSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<void> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\tthrow new Error(\n\t\t\t'SSM state provider not configured. Add state: { provider: \"ssm\", region: \"...\" } to gkm.config.ts.',\n\t\t);\n\t}\n\n\tif (!workspace.name) {\n\t\tthrow new Error(\n\t\t\t'Workspace name is required for SSM secrets sync. Set \"name\" in gkm.config.ts.',\n\t\t);\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\tconst { readStageSecrets } = await import('./storage.js');\n\tconst secrets = await readStageSecrets(stage, workspace.root);\n\n\tif (!secrets) {\n\t\tthrow new Error(\n\t\t\t`No secrets found for stage \"${stage}\". Run \"gkm secrets:init --stage ${stage}\" first.`,\n\t\t);\n\t}\n\n\tawait client.send(\n\t\tnew PutParameterCommand({\n\t\t\tName: parameterName,\n\t\t\tValue: JSON.stringify(secrets),\n\t\t\tType: 'SecureString',\n\t\t\tOverwrite: true,\n\t\t\tDescription: `GKM secrets for ${workspace.name}/${stage}`,\n\t\t}),\n\t);\n}\n\n/\n Pull secrets from SSM Parameter Store.\n \n @returns StageSecrets or null if no secrets are stored remotely\n /\nexport async function pullSecrets(\n\tstage: string,\n\tworkspace: NormalizedWorkspace,\n): Promise<StageSecrets \| null> {\n\tconst config = workspace.state;\n\tif (!config \|\| config.provider !== 'ssm') {\n\t\treturn null;\n\t}\n\n\tif (!workspace.name) {\n\t\treturn null;\n\t}\n\n\tconst client = createSSMClient(config as SSMStateConfig);\n\tconst parameterName = getSecretsParameterName(workspace.name, stage);\n\n\ttry {\n\t\tconst response = await client.send(\n\t\t\tnew GetParameterCommand({\n\t\t\t\tName: parameterName,\n\t\t\t\tWithDecryption: true,\n\t\t\t}),\n\t\t);\n\n\t\tif (!response.Parameter?.Value) {\n\t\t\treturn null;\n\t\t}\n\n\t\treturn JSON.parse(response.Parameter.Value) as StageSecrets;\n\t} catch (error) {\n\t\tif (error instanceof ParameterNotFound) {\n\t\t\treturn null;\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/\n Check if SSM is configured for the workspace.\n */\nexport function isSSMConfigured(workspace: NormalizedWorkspace): boolean {\n\treturn !!workspace.state && workspace.state.provider === 'ssm';\n}\n"],"mappings":";;;;;;;AAuBA,SAAS,wBAAwBA,eAAuBC,OAAuB;AAC9E,SAAQ,OAAO,cAAc,GAAG,MAAM;AACtC;;;;AAKD,SAAS,gBAAgBC,QAAmC;CAC3D,MAAMC,eAAgC,EACrC,QAAQ,OAAO,OACf;AAED,KAAI,OAAO,SAAS;EACnB,MAAM,EAAE,SAAS,GAAG,UAAQ,gCAAgC;AAC5D,eAAa,cAAc,QAAQ,EAAE,SAAS,OAAO,QAAS,EAAC;CAC/D;AAED,QAAO,IAAI,UAAU;AACrB;;;;;;AAOD,eAAsB,YACrBF,OACAG,WACgB;CAChB,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,OAAM,IAAI,MACT;AAIF,MAAK,UAAU,KACd,OAAM,IAAI,MACT;CAIF,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;CAEpE,MAAM,EAAE,kBAAkB,GAAG,MAAM,OAAO;CAC1C,MAAM,UAAU,MAAM,iBAAiB,OAAO,UAAU,KAAK;AAE7D,MAAK,QACJ,OAAM,IAAI,OACR,8BAA8B,MAAM,mCAAmC,MAAM;AAIhF,OAAM,OAAO,KACZ,IAAI,oBAAoB;EACvB,MAAM;EACN,OAAO,KAAK,UAAU,QAAQ;EAC9B,MAAM;EACN,WAAW;EACX,cAAc,kBAAkB,UAAU,KAAK,GAAG,MAAM;CACxD,GACD;AACD;;;;;;AAOD,eAAsB,YACrBH,OACAG,WAC+B;CAC/B,MAAM,SAAS,UAAU;AACzB,MAAK,UAAU,OAAO,aAAa,MAClC,QAAO;AAGR,MAAK,UAAU,KACd,QAAO;CAGR,MAAM,SAAS,gBAAgB,OAAyB;CACxD,MAAM,gBAAgB,wBAAwB,UAAU,MAAM,MAAM;AAEpE,KAAI;EACH,MAAM,WAAW,MAAM,OAAO,KAC7B,IAAI,oBAAoB;GACvB,MAAM;GACN,gBAAgB;EAChB,GACD;AAED,OAAK,SAAS,WAAW,MACxB,QAAO;AAGR,SAAO,KAAK,MAAM,SAAS,UAAU,MAAM;CAC3C,SAAQ,OAAO;AACf,MAAI,iBAAiB,kBACpB,QAAO;AAER,QAAM;CACN;AACD;;;;AAKD,SAAgB,gBAAgBA,WAAyC;AACxE,UAAS,UAAU,SAAS,UAAU,MAAM,aAAa;AACzD"}

package/dist/sync-DYENfOt4.cjs ADDED Viewed

@@ -0,0 +1,4 @@
+const require_sync = require('./sync-0ILCb-1S.cjs');
+exports.pullSecrets = require_sync.pullSecrets;
+exports.pushSecrets = require_sync.pushSecrets;

package/dist/{sync-hOqAWHR6.mjs → sync-HAau6h_R.mjs} RENAMED Viewed

@@ -1,3 +1,3 @@
-import { isSSMConfigured, pullSecrets, pushSecrets } from "./sync-CmEuNZsB.mjs";
+import { isSSMConfigured, pullSecrets, pushSecrets } from "./sync-CzHXiR9c.mjs";
 export { pullSecrets, pushSecrets };

package/dist/{types-6pkp2RRj.d.mts → types-CL7jPFM2.d.mts} RENAMED Viewed

@@ -2217,4 +2217,4 @@ interface GkmConfig {
 }
 //#endregion
 export { AppConfig, AppConfigInput, AppInput, AppsRecord, BackendFramework, CacheBackend, ConstrainedApps, DeployConfig, DeployTarget, DokployWorkspaceConfig, EmailBackend, Framework, FrontendFramework, GkmConfig, InferAppNames, InferredWorkspaceConfig, LoadedConfig, MailServiceConfig, MobileFramework, ModelsConfig, NormalizedAppConfig, NormalizedWorkspace, OpenApiConfig, PHASE_2_DEPLOY_TARGETS, Routes, SUPPORTED_DEPLOY_TARGETS, SecretsConfig, ServiceImageConfig, ServicesConfig, SharedConfig, WorkspaceConfig, WorkspaceConfigSchema, WorkspaceInput, formatValidationErrors, getDeployTargetError, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, safeValidateWorkspaceConfig, validateWorkspaceConfig };
-//# sourceMappingURL=types-6pkp2RRj.d.mts.map
+//# sourceMappingURL=types-CL7jPFM2.d.mts.map

package/dist/{types-6pkp2RRj.d.mts.map → types-CL7jPFM2.d.mts.map} RENAMED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"types-6pkp2RRj.d.mts","names":[],"sources":["../src/deploy/state.ts","../src/deploy/StateProvider.ts","../src/workspace/schema.ts","../src/workspace/types.ts","../src/types.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAaA;AAQA;AAQA;AAkBA;AAwBA;AAAkC,UA1DjB,gBAAA,CA0DiB;EAAA,MAMnB,EAAA,MAAA;EAAM,UAMY,EAAA,MAAA;;;;;AAIlB,UAlEE,qBAAA,CAkEF;EAAM,QAEQ,EAAA,MAAA;EAAgB,UAA/B,EAAA,MAAA;;AAEQ;;;UA9DL,gBAAA;ECZA;EAAa,MAAA,EAAA,MAAA;EAAA;EAOiB,IAAzB,EAAA,MAAA;EAAO;EAQiB,IAAG,EAAA,MAAA;EAAO;EAM5C,KAAA,EAAA,MAAS;EAgCJ;EAOA,GAAA,EAAA,MAAA;EAWA;EAQL,SAAA,EAAA,MAAW;;;;;AAAwD,UDjD9D,WAAA,CCiD8D;;;;ECpClE,SAAA,EAAA,MAAA;EA8BD;EAAgB,WAAA,EAAA,MAAA;EAAA;EAAwC,cAAnC,EAAA,MAAA;EAAK;EAKzB,kBAAA,EAAA,MAKX;EA6BU;EAAiB,aAAA,EAAA,MAAA;EAAA;EAAyC,gBAApC,CAAA,EAAA,MAAA;EAAK;EAK1B,MAAA,EAAA,MAAA;EAoBD;EAAe,SAAA,EAAA,MAAA;;;AAAU;AAKrC;AAIE,UF5Fe,iBAAA,CE4Ff;EAAA,QAJ0B,EAAA,SAAA;EAAA,KAAA,EAAA,MAAA;;WAAA,EAAA,MAAA;EAAA,aAAA,EAAA,MAAA;EAUhB,YAAS,EF5FN,ME4FM,CAAA,MAAA,EAAA,MAAA,CAAA;EAAA,QAAA,EAAA;IAAkB,UAAA,CAAA,EAAA,MAAA;IAAf,OAAE,CAAA,EAAA,MAAA;EAAK,CAAA;EAuBzB;EAKA,cAAA,CAAA,EFlHY,MEkHZ,CAAA,MAA0D,EFlH/B,gBEkH+B,CAAA;EAKhD;EASA,gBAAA,CAAA,EF9HI,ME8HgB,CAAA,MAAA,EF9HD,ME8HC,CAAA,MAAA,EAAA,MAAA,CAAA,CAAA;EASpB;EA+TH,WAAA,CAAA,EFpcE,MEocF,CAAA,MAAA,EFpciB,qBEuc5B,CAAA;EAAA;EAAA,UAHoC,CAAA,EFlcxB,MEkcwB,CAAA,MAAA,EFlcT,gBEkcS,CAAA;EAAA;YFhc3B;;;;;;;;;AApBX;;;;;;;AAgB8B,UCtEb,aAAA,CDsEa;EAAqB;;;;AAI7B;;uBCnEA,QAAQ;;AAP9B;;;;;EAe8C,KAAG,CAAA,KAAA,EAAA,MAAA,EAAA,KAAA,EAApB,iBAAoB,CAAA,EAAA,OAAA,CAAA,IAAA,CAAA;AAAO;AAMxD;AAgCA;AAOA;AAWiB,KAlDL,SAAA,GAkDsB,WAAA,GAEvB,WAAa,GAAA,WAAA,GAAA,WAAA,GAAA,YAAA,GAAA,WAAA,GAAA,YAAA,GAAA,YAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,cAAA,GAAA,cAAA,GAAA,cAAA,GAAA,WAAA,GAAA,WAAA,GAAA,WAAA,GAAA,YAAA,GAAA,YAAA,GAAA,YAAA,GAAA,YAAA,GAAA,cAAA,GAAA,WAAA;AAMxB;;;AAA6C,UA1B5B,gBAAA,CA0B4B;EAAc,QAAG,EAAA,OAAA;AAAiB;;;;ACpClE,UDiBI,cAAA,CCZf;EAyBU,QAAA,EAAA,KAAA;EAAgB;EAAA,MAAkB,EDVrC,SCUqC;EAAsB;EAA9B,OAAA,CAAA,EAAA,MAAA;AAKtC;AAkCA;;;AAAgC,UDzCf,iBAAA,CCyCiB;EAAK;EAK1B,QAAA,ED5CF,aC4CE;AAoBb;;;;AAAqC,KD1DzB,WAAA,GAAc,gBC0DW,GD1DQ,cC0DR,GD1DyB,iBC0DzB;AAKrC;;;;;;;;AFlJiB,cE+CJ,sBF/CoB,EE+CE,CAAA,CAAA,OF/CF,CAAA;EAQhB,IAAA,EAAA,MAAA;EAQA,aAAA,EAAA,aAAgB;EAkBhB,OAAA,EAAA,SAAW;EAwBX,OAAA,EAAA,SAAA;CAAiB,CAAA;;;;;;;;;;;AAoBZ;;;;AC1EtB;;;;;;AAewD;AAMxD;AAgCA;AAOiB,KCaL,gBAAA,GAAmB,CAAA,CAAE,KDVxB,CAAA,OCUqC,sBDV5B,CAAA;AAQlB;AAQA;;AAA0B,cCDb,uBDCa,ECDU,CAAA,CAAA,ODCV,CAAA;EAAgB,MAAG,EAAA,QAAA;EAAc,KAAG,EAAA,OAAA;EAAiB,IAAA,EAAA,MAAA;;;;ACpC/E;AA8BA;;;;AAAsC;AAKtC;AAkCA;;;;AAAuC;AAKvC;AAoBA;;;;AAAqC;AAKrC;;;;;;AAA4B;AAU5B;AAAqB,KAxCT,iBAAA,GAAoB,CAAA,CAAE,KAwCb,CAAA,OAxC0B,uBAwC1B,CAAA;;;AAAU;AAuBzB,cA1DO,qBA0DwC,EA1DnB,CAAA,CAAA,OA0DmB,CAAA;EAK/C,IAAA,EAAA,MAAA;AAKN,CAAA,CAAA;AASA;AASA;AA+TA;;;;;;;;;;;;;;;;KAjYY,eAAA,GAAkB,CAAA,CAAE,aAAa;;;;cAKhC,iBAAe,CAAA,CAAA,mBAAA,CAAA,CAAA;;;;;IAAA,CAAA,CAAA;;OA4XU,EAAA,OAAA;EAAA,IAzFxB,EAAA,MAAA;EAAQ,gBACL,EAAA,gBAAA;CAAQ,CAAA,WADX,CAAA;EAAQ,IACL,EAAA,MAAA;CAAQ,CAAA,CAAA,CAAA;;;;;AAwFa,KAlX1B,SAAA,GAAY,CAAA,CAAE,KAkXY,CAAA,OAlXC,eAkXD,CAAA;;;;cA3VhC;;;;cAKA;;;;iBAKU,uBAAA;;;;iBASA,oBAAA;;;;iBASA,oBAAA;;;;;ACuEe;AAwC/B;;AAEW,cD8ME,yBC9MF,ED8M2B,CAAA,CAAA,QC9M3B,CAAA,SAAA,CD8M2B,CAAA,CAAA,SC9M3B,CD8M2B,CAAA,CAAA,SC9M3B,ED8M2B,CAAA,CAAA,QC9M3B,CAAA,SAAA,CD8M2B,CAAA,CAAA,qBC9M3B,CAAA,CD8M2B,CAAA,CAAA,SC9M3B,CAAA;EAAY,QAEZ,ED4M2B,CAAA,CAAA,UC5M3B,CAAA,WAAA,CAAA;EAAsB,GAE1B,eAAA,YAAA,CAAA;CAAS,eAEL,CAAA,aAAA,CAAA;EAAa,QAAA,EDwMc,CAAA,CAAA,UCxMd,CAAA,SAAA,CAAA;EAmBP,MAAA,eAAY,UAAA,CAAA;IA4BZ,WAAY,EAAA,WAInB;IAgBO,WAAY,EAAA,WAAA;IAkCZ,WAAA,EAAa,WAAA;IA4CpB,WAAA,EAAa,WAAA;IAAA,YAAA,EAAA,YAAA;IA6Bb,WAAA,EAAA,WAAA;IAeI,YAAA,EAAA,YAAA;IAMJ,YAAA,EAAA,YAAA;IAMG,gBAAA,EAAA,gBAAA;IAMJ,gBAAA,EAAA,gBAAA;IAMC,gBAAA,EAAA,gBAAA;IAMA,gBAAA,EAAA,gBAAA;IAMK,gBAAA,EAAA,gBAAA;IAeF,gBAAA,EAAA,gBAAA;IAMJ,gBAAA,EAAA,gBAAA;IAMuB,cAAA,EAAA,cAAA;IAMH,cAAA,EAAA,cAAA;IAMR,cAAA,EAAA,cAAA;IAMV,WAAA,EAAA,WAAA;IAwCE,WAAA,EAAA,WAAA;IAkDH,WAAA,EAAA,WAAA;IAAe,YAAA,EAAA,YAAA;IAmCR,YAAA,EAAc,YAAA;IAAA,YAAA,EAAA,YAAA;IAGf,YAAA,EAAA,YAAA;IAFP,cAAA,EAAA,cAAA;IAAa,WAAA,EAAA,WAAA;EASL,CAAA,CAAA,CAAA;EAQL,OAAA,eAAQ,YAAG,CAAA;EAOX,YAAA,eAAU,YAAA,CAAA;EAAA,GAAA,eAAA,YAAA,CAAA;CAAA,eAAkB,CAAA,aAAA,CAAA;EAAQ,QAAvB,cAAA,CAAA,YAAA,CAAA;EAAM,GAAA,eAAA,YAAA,CAAA;AAM/B,CAAA,eAAY,CAAA,aAAe,CAAA;EAAA,QAAA,cAAA,CAAA,QAAA,CAAA;CAAA,eAAe,CAAA,CAAA,EAAA,UAAA,CAAA,aAAA,CAAA;EAAU,QACvC,ED3TY,CAAA,CAAA,SC2TZ,CAAA;IAAa,IAAA,EAAA,MAAA;IAAM,UAAA,ED5TlB,QC4TkB;IAAX,aAAA,ED3TJ,QC2TI;EAAI,CAAA,EACQ;IAAK,IAAA,EAAA,MAAA;IAqC1B,UAAA,EDlWE,QCkWY;IAAA,aAAA,EDjWT,QCiWS;EAAA,CAAA,CAAA;EAAyB,GAOrC,eAAA,YAAA,CAAA;CAAM,eAUI,CAAA,CAAA,CAAA,CAAA,YAAA,CAAA,SAAA,wBAAA,CAAA,YAAA,CAAA;EAAK,QAArB,ED1R8B,CAAA,CAAA,UC0R9B,CAAA,WAAA,CAAA;EAAe,GAEb,eAAA,YAAA,CAAA;EAAY,MAEZ,aAAA;CAAY,eAEV,CAAA,aAAA,CAAA;EAAc,QAEjB,cAAA,CAAA,SAAA,CAAA;EAAY,MAEV,eAAA,UAAA,CAAA;IAEF,WAAA,EAAA,WAAA;IAAW,WAAA,EAAA,WAAA;IAMR,WAAA,EAAa,WAAA;IAAA,WAAA,EAAA,WAAA;IAAe,YAAA,EAAA,YAAA;IAAoB,WAAA,EAAA,WAAA;IAAK,YAAA,EAAA,YAAA;IAKrD,YAAA,EAAA,YAAuB;IAAA,gBAAA,EAAA,gBAAA;IAAe,gBAAA,EAAA,gBAAA;IAOpC,gBAAA,EAAA,gBAAA;IAGA,gBAAA,EAAA,gBAAA;IAAa,gBAAA,EAAA,gBAAA;IAAM,gBAAA,EAAA,gBAAA;IAAX,gBAAA,EAAA,gBAAA;IACU,cAAA,EAAA,cAAA;IAAd,cAAA,EAAA,cAAA;IAGR,cAAA,EAAA,cAAA;IACA,WAAA,EAAA,WAAA;IACE,WAAA,EAAA,WAAA;IACH,WAAA,EAAA,WAAA;IACE,YAAA,EAAA,YAAA;IACF,YAAA,EAAA,YAAA;IAAW,YAAA,EAAA,YAAA;IA+FH,YAAA,EAAe,YAAA;IAAA,cAAA,EAAA,cAAA;IAOlB,WAAA,EAAA,WAAA;EAAM,CAAA,CAAA,CAKG;EAAS,OAAxB,eAAA,YAAA,CAAA;EAAM,YAGJ,eAAA,YAAA,CAAA;EAAY,GAGZ,eAAA,YAAA,CAAA;EAAY,MAGV,aAAA;CAAc,eAGjB,CAAA,aAAA,CAAA;EAAY,QAGV,cAAA,CAAA,YAAA,CAAA;EAAa,GAGf,eAAA,YAAA,CAAA;EAAW,MAAA,aAAA;AASpB,CAAA,eAAiB,CAAA,aAAoB,CAAA;EAAA,QAAA,cAAA,CAAA,QAAA,CAAA;EAAA,MAAa,aAAA;CAAa,eAmBxC,CAAA,CAAA,EAAA,UAAA,CAAA,aAAA,CAAA;EAAY,QAItB,EDzjBY,CAAA,CAAA,SCyjBZ,CAAA;IAEH,IAAA,EAAA,MAAA;IAzBmC,UAAA,EDniB/B,QCmiB+B;IAAI,aAAA,EDliBhC,QCkiBgC;EAoChC,CAAA,EAAA;IAAmB,IAAA,EAAA,MAAA;IAWtB,UAAA,EDllBA,QCklBA;IAEQ,aAAA,EDnlBL,QCmlBK;EAAmB,CAAA,CAAA;EAA5B,GAEF,eAAA,YAAA,CAAA;EAAc,MAEhB,aAAA;CAAY,eAEZ,CAAA,CAAA,CAAA,CAAA,CAAA;AAEA,KD9fG,SAAA,GAAY,CAAA,CAAE,KC8fjB,CAAA,OD9f8B,yBC8f9B,CAAA;;;AAIW;AAMpB;;;AAIkB,cDpgBL,mBCogBK,EDpgBc,CAAA,CAAA,SCogBd,CAAA;EAAe,IAErB,ED3fV,CAAA,CAAA,UC2fU,CAAA,IAAA,CAAA;EAAmB,OAQnB,eAAA,YAAA,CAAA;EAAiB,MAAA,WAAA,CAAA;IAeb,WAAA,EAAA,WAAiB;IAAA,WAAA,EAAA,WAAA;IACxB,WAAA,EAAA,WAAA;IAAY,WAAA,EAAA,WAAA;IACR,YAAA,EAAA,YAAA;IAAe,WAAA,EAAA,WAAA;;;;IC9jCX,gBAAiB,EAAA,gBAAA;IAKtB,gBAA6B,EAAA,gBAAiB;IAazC,gBAAc,EAAA,gBAAA;IAKd,gBAAA,EAAoB,gBAAQ;IAI5B,gBAAgB,EAAA,gBAAQ;IAIxB,gBAAgB,EAAA,gBAAA;IA4BhB,cAAa,EAAA,cAAA;IAsBlB,cAAa,EAAA,cAAA;IAmBb,cAAY,EAAA,cAAA;IAmBZ,WAAA,EAAc,WAAA;IAsDd,WAAY,EAAA,WAAA;IAaZ,WAAA,EAAA,WAAkB;IASlB,YAAA,EAAA,YAAqB;IAAA,YAAA,EAAA,YAAA;IAC1B,YAAA,EAAA,YAAA;IAAgC,YAAA,EAAA,YAAA;IAAa,cAAA,EAAA,cAAA;IAGnC,WAAY,EAAA,WAAA;EAAA,CAAA,CAAA;EAAA,QAwBhB,eAAA,YAAA,CAAA;EAAqB,SAAG,eAAA,YAAA,CAAA;AAAkB,CAAA,eAAA,CAAA;AAItC,KFyUL,aAAA,GAAgB,CAAA,CAAE,KEzUA,CAAA,OFyUa,mBEzUb,CAAA;;;;AAAsB,cFygBvC,qBEzgBuC,EFygBlB,CAAA,CAAA,SEzgBkB,CAAA;EAOxC,IAAA,eAAO,CFunBhB,CAAA,CAAA,SEvnBgB,CAAA;EAEF,UAAA,eAAe,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;IAiBf,KAAA,YAAY,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;IASZ,SAAA,aAAa,CAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,CAAA;EAWb,CAAA,eAAW,CAAA,CAAA,CAAA,CAAA;EA6BX,IAAA,eAAA,YAAqB,YAAA,aAAA,CAAA;IAarB,IAAA,cAAe,cAAA,UAAA,CAAA;MAAA,OAAA,EAAA,SAAA;MAGd,GAAA,EAAA,KAAA;MACA,MAAA,EAAA,QAAA;IAGO,CAAA,CAAA,CAAA,CAAA;IACJ,IAAA,aAAA;IAGD,IAAA,aAAA;IAEC,YAAA,eAAA,WAAA,YAAA,CAAA,CAAA;IAAqB,MAAA,eAAA,UAAA,CAAA;MAGzB,OAAS,EAAA,SAAA;MAAA,MAAA,EAAA,QAAA;MAoBjB,UAAA,EAAA,YAAA;IAWG,CAAA,CAAA,CAAA;IAWC,UAAA,eAAA,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;MACA,KAAA,YAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;MAUJ,SAAA,aAAA,CAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,CAAA;IAQuB,CAAA,eAAA,CAAA,CAAA,CAAA,CAAA;IAUH,MAAA,eAAA,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;MAmBR,KAAA,YAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;MAEV,SAAA,aAAA,CAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,CAAA;IA4BD,CAAA,eAAA,CAAA,CAAA,CAAA,CAAA;IAAY,SAAA,eAAA,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;MAa4B,KAAA,YAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBFtBzB,CAAA,CAAA;;oBADX;uBACG;;;oBADH;uBACG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAAQ,CAAA,CAAA;;oBADX;uBACG;;;oBADH;uBACG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA8LoC,CAAA,CAAA;YAAzB;aAAiB;;YAAjB;aAAiB;;;;;;;;iBA+O7B,uBAAA,mBAEb,CAAA,CAAE,aAAa;;;;iBAOF,2BAAA;;SAER,CAAA,CAAE,aAAa;UACd,CAAA,CAAE;;;;;iBAYK,sBAAA,QAA8B,CAAA,CAAE;;;AF32BhD;AAkBA;AAwBA;;;;;;;;;;;;AAoBsB;KGzCV,YAAA;;;AFjCZ;;;;;;AAewD;AAMxD;AAgCA;AAOA;AAWiB,UExBA,kBAAA,CF0BN;EAMC;EAAW,OAAA,CAAA,EAAA,MAAA;EAAA;EAAmB,KAAG,CAAA,EAAA,MAAA;;AAAkC;;;;ACpC/E;AA8BA;;;;AAAsC;AAKtC;AAkCA;;;;AAAuC;AAKvC;AAoBA;;;AAA8B,UC/Db,iBAAA,SAA0B,kBD+DX,CAAA;EAAK;EAKxB,IAAA,CAAA,EAAA;IAIX,IAAA,EAAA,MAAA;IAJ0B,IAAA,EAAA,MAAA;IAAA,IAAA,CAAA,EAAA,MAAA;;;AAAA;AAU5B;;;;AAA+B;AAAyB;AAuBH;AAUrD;AASA;AASA;AA+TA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAxFyB,UCpTR,cAAA,CDoTQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UCpTM;;;;;;SA6BY;;EDsRrB,OACL,CAAA,ECjRyB,cDiRzB;EAAQ;EADH,MACL,CAAA,EC/Q8B,aD+Q9B;EAAQ;;;;;;;;AAwFa;AAKtC;;;;AAA+B;AAQ/B;;EAWE,MAAA,CAAA,EC5WQ,OD4WR,CC5WgB,MD4WhB,CC7X2C,kBAAA,ED6X3C,MAAA,CAAA,CAAA;;;;;;;;;;AAX8B;AAahC;;;;AAAmC;AAgMnC;;;;;;KCvhBY,oBAAA,GAAuB;;;;;;;;;;;;;;;;;;;;KAqBvB,eAAA,YAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkCtB,sBAAA;;;;cAIJ;;;;;;;;;;YAUF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAwCM,YAAA;;YAEN;;YAEA;;QAEJ;;YAEI;;;;;;;;;;;;;;;;;;UAmBM,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4BA,YAAA;;;;WAIP;;;;;;;;;;;;;;;UAgBO,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkCA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4CP,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BA;;;;;;;;;;eAeI;;;;;WAMJ;;;;;cAMG;;;;;UAMJ;;;;;WAMC;;;;;WAMA;;;;;gBAMK;;;;;;;;;;;;cAeF;;;;;UAMJ;;;;;iCAMuB;;;;;8BAMH;;;;;sBAMR;;;;;YAMV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwCE;;;;;;;;;;;;;;;;;;AD4GqB;AA2HlC;EAAuC,MAAA,CAAA,EAAA;IAErB;IAAf,MAAE,CAAA,EAAA,MAAA;IAAK;IAOM,MAAA,CAAA,EAAA,MAAA;EAA2B,CAAA;EAAA;;;AAGxB;AAYnB;;;;ACt1BA;AAcA;AA2BA;AAoDA;;;;;;;EAwDiE,MAA/C,CAAA,EAofR,eApfQ;EAAM;AAAP;AAuBjB;AAqBA;AAkCA;;;;AAc+B;EAwCd,WAAA,CAAA,EAAA,MAAY,EAAA;;;;;;AAQL;AAmBxB;AA4BA;AAoBA;AAkCA;AAOC;;;;;;;;;;;;AAgJ+B,UA+If,cA/Ie,CAAA,kBAAA,MAAA,GAAA,MAAA,CAAA,SAgJvB,aAhJuB,CAAA;EAAe;EAMN,YAMpB,CAAA,EAsIL,SAtIK,EAAA;;;;AAgGI;AAmCzB;AAA+B,UAUd,SAAA,SAAkB,aAVJ,CAAA;EAAA;EAGN,YAFhB,CAAA,EAAA,MAAA,EAAA;AAAa;AAStB;AAQA;AAOA;AAAsB,KAPV,QAAA,GAAW,aAOD,GAAA;EAAA,YAAkB,CAAA,EAAA,SAAA,MAAA,EAAA;CAAQ;AAAjB;AAM/B;;AAA0C,KAN9B,UAAA,GAAa,MAMiB,CAAA,MAAA,EANF,QAME,CAAA;;;;;AAET,KAFrB,eAEqB,CAAA,cAFS,UAET,CAAA,GAAA,QAAK,MADzB,KACyB,GADjB,IACiB,CADZ,KACY,CADN,CACM,CAAA,EAAA,cAAA,CAAA,GAAA;EAqC1B,YAAA,CAAc,EAAA,SAAA,CAAA,MArCO,KAqCP,GAAA,MAAA,CAAA,EAAA;AAAA,CAAA,EAAA;;;;;;;;;;AA6BN;AAMpB;;;;AAAiE;AAKjE;;;;;;;;;;;;;;;;AAmBoB;AA+FpB;AAAgC,KA1JpB,cA0JoB,CAAA,cA1JS,UA0JT,CAAA,GAAA;EAAA;;;;;;EAqBN,UAGjB,CAAA,EA3KK,MA2KL;EAAY;EAGG,IAGf,CAAA,EAAA,MAAA;EAAW;AASpB;;;;;;EAyByB,IAzBoB,CAAA,EAhLrC,eAgLqC,CAhLrB,KAgLqB,CAAA;EAAI;EAoChC,MAAA,CAAA,EAlNP,YAkNO;EAAmB;EAAA,MAWtB,CAAA,EA3NJ,YA2NI;EAAM;EAEqB,QAAlC,CAAA,EA3NK,cA2NL;EAAM;EAEY,MAEhB,EA7NA,YA6NA;EAAY;EAEA,OAEZ,CAAA,EA/NE,aA+NF;EAAY;EAEE,KAEd,CAAA,EAjOA,WAiOA;AAAW,CAAA;AAMpB;;;AAIkB,KArON,aAqOM,CAAA,cArOsB,UAqOtB,CAAA,GAAA,MArO0C,KAqO1C,GAAA,MAAA;;;AAUW;AAeb,KAzPJ,uBAyPqB,CAAA,cAzPiB,UAyPjB,CAAA,GAAA;EAAA;;;;AAEL;;eApPd;;EC10BG,IAAA,CAAA,EAAA,QAKC,MDw0BJ,KCx0B2B,GDw0BnB,ICx0BmB,CDw0Bd,KCx0Bc,CDw0BR,CCx0BQ,CAAiB,EAAA,cAAA,CAAA,GAAA;IAazC,YAAc,CAAA,ED4zBb,aC5zBa,CD4zBC,KC5zBD,CAAA,EAAA;EAKd,CAAA,EAIA;EAIA,MAAA,CAAA,EDkzBP,YClzBuB;EA4BhB,MAAA,CAAA,EDuxBP,YCvxBoB;EAsBlB,QAAA,CAAA,EDkwBA,cClwBa;EAmBb,MAAA,EDgvBH,YChvBe;EAmBZ,OAAA,CAAA,ED8tBD,aC9tBe;EAsDd,KAAA,CAAA,EDyqBH,WCzqBe;AAaxB,CAAA;AASA;;;;AAgCoD;AAOpD;AAEA;AAiBA;AASA;AAWA;AA6BA;AAaA;;;;;;;;AAa0C;AAG1C;;;;;;;;;;;;;AAqIkD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UDqejC,eAAA;;;;;;;eAOH;;;;SAKN,eAAe;;WAGb;;WAGA;;aAGE;;UAGH;;YAGE;;UAGF;;;;;;;;UASQ,mBAAA,SAA4B,KAAK;;;;;;;;;;;;;;;;;;wBAmB3B;;;;cAIV;;WAEH;;;;;;;;;;UAWO,mBAAA;;;;;;;;;;;eAWH;;QAEP,eAAe;;YAEX;;UAEF;;UAEA;;UAEA;;WAEC;;UAED;;;;;UAMQ,YAAA;;;;OAIX,YAAY;;aAEN;;;;;;;;aAQA;;;;;;;;;;;;;;iBAeI,iBAAA,SACP,YAAY,4BACR;;;;UC9jCI,iBAAA;EJIA,KAAA,EAAA,MAAA,GAAA,MAAgB,EAAA;EAQhB,SAAA,EAAA,CAAA,QAAA,EAAA,MAAqB,EAAA,GAAA,MAAA;AAQtC;AAkBiB,KIjCL,MAAA,GJiCgB,MAAA,GAAA,MAAA,EAAA,GIjCa,iBJiCb;AAwBM,UI5CjB,cAAA,CJ4CiB;EAAA,OAMnB,CAAA,EAAA,OAAA;EAAM,SAMY,CAAA,EAAA,MAAA;;AAEE,UIrDlB,mBAAA,SAA4B,cJqDV,CAAA;AAEL,UInDb,eAAA,SAAwB,cJmDX,CAAA;AAED,UIjDZ,gBAAA,CJiDY;EAAgB;EAAzB,OAET,CAAA,EAAA,OAAA;EAAW;;;;EC1EL;EAAa,WAAA,CAAA,EAAA,MAAA;EAAA;EAOiB,gBAAzB,CAAA,EAAA,OAAA;EAAO;EAQiB,QAAG,CAAA,EAAA,MAAA,EAAA;EAAO;EAM5C,WAAA,CAAS,EAAA,SAAA,GAAA,SAAA;EAgCJ;EAOA,OAAA,CAAA,EAAA,OAAc;EAWd;AAQjB;;;;;AAA+E;;;;ACpClE,UEQI,aAAA,CFHf;EAyBU;;;;EAA0B,KAAA,CAAA,EAAA,MAAA;EAKzB;AAkCb;;;EAAsE,OAApC,CAAA,EAAA,MAAA;AAAK;AAKvC;AAoBA;;;;AAAqC;AAKrC;;;AAA4B,KErEhB,aAAA,GFqEgB,QAAA,GAAA,KAAA,GAAA,UAAA;;;AAAA;AAU5B;;;;AAA+B;AAAyB;AAuBH;AAUrD;AASA;AASA;AA+TA;;;;KE9aY,YAAA;;;;;;;;;;;;;;;;;;KAmBA,cAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsDA,YAAA;;;;;;;;;;;KAaA,kBAAA;;KASA,qBAAA,WACL,gCAAgC;AF8UD,UE3UrB,YAAA,CF2UqB;EAK1B;EAAS,QAAA,CAAA,EAAA,MAAA;EAAA;EAA2C,SAAtC,CAAA,EAAA,MAAA;EAAK;EAQlB,SAAA,CAAA,EAAA,MAAA;EAWX;EAAA,IAAA,CAAA,EAAA,MAAA;;;;;;;;;;AAX8B;AAahC;;;;AAAmC;IAgMtB,QAAA,CAAA,EE7gBA,qBFkoBV,GEloBkC,kBFkoBlC,EAAA;EAAA,CAAA;;UE9nBc,YAAA,SAAqB;;;;eAIxB;;KAGF,OAAA;UAEK,eAAA;;;;;;;;;;;;;;;;UAiBA,YAAA;;;;;;;;UASA,aAAA;;;;;;;;;;UAWA,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA6BA,qBAAA;;;;;;;;;;;;UAaA,eAAA;;;qBAGC;qBACA;;;4BAGO;wBACJ;;;qBAGD;;sBAEC;;UAGJ,SAAA;;;;;;;;;;;;;;;;;;;;UAoBR;;;;;;;;;;;aAWG;;;;;;;;;;;cAWC;cACA;;;;;;;;;;UAUJ;;;;;;;;iCAQuB;;;;;;;;;;8BAUH;;;;;;;;;;;;;;;;;;;sBAmBR;;YAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BD;;;;;;;;;;;;;WAAY"}
1	+ {"version":3,"file":"types-CL7jPFM2.d.mts","names":[],"sources":["../src/deploy/state.ts","../src/deploy/StateProvider.ts","../src/workspace/schema.ts","../src/workspace/types.ts","../src/types.ts"],"sourcesContent":[],"mappings":";;;;;;;;;AAaA;AAQA;AAQA;AAkBA;AAwBA;AAAkC,UA1DjB,gBAAA,CA0DiB;EAAA,MAMnB,EAAA,MAAA;EAAM,UAMY,EAAA,MAAA;;;;;AAIlB,UAlEE,qBAAA,CAkEF;EAAM,QAEQ,EAAA,MAAA;EAAgB,UAA/B,EAAA,MAAA;;AAEQ;;;UA9DL,gBAAA;ECZA;EAAa,MAAA,EAAA,MAAA;EAAA;EAOiB,IAAzB,EAAA,MAAA;EAAO;EAQiB,IAAG,EAAA,MAAA;EAAO;EAM5C,KAAA,EAAA,MAAS;EAgCJ;EAOA,GAAA,EAAA,MAAA;EAWA;EAQL,SAAA,EAAA,MAAW;;;;;AAAwD,UDjD9D,WAAA,CCiD8D;;;;ECpClE,SAAA,EAAA,MAAA;EA8BD;EAAgB,WAAA,EAAA,MAAA;EAAA;EAAwC,cAAnC,EAAA,MAAA;EAAK;EAKzB,kBAAA,EAAA,MAKX;EA6BU;EAAiB,aAAA,EAAA,MAAA;EAAA;EAAyC,gBAApC,CAAA,EAAA,MAAA;EAAK;EAK1B,MAAA,EAAA,MAAA;EAoBD;EAAe,SAAA,EAAA,MAAA;;;AAAU;AAKrC;AAIE,UF5Fe,iBAAA,CE4Ff;EAAA,QAJ0B,EAAA,SAAA;EAAA,KAAA,EAAA,MAAA;;WAAA,EAAA,MAAA;EAAA,aAAA,EAAA,MAAA;EAUhB,YAAS,EF5FN,ME4FM,CAAA,MAAA,EAAA,MAAA,CAAA;EAAA,QAAA,EAAA;IAAkB,UAAA,CAAA,EAAA,MAAA;IAAf,OAAE,CAAA,EAAA,MAAA;EAAK,CAAA;EAuBzB;EAKA,cAAA,CAAA,EFlHY,MEkHZ,CAAA,MAA0D,EFlH/B,gBEkH+B,CAAA;EAKhD;EASA,gBAAA,CAAA,EF9HI,ME8HgB,CAAA,MAAA,EF9HD,ME8HC,CAAA,MAAA,EAAA,MAAA,CAAA,CAAA;EASpB;EA+TH,WAAA,CAAA,EFpcE,MEocF,CAAA,MAAA,EFpciB,qBEuc5B,CAAA;EAAA;EAAA,UAHoC,CAAA,EFlcxB,MEkcwB,CAAA,MAAA,EFlcT,gBEkcS,CAAA;EAAA;YFhc3B;;;;;;;;;AApBX;;;;;;;AAgB8B,UCtEb,aAAA,CDsEa;EAAqB;;;;AAI7B;;uBCnEA,QAAQ;;AAP9B;;;;;EAe8C,KAAG,CAAA,KAAA,EAAA,MAAA,EAAA,KAAA,EAApB,iBAAoB,CAAA,EAAA,OAAA,CAAA,IAAA,CAAA;AAAO;AAMxD;AAgCA;AAOA;AAWiB,KAlDL,SAAA,GAkDsB,WAAA,GAEvB,WAAa,GAAA,WAAA,GAAA,WAAA,GAAA,YAAA,GAAA,WAAA,GAAA,YAAA,GAAA,YAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,gBAAA,GAAA,cAAA,GAAA,cAAA,GAAA,cAAA,GAAA,WAAA,GAAA,WAAA,GAAA,WAAA,GAAA,YAAA,GAAA,YAAA,GAAA,YAAA,GAAA,YAAA,GAAA,cAAA,GAAA,WAAA;AAMxB;;;AAA6C,UA1B5B,gBAAA,CA0B4B;EAAc,QAAG,EAAA,OAAA;AAAiB;;;;ACpClE,UDiBI,cAAA,CCZf;EAyBU,QAAA,EAAA,KAAA;EAAgB;EAAA,MAAkB,EDVrC,SCUqC;EAAsB;EAA9B,OAAA,CAAA,EAAA,MAAA;AAKtC;AAkCA;;;AAAgC,UDzCf,iBAAA,CCyCiB;EAAK;EAK1B,QAAA,ED5CF,aC4CE;AAoBb;;;;AAAqC,KD1DzB,WAAA,GAAc,gBC0DW,GD1DQ,cC0DR,GD1DyB,iBC0DzB;AAKrC;;;;;;;;AFlJiB,cE+CJ,sBF/CoB,EE+CE,CAAA,CAAA,OF/CF,CAAA;EAQhB,IAAA,EAAA,MAAA;EAQA,aAAA,EAAA,aAAgB;EAkBhB,OAAA,EAAA,SAAW;EAwBX,OAAA,EAAA,SAAA;CAAiB,CAAA;;;;;;;;;;;AAoBZ;;;;AC1EtB;;;;;;AAewD;AAMxD;AAgCA;AAOiB,KCaL,gBAAA,GAAmB,CAAA,CAAE,KDVxB,CAAA,OCUqC,sBDV5B,CAAA;AAQlB;AAQA;;AAA0B,cCDb,uBDCa,ECDU,CAAA,CAAA,ODCV,CAAA;EAAgB,MAAG,EAAA,QAAA;EAAc,KAAG,EAAA,OAAA;EAAiB,IAAA,EAAA,MAAA;;;;ACpC/E;AA8BA;;;;AAAsC;AAKtC;AAkCA;;;;AAAuC;AAKvC;AAoBA;;;;AAAqC;AAKrC;;;;;;AAA4B;AAU5B;AAAqB,KAxCT,iBAAA,GAAoB,CAAA,CAAE,KAwCb,CAAA,OAxC0B,uBAwC1B,CAAA;;;AAAU;AAuBzB,cA1DO,qBA0DwC,EA1DnB,CAAA,CAAA,OA0DmB,CAAA;EAK/C,IAAA,EAAA,MAAA;AAKN,CAAA,CAAA;AASA;AASA;AA+TA;;;;;;;;;;;;;;;;KAjYY,eAAA,GAAkB,CAAA,CAAE,aAAa;;;;cAKhC,iBAAe,CAAA,CAAA,mBAAA,CAAA,CAAA;;;;;IAAA,CAAA,CAAA;;OA4XU,EAAA,OAAA;EAAA,IAzFxB,EAAA,MAAA;EAAQ,gBACL,EAAA,gBAAA;CAAQ,CAAA,WADX,CAAA;EAAQ,IACL,EAAA,MAAA;CAAQ,CAAA,CAAA,CAAA;;;;;AAwFa,KAlX1B,SAAA,GAAY,CAAA,CAAE,KAkXY,CAAA,OAlXC,eAkXD,CAAA;;;;cA3VhC;;;;cAKA;;;;iBAKU,uBAAA;;;;iBASA,oBAAA;;;;iBASA,oBAAA;;;;;ACuEe;AAwC/B;;AAEW,cD8ME,yBC9MF,ED8M2B,CAAA,CAAA,QC9M3B,CAAA,SAAA,CD8M2B,CAAA,CAAA,SC9M3B,CD8M2B,CAAA,CAAA,SC9M3B,ED8M2B,CAAA,CAAA,QC9M3B,CAAA,SAAA,CD8M2B,CAAA,CAAA,qBC9M3B,CAAA,CD8M2B,CAAA,CAAA,SC9M3B,CAAA;EAAY,QAEZ,ED4M2B,CAAA,CAAA,UC5M3B,CAAA,WAAA,CAAA;EAAsB,GAE1B,eAAA,YAAA,CAAA;CAAS,eAEL,CAAA,aAAA,CAAA;EAAa,QAAA,EDwMc,CAAA,CAAA,UCxMd,CAAA,SAAA,CAAA;EAmBP,MAAA,eAAY,UAAA,CAAA;IA4BZ,WAAY,EAAA,WAInB;IAgBO,WAAY,EAAA,WAAA;IAkCZ,WAAA,EAAa,WAAA;IA4CpB,WAAA,EAAa,WAAA;IAAA,YAAA,EAAA,YAAA;IA6Bb,WAAA,EAAA,WAAA;IAeI,YAAA,EAAA,YAAA;IAMJ,YAAA,EAAA,YAAA;IAMG,gBAAA,EAAA,gBAAA;IAMJ,gBAAA,EAAA,gBAAA;IAMC,gBAAA,EAAA,gBAAA;IAMA,gBAAA,EAAA,gBAAA;IAMK,gBAAA,EAAA,gBAAA;IAeF,gBAAA,EAAA,gBAAA;IAMJ,gBAAA,EAAA,gBAAA;IAMuB,cAAA,EAAA,cAAA;IAMH,cAAA,EAAA,cAAA;IAMR,cAAA,EAAA,cAAA;IAMV,WAAA,EAAA,WAAA;IAwCE,WAAA,EAAA,WAAA;IAkDH,WAAA,EAAA,WAAA;IAAe,YAAA,EAAA,YAAA;IAmCR,YAAA,EAAc,YAAA;IAAA,YAAA,EAAA,YAAA;IAGf,YAAA,EAAA,YAAA;IAFP,cAAA,EAAA,cAAA;IAAa,WAAA,EAAA,WAAA;EASL,CAAA,CAAA,CAAA;EAQL,OAAA,eAAQ,YAAG,CAAA;EAOX,YAAA,eAAU,YAAA,CAAA;EAAA,GAAA,eAAA,YAAA,CAAA;CAAA,eAAkB,CAAA,aAAA,CAAA;EAAQ,QAAvB,cAAA,CAAA,YAAA,CAAA;EAAM,GAAA,eAAA,YAAA,CAAA;AAM/B,CAAA,eAAY,CAAA,aAAe,CAAA;EAAA,QAAA,cAAA,CAAA,QAAA,CAAA;CAAA,eAAe,CAAA,CAAA,EAAA,UAAA,CAAA,aAAA,CAAA;EAAU,QACvC,ED3TY,CAAA,CAAA,SC2TZ,CAAA;IAAa,IAAA,EAAA,MAAA;IAAM,UAAA,ED5TlB,QC4TkB;IAAX,aAAA,ED3TJ,QC2TI;EAAI,CAAA,EACQ;IAAK,IAAA,EAAA,MAAA;IAqC1B,UAAA,EDlWE,QCkWY;IAAA,aAAA,EDjWT,QCiWS;EAAA,CAAA,CAAA;EAAyB,GAOrC,eAAA,YAAA,CAAA;CAAM,eAUI,CAAA,CAAA,CAAA,CAAA,YAAA,CAAA,SAAA,wBAAA,CAAA,YAAA,CAAA;EAAK,QAArB,ED1R8B,CAAA,CAAA,UC0R9B,CAAA,WAAA,CAAA;EAAe,GAEb,eAAA,YAAA,CAAA;EAAY,MAEZ,aAAA;CAAY,eAEV,CAAA,aAAA,CAAA;EAAc,QAEjB,cAAA,CAAA,SAAA,CAAA;EAAY,MAEV,eAAA,UAAA,CAAA;IAEF,WAAA,EAAA,WAAA;IAAW,WAAA,EAAA,WAAA;IAMR,WAAA,EAAa,WAAA;IAAA,WAAA,EAAA,WAAA;IAAe,YAAA,EAAA,YAAA;IAAoB,WAAA,EAAA,WAAA;IAAK,YAAA,EAAA,YAAA;IAKrD,YAAA,EAAA,YAAuB;IAAA,gBAAA,EAAA,gBAAA;IAAe,gBAAA,EAAA,gBAAA;IAOpC,gBAAA,EAAA,gBAAA;IAGA,gBAAA,EAAA,gBAAA;IAAa,gBAAA,EAAA,gBAAA;IAAM,gBAAA,EAAA,gBAAA;IAAX,gBAAA,EAAA,gBAAA;IACU,cAAA,EAAA,cAAA;IAAd,cAAA,EAAA,cAAA;IAGR,cAAA,EAAA,cAAA;IACA,WAAA,EAAA,WAAA;IACE,WAAA,EAAA,WAAA;IACH,WAAA,EAAA,WAAA;IACE,YAAA,EAAA,YAAA;IACF,YAAA,EAAA,YAAA;IAAW,YAAA,EAAA,YAAA;IA+FH,YAAA,EAAe,YAAA;IAAA,cAAA,EAAA,cAAA;IAOlB,WAAA,EAAA,WAAA;EAAM,CAAA,CAAA,CAKG;EAAS,OAAxB,eAAA,YAAA,CAAA;EAAM,YAGJ,eAAA,YAAA,CAAA;EAAY,GAGZ,eAAA,YAAA,CAAA;EAAY,MAGV,aAAA;CAAc,eAGjB,CAAA,aAAA,CAAA;EAAY,QAGV,cAAA,CAAA,YAAA,CAAA;EAAa,GAGf,eAAA,YAAA,CAAA;EAAW,MAAA,aAAA;AASpB,CAAA,eAAiB,CAAA,aAAoB,CAAA;EAAA,QAAA,cAAA,CAAA,QAAA,CAAA;EAAA,MAAa,aAAA;CAAa,eAmBxC,CAAA,CAAA,EAAA,UAAA,CAAA,aAAA,CAAA;EAAY,QAItB,EDzjBY,CAAA,CAAA,SCyjBZ,CAAA;IAEH,IAAA,EAAA,MAAA;IAzBmC,UAAA,EDniB/B,QCmiB+B;IAAI,aAAA,EDliBhC,QCkiBgC;EAoChC,CAAA,EAAA;IAAmB,IAAA,EAAA,MAAA;IAWtB,UAAA,EDllBA,QCklBA;IAEQ,aAAA,EDnlBL,QCmlBK;EAAmB,CAAA,CAAA;EAA5B,GAEF,eAAA,YAAA,CAAA;EAAc,MAEhB,aAAA;CAAY,eAEZ,CAAA,CAAA,CAAA,CAAA,CAAA;AAEA,KD9fG,SAAA,GAAY,CAAA,CAAE,KC8fjB,CAAA,OD9f8B,yBC8f9B,CAAA;;;AAIW;AAMpB;;;AAIkB,cDpgBL,mBCogBK,EDpgBc,CAAA,CAAA,SCogBd,CAAA;EAAe,IAErB,ED3fV,CAAA,CAAA,UC2fU,CAAA,IAAA,CAAA;EAAmB,OAQnB,eAAA,YAAA,CAAA;EAAiB,MAAA,WAAA,CAAA;IAeb,WAAA,EAAA,WAAiB;IAAA,WAAA,EAAA,WAAA;IACxB,WAAA,EAAA,WAAA;IAAY,WAAA,EAAA,WAAA;IACR,YAAA,EAAA,YAAA;IAAe,WAAA,EAAA,WAAA;;;;IC9jCX,gBAAiB,EAAA,gBAAA;IAKtB,gBAA6B,EAAA,gBAAiB;IAazC,gBAAc,EAAA,gBAAA;IAKd,gBAAA,EAAoB,gBAAQ;IAI5B,gBAAgB,EAAA,gBAAQ;IAIxB,gBAAgB,EAAA,gBAAA;IA4BhB,cAAa,EAAA,cAAA;IAsBlB,cAAa,EAAA,cAAA;IAmBb,cAAY,EAAA,cAAA;IAmBZ,WAAA,EAAc,WAAA;IAsDd,WAAY,EAAA,WAAA;IAaZ,WAAA,EAAA,WAAkB;IASlB,YAAA,EAAA,YAAqB;IAAA,YAAA,EAAA,YAAA;IAC1B,YAAA,EAAA,YAAA;IAAgC,YAAA,EAAA,YAAA;IAAa,cAAA,EAAA,cAAA;IAGnC,WAAY,EAAA,WAAA;EAAA,CAAA,CAAA;EAAA,QAwBhB,eAAA,YAAA,CAAA;EAAqB,SAAG,eAAA,YAAA,CAAA;AAAkB,CAAA,eAAA,CAAA;AAItC,KFyUL,aAAA,GAAgB,CAAA,CAAE,KEzUA,CAAA,OFyUa,mBEzUb,CAAA;;;;AAAsB,cFygBvC,qBEzgBuC,EFygBlB,CAAA,CAAA,SEzgBkB,CAAA;EAOxC,IAAA,eAAO,CFunBhB,CAAA,CAAA,SEvnBgB,CAAA;EAEF,UAAA,eAAe,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;IAiBf,KAAA,YAAY,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;IASZ,SAAA,aAAa,CAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,CAAA;EAWb,CAAA,eAAW,CAAA,CAAA,CAAA,CAAA;EA6BX,IAAA,eAAA,YAAqB,YAAA,aAAA,CAAA;IAarB,IAAA,cAAe,cAAA,UAAA,CAAA;MAAA,OAAA,EAAA,SAAA;MAGd,GAAA,EAAA,KAAA;MACA,MAAA,EAAA,QAAA;IAGO,CAAA,CAAA,CAAA,CAAA;IACJ,IAAA,aAAA;IAGD,IAAA,aAAA;IAEC,YAAA,eAAA,WAAA,YAAA,CAAA,CAAA;IAAqB,MAAA,eAAA,UAAA,CAAA;MAGzB,OAAS,EAAA,SAAA;MAAA,MAAA,EAAA,QAAA;MAoBjB,UAAA,EAAA,YAAA;IAWG,CAAA,CAAA,CAAA;IAWC,UAAA,eAAA,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;MACA,KAAA,YAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;MAUJ,SAAA,aAAA,CAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,CAAA;IAQuB,CAAA,eAAA,CAAA,CAAA,CAAA,CAAA;IAUH,MAAA,eAAA,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;MAmBR,KAAA,YAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;MAEV,SAAA,aAAA,CAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,EAAA,CAAA,QAAA,EAAA,MAAA,EAAA,GAAA,MAAA,CAAA;IA4BD,CAAA,eAAA,CAAA,CAAA,CAAA,CAAA;IAAY,SAAA,eAAA,WAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,aAAA,CAAA;MAa4B,KAAA,YAAA,CAAA,SAAA,YAAA,YAAA,YAAA,CAAA,CAAA,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBFtBzB,CAAA,CAAA;;oBADX;uBACG;;;oBADH;uBACG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gBAAQ,CAAA,CAAA;;oBADX;uBACG;;;oBADH;uBACG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA8LoC,CAAA,CAAA;YAAzB;aAAiB;;YAAjB;aAAiB;;;;;;;;iBA+O7B,uBAAA,mBAEb,CAAA,CAAE,aAAa;;;;iBAOF,2BAAA;;SAER,CAAA,CAAE,aAAa;UACd,CAAA,CAAE;;;;;iBAYK,sBAAA,QAA8B,CAAA,CAAE;;;AF32BhD;AAkBA;AAwBA;;;;;;;;;;;;AAoBsB;KGzCV,YAAA;;;AFjCZ;;;;;;AAewD;AAMxD;AAgCA;AAOA;AAWiB,UExBA,kBAAA,CF0BN;EAMC;EAAW,OAAA,CAAA,EAAA,MAAA;EAAA;EAAmB,KAAG,CAAA,EAAA,MAAA;;AAAkC;;;;ACpC/E;AA8BA;;;;AAAsC;AAKtC;AAkCA;;;;AAAuC;AAKvC;AAoBA;;;AAA8B,UC/Db,iBAAA,SAA0B,kBD+DX,CAAA;EAAK;EAKxB,IAAA,CAAA,EAAA;IAIX,IAAA,EAAA,MAAA;IAJ0B,IAAA,EAAA,MAAA;IAAA,IAAA,CAAA,EAAA,MAAA;;;AAAA;AAU5B;;;;AAA+B;AAAyB;AAuBH;AAUrD;AASA;AASA;AA+TA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAxFyB,UCpTR,cAAA,CDoTQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UCpTM;;;;;;SA6BY;;EDsRrB,OACL,CAAA,ECjRyB,cDiRzB;EAAQ;EADH,MACL,CAAA,EC/Q8B,aD+Q9B;EAAQ;;;;;;;;AAwFa;AAKtC;;;;AAA+B;AAQ/B;;EAWE,MAAA,CAAA,EC5WQ,OD4WR,CC5WgB,MD4WhB,CC7X2C,kBAAA,ED6X3C,MAAA,CAAA,CAAA;;;;;;;;;;AAX8B;AAahC;;;;AAAmC;AAgMnC;;;;;;KCvhBY,oBAAA,GAAuB;;;;;;;;;;;;;;;;;;;;KAqBvB,eAAA,YAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkCtB,sBAAA;;;;cAIJ;;;;;;;;;;YAUF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAwCM,YAAA;;YAEN;;YAEA;;QAEJ;;YAEI;;;;;;;;;;;;;;;;;;UAmBM,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4BA,YAAA;;;;WAIP;;;;;;;;;;;;;;;UAgBO,YAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkCA,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA4CP,aAAA;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BA;;;;;;;;;;eAeI;;;;;WAMJ;;;;;cAMG;;;;;UAMJ;;;;;WAMC;;;;;WAMA;;;;;gBAMK;;;;;;;;;;;;cAeF;;;;;UAMJ;;;;;iCAMuB;;;;;8BAMH;;;;;sBAMR;;;;;YAMV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAwCE;;;;;;;;;;;;;;;;;;AD4GqB;AA2HlC;EAAuC,MAAA,CAAA,EAAA;IAErB;IAAf,MAAE,CAAA,EAAA,MAAA;IAAK;IAOM,MAAA,CAAA,EAAA,MAAA;EAA2B,CAAA;EAAA;;;AAGxB;AAYnB;;;;ACt1BA;AAcA;AA2BA;AAoDA;;;;;;;EAwDiE,MAA/C,CAAA,EAofR,eApfQ;EAAM;AAAP;AAuBjB;AAqBA;AAkCA;;;;AAc+B;EAwCd,WAAA,CAAA,EAAA,MAAY,EAAA;;;;;;AAQL;AAmBxB;AA4BA;AAoBA;AAkCA;AAOC;;;;;;;;;;;;AAgJ+B,UA+If,cA/Ie,CAAA,kBAAA,MAAA,GAAA,MAAA,CAAA,SAgJvB,aAhJuB,CAAA;EAAe;EAMN,YAMpB,CAAA,EAsIL,SAtIK,EAAA;;;;AAgGI;AAmCzB;AAA+B,UAUd,SAAA,SAAkB,aAVJ,CAAA;EAAA;EAGN,YAFhB,CAAA,EAAA,MAAA,EAAA;AAAa;AAStB;AAQA;AAOA;AAAsB,KAPV,QAAA,GAAW,aAOD,GAAA;EAAA,YAAkB,CAAA,EAAA,SAAA,MAAA,EAAA;CAAQ;AAAjB;AAM/B;;AAA0C,KAN9B,UAAA,GAAa,MAMiB,CAAA,MAAA,EANF,QAME,CAAA;;;;;AAET,KAFrB,eAEqB,CAAA,cAFS,UAET,CAAA,GAAA,QAAK,MADzB,KACyB,GADjB,IACiB,CADZ,KACY,CADN,CACM,CAAA,EAAA,cAAA,CAAA,GAAA;EAqC1B,YAAA,CAAc,EAAA,SAAA,CAAA,MArCO,KAqCP,GAAA,MAAA,CAAA,EAAA;AAAA,CAAA,EAAA;;;;;;;;;;AA6BN;AAMpB;;;;AAAiE;AAKjE;;;;;;;;;;;;;;;;AAmBoB;AA+FpB;AAAgC,KA1JpB,cA0JoB,CAAA,cA1JS,UA0JT,CAAA,GAAA;EAAA;;;;;;EAqBN,UAGjB,CAAA,EA3KK,MA2KL;EAAY;EAGG,IAGf,CAAA,EAAA,MAAA;EAAW;AASpB;;;;;;EAyByB,IAzBoB,CAAA,EAhLrC,eAgLqC,CAhLrB,KAgLqB,CAAA;EAAI;EAoChC,MAAA,CAAA,EAlNP,YAkNO;EAAmB;EAAA,MAWtB,CAAA,EA3NJ,YA2NI;EAAM;EAEqB,QAAlC,CAAA,EA3NK,cA2NL;EAAM;EAEY,MAEhB,EA7NA,YA6NA;EAAY;EAEA,OAEZ,CAAA,EA/NE,aA+NF;EAAY;EAEE,KAEd,CAAA,EAjOA,WAiOA;AAAW,CAAA;AAMpB;;;AAIkB,KArON,aAqOM,CAAA,cArOsB,UAqOtB,CAAA,GAAA,MArO0C,KAqO1C,GAAA,MAAA;;;AAUW;AAeb,KAzPJ,uBAyPqB,CAAA,cAzPiB,UAyPjB,CAAA,GAAA;EAAA;;;;AAEL;;eApPd;;EC10BG,IAAA,CAAA,EAAA,QAKC,MDw0BJ,KCx0B2B,GDw0BnB,ICx0BmB,CDw0Bd,KCx0Bc,CDw0BR,CCx0BQ,CAAiB,EAAA,cAAA,CAAA,GAAA;IAazC,YAAc,CAAA,ED4zBb,aC5zBa,CD4zBC,KC5zBD,CAAA,EAAA;EAKd,CAAA,EAIA;EAIA,MAAA,CAAA,EDkzBP,YClzBuB;EA4BhB,MAAA,CAAA,EDuxBP,YCvxBoB;EAsBlB,QAAA,CAAA,EDkwBA,cClwBa;EAmBb,MAAA,EDgvBH,YChvBe;EAmBZ,OAAA,CAAA,ED8tBD,aC9tBe;EAsDd,KAAA,CAAA,EDyqBH,WCzqBe;AAaxB,CAAA;AASA;;;;AAgCoD;AAOpD;AAEA;AAiBA;AASA;AAWA;AA6BA;AAaA;;;;;;;;AAa0C;AAG1C;;;;;;;;;;;;;AAqIkD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UDqejC,eAAA;;;;;;;eAOH;;;;SAKN,eAAe;;WAGb;;WAGA;;aAGE;;UAGH;;YAGE;;UAGF;;;;;;;;UASQ,mBAAA,SAA4B,KAAK;;;;;;;;;;;;;;;;;;wBAmB3B;;;;cAIV;;WAEH;;;;;;;;;;UAWO,mBAAA;;;;;;;;;;;eAWH;;QAEP,eAAe;;YAEX;;UAEF;;UAEA;;UAEA;;WAEC;;UAED;;;;;UAMQ,YAAA;;;;OAIX,YAAY;;aAEN;;;;;;;;aAQA;;;;;;;;;;;;;;iBAeI,iBAAA,SACP,YAAY,4BACR;;;;UC9jCI,iBAAA;EJIA,KAAA,EAAA,MAAA,GAAA,MAAgB,EAAA;EAQhB,SAAA,EAAA,CAAA,QAAA,EAAA,MAAqB,EAAA,GAAA,MAAA;AAQtC;AAkBiB,KIjCL,MAAA,GJiCgB,MAAA,GAAA,MAAA,EAAA,GIjCa,iBJiCb;AAwBM,UI5CjB,cAAA,CJ4CiB;EAAA,OAMnB,CAAA,EAAA,OAAA;EAAM,SAMY,CAAA,EAAA,MAAA;;AAEE,UIrDlB,mBAAA,SAA4B,cJqDV,CAAA;AAEL,UInDb,eAAA,SAAwB,cJmDX,CAAA;AAED,UIjDZ,gBAAA,CJiDY;EAAgB;EAAzB,OAET,CAAA,EAAA,OAAA;EAAW;;;;EC1EL;EAAa,WAAA,CAAA,EAAA,MAAA;EAAA;EAOiB,gBAAzB,CAAA,EAAA,OAAA;EAAO;EAQiB,QAAG,CAAA,EAAA,MAAA,EAAA;EAAO;EAM5C,WAAA,CAAS,EAAA,SAAA,GAAA,SAAA;EAgCJ;EAOA,OAAA,CAAA,EAAA,OAAc;EAWd;AAQjB;;;;;AAA+E;;;;ACpClE,UEQI,aAAA,CFHf;EAyBU;;;;EAA0B,KAAA,CAAA,EAAA,MAAA;EAKzB;AAkCb;;;EAAsE,OAApC,CAAA,EAAA,MAAA;AAAK;AAKvC;AAoBA;;;;AAAqC;AAKrC;;;AAA4B,KErEhB,aAAA,GFqEgB,QAAA,GAAA,KAAA,GAAA,UAAA;;;AAAA;AAU5B;;;;AAA+B;AAAyB;AAuBH;AAUrD;AASA;AASA;AA+TA;;;;KE9aY,YAAA;;;;;;;;;;;;;;;;;;KAmBA,cAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAsDA,YAAA;;;;;;;;;;;KAaA,kBAAA;;KASA,qBAAA,WACL,gCAAgC;AF8UD,UE3UrB,YAAA,CF2UqB;EAK1B;EAAS,QAAA,CAAA,EAAA,MAAA;EAAA;EAA2C,SAAtC,CAAA,EAAA,MAAA;EAAK;EAQlB,SAAA,CAAA,EAAA,MAAA;EAWX;EAAA,IAAA,CAAA,EAAA,MAAA;;;;;;;;;;AAX8B;AAahC;;;;AAAmC;IAgMtB,QAAA,CAAA,EE7gBA,qBFkoBV,GEloBkC,kBFkoBlC,EAAA;EAAA,CAAA;;UE9nBc,YAAA,SAAqB;;;;eAIxB;;KAGF,OAAA;UAEK,eAAA;;;;;;;;;;;;;;;;UAiBA,YAAA;;;;;;;;UASA,aAAA;;;;;;;;;;UAWA,WAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA6BA,qBAAA;;;;;;;;;;;;UAaA,eAAA;;;qBAGC;qBACA;;;4BAGO;wBACJ;;;qBAGD;;sBAEC;;UAGJ,SAAA;;;;;;;;;;;;;;;;;;;;UAoBR;;;;;;;;;;;aAWG;;;;;;;;;;;cAWC;cACA;;;;;;;;;;UAUJ;;;;;;;;iCAQuB;;;;;;;;;;8BAUH;;;;;;;;;;;;;;;;;;;sBAmBR;;YAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA4BD;;;;;;;;;;;;;WAAY"}

package/dist/workspace/index.cjs CHANGED Viewed

@@ -1,4 +1,4 @@
-const require_workspace = require('../workspace-C6VJQVtG.cjs');
+const require_workspace = require('../workspace-C-a3G_U0.cjs');
 exports.PHASE_2_DEPLOY_TARGETS = require_workspace.PHASE_2_DEPLOY_TARGETS;
 exports.PUBLIC_ENV_PREFIXES = require_workspace.PUBLIC_ENV_PREFIXES;

package/dist/workspace/index.d.mts CHANGED Viewed

@@ -1,3 +1,3 @@
-import { AppConfig, AppConfigInput, AppInput, AppsRecord, BackendFramework, ConstrainedApps, DeployConfig, DeployTarget, DokployWorkspaceConfig, FrontendFramework, InferAppNames, InferredWorkspaceConfig, LoadedConfig, MailServiceConfig, MobileFramework, ModelsConfig, NormalizedAppConfig, NormalizedWorkspace, PHASE_2_DEPLOY_TARGETS, SUPPORTED_DEPLOY_TARGETS, SecretsConfig, ServiceImageConfig, ServicesConfig, SharedConfig, WorkspaceConfig, WorkspaceConfigSchema, WorkspaceInput, formatValidationErrors, getDeployTargetError, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, safeValidateWorkspaceConfig, validateWorkspaceConfig } from "../types-6pkp2RRj.mjs";
-import { PUBLIC_ENV_PREFIXES, allConstructGlobs, appConstructGlobs, constructPatterns, defineWorkspace, getAppBuildOrder, getAppGkmConfig, getDependencyEnvVars, getEndpointForStage, getPublicEnvPrefix, normalizeWorkspace, processConfig, stripPublicPrefix, workspaceConstructGlobs, wrapSingleAppAsWorkspace } from "../index-C6e-ULLx.mjs";
+import { AppConfig, AppConfigInput, AppInput, AppsRecord, BackendFramework, ConstrainedApps, DeployConfig, DeployTarget, DokployWorkspaceConfig, FrontendFramework, InferAppNames, InferredWorkspaceConfig, LoadedConfig, MailServiceConfig, MobileFramework, ModelsConfig, NormalizedAppConfig, NormalizedWorkspace, PHASE_2_DEPLOY_TARGETS, SUPPORTED_DEPLOY_TARGETS, SecretsConfig, ServiceImageConfig, ServicesConfig, SharedConfig, WorkspaceConfig, WorkspaceConfigSchema, WorkspaceInput, formatValidationErrors, getDeployTargetError, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, safeValidateWorkspaceConfig, validateWorkspaceConfig } from "../types-CL7jPFM2.mjs";
+import { PUBLIC_ENV_PREFIXES, allConstructGlobs, appConstructGlobs, constructPatterns, defineWorkspace, getAppBuildOrder, getAppGkmConfig, getDependencyEnvVars, getEndpointForStage, getPublicEnvPrefix, normalizeWorkspace, processConfig, stripPublicPrefix, workspaceConstructGlobs, wrapSingleAppAsWorkspace } from "../index-Ayxg_DQY.mjs";
 export { AppConfig, AppConfigInput, AppInput, AppsRecord, BackendFramework, ConstrainedApps, DeployConfig, DeployTarget, DokployWorkspaceConfig, FrontendFramework, InferAppNames, InferredWorkspaceConfig, LoadedConfig, MailServiceConfig, MobileFramework, ModelsConfig, NormalizedAppConfig, NormalizedWorkspace, PHASE_2_DEPLOY_TARGETS, PUBLIC_ENV_PREFIXES, SUPPORTED_DEPLOY_TARGETS, SecretsConfig, ServiceImageConfig, ServicesConfig, SharedConfig, WorkspaceConfig, WorkspaceConfigSchema, WorkspaceInput, allConstructGlobs, appConstructGlobs, constructPatterns, defineWorkspace, formatValidationErrors, getAppBuildOrder, getAppGkmConfig, getDependencyEnvVars, getDeployTargetError, getEndpointForStage, getPublicEnvPrefix, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, normalizeWorkspace, processConfig, safeValidateWorkspaceConfig, stripPublicPrefix, validateWorkspaceConfig, workspaceConstructGlobs, wrapSingleAppAsWorkspace };

package/dist/workspace/index.mjs CHANGED Viewed

@@ -1,3 +1,3 @@
-import { PHASE_2_DEPLOY_TARGETS, PUBLIC_ENV_PREFIXES, SUPPORTED_DEPLOY_TARGETS, WorkspaceConfigSchema, allConstructGlobs, appConstructGlobs, constructPatterns, defineWorkspace, formatValidationErrors, getAppBuildOrder, getAppGkmConfig, getDependencyEnvVars, getDeployTargetError, getEndpointForStage, getPublicEnvPrefix, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, normalizeWorkspace, processConfig, safeValidateWorkspaceConfig, stripPublicPrefix, validateWorkspaceConfig, workspaceConstructGlobs, wrapSingleAppAsWorkspace } from "../workspace-zoqRbihZ.mjs";
+import { PHASE_2_DEPLOY_TARGETS, PUBLIC_ENV_PREFIXES, SUPPORTED_DEPLOY_TARGETS, WorkspaceConfigSchema, allConstructGlobs, appConstructGlobs, constructPatterns, defineWorkspace, formatValidationErrors, getAppBuildOrder, getAppGkmConfig, getDependencyEnvVars, getDeployTargetError, getEndpointForStage, getPublicEnvPrefix, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, normalizeWorkspace, processConfig, safeValidateWorkspaceConfig, stripPublicPrefix, validateWorkspaceConfig, workspaceConstructGlobs, wrapSingleAppAsWorkspace } from "../workspace-DaEX7FEg.mjs";
 export { PHASE_2_DEPLOY_TARGETS, PUBLIC_ENV_PREFIXES, SUPPORTED_DEPLOY_TARGETS, WorkspaceConfigSchema, allConstructGlobs, appConstructGlobs, constructPatterns, defineWorkspace, formatValidationErrors, getAppBuildOrder, getAppGkmConfig, getDependencyEnvVars, getDeployTargetError, getEndpointForStage, getPublicEnvPrefix, isDeployTargetSupported, isPhase2DeployTarget, isWorkspaceConfig, normalizeWorkspace, processConfig, safeValidateWorkspaceConfig, stripPublicPrefix, validateWorkspaceConfig, workspaceConstructGlobs, wrapSingleAppAsWorkspace };

package/dist/{workspace-C6VJQVtG.cjs → workspace-C-a3G_U0.cjs} RENAMED Viewed

@@ -5749,13 +5749,33 @@ function stageProblems(stages) {
 /** The stages block, or an error naming everything wrong with it. */
 function validateStages(stages) {
 	const problems = stageProblems(stages);
-	if (problems.length) throw new Error(`Invalid stages in gkm.config.ts:\n  ${problems.join("\n  ")}`);
+	if (problems.length) throw new InvalidStages(problems);
 	return stages;
 }
 /** Refuses a stage the project does not deploy to. */
 function assertDeployedStage(stages, stage) {
-	if (!stages.deployed.includes(stage)) throw new Error(`"${stage}" is not a deployed stage. gkm.config.ts deploys to: ${stages.deployed.join(", ") || "nothing yet"}.`);
-}
+	if (!stages.deployed.includes(stage)) throw new UndeclaredStage(stage, stages.deployed);
+}
+/** A stages block — in gkm.config.ts or from `gkm init`'s flags — that breaks a rule. */
+var InvalidStages = class extends Error {
+	constructor(problems) {
+		super(`Invalid stages:\n  ${problems.join("\n  ")}`);
+		this.problems = problems;
+		this.name = "InvalidStages";
+	}
+};
+/**
+* A stage the project does not deploy to. Refused before anything is
+* provisioned, so a typo does not become a second environment.
+*/
+var UndeclaredStage = class extends Error {
+	constructor(stage, deployed) {
+		super(`"${stage}" is not a deployed stage. gkm.config.ts deploys to: ${deployed.join(", ") || "nothing yet"}.`);
+		this.stage = stage;
+		this.deployed = deployed;
+		this.name = "UndeclaredStage";
+	}
+};
 //#endregion
 //#region src/workspace/schema.ts
@@ -6674,6 +6694,12 @@ function getEndpointForStage(dokployConfig, stage) {
 }
 //#endregion
+Object.defineProperty(exports, 'InvalidStages', {
+  enumerable: true,
+  get: function () {
+    return InvalidStages;
+  }
+});
 Object.defineProperty(exports, 'PHASE_2_DEPLOY_TARGETS', {
   enumerable: true,
   get: function () {
@@ -6842,4 +6868,4 @@ Object.defineProperty(exports, 'wrapSingleAppAsWorkspace', {
     return wrapSingleAppAsWorkspace;
   }
 });
-//# sourceMappingURL=workspace-C6VJQVtG.cjs.map
+//# sourceMappingURL=workspace-C-a3G_U0.cjs.map