@kibibit/configit 1.0.0-beta.26 → 1.0.0-beta.27

package/lib/scripts/test-vault-comprehensive.js

@@ -0,0 +1,422 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const class_validator_1 = require("class-validator");
+const vault_1 = require("../src/vault");
+const results = [];
+function logTest(name, passed, error) {
+    results.push({ test: name, passed, error });
+    const status = passed ? '✓' : '✗';
+    const color = passed ? '\x1b[32m' : '\x1b[31m';
+    console.log(`  ${color}${status}\x1b[0m ${name}${error ? `: ${error}` : ''}`);
+}
+async function testTokenAuth() {
+    console.log('\n\x1b[1;33mTest Suite 1: Token Authentication\x1b[0m');
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [
+                {
+                    type: 'token',
+                    config: {
+                        type: 'token',
+                        token: 'configit-dev-token'
+                    }
+                }
+            ]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(config);
+        await provider.initialize();
+        logTest('Token authentication succeeds', true);
+        const secret = await provider.read('secret/data/configit/api');
+        const hasData = secret.data && secret.data.api_key;
+        logTest('Can read KV v2 secret', !!hasData, hasData ? undefined : 'No data returned');
+        return true;
+    }
+    catch (error) {
+        logTest('Token authentication succeeds', false, error.message);
+        return false;
+    }
+}
+async function testAppRoleAuth() {
+    console.log('\n\x1b[1;33mTest Suite 2: AppRole Authentication\x1b[0m');
+    let secretId;
+    let roleId;
+    try {
+        const setupProvider = new vault_1.VaultProvider({
+            endpoint: 'http://127.0.0.1:8200',
+            auth: { methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }] },
+            tls: { enabled: false, verifyCertificate: false }
+        });
+        await setupProvider.initialize();
+        const roleIdResponse = await setupProvider.client.read('auth/approle/role/configit-role/role-id');
+        roleId = roleIdResponse.data.role_id;
+        const secretIdResponse = await setupProvider.client.write('auth/approle/role/configit-role/secret-id', {});
+        secretId = secretIdResponse.data.secret_id;
+        logTest('Generated fresh AppRole credentials', true);
+    }
+    catch (error) {
+        logTest('Generated fresh AppRole credentials', false, error.message);
+        return false;
+    }
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [
+                {
+                    type: 'approle',
+                    config: {
+                        type: 'approle',
+                        roleId,
+                        secretId
+                    }
+                }
+            ]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(config);
+        await provider.initialize();
+        logTest('AppRole authentication succeeds', true);
+        const secret = await provider.read('secret/data/configit/api');
+        const hasData = secret.data && secret.data.api_key;
+        logTest('Can read secret with AppRole token', !!hasData, hasData ? undefined : 'No data returned');
+        return true;
+    }
+    catch (error) {
+        logTest('AppRole authentication succeeds', false, error.message);
+        return false;
+    }
+}
+async function testAuthFallback() {
+    console.log('\n\x1b[1;33mTest Suite 3: Authentication Fallback\x1b[0m');
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [
+                {
+                    type: 'token',
+                    config: {
+                        type: 'token',
+                        token: 'invalid-token-12345'
+                    }
+                },
+                {
+                    type: 'token',
+                    config: {
+                        type: 'token',
+                        token: 'configit-dev-token'
+                    }
+                }
+            ]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(config);
+        await provider.initialize();
+        logTest('Falls back to second auth method when first fails', true);
+        return true;
+    }
+    catch (error) {
+        logTest('Falls back to second auth method when first fails', false, error.message);
+        return false;
+    }
+}
+async function testKvV1Engine() {
+    var _a;
+    console.log('\n\x1b[1;33mTest Suite 4: KV v1 Engine\x1b[0m');
+    const setupConfig = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(setupConfig);
+        await provider.initialize();
+        try {
+            await provider.client.write('cubbyhole/test', { test_key: 'test_value' });
+            logTest('Can write to cubbyhole (KV v1-like)', true);
+            const response = await provider.client.read('cubbyhole/test');
+            const hasData = ((_a = response === null || response === void 0 ? void 0 : response.data) === null || _a === void 0 ? void 0 : _a.test_key) === 'test_value';
+            logTest('Can read from cubbyhole (KV v1-like)', hasData, hasData ? undefined : 'Data mismatch');
+            return true;
+        }
+        catch (error) {
+            logTest('KV v1-like operations work', false, error.message);
+            return false;
+        }
+    }
+    catch (error) {
+        logTest('KV v1 test setup', false, error.message);
+        return false;
+    }
+}
+async function testVaultIntegrationDecorators() {
+    console.log('\n\x1b[1;33mTest Suite 5: VaultIntegration with Decorators\x1b[0m');
+    class TestConfig {
+    }
+    __decorate([
+        (0, vault_1.VaultPath)('configit/api'),
+        (0, vault_1.VaultKey)('api_key'),
+        (0, vault_1.VaultEngine)('kv-v2'),
+        (0, class_validator_1.IsString)(),
+        __metadata("design:type", String)
+    ], TestConfig.prototype, "API_KEY", void 0);
+    __decorate([
+        (0, vault_1.VaultPath)('configit/database'),
+        (0, vault_1.VaultKey)('password'),
+        (0, vault_1.VaultEngine)('kv-v2'),
+        (0, class_validator_1.IsString)(),
+        __metadata("design:type", String)
+    ], TestConfig.prototype, "DB_PASSWORD", void 0);
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    const integration = new vault_1.VaultIntegration(config);
+    try {
+        await integration.initialize();
+        logTest('VaultIntegration initializes', true);
+        await integration.loadSecrets(TestConfig);
+        logTest('VaultIntegration loads secrets', true);
+        const apiKey = integration.getSecret('API_KEY');
+        logTest('API_KEY loaded correctly', apiKey === 'test-api-key-123', apiKey ? undefined : 'No value');
+        const dbPassword = integration.getSecret('DB_PASSWORD');
+        logTest('DB_PASSWORD loaded correctly', dbPassword === 'testpassword', dbPassword ? undefined : 'No value');
+        const health = integration.getHealth();
+        logTest('Health check returns valid data', health.connected && health.cacheSize > 0);
+        integration.shutdown();
+        return true;
+    }
+    catch (error) {
+        logTest('VaultIntegration test', false, error.message);
+        integration.shutdown();
+        return false;
+    }
+}
+async function testTTLRefreshScheduling() {
+    console.log('\n\x1b[1;33mTest Suite 6: TTL and Refresh Scheduling\x1b[0m');
+    class TTLTestConfig {
+    }
+    __decorate([
+        (0, vault_1.VaultPath)('configit/api'),
+        (0, vault_1.VaultKey)('api_key'),
+        (0, vault_1.VaultEngine)('kv-v2'),
+        (0, class_validator_1.IsString)(),
+        __metadata("design:type", String)
+    ], TTLTestConfig.prototype, "API_KEY", void 0);
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }]
+        },
+        tls: { enabled: false, verifyCertificate: false },
+        refreshBuffer: 60
+    };
+    const integration = new vault_1.VaultIntegration(config);
+    try {
+        await integration.initialize();
+        await integration.loadSecrets(TTLTestConfig);
+        const healthDetails = integration.getHealthDetails();
+        logTest('Health details available', !!healthDetails);
+        logTest('Refresh status tracked', Array.isArray(healthDetails.refreshStatus));
+        logTest('KV v2 secrets have no TTL (expected)', healthDetails.refreshQueueSize === 0);
+        integration.shutdown();
+        return true;
+    }
+    catch (error) {
+        logTest('TTL refresh test', false, error.message);
+        integration.shutdown();
+        return false;
+    }
+}
+async function testErrorHandling() {
+    console.log('\n\x1b[1;33mTest Suite 7: Error Handling\x1b[0m');
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    const provider = new vault_1.VaultProvider(config);
+    try {
+        await provider.initialize();
+        try {
+            await provider.read('secret/data/nonexistent/path');
+            logTest('Handles missing secret gracefully', false, 'Should have thrown');
+        }
+        catch (error) {
+            const isExpectedError = error.message.includes('not found') || error.message.includes('404');
+            logTest('Handles missing secret gracefully', true);
+        }
+        try {
+            await provider.read('invalid///path');
+            logTest('Handles invalid path', false, 'Should have thrown');
+        }
+        catch (error) {
+            logTest('Handles invalid path', true);
+        }
+        return true;
+    }
+    catch (error) {
+        logTest('Error handling test setup', false, error.message);
+        return false;
+    }
+}
+async function testTLSEnforcement() {
+    console.log('\n\x1b[1;33mTest Suite 8: TLS Enforcement\x1b[0m');
+    const configWithTLS = {
+        endpoint: 'http://some-remote-vault:8200',
+        auth: {
+            methods: [{ type: 'token', config: { type: 'token', token: 'test' } }]
+        }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(configWithTLS);
+        await provider.initialize();
+        logTest('Rejects HTTP for non-localhost', false, 'Should have thrown');
+    }
+    catch (error) {
+        const isTLSError = error.message.includes('TLS') || error.message.includes('HTTPS');
+        logTest('Rejects HTTP for non-localhost', isTLSError, isTLSError ? undefined : error.message);
+    }
+    const configLocalhost = {
+        endpoint: 'http://localhost:8200',
+        auth: {
+            methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }]
+        }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(configLocalhost);
+        await provider.initialize();
+        logTest('Allows HTTP for localhost', true);
+    }
+    catch (error) {
+        const isTLSError = error.message.includes('TLS') || error.message.includes('HTTPS');
+        logTest('Allows HTTP for localhost', !isTLSError, isTLSError ? 'TLS error unexpected' : undefined);
+    }
+    return true;
+}
+async function testGCPAuth() {
+    console.log('\n\x1b[1;33mTest Suite 9: GCP IAM Authentication\x1b[0m');
+    const fs = await Promise.resolve().then(() => __importStar(require('fs')));
+    const keyFilePath = './secrets/gcp-sa-key.json';
+    if (!fs.existsSync(keyFilePath)) {
+        logTest('GCP key file exists', false, `${keyFilePath} not found - skipping GCP tests`);
+        return false;
+    }
+    logTest('GCP key file exists', true);
+    const config = {
+        endpoint: 'http://127.0.0.1:8200',
+        auth: {
+            methods: [
+                {
+                    type: 'gcp',
+                    config: {
+                        type: 'gcp',
+                        role: 'configit-gcp-role',
+                        serviceAccountKeyFile: keyFilePath
+                    }
+                }
+            ]
+        },
+        tls: { enabled: false, verifyCertificate: false }
+    };
+    try {
+        const provider = new vault_1.VaultProvider(config);
+        await provider.initialize();
+        logTest('GCP IAM authentication succeeds', true);
+        const secret = await provider.read('secret/data/configit/api');
+        const hasData = secret.data && secret.data.api_key;
+        logTest('Can read secret with GCP IAM token', !!hasData, hasData ? undefined : 'No data returned');
+        return true;
+    }
+    catch (error) {
+        logTest('GCP IAM authentication succeeds', false, error.message);
+        return false;
+    }
+}
+async function runAllTests() {
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m');
+    console.log('\x1b[1;34m  Comprehensive Vault Integration Tests\x1b[0m');
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m');
+    await testTokenAuth();
+    await testAppRoleAuth();
+    await testGCPAuth();
+    await testAuthFallback();
+    await testKvV1Engine();
+    await testVaultIntegrationDecorators();
+    await testTTLRefreshScheduling();
+    await testErrorHandling();
+    await testTLSEnforcement();
+    console.log('\n\x1b[1;34m' + '='.repeat(60) + '\x1b[0m');
+    console.log('\x1b[1;34m  Test Summary\x1b[0m');
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m\n');
+    const passed = results.filter((r) => r.passed).length;
+    const failed = results.filter((r) => !r.passed).length;
+    const total = results.length;
+    console.log(`  Total: ${total}`);
+    console.log(`  \x1b[32mPassed: ${passed}\x1b[0m`);
+    console.log(`  \x1b[31mFailed: ${failed}\x1b[0m\n`);
+    if (failed > 0) {
+        console.log('  \x1b[1;31mFailed Tests:\x1b[0m');
+        results.filter((r) => !r.passed).forEach((r) => {
+            console.log(`    - ${r.test}${r.error ? `: ${r.error}` : ''}`);
+        });
+        console.log('');
+    }
+    const success = failed === 0;
+    console.log(success ? '  \x1b[32m✓ All tests passed!\x1b[0m' : '  \x1b[31m✗ Some tests failed\x1b[0m');
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m\n');
+    return success;
+}
+runAllTests()
+    .then((success) => process.exit(success ? 0 : 1))
+    .catch((error) => {
+    console.error('Unexpected error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=test-vault-comprehensive.js.map

package/lib/scripts/test-vault-comprehensive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault-comprehensive.js","sourceRoot":"","sources":["../../scripts/test-vault-comprehensive.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,4BAA0B;AAC1B,qDAA2C;AAC3C,wCAOsB;AAGtB,MAAM,OAAO,GAA6D,EAAE,CAAC;AAE7E,SAAS,OAAO,CAAC,IAAY,EAAE,MAAe,EAAE,KAAc;IAC5D,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,MAAM,WAAW,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC;AAKD,KAAK,UAAU,aAAa;IAC1B,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;IAErE,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,oBAAoB;qBAC5B;iBACF;aACF;SACF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAC;QAG/C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAEtF,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,+BAA+B,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,eAAe;IAC5B,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAIvE,IAAI,QAAgB,CAAC;IACrB,IAAI,MAAc,CAAC;IAEnB,IAAI;QACF,MAAM,aAAa,GAAG,IAAI,qBAAa,CAAC;YACtC,QAAQ,EAAE,uBAAuB;YACjC,IAAI,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC,EAAE;YAC9F,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;SAClD,CAAC,CAAC;QACH,MAAM,aAAa,CAAC,UAAU,EAAE,CAAC;QAGjC,MAAM,cAAc,GAAG,MAAO,aAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;QAC3G,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAGrC,MAAM,gBAAgB,GAAG,MAAO,aAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;QACpH,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAC3C,OAAO,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;KACtD;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,qCAAqC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,OAAO,KAAK,CAAC;KACd;IAED,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,SAAS;oBACf,MAAM,EAAE;wBACN,IAAI,EAAE,SAAS;wBACf,MAAM;wBACN,QAAQ;qBACT;iBACF;aACF;SACF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QAGjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,OAAO,CAAC,oCAAoC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAEnG,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,iCAAiC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,gBAAgB;IAC7B,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IAExE,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE;gBAEP;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,qBAAqB;qBAC7B;iBACF;gBAED;oBACE,IAAI,EAAE,OAAO;oBACb,MAAM,EAAE;wBACN,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,oBAAoB;qBAC5B;iBACF;aACF;SACF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,mDAAmD,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,mDAAmD,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnF,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,cAAc;;IAC3B,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAG7D,MAAM,WAAW,GAAwB;QACvC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;SACrF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAI5B,IAAI;YAEF,MAAO,QAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,qCAAqC,EAAE,IAAI,CAAC,CAAC;YAGrD,MAAM,QAAQ,GAAG,MAAO,QAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACvE,MAAM,OAAO,GAAG,CAAA,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,IAAI,0CAAE,QAAQ,MAAK,YAAY,CAAC;YAC1D,OAAO,CAAC,sCAAsC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;YAEhG,OAAO,IAAI,CAAC;SACb;QAAC,OAAO,KAAU,EAAE;YACnB,OAAO,CAAC,4BAA4B,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC5D,OAAO,KAAK,CAAC;SACd;KACF;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,8BAA8B;IAC3C,OAAO,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;IAIjF,MAAM,UAAU;KAYf;IAPC;QAJC,IAAA,iBAAS,EAAC,cAAc,CAAC;QACzB,IAAA,gBAAQ,EAAC,SAAS,CAAC;QACnB,IAAA,mBAAW,EAAC,OAAO,CAAC;QACpB,IAAA,0BAAQ,GAAE;;+CACM;IAMjB;QAJC,IAAA,iBAAS,EAAC,mBAAmB,CAAC;QAC9B,IAAA,gBAAQ,EAAC,UAAU,CAAC;QACpB,IAAA,mBAAW,EAAC,OAAO,CAAC;QACpB,IAAA,0BAAQ,GAAE;;mDACU;IAGvB,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;SACrF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,wBAAgB,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI;QACF,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,8BAA8B,EAAE,IAAI,CAAC,CAAC;QAE9C,MAAM,WAAW,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC1C,OAAO,CAAC,gCAAgC,EAAE,IAAI,CAAC,CAAC;QAEhD,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAChD,OAAO,CAAC,0BAA0B,EAAE,MAAM,KAAK,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAEpG,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACxD,OAAO,CAAC,8BAA8B,EAAE,UAAU,KAAK,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAE5G,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,CAAC,iCAAiC,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;QAErF,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,uBAAuB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACvD,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,wBAAwB;IACrC,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAK3E,MAAM,aAAa;KAMlB;IADC;QAJC,IAAA,iBAAS,EAAC,cAAc,CAAC;QACzB,IAAA,gBAAQ,EAAC,SAAS,CAAC;QACnB,IAAA,mBAAW,EAAC,OAAO,CAAC;QACpB,IAAA,0BAAQ,GAAE;;kDACM;IAGnB,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;SACrF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;QACjD,aAAa,EAAE,EAAE;KAClB,CAAC;IAEF,MAAM,WAAW,GAAG,IAAI,wBAAgB,CAAC,MAAM,CAAC,CAAC;IAEjD,IAAI;QACF,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAG7C,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC;QACrD,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;QACrD,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;QAI9E,OAAO,CAAC,sCAAsC,EAAE,aAAa,CAAC,gBAAgB,KAAK,CAAC,CAAC,CAAC;QAEtF,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,iBAAiB;IAC9B,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAE/D,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;SACrF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;IAE3C,IAAI;QACF,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAG5B,IAAI;YACF,MAAM,QAAQ,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YACpD,OAAO,CAAC,mCAAmC,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;SAC3E;QAAC,OAAO,KAAU,EAAE;YACnB,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7F,OAAO,CAAC,mCAAmC,EAAE,IAAI,CAAC,CAAC;SACpD;QAGD,IAAI;YACF,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACtC,OAAO,CAAC,sBAAsB,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;SAC9D;QAAC,OAAO,KAAU,EAAE;YACnB,OAAO,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAC;SACvC;QAED,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,2BAA2B,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,kBAAkB;IAC/B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;IAGhE,MAAM,aAAa,GAAwB;QACzC,QAAQ,EAAE,+BAA+B;QACzC,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;SACvE;KAEF,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,aAAa,CAAC,CAAC;QAClD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,gCAAgC,EAAE,KAAK,EAAE,oBAAoB,CAAC,CAAC;KACxE;IAAC,OAAO,KAAU,EAAE;QACnB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpF,OAAO,CAAC,gCAAgC,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;KAC/F;IAGD,MAAM,eAAe,GAAwB;QAC3C,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;SACrF;KACF,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,2BAA2B,EAAE,IAAI,CAAC,CAAC;KAC5C;IAAC,OAAO,KAAU,EAAE;QAEnB,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACpF,OAAO,CAAC,2BAA2B,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KACpG;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAKD,KAAK,UAAU,WAAW;IACxB,OAAO,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;IAGvE,MAAM,EAAE,GAAG,wDAAa,IAAI,GAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,2BAA2B,CAAC;IAEhD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;QAC/B,OAAO,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAI,WAAY,iCAAiC,CAAC,CAAC;QACzF,OAAO,KAAK,CAAC;KACd;IAED,OAAO,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;IAErC,MAAM,MAAM,GAAwB;QAClC,QAAQ,EAAE,uBAAuB;QACjC,IAAI,EAAE;YACJ,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,KAAK;oBACX,MAAM,EAAE;wBACN,IAAI,EAAE,KAAK;wBACX,IAAI,EAAE,mBAAmB;wBACzB,qBAAqB,EAAE,WAAW;qBACnC;iBACF;aACF;SACF;QACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;KAClD,CAAC;IAEF,IAAI;QACF,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,iCAAiC,EAAE,IAAI,CAAC,CAAC;QAGjD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACnD,OAAO,CAAC,oCAAoC,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;QAEnG,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,iCAAiC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAKD,KAAK,UAAU,WAAW;IACxB,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IAEvD,MAAM,aAAa,EAAE,CAAC;IACtB,MAAM,eAAe,EAAE,CAAC;IACxB,MAAM,WAAW,EAAE,CAAC;IACpB,MAAM,gBAAgB,EAAE,CAAC;IACzB,MAAM,cAAc,EAAE,CAAC;IACvB,MAAM,8BAA8B,EAAE,CAAC;IACvC,MAAM,wBAAwB,EAAE,CAAC;IACjC,MAAM,iBAAiB,EAAE,CAAC;IAC1B,MAAM,kBAAkB,EAAE,CAAC;IAG3B,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACtD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC;IAE7B,OAAO,CAAC,GAAG,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,SAAS,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,WAAW,CAAC,CAAC;IAEpD,IAAI,MAAM,GAAG,CAAC,EAAE;QACd,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAChD,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YAC7C,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;KACjB;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,CAAC;IAC7B,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC;IACvG,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;IAEzD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,WAAW,EAAE;KACV,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAChD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACf,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/lib/scripts/test-vault-dynamic.d.ts

@@ -0,0 +1,2 @@
+import 'reflect-metadata';
+//# sourceMappingURL=test-vault-dynamic.d.ts.map

package/lib/scripts/test-vault-dynamic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault-dynamic.d.ts","sourceRoot":"","sources":["../../scripts/test-vault-dynamic.ts"],"names":[],"mappings":"AAWA,OAAO,kBAAkB,CAAC"}

package/lib/scripts/test-vault-dynamic.js

@@ -0,0 +1,193 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+require("reflect-metadata");
+const class_validator_1 = require("class-validator");
+const vault_1 = require("../src/vault");
+class DynamicSecretsConfig {
+}
+__decorate([
+    (0, vault_1.VaultPath)('secret/data/configit/api'),
+    (0, vault_1.VaultKey)('api_key'),
+    (0, vault_1.VaultEngine)('kv-v2'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], DynamicSecretsConfig.prototype, "API_KEY", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('database/creds/configit-readonly'),
+    (0, vault_1.VaultKey)('username'),
+    (0, vault_1.VaultEngine)('database'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], DynamicSecretsConfig.prototype, "DB_USERNAME", void 0);
+__decorate([
+    (0, vault_1.VaultPath)('database/creds/configit-readonly'),
+    (0, vault_1.VaultKey)('password'),
+    (0, vault_1.VaultEngine)('database'),
+    (0, class_validator_1.IsString)(),
+    __metadata("design:type", String)
+], DynamicSecretsConfig.prototype, "DB_PASSWORD", void 0);
+const VAULT_CONFIG = {
+    endpoint: 'http://127.0.0.1:8200',
+    auth: {
+        methods: [{ type: 'token', config: { type: 'token', token: 'configit-dev-token' } }]
+    },
+    tls: { enabled: false, verifyCertificate: false },
+    refreshBuffer: 30
+};
+async function runDynamicSecretsTest() {
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m');
+    console.log('\x1b[1;34m  Dynamic Secrets Test (TTL-based Refresh)\x1b[0m');
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m\n');
+    const integration = new vault_1.VaultIntegration(VAULT_CONFIG);
+    try {
+        console.log('\x1b[1;33mStep 1: Initializing VaultIntegration...\x1b[0m');
+        await integration.initialize();
+        console.log('  \x1b[32m✓\x1b[0m Initialized\n');
+        console.log('\x1b[1;33mStep 2: Loading secrets (static + dynamic)...\x1b[0m');
+        await integration.loadSecrets(DynamicSecretsConfig);
+        console.log('  \x1b[32m✓\x1b[0m Secrets loaded\n');
+        console.log('\x1b[1;33mStep 3: Initial secret values:\x1b[0m');
+        const initialApiKey = integration.getSecret('API_KEY');
+        const initialDbUser = integration.getSecret('DB_USERNAME');
+        const initialDbPass = integration.getSecret('DB_PASSWORD');
+        console.log(`  API_KEY (static):    ${initialApiKey}`);
+        console.log(`  DB_USERNAME (dynamic): ${initialDbUser}`);
+        console.log(`  DB_PASSWORD (dynamic): ${initialDbPass === null || initialDbPass === void 0 ? void 0 : initialDbPass.substring(0, 8)}...`);
+        console.log('');
+        console.log('\x1b[1;33mStep 4: Checking health details...\x1b[0m');
+        const health = integration.getHealthDetails();
+        console.log(`  Connected: ${health.connected}`);
+        console.log(`  Cache size: ${health.cacheSize}`);
+        console.log(`  Refresh queue size: ${health.refreshQueueSize}`);
+        console.log('');
+        console.log('  \x1b[1;33mRefresh status per secret:\x1b[0m');
+        for (const status of health.refreshStatus) {
+            const timeUntil = Math.round(status.timeUntilRefresh / 1000);
+            console.log(`    - ${status.propertyName}:`);
+            console.log(`        Scheduled: ${status.scheduled}`);
+            console.log(`        Time until refresh: ${timeUntil}s`);
+        }
+        console.log('');
+        console.log('\x1b[1;33mStep 5: Observing TTL behavior (waiting 35 seconds)...\x1b[0m');
+        console.log('  Dynamic credentials have 60s TTL, refresh buffer is 30s');
+        console.log('  So refresh should trigger at ~30s mark\n');
+        for (let i = 1; i <= 4; i++) {
+            await sleep(10000);
+            const elapsed = i * 10;
+            console.log(`  \x1b[36m[${elapsed}s elapsed]\x1b[0m`);
+            const currentDbUser = integration.getSecret('DB_USERNAME');
+            const currentDbPass = integration.getSecret('DB_PASSWORD');
+            const currentHealth = integration.getHealthDetails();
+            const userChanged = currentDbUser !== initialDbUser;
+            const passChanged = currentDbPass !== initialDbPass;
+            if (userChanged) {
+                console.log(`    DB_USERNAME: \x1b[33mCHANGED\x1b[0m ${initialDbUser} → ${currentDbUser}`);
+            }
+            else {
+                console.log(`    DB_USERNAME: ${currentDbUser} (unchanged)`);
+            }
+            if (passChanged) {
+                console.log(`    DB_PASSWORD: \x1b[33mCHANGED\x1b[0m`);
+            }
+            else {
+                console.log(`    DB_PASSWORD: ...${currentDbPass === null || currentDbPass === void 0 ? void 0 : currentDbPass.slice(-4)} (unchanged)`);
+            }
+            const dbUserStatus = currentHealth.refreshStatus.find((s) => s.propertyName === 'DB_USERNAME');
+            if (dbUserStatus) {
+                const timeUntil = Math.max(0, Math.round(dbUserStatus.timeUntilRefresh / 1000));
+                console.log(`    Refresh in: ${timeUntil}s, Count: ${dbUserStatus.refreshCount}`);
+            }
+            console.log('');
+        }
+        console.log('\x1b[1;33mStep 6: Verifying credential rotation...\x1b[0m');
+        const finalDbUser = integration.getSecret('DB_USERNAME');
+        const finalDbPass = integration.getSecret('DB_PASSWORD');
+        const apiKeyUnchanged = integration.getSecret('API_KEY') === initialApiKey;
+        const dbRotated = finalDbUser !== initialDbUser || finalDbPass !== initialDbPass;
+        console.log(`  API_KEY unchanged: ${apiKeyUnchanged ? '\x1b[32m✓\x1b[0m' : '\x1b[31m✗\x1b[0m'}`);
+        console.log(`  DB credentials rotated: ${dbRotated ? '\x1b[32m✓\x1b[0m' : '\x1b[31m✗\x1b[0m (may need more time)'}`);
+        console.log('');
+        console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m');
+        if (apiKeyUnchanged) {
+            console.log('\x1b[32m  ✓ Test completed!\x1b[0m');
+            console.log('\x1b[32m    - Static secrets remain stable\x1b[0m');
+            if (dbRotated) {
+                console.log('\x1b[32m    - Dynamic secrets were rotated based on TTL\x1b[0m');
+            }
+            else {
+                console.log('\x1b[33m    - Dynamic secrets not rotated yet (TTL ~60s, may need more time)\x1b[0m');
+            }
+        }
+        else {
+            console.log('\x1b[31m  ✗ Unexpected behavior\x1b[0m');
+        }
+        console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m\n');
+        return true;
+    }
+    catch (error) {
+        console.error('\n\x1b[31m✗ Test failed:\x1b[0m', error.message);
+        if (error.message.includes('connection refused') || error.message.includes('ECONNREFUSED')) {
+            console.log('\n\x1b[33mMake sure Vault and PostgreSQL are running:\x1b[0m');
+            console.log('  docker compose -f docker-compose.vault.yml up -d');
+            console.log('  bash scripts/vault-setup.sh');
+        }
+        return false;
+    }
+    finally {
+        integration.shutdown();
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function testDirectDynamicRead() {
+    var _a, _b, _c;
+    console.log('\n\x1b[1;34m' + '='.repeat(60) + '\x1b[0m');
+    console.log('\x1b[1;34m  Direct Dynamic Credential Read Test\x1b[0m');
+    console.log('\x1b[1;34m' + '='.repeat(60) + '\x1b[0m\n');
+    const provider = new vault_1.VaultProvider(VAULT_CONFIG);
+    try {
+        await provider.initialize();
+        console.log('\x1b[32m✓\x1b[0m Provider initialized\n');
+        console.log('Reading database/creds/configit-readonly (1st time)...');
+        const creds1 = await provider.read('database/creds/configit-readonly');
+        console.log(`  Username: ${creds1.data.username}`);
+        console.log(`  Password: ${(_a = creds1.data.password) === null || _a === void 0 ? void 0 : _a.substring(0, 8)}...`);
+        console.log(`  TTL: ${creds1.leaseDuration}s`);
+        console.log(`  Lease ID: ${(_b = creds1.leaseId) === null || _b === void 0 ? void 0 : _b.substring(0, 30)}...`);
+        console.log(`  Renewable: ${creds1.renewable}`);
+        console.log('');
+        console.log('Reading database/creds/configit-readonly (2nd time)...');
+        const creds2 = await provider.read('database/creds/configit-readonly');
+        console.log(`  Username: ${creds2.data.username}`);
+        console.log(`  Password: ${(_c = creds2.data.password) === null || _c === void 0 ? void 0 : _c.substring(0, 8)}...`);
+        console.log('');
+        const different = creds1.data.username !== creds2.data.username;
+        console.log(`Credentials different on each read: ${different ? '\x1b[32m✓ Yes (expected)\x1b[0m' : '\x1b[31m✗ No\x1b[0m'}`);
+        console.log('\n\x1b[33mNote: Each read generates NEW credentials (this is how dynamic secrets work)\x1b[0m\n');
+        return true;
+    }
+    catch (error) {
+        console.error('\x1b[31m✗ Error:\x1b[0m', error.message);
+        return false;
+    }
+}
+async function main() {
+    const directTestPassed = await testDirectDynamicRead();
+    const integrationTestPassed = await runDynamicSecretsTest();
+    process.exit(directTestPassed && integrationTestPassed ? 0 : 1);
+}
+main().catch((error) => {
+    console.error('Unexpected error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=test-vault-dynamic.js.map

package/lib/scripts/test-vault-dynamic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-vault-dynamic.js","sourceRoot":"","sources":["../../scripts/test-vault-dynamic.ts"],"names":[],"mappings":";;;;;;;;;;;AAWA,4BAA0B;AAC1B,qDAA2C;AAC3C,wCAOsB;AAKtB,MAAM,oBAAoB;CAqBzB;AAfC;IAJC,IAAA,iBAAS,EAAC,0BAA0B,CAAC;IACrC,IAAA,gBAAQ,EAAC,SAAS,CAAC;IACnB,IAAA,mBAAW,EAAC,OAAO,CAAC;IACpB,IAAA,0BAAQ,GAAE;;qDACM;AAOjB;IAJC,IAAA,iBAAS,EAAC,kCAAkC,CAAC;IAC7C,IAAA,gBAAQ,EAAC,UAAU,CAAC;IACpB,IAAA,mBAAW,EAAC,UAAU,CAAC;IACvB,IAAA,0BAAQ,GAAE;;yDACU;AAOrB;IAJC,IAAA,iBAAS,EAAC,kCAAkC,CAAC;IAC7C,IAAA,gBAAQ,EAAC,UAAU,CAAC;IACpB,IAAA,mBAAW,EAAC,UAAU,CAAC;IACvB,IAAA,0BAAQ,GAAE;;yDACU;AAGvB,MAAM,YAAY,GAAwB;IACxC,QAAQ,EAAE,uBAAuB;IACjC,IAAI,EAAE;QACJ,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,CAAC;KACrF;IACD,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE;IACjD,aAAa,EAAE,EAAE;CAClB,CAAC;AAEF,KAAK,UAAU,qBAAqB;IAClC,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACvD,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;IAEzD,MAAM,WAAW,GAAG,IAAI,wBAAgB,CAAC,YAAY,CAAC,CAAC;IAEvD,IAAI;QAEF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,MAAM,WAAW,CAAC,UAAU,EAAE,CAAC;QAC/B,OAAO,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QAGhD,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;QAC9E,MAAM,WAAW,CAAC,WAAW,CAAC,oBAAoB,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;QAGnD,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,0BAA2B,aAAc,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,4BAA6B,aAAc,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,4BAA6B,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAE,KAAK,CAAC,CAAC;QAC/E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAGhB,OAAO,CAAC,GAAG,CAAC,qDAAqD,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,gBAAiB,MAAM,CAAC,SAAU,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,iBAAkB,MAAM,CAAC,SAAU,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,yBAA0B,MAAM,CAAC,gBAAiB,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,OAAO,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QAC7D,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE;YACzC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;YAC7D,OAAO,CAAC,GAAG,CAAC,SAAU,MAAM,CAAC,YAAa,GAAG,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,sBAAuB,MAAM,CAAC,SAAU,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,GAAG,CAAC,+BAAgC,SAAU,GAAG,CAAC,CAAC;SAC5D;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAGhB,OAAO,CAAC,GAAG,CAAC,yEAAyE,CAAC,CAAC;QACvF,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;QAG1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE;YAC3B,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,cAAe,OAAQ,mBAAmB,CAAC,CAAC;YAExD,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YAC3D,MAAM,aAAa,GAAG,WAAW,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,WAAW,GAAG,aAAa,KAAK,aAAa,CAAC;YACpD,MAAM,WAAW,GAAG,aAAa,KAAK,aAAa,CAAC;YAEpD,IAAI,WAAW,EAAE;gBACf,OAAO,CAAC,GAAG,CAAC,2CAA4C,aAAc,MAAO,aAAc,EAAE,CAAC,CAAC;aAChG;iBAAM;gBACL,OAAO,CAAC,GAAG,CAAC,oBAAqB,aAAc,cAAc,CAAC,CAAC;aAChE;YAED,IAAI,WAAW,EAAE;gBACf,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;aACxD;iBAAM;gBACL,OAAO,CAAC,GAAG,CAAC,uBAAuB,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;aAC5E;YAGD,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC;YAC/F,IAAI,YAAY,EAAE;gBAChB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC,CAAC;gBAChF,OAAO,CAAC,GAAG,CAAC,mBAAoB,SAAU,aAAc,YAAY,CAAC,YAAa,EAAE,CAAC,CAAC;aACvF;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SACjB;QAGD,OAAO,CAAC,GAAG,CAAC,2DAA2D,CAAC,CAAC;QACzE,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,WAAW,GAAG,WAAW,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACzD,MAAM,eAAe,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,aAAa,CAAC;QAC3E,MAAM,SAAS,GAAG,WAAW,KAAK,aAAa,IAAI,WAAW,KAAK,aAAa,CAAC;QAEjF,OAAO,CAAC,GAAG,CAAC,wBAAyB,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,kBAAmB,EAAE,CAAC,CAAC;QACnG,OAAO,CAAC,GAAG,CAAC,6BAA8B,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,uCAAwC,EAAE,CAAC,CAAC;QACvH,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAGhB,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;QACvD,IAAI,eAAe,EAAE;YACnB,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;YACjE,IAAI,SAAS,EAAE;gBACb,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;aAC/E;iBAAM;gBACL,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;aACpG;SACF;aAAM;YACL,OAAO,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC;SACvD;QACD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;QAEzD,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAEhE,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE;YAC1F,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;SAC9C;QAED,OAAO,KAAK,CAAC;KACd;YAAS;QACR,WAAW,CAAC,QAAQ,EAAE,CAAC;KACxB;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAKD,KAAK,UAAU,qBAAqB;;IAClC,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;IACtE,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;IAEzD,MAAM,QAAQ,GAAG,IAAI,qBAAa,CAAC,YAAY,CAAC,CAAC;IAEjD,IAAI;QACF,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAGvD,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,eAAgB,MAAM,CAAC,IAAI,CAAC,QAAS,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,eAAgB,MAAA,MAAM,CAAC,IAAI,CAAC,QAAQ,0CAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAE,KAAK,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,UAAW,MAAM,CAAC,aAAc,GAAG,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,eAAgB,MAAA,MAAM,CAAC,OAAO,0CAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAE,KAAK,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,gBAAiB,MAAM,CAAC,SAAU,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,OAAO,CAAC,GAAG,CAAC,wDAAwD,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,eAAgB,MAAM,CAAC,IAAI,CAAC,QAAS,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,eAAgB,MAAA,MAAM,CAAC,IAAI,CAAC,QAAQ,0CAAE,SAAS,CAAC,CAAC,EAAE,CAAC,CAAE,KAAK,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,uCAAwC,SAAS,CAAC,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,qBAAsB,EAAE,CAAC,CAAC;QAC9H,OAAO,CAAC,GAAG,CAAC,iGAAiG,CAAC,CAAC;QAE/G,OAAO,IAAI,CAAC;KACb;IAAC,OAAO,KAAU,EAAE;QACnB,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,KAAK,CAAC;KACd;AACH,CAAC;AAGD,KAAK,UAAU,IAAI;IACjB,MAAM,gBAAgB,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACvD,MAAM,qBAAqB,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAE5D,OAAO,CAAC,IAAI,CAAC,gBAAgB,IAAI,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;IAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}