@mouryaamit/nx-polystack 0.0.0-stage → 1.0.1

package/dist/src/lib/env-encryption/encrypt.js

@@ -0,0 +1,407 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setStringFields = exports.encryptProfileText = exports.encryptEnvText = exports.plainKeys = exports.ENC_CLOSE = exports.ENC_OPEN = exports.encryptValue = void 0;
+const config_1 = require("./config");
+const env_file_1 = require("./env-file");
+const gcm_1 = require("./gcm");
+const sensitive_1 = require("./sensitive");
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const CryptoJS = require('crypto-js');
+const escapeRegex = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+/** CryptoJS AES with a passphrase (OpenSSL-compatible base64), the format apps decrypt today. */
+const encryptValue = (plain, passphrase) => CryptoJS.AES.encrypt(plain, passphrase).toString();
+exports.encryptValue = encryptValue;
+const plaintexts = (pairs) => pairs.map((p) => p.value);
+exports.ENC_OPEN = 'ENC(';
+exports.ENC_CLOSE = ')';
+const isEncMarked = (v) => (v.startsWith(exports.ENC_OPEN) && v.endsWith(exports.ENC_CLOSE)) || (0, gcm_1.isEnc2)(v);
+/** Whether committed values already in ENC(...)/ENC2(...) form are refused. */
+const refusesCommitted = (cfg) => cfg.format === 'enc' || cfg.cipher === 'aes-gcm';
+/** Committed values already in ENC(...)/ENC2(...) form are ambiguous: refuse them. */
+function refuseCommittedEnc(cfg, file, keys) {
+    if (refusesCommitted(cfg) && keys.length > 0) {
+        fail(file, keys, 'values already in ENC(...)/ENC2(...) form; commit the plaintext value instead');
+    }
+}
+/** Encrypts a value (AAD = the name of the property holding it) and wraps it as configured. */
+function sealer(cfg, secret, pairs) {
+    // A programming error, not a configuration one: the caller passed the other cipher's key.
+    if (cfg.cipher === 'aes-gcm' && !Buffer.isBuffer(secret)) {
+        throw new Error('env encryption: aes-gcm needs the derived 32-byte key, not a passphrase.');
+    }
+    if (cfg.cipher !== 'aes-gcm' && Buffer.isBuffer(secret)) {
+        throw new Error('env encryption: cryptojs needs a passphrase, not a derived key.');
+    }
+    return (plain, holder) => {
+        pairs.push({ key: holder, value: plain });
+        if (Buffer.isBuffer(secret))
+            return (0, gcm_1.encryptGcm)(secret, plain, holder);
+        const c = (0, exports.encryptValue)(plain, secret);
+        return cfg.format === 'enc' ? `${exports.ENC_OPEN}${c}${exports.ENC_CLOSE}` : c;
+    };
+}
+/** A `key:` in object-key position (after `{` or `,`): the whole identifier, non-ASCII included. */
+const HOLDER = /(?:^|[{,])\s*([A-Za-z_$\u0080-\uffff][\w$\u0080-\uffff]*)\s*:\s*$/;
+/** A quoted `'key':` in object-key position: its content (escapes kept). */
+const QUOTED_HOLDER = /(?:^|[{,])\s*(['"])((?:\\[\s\S]|(?!\1)[^\\\n])*)\1\s*:\s*$/;
+/**
+ * The name of the property holding a value that follows `before` (what `Object.keys` gives at
+ * runtime: a quoted key unescaped), or undefined when the value is not a property value.
+ */
+function holderOf(before) {
+    const code = (0, env_file_1.stripComments)(before);
+    const quoted = QUOTED_HOLDER.exec(code);
+    if (quoted)
+        return (0, env_file_1.unescapeString)(quoted[2]);
+    return HOLDER.exec(code)?.[1];
+}
+/**
+ * Fields kept plain in `all` mode: the publicKeys. Stamp fields are not exempt: they are encrypted
+ * after stamping unless listed there (the default list has `timeStamp` but not the branch).
+ */
+function plainKeys(cfg) {
+    return new Set(cfg.publicKeys);
+}
+exports.plainKeys = plainKeys;
+/** Never prints values: they may be secrets (placeholders are already filled). */
+function fail(file, what, why) {
+    throw new Error(`env encryption (${file}): ${why}: ${what.join(', ')}.`);
+}
+/**
+ * Encrypts an env file's text by the workspace settings. `listed`: every `key: '<literal>'` of a
+ * listed key at any depth (the match used before v0.25.0); listed top-level keys with other
+ * values are left alone and reported in `skipped`. `all`: every top-level string literal except
+ * plain keys; anything the scanner cannot read as a field, and non-literal values of non-plain
+ * keys, fail the build.
+ */
+function encryptEnvText(text, cfg, envProject, secret, file = 'environment file') {
+    const scan = (0, env_file_1.scanEnvironment)(text);
+    const fields = scan.fields;
+    const encrypted = [];
+    const pairs = [];
+    const seal = sealer(cfg, secret, pairs);
+    if (cfg.mode === 'listed') {
+        const keys = (0, config_1.listedKeys)(cfg, envProject);
+        const skipped = fields
+            .filter((f) => keys.includes(f.key) && f.kind === 'expression')
+            .map((f) => f.key);
+        // Same fields as the regex used before v0.25.0 (`<key>\s*:\s*'<value>'` anywhere in the file,
+        // key not anchored to a word start), but the string is read by the scanner, so quotes and
+        // escapes inside the value are handled and the value is encrypted as the app would see it.
+        // aes-gcm also matches quoted keys (`'my-Key': …`); cryptojs keeps the match above unchanged.
+        const quote = cfg.cipher === 'aes-gcm' ? `['"]?` : '';
+        const keyRes = keys.map((k) => ({
+            key: k,
+            re: new RegExp(`${escapeRegex(k)}${quote}\\s*:\\s*$`),
+        }));
+        let out = '';
+        let last = 0;
+        const committed = [];
+        // aes-gcm values are decrypted from the environment object only: hits elsewhere would stay
+        // encrypted in the app, so they fail the build.
+        const envOpen = (0, env_file_1.environmentObjectStart)(text);
+        const envClose = envOpen < 0 ? -1 : (0, env_file_1.closingBracket)(text, envOpen);
+        const outside = [];
+        const unheld = [];
+        for (const str of (0, env_file_1.quotedStrings)(text)) {
+            if (str.content === '')
+                continue;
+            const before = text.slice(Math.max(0, str.start - 200), str.start);
+            const hit = keyRes.find((k) => k.re.test(before));
+            if (!hit)
+                continue;
+            if (cfg.cipher === 'aes-gcm' && !(str.start > envOpen && str.start < envClose)) {
+                outside.push(hit.key);
+                continue;
+            }
+            // aes-gcm binds each value to the property holding it; cryptojs ignores the holder.
+            const holder = holderOf(before);
+            if (cfg.cipher === 'aes-gcm' && holder === undefined) {
+                unheld.push(hit.key);
+                continue;
+            }
+            if (isEncMarked((0, env_file_1.unescapeString)(str.content)))
+                committed.push(hit.key);
+            out +=
+                text.slice(last, str.start) +
+                    str.quote +
+                    seal((0, env_file_1.unescapeString)(str.content), holder ?? hit.key) +
+                    str.quote;
+            last = str.end;
+            encrypted.push(hit.key);
+        }
+        out += text.slice(last);
+        if (outside.length > 0) {
+            fail(file, [...new Set(outside)], 'listed key outside the environment object; aes-gcm only decrypts environment fields — move it into environment or unlist it');
+        }
+        if (unheld.length > 0) {
+            fail(file, [...new Set(unheld)], 'listed key matched a value with no property name holding it (aes-gcm binds each value to its property name) — write it as `name: value` or unlist it');
+        }
+        refuseCommittedEnc(cfg, file, [...new Set(committed)]);
+        return {
+            text: out,
+            encrypted: [...new Set(encrypted)],
+            skipped,
+            values: plaintexts(pairs),
+            pairs,
+        };
+    }
+    if (!scan.found) {
+        fail(file, ['export const environment = { … }'], 'mode "all" found no environment object');
+    }
+    if (scan.unkeyed.length > 0) {
+        fail(file, scan.unkeyed, 'mode "all" needs every field written as `key: value` (no shorthand, spread or computed keys)');
+    }
+    const plain = plainKeys(cfg);
+    // Stamp fields the build cannot fill (not a string literal) are left as they are (not encrypted).
+    const stampKeys = new Set([cfg.stamp?.timeField, cfg.stamp?.branchField].filter(Boolean));
+    const bad = fields
+        .filter((f) => f.kind === 'expression' && !plain.has(f.key) && !stampKeys.has(f.key))
+        .map((f) => f.key);
+    if (bad.length > 0) {
+        fail(file, bad, 'in mode "all" every non-public field must be a literal (make it one or add it to publicKeys)');
+    }
+    refuseCommittedEnc(cfg, file, fields
+        .filter((f) => f.kind === 'string' && f.text && isEncMarked((0, env_file_1.unescapeString)(f.text)))
+        .map((f) => f.key));
+    let out = '';
+    let last = 0;
+    for (const f of fields) {
+        if (f.kind !== 'string' || plain.has(f.key) || f.text === undefined || f.text === '')
+            continue;
+        const q = text[f.start] === '`' ? "'" : text[f.start];
+        out += text.slice(last, f.start) + q + seal((0, env_file_1.unescapeString)(f.text), f.key) + q;
+        last = f.end;
+        encrypted.push(f.key);
+    }
+    out += text.slice(last);
+    return { text: out, encrypted, skipped: [], values: plaintexts(pairs), pairs };
+}
+exports.encryptEnvText = encryptEnvText;
+/** `key:` at the end of `before`, in object-key position (after `{` or `,`). */
+const KEY_POSITION = /(?:^|[{,])\s*(['"]?)([A-Za-z_$][\w$-]*)\1\s*:\s*$/;
+/**
+ * Where profile strings are object property values or items of arrays that are property values,
+ * in object literals only (not type literals, interfaces, parameters, calls, index access or
+ * ternaries).
+ */
+class ProfileShape {
+    constructor(text) {
+        this.text = text;
+        this.literal = new Map();
+        this.structure = (0, env_file_1.scanStructure)(text);
+    }
+    get strings() {
+        return this.structure.strings;
+    }
+    get brackets() {
+        return this.structure.brackets;
+    }
+    /** The key when `index` follows `key:` in object-key position, else undefined. */
+    keyBefore(index) {
+        const before = (0, env_file_1.stripComments)(this.text.slice(Math.max(0, index - 300), index));
+        return KEY_POSITION.exec(before)?.[2];
+    }
+    /** Whether the `{` at `open` starts an object literal (not a type, interface or block). */
+    isObjectLiteral(open) {
+        const cached = this.literal.get(open);
+        if (cached !== undefined)
+            return cached;
+        const b = this.structure.brackets.get(open);
+        let result = false;
+        if (b?.char === '{') {
+            const before = (0, env_file_1.stripComments)(this.text.slice(Math.max(0, open - 300), open)).trimEnd();
+            const prev = before.slice(-1);
+            if (prev === '=') {
+                result = !/\btype\s+[\w$]+(\s*<[^>]*>)?\s*=$/.test(before) && !/[=!<>]=$/.test(before);
+            }
+            else if (prev === ':') {
+                result =
+                    this.keyBefore(open) !== undefined && b.parent >= 0 && this.isObjectLiteral(b.parent);
+            }
+            else if (prev === '[' || prev === ',') {
+                const parent = b.parent >= 0 ? this.structure.brackets.get(b.parent) : undefined;
+                result =
+                    (parent?.char === '[' && this.isValueArray(b.parent)) ||
+                        (parent?.char === '(' && this.isCallArgs(b.parent));
+            }
+            else if (prev === '(') {
+                // createProfile({ … }), Object.freeze({ … }), () => ({ … })
+                result = this.isCallArgs(b.parent) || /=>\s*\($/.test(before);
+            }
+            else {
+                result = /\b(?:return|default)$/.test(before);
+            }
+        }
+        this.literal.set(open, result);
+        return result;
+    }
+    /** Whether the `(` at `open` holds call arguments (not parameters of a declaration). */
+    isCallArgs(open) {
+        const b = open >= 0 ? this.structure.brackets.get(open) : undefined;
+        if (b?.char !== '(')
+            return false;
+        const before = (0, env_file_1.stripComments)(this.text.slice(Math.max(0, open - 300), open)).trimEnd();
+        if (/\bfunction\s*[\w$]*\s*(<[^>]*>)?$/.test(before))
+            return false;
+        return /[\w$)\]]$/.test(before) && !/\b(if|for|while|switch|catch|with)$/.test(before);
+    }
+    /** Whether the `[` at `open` is an array value: assigned, exported, returned, a property or an argument. */
+    isValueArray(open) {
+        const b = this.structure.brackets.get(open);
+        if (b?.char !== '[')
+            return false;
+        if (this.isPropertyArray(open))
+            return true;
+        const before = (0, env_file_1.stripComments)(this.text.slice(Math.max(0, open - 300), open)).trimEnd();
+        const prev = before.slice(-1);
+        if (prev === '=')
+            return !/[=!<>]=$/.test(before) && !/\btype\s+[\w$]+(\s*<[^>]*>)?\s*=$/.test(before);
+        if (prev === '(' || prev === ',') {
+            const parent = b.parent >= 0 ? this.structure.brackets.get(b.parent) : undefined;
+            if (parent?.char === '(')
+                return this.isCallArgs(b.parent);
+            if (parent?.char === '[')
+                return this.isValueArray(b.parent);
+            return false;
+        }
+        return /\b(?:return|default)$/.test(before) || /=>$/.test(before);
+    }
+    /** Whether the `[` at `open` is an array that is a property value of an object literal. */
+    isPropertyArray(open) {
+        const b = this.structure.brackets.get(open);
+        if (b?.char !== '[' || b.parent < 0)
+            return false;
+        return this.keyBefore(open) !== undefined && this.isObjectLiteral(b.parent);
+    }
+    /** How a string is used: a property value (with its key), an array item, or neither. */
+    roleOf(str) {
+        const next = (0, env_file_1.nextCode)(this.text, str.end);
+        const ends = /^([,}\]]|as\s|satisfies\s|$)/.test(next);
+        if (!ends || str.parent < 0)
+            return undefined;
+        const parent = this.structure.brackets.get(str.parent);
+        if (parent?.char === '{') {
+            const key = this.keyBefore(str.start);
+            return key !== undefined && this.isObjectLiteral(str.parent)
+                ? { kind: 'value', key }
+                : undefined;
+        }
+        if (parent?.char === '[' && this.isPropertyArray(str.parent)) {
+            const prev = (0, env_file_1.stripComments)(this.text.slice(Math.max(0, str.start - 50), str.start))
+                .trimEnd()
+                .slice(-1);
+            if (prev !== '[' && prev !== ',')
+                return undefined;
+            return { kind: 'item', key: this.keyBefore(str.parent) };
+        }
+        return undefined;
+    }
+}
+/**
+ * Encrypts a profile file (e.g. app.profile.ts): in object literals, string values of
+ * sensitive-looking keys (and items of arrays under them), and property values or array items
+ * equal to one of `secretValues` (values already encrypted from the env file). Keys, types,
+ * imports and other code are never touched; messages name keys, never values.
+ */
+function encryptProfileText(text, cfg, secret, secretValues, file = 'profile file') {
+    const pairs = [];
+    const seal = sealer(cfg, secret, pairs);
+    const encrypted = [];
+    const committed = [];
+    const shape = new ProfileShape(text);
+    const sealedAt = new Set();
+    let out = '';
+    let last = 0;
+    for (const str of shape.strings) {
+        if (str.content === '')
+            continue;
+        const role = shape.roleOf(str);
+        if (!role)
+            continue;
+        const value = (0, env_file_1.unescapeString)(str.content);
+        const sensitive = (0, sensitive_1.isSensitiveKey)(role.key);
+        if (!sensitive && !secretValues.has(value))
+            continue;
+        if (refusesCommitted(cfg) && isEncMarked(value)) {
+            committed.push(role.key);
+            continue;
+        }
+        out += text.slice(last, str.start) + str.quote + seal(value, role.key) + str.quote;
+        last = str.end;
+        sealedAt.add(str.start);
+        encrypted.push(sensitive ? role.key : `${role.key} (same value as an env field)`);
+    }
+    out += text.slice(last);
+    refuseCommittedEnc(cfg, file, [...new Set(committed)]);
+    return {
+        text: out,
+        encrypted: [...new Set(encrypted)],
+        skipped: sensitiveNonLiterals(text, shape, sealedAt),
+        values: plaintexts(pairs),
+        pairs,
+    };
+}
+exports.encryptProfileText = encryptProfileText;
+/**
+ * Sensitive-looking properties of object literals whose value is neither a plain string, a
+ * nested object or array, nor a boolean/number: left as they are, so the build names them.
+ */
+function sensitiveNonLiterals(text, shape, sealedAt) {
+    const keys = new Set();
+    for (const m of text.matchAll(/(['"]?)([A-Za-z_$][\w$-]*)\1\s*:/g)) {
+        const at = m.index ?? 0;
+        const key = m[2];
+        if (!(0, sensitive_1.isSensitiveKey)(key) || !(0, env_file_1.isCodeAt)(text, at))
+            continue;
+        const valueAt = at + m[0].length;
+        if (shape.keyBefore(valueAt) !== key)
+            continue;
+        const next = (0, env_file_1.nextCode)(text, valueAt);
+        if (next[0] === "'" || next[0] === '"') {
+            // A string after a sensitive key that was not encrypted (unknown context, concatenation…).
+            const str = shape.strings.find((s) => s.start >= valueAt && text.slice(valueAt, s.start).trim() === '');
+            // An empty string holds nothing to encrypt (a default or reset value).
+            if (str && str.content !== '' && !sealedAt.has(str.start))
+                keys.add(key);
+            continue;
+        }
+        if (/^([{[]|true\b|false\b|null\b|undefined\b|-?\d)/.test(next))
+            continue;
+        // Other values only in object literals (not interfaces, parameters or type annotations).
+        const parent = enclosingBrace(shape, at);
+        if (parent < 0 || !shape.isObjectLiteral(parent))
+            continue;
+        keys.add(key);
+    }
+    return [...keys];
+}
+/** The innermost `{` that encloses `index`, or -1. */
+function enclosingBrace(shape, index) {
+    let best = -1;
+    for (const [open, b] of shape.brackets) {
+        if (b.char === '{' && open < index && index < b.close && open > best)
+            best = open;
+    }
+    return best;
+}
+/** Sets declared string fields (e.g. timeStamp, branch) to the given values. */
+function setStringFields(text, values) {
+    const set = [];
+    let out = '';
+    let last = 0;
+    for (const f of (0, env_file_1.environmentFields)(text)) {
+        const v = values[f.key];
+        if (v === undefined || f.kind !== 'string')
+            continue;
+        const q = text[f.start] === '`' ? "'" : text[f.start];
+        const escaped = v.replace(/\\/g, '\\\\').replace(new RegExp(q, 'g'), `\\${q}`);
+        out += text.slice(last, f.start) + q + escaped + q;
+        last = f.end;
+        set.push(f.key);
+    }
+    out += text.slice(last);
+    return { text: out, set };
+}
+exports.setStringFields = setStringFields;
+//# sourceMappingURL=encrypt.js.map

package/dist/src/lib/env-encryption/encrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypt.js","sourceRoot":"","sources":["../../../../src/lib/env-encryption/encrypt.ts"],"names":[],"mappings":";;;AAAA,qCAA2D;AAC3D,yCAaoB;AACpB,+BAA2C;AAC3C,2CAA6C;AAE7C,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;AAEtC,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AAE5E,iGAAiG;AAC1F,MAAM,YAAY,GAAG,CAAC,KAAa,EAAE,UAAkB,EAAU,EAAE,CACxE,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;AADxC,QAAA,YAAY,gBAC4B;AAkBrD,MAAM,UAAU,GAAG,CAAC,KAAmB,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAEzD,QAAA,QAAQ,GAAG,MAAM,CAAC;AAClB,QAAA,SAAS,GAAG,GAAG,CAAC;AAC7B,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,iBAAS,CAAC,CAAC,IAAI,IAAA,YAAM,EAAC,CAAC,CAAC,CAAC;AAElG,+EAA+E;AAC/E,MAAM,gBAAgB,GAAG,CAAC,GAAwB,EAAE,EAAE,CACpD,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC;AAEnD,sFAAsF;AACtF,SAAS,kBAAkB,CAAC,GAAwB,EAAE,IAAY,EAAE,IAAc;IAChF,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE;QAC5C,IAAI,CACF,IAAI,EACJ,IAAI,EACJ,+EAA+E,CAChF,CAAC;KACH;AACH,CAAC;AAKD,+FAA+F;AAC/F,SAAS,MAAM,CAAC,GAAwB,EAAE,MAAiB,EAAE,KAAmB;IAC9E,0FAA0F;IAC1F,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;QACxD,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;KAC7F;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;QACvD,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;KACpF;IACD,OAAO,CAAC,KAAa,EAAE,MAAc,EAAU,EAAE;QAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,IAAA,gBAAU,EAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,IAAA,oBAAY,EAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,gBAAQ,GAAG,CAAC,GAAG,iBAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,MAAM,GAAG,mEAAmE,CAAC;AACnF,4EAA4E;AAC5E,MAAM,aAAa,GAAG,4DAA4D,CAAC;AAEnF;;;GAGG;AACH,SAAS,QAAQ,CAAC,MAAc;IAC9B,MAAM,IAAI,GAAG,IAAA,wBAAa,EAAC,MAAM,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,MAAM;QAAE,OAAO,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAC,GAAwB;IAChD,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAFD,8BAEC;AAED,kFAAkF;AAClF,SAAS,IAAI,CAAC,IAAY,EAAE,IAAc,EAAE,GAAW;IACrD,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,MAAM,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,cAAc,CAC5B,IAAY,EACZ,GAAwB,EACxB,UAAkB,EAClB,MAAiB,EACjB,IAAI,GAAG,kBAAkB;IAEzB,MAAM,IAAI,GAAG,IAAA,0BAAe,EAAC,IAAI,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE;QACzB,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM;aACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC;aAC9D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,8FAA8F;QAC9F,0FAA0F;QAC1F,2FAA2F;QAC3F,8FAA8F;QAC9F,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9B,GAAG,EAAE,CAAC;YACN,EAAE,EAAE,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,KAAK,YAAY,CAAC;SACtD,CAAC,CAAC,CAAC;QACJ,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,2FAA2F;QAC3F,gDAAgD;QAChD,MAAM,OAAO,GAAG,IAAA,iCAAsB,EAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAA,yBAAc,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAClE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAA,wBAAa,EAAC,IAAI,CAAC,EAAE;YACrC,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE;gBAAE,SAAS;YACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,IAAI,CAAC,GAAG;gBAAE,SAAS;YACnB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,OAAO,IAAI,GAAG,CAAC,KAAK,GAAG,QAAQ,CAAC,EAAE;gBAC9E,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACtB,SAAS;aACV;YACD,oFAAoF;YACpF,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAChC,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE;gBACpD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACrB,SAAS;aACV;YACD,IAAI,WAAW,CAAC,IAAA,yBAAc,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAAE,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtE,GAAG;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC;oBAC3B,GAAG,CAAC,KAAK;oBACT,IAAI,CAAC,IAAA,yBAAc,EAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC;oBACpD,GAAG,CAAC,KAAK,CAAC;YACZ,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;YACf,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;SACzB;QACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;YACtB,IAAI,CACF,IAAI,EACJ,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,EACrB,6HAA6H,CAC9H,CAAC;SACH;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;YACrB,IAAI,CACF,IAAI,EACJ,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,EACpB,sJAAsJ,CACvJ,CAAC;SACH;QACD,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACvD,OAAO;YACL,IAAI,EAAE,GAAG;YACT,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;YAClC,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;YACzB,KAAK;SACN,CAAC;KACH;IACD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;QACf,IAAI,CAAC,IAAI,EAAE,CAAC,kCAAkC,CAAC,EAAE,wCAAwC,CAAC,CAAC;KAC5F;IACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE;QAC3B,IAAI,CACF,IAAI,EACJ,IAAI,CAAC,OAAO,EACZ,8FAA8F,CAC/F,CAAC;KACH;IACD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,kGAAkG;IAClG,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,MAAM,GAAG,GAAG,MAAM;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;SACpF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;QAClB,IAAI,CACF,IAAI,EACJ,GAAG,EACH,8FAA8F,CAC/F,CAAC;KACH;IACD,kBAAkB,CAChB,GAAG,EACH,IAAI,EACJ,MAAM;SACH,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC,IAAA,yBAAc,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;SACnF,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CACrB,CAAC;IACF,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE;QACtB,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE;YAAE,SAAS;QAC/F,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAA,yBAAc,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/E,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC;QACb,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;KACvB;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC;AACjF,CAAC;AA5HD,wCA4HC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAAG,mDAAmD,CAAC;AAEzE;;;;GAIG;AACH,MAAM,YAAY;IAIhB,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QAHxB,YAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;QAIpD,IAAI,CAAC,SAAS,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;IAChC,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;IACjC,CAAC;IAED,kFAAkF;IAClF,SAAS,CAAC,KAAa;QACrB,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC/E,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,2FAA2F;IAC3F,eAAe,CAAC,IAAY;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,EAAE,IAAI,KAAK,GAAG,EAAE;YACnB,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;YACvF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9B,IAAI,IAAI,KAAK,GAAG,EAAE;gBAChB,MAAM,GAAG,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aACxF;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE;gBACvB,MAAM;oBACJ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;aACzF;iBAAM,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;gBACvC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjF,MAAM;oBACJ,CAAC,MAAM,EAAE,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;wBACrD,CAAC,MAAM,EAAE,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;aACvD;iBAAM,IAAI,IAAI,KAAK,GAAG,EAAE;gBACvB,4DAA4D;gBAC5D,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAC/D;iBAAM;gBACL,MAAM,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;aAC/C;SACF;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wFAAwF;IACxF,UAAU,CAAC,IAAY;QACrB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,IAAI,CAAC,EAAE,IAAI,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAClC,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvF,IAAI,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACnE,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzF,CAAC;IAED,4GAA4G;IAC5G,YAAY,CAAC,IAAY;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,IAAI,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAClC,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACvF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,GAAG;YACd,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvF,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAChC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,IAAI,MAAM,EAAE,IAAI,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC3D,IAAI,MAAM,EAAE,IAAI,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;SACd;QACD,OAAO,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IAED,2FAA2F;IAC3F,eAAe,CAAC,IAAY;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,IAAI,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAClD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC;IAED,wFAAwF;IACxF,MAAM,CACJ,GAAkB;QAElB,MAAM,IAAI,GAAG,IAAA,mBAAQ,EAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,MAAM,EAAE,IAAI,KAAK,GAAG,EAAE;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;gBAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE;gBACxB,CAAC,CAAC,SAAS,CAAC;SACf;QACD,IAAI,MAAM,EAAE,IAAI,KAAK,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE;YAC5D,MAAM,IAAI,GAAG,IAAA,wBAAa,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;iBAChF,OAAO,EAAE;iBACT,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACb,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;gBAAE,OAAO,SAAS,CAAC;YACnD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAW,EAAE,CAAC;SACpE;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAChC,IAAY,EACZ,GAAwB,EACxB,MAAiB,EACjB,YAAyB,EACzB,IAAI,GAAG,cAAc;IAErB,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACxC,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,OAAO,EAAE;QAC/B,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE;YAAE,SAAS;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,KAAK,GAAG,IAAA,yBAAc,EAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,IAAA,0BAAc,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,SAAS;QACrD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE;YAC/C,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,SAAS;SACV;QACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC;QACnF,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC;QACf,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,+BAA+B,CAAC,CAAC;KACnF;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO;QACL,IAAI,EAAE,GAAG;QACT,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,OAAO,EAAE,oBAAoB,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC;QACpD,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC;QACzB,KAAK;KACN,CAAC;AACJ,CAAC;AAxCD,gDAwCC;AAED;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAY,EAAE,KAAmB,EAAE,QAAqB;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE;QAClE,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACjB,IAAI,CAAC,IAAA,0BAAc,EAAC,GAAG,CAAC,IAAI,CAAC,IAAA,mBAAQ,EAAC,IAAI,EAAE,EAAE,CAAC;YAAE,SAAS;QAC1D,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACjC,IAAI,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG;YAAE,SAAS;QAC/C,MAAM,IAAI,GAAG,IAAA,mBAAQ,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE;YACtC,2FAA2F;YAC3F,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CACxE,CAAC;YACF,uEAAuE;YACvE,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACzE,SAAS;SACV;QACD,IAAI,gDAAgD,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC1E,yFAAyF;QACzF,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,IAAI,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC;YAAE,SAAS;QAC3D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KACf;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AAED,sDAAsD;AACtD,SAAS,cAAc,CAAC,KAAmB,EAAE,KAAa;IACxD,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE;QACtC,IAAI,CAAC,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,GAAG,KAAK,IAAI,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC;KACnF;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gFAAgF;AAChF,SAAgB,eAAe,CAC7B,IAAY,EACZ,MAA8B;IAK9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,IAAA,4BAAiB,EAAC,IAAI,CAAC,EAAE;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QACrD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;QACnD,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;KACjB;IACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AArBD,0CAqBC"}

package/dist/src/lib/env-encryption/env-file.d.ts

@@ -0,0 +1,72 @@
+/**
+ * A small scanner for Angular environment files (`export const environment = { … };`): the
+ * top-level fields of the first object literal assigned to `environment`, and every quoted string
+ * in the file. Comments, template literals and regular expression literals are skipped, never
+ * rewritten.
+ */
+export type FieldKind = 'string' | 'other-literal' | 'expression';
+export interface EnvField {
+    key: string;
+    kind: FieldKind;
+    /** Raw value text (trimmed, comments kept). */
+    value: string;
+    /** For `string`: the content between the quotes (escapes kept). */
+    text?: string;
+    /** Offsets of the value in the file; for `string`, of the string literal only (text[start] is its quote). */
+    start: number;
+    end: number;
+}
+export interface EnvironmentScan {
+    /** An `environment = { … }` object literal was found. */
+    found: boolean;
+    fields: EnvField[];
+    /** Entries without a plain `key:` (shorthand, spread, computed keys), as written. */
+    unkeyed: string[];
+}
+export interface QuotedString {
+    /** Offset of the opening quote. */
+    start: number;
+    /** Offset after the closing quote. */
+    end: number;
+    quote: "'" | '"';
+    /** Raw content between the quotes (escapes kept). */
+    content: string;
+}
+/** `text` with comments removed (strings and regexes kept). */
+export declare function stripComments(text: string): string;
+/** Every single- or double-quoted string outside comments (template literals excluded). */
+export declare function quotedStrings(text: string): QuotedString[];
+/** Offset of the `{` of the object assigned to `environment`, or -1. */
+export declare function environmentObjectStart(text: string): number;
+/** The `environment` object: whether it exists, its top-level fields and unkeyed entries. */
+export declare function scanEnvironment(text: string): EnvironmentScan;
+/**
+ * Inserts `key: '<value>'` as the last entry of the `environment = { … }` object (value must be
+ * a quote-free token such as base64url). Throws when there is no such object.
+ */
+export declare function appendEnvironmentField(text: string, key: string, value: string): string;
+/** Top-level fields of the `environment` object (empty when there is none). */
+export declare function environmentFields(text: string): EnvField[];
+/** The value of a JS string literal's content (escapes resolved). */
+export declare function unescapeString(content: string): string;
+/** True when offset `index` of `text` is code (not inside a comment, string or regex literal). */
+export declare function isCodeAt(text: string, index: number): boolean;
+/** Offset of the bracket closing the one at `open` (`[`, `{` or `(`), skipping non-code; -1 if none. */
+export declare function closingBracket(text: string, open: number): number;
+export interface ScannedString extends QuotedString {
+    /** Offset of the innermost unclosed `{`, `[` or `(` around the string, or -1 at the top level. */
+    parent: number;
+}
+export interface Structure {
+    strings: ScannedString[];
+    /** Open bracket offset → its character and the bracket it sits in (-1 at the top level). */
+    brackets: Map<number, {
+        char: string;
+        parent: number;
+        close: number;
+    }>;
+}
+/** Strings and brackets with their nesting (one pass; comments, templates, regexes skipped). */
+export declare function scanStructure(text: string): Structure;
+/** The first code character at or after `index` (comments and whitespace skipped). */
+export declare function nextCode(text: string, index: number): string;