@numa-tech/numa 1.12.8 → 1.12.10
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +127 -4
- package/dist/application-candidates/client.d.ts +167 -0
- package/dist/application-candidates/client.js +103 -0
- package/dist/application-candidates/client.js.map +1 -0
- package/dist/application-candidates/commands.d.ts +13 -0
- package/dist/application-candidates/commands.js +225 -0
- package/dist/application-candidates/commands.js.map +1 -0
- package/dist/application-candidates/schemas.d.ts +171 -0
- package/dist/application-candidates/schemas.js +80 -0
- package/dist/application-candidates/schemas.js.map +1 -0
- package/dist/application-onboarding/client.d.ts +256 -0
- package/dist/application-onboarding/client.js +213 -0
- package/dist/application-onboarding/client.js.map +1 -0
- package/dist/application-onboarding/commands.d.ts +64 -0
- package/dist/application-onboarding/commands.js +694 -0
- package/dist/application-onboarding/commands.js.map +1 -0
- package/dist/application-onboarding/errors.d.ts +11 -0
- package/dist/application-onboarding/errors.js +51 -0
- package/dist/application-onboarding/errors.js.map +1 -0
- package/dist/application-onboarding/schemas.d.ts +1167 -0
- package/dist/application-onboarding/schemas.js +459 -0
- package/dist/application-onboarding/schemas.js.map +1 -0
- package/dist/application-onboarding/scm-credentials.d.ts +8 -0
- package/dist/application-onboarding/scm-credentials.js +98 -0
- package/dist/application-onboarding/scm-credentials.js.map +1 -0
- package/dist/application-onboarding/tui-model.d.ts +131 -0
- package/dist/application-onboarding/tui-model.js +554 -0
- package/dist/application-onboarding/tui-model.js.map +1 -0
- package/dist/application-onboarding/tui.d.ts +14 -0
- package/dist/application-onboarding/tui.js +554 -0
- package/dist/application-onboarding/tui.js.map +1 -0
- package/dist/cli.js +18 -4
- package/dist/cli.js.map +1 -1
- package/dist/command-catalog.js +134 -0
- package/dist/command-catalog.js.map +1 -1
- package/dist/web-console.js +4 -3
- package/dist/web-console.js.map +1 -1
- package/package.json +4 -4
- package/skills/numa-cli/SKILL.md +44 -0
- package/skills/numa-cli/agents/openai.yaml +4 -0
- package/skills/numa-cli/evals/evals.json +35 -0
- package/skills/numa-cli/references/pipeline-release.md +107 -0
|
@@ -0,0 +1,459 @@
|
|
|
1
|
+
import { z } from "zod";
|
|
2
|
+
export const OnboardingModeSchema = z.enum(["NEW", "EXISTING"]);
|
|
3
|
+
export const OnboardingSessionStateSchema = z.enum([
|
|
4
|
+
"DRAFT",
|
|
5
|
+
"READY",
|
|
6
|
+
"PLANNED",
|
|
7
|
+
"RUNNING",
|
|
8
|
+
"WAITING_EXTERNAL",
|
|
9
|
+
"VERIFYING",
|
|
10
|
+
"COMPLETED",
|
|
11
|
+
"FAILED",
|
|
12
|
+
"CANCELLED"
|
|
13
|
+
]);
|
|
14
|
+
export const OnboardingStepStateSchema = z.enum([
|
|
15
|
+
"PENDING",
|
|
16
|
+
"RUNNING",
|
|
17
|
+
"WAITING",
|
|
18
|
+
"SUCCEEDED",
|
|
19
|
+
"FAILED",
|
|
20
|
+
"SKIPPED",
|
|
21
|
+
"COMPENSATED"
|
|
22
|
+
]);
|
|
23
|
+
export const OnboardingCapabilityActionSchema = z.enum([
|
|
24
|
+
"CREATE_SESSION",
|
|
25
|
+
"PREFLIGHT",
|
|
26
|
+
"APPLY",
|
|
27
|
+
"CANCEL",
|
|
28
|
+
"LIST_REPOSITORIES",
|
|
29
|
+
"RETRY",
|
|
30
|
+
"RESUME",
|
|
31
|
+
"REASSESS"
|
|
32
|
+
]);
|
|
33
|
+
const JsonPrimitiveSchema = z.union([z.string(), z.number(), z.boolean(), z.null()]);
|
|
34
|
+
export const JsonValueSchema = z.lazy(() => z.union([JsonPrimitiveSchema, z.array(JsonValueSchema), z.record(z.string(), JsonValueSchema)]));
|
|
35
|
+
export const JsonObjectSchema = z.record(z.string(), JsonValueSchema);
|
|
36
|
+
const SENSITIVE_KEY_PARTS = [
|
|
37
|
+
"secret",
|
|
38
|
+
"password",
|
|
39
|
+
"passphrase",
|
|
40
|
+
"credential",
|
|
41
|
+
"token",
|
|
42
|
+
"privatekey",
|
|
43
|
+
"signingkey",
|
|
44
|
+
"encryptionkey",
|
|
45
|
+
"apikey",
|
|
46
|
+
"accesskey"
|
|
47
|
+
];
|
|
48
|
+
const AUTHORIZATION_VALUE = /\b(?:Bearer|Basic)\s+[^\s,;]+/iu;
|
|
49
|
+
const SENSITIVE_QUERY_VALUE = /[?&](?:access_?token|refresh_?token|token|api_?key|password|secret)=[^&#\s]+/iu;
|
|
50
|
+
const URL_USERINFO = /https?:\/\/[^/@\s]+@/iu;
|
|
51
|
+
const LIKELY_JWT = /(?<![A-Za-z0-9_-])eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}(?![A-Za-z0-9_-])/u;
|
|
52
|
+
const PROVIDER_TOKEN = /(?<![A-Za-z0-9_])(?:gh[pousr]_[A-Za-z0-9_]{20,}|LTAI[A-Za-z0-9]{12,})(?![A-Za-z0-9_])/iu;
|
|
53
|
+
const SECRET_ASSIGNMENT = /\b(?:password|passwd|access[_-]?token|refresh[_-]?token|api[_-]?token|secret)\s*[=:]\s*\S+/iu;
|
|
54
|
+
function sensitiveInputKey(key) {
|
|
55
|
+
const normalized = key.replace(/[^A-Za-z0-9]/gu, "").toLowerCase();
|
|
56
|
+
return SENSITIVE_KEY_PARTS.some((part) => normalized.includes(part));
|
|
57
|
+
}
|
|
58
|
+
function containsCredentialText(value) {
|
|
59
|
+
return AUTHORIZATION_VALUE.test(value)
|
|
60
|
+
|| SENSITIVE_QUERY_VALUE.test(value)
|
|
61
|
+
|| URL_USERINFO.test(value)
|
|
62
|
+
|| LIKELY_JWT.test(value)
|
|
63
|
+
|| PROVIDER_TOKEN.test(value)
|
|
64
|
+
|| SECRET_ASSIGNMENT.test(value);
|
|
65
|
+
}
|
|
66
|
+
function reportUnsafeInput(value, context, path = []) {
|
|
67
|
+
if (typeof value === "string" && containsCredentialText(value)) {
|
|
68
|
+
context.addIssue({
|
|
69
|
+
code: "custom",
|
|
70
|
+
path,
|
|
71
|
+
message: "Onboarding specifications cannot contain embedded credentials."
|
|
72
|
+
});
|
|
73
|
+
return;
|
|
74
|
+
}
|
|
75
|
+
if (Array.isArray(value)) {
|
|
76
|
+
value.forEach((item, index) => reportUnsafeInput(item, context, [...path, index]));
|
|
77
|
+
return;
|
|
78
|
+
}
|
|
79
|
+
if (!value || typeof value !== "object")
|
|
80
|
+
return;
|
|
81
|
+
for (const [key, item] of Object.entries(value)) {
|
|
82
|
+
if (sensitiveInputKey(key)) {
|
|
83
|
+
context.addIssue({
|
|
84
|
+
code: "custom",
|
|
85
|
+
path: [...path, key],
|
|
86
|
+
message: "Onboarding specifications cannot contain credentials or secret references."
|
|
87
|
+
});
|
|
88
|
+
continue;
|
|
89
|
+
}
|
|
90
|
+
reportUnsafeInput(item, context, [...path, key]);
|
|
91
|
+
}
|
|
92
|
+
}
|
|
93
|
+
export const CredentialFreeOnboardingValueSchema = z.unknown().superRefine((value, context) => {
|
|
94
|
+
reportUnsafeInput(value, context);
|
|
95
|
+
});
|
|
96
|
+
export const OnboardingSpecSchema = z.object({
|
|
97
|
+
schemaVersion: z.literal(1),
|
|
98
|
+
mode: OnboardingModeSchema,
|
|
99
|
+
application: z.object({
|
|
100
|
+
code: z.string().trim().min(1).max(160),
|
|
101
|
+
name: z.string().trim().min(1).max(240),
|
|
102
|
+
teamId: z.number().int().positive(),
|
|
103
|
+
systemId: z.number().int().positive(),
|
|
104
|
+
defaultEnvironmentId: z.number().int().positive().optional()
|
|
105
|
+
}).passthrough(),
|
|
106
|
+
repository: z.object({
|
|
107
|
+
connectionCode: z.string().trim().min(1).max(160),
|
|
108
|
+
namespace: z.string().trim().min(1).max(400).optional(),
|
|
109
|
+
name: z.string().trim().min(1).max(240).optional(),
|
|
110
|
+
externalId: z.string().trim().min(1).max(512).optional(),
|
|
111
|
+
expectedHead: z.string().trim().min(1).max(512).optional()
|
|
112
|
+
}).passthrough(),
|
|
113
|
+
technology: z.object({
|
|
114
|
+
stackCode: z.string().trim().min(1).max(160).optional(),
|
|
115
|
+
templateCode: z.string().trim().min(1).max(160).optional(),
|
|
116
|
+
repoMode: z.enum(["STANDALONE", "ADD_MODULE"]).optional(),
|
|
117
|
+
parameters: JsonObjectSchema.optional()
|
|
118
|
+
}).passthrough().optional(),
|
|
119
|
+
delivery: JsonObjectSchema.optional()
|
|
120
|
+
}).passthrough().superRefine((value, context) => {
|
|
121
|
+
reportUnsafeInput(value, context);
|
|
122
|
+
if (!value.technology?.stackCode) {
|
|
123
|
+
context.addIssue({
|
|
124
|
+
code: "custom",
|
|
125
|
+
path: ["technology", "stackCode"],
|
|
126
|
+
message: "Application onboarding requires technology.stackCode."
|
|
127
|
+
});
|
|
128
|
+
}
|
|
129
|
+
if (value.mode === "NEW" && !value.technology?.templateCode) {
|
|
130
|
+
context.addIssue({
|
|
131
|
+
code: "custom",
|
|
132
|
+
path: ["technology", "templateCode"],
|
|
133
|
+
message: "NEW onboarding requires technology.templateCode."
|
|
134
|
+
});
|
|
135
|
+
}
|
|
136
|
+
const addModule = value.mode === "NEW" && value.technology?.repoMode === "ADD_MODULE";
|
|
137
|
+
if (value.mode === "NEW" && !addModule && (!value.repository.namespace || !value.repository.name)) {
|
|
138
|
+
context.addIssue({
|
|
139
|
+
code: "custom",
|
|
140
|
+
path: ["repository"],
|
|
141
|
+
message: "NEW STANDALONE onboarding requires repository.namespace and repository.name."
|
|
142
|
+
});
|
|
143
|
+
}
|
|
144
|
+
if ((value.mode === "EXISTING" || addModule) && (!value.repository.externalId || !value.repository.expectedHead)) {
|
|
145
|
+
context.addIssue({
|
|
146
|
+
code: "custom",
|
|
147
|
+
path: ["repository", "externalId"],
|
|
148
|
+
message: "EXISTING and NEW ADD_MODULE onboarding require repository.externalId and repository.expectedHead."
|
|
149
|
+
});
|
|
150
|
+
}
|
|
151
|
+
});
|
|
152
|
+
export const OnboardingSessionSchema = z.object({
|
|
153
|
+
sessionNo: z.string().trim().min(1),
|
|
154
|
+
mode: OnboardingModeSchema,
|
|
155
|
+
state: OnboardingSessionStateSchema,
|
|
156
|
+
currentStep: z.string().nullable().optional(),
|
|
157
|
+
revision: z.number().int().nonnegative(),
|
|
158
|
+
draft: JsonValueSchema.nullable().optional(),
|
|
159
|
+
plan: JsonValueSchema.nullable().optional(),
|
|
160
|
+
planHash: z.string().nullable().optional(),
|
|
161
|
+
result: JsonValueSchema.nullable().optional(),
|
|
162
|
+
requestedBy: z.string().nullable().optional(),
|
|
163
|
+
teamId: z.number().int().positive().nullable().optional(),
|
|
164
|
+
applicationId: z.number().int().positive().nullable().optional(),
|
|
165
|
+
templateId: z.number().int().positive().nullable().optional(),
|
|
166
|
+
repositoryId: z.number().int().positive().nullable().optional(),
|
|
167
|
+
provisioningTaskId: z.number().int().positive().nullable().optional(),
|
|
168
|
+
expiresAt: z.string().nullable().optional(),
|
|
169
|
+
createdAt: z.string().optional(),
|
|
170
|
+
updatedAt: z.string().optional(),
|
|
171
|
+
createdDate: z.string().optional(),
|
|
172
|
+
lastModifiedDate: z.string().optional()
|
|
173
|
+
}).passthrough();
|
|
174
|
+
const EventOutputTextSchema = z.string().trim().min(1).max(4_096);
|
|
175
|
+
const EventOutputIdentifierSchema = z.union([
|
|
176
|
+
z.string().trim().min(1).max(1_024),
|
|
177
|
+
z.number().int().nonnegative()
|
|
178
|
+
]);
|
|
179
|
+
const EventOutputHttpUrlSchema = z.string().trim().url().max(2_048).refine((value) => {
|
|
180
|
+
const url = new URL(value);
|
|
181
|
+
return ["http:", "https:"].includes(url.protocol) && !url.username && !url.password;
|
|
182
|
+
}, "event URL must be HTTP(S) and must not contain credentials");
|
|
183
|
+
/**
|
|
184
|
+
* Events are an audit/display boundary, not a generic data transport. Unknown
|
|
185
|
+
* keys are deliberately stripped so provider responses and future server
|
|
186
|
+
* fields cannot leak through CLI JSON without an explicit client review.
|
|
187
|
+
*/
|
|
188
|
+
export const OnboardingEventOutputSchema = z.object({
|
|
189
|
+
taskNo: EventOutputTextSchema.optional(),
|
|
190
|
+
planHash: EventOutputTextSchema.optional(),
|
|
191
|
+
applicationId: EventOutputIdentifierSchema.optional(),
|
|
192
|
+
repositoryId: EventOutputIdentifierSchema.optional(),
|
|
193
|
+
repositoryExternalId: EventOutputIdentifierSchema.optional(),
|
|
194
|
+
repositoryFullName: EventOutputTextSchema.optional(),
|
|
195
|
+
repositoryUrl: EventOutputHttpUrlSchema.optional(),
|
|
196
|
+
repositoryHead: EventOutputTextSchema.optional(),
|
|
197
|
+
branch: EventOutputTextSchema.optional(),
|
|
198
|
+
changeRequestNumber: EventOutputIdentifierSchema.optional(),
|
|
199
|
+
changeRequestUrl: EventOutputHttpUrlSchema.optional(),
|
|
200
|
+
changeRequestState: EventOutputTextSchema.optional(),
|
|
201
|
+
assessmentId: EventOutputIdentifierSchema.optional(),
|
|
202
|
+
assessmentStatus: EventOutputTextSchema.optional(),
|
|
203
|
+
score: z.number().finite().optional(),
|
|
204
|
+
blockerCount: z.number().int().nonnegative().optional(),
|
|
205
|
+
failCount: z.number().int().nonnegative().optional(),
|
|
206
|
+
warnCount: z.number().int().nonnegative().optional(),
|
|
207
|
+
jenkinsCandidateBindingIds: z.array(EventOutputIdentifierSchema).max(1_000).optional(),
|
|
208
|
+
jenkinsPendingTiers: z.array(EventOutputTextSchema).max(100).optional(),
|
|
209
|
+
retryAfterSeconds: z.number().int().nonnegative().optional(),
|
|
210
|
+
recoveryAction: EventOutputTextSchema.optional(),
|
|
211
|
+
bundleDigest: EventOutputTextSchema.optional(),
|
|
212
|
+
templateRevision: EventOutputTextSchema.optional()
|
|
213
|
+
}).strip();
|
|
214
|
+
export const OnboardingEventSchema = z.object({
|
|
215
|
+
sequenceNo: z.number().int().nonnegative(),
|
|
216
|
+
eventType: z.string().trim().min(1),
|
|
217
|
+
stepCode: z.string().nullable().optional(),
|
|
218
|
+
stepState: OnboardingStepStateSchema.nullable().optional(),
|
|
219
|
+
message: z.string().optional().default(""),
|
|
220
|
+
output: OnboardingEventOutputSchema.nullable().optional(),
|
|
221
|
+
errorCode: z.string().nullable().optional(),
|
|
222
|
+
retryable: z.boolean().optional().default(false),
|
|
223
|
+
actorType: z.enum(["USER", "RUNNER", "SYSTEM"]).optional(),
|
|
224
|
+
actor: z.string().nullable().optional(),
|
|
225
|
+
occurredAt: z.string().optional()
|
|
226
|
+
}).passthrough();
|
|
227
|
+
const SessionListEnvelopeSchema = z.object({
|
|
228
|
+
items: z.array(OnboardingSessionSchema),
|
|
229
|
+
nextCursor: z.string().nullable().default(null)
|
|
230
|
+
}).passthrough();
|
|
231
|
+
const SpringSessionPageSchema = z.object({
|
|
232
|
+
content: z.array(OnboardingSessionSchema),
|
|
233
|
+
last: z.boolean().optional()
|
|
234
|
+
}).passthrough();
|
|
235
|
+
export const OnboardingSessionListSchema = z.union([
|
|
236
|
+
SessionListEnvelopeSchema,
|
|
237
|
+
SpringSessionPageSchema,
|
|
238
|
+
z.array(OnboardingSessionSchema)
|
|
239
|
+
]).transform((value) => {
|
|
240
|
+
if (Array.isArray(value))
|
|
241
|
+
return { items: value, nextCursor: null };
|
|
242
|
+
if ("content" in value) {
|
|
243
|
+
return { items: value.content, nextCursor: null };
|
|
244
|
+
}
|
|
245
|
+
return { items: value.items, nextCursor: value.nextCursor };
|
|
246
|
+
});
|
|
247
|
+
const EventListEnvelopeSchema = z.object({
|
|
248
|
+
items: z.array(OnboardingEventSchema).optional(),
|
|
249
|
+
events: z.array(OnboardingEventSchema).optional(),
|
|
250
|
+
nextSequence: z.number().int().nonnegative().nullable().optional()
|
|
251
|
+
}).passthrough();
|
|
252
|
+
export const OnboardingEventListSchema = z.union([
|
|
253
|
+
EventListEnvelopeSchema,
|
|
254
|
+
z.array(OnboardingEventSchema)
|
|
255
|
+
]).transform((value) => {
|
|
256
|
+
const items = Array.isArray(value) ? value : value.items ?? value.events ?? [];
|
|
257
|
+
const highest = items.reduce((maximum, item) => Math.max(maximum, item.sequenceNo), 0);
|
|
258
|
+
return {
|
|
259
|
+
items,
|
|
260
|
+
nextSequence: Array.isArray(value) ? highest : value.nextSequence ?? highest
|
|
261
|
+
};
|
|
262
|
+
});
|
|
263
|
+
export const OnboardingCapabilitiesSchema = z.object({
|
|
264
|
+
modes: z.array(OnboardingModeSchema).optional(),
|
|
265
|
+
supportedModes: z.array(OnboardingModeSchema).optional(),
|
|
266
|
+
actions: z.array(OnboardingCapabilityActionSchema).optional(),
|
|
267
|
+
providers: z.array(z.unknown()).optional(),
|
|
268
|
+
teams: z.array(z.unknown()).optional()
|
|
269
|
+
}).passthrough();
|
|
270
|
+
const FieldErrorSchema = z.object({
|
|
271
|
+
path: z.string().optional(),
|
|
272
|
+
code: z.string().optional(),
|
|
273
|
+
message: z.string().optional()
|
|
274
|
+
}).passthrough();
|
|
275
|
+
export const OnboardingApiErrorSchema = z.object({
|
|
276
|
+
code: z.string().optional(),
|
|
277
|
+
message: z.string().optional(),
|
|
278
|
+
requestId: z.string().nullable().optional(),
|
|
279
|
+
fieldErrors: z.array(FieldErrorSchema).optional(),
|
|
280
|
+
retryable: z.boolean().optional()
|
|
281
|
+
}).passthrough();
|
|
282
|
+
export const OnboardingPreflightSchema = z.object({
|
|
283
|
+
warnings: z.array(z.unknown()).default([]),
|
|
284
|
+
blockingErrors: z.array(z.unknown()).default([]),
|
|
285
|
+
normalizedDraft: JsonValueSchema.optional(),
|
|
286
|
+
plan: JsonValueSchema.optional(),
|
|
287
|
+
planHash: z.string().trim().min(1).nullable()
|
|
288
|
+
}).passthrough();
|
|
289
|
+
export const OnboardingTaskSchema = z.object({
|
|
290
|
+
taskNo: z.string().trim().min(1).optional(),
|
|
291
|
+
id: z.union([z.string(), z.number()]).optional(),
|
|
292
|
+
sessionNo: z.string().trim().min(1).optional(),
|
|
293
|
+
status: z.string().optional(),
|
|
294
|
+
state: z.string().optional(),
|
|
295
|
+
planHash: z.string().optional()
|
|
296
|
+
}).passthrough().refine((value) => value.taskNo != null || value.id != null || value.sessionNo != null, { message: "taskNo, id, or sessionNo is required" });
|
|
297
|
+
export const OnboardingAssessmentSchema = z.object({
|
|
298
|
+
status: z.string(),
|
|
299
|
+
commitSha: z.string().optional(),
|
|
300
|
+
policyVersion: z.string().optional(),
|
|
301
|
+
score: z.number().optional(),
|
|
302
|
+
findings: z.array(z.unknown()).optional()
|
|
303
|
+
}).passthrough();
|
|
304
|
+
export const ScmProviderSchema = z.enum(["GITHUB", "CODEUP"]);
|
|
305
|
+
export const ScmAuthTypeSchema = z.enum(["GITHUB_APP", "GITHUB_PAT", "CODEUP_OPENAPI"]);
|
|
306
|
+
export const ScmCapabilitiesSchema = z.union([
|
|
307
|
+
z.record(z.string(), z.boolean()),
|
|
308
|
+
z.array(z.string().trim().min(1))
|
|
309
|
+
]).transform((value) => Array.isArray(value)
|
|
310
|
+
? Object.fromEntries(value.map((capability) => [capability, true]))
|
|
311
|
+
: value);
|
|
312
|
+
export const ScmConnectionSchema = z.object({
|
|
313
|
+
code: z.string().trim().min(1).max(160),
|
|
314
|
+
name: z.string().trim().min(1).max(240),
|
|
315
|
+
provider: ScmProviderSchema,
|
|
316
|
+
organizationKey: z.string().trim().min(1).max(400),
|
|
317
|
+
health: z.string().trim().min(1).max(80),
|
|
318
|
+
capabilities: ScmCapabilitiesSchema.default({}),
|
|
319
|
+
lastCheckedAt: z.string().nullable().optional()
|
|
320
|
+
});
|
|
321
|
+
export const ScmConnectionListSchema = z.union([
|
|
322
|
+
z.object({
|
|
323
|
+
items: z.array(ScmConnectionSchema),
|
|
324
|
+
nextCursor: z.string().nullable().optional()
|
|
325
|
+
}),
|
|
326
|
+
z.array(ScmConnectionSchema)
|
|
327
|
+
]).transform((value) => Array.isArray(value)
|
|
328
|
+
? { items: value, nextCursor: null }
|
|
329
|
+
: { items: value.items, nextCursor: value.nextCursor ?? null });
|
|
330
|
+
function safeHttpUrl(value) {
|
|
331
|
+
try {
|
|
332
|
+
const url = new URL(value);
|
|
333
|
+
return ["http:", "https:"].includes(url.protocol) && !url.username && !url.password;
|
|
334
|
+
}
|
|
335
|
+
catch {
|
|
336
|
+
return false;
|
|
337
|
+
}
|
|
338
|
+
}
|
|
339
|
+
export const ScmRepositorySchema = z.object({
|
|
340
|
+
externalId: z.union([z.string(), z.number()]).transform(String).pipe(z.string().trim().min(1).max(1000)),
|
|
341
|
+
namespace: z.string().trim().min(1).max(500).optional(),
|
|
342
|
+
name: z.string().trim().min(1).max(500),
|
|
343
|
+
fullName: z.string().trim().min(1).max(1000).optional(),
|
|
344
|
+
namespacePath: z.string().trim().min(1).max(500).optional(),
|
|
345
|
+
defaultBranch: z.string().trim().min(1).max(500),
|
|
346
|
+
headRevision: z.string().trim().min(1).max(512),
|
|
347
|
+
visibility: z.string().trim().min(1).max(80).optional(),
|
|
348
|
+
archived: z.boolean().optional().default(false),
|
|
349
|
+
webUrl: z.string().refine(safeHttpUrl, "webUrl must be an HTTP(S) URL without credentials").optional()
|
|
350
|
+
});
|
|
351
|
+
export const ScmRepositoryPageSchema = z.union([
|
|
352
|
+
z.object({
|
|
353
|
+
items: z.array(ScmRepositorySchema),
|
|
354
|
+
nextCursor: z.string().trim().min(1).max(4096).nullable().optional(),
|
|
355
|
+
hasMore: z.boolean().optional()
|
|
356
|
+
}),
|
|
357
|
+
z.object({
|
|
358
|
+
content: z.array(ScmRepositorySchema),
|
|
359
|
+
nextCursor: z.string().trim().min(1).max(4096).nullable().optional(),
|
|
360
|
+
hasMore: z.boolean().optional()
|
|
361
|
+
}),
|
|
362
|
+
z.array(ScmRepositorySchema)
|
|
363
|
+
]).transform((value) => Array.isArray(value)
|
|
364
|
+
? { items: value, nextCursor: null, hasMore: false }
|
|
365
|
+
: "content" in value
|
|
366
|
+
? { items: value.content, nextCursor: value.nextCursor ?? null, hasMore: value.hasMore ?? Boolean(value.nextCursor) }
|
|
367
|
+
: { items: value.items, nextCursor: value.nextCursor ?? null, hasMore: value.hasMore ?? Boolean(value.nextCursor) })
|
|
368
|
+
.refine((value) => !value.hasMore || value.nextCursor != null, {
|
|
369
|
+
message: "A repository page with hasMore=true must include nextCursor."
|
|
370
|
+
});
|
|
371
|
+
const HttpsUrlSchema = z.string().trim().url().max(1000).refine((value) => {
|
|
372
|
+
const url = new URL(value);
|
|
373
|
+
return url.protocol === "https:" && !url.username && !url.password;
|
|
374
|
+
}, "baseUrl must be HTTPS and must not contain credentials");
|
|
375
|
+
export const ScmAdminConnectionInputSchema = z.object({
|
|
376
|
+
code: z.string().trim().min(1).max(80).regex(/^[a-z][a-z0-9-]*$/u),
|
|
377
|
+
name: z.string().trim().min(1).max(160),
|
|
378
|
+
provider: ScmProviderSchema,
|
|
379
|
+
baseUrl: HttpsUrlSchema,
|
|
380
|
+
organizationKey: z.string().trim().min(1).max(320),
|
|
381
|
+
authType: ScmAuthTypeSchema,
|
|
382
|
+
aliyunAccountId: z.number().int().positive().optional(),
|
|
383
|
+
aliyunAssumeRoleId: z.number().int().positive().optional(),
|
|
384
|
+
status: z.enum(["ACTIVE", "DEGRADED", "ERROR", "DISABLED"])
|
|
385
|
+
}).strict().superRefine((value, context) => {
|
|
386
|
+
if (value.provider === "GITHUB") {
|
|
387
|
+
if (!["GITHUB_APP", "GITHUB_PAT"].includes(value.authType)) {
|
|
388
|
+
context.addIssue({ code: "custom", path: ["authType"], message: "GitHub requires GITHUB_APP or GITHUB_PAT." });
|
|
389
|
+
}
|
|
390
|
+
if (value.aliyunAccountId != null || value.aliyunAssumeRoleId != null) {
|
|
391
|
+
context.addIssue({ code: "custom", path: ["aliyunAccountId"], message: "GitHub connections cannot reference an Aliyun account or Assume Role." });
|
|
392
|
+
}
|
|
393
|
+
}
|
|
394
|
+
else if (value.authType !== "CODEUP_OPENAPI") {
|
|
395
|
+
context.addIssue({ code: "custom", path: ["authType"], message: "Codeup requires CODEUP_OPENAPI." });
|
|
396
|
+
}
|
|
397
|
+
else if (value.aliyunAccountId == null) {
|
|
398
|
+
context.addIssue({ code: "custom", path: ["aliyunAccountId"], message: "Codeup requires an aliyunAccountId managed by the server." });
|
|
399
|
+
}
|
|
400
|
+
if (value.aliyunAssumeRoleId != null && value.aliyunAccountId == null) {
|
|
401
|
+
context.addIssue({
|
|
402
|
+
code: "custom",
|
|
403
|
+
path: ["aliyunAssumeRoleId"],
|
|
404
|
+
message: "aliyunAssumeRoleId requires aliyunAccountId."
|
|
405
|
+
});
|
|
406
|
+
}
|
|
407
|
+
});
|
|
408
|
+
export const ScmAdminConnectionSchema = z.object({
|
|
409
|
+
id: z.number().int().positive().optional(),
|
|
410
|
+
code: z.string().trim().min(1).max(160),
|
|
411
|
+
name: z.string().trim().min(1).max(240),
|
|
412
|
+
provider: ScmProviderSchema,
|
|
413
|
+
baseUrl: HttpsUrlSchema,
|
|
414
|
+
organizationKey: z.string().trim().min(1).max(400),
|
|
415
|
+
authType: ScmAuthTypeSchema,
|
|
416
|
+
aliyunAccountId: z.number().int().positive().nullable().optional(),
|
|
417
|
+
aliyunAssumeRoleId: z.number().int().positive().nullable().optional(),
|
|
418
|
+
capabilities: ScmCapabilitiesSchema.default({}),
|
|
419
|
+
status: z.enum(["ACTIVE", "DEGRADED", "ERROR", "DISABLED"]),
|
|
420
|
+
lastCheckedAt: z.string().nullable().optional(),
|
|
421
|
+
lastError: z.string().nullable().optional(),
|
|
422
|
+
version: z.number().int().nonnegative(),
|
|
423
|
+
credentialConfigured: z.boolean().optional().default(false),
|
|
424
|
+
credentialVersion: z.number().int().nonnegative().optional(),
|
|
425
|
+
credentialUpdatedAt: z.string().nullable().optional()
|
|
426
|
+
});
|
|
427
|
+
export const ScmAdminConnectionListSchema = z.union([
|
|
428
|
+
z.object({ items: z.array(ScmAdminConnectionSchema), nextCursor: z.string().nullable().optional() }),
|
|
429
|
+
z.array(ScmAdminConnectionSchema)
|
|
430
|
+
]).transform((value) => Array.isArray(value)
|
|
431
|
+
? { items: value, nextCursor: null }
|
|
432
|
+
: { items: value.items, nextCursor: value.nextCursor ?? null });
|
|
433
|
+
export const GithubAppCredentialSchema = z.object({
|
|
434
|
+
appId: z.union([z.string().trim().min(1), z.number().int().positive()]),
|
|
435
|
+
installationId: z.union([z.string().trim().min(1), z.number().int().positive()]),
|
|
436
|
+
privateKeyPem: z.string().min(32)
|
|
437
|
+
}).strict();
|
|
438
|
+
export const GithubPatCredentialSchema = z.object({
|
|
439
|
+
personalAccessToken: z.string().trim().min(20)
|
|
440
|
+
}).strict();
|
|
441
|
+
export const CodeupOpenApiCredentialSchema = z.object({
|
|
442
|
+
accessToken: z.string().trim().min(8)
|
|
443
|
+
}).strict();
|
|
444
|
+
export const ScmCredentialUpdateSchema = z.object({
|
|
445
|
+
version: z.number().int().nonnegative(),
|
|
446
|
+
githubApp: GithubAppCredentialSchema.optional(),
|
|
447
|
+
githubPat: GithubPatCredentialSchema.optional(),
|
|
448
|
+
codeup: CodeupOpenApiCredentialSchema.optional()
|
|
449
|
+
}).strict().superRefine((value, context) => {
|
|
450
|
+
const count = [value.githubApp, value.githubPat, value.codeup].filter(Boolean).length;
|
|
451
|
+
if (count !== 1) {
|
|
452
|
+
context.addIssue({ code: "custom", message: "Exactly one provider credential bundle is required." });
|
|
453
|
+
}
|
|
454
|
+
});
|
|
455
|
+
export const OnboardingObjectListSchema = z.union([
|
|
456
|
+
z.object({ items: z.array(z.record(z.string(), z.unknown())), nextCursor: z.string().nullable().optional() }).passthrough(),
|
|
457
|
+
z.array(z.record(z.string(), z.unknown()))
|
|
458
|
+
]).transform((value) => Array.isArray(value) ? { items: value, nextCursor: null } : value);
|
|
459
|
+
//# sourceMappingURL=schemas.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/application-onboarding/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,IAAI,CAAC;IACjD,OAAO;IACP,OAAO;IACP,SAAS;IACT,SAAS;IACT,kBAAkB;IAClB,WAAW;IACX,WAAW;IACX,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC9C,SAAS;IACT,SAAS;IACT,SAAS;IACT,WAAW;IACX,QAAQ;IACR,SAAS;IACT,aAAa;CACd,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,IAAI,CAAC;IACrD,gBAAgB;IAChB,WAAW;IACX,OAAO;IACP,QAAQ;IACR,mBAAmB;IACnB,OAAO;IACP,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,eAAe,GAAyB,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/D,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,CAChG,CAAC;AACF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC,CAAC;AAEtE,MAAM,mBAAmB,GAAG;IAC1B,QAAQ;IACR,UAAU;IACV,YAAY;IACZ,YAAY;IACZ,OAAO;IACP,YAAY;IACZ,YAAY;IACZ,eAAe;IACf,QAAQ;IACR,WAAW;CACH,CAAC;AACX,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAC9D,MAAM,qBAAqB,GAAG,gFAAgF,CAAC;AAC/G,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,UAAU,GAAG,gGAAgG,CAAC;AACpH,MAAM,cAAc,GAAG,yFAAyF,CAAC;AACjH,MAAM,iBAAiB,GAAG,8FAA8F,CAAC;AAEzH,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnE,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAa;IAC3C,OAAO,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;WACjC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC;WACjC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;WACxB,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;WACtB,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;WAC1B,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,OAAwB,EAAE,IAAI,GAA2B,EAAE;IACpG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,OAAO,EAAE,gEAAgE;SAC1E,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC3E,IAAI,iBAAiB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC;gBACpB,OAAO,EAAE,4EAA4E;aACtF,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,iBAAiB,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC5F,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACpC,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,IAAI,EAAE,oBAAoB;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACrC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC7D,CAAC,CAAC,WAAW,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC,CAAC,WAAW,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QACvD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;QAC1D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;QACzD,UAAU,EAAE,gBAAgB,CAAC,QAAQ,EAAE;KACxC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9C,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,EAAE,WAAW,CAAC;YACjC,OAAO,EAAE,uDAAuD;SACjE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,CAAC;QAC5D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,EAAE,cAAc,CAAC;YACpC,OAAO,EAAE,kDAAkD;SAC5D,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,EAAE,QAAQ,KAAK,YAAY,CAAC;IACtF,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAClG,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,8EAA8E;SACxF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QACjH,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;YAClC,OAAO,EAAE,mGAAmG;SAC7G,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,4BAA4B;IACnC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5C,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClE,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACnC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC/B,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACnF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;AACtF,CAAC,EAAE,4DAA4D,CAAC,CAAC;AAEjE;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACxC,QAAQ,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC1C,aAAa,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACrD,YAAY,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACpD,oBAAoB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC5D,kBAAkB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACpD,aAAa,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAClD,cAAc,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACxC,mBAAmB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACrD,kBAAkB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpD,0BAA0B,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACtF,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC5D,cAAc,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAChD,YAAY,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IAC9C,gBAAgB,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,yBAAyB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,MAAM,EAAE,2BAA2B,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC;IACjD,yBAAyB;IACzB,uBAAuB;IACvB,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;CACjC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAwF,EAAE;IAC3G,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACpE,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,OAAyD,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACtG,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,QAAQ,EAAE;IACjD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACnE,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC/C,uBAAuB;IACvB,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC;CAC/B,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACvF,OAAO;QACL,KAAK;QACL,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,IAAI,OAAO;KAC7E,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IAC/C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACxD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE;IAC7D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC,WAAW,EAAE,CAAC;AACjB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,eAAe,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC3C,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC3C,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC,CAAC,WAAW,EAAE,CAAC,MAAM,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,KAAK,CAAC,SAAS,IAAI,IAAI,EAC9E,EAAE,OAAO,EAAE,sCAAsC,EAAE,CACpD,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAExF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAClC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAA2B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACnE,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;IACnE,CAAC,CAAC,KAAK,CAAC,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,iBAAiB;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;KAC7C,CAAC;IACF,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CAC7B,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;IACpC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;AAElE,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxG,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACvD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACvD,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,mDAAmD,CAAC,CAAC,QAAQ,EAAE;CACvG,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACpE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;QACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;QACpE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;CAC7B,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE;IACpD,CAAC,CAAC,SAAS,IAAI,KAAK;QAClB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;QACrH,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;KACrH,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE;IAC7D,OAAO,EAAE,8DAA8D;CACxE,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;AACrE,CAAC,EAAE,wDAAwD,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC;IAClE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,cAAc;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,QAAQ,EAAE,iBAAiB;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC,CAAC;QACjH,CAAC;QACD,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,IAAI,KAAK,CAAC,kBAAkB,IAAI,IAAI,EAAE,CAAC;YACtE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,uEAAuE,EAAE,CAAC,CAAC;QACpJ,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACvG,CAAC;SAAM,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACzC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,2DAA2D,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,KAAK,CAAC,kBAAkB,IAAI,IAAI,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,EAAE,CAAC;QACtE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,oBAAoB,CAAC;YAC5B,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,cAAc;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,QAAQ,EAAE,iBAAiB;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrE,YAAY,EAAE,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAC3D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3D,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC5D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;IACpG,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAClC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAC1C,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE;IACpC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChF,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACvC,SAAS,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC/C,MAAM,EAAE,6BAA6B,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACtF,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC,CAAC;IACvG,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC;IAChD,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;IAC3H,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;CAC3C,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC"}
|
|
@@ -0,0 +1,8 @@
|
|
|
1
|
+
import type { Readable } from "node:stream";
|
|
2
|
+
import { type ScmAdminConnectionInput, type ScmAuthType, type ScmCredentialBundle } from "./schemas.js";
|
|
3
|
+
export interface ScmCredentialSourceOptions {
|
|
4
|
+
credentialFile?: string;
|
|
5
|
+
credentialStdin?: boolean;
|
|
6
|
+
}
|
|
7
|
+
export declare function readScmAdminConnectionInput(path: string): Promise<ScmAdminConnectionInput>;
|
|
8
|
+
export declare function readScmCredentialBundle(authType: ScmAuthType, options: ScmCredentialSourceOptions, input?: Readable): Promise<ScmCredentialBundle | undefined>;
|
|
@@ -0,0 +1,98 @@
|
|
|
1
|
+
import { lstat, readFile, stat } from "node:fs/promises";
|
|
2
|
+
import process from "node:process";
|
|
3
|
+
import { OnboardingError } from "./errors.js";
|
|
4
|
+
import { CodeupOpenApiCredentialSchema, GithubAppCredentialSchema, GithubPatCredentialSchema, ScmAdminConnectionInputSchema } from "./schemas.js";
|
|
5
|
+
const MAX_ADMIN_INPUT_BYTES = 65_536;
|
|
6
|
+
export async function readScmAdminConnectionInput(path) {
|
|
7
|
+
try {
|
|
8
|
+
const info = await stat(path);
|
|
9
|
+
if (!info.isFile() || info.size < 2 || info.size > MAX_ADMIN_INPUT_BYTES) {
|
|
10
|
+
throw new Error("connection input must be a JSON file between 2 bytes and 64 KiB");
|
|
11
|
+
}
|
|
12
|
+
const parsed = ScmAdminConnectionInputSchema.safeParse(JSON.parse(await readFile(path, "utf8")));
|
|
13
|
+
if (!parsed.success)
|
|
14
|
+
throw new Error("connection input does not match the SCM admin contract");
|
|
15
|
+
return parsed.data;
|
|
16
|
+
}
|
|
17
|
+
catch (error) {
|
|
18
|
+
throw new OnboardingError(`Cannot read SCM connection input ${path}: ${error instanceof Error ? error.message : String(error)}`, "onboarding_scm_input_invalid");
|
|
19
|
+
}
|
|
20
|
+
}
|
|
21
|
+
export async function readScmCredentialBundle(authType, options, input = process.stdin) {
|
|
22
|
+
if (options.credentialFile && options.credentialStdin) {
|
|
23
|
+
throw new OnboardingError("Choose --credential-file or --credential-stdin, not both.", "onboarding_scm_credential_source_invalid");
|
|
24
|
+
}
|
|
25
|
+
if (!options.credentialFile && !options.credentialStdin)
|
|
26
|
+
return undefined;
|
|
27
|
+
const bytes = options.credentialFile
|
|
28
|
+
? await readProtectedCredentialFile(options.credentialFile)
|
|
29
|
+
: await readBoundedStdin(input);
|
|
30
|
+
try {
|
|
31
|
+
let raw;
|
|
32
|
+
try {
|
|
33
|
+
raw = JSON.parse(bytes.toString("utf8"));
|
|
34
|
+
}
|
|
35
|
+
catch {
|
|
36
|
+
throw new OnboardingError("SCM credential input must be valid JSON.", "onboarding_scm_credential_invalid");
|
|
37
|
+
}
|
|
38
|
+
const schema = authType === "GITHUB_APP"
|
|
39
|
+
? GithubAppCredentialSchema
|
|
40
|
+
: authType === "GITHUB_PAT"
|
|
41
|
+
? GithubPatCredentialSchema
|
|
42
|
+
: CodeupOpenApiCredentialSchema;
|
|
43
|
+
const parsed = schema.safeParse(raw);
|
|
44
|
+
if (!parsed.success) {
|
|
45
|
+
throw new OnboardingError(`SCM credential input does not match the ${authType} bundle contract.`, "onboarding_scm_credential_invalid");
|
|
46
|
+
}
|
|
47
|
+
return parsed.data;
|
|
48
|
+
}
|
|
49
|
+
finally {
|
|
50
|
+
bytes.fill(0);
|
|
51
|
+
}
|
|
52
|
+
}
|
|
53
|
+
async function readProtectedCredentialFile(path) {
|
|
54
|
+
try {
|
|
55
|
+
const linkInfo = await lstat(path);
|
|
56
|
+
if (linkInfo.isSymbolicLink() || !linkInfo.isFile()) {
|
|
57
|
+
throw new Error("credential source must be a regular file, not a symlink");
|
|
58
|
+
}
|
|
59
|
+
if (linkInfo.size < 2 || linkInfo.size > MAX_ADMIN_INPUT_BYTES) {
|
|
60
|
+
throw new Error("credential file must be between 2 bytes and 64 KiB");
|
|
61
|
+
}
|
|
62
|
+
if (process.platform !== "win32") {
|
|
63
|
+
if ((linkInfo.mode & 0o077) !== 0) {
|
|
64
|
+
throw new Error("credential file permissions must not grant group or other access (use chmod 600)");
|
|
65
|
+
}
|
|
66
|
+
if (typeof process.getuid === "function" && linkInfo.uid !== process.getuid()) {
|
|
67
|
+
throw new Error("credential file must be owned by the current user");
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
return await readFile(path);
|
|
71
|
+
}
|
|
72
|
+
catch (error) {
|
|
73
|
+
throw new OnboardingError(`Cannot read protected SCM credential file ${path}: ${error instanceof Error ? error.message : String(error)}`, "onboarding_scm_credential_file_invalid");
|
|
74
|
+
}
|
|
75
|
+
}
|
|
76
|
+
async function readBoundedStdin(input) {
|
|
77
|
+
if (input.isTTY) {
|
|
78
|
+
throw new OnboardingError("--credential-stdin requires redirected standard input; interactive secret entry is not supported.", "onboarding_scm_credential_stdin_required");
|
|
79
|
+
}
|
|
80
|
+
const chunks = [];
|
|
81
|
+
let size = 0;
|
|
82
|
+
for await (const chunk of input) {
|
|
83
|
+
const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
|
|
84
|
+
size += bytes.length;
|
|
85
|
+
if (size > MAX_ADMIN_INPUT_BYTES) {
|
|
86
|
+
chunks.forEach((item) => item.fill(0));
|
|
87
|
+
throw new OnboardingError("SCM credential stdin exceeds 64 KiB.", "onboarding_scm_credential_invalid");
|
|
88
|
+
}
|
|
89
|
+
chunks.push(Buffer.from(bytes));
|
|
90
|
+
}
|
|
91
|
+
if (size < 2) {
|
|
92
|
+
throw new OnboardingError("SCM credential stdin is empty.", "onboarding_scm_credential_invalid");
|
|
93
|
+
}
|
|
94
|
+
const result = Buffer.concat(chunks);
|
|
95
|
+
chunks.forEach((item) => item.fill(0));
|
|
96
|
+
return result;
|
|
97
|
+
}
|
|
98
|
+
//# sourceMappingURL=scm-credentials.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"scm-credentials.js","sourceRoot":"","sources":["../../src/application-onboarding/scm-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,OAAO,MAAM,cAAc,CAAC;AAEnC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,yBAAyB,EACzB,yBAAyB,EACzB,6BAA6B,EAI9B,MAAM,cAAc,CAAC;AAEtB,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAOrC,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY;IAC5D,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,qBAAqB,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAY,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC/F,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,oCAAoC,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACrG,8BAA8B,CAC/B,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAqB,EACrB,OAAmC,EACnC,KAAK,GAAa,OAAO,CAAC,KAAK;IAE/B,IAAI,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CACvB,2DAA2D,EAC3D,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,CAAC,OAAO,CAAC,eAAe;QAAE,OAAO,SAAS,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,cAAc;QAClC,CAAC,CAAC,MAAM,2BAA2B,CAAC,OAAO,CAAC,cAAc,CAAC;QAC3D,CAAC,CAAC,MAAM,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,CAAC;QACH,IAAI,GAAY,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,eAAe,CAAC,0CAA0C,EAAE,mCAAmC,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,KAAK,YAAY;YACtC,CAAC,CAAC,yBAAyB;YAC3B,CAAC,CAAC,QAAQ,KAAK,YAAY;gBACzB,CAAC,CAAC,yBAAyB;gBAC3B,CAAC,CAAC,6BAA6B,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,eAAe,CACvB,2CAA2C,QAAQ,mBAAmB,EACtE,mCAAmC,CACpC,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,IAAY;IACrD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,IAAI,GAAG,qBAAqB,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAC;YACtG,CAAC;YACD,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC9E,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,6CAA6C,IAAI,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAC9G,wCAAwC,CACzC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,KAAe;IAC7C,IAAK,KAA8B,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CACvB,mGAAmG,EACnG,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1E,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;YACjC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,IAAI,eAAe,CAAC,sCAAsC,EAAE,mCAAmC,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,gCAAgC,EAAE,mCAAmC,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC;AAChB,CAAC"}
|