@ozyman42/ozy-cli 0.4.5-windows-x64.0 → 0.4.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (202) hide show
  1. package/dist/commands/git/hosts.js +18 -0
  2. package/dist/commands/git/hosts.js.map +1 -0
  3. package/dist/commands/git/index.js +8 -0
  4. package/dist/commands/git/index.js.map +1 -0
  5. package/dist/commands/git/setup.js +145 -0
  6. package/dist/commands/git/setup.js.map +1 -0
  7. package/dist/commands/index.js +13 -0
  8. package/dist/commands/index.js.map +1 -0
  9. package/dist/commands/npm/index.js +7 -0
  10. package/dist/commands/npm/index.js.map +1 -0
  11. package/dist/commands/npm/setup/git-remote.js +66 -0
  12. package/dist/commands/npm/setup/git-remote.js.map +1 -0
  13. package/dist/commands/npm/setup/index.js +168 -0
  14. package/dist/commands/npm/setup/index.js.map +1 -0
  15. package/dist/commands/npm/setup/npm-auth.js +62 -0
  16. package/dist/commands/npm/setup/npm-auth.js.map +1 -0
  17. package/dist/commands/npm/setup/package-json-validate.js +47 -0
  18. package/dist/commands/npm/setup/package-json-validate.js.map +1 -0
  19. package/dist/commands/npm/setup/package-registry.js +20 -0
  20. package/dist/commands/npm/setup/package-registry.js.map +1 -0
  21. package/dist/commands/npm/setup/setup.test.js +95 -0
  22. package/dist/commands/npm/setup/setup.test.js.map +1 -0
  23. package/dist/commands/npm/setup/trusted-publishing.js +84 -0
  24. package/dist/commands/npm/setup/trusted-publishing.js.map +1 -0
  25. package/dist/commands/npm/setup/workflow.js +19 -0
  26. package/dist/commands/npm/setup/workflow.js.map +1 -0
  27. package/dist/commands/ssh/get-sk-credential.js +104 -0
  28. package/dist/commands/ssh/get-sk-credential.js.map +1 -0
  29. package/dist/commands/ssh/index.js +7 -0
  30. package/dist/commands/ssh/index.js.map +1 -0
  31. package/dist/commands/upgrade.js +81 -0
  32. package/dist/commands/upgrade.js.map +1 -0
  33. package/dist/common/command.js +15 -0
  34. package/dist/common/command.js.map +1 -0
  35. package/dist/common/constants.js +24 -0
  36. package/dist/common/constants.js.map +1 -0
  37. package/dist/common/effective-modules-extensions.js +13 -0
  38. package/dist/common/effective-modules-extensions.js.map +1 -0
  39. package/dist/common/log.js +4 -0
  40. package/dist/common/log.js.map +1 -0
  41. package/dist/common/render-caller-tree.js +20 -0
  42. package/dist/common/render-caller-tree.js.map +1 -0
  43. package/dist/entrypoints/ozy-signing-agent.js +48 -0
  44. package/dist/entrypoints/ozy-signing-agent.js.map +1 -0
  45. package/dist/entrypoints/ozy-ssh-keygen.js +9 -0
  46. package/dist/entrypoints/ozy-ssh-keygen.js.map +1 -0
  47. package/dist/entrypoints/ozy-virtual-security-key.js +18 -0
  48. package/dist/entrypoints/ozy-virtual-security-key.js.map +1 -0
  49. package/dist/entrypoints/ozy.js +3 -0
  50. package/dist/entrypoints/ozy.js.map +1 -0
  51. package/dist/index.js +2 -0
  52. package/dist/index.js.map +1 -0
  53. package/dist/internal/thing.js +4 -0
  54. package/dist/internal/thing.js.map +1 -0
  55. package/dist/modules/cli/agent-client/impl.js +109 -0
  56. package/dist/modules/cli/agent-client/impl.js.map +1 -0
  57. package/dist/modules/cli/agent-client/interface.js +11 -0
  58. package/dist/modules/cli/agent-client/interface.js.map +1 -0
  59. package/dist/modules/cli/git/impl.js +124 -0
  60. package/dist/modules/cli/git/impl.js.map +1 -0
  61. package/dist/modules/cli/git/interface.js +3 -0
  62. package/dist/modules/cli/git/interface.js.map +1 -0
  63. package/dist/modules/cli/git/submodule/fix.js +257 -0
  64. package/dist/modules/cli/git/submodule/fix.js.map +1 -0
  65. package/dist/modules/cli/git/submodule/git-state.js +154 -0
  66. package/dist/modules/cli/git/submodule/git-state.js.map +1 -0
  67. package/dist/modules/cli/git/submodule/gitmodules.js +113 -0
  68. package/dist/modules/cli/git/submodule/gitmodules.js.map +1 -0
  69. package/dist/modules/cli/git/submodule/printer.js +232 -0
  70. package/dist/modules/cli/git/submodule/printer.js.map +1 -0
  71. package/dist/modules/cli/git/submodule/resolve-git-dir.js +16 -0
  72. package/dist/modules/cli/git/submodule/resolve-git-dir.js.map +1 -0
  73. package/dist/modules/cli/github/impl.js +137 -0
  74. package/dist/modules/cli/github/impl.js.map +1 -0
  75. package/dist/modules/cli/github/interface.js +2 -0
  76. package/dist/modules/cli/github/interface.js.map +1 -0
  77. package/dist/modules/cli/index.js +9 -0
  78. package/dist/modules/cli/index.js.map +1 -0
  79. package/dist/modules/common/crypto/impl.js +133 -0
  80. package/dist/modules/common/crypto/impl.js.map +1 -0
  81. package/dist/modules/common/crypto/interface.js +2 -0
  82. package/dist/modules/common/crypto/interface.js.map +1 -0
  83. package/dist/modules/common/index.js +10 -0
  84. package/dist/modules/common/index.js.map +1 -0
  85. package/dist/modules/common/kep-map-store/impl.js +42 -0
  86. package/dist/modules/common/kep-map-store/impl.js.map +1 -0
  87. package/dist/modules/common/kep-map-store/interface.js +2 -0
  88. package/dist/modules/common/kep-map-store/interface.js.map +1 -0
  89. package/dist/modules/common/os-platform/caller-info.js +132 -0
  90. package/dist/modules/common/os-platform/caller-info.js.map +1 -0
  91. package/dist/modules/common/os-platform/impl.js +87 -0
  92. package/dist/modules/common/os-platform/impl.js.map +1 -0
  93. package/dist/modules/common/os-platform/interface.js +2 -0
  94. package/dist/modules/common/os-platform/interface.js.map +1 -0
  95. package/dist/modules/common/os-platform/virtual-hid/index.js +12 -0
  96. package/dist/modules/common/os-platform/virtual-hid/index.js.map +1 -0
  97. package/dist/modules/common/os-platform/virtual-hid/linux.js +5 -0
  98. package/dist/modules/common/os-platform/virtual-hid/linux.js.map +1 -0
  99. package/dist/modules/common/os-platform/virtual-hid/mac.js +119 -0
  100. package/dist/modules/common/os-platform/virtual-hid/mac.js.map +1 -0
  101. package/dist/modules/common/os-platform/virtual-hid/windows.js +5 -0
  102. package/dist/modules/common/os-platform/virtual-hid/windows.js.map +1 -0
  103. package/dist/modules/common/ssh-config/impl.js +116 -0
  104. package/dist/modules/common/ssh-config/impl.js.map +1 -0
  105. package/dist/modules/common/ssh-config/interface.js +10 -0
  106. package/dist/modules/common/ssh-config/interface.js.map +1 -0
  107. package/dist/modules/ssh-agent/index.js +8 -0
  108. package/dist/modules/ssh-agent/index.js.map +1 -0
  109. package/dist/modules/ssh-agent/session/impl.js +265 -0
  110. package/dist/modules/ssh-agent/session/impl.js.map +1 -0
  111. package/dist/modules/ssh-agent/session/interface-rpc.js +20 -0
  112. package/dist/modules/ssh-agent/session/interface-rpc.js.map +1 -0
  113. package/dist/modules/ssh-agent/session/interface.js +32 -0
  114. package/dist/modules/ssh-agent/session/interface.js.map +1 -0
  115. package/dist/modules/ssh-agent/session/passkey-prf-page.js +204 -0
  116. package/dist/modules/ssh-agent/session/passkey-prf-page.js.map +1 -0
  117. package/dist/modules/ssh-agent/session/prf-flow.js +103 -0
  118. package/dist/modules/ssh-agent/session/prf-flow.js.map +1 -0
  119. package/dist/modules/ssh-agent/ssh-agent/impl.js +117 -0
  120. package/dist/modules/ssh-agent/ssh-agent/impl.js.map +1 -0
  121. package/dist/modules/ssh-agent/ssh-agent/interface.js +2 -0
  122. package/dist/modules/ssh-agent/ssh-agent/interface.js.map +1 -0
  123. package/dist/scripts/build.js +460 -0
  124. package/dist/scripts/build.js.map +1 -0
  125. package/dist/scripts/check-npm-version.js +8 -0
  126. package/dist/scripts/check-npm-version.js.map +1 -0
  127. package/dist/scripts/kill-existing-agent.js +21 -0
  128. package/dist/scripts/kill-existing-agent.js.map +1 -0
  129. package/dist/scripts/publish.js +46 -0
  130. package/dist/scripts/publish.js.map +1 -0
  131. package/multi-call.js +85 -0
  132. package/package.json +55 -11
  133. package/src/commands/git/hosts.ts +20 -0
  134. package/src/commands/git/index.ts +9 -0
  135. package/src/commands/git/setup.ts +182 -0
  136. package/src/commands/index.ts +15 -0
  137. package/src/commands/npm/index.ts +8 -0
  138. package/src/commands/npm/setup/git-remote.ts +78 -0
  139. package/src/commands/npm/setup/index.ts +189 -0
  140. package/src/commands/npm/setup/npm-auth.ts +58 -0
  141. package/src/commands/npm/setup/package-json-validate.ts +68 -0
  142. package/src/commands/npm/setup/package-registry.ts +24 -0
  143. package/src/commands/npm/setup/publish-workflow.yml +35 -0
  144. package/src/commands/npm/setup/setup.test.ts +117 -0
  145. package/src/commands/npm/setup/trusted-publishing.ts +106 -0
  146. package/src/commands/npm/setup/workflow.ts +20 -0
  147. package/src/commands/ssh/get-sk-credential.ts +110 -0
  148. package/src/commands/ssh/index.ts +8 -0
  149. package/src/commands/upgrade.ts +90 -0
  150. package/src/common/command.ts +16 -0
  151. package/src/common/constants.ts +24 -0
  152. package/src/common/effective-modules-extensions.ts +24 -0
  153. package/src/common/log.ts +3 -0
  154. package/src/common/render-caller-tree.ts +22 -0
  155. package/src/entrypoints/ozy-signing-agent.ts +48 -0
  156. package/src/entrypoints/ozy-ssh-keygen.ts +10 -0
  157. package/src/entrypoints/ozy-virtual-security-key.ts +21 -0
  158. package/src/entrypoints/ozy.ts +2 -0
  159. package/src/index.ts +1 -0
  160. package/src/internal/thing.ts +3 -0
  161. package/src/modules/cli/agent-client/impl.ts +152 -0
  162. package/src/modules/cli/agent-client/interface.ts +17 -0
  163. package/src/modules/cli/git/impl.ts +133 -0
  164. package/src/modules/cli/git/interface.ts +23 -0
  165. package/src/modules/cli/git/submodule/fix.ts +298 -0
  166. package/src/modules/cli/git/submodule/git-state.ts +217 -0
  167. package/src/modules/cli/git/submodule/gitmodules.ts +126 -0
  168. package/src/modules/cli/git/submodule/printer.ts +256 -0
  169. package/src/modules/cli/git/submodule/resolve-git-dir.ts +14 -0
  170. package/src/modules/cli/github/impl.ts +169 -0
  171. package/src/modules/cli/github/interface.ts +29 -0
  172. package/src/modules/cli/index.ts +16 -0
  173. package/src/modules/common/crypto/impl.ts +173 -0
  174. package/src/modules/common/crypto/interface.ts +20 -0
  175. package/src/modules/common/index.ts +19 -0
  176. package/src/modules/common/kep-map-store/impl.ts +47 -0
  177. package/src/modules/common/kep-map-store/interface.ts +9 -0
  178. package/src/modules/common/os-platform/caller-info.ts +152 -0
  179. package/src/modules/common/os-platform/impl.ts +86 -0
  180. package/src/modules/common/os-platform/interface.ts +16 -0
  181. package/src/modules/common/os-platform/virtual-hid/index.ts +12 -0
  182. package/src/modules/common/os-platform/virtual-hid/linux.ts +7 -0
  183. package/src/modules/common/os-platform/virtual-hid/mac.ts +150 -0
  184. package/src/modules/common/os-platform/virtual-hid/windows.ts +7 -0
  185. package/src/modules/common/ssh-config/impl.ts +130 -0
  186. package/src/modules/common/ssh-config/interface.ts +33 -0
  187. package/src/modules/ssh-agent/index.ts +13 -0
  188. package/src/modules/ssh-agent/session/agent-notes.md +210 -0
  189. package/src/modules/ssh-agent/session/design.md +2 -0
  190. package/src/modules/ssh-agent/session/html-refactor.md +23 -0
  191. package/src/modules/ssh-agent/session/impl.ts +328 -0
  192. package/src/modules/ssh-agent/session/interface-rpc.ts +24 -0
  193. package/src/modules/ssh-agent/session/interface.ts +62 -0
  194. package/src/modules/ssh-agent/session/passkey-prf-page.ts +224 -0
  195. package/src/modules/ssh-agent/session/prf-flow.ts +152 -0
  196. package/src/modules/ssh-agent/ssh-agent/impl.ts +136 -0
  197. package/src/modules/ssh-agent/ssh-agent/interface.ts +9 -0
  198. package/src/scripts/build.ts +543 -0
  199. package/src/scripts/check-npm-version.ts +7 -0
  200. package/src/scripts/kill-existing-agent.ts +22 -0
  201. package/src/scripts/publish.ts +47 -0
  202. package/multi-call-binary +0 -0
@@ -0,0 +1,20 @@
1
+ import { Effect, Option } from 'effect';
2
+ export function fetchPackageInfo(name) {
3
+ return Effect.tryPromise({
4
+ try: async () => {
5
+ const res = await fetch(`https://registry.npmjs.org/${encodeURIComponent(name)}`);
6
+ if (res.status === 404)
7
+ return Option.none();
8
+ if (!res.ok)
9
+ throw new Error(`registry error ${res.status} for ${name}`);
10
+ const data = await res.json();
11
+ return Option.some({
12
+ name: data.name,
13
+ latestVersion: data['dist-tags']?.latest,
14
+ distTags: data['dist-tags'] ?? {},
15
+ });
16
+ },
17
+ catch: (e) => e instanceof Error ? e.message : String(e),
18
+ });
19
+ }
20
+ //# sourceMappingURL=package-registry.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"package-registry.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/package-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAQxC,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClF,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC,IAAI,EAAuB,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,QAAQ,IAAI,EAAE,CAAC,CAAC;YACzE,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAS,CAAC;YACrC,OAAO,MAAM,CAAC,IAAI,CAAC;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,aAAa,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM;gBACxC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,95 @@
1
+ import { describe, test, expect, beforeEach, afterEach } from 'bun:test';
2
+ import * as fs from 'node:fs/promises';
3
+ import * as os from 'node:os';
4
+ import * as path from 'node:path';
5
+ import { validatePackageJson } from './package-json-validate';
6
+ import { parseGithubOwnerRepo } from './git-remote';
7
+ import { workflowExists, createWorkflow } from './workflow';
8
+ import { Option } from "effect";
9
+ // ── validatePackageJson ──────────────────────────────────────────────────────
10
+ describe('validatePackageJson', () => {
11
+ const base = {
12
+ name: '@scope/pkg',
13
+ version: '1.0.0',
14
+ repository: { type: 'git', url: 'git+https://github.com/owner/repo.git' },
15
+ publishConfig: { access: 'public', provenance: true },
16
+ scripts: { build: 'bun run build' },
17
+ files: ['dist'],
18
+ };
19
+ test('returns no issues for a valid package', () => {
20
+ expect(validatePackageJson(base)).toEqual([]);
21
+ });
22
+ test('fatal: missing version', () => {
23
+ const issues = validatePackageJson({ ...base, version: '' });
24
+ expect(issues.some(i => i.field === 'version' && i.fatal)).toBe(true);
25
+ });
26
+ test('fatal: missing build script', () => {
27
+ const issues = validatePackageJson({ ...base, scripts: {} });
28
+ expect(issues.some(i => i.field === 'scripts.build' && i.fatal)).toBe(true);
29
+ });
30
+ test('non-fatal: missing repository', () => {
31
+ const issues = validatePackageJson({ ...base, repository: undefined });
32
+ expect(issues.some(i => i.field === 'repository' && !i.fatal)).toBe(true);
33
+ });
34
+ test('non-fatal: invalid repository url', () => {
35
+ const issues = validatePackageJson({ ...base, repository: { type: 'git', url: 'git+.git' } });
36
+ expect(issues.some(i => i.field === 'repository.url' && !i.fatal)).toBe(true);
37
+ });
38
+ test('non-fatal: publishConfig.access not public', () => {
39
+ const issues = validatePackageJson({ ...base, publishConfig: { access: 'restricted', provenance: true } });
40
+ expect(issues.some(i => i.field === 'publishConfig.access')).toBe(true);
41
+ });
42
+ test('non-fatal: publishConfig.provenance not true', () => {
43
+ const issues = validatePackageJson({ ...base, publishConfig: { access: 'public', provenance: false } });
44
+ expect(issues.some(i => i.field === 'publishConfig.provenance')).toBe(true);
45
+ });
46
+ test('non-fatal: dist not in files', () => {
47
+ const issues = validatePackageJson({ ...base, files: ['src'] });
48
+ expect(issues.some(i => i.field === 'files')).toBe(true);
49
+ });
50
+ });
51
+ // ── parseGithubOwnerRepo ─────────────────────────────────────────────────────
52
+ describe('parseGithubOwnerRepo', () => {
53
+ test('parses https url', () => {
54
+ expect(parseGithubOwnerRepo('https://github.com/owner/repo.git')).toEqual(Option.some({ owner: 'owner', repo: 'repo' }));
55
+ });
56
+ test('parses https url without .git', () => {
57
+ expect(parseGithubOwnerRepo('https://github.com/owner/repo')).toEqual(Option.some({ owner: 'owner', repo: 'repo' }));
58
+ });
59
+ test('parses standard ssh url', () => {
60
+ expect(parseGithubOwnerRepo('git@github.com:owner/repo.git')).toEqual(Option.some({ owner: 'owner', repo: 'repo' }));
61
+ });
62
+ test('parses ssh alias url', () => {
63
+ expect(parseGithubOwnerRepo('git@github-ozyman42:ozyman42/test.git')).toEqual(Option.some({ owner: 'ozyman42', repo: 'test' }));
64
+ });
65
+ test('returns null for unrecognised url', () => {
66
+ expect(parseGithubOwnerRepo('not-a-url')).toBeNull();
67
+ });
68
+ });
69
+ // ── workflow helpers ─────────────────────────────────────────────────────────
70
+ describe('workflow', () => {
71
+ let tmpDir;
72
+ beforeEach(async () => {
73
+ tmpDir = await fs.mkdtemp(path.join(os.tmpdir(), 'ozy-test-'));
74
+ });
75
+ afterEach(async () => {
76
+ await fs.rm(tmpDir, { recursive: true, force: true });
77
+ });
78
+ test('workflowExists returns false when missing', async () => {
79
+ expect(await workflowExists(tmpDir)).toBe(false);
80
+ });
81
+ test('createWorkflow creates a valid yaml file', async () => {
82
+ await createWorkflow(tmpDir);
83
+ expect(await workflowExists(tmpDir)).toBe(true);
84
+ const content = await fs.readFile(path.join(tmpDir, '.github/workflows/publish.yml'), 'utf8');
85
+ expect(content).toContain('npm publish dist/');
86
+ expect(content).toContain('id-token: write');
87
+ expect(content).toContain('bun run build');
88
+ });
89
+ test('createWorkflow is idempotent', async () => {
90
+ await createWorkflow(tmpDir);
91
+ await createWorkflow(tmpDir);
92
+ expect(await workflowExists(tmpDir)).toBe(true);
93
+ });
94
+ });
95
+ //# sourceMappingURL=setup.test.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"setup.test.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/setup.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACzE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,gFAAgF;AAEhF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,MAAM,IAAI,GAAG;QACX,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,uCAAuC,EAAE;QACzE,aAAa,EAAE,EAAE,MAAM,EAAE,QAAiB,EAAE,UAAU,EAAE,IAAI,EAAE;QAC9D,OAAO,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE;QACnC,KAAK,EAAE,CAAC,MAAM,CAAC;KAChB,CAAC;IAEF,IAAI,CAAC,uCAAuC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,SAAgB,EAAE,CAAC,CAAC;QAC9E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC9F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,gBAAgB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3G,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACxD,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACxG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,0BAA0B,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,IAAI,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAC5B,MAAM,CAAC,oBAAoB,CAAC,mCAAmC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC3H,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACnC,MAAM,CAAC,oBAAoB,CAAC,+BAA+B,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACvH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,oBAAoB,CAAC,uCAAuC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAClI,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,oBAAoB,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,gFAAgF;AAEhF,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,IAAI,MAAc,CAAC;IAEnB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,MAAM,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QAC3D,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,+BAA+B,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAC7C,MAAM,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC9C,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -0,0 +1,84 @@
1
+ import { $ } from 'bun';
2
+ import { createInterface } from 'node:readline';
3
+ import { Effect } from 'effect';
4
+ import { log } from '@/common/log';
5
+ function encodePackageName(name) {
6
+ if (!name.startsWith('@'))
7
+ return encodeURIComponent(name);
8
+ const slash = name.indexOf('/');
9
+ return `@${name.slice(1, slash)}%2F${name.slice(slash + 1)}`;
10
+ }
11
+ function promptPasscode() {
12
+ const rl = createInterface({ input: process.stdin, output: process.stdout });
13
+ return new Promise(resolve => {
14
+ rl.question(' enter the passcode from the browser: ', answer => {
15
+ rl.close();
16
+ resolve(answer.trim());
17
+ });
18
+ });
19
+ }
20
+ async function registryPost(url, body, authToken, { existingOtp, alreadyExistsStatus } = {}) {
21
+ const headers = {
22
+ Authorization: `Bearer ${authToken}`,
23
+ 'Content-Type': 'application/json',
24
+ };
25
+ const post = (otp) => fetch(url, {
26
+ method: 'POST',
27
+ headers: otp ? { ...headers, 'npm-otp': otp } : headers,
28
+ body,
29
+ });
30
+ const check = (res) => {
31
+ if (res.ok)
32
+ return true;
33
+ if (alreadyExistsStatus && res.status === alreadyExistsStatus)
34
+ return true;
35
+ return false;
36
+ };
37
+ if (existingOtp) {
38
+ const res = await post(existingOtp);
39
+ if (check(res))
40
+ return { otp: existingOtp, alreadyExists: !res.ok };
41
+ }
42
+ let res = await post();
43
+ if (check(res))
44
+ return { otp: undefined, alreadyExists: !res.ok };
45
+ if (res.status === 401) {
46
+ const notice = res.headers.get('npm-notice') ?? '';
47
+ const loginUrl = notice.match(/https:\/\/www\.npmjs\.com\/login\/[a-f0-9-]+/)?.[0];
48
+ if (!loginUrl)
49
+ throw new Error('2FA required but could not parse login URL');
50
+ await $ `open ${loginUrl}`.quiet().nothrow();
51
+ const otp = await promptPasscode();
52
+ res = await post(otp);
53
+ if (check(res))
54
+ return { otp, alreadyExists: !res.ok };
55
+ }
56
+ throw new Error(`${res.status} ${await res.text()}`);
57
+ }
58
+ export function addTrustedPublisher(name, ownerRepo, token) {
59
+ const encoded = encodePackageName(name);
60
+ log(' setting up (may require 2FA)...');
61
+ const body = JSON.stringify([{
62
+ type: 'github',
63
+ claims: { repository: ownerRepo, workflow_ref: { file: 'pipeline.yml' } },
64
+ permissions: ['createPackage'],
65
+ }]);
66
+ return Effect.tryPromise({
67
+ try: async () => {
68
+ const { otp, alreadyExists } = await registryPost(`https://registry.npmjs.org/-/package/${encoded}/trust`, body, token, { alreadyExistsStatus: 409 });
69
+ return { alreadyConfigured: alreadyExists, otp };
70
+ },
71
+ catch: (e) => `trust setup failed: ${e instanceof Error ? e.message : String(e)}`,
72
+ });
73
+ }
74
+ export function setPackageAccessPolicy(name, token, existingOtp) {
75
+ const encoded = encodePackageName(name);
76
+ const body = JSON.stringify({ publish_requires_tfa: true, automation_token_overrides_tfa: false });
77
+ return Effect.tryPromise({
78
+ try: async () => {
79
+ await registryPost(`https://registry.npmjs.org/-/package/${encoded}/access`, body, token, { existingOtp });
80
+ },
81
+ catch: (e) => `access policy setup failed: ${e instanceof Error ? e.message : String(e)}`,
82
+ });
83
+ }
84
+ //# sourceMappingURL=trusted-publishing.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"trusted-publishing.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/trusted-publishing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc;IACrB,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE;QAC3B,EAAE,CAAC,QAAQ,CAAC,yCAAyC,EAAE,MAAM,CAAC,EAAE;YAC9D,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,GAAW,EACX,IAAY,EACZ,SAAiB,EACjB,EAAE,WAAW,EAAE,mBAAmB,KAA6D,EAAE;IAEjG,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,SAAS,EAAE;QACpC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAY,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE;QACxC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO;QACvD,IAAI;KACL,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,CAAC,GAAa,EAAE,EAAE;QAC9B,IAAI,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,mBAAmB,IAAI,GAAG,CAAC,MAAM,KAAK,mBAAmB;YAAE,OAAO,IAAI,CAAC;QAC3E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,GAAG,GAAG,MAAM,IAAI,EAAE,CAAC;IACvB,IAAI,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAElE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAC7E,MAAM,CAAC,CAAA,QAAQ,QAAQ,EAAE,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,cAAc,EAAE,CAAC;QACnC,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,KAAK,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,SAAiB,EACjB,KAAa;IAEb,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,GAAG,CAAC,mCAAmC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3B,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE;YACzE,WAAW,EAAE,CAAC,eAAe,CAAC;SAC/B,CAAC,CAAC,CAAC;IACJ,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,MAAM,YAAY,CAC/C,wCAAwC,OAAO,QAAQ,EAAE,IAAI,EAAE,KAAK,EACpE,EAAE,mBAAmB,EAAE,GAAG,EAAE,CAC7B,CAAC;YACF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC;QACnD,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KAClF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,KAAa,EACb,WAAoB;IAEpB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,YAAY,CAChB,wCAAwC,OAAO,SAAS,EAAE,IAAI,EAAE,KAAK,EACrE,EAAE,WAAW,EAAE,CAChB,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;KAC1F,CAAC,CAAC;AACL,CAAC"}
@@ -0,0 +1,19 @@
1
+ import * as fs from 'node:fs/promises';
2
+ import * as path from 'node:path';
3
+ import WORKFLOW_TEMPLATE from './publish-workflow.yml' with { type: 'text' };
4
+ const WORKFLOW_PATH = '.github/workflows/publish.yml';
5
+ export async function workflowExists(repoRoot) {
6
+ try {
7
+ await fs.access(path.join(repoRoot, WORKFLOW_PATH));
8
+ return true;
9
+ }
10
+ catch {
11
+ return false;
12
+ }
13
+ }
14
+ export async function createWorkflow(repoRoot) {
15
+ const fullPath = path.join(repoRoot, WORKFLOW_PATH);
16
+ await fs.mkdir(path.dirname(fullPath), { recursive: true });
17
+ await fs.writeFile(fullPath, WORKFLOW_TEMPLATE, 'utf8');
18
+ }
19
+ //# sourceMappingURL=workflow.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"workflow.js","sourceRoot":"","sources":["../../../../../../../src/commands/npm/setup/workflow.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,iBAAiB,MAAM,wBAAwB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAE7E,MAAM,aAAa,GAAG,+BAA+B,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC"}
@@ -0,0 +1,104 @@
1
+ import { Effect } from "effect";
2
+ import { makeCommand } from "@/common/command";
3
+ import * as path from 'path';
4
+ import * as fs from 'fs';
5
+ import { log } from "@/common/log";
6
+ import { selectFromList } from "@ozyman42/interactive-cli-select";
7
+ const OPENSSH_MAGIC = Buffer.from('openssh-key-v1\0', 'utf8');
8
+ function isSkPublicKey(pubKeyPath) {
9
+ try {
10
+ const keyType = fs.readFileSync(pubKeyPath, 'utf8').trim().split(/\s+/)[0] ?? '';
11
+ return keyType.startsWith('sk-');
12
+ }
13
+ catch {
14
+ return false;
15
+ }
16
+ }
17
+ function parseCredentialId(privateKeyPath) {
18
+ const base64 = fs.readFileSync(privateKeyPath, 'utf8')
19
+ .split('\n')
20
+ .filter(line => !line.startsWith('-----'))
21
+ .join('');
22
+ const buf = Buffer.from(base64, 'base64');
23
+ if (!buf.subarray(0, OPENSSH_MAGIC.length).equals(OPENSSH_MAGIC)) {
24
+ throw new Error('Not an OpenSSH private key file.');
25
+ }
26
+ let off = OPENSSH_MAGIC.length;
27
+ function readString() {
28
+ if (off + 4 > buf.length)
29
+ throw new Error('Unexpected end of buffer.');
30
+ const len = buf.readUInt32BE(off);
31
+ off += 4;
32
+ if (off + len > buf.length)
33
+ throw new Error('Buffer underflow.');
34
+ const chunk = buf.subarray(off, off + len);
35
+ off += len;
36
+ return chunk;
37
+ }
38
+ function readUint32() {
39
+ if (off + 4 > buf.length)
40
+ throw new Error('Unexpected end of buffer.');
41
+ const val = buf.readUInt32BE(off);
42
+ off += 4;
43
+ return val;
44
+ }
45
+ const cipherName = readString().toString('utf8');
46
+ if (cipherName !== 'none')
47
+ throw new Error('Encrypted private keys are not supported.');
48
+ readString(); // kdf name
49
+ readString(); // kdf options
50
+ if (readUint32() !== 1)
51
+ throw new Error('Expected exactly 1 key.');
52
+ readString(); // public key blob
53
+ const pb = readString(); // private key block
54
+ let p = 0;
55
+ function pbString() {
56
+ if (p + 4 > pb.length)
57
+ throw new Error('Unexpected end of private block.');
58
+ const len = pb.readUInt32BE(p);
59
+ p += 4;
60
+ if (p + len > pb.length)
61
+ throw new Error('Private block underflow.');
62
+ const chunk = pb.subarray(p, p + len);
63
+ p += len;
64
+ return chunk;
65
+ }
66
+ const check1 = pb.readUInt32BE(p);
67
+ p += 4;
68
+ const check2 = pb.readUInt32BE(p);
69
+ p += 4;
70
+ if (check1 !== check2)
71
+ throw new Error('Private key integrity check failed — key may be encrypted or corrupt.');
72
+ const keyType = pbString().toString('utf8');
73
+ if (keyType.includes('ecdsa')) {
74
+ pbString(); // curve identifier
75
+ pbString(); // ec_point
76
+ }
77
+ else if (keyType.includes('ed25519')) {
78
+ pbString(); // public key (32 bytes)
79
+ }
80
+ else {
81
+ throw new Error(`Unsupported security key type: ${keyType}`);
82
+ }
83
+ pbString(); // application string (e.g. 'ssh:')
84
+ p += 1; // flags byte
85
+ return pbString().toString('hex');
86
+ }
87
+ export const skCredential = makeCommand('sk-credential', 'get credential id of a given ssh security key pointer', () => Effect.gen(function* () {
88
+ // Effect v3 → v4 shim: Effect.async was renamed to Effect.callback
89
+ Effect.async = Effect.callback;
90
+ const cwd = process.cwd();
91
+ const skKeys = fs.readdirSync(cwd).filter(name => !name.endsWith('.pub') && isSkPublicKey(path.join(cwd, `${name}.pub`)));
92
+ if (skKeys.length === 0) {
93
+ log('No SSH security keys found.');
94
+ return;
95
+ }
96
+ const choice = yield* selectFromList({
97
+ options: skKeys,
98
+ getKey: o => o,
99
+ renderOption: o => o,
100
+ }).pipe(Effect.orDie);
101
+ const credentialId = parseCredentialId(path.join(cwd, choice));
102
+ log(`Credential ID: ${credentialId}`);
103
+ }));
104
+ //# sourceMappingURL=get-sk-credential.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"get-sk-credential.js","sourceRoot":"","sources":["../../../../../../src/commands/ssh/get-sk-credential.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAGlE,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAE9D,SAAS,aAAa,CAAC,UAAkB;IACvC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjF,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,cAAsB;IAC/C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC;SACnD,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAE1C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC;IAE/B,SAAS,UAAU;QACjB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,IAAI,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,GAAG,CAAC;QACvD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,SAAS,UAAU;QACjB,IAAI,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAAC,GAAG,IAAI,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,MAAM,UAAU,GAAG,UAAU,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,UAAU,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxF,UAAU,EAAE,CAAC,CAAC,WAAW;IACzB,UAAU,EAAE,CAAC,CAAC,cAAc;IAE5B,IAAI,UAAU,EAAE,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACnE,UAAU,EAAE,CAAC,CAAC,kBAAkB;IAEhC,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,oBAAoB;IAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;IAEV,SAAS,QAAQ;QACf,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,GAAG,EAAE,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;QAAC,CAAC,IAAI,GAAG,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAEhH,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,mBAAmB;QAC/B,QAAQ,EAAE,CAAC,CAAC,WAAW;IACzB,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACvC,QAAQ,EAAE,CAAC,CAAC,wBAAwB;IACtC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,kCAAkC,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,QAAQ,EAAE,CAAC,CAAC,mCAAmC;IAC/C,CAAC,IAAI,CAAC,CAAC,CAAK,aAAa;IAEzB,OAAO,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,WAAW,CAAC,eAAe,EAAE,uDAAuD,EAAE,GAAG,EAAE,CACrH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,mEAAmE;IAClE,MAAc,CAAC,KAAK,GAAI,MAAc,CAAC,QAAQ,CAAC;IAEjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAC/C,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CACvE,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACnC,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC;QACnC,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACd,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KACrB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtB,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IAC/D,GAAG,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC;AACxC,CAAC,CAAC,CACH,CAAC"}
@@ -0,0 +1,7 @@
1
+ import { Command } from 'commander';
2
+ import { skCredential } from './get-sk-credential';
3
+ export const ssh = new Command('ssh')
4
+ .summary('ssh related utility commands');
5
+ [skCredential]
6
+ .forEach(cmd => { ssh.addCommand(cmd); });
7
+ //# sourceMappingURL=index.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../src/commands/ssh/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC;KAClC,OAAO,CAAC,8BAA8B,CAAC,CAAC;AAE3C,CAAC,YAAY,CAAC;KACX,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC"}
@@ -0,0 +1,81 @@
1
+ import { existsSync } from "node:fs";
2
+ import { dirname, join } from "node:path";
3
+ import { Effect, Option } from "effect";
4
+ import { makeCommand } from "@/common/command";
5
+ import { CLI_CMD_NAME, PACKAGE_NAME } from "@/common/constants";
6
+ function findLockFile(dir) {
7
+ let current = dir;
8
+ while (true) {
9
+ if (existsSync(join(current, "bun.lock")) || existsSync(join(current, "bun.lockb")))
10
+ return Option.some("bun");
11
+ if (existsSync(join(current, "pnpm-lock.yaml")))
12
+ return Option.some("pnpm");
13
+ if (existsSync(join(current, "package-lock.json")))
14
+ return Option.some("npm");
15
+ const parent = dirname(current);
16
+ if (parent === current)
17
+ return Option.none();
18
+ current = parent;
19
+ }
20
+ }
21
+ function detectInstall(binaryPath) {
22
+ if (binaryPath.includes("/.bun/bin/")) {
23
+ return Option.some({ pm: "bun", scope: "global" });
24
+ }
25
+ if (binaryPath.includes("/pnpm/")) {
26
+ return Option.some({ pm: "pnpm", scope: "global" });
27
+ }
28
+ const localMatch = binaryPath.match(/^(.+\/node_modules)\/.bin\//);
29
+ if (localMatch) {
30
+ const projectRoot = dirname(localMatch[1]);
31
+ const pm = Option.getOrElse(findLockFile(projectRoot), () => "npm");
32
+ return Option.some({ pm, scope: "local", cwd: projectRoot });
33
+ }
34
+ return Option.none();
35
+ }
36
+ function buildUpgradeCommand(info) {
37
+ const pkg = `${PACKAGE_NAME}@latest`;
38
+ if (info.scope === "global") {
39
+ if (info.pm === "bun")
40
+ return ["bun", "add", "--no-cache", "-g", pkg];
41
+ if (info.pm === "pnpm")
42
+ return ["pnpm", "add", "-g", pkg];
43
+ return ["npm", "install", "-g", pkg];
44
+ }
45
+ if (info.pm === "bun")
46
+ return ["bun", "add", "--no-cache", pkg];
47
+ if (info.pm === "pnpm")
48
+ return ["pnpm", "add", pkg];
49
+ return ["npm", "install", pkg];
50
+ }
51
+ function whichOzy() {
52
+ return Effect.tryPromise({
53
+ try: async () => {
54
+ const proc = Bun.spawn(["which", CLI_CMD_NAME], { stdout: "pipe", stderr: "pipe" });
55
+ const code = await proc.exited;
56
+ if (code !== 0)
57
+ throw new Error(`${CLI_CMD_NAME} binary not found — install with: bun add --no-cache -g ${PACKAGE_NAME}@latest`);
58
+ return (await new Response(proc.stdout).text()).trim();
59
+ },
60
+ catch: (e) => e instanceof Error ? e.message : String(e),
61
+ });
62
+ }
63
+ export const upgrade = makeCommand("upgrade", `upgrade ${CLI_CMD_NAME} to the latest version`, () => Effect.gen(function* () {
64
+ const binaryPath = yield* whichOzy();
65
+ const infoOption = detectInstall(binaryPath);
66
+ if (Option.isNone(infoOption))
67
+ return yield* Effect.fail(`unknown-install: could not detect package manager from binary path: ${binaryPath}\nUpgrade manually with your package manager.`);
68
+ const info = infoOption.value;
69
+ const cmd = buildUpgradeCommand(info);
70
+ console.log(`Detected: ${info.pm} (${info.scope})`);
71
+ console.log(`Running: ${cmd.join(" ")}`);
72
+ const proc = Bun.spawn(cmd, {
73
+ cwd: info.cwd ?? process.cwd(),
74
+ stdout: "inherit",
75
+ stderr: "inherit",
76
+ });
77
+ const code = yield* Effect.promise(() => proc.exited);
78
+ if (code !== 0)
79
+ yield* Effect.fail(`install-failed: ${cmd[0]} exited with code ${code}`);
80
+ }));
81
+ //# sourceMappingURL=upgrade.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../../../../src/commands/upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAWhE,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,OAAO,GAAG,GAAG,CAAC;IAClB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAuB,CAAC,CAAC;QACjI,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAwB,CAAC,CAAC;QAC9F,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,KAAuB,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7C,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,UAAkB;IACvC,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACtC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAiB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAiB,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACnE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,KAAuB,CAAC,CAAC;QACtF,OAAO,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,EAAiB,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAiB;IAC5C,MAAM,GAAG,GAAG,GAAG,YAAY,SAAS,CAAC;IACrC,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK;YAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QACtE,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;YAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,IAAI,CAAC,EAAE,KAAK,KAAK;QAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,IAAI,CAAC,EAAE,KAAK,MAAM;QAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,MAAM,CAAC,UAAU,CAAC;QACvB,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;YAC/B,IAAI,IAAI,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,2DAA2D,YAAY,SAAS,CAAC,CAAC;YACjI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACzD,CAAC;QACD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KACzD,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC,SAAS,EAAE,WAAW,YAAY,wBAAwB,EAAE,GAAG,EAAE,CAClG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;IAErC,MAAM,UAAU,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,uEAAuE,UAAU,+CAA+C,CAAC,CAAC;IAC9J,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;IAE9B,MAAM,GAAG,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACpD,OAAO,CAAC,GAAG,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEzC,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE;QAC1B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QAC9B,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,SAAS;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtD,IAAI,IAAI,KAAK,CAAC;QACZ,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,qBAAqB,IAAI,EAAE,CAAC,CAAC;AAC7E,CAAC,CAAC,CACH,CAAC"}
@@ -0,0 +1,15 @@
1
+ import { Command } from 'commander';
2
+ import { Effect, Result } from 'effect';
3
+ import { log } from './log';
4
+ export function makeCommand(name, description, action) {
5
+ return new Command(name)
6
+ .description(description)
7
+ .action(async () => {
8
+ const result = await Effect.runPromise(action().pipe(Effect.result));
9
+ if (Result.isFailure(result)) {
10
+ log(`✗ ${result.failure}`);
11
+ }
12
+ process.exit();
13
+ });
14
+ }
15
+ //# sourceMappingURL=command.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"command.js","sourceRoot":"","sources":["../../../../../src/common/command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACxC,OAAO,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAE5B,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,WAAmB,EAC3D,MAAyC;IACzC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;SACrB,WAAW,CAAC,WAAW,CAAC;SACxB,MAAM,CAAC,KAAK,IAAI,EAAE;QACjB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACrE,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;AACP,CAAC"}
@@ -0,0 +1,24 @@
1
+ import * as path from "node:path";
2
+ import { version, name } from "../../package.json";
3
+ export const PACKAGE_NAME = name;
4
+ export const FUTURE_TOOL_NAME = "jive";
5
+ const CLI_DIR = path.dirname(process.execPath);
6
+ export const CLI_CMD_NAME = "ozy";
7
+ export const AGENT_CMD_NAME = "ozy-signing-agent";
8
+ export const AGENT_CMD_PATH = path.resolve(CLI_DIR, AGENT_CMD_NAME);
9
+ export const CLI_CMD_PATH = path.resolve(CLI_DIR, CLI_CMD_NAME);
10
+ export const AGENT_SOCK_FILE_PATH = path.resolve(CLI_DIR, `${AGENT_CMD_NAME}.sock`);
11
+ export const AGENT_LOG_FILE_PATH = path.resolve(CLI_DIR, `${AGENT_CMD_NAME}.log`);
12
+ export const AGENT_PID_FILE_PATH = path.resolve(CLI_DIR, `${AGENT_CMD_NAME}.pid`);
13
+ export const AGENT_PORT_FILE_PATH = path.resolve(CLI_DIR, `${AGENT_CMD_NAME}.port`);
14
+ export const CRED_ID_COMMENT_PREFIX = 'credentialId:';
15
+ export const CURRENT_VERSION = version;
16
+ export const VIRTUAL_KEY_CMD_NAME = "ozy-virtual-security-key";
17
+ export const SSH_KEYGEN_CMD_NAME = "ozy-ssh-keygen";
18
+ export const SSH_KEYGEN_CMD_PATH = path.resolve(CLI_DIR, SSH_KEYGEN_CMD_NAME);
19
+ export const VIRTUAL_KEY_LOG_FILE_PATH = path.resolve(CLI_DIR, `${VIRTUAL_KEY_CMD_NAME}.log`);
20
+ export const DEFAULT_SESSION_TIMEOUT_SECONDS = 120;
21
+ export const STANDARD_REMOTE_USER = "git";
22
+ export const STANDARD_REMOTE_HOST = "github.com";
23
+ export const STANDARD_REMOTE_PREFIX = `${STANDARD_REMOTE_USER}@${STANDARD_REMOTE_HOST}:`;
24
+ //# sourceMappingURL=constants.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../../../src/common/constants.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC;AAClC,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAClD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,cAAc,OAAO,CAAC,CAAC;AACpF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,cAAc,MAAM,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,cAAc,MAAM,CAAC,CAAC;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,cAAc,OAAO,CAAC,CAAC;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAG,eAAe,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,OAAO,CAAC;AACvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAC;AAC/D,MAAM,CAAC,MAAM,mBAAmB,GAAG,gBAAgB,CAAC;AACpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,oBAAoB,MAAM,CAAC,CAAC;AAC9F,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAG,CAAC;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,CAAC;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,oBAAoB,IAAI,oBAAoB,GAAG,CAAC"}
@@ -0,0 +1,13 @@
1
+ import {} from "effective-modules";
2
+ import { Effect } from "effect";
3
+ export function using(service) {
4
+ return new Proxy({}, {
5
+ get(_target, prop, _receiver) {
6
+ return Effect.fn(function* (...args) {
7
+ const instance = yield* service;
8
+ return yield* instance[prop](...args);
9
+ });
10
+ }
11
+ });
12
+ }
13
+ //# sourceMappingURL=effective-modules-extensions.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"effective-modules-extensions.js","sourceRoot":"","sources":["../../../../../src/common/effective-modules-extensions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkB,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAgB,MAAM,EAAE,MAAM,QAAQ,CAAC;AAa9C,MAAM,UAAU,KAAK,CAAsC,OAAU;IACnE,OAAO,IAAI,KAAK,CAAC,EAAE,EAAE;QACnB,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS;YAC1B,OAAO,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAC,GAAG,IAAW;gBACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC;gBAChC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YACxC,CAAC,CAAC,CAAA;QACJ,CAAC;KACF,CAAQ,CAAC;AACZ,CAAC"}
@@ -0,0 +1,4 @@
1
+ export function log(...stuff) {
2
+ console.log(...stuff);
3
+ }
4
+ //# sourceMappingURL=log.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"log.js","sourceRoot":"","sources":["../../../../../src/common/log.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,GAAG,CAAC,GAAG,KAAY;IACjC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;AACxB,CAAC"}
@@ -0,0 +1,20 @@
1
+ import { Option } from "effect";
2
+ const CYAN = '\x1b[36m';
3
+ const DIM = '\x1b[2m';
4
+ const RESET = '\x1b[0m';
5
+ function fmtNode(node) {
6
+ const dir = Option.getOrElse(() => '?')(node.directory);
7
+ return `${CYAN}${node.command}${RESET} ${DIM}${dir}${RESET}`;
8
+ }
9
+ export function renderCallerTree(chain) {
10
+ if (chain.length === 0)
11
+ return '(empty)';
12
+ const lines = [fmtNode(chain[0])];
13
+ let indent = '';
14
+ for (let i = 1; i < chain.length; i++) {
15
+ lines.push(`${indent}└── ${fmtNode(chain[i])}`);
16
+ indent += ' ';
17
+ }
18
+ return lines.join('\n');
19
+ }
20
+ //# sourceMappingURL=render-caller-tree.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"render-caller-tree.js","sourceRoot":"","sources":["../../../../../src/common/render-caller-tree.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,KAAK,GAAG,SAAS,CAAC;AAExB,SAAS,OAAO,CAAC,IAAmB;IAClC,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxD,OAAO,GAAG,IAAI,GAAG,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,GAAG,GAAG,GAAG,GAAG,KAAK,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,KAAK,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,MAAM,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
@@ -0,0 +1,48 @@
1
+ import { appendFileSync } from "node:fs";
2
+ import { Effect, Layer, pipe } from "effect";
3
+ import { OSPlatformImpl } from "@/modules/common/os-platform/impl";
4
+ import { CryptoImpl } from "@/modules/common/crypto/impl";
5
+ import { KeyMapStoreImpl } from "@/modules/common/kep-map-store/impl";
6
+ import { SSHConfigImpl } from "@/modules/common/ssh-config/impl";
7
+ import { SSHAgentImpl } from "@/modules/ssh-agent/ssh-agent/impl";
8
+ import { SessionImpl } from "@/modules/ssh-agent/session/impl";
9
+ import { AGENT_LOG_FILE_PATH, AGENT_PID_FILE_PATH, AGENT_PORT_FILE_PATH, AGENT_SOCK_FILE_PATH } from "@/common/constants";
10
+ import { rmSync } from "node:fs";
11
+ const origLog = console.log.bind(console);
12
+ const origError = console.error.bind(console);
13
+ const origWarn = console.warn.bind(console);
14
+ function logToFile(...args) {
15
+ try {
16
+ appendFileSync(AGENT_LOG_FILE_PATH, args.map(arg => {
17
+ try {
18
+ return JSON.stringify(arg);
19
+ }
20
+ catch (e) {
21
+ return String(e);
22
+ }
23
+ }).join(' ') + '\n');
24
+ }
25
+ catch { }
26
+ }
27
+ console.log = (...args) => { logToFile(...args); origLog(...args); };
28
+ console.error = (...args) => { logToFile(...args); origError(...args); };
29
+ console.warn = (...args) => { logToFile(...args); origWarn(...args); };
30
+ function cleanup() {
31
+ try {
32
+ rmSync(AGENT_PID_FILE_PATH);
33
+ }
34
+ catch { }
35
+ try {
36
+ rmSync(AGENT_PORT_FILE_PATH);
37
+ }
38
+ catch { }
39
+ try {
40
+ rmSync(AGENT_SOCK_FILE_PATH);
41
+ }
42
+ catch { }
43
+ }
44
+ process.on("exit", cleanup);
45
+ process.on("SIGTERM", () => { cleanup(); process.exit(0); });
46
+ process.on("SIGINT", () => { cleanup(); process.exit(0); });
47
+ pipe(SSHAgentImpl.ServiceLayer, Layer.provideMerge(SessionImpl.makeRpcLayer()), Layer.provideMerge(KeyMapStoreImpl.Layer), Layer.provideMerge(SSHConfigImpl.Layer), Layer.provideMerge(CryptoImpl.Layer), Layer.provideMerge(OSPlatformImpl.Layer), Layer.launch, Effect.runPromise);
48
+ //# sourceMappingURL=ozy-signing-agent.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"ozy-signing-agent.js","sourceRoot":"","sources":["../../../../../src/entrypoints/ozy-signing-agent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,kCAAkC,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1H,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC9C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAE5C,SAAS,SAAS,CAAC,GAAG,IAAW;IAC/B,IAAI,CAAC;QACH,cAAc,CAAC,mBAAmB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACjD,IAAI,CAAC;gBAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YAAC,CAAC;YAClC,OAAM,CAAC,EAAE,CAAC;gBAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAChC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,OAAO,CAAC,GAAG,GAAG,CAAC,GAAG,IAAW,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,OAAO,CAAC,KAAK,GAAG,CAAC,GAAG,IAAW,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,OAAO,CAAC,IAAI,GAAG,CAAC,GAAG,IAAW,EAAE,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9E,SAAS,OAAO;IACd,IAAI,CAAC;QAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAC7C,IAAI,CAAC;QAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAC9C,IAAI,CAAC;QAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AAChD,CAAC;AAED,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC5B,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5D,IAAI,CACF,YAAY,CAAC,YAAY,EACzB,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,EAC9C,KAAK,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,EACzC,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,EACvC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,EACpC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,EACxC,KAAK,CAAC,MAAM,EACZ,MAAM,CAAC,UAAU,CAClB,CAAC"}