npm - @penvhq/provider-contract - Versions diffs - 0.1.0 - Mend

@penvhq/provider-contract 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

package/LICENSE ADDED Viewed

@@ -0,0 +1,21 @@
+MIT License
+Copyright (c) 2026 Itzfeminisce
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.cjs ADDED Viewed

@@ -0,0 +1,455 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  InMemoryProvider: () => InMemoryProvider,
+  createInMemoryProvider: () => createInMemoryProvider,
+  runProviderContractSuite: () => runProviderContractSuite
+});
+module.exports = __toCommonJS(index_exports);
+// src/contract.ts
+var import_core = require("@penvhq/core");
+var import_vitest = require("vitest");
+var ENVIRONMENT = "production";
+var OTHER_ENVIRONMENT = "development";
+var redisPassword = { namespace: ["redis"], name: "password" };
+var databaseUrl = { namespace: [], name: "database-url" };
+function valueFile(ref, scope, encrypted = false) {
+  return { namespace: ref.namespace, name: ref.name, scope, encrypted };
+}
+function scopeKey(scope) {
+  switch (scope.kind) {
+    case "unscoped":
+      return "unscoped";
+    case "environment":
+      return `environment:${scope.environment}`;
+    case "local":
+      return "local";
+    case "environment-local":
+      return `environment-local:${scope.environment}`;
+    default:
+      return (0, import_core.assertNever)(scope, "scope");
+  }
+}
+function identity(file) {
+  return `${[...file.namespace, file.name].join("/")}|${scopeKey(file.scope)}|${file.encrypted}`;
+}
+function identities(files) {
+  return files.map(identity).sort();
+}
+function runProviderContractSuite(name, makeProvider) {
+  (0, import_vitest.describe)(`provider contract: ${name}`, () => {
+    let provider;
+    let cleanup;
+    (0, import_vitest.beforeEach)(async () => {
+      const made = await makeProvider();
+      provider = made.provider;
+      cleanup = made.cleanup;
+    });
+    (0, import_vitest.afterEach)(async () => {
+      await cleanup();
+    });
+    (0, import_vitest.it)("reports its type", () => {
+      (0, import_vitest.expect)(typeof provider.type).toBe("string");
+      (0, import_vitest.expect)(provider.type.length).toBeGreaterThan(0);
+    });
+    (0, import_vitest.describe)("read and write", () => {
+      (0, import_vitest.it)("round-trips a written value", async () => {
+        const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        await provider.write(file, "hunter2");
+        (0, import_vitest.expect)(await provider.read(file)).toBe("hunter2");
+      });
+      (0, import_vitest.it)("resolves to undefined for a value that was never written", async () => {
+        const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        (0, import_vitest.expect)(await provider.read(file)).toBeUndefined();
+      });
+      (0, import_vitest.it)("overwrites in place rather than appending", async () => {
+        const file = valueFile(databaseUrl, { kind: "unscoped" });
+        await provider.write(file, "postgres://localhost/dev");
+        await provider.write(file, "postgres://localhost/other");
+        (0, import_vitest.expect)(await provider.read(file)).toBe("postgres://localhost/other");
+      });
+      (0, import_vitest.it)("creates namespaces as needed", async () => {
+        const file = valueFile(
+          { namespace: ["app", "auth"], name: "jwt-secret" },
+          {
+            kind: "unscoped"
+          }
+        );
+        await provider.write(file, "s3cret");
+        (0, import_vitest.expect)(await provider.read(file)).toBe("s3cret");
+      });
+      (0, import_vitest.it)("round-trips a value at the environment-local scope", async () => {
+        const file = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(file, "my-machine-only");
+        (0, import_vitest.expect)(await provider.read(file)).toBe("my-machine-only");
+      });
+      (0, import_vitest.it)("keeps each of the four scopes of one parameter at its own address", async () => {
+        const unscoped = valueFile(redisPassword, { kind: "unscoped" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        const local = valueFile(redisPassword, { kind: "local" });
+        const environmentLocal = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(unscoped, "default");
+        await provider.write(scoped, "production");
+        await provider.write(local, "personal");
+        await provider.write(environmentLocal, "personal-production");
+        (0, import_vitest.expect)(await provider.read(unscoped)).toBe("default");
+        (0, import_vitest.expect)(await provider.read(scoped)).toBe("production");
+        (0, import_vitest.expect)(await provider.read(local)).toBe("personal");
+        (0, import_vitest.expect)(await provider.read(environmentLocal)).toBe("personal-production");
+      });
+      (0, import_vitest.it)("keeps environment-local values for different environments apart", async () => {
+        const forProduction = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        const forOther = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: OTHER_ENVIRONMENT
+        });
+        await provider.write(forProduction, "personal-production");
+        await provider.write(forOther, "personal-development");
+        (0, import_vitest.expect)(await provider.read(forProduction)).toBe("personal-production");
+        (0, import_vitest.expect)(await provider.read(forOther)).toBe("personal-development");
+      });
+      (0, import_vitest.it)("keeps environment-local apart from local and from the environment scope", async () => {
+        const local = valueFile(redisPassword, { kind: "local" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        const environmentLocal = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(environmentLocal, "personal-production");
+        (0, import_vitest.expect)(await provider.read(local)).toBeUndefined();
+        (0, import_vitest.expect)(await provider.read(scoped)).toBeUndefined();
+        (0, import_vitest.expect)(await provider.read(environmentLocal)).toBe("personal-production");
+      });
+      (0, import_vitest.it)("keeps an encrypted value at its own address, orthogonal to scope", async () => {
+        const plaintext = valueFile(redisPassword, { kind: "unscoped" });
+        const encrypted = valueFile(redisPassword, { kind: "unscoped" }, true);
+        await provider.write(plaintext, "plain");
+        await provider.write(encrypted, "ciphertext");
+        (0, import_vitest.expect)(await provider.read(plaintext)).toBe("plain");
+        (0, import_vitest.expect)(await provider.read(encrypted)).toBe("ciphertext");
+      });
+      (0, import_vitest.it)("keeps an encrypted environment-local value at its own address", async () => {
+        const scope = { kind: "environment-local", environment: ENVIRONMENT };
+        const plaintext = valueFile(redisPassword, scope);
+        const encrypted = valueFile(redisPassword, scope, true);
+        await provider.write(plaintext, "plain");
+        await provider.write(encrypted, "ciphertext");
+        (0, import_vitest.expect)(await provider.read(plaintext)).toBe("plain");
+        (0, import_vitest.expect)(await provider.read(encrypted)).toBe("ciphertext");
+      });
+    });
+    (0, import_vitest.describe)("values are opaque", () => {
+      const cases = [
+        ["an empty value", ""],
+        ["leading and trailing spaces", "  padded  "],
+        ["a tab", "	indented"],
+        ["an embedded newline", "line one\nline two"],
+        ["a trailing newline", "trailing\n"],
+        ["several trailing newlines", "trailing\n\n\n"],
+        ["a lone carriage return", "crlf\r\nvalue"],
+        ["unicode", "cl\xE9-priv\xE9e-\u{1F510}-\u03A9"],
+        ["quotes and escapes", `{"a":"b\\n"} 'single' "double"`],
+        ["a base64-shaped value", "aGVsbG8gd29ybGQ=\n"]
+      ];
+      for (const [label, value] of cases) {
+        (0, import_vitest.it)(`preserves ${label} byte-exactly`, async () => {
+          const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+          await provider.write(file, value);
+          (0, import_vitest.expect)(await provider.read(file)).toBe(value);
+        });
+      }
+    });
+    (0, import_vitest.describe)("list", () => {
+      (0, import_vitest.it)("returns nothing for a provider holding no values", async () => {
+        (0, import_vitest.expect)(await provider.list()).toEqual([]);
+      });
+      (0, import_vitest.it)("returns every written value file across every scope", async () => {
+        const written = [
+          valueFile(databaseUrl, { kind: "unscoped" }),
+          valueFile(databaseUrl, { kind: "environment", environment: ENVIRONMENT }, true),
+          valueFile(databaseUrl, { kind: "environment-local", environment: ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "environment", environment: OTHER_ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "local" }),
+          valueFile(redisPassword, { kind: "environment-local", environment: OTHER_ENVIRONMENT }),
+          valueFile(
+            { namespace: ["app"], name: "jwt-secret" },
+            { kind: "environment-local", environment: ENVIRONMENT },
+            true
+          ),
+          valueFile({ namespace: ["app"], name: "jwt-secret" }, { kind: "local" }, true)
+        ];
+        for (const file of written) {
+          await provider.write(file, "value");
+        }
+        (0, import_vitest.expect)(identities(await provider.list())).toEqual(identities(written));
+      });
+      (0, import_vitest.it)("lists all four scopes of one parameter as four distinct records", async () => {
+        const written = [
+          valueFile(redisPassword, { kind: "unscoped" }),
+          valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "local" }),
+          valueFile(redisPassword, { kind: "environment-local", environment: ENVIRONMENT })
+        ];
+        for (const file of written) {
+          await provider.write(file, "value");
+        }
+        const listed = identities(await provider.list());
+        (0, import_vitest.expect)(listed).toEqual(identities(written));
+        (0, import_vitest.expect)(new Set(listed).size).toBe(written.length);
+      });
+      (0, import_vitest.it)("lists environment-local values for two environments as two records", async () => {
+        const written = [
+          valueFile(redisPassword, { kind: "environment-local", environment: ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "environment-local", environment: OTHER_ENVIRONMENT })
+        ];
+        for (const file of written) {
+          await provider.write(file, "value");
+        }
+        const listed = identities(await provider.list());
+        (0, import_vitest.expect)(listed).toEqual(identities(written));
+        (0, import_vitest.expect)(new Set(listed).size).toBe(2);
+      });
+      (0, import_vitest.it)("does not list a removed value", async () => {
+        const kept = valueFile(databaseUrl, { kind: "unscoped" });
+        const removed = valueFile(redisPassword, { kind: "unscoped" });
+        await provider.write(kept, "a");
+        await provider.write(removed, "b");
+        await provider.remove(removed);
+        (0, import_vitest.expect)(identities(await provider.list())).toEqual(identities([kept]));
+      });
+      (0, import_vitest.it)("does not list meta as a value", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        (0, import_vitest.expect)(await provider.list()).toEqual([]);
+      });
+    });
+    (0, import_vitest.describe)("remove", () => {
+      (0, import_vitest.it)("deletes the value", async () => {
+        const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        await provider.write(file, "hunter2");
+        await provider.remove(file);
+        (0, import_vitest.expect)(await provider.read(file)).toBeUndefined();
+      });
+      (0, import_vitest.it)("is idempotent \u2014 removing an absent value is not an error", async () => {
+        const file = valueFile(redisPassword, { kind: "local" });
+        await (0, import_vitest.expect)(provider.remove(file)).resolves.toBeUndefined();
+        await (0, import_vitest.expect)(provider.remove(file)).resolves.toBeUndefined();
+      });
+      (0, import_vitest.it)("removes only the scope it was given", async () => {
+        const unscoped = valueFile(redisPassword, { kind: "unscoped" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        const local = valueFile(redisPassword, { kind: "local" });
+        const environmentLocal = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(unscoped, "default");
+        await provider.write(scoped, "production");
+        await provider.write(local, "personal");
+        await provider.write(environmentLocal, "personal-production");
+        await provider.remove(environmentLocal);
+        (0, import_vitest.expect)(await provider.read(unscoped)).toBe("default");
+        (0, import_vitest.expect)(await provider.read(scoped)).toBe("production");
+        (0, import_vitest.expect)(await provider.read(local)).toBe("personal");
+        (0, import_vitest.expect)(await provider.read(environmentLocal)).toBeUndefined();
+      });
+      (0, import_vitest.it)("removes an environment-local value for one environment only", async () => {
+        const forProduction = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        const forOther = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: OTHER_ENVIRONMENT
+        });
+        await provider.write(forProduction, "personal-production");
+        await provider.write(forOther, "personal-development");
+        await provider.remove(forProduction);
+        (0, import_vitest.expect)(await provider.read(forProduction)).toBeUndefined();
+        (0, import_vitest.expect)(await provider.read(forOther)).toBe("personal-development");
+      });
+      (0, import_vitest.it)("is idempotent at the environment-local scope too", async () => {
+        const file = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await (0, import_vitest.expect)(provider.remove(file)).resolves.toBeUndefined();
+      });
+      (0, import_vitest.it)("leaves meta alone", async () => {
+        const file = valueFile(redisPassword, { kind: "unscoped" });
+        await provider.write(file, "hunter2");
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.remove(file);
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toEqual({ description: "Redis auth" });
+      });
+    });
+    (0, import_vitest.describe)("meta", () => {
+      (0, import_vitest.it)("resolves to undefined for a parameter with no meta", async () => {
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toBeUndefined();
+      });
+      (0, import_vitest.it)("round-trips a meta file", async () => {
+        const meta = {
+          description: "Signs and verifies user session JWTs",
+          owner: "auth-team",
+          secret: true,
+          environments: {
+            production: { required: true, owner: "infra-team" },
+            development: { required: false }
+          }
+        };
+        await provider.writeMeta(redisPassword, meta);
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toEqual(meta);
+      });
+      (0, import_vitest.it)("preserves unknown keys, so an older penv does not destroy newer fields", async () => {
+        const meta = {
+          description: "Redis auth",
+          rotationPolicy: "90d",
+          environments: { production: { rotationState: "active", rotatingSince: null } }
+        };
+        await provider.writeMeta(redisPassword, meta);
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toEqual(meta);
+      });
+      (0, import_vitest.it)("overwrites meta in place", async () => {
+        await provider.writeMeta(redisPassword, { description: "first", owner: "a-team" });
+        await provider.writeMeta(redisPassword, { description: "second" });
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toEqual({ description: "second" });
+      });
+      (0, import_vitest.it)("keeps meta per parameter", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.writeMeta(databaseUrl, { description: "Primary database" });
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toEqual({ description: "Redis auth" });
+        (0, import_vitest.expect)(await provider.readMeta(databaseUrl)).toEqual({ description: "Primary database" });
+      });
+      (0, import_vitest.it)("holds meta independently of any value", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth", required: true });
+        (0, import_vitest.expect)(await provider.read(valueFile(redisPassword, { kind: "unscoped" }))).toBeUndefined();
+      });
+    });
+    (0, import_vitest.describe)("removeMeta", () => {
+      (0, import_vitest.it)("deletes the meta", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.removeMeta(redisPassword);
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toBeUndefined();
+      });
+      (0, import_vitest.it)("is idempotent \u2014 removing absent meta is not an error", async () => {
+        await (0, import_vitest.expect)(provider.removeMeta(redisPassword)).resolves.toBeUndefined();
+        await (0, import_vitest.expect)(provider.removeMeta(redisPassword)).resolves.toBeUndefined();
+      });
+      (0, import_vitest.it)("leaves every value alone", async () => {
+        const unscoped = valueFile(redisPassword, { kind: "unscoped" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        await provider.write(unscoped, "default");
+        await provider.write(scoped, "production");
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.removeMeta(redisPassword);
+        (0, import_vitest.expect)(await provider.read(unscoped)).toBe("default");
+        (0, import_vitest.expect)(await provider.read(scoped)).toBe("production");
+      });
+      (0, import_vitest.it)("removes only the parameter it was given", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.writeMeta(databaseUrl, { description: "Primary database" });
+        await provider.removeMeta(redisPassword);
+        (0, import_vitest.expect)(await provider.readMeta(redisPassword)).toBeUndefined();
+        (0, import_vitest.expect)(await provider.readMeta(databaseUrl)).toEqual({ description: "Primary database" });
+      });
+    });
+  });
+}
+// src/memory.ts
+var import_core2 = require("@penvhq/core");
+function scopeKey2(scope) {
+  switch (scope.kind) {
+    case "unscoped":
+      return "unscoped";
+    case "environment":
+      return `environment:${scope.environment}`;
+    case "local":
+      return "local";
+    case "environment-local":
+      return `environment-local:${scope.environment}`;
+    default:
+      return (0, import_core2.assertNever)(scope, "scope");
+  }
+}
+function valueKey(file) {
+  return [file.namespace.join("/"), file.name, scopeKey2(file.scope), String(file.encrypted)].join(
+    "\0"
+  );
+}
+function metaKey(ref) {
+  return [ref.namespace.join("/"), ref.name].join("\0");
+}
+function cloneValueFile(file) {
+  return {
+    namespace: [...file.namespace],
+    name: file.name,
+    scope: file.scope,
+    encrypted: file.encrypted
+  };
+}
+var InMemoryProvider = class {
+  type = "memory";
+  #values = /* @__PURE__ */ new Map();
+  #meta = /* @__PURE__ */ new Map();
+  async read(file) {
+    return this.#values.get(valueKey(file))?.value;
+  }
+  async write(file, value) {
+    this.#values.set(valueKey(file), { file: cloneValueFile(file), value });
+  }
+  async list() {
+    return [...this.#values.values()].map((stored) => cloneValueFile(stored.file));
+  }
+  async remove(file) {
+    this.#values.delete(valueKey(file));
+  }
+  async readMeta(ref) {
+    const stored = this.#meta.get(metaKey(ref));
+    return stored === void 0 ? void 0 : JSON.parse(stored);
+  }
+  async writeMeta(ref, meta) {
+    this.#meta.set(metaKey(ref), JSON.stringify(meta));
+  }
+  async removeMeta(ref) {
+    this.#meta.delete(metaKey(ref));
+  }
+};
+function createInMemoryProvider() {
+  return new InMemoryProvider();
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  InMemoryProvider,
+  createInMemoryProvider,
+  runProviderContractSuite
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"sources":["../src/index.ts","../src/contract.ts","../src/memory.ts"],"sourcesContent":["/**\n * The shared, provider-agnostic contract suite and its in-memory fixture.\n *\n * This package is test-only: `contract.ts` imports vitest at module scope, so no\n * runtime bundle may depend on it. A provider imports {@link runProviderContractSuite}\n * from here in its `*.test.ts` files — never from its own package entry — and the\n * v0.6 SSM and Kubernetes adapters will reuse it unchanged, which is why it lives\n * here rather than beside any one provider.\n */\n\nexport { runProviderContractSuite } from \"./contract.js\";\nexport { createInMemoryProvider, InMemoryProvider } from \"./memory.js\";\n","/**\n * The provider contract suite: the behaviour every provider must satisfy.\n *\n * This is the suite the Vault adapter must pass unchanged. Nothing here may\n * assume a filesystem — no paths, no `node:fs`, no on-disk layout. It speaks\n * only the vocabulary of `@penvhq/core`: a provider is addressed by\n * `(namespace, name, scope, encrypted)` and nothing else.\n *\n * A provider handed to this suite must accept the environments `development`\n * and `production`, and must start empty.\n */\n\nimport type { Meta, ParameterRef, Provider, Scope, ValueFile } from \"@penvhq/core\";\nimport { assertNever } from \"@penvhq/core\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\n\nconst ENVIRONMENT = \"production\";\nconst OTHER_ENVIRONMENT = \"development\";\n\nconst redisPassword: ParameterRef = { namespace: [\"redis\"], name: \"password\" };\nconst databaseUrl: ParameterRef = { namespace: [], name: \"database-url\" };\n\nfunction valueFile(ref: ParameterRef, scope: Scope, encrypted = false): ValueFile {\n return { namespace: ref.namespace, name: ref.name, scope, encrypted };\n}\n\n/**\n * Every scope that carries an environment must key on it. Two scopes that differ\n * only by environment are two records, and a key that dropped the environment\n * would make this suite pass while a provider overwrote one with the other.\n */\nfunction scopeKey(scope: Scope): string {\n switch (scope.kind) {\n case \"unscoped\":\n return \"unscoped\";\n case \"environment\":\n return `environment:${scope.environment}`;\n case \"local\":\n return \"local\";\n case \"environment-local\":\n return `environment-local:${scope.environment}`;\n default:\n return assertNever(scope, \"scope\");\n }\n}\n\n/** A stable identity built only from contract fields, so `list` order is not asserted. */\nfunction identity(file: ValueFile): string {\n return `${[...file.namespace, file.name].join(\"/\")}|${scopeKey(file.scope)}|${file.encrypted}`;\n}\n\nfunction identities(files: readonly ValueFile[]): string[] {\n return files.map(identity).sort();\n}\n\nexport function runProviderContractSuite(\n name: string,\n makeProvider: () => Promise<{ provider: Provider; cleanup: () => Promise<void> }>,\n): void {\n describe(`provider contract: ${name}`, () => {\n let provider: Provider;\n let cleanup: () => Promise<void>;\n\n beforeEach(async () => {\n const made = await makeProvider();\n provider = made.provider;\n cleanup = made.cleanup;\n });\n\n afterEach(async () => {\n await cleanup();\n });\n\n it(\"reports its type\", () => {\n expect(typeof provider.type).toBe(\"string\");\n expect(provider.type.length).toBeGreaterThan(0);\n });\n\n describe(\"read and write\", () => {\n it(\"round-trips a written value\", async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n\n await provider.write(file, \"hunter2\");\n\n expect(await provider.read(file)).toBe(\"hunter2\");\n });\n\n it(\"resolves to undefined for a value that was never written\", async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n\n expect(await provider.read(file)).toBeUndefined();\n });\n\n it(\"overwrites in place rather than appending\", async () => {\n const file = valueFile(databaseUrl, { kind: \"unscoped\" });\n\n await provider.write(file, \"postgres://localhost/dev\");\n await provider.write(file, \"postgres://localhost/other\");\n\n expect(await provider.read(file)).toBe(\"postgres://localhost/other\");\n });\n\n it(\"creates namespaces as needed\", async () => {\n const file = valueFile(\n { namespace: [\"app\", \"auth\"], name: \"jwt-secret\" },\n {\n kind: \"unscoped\",\n },\n );\n\n await provider.write(file, \"s3cret\");\n\n expect(await provider.read(file)).toBe(\"s3cret\");\n });\n\n it(\"round-trips a value at the environment-local scope\", async () => {\n const file = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await provider.write(file, \"my-machine-only\");\n\n expect(await provider.read(file)).toBe(\"my-machine-only\");\n });\n\n it(\"keeps each of the four scopes of one parameter at its own address\", async () => {\n const unscoped = valueFile(redisPassword, { kind: \"unscoped\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n const local = valueFile(redisPassword, { kind: \"local\" });\n const environmentLocal = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await provider.write(unscoped, \"default\");\n await provider.write(scoped, \"production\");\n await provider.write(local, \"personal\");\n await provider.write(environmentLocal, \"personal-production\");\n\n expect(await provider.read(unscoped)).toBe(\"default\");\n expect(await provider.read(scoped)).toBe(\"production\");\n expect(await provider.read(local)).toBe(\"personal\");\n expect(await provider.read(environmentLocal)).toBe(\"personal-production\");\n });\n\n /*\n * The failure this guards: an environment-local value stored without its\n * environment. One developer's override for one environment would become\n * the override for every environment — the scope-widening leak penv exists\n * to delete.\n */\n it(\"keeps environment-local values for different environments apart\", async () => {\n const forProduction = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n const forOther = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: OTHER_ENVIRONMENT,\n });\n\n await provider.write(forProduction, \"personal-production\");\n await provider.write(forOther, \"personal-development\");\n\n expect(await provider.read(forProduction)).toBe(\"personal-production\");\n expect(await provider.read(forOther)).toBe(\"personal-development\");\n });\n\n it(\"keeps environment-local apart from local and from the environment scope\", async () => {\n const local = valueFile(redisPassword, { kind: \"local\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n const environmentLocal = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await provider.write(environmentLocal, \"personal-production\");\n\n expect(await provider.read(local)).toBeUndefined();\n expect(await provider.read(scoped)).toBeUndefined();\n expect(await provider.read(environmentLocal)).toBe(\"personal-production\");\n });\n\n it(\"keeps an encrypted value at its own address, orthogonal to scope\", async () => {\n const plaintext = valueFile(redisPassword, { kind: \"unscoped\" });\n const encrypted = valueFile(redisPassword, { kind: \"unscoped\" }, true);\n\n await provider.write(plaintext, \"plain\");\n await provider.write(encrypted, \"ciphertext\");\n\n expect(await provider.read(plaintext)).toBe(\"plain\");\n expect(await provider.read(encrypted)).toBe(\"ciphertext\");\n });\n\n it(\"keeps an encrypted environment-local value at its own address\", async () => {\n const scope: Scope = { kind: \"environment-local\", environment: ENVIRONMENT };\n const plaintext = valueFile(redisPassword, scope);\n const encrypted = valueFile(redisPassword, scope, true);\n\n await provider.write(plaintext, \"plain\");\n await provider.write(encrypted, \"ciphertext\");\n\n expect(await provider.read(plaintext)).toBe(\"plain\");\n expect(await provider.read(encrypted)).toBe(\"ciphertext\");\n });\n });\n\n describe(\"values are opaque\", () => {\n const cases: readonly (readonly [string, string])[] = [\n [\"an empty value\", \"\"],\n [\"leading and trailing spaces\", \" padded \"],\n [\"a tab\", \"\\tindented\"],\n [\"an embedded newline\", \"line one\\nline two\"],\n [\"a trailing newline\", \"trailing\\n\"],\n [\"several trailing newlines\", \"trailing\\n\\n\\n\"],\n [\"a lone carriage return\", \"crlf\\r\\nvalue\"],\n [\"unicode\", \"clé-privée-🔐-Ω\"],\n [\"quotes and escapes\", `{\"a\":\"b\\\\n\"} 'single' \"double\"`],\n [\"a base64-shaped value\", \"aGVsbG8gd29ybGQ=\\n\"],\n ];\n\n for (const [label, value] of cases) {\n it(`preserves ${label} byte-exactly`, async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n\n await provider.write(file, value);\n\n expect(await provider.read(file)).toBe(value);\n });\n }\n });\n\n describe(\"list\", () => {\n it(\"returns nothing for a provider holding no values\", async () => {\n expect(await provider.list()).toEqual([]);\n });\n\n it(\"returns every written value file across every scope\", async () => {\n const written: ValueFile[] = [\n valueFile(databaseUrl, { kind: \"unscoped\" }),\n valueFile(databaseUrl, { kind: \"environment\", environment: ENVIRONMENT }, true),\n valueFile(databaseUrl, { kind: \"environment-local\", environment: ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"environment\", environment: OTHER_ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"local\" }),\n valueFile(redisPassword, { kind: \"environment-local\", environment: OTHER_ENVIRONMENT }),\n valueFile(\n { namespace: [\"app\"], name: \"jwt-secret\" },\n { kind: \"environment-local\", environment: ENVIRONMENT },\n true,\n ),\n valueFile({ namespace: [\"app\"], name: \"jwt-secret\" }, { kind: \"local\" }, true),\n ];\n\n for (const file of written) {\n await provider.write(file, \"value\");\n }\n\n expect(identities(await provider.list())).toEqual(identities(written));\n });\n\n it(\"lists all four scopes of one parameter as four distinct records\", async () => {\n const written: ValueFile[] = [\n valueFile(redisPassword, { kind: \"unscoped\" }),\n valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"local\" }),\n valueFile(redisPassword, { kind: \"environment-local\", environment: ENVIRONMENT }),\n ];\n\n for (const file of written) {\n await provider.write(file, \"value\");\n }\n\n const listed = identities(await provider.list());\n expect(listed).toEqual(identities(written));\n expect(new Set(listed).size).toBe(written.length);\n });\n\n /*\n * The distinctness assertion is load-bearing, not decoration. Both sides of\n * the `toEqual` run through `identity`, so an identity that dropped the\n * environment would collapse each side equally and the comparison would\n * still hold — the suite would pass while treating two records as one.\n */\n it(\"lists environment-local values for two environments as two records\", async () => {\n const written: ValueFile[] = [\n valueFile(redisPassword, { kind: \"environment-local\", environment: ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"environment-local\", environment: OTHER_ENVIRONMENT }),\n ];\n\n for (const file of written) {\n await provider.write(file, \"value\");\n }\n\n const listed = identities(await provider.list());\n expect(listed).toEqual(identities(written));\n expect(new Set(listed).size).toBe(2);\n });\n\n it(\"does not list a removed value\", async () => {\n const kept = valueFile(databaseUrl, { kind: \"unscoped\" });\n const removed = valueFile(redisPassword, { kind: \"unscoped\" });\n\n await provider.write(kept, \"a\");\n await provider.write(removed, \"b\");\n await provider.remove(removed);\n\n expect(identities(await provider.list())).toEqual(identities([kept]));\n });\n\n it(\"does not list meta as a value\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n expect(await provider.list()).toEqual([]);\n });\n });\n\n describe(\"remove\", () => {\n it(\"deletes the value\", async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n await provider.write(file, \"hunter2\");\n\n await provider.remove(file);\n\n expect(await provider.read(file)).toBeUndefined();\n });\n\n it(\"is idempotent — removing an absent value is not an error\", async () => {\n const file = valueFile(redisPassword, { kind: \"local\" });\n\n await expect(provider.remove(file)).resolves.toBeUndefined();\n await expect(provider.remove(file)).resolves.toBeUndefined();\n });\n\n it(\"removes only the scope it was given\", async () => {\n const unscoped = valueFile(redisPassword, { kind: \"unscoped\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n const local = valueFile(redisPassword, { kind: \"local\" });\n const environmentLocal = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n await provider.write(unscoped, \"default\");\n await provider.write(scoped, \"production\");\n await provider.write(local, \"personal\");\n await provider.write(environmentLocal, \"personal-production\");\n\n await provider.remove(environmentLocal);\n\n expect(await provider.read(unscoped)).toBe(\"default\");\n expect(await provider.read(scoped)).toBe(\"production\");\n expect(await provider.read(local)).toBe(\"personal\");\n expect(await provider.read(environmentLocal)).toBeUndefined();\n });\n\n it(\"removes an environment-local value for one environment only\", async () => {\n const forProduction = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n const forOther = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: OTHER_ENVIRONMENT,\n });\n await provider.write(forProduction, \"personal-production\");\n await provider.write(forOther, \"personal-development\");\n\n await provider.remove(forProduction);\n\n expect(await provider.read(forProduction)).toBeUndefined();\n expect(await provider.read(forOther)).toBe(\"personal-development\");\n });\n\n it(\"is idempotent at the environment-local scope too\", async () => {\n const file = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await expect(provider.remove(file)).resolves.toBeUndefined();\n });\n\n it(\"leaves meta alone\", async () => {\n const file = valueFile(redisPassword, { kind: \"unscoped\" });\n await provider.write(file, \"hunter2\");\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n await provider.remove(file);\n\n expect(await provider.readMeta(redisPassword)).toEqual({ description: \"Redis auth\" });\n });\n });\n\n describe(\"meta\", () => {\n it(\"resolves to undefined for a parameter with no meta\", async () => {\n expect(await provider.readMeta(redisPassword)).toBeUndefined();\n });\n\n it(\"round-trips a meta file\", async () => {\n const meta: Meta = {\n description: \"Signs and verifies user session JWTs\",\n owner: \"auth-team\",\n secret: true,\n environments: {\n production: { required: true, owner: \"infra-team\" },\n development: { required: false },\n },\n };\n\n await provider.writeMeta(redisPassword, meta);\n\n expect(await provider.readMeta(redisPassword)).toEqual(meta);\n });\n\n it(\"preserves unknown keys, so an older penv does not destroy newer fields\", async () => {\n const meta: Meta = {\n description: \"Redis auth\",\n rotationPolicy: \"90d\",\n environments: { production: { rotationState: \"active\", rotatingSince: null } },\n };\n\n await provider.writeMeta(redisPassword, meta);\n\n expect(await provider.readMeta(redisPassword)).toEqual(meta);\n });\n\n it(\"overwrites meta in place\", async () => {\n await provider.writeMeta(redisPassword, { description: \"first\", owner: \"a-team\" });\n await provider.writeMeta(redisPassword, { description: \"second\" });\n\n expect(await provider.readMeta(redisPassword)).toEqual({ description: \"second\" });\n });\n\n it(\"keeps meta per parameter\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n await provider.writeMeta(databaseUrl, { description: \"Primary database\" });\n\n expect(await provider.readMeta(redisPassword)).toEqual({ description: \"Redis auth\" });\n expect(await provider.readMeta(databaseUrl)).toEqual({ description: \"Primary database\" });\n });\n\n it(\"holds meta independently of any value\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\", required: true });\n\n expect(await provider.read(valueFile(redisPassword, { kind: \"unscoped\" }))).toBeUndefined();\n });\n });\n\n describe(\"removeMeta\", () => {\n it(\"deletes the meta\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n await provider.removeMeta(redisPassword);\n\n expect(await provider.readMeta(redisPassword)).toBeUndefined();\n });\n\n it(\"is idempotent — removing absent meta is not an error\", async () => {\n await expect(provider.removeMeta(redisPassword)).resolves.toBeUndefined();\n await expect(provider.removeMeta(redisPassword)).resolves.toBeUndefined();\n });\n\n /*\n * The mirror of `remove`'s \"leaves meta alone\". Policy and value are two\n * faces of one record and are removed independently, so a provider that\n * dropped the values with the policy would delete a secret on a `penv mv`\n * that was only meant to move its description.\n */\n it(\"leaves every value alone\", async () => {\n const unscoped = valueFile(redisPassword, { kind: \"unscoped\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n await provider.write(unscoped, \"default\");\n await provider.write(scoped, \"production\");\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n await provider.removeMeta(redisPassword);\n\n expect(await provider.read(unscoped)).toBe(\"default\");\n expect(await provider.read(scoped)).toBe(\"production\");\n });\n\n it(\"removes only the parameter it was given\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n await provider.writeMeta(databaseUrl, { description: \"Primary database\" });\n\n await provider.removeMeta(redisPassword);\n\n expect(await provider.readMeta(redisPassword)).toBeUndefined();\n expect(await provider.readMeta(databaseUrl)).toEqual({ description: \"Primary database\" });\n });\n });\n });\n}\n","/**\n * An in-memory provider: a Map-backed store that satisfies the same `@penvhq/core`\n * provider contract the filesystem does, with no disk, no paths, and no code\n * shared with the reference provider.\n *\n * It is a test fixture, not a registered provider. Its whole reason to exist is to\n * prove {@link runProviderContractSuite} is genuinely provider-agnostic: a second,\n * structurally unrelated provider type passes the same behavioural suite the\n * filesystem passes and the Vault adapter must. That demonstrates the portability\n * seam without standing up a live backend.\n *\n * Two choices keep it honest rather than a suite grading its own reflection:\n * - Values and meta live in two maps under disjoint keyspaces, so a written meta\n * can never be returned by `list()` as though it were a value.\n * - Meta is round-tripped through JSON on write and read, the way any real store\n * holding a string does, so nothing here hands back a live object reference a\n * caller could mutate after the fact.\n *\n * It declares no retention: `readPrevious` is omitted, the general case the\n * contract permits (see `retainsPrevious` in `@penvhq/core`). The filesystem and\n * Kubernetes sit on the same side of that line.\n */\n\nimport type { Meta, ParameterRef, Provider, Scope, ValueFile } from \"@penvhq/core\";\nimport { assertNever } from \"@penvhq/core\";\n\n/** Every scope that carries an environment keys on it, so two environments never collide. */\nfunction scopeKey(scope: Scope): string {\n switch (scope.kind) {\n case \"unscoped\":\n return \"unscoped\";\n case \"environment\":\n return `environment:${scope.environment}`;\n case \"local\":\n return \"local\";\n case \"environment-local\":\n return `environment-local:${scope.environment}`;\n default:\n return assertNever(scope, \"scope\");\n }\n}\n\n/**\n * Every contract field of a value file joined into one key. `\u0000` never appears\n * in a namespace segment, name, or scope, so it separates them unambiguously.\n */\nfunction valueKey(file: ValueFile): string {\n return [file.namespace.join(\"/\"), file.name, scopeKey(file.scope), String(file.encrypted)].join(\n \"\u0000\",\n );\n}\n\nfunction metaKey(ref: ParameterRef): string {\n return [ref.namespace.join(\"/\"), ref.name].join(\"\u0000\");\n}\n\n/** A defensive copy, so a caller mutating the file it handed us cannot reach the store. */\nfunction cloneValueFile(file: ValueFile): ValueFile {\n return {\n namespace: [...file.namespace],\n name: file.name,\n scope: file.scope,\n encrypted: file.encrypted,\n };\n}\n\ninterface StoredValue {\n readonly file: ValueFile;\n readonly value: string;\n}\n\nexport class InMemoryProvider implements Provider {\n readonly type = \"memory\";\n\n readonly #values = new Map<string, StoredValue>();\n readonly #meta = new Map<string, string>();\n\n async read(file: ValueFile): Promise<string | undefined> {\n return this.#values.get(valueKey(file))?.value;\n }\n\n async write(file: ValueFile, value: string): Promise<void> {\n this.#values.set(valueKey(file), { file: cloneValueFile(file), value });\n }\n\n async list(): Promise<ValueFile[]> {\n return [...this.#values.values()].map((stored) => cloneValueFile(stored.file));\n }\n\n async remove(file: ValueFile): Promise<void> {\n this.#values.delete(valueKey(file));\n }\n\n async readMeta(ref: ParameterRef): Promise<Meta | undefined> {\n const stored = this.#meta.get(metaKey(ref));\n return stored === undefined ? undefined : (JSON.parse(stored) as Meta);\n }\n\n async writeMeta(ref: ParameterRef, meta: Meta): Promise<void> {\n this.#meta.set(metaKey(ref), JSON.stringify(meta));\n }\n\n async removeMeta(ref: ParameterRef): Promise<void> {\n this.#meta.delete(metaKey(ref));\n }\n}\n\nexport function createInMemoryProvider(): InMemoryProvider {\n return new InMemoryProvider();\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACaA,kBAA4B;AAC5B,oBAA4D;AAE5D,IAAM,cAAc;AACpB,IAAM,oBAAoB;AAE1B,IAAM,gBAA8B,EAAE,WAAW,CAAC,OAAO,GAAG,MAAM,WAAW;AAC7E,IAAM,cAA4B,EAAE,WAAW,CAAC,GAAG,MAAM,eAAe;AAExE,SAAS,UAAU,KAAmB,OAAc,YAAY,OAAkB;AAChF,SAAO,EAAE,WAAW,IAAI,WAAW,MAAM,IAAI,MAAM,OAAO,UAAU;AACtE;AAOA,SAAS,SAAS,OAAsB;AACtC,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,eAAe,MAAM,WAAW;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,qBAAqB,MAAM,WAAW;AAAA,IAC/C;AACE,iBAAO,yBAAY,OAAO,OAAO;AAAA,EACrC;AACF;AAGA,SAAS,SAAS,MAAyB;AACzC,SAAO,GAAG,CAAC,GAAG,KAAK,WAAW,KAAK,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,SAAS,KAAK,KAAK,CAAC,IAAI,KAAK,SAAS;AAC9F;AAEA,SAAS,WAAW,OAAuC;AACzD,SAAO,MAAM,IAAI,QAAQ,EAAE,KAAK;AAClC;AAEO,SAAS,yBACd,MACA,cACM;AACN,8BAAS,sBAAsB,IAAI,IAAI,MAAM;AAC3C,QAAI;AACJ,QAAI;AAEJ,kCAAW,YAAY;AACrB,YAAM,OAAO,MAAM,aAAa;AAChC,iBAAW,KAAK;AAChB,gBAAU,KAAK;AAAA,IACjB,CAAC;AAED,iCAAU,YAAY;AACpB,YAAM,QAAQ;AAAA,IAChB,CAAC;AAED,0BAAG,oBAAoB,MAAM;AAC3B,gCAAO,OAAO,SAAS,IAAI,EAAE,KAAK,QAAQ;AAC1C,gCAAO,SAAS,KAAK,MAAM,EAAE,gBAAgB,CAAC;AAAA,IAChD,CAAC;AAED,gCAAS,kBAAkB,MAAM;AAC/B,4BAAG,+BAA+B,YAAY;AAC5C,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAEvF,cAAM,SAAS,MAAM,MAAM,SAAS;AAEpC,kCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,SAAS;AAAA,MAClD,CAAC;AAED,4BAAG,4DAA4D,YAAY;AACzE,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAEvF,kCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,cAAc;AAAA,MAClD,CAAC;AAED,4BAAG,6CAA6C,YAAY;AAC1D,cAAM,OAAO,UAAU,aAAa,EAAE,MAAM,WAAW,CAAC;AAExD,cAAM,SAAS,MAAM,MAAM,0BAA0B;AACrD,cAAM,SAAS,MAAM,MAAM,4BAA4B;AAEvD,kCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,4BAA4B;AAAA,MACrE,CAAC;AAED,4BAAG,gCAAgC,YAAY;AAC7C,cAAM,OAAO;AAAA,UACX,EAAE,WAAW,CAAC,OAAO,MAAM,GAAG,MAAM,aAAa;AAAA,UACjD;AAAA,YACE,MAAM;AAAA,UACR;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,MAAM,QAAQ;AAEnC,kCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,QAAQ;AAAA,MACjD,CAAC;AAED,4BAAG,sDAAsD,YAAY;AACnE,cAAM,OAAO,UAAU,eAAe;AAAA,UACpC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,MAAM,iBAAiB;AAE5C,kCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,iBAAiB;AAAA,MAC1D,CAAC;AAED,4BAAG,qEAAqE,YAAY;AAClF,cAAM,WAAW,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,QAAQ,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AACxD,cAAM,mBAAmB,UAAU,eAAe;AAAA,UAChD,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,UAAU,SAAS;AACxC,cAAM,SAAS,MAAM,QAAQ,YAAY;AACzC,cAAM,SAAS,MAAM,OAAO,UAAU;AACtC,cAAM,SAAS,MAAM,kBAAkB,qBAAqB;AAE5D,kCAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,SAAS;AACpD,kCAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,YAAY;AACrD,kCAAO,MAAM,SAAS,KAAK,KAAK,CAAC,EAAE,KAAK,UAAU;AAClD,kCAAO,MAAM,SAAS,KAAK,gBAAgB,CAAC,EAAE,KAAK,qBAAqB;AAAA,MAC1E,CAAC;AAQD,4BAAG,mEAAmE,YAAY;AAChF,cAAM,gBAAgB,UAAU,eAAe;AAAA,UAC7C,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,WAAW,UAAU,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,eAAe,qBAAqB;AACzD,cAAM,SAAS,MAAM,UAAU,sBAAsB;AAErD,kCAAO,MAAM,SAAS,KAAK,aAAa,CAAC,EAAE,KAAK,qBAAqB;AACrE,kCAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,sBAAsB;AAAA,MACnE,CAAC;AAED,4BAAG,2EAA2E,YAAY;AACxF,cAAM,QAAQ,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AACxD,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,mBAAmB,UAAU,eAAe;AAAA,UAChD,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,kBAAkB,qBAAqB;AAE5D,kCAAO,MAAM,SAAS,KAAK,KAAK,CAAC,EAAE,cAAc;AACjD,kCAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,cAAc;AAClD,kCAAO,MAAM,SAAS,KAAK,gBAAgB,CAAC,EAAE,KAAK,qBAAqB;AAAA,MAC1E,CAAC;AAED,4BAAG,oEAAoE,YAAY;AACjF,cAAM,YAAY,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC/D,cAAM,YAAY,UAAU,eAAe,EAAE,MAAM,WAAW,GAAG,IAAI;AAErE,cAAM,SAAS,MAAM,WAAW,OAAO;AACvC,cAAM,SAAS,MAAM,WAAW,YAAY;AAE5C,kCAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,OAAO;AACnD,kCAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,YAAY;AAAA,MAC1D,CAAC;AAED,4BAAG,iEAAiE,YAAY;AAC9E,cAAM,QAAe,EAAE,MAAM,qBAAqB,aAAa,YAAY;AAC3E,cAAM,YAAY,UAAU,eAAe,KAAK;AAChD,cAAM,YAAY,UAAU,eAAe,OAAO,IAAI;AAEtD,cAAM,SAAS,MAAM,WAAW,OAAO;AACvC,cAAM,SAAS,MAAM,WAAW,YAAY;AAE5C,kCAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,OAAO;AACnD,kCAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,YAAY;AAAA,MAC1D,CAAC;AAAA,IACH,CAAC;AAED,gCAAS,qBAAqB,MAAM;AAClC,YAAM,QAAgD;AAAA,QACpD,CAAC,kBAAkB,EAAE;AAAA,QACrB,CAAC,+BAA+B,YAAY;AAAA,QAC5C,CAAC,SAAS,WAAY;AAAA,QACtB,CAAC,uBAAuB,oBAAoB;AAAA,QAC5C,CAAC,sBAAsB,YAAY;AAAA,QACnC,CAAC,6BAA6B,gBAAgB;AAAA,QAC9C,CAAC,0BAA0B,eAAe;AAAA,QAC1C,CAAC,WAAW,mCAAiB;AAAA,QAC7B,CAAC,sBAAsB,gCAAgC;AAAA,QACvD,CAAC,yBAAyB,oBAAoB;AAAA,MAChD;AAEA,iBAAW,CAAC,OAAO,KAAK,KAAK,OAAO;AAClC,8BAAG,aAAa,KAAK,iBAAiB,YAAY;AAChD,gBAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAEvF,gBAAM,SAAS,MAAM,MAAM,KAAK;AAEhC,oCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,KAAK;AAAA,QAC9C,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,gCAAS,QAAQ,MAAM;AACrB,4BAAG,oDAAoD,YAAY;AACjE,kCAAO,MAAM,SAAS,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,MAC1C,CAAC;AAED,4BAAG,uDAAuD,YAAY;AACpE,cAAM,UAAuB;AAAA,UAC3B,UAAU,aAAa,EAAE,MAAM,WAAW,CAAC;AAAA,UAC3C,UAAU,aAAa,EAAE,MAAM,eAAe,aAAa,YAAY,GAAG,IAAI;AAAA,UAC9E,UAAU,aAAa,EAAE,MAAM,qBAAqB,aAAa,YAAY,CAAC;AAAA,UAC9E,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,kBAAkB,CAAC;AAAA,UAChF,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AAAA,UAC1C,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,kBAAkB,CAAC;AAAA,UACtF;AAAA,YACE,EAAE,WAAW,CAAC,KAAK,GAAG,MAAM,aAAa;AAAA,YACzC,EAAE,MAAM,qBAAqB,aAAa,YAAY;AAAA,YACtD;AAAA,UACF;AAAA,UACA,UAAU,EAAE,WAAW,CAAC,KAAK,GAAG,MAAM,aAAa,GAAG,EAAE,MAAM,QAAQ,GAAG,IAAI;AAAA,QAC/E;AAEA,mBAAW,QAAQ,SAAS;AAC1B,gBAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QACpC;AAEA,kCAAO,WAAW,MAAM,SAAS,KAAK,CAAC,CAAC,EAAE,QAAQ,WAAW,OAAO,CAAC;AAAA,MACvE,CAAC;AAED,4BAAG,mEAAmE,YAAY;AAChF,cAAM,UAAuB;AAAA,UAC3B,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAAA,UAC7C,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAAA,UAC1E,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AAAA,UAC1C,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,YAAY,CAAC;AAAA,QAClF;AAEA,mBAAW,QAAQ,SAAS;AAC1B,gBAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QACpC;AAEA,cAAM,SAAS,WAAW,MAAM,SAAS,KAAK,CAAC;AAC/C,kCAAO,MAAM,EAAE,QAAQ,WAAW,OAAO,CAAC;AAC1C,kCAAO,IAAI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,QAAQ,MAAM;AAAA,MAClD,CAAC;AAQD,4BAAG,sEAAsE,YAAY;AACnF,cAAM,UAAuB;AAAA,UAC3B,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,YAAY,CAAC;AAAA,UAChF,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,kBAAkB,CAAC;AAAA,QACxF;AAEA,mBAAW,QAAQ,SAAS;AAC1B,gBAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QACpC;AAEA,cAAM,SAAS,WAAW,MAAM,SAAS,KAAK,CAAC;AAC/C,kCAAO,MAAM,EAAE,QAAQ,WAAW,OAAO,CAAC;AAC1C,kCAAO,IAAI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;AAAA,MACrC,CAAC;AAED,4BAAG,iCAAiC,YAAY;AAC9C,cAAM,OAAO,UAAU,aAAa,EAAE,MAAM,WAAW,CAAC;AACxD,cAAM,UAAU,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAE7D,cAAM,SAAS,MAAM,MAAM,GAAG;AAC9B,cAAM,SAAS,MAAM,SAAS,GAAG;AACjC,cAAM,SAAS,OAAO,OAAO;AAE7B,kCAAO,WAAW,MAAM,SAAS,KAAK,CAAC,CAAC,EAAE,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC;AAAA,MACtE,CAAC;AAED,4BAAG,iCAAiC,YAAY;AAC9C,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,kCAAO,MAAM,SAAS,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC;AAED,gCAAS,UAAU,MAAM;AACvB,4BAAG,qBAAqB,YAAY;AAClC,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACvF,cAAM,SAAS,MAAM,MAAM,SAAS;AAEpC,cAAM,SAAS,OAAO,IAAI;AAE1B,kCAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,cAAc;AAAA,MAClD,CAAC;AAED,4BAAG,iEAA4D,YAAY;AACzE,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEvD,kBAAM,sBAAO,SAAS,OAAO,IAAI,CAAC,EAAE,SAAS,cAAc;AAC3D,kBAAM,sBAAO,SAAS,OAAO,IAAI,CAAC,EAAE,SAAS,cAAc;AAAA,MAC7D,CAAC;AAED,4BAAG,uCAAuC,YAAY;AACpD,cAAM,WAAW,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,QAAQ,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AACxD,cAAM,mBAAmB,UAAU,eAAe;AAAA,UAChD,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,SAAS,MAAM,UAAU,SAAS;AACxC,cAAM,SAAS,MAAM,QAAQ,YAAY;AACzC,cAAM,SAAS,MAAM,OAAO,UAAU;AACtC,cAAM,SAAS,MAAM,kBAAkB,qBAAqB;AAE5D,cAAM,SAAS,OAAO,gBAAgB;AAEtC,kCAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,SAAS;AACpD,kCAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,YAAY;AACrD,kCAAO,MAAM,SAAS,KAAK,KAAK,CAAC,EAAE,KAAK,UAAU;AAClD,kCAAO,MAAM,SAAS,KAAK,gBAAgB,CAAC,EAAE,cAAc;AAAA,MAC9D,CAAC;AAED,4BAAG,+DAA+D,YAAY;AAC5E,cAAM,gBAAgB,UAAU,eAAe;AAAA,UAC7C,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,WAAW,UAAU,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,SAAS,MAAM,eAAe,qBAAqB;AACzD,cAAM,SAAS,MAAM,UAAU,sBAAsB;AAErD,cAAM,SAAS,OAAO,aAAa;AAEnC,kCAAO,MAAM,SAAS,KAAK,aAAa,CAAC,EAAE,cAAc;AACzD,kCAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,sBAAsB;AAAA,MACnE,CAAC;AAED,4BAAG,oDAAoD,YAAY;AACjE,cAAM,OAAO,UAAU,eAAe;AAAA,UACpC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,kBAAM,sBAAO,SAAS,OAAO,IAAI,CAAC,EAAE,SAAS,cAAc;AAAA,MAC7D,CAAC;AAED,4BAAG,qBAAqB,YAAY;AAClC,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1D,cAAM,SAAS,MAAM,MAAM,SAAS;AACpC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,cAAM,SAAS,OAAO,IAAI;AAE1B,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,aAAa,CAAC;AAAA,MACtF,CAAC;AAAA,IACH,CAAC;AAED,gCAAS,QAAQ,MAAM;AACrB,4BAAG,sDAAsD,YAAY;AACnE,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,cAAc;AAAA,MAC/D,CAAC;AAED,4BAAG,2BAA2B,YAAY;AACxC,cAAM,OAAa;AAAA,UACjB,aAAa;AAAA,UACb,OAAO;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,YAAY,EAAE,UAAU,MAAM,OAAO,aAAa;AAAA,YAClD,aAAa,EAAE,UAAU,MAAM;AAAA,UACjC;AAAA,QACF;AAEA,cAAM,SAAS,UAAU,eAAe,IAAI;AAE5C,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,IAAI;AAAA,MAC7D,CAAC;AAED,4BAAG,0EAA0E,YAAY;AACvF,cAAM,OAAa;AAAA,UACjB,aAAa;AAAA,UACb,gBAAgB;AAAA,UAChB,cAAc,EAAE,YAAY,EAAE,eAAe,UAAU,eAAe,KAAK,EAAE;AAAA,QAC/E;AAEA,cAAM,SAAS,UAAU,eAAe,IAAI;AAE5C,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,IAAI;AAAA,MAC7D,CAAC;AAED,4BAAG,4BAA4B,YAAY;AACzC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,SAAS,OAAO,SAAS,CAAC;AACjF,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,SAAS,CAAC;AAEjE,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,SAAS,CAAC;AAAA,MAClF,CAAC;AAED,4BAAG,4BAA4B,YAAY;AACzC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AACrE,cAAM,SAAS,UAAU,aAAa,EAAE,aAAa,mBAAmB,CAAC;AAEzE,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,aAAa,CAAC;AACpF,kCAAO,MAAM,SAAS,SAAS,WAAW,CAAC,EAAE,QAAQ,EAAE,aAAa,mBAAmB,CAAC;AAAA,MAC1F,CAAC;AAED,4BAAG,yCAAyC,YAAY;AACtD,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,cAAc,UAAU,KAAK,CAAC;AAErF,kCAAO,MAAM,SAAS,KAAK,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc;AAAA,MAC5F,CAAC;AAAA,IACH,CAAC;AAED,gCAAS,cAAc,MAAM;AAC3B,4BAAG,oBAAoB,YAAY;AACjC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,cAAM,SAAS,WAAW,aAAa;AAEvC,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,cAAc;AAAA,MAC/D,CAAC;AAED,4BAAG,6DAAwD,YAAY;AACrE,kBAAM,sBAAO,SAAS,WAAW,aAAa,CAAC,EAAE,SAAS,cAAc;AACxE,kBAAM,sBAAO,SAAS,WAAW,aAAa,CAAC,EAAE,SAAS,cAAc;AAAA,MAC1E,CAAC;AAQD,4BAAG,4BAA4B,YAAY;AACzC,cAAM,WAAW,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,SAAS,MAAM,UAAU,SAAS;AACxC,cAAM,SAAS,MAAM,QAAQ,YAAY;AACzC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,cAAM,SAAS,WAAW,aAAa;AAEvC,kCAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,SAAS;AACpD,kCAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,YAAY;AAAA,MACvD,CAAC;AAED,4BAAG,2CAA2C,YAAY;AACxD,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AACrE,cAAM,SAAS,UAAU,aAAa,EAAE,aAAa,mBAAmB,CAAC;AAEzE,cAAM,SAAS,WAAW,aAAa;AAEvC,kCAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,cAAc;AAC7D,kCAAO,MAAM,SAAS,SAAS,WAAW,CAAC,EAAE,QAAQ,EAAE,aAAa,mBAAmB,CAAC;AAAA,MAC1F,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;;;ACpdA,IAAAA,eAA4B;AAG5B,SAASC,UAAS,OAAsB;AACtC,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,eAAe,MAAM,WAAW;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,qBAAqB,MAAM,WAAW;AAAA,IAC/C;AACE,iBAAO,0BAAY,OAAO,OAAO;AAAA,EACrC;AACF;AAMA,SAAS,SAAS,MAAyB;AACzC,SAAO,CAAC,KAAK,UAAU,KAAK,GAAG,GAAG,KAAK,MAAMA,UAAS,KAAK,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,EAAE;AAAA,IACzF;AAAA,EACF;AACF;AAEA,SAAS,QAAQ,KAA2B;AAC1C,SAAO,CAAC,IAAI,UAAU,KAAK,GAAG,GAAG,IAAI,IAAI,EAAE,KAAK,IAAG;AACrD;AAGA,SAAS,eAAe,MAA4B;AAClD,SAAO;AAAA,IACL,WAAW,CAAC,GAAG,KAAK,SAAS;AAAA,IAC7B,MAAM,KAAK;AAAA,IACX,OAAO,KAAK;AAAA,IACZ,WAAW,KAAK;AAAA,EAClB;AACF;AAOO,IAAM,mBAAN,MAA2C;AAAA,EACvC,OAAO;AAAA,EAEP,UAAU,oBAAI,IAAyB;AAAA,EACvC,QAAQ,oBAAI,IAAoB;AAAA,EAEzC,MAAM,KAAK,MAA8C;AACvD,WAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,GAAG;AAAA,EAC3C;AAAA,EAEA,MAAM,MAAM,MAAiB,OAA8B;AACzD,SAAK,QAAQ,IAAI,SAAS,IAAI,GAAG,EAAE,MAAM,eAAe,IAAI,GAAG,MAAM,CAAC;AAAA,EACxE;AAAA,EAEA,MAAM,OAA6B;AACjC,WAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,eAAe,OAAO,IAAI,CAAC;AAAA,EAC/E;AAAA,EAEA,MAAM,OAAO,MAAgC;AAC3C,SAAK,QAAQ,OAAO,SAAS,IAAI,CAAC;AAAA,EACpC;AAAA,EAEA,MAAM,SAAS,KAA8C;AAC3D,UAAM,SAAS,KAAK,MAAM,IAAI,QAAQ,GAAG,CAAC;AAC1C,WAAO,WAAW,SAAY,SAAa,KAAK,MAAM,MAAM;AAAA,EAC9D;AAAA,EAEA,MAAM,UAAU,KAAmB,MAA2B;AAC5D,SAAK,MAAM,IAAI,QAAQ,GAAG,GAAG,KAAK,UAAU,IAAI,CAAC;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,KAAkC;AACjD,SAAK,MAAM,OAAO,QAAQ,GAAG,CAAC;AAAA,EAChC;AACF;AAEO,SAAS,yBAA2C;AACzD,SAAO,IAAI,iBAAiB;AAC9B;","names":["import_core","scopeKey"]}

package/dist/index.d.cts ADDED Viewed

@@ -0,0 +1,56 @@
+import { Provider, ValueFile, ParameterRef, Meta } from '@penvhq/core';
+/**
+ * The provider contract suite: the behaviour every provider must satisfy.
+ *
+ * This is the suite the Vault adapter must pass unchanged. Nothing here may
+ * assume a filesystem — no paths, no `node:fs`, no on-disk layout. It speaks
+ * only the vocabulary of `@penvhq/core`: a provider is addressed by
+ * `(namespace, name, scope, encrypted)` and nothing else.
+ *
+ * A provider handed to this suite must accept the environments `development`
+ * and `production`, and must start empty.
+ */
+declare function runProviderContractSuite(name: string, makeProvider: () => Promise<{
+    provider: Provider;
+    cleanup: () => Promise<void>;
+}>): void;
+/**
+ * An in-memory provider: a Map-backed store that satisfies the same `@penvhq/core`
+ * provider contract the filesystem does, with no disk, no paths, and no code
+ * shared with the reference provider.
+ *
+ * It is a test fixture, not a registered provider. Its whole reason to exist is to
+ * prove {@link runProviderContractSuite} is genuinely provider-agnostic: a second,
+ * structurally unrelated provider type passes the same behavioural suite the
+ * filesystem passes and the Vault adapter must. That demonstrates the portability
+ * seam without standing up a live backend.
+ *
+ * Two choices keep it honest rather than a suite grading its own reflection:
+ *  - Values and meta live in two maps under disjoint keyspaces, so a written meta
+ *    can never be returned by `list()` as though it were a value.
+ *  - Meta is round-tripped through JSON on write and read, the way any real store
+ *    holding a string does, so nothing here hands back a live object reference a
+ *    caller could mutate after the fact.
+ *
+ * It declares no retention: `readPrevious` is omitted, the general case the
+ * contract permits (see `retainsPrevious` in `@penvhq/core`). The filesystem and
+ * Kubernetes sit on the same side of that line.
+ */
+declare class InMemoryProvider implements Provider {
+    #private;
+    readonly type = "memory";
+    read(file: ValueFile): Promise<string | undefined>;
+    write(file: ValueFile, value: string): Promise<void>;
+    list(): Promise<ValueFile[]>;
+    remove(file: ValueFile): Promise<void>;
+    readMeta(ref: ParameterRef): Promise<Meta | undefined>;
+    writeMeta(ref: ParameterRef, meta: Meta): Promise<void>;
+    removeMeta(ref: ParameterRef): Promise<void>;
+}
+declare function createInMemoryProvider(): InMemoryProvider;
+export { InMemoryProvider, createInMemoryProvider, runProviderContractSuite };

package/dist/index.d.ts ADDED Viewed

@@ -0,0 +1,56 @@
+import { Provider, ValueFile, ParameterRef, Meta } from '@penvhq/core';
+/**
+ * The provider contract suite: the behaviour every provider must satisfy.
+ *
+ * This is the suite the Vault adapter must pass unchanged. Nothing here may
+ * assume a filesystem — no paths, no `node:fs`, no on-disk layout. It speaks
+ * only the vocabulary of `@penvhq/core`: a provider is addressed by
+ * `(namespace, name, scope, encrypted)` and nothing else.
+ *
+ * A provider handed to this suite must accept the environments `development`
+ * and `production`, and must start empty.
+ */
+declare function runProviderContractSuite(name: string, makeProvider: () => Promise<{
+    provider: Provider;
+    cleanup: () => Promise<void>;
+}>): void;
+/**
+ * An in-memory provider: a Map-backed store that satisfies the same `@penvhq/core`
+ * provider contract the filesystem does, with no disk, no paths, and no code
+ * shared with the reference provider.
+ *
+ * It is a test fixture, not a registered provider. Its whole reason to exist is to
+ * prove {@link runProviderContractSuite} is genuinely provider-agnostic: a second,
+ * structurally unrelated provider type passes the same behavioural suite the
+ * filesystem passes and the Vault adapter must. That demonstrates the portability
+ * seam without standing up a live backend.
+ *
+ * Two choices keep it honest rather than a suite grading its own reflection:
+ *  - Values and meta live in two maps under disjoint keyspaces, so a written meta
+ *    can never be returned by `list()` as though it were a value.
+ *  - Meta is round-tripped through JSON on write and read, the way any real store
+ *    holding a string does, so nothing here hands back a live object reference a
+ *    caller could mutate after the fact.
+ *
+ * It declares no retention: `readPrevious` is omitted, the general case the
+ * contract permits (see `retainsPrevious` in `@penvhq/core`). The filesystem and
+ * Kubernetes sit on the same side of that line.
+ */
+declare class InMemoryProvider implements Provider {
+    #private;
+    readonly type = "memory";
+    read(file: ValueFile): Promise<string | undefined>;
+    write(file: ValueFile, value: string): Promise<void>;
+    list(): Promise<ValueFile[]>;
+    remove(file: ValueFile): Promise<void>;
+    readMeta(ref: ParameterRef): Promise<Meta | undefined>;
+    writeMeta(ref: ParameterRef, meta: Meta): Promise<void>;
+    removeMeta(ref: ParameterRef): Promise<void>;
+}
+declare function createInMemoryProvider(): InMemoryProvider;
+export { InMemoryProvider, createInMemoryProvider, runProviderContractSuite };

package/dist/index.js ADDED Viewed

@@ -0,0 +1,426 @@
+// src/contract.ts
+import { assertNever } from "@penvhq/core";
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+var ENVIRONMENT = "production";
+var OTHER_ENVIRONMENT = "development";
+var redisPassword = { namespace: ["redis"], name: "password" };
+var databaseUrl = { namespace: [], name: "database-url" };
+function valueFile(ref, scope, encrypted = false) {
+  return { namespace: ref.namespace, name: ref.name, scope, encrypted };
+}
+function scopeKey(scope) {
+  switch (scope.kind) {
+    case "unscoped":
+      return "unscoped";
+    case "environment":
+      return `environment:${scope.environment}`;
+    case "local":
+      return "local";
+    case "environment-local":
+      return `environment-local:${scope.environment}`;
+    default:
+      return assertNever(scope, "scope");
+  }
+}
+function identity(file) {
+  return `${[...file.namespace, file.name].join("/")}|${scopeKey(file.scope)}|${file.encrypted}`;
+}
+function identities(files) {
+  return files.map(identity).sort();
+}
+function runProviderContractSuite(name, makeProvider) {
+  describe(`provider contract: ${name}`, () => {
+    let provider;
+    let cleanup;
+    beforeEach(async () => {
+      const made = await makeProvider();
+      provider = made.provider;
+      cleanup = made.cleanup;
+    });
+    afterEach(async () => {
+      await cleanup();
+    });
+    it("reports its type", () => {
+      expect(typeof provider.type).toBe("string");
+      expect(provider.type.length).toBeGreaterThan(0);
+    });
+    describe("read and write", () => {
+      it("round-trips a written value", async () => {
+        const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        await provider.write(file, "hunter2");
+        expect(await provider.read(file)).toBe("hunter2");
+      });
+      it("resolves to undefined for a value that was never written", async () => {
+        const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        expect(await provider.read(file)).toBeUndefined();
+      });
+      it("overwrites in place rather than appending", async () => {
+        const file = valueFile(databaseUrl, { kind: "unscoped" });
+        await provider.write(file, "postgres://localhost/dev");
+        await provider.write(file, "postgres://localhost/other");
+        expect(await provider.read(file)).toBe("postgres://localhost/other");
+      });
+      it("creates namespaces as needed", async () => {
+        const file = valueFile(
+          { namespace: ["app", "auth"], name: "jwt-secret" },
+          {
+            kind: "unscoped"
+          }
+        );
+        await provider.write(file, "s3cret");
+        expect(await provider.read(file)).toBe("s3cret");
+      });
+      it("round-trips a value at the environment-local scope", async () => {
+        const file = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(file, "my-machine-only");
+        expect(await provider.read(file)).toBe("my-machine-only");
+      });
+      it("keeps each of the four scopes of one parameter at its own address", async () => {
+        const unscoped = valueFile(redisPassword, { kind: "unscoped" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        const local = valueFile(redisPassword, { kind: "local" });
+        const environmentLocal = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(unscoped, "default");
+        await provider.write(scoped, "production");
+        await provider.write(local, "personal");
+        await provider.write(environmentLocal, "personal-production");
+        expect(await provider.read(unscoped)).toBe("default");
+        expect(await provider.read(scoped)).toBe("production");
+        expect(await provider.read(local)).toBe("personal");
+        expect(await provider.read(environmentLocal)).toBe("personal-production");
+      });
+      it("keeps environment-local values for different environments apart", async () => {
+        const forProduction = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        const forOther = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: OTHER_ENVIRONMENT
+        });
+        await provider.write(forProduction, "personal-production");
+        await provider.write(forOther, "personal-development");
+        expect(await provider.read(forProduction)).toBe("personal-production");
+        expect(await provider.read(forOther)).toBe("personal-development");
+      });
+      it("keeps environment-local apart from local and from the environment scope", async () => {
+        const local = valueFile(redisPassword, { kind: "local" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        const environmentLocal = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(environmentLocal, "personal-production");
+        expect(await provider.read(local)).toBeUndefined();
+        expect(await provider.read(scoped)).toBeUndefined();
+        expect(await provider.read(environmentLocal)).toBe("personal-production");
+      });
+      it("keeps an encrypted value at its own address, orthogonal to scope", async () => {
+        const plaintext = valueFile(redisPassword, { kind: "unscoped" });
+        const encrypted = valueFile(redisPassword, { kind: "unscoped" }, true);
+        await provider.write(plaintext, "plain");
+        await provider.write(encrypted, "ciphertext");
+        expect(await provider.read(plaintext)).toBe("plain");
+        expect(await provider.read(encrypted)).toBe("ciphertext");
+      });
+      it("keeps an encrypted environment-local value at its own address", async () => {
+        const scope = { kind: "environment-local", environment: ENVIRONMENT };
+        const plaintext = valueFile(redisPassword, scope);
+        const encrypted = valueFile(redisPassword, scope, true);
+        await provider.write(plaintext, "plain");
+        await provider.write(encrypted, "ciphertext");
+        expect(await provider.read(plaintext)).toBe("plain");
+        expect(await provider.read(encrypted)).toBe("ciphertext");
+      });
+    });
+    describe("values are opaque", () => {
+      const cases = [
+        ["an empty value", ""],
+        ["leading and trailing spaces", "  padded  "],
+        ["a tab", "	indented"],
+        ["an embedded newline", "line one\nline two"],
+        ["a trailing newline", "trailing\n"],
+        ["several trailing newlines", "trailing\n\n\n"],
+        ["a lone carriage return", "crlf\r\nvalue"],
+        ["unicode", "cl\xE9-priv\xE9e-\u{1F510}-\u03A9"],
+        ["quotes and escapes", `{"a":"b\\n"} 'single' "double"`],
+        ["a base64-shaped value", "aGVsbG8gd29ybGQ=\n"]
+      ];
+      for (const [label, value] of cases) {
+        it(`preserves ${label} byte-exactly`, async () => {
+          const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+          await provider.write(file, value);
+          expect(await provider.read(file)).toBe(value);
+        });
+      }
+    });
+    describe("list", () => {
+      it("returns nothing for a provider holding no values", async () => {
+        expect(await provider.list()).toEqual([]);
+      });
+      it("returns every written value file across every scope", async () => {
+        const written = [
+          valueFile(databaseUrl, { kind: "unscoped" }),
+          valueFile(databaseUrl, { kind: "environment", environment: ENVIRONMENT }, true),
+          valueFile(databaseUrl, { kind: "environment-local", environment: ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "environment", environment: OTHER_ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "local" }),
+          valueFile(redisPassword, { kind: "environment-local", environment: OTHER_ENVIRONMENT }),
+          valueFile(
+            { namespace: ["app"], name: "jwt-secret" },
+            { kind: "environment-local", environment: ENVIRONMENT },
+            true
+          ),
+          valueFile({ namespace: ["app"], name: "jwt-secret" }, { kind: "local" }, true)
+        ];
+        for (const file of written) {
+          await provider.write(file, "value");
+        }
+        expect(identities(await provider.list())).toEqual(identities(written));
+      });
+      it("lists all four scopes of one parameter as four distinct records", async () => {
+        const written = [
+          valueFile(redisPassword, { kind: "unscoped" }),
+          valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "local" }),
+          valueFile(redisPassword, { kind: "environment-local", environment: ENVIRONMENT })
+        ];
+        for (const file of written) {
+          await provider.write(file, "value");
+        }
+        const listed = identities(await provider.list());
+        expect(listed).toEqual(identities(written));
+        expect(new Set(listed).size).toBe(written.length);
+      });
+      it("lists environment-local values for two environments as two records", async () => {
+        const written = [
+          valueFile(redisPassword, { kind: "environment-local", environment: ENVIRONMENT }),
+          valueFile(redisPassword, { kind: "environment-local", environment: OTHER_ENVIRONMENT })
+        ];
+        for (const file of written) {
+          await provider.write(file, "value");
+        }
+        const listed = identities(await provider.list());
+        expect(listed).toEqual(identities(written));
+        expect(new Set(listed).size).toBe(2);
+      });
+      it("does not list a removed value", async () => {
+        const kept = valueFile(databaseUrl, { kind: "unscoped" });
+        const removed = valueFile(redisPassword, { kind: "unscoped" });
+        await provider.write(kept, "a");
+        await provider.write(removed, "b");
+        await provider.remove(removed);
+        expect(identities(await provider.list())).toEqual(identities([kept]));
+      });
+      it("does not list meta as a value", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        expect(await provider.list()).toEqual([]);
+      });
+    });
+    describe("remove", () => {
+      it("deletes the value", async () => {
+        const file = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        await provider.write(file, "hunter2");
+        await provider.remove(file);
+        expect(await provider.read(file)).toBeUndefined();
+      });
+      it("is idempotent \u2014 removing an absent value is not an error", async () => {
+        const file = valueFile(redisPassword, { kind: "local" });
+        await expect(provider.remove(file)).resolves.toBeUndefined();
+        await expect(provider.remove(file)).resolves.toBeUndefined();
+      });
+      it("removes only the scope it was given", async () => {
+        const unscoped = valueFile(redisPassword, { kind: "unscoped" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        const local = valueFile(redisPassword, { kind: "local" });
+        const environmentLocal = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await provider.write(unscoped, "default");
+        await provider.write(scoped, "production");
+        await provider.write(local, "personal");
+        await provider.write(environmentLocal, "personal-production");
+        await provider.remove(environmentLocal);
+        expect(await provider.read(unscoped)).toBe("default");
+        expect(await provider.read(scoped)).toBe("production");
+        expect(await provider.read(local)).toBe("personal");
+        expect(await provider.read(environmentLocal)).toBeUndefined();
+      });
+      it("removes an environment-local value for one environment only", async () => {
+        const forProduction = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        const forOther = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: OTHER_ENVIRONMENT
+        });
+        await provider.write(forProduction, "personal-production");
+        await provider.write(forOther, "personal-development");
+        await provider.remove(forProduction);
+        expect(await provider.read(forProduction)).toBeUndefined();
+        expect(await provider.read(forOther)).toBe("personal-development");
+      });
+      it("is idempotent at the environment-local scope too", async () => {
+        const file = valueFile(redisPassword, {
+          kind: "environment-local",
+          environment: ENVIRONMENT
+        });
+        await expect(provider.remove(file)).resolves.toBeUndefined();
+      });
+      it("leaves meta alone", async () => {
+        const file = valueFile(redisPassword, { kind: "unscoped" });
+        await provider.write(file, "hunter2");
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.remove(file);
+        expect(await provider.readMeta(redisPassword)).toEqual({ description: "Redis auth" });
+      });
+    });
+    describe("meta", () => {
+      it("resolves to undefined for a parameter with no meta", async () => {
+        expect(await provider.readMeta(redisPassword)).toBeUndefined();
+      });
+      it("round-trips a meta file", async () => {
+        const meta = {
+          description: "Signs and verifies user session JWTs",
+          owner: "auth-team",
+          secret: true,
+          environments: {
+            production: { required: true, owner: "infra-team" },
+            development: { required: false }
+          }
+        };
+        await provider.writeMeta(redisPassword, meta);
+        expect(await provider.readMeta(redisPassword)).toEqual(meta);
+      });
+      it("preserves unknown keys, so an older penv does not destroy newer fields", async () => {
+        const meta = {
+          description: "Redis auth",
+          rotationPolicy: "90d",
+          environments: { production: { rotationState: "active", rotatingSince: null } }
+        };
+        await provider.writeMeta(redisPassword, meta);
+        expect(await provider.readMeta(redisPassword)).toEqual(meta);
+      });
+      it("overwrites meta in place", async () => {
+        await provider.writeMeta(redisPassword, { description: "first", owner: "a-team" });
+        await provider.writeMeta(redisPassword, { description: "second" });
+        expect(await provider.readMeta(redisPassword)).toEqual({ description: "second" });
+      });
+      it("keeps meta per parameter", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.writeMeta(databaseUrl, { description: "Primary database" });
+        expect(await provider.readMeta(redisPassword)).toEqual({ description: "Redis auth" });
+        expect(await provider.readMeta(databaseUrl)).toEqual({ description: "Primary database" });
+      });
+      it("holds meta independently of any value", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth", required: true });
+        expect(await provider.read(valueFile(redisPassword, { kind: "unscoped" }))).toBeUndefined();
+      });
+    });
+    describe("removeMeta", () => {
+      it("deletes the meta", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.removeMeta(redisPassword);
+        expect(await provider.readMeta(redisPassword)).toBeUndefined();
+      });
+      it("is idempotent \u2014 removing absent meta is not an error", async () => {
+        await expect(provider.removeMeta(redisPassword)).resolves.toBeUndefined();
+        await expect(provider.removeMeta(redisPassword)).resolves.toBeUndefined();
+      });
+      it("leaves every value alone", async () => {
+        const unscoped = valueFile(redisPassword, { kind: "unscoped" });
+        const scoped = valueFile(redisPassword, { kind: "environment", environment: ENVIRONMENT });
+        await provider.write(unscoped, "default");
+        await provider.write(scoped, "production");
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.removeMeta(redisPassword);
+        expect(await provider.read(unscoped)).toBe("default");
+        expect(await provider.read(scoped)).toBe("production");
+      });
+      it("removes only the parameter it was given", async () => {
+        await provider.writeMeta(redisPassword, { description: "Redis auth" });
+        await provider.writeMeta(databaseUrl, { description: "Primary database" });
+        await provider.removeMeta(redisPassword);
+        expect(await provider.readMeta(redisPassword)).toBeUndefined();
+        expect(await provider.readMeta(databaseUrl)).toEqual({ description: "Primary database" });
+      });
+    });
+  });
+}
+// src/memory.ts
+import { assertNever as assertNever2 } from "@penvhq/core";
+function scopeKey2(scope) {
+  switch (scope.kind) {
+    case "unscoped":
+      return "unscoped";
+    case "environment":
+      return `environment:${scope.environment}`;
+    case "local":
+      return "local";
+    case "environment-local":
+      return `environment-local:${scope.environment}`;
+    default:
+      return assertNever2(scope, "scope");
+  }
+}
+function valueKey(file) {
+  return [file.namespace.join("/"), file.name, scopeKey2(file.scope), String(file.encrypted)].join(
+    "\0"
+  );
+}
+function metaKey(ref) {
+  return [ref.namespace.join("/"), ref.name].join("\0");
+}
+function cloneValueFile(file) {
+  return {
+    namespace: [...file.namespace],
+    name: file.name,
+    scope: file.scope,
+    encrypted: file.encrypted
+  };
+}
+var InMemoryProvider = class {
+  type = "memory";
+  #values = /* @__PURE__ */ new Map();
+  #meta = /* @__PURE__ */ new Map();
+  async read(file) {
+    return this.#values.get(valueKey(file))?.value;
+  }
+  async write(file, value) {
+    this.#values.set(valueKey(file), { file: cloneValueFile(file), value });
+  }
+  async list() {
+    return [...this.#values.values()].map((stored) => cloneValueFile(stored.file));
+  }
+  async remove(file) {
+    this.#values.delete(valueKey(file));
+  }
+  async readMeta(ref) {
+    const stored = this.#meta.get(metaKey(ref));
+    return stored === void 0 ? void 0 : JSON.parse(stored);
+  }
+  async writeMeta(ref, meta) {
+    this.#meta.set(metaKey(ref), JSON.stringify(meta));
+  }
+  async removeMeta(ref) {
+    this.#meta.delete(metaKey(ref));
+  }
+};
+function createInMemoryProvider() {
+  return new InMemoryProvider();
+}
+export {
+  InMemoryProvider,
+  createInMemoryProvider,
+  runProviderContractSuite
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"sources":["../src/contract.ts","../src/memory.ts"],"sourcesContent":["/**\n * The provider contract suite: the behaviour every provider must satisfy.\n *\n * This is the suite the Vault adapter must pass unchanged. Nothing here may\n * assume a filesystem — no paths, no `node:fs`, no on-disk layout. It speaks\n * only the vocabulary of `@penvhq/core`: a provider is addressed by\n * `(namespace, name, scope, encrypted)` and nothing else.\n *\n * A provider handed to this suite must accept the environments `development`\n * and `production`, and must start empty.\n */\n\nimport type { Meta, ParameterRef, Provider, Scope, ValueFile } from \"@penvhq/core\";\nimport { assertNever } from \"@penvhq/core\";\nimport { afterEach, beforeEach, describe, expect, it } from \"vitest\";\n\nconst ENVIRONMENT = \"production\";\nconst OTHER_ENVIRONMENT = \"development\";\n\nconst redisPassword: ParameterRef = { namespace: [\"redis\"], name: \"password\" };\nconst databaseUrl: ParameterRef = { namespace: [], name: \"database-url\" };\n\nfunction valueFile(ref: ParameterRef, scope: Scope, encrypted = false): ValueFile {\n return { namespace: ref.namespace, name: ref.name, scope, encrypted };\n}\n\n/**\n * Every scope that carries an environment must key on it. Two scopes that differ\n * only by environment are two records, and a key that dropped the environment\n * would make this suite pass while a provider overwrote one with the other.\n */\nfunction scopeKey(scope: Scope): string {\n switch (scope.kind) {\n case \"unscoped\":\n return \"unscoped\";\n case \"environment\":\n return `environment:${scope.environment}`;\n case \"local\":\n return \"local\";\n case \"environment-local\":\n return `environment-local:${scope.environment}`;\n default:\n return assertNever(scope, \"scope\");\n }\n}\n\n/** A stable identity built only from contract fields, so `list` order is not asserted. */\nfunction identity(file: ValueFile): string {\n return `${[...file.namespace, file.name].join(\"/\")}|${scopeKey(file.scope)}|${file.encrypted}`;\n}\n\nfunction identities(files: readonly ValueFile[]): string[] {\n return files.map(identity).sort();\n}\n\nexport function runProviderContractSuite(\n name: string,\n makeProvider: () => Promise<{ provider: Provider; cleanup: () => Promise<void> }>,\n): void {\n describe(`provider contract: ${name}`, () => {\n let provider: Provider;\n let cleanup: () => Promise<void>;\n\n beforeEach(async () => {\n const made = await makeProvider();\n provider = made.provider;\n cleanup = made.cleanup;\n });\n\n afterEach(async () => {\n await cleanup();\n });\n\n it(\"reports its type\", () => {\n expect(typeof provider.type).toBe(\"string\");\n expect(provider.type.length).toBeGreaterThan(0);\n });\n\n describe(\"read and write\", () => {\n it(\"round-trips a written value\", async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n\n await provider.write(file, \"hunter2\");\n\n expect(await provider.read(file)).toBe(\"hunter2\");\n });\n\n it(\"resolves to undefined for a value that was never written\", async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n\n expect(await provider.read(file)).toBeUndefined();\n });\n\n it(\"overwrites in place rather than appending\", async () => {\n const file = valueFile(databaseUrl, { kind: \"unscoped\" });\n\n await provider.write(file, \"postgres://localhost/dev\");\n await provider.write(file, \"postgres://localhost/other\");\n\n expect(await provider.read(file)).toBe(\"postgres://localhost/other\");\n });\n\n it(\"creates namespaces as needed\", async () => {\n const file = valueFile(\n { namespace: [\"app\", \"auth\"], name: \"jwt-secret\" },\n {\n kind: \"unscoped\",\n },\n );\n\n await provider.write(file, \"s3cret\");\n\n expect(await provider.read(file)).toBe(\"s3cret\");\n });\n\n it(\"round-trips a value at the environment-local scope\", async () => {\n const file = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await provider.write(file, \"my-machine-only\");\n\n expect(await provider.read(file)).toBe(\"my-machine-only\");\n });\n\n it(\"keeps each of the four scopes of one parameter at its own address\", async () => {\n const unscoped = valueFile(redisPassword, { kind: \"unscoped\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n const local = valueFile(redisPassword, { kind: \"local\" });\n const environmentLocal = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await provider.write(unscoped, \"default\");\n await provider.write(scoped, \"production\");\n await provider.write(local, \"personal\");\n await provider.write(environmentLocal, \"personal-production\");\n\n expect(await provider.read(unscoped)).toBe(\"default\");\n expect(await provider.read(scoped)).toBe(\"production\");\n expect(await provider.read(local)).toBe(\"personal\");\n expect(await provider.read(environmentLocal)).toBe(\"personal-production\");\n });\n\n /*\n * The failure this guards: an environment-local value stored without its\n * environment. One developer's override for one environment would become\n * the override for every environment — the scope-widening leak penv exists\n * to delete.\n */\n it(\"keeps environment-local values for different environments apart\", async () => {\n const forProduction = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n const forOther = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: OTHER_ENVIRONMENT,\n });\n\n await provider.write(forProduction, \"personal-production\");\n await provider.write(forOther, \"personal-development\");\n\n expect(await provider.read(forProduction)).toBe(\"personal-production\");\n expect(await provider.read(forOther)).toBe(\"personal-development\");\n });\n\n it(\"keeps environment-local apart from local and from the environment scope\", async () => {\n const local = valueFile(redisPassword, { kind: \"local\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n const environmentLocal = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await provider.write(environmentLocal, \"personal-production\");\n\n expect(await provider.read(local)).toBeUndefined();\n expect(await provider.read(scoped)).toBeUndefined();\n expect(await provider.read(environmentLocal)).toBe(\"personal-production\");\n });\n\n it(\"keeps an encrypted value at its own address, orthogonal to scope\", async () => {\n const plaintext = valueFile(redisPassword, { kind: \"unscoped\" });\n const encrypted = valueFile(redisPassword, { kind: \"unscoped\" }, true);\n\n await provider.write(plaintext, \"plain\");\n await provider.write(encrypted, \"ciphertext\");\n\n expect(await provider.read(plaintext)).toBe(\"plain\");\n expect(await provider.read(encrypted)).toBe(\"ciphertext\");\n });\n\n it(\"keeps an encrypted environment-local value at its own address\", async () => {\n const scope: Scope = { kind: \"environment-local\", environment: ENVIRONMENT };\n const plaintext = valueFile(redisPassword, scope);\n const encrypted = valueFile(redisPassword, scope, true);\n\n await provider.write(plaintext, \"plain\");\n await provider.write(encrypted, \"ciphertext\");\n\n expect(await provider.read(plaintext)).toBe(\"plain\");\n expect(await provider.read(encrypted)).toBe(\"ciphertext\");\n });\n });\n\n describe(\"values are opaque\", () => {\n const cases: readonly (readonly [string, string])[] = [\n [\"an empty value\", \"\"],\n [\"leading and trailing spaces\", \" padded \"],\n [\"a tab\", \"\\tindented\"],\n [\"an embedded newline\", \"line one\\nline two\"],\n [\"a trailing newline\", \"trailing\\n\"],\n [\"several trailing newlines\", \"trailing\\n\\n\\n\"],\n [\"a lone carriage return\", \"crlf\\r\\nvalue\"],\n [\"unicode\", \"clé-privée-🔐-Ω\"],\n [\"quotes and escapes\", `{\"a\":\"b\\\\n\"} 'single' \"double\"`],\n [\"a base64-shaped value\", \"aGVsbG8gd29ybGQ=\\n\"],\n ];\n\n for (const [label, value] of cases) {\n it(`preserves ${label} byte-exactly`, async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n\n await provider.write(file, value);\n\n expect(await provider.read(file)).toBe(value);\n });\n }\n });\n\n describe(\"list\", () => {\n it(\"returns nothing for a provider holding no values\", async () => {\n expect(await provider.list()).toEqual([]);\n });\n\n it(\"returns every written value file across every scope\", async () => {\n const written: ValueFile[] = [\n valueFile(databaseUrl, { kind: \"unscoped\" }),\n valueFile(databaseUrl, { kind: \"environment\", environment: ENVIRONMENT }, true),\n valueFile(databaseUrl, { kind: \"environment-local\", environment: ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"environment\", environment: OTHER_ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"local\" }),\n valueFile(redisPassword, { kind: \"environment-local\", environment: OTHER_ENVIRONMENT }),\n valueFile(\n { namespace: [\"app\"], name: \"jwt-secret\" },\n { kind: \"environment-local\", environment: ENVIRONMENT },\n true,\n ),\n valueFile({ namespace: [\"app\"], name: \"jwt-secret\" }, { kind: \"local\" }, true),\n ];\n\n for (const file of written) {\n await provider.write(file, \"value\");\n }\n\n expect(identities(await provider.list())).toEqual(identities(written));\n });\n\n it(\"lists all four scopes of one parameter as four distinct records\", async () => {\n const written: ValueFile[] = [\n valueFile(redisPassword, { kind: \"unscoped\" }),\n valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"local\" }),\n valueFile(redisPassword, { kind: \"environment-local\", environment: ENVIRONMENT }),\n ];\n\n for (const file of written) {\n await provider.write(file, \"value\");\n }\n\n const listed = identities(await provider.list());\n expect(listed).toEqual(identities(written));\n expect(new Set(listed).size).toBe(written.length);\n });\n\n /*\n * The distinctness assertion is load-bearing, not decoration. Both sides of\n * the `toEqual` run through `identity`, so an identity that dropped the\n * environment would collapse each side equally and the comparison would\n * still hold — the suite would pass while treating two records as one.\n */\n it(\"lists environment-local values for two environments as two records\", async () => {\n const written: ValueFile[] = [\n valueFile(redisPassword, { kind: \"environment-local\", environment: ENVIRONMENT }),\n valueFile(redisPassword, { kind: \"environment-local\", environment: OTHER_ENVIRONMENT }),\n ];\n\n for (const file of written) {\n await provider.write(file, \"value\");\n }\n\n const listed = identities(await provider.list());\n expect(listed).toEqual(identities(written));\n expect(new Set(listed).size).toBe(2);\n });\n\n it(\"does not list a removed value\", async () => {\n const kept = valueFile(databaseUrl, { kind: \"unscoped\" });\n const removed = valueFile(redisPassword, { kind: \"unscoped\" });\n\n await provider.write(kept, \"a\");\n await provider.write(removed, \"b\");\n await provider.remove(removed);\n\n expect(identities(await provider.list())).toEqual(identities([kept]));\n });\n\n it(\"does not list meta as a value\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n expect(await provider.list()).toEqual([]);\n });\n });\n\n describe(\"remove\", () => {\n it(\"deletes the value\", async () => {\n const file = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n await provider.write(file, \"hunter2\");\n\n await provider.remove(file);\n\n expect(await provider.read(file)).toBeUndefined();\n });\n\n it(\"is idempotent — removing an absent value is not an error\", async () => {\n const file = valueFile(redisPassword, { kind: \"local\" });\n\n await expect(provider.remove(file)).resolves.toBeUndefined();\n await expect(provider.remove(file)).resolves.toBeUndefined();\n });\n\n it(\"removes only the scope it was given\", async () => {\n const unscoped = valueFile(redisPassword, { kind: \"unscoped\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n const local = valueFile(redisPassword, { kind: \"local\" });\n const environmentLocal = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n await provider.write(unscoped, \"default\");\n await provider.write(scoped, \"production\");\n await provider.write(local, \"personal\");\n await provider.write(environmentLocal, \"personal-production\");\n\n await provider.remove(environmentLocal);\n\n expect(await provider.read(unscoped)).toBe(\"default\");\n expect(await provider.read(scoped)).toBe(\"production\");\n expect(await provider.read(local)).toBe(\"personal\");\n expect(await provider.read(environmentLocal)).toBeUndefined();\n });\n\n it(\"removes an environment-local value for one environment only\", async () => {\n const forProduction = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n const forOther = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: OTHER_ENVIRONMENT,\n });\n await provider.write(forProduction, \"personal-production\");\n await provider.write(forOther, \"personal-development\");\n\n await provider.remove(forProduction);\n\n expect(await provider.read(forProduction)).toBeUndefined();\n expect(await provider.read(forOther)).toBe(\"personal-development\");\n });\n\n it(\"is idempotent at the environment-local scope too\", async () => {\n const file = valueFile(redisPassword, {\n kind: \"environment-local\",\n environment: ENVIRONMENT,\n });\n\n await expect(provider.remove(file)).resolves.toBeUndefined();\n });\n\n it(\"leaves meta alone\", async () => {\n const file = valueFile(redisPassword, { kind: \"unscoped\" });\n await provider.write(file, \"hunter2\");\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n await provider.remove(file);\n\n expect(await provider.readMeta(redisPassword)).toEqual({ description: \"Redis auth\" });\n });\n });\n\n describe(\"meta\", () => {\n it(\"resolves to undefined for a parameter with no meta\", async () => {\n expect(await provider.readMeta(redisPassword)).toBeUndefined();\n });\n\n it(\"round-trips a meta file\", async () => {\n const meta: Meta = {\n description: \"Signs and verifies user session JWTs\",\n owner: \"auth-team\",\n secret: true,\n environments: {\n production: { required: true, owner: \"infra-team\" },\n development: { required: false },\n },\n };\n\n await provider.writeMeta(redisPassword, meta);\n\n expect(await provider.readMeta(redisPassword)).toEqual(meta);\n });\n\n it(\"preserves unknown keys, so an older penv does not destroy newer fields\", async () => {\n const meta: Meta = {\n description: \"Redis auth\",\n rotationPolicy: \"90d\",\n environments: { production: { rotationState: \"active\", rotatingSince: null } },\n };\n\n await provider.writeMeta(redisPassword, meta);\n\n expect(await provider.readMeta(redisPassword)).toEqual(meta);\n });\n\n it(\"overwrites meta in place\", async () => {\n await provider.writeMeta(redisPassword, { description: \"first\", owner: \"a-team\" });\n await provider.writeMeta(redisPassword, { description: \"second\" });\n\n expect(await provider.readMeta(redisPassword)).toEqual({ description: \"second\" });\n });\n\n it(\"keeps meta per parameter\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n await provider.writeMeta(databaseUrl, { description: \"Primary database\" });\n\n expect(await provider.readMeta(redisPassword)).toEqual({ description: \"Redis auth\" });\n expect(await provider.readMeta(databaseUrl)).toEqual({ description: \"Primary database\" });\n });\n\n it(\"holds meta independently of any value\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\", required: true });\n\n expect(await provider.read(valueFile(redisPassword, { kind: \"unscoped\" }))).toBeUndefined();\n });\n });\n\n describe(\"removeMeta\", () => {\n it(\"deletes the meta\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n await provider.removeMeta(redisPassword);\n\n expect(await provider.readMeta(redisPassword)).toBeUndefined();\n });\n\n it(\"is idempotent — removing absent meta is not an error\", async () => {\n await expect(provider.removeMeta(redisPassword)).resolves.toBeUndefined();\n await expect(provider.removeMeta(redisPassword)).resolves.toBeUndefined();\n });\n\n /*\n * The mirror of `remove`'s \"leaves meta alone\". Policy and value are two\n * faces of one record and are removed independently, so a provider that\n * dropped the values with the policy would delete a secret on a `penv mv`\n * that was only meant to move its description.\n */\n it(\"leaves every value alone\", async () => {\n const unscoped = valueFile(redisPassword, { kind: \"unscoped\" });\n const scoped = valueFile(redisPassword, { kind: \"environment\", environment: ENVIRONMENT });\n await provider.write(unscoped, \"default\");\n await provider.write(scoped, \"production\");\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n\n await provider.removeMeta(redisPassword);\n\n expect(await provider.read(unscoped)).toBe(\"default\");\n expect(await provider.read(scoped)).toBe(\"production\");\n });\n\n it(\"removes only the parameter it was given\", async () => {\n await provider.writeMeta(redisPassword, { description: \"Redis auth\" });\n await provider.writeMeta(databaseUrl, { description: \"Primary database\" });\n\n await provider.removeMeta(redisPassword);\n\n expect(await provider.readMeta(redisPassword)).toBeUndefined();\n expect(await provider.readMeta(databaseUrl)).toEqual({ description: \"Primary database\" });\n });\n });\n });\n}\n","/**\n * An in-memory provider: a Map-backed store that satisfies the same `@penvhq/core`\n * provider contract the filesystem does, with no disk, no paths, and no code\n * shared with the reference provider.\n *\n * It is a test fixture, not a registered provider. Its whole reason to exist is to\n * prove {@link runProviderContractSuite} is genuinely provider-agnostic: a second,\n * structurally unrelated provider type passes the same behavioural suite the\n * filesystem passes and the Vault adapter must. That demonstrates the portability\n * seam without standing up a live backend.\n *\n * Two choices keep it honest rather than a suite grading its own reflection:\n * - Values and meta live in two maps under disjoint keyspaces, so a written meta\n * can never be returned by `list()` as though it were a value.\n * - Meta is round-tripped through JSON on write and read, the way any real store\n * holding a string does, so nothing here hands back a live object reference a\n * caller could mutate after the fact.\n *\n * It declares no retention: `readPrevious` is omitted, the general case the\n * contract permits (see `retainsPrevious` in `@penvhq/core`). The filesystem and\n * Kubernetes sit on the same side of that line.\n */\n\nimport type { Meta, ParameterRef, Provider, Scope, ValueFile } from \"@penvhq/core\";\nimport { assertNever } from \"@penvhq/core\";\n\n/** Every scope that carries an environment keys on it, so two environments never collide. */\nfunction scopeKey(scope: Scope): string {\n switch (scope.kind) {\n case \"unscoped\":\n return \"unscoped\";\n case \"environment\":\n return `environment:${scope.environment}`;\n case \"local\":\n return \"local\";\n case \"environment-local\":\n return `environment-local:${scope.environment}`;\n default:\n return assertNever(scope, \"scope\");\n }\n}\n\n/**\n * Every contract field of a value file joined into one key. `\u0000` never appears\n * in a namespace segment, name, or scope, so it separates them unambiguously.\n */\nfunction valueKey(file: ValueFile): string {\n return [file.namespace.join(\"/\"), file.name, scopeKey(file.scope), String(file.encrypted)].join(\n \"\u0000\",\n );\n}\n\nfunction metaKey(ref: ParameterRef): string {\n return [ref.namespace.join(\"/\"), ref.name].join(\"\u0000\");\n}\n\n/** A defensive copy, so a caller mutating the file it handed us cannot reach the store. */\nfunction cloneValueFile(file: ValueFile): ValueFile {\n return {\n namespace: [...file.namespace],\n name: file.name,\n scope: file.scope,\n encrypted: file.encrypted,\n };\n}\n\ninterface StoredValue {\n readonly file: ValueFile;\n readonly value: string;\n}\n\nexport class InMemoryProvider implements Provider {\n readonly type = \"memory\";\n\n readonly #values = new Map<string, StoredValue>();\n readonly #meta = new Map<string, string>();\n\n async read(file: ValueFile): Promise<string | undefined> {\n return this.#values.get(valueKey(file))?.value;\n }\n\n async write(file: ValueFile, value: string): Promise<void> {\n this.#values.set(valueKey(file), { file: cloneValueFile(file), value });\n }\n\n async list(): Promise<ValueFile[]> {\n return [...this.#values.values()].map((stored) => cloneValueFile(stored.file));\n }\n\n async remove(file: ValueFile): Promise<void> {\n this.#values.delete(valueKey(file));\n }\n\n async readMeta(ref: ParameterRef): Promise<Meta | undefined> {\n const stored = this.#meta.get(metaKey(ref));\n return stored === undefined ? undefined : (JSON.parse(stored) as Meta);\n }\n\n async writeMeta(ref: ParameterRef, meta: Meta): Promise<void> {\n this.#meta.set(metaKey(ref), JSON.stringify(meta));\n }\n\n async removeMeta(ref: ParameterRef): Promise<void> {\n this.#meta.delete(metaKey(ref));\n }\n}\n\nexport function createInMemoryProvider(): InMemoryProvider {\n return new InMemoryProvider();\n}\n"],"mappings":";AAaA,SAAS,mBAAmB;AAC5B,SAAS,WAAW,YAAY,UAAU,QAAQ,UAAU;AAE5D,IAAM,cAAc;AACpB,IAAM,oBAAoB;AAE1B,IAAM,gBAA8B,EAAE,WAAW,CAAC,OAAO,GAAG,MAAM,WAAW;AAC7E,IAAM,cAA4B,EAAE,WAAW,CAAC,GAAG,MAAM,eAAe;AAExE,SAAS,UAAU,KAAmB,OAAc,YAAY,OAAkB;AAChF,SAAO,EAAE,WAAW,IAAI,WAAW,MAAM,IAAI,MAAM,OAAO,UAAU;AACtE;AAOA,SAAS,SAAS,OAAsB;AACtC,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,eAAe,MAAM,WAAW;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,qBAAqB,MAAM,WAAW;AAAA,IAC/C;AACE,aAAO,YAAY,OAAO,OAAO;AAAA,EACrC;AACF;AAGA,SAAS,SAAS,MAAyB;AACzC,SAAO,GAAG,CAAC,GAAG,KAAK,WAAW,KAAK,IAAI,EAAE,KAAK,GAAG,CAAC,IAAI,SAAS,KAAK,KAAK,CAAC,IAAI,KAAK,SAAS;AAC9F;AAEA,SAAS,WAAW,OAAuC;AACzD,SAAO,MAAM,IAAI,QAAQ,EAAE,KAAK;AAClC;AAEO,SAAS,yBACd,MACA,cACM;AACN,WAAS,sBAAsB,IAAI,IAAI,MAAM;AAC3C,QAAI;AACJ,QAAI;AAEJ,eAAW,YAAY;AACrB,YAAM,OAAO,MAAM,aAAa;AAChC,iBAAW,KAAK;AAChB,gBAAU,KAAK;AAAA,IACjB,CAAC;AAED,cAAU,YAAY;AACpB,YAAM,QAAQ;AAAA,IAChB,CAAC;AAED,OAAG,oBAAoB,MAAM;AAC3B,aAAO,OAAO,SAAS,IAAI,EAAE,KAAK,QAAQ;AAC1C,aAAO,SAAS,KAAK,MAAM,EAAE,gBAAgB,CAAC;AAAA,IAChD,CAAC;AAED,aAAS,kBAAkB,MAAM;AAC/B,SAAG,+BAA+B,YAAY;AAC5C,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAEvF,cAAM,SAAS,MAAM,MAAM,SAAS;AAEpC,eAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,SAAS;AAAA,MAClD,CAAC;AAED,SAAG,4DAA4D,YAAY;AACzE,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAEvF,eAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,cAAc;AAAA,MAClD,CAAC;AAED,SAAG,6CAA6C,YAAY;AAC1D,cAAM,OAAO,UAAU,aAAa,EAAE,MAAM,WAAW,CAAC;AAExD,cAAM,SAAS,MAAM,MAAM,0BAA0B;AACrD,cAAM,SAAS,MAAM,MAAM,4BAA4B;AAEvD,eAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,4BAA4B;AAAA,MACrE,CAAC;AAED,SAAG,gCAAgC,YAAY;AAC7C,cAAM,OAAO;AAAA,UACX,EAAE,WAAW,CAAC,OAAO,MAAM,GAAG,MAAM,aAAa;AAAA,UACjD;AAAA,YACE,MAAM;AAAA,UACR;AAAA,QACF;AAEA,cAAM,SAAS,MAAM,MAAM,QAAQ;AAEnC,eAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,QAAQ;AAAA,MACjD,CAAC;AAED,SAAG,sDAAsD,YAAY;AACnE,cAAM,OAAO,UAAU,eAAe;AAAA,UACpC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,MAAM,iBAAiB;AAE5C,eAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,iBAAiB;AAAA,MAC1D,CAAC;AAED,SAAG,qEAAqE,YAAY;AAClF,cAAM,WAAW,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,QAAQ,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AACxD,cAAM,mBAAmB,UAAU,eAAe;AAAA,UAChD,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,UAAU,SAAS;AACxC,cAAM,SAAS,MAAM,QAAQ,YAAY;AACzC,cAAM,SAAS,MAAM,OAAO,UAAU;AACtC,cAAM,SAAS,MAAM,kBAAkB,qBAAqB;AAE5D,eAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,SAAS;AACpD,eAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,YAAY;AACrD,eAAO,MAAM,SAAS,KAAK,KAAK,CAAC,EAAE,KAAK,UAAU;AAClD,eAAO,MAAM,SAAS,KAAK,gBAAgB,CAAC,EAAE,KAAK,qBAAqB;AAAA,MAC1E,CAAC;AAQD,SAAG,mEAAmE,YAAY;AAChF,cAAM,gBAAgB,UAAU,eAAe;AAAA,UAC7C,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,WAAW,UAAU,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,eAAe,qBAAqB;AACzD,cAAM,SAAS,MAAM,UAAU,sBAAsB;AAErD,eAAO,MAAM,SAAS,KAAK,aAAa,CAAC,EAAE,KAAK,qBAAqB;AACrE,eAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,sBAAsB;AAAA,MACnE,CAAC;AAED,SAAG,2EAA2E,YAAY;AACxF,cAAM,QAAQ,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AACxD,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,mBAAmB,UAAU,eAAe;AAAA,UAChD,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,SAAS,MAAM,kBAAkB,qBAAqB;AAE5D,eAAO,MAAM,SAAS,KAAK,KAAK,CAAC,EAAE,cAAc;AACjD,eAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,cAAc;AAClD,eAAO,MAAM,SAAS,KAAK,gBAAgB,CAAC,EAAE,KAAK,qBAAqB;AAAA,MAC1E,CAAC;AAED,SAAG,oEAAoE,YAAY;AACjF,cAAM,YAAY,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC/D,cAAM,YAAY,UAAU,eAAe,EAAE,MAAM,WAAW,GAAG,IAAI;AAErE,cAAM,SAAS,MAAM,WAAW,OAAO;AACvC,cAAM,SAAS,MAAM,WAAW,YAAY;AAE5C,eAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,OAAO;AACnD,eAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,YAAY;AAAA,MAC1D,CAAC;AAED,SAAG,iEAAiE,YAAY;AAC9E,cAAM,QAAe,EAAE,MAAM,qBAAqB,aAAa,YAAY;AAC3E,cAAM,YAAY,UAAU,eAAe,KAAK;AAChD,cAAM,YAAY,UAAU,eAAe,OAAO,IAAI;AAEtD,cAAM,SAAS,MAAM,WAAW,OAAO;AACvC,cAAM,SAAS,MAAM,WAAW,YAAY;AAE5C,eAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,OAAO;AACnD,eAAO,MAAM,SAAS,KAAK,SAAS,CAAC,EAAE,KAAK,YAAY;AAAA,MAC1D,CAAC;AAAA,IACH,CAAC;AAED,aAAS,qBAAqB,MAAM;AAClC,YAAM,QAAgD;AAAA,QACpD,CAAC,kBAAkB,EAAE;AAAA,QACrB,CAAC,+BAA+B,YAAY;AAAA,QAC5C,CAAC,SAAS,WAAY;AAAA,QACtB,CAAC,uBAAuB,oBAAoB;AAAA,QAC5C,CAAC,sBAAsB,YAAY;AAAA,QACnC,CAAC,6BAA6B,gBAAgB;AAAA,QAC9C,CAAC,0BAA0B,eAAe;AAAA,QAC1C,CAAC,WAAW,mCAAiB;AAAA,QAC7B,CAAC,sBAAsB,gCAAgC;AAAA,QACvD,CAAC,yBAAyB,oBAAoB;AAAA,MAChD;AAEA,iBAAW,CAAC,OAAO,KAAK,KAAK,OAAO;AAClC,WAAG,aAAa,KAAK,iBAAiB,YAAY;AAChD,gBAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAEvF,gBAAM,SAAS,MAAM,MAAM,KAAK;AAEhC,iBAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,KAAK,KAAK;AAAA,QAC9C,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,aAAS,QAAQ,MAAM;AACrB,SAAG,oDAAoD,YAAY;AACjE,eAAO,MAAM,SAAS,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,MAC1C,CAAC;AAED,SAAG,uDAAuD,YAAY;AACpE,cAAM,UAAuB;AAAA,UAC3B,UAAU,aAAa,EAAE,MAAM,WAAW,CAAC;AAAA,UAC3C,UAAU,aAAa,EAAE,MAAM,eAAe,aAAa,YAAY,GAAG,IAAI;AAAA,UAC9E,UAAU,aAAa,EAAE,MAAM,qBAAqB,aAAa,YAAY,CAAC;AAAA,UAC9E,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,kBAAkB,CAAC;AAAA,UAChF,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AAAA,UAC1C,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,kBAAkB,CAAC;AAAA,UACtF;AAAA,YACE,EAAE,WAAW,CAAC,KAAK,GAAG,MAAM,aAAa;AAAA,YACzC,EAAE,MAAM,qBAAqB,aAAa,YAAY;AAAA,YACtD;AAAA,UACF;AAAA,UACA,UAAU,EAAE,WAAW,CAAC,KAAK,GAAG,MAAM,aAAa,GAAG,EAAE,MAAM,QAAQ,GAAG,IAAI;AAAA,QAC/E;AAEA,mBAAW,QAAQ,SAAS;AAC1B,gBAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QACpC;AAEA,eAAO,WAAW,MAAM,SAAS,KAAK,CAAC,CAAC,EAAE,QAAQ,WAAW,OAAO,CAAC;AAAA,MACvE,CAAC;AAED,SAAG,mEAAmE,YAAY;AAChF,cAAM,UAAuB;AAAA,UAC3B,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAAA,UAC7C,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AAAA,UAC1E,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AAAA,UAC1C,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,YAAY,CAAC;AAAA,QAClF;AAEA,mBAAW,QAAQ,SAAS;AAC1B,gBAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QACpC;AAEA,cAAM,SAAS,WAAW,MAAM,SAAS,KAAK,CAAC;AAC/C,eAAO,MAAM,EAAE,QAAQ,WAAW,OAAO,CAAC;AAC1C,eAAO,IAAI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,QAAQ,MAAM;AAAA,MAClD,CAAC;AAQD,SAAG,sEAAsE,YAAY;AACnF,cAAM,UAAuB;AAAA,UAC3B,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,YAAY,CAAC;AAAA,UAChF,UAAU,eAAe,EAAE,MAAM,qBAAqB,aAAa,kBAAkB,CAAC;AAAA,QACxF;AAEA,mBAAW,QAAQ,SAAS;AAC1B,gBAAM,SAAS,MAAM,MAAM,OAAO;AAAA,QACpC;AAEA,cAAM,SAAS,WAAW,MAAM,SAAS,KAAK,CAAC;AAC/C,eAAO,MAAM,EAAE,QAAQ,WAAW,OAAO,CAAC;AAC1C,eAAO,IAAI,IAAI,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC;AAAA,MACrC,CAAC;AAED,SAAG,iCAAiC,YAAY;AAC9C,cAAM,OAAO,UAAU,aAAa,EAAE,MAAM,WAAW,CAAC;AACxD,cAAM,UAAU,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAE7D,cAAM,SAAS,MAAM,MAAM,GAAG;AAC9B,cAAM,SAAS,MAAM,SAAS,GAAG;AACjC,cAAM,SAAS,OAAO,OAAO;AAE7B,eAAO,WAAW,MAAM,SAAS,KAAK,CAAC,CAAC,EAAE,QAAQ,WAAW,CAAC,IAAI,CAAC,CAAC;AAAA,MACtE,CAAC;AAED,SAAG,iCAAiC,YAAY;AAC9C,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,eAAO,MAAM,SAAS,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,MAC1C,CAAC;AAAA,IACH,CAAC;AAED,aAAS,UAAU,MAAM;AACvB,SAAG,qBAAqB,YAAY;AAClC,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACvF,cAAM,SAAS,MAAM,MAAM,SAAS;AAEpC,cAAM,SAAS,OAAO,IAAI;AAE1B,eAAO,MAAM,SAAS,KAAK,IAAI,CAAC,EAAE,cAAc;AAAA,MAClD,CAAC;AAED,SAAG,iEAA4D,YAAY;AACzE,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AAEvD,cAAM,OAAO,SAAS,OAAO,IAAI,CAAC,EAAE,SAAS,cAAc;AAC3D,cAAM,OAAO,SAAS,OAAO,IAAI,CAAC,EAAE,SAAS,cAAc;AAAA,MAC7D,CAAC;AAED,SAAG,uCAAuC,YAAY;AACpD,cAAM,WAAW,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,QAAQ,UAAU,eAAe,EAAE,MAAM,QAAQ,CAAC;AACxD,cAAM,mBAAmB,UAAU,eAAe;AAAA,UAChD,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,SAAS,MAAM,UAAU,SAAS;AACxC,cAAM,SAAS,MAAM,QAAQ,YAAY;AACzC,cAAM,SAAS,MAAM,OAAO,UAAU;AACtC,cAAM,SAAS,MAAM,kBAAkB,qBAAqB;AAE5D,cAAM,SAAS,OAAO,gBAAgB;AAEtC,eAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,SAAS;AACpD,eAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,YAAY;AACrD,eAAO,MAAM,SAAS,KAAK,KAAK,CAAC,EAAE,KAAK,UAAU;AAClD,eAAO,MAAM,SAAS,KAAK,gBAAgB,CAAC,EAAE,cAAc;AAAA,MAC9D,CAAC;AAED,SAAG,+DAA+D,YAAY;AAC5E,cAAM,gBAAgB,UAAU,eAAe;AAAA,UAC7C,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,WAAW,UAAU,eAAe;AAAA,UACxC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AACD,cAAM,SAAS,MAAM,eAAe,qBAAqB;AACzD,cAAM,SAAS,MAAM,UAAU,sBAAsB;AAErD,cAAM,SAAS,OAAO,aAAa;AAEnC,eAAO,MAAM,SAAS,KAAK,aAAa,CAAC,EAAE,cAAc;AACzD,eAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,sBAAsB;AAAA,MACnE,CAAC;AAED,SAAG,oDAAoD,YAAY;AACjE,cAAM,OAAO,UAAU,eAAe;AAAA,UACpC,MAAM;AAAA,UACN,aAAa;AAAA,QACf,CAAC;AAED,cAAM,OAAO,SAAS,OAAO,IAAI,CAAC,EAAE,SAAS,cAAc;AAAA,MAC7D,CAAC;AAED,SAAG,qBAAqB,YAAY;AAClC,cAAM,OAAO,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1D,cAAM,SAAS,MAAM,MAAM,SAAS;AACpC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,cAAM,SAAS,OAAO,IAAI;AAE1B,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,aAAa,CAAC;AAAA,MACtF,CAAC;AAAA,IACH,CAAC;AAED,aAAS,QAAQ,MAAM;AACrB,SAAG,sDAAsD,YAAY;AACnE,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,cAAc;AAAA,MAC/D,CAAC;AAED,SAAG,2BAA2B,YAAY;AACxC,cAAM,OAAa;AAAA,UACjB,aAAa;AAAA,UACb,OAAO;AAAA,UACP,QAAQ;AAAA,UACR,cAAc;AAAA,YACZ,YAAY,EAAE,UAAU,MAAM,OAAO,aAAa;AAAA,YAClD,aAAa,EAAE,UAAU,MAAM;AAAA,UACjC;AAAA,QACF;AAEA,cAAM,SAAS,UAAU,eAAe,IAAI;AAE5C,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,IAAI;AAAA,MAC7D,CAAC;AAED,SAAG,0EAA0E,YAAY;AACvF,cAAM,OAAa;AAAA,UACjB,aAAa;AAAA,UACb,gBAAgB;AAAA,UAChB,cAAc,EAAE,YAAY,EAAE,eAAe,UAAU,eAAe,KAAK,EAAE;AAAA,QAC/E;AAEA,cAAM,SAAS,UAAU,eAAe,IAAI;AAE5C,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,IAAI;AAAA,MAC7D,CAAC;AAED,SAAG,4BAA4B,YAAY;AACzC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,SAAS,OAAO,SAAS,CAAC;AACjF,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,SAAS,CAAC;AAEjE,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,SAAS,CAAC;AAAA,MAClF,CAAC;AAED,SAAG,4BAA4B,YAAY;AACzC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AACrE,cAAM,SAAS,UAAU,aAAa,EAAE,aAAa,mBAAmB,CAAC;AAEzE,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,QAAQ,EAAE,aAAa,aAAa,CAAC;AACpF,eAAO,MAAM,SAAS,SAAS,WAAW,CAAC,EAAE,QAAQ,EAAE,aAAa,mBAAmB,CAAC;AAAA,MAC1F,CAAC;AAED,SAAG,yCAAyC,YAAY;AACtD,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,cAAc,UAAU,KAAK,CAAC;AAErF,eAAO,MAAM,SAAS,KAAK,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc;AAAA,MAC5F,CAAC;AAAA,IACH,CAAC;AAED,aAAS,cAAc,MAAM;AAC3B,SAAG,oBAAoB,YAAY;AACjC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,cAAM,SAAS,WAAW,aAAa;AAEvC,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,cAAc;AAAA,MAC/D,CAAC;AAED,SAAG,6DAAwD,YAAY;AACrE,cAAM,OAAO,SAAS,WAAW,aAAa,CAAC,EAAE,SAAS,cAAc;AACxE,cAAM,OAAO,SAAS,WAAW,aAAa,CAAC,EAAE,SAAS,cAAc;AAAA,MAC1E,CAAC;AAQD,SAAG,4BAA4B,YAAY;AACzC,cAAM,WAAW,UAAU,eAAe,EAAE,MAAM,WAAW,CAAC;AAC9D,cAAM,SAAS,UAAU,eAAe,EAAE,MAAM,eAAe,aAAa,YAAY,CAAC;AACzF,cAAM,SAAS,MAAM,UAAU,SAAS;AACxC,cAAM,SAAS,MAAM,QAAQ,YAAY;AACzC,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AAErE,cAAM,SAAS,WAAW,aAAa;AAEvC,eAAO,MAAM,SAAS,KAAK,QAAQ,CAAC,EAAE,KAAK,SAAS;AACpD,eAAO,MAAM,SAAS,KAAK,MAAM,CAAC,EAAE,KAAK,YAAY;AAAA,MACvD,CAAC;AAED,SAAG,2CAA2C,YAAY;AACxD,cAAM,SAAS,UAAU,eAAe,EAAE,aAAa,aAAa,CAAC;AACrE,cAAM,SAAS,UAAU,aAAa,EAAE,aAAa,mBAAmB,CAAC;AAEzE,cAAM,SAAS,WAAW,aAAa;AAEvC,eAAO,MAAM,SAAS,SAAS,aAAa,CAAC,EAAE,cAAc;AAC7D,eAAO,MAAM,SAAS,SAAS,WAAW,CAAC,EAAE,QAAQ,EAAE,aAAa,mBAAmB,CAAC;AAAA,MAC1F,CAAC;AAAA,IACH,CAAC;AAAA,EACH,CAAC;AACH;;;ACpdA,SAAS,eAAAA,oBAAmB;AAG5B,SAASC,UAAS,OAAsB;AACtC,UAAQ,MAAM,MAAM;AAAA,IAClB,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,eAAe,MAAM,WAAW;AAAA,IACzC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO,qBAAqB,MAAM,WAAW;AAAA,IAC/C;AACE,aAAOD,aAAY,OAAO,OAAO;AAAA,EACrC;AACF;AAMA,SAAS,SAAS,MAAyB;AACzC,SAAO,CAAC,KAAK,UAAU,KAAK,GAAG,GAAG,KAAK,MAAMC,UAAS,KAAK,KAAK,GAAG,OAAO,KAAK,SAAS,CAAC,EAAE;AAAA,IACzF;AAAA,EACF;AACF;AAEA,SAAS,QAAQ,KAA2B;AAC1C,SAAO,CAAC,IAAI,UAAU,KAAK,GAAG,GAAG,IAAI,IAAI,EAAE,KAAK,IAAG;AACrD;AAGA,SAAS,eAAe,MAA4B;AAClD,SAAO;AAAA,IACL,WAAW,CAAC,GAAG,KAAK,SAAS;AAAA,IAC7B,MAAM,KAAK;AAAA,IACX,OAAO,KAAK;AAAA,IACZ,WAAW,KAAK;AAAA,EAClB;AACF;AAOO,IAAM,mBAAN,MAA2C;AAAA,EACvC,OAAO;AAAA,EAEP,UAAU,oBAAI,IAAyB;AAAA,EACvC,QAAQ,oBAAI,IAAoB;AAAA,EAEzC,MAAM,KAAK,MAA8C;AACvD,WAAO,KAAK,QAAQ,IAAI,SAAS,IAAI,CAAC,GAAG;AAAA,EAC3C;AAAA,EAEA,MAAM,MAAM,MAAiB,OAA8B;AACzD,SAAK,QAAQ,IAAI,SAAS,IAAI,GAAG,EAAE,MAAM,eAAe,IAAI,GAAG,MAAM,CAAC;AAAA,EACxE;AAAA,EAEA,MAAM,OAA6B;AACjC,WAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAAE,IAAI,CAAC,WAAW,eAAe,OAAO,IAAI,CAAC;AAAA,EAC/E;AAAA,EAEA,MAAM,OAAO,MAAgC;AAC3C,SAAK,QAAQ,OAAO,SAAS,IAAI,CAAC;AAAA,EACpC;AAAA,EAEA,MAAM,SAAS,KAA8C;AAC3D,UAAM,SAAS,KAAK,MAAM,IAAI,QAAQ,GAAG,CAAC;AAC1C,WAAO,WAAW,SAAY,SAAa,KAAK,MAAM,MAAM;AAAA,EAC9D;AAAA,EAEA,MAAM,UAAU,KAAmB,MAA2B;AAC5D,SAAK,MAAM,IAAI,QAAQ,GAAG,GAAG,KAAK,UAAU,IAAI,CAAC;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW,KAAkC;AACjD,SAAK,MAAM,OAAO,QAAQ,GAAG,CAAC;AAAA,EAChC;AACF;AAEO,SAAS,yBAA2C;AACzD,SAAO,IAAI,iBAAiB;AAC9B;","names":["assertNever","scopeKey"]}

package/package.json ADDED Viewed

@@ -0,0 +1,26 @@
+{
+  "name": "@penvhq/provider-contract",
+  "version": "0.1.0",
+  "description": "The provider-agnostic acceptance suite every penv provider must pass, plus an in-memory provider that proves the seam is pluggable. Test-only.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@penvhq/core": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup"
+  }
+}