@pipeline-builder/pipeline-manager 4.1.4 → 4.1.6

package/dist/commands/audit-tokens.js

@@ -1,8 +1,8 @@
 // Copyright 2026 Pipeline Builder Contributors
 // SPDX-License-Identifier: Apache-2.0
+import { isOpaqueApiKey } from '@pipeline-builder/api-core';
 import { CoreConstants } from '@pipeline-builder/pipeline-core';
 import { Command } from 'commander';
-import { decodeTokenPayload } from '../utils/auth-guard.js';
 import { resolveAwsRegion } from '../utils/aws-env.js';
 import { getSecretValue, listSecrets } from '../utils/aws-secrets.js';
 import { printCommandHeader, withProfileOption, withRegionOption } from '../utils/command-utils.js';
@@ -51,11 +51,12 @@ export function auditTokens(program) {
                 // never report "all clear" from an incomplete scan (mirrors audit-stacks).
                 printWarning('Secret listing was TRUNCATED (paging cap hit) — results may be INCOMPLETE and an expiring token could be missed. Narrow by --prefix/--region.');
             }
-            // Audit both the full-privilege platform token (`<prefix>/<orgId>/platform`)
-            // AND the scoped event-ingestion token (`.../reporting-ingest`, minted by
-            // `store-token --scope reporting:ingest`) — both expire and both are
-            // auto-renewed, so a stalled renewal on either must surface here.
-            const platformSecrets = secrets.filter((s) => s.name.endsWith('/platform') || s.name.endsWith('/reporting-ingest'));
+            // Audit every stored machine credential: the full-privilege platform key
+            // (`<prefix>/<orgId>/platform`) and each SCOPED one (`.../reporting-ingest`,
+            // `.../registry-push`, from `store-token --scope …`). All expire and all
+            // are auto-rotated, so a stalled rotation on any of them must surface here.
+            const CREDENTIAL_LEAVES = ['/platform', '/reporting-ingest', '/registry-push'];
+            const platformSecrets = secrets.filter((s) => CREDENTIAL_LEAVES.some((leaf) => s.name.endsWith(leaf)));
             const entries = [];
             const now = Date.now();
             const warnCutoff = now + warnDays * 24 * 60 * 60 * 1000;
@@ -76,30 +77,38 @@ export function auditTokens(program) {
                     printWarning(`Secret ${s.name} is not valid JSON, skipping`);
                     continue;
                 }
-                // Prefer the explicit expiresAt field written by store-token; fall back
-                // to decoding the JWT's exp claim if the field is missing.
+                // `expiresAt` is the ONLY expiry source now. The stored credential is an
+                // opaque service-account key: it carries no claims, so there is no `exp`
+                // to decode as a fallback — which is exactly why store-token and the
+                // rotator both write the field.
                 let expiresAt;
                 if (parsed.expiresAt) {
                     const d = new Date(parsed.expiresAt);
                     if (!Number.isNaN(d.getTime()))
                         expiresAt = d;
                 }
-                // `store-token` writes the JWT to the canonical `password` field.
-                if (!expiresAt && parsed.password) {
-                    const payload = decodeTokenPayload(parsed.password);
-                    if (payload?.exp && typeof payload.exp === 'number') {
-                        expiresAt = new Date(payload.exp * 1000);
-                    }
-                }
                 if (!expiresAt) {
                     printWarning(`Secret ${s.name} has no expiry information, skipping`);
                     continue;
                 }
                 const daysUntilExpiry = Math.floor((expiresAt.getTime() - now) / (24 * 60 * 60 * 1000));
-                const status = expiresAt.getTime() < now ? 'expired'
+                let status = expiresAt.getTime() < now ? 'expired'
                     : expiresAt.getTime() < warnCutoff ? 'expiring-soon'
                         : 'ok';
-                entries.push({ secretName: s.name, arn: s.arn, expiresAt, daysUntilExpiry, status });
+                // A secret that still has months of life but holds the WRONG KIND of
+                // credential is just as dead as an expired one. After the service-account
+                // cutover the stored value must be an opaque `pb_sa_…` key; a secret left
+                // holding a pre-cutover machine-session JWT is refused by every consumer,
+                // and this is the scan that names it instead of leaving three services to
+                // fail with an opaque 401.
+                let reason;
+                if (status !== 'expired' && parsed.password && !isOpaqueApiKey(parsed.password)) {
+                    status = 'unverifiable';
+                    reason = parsed.password.split('.').length === 3
+                        ? 'holds a pre-cutover JWT, not a service-account key — re-run "pipeline-manager infra store-token"'
+                        : 'does not hold an opaque service-account key (expected a "pb_sa_…" value)';
+                }
+                entries.push({ secretName: s.name, arn: s.arn, expiresAt, daysUntilExpiry, status, ...(reason ? { reason } : {}) });
             }
             const atRisk = entries.filter((e) => e.status !== 'ok');
             // A truncated scan is itself a failure condition: exit non-zero so cron
@@ -125,17 +134,19 @@ export function auditTokens(program) {
                         printWarning('No at-risk tokens in the scanned pages, but the scan was truncated — some secrets were not checked.');
                     }
                     else {
-                        printSuccess(`All tokens valid for at least ${warnDays} days`);
+                        printSuccess(`All stored keys valid for at least ${warnDays} days`);
                     }
                 }
                 else {
                     for (const e of atRisk) {
                         const label = e.status === 'expired'
                             ? `EXPIRED ${Math.abs(e.daysUntilExpiry)} day${e.daysUntilExpiry === -1 ? '' : 's'} ago`
-                            : `expires in ${e.daysUntilExpiry} day${e.daysUntilExpiry === 1 ? '' : 's'}`;
+                            : e.status === 'unverifiable'
+                                ? `UNUSABLE — ${e.reason}`
+                                : `expires in ${e.daysUntilExpiry} day${e.daysUntilExpiry === 1 ? '' : 's'}`;
                         printWarning(`${e.secretName} — ${label}`);
                     }
-                    printError(`${atRisk.length} secret${atRisk.length === 1 ? '' : 's'} need rotation. Run \`pipeline-manager infra store-token --days <N>\` to refresh.`);
+                    printError(`${atRisk.length} secret${atRisk.length === 1 ? '' : 's'} need rotation. Run \`pipeline-manager infra store-token --days <N>\` (add --scope for a scoped credential) to reissue.`);
                 }
             }
             process.exit(exitCode);
@@ -150,4 +161,4 @@ export function auditTokens(program) {
         }
     });
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXVkaXQtdG9rZW5zLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL2NvbW1hbmRzL2F1ZGl0LXRva2Vucy50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSwrQ0FBK0M7QUFDL0Msc0NBQXNDO0FBRXRDLE9BQU8sRUFBRSxjQUFjLEVBQUUsTUFBTSw0QkFBNEIsQ0FBQztBQUM1RCxPQUFPLEVBQUUsYUFBYSxFQUFFLE1BQU0saUNBQWlDLENBQUM7QUFDaEUsT0FBTyxFQUFFLE9BQU8sRUFBRSxNQUFNLFdBQVcsQ0FBQztBQUNwQyxPQUFPLEVBQUUsZ0JBQWdCLEVBQUUsTUFBTSxxQkFBcUIsQ0FBQztBQUN2RCxPQUFPLEVBQUUsY0FBYyxFQUFFLFdBQVcsRUFBRSxNQUFNLHlCQUF5QixDQUFDO0FBQ3RFLE9BQU8sRUFBRSxrQkFBa0IsRUFBRSxpQkFBaUIsRUFBRSxnQkFBZ0IsRUFBRSxNQUFNLDJCQUEyQixDQUFDO0FBQ3BHLE9BQU8sRUFBRSxXQUFXLEVBQUUsV0FBVyxFQUFFLE1BQU0sMkJBQTJCLENBQUM7QUFDckUsT0FBTyxFQUFFLFVBQVUsRUFBRSxTQUFTLEVBQUUsWUFBWSxFQUFFLFlBQVksRUFBRSxZQUFZLEVBQUUsTUFBTSwwQkFBMEIsQ0FBQztBQVkzRzs7Ozs7Ozs7Ozs7Ozs7Ozs7R0FpQkc7QUFDSCxNQUFNLFVBQVUsV0FBVyxDQUFDLE9BQWdCO0lBQzFDLGlCQUFpQixDQUNmLGdCQUFnQixDQUFDLE9BQU87U0FDckIsT0FBTyxDQUFDLFFBQVEsQ0FBQztTQUNqQixXQUFXLENBQUMsb0ZBQW9GLENBQUMsQ0FBQyxDQUN0RztTQUNFLE1BQU0sQ0FBQyxvQkFBb0IsRUFBRSwrQ0FBK0MsRUFBRSxHQUFHLENBQUM7U0FDbEYsTUFBTSxDQUFDLG1CQUFtQixFQUFFLHFDQUFxQyxFQUFFLEdBQUcsYUFBYSxDQUFDLG1CQUFtQixHQUFHLENBQUM7U0FDM0csTUFBTSxDQUFDLFFBQVEsRUFBRSx3QkFBd0IsRUFBRSxLQUFLLENBQUM7U0FDakQsTUFBTSxDQUFDLEtBQUssRUFBRSxPQUFPLEVBQUUsRUFBRTtRQUN4QixNQUFNLFdBQVcsR0FBRyxrQkFBa0IsQ0FBQyxjQUFjLEVBQUUsU0FBUyxFQUFFLEVBQUUsS0FBSyxFQUFFLE9BQU8sQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDO1FBQzNGLE1BQU0sTUFBTSxHQUFHLGdCQUFnQixDQUFDLE9BQU8sQ0FBQyxNQUFNLENBQUMsQ0FBQztRQUNoRCxNQUFNLFFBQVEsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLFFBQVEsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUNoRCxJQUFJLENBQUMsTUFBTSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxRQUFRLEdBQUcsQ0FBQyxFQUFFLENBQUM7WUFDL0MsVUFBVSxDQUFDLDJCQUEyQixFQUFFLEVBQUUsUUFBUSxFQUFFLE9BQU8sQ0FBQyxRQUFRLEVBQUUsQ0FBQyxDQUFDO1lBQ3hFLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDbEIsQ0FBQztRQUVELElBQUksQ0FBQztZQUNILG9HQUFvRztZQUNwRyxJQUFJLENBQUMsT0FBTyxDQUFDLElBQUk7Z0JBQUUsU0FBUyxDQUFDLGlCQUFpQixFQUFFLEVBQUUsTUFBTSxFQUFFLE1BQU0sRUFBRSxPQUFPLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQztZQUNwRixNQUFNLEVBQUUsT0FBTyxFQUFFLFNBQVMsRUFBRSxHQUFHLE1BQU0sV0FBVyxDQUFDLE9BQU8sQ0FBQyxNQUFNLEVBQUUsRUFBRSxNQUFNLEVBQUUsT0FBTyxFQUFFLE9BQU8sQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO1lBQ3ZHLElBQUksU0FBUyxFQUFFLENBQUM7Z0JBQ2QsMkVBQTJFO2dCQUMzRSwyRUFBMkU7Z0JBQzNFLFlBQVksQ0FBQywrSUFBK0ksQ0FBQyxDQUFDO1lBQ2hLLENBQUM7WUFFRCx5RUFBeUU7WUFDekUsNkVBQTZFO1lBQzdFLHlFQUF5RTtZQUN6RSw0RUFBNEU7WUFDNUUsTUFBTSxpQkFBaUIsR0FBRyxDQUFDLFdBQVcsRUFBRSxtQkFBbUIsRUFBRSxnQkFBZ0IsQ0FBQyxDQUFDO1lBQy9FLE1BQU0sZUFBZSxHQUFHLE9BQU8sQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLGlCQUFpQixDQUFDLElBQUksQ0FBQyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxDQUFDO1lBRXZHLE1BQU0sT0FBTyxHQUFzQixFQUFFLENBQUM7WUFDdEMsTUFBTSxHQUFHLEdBQUcsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDO1lBQ3ZCLE1BQU0sVUFBVSxHQUFHLEdBQUcsR0FBRyxRQUFRLEdBQUcsRUFBRSxHQUFHLEVBQUUsR0FBRyxFQUFFLEdBQUcsSUFBSSxDQUFDO1lBRXhELEtBQUssTUFBTSxDQUFDLElBQUksZUFBZSxFQUFFLENBQUM7Z0JBQ2hDLElBQUksR0FBVyxDQUFDO2dCQUNoQixJQUFJLENBQUM7b0JBQ0gsR0FBRyxHQUFHLE1BQU0sY0FBYyxDQUFDLENBQUMsQ0FBQyxJQUFJLEVBQUUsRUFBRSxNQUFNLEVBQUUsT0FBTyxFQUFFLE9BQU8sQ0FBQyxPQUFPLEVBQUUsQ0FBQyxDQUFDO2dCQUMzRSxDQUFDO2dCQUFDLE9BQU8sR0FBRyxFQUFFLENBQUM7b0JBQ2IsWUFBWSxDQUFDLGtCQUFrQixDQUFDLENBQUMsSUFBSSxLQUFLLEdBQUcsWUFBWSxLQUFLLENBQUMsQ0FBQyxDQUFDLEdBQUcsQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxHQUFHLENBQUMsRUFBRSxDQUFDLENBQUM7b0JBQzlGLFNBQVM7Z0JBQ1gsQ0FBQztnQkFFRCxJQUFJLE1BQXVFLENBQUM7Z0JBQzVFLElBQUksQ0FBQztvQkFDSCxNQUFNLEdBQUcsSUFBSSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQztnQkFDM0IsQ0FBQztnQkFBQyxNQUFNLENBQUM7b0JBQ1AsWUFBWSxDQUFDLFVBQVUsQ0FBQyxDQUFDLElBQUksOEJBQThCLENBQUMsQ0FBQztvQkFDN0QsU0FBUztnQkFDWCxDQUFDO2dCQUVELHlFQUF5RTtnQkFDekUseUVBQXlFO2dCQUN6RSxxRUFBcUU7Z0JBQ3JFLGdDQUFnQztnQkFDaEMsSUFBSSxTQUEyQixDQUFDO2dCQUNoQyxJQUFJLE1BQU0sQ0FBQyxTQUFTLEVBQUUsQ0FBQztvQkFDckIsTUFBTSxDQUFDLEdBQUcsSUFBSSxJQUFJLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxDQUFDO29CQUNyQyxJQUFJLENBQUMsTUFBTSxDQUFDLEtBQUssQ0FBQyxDQUFDLENBQUMsT0FBTyxFQUFFLENBQUM7d0JBQUUsU0FBUyxHQUFHLENBQUMsQ0FBQztnQkFDaEQsQ0FBQztnQkFDRCxJQUFJLENBQUMsU0FBUyxFQUFFLENBQUM7b0JBQ2YsWUFBWSxDQUFDLFVBQVUsQ0FBQyxDQUFDLElBQUksc0NBQXNDLENBQUMsQ0FBQztvQkFDckUsU0FBUztnQkFDWCxDQUFDO2dCQUVELE1BQU0sZUFBZSxHQUFHLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEdBQUcsR0FBRyxDQUFDLEdBQUcsQ0FBQyxFQUFFLEdBQUcsRUFBRSxHQUFHLEVBQUUsR0FBRyxJQUFJLENBQUMsQ0FBQyxDQUFDO2dCQUN4RixJQUFJLE1BQU0sR0FDUixTQUFTLENBQUMsT0FBTyxFQUFFLEdBQUcsR0FBRyxDQUFDLENBQUMsQ0FBQyxTQUFTO29CQUNuQyxDQUFDLENBQUMsU0FBUyxDQUFDLE9BQU8sRUFBRSxHQUFHLFVBQVUsQ0FBQyxDQUFDLENBQUMsZUFBZTt3QkFDbEQsQ0FBQyxDQUFDLElBQUksQ0FBQztnQkFFYixxRUFBcUU7Z0JBQ3JFLDBFQUEwRTtnQkFDMUUsMEVBQTBFO2dCQUMxRSwwRUFBMEU7Z0JBQzFFLDBFQUEwRTtnQkFDMUUsMkJBQTJCO2dCQUMzQixJQUFJLE1BQTBCLENBQUM7Z0JBQy9CLElBQUksTUFBTSxLQUFLLFNBQVMsSUFBSSxNQUFNLENBQUMsUUFBUSxJQUFJLENBQUMsY0FBYyxDQUFDLE1BQU0sQ0FBQyxRQUFRLENBQUMsRUFBRSxDQUFDO29CQUNoRixNQUFNLEdBQUcsY0FBYyxDQUFDO29CQUN4QixNQUFNLEdBQUcsTUFBTSxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLENBQUMsTUFBTSxLQUFLLENBQUM7d0JBQzlDLENBQUMsQ0FBQyxrR0FBa0c7d0JBQ3BHLENBQUMsQ0FBQywwRUFBMEUsQ0FBQztnQkFDakYsQ0FBQztnQkFDRCxPQUFPLENBQUMsSUFBSSxDQUFDLEVBQUUsVUFBVSxFQUFFLENBQUMsQ0FBQyxJQUFJLEVBQUUsR0FBRyxFQUFFLENBQUMsQ0FBQyxHQUFHLEVBQUUsU0FBUyxFQUFFLGVBQWUsRUFBRSxNQUFNLEVBQUUsR0FBRyxDQUFDLE1BQU0sQ0FBQyxDQUFDLENBQUMsRUFBRSxNQUFNLEVBQUUsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBQ3RILENBQUM7WUFFRCxNQUFNLE1BQU0sR0FBRyxPQUFPLENBQUMsTUFBTSxDQUFDLENBQUMsQ0FBQyxFQUFFLEVBQUUsQ0FBQyxDQUFDLENBQUMsTUFBTSxLQUFLLElBQUksQ0FBQyxDQUFDO1lBQ3hELHdFQUF3RTtZQUN4RSxxREFBcUQ7WUFDckQsTUFBTSxRQUFRLEdBQUcsQ0FBQyxNQUFNLENBQUMsTUFBTSxHQUFHLENBQUMsSUFBSSxTQUFTLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUM7WUFFMUQsSUFBSSxPQUFPLENBQUMsSUFBSSxFQUFFLENBQUM7Z0JBQ2pCLE9BQU8sQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQztvQkFDekIsU0FBUyxFQUFFLElBQUksSUFBSSxFQUFFLENBQUMsV0FBVyxFQUFFO29CQUNuQyxNQUFNO29CQUNOLFFBQVE7b0JBQ1IsWUFBWSxFQUFFLE9BQU8sQ0FBQyxNQUFNO29CQUM1QixXQUFXLEVBQUUsTUFBTSxDQUFDLE1BQU07b0JBQzFCLFNBQVM7b0JBQ1QsT0FBTyxFQUFFLE9BQU8sQ0FBQyxHQUFHLENBQUMsQ0FBQyxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsRUFBRSxHQUFHLENBQUMsRUFBRSxTQUFTLEVBQUUsQ0FBQyxDQUFDLFNBQVMsQ0FBQyxXQUFXLEVBQUUsRUFBRSxDQUFDLENBQUM7b0JBQzdFLFdBQVc7aUJBQ1osRUFBRSxJQUFJLEVBQUUsQ0FBQyxDQUFDLENBQUMsQ0FBQztZQUNmLENBQUM7aUJBQU0sQ0FBQztnQkFDTixZQUFZLENBQUMsZUFBZSxDQUFDLENBQUM7Z0JBQzlCLFNBQVMsQ0FBQyxXQUFXLE9BQU8sQ0FBQyxNQUFNLG1CQUFtQixPQUFPLENBQUMsTUFBTSxLQUFLLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxHQUFHLEVBQUUsQ0FBQyxDQUFDO2dCQUN6RixJQUFJLE1BQU0sQ0FBQyxNQUFNLEtBQUssQ0FBQyxFQUFFLENBQUM7b0JBQ3hCLElBQUksU0FBUyxFQUFFLENBQUM7d0JBQ2QsWUFBWSxDQUFDLHFHQUFxRyxDQUFDLENBQUM7b0JBQ3RILENBQUM7eUJBQU0sQ0FBQzt3QkFDTixZQUFZLENBQUMsc0NBQXNDLFFBQVEsT0FBTyxDQUFDLENBQUM7b0JBQ3RFLENBQUM7Z0JBQ0gsQ0FBQztxQkFBTSxDQUFDO29CQUNOLEtBQUssTUFBTSxDQUFDLElBQUksTUFBTSxFQUFFLENBQUM7d0JBQ3ZCLE1BQU0sS0FBSyxHQUFHLENBQUMsQ0FBQyxNQUFNLEtBQUssU0FBUzs0QkFDbEMsQ0FBQyxDQUFDLFdBQVcsSUFBSSxDQUFDLEdBQUcsQ0FBQyxDQUFDLENBQUMsZUFBZSxDQUFDLE9BQU8sQ0FBQyxDQUFDLGVBQWUsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxHQUFHLE1BQU07NEJBQ3hGLENBQUMsQ0FBQyxDQUFDLENBQUMsTUFBTSxLQUFLLGNBQWM7Z0NBQzNCLENBQUMsQ0FBQyxjQUFjLENBQUMsQ0FBQyxNQUFNLEVBQUU7Z0NBQzFCLENBQUMsQ0FBQyxjQUFjLENBQUMsQ0FBQyxlQUFlLE9BQU8sQ0FBQyxDQUFDLGVBQWUsS0FBSyxDQUFDLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQyxDQUFDLENBQUMsR0FBRyxFQUFFLENBQUM7d0JBQ2pGLFlBQVksQ0FBQyxHQUFHLENBQUMsQ0FBQyxVQUFVLE1BQU0sS0FBSyxFQUFFLENBQUMsQ0FBQztvQkFDN0MsQ0FBQztvQkFDRCxVQUFVLENBQUMsR0FBRyxNQUFNLENBQUMsTUFBTSxVQUFVLE1BQU0sQ0FBQyxNQUFNLEtBQUssQ0FBQyxDQUFDLENBQUMsQ0FBQyxFQUFFLENBQUMsQ0FBQyxDQUFDLEdBQUcseUhBQXlILENBQUMsQ0FBQztnQkFDaE0sQ0FBQztZQUNILENBQUM7WUFDRCxPQUFPLENBQUMsSUFBSSxDQUFDLFFBQVEsQ0FBQyxDQUFDO1FBQ3pCLENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsV0FBVyxDQUFDLEtBQUssRUFBRSxXQUFXLENBQUMsV0FBVyxFQUFFO2dCQUMxQyxLQUFLLEVBQUUsT0FBTyxDQUFDLElBQUksRUFBRSxDQUFDLEtBQUs7Z0JBQzNCLElBQUksRUFBRSxLQUFLO2dCQUNYLE9BQU8sRUFBRSxFQUFFLE9BQU8sRUFBRSxjQUFjLEVBQUUsV0FBVyxFQUFFO2FBQ2xELENBQUMsQ0FBQztZQUNILE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDbEIsQ0FBQztJQUNILENBQUMsQ0FBQyxDQUFDO0FBQ1AsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbIi8vIENvcHlyaWdodCAyMDI2IFBpcGVsaW5lIEJ1aWxkZXIgQ29udHJpYnV0b3JzXG4vLyBTUERYLUxpY2Vuc2UtSWRlbnRpZmllcjogQXBhY2hlLTIuMFxuXG5pbXBvcnQgeyBpc09wYXF1ZUFwaUtleSB9IGZyb20gJ0BwaXBlbGluZS1idWlsZGVyL2FwaS1jb3JlJztcbmltcG9ydCB7IENvcmVDb25zdGFudHMgfSBmcm9tICdAcGlwZWxpbmUtYnVpbGRlci9waXBlbGluZS1jb3JlJztcbmltcG9ydCB7IENvbW1hbmQgfSBmcm9tICdjb21tYW5kZXInO1xuaW1wb3J0IHsgcmVzb2x2ZUF3c1JlZ2lvbiB9IGZyb20gJy4uL3V0aWxzL2F3cy1lbnYuanMnO1xuaW1wb3J0IHsgZ2V0U2VjcmV0VmFsdWUsIGxpc3RTZWNyZXRzIH0gZnJvbSAnLi4vdXRpbHMvYXdzLXNlY3JldHMuanMnO1xuaW1wb3J0IHsgcHJpbnRDb21tYW5kSGVhZGVyLCB3aXRoUHJvZmlsZU9wdGlvbiwgd2l0aFJlZ2lvbk9wdGlvbiB9IGZyb20gJy4uL3V0aWxzL2NvbW1hbmQtdXRpbHMuanMnO1xuaW1wb3J0IHsgRVJST1JfQ09ERVMsIGhhbmRsZUVycm9yIH0gZnJvbSAnLi4vdXRpbHMvZXJyb3ItaGFuZGxlci5qcyc7XG5pbXBvcnQgeyBwcmludEVycm9yLCBwcmludEluZm8sIHByaW50U2VjdGlvbiwgcHJpbnRTdWNjZXNzLCBwcmludFdhcm5pbmcgfSBmcm9tICcuLi91dGlscy9vdXRwdXQtdXRpbHMuanMnO1xuXG5pbnRlcmZhY2UgVG9rZW5BdWRpdEVudHJ5IHtcbiAgc2VjcmV0TmFtZTogc3RyaW5nO1xuICBhcm46IHN0cmluZztcbiAgZXhwaXJlc0F0OiBEYXRlO1xuICBkYXlzVW50aWxFeHBpcnk6IG51bWJlcjtcbiAgc3RhdHVzOiAnZXhwaXJlZCcgfCAnZXhwaXJpbmctc29vbicgfCAndW52ZXJpZmlhYmxlJyB8ICdvayc7XG4gIC8qKiBXaHkgdGhlIHN0b3JlZCB0b2tlbiBmYWlsZWQgdmVyaWZpY2F0aW9uLCB3aGVuIGBzdGF0dXNgIGlzIGB1bnZlcmlmaWFibGVgLiAqL1xuICByZWFzb24/OiBzdHJpbmc7XG59XG5cbi8qKlxuICogUmVnaXN0ZXJzIHRoZSBgYXVkaXQtdG9rZW5zYCBjb21tYW5kIHdpdGggdGhlIENMSSBwcm9ncmFtLlxuICpcbiAqIFNjYW5zIEFXUyBTZWNyZXRzIE1hbmFnZXIgZm9yIHN0b3JlZCBwbGF0Zm9ybSBKV1RzIChtYXRjaGluZyB0aGVcbiAqIGBwaXBlbGluZS1idWlsZGVyLzxvcmdJZD4vcGxhdGZvcm1gIG5hbWluZyBjb252ZW50aW9uIHVzZWQgYnkgYHN0b3JlLXRva2VuYClcbiAqIGFuZCByZXBvcnRzIHdoaWNoIHNlY3JldHMgYXJlIGV4cGlyZWQgb3IgY2xvc2UgdG8gZXhwaXJpbmcuXG4gKlxuICogRGVzaWduZWQgZm9yIGNyb24gdXNlOlxuICogICAtIEV4aXRzIDAgd2hlbiBub3RoaW5nIGlzIGF0LXJpc2suXG4gKiAgIC0gRXhpdHMgMSB3aGVuIGF0IGxlYXN0IG9uZSBzZWNyZXQgaXMgZXhwaXJlZCBvciBleHBpcmVzIHdpdGhpbiBgLS13YXJuLWRheXNgLlxuICogICAtIEV4aXRzIDIgb24gQVdTIGVycm9ycyAvIHNjYW4gZmFpbHVyZXMuXG4gKlxuICogQGV4YW1wbGVcbiAqIGBgYGJhc2hcbiAqIHBpcGVsaW5lLW1hbmFnZXIgYXVkaXQgdG9rZW5zIC0tcmVnaW9uIHVzLWVhc3QtMSAtLXdhcm4tZGF5cyA3XG4gKiBwaXBlbGluZS1tYW5hZ2VyIGF1ZGl0IHRva2VucyAtLXJlZ2lvbiB1cy1lYXN0LTEgLS1qc29uXG4gKiBgYGBcbiAqL1xuZXhwb3J0IGZ1bmN0aW9uIGF1ZGl0VG9rZW5zKHByb2dyYW06IENvbW1hbmQpOiB2b2lkIHtcbiAgd2l0aFByb2ZpbGVPcHRpb24oXG4gICAgd2l0aFJlZ2lvbk9wdGlvbihwcm9ncmFtXG4gICAgICAuY29tbWFuZCgndG9rZW5zJylcbiAgICAgIC5kZXNjcmlwdGlvbignU2NhbiBzdG9yZWQgcGxhdGZvcm0gdG9rZW5zIGluIEFXUyBTZWNyZXRzIE1hbmFnZXIgYW5kIHJlcG9ydCB1cGNvbWluZyBleHBpcmF0aW9ucycpKSxcbiAgKVxuICAgIC5vcHRpb24oJy0td2Fybi1kYXlzIDxkYXlzPicsICdGbGFnIHRva2VucyBleHBpcmluZyB3aXRoaW4gTiBkYXlzIGFzIGF0LXJpc2snLCAnNycpXG4gICAgLm9wdGlvbignLS1wcmVmaXggPHByZWZpeD4nLCAnU2VjcmV0cyBNYW5hZ2VyIG5hbWUgcHJlZml4IHRvIHNjYW4nLCBgJHtDb3JlQ29uc3RhbnRzLlNFQ1JFVFNfUEFUSF9QUkVGSVh9L2ApXG4gICAgLm9wdGlvbignLS1qc29uJywgJ091dHB1dCByZXN1bHRzIGFzIEpTT04nLCBmYWxzZSlcbiAgICAuYWN0aW9uKGFzeW5jIChvcHRpb25zKSA9PiB7XG4gICAgICBjb25zdCBleGVjdXRpb25JZCA9IHByaW50Q29tbWFuZEhlYWRlcignQXVkaXQgVG9rZW5zJywgdW5kZWZpbmVkLCB7IHF1aWV0OiBvcHRpb25zLmpzb24gfSk7XG4gICAgICBjb25zdCByZWdpb24gPSByZXNvbHZlQXdzUmVnaW9uKG9wdGlvbnMucmVnaW9uKTtcbiAgICAgIGNvbnN0IHdhcm5EYXlzID0gcGFyc2VJbnQob3B0aW9ucy53YXJuRGF5cywgMTApO1xuICAgICAgaWYgKCFOdW1iZXIuaXNGaW5pdGUod2FybkRheXMpIHx8IHdhcm5EYXlzIDwgMCkge1xuICAgICAgICBwcmludEVycm9yKCdJbnZhbGlkIC0td2Fybi1kYXlzIHZhbHVlJywgeyBwcm92aWRlZDogb3B0aW9ucy53YXJuRGF5cyB9KTtcbiAgICAgICAgcHJvY2Vzcy5leGl0KDIpO1xuICAgICAgfVxuXG4gICAgICB0cnkge1xuICAgICAgICAvLyBQcm9ncmVzcyBnb2VzIHRvIHN0ZG91dCwgc28gc3VwcHJlc3MgaXQgaW4gLS1qc29uIG1vZGUgdG8ga2VlcCB0aGUgSlNPTiBwYXlsb2FkIGNsZWFuIGZvciBwaXBpbmcuXG4gICAgICAgIGlmICghb3B0aW9ucy5qc29uKSBwcmludEluZm8oJ0xpc3Rpbmcgc2VjcmV0cycsIHsgcmVnaW9uLCBwcmVmaXg6IG9wdGlvbnMucHJlZml4IH0pO1xuICAgICAgICBjb25zdCB7IHNlY3JldHMsIHRydW5jYXRlZCB9ID0gYXdhaXQgbGlzdFNlY3JldHMob3B0aW9ucy5wcmVmaXgsIHsgcmVnaW9uLCBwcm9maWxlOiBvcHRpb25zLnByb2ZpbGUgfSk7XG4gICAgICAgIGlmICh0cnVuY2F0ZWQpIHtcbiAgICAgICAgICAvLyBBIHRydW5jYXRlZCBzd2VlcCBtZWFucyBhbiBleHBpcmluZyB0b2tlbiBwYXN0IHRoZSBjYXAgY291bGQgYmUgbWlzc2VkIOKAlFxuICAgICAgICAgIC8vIG5ldmVyIHJlcG9ydCBcImFsbCBjbGVhclwiIGZyb20gYW4gaW5jb21wbGV0ZSBzY2FuIChtaXJyb3JzIGF1ZGl0LXN0YWNrcykuXG4gICAgICAgICAgcHJpbnRXYXJuaW5nKCdTZWNyZXQgbGlzdGluZyB3YXMgVFJVTkNBVEVEIChwYWdpbmcgY2FwIGhpdCkg4oCUIHJlc3VsdHMgbWF5IGJlIElOQ09NUExFVEUgYW5kIGFuIGV4cGlyaW5nIHRva2VuIGNvdWxkIGJlIG1pc3NlZC4gTmFycm93IGJ5IC0tcHJlZml4Ly0tcmVnaW9uLicpO1xuICAgICAgICB9XG5cbiAgICAgICAgLy8gQXVkaXQgZXZlcnkgc3RvcmVkIG1hY2hpbmUgY3JlZGVudGlhbDogdGhlIGZ1bGwtcHJpdmlsZWdlIHBsYXRmb3JtIGtleVxuICAgICAgICAvLyAoYDxwcmVmaXg+LzxvcmdJZD4vcGxhdGZvcm1gKSBhbmQgZWFjaCBTQ09QRUQgb25lIChgLi4uL3JlcG9ydGluZy1pbmdlc3RgLFxuICAgICAgICAvLyBgLi4uL3JlZ2lzdHJ5LXB1c2hgLCBmcm9tIGBzdG9yZS10b2tlbiAtLXNjb3BlIOKApmApLiBBbGwgZXhwaXJlIGFuZCBhbGxcbiAgICAgICAgLy8gYXJlIGF1dG8tcm90YXRlZCwgc28gYSBzdGFsbGVkIHJvdGF0aW9uIG9uIGFueSBvZiB0aGVtIG11c3Qgc3VyZmFjZSBoZXJlLlxuICAgICAgICBjb25zdCBDUkVERU5USUFMX0xFQVZFUyA9IFsnL3BsYXRmb3JtJywgJy9yZXBvcnRpbmctaW5nZXN0JywgJy9yZWdpc3RyeS1wdXNoJ107XG4gICAgICAgIGNvbnN0IHBsYXRmb3JtU2VjcmV0cyA9IHNlY3JldHMuZmlsdGVyKChzKSA9PiBDUkVERU5USUFMX0xFQVZFUy5zb21lKChsZWFmKSA9PiBzLm5hbWUuZW5kc1dpdGgobGVhZikpKTtcblxuICAgICAgICBjb25zdCBlbnRyaWVzOiBUb2tlbkF1ZGl0RW50cnlbXSA9IFtdO1xuICAgICAgICBjb25zdCBub3cgPSBEYXRlLm5vdygpO1xuICAgICAgICBjb25zdCB3YXJuQ3V0b2ZmID0gbm93ICsgd2FybkRheXMgKiAyNCAqIDYwICogNjAgKiAxMDAwO1xuXG4gICAgICAgIGZvciAoY29uc3QgcyBvZiBwbGF0Zm9ybVNlY3JldHMpIHtcbiAgICAgICAgICBsZXQgcmF3OiBzdHJpbmc7XG4gICAgICAgICAgdHJ5IHtcbiAgICAgICAgICAgIHJhdyA9IGF3YWl0IGdldFNlY3JldFZhbHVlKHMubmFtZSwgeyByZWdpb24sIHByb2ZpbGU6IG9wdGlvbnMucHJvZmlsZSB9KTtcbiAgICAgICAgICB9IGNhdGNoIChlcnIpIHtcbiAgICAgICAgICAgIHByaW50V2FybmluZyhgQ291bGQgbm90IHJlYWQgJHtzLm5hbWV9OiAke2VyciBpbnN0YW5jZW9mIEVycm9yID8gZXJyLm1lc3NhZ2UgOiBTdHJpbmcoZXJyKX1gKTtcbiAgICAgICAgICAgIGNvbnRpbnVlO1xuICAgICAgICAgIH1cblxuICAgICAgICAgIGxldCBwYXJzZWQ6IHsgcGFzc3dvcmQ/OiBzdHJpbmc7IGV4cGlyZXNBdD86IHN0cmluZzsgcGxhdGZvcm1Vcmw/OiBzdHJpbmcgfTtcbiAgICAgICAgICB0cnkge1xuICAgICAgICAgICAgcGFyc2VkID0gSlNPTi5wYXJzZShyYXcpO1xuICAgICAgICAgIH0gY2F0Y2gge1xuICAgICAgICAgICAgcHJpbnRXYXJuaW5nKGBTZWNyZXQgJHtzLm5hbWV9IGlzIG5vdCB2YWxpZCBKU09OLCBza2lwcGluZ2ApO1xuICAgICAgICAgICAgY29udGludWU7XG4gICAgICAgICAgfVxuXG4gICAgICAgICAgLy8gYGV4cGlyZXNBdGAgaXMgdGhlIE9OTFkgZXhwaXJ5IHNvdXJjZSBub3cuIFRoZSBzdG9yZWQgY3JlZGVudGlhbCBpcyBhblxuICAgICAgICAgIC8vIG9wYXF1ZSBzZXJ2aWNlLWFjY291bnQga2V5OiBpdCBjYXJyaWVzIG5vIGNsYWltcywgc28gdGhlcmUgaXMgbm8gYGV4cGBcbiAgICAgICAgICAvLyB0byBkZWNvZGUgYXMgYSBmYWxsYmFjayDigJQgd2hpY2ggaXMgZXhhY3RseSB3aHkgc3RvcmUtdG9rZW4gYW5kIHRoZVxuICAgICAgICAgIC8vIHJvdGF0b3IgYm90aCB3cml0ZSB0aGUgZmllbGQuXG4gICAgICAgICAgbGV0IGV4cGlyZXNBdDogRGF0ZSB8IHVuZGVmaW5lZDtcbiAgICAgICAgICBpZiAocGFyc2VkLmV4cGlyZXNBdCkge1xuICAgICAgICAgICAgY29uc3QgZCA9IG5ldyBEYXRlKHBhcnNlZC5leHBpcmVzQXQpO1xuICAgICAgICAgICAgaWYgKCFOdW1iZXIuaXNOYU4oZC5nZXRUaW1lKCkpKSBleHBpcmVzQXQgPSBkO1xuICAgICAgICAgIH1cbiAgICAgICAgICBpZiAoIWV4cGlyZXNBdCkge1xuICAgICAgICAgICAgcHJpbnRXYXJuaW5nKGBTZWNyZXQgJHtzLm5hbWV9IGhhcyBubyBleHBpcnkgaW5mb3JtYXRpb24sIHNraXBwaW5nYCk7XG4gICAgICAgICAgICBjb250aW51ZTtcbiAgICAgICAgICB9XG5cbiAgICAgICAgICBjb25zdCBkYXlzVW50aWxFeHBpcnkgPSBNYXRoLmZsb29yKChleHBpcmVzQXQuZ2V0VGltZSgpIC0gbm93KSAvICgyNCAqIDYwICogNjAgKiAxMDAwKSk7XG4gICAgICAgICAgbGV0IHN0YXR1czogVG9rZW5BdWRpdEVudHJ5WydzdGF0dXMnXSA9XG4gICAgICAgICAgICBleHBpcmVzQXQuZ2V0VGltZSgpIDwgbm93ID8gJ2V4cGlyZWQnXG4gICAgICAgICAgICAgIDogZXhwaXJlc0F0LmdldFRpbWUoKSA8IHdhcm5DdXRvZmYgPyAnZXhwaXJpbmctc29vbidcbiAgICAgICAgICAgICAgICA6ICdvayc7XG5cbiAgICAgICAgICAvLyBBIHNlY3JldCB0aGF0IHN0aWxsIGhhcyBtb250aHMgb2YgbGlmZSBidXQgaG9sZHMgdGhlIFdST05HIEtJTkQgb2ZcbiAgICAgICAgICAvLyBjcmVkZW50aWFsIGlzIGp1c3QgYXMgZGVhZCBhcyBhbiBleHBpcmVkIG9uZS4gQWZ0ZXIgdGhlIHNlcnZpY2UtYWNjb3VudFxuICAgICAgICAgIC8vIGN1dG92ZXIgdGhlIHN0b3JlZCB2YWx1ZSBtdXN0IGJlIGFuIG9wYXF1ZSBgcGJfc2Ff4oCmYCBrZXk7IGEgc2VjcmV0IGxlZnRcbiAgICAgICAgICAvLyBob2xkaW5nIGEgcHJlLWN1dG92ZXIgbWFjaGluZS1zZXNzaW9uIEpXVCBpcyByZWZ1c2VkIGJ5IGV2ZXJ5IGNvbnN1bWVyLFxuICAgICAgICAgIC8vIGFuZCB0aGlzIGlzIHRoZSBzY2FuIHRoYXQgbmFtZXMgaXQgaW5zdGVhZCBvZiBsZWF2aW5nIHRocmVlIHNlcnZpY2VzIHRvXG4gICAgICAgICAgLy8gZmFpbCB3aXRoIGFuIG9wYXF1ZSA0MDEuXG4gICAgICAgICAgbGV0IHJlYXNvbjogc3RyaW5nIHwgdW5kZWZpbmVkO1xuICAgICAgICAgIGlmIChzdGF0dXMgIT09ICdleHBpcmVkJyAmJiBwYXJzZWQucGFzc3dvcmQgJiYgIWlzT3BhcXVlQXBpS2V5KHBhcnNlZC5wYXNzd29yZCkpIHtcbiAgICAgICAgICAgIHN0YXR1cyA9ICd1bnZlcmlmaWFibGUnO1xuICAgICAgICAgICAgcmVhc29uID0gcGFyc2VkLnBhc3N3b3JkLnNwbGl0KCcuJykubGVuZ3RoID09PSAzXG4gICAgICAgICAgICAgID8gJ2hvbGRzIGEgcHJlLWN1dG92ZXIgSldULCBub3QgYSBzZXJ2aWNlLWFjY291bnQga2V5IOKAlCByZS1ydW4gXCJwaXBlbGluZS1tYW5hZ2VyIGluZnJhIHN0b3JlLXRva2VuXCInXG4gICAgICAgICAgICAgIDogJ2RvZXMgbm90IGhvbGQgYW4gb3BhcXVlIHNlcnZpY2UtYWNjb3VudCBrZXkgKGV4cGVjdGVkIGEgXCJwYl9zYV/igKZcIiB2YWx1ZSknO1xuICAgICAgICAgIH1cbiAgICAgICAgICBlbnRyaWVzLnB1c2goeyBzZWNyZXROYW1lOiBzLm5hbWUsIGFybjogcy5hcm4sIGV4cGlyZXNBdCwgZGF5c1VudGlsRXhwaXJ5LCBzdGF0dXMsIC4uLihyZWFzb24gPyB7IHJlYXNvbiB9IDoge30pIH0pO1xuICAgICAgICB9XG5cbiAgICAgICAgY29uc3QgYXRSaXNrID0gZW50cmllcy5maWx0ZXIoKGUpID0+IGUuc3RhdHVzICE9PSAnb2snKTtcbiAgICAgICAgLy8gQSB0cnVuY2F0ZWQgc2NhbiBpcyBpdHNlbGYgYSBmYWlsdXJlIGNvbmRpdGlvbjogZXhpdCBub24temVybyBzbyBjcm9uXG4gICAgICAgIC8vIGRvZXNuJ3QgcmVhZCBhbiBpbmNvbXBsZXRlIFwiYWxsIGNsZWFyXCIgYXMgc3VjY2Vzcy5cbiAgICAgICAgY29uc3QgZXhpdENvZGUgPSAoYXRSaXNrLmxlbmd0aCA+IDAgfHwgdHJ1bmNhdGVkKSA/IDEgOiAwO1xuXG4gICAgICAgIGlmIChvcHRpb25zLmpzb24pIHtcbiAgICAgICAgICBjb25zb2xlLmxvZyhKU09OLnN0cmluZ2lmeSh7XG4gICAgICAgICAgICBzY2FubmVkQXQ6IG5ldyBEYXRlKCkudG9JU09TdHJpbmcoKSxcbiAgICAgICAgICAgIHJlZ2lvbixcbiAgICAgICAgICAgIHdhcm5EYXlzLFxuICAgICAgICAgICAgdG90YWxTY2FubmVkOiBlbnRyaWVzLmxlbmd0aCxcbiAgICAgICAgICAgIGF0Umlza0NvdW50OiBhdFJpc2subGVuZ3RoLFxuICAgICAgICAgICAgdHJ1bmNhdGVkLFxuICAgICAgICAgICAgZW50cmllczogZW50cmllcy5tYXAoKGUpID0+ICh7IC4uLmUsIGV4cGlyZXNBdDogZS5leHBpcmVzQXQudG9JU09TdHJpbmcoKSB9KSksXG4gICAgICAgICAgICBleGVjdXRpb25JZCxcbiAgICAgICAgICB9LCBudWxsLCAyKSk7XG4gICAgICAgIH0gZWxzZSB7XG4gICAgICAgICAgcHJpbnRTZWN0aW9uKCdBdWRpdCBSZXN1bHRzJyk7XG4gICAgICAgICAgcHJpbnRJbmZvKGBTY2FubmVkICR7ZW50cmllcy5sZW5ndGh9IHBsYXRmb3JtIHNlY3JldCR7ZW50cmllcy5sZW5ndGggPT09IDEgPyAnJyA6ICdzJ31gKTtcbiAgICAgICAgICBpZiAoYXRSaXNrLmxlbmd0aCA9PT0gMCkge1xuICAgICAgICAgICAgaWYgKHRydW5jYXRlZCkge1xuICAgICAgICAgICAgICBwcmludFdhcm5pbmcoJ05vIGF0LXJpc2sgdG9rZW5zIGluIHRoZSBzY2FubmVkIHBhZ2VzLCBidXQgdGhlIHNjYW4gd2FzIHRydW5jYXRlZCDigJQgc29tZSBzZWNyZXRzIHdlcmUgbm90IGNoZWNrZWQuJyk7XG4gICAgICAgICAgICB9IGVsc2Uge1xuICAgICAgICAgICAgICBwcmludFN1Y2Nlc3MoYEFsbCBzdG9yZWQga2V5cyB2YWxpZCBmb3IgYXQgbGVhc3QgJHt3YXJuRGF5c30gZGF5c2ApO1xuICAgICAgICAgICAgfVxuICAgICAgICAgIH0gZWxzZSB7XG4gICAgICAgICAgICBmb3IgKGNvbnN0IGUgb2YgYXRSaXNrKSB7XG4gICAgICAgICAgICAgIGNvbnN0IGxhYmVsID0gZS5zdGF0dXMgPT09ICdleHBpcmVkJ1xuICAgICAgICAgICAgICAgID8gYEVYUElSRUQgJHtNYXRoLmFicyhlLmRheXNVbnRpbEV4cGlyeSl9IGRheSR7ZS5kYXlzVW50aWxFeHBpcnkgPT09IC0xID8gJycgOiAncyd9IGFnb2BcbiAgICAgICAgICAgICAgICA6IGUuc3RhdHVzID09PSAndW52ZXJpZmlhYmxlJ1xuICAgICAgICAgICAgICAgICAgPyBgVU5VU0FCTEUg4oCUICR7ZS5yZWFzb259YFxuICAgICAgICAgICAgICAgICAgOiBgZXhwaXJlcyBpbiAke2UuZGF5c1VudGlsRXhwaXJ5fSBkYXkke2UuZGF5c1VudGlsRXhwaXJ5ID09PSAxID8gJycgOiAncyd9YDtcbiAgICAgICAgICAgICAgcHJpbnRXYXJuaW5nKGAke2Uuc2VjcmV0TmFtZX0g4oCUICR7bGFiZWx9YCk7XG4gICAgICAgICAgICB9XG4gICAgICAgICAgICBwcmludEVycm9yKGAke2F0Umlzay5sZW5ndGh9IHNlY3JldCR7YXRSaXNrLmxlbmd0aCA9PT0gMSA/ICcnIDogJ3MnfSBuZWVkIHJvdGF0aW9uLiBSdW4gXFxgcGlwZWxpbmUtbWFuYWdlciBpbmZyYSBzdG9yZS10b2tlbiAtLWRheXMgPE4+XFxgIChhZGQgLS1zY29wZSBmb3IgYSBzY29wZWQgY3JlZGVudGlhbCkgdG8gcmVpc3N1ZS5gKTtcbiAgICAgICAgICB9XG4gICAgICAgIH1cbiAgICAgICAgcHJvY2Vzcy5leGl0KGV4aXRDb2RlKTtcbiAgICAgIH0gY2F0Y2ggKGVycm9yKSB7XG4gICAgICAgIGhhbmRsZUVycm9yKGVycm9yLCBFUlJPUl9DT0RFUy5BUElfUkVRVUVTVCwge1xuICAgICAgICAgIGRlYnVnOiBwcm9ncmFtLm9wdHMoKS5kZWJ1ZyxcbiAgICAgICAgICBleGl0OiBmYWxzZSxcbiAgICAgICAgICBjb250ZXh0OiB7IGNvbW1hbmQ6ICdhdWRpdC10b2tlbnMnLCBleGVjdXRpb25JZCB9LFxuICAgICAgICB9KTtcbiAgICAgICAgcHJvY2Vzcy5leGl0KDIpO1xuICAgICAgfVxuICAgIH0pO1xufVxuIl19

package/dist/commands/create-pat.d.ts

@@ -1,26 +1,33 @@
 import { Command } from 'commander';
 /**
- * Registers the `create-pat` command with the CLI program.
+ * Registers the `pat` command with the CLI program.
  *
- * Mints a named Personal Access Token — a durable, individually-revocable API
- * credential — for CI/automation. Unlike `login` (which returns a short-lived
- * session token), a PAT is the right long-lived credential for scripts.
+ * Mints a named ACCESS KEY (`pb_pat_…`) — a durable, individually-revocable API
+ * credential — for CI/automation. Unlike a session, a key is the right
+ * long-lived credential for scripts.
  *
- * The platform gates PAT creation behind step-up re-authentication, so this
- * command chains three calls: login (→ access token), step-up with the same
- * password (→ step-up token), then POST /user/pats. The PAT binds to the user's
- * active org; pass `--org` to switch first (persists as the active org).
+ * The key is OPAQUE: it carries no claims, and each service trades it at
+ * platform's /auth/token/exchange for a 5-minute token, so revoking it takes
+ * effect everywhere within five minutes.
  *
- * The raw token is printed ONCE. `--quiet` prints only `export PLATFORM_TOKEN=…`
- * so it can be `eval`'d — the PAT is itself a valid Bearer credential.
+ * Creating one is step-up gated server-side, which used to mean the CLI had to
+ * hold a password (it POSTed it twice — sign-in, then step-up). It no longer
+ * has one: the device flow asks for the step-up IN THE BROWSER, where the
+ * account's real factors live, and the approved poll returns both the session
+ * and a short-lived step-up token. The key binds to the user's active org; pass
+ * `--org` to switch first (which persists as the active org).
+ *
+ * The raw key is printed ONCE — only its hash is stored, so it can never be read
+ * back. `--quiet` prints only `export PLATFORM_TOKEN=…` so it can be `eval`'d;
+ * the key is itself a valid Bearer credential.
  *
  * @param program - The root Commander program instance to attach the command to.
  *
  * @example
  * ```bash
- * PLATFORM_PASSWORD=secret pipeline-manager auth pat --name ci-deploy -u ci@example.com
- * pipeline-manager auth pat --name ci --expires-days 30 -u ci@example.com -p secret
- * eval $(PLATFORM_PASSWORD=secret pipeline-manager auth pat --name ci -u ci@example.com --quiet)
+ * pipeline-manager auth pat --name ci-deploy
+ * pipeline-manager auth pat --name ci --expires-days 30 --org <orgId>
+ * eval $(pipeline-manager auth pat --name ci --quiet)
  * ```
  */
 export declare function createPat(program: Command): void;

package/dist/commands/create-pat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-pat.d.ts","sourceRoot":"","sources":["../../src/commands/create-pat.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4BpC;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAkLhD"}
+{"version":3,"file":"create-pat.d.ts","sourceRoot":"","sources":["../../src/commands/create-pat.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuBpC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2JhD"}