@red-hat-developer-hub/e2e-test-utils 2.1.14 → 2.1.16

package/dist/secrets/command.js

@@ -1,30 +1,107 @@
 import { spawn } from "node:child_process";
-export const runCommand = (command, args, options = {}) => new Promise((resolve) => {
-    const child = spawn(command, args, {
-        cwd: options.cwd,
-        env: options.env,
-        stdio: options.stdio === "inherit" ? "inherit" : "pipe",
-    });
-    let stdout = "";
-    let stderr = "";
-    if (options.stdio !== "inherit") {
-        child.stdout?.setEncoding("utf8");
-        child.stderr?.setEncoding("utf8");
-        child.stdout?.on("data", (chunk) => {
-            stdout += chunk;
+import { access, constants, open } from "node:fs/promises";
+export const MAX_TIMEOUT_MS = 2_147_483_647;
+export function shouldDetachCommand(options = {}) {
+    return process.platform !== "win32" && options.tty !== true;
+}
+export const runCommand = async (command, args, options = {}) => {
+    if (options.timeoutMs !== undefined &&
+        (!Number.isSafeInteger(options.timeoutMs) ||
+            options.timeoutMs <= 0 ||
+            options.timeoutMs > MAX_TIMEOUT_MS)) {
+        throw new Error(`Command timeout must be a positive integer no greater than ${MAX_TIMEOUT_MS}ms`);
+    }
+    const detached = shouldDetachCommand(options);
+    let tty;
+    if (options.tty) {
+        tty = await open("/dev/tty", "r+");
+    }
+    return new Promise((resolve) => {
+        const child = spawn(command, args, {
+            cwd: options.cwd,
+            env: options.env,
+            stdio: options.tty
+                ? [tty.fd, "inherit", "inherit"]
+                : options.stdio === "inherit"
+                    ? "inherit"
+                    : "pipe",
+            detached,
         });
-        child.stderr?.on("data", (chunk) => {
-            stderr += chunk;
+        let stdout = "";
+        let stderr = "";
+        let timedOut = false;
+        let settled = false;
+        let forceTimeout;
+        const terminate = (signal) => {
+            if (child.pid !== undefined && detached) {
+                try {
+                    process.kill(-child.pid, signal);
+                    return;
+                }
+                catch {
+                    // Fall through to the direct child signal.
+                }
+            }
+            child.kill(signal);
+        };
+        const signals = ["SIGINT", "SIGTERM", "SIGHUP"];
+        const forwarders = new Map();
+        for (const signal of signals) {
+            const forward = () => terminate(signal);
+            forwarders.set(signal, forward);
+            process.on(signal, forward);
+        }
+        const timeout = options.timeoutMs === undefined
+            ? undefined
+            : setTimeout(() => {
+                timedOut = true;
+                terminate("SIGTERM");
+                forceTimeout = setTimeout(() => {
+                    forceTimeout = undefined;
+                    terminate("SIGKILL");
+                }, 1_000);
+            }, options.timeoutMs);
+        const finish = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timeout !== undefined)
+                clearTimeout(timeout);
+            if (forceTimeout !== undefined)
+                clearTimeout(forceTimeout);
+            for (const [signal, forward] of forwarders) {
+                process.removeListener(signal, forward);
+            }
+            void tty?.close();
+            resolve({ ...result, ...(timedOut ? { timedOut: true } : {}) });
+        };
+        if (options.stdio !== "inherit") {
+            child.stdout?.setEncoding("utf8");
+            child.stderr?.setEncoding("utf8");
+            child.stdout?.on("data", (chunk) => {
+                stdout += chunk;
+            });
+            child.stderr?.on("data", (chunk) => {
+                stderr += chunk;
+            });
+            if (options.input !== undefined)
+                child.stdin?.end(options.input);
+            else
+                child.stdin?.end();
+        }
+        child.once("error", (error) => {
+            finish({ status: null, stdout, stderr, error });
+        });
+        child.once("close", (status, signal) => {
+            finish({
+                status,
+                stdout,
+                stderr,
+                ...(signal === null ? {} : { signal }),
+            });
         });
-        if (options.input !== undefined)
-            child.stdin?.end(options.input);
-        else
-            child.stdin?.end();
-    }
-    child.once("error", (error) => {
-        resolve({ status: null, stdout, stderr, error });
-    });
-    child.once("close", (status) => {
-        resolve({ status, stdout, stderr });
     });
-});
+};
+export async function assertInteractiveTerminal() {
+    await access("/dev/tty", constants.R_OK | constants.W_OK);
+}

package/dist/secrets/config.d.ts

@@ -2,6 +2,10 @@ export type ReadableCollectionId = "rhdh-qe" | "rhdh-test-instance" | "rhdh-plug
 export interface CollectionMapping {
     id: ReadableCollectionId;
     bitwardenCollection: string;
+    gsmCollection?: string;
+}
+interface GsmCollectionMapping extends CollectionMapping {
+    gsmCollection: string;
 }
 export interface SecretProfile {
     schemaVersion: 1;
@@ -27,7 +31,13 @@ export interface ExpandedSecretProfile {
     collection: ReadableCollectionId;
     selectors: readonly ExpandedSecretSelector[];
 }
-export declare function getCollectionMapping(collection: string): CollectionMapping;
+export declare const COLLECTIONS: readonly GsmCollectionMapping[];
+export declare const READABLE_COLLECTIONS: readonly ReadableCollectionId[];
+export declare function getCollectionMapping(collection: string): GsmCollectionMapping;
+export declare function gsmPathFromBitwardenPath(path: string): string;
+export declare function bitwardenPathFromGsmPath(path: string): string;
+export declare function validateSecretPath(path: string): void;
 export declare function parseProfile(value: unknown): SecretProfile;
 export declare function expandProfile(profile: SecretProfile, workspaces?: readonly string[]): ExpandedSecretProfile;
+export {};
 //# sourceMappingURL=config.d.ts.map

package/dist/secrets/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/secrets/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,oBAAoB,GACpB,6BAA6B,CAAC;AAElC,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,oBAAoB,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,sBAAsB,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,UAAU,GAAG,YAAY,CAAC;CACzC;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC9C;AAqBD,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,iBAAiB,CAY1E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAuB1D;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EACtB,UAAU,GAAE,SAAS,MAAM,EAAO,GACjC,qBAAqB,CA4CvB"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/secrets/config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,oBAAoB,GACpB,6BAA6B,CAAC;AAElC,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,oBAAoB,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,oBAAqB,SAAQ,iBAAiB;IACtD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,SAAS,cAAc,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,sBAAsB,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,UAAU,GAAG,YAAY,CAAC;CACzC;AAED,MAAM,WAAW,sBAAuB,SAAQ,cAAc;IAC5D,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,oBAAoB,CAAC;IACjC,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC9C;AAED,eAAO,MAAM,WAAW,EAAE,SAAS,oBAAoB,EAgBtD,CAAC;AAEF,eAAO,MAAM,oBAAoB,EAE5B,SAAS,oBAAoB,EAAE,CAAC;AAMrC,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,CAY7E;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK7D;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAsBrD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa,CAuB1D;AAED,wBAAgB,aAAa,CAC3B,OAAO,EAAE,aAAa,EACtB,UAAU,GAAE,SAAS,MAAM,EAAO,GACjC,qBAAqB,CA4CvB"}

package/dist/secrets/config.js

@@ -1,17 +1,21 @@
-const COLLECTIONS = [
+export const COLLECTIONS = [
     {
         id: "rhdh-qe",
         bitwardenCollection: "Rhdh Qe Ci Secrets",
+        gsmCollection: "rhdh-qe",
     },
     {
         id: "rhdh-test-instance",
         bitwardenCollection: "Rhdh Test Instance Ci Secrets",
+        gsmCollection: "rhdh-test-instance",
     },
     {
         id: "rhdh-plugin-export-overlays",
         bitwardenCollection: "Rhdh Plugin Export Overlays Ci Secrets",
+        gsmCollection: "rhdh-plugin-export-overlays",
     },
 ];
+export const READABLE_COLLECTIONS = COLLECTIONS.map(({ id }) => id);
 const DENIED_COLLECTION = "rhdh-aws-credentials";
 const WORKSPACE_TOKEN = "${workspace}";
 const WORKSPACE_NAME = /^[a-z0-9][a-z0-9-]*$/;
@@ -24,6 +28,33 @@ export function getCollectionMapping(collection) {
     }
     return COLLECTIONS.find((mapping) => mapping.id === collection);
 }
+export function gsmPathFromBitwardenPath(path) {
+    return bitwardenPathFromGsmPath(path).replaceAll(".", "--dot--");
+}
+export function bitwardenPathFromGsmPath(path) {
+    validateSecretPath(path);
+    const bitwardenPath = path.replaceAll("--dot--", ".");
+    validateSecretPath(bitwardenPath);
+    return bitwardenPath;
+}
+export function validateSecretPath(path) {
+    if (path.length === 0 || path.startsWith("/")) {
+        throw new Error(`Invalid secret path: ${path}`);
+    }
+    const segments = path.split("/");
+    if (segments.length < 2 || segments.some((segment) => segment.length === 0)) {
+        throw new Error(`Secret path must use group/field form: ${path}`);
+    }
+    if (segments.some((segment) => segment === "." ||
+        segment === ".." ||
+        segment.length > 255 ||
+        !/^[A-Za-z0-9_.-]+$/.test(segment))) {
+        if (segments.some((segment) => segment.length > 255)) {
+            throw new Error(`Secret path segment is too long: ${path}`);
+        }
+        throw new Error(`Invalid secret path segment: ${path}`);
+    }
+}
 export function parseProfile(value) {
     if (!isRecord(value) || value.schemaVersion !== 1) {
         throw new Error("Invalid secret profile: schemaVersion must be 1");

package/dist/secrets/environment-name.d.ts

@@ -0,0 +1,2 @@
+export declare function isValidEnvironmentName(value: string): boolean;
+//# sourceMappingURL=environment-name.d.ts.map

package/dist/secrets/environment-name.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-name.d.ts","sourceRoot":"","sources":["../../src/secrets/environment-name.ts"],"names":[],"mappings":"AAEA,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7D"}

package/dist/secrets/environment-name.js

@@ -0,0 +1,4 @@
+const ENVIRONMENT_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+export function isValidEnvironmentName(value) {
+    return ENVIRONMENT_NAME.test(value);
+}

package/dist/secrets/environment.d.ts

@@ -5,6 +5,16 @@ export interface EnvironmentSecret {
     value: string;
     selector: ExpandedSecretSelector;
 }
+export interface MaterializedEnvironment {
+    environment: NodeJS.ProcessEnv;
+    secrets: readonly MaterializedSecret[];
+}
+export interface MaterializedSecret {
+    name: string;
+    value: string;
+}
 export declare function removeProviderEnvironmentVariables(environment: NodeJS.ProcessEnv): void;
 export declare function materializeEnvironment(secrets: readonly EnvironmentSecret[], selectors: readonly ExpandedSecretSelector[], parent?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function materializeEnvironmentWithSecrets(secrets: readonly EnvironmentSecret[], selectors: readonly ExpandedSecretSelector[], parent?: NodeJS.ProcessEnv): MaterializedEnvironment;
+export declare function materializeStreamEnvironment(materialized: MaterializedEnvironment): NodeJS.ProcessEnv;
 //# sourceMappingURL=environment.d.ts.map

package/dist/secrets/environment.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/secrets/environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAUD,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,CAAC,UAAU,GAC7B,IAAI,CAMN;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,MAAM,CAAC,UAAU,CAwCnB"}
+{"version":3,"file":"environment.d.ts","sourceRoot":"","sources":["../../src/secrets/environment.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAO1D,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,sBAAsB,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,WAAW,EAAE,MAAM,CAAC,UAAU,CAAC;IAC/B,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AASD,wBAAgB,kCAAkC,CAChD,WAAW,EAAE,MAAM,CAAC,UAAU,GAC7B,IAAI,CAMN;AAED,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,MAAM,CAAC,UAAU,CAGnB;AAED,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,SAAS,EAAE,SAAS,sBAAsB,EAAE,EAC5C,MAAM,GAAE,MAAM,CAAC,UAAwB,GACtC,uBAAuB,CAgEzB;AAED,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,uBAAuB,GACpC,MAAM,CAAC,UAAU,CAKnB"}

package/dist/secrets/environment.js

@@ -1,4 +1,5 @@
-const ENVIRONMENT_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+import { SECRET_STREAM_ENVIRONMENT_VARIABLE, SECRET_STREAM_FD, } from "./stream.js";
+import { isValidEnvironmentName } from "./environment-name.js";
 const PROVIDER_ENVIRONMENT_KEYS = new Set([
     "VAULT",
     "VAULT_TOKEN",
@@ -13,8 +14,13 @@ export function removeProviderEnvironmentVariables(environment) {
     }
 }
 export function materializeEnvironment(secrets, selectors, parent = process.env) {
+    return materializeEnvironmentWithSecrets(secrets, selectors, parent)
+        .environment;
+}
+export function materializeEnvironmentWithSecrets(secrets, selectors, parent = process.env) {
     const child = { ...parent };
     removeProviderEnvironmentVariables(child);
+    delete child[SECRET_STREAM_ENVIRONMENT_VARIABLE];
     const mapped = new Map();
     for (const secret of secrets) {
         const selector = selectors.find((candidate) => sameSelector(candidate, secret.selector));
@@ -30,16 +36,41 @@ export function materializeEnvironment(secrets, selectors, parent = process.env)
                 continue;
         }
         const key = transformEnvironmentName(relativeName, selector.destination.keyTransform);
-        if (!ENVIRONMENT_NAME.test(key)) {
+        if (!isValidEnvironmentName(key)) {
             throw new Error(`Invalid environment variable name: ${key}`);
         }
+        if (key === SECRET_STREAM_ENVIRONMENT_VARIABLE) {
+            throw new Error(`Reserved environment variable name: ${key}`);
+        }
+        if (key.startsWith("BW_")) {
+            throw new Error(`Bitwarden provider environment variable is not allowed: ${key}`);
+        }
         if (mapped.has(key)) {
             throw new Error(`Environment variable collision: ${key}`);
         }
         mapped.set(key, secret.value);
     }
-    for (const [key, value] of mapped)
-        child[key] = value;
+    const mappedSecrets = [...mapped.entries()]
+        .map(([name, value]) => ({ name, value }))
+        .sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
+    for (const [key, value] of mapped) {
+        Object.defineProperty(child, key, {
+            configurable: true,
+            enumerable: true,
+            value,
+            writable: true,
+        });
+    }
+    return {
+        environment: child,
+        secrets: mappedSecrets,
+    };
+}
+export function materializeStreamEnvironment(materialized) {
+    const child = { ...materialized.environment };
+    for (const secret of materialized.secrets)
+        delete child[secret.name];
+    child[SECRET_STREAM_ENVIRONMENT_VARIABLE] = String(SECRET_STREAM_FD);
     return child;
 }
 function transformEnvironmentName(value, transform) {

package/dist/secrets/exec.d.ts

@@ -1,18 +1,26 @@
+import { spawn } from "node:child_process";
 import { type BitwardenSecret } from "./bitwarden.js";
 import { type ExpandedSecretSelector, type SecretProfile } from "./config.js";
+import { type SecretStreamEntry } from "./stream.js";
 export interface SecretReader {
     read(collection: SecretProfile["collection"], selectors: readonly ExpandedSecretSelector[]): Promise<BitwardenSecret[]>;
 }
-export type ChildRunner = (command: string, args: readonly string[], env: NodeJS.ProcessEnv) => Promise<number>;
+export interface ChildRunnerOptions {
+    secretStream?: readonly SecretStreamEntry[];
+}
+export type ChildRunner = (command: string, args: readonly string[], env: NodeJS.ProcessEnv, options?: ChildRunnerOptions) => Promise<number>;
 export interface ExecuteCommandOptions {
     profile: SecretProfile;
     workspaces: readonly string[];
     command: string;
     args: readonly string[];
+    streamSecrets?: boolean;
     env?: NodeJS.ProcessEnv;
     client?: SecretReader;
     childRunner?: ChildRunner;
 }
 export declare function executeCommand(options: ExecuteCommandOptions): Promise<number>;
 export declare const runChild: ChildRunner;
+/** Internal spawn seam used by lifecycle tests; omitted from the package barrel. */
+export declare function createChildRunner(spawnCommand: typeof spawn): ChildRunner;
 //# sourceMappingURL=exec.d.ts.map

package/dist/secrets/exec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/secrets/exec.ts"],"names":[],"mappings":"AACA,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAGrB,MAAM,WAAW,YAAY;IAC3B,IAAI,CACF,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,EACvC,SAAS,EAAE,SAAS,sBAAsB,EAAE,GAC3C,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CAC/B;AAED,MAAM,MAAM,WAAW,GAAG,CACxB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,KACnB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAejB;AAED,eAAO,MAAM,QAAQ,EAAE,WAqCnB,CAAC"}
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../src/secrets/exec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AAKrB,OAAO,EAAqB,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAExE,MAAM,WAAW,YAAY;IAC3B,IAAI,CACF,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,EACvC,SAAS,EAAE,SAAS,sBAAsB,EAAE,GAC3C,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;CAC7C;AAED,MAAM,MAAM,WAAW,GAAG,CACxB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,MAAM,CAAC,CAAC;AAErB,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,aAAa,CAAC;IACvB,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,MAAM,CAAC,CAuBjB;AAED,eAAO,MAAM,QAAQ,EAAE,WAAsC,CAAC;AAE9D,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,OAAO,KAAK,GAAG,WAAW,CAGzE"}