@super-repo/envx 0.2.2 → 0.2.3-b.1

package/dist/auto.js

@@ -1,10 +1,6 @@
-// #region -- Side-effect entry point ----------------------
-// `import "@honeycluster/envx/auto"` (or "/config") loads .env into
-// process.env on import — same ergonomics as `import "dotenv/config"`.
-// Picks up envx.config.* and the package.json `envx.config` discovery
-// chain automatically. Use the named/default export from the package
-// root when you want an explicit handle.
 import envx from "./index.js";
+//#region src/auto.ts
 envx();
-// #endregion -----------------------------------------------
+//#endregion
+
 //# sourceMappingURL=auto.js.map

package/dist/auto.js.map

@@ -1 +1 @@
-{"version":3,"file":"auto.js","sourceRoot":"","sources":["../src/auto.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAE5D,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,qEAAqE;AACrE,yCAAyC;AAEzC,OAAO,IAAI,MAAM,YAAY,CAAC;AAE9B,IAAI,EAAE,CAAC;AAEP,6DAA6D"}
+{"version":3,"file":"auto.js","names":[],"sources":["../src/auto.ts"],"sourcesContent":["// #region -- Side-effect entry point ----------------------\n\n// `import \"@honeycluster/envx/auto\"` (or \"/config\") loads .env into\n// process.env on import — same ergonomics as `import \"dotenv/config\"`.\n// Picks up envx.config.* and the package.json `envx.config` discovery\n// chain automatically. Use the named/default export from the package\n// root when you want an explicit handle.\n\nimport envx from \"./index.js\";\n\nenvx();\n\n// #endregion -----------------------------------------------\n"],"mappings":";;AAUA,MAAM"}

package/dist/bin/dotenvx.d.ts

@@ -1,3 +1 @@
-#!/usr/bin/env node
-import "@dotenvx/dotenvx";
 //# sourceMappingURL=dotenvx.d.ts.map

package/dist/bin/dotenvx.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dotenvx.d.ts","sourceRoot":"","sources":["../../src/bin/dotenvx.ts"],"names":[],"mappings":";AAKA,OAAO,kBAAkB,CAAC"}
+{"version":3,"file":"dotenvx.d.ts","sourceRoot":"","sources":["../../src/bin/dotenvx.ts"],"names":[],"mappings":"AAQA,OAAO,kBAAkB,CAAC"}

package/dist/bin/dotenvx.js

@@ -1,6 +1,2 @@
 #!/usr/bin/env node
-// Legacy passthrough — re-exposes the upstream `@dotenvx/dotenvx` package
-// under the `legacy` bin so callers that need the original CLI can opt in
-// without leaving this package.
 import "@dotenvx/dotenvx";
-//# sourceMappingURL=dotenvx.js.map

package/dist/chunks/commands-CcoGlJ3P.js

@@ -0,0 +1,354 @@
+import { a as resolveEnvPaths, c as loadDotenvxConfig, d as encryptFiles, f as parseEnv, i as loadEnv, l as expandEnvSrc, n as findWorkspaceRoot, o as validateCmdVariable, p as isEncrypted, r as listEnvFiles, s as log, t as writeProcessed, u as decryptFiles } from "./src-Bu_9Htex.js";
+import * as fs from "fs";
+import * as path from "path";
+import yargs from "yargs";
+import { execSync } from "child_process";
+//#region src/commands/debug.ts
+var debugCommand = {
+	command: "debug",
+	describe: "Show which env files would be loaded and which variables would be applied, without loading them.",
+	handler: (argv) => {
+		const paths = resolveEnvPaths({
+			envFiles: argv["env"],
+			cascade: argv["cascade"]
+		});
+		const rawVars = argv["variables"];
+		const variables = rawVars ? Object.fromEntries(rawVars.map(validateCmdVariable)) : {};
+		log.info(`Paths: ${JSON.stringify(paths)}`);
+		log.info(`Variables: ${JSON.stringify(variables)}`);
+	}
+};
+//#endregion
+//#region src/commands/decrypt.ts
+/** Mirror of `dotenvx decrypt` from upstream — see also encrypt.ts. */
+var decryptCommand = {
+	command: "decrypt",
+	describe: "Decrypt the values in one or more .env files in place using the matching private key in .env.keys.",
+	builder: (yargs) => yargs.option("env-keys-file", {
+		alias: "fk",
+		type: "string",
+		describe: "Path to the .env.keys file (default: ./.env.keys at cwd, regardless of --dir / --env-path)."
+	}).option("key", {
+		alias: "k",
+		type: "array",
+		string: true,
+		describe: "Specific keys (or picomatch globs) to decrypt. Default: all keys."
+	}).option("exclude-key", {
+		alias: "ek",
+		type: "array",
+		string: true,
+		describe: "Keys (or picomatch globs) to leave encrypted."
+	}).option("stdout", {
+		type: "boolean",
+		default: false,
+		describe: "Write the decrypted env contents to stdout instead of saving in place."
+	}).help("h").alias("h", "help"),
+	handler: (argv) => {
+		const envFiles = argv["env"] ?? [".env"];
+		const keys = argv["key"];
+		const excludeKeys = argv["exclude-key"];
+		const envKeysFile = argv["env-keys-file"];
+		const stdout = argv["stdout"] ?? false;
+		const result = decryptFiles({
+			envFiles,
+			...keys ? { keys } : {},
+			...excludeKeys ? { excludeKeys } : {},
+			...envKeysFile ? { envKeysFile } : {}
+		});
+		let hadError = false;
+		for (const processed of result.processedEnvs) {
+			if (processed.error) {
+				hadError = true;
+				log.error(`${processed.envFilepath}: ${processed.error.message}`);
+				if (processed.error.help) log.dim(processed.error.help);
+				continue;
+			}
+			if (stdout) process.stdout.write(processed.envSrc);
+		}
+		if (!stdout) {
+			const { written } = writeProcessed(result.processedEnvs);
+			for (const w of written) log.success(`decrypted ${w}`);
+			if (written.length === 0 && result.unchangedFilepaths.length > 0 && !hadError) log.dim(`no changes (${result.unchangedFilepaths.join(", ")})`);
+		}
+		if (hadError) process.exitCode = 1;
+	}
+};
+//#endregion
+//#region src/commands/encrypt.ts
+/**
+* Mirrors the upstream `dotenvx encrypt` flags so existing muscle
+* memory carries over. The `--env` global doubles as the file list
+* (the upstream calls it `--env-file`); this CLI keeps a single
+* canonical name across subcommands.
+*/
+var encryptCommand = {
+	command: "encrypt",
+	describe: "Encrypt the values in one or more .env files. Generates a private key in .env.keys on first run.",
+	builder: (yargs) => yargs.option("env-keys-file", {
+		alias: "fk",
+		type: "string",
+		describe: "Path to the .env.keys file (default: ./.env.keys at cwd, regardless of --dir / --env-path)."
+	}).option("key", {
+		alias: "k",
+		type: "array",
+		string: true,
+		describe: "Specific keys (or picomatch globs) to encrypt. Default: all keys."
+	}).option("exclude-key", {
+		alias: "ek",
+		type: "array",
+		string: true,
+		describe: "Keys (or picomatch globs) to leave plaintext."
+	}).option("stdout", {
+		type: "boolean",
+		default: false,
+		describe: "Write the encrypted env contents to stdout instead of saving in place."
+	}).help("h").alias("h", "help"),
+	handler: (argv) => {
+		const envFiles = argv["env"] ?? [".env"];
+		const keys = argv["key"];
+		const excludeKeys = argv["exclude-key"];
+		const envKeysFile = argv["env-keys-file"];
+		const stdout = argv["stdout"] ?? false;
+		const result = encryptFiles({
+			envFiles,
+			...keys ? { keys } : {},
+			...excludeKeys ? { excludeKeys } : {},
+			...envKeysFile ? { envKeysFile } : {}
+		});
+		let hadError = false;
+		for (const processed of result.processedEnvs) {
+			if (processed.error) {
+				hadError = true;
+				log.error(`${processed.envFilepath}: ${processed.error.message}`);
+				if (processed.error.help) log.dim(processed.error.help);
+				continue;
+			}
+			if (stdout) {
+				process.stdout.write(processed.envSrc);
+				continue;
+			}
+			if (processed.privateKeyAdded) log.success(`key added to .env.keys (${processed.privateKeyName ?? "<unknown>"})`);
+		}
+		if (!stdout) {
+			const { written } = writeProcessed(result.processedEnvs);
+			for (const w of written) log.success(`encrypted ${w}`);
+			if (written.length === 0 && result.unchangedFilepaths.length > 0 && !hadError) log.dim(`no changes (${result.unchangedFilepaths.join(", ")})`);
+		}
+		if (hadError) process.exitCode = 1;
+	}
+};
+//#endregion
+//#region src/commands/expand.ts
+/**
+* Decrypts (when needed) and expands variable references in an env
+* file. Mirrors the workflow `decrypt-vault` action — but cycle-safe,
+* supports `${VAR:-default}` / `${VAR:?msg}`, and never silently
+* truncates after N passes.
+*/
+var expandCommand = {
+	command: "expand",
+	describe: "Decrypt (if needed) and expand ${VAR}/$VAR references in an env file. Outputs to stdout by default.",
+	builder: (yargs) => yargs.option("output", {
+		type: "string",
+		describe: "Write the expanded result to this file (default: stdout)."
+	}).option("env-keys-file", {
+		alias: "fk",
+		type: "string",
+		describe: "Path to .env.keys (default: ./.env.keys at cwd, regardless of --dir / --env-path)."
+	}).option("on-missing", {
+		type: "string",
+		choices: [
+			"leave",
+			"empty",
+			"throw"
+		],
+		default: "leave",
+		describe: "How to handle ${UNRESOLVED_VAR}: leave it literal, substitute empty, or fail."
+	}).help("h").alias("h", "help"),
+	handler: (argv) => {
+		const envFiles = argv["env"] ?? [".env"];
+		if (envFiles.length !== 1) {
+			log.error(`expand operates on a single env file at a time; got ${String(envFiles.length)}.`);
+			process.exit(1);
+		}
+		const envFile = envFiles[0];
+		const filepath = path.resolve(envFile);
+		if (!fs.existsSync(filepath)) {
+			log.error(`env file not found: ${envFile}`);
+			process.exit(1);
+		}
+		let envSrc = fs.readFileSync(filepath, "utf8");
+		if (parseEnv(envSrc).some((l) => l.type === "kv" && isEncrypted(l.value))) {
+			const envKeysFile = argv["env-keys-file"];
+			const processed = decryptFiles({
+				envFiles: [envFile],
+				...envKeysFile ? { envKeysFile } : {}
+			}).processedEnvs[0];
+			if (processed?.error) {
+				log.error(`${envFile}: ${processed.error.message}`);
+				if (processed.error.help) log.dim(processed.error.help);
+				process.exit(1);
+			}
+			envSrc = processed.envSrc;
+		}
+		const onMissing = argv["on-missing"];
+		const result = expandEnvSrc(envSrc, { onMissing });
+		for (const v of result.unresolved) log.warn(`unresolved variable: ${v}`);
+		for (const cycle of result.cycles) log.warn(`cycle: ${cycle.join(" → ")}`);
+		const output = argv["output"];
+		if (output) {
+			fs.writeFileSync(path.resolve(output), result.envSrc);
+			log.success(`expanded ${envFile} → ${output}`);
+		} else {
+			process.stdout.write(result.envSrc);
+			if (!result.envSrc.endsWith("\n")) process.stdout.write("\n");
+		}
+	}
+};
+//#endregion
+//#region src/commands/print.ts
+var printCommand = {
+	command: "print <variable>",
+	describe: "Load env files and print the value of a single variable.",
+	builder: (yargs) => yargs.positional("variable", {
+		describe: "Name of the variable to print",
+		type: "string",
+		demandOption: true
+	}),
+	handler: (argv) => {
+		loadEnv({
+			envFiles: argv["env"],
+			variables: argv["variables"],
+			cascade: argv["cascade"],
+			vault: argv["vault"],
+			envPath: argv["env-path"],
+			override: argv["override"],
+			quiet: argv["quiet"]
+		});
+		const name = argv["variable"];
+		const value = process.env[name];
+		process.stdout.write(value != null ? `${value}\n` : "\n");
+	}
+};
+//#endregion
+//#region src/commands/run.ts
+var runCommand = {
+	command: "run [command..]",
+	aliases: ["$0"],
+	describe: "Load env files into process.env and execute a command. Default subcommand — `dotenvx-run [command]` is equivalent.",
+	builder: (yargs) => yargs.positional("command", {
+		describe: "Command to execute after loading env files",
+		type: "string",
+		array: true
+	}),
+	handler: (argv) => {
+		const command = (argv["command"] ?? []).join(" ");
+		loadEnv({
+			envFiles: argv["env"],
+			variables: argv["variables"],
+			cascade: argv["cascade"],
+			vault: argv["vault"],
+			envPath: argv["env-path"],
+			override: argv["override"],
+			quiet: argv["quiet"]
+		});
+		if (!command) return;
+		log.info(`Running: ${command}`);
+		try {
+			execSync(command, { stdio: "inherit" });
+			log.success(`Command completed: ${command}`);
+		} catch (error) {
+			const msg = error instanceof Error ? error.message : String(error);
+			log.error(`Command failed: ${msg}`);
+			process.exit(1);
+		}
+	}
+};
+//#endregion
+//#region src/commands/index.ts
+/**
+* Build the yargs CLI for `dotenvx-run`. Global options (env, variables,
+* cascade, vault, override, quiet) are registered on the root so every
+* subcommand inherits them.
+*/
+function createCli(argvInput) {
+	return yargs(argvInput).scriptName("envx").usage("$0 <command> [options]").option("config", {
+		alias: "c",
+		type: "string",
+		describe: "Path to an envx config file (default: discovered from package.json `envx.config` or envx.config.{ts,js,json})."
+	}).option("env", {
+		alias: "e",
+		type: "array",
+		describe: "Env files to load. Default: [\".env\"] (or `envFiles` from config; or every .env* under --env-path when set). Auto-detects environment when omitted."
+	}).option("env-path", {
+		alias: ["dir", "d"],
+		type: "string",
+		describe: "Subdirectory of the workspace root holding the env files (e.g. `vault`). When set and --env is omitted, every .env* file in that directory is included."
+	}).option("variables", {
+		alias: "v",
+		type: "array",
+		describe: "Inline variables in the form name=value (repeatable).",
+		default: []
+	}).option("cascade", {
+		type: "string",
+		describe: "Cascade load order: .env, .env.<cascade>, .env.local, .env.<cascade>.local"
+	}).option("vault", {
+		alias: "va",
+		type: "boolean",
+		describe: "Shortcut for `--env-path vault`."
+	}).option("override", {
+		alias: "o",
+		type: "boolean",
+		describe: "Override existing process.env values. Conflicts with --cascade."
+	}).option("quiet", {
+		alias: "q",
+		type: "boolean",
+		describe: "Suppress dotenv's own output."
+	}).middleware((argv) => {
+		const configPath = argv["config"];
+		let loaded;
+		try {
+			loaded = loadDotenvxConfig({ ...configPath ? { configPath } : {} });
+		} catch (e) {
+			log.error(`config error: ${e.message}`);
+			process.exit(1);
+		}
+		if (loaded.source) log.dim(`config: ${loaded.source} (${loaded.origin})`);
+		const cfg = loaded.config;
+		if (argv["cascade"] === void 0 && cfg.cascade !== void 0) argv["cascade"] = cfg.cascade;
+		if (argv["override"] === void 0) argv["override"] = cfg.override ?? false;
+		if (argv["quiet"] === void 0) argv["quiet"] = cfg.quiet ?? true;
+		if (argv["vault"] === void 0) argv["vault"] = false;
+		if (argv["env-keys-file"] === void 0 && cfg.envKeysFile !== void 0) argv["env-keys-file"] = cfg.envKeysFile;
+		if (argv["env-path"] === void 0) {
+			if (cfg.envPath !== void 0) argv["env-path"] = cfg.envPath;
+			else if (argv["vault"]) argv["env-path"] = "vault";
+		}
+		const userPassedEnv = Array.isArray(argv["env"]) && argv["env"].length > 0;
+		let files;
+		if (userPassedEnv) files = argv["env"];
+		else if (cfg.envFiles && cfg.envFiles.length > 0) files = [...cfg.envFiles];
+		else if (typeof argv["env-path"] === "string") {
+			const subdir = argv["env-path"];
+			const wsRoot = findWorkspaceRoot();
+			const discovered = listEnvFiles(path.resolve(wsRoot, subdir));
+			if (discovered.length > 0) {
+				files = discovered;
+				log.dim(`env-path ${subdir}: discovered ${String(discovered.length)} file(s) — ${discovered.join(", ")}`);
+			} else {
+				files = [".env"];
+				log.warn(`env-path ${subdir}: no .env* files found; falling back to [".env"]`);
+			}
+		} else files = [".env"];
+		if (typeof argv["env-path"] === "string") {
+			const wsRoot = findWorkspaceRoot();
+			const dir = path.resolve(wsRoot, argv["env-path"]);
+			files = files.map((f) => path.isAbsolute(f) ? f : path.join(dir, f));
+		}
+		argv["env"] = files;
+	}).command(runCommand).command(printCommand).command(debugCommand).command(encryptCommand).command(decryptCommand).command(expandCommand).help("h").alias("h", "help").version().strictCommands().demandCommand(0).recommendCommands().epilog("Examples:\n  envx -- node app.js                # load .env (auto-detected) and run\n  envx --env dev -- pnpm start       # load .env.dev\n  envx print DATABASE_URL            # print one variable\n  envx debug --cascade prod          # show resolved paths\n  envx encrypt -e .env.prod          # encrypt values in .env.prod\n  envx decrypt -e .env.prod -k FOO   # decrypt only FOO\n  envx expand -e vault/.env.prod     # decrypt + expand to stdout\n  envx -c ./my.config.json run -- node app.js");
+}
+//#endregion
+export { createCli as t };
+
+//# sourceMappingURL=commands-CcoGlJ3P.js.map

package/dist/chunks/commands-CcoGlJ3P.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands-CcoGlJ3P.js","names":[],"sources":["../../src/commands/debug.ts","../../src/commands/decrypt.ts","../../src/commands/encrypt.ts","../../src/commands/expand.ts","../../src/commands/print.ts","../../src/commands/run.ts","../../src/commands/index.ts"],"sourcesContent":["import type { CommandModule } from \"yargs\";\n\nimport { resolveEnvPaths, validateCmdVariable } from \"@honeycluster/libs\";\nimport { log } from \"@honeycluster/common\";\n\n// #region -- debug command ---------------------------------\n\nexport const debugCommand: CommandModule = {\n  command: \"debug\",\n  describe:\n    \"Show which env files would be loaded and which variables would be applied, without loading them.\",\n  handler: (argv) => {\n    const paths = resolveEnvPaths({\n      envFiles: argv[\"env\"] as string[] | undefined,\n      cascade: argv[\"cascade\"] as string | undefined,\n    });\n\n    const rawVars = argv[\"variables\"] as string[] | undefined;\n    const variables = rawVars\n      ? Object.fromEntries(rawVars.map(validateCmdVariable))\n      : {};\n\n    log.info(`Paths: ${JSON.stringify(paths)}`);\n    log.info(`Variables: ${JSON.stringify(variables)}`);\n  },\n};\n\n// #endregion -----------------------------------------------\n","import type { CommandModule } from \"yargs\";\n\nimport { decryptFiles, writeProcessed } from \"@honeycluster/libs\";\n\nimport { log } from \"@honeycluster/common\";\n\n// #region -- decrypt command -------------------------------\n\n/** Mirror of `dotenvx decrypt` from upstream — see also encrypt.ts. */\nexport const decryptCommand: CommandModule = {\n  command: \"decrypt\",\n  describe:\n    \"Decrypt the values in one or more .env files in place using the matching private key in .env.keys.\",\n  builder: (yargs) =>\n    yargs\n      .option(\"env-keys-file\", {\n        alias: \"fk\",\n        type: \"string\",\n        describe:\n          \"Path to the .env.keys file (default: ./.env.keys at cwd, regardless of --dir / --env-path).\",\n      })\n      .option(\"key\", {\n        alias: \"k\",\n        type: \"array\",\n        string: true,\n        describe:\n          \"Specific keys (or picomatch globs) to decrypt. Default: all keys.\",\n      })\n      .option(\"exclude-key\", {\n        alias: \"ek\",\n        type: \"array\",\n        string: true,\n        describe: \"Keys (or picomatch globs) to leave encrypted.\",\n      })\n      .option(\"stdout\", {\n        type: \"boolean\",\n        default: false,\n        describe:\n          \"Write the decrypted env contents to stdout instead of saving in place.\",\n      })\n      .help(\"h\")\n      .alias(\"h\", \"help\"),\n  handler: (argv) => {\n    const envFiles = (argv[\"env\"] as string[] | undefined) ?? [\".env\"];\n    const keys = argv[\"key\"] as string[] | undefined;\n    const excludeKeys = argv[\"exclude-key\"] as string[] | undefined;\n    const envKeysFile = argv[\"env-keys-file\"] as string | undefined;\n    const stdout = (argv[\"stdout\"] as boolean | undefined) ?? false;\n\n    const result = decryptFiles({\n      envFiles,\n      ...(keys ? { keys } : {}),\n      ...(excludeKeys ? { excludeKeys } : {}),\n      ...(envKeysFile ? { envKeysFile } : {}),\n    });\n\n    let hadError = false;\n\n    for (const processed of result.processedEnvs) {\n      if (processed.error) {\n        hadError = true;\n        log.error(`${processed.envFilepath}: ${processed.error.message}`);\n        if (processed.error.help) log.dim(processed.error.help);\n        continue;\n      }\n      if (stdout) {\n        process.stdout.write(processed.envSrc);\n      }\n    }\n\n    if (!stdout) {\n      const { written } = writeProcessed(result.processedEnvs);\n      for (const w of written) log.success(`decrypted ${w}`);\n      if (\n        written.length === 0 &&\n        result.unchangedFilepaths.length > 0 &&\n        !hadError\n      ) {\n        log.dim(`no changes (${result.unchangedFilepaths.join(\", \")})`);\n      }\n    }\n\n    if (hadError) process.exitCode = 1;\n  },\n};\n\n// #endregion -----------------------------------------------\n","import type { CommandModule } from \"yargs\";\n\nimport { encryptFiles, writeProcessed } from \"@honeycluster/libs\";\n\nimport { log } from \"@honeycluster/common\";\n\n// #region -- encrypt command -------------------------------\n\n/**\n * Mirrors the upstream `dotenvx encrypt` flags so existing muscle\n * memory carries over. The `--env` global doubles as the file list\n * (the upstream calls it `--env-file`); this CLI keeps a single\n * canonical name across subcommands.\n */\nexport const encryptCommand: CommandModule = {\n  command: \"encrypt\",\n  describe:\n    \"Encrypt the values in one or more .env files. Generates a private key in .env.keys on first run.\",\n  builder: (yargs) =>\n    yargs\n      .option(\"env-keys-file\", {\n        alias: \"fk\",\n        type: \"string\",\n        describe:\n          \"Path to the .env.keys file (default: ./.env.keys at cwd, regardless of --dir / --env-path).\",\n      })\n      .option(\"key\", {\n        alias: \"k\",\n        type: \"array\",\n        string: true,\n        describe:\n          \"Specific keys (or picomatch globs) to encrypt. Default: all keys.\",\n      })\n      .option(\"exclude-key\", {\n        alias: \"ek\",\n        type: \"array\",\n        string: true,\n        describe: \"Keys (or picomatch globs) to leave plaintext.\",\n      })\n      .option(\"stdout\", {\n        type: \"boolean\",\n        default: false,\n        describe:\n          \"Write the encrypted env contents to stdout instead of saving in place.\",\n      })\n      .help(\"h\")\n      .alias(\"h\", \"help\"),\n  handler: (argv) => {\n    const envFiles = (argv[\"env\"] as string[] | undefined) ?? [\".env\"];\n    const keys = argv[\"key\"] as string[] | undefined;\n    const excludeKeys = argv[\"exclude-key\"] as string[] | undefined;\n    const envKeysFile = argv[\"env-keys-file\"] as string | undefined;\n    const stdout = (argv[\"stdout\"] as boolean | undefined) ?? false;\n\n    const result = encryptFiles({\n      envFiles,\n      ...(keys ? { keys } : {}),\n      ...(excludeKeys ? { excludeKeys } : {}),\n      ...(envKeysFile ? { envKeysFile } : {}),\n    });\n\n    let hadError = false;\n\n    for (const processed of result.processedEnvs) {\n      if (processed.error) {\n        hadError = true;\n        log.error(`${processed.envFilepath}: ${processed.error.message}`);\n        if (processed.error.help) log.dim(processed.error.help);\n        continue;\n      }\n\n      if (stdout) {\n        process.stdout.write(processed.envSrc);\n        continue;\n      }\n\n      if (processed.privateKeyAdded) {\n        log.success(\n          `key added to .env.keys (${processed.privateKeyName ?? \"<unknown>\"})`,\n        );\n      }\n    }\n\n    if (!stdout) {\n      const { written } = writeProcessed(result.processedEnvs);\n      for (const w of written) log.success(`encrypted ${w}`);\n      if (\n        written.length === 0 &&\n        result.unchangedFilepaths.length > 0 &&\n        !hadError\n      ) {\n        log.dim(`no changes (${result.unchangedFilepaths.join(\", \")})`);\n      }\n    }\n\n    if (hadError) process.exitCode = 1;\n  },\n};\n\n// #endregion -----------------------------------------------\n","import * as fs from \"fs\";\nimport * as path from \"path\";\nimport type { CommandModule } from \"yargs\";\n\nimport {\n  decryptFiles,\n  expandEnvSrc,\n  isEncrypted,\n  parseEnv,\n} from \"@honeycluster/libs\";\n\nimport { log } from \"@honeycluster/common\";\n\n// #region -- expand command --------------------------------\n\n/**\n * Decrypts (when needed) and expands variable references in an env\n * file. Mirrors the workflow `decrypt-vault` action — but cycle-safe,\n * supports `${VAR:-default}` / `${VAR:?msg}`, and never silently\n * truncates after N passes.\n */\nexport const expandCommand: CommandModule = {\n  command: \"expand\",\n  describe:\n    \"Decrypt (if needed) and expand ${VAR}/$VAR references in an env file. Outputs to stdout by default.\",\n  builder: (yargs) =>\n    yargs\n      .option(\"output\", {\n        type: \"string\",\n        describe: \"Write the expanded result to this file (default: stdout).\",\n      })\n      .option(\"env-keys-file\", {\n        alias: \"fk\",\n        type: \"string\",\n        describe:\n          \"Path to .env.keys (default: ./.env.keys at cwd, regardless of --dir / --env-path).\",\n      })\n      .option(\"on-missing\", {\n        type: \"string\",\n        choices: [\"leave\", \"empty\", \"throw\"] as const,\n        default: \"leave\" as const,\n        describe:\n          \"How to handle ${UNRESOLVED_VAR}: leave it literal, substitute empty, or fail.\",\n      })\n      .help(\"h\")\n      .alias(\"h\", \"help\"),\n  handler: (argv) => {\n    const envFiles = (argv[\"env\"] as string[] | undefined) ?? [\".env\"];\n    if (envFiles.length !== 1) {\n      log.error(\n        `expand operates on a single env file at a time; got ${String(envFiles.length)}.`,\n      );\n      process.exit(1);\n    }\n    const envFile = envFiles[0]!;\n    const filepath = path.resolve(envFile);\n    if (!fs.existsSync(filepath)) {\n      log.error(`env file not found: ${envFile}`);\n      process.exit(1);\n    }\n\n    let envSrc = fs.readFileSync(filepath, \"utf8\");\n    const hasEncrypted = parseEnv(envSrc).some(\n      (l) => l.type === \"kv\" && isEncrypted(l.value),\n    );\n\n    if (hasEncrypted) {\n      const envKeysFile = argv[\"env-keys-file\"] as string | undefined;\n      const dec = decryptFiles({\n        envFiles: [envFile],\n        ...(envKeysFile ? { envKeysFile } : {}),\n      });\n      const processed = dec.processedEnvs[0];\n      if (processed?.error) {\n        log.error(`${envFile}: ${processed.error.message}`);\n        if (processed.error.help) log.dim(processed.error.help);\n        process.exit(1);\n      }\n      envSrc = processed!.envSrc;\n    }\n\n    const onMissing = argv[\"on-missing\"] as \"leave\" | \"empty\" | \"throw\";\n    const result = expandEnvSrc(envSrc, { onMissing });\n\n    for (const v of result.unresolved) {\n      log.warn(`unresolved variable: ${v}`);\n    }\n    for (const cycle of result.cycles) {\n      log.warn(`cycle: ${cycle.join(\" → \")}`);\n    }\n\n    const output = argv[\"output\"] as string | undefined;\n    if (output) {\n      fs.writeFileSync(path.resolve(output), result.envSrc);\n      log.success(`expanded ${envFile} → ${output}`);\n    } else {\n      process.stdout.write(result.envSrc);\n      if (!result.envSrc.endsWith(\"\\n\")) process.stdout.write(\"\\n\");\n    }\n  },\n};\n\n// #endregion -----------------------------------------------\n","import type { CommandModule } from \"yargs\";\n\nimport { loadEnv } from \"@honeycluster/libs\";\n\n// #region -- print command ---------------------------------\n\nexport const printCommand: CommandModule = {\n  command: \"print <variable>\",\n  describe: \"Load env files and print the value of a single variable.\",\n  builder: (yargs) =>\n    yargs.positional(\"variable\", {\n      describe: \"Name of the variable to print\",\n      type: \"string\",\n      demandOption: true,\n    }),\n  handler: (argv) => {\n    loadEnv({\n      envFiles: argv[\"env\"] as string[] | undefined,\n      variables: argv[\"variables\"] as string[] | undefined,\n      cascade: argv[\"cascade\"] as string | undefined,\n      vault: argv[\"vault\"] as boolean | undefined,\n      envPath: argv[\"env-path\"] as string | undefined,\n      override: argv[\"override\"] as boolean | undefined,\n      quiet: argv[\"quiet\"] as boolean | undefined,\n    });\n\n    const name = argv[\"variable\"] as string;\n    const value = process.env[name];\n    process.stdout.write(value != null ? `${value}\\n` : \"\\n\");\n  },\n};\n\n// #endregion -----------------------------------------------\n","import { execSync } from \"child_process\";\nimport type { CommandModule } from \"yargs\";\n\nimport { loadEnv } from \"@honeycluster/libs\";\nimport { log } from \"@honeycluster/common\";\n\n// #region -- run command -----------------------------------\n\nexport const runCommand: CommandModule = {\n  command: \"run [command..]\",\n  aliases: [\"$0\"],\n  describe:\n    \"Load env files into process.env and execute a command. Default subcommand — `dotenvx-run [command]` is equivalent.\",\n  builder: (yargs) =>\n    yargs.positional(\"command\", {\n      describe: \"Command to execute after loading env files\",\n      type: \"string\",\n      array: true,\n    }),\n  handler: (argv) => {\n    const command = ((argv[\"command\"] as string[] | undefined) ?? []).join(\" \");\n\n    loadEnv({\n      envFiles: argv[\"env\"] as string[] | undefined,\n      variables: argv[\"variables\"] as string[] | undefined,\n      cascade: argv[\"cascade\"] as string | undefined,\n      vault: argv[\"vault\"] as boolean | undefined,\n      envPath: argv[\"env-path\"] as string | undefined,\n      override: argv[\"override\"] as boolean | undefined,\n      quiet: argv[\"quiet\"] as boolean | undefined,\n    });\n\n    if (!command) return;\n\n    log.info(`Running: ${command}`);\n    try {\n      execSync(command, { stdio: \"inherit\" });\n      log.success(`Command completed: ${command}`);\n    } catch (error) {\n      const msg = error instanceof Error ? error.message : String(error);\n      log.error(`Command failed: ${msg}`);\n      process.exit(1);\n    }\n  },\n};\n\n// #endregion -----------------------------------------------\n","import yargs from \"yargs\";\nimport type { Argv } from \"yargs\";\n\nimport * as path from \"path\";\n\nimport {\n  findWorkspaceRoot,\n  listEnvFiles,\n  loadDotenvxConfig,\n} from \"@honeycluster/libs\";\n\nimport { log } from \"@honeycluster/common\";\nimport { debugCommand } from \"./debug.js\";\nimport { decryptCommand } from \"./decrypt.js\";\nimport { encryptCommand } from \"./encrypt.js\";\nimport { expandCommand } from \"./expand.js\";\nimport { printCommand } from \"./print.js\";\nimport { runCommand } from \"./run.js\";\n\n// #region -- CLI Factory -----------------------------------\n\n/**\n * Build the yargs CLI for `dotenvx-run`. Global options (env, variables,\n * cascade, vault, override, quiet) are registered on the root so every\n * subcommand inherits them.\n */\nexport function createCli(argvInput: string[]): Argv {\n  return yargs(argvInput)\n    .scriptName(\"envx\")\n    .usage(\"$0 <command> [options]\")\n    .option(\"config\", {\n      alias: \"c\",\n      type: \"string\",\n      describe:\n        \"Path to an envx config file (default: discovered from package.json `envx.config` or envx.config.{ts,js,json}).\",\n    })\n    .option(\"env\", {\n      alias: \"e\",\n      type: \"array\",\n      describe:\n        \"Env files to load. Default: [\\\".env\\\"] (or `envFiles` from config; or every .env* under --env-path when set). Auto-detects environment when omitted.\",\n    })\n    .option(\"env-path\", {\n      alias: [\"dir\", \"d\"],\n      type: \"string\",\n      describe:\n        \"Subdirectory of the workspace root holding the env files (e.g. `vault`). When set and --env is omitted, every .env* file in that directory is included.\",\n    })\n    .option(\"variables\", {\n      alias: \"v\",\n      type: \"array\",\n      describe: \"Inline variables in the form name=value (repeatable).\",\n      default: [],\n    })\n    .option(\"cascade\", {\n      type: \"string\",\n      describe:\n        \"Cascade load order: .env, .env.<cascade>, .env.local, .env.<cascade>.local\",\n    })\n    .option(\"vault\", {\n      alias: \"va\",\n      type: \"boolean\",\n      describe: \"Shortcut for `--env-path vault`.\",\n    })\n    .option(\"override\", {\n      alias: \"o\",\n      type: \"boolean\",\n      describe: \"Override existing process.env values. Conflicts with --cascade.\",\n    })\n    .option(\"quiet\", {\n      alias: \"q\",\n      type: \"boolean\",\n      describe: \"Suppress dotenv's own output.\",\n    })\n    .middleware((argv) => {\n      const configPath = argv[\"config\"] as string | undefined;\n      let loaded;\n      try {\n        loaded = loadDotenvxConfig({\n          ...(configPath ? { configPath } : {}),\n        });\n      } catch (e) {\n        log.error(`config error: ${(e as Error).message}`);\n        process.exit(1);\n      }\n      if (loaded.source) {\n        log.dim(`config: ${loaded.source} (${loaded.origin})`);\n      }\n      const cfg = loaded.config;\n      // Apply config defaults only where the CLI didn't supply a value.\n      if (argv[\"cascade\"] === undefined && cfg.cascade !== undefined) {\n        argv[\"cascade\"] = cfg.cascade;\n      }\n      if (argv[\"override\"] === undefined) {\n        argv[\"override\"] = cfg.override ?? false;\n      }\n      if (argv[\"quiet\"] === undefined) {\n        argv[\"quiet\"] = cfg.quiet ?? true;\n      }\n      if (argv[\"vault\"] === undefined) {\n        argv[\"vault\"] = false;\n      }\n      if (argv[\"env-keys-file\"] === undefined && cfg.envKeysFile !== undefined) {\n        argv[\"env-keys-file\"] = cfg.envKeysFile;\n      }\n\n      // env-path: CLI > config > --vault shortcut\n      if (argv[\"env-path\"] === undefined) {\n        if (cfg.envPath !== undefined) argv[\"env-path\"] = cfg.envPath;\n        else if (argv[\"vault\"]) argv[\"env-path\"] = \"vault\";\n      }\n\n      // env files: CLI > config > \"all .env* in env-path\" > [\".env\"]\n      const userPassedEnv = Array.isArray(argv[\"env\"]) && argv[\"env\"].length > 0;\n      let files: string[];\n      if (userPassedEnv) {\n        files = argv[\"env\"] as string[];\n      } else if (cfg.envFiles && cfg.envFiles.length > 0) {\n        files = [...cfg.envFiles];\n      } else if (typeof argv[\"env-path\"] === \"string\") {\n        // \"all files in the env-path are included\" — discover them.\n        const subdir = argv[\"env-path\"] as string;\n        const wsRoot = findWorkspaceRoot();\n        const dir = path.resolve(wsRoot, subdir);\n        const discovered = listEnvFiles(dir);\n        if (discovered.length > 0) {\n          files = discovered;\n          log.dim(\n            `env-path ${subdir}: discovered ${String(discovered.length)} file(s) — ${discovered.join(\", \")}`,\n          );\n        } else {\n          files = [\".env\"];\n          log.warn(\n            `env-path ${subdir}: no .env* files found; falling back to [\".env\"]`,\n          );\n        }\n      } else {\n        files = [\".env\"];\n      }\n\n      // When env-path is set, resolve every relative file against that\n      // directory up-front. encrypt/decrypt/expand operate on the\n      // resulting paths verbatim — no per-command envPath plumbing.\n      if (typeof argv[\"env-path\"] === \"string\") {\n        const wsRoot = findWorkspaceRoot();\n        const dir = path.resolve(wsRoot, argv[\"env-path\"] as string);\n        files = files.map((f) => (path.isAbsolute(f) ? f : path.join(dir, f)));\n      }\n      argv[\"env\"] = files;\n    })\n    .command(runCommand)\n    .command(printCommand)\n    .command(debugCommand)\n    .command(encryptCommand)\n    .command(decryptCommand)\n    .command(expandCommand)\n    .help(\"h\")\n    .alias(\"h\", \"help\")\n    .version()\n    .strictCommands()\n    .demandCommand(0)\n    .recommendCommands()\n    .epilog(\n      \"Examples:\\n\" +\n        \"  envx -- node app.js                # load .env (auto-detected) and run\\n\" +\n        \"  envx --env dev -- pnpm start       # load .env.dev\\n\" +\n        \"  envx print DATABASE_URL            # print one variable\\n\" +\n        \"  envx debug --cascade prod          # show resolved paths\\n\" +\n        \"  envx encrypt -e .env.prod          # encrypt values in .env.prod\\n\" +\n        \"  envx decrypt -e .env.prod -k FOO   # decrypt only FOO\\n\" +\n        \"  envx expand -e vault/.env.prod     # decrypt + expand to stdout\\n\" +\n        \"  envx -c ./my.config.json run -- node app.js\",\n    );\n}\n\n// #endregion -----------------------------------------------\n"],"mappings":";;;;;;AAOA,IAAa,eAA8B;CACzC,SAAS;CACT,UACE;CACF,UAAU,SAAS;EACjB,MAAM,QAAQ,gBAAgB;GAC5B,UAAU,KAAK;GACf,SAAS,KAAK;GACf,CAAC;EAEF,MAAM,UAAU,KAAK;EACrB,MAAM,YAAY,UACd,OAAO,YAAY,QAAQ,IAAI,oBAAoB,CAAC,GACpD,EAAE;EAEN,IAAI,KAAK,UAAU,KAAK,UAAU,MAAM,GAAG;EAC3C,IAAI,KAAK,cAAc,KAAK,UAAU,UAAU,GAAG;;CAEtD;;;;AChBD,IAAa,iBAAgC;CAC3C,SAAS;CACT,UACE;CACF,UAAU,UACR,MACG,OAAO,iBAAiB;EACvB,OAAO;EACP,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,OAAO;EACb,OAAO;EACP,MAAM;EACN,QAAQ;EACR,UACE;EACH,CAAC,CACD,OAAO,eAAe;EACrB,OAAO;EACP,MAAM;EACN,QAAQ;EACR,UAAU;EACX,CAAC,CACD,OAAO,UAAU;EAChB,MAAM;EACN,SAAS;EACT,UACE;EACH,CAAC,CACD,KAAK,IAAI,CACT,MAAM,KAAK,OAAO;CACvB,UAAU,SAAS;EACjB,MAAM,WAAY,KAAK,UAAmC,CAAC,OAAO;EAClE,MAAM,OAAO,KAAK;EAClB,MAAM,cAAc,KAAK;EACzB,MAAM,cAAc,KAAK;EACzB,MAAM,SAAU,KAAK,aAAqC;EAE1D,MAAM,SAAS,aAAa;GAC1B;GACA,GAAI,OAAO,EAAE,MAAM,GAAG,EAAE;GACxB,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;GACtC,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;GACvC,CAAC;EAEF,IAAI,WAAW;EAEf,KAAK,MAAM,aAAa,OAAO,eAAe;GAC5C,IAAI,UAAU,OAAO;IACnB,WAAW;IACX,IAAI,MAAM,GAAG,UAAU,YAAY,IAAI,UAAU,MAAM,UAAU;IACjE,IAAI,UAAU,MAAM,MAAM,IAAI,IAAI,UAAU,MAAM,KAAK;IACvD;;GAEF,IAAI,QACF,QAAQ,OAAO,MAAM,UAAU,OAAO;;EAI1C,IAAI,CAAC,QAAQ;GACX,MAAM,EAAE,YAAY,eAAe,OAAO,cAAc;GACxD,KAAK,MAAM,KAAK,SAAS,IAAI,QAAQ,aAAa,IAAI;GACtD,IACE,QAAQ,WAAW,KACnB,OAAO,mBAAmB,SAAS,KACnC,CAAC,UAED,IAAI,IAAI,eAAe,OAAO,mBAAmB,KAAK,KAAK,CAAC,GAAG;;EAInE,IAAI,UAAU,QAAQ,WAAW;;CAEpC;;;;;;;;;ACtED,IAAa,iBAAgC;CAC3C,SAAS;CACT,UACE;CACF,UAAU,UACR,MACG,OAAO,iBAAiB;EACvB,OAAO;EACP,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,OAAO;EACb,OAAO;EACP,MAAM;EACN,QAAQ;EACR,UACE;EACH,CAAC,CACD,OAAO,eAAe;EACrB,OAAO;EACP,MAAM;EACN,QAAQ;EACR,UAAU;EACX,CAAC,CACD,OAAO,UAAU;EAChB,MAAM;EACN,SAAS;EACT,UACE;EACH,CAAC,CACD,KAAK,IAAI,CACT,MAAM,KAAK,OAAO;CACvB,UAAU,SAAS;EACjB,MAAM,WAAY,KAAK,UAAmC,CAAC,OAAO;EAClE,MAAM,OAAO,KAAK;EAClB,MAAM,cAAc,KAAK;EACzB,MAAM,cAAc,KAAK;EACzB,MAAM,SAAU,KAAK,aAAqC;EAE1D,MAAM,SAAS,aAAa;GAC1B;GACA,GAAI,OAAO,EAAE,MAAM,GAAG,EAAE;GACxB,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;GACtC,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;GACvC,CAAC;EAEF,IAAI,WAAW;EAEf,KAAK,MAAM,aAAa,OAAO,eAAe;GAC5C,IAAI,UAAU,OAAO;IACnB,WAAW;IACX,IAAI,MAAM,GAAG,UAAU,YAAY,IAAI,UAAU,MAAM,UAAU;IACjE,IAAI,UAAU,MAAM,MAAM,IAAI,IAAI,UAAU,MAAM,KAAK;IACvD;;GAGF,IAAI,QAAQ;IACV,QAAQ,OAAO,MAAM,UAAU,OAAO;IACtC;;GAGF,IAAI,UAAU,iBACZ,IAAI,QACF,2BAA2B,UAAU,kBAAkB,YAAY,GACpE;;EAIL,IAAI,CAAC,QAAQ;GACX,MAAM,EAAE,YAAY,eAAe,OAAO,cAAc;GACxD,KAAK,MAAM,KAAK,SAAS,IAAI,QAAQ,aAAa,IAAI;GACtD,IACE,QAAQ,WAAW,KACnB,OAAO,mBAAmB,SAAS,KACnC,CAAC,UAED,IAAI,IAAI,eAAe,OAAO,mBAAmB,KAAK,KAAK,CAAC,GAAG;;EAInE,IAAI,UAAU,QAAQ,WAAW;;CAEpC;;;;;;;;;AC5ED,IAAa,gBAA+B;CAC1C,SAAS;CACT,UACE;CACF,UAAU,UACR,MACG,OAAO,UAAU;EAChB,MAAM;EACN,UAAU;EACX,CAAC,CACD,OAAO,iBAAiB;EACvB,OAAO;EACP,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,cAAc;EACpB,MAAM;EACN,SAAS;GAAC;GAAS;GAAS;GAAQ;EACpC,SAAS;EACT,UACE;EACH,CAAC,CACD,KAAK,IAAI,CACT,MAAM,KAAK,OAAO;CACvB,UAAU,SAAS;EACjB,MAAM,WAAY,KAAK,UAAmC,CAAC,OAAO;EAClE,IAAI,SAAS,WAAW,GAAG;GACzB,IAAI,MACF,uDAAuD,OAAO,SAAS,OAAO,CAAC,GAChF;GACD,QAAQ,KAAK,EAAE;;EAEjB,MAAM,UAAU,SAAS;EACzB,MAAM,WAAW,KAAK,QAAQ,QAAQ;EACtC,IAAI,CAAC,GAAG,WAAW,SAAS,EAAE;GAC5B,IAAI,MAAM,uBAAuB,UAAU;GAC3C,QAAQ,KAAK,EAAE;;EAGjB,IAAI,SAAS,GAAG,aAAa,UAAU,OAAO;EAK9C,IAJqB,SAAS,OAAO,CAAC,MACnC,MAAM,EAAE,SAAS,QAAQ,YAAY,EAAE,MAAM,CAG5C,EAAc;GAChB,MAAM,cAAc,KAAK;GAKzB,MAAM,YAJM,aAAa;IACvB,UAAU,CAAC,QAAQ;IACnB,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CACiB,CAAI,cAAc;GACpC,IAAI,WAAW,OAAO;IACpB,IAAI,MAAM,GAAG,QAAQ,IAAI,UAAU,MAAM,UAAU;IACnD,IAAI,UAAU,MAAM,MAAM,IAAI,IAAI,UAAU,MAAM,KAAK;IACvD,QAAQ,KAAK,EAAE;;GAEjB,SAAS,UAAW;;EAGtB,MAAM,YAAY,KAAK;EACvB,MAAM,SAAS,aAAa,QAAQ,EAAE,WAAW,CAAC;EAElD,KAAK,MAAM,KAAK,OAAO,YACrB,IAAI,KAAK,wBAAwB,IAAI;EAEvC,KAAK,MAAM,SAAS,OAAO,QACzB,IAAI,KAAK,UAAU,MAAM,KAAK,MAAM,GAAG;EAGzC,MAAM,SAAS,KAAK;EACpB,IAAI,QAAQ;GACV,GAAG,cAAc,KAAK,QAAQ,OAAO,EAAE,OAAO,OAAO;GACrD,IAAI,QAAQ,YAAY,QAAQ,KAAK,SAAS;SACzC;GACL,QAAQ,OAAO,MAAM,OAAO,OAAO;GACnC,IAAI,CAAC,OAAO,OAAO,SAAS,KAAK,EAAE,QAAQ,OAAO,MAAM,KAAK;;;CAGlE;;;AC9FD,IAAa,eAA8B;CACzC,SAAS;CACT,UAAU;CACV,UAAU,UACR,MAAM,WAAW,YAAY;EAC3B,UAAU;EACV,MAAM;EACN,cAAc;EACf,CAAC;CACJ,UAAU,SAAS;EACjB,QAAQ;GACN,UAAU,KAAK;GACf,WAAW,KAAK;GAChB,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,SAAS,KAAK;GACd,UAAU,KAAK;GACf,OAAO,KAAK;GACb,CAAC;EAEF,MAAM,OAAO,KAAK;EAClB,MAAM,QAAQ,QAAQ,IAAI;EAC1B,QAAQ,OAAO,MAAM,SAAS,OAAO,GAAG,MAAM,MAAM,KAAK;;CAE5D;;;ACtBD,IAAa,aAA4B;CACvC,SAAS;CACT,SAAS,CAAC,KAAK;CACf,UACE;CACF,UAAU,UACR,MAAM,WAAW,WAAW;EAC1B,UAAU;EACV,MAAM;EACN,OAAO;EACR,CAAC;CACJ,UAAU,SAAS;EACjB,MAAM,WAAY,KAAK,cAAuC,EAAE,EAAE,KAAK,IAAI;EAE3E,QAAQ;GACN,UAAU,KAAK;GACf,WAAW,KAAK;GAChB,SAAS,KAAK;GACd,OAAO,KAAK;GACZ,SAAS,KAAK;GACd,UAAU,KAAK;GACf,OAAO,KAAK;GACb,CAAC;EAEF,IAAI,CAAC,SAAS;EAEd,IAAI,KAAK,YAAY,UAAU;EAC/B,IAAI;GACF,SAAS,SAAS,EAAE,OAAO,WAAW,CAAC;GACvC,IAAI,QAAQ,sBAAsB,UAAU;WACrC,OAAO;GACd,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAClE,IAAI,MAAM,mBAAmB,MAAM;GACnC,QAAQ,KAAK,EAAE;;;CAGpB;;;;;;;;AClBD,SAAgB,UAAU,WAA2B;CACnD,OAAO,MAAM,UAAU,CACpB,WAAW,OAAO,CAClB,MAAM,yBAAyB,CAC/B,OAAO,UAAU;EAChB,OAAO;EACP,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,OAAO;EACb,OAAO;EACP,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,YAAY;EAClB,OAAO,CAAC,OAAO,IAAI;EACnB,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,aAAa;EACnB,OAAO;EACP,MAAM;EACN,UAAU;EACV,SAAS,EAAE;EACZ,CAAC,CACD,OAAO,WAAW;EACjB,MAAM;EACN,UACE;EACH,CAAC,CACD,OAAO,SAAS;EACf,OAAO;EACP,MAAM;EACN,UAAU;EACX,CAAC,CACD,OAAO,YAAY;EAClB,OAAO;EACP,MAAM;EACN,UAAU;EACX,CAAC,CACD,OAAO,SAAS;EACf,OAAO;EACP,MAAM;EACN,UAAU;EACX,CAAC,CACD,YAAY,SAAS;EACpB,MAAM,aAAa,KAAK;EACxB,IAAI;EACJ,IAAI;GACF,SAAS,kBAAkB,EACzB,GAAI,aAAa,EAAE,YAAY,GAAG,EAAE,EACrC,CAAC;WACK,GAAG;GACV,IAAI,MAAM,iBAAkB,EAAY,UAAU;GAClD,QAAQ,KAAK,EAAE;;EAEjB,IAAI,OAAO,QACT,IAAI,IAAI,WAAW,OAAO,OAAO,IAAI,OAAO,OAAO,GAAG;EAExD,MAAM,MAAM,OAAO;EAEnB,IAAI,KAAK,eAAe,KAAA,KAAa,IAAI,YAAY,KAAA,GACnD,KAAK,aAAa,IAAI;EAExB,IAAI,KAAK,gBAAgB,KAAA,GACvB,KAAK,cAAc,IAAI,YAAY;EAErC,IAAI,KAAK,aAAa,KAAA,GACpB,KAAK,WAAW,IAAI,SAAS;EAE/B,IAAI,KAAK,aAAa,KAAA,GACpB,KAAK,WAAW;EAElB,IAAI,KAAK,qBAAqB,KAAA,KAAa,IAAI,gBAAgB,KAAA,GAC7D,KAAK,mBAAmB,IAAI;EAI9B,IAAI,KAAK,gBAAgB,KAAA;OACnB,IAAI,YAAY,KAAA,GAAW,KAAK,cAAc,IAAI;QACjD,IAAI,KAAK,UAAU,KAAK,cAAc;;EAI7C,MAAM,gBAAgB,MAAM,QAAQ,KAAK,OAAO,IAAI,KAAK,OAAO,SAAS;EACzE,IAAI;EACJ,IAAI,eACF,QAAQ,KAAK;OACR,IAAI,IAAI,YAAY,IAAI,SAAS,SAAS,GAC/C,QAAQ,CAAC,GAAG,IAAI,SAAS;OACpB,IAAI,OAAO,KAAK,gBAAgB,UAAU;GAE/C,MAAM,SAAS,KAAK;GACpB,MAAM,SAAS,mBAAmB;GAElC,MAAM,aAAa,aADP,KAAK,QAAQ,QAAQ,OACD,CAAI;GACpC,IAAI,WAAW,SAAS,GAAG;IACzB,QAAQ;IACR,IAAI,IACF,YAAY,OAAO,eAAe,OAAO,WAAW,OAAO,CAAC,aAAa,WAAW,KAAK,KAAK,GAC/F;UACI;IACL,QAAQ,CAAC,OAAO;IAChB,IAAI,KACF,YAAY,OAAO,kDACpB;;SAGH,QAAQ,CAAC,OAAO;EAMlB,IAAI,OAAO,KAAK,gBAAgB,UAAU;GACxC,MAAM,SAAS,mBAAmB;GAClC,MAAM,MAAM,KAAK,QAAQ,QAAQ,KAAK,YAAsB;GAC5D,QAAQ,MAAM,KAAK,MAAO,KAAK,WAAW,EAAE,GAAG,IAAI,KAAK,KAAK,KAAK,EAAE,CAAE;;EAExE,KAAK,SAAS;GACd,CACD,QAAQ,WAAW,CACnB,QAAQ,aAAa,CACrB,QAAQ,aAAa,CACrB,QAAQ,eAAe,CACvB,QAAQ,eAAe,CACvB,QAAQ,cAAc,CACtB,KAAK,IAAI,CACT,MAAM,KAAK,OAAO,CAClB,SAAS,CACT,gBAAgB,CAChB,cAAc,EAAE,CAChB,mBAAmB,CACnB,OACC,kfASD"}