@superblocksteam/vite-plugin-file-sync 2.0.149 → 2.0.150-next.0

package/dist/ai-service/app-interface/vulnerability-gate.js

@@ -0,0 +1,543 @@
+import { metrics } from "@opentelemetry/api";
+import semver from "semver";
+import { getLogger } from "../../util/logger.js";
+import { NpmInstallBlocked } from "../types.js";
+const EMPTY_REMEDIATION = { substitutions: [] };
+function emitGateDecision(decision, mode) {
+    metrics
+        .getMeter("superblocks.clark.pkg_security")
+        .createCounter("superblocks.clark.pkg_security.gate_decision", {
+        description: "Clark package security gate decisions",
+    })
+        .add(1, {
+        decision,
+        mode: mode === "specific" ? "agent_install" : "declared_deps",
+    });
+}
+export function applyPackageSubstitutions(packages, substitutions) {
+    if (substitutions.length === 0)
+        return packages;
+    const byName = new Map(substitutions.map((entry) => [entry.name, entry.toVersion]));
+    return packages.map((pkg) => {
+        const toVersion = byName.get(pkg.name);
+        return toVersion !== undefined ? { ...pkg, version: toVersion } : pkg;
+    });
+}
+function suggestedSatisfiesRequested(suggested, requestedVersion) {
+    if (requestedVersion === undefined ||
+        requestedVersion === "" ||
+        requestedVersion === "latest" ||
+        requestedVersion === "*") {
+        return true;
+    }
+    try {
+        return semver.satisfies(suggested, requestedVersion, {
+            includePrerelease: true,
+        });
+    }
+    catch {
+        return false;
+    }
+}
+/** Mode 1: must satisfy the request. Mode 2: same major is enough. */
+function swapAllowed(args) {
+    const { declared, from, mode, suggested } = args;
+    if (suggestedSatisfiesRequested(suggested, declared))
+        return true;
+    return mode === "all" && semver.major(suggested) === semver.major(from);
+}
+/**
+ * Every vulnerability advisory on the package, because triage answers one
+ * advisory id at a time: collapsing to the first would let a verdict on that
+ * one clear the CVEs nobody evaluated. Falls back to a single generic entry so
+ * a result with no advisory row still produces a finding.
+ */
+function cveAdvisories(result) {
+    const vulnerabilities = result.advisories.filter((entry) => entry.kind === "vulnerability");
+    if (vulnerabilities.length === 0)
+        return [{ advisoryId: "cve" }];
+    return vulnerabilities.map((advisory) => ({
+        advisoryId: advisory.advisoryId,
+        ...(advisory.details ? { details: advisory.details } : {}),
+        ...(advisory.severity ? { severity: advisory.severity } : {}),
+        ...(advisory.summary ? { summary: advisory.summary } : {}),
+    }));
+}
+/** Advisory-level findings for packages whose swap failed post-substitution. */
+function verifyFailureFindings(args) {
+    const { results, substitutions } = args;
+    return substitutions.flatMap((entry) => {
+        const result = results.find((candidate) => candidate.name === entry.name &&
+            candidate.version === entry.fromVersion);
+        const advisories = result ? cveAdvisories(result) : [{ advisoryId: "cve" }];
+        return advisories.map((advisory) => ({
+            name: entry.name,
+            suggestedVersion: entry.toVersion,
+            version: entry.fromVersion,
+            ...advisory,
+        }));
+    });
+}
+function throwMalwareBlock(args) {
+    const { name, result, version } = args;
+    const advisory = result?.advisories.find((entry) => entry.kind === "malware");
+    const packageSpec = `${name}@${version}`;
+    throw new NpmInstallBlocked({
+        findings: [
+            {
+                advisoryId: advisory?.advisoryId ?? "malware",
+                kind: "malware",
+                package: packageSpec,
+                ...(advisory?.severity ? { severity: advisory.severity } : {}),
+            },
+        ],
+        packages: [packageSpec],
+        reason: "vulnerable_package",
+    });
+}
+function throwCveBlock(blocked) {
+    // One candidate per advisory, so a multi-CVE package repeats in `blocked`.
+    const packages = [
+        ...new Set(blocked.map((pkg) => `${pkg.name}@${pkg.version}`)),
+    ];
+    throw new NpmInstallBlocked({
+        findings: blocked.map((finding) => ({
+            advisoryId: finding.advisoryId,
+            ...(finding.details ? { details: finding.details } : {}),
+            kind: "cve",
+            package: `${finding.name}@${finding.version}`,
+            ...(finding.severity ? { severity: finding.severity } : {}),
+            ...(finding.suggestedVersion
+                ? { suggestedVersion: finding.suggestedVersion }
+                : {}),
+            ...(finding.summary ? { summary: finding.summary } : {}),
+        })),
+        packages,
+        reason: "vulnerable_package",
+    });
+}
+function indexUnavailableFindings(packages) {
+    return packages.map((pkg) => ({
+        advisoryId: "index_unavailable",
+        kind: "index_unavailable",
+        package: pkg,
+    }));
+}
+function throwIndexUnavailable(args) {
+    const { capabilities, error, message, packages } = args;
+    if (capabilities && message !== undefined && error !== undefined) {
+        capabilities.onIndexUnavailable({ error, message });
+    }
+    throw new NpmInstallBlocked({
+        findings: indexUnavailableFindings(packages),
+        packages,
+        reason: "vulnerable_package",
+    });
+}
+function assertNoMalware(results) {
+    const malware = results.find((result) => result.hasMalware === true);
+    if (malware) {
+        throwMalwareBlock({
+            name: malware.name,
+            result: malware,
+            version: malware.version,
+        });
+    }
+}
+async function remediateTopLevelCves(args) {
+    const { abortSignal, capabilities, cveUserOverride, mode, requestedByName, results, topLevel, } = args;
+    const resultByKey = new Map(results.map((result) => [`${result.name}@${result.version}`, result]));
+    const blocked = [];
+    const substitutions = [];
+    for (const top of topLevel) {
+        const result = resultByKey.get(`${top.name}@${top.version}`);
+        if (!result || result.remediatableStatus === "pass")
+            continue;
+        const advisories = cveAdvisories(result);
+        const blockEveryAdvisory = (suggestedVersion) => {
+            for (const advisory of advisories) {
+                blocked.push({
+                    name: top.name,
+                    version: top.version,
+                    ...(suggestedVersion ? { suggestedVersion } : {}),
+                    ...advisory,
+                });
+            }
+        };
+        if (result.remediatableStatus === "block") {
+            blockEveryAdvisory();
+            continue;
+        }
+        const suggested = result.suggestedVersion;
+        if (typeof suggested !== "string" ||
+            suggested.length === 0 ||
+            !semver.valid(suggested)) {
+            // No version to swap to means no in-place remediation, so treat it like
+            // `block` rather than installing the vulnerable pin: "remediatable" is a
+            // claim about a fix existing, not evidence that this one is safe.
+            blockEveryAdvisory();
+            continue;
+        }
+        if (!swapAllowed({
+            declared: requestedByName.get(top.name),
+            from: top.version,
+            mode,
+            suggested,
+        })) {
+            blockEveryAdvisory(suggested);
+            continue;
+        }
+        // A "fix" that pins the same vulnerable version is not a remediation —
+        // treat it as no safe in-place upgrade rather than silently installing.
+        if (suggested === top.version) {
+            blockEveryAdvisory(suggested);
+            continue;
+        }
+        // Mode 2 skips dry-run; swapAllowed already gated the major.
+        if (mode === "specific") {
+            const verify = await capabilities.resolvePackageSpecs({
+                abortSignal,
+                specs: [`${top.name}@${suggested}`],
+            });
+            if (!verify.resolves) {
+                blockEveryAdvisory(suggested);
+                continue;
+            }
+        }
+        try {
+            const suggestedResults = await capabilities.lookupPackages([
+                { name: top.name, version: suggested },
+            ]);
+            const suggestedResult = suggestedResults[0];
+            if (suggestedResult?.hasMalware === true) {
+                throwMalwareBlock({
+                    name: top.name,
+                    result: suggestedResult,
+                    version: suggested,
+                });
+            }
+            if (suggestedResult && suggestedResult.remediatableStatus !== "pass") {
+                blockEveryAdvisory(suggested);
+                continue;
+            }
+        }
+        catch (error) {
+            if (error instanceof NpmInstallBlocked)
+                throw error;
+            throwIndexUnavailable({
+                capabilities,
+                error,
+                message: "[pkg-security] vulnerability index unavailable validating suggested pin; failing closed for malware",
+                packages: [`${top.name}@${top.version}`],
+            });
+        }
+        getLogger().info("[pkg-security] cve silent swap", {
+            from: `${top.name}@${top.version}`,
+            to: suggested,
+        });
+        substitutions.push({
+            fromVersion: top.version,
+            name: top.name,
+            reason: "cve_swap",
+            toVersion: suggested,
+        });
+    }
+    const userOverridePackages = [];
+    const unapproved = blocked.filter((finding) => {
+        if (cveUserOverride?.packages.includes(finding.name) &&
+            cveUserOverride.reason.trim().length > 0) {
+            if (!userOverridePackages.includes(finding.name)) {
+                userOverridePackages.push(finding.name);
+            }
+            return false;
+        }
+        return true;
+    });
+    if (unapproved.length > 0 && mode === "specific") {
+        throwCveBlock(unapproved);
+    }
+    return {
+        substitutions,
+        userOverridePackages,
+    };
+}
+async function applyQuarantineHoldbacks(args) {
+    const { abortSignal, capabilities, cveSwappedNames, requestedByName, topLevel, } = args;
+    const pickHoldback = capabilities.pickQuarantineHoldback;
+    if (!pickHoldback)
+        return [];
+    const substitutions = [];
+    for (const top of topLevel) {
+        if (cveSwappedNames.has(top.name))
+            continue;
+        if (top.name.startsWith("@superblocksteam/"))
+            continue;
+        let holdback;
+        try {
+            holdback = await pickHoldback(top.name, top.version);
+        }
+        catch {
+            continue;
+        }
+        if (holdback === undefined ||
+            holdback === top.version ||
+            !semver.valid(holdback) ||
+            semver.gt(holdback, top.version) ||
+            !suggestedSatisfiesRequested(holdback, requestedByName.get(top.name))) {
+            continue;
+        }
+        const verify = await capabilities.resolvePackageSpecs({
+            abortSignal,
+            specs: [`${top.name}@${holdback}`],
+        });
+        if (!verify.resolves)
+            continue;
+        try {
+            const holdResults = await capabilities.lookupPackages([
+                { name: top.name, version: holdback },
+            ]);
+            const holdResult = holdResults[0];
+            if (holdResult?.hasMalware === true) {
+                throwMalwareBlock({
+                    name: top.name,
+                    result: holdResult,
+                    version: holdback,
+                });
+            }
+            if (holdResult && holdResult.remediatableStatus !== "pass")
+                continue;
+        }
+        catch (error) {
+            if (error instanceof NpmInstallBlocked)
+                throw error;
+            continue;
+        }
+        getLogger().info("[pkg-security] quarantine holdback", {
+            from: `${top.name}@${top.version}`,
+            to: holdback,
+        });
+        substitutions.push({
+            fromVersion: top.version,
+            name: top.name,
+            reason: "quarantine",
+            toVersion: holdback,
+        });
+    }
+    return substitutions;
+}
+/** Re-resolve after swaps; malware still throws. `resolves: false` is caller's call. */
+async function verifySubstitutedTree(args) {
+    const { abortSignal, capabilities, packages, substitutions } = args;
+    const substituted = applyPackageSubstitutions(packages, substitutions);
+    const resolved = await capabilities.resolveInstallTree({
+        abortSignal,
+        mode: "specific",
+        packages: substituted,
+    });
+    if (!resolved.resolves)
+        return { resolves: false };
+    if (resolved.tree.length === 0)
+        return { resolves: true };
+    try {
+        assertNoMalware(await capabilities.lookupPackages(resolved.tree));
+    }
+    catch (error) {
+        if (error instanceof NpmInstallBlocked)
+            throw error;
+        throwIndexUnavailable({
+            capabilities,
+            error,
+            message: "[pkg-security] vulnerability index unavailable after substitution; failing closed for malware",
+            packages: substituted.map((pkg) => pkg.version ? `${pkg.name}@${pkg.version}` : pkg.name),
+        });
+    }
+    return { resolves: true };
+}
+/** Mode 2: drop swaps whose new pin cannot be malware-scanned; keep the declared version. */
+async function keepVerifiedSubstitutions(args) {
+    const { abortSignal, capabilities, substitutions } = args;
+    const kept = [];
+    for (const entry of substitutions) {
+        const spec = `${entry.name}@${entry.toVersion}`;
+        const keepDeclared = (reason) => {
+            getLogger().warn("[pkg-security][mode2] keeping declared version; swap unverified", { reason, spec });
+        };
+        try {
+            const resolved = await capabilities.resolvePackageSpecs({
+                abortSignal,
+                specs: [spec],
+            });
+            if (!resolved.resolves) {
+                keepDeclared("substituted tree did not resolve");
+                continue;
+            }
+            const malware = (resolved.tree.length > 0
+                ? await capabilities.lookupPackages(resolved.tree)
+                : []).find((result) => result.hasMalware === true);
+            if (malware) {
+                keepDeclared(`malware in substituted tree: ${malware.name}@${malware.version}`);
+                continue;
+            }
+        }
+        catch (error) {
+            // Do not keep swapping after cancel; the caller still applies whatever
+            // this returns, so a swallowed abort would rewrite package.json.
+            if (abortSignal?.aborted ||
+                (error instanceof Error && error.name === "AbortError")) {
+                throw error;
+            }
+            // The npm/registry error text can carry credentials, so it stays out of
+            // the log line; the failing probe leaves its own npm debug log behind.
+            keepDeclared("substituted tree probe failed");
+            continue;
+        }
+        kept.push(entry);
+    }
+    return kept;
+}
+async function evaluateVulnerabilityGate(args) {
+    const { abortSignal, capabilities, cveUserOverride, mode, packages } = args;
+    const resolved = await capabilities.resolveInstallTree({
+        abortSignal,
+        mode,
+        packages,
+    });
+    if (resolved.tree.length === 0) {
+        // Successful empty = already satisfied. Failed empty = probe told us
+        // nothing; mode 1 fails closed so CVE triage cannot clear an unscanned
+        // install. Mode 2 keeps the lockfile as source of truth.
+        if (!resolved.resolves && mode === "specific" && packages?.length) {
+            throwIndexUnavailable({
+                packages: packages.map((pkg) => pkg.version ? `${pkg.name}@${pkg.version}` : pkg.name),
+            });
+        }
+        emitGateDecision("pass", mode);
+        return EMPTY_REMEDIATION;
+    }
+    let results;
+    try {
+        results = await capabilities.lookupPackages(resolved.tree);
+    }
+    catch (error) {
+        throwIndexUnavailable({
+            capabilities,
+            error,
+            message: "[pkg-security] vulnerability index unavailable; failing closed for malware",
+            packages: resolved.topLevel.map((pkg) => pkg.version ? `${pkg.name}@${pkg.version}` : pkg.name),
+        });
+    }
+    assertNoMalware(results);
+    // A failed probe can disagree with the real install. Exact requested pins
+    // are still CVE-checked; anything we could not pin (ranges, tags, bare
+    // names) fails closed — a lockfile-only tree is not enough to vouch for
+    // the install about to run.
+    if (!resolved.resolves) {
+        if (mode !== "specific") {
+            emitGateDecision("pass", mode);
+            return EMPTY_REMEDIATION;
+        }
+        const unscanned = (packages ?? []).filter((pkg) => !resolved.topLevel.some((top) => top.name === pkg.name));
+        if (unscanned.length > 0 || resolved.topLevel.length === 0) {
+            throwIndexUnavailable({
+                packages: (unscanned.length > 0 ? unscanned : (packages ?? [])).map((pkg) => (pkg.version ? `${pkg.name}@${pkg.version}` : pkg.name)),
+            });
+        }
+    }
+    const requestedByName = new Map((packages ?? []).map((pkg) => [pkg.name, pkg.version]));
+    const { substitutions: cveSwaps, userOverridePackages } = await remediateTopLevelCves({
+        abortSignal,
+        capabilities,
+        cveUserOverride,
+        mode,
+        requestedByName,
+        results,
+        topLevel: resolved.topLevel,
+    });
+    // Quarantine is Mode 1 only — Mode 2 must not silently roll declared deps back.
+    const quarantineSwaps = mode === "specific"
+        ? await applyQuarantineHoldbacks({
+            abortSignal,
+            capabilities,
+            cveSwappedNames: new Set(cveSwaps.map((entry) => entry.name)),
+            requestedByName,
+            topLevel: resolved.topLevel,
+        })
+        : [];
+    let substitutions = mode === "specific"
+        ? [...cveSwaps, ...quarantineSwaps]
+        : await keepVerifiedSubstitutions({
+            abortSignal,
+            capabilities,
+            substitutions: cveSwaps,
+        });
+    // Mode 1 verifies the swaps jointly; Mode 2 verified each pin on its own
+    // above, because its request is package.json rather than an argv of specs.
+    if (substitutions.length > 0 && mode === "specific") {
+        const verified = await verifySubstitutedTree({
+            abortSignal,
+            capabilities,
+            packages: packages ?? [],
+            substitutions,
+        });
+        if (!verified.resolves) {
+            // Quarantine is fail-open elsewhere; a joint peer conflict must not
+            // invent a CVE block for a clean holdback. Retry without quarantine,
+            // and only CVE-block real cve_swap entries.
+            const cveOnly = substitutions.filter((entry) => entry.reason === "cve_swap");
+            if (cveOnly.length === 0) {
+                substitutions = [];
+            }
+            else if (cveOnly.length < substitutions.length) {
+                const retry = await verifySubstitutedTree({
+                    abortSignal,
+                    capabilities,
+                    packages: packages ?? [],
+                    substitutions: cveOnly,
+                });
+                if (retry.resolves) {
+                    substitutions = cveOnly;
+                }
+                else {
+                    throwCveBlock(verifyFailureFindings({ results, substitutions: cveOnly }));
+                }
+            }
+            else {
+                throwCveBlock(verifyFailureFindings({ results, substitutions: cveOnly }));
+            }
+        }
+    }
+    const decisions = new Set();
+    if (substitutions.some((item) => item.reason === "cve_swap")) {
+        decisions.add("swapped_cve");
+    }
+    if (substitutions.some((item) => item.reason === "quarantine")) {
+        decisions.add("quarantined");
+    }
+    if (userOverridePackages.length > 0)
+        decisions.add("user_override");
+    if (decisions.size === 0) {
+        emitGateDecision("pass", mode);
+    }
+    else {
+        for (const decision of decisions)
+            emitGateDecision(decision, mode);
+    }
+    return { substitutions, userOverridePackages };
+}
+export async function runVulnerabilityGate(args) {
+    try {
+        return await evaluateVulnerabilityGate(args);
+    }
+    catch (error) {
+        if (error instanceof NpmInstallBlocked) {
+            const findings = error.findings?.filter((finding) => finding.advisoryId !== "index_unavailable");
+            if (findings?.length) {
+                emitGateDecision(findings.some((finding) => finding.kind === "malware")
+                    ? "blocked_malware"
+                    : "blocked_cve", args.mode);
+            }
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=vulnerability-gate.js.map

package/dist/ai-service/app-interface/vulnerability-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vulnerability-gate.js","sourceRoot":"","sources":["../../../src/ai-service/app-interface/vulnerability-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAiC,MAAM,aAAa,CAAC;AAiF/E,MAAM,iBAAiB,GAA6B,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AAU1E,SAAS,gBAAgB,CACvB,QAAsB,EACtB,IAAwB;IAExB,OAAO;SACJ,QAAQ,CAAC,gCAAgC,CAAC;SAC1C,aAAa,CAAC,8CAA8C,EAAE;QAC7D,WAAW,EAAE,uCAAuC;KACrD,CAAC;SACD,GAAG,CAAC,CAAC,EAAE;QACN,QAAQ;QACR,IAAI,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe;KAC9D,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,yBAAyB,CAEvC,QAAa,EAAE,aAA2C;IAC1D,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAC5D,CAAC;IACF,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACxE,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAClC,SAAiB,EACjB,gBAAoC;IAEpC,IACE,gBAAgB,KAAK,SAAS;QAC9B,gBAAgB,KAAK,EAAE;QACvB,gBAAgB,KAAK,QAAQ;QAC7B,gBAAgB,KAAK,GAAG,EACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,EAAE,gBAAgB,EAAE;YACnD,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,IAKpB;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,2BAA2B,CAAC,SAAS,EAAE,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,OAAO,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC;AASD;;;;;GAKG;AACH,SAAS,aAAa,CAAC,MAA2B;IAChD,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAC9C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,CAC1C,CAAC;IACF,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACjE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3D,CAAC,CAAC,CAAC;AACN,CAAC;AAED,gFAAgF;AAChF,SAAS,qBAAqB,CAAC,IAG9B;IACC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACxC,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAC7B,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,WAAW,CAC1C,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACnC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,gBAAgB,EAAE,KAAK,CAAC,SAAS;YACjC,OAAO,EAAE,KAAK,CAAC,WAAW;YAC1B,GAAG,QAAQ;SACZ,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAI1B;IACC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACvC,MAAM,QAAQ,GAAG,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;IACzC,MAAM,IAAI,iBAAiB,CAAC;QAC1B,QAAQ,EAAE;YACR;gBACE,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,SAAS;gBAC7C,IAAI,EAAE,SAAS;gBACf,OAAO,EAAE,WAAW;gBACpB,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC/D;SACF;QACD,QAAQ,EAAE,CAAC,WAAW,CAAC;QACvB,MAAM,EAAE,oBAAoB;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,OAA4B;IACjD,2EAA2E;IAC3E,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;KAC/D,CAAC;IACF,MAAM,IAAI,iBAAiB,CAAC;QAC1B,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAClC,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,IAAI,EAAE,KAAK;YACX,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE;YAC7C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,OAAO,CAAC,gBAAgB;gBAC1B,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE;gBAChD,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;QACH,QAAQ;QACR,MAAM,EAAE,oBAAoB;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAC/B,QAAkB;IAElB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC5B,UAAU,EAAE,mBAAmB;QAC/B,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,GAAG;KACb,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,qBAAqB,CAAC,IAK9B;IACC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IACxD,IAAI,YAAY,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACjE,YAAY,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,IAAI,iBAAiB,CAAC;QAC1B,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,CAAC;QAC5C,QAAQ;QACR,MAAM,EAAE,oBAAoB;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,OAA8B;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;IACrE,IAAI,OAAO,EAAE,CAAC;QACZ,iBAAiB,CAAC;YAChB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,IAYpC;IAIC,MAAM,EACJ,WAAW,EACX,YAAY,EACZ,eAAe,EACf,IAAI,EACJ,eAAe,EACf,OAAO,EACP,QAAQ,GACT,GAAG,IAAI,CAAC;IACT,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,CACtE,CAAC;IACF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,aAAa,GAAiC,EAAE,CAAC;IAEvD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,kBAAkB,KAAK,MAAM;YAAE,SAAS;QAE9D,MAAM,UAAU,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,kBAAkB,GAAG,CAAC,gBAAyB,EAAQ,EAAE;YAC7D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;gBAClC,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,GAAG,QAAQ;iBACZ,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QACF,IAAI,MAAM,CAAC,kBAAkB,KAAK,OAAO,EAAE,CAAC;YAC1C,kBAAkB,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,gBAAgB,CAAC;QAC1C,IACE,OAAO,SAAS,KAAK,QAAQ;YAC7B,SAAS,CAAC,MAAM,KAAK,CAAC;YACtB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,EACxB,CAAC;YACD,wEAAwE;YACxE,yEAAyE;YACzE,kEAAkE;YAClE,kBAAkB,EAAE,CAAC;YACrB,SAAS;QACX,CAAC;QACD,IACE,CAAC,WAAW,CAAC;YACX,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YACvC,IAAI,EAAE,GAAG,CAAC,OAAO;YACjB,IAAI;YACJ,SAAS;SACV,CAAC,EACF,CAAC;YACD,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QACD,uEAAuE;QACvE,wEAAwE;QACxE,IAAI,SAAS,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;YAC9B,kBAAkB,CAAC,SAAS,CAAC,CAAC;YAC9B,SAAS;QACX,CAAC;QAED,6DAA6D;QAC7D,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC;gBACpD,WAAW;gBACX,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC;gBACzD,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE;aACvC,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,eAAe,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;gBACzC,iBAAiB,CAAC;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,eAAe;oBACvB,OAAO,EAAE,SAAS;iBACnB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,eAAe,IAAI,eAAe,CAAC,kBAAkB,KAAK,MAAM,EAAE,CAAC;gBACrE,kBAAkB,CAAC,SAAS,CAAC,CAAC;gBAC9B,SAAS;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,qBAAqB,CAAC;gBACpB,YAAY;gBACZ,KAAK;gBACL,OAAO,EACL,qGAAqG;gBACvG,QAAQ,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;aACzC,CAAC,CAAC;QACL,CAAC;QAED,SAAS,EAAE,CAAC,IAAI,CAAC,gCAAgC,EAAE;YACjD,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE;YAClC,EAAE,EAAE,SAAS;SACd,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC;YACjB,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,SAAS;SACrB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,oBAAoB,GAAa,EAAE,CAAC;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QAC5C,IACE,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YAChD,eAAe,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EACxC,CAAC;YACD,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjD,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACjD,aAAa,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,aAAa;QACb,oBAAoB;KACrB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,IAMvC;IACC,MAAM,EACJ,WAAW,EACX,YAAY,EACZ,eAAe,EACf,eAAe,EACf,QAAQ,GACT,GAAG,IAAI,CAAC;IACT,MAAM,YAAY,GAAG,YAAY,CAAC,sBAAsB,CAAC;IACzD,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,aAAa,GAAiC,EAAE,CAAC;IACvD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5C,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,SAAS;QAEvD,IAAI,QAA4B,CAAC;QACjC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IACE,QAAQ,KAAK,SAAS;YACtB,QAAQ,KAAK,GAAG,CAAC,OAAO;YACxB,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;YACvB,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC;YAChC,CAAC,2BAA2B,CAAC,QAAQ,EAAE,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EACrE,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC;YACpD,WAAW;YACX,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC;SACnC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,SAAS;QAE/B,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC;gBACpD,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE;aACtC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,UAAU,EAAE,UAAU,KAAK,IAAI,EAAE,CAAC;gBACpC,iBAAiB,CAAC;oBAChB,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,MAAM,EAAE,UAAU;oBAClB,OAAO,EAAE,QAAQ;iBAClB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,UAAU,IAAI,UAAU,CAAC,kBAAkB,KAAK,MAAM;gBAAE,SAAS;QACvE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB;gBAAE,MAAM,KAAK,CAAC;YACpD,SAAS;QACX,CAAC;QAED,SAAS,EAAE,CAAC,IAAI,CAAC,oCAAoC,EAAE;YACrD,IAAI,EAAE,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE;YAClC,EAAE,EAAE,QAAQ;SACb,CAAC,CAAC;QACH,aAAa,CAAC,IAAI,CAAC;YACjB,WAAW,EAAE,GAAG,CAAC,OAAO;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,YAAY;YACpB,SAAS,EAAE,QAAQ;SACpB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,qBAAqB,CAAC,IAKpC;IACC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACpE,MAAM,WAAW,GAAG,yBAAyB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC;QACrD,WAAW;QACX,IAAI,EAAE,UAAU;QAChB,QAAQ,EAAE,WAAW;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1D,IAAI,CAAC;QACH,eAAe,CAAC,MAAM,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB;YAAE,MAAM,KAAK,CAAC;QACpD,qBAAqB,CAAC;YACpB,YAAY;YACZ,KAAK;YACL,OAAO,EACL,+FAA+F;YACjG,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAChC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACtD;SACF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,yBAAyB,CAAC,IAIxC;IACC,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IAC1D,MAAM,IAAI,GAAiC,EAAE,CAAC;IAC9C,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAChD,MAAM,YAAY,GAAG,CAAC,MAAc,EAAQ,EAAE;YAC5C,SAAS,EAAE,CAAC,IAAI,CACd,iEAAiE,EACjE,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;QACJ,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC;gBACtD,WAAW;gBACX,KAAK,EAAE,CAAC,IAAI,CAAC;aACd,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACvB,YAAY,CAAC,kCAAkC,CAAC,CAAC;gBACjD,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,CACd,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;gBACtB,CAAC,CAAC,MAAM,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAClD,CAAC,CAAC,EAAE,CACP,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;YAC/C,IAAI,OAAO,EAAE,CAAC;gBACZ,YAAY,CACV,gCAAgC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,EAAE,CAClE,CAAC;gBACF,SAAS;YACX,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,uEAAuE;YACvE,iEAAiE;YACjE,IACE,WAAW,EAAE,OAAO;gBACpB,CAAC,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,CAAC,EACvD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,wEAAwE;YACxE,uEAAuE;YACvE,YAAY,CAAC,+BAA+B,CAAC,CAAC;YAC9C,SAAS;QACX,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAaD,KAAK,UAAU,yBAAyB,CACtC,IAA8B;IAE9B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;IAC5E,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC;QACrD,WAAW;QACX,IAAI;QACJ,QAAQ;KACT,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,qEAAqE;QACrE,uEAAuE;QACvE,yDAAyD;QACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,KAAK,UAAU,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;YAClE,qBAAqB,CAAC;gBACpB,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC7B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACtD;aACF,CAAC,CAAC;QACL,CAAC;QACD,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,IAAI,OAA8B,CAAC;IACnC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qBAAqB,CAAC;YACpB,YAAY;YACZ,KAAK;YACL,OAAO,EACL,4EAA4E;YAC9E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CACtC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACtD;SACF,CAAC,CAAC;IACL,CAAC;IAED,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,0EAA0E;IAC1E,uEAAuE;IACvE,wEAAwE;IACxE,4BAA4B;IAC5B,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YACxB,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC/B,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CACvC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CACjE,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3D,qBAAqB,CAAC;gBACpB,QAAQ,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CACjE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CACjE;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CACvD,CAAC;IACF,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,oBAAoB,EAAE,GACrD,MAAM,qBAAqB,CAAC;QAC1B,WAAW;QACX,YAAY;QACZ,eAAe;QACf,IAAI;QACJ,eAAe;QACf,OAAO;QACP,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC;IACL,gFAAgF;IAChF,MAAM,eAAe,GACnB,IAAI,KAAK,UAAU;QACjB,CAAC,CAAC,MAAM,wBAAwB,CAAC;YAC7B,WAAW;YACX,YAAY;YACZ,eAAe,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7D,eAAe;YACf,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACT,IAAI,aAAa,GACf,IAAI,KAAK,UAAU;QACjB,CAAC,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,eAAe,CAAC;QACnC,CAAC,CAAC,MAAM,yBAAyB,CAAC;YAC9B,WAAW;YACX,YAAY;YACZ,aAAa,EAAE,QAAQ;SACxB,CAAC,CAAC;IACT,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;YAC3C,WAAW;YACX,YAAY;YACZ,QAAQ,EAAE,QAAQ,IAAI,EAAE;YACxB,aAAa;SACd,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,oEAAoE;YACpE,qEAAqE;YACrE,4CAA4C;YAC5C,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAClC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,CACvC,CAAC;YACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACzB,aAAa,GAAG,EAAE,CAAC;YACrB,CAAC;iBAAM,IAAI,OAAO,CAAC,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC;gBACjD,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;oBACxC,WAAW;oBACX,YAAY;oBACZ,QAAQ,EAAE,QAAQ,IAAI,EAAE;oBACxB,aAAa,EAAE,OAAO;iBACvB,CAAC,CAAC;gBACH,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACnB,aAAa,GAAG,OAAO,CAAC;gBAC1B,CAAC;qBAAM,CAAC;oBACN,aAAa,CACX,qBAAqB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAC3D,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,aAAa,CACX,qBAAqB,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC,CAC3D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;IAC1C,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,EAAE,CAAC;QAC7D,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;QAC/D,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC;QAAE,SAAS,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACzB,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,QAAQ,IAAI,SAAS;YAAE,gBAAgB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAA8B;IAE9B,IAAI,CAAC;QACH,OAAO,MAAM,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;YACvC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,MAAM,CACrC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,mBAAmB,CACxD,CAAC;YACF,IAAI,QAAQ,EAAE,MAAM,EAAE,CAAC;gBACrB,gBAAgB,CACd,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC;oBACpD,CAAC,CAAC,iBAAiB;oBACnB,CAAC,CAAC,aAAa,EACjB,IAAI,CAAC,IAAI,CACV,CAAC;YACJ,CAAC;QACH,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/ai-service/dev-database-client.d.ts

@@ -1,5 +1,4 @@
-import type { CredentialRef, DatabaseRequirement, LifecycleDispatchPayload, LifecycleErrorCode, LifecycleState } from "@superblocksteam/shared";
-type MigrationState = "pending" | "migrated" | "failed";
+import type { DatabaseRequirement, LifecycleDispatchPayload, LifecycleErrorCode, LifecycleMigrationState, LifecycleState } from "@superblocksteam/shared";
 export type CreateDevDatabaseInput = {
     applicationId: string;
     requirement: Omit<DatabaseRequirement, "engine"> & Partial<Pick<DatabaseRequirement, "engine">>;
@@ -17,17 +16,28 @@ type EnvelopeFields = {
     errorCode?: string;
     errorMessage?: string;
 };
+/** Per-datatag outcome when ensure fans out across editor Environments tags. */
+export type LifecycleTargetOutcome = {
+    bindingKey: string;
+    errorCode?: string;
+    errorMessage?: string;
+    lifecycleState?: LifecycleState;
+    migrationState?: LifecycleMigrationState;
+    ok: boolean;
+    profile: string;
+    requestId?: string;
+};
 export type CreateDevDatabaseResponse = EnvelopeFields & {
     bindingKey: string;
     connectionMetadata?: Record<string, string | number | boolean>;
-    credentialRefs?: Record<string, CredentialRef>;
     dispatchPayload?: LifecycleDispatchPayload;
     engine?: string;
     integrationId?: string;
     lifecycleState: LifecycleState;
     logicalName?: string;
-    migrationState: MigrationState;
+    migrationState: LifecycleMigrationState;
     requestId: string;
+    targets?: LifecycleTargetOutcome[];
 };
 export type LifecyclePreconditionFailure = EnvelopeFields & {
     ok: false;

package/dist/ai-service/dev-database-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dev-database-client.d.ts","sourceRoot":"","sources":["../../src/ai-service/dev-database-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC,KAAK,cAAc,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAExD,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAC9C,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC;CAChD,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAMF,KAAK,cAAc,GAAG;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,cAAc,GAAG;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/C,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAM3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAQF,MAAM,MAAM,4BAA4B,GAAG,cAAc,GAAG;IAC1D,EAAE,EAAE,KAAK,CAAC;CACX,CAAC;AAGF,MAAM,MAAM,kCAAkC,GAAG,4BAA4B,CAAC;AAE9E,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,4BAA4B,CAAC;AAKjC,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,4BAA4B,CAAC;AAEjC,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE;QACL,IAAI,EAAE,kBAAkB,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,kBAAkB,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;KACH,CAAC;CACH,CAAC;AAEF,KAAK,WAAW,CAAC,CAAC,IAAI;IACpB,IAAI,EAAE,CAAC,CAAC;CACT,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gCAAgC,CAAC;CACxC,GACD;IACE,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kCAAkC,MAAM,mBAAmB,CAAC;CACnE,GACD;IACE,MAAM,EAAE,KAAK,CAAC;IACd,IAAI,EAAE,yCAAyC,CAAC;IAChD,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,KAAK,4BAA4B,GAC7B,yBAAyB,GACzB,kCAAkC,GAClC,aAAa,GACb,qBAAqB,GACrB,WAAW,CAAC,yBAAyB,GAAG,kCAAkC,CAAC,CAAC;AAEhF,KAAK,wBAAwB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7B,CAAC;AAEF,KAAK,gBAAgB,GAAG,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IACL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB,KACE,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,KAAK,wBAAwB,GAAG;IAC9B,SAAS,EAAE,CACT,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC5C,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,KAAK;aAI7B,IAAI,EAAE,kBAAkB;IAHjC,IAAI,SAA4B;gBAGvB,IAAI,EAAE,kBAAkB,EACxC,OAAO,EAAE,MAAM;CAIlB;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,wBAAwB;IAExD,WAAW,CACf,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC;IAU7B,eAAe,CACnB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,uBAAuB,CAAC;IAY7B,YAAY,CAChB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,yBAAyB,CAAC;IAUrC,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,yCAAyC;CAiBlD;AAkBD,wBAAgB,8BAA8B,CAAC,EAC7C,KAA4C,EAC5C,GAAG,EACH,kBAAkB,GACnB,EAAE,+BAA+B,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAkDzE"}
+{"version":3,"file":"dev-database-client.d.ts","sourceRoot":"","sources":["../../src/ai-service/dev-database-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,wBAAwB,EACxB,kBAAkB,EAClB,uBAAuB,EACvB,cAAc,EACf,MAAM,yBAAyB,CAAC;AAGjC,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,GAC9C,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC;CAChD,CAAC;AAEF,KAAK,oBAAoB,GAAG;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAMF,KAAK,cAAc,GAAG;IACpB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,gFAAgF;AAChF,MAAM,MAAM,sBAAsB,GAAG;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,cAAc,CAAC,EAAE,uBAAuB,CAAC;IACzC,EAAE,EAAE,OAAO,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,cAAc,GAAG;IACvD,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC;IAC/D,eAAe,CAAC,EAAE,wBAAwB,CAAC;IAM3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,EAAE,uBAAuB,CAAC;IACxC,SAAS,EAAE,MAAM,CAAC;IAGlB,OAAO,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACpC,CAAC;AAQF,MAAM,MAAM,4BAA4B,GAAG,cAAc,GAAG;IAC1D,EAAE,EAAE,KAAK,CAAC;CACX,CAAC;AAGF,MAAM,MAAM,kCAAkC,GAAG,4BAA4B,CAAC;AAE9E,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,4BAA4B,CAAC;AAKjC,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,4BAA4B,CAAC;AAEjC,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE;QACL,IAAI,EAAE,kBAAkB,CAAC;QACzB,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH,CAAC;AAEF,KAAK,qBAAqB,GAAG;IAC3B,YAAY,EAAE;QACZ,KAAK,EAAE;YACL,IAAI,EAAE,kBAAkB,CAAC;YACzB,OAAO,EAAE,MAAM,CAAC;SACjB,CAAC;KACH,CAAC;CACH,CAAC;AAEF,KAAK,WAAW,CAAC,CAAC,IAAI;IACpB,IAAI,EAAE,CAAC,CAAC;CACT,CAAC;AAEF,MAAM,MAAM,2BAA2B,GACnC;IACE,IAAI,EAAE,sBAAsB,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,gCAAgC,CAAC;CACxC,GACD;IACE,IAAI,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kCAAkC,MAAM,mBAAmB,CAAC;CACnE,GACD;IACE,MAAM,EAAE,KAAK,CAAC;IACd,IAAI,EAAE,yCAAyC,CAAC;IAChD,KAAK,EAAE,cAAc,CAAC;CACvB,CAAC;AAEN,KAAK,4BAA4B,GAC7B,yBAAyB,GACzB,kCAAkC,GAClC,aAAa,GACb,qBAAqB,GACrB,WAAW,CAAC,yBAAyB,GAAG,kCAAkC,CAAC,CAAC;AAEhF,KAAK,wBAAwB,GAAG;IAC9B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC7B,CAAC;AAEF,KAAK,gBAAgB,GAAG,CACtB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;IACL,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB,KACE,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,KAAK,wBAAwB,GAAG;IAC9B,SAAS,EAAE,CACT,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,4BAA4B,CAAC,CAAC;CAC5C,CAAC;AAEF,KAAK,+BAA+B,GAAG;IACrC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,qBAAa,sBAAuB,SAAQ,KAAK;aAI7B,IAAI,EAAE,kBAAkB;IAHjC,IAAI,SAA4B;gBAGvB,IAAI,EAAE,kBAAkB,EACxC,OAAO,EAAE,MAAM;CAIlB;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,wBAAwB;IAExD,WAAW,CACf,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,uBAAuB,CAAC;IAU7B,eAAe,CACnB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,uBAAuB,CAAC;IAY7B,YAAY,CAChB,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,yBAAyB,CAAC;IAUrC,OAAO,CAAC,cAAc;IAetB,OAAO,CAAC,yCAAyC;CAiBlD;AAkBD,wBAAgB,8BAA8B,CAAC,EAC7C,KAA4C,EAC5C,GAAG,EACH,kBAAkB,GACnB,EAAE,+BAA+B,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAkDzE"}

package/dist/ai-service/dev-database-client.js

@@ -166,30 +166,7 @@ function assertNoRawCredentialMaterial(value) {
     }
     for (const [key, entryValue] of Object.entries(value)) {
         if (/credential[_-]?refs?/i.test(key)) {
-            assertCredentialRefsDoNotContainRawMaterial(entryValue);
-            continue;
-        }
-        if (/password|secret|token|private[_-]?key|dsn/i.test(key)) {
-            throw new Error("raw credential material is not allowed in createDevDb responses");
-        }
-        assertNoRawCredentialMaterial(entryValue);
-    }
-}
-function assertCredentialRefsDoNotContainRawMaterial(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error("raw credential material is not allowed in createDevDb responses");
-    }
-    for (const credentialRef of Object.values(value)) {
-        assertCredentialRefDoesNotContainRawMaterial(credentialRef);
-    }
-}
-function assertCredentialRefDoesNotContainRawMaterial(value) {
-    if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw new Error("raw credential material is not allowed in createDevDb responses");
-    }
-    for (const [key, entryValue] of Object.entries(value)) {
-        if (key === "field") {
-            continue;
+            throw new Error("application credential references are not supported in createDevDb responses");
         }
         if (/password|secret|token|private[_-]?key|dsn/i.test(key)) {
             throw new Error("raw credential material is not allowed in createDevDb responses");