@tickernelz/paperclip-pro-shared 2026.925.0

package/dist/validators/secret.js

@@ -0,0 +1,344 @@
+import { z } from "zod";
+import { SECRET_BINDING_TARGET_TYPES, SECRET_MANAGED_MODES, SECRET_PROJECTION_CLASSES, SECRET_PROVIDER_CONFIG_STATUSES, SECRET_PROVIDERS, SECRET_STATUSES, } from "../constants.js";
+const secretKeySchema = z.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9_.-]+$/);
+const secretVersionSelectorSchema = z.union([z.literal("latest"), z.number().int().positive()]);
+const creatableSecretStatusSchema = z.enum(["active", "disabled", "archived"]);
+export const envBindingPlainSchema = z.object({
+    type: z.literal("plain"),
+    value: z.string(),
+});
+export const envBindingSecretRefSchema = z.object({
+    type: z.literal("secret_ref"),
+    secretId: z.string().guid(),
+    version: secretVersionSelectorSchema.optional(),
+    projectionClass: z.enum(SECRET_PROJECTION_CLASSES).optional(),
+    projectionAllowlistKey: z.string().trim().min(1).max(160).optional().nullable(),
+});
+export const envBindingUserSecretRefSchema = z.object({
+    type: z.literal("user_secret_ref"),
+    key: secretKeySchema,
+    version: secretVersionSelectorSchema.optional(),
+    required: z.boolean().optional().default(true),
+    allowMissingOverride: z.boolean().optional().default(false),
+});
+// Backward-compatible union that accepts legacy inline values.
+export const envBindingSchema = z.union([
+    z.string(),
+    envBindingPlainSchema,
+    envBindingSecretRefSchema,
+    envBindingUserSecretRefSchema,
+]);
+export const envConfigSchema = z.record(z.string(), envBindingSchema);
+export const createSecretSchema = z.object({
+    name: z.string().min(1),
+    key: secretKeySchema.optional(),
+    provider: z.enum(SECRET_PROVIDERS).optional(),
+    providerConfigId: z.string().guid().optional().nullable(),
+    managedMode: z.enum(SECRET_MANAGED_MODES).optional(),
+    value: z.string().min(1).optional().nullable(),
+    description: z.string().optional().nullable(),
+    externalRef: z.string().optional().nullable(),
+    providerMetadata: z.record(z.string(), z.unknown()).optional().nullable(),
+    providerVersionRef: z.string().optional().nullable(),
+}).superRefine((value, ctx) => {
+    if ((value.managedMode ?? "paperclip_managed") === "external_reference") {
+        if (!value.externalRef?.trim()) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["externalRef"],
+                message: "External reference secrets require externalRef",
+            });
+        }
+        return;
+    }
+    if (value.externalRef?.trim()) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["externalRef"],
+            message: "Managed secrets cannot set externalRef",
+        });
+    }
+    if (!value.value?.trim()) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["value"],
+            message: "Managed secrets require value",
+        });
+    }
+});
+function requireSecretRotationInput(value, ctx) {
+    if (!value.value?.trim() &&
+        !value.externalRef?.trim() &&
+        value.providerVersionRef == null &&
+        value.providerConfigId == null) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["value"],
+            message: "Secret rotation requires value, externalRef, providerVersionRef, or providerConfigId",
+        });
+    }
+}
+export const rotateSecretSchema = z.object({
+    value: z.string().min(1).optional().nullable(),
+    externalRef: z.string().optional().nullable(),
+    providerVersionRef: z.string().optional().nullable(),
+    providerConfigId: z.string().guid().optional().nullable(),
+}).superRefine(requireSecretRotationInput);
+export const updateSecretSchema = z.object({
+    name: z.string().min(1).optional(),
+    key: secretKeySchema.optional(),
+    status: z.enum(SECRET_STATUSES).optional(),
+    providerConfigId: z.string().guid().optional().nullable(),
+    description: z.string().optional().nullable(),
+    externalRef: z.string().optional().nullable(),
+    providerMetadata: z.record(z.string(), z.unknown()).optional().nullable(),
+});
+export const secretBindingTargetSchema = z.object({
+    targetType: z.enum(SECRET_BINDING_TARGET_TYPES),
+    targetId: z.string().min(1),
+    configPath: z.string().min(1),
+});
+export const createSecretBindingSchema = secretBindingTargetSchema.extend({
+    secretId: z.string().guid(),
+    versionSelector: secretVersionSelectorSchema.default("latest"),
+    required: z.boolean().default(true),
+    label: z.string().optional().nullable(),
+    projectionClass: z.enum(SECRET_PROJECTION_CLASSES).optional(),
+    projectionAllowlistKey: z.string().trim().min(1).max(160).optional().nullable(),
+});
+export const createUserSecretDefinitionSchema = z.object({
+    key: secretKeySchema,
+    name: z.string().trim().min(1).max(160),
+    description: z.string().trim().max(500).optional().nullable(),
+    status: creatableSecretStatusSchema.optional(),
+    provider: z.enum(SECRET_PROVIDERS).optional(),
+    providerConfigId: z.string().guid().optional().nullable(),
+    managedMode: z.enum(SECRET_MANAGED_MODES).optional(),
+    providerMetadata: z.record(z.string(), z.unknown()).optional().nullable(),
+    usageGuidance: z.string().trim().max(1000).optional().nullable(),
+});
+export const updateUserSecretDefinitionSchema = z.object({
+    name: z.string().trim().min(1).max(160).optional(),
+    description: z.string().trim().max(500).optional().nullable(),
+    status: z.enum(SECRET_STATUSES).optional(),
+    providerConfigId: z.string().guid().optional().nullable(),
+    providerMetadata: z.record(z.string(), z.unknown()).optional().nullable(),
+    usageGuidance: z.string().trim().max(1000).optional().nullable(),
+});
+export const createUserSecretValueSchema = z.object({
+    definitionKey: secretKeySchema.optional(),
+    definitionId: z.string().guid().optional(),
+    value: z.string().min(1).optional().nullable(),
+    externalRef: z.string().optional().nullable(),
+    providerVersionRef: z.string().optional().nullable(),
+    providerConfigId: z.string().guid().optional().nullable(),
+}).superRefine((value, ctx) => {
+    if (!value.definitionKey && !value.definitionId) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["definitionId"],
+            message: "User secret value requires definitionId or definitionKey",
+        });
+    }
+    if (!value.value?.trim() && !value.externalRef?.trim()) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["value"],
+            message: "User secret value requires value or externalRef",
+        });
+    }
+});
+export const updateUserSecretValueSchema = z.object({
+    status: z.enum(SECRET_STATUSES).optional(),
+    value: z.string().min(1).optional().nullable(),
+    externalRef: z.string().min(1).optional().nullable(),
+    providerVersionRef: z.string().min(1).optional().nullable(),
+    providerConfigId: z.string().guid().optional().nullable(),
+});
+export const rotateUserSecretValueSchema = z.object({
+    value: z.string().min(1).optional().nullable(),
+    externalRef: z.string().min(1).optional().nullable(),
+    providerVersionRef: z.string().min(1).optional().nullable(),
+    providerConfigId: z.string().guid().optional().nullable(),
+}).superRefine(requireSecretRotationInput);
+export const createUserSecretDeclarationSchema = secretBindingTargetSchema.extend({
+    definitionKey: secretKeySchema,
+    envKey: z.string().trim().min(1),
+    versionSelector: secretVersionSelectorSchema.default("latest"),
+    required: z.boolean().default(true),
+    allowMissingOverride: z.boolean().default(false),
+    label: z.string().optional().nullable(),
+});
+const safeShortText = z.string().trim().min(1).max(160);
+const optionalSafeShortText = safeShortText.optional().nullable();
+const deniedProviderConfigKeyPattern = /^(access[-_]?key([-_]?id)?|secret[-_]?access[-_]?key|secret[-_]?key|token|password|passwd|credential|credentials|private[-_]?key|pem|jwt|session[-_]?token|service[-_]?account([-_]?json)?|client[-_]?secret|secret[-_]?id|unseal[-_]?key|recovery[-_]?key|key[-_]?file([-_]?path)?|token[-_]?file([-_]?path)?)$/i;
+function rejectSensitiveProviderConfigKeys(value, ctx) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return;
+    for (const key of Object.keys(value)) {
+        if (!deniedProviderConfigKeyPattern.test(key))
+            continue;
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["config", key],
+            message: `Provider vault config cannot persist sensitive field: ${key}`,
+        });
+    }
+}
+export const localEncryptedProviderConfigSchema = z.object({
+    backupReminderAcknowledged: z.boolean().optional(),
+}).strict();
+export const awsSecretsManagerProviderConfigSchema = z.object({
+    region: z.string().trim().regex(/^[a-z]{2}(?:-gov)?-[a-z]+-\d+$/, "Invalid AWS region"),
+    namespace: optionalSafeShortText,
+    secretNamePrefix: optionalSafeShortText,
+    kmsKeyId: z.string().trim().min(1).max(512).optional().nullable(),
+    ownerTag: optionalSafeShortText,
+    environmentTag: optionalSafeShortText,
+}).strict();
+export const gcpSecretManagerProviderConfigSchema = z.object({
+    projectId: z.string().trim().min(1).max(128).regex(/^[a-z][a-z0-9-]{4,127}$/).optional().nullable(),
+    location: optionalSafeShortText,
+    namespace: optionalSafeShortText,
+    secretNamePrefix: optionalSafeShortText,
+}).strict();
+const vaultAddressSchema = z.preprocess((value) => typeof value === "string" ? value.trim() : value, z.string().url().superRefine((value, ctx) => {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return;
+    }
+    const hasPath = url.pathname !== "" && url.pathname !== "/";
+    if ((url.protocol !== "http:" && url.protocol !== "https:") ||
+        url.username ||
+        url.password ||
+        url.search ||
+        url.hash ||
+        hasPath) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "Vault address must be an origin-only HTTP(S) URL without credentials, path, query, or fragment",
+        });
+    }
+}).transform((value) => new URL(value).origin));
+function rejectUnsafeVaultAddress(value, ctx) {
+    if (value === undefined || value === null)
+        return;
+    const parsed = vaultAddressSchema.safeParse(value);
+    if (parsed.success)
+        return;
+    for (const issue of parsed.error.issues) {
+        ctx.addIssue({
+            ...issue,
+            path: ["config", "address", ...issue.path],
+        });
+    }
+}
+export const vaultProviderConfigSchema = z.object({
+    address: vaultAddressSchema.optional().nullable(),
+    namespace: optionalSafeShortText,
+    mountPath: optionalSafeShortText,
+    secretPathPrefix: optionalSafeShortText,
+}).strict();
+export const secretProviderConfigPayloadSchema = z.discriminatedUnion("provider", [
+    z.object({ provider: z.literal("local_encrypted"), config: localEncryptedProviderConfigSchema }),
+    z.object({ provider: z.literal("aws_secrets_manager"), config: awsSecretsManagerProviderConfigSchema }),
+    z.object({ provider: z.literal("gcp_secret_manager"), config: gcpSecretManagerProviderConfigSchema }),
+    z.object({ provider: z.literal("vault"), config: vaultProviderConfigSchema }),
+]);
+export const createSecretProviderConfigSchema = z.object({
+    provider: z.enum(SECRET_PROVIDERS),
+    displayName: z.string().trim().min(1).max(120),
+    status: z.enum(SECRET_PROVIDER_CONFIG_STATUSES).optional(),
+    isDefault: z.boolean().optional(),
+    config: z.record(z.string(), z.unknown()).default({}),
+}).superRefine((value, ctx) => {
+    rejectSensitiveProviderConfigKeys(value.config, ctx);
+    const parsed = secretProviderConfigPayloadSchema.safeParse({
+        provider: value.provider,
+        config: value.config,
+    });
+    if (!parsed.success) {
+        for (const issue of parsed.error.issues) {
+            ctx.addIssue({
+                ...issue,
+                path: issue.path[0] === "config" ? issue.path : ["config", ...issue.path],
+            });
+        }
+    }
+    const status = value.status ?? (["gcp_secret_manager", "vault"].includes(value.provider) ? "coming_soon" : "ready");
+    if ((value.provider === "gcp_secret_manager" || value.provider === "vault") && status !== "coming_soon" && status !== "disabled") {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["status"],
+            message: `${value.provider} provider vaults are locked while coming soon`,
+        });
+    }
+    if ((status === "coming_soon" || status === "disabled") && value.isDefault) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["isDefault"],
+            message: "Only ready or warning provider vaults can be default",
+        });
+    }
+});
+export const updateSecretProviderConfigSchema = z.object({
+    displayName: z.string().trim().min(1).max(120).optional(),
+    status: z.enum(SECRET_PROVIDER_CONFIG_STATUSES).optional(),
+    isDefault: z.boolean().optional(),
+    config: z.record(z.string(), z.unknown()).optional(),
+}).superRefine((value, ctx) => {
+    if (value.config !== undefined) {
+        rejectSensitiveProviderConfigKeys(value.config, ctx);
+        rejectUnsafeVaultAddress(value.config.address, ctx);
+    }
+    if ((value.status === "coming_soon" || value.status === "disabled") && value.isDefault) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["isDefault"],
+            message: "Only ready or warning provider vaults can be default",
+        });
+    }
+});
+export const remoteSecretImportPreviewSchema = z.object({
+    providerConfigId: z.string().guid(),
+    query: z.string().trim().max(200).optional().nullable(),
+    nextToken: z.string().trim().min(1).max(4096).optional().nullable(),
+    pageSize: z.number().int().min(1).max(100).optional(),
+});
+export const secretProviderConfigDiscoveryPreviewSchema = z.object({
+    provider: z.enum(SECRET_PROVIDERS),
+    config: z.record(z.string(), z.unknown()).default({}),
+    query: z.string().trim().max(200).optional().nullable(),
+    nextToken: z.string().trim().min(1).max(4096).optional().nullable(),
+    pageSize: z.number().int().min(1).max(100).optional(),
+}).superRefine((value, ctx) => {
+    rejectSensitiveProviderConfigKeys(value.config, ctx);
+    const parsed = secretProviderConfigPayloadSchema.safeParse({
+        provider: value.provider,
+        config: value.config,
+    });
+    if (!parsed.success) {
+        for (const issue of parsed.error.issues) {
+            ctx.addIssue({
+                ...issue,
+                path: issue.path[0] === "config" ? issue.path : ["config", ...issue.path],
+            });
+        }
+    }
+});
+export const remoteSecretImportSelectionSchema = z.object({
+    externalRef: z.string().trim().min(1).max(2048),
+    name: z.string().trim().min(1).max(160).optional().nullable(),
+    key: z.string().trim().min(1).max(120).regex(/^[a-zA-Z0-9_.-]+$/).optional().nullable(),
+    description: z.string().trim().max(500).optional().nullable(),
+    providerVersionRef: z.string().trim().min(1).max(512).optional().nullable(),
+    providerMetadata: z.record(z.string(), z.unknown()).optional().nullable(),
+});
+export const remoteSecretImportSchema = z.object({
+    providerConfigId: z.string().guid(),
+    secrets: z.array(remoteSecretImportSelectionSchema).min(1).max(100),
+});
+//# sourceMappingURL=secret.js.map

package/dist/validators/secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.js","sourceRoot":"","sources":["../../src/validators/secret.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,oBAAoB,EACpB,yBAAyB,EACzB,+BAA+B,EAC/B,gBAAgB,EAChB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AACrF,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;AAChG,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC/C,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IAC7D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,GAAG,EAAE,eAAe;IACpB,OAAO,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9C,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC5D,CAAC,CAAC;AAEH,+DAA+D;AAC/D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC;IACtC,CAAC,CAAC,MAAM,EAAE;IACV,qBAAqB;IACrB,yBAAyB;IACzB,6BAA6B;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC;AAEtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,mBAAmB,CAAC,KAAK,oBAAoB,EAAE,CAAC;QACxE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;YAC/B,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;gBAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9B,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,wCAAwC;SAClD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,+BAA+B;SACzC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,SAAS,0BAA0B,CACjC,KAKC,EACD,GAAoB;IAEpB,IACE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE;QACpB,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE;QAC1B,KAAK,CAAC,kBAAkB,IAAI,IAAI;QAChC,KAAK,CAAC,gBAAgB,IAAI,IAAI,EAC9B,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,sFAAsF;SAChG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAI3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IACxE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC3B,eAAe,EAAE,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IAC7D,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChF,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,eAAe;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,MAAM,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC9C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC7C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzD,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjE,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QAChD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,0DAA0D;SACpE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC;QACvD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,iDAAiD;SAC3D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC,WAAW,CAAC,0BAA0B,CAAC,CAAC;AAI3C,MAAM,CAAC,MAAM,iCAAiC,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAChF,aAAa,EAAE,eAAe;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,eAAe,EAAE,2BAA2B,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC9D,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnC,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACxD,MAAM,qBAAqB,GAAG,aAAa,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC;AAElE,MAAM,8BAA8B,GAClC,mTAAmT,CAAC;AAEtT,SAAS,iCAAiC,CAAC,KAAc,EAAE,GAAoB;IAC7E,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IACxE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACxD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,CAAC;YACrB,OAAO,EAAE,yDAAyD,GAAG,EAAE;SACxE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,0BAA0B,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,gCAAgC,EAAE,oBAAoB,CAAC;IACvF,SAAS,EAAE,qBAAqB;IAChC,gBAAgB,EAAE,qBAAqB;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjE,QAAQ,EAAE,qBAAqB;IAC/B,cAAc,EAAE,qBAAqB;CACtC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnG,QAAQ,EAAE,qBAAqB;IAC/B,SAAS,EAAE,qBAAqB;IAChC,gBAAgB,EAAE,qBAAqB;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,UAAU,CACrC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAC3D,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC;IAC5D,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QACvD,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,QAAQ;QACZ,GAAG,CAAC,MAAM;QACV,GAAG,CAAC,IAAI;QACR,OAAO,EACP,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,gGAAgG;SAC1G,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAC/C,CAAC;AAEF,SAAS,wBAAwB,CAAC,KAAc,EAAE,GAAoB;IACpE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO;IAClD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO;IAC3B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACxC,GAAG,CAAC,QAAQ,CAAC;YACX,GAAG,KAAK;YACR,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,kBAAkB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,qBAAqB;IAChC,SAAS,EAAE,qBAAqB;IAChC,gBAAgB,EAAE,qBAAqB;CACxC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,kBAAkB,CAAC,UAAU,EAAE;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAChG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACvG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAClC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC1D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,iCAAiC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,iCAAiC,CAAC,SAAS,CAAC;QACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC;gBACX,GAAG,KAAK;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpH,IAAI,CAAC,KAAK,CAAC,QAAQ,KAAK,oBAAoB,IAAI,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;QACjI,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,QAAQ,CAAC;YAChB,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,+CAA+C;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,MAAM,KAAK,aAAa,IAAI,MAAM,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;IAC1D,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACrD,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,iCAAiC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACrD,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,aAAa,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvF,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,WAAW,CAAC;YACnB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACnC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IACjE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACtD,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,iCAAiC,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,iCAAiC,CAAC,SAAS,CAAC;QACzD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YACxC,GAAG,CAAC,QAAQ,CAAC;gBACX,GAAG,KAAK;gBACR,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3E,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACpE,CAAC,CAAC"}

package/dist/validators/secret.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=secret.test.d.ts.map

package/dist/validators/secret.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.test.d.ts","sourceRoot":"","sources":["../../src/validators/secret.test.ts"],"names":[],"mappings":""}

package/dist/validators/secret.test.js

@@ -0,0 +1,208 @@
+import { describe, expect, it } from "vitest";
+import { createUserSecretDefinitionSchema, createUserSecretDeclarationSchema, createUserSecretValueSchema, createSecretProviderConfigSchema, createSecretSchema, envBindingUserSecretRefSchema, remoteSecretImportPreviewSchema, remoteSecretImportSchema, rotateSecretSchema, rotateUserSecretValueSchema, secretProviderConfigDiscoveryPreviewSchema, secretProviderConfigPayloadSchema, updateUserSecretValueSchema, updateUserSecretDefinitionSchema, updateSecretProviderConfigSchema, } from "./secret.js";
+describe("secret validators", () => {
+    it("defaults user secret refs to required and no missing override", () => {
+        expect(envBindingUserSecretRefSchema.parse({
+            type: "user_secret_ref",
+            key: "github_api_token",
+        })).toEqual({
+            type: "user_secret_ref",
+            key: "github_api_token",
+            required: true,
+            allowMissingOverride: false,
+        });
+    });
+    it("validates user secret declarations and current-user value payloads", () => {
+        expect(createUserSecretDeclarationSchema.parse({
+            targetType: "agent",
+            targetId: "agent-1",
+            configPath: "env.GITHUB_TOKEN",
+            envKey: "GITHUB_TOKEN",
+            definitionKey: "github_api_token",
+        })).toMatchObject({
+            versionSelector: "latest",
+            required: true,
+            allowMissingOverride: false,
+        });
+        expect(() => createUserSecretValueSchema.parse({
+            value: "secret-value",
+        })).toThrow(/definitionId or definitionKey/);
+    });
+    it("does not allow user secret definition keys to be renamed through updates", () => {
+        expect(updateUserSecretDefinitionSchema.parse({
+            key: "renamed_key",
+            name: "Renamed",
+        })).toEqual({
+            name: "Renamed",
+        });
+    });
+    it("does not allow user secret definitions to be created as deleted", () => {
+        expect(() => createUserSecretDefinitionSchema.parse({
+            key: "github_api_token",
+            name: "GitHub API token",
+            status: "deleted",
+        })).toThrow();
+    });
+    it("requires secret rotation payloads to include rotation input", () => {
+        expect(() => rotateSecretSchema.parse({})).toThrow(/requires value, externalRef/);
+        expect(() => rotateUserSecretValueSchema.parse({})).toThrow(/requires value, externalRef/);
+        expect(() => rotateUserSecretValueSchema.parse({ providerVersionRef: null })).toThrow(/requires value, externalRef/);
+        expect(() => rotateUserSecretValueSchema.parse({ providerConfigId: null })).toThrow(/requires value, externalRef/);
+        expect(() => rotateUserSecretValueSchema.parse({ externalRef: "" })).toThrow();
+        expect(() => rotateUserSecretValueSchema.parse({ providerVersionRef: "" })).toThrow();
+        expect(rotateUserSecretValueSchema.parse({ value: "new-secret" })).toEqual({
+            value: "new-secret",
+        });
+        expect(rotateUserSecretValueSchema.parse({ providerVersionRef: "version-2" })).toEqual({
+            providerVersionRef: "version-2",
+        });
+    });
+    it("rejects empty external selectors in user secret patches", () => {
+        expect(() => updateUserSecretValueSchema.parse({ externalRef: "" })).toThrow();
+        expect(() => updateUserSecretValueSchema.parse({ providerVersionRef: "" })).toThrow();
+        expect(updateUserSecretValueSchema.parse({ externalRef: null, providerVersionRef: null })).toEqual({
+            externalRef: null,
+            providerVersionRef: null,
+        });
+    });
+    it("rejects externalRef on managed secrets", () => {
+        expect(() => createSecretSchema.parse({
+            name: "OpenAI API Key",
+            managedMode: "paperclip_managed",
+            value: "secret-value",
+            externalRef: "arn:aws:secretsmanager:us-east-1:123456789012:secret:shared/other",
+        })).toThrow(/Managed secrets cannot set externalRef/);
+    });
+    it("allows externalRef on external reference secrets", () => {
+        const parsed = createSecretSchema.parse({
+            name: "Shared Secret",
+            managedMode: "external_reference",
+            externalRef: "arn:aws:secretsmanager:us-east-1:123456789012:secret:shared/other",
+        });
+        expect(parsed.externalRef).toContain(":secret:shared/other");
+    });
+    it("accepts non-sensitive local and AWS provider vault metadata", () => {
+        expect(() => createSecretProviderConfigSchema.parse({
+            provider: "local_encrypted",
+            displayName: "Local",
+            config: { backupReminderAcknowledged: true },
+        })).not.toThrow();
+        expect(() => createSecretProviderConfigSchema.parse({
+            provider: "aws_secrets_manager",
+            displayName: "AWS",
+            config: {
+                region: "us-east-1",
+                namespace: "production",
+                secretNamePrefix: "paperclip",
+            },
+        })).not.toThrow();
+    });
+    it("accepts origin-only Vault provider vault addresses", () => {
+        expect(() => createSecretProviderConfigSchema.parse({
+            provider: "vault",
+            displayName: "Vault draft",
+            config: { address: " https://vault.example.com/ " },
+        })).not.toThrow();
+        const parsed = secretProviderConfigPayloadSchema.parse({
+            provider: "vault",
+            config: { address: " https://vault.example.com/ " },
+        });
+        expect(parsed.provider).toBe("vault");
+        if (parsed.provider !== "vault")
+            throw new Error("Expected vault provider payload");
+        expect(parsed.config.address).toBe("https://vault.example.com");
+    });
+    it.each([
+        "https://user:pass@vault.example.com",
+        "https://vault.example.com?token=hvs.x",
+        "https://vault.example.com#token=hvs.x",
+        "https://vault.example.com/v1/secret",
+    ])("rejects credential-bearing or non-origin Vault addresses: %s", (address) => {
+        expect(() => createSecretProviderConfigSchema.parse({
+            provider: "vault",
+            displayName: "Vault draft",
+            config: { address },
+        })).toThrow(/origin-only HTTP\(S\) URL/i);
+    });
+    it("rejects unsafe Vault addresses in provider payload validation used by updates", () => {
+        expect(() => secretProviderConfigPayloadSchema.parse({
+            provider: "vault",
+            config: { address: "https://vault.example.com?client_token=hvs.x" },
+        })).toThrow(/origin-only HTTP\(S\) URL/i);
+    });
+    it("rejects unsafe Vault addresses in provider vault update payloads", () => {
+        expect(() => updateSecretProviderConfigSchema.parse({
+            config: { address: "https://vault.example.com#token=hvs.x" },
+        })).toThrow(/origin-only HTTP\(S\) URL/i);
+    });
+    it("validates AWS remote import preview and import payloads", () => {
+        expect(remoteSecretImportPreviewSchema.parse({
+            providerConfigId: "11111111-1111-4111-8111-111111111111",
+            query: "openai",
+            pageSize: 50,
+        })).toEqual({
+            providerConfigId: "11111111-1111-4111-8111-111111111111",
+            query: "openai",
+            pageSize: 50,
+        });
+        expect(remoteSecretImportSchema.parse({
+            providerConfigId: "11111111-1111-4111-8111-111111111111",
+            secrets: [
+                {
+                    externalRef: "arn:aws:secretsmanager:us-east-1:123456789012:secret:prod/openai",
+                    name: "OpenAI API key",
+                    key: "OPENAI_API_KEY",
+                    description: "  Operator-entered Paperclip description  ",
+                    providerMetadata: { name: "prod/openai" },
+                },
+            ],
+        })).toMatchObject({
+            providerConfigId: "11111111-1111-4111-8111-111111111111",
+            secrets: [
+                expect.objectContaining({
+                    key: "OPENAI_API_KEY",
+                    description: "Operator-entered Paperclip description",
+                }),
+            ],
+        });
+    });
+    it("validates AWS provider vault discovery draft config without allowing sensitive keys", () => {
+        expect(secretProviderConfigDiscoveryPreviewSchema.parse({
+            provider: "aws_secrets_manager",
+            config: {
+                region: "us-east-1",
+                namespace: "production",
+                secretNamePrefix: "paperclip",
+            },
+            query: "paperclip",
+            pageSize: 50,
+        })).toEqual({
+            provider: "aws_secrets_manager",
+            config: {
+                region: "us-east-1",
+                namespace: "production",
+                secretNamePrefix: "paperclip",
+            },
+            query: "paperclip",
+            pageSize: 50,
+        });
+        expect(() => secretProviderConfigDiscoveryPreviewSchema.parse({
+            provider: "aws_secrets_manager",
+            config: {
+                region: "us-east-1",
+                accessKeyId: "AKIA...",
+            },
+        })).toThrow(/sensitive field/i);
+    });
+    it("caps AWS remote import paging and row counts", () => {
+        expect(() => remoteSecretImportPreviewSchema.parse({
+            providerConfigId: "11111111-1111-4111-8111-111111111111",
+            pageSize: 101,
+        })).toThrow();
+        expect(() => remoteSecretImportSchema.parse({
+            providerConfigId: "11111111-1111-4111-8111-111111111111",
+            secrets: [],
+        })).toThrow();
+    });
+});
+//# sourceMappingURL=secret.test.js.map

package/dist/validators/secret.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.test.js","sourceRoot":"","sources":["../../src/validators/secret.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EACjC,2BAA2B,EAC3B,gCAAgC,EAChC,kBAAkB,EAClB,6BAA6B,EAC7B,+BAA+B,EAC/B,wBAAwB,EACxB,kBAAkB,EAClB,2BAA2B,EAC3B,0CAA0C,EAC1C,iCAAiC,EACjC,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,GACjC,MAAM,aAAa,CAAC;AAErB,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CACJ,6BAA6B,CAAC,KAAK,CAAC;YAClC,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,kBAAkB;SACxB,CAAC,CACH,CAAC,OAAO,CAAC;YACR,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,kBAAkB;YACvB,QAAQ,EAAE,IAAI;YACd,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CACJ,iCAAiC,CAAC,KAAK,CAAC;YACtC,UAAU,EAAE,OAAO;YACnB,QAAQ,EAAE,SAAS;YACnB,UAAU,EAAE,kBAAkB;YAC9B,MAAM,EAAE,cAAc;YACtB,aAAa,EAAE,kBAAkB;SAClC,CAAC,CACH,CAAC,aAAa,CAAC;YACd,eAAe,EAAE,QAAQ;YACzB,QAAQ,EAAE,IAAI;YACd,oBAAoB,EAAE,KAAK;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,2BAA2B,CAAC,KAAK,CAAC;YAChC,KAAK,EAAE,cAAc;SACtB,CAAC,CACH,CAAC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CACJ,gCAAgC,CAAC,KAAK,CAAC;YACrC,GAAG,EAAE,aAAa;YAClB,IAAI,EAAE,SAAS;SAChB,CAAC,CACH,CAAC,OAAO,CAAC;YACR,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,MAAM,CAAC,GAAG,EAAE,CACV,gCAAgC,CAAC,KAAK,CAAC;YACrC,GAAG,EAAE,kBAAkB;YACvB,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,SAAS;SAClB,CAAC,CACH,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAClF,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QAC3F,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACrH,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACnH,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/E,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtF,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACzE,KAAK,EAAE,YAAY;SACpB,CAAC,CAAC;QACH,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACrF,kBAAkB,EAAE,WAAW;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/E,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACtF,MAAM,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACjG,WAAW,EAAE,IAAI;YACjB,kBAAkB,EAAE,IAAI;SACzB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC;YACvB,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,mBAAmB;YAChC,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,mEAAmE;SACjF,CAAC,CACH,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,oBAAoB;YACjC,WAAW,EAAE,mEAAmE;SACjF,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,CAAC,GAAG,EAAE,CACV,gCAAgC,CAAC,KAAK,CAAC;YACrC,QAAQ,EAAE,iBAAiB;YAC3B,WAAW,EAAE,OAAO;YACpB,MAAM,EAAE,EAAE,0BAA0B,EAAE,IAAI,EAAE;SAC7C,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAEhB,MAAM,CAAC,GAAG,EAAE,CACV,gCAAgC,CAAC,KAAK,CAAC;YACrC,QAAQ,EAAE,qBAAqB;YAC/B,WAAW,EAAE,KAAK;YAClB,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,YAAY;gBACvB,gBAAgB,EAAE,WAAW;aAC9B;SACF,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,GAAG,EAAE,CACV,gCAAgC,CAAC,KAAK,CAAC;YACrC,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE;SACpD,CAAC,CACH,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QAEhB,MAAM,MAAM,GAAG,iCAAiC,CAAC,KAAK,CAAC;YACrD,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,EAAE,OAAO,EAAE,8BAA8B,EAAE;SACpD,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,qCAAqC;QACrC,uCAAuC;QACvC,uCAAuC;QACvC,qCAAqC;KACtC,CAAC,CAAC,8DAA8D,EAAE,CAAC,OAAO,EAAE,EAAE;QAC7E,MAAM,CAAC,GAAG,EAAE,CACV,gCAAgC,CAAC,KAAK,CAAC;YACrC,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,aAAa;YAC1B,MAAM,EAAE,EAAE,OAAO,EAAE;SACpB,CAAC,CACH,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,CAAC,GAAG,EAAE,CACV,iCAAiC,CAAC,KAAK,CAAC;YACtC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,EAAE,OAAO,EAAE,8CAA8C,EAAE;SACpE,CAAC,CACH,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,GAAG,EAAE,CACV,gCAAgC,CAAC,KAAK,CAAC;YACrC,MAAM,EAAE,EAAE,OAAO,EAAE,uCAAuC,EAAE;SAC7D,CAAC,CACH,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CACJ,+BAA+B,CAAC,KAAK,CAAC;YACpC,gBAAgB,EAAE,sCAAsC;YACxD,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,EAAE;SACb,CAAC,CACH,CAAC,OAAO,CAAC;YACR,gBAAgB,EAAE,sCAAsC;YACxD,KAAK,EAAE,QAAQ;YACf,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QAEH,MAAM,CACJ,wBAAwB,CAAC,KAAK,CAAC;YAC7B,gBAAgB,EAAE,sCAAsC;YACxD,OAAO,EAAE;gBACP;oBACE,WAAW,EAAE,kEAAkE;oBAC/E,IAAI,EAAE,gBAAgB;oBACtB,GAAG,EAAE,gBAAgB;oBACrB,WAAW,EAAE,4CAA4C;oBACzD,gBAAgB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;iBAC1C;aACF;SACF,CAAC,CACH,CAAC,aAAa,CAAC;YACd,gBAAgB,EAAE,sCAAsC;YACxD,OAAO,EAAE;gBACP,MAAM,CAAC,gBAAgB,CAAC;oBACtB,GAAG,EAAE,gBAAgB;oBACrB,WAAW,EAAE,wCAAwC;iBACtD,CAAC;aACH;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CACJ,0CAA0C,CAAC,KAAK,CAAC;YAC/C,QAAQ,EAAE,qBAAqB;YAC/B,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,YAAY;gBACvB,gBAAgB,EAAE,WAAW;aAC9B;YACD,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,EAAE;SACb,CAAC,CACH,CAAC,OAAO,CAAC;YACR,QAAQ,EAAE,qBAAqB;YAC/B,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,SAAS,EAAE,YAAY;gBACvB,gBAAgB,EAAE,WAAW;aAC9B;YACD,KAAK,EAAE,WAAW;YAClB,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QAEH,MAAM,CAAC,GAAG,EAAE,CACV,0CAA0C,CAAC,KAAK,CAAC;YAC/C,QAAQ,EAAE,qBAAqB;YAC/B,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,WAAW,EAAE,SAAS;aACvB;SACF,CAAC,CACH,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,EAAE,CACV,+BAA+B,CAAC,KAAK,CAAC;YACpC,gBAAgB,EAAE,sCAAsC;YACxD,QAAQ,EAAE,GAAG;SACd,CAAC,CACH,CAAC,OAAO,EAAE,CAAC;QACZ,MAAM,CAAC,GAAG,EAAE,CACV,wBAAwB,CAAC,KAAK,CAAC;YAC7B,gBAAgB,EAAE,sCAAsC;YACxD,OAAO,EAAE,EAAE;SACZ,CAAC,CACH,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/validators/sidebar-preferences.d.ts

@@ -0,0 +1,10 @@
+import { z } from "zod";
+export declare const sidebarOrderPreferenceSchema: z.ZodObject<{
+    orderedIds: z.ZodArray<z.ZodString>;
+    updatedAt: z.ZodNullable<z.ZodCoercedDate<unknown>>;
+}, z.core.$strip>;
+export declare const upsertSidebarOrderPreferenceSchema: z.ZodObject<{
+    orderedIds: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type UpsertSidebarOrderPreference = z.infer<typeof upsertSidebarOrderPreferenceSchema>;
+//# sourceMappingURL=sidebar-preferences.d.ts.map

package/dist/validators/sidebar-preferences.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-preferences.d.ts","sourceRoot":"","sources":["../../src/validators/sidebar-preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,4BAA4B;;;iBAGvC,CAAC;AAEH,eAAO,MAAM,kCAAkC;;iBAE7C,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC"}

package/dist/validators/sidebar-preferences.js

@@ -0,0 +1,10 @@
+import { z } from "zod";
+const sidebarOrderedIdSchema = z.string().guid();
+export const sidebarOrderPreferenceSchema = z.object({
+    orderedIds: z.array(sidebarOrderedIdSchema),
+    updatedAt: z.coerce.date().nullable(),
+});
+export const upsertSidebarOrderPreferenceSchema = z.object({
+    orderedIds: z.array(sidebarOrderedIdSchema),
+});
+//# sourceMappingURL=sidebar-preferences.js.map

package/dist/validators/sidebar-preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-preferences.js","sourceRoot":"","sources":["../../src/validators/sidebar-preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;AAEjD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC;CAC5C,CAAC,CAAC"}