@xemahq/xema 0.13.0 → 0.14.0

package/dist/runtime/config/loader.js

@@ -6,22 +6,58 @@ const node_os_1 = require("node:os");
 const node_path_1 = require("node:path");
 const yaml_1 = require("yaml");
 const schema_1 = require("./schema");
+const sources_config_1 = require("./sources-config");
+const globalConfigPath = () => (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'config.yaml');
 function loadXemaConfig(opts = {}) {
     const cwd = opts.cwd ?? process.cwd();
+    const globalPath = globalConfigPath();
     if (opts.explicit) {
-        const explicitPath = (0, node_path_1.isAbsolute)(opts.explicit) ? opts.explicit : (0, node_path_1.resolve)(cwd, opts.explicit);
+        const explicitPath = (0, node_path_1.isAbsolute)(opts.explicit)
+            ? opts.explicit
+            : (0, node_path_1.resolve)(cwd, opts.explicit);
         if (!(0, node_fs_1.existsSync)(explicitPath)) {
             throw new Error(`--config path does not exist: ${explicitPath}`);
         }
-        return { config: readConfigFile(explicitPath), source: explicitPath };
+        return {
+            config: withGlobalSources(readConfigFile(explicitPath), globalPath, explicitPath),
+            source: explicitPath,
+            installationIdentity: (0, node_fs_1.realpathSync)(explicitPath),
+        };
     }
-    const candidates = [(0, node_path_1.join)(cwd, 'xema.config.yaml'), (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'config.yaml')];
+    const candidates = [(0, node_path_1.join)(cwd, 'xema.config.yaml'), globalPath];
     for (const path of candidates) {
         if ((0, node_fs_1.existsSync)(path)) {
-            return { config: readConfigFile(path), source: path };
+            return {
+                config: withGlobalSources(readConfigFile(path), globalPath, path),
+                source: path,
+                installationIdentity: (0, node_fs_1.realpathSync)(path),
+            };
         }
     }
-    return { config: (0, schema_1.parseXemaConfig)({}), source: '<defaults>' };
+    return {
+        config: withGlobalSources((0, schema_1.parseXemaConfig)({}), globalPath, undefined),
+        source: '<defaults>',
+        installationIdentity: (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(cwd)),
+    };
+}
+function withGlobalSources(primary, globalPath, primaryPath) {
+    if (primaryPath !== undefined &&
+        (0, node_path_1.resolve)(primaryPath) === (0, node_path_1.resolve)(globalPath)) {
+        return primary;
+    }
+    if (!(0, node_fs_1.existsSync)(globalPath)) {
+        return primary;
+    }
+    const globalSources = (0, sources_config_1.readSources)(globalPath);
+    if (globalSources.length === 0) {
+        return primary;
+    }
+    const seen = new Set(primary.sources.map((s) => s.name));
+    const additions = globalSources.filter((s) => !seen.has(s.name));
+    if (additions.length === 0) {
+        return primary;
+    }
+    return { ...primary, sources: [...primary.sources, ...additions] };
 }
 function readConfigFile(path) {
     const text = (0, node_fs_1.readFileSync)(path, 'utf8');

package/dist/runtime/config/loader.js.map

@@ -1 +1 @@
-{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/runtime/config/loader.ts"],"names":[],"mappings":";;AAyBA,wCAmBC;AA5CD,qCAAmD;AACnD,qCAAkC;AAClC,yCAAsD;AAEtD,+BAA0C;AAE1C,qCAA4D;AAmB5D,SAAgB,cAAc,CAAC,OAA0B,EAAE;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAEtC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAA,mBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7F,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACxE,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5F,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAA,wBAAe,EAAC,EAAE,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,YAAS,EAAC,IAAI,CAAY,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAA,wBAAe,EAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/runtime/config/loader.ts"],"names":[],"mappings":";;AAqCA,wCAsCC;AA3ED,qCAAiE;AACjE,qCAAkC;AAClC,yCAAsD;AAEtD,+BAA0C;AAE1C,qCAA4D;AAC5D,qDAA+C;AA4B/C,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AAE/E,SAAgB,cAAc,CAAC,OAA0B,EAAE;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACtC,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IAEtC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,YAAY,GAAG,IAAA,sBAAU,EAAC,IAAI,CAAC,QAAQ,CAAC;YAC5C,CAAC,CAAC,IAAI,CAAC,QAAQ;YACf,CAAC,CAAC,IAAA,mBAAO,EAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChC,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,iCAAiC,YAAY,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,OAAO;YACL,MAAM,EAAE,iBAAiB,CACvB,cAAc,CAAC,YAAY,CAAC,EAC5B,UAAU,EACV,YAAY,CACb;YACD,MAAM,EAAE,YAAY;YACpB,oBAAoB,EAAE,IAAA,sBAAY,EAAC,YAAY,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,kBAAkB,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/D,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;YACrB,OAAO;gBACL,MAAM,EAAE,iBAAiB,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC;gBACjE,MAAM,EAAE,IAAI;gBACZ,oBAAoB,EAAE,IAAA,sBAAY,EAAC,IAAI,CAAC;aACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,iBAAiB,CAAC,IAAA,wBAAe,EAAC,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,CAAC;QACrE,MAAM,EAAE,YAAY;QACpB,oBAAoB,EAAE,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,GAAG,CAAC,CAAC;KACjD,CAAC;AACJ,CAAC;AAQD,SAAS,iBAAiB,CACxB,OAAmB,EACnB,UAAkB,EAClB,WAA+B;IAE/B,IACE,WAAW,KAAK,SAAS;QACzB,IAAA,mBAAO,EAAC,WAAW,CAAC,KAAK,IAAA,mBAAO,EAAC,UAAU,CAAC,EAC5C,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,IAAA,oBAAU,EAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,OAAO,CAAC;IACjB,CAAC;IAKD,MAAM,aAAa,GAAG,IAAA,4BAAW,EAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,YAAS,EAAC,IAAI,CAAY,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,aAAa,OAAO,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAA,wBAAe,EAAC,GAAG,CAAC,CAAC;AAC9B,CAAC"}

package/dist/runtime/config/schema.d.ts

@@ -32,13 +32,22 @@ export declare enum SecretSource {
     Env = "env",
     File = "file"
 }
+export declare enum LaunchAllowedTiers {
+    Byok = "byok",
+    Both = "both",
+    ManagedOnly = "managed-only"
+}
+export declare enum CredentialPolicyAllowedTiers {
+    ByokOnly = "BYOK_ONLY",
+    ManagedOnly = "MANAGED_ONLY",
+    Both = "BOTH"
+}
 declare const InfraComponentConfigSchema: z.ZodObject<{
     mode: z.ZodEnum<typeof InfraMode>;
     url: z.ZodOptional<z.ZodString>;
     realm: z.ZodOptional<z.ZodString>;
     bucketPrefix: z.ZodOptional<z.ZodString>;
     secretRef: z.ZodOptional<z.ZodString>;
-    adminSecretRef: z.ZodOptional<z.ZodString>;
     persist: z.ZodOptional<z.ZodObject<{
         path: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
@@ -47,7 +56,7 @@ export type InfraComponentConfig = z.infer<typeof InfraComponentConfigSchema>;
 declare const AppConfigSchema: z.ZodObject<{
     substrate: z.ZodDefault<z.ZodEnum<typeof Substrate>>;
     processModel: z.ZodDefault<z.ZodEnum<typeof ProcessModel>>;
-    include: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+    include: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"default">, z.ZodLiteral<"minimal">, z.ZodArray<z.ZodString>]>>;
     exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
     features: z.ZodDefault<z.ZodArray<z.ZodString>>;
     web: z.ZodDefault<z.ZodObject<{
@@ -72,6 +81,15 @@ declare const SecretConfigSchema: z.ZodObject<{
     env: z.ZodOptional<z.ZodString>;
 }, z.core.$strict>;
 export type SecretConfig = z.infer<typeof SecretConfigSchema>;
+declare const CliConfigSchema: z.ZodObject<{
+    devMode: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+export type CliConfig = z.infer<typeof CliConfigSchema>;
+declare const PolicyConfigSchema: z.ZodObject<{
+    allowedTiers: z.ZodOptional<z.ZodEnum<typeof LaunchAllowedTiers>>;
+}, z.core.$strict>;
+export type PolicyConfig = z.infer<typeof PolicyConfigSchema>;
+export declare function resolveDefaultAllowedTiers(policy: PolicyConfig | undefined): CredentialPolicyAllowedTiers;
 export declare const XemaConfigSchema: z.ZodObject<{
     edition: z.ZodDefault<z.ZodString>;
     infra: z.ZodDefault<z.ZodObject<{
@@ -81,7 +99,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -92,7 +109,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -103,7 +119,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -114,7 +129,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -125,7 +139,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -136,7 +149,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -147,7 +159,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -158,7 +169,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -169,7 +179,6 @@ export declare const XemaConfigSchema: z.ZodObject<{
             realm: z.ZodOptional<z.ZodString>;
             bucketPrefix: z.ZodOptional<z.ZodString>;
             secretRef: z.ZodOptional<z.ZodString>;
-            adminSecretRef: z.ZodOptional<z.ZodString>;
             persist: z.ZodOptional<z.ZodObject<{
                 path: z.ZodOptional<z.ZodString>;
             }, z.core.$strict>>;
@@ -178,7 +187,7 @@ export declare const XemaConfigSchema: z.ZodObject<{
     app: z.ZodDefault<z.ZodObject<{
         substrate: z.ZodDefault<z.ZodEnum<typeof Substrate>>;
         processModel: z.ZodDefault<z.ZodEnum<typeof ProcessModel>>;
-        include: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodArray<z.ZodString>]>>;
+        include: z.ZodDefault<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"default">, z.ZodLiteral<"minimal">, z.ZodArray<z.ZodString>]>>;
         exclude: z.ZodDefault<z.ZodArray<z.ZodString>>;
         features: z.ZodDefault<z.ZodArray<z.ZodString>>;
         web: z.ZodDefault<z.ZodObject<{
@@ -227,6 +236,12 @@ export declare const XemaConfigSchema: z.ZodObject<{
         authTokenEnv: z.ZodOptional<z.ZodString>;
         name: z.ZodString;
     }, z.core.$strict>], "kind">>>;
+    cli: z.ZodOptional<z.ZodObject<{
+        devMode: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strict>>;
+    policy: z.ZodOptional<z.ZodObject<{
+        allowedTiers: z.ZodOptional<z.ZodEnum<typeof LaunchAllowedTiers>>;
+    }, z.core.$strict>>;
 }, z.core.$strict>;
 export type XemaConfig = z.infer<typeof XemaConfigSchema>;
 export declare function parseXemaConfig(raw: unknown): XemaConfig;

package/dist/runtime/config/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,oBAAY,SAAS;IAEnB,OAAO,YAAY;IAEnB,QAAQ,aAAa;IAErB,QAAQ,aAAa;CACtB;AAGD,oBAAY,SAAS;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IAEjB,IAAI,SAAS;CACd;AASD,oBAAY,YAAY;IACtB,WAAW,gBAAgB;CAC5B;AAGD,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,WAAW,gBAAgB;IAC3B,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAGD,oBAAY,eAAe;IAEzB,WAAW,iBAAiB;IAE5B,QAAQ,cAAc;CACvB;AAGD,oBAAY,YAAY;IACtB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAID,QAAA,MAAM,0BAA0B;;;;;;;;;;kBAUrB,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAuB9E,QAAA,MAAM,eAAe;;;;;;;;;;kBAeV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,QAAA,MAAM,iBAAiB;;;;;;;;kBAQZ,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,QAAA,MAAM,kBAAkB;;;;kBAMb,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqBlB,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAUxD"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAcxB,oBAAY,SAAS;IAEnB,OAAO,YAAY;IAEnB,QAAQ,aAAa;IAMrB,QAAQ,aAAa;CACtB;AAGD,oBAAY,SAAS;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IAEjB,IAAI,SAAS;CACd;AASD,oBAAY,YAAY;IACtB,WAAW,gBAAgB;CAC5B;AAGD,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,QAAQ,aAAa;IACrB,WAAW,gBAAgB;IAC3B,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,QAAQ,aAAa;CACtB;AAGD,oBAAY,eAAe;IAEzB,WAAW,iBAAiB;IAE5B,QAAQ,cAAc;CACvB;AAGD,oBAAY,YAAY;IACtB,MAAM,WAAW;IACjB,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAWD,oBAAY,kBAAkB;IAM5B,IAAI,SAAS;IAKb,IAAI,SAAS;IAKb,WAAW,iBAAiB;CAC7B;AAQD,oBAAY,4BAA4B;IACtC,QAAQ,cAAc;IACtB,WAAW,iBAAiB;IAC5B,IAAI,SAAS;CACd;AAgBD,QAAA,MAAM,0BAA0B;;;;;;;;;kBASrB,CAAC;AACZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAgF9E,QAAA,MAAM,eAAe;;;;;;;;;;kBAeV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,QAAA,MAAM,iBAAiB;;;;;;;;kBAcZ,CAAC;AACZ,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,QAAA,MAAM,kBAAkB;;;;kBA6BpB,CAAC;AACL,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAY9D,QAAA,MAAM,eAAe;;kBAIV,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AASxD,QAAA,MAAM,kBAAkB;;kBAIb,CAAC;AACZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAQ9D,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,YAAY,GAAG,SAAS,GAC/B,4BAA4B,CAG9B;AAED,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAmClB,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,UAAU,CAUxD"}

package/dist/runtime/config/schema.js

@@ -1,8 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.XemaConfigSchema = exports.SecretSource = exports.WorkspaceDriver = exports.InfraComponent = exports.ProcessModel = exports.Substrate = exports.InfraMode = void 0;
+exports.XemaConfigSchema = exports.CredentialPolicyAllowedTiers = exports.LaunchAllowedTiers = exports.SecretSource = exports.WorkspaceDriver = exports.InfraComponent = exports.ProcessModel = exports.Substrate = exports.InfraMode = void 0;
+exports.resolveDefaultAllowedTiers = resolveDefaultAllowedTiers;
 exports.parseXemaConfig = parseXemaConfig;
 const zod_1 = require("zod");
+const url_security_1 = require("../secrets/url-security");
 const schema_1 = require("../sources/schema");
 var InfraMode;
 (function (InfraMode) {
@@ -43,6 +45,23 @@ var SecretSource;
     SecretSource["Env"] = "env";
     SecretSource["File"] = "file";
 })(SecretSource || (exports.SecretSource = SecretSource = {}));
+var LaunchAllowedTiers;
+(function (LaunchAllowedTiers) {
+    LaunchAllowedTiers["Byok"] = "byok";
+    LaunchAllowedTiers["Both"] = "both";
+    LaunchAllowedTiers["ManagedOnly"] = "managed-only";
+})(LaunchAllowedTiers || (exports.LaunchAllowedTiers = LaunchAllowedTiers = {}));
+var CredentialPolicyAllowedTiers;
+(function (CredentialPolicyAllowedTiers) {
+    CredentialPolicyAllowedTiers["ByokOnly"] = "BYOK_ONLY";
+    CredentialPolicyAllowedTiers["ManagedOnly"] = "MANAGED_ONLY";
+    CredentialPolicyAllowedTiers["Both"] = "BOTH";
+})(CredentialPolicyAllowedTiers || (exports.CredentialPolicyAllowedTiers = CredentialPolicyAllowedTiers = {}));
+const LAUNCH_TIERS_TO_CREDENTIAL_POLICY = {
+    [LaunchAllowedTiers.Byok]: CredentialPolicyAllowedTiers.ByokOnly,
+    [LaunchAllowedTiers.Both]: CredentialPolicyAllowedTiers.Both,
+    [LaunchAllowedTiers.ManagedOnly]: CredentialPolicyAllowedTiers.ManagedOnly,
+};
 const PersistSchema = zod_1.z.object({ path: zod_1.z.string().min(1).optional() }).strict();
 const InfraComponentConfigSchema = zod_1.z
     .object({
@@ -51,7 +70,6 @@ const InfraComponentConfigSchema = zod_1.z
     realm: zod_1.z.string().min(1).optional(),
     bucketPrefix: zod_1.z.string().min(1).optional(),
     secretRef: zod_1.z.string().min(1).optional(),
-    adminSecretRef: zod_1.z.string().min(1).optional(),
     persist: PersistSchema.optional(),
 })
     .strict();
@@ -67,16 +85,55 @@ const InfraConfigSchema = zod_1.z
     [InfraComponent.Git]: InfraComponentConfigSchema.optional(),
     [InfraComponent.Temporal]: InfraComponentConfigSchema.optional(),
 })
-    .strict();
+    .strict()
+    .superRefine((infra, ctx) => {
+    for (const [component, config] of Object.entries(infra)) {
+        if (config?.secretRef !== undefined &&
+            (component !== InfraComponent.Postgres ||
+                config.mode !== InfraMode.External)) {
+            ctx.addIssue({
+                code: 'custom',
+                path: [component, 'secretRef'],
+                message: 'is only supported for external PostgreSQL passwords; managed credentials are owned by the launcher and service credentials use environment-named secrets',
+            });
+        }
+    }
+    const postgres = infra[InfraComponent.Postgres];
+    if (postgres?.mode !== InfraMode.External) {
+        return;
+    }
+    if (postgres.secretRef === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: [InfraComponent.Postgres, 'secretRef'],
+            message: 'is required for external PostgreSQL; passwords must be resolved from a declared secret',
+        });
+    }
+    if (postgres.url !== undefined) {
+        try {
+            if ((0, url_security_1.urlContainsCredentialMaterial)(new URL(postgres.url))) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: [InfraComponent.Postgres, 'url'],
+                    message: 'must not contain credential material; use secretRef so secrets are never persisted in configuration',
+                });
+            }
+        }
+        catch {
+        }
+    }
+});
 const RosterIncludeSchema = zod_1.z.union([
     zod_1.z.literal('all'),
+    zod_1.z.literal('default'),
+    zod_1.z.literal('minimal'),
     zod_1.z.array(zod_1.z.string().min(1)),
 ]);
 const AppConfigSchema = zod_1.z
     .object({
     substrate: zod_1.z.nativeEnum(Substrate).default(Substrate.Container),
     processModel: zod_1.z.nativeEnum(ProcessModel).default(ProcessModel.Distributed),
-    include: RosterIncludeSchema.default('all'),
+    include: RosterIncludeSchema.default('default'),
     exclude: zod_1.z.array(zod_1.z.string().min(1)).default([]),
     features: zod_1.z.array(zod_1.z.string().min(1)).default([]),
     web: zod_1.z
@@ -91,10 +148,16 @@ const AppConfigSchema = zod_1.z
 const StateConfigSchema = zod_1.z
     .object({
     workspaces: zod_1.z
-        .object({ driver: zod_1.z.nativeEnum(WorkspaceDriver).optional(), path: zod_1.z.string().min(1).optional() })
+        .object({
+        driver: zod_1.z.nativeEnum(WorkspaceDriver).optional(),
+        path: zod_1.z.string().min(1).optional(),
+    })
+        .strict()
+        .default({}),
+    biomeMaterialization: zod_1.z
+        .object({ path: zod_1.z.string().min(1).optional() })
         .strict()
         .default({}),
-    biomeMaterialization: zod_1.z.object({ path: zod_1.z.string().min(1).optional() }).strict().default({}),
 })
     .strict();
 const SecretConfigSchema = zod_1.z
@@ -102,8 +165,45 @@ const SecretConfigSchema = zod_1.z
     from: zod_1.z.nativeEnum(SecretSource),
     path: zod_1.z.string().min(1).optional(),
     env: zod_1.z.string().min(1).optional(),
+})
+    .strict()
+    .superRefine((secret, ctx) => {
+    if (secret.from === SecretSource.File && secret.path === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['path'],
+            message: 'is required when from is "file"',
+        });
+    }
+    if (secret.from !== SecretSource.File && secret.path !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['path'],
+            message: `is not allowed when from is "${secret.from}"`,
+        });
+    }
+    if (secret.from !== SecretSource.Env && secret.env !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['env'],
+            message: `is not allowed when from is "${secret.from}"`,
+        });
+    }
+});
+const CliConfigSchema = zod_1.z
+    .object({
+    devMode: zod_1.z.boolean().optional(),
 })
     .strict();
+const PolicyConfigSchema = zod_1.z
+    .object({
+    allowedTiers: zod_1.z.nativeEnum(LaunchAllowedTiers).optional(),
+})
+    .strict();
+function resolveDefaultAllowedTiers(policy) {
+    const tier = policy?.allowedTiers ?? LaunchAllowedTiers.Byok;
+    return LAUNCH_TIERS_TO_CREDENTIAL_POLICY[tier];
+}
 exports.XemaConfigSchema = zod_1.z
     .object({
     edition: zod_1.z.string().min(1).default('oss'),
@@ -111,14 +211,19 @@ exports.XemaConfigSchema = zod_1.z
     app: AppConfigSchema.default({
         substrate: Substrate.Container,
         processModel: ProcessModel.Distributed,
-        include: 'all',
+        include: 'default',
         exclude: [],
         features: [],
         web: { enabled: false },
     }),
-    state: StateConfigSchema.default({ workspaces: {}, biomeMaterialization: {} }),
+    state: StateConfigSchema.default({
+        workspaces: {},
+        biomeMaterialization: {},
+    }),
     secrets: zod_1.z.record(zod_1.z.string().min(1), SecretConfigSchema).default({}),
     sources: schema_1.SourcesConfigSchema,
+    cli: CliConfigSchema.optional(),
+    policy: PolicyConfigSchema.optional(),
 })
     .strict();
 function parseXemaConfig(raw) {

package/dist/runtime/config/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/runtime/config/schema.ts"],"names":[],"mappings":";;;AAyKA,0CAUC;AAnLD,6BAAwB;AAExB,8CAAwD;AAWxD,IAAY,SAOX;AAPD,WAAY,SAAS;IAEnB,gCAAmB,CAAA;IAEnB,kCAAqB,CAAA;IAErB,kCAAqB,CAAA;AACvB,CAAC,EAPW,SAAS,yBAAT,SAAS,QAOpB;AAGD,IAAY,SAKX;AALD,WAAY,SAAS;IACnB,oCAAuB,CAAA;IACvB,8BAAiB,CAAA;IAEjB,0BAAa,CAAA;AACf,CAAC,EALW,SAAS,yBAAT,SAAS,QAKpB;AASD,IAAY,YAEX;AAFD,WAAY,YAAY;IACtB,2CAA2B,CAAA;AAC7B,CAAC,EAFW,YAAY,4BAAZ,YAAY,QAEvB;AAGD,IAAY,cAUX;AAVD,WAAY,cAAc;IACxB,uCAAqB,CAAA;IACrB,iCAAe,CAAA;IACf,+BAAa,CAAA;IACb,uCAAqB,CAAA;IACrB,6CAA2B,CAAA;IAC3B,mCAAiB,CAAA;IACjB,6BAAW,CAAA;IACX,6BAAW,CAAA;IACX,uCAAqB,CAAA;AACvB,CAAC,EAVW,cAAc,8BAAd,cAAc,QAUzB;AAGD,IAAY,eAKX;AALD,WAAY,eAAe;IAEzB,+CAA4B,CAAA;IAE5B,yCAAsB,CAAA;AACxB,CAAC,EALW,eAAe,+BAAf,eAAe,QAK1B;AAGD,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,iCAAiB,CAAA;IACjB,2BAAW,CAAA;IACX,6BAAa,CAAA;AACf,CAAC,EAJW,YAAY,4BAAZ,YAAY,QAIvB;AAED,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhF,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,SAAS,CAAC;IAC7B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,MAAM,iBAAiB,GAAG,OAAC;KACxB,MAAM,CAAC;IACN,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAChE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC7D,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC5D,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAChE,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACnE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC9D,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3D,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3D,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,mBAAmB,GAAG,OAAC,CAAC,KAAK,CAAC;IAClC,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChB,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,OAAC;KACtB,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;IAC/D,YAAY,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;IAC1E,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;KAC9C,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,iBAAiB,GAAG,OAAC;KACxB,MAAM,CAAC;IACN,UAAU,EAAE,OAAC;SACV,MAAM,CAAC,EAAE,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;SAChG,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;IACd,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAGC,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,YAAY,EAAE,YAAY,CAAC,WAAW;QACtC,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;KACxB,CAAC;IACF,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAC9E,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAMpE,OAAO,EAAE,4BAAmB;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,SAAgB,eAAe,CAAC,GAAY;IAC1C,MAAM,MAAM,GAAG,wBAAgB,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,KAAK,CAAC,MAAM;aAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAChD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/runtime/config/schema.ts"],"names":[],"mappings":";;;AAkUA,gEAKC;AA0CD,0CAUC;AA3XD,6BAAwB;AAExB,0DAAwE;AACxE,8CAAwD;AAWxD,IAAY,SAWX;AAXD,WAAY,SAAS;IAEnB,gCAAmB,CAAA;IAEnB,kCAAqB,CAAA;IAMrB,kCAAqB,CAAA;AACvB,CAAC,EAXW,SAAS,yBAAT,SAAS,QAWpB;AAGD,IAAY,SAKX;AALD,WAAY,SAAS;IACnB,oCAAuB,CAAA;IACvB,8BAAiB,CAAA;IAEjB,0BAAa,CAAA;AACf,CAAC,EALW,SAAS,yBAAT,SAAS,QAKpB;AASD,IAAY,YAEX;AAFD,WAAY,YAAY;IACtB,2CAA2B,CAAA;AAC7B,CAAC,EAFW,YAAY,4BAAZ,YAAY,QAEvB;AAGD,IAAY,cAUX;AAVD,WAAY,cAAc;IACxB,uCAAqB,CAAA;IACrB,iCAAe,CAAA;IACf,+BAAa,CAAA;IACb,uCAAqB,CAAA;IACrB,6CAA2B,CAAA;IAC3B,mCAAiB,CAAA;IACjB,6BAAW,CAAA;IACX,6BAAW,CAAA;IACX,uCAAqB,CAAA;AACvB,CAAC,EAVW,cAAc,8BAAd,cAAc,QAUzB;AAGD,IAAY,eAKX;AALD,WAAY,eAAe;IAEzB,+CAA4B,CAAA;IAE5B,yCAAsB,CAAA;AACxB,CAAC,EALW,eAAe,+BAAf,eAAe,QAK1B;AAGD,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,iCAAiB,CAAA;IACjB,2BAAW,CAAA;IACX,6BAAa,CAAA;AACf,CAAC,EAJW,YAAY,4BAAZ,YAAY,QAIvB;AAWD,IAAY,kBAiBX;AAjBD,WAAY,kBAAkB;IAM5B,mCAAa,CAAA;IAKb,mCAAa,CAAA;IAKb,kDAA4B,CAAA;AAC9B,CAAC,EAjBW,kBAAkB,kCAAlB,kBAAkB,QAiB7B;AAQD,IAAY,4BAIX;AAJD,WAAY,4BAA4B;IACtC,sDAAsB,CAAA;IACtB,4DAA4B,CAAA;IAC5B,6CAAa,CAAA;AACf,CAAC,EAJW,4BAA4B,4CAA5B,4BAA4B,QAIvC;AAMD,MAAM,iCAAiC,GAEnC;IACF,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,QAAQ;IAChE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,4BAA4B,CAAC,IAAI;IAC5D,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,4BAA4B,CAAC,WAAW;CAC3E,CAAC;AAEF,MAAM,aAAa,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhF,MAAM,0BAA0B,GAAG,OAAC;KACjC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,SAAS,CAAC;IAC7B,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,MAAM,iBAAiB,GAAG,OAAC;KACxB,MAAM,CAAC;IACN,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAChE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC7D,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC5D,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAChE,CAAC,cAAc,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACnE,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC9D,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3D,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAC3D,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,IACE,MAAM,EAAE,SAAS,KAAK,SAAS;YAC/B,CAAC,SAAS,KAAK,cAAc,CAAC,QAAQ;gBACpC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,QAAQ,CAAC,EACrC,CAAC;YACD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC;gBAC9B,OAAO,EACL,0JAA0J;aAC7J,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,IAAI,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;QAC1C,OAAO;IACT,CAAC;IACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,WAAW,CAAC;YAC5C,OAAO,EACL,wFAAwF;SAC3F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,IAAI,IAAA,4CAA6B,EAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,QAAQ,CAAC;oBACX,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC;oBACtC,OAAO,EACL,qGAAqG;iBACxG,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;QAGT,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAcL,MAAM,mBAAmB,GAAG,OAAC,CAAC,KAAK,CAAC;IAClC,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAChB,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpB,OAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACpB,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,OAAC;KACtB,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;IAC/D,YAAY,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;IAC1E,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,GAAG,EAAE,OAAC;SACH,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;KAC9C,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;CAC/B,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,iBAAiB,GAAG,OAAC;KACxB,MAAM,CAAC;IACN,UAAU,EAAE,OAAC;SACV,MAAM,CAAC;QACN,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;QAChD,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;KACnC,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;IACd,oBAAoB,EAAE,OAAC;SACpB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC9C,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,CAAC;CACf,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC;IAChC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClC,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,OAAO,EAAE,gCAAgC,MAAM,CAAC,IAAI,GAAG;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QACjE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,CAAC;YACb,OAAO,EAAE,gCAAgC,MAAM,CAAC,IAAI,GAAG;SACxD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAaL,MAAM,eAAe,GAAG,OAAC;KACtB,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAUZ,MAAM,kBAAkB,GAAG,OAAC;KACzB,MAAM,CAAC;IACN,YAAY,EAAE,OAAC,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AASZ,SAAgB,0BAA0B,CACxC,MAAgC;IAEhC,MAAM,IAAI,GAAG,MAAM,EAAE,YAAY,IAAI,kBAAkB,CAAC,IAAI,CAAC;IAC7D,OAAO,iCAAiC,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAEY,QAAA,gBAAgB,GAAG,OAAC;KAC9B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACzC,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC;QAC3B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,YAAY,EAAE,YAAY,CAAC,WAAW;QACtC,OAAO,EAAE,SAAS;QAClB,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;KACxB,CAAC;IACF,KAAK,EAAE,iBAAiB,CAAC,OAAO,CAAC;QAC/B,UAAU,EAAE,EAAE;QACd,oBAAoB,EAAE,EAAE;KACzB,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAMpE,OAAO,EAAE,4BAAmB;IAK5B,GAAG,EAAE,eAAe,CAAC,QAAQ,EAAE;IAM/B,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CACtC,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,SAAgB,eAAe,CAAC,GAAY;IAC1C,MAAM,MAAM,GAAG,wBAAgB,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,KAAK,CAAC,MAAM;aAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAChD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/runtime/config/sources-config.d.ts

@@ -0,0 +1,14 @@
+import { type SourceSpec } from '../sources/schema';
+export declare const USER_CONFIG_FILE: string;
+export declare const localConfigFile: () => string;
+export declare function sourcesConfigTarget(global: boolean): string;
+export declare function readSources(path: string): SourceSpec[];
+export declare function addSource(target: string, spec: unknown): {
+    path: string;
+    source: SourceSpec;
+};
+export declare function removeSource(target: string, name: string): {
+    path: string;
+    removed: boolean;
+};
+//# sourceMappingURL=sources-config.d.ts.map

package/dist/runtime/config/sources-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources-config.d.ts","sourceRoot":"","sources":["../../../src/runtime/config/sources-config.ts"],"names":[],"mappings":"AAMA,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAetE,eAAO,MAAM,gBAAgB,QAA0C,CAAC;AACxE,eAAO,MAAM,eAAe,QAAO,MACS,CAAC;AAG7C,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAE3D;AAyCD,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,EAAE,CActD;AAMD,wBAAgB,SAAS,CACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,GACZ;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAmBtC;AAGD,wBAAgB,YAAY,CAC1B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAQpC"}

package/dist/runtime/config/sources-config.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.localConfigFile = exports.USER_CONFIG_FILE = void 0;
+exports.sourcesConfigTarget = sourcesConfigTarget;
+exports.readSources = readSources;
+exports.addSource = addSource;
+exports.removeSource = removeSource;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const yaml_1 = require("yaml");
+const schema_1 = require("../sources/schema");
+exports.USER_CONFIG_FILE = (0, node_path_1.join)((0, node_os_1.homedir)(), '.xema', 'config.yaml');
+const localConfigFile = () => (0, node_path_1.resolve)(process.cwd(), 'xema.config.yaml');
+exports.localConfigFile = localConfigFile;
+function sourcesConfigTarget(global) {
+    return global ? exports.USER_CONFIG_FILE : (0, exports.localConfigFile)();
+}
+function readConfigDocument(path) {
+    if (!(0, node_fs_1.existsSync)(path)) {
+        return new yaml_1.Document({});
+    }
+    const doc = (0, yaml_1.parseDocument)((0, node_fs_1.readFileSync)(path, 'utf8'));
+    if (doc.errors.length > 0) {
+        throw new Error(`Failed to parse ${path} as YAML: ${doc.errors.map((e) => e.message).join('; ')}`);
+    }
+    if (doc.contents !== null && !(0, yaml_1.isMap)(doc.contents)) {
+        throw new Error(`${path} is not a YAML mapping — refusing to mutate a malformed config.`);
+    }
+    return doc;
+}
+function writeSources(path, sources) {
+    const doc = readConfigDocument(path);
+    if (!(0, yaml_1.isMap)(doc.contents)) {
+        doc.contents = doc.createNode({});
+    }
+    doc.set('sources', doc.createNode(sources, { aliasDuplicateObjects: false }));
+    (0, node_fs_1.mkdirSync)((0, node_path_1.dirname)(path), { recursive: true });
+    (0, node_fs_1.writeFileSync)(path, doc.toString(), 'utf8');
+}
+function readSources(path) {
+    const raw = readConfigDocument(path).toJS()?.sources;
+    if (raw === undefined || raw === null) {
+        return [];
+    }
+    const parsed = schema_1.SourceSpecSchema.array().safeParse(raw);
+    if (!parsed.success) {
+        throw new Error(`Invalid sources in ${path}: ${parsed.error.issues
+            .map((i) => `[${i.path.join('.')}] ${i.message}`)
+            .join('; ')}`);
+    }
+    return parsed.data;
+}
+function addSource(target, spec) {
+    const parsed = schema_1.SourceSpecSchema.safeParse(spec);
+    if (!parsed.success) {
+        throw new Error(`Invalid source: ${parsed.error.issues
+            .map((i) => `[${i.path.join('.')}] ${i.message}`)
+            .join('; ')}`);
+    }
+    const source = parsed.data;
+    const sources = readSources(target);
+    if (sources.some((s) => s.name === source.name)) {
+        throw new Error(`A source named "${source.name}" already exists in ${target}. ` +
+            `Remove it first (\`xema source remove ${source.name}\`) or pick another name.`);
+    }
+    writeSources(target, [...sources, source]);
+    return { path: target, source };
+}
+function removeSource(target, name) {
+    const sources = readSources(target);
+    const next = sources.filter((s) => s.name !== name);
+    if (next.length === sources.length) {
+        return { path: target, removed: false };
+    }
+    writeSources(target, next);
+    return { path: target, removed: true };
+}
+//# sourceMappingURL=sources-config.js.map

package/dist/runtime/config/sources-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sources-config.js","sourceRoot":"","sources":["../../../src/runtime/config/sources-config.ts"],"names":[],"mappings":";;;AA0BA,kDAEC;AAyCD,kCAcC;AAMD,8BAsBC;AAGD,oCAWC;AA7HD,qCAA6E;AAC7E,qCAAkC;AAClC,yCAAmD;AAEnD,+BAAsD;AAEtD,8CAAsE;AAezD,QAAA,gBAAgB,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;AACjE,MAAM,eAAe,GAAG,GAAW,EAAE,CAC1C,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC,CAAC;AADhC,QAAA,eAAe,mBACiB;AAG7C,SAAgB,mBAAmB,CAAC,MAAe;IACjD,OAAO,MAAM,CAAC,CAAC,CAAC,wBAAgB,CAAC,CAAC,CAAC,IAAA,uBAAe,GAAE,CAAC;AACvD,CAAC;AAOD,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,CAAC,IAAA,oBAAU,EAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,IAAI,eAAQ,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,oBAAa,EAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACtD,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,aAAa,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAA,YAAK,EAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,GAAG,IAAI,iEAAiE,CACzE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,SAAS,YAAY,CAAC,IAAY,EAAE,OAA8B;IAChE,MAAM,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,IAAA,YAAK,EAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,EAAE,CAAwB,CAAC;IAC3D,CAAC;IACD,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9E,IAAA,mBAAS,EAAC,IAAA,mBAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,IAAA,uBAAa,EAAC,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;AAC9C,CAAC;AAGD,SAAgB,WAAW,CAAC,IAAY;IACtC,MAAM,GAAG,GAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAmC,EAAE,OAAO,CAAC;IACvF,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,MAAM,GAAG,yBAAgB,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,sBAAsB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM;aAC/C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAChD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAMD,SAAgB,SAAS,CACvB,MAAc,EACd,IAAa;IAEb,MAAM,MAAM,GAAG,yBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,KAAK,CAAC,MAAM;aACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aAChD,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,mBAAmB,MAAM,CAAC,IAAI,uBAAuB,MAAM,IAAI;YAC7D,yCAAyC,MAAM,CAAC,IAAI,2BAA2B,CAClF,CAAC;IACJ,CAAC;IACD,YAAY,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAGD,SAAgB,YAAY,CAC1B,MAAc,EACd,IAAY;IAEZ,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IACD,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC"}

package/dist/runtime/distribution/compose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAG5F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IAEjD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAWD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CAqDtE"}
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AAG5F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IAEjD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAWD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CA4DtE"}

package/dist/runtime/distribution/compose.js

@@ -30,7 +30,9 @@ function composeDistribution(input) {
         },
         platformServices: baseLock.platformServices.map((ps) => ({ name: ps.name, tier: ps.tier })),
     };
-    const resolved = (0, distribution_resolver_1.resolveDistribution)(definition, pool, { resolvedAt: input.resolvedAt });
+    const resolved = (0, distribution_resolver_1.resolveDistribution)(definition, pool, baseLock.capabilityDomainOwners, {
+        resolvedAt: input.resolvedAt,
+    });
     const requiresById = new Map(pool.map((b) => [b.id, b.requires]));
     const lock = {
         ...resolved,

package/dist/runtime/distribution/compose.js.map

@@ -1 +1 @@
-{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":";;AAmDA,kDAqDC;AAxGD,yEAAyF;AACzF,0DAA6D;AAE7D,gDAAsD;AACtD,uDAI2B;AAC3B,4DAA8D;AA0C9D,SAAgB,mBAAmB,CAAC,KAAmB;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,MAAM,UAAU,GAAqB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAsB,CAAC,CAAC;IAEjF,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,sCAAoB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAElF,MAAM,UAAU,GAAiB;QAC/B,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE;QAC1C,WAAW,EAAE,sCAAsC,KAAK,CAAC,WAAW,OAAO,MAAM,CAC/E,KAAK,CAAC,WAAW,CAAC,MAAM,CACzB,kBAAkB;QAInB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,WAAW,EAAE;YACX,KAAK,EAAE,KAAK,CAAC,eAAe;gBAC1B,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,EAAE,mBAAW,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,CAAC;SAC7B;QACD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5F,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAA,2CAAmB,EAAC,UAAU,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAIzF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAqB;QAC7B,GAAG,QAAQ;QACX,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC;YACJ,oBAAoB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SACnD,CAAC,CAAC;KACJ,CAAC;IAEF,OAAO;QACL,UAAU;QACV,IAAI;QACJ,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU;KACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":";;AAmDA,kDA4DC;AA/GD,yEAAyF;AACzF,0DAA6D;AAE7D,gDAAsD;AACtD,uDAI2B;AAC3B,4DAA8D;AA0C9D,SAAgB,mBAAmB,CAAC,KAAmB;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAChF,MAAM,UAAU,GAAqB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAsB,CAAC,CAAC;IAEjF,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,sCAAoB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAElF,MAAM,UAAU,GAAiB;QAC/B,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE;QAC1C,WAAW,EAAE,sCAAsC,KAAK,CAAC,WAAW,OAAO,MAAM,CAC/E,KAAK,CAAC,WAAW,CAAC,MAAM,CACzB,kBAAkB;QAInB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,WAAW,EAAE;YACX,KAAK,EAAE,KAAK,CAAC,eAAe;gBAC1B,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,EAAE,mBAAW,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,CAAC;SAC7B;QACD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5F,CAAC;IAOF,MAAM,QAAQ,GAAG,IAAA,2CAAmB,EAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,sBAAsB,EAAE;QACtF,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IAIH,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,IAAI,GAAqB;QAC7B,GAAG,QAAQ;QACX,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClC,GAAG,CAAC;YACJ,oBAAoB,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE;SACnD,CAAC,CAAC;KACJ,CAAC;IAEF,OAAO;QACL,UAAU;QACV,IAAI;QACJ,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/runtime/env-seeder.d.ts

@@ -1,6 +1,8 @@
 import { Substrate, type XemaConfig } from './config/schema';
+import { type ResolvedSecrets } from './secrets/resolver';
 import type { InfraPlan } from './infra/infra-plan';
 import type { RosterEntry } from './roster';
+import type { LocalInfrastructureCredentials } from './secrets/managed-local-store';
 export interface SeededEnv {
     readonly base: Readonly<Record<string, string>>;
     perService(entry: RosterEntry): Readonly<Record<string, string>>;
@@ -10,8 +12,11 @@ export interface EnvSeederContext {
     readonly infra: InfraPlan;
     readonly roster: readonly RosterEntry[];
     readonly substrate: Substrate;
+    readonly distributionLockPath: string;
     readonly ports?: ReadonlyMap<string, number>;
     readonly containerPort?: number;
+    readonly secrets?: ResolvedSecrets;
+    readonly managedCredentials?: LocalInfrastructureCredentials;
 }
 export declare function seedEnv(ctx: EnvSeederContext): SeededEnv;
 //# sourceMappingURL=env-seeder.d.ts.map

package/dist/runtime/env-seeder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-seeder.d.ts","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":"AAOA,OAAO,EAA6B,SAAS,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIxF,OAAO,KAAK,EAAE,SAAS,EAA0B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAa5C,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAE9B,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAID,wBAAgB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAoExD"}
+{"version":3,"file":"env-seeder.d.ts","sourceRoot":"","sources":["../../src/runtime/env-seeder.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,SAAS,EAET,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,SAAS,EAA0B,MAAM,oBAAoB,CAAC;AAC5E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,+BAA+B,CAAC;AAapF,MAAM,WAAW,SAAS;IAExB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAEhD,UAAU,CAAC,KAAK,EAAE,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAQ9B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IAEtC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;IAEnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,8BAA8B,CAAC;CAC9D;AA+BD,wBAAgB,OAAO,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAyKxD"}