ai-cred 1.0.0

package/dist/core/keychain-adapter.js

@@ -0,0 +1,221 @@
+/**
+ * KeychainAdapter: Wraps the macOS `security` CLI for all credential operations.
+ *
+ * Security invariants enforced throughout this file:
+ * - SEC-01: Every exec() call targets this.keychainPath (dedicated keychain only)
+ * - SEC-02: All subprocess calls use execFile (not exec) with argument arrays --
+ *           shell string interpolation is never used
+ * - SEC-04: list() returns metadata only -- no secret values, no -d/-w flags
+ * - SEC-05: No logging of subprocess arguments or output (they may contain credentials)
+ */
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import { existsSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { CredentialSchema } from '../types/credential.js';
+import { buildServiceKey } from '../utils/validation.js';
+import { KeychainError, toKeychainError } from './errors.js';
+// Re-export KeychainError so callers can import from this module too
+export { KeychainError } from './errors.js';
+const KEYCHAIN_PASSWORD = 'ai-cred';
+const KEYCHAIN_FILENAME = 'ai-cred.keychain-db';
+const ACCOUNT = 'default';
+const APP_MARKER = 'ai-cred';
+const DEFAULT_KEYCHAIN_PATH = join(homedir(), 'Library', 'Keychains', KEYCHAIN_FILENAME);
+const execFileAsync = promisify(execFile);
+export class KeychainAdapter {
+    keychainPath;
+    constructor(keychainPath) {
+        this.keychainPath = keychainPath ?? DEFAULT_KEYCHAIN_PATH;
+    }
+    /**
+     * Internal helper: invoke the macOS `security` binary with the given args.
+     *
+     * SECURITY: Never log args (may include credentials in -w values).
+     * SECURITY: Errors are converted via toKeychainError which strips subprocess output.
+     */
+    async exec(args, operationContext) {
+        try {
+            const { stdout, stderr } = await execFileAsync('/usr/bin/security', args);
+            return { stdout, stderr };
+        }
+        catch (err) {
+            const op = operationContext?.operation ?? 'unknown';
+            const svc = operationContext?.service;
+            throw toKeychainError(err, op, svc);
+        }
+    }
+    /**
+     * Initialize the dedicated keychain.
+     *
+     * First run: creates keychain, disables auto-lock, adds to search list.
+     * Every run: unlocks the keychain so operations can proceed.
+     */
+    async initialize() {
+        if (!existsSync(this.keychainPath)) {
+            // --- First run: create and configure the keychain ---
+            // Create the keychain with the internal password
+            await this.exec(['create-keychain', '-p', KEYCHAIN_PASSWORD, this.keychainPath], { operation: 'create-keychain' });
+            // Disable auto-lock: set-keychain-settings with no flags clears the
+            // lock-on-sleep and lock-after-timeout settings
+            await this.exec(['set-keychain-settings', this.keychainPath], { operation: 'set-keychain-settings' });
+            // Preserve existing keychains when adding our keychain to the search list
+            const { stdout: listOut } = await this.exec(['list-keychains', '-d', 'user'], { operation: 'list-keychains' });
+            // Each line is a quoted path such as: "    \"/path/to/login.keychain-db\"\n"
+            const existingKeychains = listOut
+                .split('\n')
+                .map((line) => line.trim().replace(/^"|"$/g, ''))
+                .filter((p) => p.length > 0);
+            await this.exec(['list-keychains', '-d', 'user', '-s', this.keychainPath, ...existingKeychains], { operation: 'list-keychains-set' });
+        }
+        // Always unlock on startup (handles both first-run and subsequent runs)
+        await this.exec(['unlock-keychain', '-p', KEYCHAIN_PASSWORD, this.keychainPath], { operation: 'unlock-keychain' });
+    }
+    /**
+     * Store a credential in the dedicated keychain.
+     * Uses -U to update if the entry already exists.
+     */
+    async store(env, service, credential) {
+        const serviceKey = buildServiceKey(env, service);
+        const jsonData = JSON.stringify(credential);
+        await this.exec([
+            'add-generic-password',
+            '-a', ACCOUNT,
+            '-s', serviceKey,
+            '-w', jsonData,
+            '-U',
+            '-j', credential.type,
+            '-D', APP_MARKER,
+            this.keychainPath,
+        ], { operation: 'add-generic-password', service: serviceKey });
+    }
+    /**
+     * Retrieve a credential from the dedicated keychain.
+     * Validates the returned JSON against CredentialSchema before returning.
+     */
+    async get(env, service) {
+        const serviceKey = buildServiceKey(env, service);
+        const { stdout } = await this.exec(['find-generic-password', '-s', serviceKey, '-a', ACCOUNT, '-w', this.keychainPath], { operation: 'find-generic-password', service: serviceKey });
+        let parsed;
+        try {
+            parsed = JSON.parse(stdout.trim());
+        }
+        catch {
+            throw new KeychainError('find-generic-password', -1, serviceKey);
+        }
+        const result = CredentialSchema.safeParse(parsed);
+        if (!result.success) {
+            throw new KeychainError('find-generic-password', -1, serviceKey);
+        }
+        return result.data;
+    }
+    /**
+     * Delete a credential from the dedicated keychain.
+     */
+    async delete(env, service) {
+        const serviceKey = buildServiceKey(env, service);
+        await this.exec(['delete-generic-password', '-s', serviceKey, '-a', ACCOUNT, this.keychainPath], { operation: 'delete-generic-password', service: serviceKey });
+    }
+    /**
+     * List all ai-cred credentials as metadata (no secret values) (SEC-04).
+     *
+     * Uses dump-keychain without -d flag so password data is NEVER retrieved.
+     * Filters entries by APP_MARKER in the description field.
+     */
+    async list() {
+        const { stdout } = await this.exec(
+        // dump-keychain without -d: retrieves attributes only, never passwords
+        ['dump-keychain', this.keychainPath], { operation: 'dump-keychain' });
+        return parseKeychainDump(stdout);
+    }
+    /**
+     * Delete the entire keychain file. Intended for test cleanup only.
+     */
+    async destroy() {
+        await this.exec(['delete-keychain', this.keychainPath], { operation: 'delete-keychain' });
+    }
+}
+// ---------------------------------------------------------------------------
+// Internal: keychain dump parser
+// ---------------------------------------------------------------------------
+/**
+ * Parse the output of `security dump-keychain` and return CredentialMetadata
+ * for every entry that belongs to ai-cred.
+ *
+ * SEC-04: This function operates only on the attribute dump output (no -d flag
+ * was used), so no password data is ever present in `raw`.
+ */
+function parseKeychainDump(raw) {
+    if (!raw.trim())
+        return [];
+    // Split into per-entry blocks on lines that start with "keychain:"
+    const blocks = raw.split(/(?=^keychain:)/m).filter((b) => b.trim().length > 0);
+    const results = [];
+    for (const block of blocks) {
+        const svce = extractAttribute(block, 'svce');
+        const desc = extractAttribute(block, 'desc');
+        const icmt = extractAttribute(block, 'icmt');
+        const cdat = extractTimestamp(block, 'cdat');
+        const mdat = extractTimestamp(block, 'mdat');
+        // Filter: only entries written by ai-cred (desc == APP_MARKER, svce starts with 'ai-cred/')
+        if (!svce || desc !== APP_MARKER)
+            continue;
+        if (!svce.startsWith('ai-cred/'))
+            continue;
+        // Parse service key: ai-cred/{env}/{service}
+        const parts = svce.split('/');
+        if (parts.length < 3)
+            continue;
+        const environment = parts[1];
+        const service = parts.slice(2).join('/');
+        const type = icmt ?? 'unknown';
+        results.push({
+            service,
+            environment,
+            type,
+            createdAt: cdat ?? '',
+            modifiedAt: mdat ?? '',
+        });
+    }
+    return results;
+}
+/**
+ * Extract a blob attribute value from a keychain dump block.
+ * Matches lines like:   "svce"<blob>="my-service-name"
+ */
+function extractAttribute(block, attr) {
+    const re = new RegExp(`"${attr}"<blob>="(.*?)"`);
+    const m = re.exec(block);
+    return m?.[1];
+}
+/**
+ * Extract and normalise a timedate attribute from a keychain dump block.
+ * Matches lines like:
+ *   "cdat"<timedate>=0x303230...  "20230101120000Z\000"
+ *
+ * The human-readable value appears after the hex dump, inside quotes,
+ * terminated by a \000 escape. We parse the YYYYMMDDHHmmssZ format into
+ * an ISO 8601 string.
+ */
+function extractTimestamp(block, attr) {
+    const re = new RegExp(`"${attr}"<timedate>=0x[0-9A-Fa-f]+\\s+"(.*?)\\\\000"`);
+    const m = re.exec(block);
+    if (!m?.[1])
+        return undefined;
+    return parseMacTimestamp(m[1]);
+}
+/**
+ * Convert a macOS keychain timestamp (YYYYMMDDHHmmssZ) to ISO 8601.
+ * Returns the original string if it does not match the expected format.
+ */
+function parseMacTimestamp(ts) {
+    // Format: 20230615143022Z
+    const re = /^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})Z$/;
+    const m = re.exec(ts.trim());
+    if (!m)
+        return ts;
+    const [, year, month, day, hour, min, sec] = m;
+    return `${year}-${month}-${day}T${hour}:${min}:${sec}Z`;
+}
+//# sourceMappingURL=keychain-adapter.js.map

package/dist/core/keychain-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-adapter.js","sourceRoot":"","sources":["../../src/core/keychain-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE7D,qEAAqE;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,iBAAiB,GAAG,SAAS,CAAC;AACpC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAChD,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,MAAM,qBAAqB,GAAG,IAAI,CAChC,OAAO,EAAE,EACT,SAAS,EACT,WAAW,EACX,iBAAiB,CAClB,CAAC;AAaF,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,OAAO,eAAe;IACT,YAAY,CAAS;IAEtC,YAAY,YAAqB;QAC/B,IAAI,CAAC,YAAY,GAAG,YAAY,IAAI,qBAAqB,CAAC;IAC5D,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,IAAI,CAChB,IAAc,EACd,gBAA0D;QAE1D,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;YAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,EAAE,GAAG,gBAAgB,EAAE,SAAS,IAAI,SAAS,CAAC;YACpD,MAAM,GAAG,GAAG,gBAAgB,EAAE,OAAO,CAAC;YACtC,MAAM,eAAe,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,uDAAuD;YAEvD,iDAAiD;YACjD,MAAM,IAAI,CAAC,IAAI,CACb,CAAC,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,EAC/D,EAAE,SAAS,EAAE,iBAAiB,EAAE,CACjC,CAAC;YAEF,oEAAoE;YACpE,gDAAgD;YAChD,MAAM,IAAI,CAAC,IAAI,CACb,CAAC,uBAAuB,EAAE,IAAI,CAAC,YAAY,CAAC,EAC5C,EAAE,SAAS,EAAE,uBAAuB,EAAE,CACvC,CAAC;YAEF,0EAA0E;YAC1E,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CACzC,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,EAChC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAChC,CAAC;YAEF,6EAA6E;YAC7E,MAAM,iBAAiB,GAAG,OAAO;iBAC9B,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;iBAChD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAE/B,MAAM,IAAI,CAAC,IAAI,CACb,CAAC,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,iBAAiB,CAAC,EAC/E,EAAE,SAAS,EAAE,oBAAoB,EAAE,CACpC,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,MAAM,IAAI,CAAC,IAAI,CACb,CAAC,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,EAC/D,EAAE,SAAS,EAAE,iBAAiB,EAAE,CACjC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,GAAgB,EAAE,OAAe,EAAE,UAAsB;QACnE,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,IAAI,CAAC,IAAI,CACb;YACE,sBAAsB;YACtB,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,QAAQ;YACd,IAAI;YACJ,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,IAAI,EAAE,UAAU;YAChB,IAAI,CAAC,YAAY;SAClB,EACD,EAAE,SAAS,EAAE,sBAAsB,EAAE,OAAO,EAAE,UAAU,EAAE,CAC3D,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,GAAgB,EAAE,OAAe;QACzC,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAChC,CAAC,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,EACnF,EAAE,SAAS,EAAE,uBAAuB,EAAE,OAAO,EAAE,UAAU,EAAE,CAC5D,CAAC;QAEF,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACnE,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,CAAC,GAAgB,EAAE,OAAe;QAC5C,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEjD,MAAM,IAAI,CAAC,IAAI,CACb,CAAC,yBAAyB,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,EAC/E,EAAE,SAAS,EAAE,yBAAyB,EAAE,OAAO,EAAE,UAAU,EAAE,CAC9D,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI;QACR,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI;QAChC,uEAAuE;QACvE,CAAC,eAAe,EAAE,IAAI,CAAC,YAAY,CAAC,EACpC,EAAE,SAAS,EAAE,eAAe,EAAE,CAC/B,CAAC;QAEF,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,IAAI,CAAC,IAAI,CACb,CAAC,iBAAiB,EAAE,IAAI,CAAC,YAAY,CAAC,EACtC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CACjC,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAC9E,iCAAiC;AACjC,8EAA8E;AAE9E;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,GAAW;IACpC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAE3B,mEAAmE;IACnE,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE7C,4FAA4F;QAC5F,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,UAAU;YAAE,SAAS;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,SAAS;QAE3C,6CAA6C;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAE/B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAgB,CAAC;QAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,IAAI,SAAS,CAAC;QAE/B,OAAO,CAAC,IAAI,CAAC;YACX,OAAO;YACP,WAAW;YACX,IAAI;YACJ,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,IAAI,iBAAiB,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,gBAAgB,CAAC,KAAa,EAAE,IAAY;IACnD,MAAM,EAAE,GAAG,IAAI,MAAM,CACnB,IAAI,IAAI,8CAA8C,CACvD,CAAC;IACF,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAE9B,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,EAAU;IACnC,0BAA0B;IAC1B,MAAM,EAAE,GAAG,+CAA+C,CAAC;IAC3D,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7B,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAElB,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC;AAC1D,CAAC"}

package/dist/core/keychain-adapter.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/core/keychain-adapter.test.js

@@ -0,0 +1,331 @@
+import { describe, it, expect, beforeAll, afterAll } from 'vitest';
+import { existsSync } from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { KeychainAdapter } from './keychain-adapter.js';
+import { KeychainError, toKeychainError } from './errors.js';
+// ---------------------------------------------------------------------------
+// Skip integration tests if the macOS security binary is not available
+// (e.g., running in a Linux CI environment)
+// ---------------------------------------------------------------------------
+const SECURITY_BINARY = '/usr/bin/security';
+const hasSecurityBinary = existsSync(SECURITY_BINARY);
+// ---------------------------------------------------------------------------
+// KeychainError unit tests
+// ---------------------------------------------------------------------------
+describe('KeychainError', () => {
+    it('maps exit code 44 to "Credential not found" with service name', () => {
+        const err = new KeychainError('get', 44, 'test-svc');
+        expect(err.message).toContain('Credential not found');
+        expect(err.message).toContain('test-svc');
+    });
+    it('maps exit code 44 without service name', () => {
+        const err = new KeychainError('get', 44);
+        expect(err.message).toBe('Credential not found');
+    });
+    it('maps exit code 51 to "Keychain is locked"', () => {
+        const err = new KeychainError('store', 51);
+        expect(err.message).toContain('Keychain is locked');
+    });
+    it('maps exit code 36 to "Keychain access was denied"', () => {
+        const err = new KeychainError('get', 36);
+        expect(err.message).toContain('Keychain access was denied');
+    });
+    it('maps exit code 45 to "Credential already exists" with service', () => {
+        const err = new KeychainError('store', 45, 'ai-cred/prod/jenkins');
+        expect(err.message).toContain('Credential already exists');
+        expect(err.message).toContain('ai-cred/prod/jenkins');
+    });
+    it('maps unknown exit code to generic message with code', () => {
+        const err = new KeychainError('unknown-op', 99);
+        expect(err.message).toContain('99');
+    });
+    it('never includes credential data in error message (SEC-05)', () => {
+        const err = new KeychainError('store', 44, 'my-service', 'password=secret&token=abc');
+        expect(err.message).not.toContain('password');
+        expect(err.message).not.toContain('secret');
+        expect(err.message).not.toContain('token');
+        expect(err.message).not.toContain('abc');
+        expect(err.toString()).not.toContain('password');
+        expect(err.toString()).not.toContain('secret');
+        // stack should not contain raw credential data either
+        if (err.stack) {
+            expect(err.stack).not.toContain('password=secret');
+        }
+    });
+    it('has correct name property', () => {
+        const err = new KeychainError('get', 44);
+        expect(err.name).toBe('KeychainError');
+    });
+    it('has correct operation and exitCode properties', () => {
+        const err = new KeychainError('find-generic-password', 44, 'ai-cred/dev/test');
+        expect(err.operation).toBe('find-generic-password');
+        expect(err.exitCode).toBe(44);
+        expect(err.service).toBe('ai-cred/dev/test');
+    });
+    it('is an instanceof Error and instanceof KeychainError', () => {
+        const err = new KeychainError('get', 44);
+        expect(err instanceof Error).toBe(true);
+        expect(err instanceof KeychainError).toBe(true);
+    });
+});
+// ---------------------------------------------------------------------------
+// toKeychainError unit tests
+// ---------------------------------------------------------------------------
+describe('toKeychainError', () => {
+    it('extracts numeric code from subprocess error', () => {
+        const mockError = { code: 44 };
+        const err = toKeychainError(mockError, 'find-generic-password', 'test-svc');
+        expect(err).toBeInstanceOf(KeychainError);
+        expect(err.exitCode).toBe(44);
+        expect(err.operation).toBe('find-generic-password');
+        expect(err.service).toBe('test-svc');
+    });
+    it('extracts exitCode property when code is not numeric', () => {
+        const mockError = { code: 'ERR_CHILD_PROCESS_STDIO_MAXBUFFER', exitCode: 51 };
+        const err = toKeychainError(mockError, 'store');
+        expect(err.exitCode).toBe(51);
+    });
+    it('uses -1 for unrecognized error objects', () => {
+        const err = toKeychainError('some string error', 'op');
+        expect(err.exitCode).toBe(-1);
+    });
+    it('uses -1 when error is null', () => {
+        const err = toKeychainError(null, 'op');
+        expect(err.exitCode).toBe(-1);
+    });
+    it('does NOT forward stderr or subprocess output into error message (SEC-05)', () => {
+        const mockError = {
+            code: 44,
+            stderr: 'password=supersecret apiToken=mytoken',
+            stdout: 'secret data here',
+            message: 'Command failed: password=abc123',
+        };
+        const err = toKeychainError(mockError, 'find-generic-password', 'svc');
+        expect(err.message).not.toContain('password');
+        expect(err.message).not.toContain('supersecret');
+        expect(err.message).not.toContain('mytoken');
+        expect(err.message).not.toContain('abc123');
+        expect(err.message).not.toContain('secret');
+    });
+});
+// ---------------------------------------------------------------------------
+// Integration tests — require real macOS keychain
+// ---------------------------------------------------------------------------
+describe.skipIf(!hasSecurityBinary)('KeychainAdapter integration', () => {
+    const tempKeychainPath = path.join(os.tmpdir(), `ai-cred-test-${Date.now()}.keychain-db`);
+    let adapter;
+    beforeAll(async () => {
+        adapter = new KeychainAdapter(tempKeychainPath);
+        await adapter.initialize();
+    });
+    afterAll(async () => {
+        try {
+            await adapter.destroy();
+        }
+        catch {
+            // ignore — file may already be cleaned up
+        }
+        // Verify no leftover keychain file
+        expect(existsSync(tempKeychainPath)).toBe(false);
+    });
+    it('initialize creates keychain file', () => {
+        expect(existsSync(tempKeychainPath)).toBe(true);
+    });
+    it('store and get round-trip (SSH credential) (CRED-01)', async () => {
+        await adapter.store('dev', 'my-server', {
+            type: 'ssh',
+            host: '192.168.1.1',
+            port: 22,
+            username: 'root',
+            password: 'secret123',
+        });
+        const result = await adapter.get('dev', 'my-server');
+        expect(result.type).toBe('ssh');
+        if (result.type === 'ssh') {
+            expect(result.host).toBe('192.168.1.1');
+            expect(result.username).toBe('root');
+            expect(result.password).toBe('secret123');
+        }
+    });
+    it('store and get round-trip (Jenkins credential) (CRED-02)', async () => {
+        await adapter.store('dev', 'jenkins', {
+            type: 'jenkins',
+            url: 'https://jenkins.local',
+            username: 'admin',
+            apiToken: 'jenkins-token-abc',
+        });
+        const result = await adapter.get('dev', 'jenkins');
+        expect(result.type).toBe('jenkins');
+        if (result.type === 'jenkins') {
+            expect(result.url).toBe('https://jenkins.local');
+            expect(result.username).toBe('admin');
+            expect(result.apiToken).toBe('jenkins-token-abc');
+        }
+    });
+    it('store and get round-trip (Portainer credential) (CRED-03)', async () => {
+        await adapter.store('dev', 'portainer', {
+            type: 'portainer',
+            url: 'https://portainer.local',
+            apiToken: 'portainer-token-xyz',
+        });
+        const result = await adapter.get('dev', 'portainer');
+        expect(result.type).toBe('portainer');
+        if (result.type === 'portainer') {
+            expect(result.url).toBe('https://portainer.local');
+            expect(result.apiToken).toBe('portainer-token-xyz');
+        }
+    });
+    it('store and get round-trip (AWS credential) (CRED-04)', async () => {
+        await adapter.store('dev', 'aws-main', {
+            type: 'aws',
+            accessKeyId: 'AKIAIOSFODNN7EXAMPLE',
+            secretAccessKey: 'wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY',
+            region: 'us-east-1',
+            profile: 'dev-profile',
+        });
+        const result = await adapter.get('dev', 'aws-main');
+        expect(result.type).toBe('aws');
+        if (result.type === 'aws') {
+            expect(result.accessKeyId).toBe('AKIAIOSFODNN7EXAMPLE');
+            expect(result.secretAccessKey).toBe('wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY');
+            expect(result.region).toBe('us-east-1');
+            expect(result.profile).toBe('dev-profile');
+        }
+    });
+    it('store and get round-trip (Generic API key) (CRED-05)', async () => {
+        await adapter.store('dev', 'openai', {
+            type: 'api-key',
+            key: 'sk-testkey12345',
+            url: 'https://api.openai.com',
+            notes: 'OpenAI dev key',
+        });
+        const result = await adapter.get('dev', 'openai');
+        expect(result.type).toBe('api-key');
+        if (result.type === 'api-key') {
+            expect(result.key).toBe('sk-testkey12345');
+            expect(result.url).toBe('https://api.openai.com');
+            expect(result.notes).toBe('OpenAI dev key');
+        }
+    });
+    it('list returns metadata only, never secrets (SEC-04)', async () => {
+        const results = await adapter.list();
+        expect(Array.isArray(results)).toBe(true);
+        expect(results.length).toBeGreaterThan(0);
+        // Each entry must have the required metadata fields
+        for (const entry of results) {
+            expect(entry).toHaveProperty('service');
+            expect(entry).toHaveProperty('environment');
+            expect(entry).toHaveProperty('type');
+            expect(entry).toHaveProperty('createdAt');
+            expect(entry).toHaveProperty('modifiedAt');
+            // Must NOT have any secret fields
+            const entryRecord = entry;
+            expect(entryRecord['password']).toBeUndefined();
+            expect(entryRecord['apiToken']).toBeUndefined();
+            expect(entryRecord['secretAccessKey']).toBeUndefined();
+            expect(entryRecord['key']).toBeUndefined();
+            expect(entryRecord['accessKeyId']).toBeUndefined();
+        }
+        // Stringify entire list and confirm no secret values appear
+        const serialized = JSON.stringify(results);
+        expect(serialized).not.toContain('secret123');
+        expect(serialized).not.toContain('jenkins-token-abc');
+        expect(serialized).not.toContain('portainer-token-xyz');
+        expect(serialized).not.toContain('wJalrXUtnFEMI');
+        expect(serialized).not.toContain('sk-testkey12345');
+    });
+    it('delete removes credential', async () => {
+        // Store a temporary credential
+        await adapter.store('staging', 'temp-delete-test', {
+            type: 'api-key',
+            key: 'temp-key-to-delete',
+        });
+        // Verify it exists
+        const before = await adapter.get('staging', 'temp-delete-test');
+        expect(before.type).toBe('api-key');
+        // Delete it
+        await adapter.delete('staging', 'temp-delete-test');
+        // Should now throw with exit code 44
+        let threw = false;
+        try {
+            await adapter.get('staging', 'temp-delete-test');
+        }
+        catch (err) {
+            threw = true;
+            expect(err).toBeInstanceOf(KeychainError);
+            if (err instanceof KeychainError) {
+                expect(err.exitCode).toBe(44);
+            }
+        }
+        expect(threw).toBe(true);
+    });
+    it('get non-existent credential throws KeychainError with exit code 44', async () => {
+        let threw = false;
+        try {
+            await adapter.get('prod', 'does-not-exist-xyz');
+        }
+        catch (err) {
+            threw = true;
+            expect(err).toBeInstanceOf(KeychainError);
+            if (err instanceof KeychainError) {
+                expect(err.exitCode).toBe(44);
+                // Error message must NOT contain any credential data (SEC-05)
+                expect(err.message).not.toContain('password');
+                expect(err.message).not.toContain('secret');
+                expect(err.message).not.toContain('token');
+            }
+        }
+        expect(threw).toBe(true);
+    });
+    it('store with update (-U flag) overwrites existing credential', async () => {
+        // Store initial credential
+        await adapter.store('staging', 'update-test', {
+            type: 'api-key',
+            key: 'original-key',
+        });
+        // Overwrite with new credential
+        await adapter.store('staging', 'update-test', {
+            type: 'api-key',
+            key: 'updated-key',
+        });
+        // Retrieve — should be the updated credential
+        const result = await adapter.get('staging', 'update-test');
+        expect(result.type).toBe('api-key');
+        if (result.type === 'api-key') {
+            expect(result.key).toBe('updated-key');
+        }
+    });
+    it('environment isolation: prod/jenkins and dev/jenkins are independent', async () => {
+        await adapter.store('prod', 'jenkins', {
+            type: 'jenkins',
+            url: 'https://prod-jenkins.internal',
+            username: 'prod-admin',
+            apiToken: 'prod-token-111',
+        });
+        await adapter.store('dev', 'jenkins-isolated', {
+            type: 'jenkins',
+            url: 'https://dev-jenkins.internal',
+            username: 'dev-user',
+            apiToken: 'dev-token-222',
+        });
+        const prodResult = await adapter.get('prod', 'jenkins');
+        const devResult = await adapter.get('dev', 'jenkins-isolated');
+        expect(prodResult.type).toBe('jenkins');
+        if (prodResult.type === 'jenkins') {
+            expect(prodResult.url).toBe('https://prod-jenkins.internal');
+            expect(prodResult.apiToken).toBe('prod-token-111');
+        }
+        expect(devResult.type).toBe('jenkins');
+        if (devResult.type === 'jenkins') {
+            expect(devResult.url).toBe('https://dev-jenkins.internal');
+            expect(devResult.apiToken).toBe('dev-token-222');
+        }
+        // Values should not cross-contaminate
+        if (prodResult.type === 'jenkins' && devResult.type === 'jenkins') {
+            expect(prodResult.apiToken).not.toBe(devResult.apiToken);
+            expect(prodResult.url).not.toBe(devResult.url);
+        }
+    });
+});
+//# sourceMappingURL=keychain-adapter.test.js.map

package/dist/core/keychain-adapter.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keychain-adapter.test.js","sourceRoot":"","sources":["../../src/core/keychain-adapter.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,eAAe,EAAsB,MAAM,uBAAuB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE7D,8EAA8E;AAC9E,uEAAuE;AACvE,4CAA4C;AAC5C,8EAA8E;AAE9E,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,iBAAiB,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;AAEtD,8EAA8E;AAC9E,2BAA2B;AAC3B,8EAA8E;AAE9E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACtD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,oBAAoB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;QACnE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,2BAA2B,CAAC,CAAC;QAC3D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,sBAAsB,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,2BAA2B,CAAC,CAAC;QACtF,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC/C,sDAAsD;QACtD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,uBAAuB,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC/E,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACzC,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,YAAY,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,uBAAuB,EAAE,UAAU,CAAC,CAAC;QAC5E,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;QAC9E,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,GAAG,GAAG,eAAe,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,GAAG,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,SAAS,GAAG;YAChB,IAAI,EAAE,EAAE;YACR,MAAM,EAAE,uCAAuC;YAC/C,MAAM,EAAE,kBAAkB;YAC1B,OAAO,EAAE,iCAAiC;SAC3C,CAAC;QACF,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,EAAE,uBAAuB,EAAE,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC7C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,kDAAkD;AAClD,8EAA8E;AAE9E,QAAQ,CAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC,6BAA6B,EAAE,GAAG,EAAE;IACtE,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAChC,EAAE,CAAC,MAAM,EAAE,EACX,gBAAgB,IAAI,CAAC,GAAG,EAAE,cAAc,CACzC,CAAC;IACF,IAAI,OAAwB,CAAC;IAE7B,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,OAAO,GAAG,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,OAAO,CAAC,UAAU,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,KAAK,IAAI,EAAE;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;QACD,mCAAmC;QACnC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE;YACtC,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,aAAa;YACnB,IAAI,EAAE,EAAE;YACR,QAAQ,EAAE,MAAM;YAChB,QAAQ,EAAE,WAAW;SACtB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE;YACpC,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,uBAAuB;YAC5B,QAAQ,EAAE,OAAO;YACjB,QAAQ,EAAE,mBAAmB;SAC9B,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACpD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE;YACtC,IAAI,EAAE,WAAW;YACjB,GAAG,EAAE,yBAAyB;YAC9B,QAAQ,EAAE,qBAAqB;SAChC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE;YACrC,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,sBAAsB;YACnC,eAAe,EAAE,0CAA0C;YAC3D,MAAM,EAAE,WAAW;YACnB,OAAO,EAAE,aAAa;SACvB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACxD,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAChF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACxC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE;YACnC,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,wBAAwB;YAC7B,KAAK,EAAE,gBAAgB;SACxB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAErC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE1C,oDAAoD;QACpD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;YAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;YAE3C,kCAAkC;YAClC,MAAM,WAAW,GAAG,KAA2C,CAAC;YAChE,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAChD,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAChD,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YACvD,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;YAC3C,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrD,CAAC;QAED,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC;QACtD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QAClD,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,+BAA+B;QAC/B,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,kBAAkB,EAAE;YACjD,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,oBAAoB;SAC1B,CAAC,CAAC;QAEH,mBAAmB;QACnB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEpC,YAAY;QACZ,MAAM,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAEpD,qCAAqC;QACrC,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,GAAG,IAAI,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC;YAC1C,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC9B,8DAA8D;gBAC9D,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC9C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBAC5C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,2BAA2B;QAC3B,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE;YAC5C,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,cAAc;SACpB,CAAC,CAAC;QAEH,gCAAgC;QAChC,MAAM,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,EAAE;YAC5C,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,aAAa;SACnB,CAAC,CAAC;QAEH,8CAA8C;QAC9C,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE;YACrC,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,+BAA+B;YACpC,QAAQ,EAAE,YAAY;YACtB,QAAQ,EAAE,gBAAgB;SAC3B,CAAC,CAAC;QAEH,MAAM,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,kBAAkB,EAAE;YAC7C,IAAI,EAAE,SAAS;YACf,GAAG,EAAE,8BAA8B;YACnC,QAAQ,EAAE,UAAU;YACpB,QAAQ,EAAE,eAAe;SAC1B,CAAC,CAAC;QAEH,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;QAE/D,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YAC7D,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAC3D,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACnD,CAAC;QAED,sCAAsC;QACtC,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/e2e/environment-isolation.test.d.ts

@@ -0,0 +1 @@
+export {};