clawdlets 0.0.1 → 0.2.0

package/dist/commands/secrets/init.js

@@ -0,0 +1,455 @@
+import fs from "node:fs";
+import path from "node:path";
+import process from "node:process";
+import { defineCommand } from "citty";
+import * as p from "@clack/prompts";
+import { ageKeygen } from "@clawdlets/core/lib/age-keygen";
+import { parseAgeKeyFile } from "@clawdlets/core/lib/age";
+import { ensureDir, writeFileAtomic } from "@clawdlets/core/lib/fs-safe";
+import { mkpasswdYescryptHash } from "@clawdlets/core/lib/mkpasswd";
+import { upsertSopsCreationRule } from "@clawdlets/core/lib/sops-config";
+import { sopsDecryptYamlFile, sopsEncryptYamlToFile } from "@clawdlets/core/lib/sops";
+import { getHostAgeKeySopsCreationRulePathRegex, getHostSecretsSopsCreationRulePathRegex } from "@clawdlets/core/lib/sops-rules";
+import { sanitizeOperatorId } from "@clawdlets/core/lib/identifiers";
+import { buildFleetSecretsPlan } from "@clawdlets/core/lib/fleet-secrets";
+import { buildSecretsInitTemplate, isPlaceholderSecretValue, listSecretsInitPlaceholders, parseSecretsInitJson, resolveSecretsInitFromJsonArg, validateSecretsInitNonInteractive } from "@clawdlets/core/lib/secrets-init";
+import { readYamlScalarFromMapping } from "@clawdlets/core/lib/yaml-scalar";
+import { getHostEncryptedAgeKeyFile, getHostExtraFilesKeyPath, getHostExtraFilesSecretsDir, getHostSecretsDir, getLocalOperatorAgeKeyPath } from "@clawdlets/core/repo-layout";
+import { expandPath } from "@clawdlets/core/lib/path-expand";
+import { cancelFlow, navOnCancel, NAV_EXIT } from "../../lib/wizard.js";
+import { loadHostContextOrExit } from "../../lib/context.js";
+import { upsertYamlScalarLine } from "./common.js";
+function wantsInteractive(flag) {
+    if (flag)
+        return true;
+    const env = String(process.env["CLAWDLETS_INTERACTIVE"] || "").trim();
+    return env === "1" || env.toLowerCase() === "true";
+}
+function readSecretsInitJson(fromJson) {
+    const src = String(fromJson || "").trim();
+    if (!src)
+        throw new Error("missing --from-json");
+    let raw;
+    if (src === "-") {
+        raw = fs.readFileSync(0, "utf8");
+    }
+    else {
+        const jsonPath = path.isAbsolute(src) ? src : path.resolve(process.cwd(), src);
+        if (!fs.existsSync(jsonPath))
+            throw new Error(`missing --from-json file: ${jsonPath}`);
+        raw = fs.readFileSync(jsonPath, "utf8");
+    }
+    return parseSecretsInitJson(raw);
+}
+export const secretsInit = defineCommand({
+    meta: {
+        name: "init",
+        description: "Create/update secrets in /secrets (sops+age) and generate .clawdlets/extra-files/<host>/...",
+    },
+    args: {
+        runtimeDir: { type: "string", description: "Runtime directory (default: .clawdlets)." },
+        host: { type: "string", description: "Host name (defaults to clawdlets.json defaultHost / sole host)." },
+        interactive: { type: "boolean", description: "Prompt for secret values (requires TTY).", default: false },
+        fromJson: { type: "string", description: "Read secret values from JSON file (or '-' for stdin) (non-interactive)." },
+        allowPlaceholders: { type: "boolean", description: "Allow placeholders for missing tokens.", default: false },
+        operator: {
+            type: "string",
+            description: "Operator id for local age key name (default: $USER).",
+        },
+        yes: { type: "boolean", description: "Overwrite without prompt.", default: false },
+        dryRun: { type: "boolean", description: "Print actions without writing.", default: false },
+    },
+    async run({ args }) {
+        const a = args;
+        const cwd = process.cwd();
+        const ctx = loadHostContextOrExit({ cwd, runtimeDir: a.runtimeDir, hostArg: a.host });
+        if (!ctx)
+            return;
+        const { layout, config: clawdletsConfig, hostName, hostCfg } = ctx;
+        const hasTty = Boolean(process.stdin.isTTY && process.stdout.isTTY);
+        let interactive = wantsInteractive(Boolean(a.interactive));
+        if (!interactive && hasTty && !a.fromJson)
+            interactive = true;
+        if (interactive && !hasTty)
+            throw new Error("--interactive requires a TTY");
+        const operatorId = sanitizeOperatorId(String(a.operator || process.env.USER || "operator"));
+        const sopsConfigPath = layout.sopsConfigPath;
+        const operatorKeyPath = getLocalOperatorAgeKeyPath(layout, operatorId);
+        const operatorPubPath = path.join(layout.localOperatorKeysDir, `${operatorId}.age.pub`);
+        const hostKeyFile = getHostEncryptedAgeKeyFile(layout, hostName);
+        const extraFilesKeyPath = getHostExtraFilesKeyPath(layout, hostName);
+        const extraFilesSecretsDir = getHostExtraFilesSecretsDir(layout, hostName);
+        const localSecretsDir = getHostSecretsDir(layout, hostName);
+        const bots = clawdletsConfig.fleet.botOrder;
+        if (bots.length === 0)
+            throw new Error("fleet.botOrder is empty (set bots in fleet/clawdlets.json)");
+        const tailnetMode = String(hostCfg.tailnet?.mode || "none");
+        const requiresTailscaleAuthKey = tailnetMode === "tailscale";
+        const garnixPrivate = hostCfg.cache?.garnix?.private;
+        const garnixPrivateEnabled = Boolean(garnixPrivate?.enable);
+        const garnixNetrcSecretName = garnixPrivateEnabled ? String(garnixPrivate?.netrcSecret || "garnix_netrc").trim() : "";
+        const garnixNetrcPath = garnixPrivateEnabled ? String(garnixPrivate?.netrcPath || "/etc/nix/netrc").trim() : "";
+        if (garnixPrivateEnabled && !garnixNetrcSecretName)
+            throw new Error("cache.garnix.private.netrcSecret must be set when private cache is enabled");
+        const secretsPlan = buildFleetSecretsPlan({ config: clawdletsConfig, hostName });
+        if (secretsPlan.missingSecretConfig.length > 0) {
+            const first = secretsPlan.missingSecretConfig[0];
+            if (first.kind === "discord") {
+                throw new Error(`missing discordTokenSecret for bot=${first.bot} (set fleet.bots.${first.bot}.profile.discordTokenSecret)`);
+            }
+            throw new Error(`missing modelSecrets entry for provider=${first.provider} (bot=${first.bot}, model=${first.model}); set fleet.modelSecrets.${first.provider}`);
+        }
+        const requiredSecretNames = new Set(secretsPlan.secretNamesRequired);
+        const discordSecretByName = new Map();
+        for (const [bot, secretName] of Object.entries(secretsPlan.discordSecretsByBot)) {
+            if (secretName)
+                discordSecretByName.set(secretName, bot);
+        }
+        const discordBotsRequired = bots.filter((b) => {
+            const secretName = secretsPlan.discordSecretsByBot[b] || "";
+            return secretName && requiredSecretNames.has(secretName);
+        });
+        const requiredExtraSecretNames = new Set([
+            ...requiredSecretNames,
+            ...(garnixPrivateEnabled ? [garnixNetrcSecretName] : []),
+        ]);
+        const templateExtraSecrets = {};
+        for (const secretName of secretsPlan.secretNamesAll) {
+            templateExtraSecrets[secretName] = requiredSecretNames.has(secretName) ? "<REPLACE_WITH_SECRET>" : "<OPTIONAL>";
+        }
+        if (garnixPrivateEnabled) {
+            templateExtraSecrets[garnixNetrcSecretName] = "<REPLACE_WITH_NETRC>";
+        }
+        const defaultSecretsJsonPath = path.join(layout.runtimeDir, "secrets.json");
+        const defaultSecretsJsonDisplay = path.relative(process.cwd(), defaultSecretsJsonPath) || defaultSecretsJsonPath;
+        let fromJson = resolveSecretsInitFromJsonArg({
+            fromJsonRaw: a.fromJson,
+            argv: process.argv,
+            stdinIsTTY: Boolean(process.stdin.isTTY),
+        });
+        if (!interactive && !fromJson) {
+            if (fs.existsSync(defaultSecretsJsonPath)) {
+                fromJson = defaultSecretsJsonPath;
+                if (!a.allowPlaceholders) {
+                    const raw = fs.readFileSync(defaultSecretsJsonPath, "utf8");
+                    const parsed = parseSecretsInitJson(raw);
+                    const placeholders = listSecretsInitPlaceholders({ input: parsed, bots, discordBots: discordBotsRequired, requiresTailscaleAuthKey });
+                    if (placeholders.length > 0) {
+                        console.error(`error: placeholders found in ${defaultSecretsJsonDisplay} (fill it or pass --allow-placeholders)`);
+                        for (const p0 of placeholders)
+                            console.error(`- ${p0}`);
+                        process.exitCode = 1;
+                        return;
+                    }
+                }
+            }
+            else {
+                const template = buildSecretsInitTemplate({ bots, discordBots: discordBotsRequired, requiresTailscaleAuthKey, secrets: templateExtraSecrets });
+                if (!a.dryRun) {
+                    await ensureDir(path.dirname(defaultSecretsJsonPath));
+                    await writeFileAtomic(defaultSecretsJsonPath, `${JSON.stringify(template, null, 2)}\n`, { mode: 0o600 });
+                }
+                console.error(`${a.dryRun ? "would write" : "wrote"} secrets template: ${defaultSecretsJsonDisplay}`);
+                if (a.dryRun)
+                    console.error("run without --dry-run to write it");
+                else
+                    console.error(`fill it, then run: clawdlets secrets init --from-json ${defaultSecretsJsonDisplay}`);
+                process.exitCode = 1;
+                return;
+            }
+        }
+        validateSecretsInitNonInteractive({
+            interactive,
+            fromJson,
+            yes: Boolean(a.yes),
+            dryRun: Boolean(a.dryRun),
+            localSecretsDirExists: fs.existsSync(localSecretsDir),
+        });
+        if (interactive && fs.existsSync(localSecretsDir) && !a.yes) {
+            const ok = await p.confirm({ message: `Update existing secrets dir? (${localSecretsDir})`, initialValue: true });
+            if (p.isCancel(ok)) {
+                const nav = await navOnCancel({ flow: "secrets init", canBack: false });
+                if (nav === NAV_EXIT)
+                    cancelFlow();
+                return;
+            }
+            if (!ok)
+                return;
+        }
+        const nix = { nixBin: String(process.env.NIX_BIN || "nix").trim() || "nix", cwd: layout.repoRoot, dryRun: Boolean(a.dryRun) };
+        const ensureAgePair = async (keyPath, pubPath) => {
+            if (fs.existsSync(keyPath) && fs.existsSync(pubPath)) {
+                const keyText = fs.readFileSync(keyPath, "utf8");
+                const parsed = parseAgeKeyFile(keyText);
+                const publicKey = fs.readFileSync(pubPath, "utf8").trim();
+                if (!parsed.secretKey)
+                    throw new Error(`invalid age key: ${keyPath}`);
+                if (!publicKey)
+                    throw new Error(`invalid age public key: ${pubPath}`);
+                return { secretKey: parsed.secretKey, publicKey };
+            }
+            const pair = await ageKeygen(nix);
+            if (!a.dryRun) {
+                await ensureDir(path.dirname(keyPath));
+                await writeFileAtomic(keyPath, pair.fileText, { mode: 0o600 });
+                await writeFileAtomic(pubPath, `${pair.publicKey}\n`, { mode: 0o644 });
+            }
+            return { secretKey: pair.secretKey, publicKey: pair.publicKey };
+        };
+        const operatorKeys = await ensureAgePair(operatorKeyPath, operatorPubPath);
+        const existingSops = fs.existsSync(sopsConfigPath) ? fs.readFileSync(sopsConfigPath, "utf8") : undefined;
+        const hostKeyPathRegex = getHostAgeKeySopsCreationRulePathRegex(layout, hostName);
+        const withHostKeyRule = upsertSopsCreationRule({
+            existingYaml: existingSops,
+            pathRegex: hostKeyPathRegex,
+            ageRecipients: [operatorKeys.publicKey],
+        });
+        let hostKeys;
+        if (fs.existsSync(hostKeyFile)) {
+            if (a.dryRun) {
+                hostKeys = {
+                    publicKey: "age1dryrundryrundryrundryrundryrundryrundryrundryrundryrun0l9p4",
+                    secretKey: "AGE-SECRET-KEY-DRYRUNDRYRUNDRYRUNDRYRUNDRYRUNDRYRUNDRYRUNDRYRUN",
+                };
+            }
+            else {
+                const decrypted = await sopsDecryptYamlFile({
+                    filePath: hostKeyFile,
+                    ageKeyFile: operatorKeyPath,
+                    nix,
+                });
+                const secretKey = readYamlScalarFromMapping({ yamlText: decrypted, key: "age_secret_key" })?.trim() || "";
+                const publicKey = readYamlScalarFromMapping({ yamlText: decrypted, key: "age_public_key" })?.trim() || "";
+                if (!secretKey || !publicKey)
+                    throw new Error(`invalid host age key file: ${hostKeyFile}`);
+                hostKeys = { secretKey, publicKey };
+            }
+        }
+        else {
+            const pair = await ageKeygen(nix);
+            hostKeys = { secretKey: pair.secretKey, publicKey: pair.publicKey };
+            const plaintextYaml = upsertYamlScalarLine({
+                text: upsertYamlScalarLine({ text: "\n", key: "age_public_key", value: pair.publicKey }),
+                key: "age_secret_key",
+                value: pair.secretKey,
+            }) + "\n";
+            if (!a.dryRun) {
+                await ensureDir(path.dirname(sopsConfigPath));
+                await writeFileAtomic(sopsConfigPath, withHostKeyRule, { mode: 0o644 });
+                await sopsEncryptYamlToFile({ plaintextYaml, outPath: hostKeyFile, configPath: sopsConfigPath, nix });
+            }
+        }
+        const hostSecretsPathRegex = getHostSecretsSopsCreationRulePathRegex(layout, hostName);
+        const nextSops = upsertSopsCreationRule({
+            existingYaml: withHostKeyRule,
+            pathRegex: hostSecretsPathRegex,
+            ageRecipients: [hostKeys.publicKey, operatorKeys.publicKey],
+        });
+        if (!a.dryRun) {
+            await ensureDir(path.dirname(sopsConfigPath));
+            await writeFileAtomic(sopsConfigPath, nextSops, { mode: 0o644 });
+            await ensureDir(path.dirname(extraFilesKeyPath));
+            await writeFileAtomic(extraFilesKeyPath, `${hostKeys.secretKey}\n`, { mode: 0o600 });
+        }
+        const readExistingScalar = async (secretName) => {
+            const p0 = path.join(localSecretsDir, `${secretName}.yaml`);
+            if (!fs.existsSync(p0))
+                return null;
+            try {
+                const decrypted = await sopsDecryptYamlFile({
+                    filePath: p0,
+                    ageKeyFile: operatorKeyPath,
+                    nix,
+                });
+                return readYamlScalarFromMapping({ yamlText: decrypted, key: secretName });
+            }
+            catch {
+                return null;
+            }
+        };
+        const flowSecrets = "secrets init";
+        const values = { adminPassword: "", adminPasswordHash: "", tailscaleAuthKey: "", secrets: {}, discordTokens: {} };
+        if (interactive) {
+            const discordSecretNames = new Set(Object.values(secretsPlan.discordSecretsByBot).filter(Boolean));
+            const requiredExtraSecrets = Array.from(requiredExtraSecretNames).filter((s) => !discordSecretNames.has(s)).sort();
+            const discordTokenBots = [];
+            const seenDiscordSecrets = new Set();
+            for (const bot of bots) {
+                const secretName = secretsPlan.discordSecretsByBot[bot] || "";
+                if (!secretName)
+                    continue;
+                if (!requiredSecretNames.has(secretName))
+                    continue;
+                if (seenDiscordSecrets.has(secretName))
+                    continue;
+                seenDiscordSecrets.add(secretName);
+                discordTokenBots.push({ bot, secretName });
+            }
+            const allSteps = [
+                { kind: "adminPassword" },
+                ...(requiresTailscaleAuthKey ? [{ kind: "tailscaleAuthKey" }] : []),
+                ...requiredExtraSecrets.map((secretName) => garnixPrivateEnabled && secretName === garnixNetrcSecretName
+                    ? { kind: "garnixNetrcFile", secretName, netrcPath: garnixNetrcPath || "/etc/nix/netrc" }
+                    : { kind: "secret", secretName }),
+                ...discordTokenBots.map((b) => ({ kind: "discordToken", bot: b.bot, secretName: b.secretName })),
+            ];
+            for (let i = 0; i < allSteps.length;) {
+                const step = allSteps[i];
+                let v;
+                if (step.kind === "adminPassword") {
+                    v = await p.password({
+                        message: "Admin password (used to generate admin_password_hash; leave blank to keep existing/placeholder)",
+                    });
+                }
+                else if (step.kind === "tailscaleAuthKey") {
+                    v = await p.password({ message: "Tailscale auth key (tailscale_auth_key) (required for non-interactive tailnet bootstrap)" });
+                }
+                else if (step.kind === "garnixNetrcFile") {
+                    v = await p.text({
+                        message: `Path to netrc file for private Garnix cache (${step.secretName} → ${step.netrcPath}) (required)`,
+                        placeholder: `${layout.runtimeDir}/garnix.netrc`,
+                    });
+                }
+                else if (step.kind === "secret") {
+                    v = await p.password({ message: `Secret value (${step.secretName}) (required)` });
+                }
+                else {
+                    v = await p.password({ message: `Discord token for ${step.bot} (${step.secretName}) (required)` });
+                }
+                if (p.isCancel(v)) {
+                    const nav = await navOnCancel({ flow: flowSecrets, canBack: i > 0 });
+                    if (nav === NAV_EXIT) {
+                        cancelFlow();
+                        return;
+                    }
+                    i = Math.max(0, i - 1);
+                    continue;
+                }
+                const s = String(v ?? "");
+                if (step.kind === "adminPassword")
+                    values.adminPassword = s;
+                else if (step.kind === "tailscaleAuthKey")
+                    values.tailscaleAuthKey = s;
+                else if (step.kind === "garnixNetrcFile") {
+                    const rawPath = s.trim();
+                    if (!rawPath)
+                        values.secrets[step.secretName] = "";
+                    else {
+                        const expanded = expandPath(rawPath);
+                        const abs = path.isAbsolute(expanded) ? expanded : path.resolve(layout.repoRoot, expanded);
+                        const stat = fs.statSync(abs);
+                        if (!stat.isFile())
+                            throw new Error(`not a file: ${abs}`);
+                        if (stat.size > 64 * 1024)
+                            throw new Error(`netrc file too large (>64KB): ${abs}`);
+                        const netrc = fs.readFileSync(abs, "utf8").trimEnd();
+                        if (!netrc)
+                            throw new Error(`netrc file is empty: ${abs}`);
+                        values.secrets[step.secretName] = netrc;
+                    }
+                }
+                else if (step.kind === "secret")
+                    values.secrets[step.secretName] = s;
+                else {
+                    values.discordTokens[step.bot] = s;
+                    values.secrets[step.secretName] = s;
+                }
+                i += 1;
+            }
+        }
+        else {
+            const input = readSecretsInitJson(String(fromJson));
+            values.adminPasswordHash = input.adminPasswordHash;
+            values.tailscaleAuthKey = input.tailscaleAuthKey || "";
+            values.secrets = input.secrets || {};
+            values.discordTokens = input.discordTokens || {};
+        }
+        const secretsToWrite = secretsPlan.secretNamesAll;
+        const requiredSecrets = Array.from(new Set([
+            ...(requiresTailscaleAuthKey ? ["tailscale_auth_key"] : []),
+            "admin_password_hash",
+            ...(garnixPrivateEnabled ? [garnixNetrcSecretName] : []),
+            ...secretsToWrite,
+        ]));
+        const isOptionalMarker = (v) => String(v || "").trim() === "<OPTIONAL>";
+        const resolvedValues = {};
+        for (const secretName of requiredSecrets) {
+            const existing = await readExistingScalar(secretName);
+            if (secretName === "tailscale_auth_key") {
+                if (values.tailscaleAuthKey.trim())
+                    resolvedValues[secretName] = values.tailscaleAuthKey.trim();
+                else if (existing && !isPlaceholderSecretValue(existing))
+                    resolvedValues[secretName] = existing;
+                else if (a.allowPlaceholders)
+                    resolvedValues[secretName] = "<FILL_ME>";
+                else
+                    throw new Error("missing tailscale auth key (tailscale_auth_key); pass --allow-placeholders only if you intend to set it later");
+                continue;
+            }
+            if (secretName === "admin_password_hash") {
+                if (values.adminPasswordHash.trim()) {
+                    resolvedValues[secretName] = values.adminPasswordHash.trim();
+                }
+                else if (values.adminPassword.trim()) {
+                    resolvedValues[secretName] = a.dryRun ? "<admin_password_hash>" : await mkpasswdYescryptHash(String(values.adminPassword), nix);
+                }
+                else {
+                    resolvedValues[secretName] = existing ?? "<FILL_ME>";
+                }
+                continue;
+            }
+            if (discordSecretByName.has(secretName)) {
+                const bot = discordSecretByName.get(secretName) || "";
+                const required = requiredSecretNames.has(secretName);
+                const vv = (bot ? values.discordTokens[bot]?.trim() : "") || values.secrets?.[secretName]?.trim() || "";
+                if (vv)
+                    resolvedValues[secretName] = vv;
+                else if (existing)
+                    resolvedValues[secretName] = existing;
+                else if (!required)
+                    resolvedValues[secretName] = "<OPTIONAL>";
+                else if (a.allowPlaceholders)
+                    resolvedValues[secretName] = "<FILL_ME>";
+                else
+                    throw new Error(`missing discord token for ${bot || secretName} (provide it in --from-json.discordTokens or pass --allow-placeholders)`);
+                continue;
+            }
+            const vv = values.secrets?.[secretName]?.trim() || "";
+            const required = requiredExtraSecretNames.has(secretName);
+            if (vv && !(required && isOptionalMarker(vv))) {
+                resolvedValues[secretName] = vv;
+                continue;
+            }
+            if (existing && (!required || (!isPlaceholderSecretValue(existing) && !isOptionalMarker(existing) && existing.trim()))) {
+                resolvedValues[secretName] = existing;
+                continue;
+            }
+            if (required) {
+                if (a.allowPlaceholders)
+                    resolvedValues[secretName] = "<FILL_ME>";
+                else
+                    throw new Error(`missing required secret: ${secretName} (set it in --from-json.secrets or via interactive prompts)`);
+                continue;
+            }
+            resolvedValues[secretName] = "<OPTIONAL>";
+        }
+        if (!a.dryRun) {
+            await ensureDir(localSecretsDir);
+            await ensureDir(extraFilesSecretsDir);
+            for (const secretName of requiredSecrets) {
+                const outPath = path.join(localSecretsDir, `${secretName}.yaml`);
+                const plaintextYaml = upsertYamlScalarLine({ text: "\n", key: secretName, value: resolvedValues[secretName] ?? "" });
+                await sopsEncryptYamlToFile({ plaintextYaml, outPath, configPath: sopsConfigPath, nix });
+                const encrypted = fs.readFileSync(outPath, "utf8");
+                await writeFileAtomic(path.join(extraFilesSecretsDir, `${secretName}.yaml`), encrypted, { mode: 0o400 });
+            }
+        }
+        console.log(`ok: secrets ready at ${localSecretsDir}`);
+        console.log(`ok: sops config at ${sopsConfigPath}`);
+        console.log(`ok: operator age key at ${operatorKeyPath}`);
+        console.log(`ok: host age key (encrypted) at ${hostKeyFile}`);
+        console.log(`ok: extra-files key at ${extraFilesKeyPath}`);
+        console.log(`ok: extra-files secrets at ${extraFilesSecretsDir}`);
+    },
+});
+//# sourceMappingURL=init.js.map

package/dist/commands/secrets/init.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"init.js","sourceRoot":"","sources":["../../../src/commands/secrets/init.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,KAAK,CAAC,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AACpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACtF,OAAO,EAAE,sCAAsC,EAAE,uCAAuC,EAAE,MAAM,gCAAgC,CAAC;AACjI,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,EAAE,wBAAwB,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,iCAAiC,EAAwB,MAAM,kCAAkC,CAAC;AACjP,OAAO,EAAE,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AAC5E,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAC/K,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,SAAS,gBAAgB,CAAC,IAAyB;IACjD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACtE,OAAO,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAEjD,IAAI,GAAW,CAAC;IAChB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;QAChB,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,EAAE,CAAC,CAAC;QACvF,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,OAAO,oBAAoB,CAAC,GAAG,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,6FAA6F;KAC3G;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;QACvF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;QACxG,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE,OAAO,EAAE,KAAK,EAAE;QACzG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,yEAAyE,EAAE;QACpH,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,wCAAwC,EAAE,OAAO,EAAE,KAAK,EAAE;QAC7G,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,sDAAsD;SACpE;QACD,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,2BAA2B,EAAE,OAAO,EAAE,KAAK,EAAE;QAClF,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,KAAK,EAAE;KAC3F;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAYhB,MAAM,CAAC,GAAG,IAAkC,CAAC;QAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAEnE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,WAAW,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,IAAI,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,WAAW,GAAG,IAAI,CAAC;QAC9D,IAAI,WAAW,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAE5E,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC;QAE5F,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC7C,MAAM,eAAe,GAAG,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACvE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,GAAG,UAAU,UAAU,CAAC,CAAC;QACxF,MAAM,WAAW,GAAG,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACjE,MAAM,iBAAiB,GAAG,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrE,MAAM,oBAAoB,GAAG,2BAA2B,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE3E,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE5D,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC5C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAErG,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC,CAAC;QAC5D,MAAM,wBAAwB,GAAG,WAAW,KAAK,WAAW,CAAC;QAE7D,MAAM,aAAa,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC;QACrD,MAAM,oBAAoB,GAAG,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,IAAI,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,MAAM,eAAe,GAAG,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,SAAS,IAAI,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChH,IAAI,oBAAoB,IAAI,CAAC,qBAAqB;YAAE,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;QAElJ,MAAM,WAAW,GAAG,qBAAqB,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjF,IAAI,WAAW,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,KAAK,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAE,CAAC;YAClD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC7B,MAAM,IAAI,KAAK,CAAC,sCAAsC,KAAK,CAAC,GAAG,oBAAoB,KAAK,CAAC,GAAG,8BAA8B,CAAC,CAAC;YAC9H,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,QAAQ,SAAS,KAAK,CAAC,GAAG,WAAW,KAAK,CAAC,KAAK,6BAA6B,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAClK,CAAC;QAED,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAS,WAAW,CAAC,mBAAmB,CAAC,CAAC;QAC7E,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;QACtD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAChF,IAAI,UAAU;gBAAE,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAC5C,MAAM,UAAU,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC5D,OAAO,UAAU,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAS;YAC/C,GAAG,mBAAmB;YACtB,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC,CAAC;QAEH,MAAM,oBAAoB,GAA2B,EAAE,CAAC;QACxD,KAAK,MAAM,UAAU,IAAI,WAAW,CAAC,cAAc,EAAE,CAAC;YACpD,oBAAoB,CAAC,UAAU,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,YAAY,CAAC;QAClH,CAAC;QACD,IAAI,oBAAoB,EAAE,CAAC;YACzB,oBAAoB,CAAC,qBAAqB,CAAC,GAAG,sBAAsB,CAAC;QACvE,CAAC;QAED,MAAM,sBAAsB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;QAC5E,MAAM,yBAAyB,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,sBAAsB,CAAC,IAAI,sBAAsB,CAAC;QAEjH,IAAI,QAAQ,GAAG,6BAA6B,CAAC;YAC3C,WAAW,EAAE,CAAC,CAAC,QAAQ;YACvB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBAC1C,QAAQ,GAAG,sBAAsB,CAAC;gBAClC,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;oBACzB,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;oBAC5D,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;oBACzC,MAAM,YAAY,GAAG,2BAA2B,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,CAAC,CAAC;oBACtI,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAC5B,OAAO,CAAC,KAAK,CAAC,gCAAgC,yBAAyB,yCAAyC,CAAC,CAAC;wBAClH,KAAK,MAAM,EAAE,IAAI,YAAY;4BAAE,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBACxD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;wBACrB,OAAO;oBACT,CAAC;gBACH,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;gBAE/I,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;oBACd,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;oBACtD,MAAM,eAAe,CAAC,sBAAsB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC3G,CAAC;gBAED,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,sBAAsB,yBAAyB,EAAE,CAAC,CAAC;gBACtG,IAAI,CAAC,CAAC,MAAM;oBAAE,OAAO,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAC;;oBAC5D,OAAO,CAAC,KAAK,CAAC,yDAAyD,yBAAyB,EAAE,CAAC,CAAC;gBACzG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACrB,OAAO;YACT,CAAC;QACH,CAAC;QAED,iCAAiC,CAAC;YAChC,WAAW;YACX,QAAQ;YACR,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;YACnB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACzB,qBAAqB,EAAE,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC;SACtD,CAAC,CAAC;QAEH,IAAI,WAAW,IAAI,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC5D,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,iCAAiC,eAAe,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;YACjH,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBACnB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxE,IAAI,GAAG,KAAK,QAAQ;oBAAE,UAAU,EAAE,CAAC;gBACnC,OAAO;YACT,CAAC;YACD,IAAI,CAAC,EAAE;gBAAE,OAAO;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,KAAK,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAW,CAAC;QAEvI,MAAM,aAAa,GAAG,KAAK,EAAE,OAAe,EAAE,OAAe,EAAE,EAAE;YAC/D,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;gBACrD,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACjD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;gBACtE,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,OAAO,EAAE,CAAC,CAAC;gBACtE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC;YACpD,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBACvC,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/D,MAAM,eAAe,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAClE,CAAC,CAAC;QAEF,MAAM,YAAY,GAAG,MAAM,aAAa,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QAE3E,MAAM,YAAY,GAAG,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzG,MAAM,gBAAgB,GAAG,sCAAsC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAElF,MAAM,eAAe,GAAG,sBAAsB,CAAC;YAC7C,YAAY,EAAE,YAAY;YAC1B,SAAS,EAAE,gBAAgB;YAC3B,aAAa,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC;SACxC,CAAC,CAAC;QAEH,IAAI,QAAkD,CAAC;QACvD,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;gBACb,QAAQ,GAAG;oBACT,SAAS,EAAE,iEAAiE;oBAC5E,SAAS,EAAE,iEAAiE;iBAC7E,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC;oBAC1C,QAAQ,EAAE,WAAW;oBACrB,UAAU,EAAE,eAAe;oBAC3B,GAAG;iBACJ,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,yBAAyB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC1G,MAAM,SAAS,GAAG,yBAAyB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC1G,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,EAAE,CAAC,CAAC;gBAC3F,QAAQ,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;YAClC,QAAQ,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAEpE,MAAM,aAAa,GACjB,oBAAoB,CAAC;gBACnB,IAAI,EAAE,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACxF,GAAG,EAAE,gBAAgB;gBACrB,KAAK,EAAE,IAAI,CAAC,SAAS;aACtB,CAAC,GAAG,IAAI,CAAC;YAEZ,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;gBACd,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;gBAC9C,MAAM,eAAe,CAAC,cAAc,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxE,MAAM,qBAAqB,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;YACxG,CAAC;QACH,CAAC;QAED,MAAM,oBAAoB,GAAG,uCAAuC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,sBAAsB,CAAC;YACtC,YAAY,EAAE,eAAe;YAC7B,SAAS,EAAE,oBAAoB;YAC/B,aAAa,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;SAC5D,CAAC,CAAC;QAEH,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9C,MAAM,eAAe,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;YACjD,MAAM,eAAe,CAAC,iBAAiB,EAAE,GAAG,QAAQ,CAAC,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,kBAAkB,GAAG,KAAK,EAAE,UAAkB,EAA0B,EAAE;YAC9E,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;YAC5D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC;oBAC1C,QAAQ,EAAE,EAAE;oBACZ,UAAU,EAAE,eAAe;oBAC3B,GAAG;iBACJ,CAAC,CAAC;gBACH,OAAO,yBAAyB,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7E,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,WAAW,GAAG,cAAc,CAAC;QACnC,MAAM,MAAM,GAMR,EAAE,aAAa,EAAE,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;QAEvG,IAAI,WAAW,EAAE,CAAC;YAQhB,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3G,MAAM,oBAAoB,GAAG,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnH,MAAM,gBAAgB,GAA+C,EAAE,CAAC;YACxE,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;YAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,MAAM,UAAU,GAAG,WAAW,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC9D,IAAI,CAAC,UAAU;oBAAE,SAAS;gBAC1B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,SAAS;gBACnD,IAAI,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,SAAS;gBACjD,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACnC,gBAAgB,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC;YAC7C,CAAC;YAED,MAAM,QAAQ,GAAW;gBACvB,EAAE,IAAI,EAAE,eAAe,EAAE;gBACzB,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9E,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CACzC,oBAAoB,IAAI,UAAU,KAAK,qBAAqB;oBAC1D,CAAC,CAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE,eAAe,IAAI,gBAAgB,EAAY;oBACpG,CAAC,CAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAY,CAC9C;gBACD,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAU,CAAC;aAC1G,CAAC;YAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC;gBACrC,MAAM,IAAI,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;gBAC1B,IAAI,CAAU,CAAC;gBACf,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;oBAClC,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC;wBACnB,OAAO,EAAE,iGAAiG;qBAC3G,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;oBAC5C,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,0FAA0F,EAAE,CAAC,CAAC;gBAChI,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBAC3C,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC;wBACf,OAAO,EAAE,gDAAgD,IAAI,CAAC,UAAU,MAAM,IAAI,CAAC,SAAS,cAAc;wBAC1G,WAAW,EAAE,GAAG,MAAM,CAAC,UAAU,eAAe;qBACjD,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;oBAClC,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iBAAiB,IAAI,CAAC,UAAU,cAAc,EAAE,CAAC,CAAC;gBACpF,CAAC;qBAAM,CAAC;oBACN,CAAC,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,qBAAqB,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,UAAU,cAAc,EAAE,CAAC,CAAC;gBACrG,CAAC;gBAED,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBAClB,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;oBACrE,IAAI,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACrB,UAAU,EAAE,CAAC;wBACb,OAAO;oBACT,CAAC;oBACD,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;oBACvB,SAAS;gBACX,CAAC;gBAED,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe;oBAAE,MAAM,CAAC,aAAa,GAAG,CAAC,CAAC;qBACvD,IAAI,IAAI,CAAC,IAAI,KAAK,kBAAkB;oBAAE,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC;qBAClE,IAAI,IAAI,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACzC,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;oBACzB,IAAI,CAAC,OAAO;wBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;yBAC9C,CAAC;wBACJ,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;wBACrC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;wBAC3F,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;wBAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;4BAAE,MAAM,IAAI,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,CAAC;wBAC1D,IAAI,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI;4BAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,EAAE,CAAC,CAAC;wBACnF,MAAM,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;wBACrD,IAAI,CAAC,KAAK;4BAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;wBAC3D,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC;oBAC1C,CAAC;gBACH,CAAC;qBACI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;qBAChE,CAAC;oBACJ,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBACD,CAAC,IAAI,CAAC,CAAC;YACT,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YACpD,MAAM,CAAC,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,CAAC;YACnD,MAAM,CAAC,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC;YACvD,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;YACrC,MAAM,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;QAClD,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YACzC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,qBAAqB;YACrB,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,cAAc;SAClB,CAAC,CAAC,CAAC;QAEJ,MAAM,gBAAgB,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,YAAY,CAAC;QAEzF,MAAM,cAAc,GAA2B,EAAE,CAAC;QAClD,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACtD,IAAI,UAAU,KAAK,oBAAoB,EAAE,CAAC;gBACxC,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;qBAC3F,IAAI,QAAQ,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;qBAC3F,IAAI,CAAC,CAAC,iBAAiB;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;;oBAClE,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;gBACtI,SAAS;YACX,CAAC;YAED,IAAI,UAAU,KAAK,qBAAqB,EAAE,CAAC;gBACzC,IAAI,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC;oBACpC,cAAc,CAAC,UAAU,CAAC,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC;gBAC/D,CAAC;qBAAM,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC;oBACvC,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,CAAC,CAAC;gBAClI,CAAC;qBAAM,CAAC;oBACN,cAAc,CAAC,UAAU,CAAC,GAAG,QAAQ,IAAI,WAAW,CAAC;gBACvD,CAAC;gBACD,SAAS;YACX,CAAC;YAED,IAAI,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBACxC,MAAM,GAAG,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBACrD,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBACxG,IAAI,EAAE;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;qBACnC,IAAI,QAAQ;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;qBACpD,IAAI,CAAC,QAAQ;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC;qBACzD,IAAI,CAAC,CAAC,iBAAiB;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;;oBAClE,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,IAAI,UAAU,yEAAyE,CAAC,CAAC;gBAC9I,SAAS;YACX,CAAC;YAED,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;YACtD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC1D,IAAI,EAAE,IAAI,CAAC,CAAC,QAAQ,IAAI,gBAAgB,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;gBAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,wBAAwB,CAAC,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACvH,cAAc,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC;gBACtC,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,CAAC,iBAAiB;oBAAE,cAAc,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;;oBAC7D,MAAM,IAAI,KAAK,CAAC,4BAA4B,UAAU,6DAA6D,CAAC,CAAC;gBAC1H,SAAS;YACX,CAAC;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,YAAY,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACd,MAAM,SAAS,CAAC,eAAe,CAAC,CAAC;YACjC,MAAM,SAAS,CAAC,oBAAoB,CAAC,CAAC;YAEtC,KAAK,MAAM,UAAU,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,UAAU,OAAO,CAAC,CAAC;gBACjE,MAAM,aAAa,GAAG,oBAAoB,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,cAAc,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACrH,MAAM,qBAAqB,CAAC,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;gBACzF,MAAM,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACnD,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,UAAU,OAAO,CAAC,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3G,CAAC;QACH,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,eAAe,EAAE,CAAC,CAAC;QACvD,OAAO,CAAC,GAAG,CAAC,sBAAsB,cAAc,EAAE,CAAC,CAAC;QACpD,OAAO,CAAC,GAAG,CAAC,2BAA2B,eAAe,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QAC9D,OAAO,CAAC,GAAG,CAAC,0BAA0B,iBAAiB,EAAE,CAAC,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,8BAA8B,oBAAoB,EAAE,CAAC,CAAC;IACpE,CAAC;CACF,CAAC,CAAC"}

package/dist/commands/secrets/path.d.ts

@@ -0,0 +1,11 @@
+export declare const secretsPath: import("citty").CommandDef<{
+    runtimeDir: {
+        type: "string";
+        description: string;
+    };
+    host: {
+        type: "string";
+        description: string;
+    };
+}>;
+//# sourceMappingURL=path.d.ts.map

package/dist/commands/secrets/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/path.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,WAAW;;;;;;;;;EAiBtB,CAAC"}

package/dist/commands/secrets/path.js

@@ -0,0 +1,24 @@
+import process from "node:process";
+import { defineCommand } from "citty";
+import { getHostRemoteSecretsDir, getHostSecretsDir } from "@clawdlets/core/repo-layout";
+import { loadHostContextOrExit } from "../../lib/context.js";
+export const secretsPath = defineCommand({
+    meta: {
+        name: "path",
+        description: "Print local + remote secrets paths for a host.",
+    },
+    args: {
+        runtimeDir: { type: "string", description: "Runtime directory (default: .clawdlets)." },
+        host: { type: "string", description: "Host name (defaults to clawdlets.json defaultHost / sole host)." },
+    },
+    async run({ args }) {
+        const cwd = process.cwd();
+        const ctx = loadHostContextOrExit({ cwd, runtimeDir: args.runtimeDir, hostArg: args.host });
+        if (!ctx)
+            return;
+        const { layout, hostName } = ctx;
+        console.log(`local: ${getHostSecretsDir(layout, hostName)}`);
+        console.log(`remote: ${getHostRemoteSecretsDir(hostName)}`);
+    },
+});
+//# sourceMappingURL=path.js.map

package/dist/commands/secrets/path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.js","sourceRoot":"","sources":["../../../src/commands/secrets/path.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,gDAAgD;KAC9D;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;QACvF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;KACzG;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAG,IAAY,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,UAAU,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,WAAW,uBAAuB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;CACF,CAAC,CAAC"}

package/dist/commands/secrets/sync.d.ts

@@ -0,0 +1,25 @@
+export declare const secretsSync: import("citty").CommandDef<{
+    runtimeDir: {
+        type: "string";
+        description: string;
+    };
+    host: {
+        type: "string";
+        description: string;
+    };
+    targetHost: {
+        type: "string";
+        description: string;
+    };
+    rev: {
+        type: "string";
+        description: string;
+        default: string;
+    };
+    sshTty: {
+        type: "boolean";
+        description: string;
+        default: true;
+    };
+}>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/commands/secrets/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/commands/secrets/sync.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;EAwDtB,CAAC"}

package/dist/commands/secrets/sync.js

@@ -0,0 +1,67 @@
+import fs from "node:fs";
+import process from "node:process";
+import { defineCommand } from "citty";
+import { run } from "@clawdlets/core/lib/run";
+import { shellQuote, sshRun } from "@clawdlets/core/lib/ssh-remote";
+import { getHostRemoteSecretsDir, getHostSecretsDir } from "@clawdlets/core/repo-layout";
+import { resolveGitRev } from "@clawdlets/core/lib/git";
+import { createSecretsTar } from "@clawdlets/core/lib/secrets-tar";
+import { needsSudo, requireTargetHost } from "./common.js";
+import { loadHostContextOrExit } from "../../lib/context.js";
+export const secretsSync = defineCommand({
+    meta: {
+        name: "sync",
+        description: "Copy local secrets to the server via the install-secrets allowlist.",
+    },
+    args: {
+        runtimeDir: { type: "string", description: "Runtime directory (default: .clawdlets)." },
+        host: { type: "string", description: "Host name (defaults to clawdlets.json defaultHost / sole host)." },
+        targetHost: { type: "string", description: "SSH target override (default: from clawdlets.json)." },
+        rev: { type: "string", description: "Git rev for secrets metadata (HEAD/sha/tag).", default: "HEAD" },
+        sshTty: { type: "boolean", description: "Allocate TTY for sudo prompts.", default: true },
+    },
+    async run({ args }) {
+        const cwd = process.cwd();
+        const ctx = loadHostContextOrExit({ cwd, runtimeDir: args.runtimeDir, hostArg: args.host });
+        if (!ctx)
+            return;
+        const { layout, hostName, hostCfg } = ctx;
+        const targetHost = requireTargetHost(String(args.targetHost || hostCfg.targetHost || ""), hostName);
+        const localDir = getHostSecretsDir(layout, hostName);
+        const remoteDir = getHostRemoteSecretsDir(hostName);
+        const revRaw = String(args.rev || "").trim() || "HEAD";
+        const resolved = await resolveGitRev(layout.repoRoot, revRaw);
+        if (!resolved)
+            throw new Error(`unable to resolve git rev: ${revRaw}`);
+        const { tarPath: tarLocal, digest } = await createSecretsTar({ hostName, localDir });
+        const tarRemote = `/tmp/clawdlets-secrets.${hostName}.${process.pid}.tgz`;
+        try {
+            await run("scp", [tarLocal, `${targetHost}:${tarRemote}`], { redact: [] });
+        }
+        finally {
+            try {
+                if (fs.existsSync(tarLocal))
+                    fs.unlinkSync(tarLocal);
+            }
+            catch {
+                // best-effort cleanup
+            }
+        }
+        const sudo = needsSudo(targetHost);
+        const installCmd = [
+            ...(sudo ? ["sudo"] : []),
+            "/etc/clawdlets/bin/install-secrets",
+            "--host",
+            hostName,
+            "--tar",
+            tarRemote,
+            "--rev",
+            resolved,
+            "--digest",
+            digest,
+        ].map(shellQuote).join(" ");
+        await sshRun(targetHost, installCmd, { tty: sudo && args.sshTty });
+        console.log(`ok: synced secrets to ${remoteDir}`);
+    },
+});
+//# sourceMappingURL=sync.js.map

package/dist/commands/secrets/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../../src/commands/secrets/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,OAAO,CAAC;AACtC,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE7D,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;IACvC,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,qEAAqE;KACnF;IACD,IAAI,EAAE;QACJ,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0CAA0C,EAAE;QACvF,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,iEAAiE,EAAE;QACxG,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,qDAAqD,EAAE;QAClG,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE,OAAO,EAAE,MAAM,EAAE;QACrG,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE,OAAO,EAAE,IAAI,EAAE;KAC1F;IACD,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE;QAChB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,qBAAqB,CAAC,EAAE,GAAG,EAAE,UAAU,EAAG,IAAY,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrG,IAAI,CAAC,GAAG;YAAE,OAAO;QACjB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QAE1C,MAAM,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;QAEpG,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM,CAAC;QACvD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,MAAM,EAAE,CAAC,CAAC;QAEvE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,gBAAgB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrF,MAAM,SAAS,GAAG,0BAA0B,QAAQ,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAE1E,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,GAAG,UAAU,IAAI,SAAS,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;oBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvD,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,UAAU,GAAG;YACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,oCAAoC;YACpC,QAAQ;YACR,QAAQ;YACR,OAAO;YACP,SAAS;YACT,OAAO;YACP,QAAQ;YACR,UAAU;YACV,MAAM;SACP,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAEnE,OAAO,CAAC,GAAG,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC;IACpD,CAAC;CACF,CAAC,CAAC"}