@ai-agent-forge/agent-forge 0.85.0

package/dist/plugins/ecosystem/node-distribution-host.js

@@ -0,0 +1,423 @@
+import { createHash, randomUUID } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { mkdir, mkdtemp, open, rename, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { isAbsolute, join } from "node:path";
+import { createPluginDistributionV1 } from "./distribution.js";
+import { createNodePluginTrustRootV1 } from "./node-plugin-trust-root.js";
+const NODE_DISTRIBUTION_HOST_VERSION_V1 = 1;
+const DEFAULT_TIMEOUT_MS_V1 = 30_000;
+const MAX_TIMEOUT_MS_V1 = 120_000;
+const DEFAULT_REDIRECTS_V1 = 3;
+const MAX_REDIRECTS_V1 = 5;
+const REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);
+function cancelledRequestError() {
+    const error = new Error("plugin request was cancelled");
+    error.name = "AbortError";
+    return error;
+}
+function throwIfRequestCancelled(request) {
+    if (request.timedOut())
+        throw new Error("plugin request timed out");
+    if (request.signal.aborted)
+        throw cancelledRequestError();
+}
+function boundedPositive(value, fallback, maximum, label) {
+    const result = value ?? fallback;
+    if (!Number.isSafeInteger(result) || result <= 0 || result > maximum)
+        throw new Error(`${label} must be a positive integer at most ${maximum}`);
+    return result;
+}
+function allowedOrigin(value) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error("allowed origin is invalid");
+    }
+    if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") || parsed.username || parsed.password)
+        throw new Error("allowed origin must be an http(s) origin");
+    if (parsed.pathname !== "/" || parsed.search !== "" || parsed.hash !== "")
+        throw new Error("allowed origin must not include a path or query");
+    return parsed.origin;
+}
+function requestUrl(value, origins) {
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        throw new Error("plugin source URL is invalid");
+    }
+    if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") || parsed.username || parsed.password)
+        throw new Error("plugin source URL must use http(s) without credentials");
+    if (!origins.has(parsed.origin))
+        throw new Error("plugin source origin is not allowed");
+    return parsed;
+}
+function requestSignal(parent, timeoutMs) {
+    const controller = new AbortController();
+    let didTimeout = false;
+    const abort = () => controller.abort(parent?.reason);
+    if (parent?.aborted === true)
+        abort();
+    else
+        parent?.addEventListener("abort", abort, { once: true });
+    const timeout = setTimeout(() => {
+        didTimeout = true;
+        controller.abort();
+    }, timeoutMs);
+    return {
+        signal: controller.signal,
+        timedOut: () => didTimeout,
+        cleanup: () => {
+            clearTimeout(timeout);
+            parent?.removeEventListener("abort", abort);
+        },
+    };
+}
+function contentLength(response) {
+    const value = response.headers.get("content-length");
+    if (value === null)
+        return undefined;
+    if (!/^\d+$/u.test(value))
+        throw new Error("plugin response content length is invalid");
+    const result = Number(value);
+    if (!Number.isSafeInteger(result))
+        throw new Error("plugin response content length is invalid");
+    return result;
+}
+function contentType(response) {
+    const value = response.headers.get("content-type");
+    if (value === null)
+        return undefined;
+    return value.split(";", 1)[0]?.trim().toLowerCase() || undefined;
+}
+function assertResponseMetadata(response, descriptor) {
+    const length = contentLength(response);
+    if (length !== descriptor.sizeBytes)
+        throw new Error("plugin response size mismatch");
+    const mediaType = contentType(response);
+    if (mediaType !== descriptor.mediaType.toLowerCase())
+        throw new Error("plugin response media type mismatch");
+}
+async function cancelBody(response) {
+    if (response.body !== null)
+        await response.body.cancel().catch(() => undefined);
+}
+function expectedDigest(value) {
+    const prefixed = /^(sha256|sha512):([0-9a-f]+)$/iu.exec(value);
+    if (prefixed !== null) {
+        const algorithm = prefixed[1]?.toLowerCase();
+        const hex = prefixed[2]?.toLowerCase();
+        if ((algorithm === "sha256" && hex?.length === 64) || (algorithm === "sha512" && hex?.length === 128))
+            return { algorithm, hex };
+    }
+    if (/^[0-9a-f]{64}$/iu.test(value))
+        return { algorithm: "sha256", hex: value.toLowerCase() };
+    if (/^[0-9a-f]{128}$/iu.test(value))
+        return { algorithm: "sha512", hex: value.toLowerCase() };
+    throw new Error("plugin artifact digest algorithm is unsupported");
+}
+function metadataFromDescriptor(descriptor) {
+    return {
+        version: 1,
+        source: descriptor.source,
+        pluginId: descriptor.pluginId,
+        pluginVersion: descriptor.pluginVersion,
+        manifestDigest: descriptor.manifestDigest,
+        artifactDigest: descriptor.artifactDigest,
+        expiresAt: descriptor.expiresAt,
+        sizeBytes: descriptor.sizeBytes,
+        mediaType: descriptor.mediaType,
+    };
+}
+function artifactMatchesDescriptor(artifact, descriptor) {
+    return (artifact.version === 1 &&
+        artifact.pluginId === descriptor.pluginId &&
+        artifact.pluginVersion === descriptor.pluginVersion &&
+        artifact.manifestDigest === descriptor.manifestDigest &&
+        artifact.artifactDigest === descriptor.artifactDigest &&
+        artifact.sizeBytes === descriptor.sizeBytes &&
+        artifact.mediaType === descriptor.mediaType &&
+        artifact.source === descriptor.source &&
+        artifact.expiresAt === descriptor.expiresAt);
+}
+async function writeFully(file, chunk) {
+    let offset = 0;
+    while (offset < chunk.byteLength) {
+        const result = await file.write(chunk, offset, chunk.byteLength - offset, null);
+        if (result.bytesWritten <= 0)
+            throw new Error("plugin artifact file write failed");
+        offset += result.bytesWritten;
+    }
+}
+/**
+ * Node/undici distribution transport. It is a host adapter, not Core logic:
+ * package bytes stay in a private artifact directory and are never returned by
+ * the public distribution contract.
+ */
+export async function createNodeHttpPluginDistributionHostV1(options) {
+    const transport = options.fetch ?? globalThis.fetch;
+    if (typeof transport !== "function")
+        throw new Error("Node fetch is unavailable");
+    if (!Array.isArray(options.allowedOrigins) || options.allowedOrigins.length === 0)
+        throw new Error("at least one allowed origin is required");
+    const origins = new Set(options.allowedOrigins.map(allowedOrigin));
+    const timeoutMs = boundedPositive(options.requestTimeoutMs, DEFAULT_TIMEOUT_MS_V1, MAX_TIMEOUT_MS_V1, "requestTimeoutMs");
+    const maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;
+    if (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)
+        throw new Error(`maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`);
+    const userAgent = options.userAgent ?? "agent-forge-plugin-distribution/1";
+    if (userAgent.length === 0 || userAgent.length > 256 || /[\r\n]/u.test(userAgent))
+        throw new Error("userAgent is invalid");
+    const configuredDirectory = options.artifactDirectory;
+    if (configuredDirectory !== undefined && !isAbsolute(configuredDirectory))
+        throw new Error("artifactDirectory must be absolute");
+    const baseDirectoryPromise = configuredDirectory === undefined
+        ? mkdtemp(join(tmpdir(), "agent-forge-plugin-distribution-"))
+        : (async () => {
+            await mkdir(configuredDirectory, { recursive: true });
+            return await mkdtemp(join(configuredDirectory, "agent-forge-plugin-distribution-"));
+        })();
+    const artifacts = new Map();
+    const activeOperations = new Set();
+    let operationsDrained;
+    let closePromise;
+    let closed = false;
+    const assertOpen = () => {
+        if (closed)
+            throw new Error("plugin distribution host is closed");
+    };
+    const beginOperation = () => {
+        assertOpen();
+        const controller = new AbortController();
+        activeOperations.add(controller);
+        return controller;
+    };
+    const endOperation = (controller) => {
+        activeOperations.delete(controller);
+        if (activeOperations.size === 0) {
+            operationsDrained?.();
+            operationsDrained = undefined;
+        }
+    };
+    const waitForOperations = async () => {
+        if (activeOperations.size === 0)
+            return;
+        await new Promise((resolve) => {
+            operationsDrained = resolve;
+        });
+    };
+    const fetchResponse = async (value, method, parentSignal, operationSignal) => {
+        let current = requestUrl(value, origins);
+        for (let redirect = 0;; redirect += 1) {
+            if (operationSignal.aborted)
+                throw cancelledRequestError();
+            assertOpen();
+            const request = requestSignal(AbortSignal.any([parentSignal, operationSignal].filter(Boolean)), timeoutMs);
+            let response;
+            try {
+                response = await transport(current.toString(), {
+                    method,
+                    headers: { accept: "*/*", "user-agent": userAgent },
+                    redirect: "manual",
+                    signal: request.signal,
+                });
+            }
+            catch (error) {
+                request.cleanup();
+                throwIfRequestCancelled(request);
+                throw error;
+            }
+            if (!REDIRECT_STATUS.has(response.status))
+                return { response, request };
+            const location = response.headers.get("location");
+            await cancelBody(response);
+            request.cleanup();
+            if (location === null || redirect >= maxRedirects)
+                throw new Error("plugin redirect limit exceeded");
+            current = requestUrl(new URL(location, current).toString(), origins);
+        }
+    };
+    const resolveMetadata = async (input) => {
+        const operation = beginOperation();
+        try {
+            const { response, request } = await fetchResponse(input.descriptor.source, "HEAD", input.signal, operation.signal);
+            try {
+                if (response.status < 200 || response.status >= 300)
+                    throw new Error("plugin metadata request failed");
+                assertResponseMetadata(response, input.descriptor);
+                return metadataFromDescriptor(input.descriptor);
+            }
+            finally {
+                await cancelBody(response);
+                request.cleanup();
+            }
+        }
+        finally {
+            endOperation(operation);
+        }
+    };
+    const acquireArtifact = async (input) => {
+        const operation = beginOperation();
+        let temporaryPath;
+        let finalPath;
+        let published = false;
+        try {
+            const digest = expectedDigest(input.descriptor.artifactDigest);
+            const { response, request } = await fetchResponse(input.descriptor.source, "GET", input.signal, operation.signal);
+            let file;
+            try {
+                if (response.status < 200 || response.status >= 300)
+                    throw new Error("plugin artifact request failed");
+                assertResponseMetadata(response, input.descriptor);
+                if (response.body === null)
+                    throw new Error("plugin artifact response has no body");
+                const directory = await baseDirectoryPromise;
+                temporaryPath = join(directory, `.partial-${randomUUID()}`);
+                finalPath = join(directory, `artifact-${randomUUID()}`);
+                file = await open(temporaryPath, "wx");
+                const reader = response.body.getReader();
+                const hash = createHash(digest.algorithm);
+                let total = 0;
+                try {
+                    for (;;) {
+                        throwIfRequestCancelled(request);
+                        const item = await reader.read();
+                        if (item.done)
+                            break;
+                        const chunk = item.value;
+                        total += chunk.byteLength;
+                        if (total > input.descriptor.sizeBytes)
+                            throw new Error("plugin artifact exceeds its size limit");
+                        hash.update(chunk);
+                        await writeFully(file, chunk);
+                    }
+                }
+                finally {
+                    reader.releaseLock();
+                }
+                throwIfRequestCancelled(request);
+                if (total !== input.descriptor.sizeBytes)
+                    throw new Error("plugin artifact size mismatch");
+                if (hash.digest("hex") !== digest.hex)
+                    throw new Error("plugin artifact digest mismatch");
+                await file.close();
+                file = undefined;
+                await rename(temporaryPath, finalPath);
+                assertOpen();
+                const artifactRef = `artifact://node-http/${randomUUID()}`;
+                artifacts.set(artifactRef, { path: finalPath, descriptor: input.descriptor, readers: 0 });
+                published = true;
+                return {
+                    artifactRef,
+                    artifactDigest: input.descriptor.artifactDigest,
+                    sizeBytes: input.descriptor.sizeBytes,
+                    mediaType: input.descriptor.mediaType,
+                };
+            }
+            catch (error) {
+                throwIfRequestCancelled(request);
+                throw error;
+            }
+            finally {
+                if (file !== undefined)
+                    await file.close().catch(() => undefined);
+                await cancelBody(response);
+                request.cleanup();
+            }
+        }
+        finally {
+            if (temporaryPath !== undefined)
+                await rm(temporaryPath, { force: true }).catch(() => undefined);
+            if (!published && finalPath !== undefined)
+                await rm(finalPath, { force: true }).catch(() => undefined);
+            endOperation(operation);
+        }
+    };
+    const releaseArtifact = async (input) => {
+        assertOpen();
+        if (input.signal?.aborted)
+            throw new Error("plugin artifact release was cancelled");
+        const record = artifacts.get(input.artifact.artifactRef);
+        if (record === undefined)
+            throw new Error("plugin artifact reference is unknown");
+        if (record.readers > 0)
+            throw new Error("plugin artifact is still being read");
+        await rm(record.path, { force: false });
+        artifacts.delete(input.artifact.artifactRef);
+    };
+    const openArtifact = (input) => (async function* () {
+        const operation = beginOperation();
+        let stream;
+        let acquiredRecord;
+        const abort = () => stream?.destroy(new Error("plugin artifact read was cancelled"));
+        try {
+            if (input.signal?.aborted)
+                throw new Error("plugin artifact read was cancelled");
+            const record = artifacts.get(input.artifact.artifactRef);
+            if (record === undefined || !artifactMatchesDescriptor(input.artifact, record.descriptor))
+                throw new Error("plugin artifact reference is unknown");
+            record.readers += 1;
+            acquiredRecord = record;
+            stream = createReadStream(record.path, { highWaterMark: 64 * 1024 });
+            input.signal?.addEventListener("abort", abort, { once: true });
+            operation.signal.addEventListener("abort", abort, { once: true });
+            for await (const chunk of stream) {
+                if (input.signal?.aborted || operation.signal.aborted)
+                    throw new Error("plugin artifact read was cancelled");
+                yield new Uint8Array(chunk);
+            }
+        }
+        finally {
+            input.signal?.removeEventListener("abort", abort);
+            operation.signal.removeEventListener("abort", abort);
+            stream?.destroy();
+            if (acquiredRecord !== undefined && acquiredRecord.readers > 0)
+                acquiredRecord.readers -= 1;
+            endOperation(operation);
+        }
+    })();
+    return {
+        version: NODE_DISTRIBUTION_HOST_VERSION_V1,
+        host: { resolveMetadata, acquireArtifact, releaseArtifact },
+        openArtifact,
+        close: async () => {
+            if (closePromise !== undefined)
+                return await closePromise;
+            closed = true;
+            for (const operation of activeOperations)
+                operation.abort();
+            closePromise = (async () => {
+                await waitForOperations();
+                const directory = await baseDirectoryPromise;
+                await Promise.all([...artifacts.values()].map((record) => rm(record.path, { force: true })));
+                artifacts.clear();
+                await rm(directory, { recursive: true, force: true });
+            })();
+            return await closePromise;
+        },
+    };
+}
+/**
+ * Compose the real Node HTTP transport with the explicit Ed25519 trust root.
+ * Distribution descriptors are verified before metadata or artifact access;
+ * the returned host still keeps bytes behind its private reader.
+ */
+export async function createNodeHttpPluginDistributionStackV1(options) {
+    const { trustRoot, now: configuredNow, ...hostOptions } = options;
+    const host = await createNodeHttpPluginDistributionHostV1(hostOptions);
+    try {
+        const now = configuredNow ?? trustRoot.now ?? (() => Date.now());
+        const verifySignature = createNodePluginTrustRootV1({ ...trustRoot, now });
+        const distribution = createPluginDistributionV1({ host: host.host, verifySignature, now });
+        return Object.freeze({ ...host, distribution });
+    }
+    catch (error) {
+        await host.close().catch(() => undefined);
+        throw error;
+    }
+}
+//# sourceMappingURL=node-distribution-host.js.map

package/dist/plugins/ecosystem/node-distribution-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-distribution-host.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-distribution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAS7C,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,2BAA2B,EAAqC,MAAM,6BAA6B,CAAC;AAE7G,MAAM,iCAAiC,GAAG,CAAU,CAAC;AACrD,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAwD3D,SAAS,qBAAqB,GAAU;IACvC,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,GAAG,YAAY,CAAC;IAC1B,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,uBAAuB,CAAC,OAAsB,EAAQ;IAC9D,IAAI,OAAO,CAAC,QAAQ,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,qBAAqB,EAAE,CAAC;AAAA,CAC1D;AAED,SAAS,eAAe,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe,EAAE,KAAa,EAAU;IAC7G,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,OAAO;QACnE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,uCAAuC,OAAO,EAAE,CAAC,CAAC;IAC3E,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,aAAa,CAAC,KAAa,EAAU;IAC7C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QACtG,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;QACxE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,MAAM,CAAC;AAAA,CACrB;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,OAA4B,EAAO;IACrE,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QACtG,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC3E,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,aAAa,CAAC,MAA+B,EAAE,SAAiB,EAAiB;IACzF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,KAAK,EAAE,CAAC;;QACjC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;QAChC,UAAU,GAAG,IAAI,CAAC;QAClB,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,CACnB,EAAE,SAAS,CAAC,CAAC;IACd,OAAO;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,EAAE,CAAC;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAA,CAC5C;KACD,CAAC;AAAA,CACF;AAED,SAAS,aAAa,CAAC,QAAkB,EAAsB;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,WAAW,CAAC,QAAkB,EAAsB;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC;AAAA,CACjE;AAED,SAAS,sBAAsB,CAAC,QAAkB,EAAE,UAA0C,EAAQ;IACrG,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,MAAM,KAAK,UAAU,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,SAAS,KAAK,UAAU,CAAC,SAAS,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAAA,CAC7G;AAED,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAiB;IAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;AAAA,CAChF;AAED,SAAS,cAAc,CAAC,KAAa,EAAqE;IACzG,MAAM,QAAQ,GAAG,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,EAAE,MAAM,KAAK,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,EAAE,MAAM,KAAK,GAAG,CAAC;YACpG,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;IAC5B,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7F,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IAC9F,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AAAA,CACnE;AAED,SAAS,sBAAsB,CAAC,UAA0C,EAAgC;IACzG,OAAO;QACN,OAAO,EAAE,CAAC;QACV,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,aAAa,EAAE,UAAU,CAAC,aAAa;QACvC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,SAAS,EAAE,UAAU,CAAC,SAAS;KAC/B,CAAC;AAAA,CACF;AAED,SAAS,yBAAyB,CACjC,QAAsC,EACtC,UAA0C,EAChC;IACV,OAAO,CACN,QAAQ,CAAC,OAAO,KAAK,CAAC;QACtB,QAAQ,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;QACzC,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC,aAAa;QACnD,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QACrD,QAAQ,CAAC,cAAc,KAAK,UAAU,CAAC,cAAc;QACrD,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAC3C,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS;QAC3C,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;QACrC,QAAQ,CAAC,SAAS,KAAK,UAAU,CAAC,SAAS,CAC3C,CAAC;AAAA,CACF;AAED,KAAK,UAAU,UAAU,CAAC,IAAsC,EAAE,KAAiB,EAAiB;IACnG,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;QAChF,IAAI,MAAM,CAAC,YAAY,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnF,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC;IAC/B,CAAC;AAAA,CACD;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC3D,OAAgD,EACJ;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAClF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,eAAe,CAChC,OAAO,CAAC,gBAAgB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,CAClB,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,gBAAgB;QAC7F,MAAM,IAAI,KAAK,CAAC,iDAAiD,gBAAgB,EAAE,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mCAAmC,CAAC;IAC3E,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACzC,MAAM,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IACtD,IAAI,mBAAmB,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;QACxE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACvD,MAAM,oBAAoB,GACzB,mBAAmB,KAAK,SAAS;QAChC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACb,MAAM,KAAK,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACtD,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC,CAAC;QAAA,CACpF,CAAC,EAAE,CAAC;IACR,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAmB,CAAC;IACpD,IAAI,iBAA2C,CAAC;IAChD,IAAI,YAAuC,CAAC;IAC5C,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,UAAU,GAAG,GAAS,EAAE,CAAC;QAC9B,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAAA,CAClE,CAAC;IAEF,MAAM,cAAc,GAAG,GAAoB,EAAE,CAAC;QAC7C,UAAU,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACjC,OAAO,UAAU,CAAC;IAAA,CAClB,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,UAA2B,EAAQ,EAAE,CAAC;QAC3D,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACpC,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACjC,iBAAiB,EAAE,EAAE,CAAC;YACtB,iBAAiB,GAAG,SAAS,CAAC;QAC/B,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE,CAAC;QACpD,IAAI,gBAAgB,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO;QACxC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACpC,iBAAiB,GAAG,OAAO,CAAC;QAAA,CAC5B,CAAC,CAAC;IAAA,CACH,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAC1B,KAAa,EACb,MAAsB,EACtB,YAAqC,EACrC,eAA4B,EACgD,EAAE,CAAC;QAC/E,IAAI,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,KAAK,IAAI,QAAQ,GAAG,CAAC,GAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACxC,IAAI,eAAe,CAAC,OAAO;gBAAE,MAAM,qBAAqB,EAAE,CAAC;YAC3D,UAAU,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,aAAa,CAC5B,WAAW,CAAC,GAAG,CAAC,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,MAAM,CAAC,OAAO,CAAkB,CAAC,EACjF,SAAS,CACT,CAAC;YACF,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE;oBAC9C,MAAM;oBACN,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE;oBACnD,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACtB,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC;YACb,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC3B,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,IAAI,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACrG,OAAO,GAAG,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;QACtE,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAG9B,EAAyC,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAChD,KAAK,CAAC,UAAU,CAAC,MAAM,EACvB,MAAM,EACN,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,MAAM,CAChB,CAAC;YACF,IAAI,CAAC;gBACJ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACvG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACnD,OAAO,sBAAsB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YACjD,CAAC;oBAAS,CAAC;gBACV,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC3B,OAAO,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,YAAY,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAI9B,EAA+C,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;QACnC,IAAI,aAAiC,CAAC;QACtC,IAAI,SAA6B,CAAC;QAClC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAC/D,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,aAAa,CAChD,KAAK,CAAC,UAAU,CAAC,MAAM,EACvB,KAAK,EACL,KAAK,CAAC,MAAM,EACZ,SAAS,CAAC,MAAM,CAChB,CAAC;YACF,IAAI,IAAkD,CAAC;YACvD,IAAI,CAAC;gBACJ,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACvG,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACnD,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;oBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBACpF,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC;gBAC7C,aAAa,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC5D,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,UAAU,EAAE,EAAE,CAAC,CAAC;gBACxD,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;gBACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACzC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC1C,IAAI,KAAK,GAAG,CAAC,CAAC;gBACd,IAAI,CAAC;oBACJ,SAAS,CAAC;wBACT,uBAAuB,CAAC,OAAO,CAAC,CAAC;wBACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBACjC,IAAI,IAAI,CAAC,IAAI;4BAAE,MAAM;wBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;wBACzB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;wBAC1B,IAAI,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;wBAClG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;wBACnB,MAAM,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;oBAC/B,CAAC;gBACF,CAAC;wBAAS,CAAC;oBACV,MAAM,CAAC,WAAW,EAAE,CAAC;gBACtB,CAAC;gBACD,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACjC,IAAI,KAAK,KAAK,KAAK,CAAC,UAAU,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBAC3F,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,GAAG;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAC1F,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;gBACnB,IAAI,GAAG,SAAS,CAAC;gBACjB,MAAM,MAAM,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;gBACvC,UAAU,EAAE,CAAC;gBACb,MAAM,WAAW,GAAG,wBAAwB,UAAU,EAAE,EAAE,CAAC;gBAC3D,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC1F,SAAS,GAAG,IAAI,CAAC;gBACjB,OAAO;oBACN,WAAW;oBACX,cAAc,EAAE,KAAK,CAAC,UAAU,CAAC,cAAc;oBAC/C,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;oBACrC,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,SAAS;iBACrC,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,uBAAuB,CAAC,OAAO,CAAC,CAAC;gBACjC,MAAM,KAAK,CAAC;YACb,CAAC;oBAAS,CAAC;gBACV,IAAI,IAAI,KAAK,SAAS;oBAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAClE,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;gBAC3B,OAAO,CAAC,OAAO,EAAE,CAAC;YACnB,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,aAAa,KAAK,SAAS;gBAAE,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjG,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,SAAS;gBAAE,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACvG,YAAY,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,KAG9B,EAAiB,EAAE,CAAC;QACpB,UAAU,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QACpF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAClF,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAC/E,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAAA,CAC7C,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,KAGrB,EAA6B,EAAE,CAC/B,CAAC,KAAK,SAAS,CAAC,IAAgC;QAC/C,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;QACnC,IAAI,MAAuD,CAAC;QAC5D,IAAI,cAA0C,CAAC;QAC/C,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;QACrF,IAAI,CAAC;YACJ,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACjF,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YACzD,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,CAAC;gBACxF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACzD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,cAAc,GAAG,MAAM,CAAC;YACxB,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YACrE,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/D,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAClC,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,OAAO;oBACpD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBACvD,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,KAAK,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClD,SAAS,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrD,MAAM,EAAE,OAAO,EAAE,CAAC;YAClB,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,OAAO,GAAG,CAAC;gBAAE,cAAc,CAAC,OAAO,IAAI,CAAC,CAAC;YAC5F,YAAY,CAAC,SAAS,CAAC,CAAC;QACzB,CAAC;IAAA,CACD,CAAC,EAAE,CAAC;IAEN,OAAO;QACN,OAAO,EAAE,iCAAiC;QAC1C,IAAI,EAAE,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE;QAC3D,YAAY;QACZ,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,YAAY,KAAK,SAAS;gBAAE,OAAO,MAAM,YAAY,CAAC;YAC1D,MAAM,GAAG,IAAI,CAAC;YACd,KAAK,MAAM,SAAS,IAAI,gBAAgB;gBAAE,SAAS,CAAC,KAAK,EAAE,CAAC;YAC5D,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC3B,MAAM,iBAAiB,EAAE,CAAC;gBAC1B,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC;gBAC7C,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC7F,SAAS,CAAC,KAAK,EAAE,CAAC;gBAClB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAAA,CACtD,CAAC,EAAE,CAAC;YACL,OAAO,MAAM,YAAY,CAAC;QAAA,CAC1B;KACD,CAAC;AAAA,CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uCAAuC,CAC5D,OAAiD,EACJ;IAC7C,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;IAClE,MAAM,IAAI,GAAG,MAAM,sCAAsC,CAAC,WAAW,CAAC,CAAC;IACvE,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,aAAa,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,MAAM,eAAe,GAAG,2BAA2B,CAAC,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,MAAM,YAAY,GAAG,0BAA0B,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3F,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD","sourcesContent":["import { createHash, randomUUID } from \"node:crypto\";\nimport { createReadStream } from \"node:fs\";\nimport { mkdir, mkdtemp, open, rename, rm } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { isAbsolute, join } from \"node:path\";\nimport type {\n\tPluginDistributionArtifactHandleV1,\n\tPluginDistributionArtifactV1,\n\tPluginDistributionDescriptorV1,\n\tPluginDistributionHostV1,\n\tPluginDistributionMetadataV1,\n\tPluginDistributionV1,\n} from \"./distribution.ts\";\nimport { createPluginDistributionV1 } from \"./distribution.ts\";\nimport { createNodePluginTrustRootV1, type NodePluginTrustRootOptionsV1 } from \"./node-plugin-trust-root.ts\";\n\nconst NODE_DISTRIBUTION_HOST_VERSION_V1 = 1 as const;\nconst DEFAULT_TIMEOUT_MS_V1 = 30_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport interface NodeHttpPluginDistributionHostOptionsV1 {\n\t/** Real `fetch` or a deterministic replacement for tests. */\n\treadonly fetch?: typeof globalThis.fetch;\n\t/** Exact `http(s)` origins. An empty allowlist is rejected. */\n\treadonly allowedOrigins: readonly string[];\n\t/** Optional host-owned directory. It is never returned as an artifact reference. */\n\treadonly artifactDirectory?: string;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeHttpPluginDistributionHostV1 {\n\treadonly version: typeof NODE_DISTRIBUTION_HOST_VERSION_V1;\n\treadonly host: PluginDistributionHostV1;\n\t/**\n\t * Private Node-host reader for an installer that shares this host instance.\n\t * It is not part of the model-facing distribution contract and never exposes\n\t * a file path. The caller must consume it before releasing the artifact.\n\t */\n\treadonly openArtifact: (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}) => AsyncIterable<Uint8Array>;\n\t/** Remove all artifacts owned by this host instance. */\n\treadonly close: () => Promise<void>;\n}\n\n/**\n * Explicitly composed Node distribution stack. The caller supplies the trust\n * root; no key or network origin is discovered implicitly.\n */\nexport interface NodeHttpPluginDistributionStackOptionsV1 extends NodeHttpPluginDistributionHostOptionsV1 {\n\treadonly trustRoot: NodePluginTrustRootOptionsV1;\n\t/** Shared clock for descriptor expiry and trust-key validity. */\n\treadonly now?: () => number;\n}\n\nexport interface NodeHttpPluginDistributionStackV1 extends NodeHttpPluginDistributionHostV1 {\n\treadonly distribution: PluginDistributionV1;\n}\n\ninterface ArtifactRecord {\n\treadonly path: string;\n\treadonly descriptor: PluginDistributionDescriptorV1;\n\treaders: number;\n}\n\ninterface RequestSignal {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n}\n\nfunction cancelledRequestError(): Error {\n\tconst error = new Error(\"plugin request was cancelled\");\n\terror.name = \"AbortError\";\n\treturn error;\n}\n\nfunction throwIfRequestCancelled(request: RequestSignal): void {\n\tif (request.timedOut()) throw new Error(\"plugin request timed out\");\n\tif (request.signal.aborted) throw cancelledRequestError();\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new Error(`${label} must be a positive integer at most ${maximum}`);\n\treturn result;\n}\n\nfunction allowedOrigin(value: string): string {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new Error(\"allowed origin is invalid\");\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password)\n\t\tthrow new Error(\"allowed origin must be an http(s) origin\");\n\tif (parsed.pathname !== \"/\" || parsed.search !== \"\" || parsed.hash !== \"\")\n\t\tthrow new Error(\"allowed origin must not include a path or query\");\n\treturn parsed.origin;\n}\n\nfunction requestUrl(value: string, origins: ReadonlySet<string>): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new Error(\"plugin source URL is invalid\");\n\t}\n\tif ((parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") || parsed.username || parsed.password)\n\t\tthrow new Error(\"plugin source URL must use http(s) without credentials\");\n\tif (!origins.has(parsed.origin)) throw new Error(\"plugin source origin is not allowed\");\n\treturn parsed;\n}\n\nfunction requestSignal(parent: AbortSignal | undefined, timeoutMs: number): RequestSignal {\n\tconst controller = new AbortController();\n\tlet didTimeout = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\tdidTimeout = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => didTimeout,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction contentLength(response: Response): number | undefined {\n\tconst value = response.headers.get(\"content-length\");\n\tif (value === null) return undefined;\n\tif (!/^\\d+$/u.test(value)) throw new Error(\"plugin response content length is invalid\");\n\tconst result = Number(value);\n\tif (!Number.isSafeInteger(result)) throw new Error(\"plugin response content length is invalid\");\n\treturn result;\n}\n\nfunction contentType(response: Response): string | undefined {\n\tconst value = response.headers.get(\"content-type\");\n\tif (value === null) return undefined;\n\treturn value.split(\";\", 1)[0]?.trim().toLowerCase() || undefined;\n}\n\nfunction assertResponseMetadata(response: Response, descriptor: PluginDistributionDescriptorV1): void {\n\tconst length = contentLength(response);\n\tif (length !== descriptor.sizeBytes) throw new Error(\"plugin response size mismatch\");\n\tconst mediaType = contentType(response);\n\tif (mediaType !== descriptor.mediaType.toLowerCase()) throw new Error(\"plugin response media type mismatch\");\n}\n\nasync function cancelBody(response: Response): Promise<void> {\n\tif (response.body !== null) await response.body.cancel().catch(() => undefined);\n}\n\nfunction expectedDigest(value: string): { readonly algorithm: \"sha256\" | \"sha512\"; readonly hex: string } {\n\tconst prefixed = /^(sha256|sha512):([0-9a-f]+)$/iu.exec(value);\n\tif (prefixed !== null) {\n\t\tconst algorithm = prefixed[1]?.toLowerCase();\n\t\tconst hex = prefixed[2]?.toLowerCase();\n\t\tif ((algorithm === \"sha256\" && hex?.length === 64) || (algorithm === \"sha512\" && hex?.length === 128))\n\t\t\treturn { algorithm, hex };\n\t}\n\tif (/^[0-9a-f]{64}$/iu.test(value)) return { algorithm: \"sha256\", hex: value.toLowerCase() };\n\tif (/^[0-9a-f]{128}$/iu.test(value)) return { algorithm: \"sha512\", hex: value.toLowerCase() };\n\tthrow new Error(\"plugin artifact digest algorithm is unsupported\");\n}\n\nfunction metadataFromDescriptor(descriptor: PluginDistributionDescriptorV1): PluginDistributionMetadataV1 {\n\treturn {\n\t\tversion: 1,\n\t\tsource: descriptor.source,\n\t\tpluginId: descriptor.pluginId,\n\t\tpluginVersion: descriptor.pluginVersion,\n\t\tmanifestDigest: descriptor.manifestDigest,\n\t\tartifactDigest: descriptor.artifactDigest,\n\t\texpiresAt: descriptor.expiresAt,\n\t\tsizeBytes: descriptor.sizeBytes,\n\t\tmediaType: descriptor.mediaType,\n\t};\n}\n\nfunction artifactMatchesDescriptor(\n\tartifact: PluginDistributionArtifactV1,\n\tdescriptor: PluginDistributionDescriptorV1,\n): boolean {\n\treturn (\n\t\tartifact.version === 1 &&\n\t\tartifact.pluginId === descriptor.pluginId &&\n\t\tartifact.pluginVersion === descriptor.pluginVersion &&\n\t\tartifact.manifestDigest === descriptor.manifestDigest &&\n\t\tartifact.artifactDigest === descriptor.artifactDigest &&\n\t\tartifact.sizeBytes === descriptor.sizeBytes &&\n\t\tartifact.mediaType === descriptor.mediaType &&\n\t\tartifact.source === descriptor.source &&\n\t\tartifact.expiresAt === descriptor.expiresAt\n\t);\n}\n\nasync function writeFully(file: Awaited<ReturnType<typeof open>>, chunk: Uint8Array): Promise<void> {\n\tlet offset = 0;\n\twhile (offset < chunk.byteLength) {\n\t\tconst result = await file.write(chunk, offset, chunk.byteLength - offset, null);\n\t\tif (result.bytesWritten <= 0) throw new Error(\"plugin artifact file write failed\");\n\t\toffset += result.bytesWritten;\n\t}\n}\n\n/**\n * Node/undici distribution transport. It is a host adapter, not Core logic:\n * package bytes stay in a private artifact directory and are never returned by\n * the public distribution contract.\n */\nexport async function createNodeHttpPluginDistributionHostV1(\n\toptions: NodeHttpPluginDistributionHostOptionsV1,\n): Promise<NodeHttpPluginDistributionHostV1> {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\") throw new Error(\"Node fetch is unavailable\");\n\tif (!Array.isArray(options.allowedOrigins) || options.allowedOrigins.length === 0)\n\t\tthrow new Error(\"at least one allowed origin is required\");\n\tconst origins = new Set(options.allowedOrigins.map(allowedOrigin));\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new Error(`maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-distribution/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new Error(\"userAgent is invalid\");\n\tconst configuredDirectory = options.artifactDirectory;\n\tif (configuredDirectory !== undefined && !isAbsolute(configuredDirectory))\n\t\tthrow new Error(\"artifactDirectory must be absolute\");\n\tconst baseDirectoryPromise: Promise<string> =\n\t\tconfiguredDirectory === undefined\n\t\t\t? mkdtemp(join(tmpdir(), \"agent-forge-plugin-distribution-\"))\n\t\t\t: (async () => {\n\t\t\t\t\tawait mkdir(configuredDirectory, { recursive: true });\n\t\t\t\t\treturn await mkdtemp(join(configuredDirectory, \"agent-forge-plugin-distribution-\"));\n\t\t\t\t})();\n\tconst artifacts = new Map<string, ArtifactRecord>();\n\tconst activeOperations = new Set<AbortController>();\n\tlet operationsDrained: (() => void) | undefined;\n\tlet closePromise: Promise<void> | undefined;\n\tlet closed = false;\n\n\tconst assertOpen = (): void => {\n\t\tif (closed) throw new Error(\"plugin distribution host is closed\");\n\t};\n\n\tconst beginOperation = (): AbortController => {\n\t\tassertOpen();\n\t\tconst controller = new AbortController();\n\t\tactiveOperations.add(controller);\n\t\treturn controller;\n\t};\n\n\tconst endOperation = (controller: AbortController): void => {\n\t\tactiveOperations.delete(controller);\n\t\tif (activeOperations.size === 0) {\n\t\t\toperationsDrained?.();\n\t\t\toperationsDrained = undefined;\n\t\t}\n\t};\n\n\tconst waitForOperations = async (): Promise<void> => {\n\t\tif (activeOperations.size === 0) return;\n\t\tawait new Promise<void>((resolve) => {\n\t\t\toperationsDrained = resolve;\n\t\t});\n\t};\n\n\tconst fetchResponse = async (\n\t\tvalue: string,\n\t\tmethod: \"HEAD\" | \"GET\",\n\t\tparentSignal: AbortSignal | undefined,\n\t\toperationSignal: AbortSignal,\n\t): Promise<{ readonly response: Response; readonly request: RequestSignal }> => {\n\t\tlet current = requestUrl(value, origins);\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tif (operationSignal.aborted) throw cancelledRequestError();\n\t\t\tassertOpen();\n\t\t\tconst request = requestSignal(\n\t\t\t\tAbortSignal.any([parentSignal, operationSignal].filter(Boolean) as AbortSignal[]),\n\t\t\t\ttimeoutMs,\n\t\t\t);\n\t\t\tlet response: Response;\n\t\t\ttry {\n\t\t\t\tresponse = await transport(current.toString(), {\n\t\t\t\t\tmethod,\n\t\t\t\t\theaders: { accept: \"*/*\", \"user-agent\": userAgent },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: request.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\trequest.cleanup();\n\t\t\t\tthrowIfRequestCancelled(request);\n\t\t\t\tthrow error;\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(response.status)) return { response, request };\n\t\t\tconst location = response.headers.get(\"location\");\n\t\t\tawait cancelBody(response);\n\t\t\trequest.cleanup();\n\t\t\tif (location === null || redirect >= maxRedirects) throw new Error(\"plugin redirect limit exceeded\");\n\t\t\tcurrent = requestUrl(new URL(location, current).toString(), origins);\n\t\t}\n\t};\n\n\tconst resolveMetadata = async (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginDistributionMetadataV1> => {\n\t\tconst operation = beginOperation();\n\t\ttry {\n\t\t\tconst { response, request } = await fetchResponse(\n\t\t\t\tinput.descriptor.source,\n\t\t\t\t\"HEAD\",\n\t\t\t\tinput.signal,\n\t\t\t\toperation.signal,\n\t\t\t);\n\t\t\ttry {\n\t\t\t\tif (response.status < 200 || response.status >= 300) throw new Error(\"plugin metadata request failed\");\n\t\t\t\tassertResponseMetadata(response, input.descriptor);\n\t\t\t\treturn metadataFromDescriptor(input.descriptor);\n\t\t\t} finally {\n\t\t\t\tawait cancelBody(response);\n\t\t\t\trequest.cleanup();\n\t\t\t}\n\t\t} finally {\n\t\t\tendOperation(operation);\n\t\t}\n\t};\n\n\tconst acquireArtifact = async (input: {\n\t\treadonly descriptor: PluginDistributionDescriptorV1;\n\t\treadonly metadata: PluginDistributionMetadataV1;\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<PluginDistributionArtifactHandleV1> => {\n\t\tconst operation = beginOperation();\n\t\tlet temporaryPath: string | undefined;\n\t\tlet finalPath: string | undefined;\n\t\tlet published = false;\n\t\ttry {\n\t\t\tconst digest = expectedDigest(input.descriptor.artifactDigest);\n\t\t\tconst { response, request } = await fetchResponse(\n\t\t\t\tinput.descriptor.source,\n\t\t\t\t\"GET\",\n\t\t\t\tinput.signal,\n\t\t\t\toperation.signal,\n\t\t\t);\n\t\t\tlet file: Awaited<ReturnType<typeof open>> | undefined;\n\t\t\ttry {\n\t\t\t\tif (response.status < 200 || response.status >= 300) throw new Error(\"plugin artifact request failed\");\n\t\t\t\tassertResponseMetadata(response, input.descriptor);\n\t\t\t\tif (response.body === null) throw new Error(\"plugin artifact response has no body\");\n\t\t\t\tconst directory = await baseDirectoryPromise;\n\t\t\t\ttemporaryPath = join(directory, `.partial-${randomUUID()}`);\n\t\t\t\tfinalPath = join(directory, `artifact-${randomUUID()}`);\n\t\t\t\tfile = await open(temporaryPath, \"wx\");\n\t\t\t\tconst reader = response.body.getReader();\n\t\t\t\tconst hash = createHash(digest.algorithm);\n\t\t\t\tlet total = 0;\n\t\t\t\ttry {\n\t\t\t\t\tfor (;;) {\n\t\t\t\t\t\tthrowIfRequestCancelled(request);\n\t\t\t\t\t\tconst item = await reader.read();\n\t\t\t\t\t\tif (item.done) break;\n\t\t\t\t\t\tconst chunk = item.value;\n\t\t\t\t\t\ttotal += chunk.byteLength;\n\t\t\t\t\t\tif (total > input.descriptor.sizeBytes) throw new Error(\"plugin artifact exceeds its size limit\");\n\t\t\t\t\t\thash.update(chunk);\n\t\t\t\t\t\tawait writeFully(file, chunk);\n\t\t\t\t\t}\n\t\t\t\t} finally {\n\t\t\t\t\treader.releaseLock();\n\t\t\t\t}\n\t\t\t\tthrowIfRequestCancelled(request);\n\t\t\t\tif (total !== input.descriptor.sizeBytes) throw new Error(\"plugin artifact size mismatch\");\n\t\t\t\tif (hash.digest(\"hex\") !== digest.hex) throw new Error(\"plugin artifact digest mismatch\");\n\t\t\t\tawait file.close();\n\t\t\t\tfile = undefined;\n\t\t\t\tawait rename(temporaryPath, finalPath);\n\t\t\t\tassertOpen();\n\t\t\t\tconst artifactRef = `artifact://node-http/${randomUUID()}`;\n\t\t\t\tartifacts.set(artifactRef, { path: finalPath, descriptor: input.descriptor, readers: 0 });\n\t\t\t\tpublished = true;\n\t\t\t\treturn {\n\t\t\t\t\tartifactRef,\n\t\t\t\t\tartifactDigest: input.descriptor.artifactDigest,\n\t\t\t\t\tsizeBytes: input.descriptor.sizeBytes,\n\t\t\t\t\tmediaType: input.descriptor.mediaType,\n\t\t\t\t};\n\t\t\t} catch (error) {\n\t\t\t\tthrowIfRequestCancelled(request);\n\t\t\t\tthrow error;\n\t\t\t} finally {\n\t\t\t\tif (file !== undefined) await file.close().catch(() => undefined);\n\t\t\t\tawait cancelBody(response);\n\t\t\t\trequest.cleanup();\n\t\t\t}\n\t\t} finally {\n\t\t\tif (temporaryPath !== undefined) await rm(temporaryPath, { force: true }).catch(() => undefined);\n\t\t\tif (!published && finalPath !== undefined) await rm(finalPath, { force: true }).catch(() => undefined);\n\t\t\tendOperation(operation);\n\t\t}\n\t};\n\n\tconst releaseArtifact = async (input: {\n\t\treadonly artifact: { readonly artifactRef: string };\n\t\treadonly signal?: AbortSignal;\n\t}): Promise<void> => {\n\t\tassertOpen();\n\t\tif (input.signal?.aborted) throw new Error(\"plugin artifact release was cancelled\");\n\t\tconst record = artifacts.get(input.artifact.artifactRef);\n\t\tif (record === undefined) throw new Error(\"plugin artifact reference is unknown\");\n\t\tif (record.readers > 0) throw new Error(\"plugin artifact is still being read\");\n\t\tawait rm(record.path, { force: false });\n\t\tartifacts.delete(input.artifact.artifactRef);\n\t};\n\n\tconst openArtifact = (input: {\n\t\treadonly artifact: PluginDistributionArtifactV1;\n\t\treadonly signal?: AbortSignal;\n\t}): AsyncIterable<Uint8Array> =>\n\t\t(async function* (): AsyncGenerator<Uint8Array> {\n\t\t\tconst operation = beginOperation();\n\t\t\tlet stream: ReturnType<typeof createReadStream> | undefined;\n\t\t\tlet acquiredRecord: ArtifactRecord | undefined;\n\t\t\tconst abort = () => stream?.destroy(new Error(\"plugin artifact read was cancelled\"));\n\t\t\ttry {\n\t\t\t\tif (input.signal?.aborted) throw new Error(\"plugin artifact read was cancelled\");\n\t\t\t\tconst record = artifacts.get(input.artifact.artifactRef);\n\t\t\t\tif (record === undefined || !artifactMatchesDescriptor(input.artifact, record.descriptor))\n\t\t\t\t\tthrow new Error(\"plugin artifact reference is unknown\");\n\t\t\t\trecord.readers += 1;\n\t\t\t\tacquiredRecord = record;\n\t\t\t\tstream = createReadStream(record.path, { highWaterMark: 64 * 1024 });\n\t\t\t\tinput.signal?.addEventListener(\"abort\", abort, { once: true });\n\t\t\t\toperation.signal.addEventListener(\"abort\", abort, { once: true });\n\t\t\t\tfor await (const chunk of stream) {\n\t\t\t\t\tif (input.signal?.aborted || operation.signal.aborted)\n\t\t\t\t\t\tthrow new Error(\"plugin artifact read was cancelled\");\n\t\t\t\t\tyield new Uint8Array(chunk);\n\t\t\t\t}\n\t\t\t} finally {\n\t\t\t\tinput.signal?.removeEventListener(\"abort\", abort);\n\t\t\t\toperation.signal.removeEventListener(\"abort\", abort);\n\t\t\t\tstream?.destroy();\n\t\t\t\tif (acquiredRecord !== undefined && acquiredRecord.readers > 0) acquiredRecord.readers -= 1;\n\t\t\t\tendOperation(operation);\n\t\t\t}\n\t\t})();\n\n\treturn {\n\t\tversion: NODE_DISTRIBUTION_HOST_VERSION_V1,\n\t\thost: { resolveMetadata, acquireArtifact, releaseArtifact },\n\t\topenArtifact,\n\t\tclose: async () => {\n\t\t\tif (closePromise !== undefined) return await closePromise;\n\t\t\tclosed = true;\n\t\t\tfor (const operation of activeOperations) operation.abort();\n\t\t\tclosePromise = (async () => {\n\t\t\t\tawait waitForOperations();\n\t\t\t\tconst directory = await baseDirectoryPromise;\n\t\t\t\tawait Promise.all([...artifacts.values()].map((record) => rm(record.path, { force: true })));\n\t\t\t\tartifacts.clear();\n\t\t\t\tawait rm(directory, { recursive: true, force: true });\n\t\t\t})();\n\t\t\treturn await closePromise;\n\t\t},\n\t};\n}\n\n/**\n * Compose the real Node HTTP transport with the explicit Ed25519 trust root.\n * Distribution descriptors are verified before metadata or artifact access;\n * the returned host still keeps bytes behind its private reader.\n */\nexport async function createNodeHttpPluginDistributionStackV1(\n\toptions: NodeHttpPluginDistributionStackOptionsV1,\n): Promise<NodeHttpPluginDistributionStackV1> {\n\tconst { trustRoot, now: configuredNow, ...hostOptions } = options;\n\tconst host = await createNodeHttpPluginDistributionHostV1(hostOptions);\n\ttry {\n\t\tconst now = configuredNow ?? trustRoot.now ?? (() => Date.now());\n\t\tconst verifySignature = createNodePluginTrustRootV1({ ...trustRoot, now });\n\t\tconst distribution = createPluginDistributionV1({ host: host.host, verifySignature, now });\n\t\treturn Object.freeze({ ...host, distribution });\n\t} catch (error) {\n\t\tawait host.close().catch(() => undefined);\n\t\tthrow error;\n\t}\n}\n"]}

package/dist/plugins/ecosystem/node-local-package-source.d.ts

@@ -0,0 +1,10 @@
+import { type NodeZipPackageEntryV1, type NodeZipPackageLimitsV1 } from "./node-package-install-host.ts";
+/**
+ * Walk a local directory into normalized package entries. Deterministic
+ * (code-unit sorted per level), symlink-free, and budget-bound against the
+ * shared package limits.
+ */
+export declare function collectLocalDirectoryPackageEntriesV1(rootDirectory: string, limitsInput?: NodeZipPackageLimitsV1, signal?: AbortSignal): Promise<readonly NodeZipPackageEntryV1[]>;
+/** Read a local `.zip`/`.tgz` package file bounded by the shared archive budget. */
+export declare function readLocalPackageFileV1(path: string, limitsInput?: NodeZipPackageLimitsV1, signal?: AbortSignal): Promise<Uint8Array>;
+//# sourceMappingURL=node-local-package-source.d.ts.map

package/dist/plugins/ecosystem/node-local-package-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"node-local-package-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-local-package-source.ts"],"names":[],"mappings":"AAEA,OAAO,EAEN,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAG3B,MAAM,gCAAgC,CAAC;AAgExC;;;;GAIG;AACH,wBAAsB,qCAAqC,CAC1D,aAAa,EAAE,MAAM,EACrB,WAAW,GAAE,sBAA2B,EACxC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAY3C;AAED,oFAAoF;AACpF,wBAAsB,sBAAsB,CAC3C,IAAI,EAAE,MAAM,EACZ,WAAW,GAAE,sBAA2B,EACxC,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,UAAU,CAAC,CAarB","sourcesContent":["import { lstat, readdir, readFile } from \"node:fs/promises\";\nimport { join } from \"node:path\";\nimport {\n\tNodePackageInstallErrorV1,\n\ttype NodeZipPackageEntryV1,\n\ttype NodeZipPackageLimitsV1,\n\tnormalizedEntryName,\n\tresolveNodePackageLimitsV1,\n} from \"./node-package-install-host.ts\";\n\n/**\n * Local plugin package sources (design §4.6 \"本地\" row). A directory is walked\n * with the same budgets and entry-name rules as archive extraction (bounded\n * entries/bytes, no symlinks, shared name normalization), then packed by the\n * deterministic tar writer into the standard tgz package shape. \"Copy into\n * the plugin directory\" is realized by the install host writing extracted\n * entries into its own store; the original path is never referenced after\n * acquisition. A local `.zip`/`.tgz` file is read with the archive budget.\n */\n\nfunction isMissingError(error: unknown): boolean {\n\tif (typeof error !== \"object\" || error === null) return false;\n\treturn \"code\" in error && (error as { readonly code?: unknown }).code === \"ENOENT\";\n}\n\ninterface WalkBudgetV1 {\n\ttotalBytes: number;\n}\n\nasync function collectDirectory(\n\troot: string,\n\trelative: string,\n\tlimits: Required<NodeZipPackageLimitsV1>,\n\tentries: NodeZipPackageEntryV1[],\n\tbudget: WalkBudgetV1,\n\tsignal: AbortSignal | undefined,\n): Promise<void> {\n\tif (signal?.aborted) throw new NodePackageInstallErrorV1(\"cancelled\");\n\tconst dirents = await readdir(relative.length === 0 ? root : join(root, ...relative.split(\"/\")), {\n\t\twithFileTypes: true,\n\t});\n\tdirents.sort((left, right) => (left.name < right.name ? -1 : left.name > right.name ? 1 : 0));\n\tfor (const dirent of dirents) {\n\t\tif (signal?.aborted) throw new NodePackageInstallErrorV1(\"cancelled\");\n\t\tconst childRelative = relative.length === 0 ? dirent.name : `${relative}/${dirent.name}`;\n\t\t// Shared archive entry-name rules reject `..`, absolute segments, drive\n\t\t// letters, Windows reserved names, and trailing dots/spaces up front.\n\t\tnormalizedEntryName(childRelative);\n\t\tif (dirent.isSymbolicLink()) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tconst childPath = join(root, ...childRelative.split(\"/\"));\n\t\tconst stats = await lstat(childPath);\n\t\tif (stats.isSymbolicLink()) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tif (stats.isDirectory()) {\n\t\t\tawait collectDirectory(root, childRelative, limits, entries, budget, signal);\n\t\t\tcontinue;\n\t\t}\n\t\tif (!stats.isFile()) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\t\tif (entries.length + 1 > limits.maxEntries) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\t\tconst bytes = await readFile(childPath);\n\t\tif (bytes.byteLength > limits.maxEntryBytes) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\t\tbudget.totalBytes += bytes.byteLength;\n\t\tif (budget.totalBytes > limits.maxExtractedBytes) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\t\tentries.push(\n\t\t\tObject.freeze({\n\t\t\t\tname: childRelative,\n\t\t\t\tdirectory: false,\n\t\t\t\tbytes: new Uint8Array(bytes),\n\t\t\t}),\n\t\t);\n\t}\n}\n\n/**\n * Walk a local directory into normalized package entries. Deterministic\n * (code-unit sorted per level), symlink-free, and budget-bound against the\n * shared package limits.\n */\nexport async function collectLocalDirectoryPackageEntriesV1(\n\trootDirectory: string,\n\tlimitsInput: NodeZipPackageLimitsV1 = {},\n\tsignal?: AbortSignal,\n): Promise<readonly NodeZipPackageEntryV1[]> {\n\tif (typeof rootDirectory !== \"string\" || rootDirectory.trim().length === 0)\n\t\tthrow new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst stats = await lstat(rootDirectory).catch((error: unknown) => {\n\t\tthrow isMissingError(error) ? new NodePackageInstallErrorV1(\"archive_invalid\") : error;\n\t});\n\tif (!stats.isDirectory() || stats.isSymbolicLink()) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst limits = resolveNodePackageLimitsV1(limitsInput);\n\tconst entries: NodeZipPackageEntryV1[] = [];\n\tconst budget: WalkBudgetV1 = { totalBytes: 0 };\n\tawait collectDirectory(rootDirectory, \"\", limits, entries, budget, signal);\n\treturn Object.freeze(entries);\n}\n\n/** Read a local `.zip`/`.tgz` package file bounded by the shared archive budget. */\nexport async function readLocalPackageFileV1(\n\tpath: string,\n\tlimitsInput: NodeZipPackageLimitsV1 = {},\n\tsignal?: AbortSignal,\n): Promise<Uint8Array> {\n\tif (signal?.aborted) throw new NodePackageInstallErrorV1(\"cancelled\");\n\tif (typeof path !== \"string\" || path.trim().length === 0) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst stats = await lstat(path).catch((error: unknown) => {\n\t\tthrow isMissingError(error) ? new NodePackageInstallErrorV1(\"archive_invalid\") : error;\n\t});\n\tif (stats.isSymbolicLink() || !stats.isFile()) throw new NodePackageInstallErrorV1(\"archive_invalid\");\n\tconst limits = resolveNodePackageLimitsV1(limitsInput);\n\tif (stats.size > limits.maxArchiveBytes) throw new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\tconst bytes = await readFile(path);\n\tif (bytes.byteLength !== stats.size || bytes.byteLength > limits.maxArchiveBytes)\n\t\tthrow new NodePackageInstallErrorV1(\"archive_budget_exceeded\");\n\treturn new Uint8Array(bytes);\n}\n"]}

package/dist/plugins/ecosystem/node-local-package-source.js

@@ -0,0 +1,97 @@
+import { lstat, readdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { NodePackageInstallErrorV1, normalizedEntryName, resolveNodePackageLimitsV1, } from "./node-package-install-host.js";
+/**
+ * Local plugin package sources (design §4.6 "本地" row). A directory is walked
+ * with the same budgets and entry-name rules as archive extraction (bounded
+ * entries/bytes, no symlinks, shared name normalization), then packed by the
+ * deterministic tar writer into the standard tgz package shape. "Copy into
+ * the plugin directory" is realized by the install host writing extracted
+ * entries into its own store; the original path is never referenced after
+ * acquisition. A local `.zip`/`.tgz` file is read with the archive budget.
+ */
+function isMissingError(error) {
+    if (typeof error !== "object" || error === null)
+        return false;
+    return "code" in error && error.code === "ENOENT";
+}
+async function collectDirectory(root, relative, limits, entries, budget, signal) {
+    if (signal?.aborted)
+        throw new NodePackageInstallErrorV1("cancelled");
+    const dirents = await readdir(relative.length === 0 ? root : join(root, ...relative.split("/")), {
+        withFileTypes: true,
+    });
+    dirents.sort((left, right) => (left.name < right.name ? -1 : left.name > right.name ? 1 : 0));
+    for (const dirent of dirents) {
+        if (signal?.aborted)
+            throw new NodePackageInstallErrorV1("cancelled");
+        const childRelative = relative.length === 0 ? dirent.name : `${relative}/${dirent.name}`;
+        // Shared archive entry-name rules reject `..`, absolute segments, drive
+        // letters, Windows reserved names, and trailing dots/spaces up front.
+        normalizedEntryName(childRelative);
+        if (dirent.isSymbolicLink())
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        const childPath = join(root, ...childRelative.split("/"));
+        const stats = await lstat(childPath);
+        if (stats.isSymbolicLink())
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        if (stats.isDirectory()) {
+            await collectDirectory(root, childRelative, limits, entries, budget, signal);
+            continue;
+        }
+        if (!stats.isFile())
+            throw new NodePackageInstallErrorV1("archive_invalid");
+        if (entries.length + 1 > limits.maxEntries)
+            throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+        const bytes = await readFile(childPath);
+        if (bytes.byteLength > limits.maxEntryBytes)
+            throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+        budget.totalBytes += bytes.byteLength;
+        if (budget.totalBytes > limits.maxExtractedBytes)
+            throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+        entries.push(Object.freeze({
+            name: childRelative,
+            directory: false,
+            bytes: new Uint8Array(bytes),
+        }));
+    }
+}
+/**
+ * Walk a local directory into normalized package entries. Deterministic
+ * (code-unit sorted per level), symlink-free, and budget-bound against the
+ * shared package limits.
+ */
+export async function collectLocalDirectoryPackageEntriesV1(rootDirectory, limitsInput = {}, signal) {
+    if (typeof rootDirectory !== "string" || rootDirectory.trim().length === 0)
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    const stats = await lstat(rootDirectory).catch((error) => {
+        throw isMissingError(error) ? new NodePackageInstallErrorV1("archive_invalid") : error;
+    });
+    if (!stats.isDirectory() || stats.isSymbolicLink())
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    const limits = resolveNodePackageLimitsV1(limitsInput);
+    const entries = [];
+    const budget = { totalBytes: 0 };
+    await collectDirectory(rootDirectory, "", limits, entries, budget, signal);
+    return Object.freeze(entries);
+}
+/** Read a local `.zip`/`.tgz` package file bounded by the shared archive budget. */
+export async function readLocalPackageFileV1(path, limitsInput = {}, signal) {
+    if (signal?.aborted)
+        throw new NodePackageInstallErrorV1("cancelled");
+    if (typeof path !== "string" || path.trim().length === 0)
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    const stats = await lstat(path).catch((error) => {
+        throw isMissingError(error) ? new NodePackageInstallErrorV1("archive_invalid") : error;
+    });
+    if (stats.isSymbolicLink() || !stats.isFile())
+        throw new NodePackageInstallErrorV1("archive_invalid");
+    const limits = resolveNodePackageLimitsV1(limitsInput);
+    if (stats.size > limits.maxArchiveBytes)
+        throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+    const bytes = await readFile(path);
+    if (bytes.byteLength !== stats.size || bytes.byteLength > limits.maxArchiveBytes)
+        throw new NodePackageInstallErrorV1("archive_budget_exceeded");
+    return new Uint8Array(bytes);
+}
+//# sourceMappingURL=node-local-package-source.js.map