@ai-agent-forge/agent-forge 0.86.7 → 0.88.0

package/dist/plugins/ecosystem/node-release-package-source.js

@@ -1,3 +1,4 @@
+import { t } from "../../core/i18n/index.js";
 import { downloadNodeUrlPackageV1 } from "./node-url-package-source.js";
 /**
  * GitHub/Gitee release plugin package source (design
@@ -40,14 +41,14 @@ export class NodeReleasePackageSourceErrorV1 extends Error {
 function boundedPositive(value, fallback, maximum, label) {
     const result = value ?? fallback;
     if (!Number.isSafeInteger(result) || result <= 0 || result > maximum)
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", `${label} must be a positive integer at most ${maximum}`);
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("{label} must be a positive integer at most {maximum}", { label, maximum }));
     return result;
 }
 function boundedToken(value, label) {
     if (value === undefined)
         return undefined;
     if (value.length === 0 || value.length > 4096 || /[\r\n\s]/u.test(value))
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", `${label} is invalid`);
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("{label} is invalid", { label }));
     return value;
 }
 function apiOrigin(value, label) {
@@ -56,14 +57,14 @@ function apiOrigin(value, label) {
         parsed = new URL(value);
     }
     catch {
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", `${label} is invalid`);
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("{label} is invalid", { label }));
     }
     if ((parsed.protocol !== "http:" && parsed.protocol !== "https:") ||
         parsed.username !== "" ||
         parsed.password !== "")
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", `${label} must be http(s) without credentials`);
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("{label} must be http(s) without credentials", { label }));
     if (parsed.search !== "" || parsed.hash !== "")
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", `${label} must not include a query or fragment`);
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("{label} must not include a query or fragment", { label }));
     // The Gitee default origin carries the `/api/v5` path prefix. The prefix is
     // kept as a plain string because a URL normalizes an empty pathname back
     // to "/", which would reintroduce a double slash when joining endpoints.
@@ -75,26 +76,26 @@ function jsonBytes(value) {
         return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(value));
     }
     catch {
-        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API response is not valid JSON");
+        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API response is not valid JSON"));
     }
 }
 function parseReleaseList(bytes) {
     const value = jsonBytes(bytes);
     if (!Array.isArray(value))
-        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API response is not a release list");
+        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API response is not a release list"));
     return value;
 }
 function parseReleaseObject(bytes) {
     const value = jsonBytes(bytes);
     if (typeof value !== "object" || value === null || Array.isArray(value))
-        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API response is not a release object");
+        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API response is not a release object"));
     return value;
 }
 /** First non-draft entry in API order; the array itself is the ordering contract. */
 function firstPublishedRelease(releases) {
     const published = releases.find((release) => release.draft !== true);
     if (published === undefined)
-        throw new NodeReleasePackageSourceErrorV1("release_not_found", "repo has no published release");
+        throw new NodeReleasePackageSourceErrorV1("release_not_found", t("repo has no published release"));
     return published;
 }
 /** Assets with a usable name; entries without a string name are ignored as API noise. */
@@ -102,7 +103,7 @@ function namedAssets(release) {
     if (release.assets === undefined)
         return [];
     if (!Array.isArray(release.assets))
-        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release assets are invalid");
+        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release assets are invalid"));
     const entries = [];
     for (const asset of release.assets) {
         if (typeof asset !== "object" || asset === null)
@@ -124,12 +125,12 @@ function selectPackageAssetUrl(release) {
     const candidates = assets.filter((asset) => isPackageAssetName(asset.name));
     const assetNames = assets.map((asset) => asset.name).join(", ");
     if (candidates.length === 0)
-        throw new NodeReleasePackageSourceErrorV1("release_asset_not_found", assetNames.length === 0 ? "release has no assets" : `assets: ${assetNames}`);
+        throw new NodeReleasePackageSourceErrorV1("release_asset_not_found", assetNames.length === 0 ? t("release has no assets") : t("assets: {names}", { names: assetNames }));
     if (candidates.length > 1)
-        throw new NodeReleasePackageSourceErrorV1("release_asset_ambiguous", `candidates: ${candidates.map((asset) => asset.name).join(", ")}`);
+        throw new NodeReleasePackageSourceErrorV1("release_asset_ambiguous", t("candidates: {names}", { names: candidates.map((asset) => asset.name).join(", ") }));
     const chosen = candidates[0];
     if (typeof chosen.url !== "string" || chosen.url.length === 0)
-        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release asset has no download URL");
+        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release asset has no download URL"));
     return chosen.url;
 }
 function isAbortLike(error) {
@@ -180,20 +181,20 @@ function rateLimitState(response) {
 }
 async function readBody(response, maxBytes, signal) {
     if (response.body === null)
-        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API response has no body");
+        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API response has no body"));
     const reader = response.body.getReader();
     const chunks = [];
     let total = 0;
     try {
         for (;;) {
             if (signal.aborted)
-                throw new DOMException("aborted", "AbortError");
+                throw new DOMException(t("aborted"), "AbortError");
             const item = await reader.read();
             if (item.done)
                 break;
             total += item.value.byteLength;
             if (total > maxBytes)
-                throw new NodeReleasePackageSourceErrorV1("response_too_large", "release API response exceeds the configured size limit");
+                throw new NodeReleasePackageSourceErrorV1("response_too_large", t("release API response exceeds the configured size limit"));
             chunks.push(item.value);
         }
     }
@@ -212,7 +213,7 @@ async function readBody(response, maxBytes, signal) {
 export function createNodeReleasePackageSourceV1(options = {}) {
     const transport = options.fetch ?? globalThis.fetch;
     if (typeof transport !== "function")
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", "Node fetch is unavailable");
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("Node fetch is unavailable"));
     const githubOrigin = apiOrigin(options.githubApiOrigin ?? DEFAULT_GITHUB_API_ORIGIN_V1, "githubApiOrigin");
     const giteeOrigin = apiOrigin(options.giteeApiOrigin ?? DEFAULT_GITEE_API_ORIGIN_V1, "giteeApiOrigin");
     const githubToken = boundedToken(options.githubToken, "githubToken");
@@ -222,10 +223,10 @@ export function createNodeReleasePackageSourceV1(options = {}) {
     const maxAssetBytes = boundedPositive(options.maxAssetBytes, DEFAULT_MAX_ASSET_BYTES_V1, MAX_ASSET_BYTES_V1, "maxAssetBytes");
     const maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;
     if (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", `maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`);
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("maxRedirects must be an integer between 0 and {max}", { max: MAX_REDIRECTS_V1 }));
     const userAgent = options.userAgent ?? "agent-forge-plugin-release/1";
     if (userAgent.length === 0 || userAgent.length > 256 || /[\r\n]/u.test(userAgent))
-        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", "userAgent is invalid");
+        throw new NodeReleasePackageSourceErrorV1("invalid_configuration", t("userAgent is invalid"));
     const fetchReleaseJson = async (url, headers, parentSignal) => {
         let current = url;
         for (let redirect = 0;; redirect += 1) {
@@ -242,15 +243,15 @@ export function createNodeReleasePackageSourceV1(options = {}) {
             catch (error) {
                 request.cleanup();
                 if (request.timedOut())
-                    throw new NodeReleasePackageSourceErrorV1("request_timed_out", "release API request timed out");
+                    throw new NodeReleasePackageSourceErrorV1("request_timed_out", t("release API request timed out"));
                 if (isAbortLike(error))
-                    throw new NodeReleasePackageSourceErrorV1("cancelled", "release API request was cancelled");
-                throw new NodeReleasePackageSourceErrorV1("request_failed", "release API request failed");
+                    throw new NodeReleasePackageSourceErrorV1("cancelled", t("release API request was cancelled"));
+                throw new NodeReleasePackageSourceErrorV1("request_failed", t("release API request failed"));
             }
             if (!REDIRECT_STATUS.has(response.status)) {
                 try {
                     if (response.status === 404)
-                        throw new NodeReleasePackageSourceErrorV1("release_not_found", "repo or release was not found");
+                        throw new NodeReleasePackageSourceErrorV1("release_not_found", t("repo or release was not found"));
                     const limit = rateLimitState(response);
                     if (limit.limited) {
                         const message = limit.resetEpochSeconds === undefined
@@ -261,9 +262,9 @@ export function createNodeReleasePackageSourceV1(options = {}) {
                         });
                     }
                     if (response.status < 200 || response.status >= 300)
-                        throw new NodeReleasePackageSourceErrorV1("request_failed", "release API request did not succeed");
+                        throw new NodeReleasePackageSourceErrorV1("request_failed", t("release API request did not succeed"));
                     if (!isJsonResponse(response))
-                        throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API response must be JSON");
+                        throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API response must be JSON"));
                     const bytes = await readBody(response, maxResponseBytes, request.signal);
                     return bytes;
                 }
@@ -276,22 +277,22 @@ export function createNodeReleasePackageSourceV1(options = {}) {
             await response.body?.cancel().catch(() => undefined);
             request.cleanup();
             if (location === null || redirect >= maxRedirects)
-                throw new NodeReleasePackageSourceErrorV1("request_failed", "release API redirect limit exceeded");
+                throw new NodeReleasePackageSourceErrorV1("request_failed", t("release API redirect limit exceeded"));
             let next;
             try {
                 next = new URL(location, current);
             }
             catch {
-                throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API redirect target is invalid");
+                throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API redirect target is invalid"));
             }
             if ((next.protocol !== "http:" && next.protocol !== "https:") || next.username !== "" || next.password !== "")
-                throw new NodeReleasePackageSourceErrorV1("invalid_response", "release API redirect must stay http(s)");
+                throw new NodeReleasePackageSourceErrorV1("invalid_response", t("release API redirect must stay http(s)"));
             current = next;
         }
     };
     const downloadReleaseAsset = async (input) => {
         if (input.signal?.aborted === true)
-            throw new NodeReleasePackageSourceErrorV1("cancelled", "release asset download was cancelled");
+            throw new NodeReleasePackageSourceErrorV1("cancelled", t("release asset download was cancelled"));
         const sourceLabel = `${input.kind}:${input.owner}/${input.repo}@${input.tag ?? "latest"}`;
         const base = input.kind === "github" ? githubOrigin : giteeOrigin;
         const segments = [

package/dist/plugins/ecosystem/node-release-package-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-release-package-source.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-release-package-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AAEH,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAC9D,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAC/D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACrD,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAc3D,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAChD,IAAI,CAAsC;IACnD,6FAA6F;IACpF,iBAAiB,CAAU;IAEpC,YACC,IAAyC,EACzC,OAAe,EACf,OAAiD,EAChD;QACD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAAA,CACjG;CACD;AAkDD,SAAS,eAAe,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe,EAAE,KAAa,EAAU;IAC7G,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,OAAO;QACnE,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,GAAG,KAAK,uCAAuC,OAAO,EAAE,CACxD,CAAC;IACH,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa,EAAsB;IACnF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QACvE,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa,EAA4D;IAC1G,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,GAAG,KAAK,aAAa,CAAC,CAAC;IAC3F,CAAC;IACD,IACC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7D,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QAEtB,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,GAAG,KAAK,sCAAsC,CAC9C,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;QAC7C,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,GAAG,KAAK,uCAAuC,CAC/C,CAAC;IACH,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CACnH;AAED,SAAS,SAAS,CAAC,KAAiB,EAAW;IAC9C,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;IACzG,CAAC;AAAA,CACD;AAED,SAAS,gBAAgB,CAAC,KAAiB,EAA6B;IACvE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACxB,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IAC7G,OAAO,KAAkC,CAAC;AAAA,CAC1C;AAED,SAAS,kBAAkB,CAAC,KAAiB,EAAkB;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,8CAA8C,CAAC,CAAC;IAC/G,OAAO,KAAuB,CAAC;AAAA,CAC/B;AAED,qFAAqF;AACrF,SAAS,qBAAqB,CAAC,QAAmC,EAAkB;IACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACrE,IAAI,SAAS,KAAK,SAAS;QAC1B,MAAM,IAAI,+BAA+B,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;IACjG,OAAO,SAAS,CAAC;AAAA,CACjB;AAOD,yFAAyF;AACzF,SAAS,WAAW,CAAC,OAAuB,EAAiC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,KAAK,GAAG,KAA4B,CAAC;QAC3C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAW;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,CACxD;AAED,mFAAmF;AACnF,SAAS,qBAAqB,CAAC,OAAuB,EAAU;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM,IAAI,+BAA+B,CACxC,yBAAyB,EACzB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,WAAW,UAAU,EAAE,CAC3E,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,IAAI,+BAA+B,CACxC,yBAAyB,EACzB,eAAe,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC9B,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAC5D,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;IACpG,OAAO,MAAM,CAAC,GAAG,CAAC;AAAA,CAClB;AAED,SAAS,WAAW,CAAC,KAAc,EAAW;IAC7C,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;AAAA,CACpG;AAQD,SAAS,aAAa,CAAC,MAA+B,EAAE,SAAiB,EAAiB;IACzF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,KAAK,EAAE,CAAC;;QACjC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;QAChC,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,CACnB,EAAE,SAAS,CAAC,CAAC;IACd,OAAO;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,OAAO,EAAE,GAAG,EAAE,CAAC;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAA,CAC5C;KACD,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,QAAkB,EAAW;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,OAAO,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,6BAA6B,CAAC;AAAA,CACvF;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAkB,EAAsE;IAC/G,MAAM,OAAO,GACZ,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/G,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AAAA,CACxD;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,QAAgB,EAAE,MAAmB,EAAuB;IACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QACzB,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACJ,SAAS,CAAC;YACT,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,QAAQ;gBACnB,MAAM,IAAI,+BAA+B,CACxC,oBAAoB,EACpB,wDAAwD,CACxD,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,sDAAsD;AACtD,MAAM,UAAU,gCAAgC,CAC/C,OAAO,GAAsC,EAAE,EAClB;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,UAAU;QAClC,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,2BAA2B,CAAC,CAAC;IACjG,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,IAAI,4BAA4B,EAAE,iBAAiB,CAAC,CAAC;IAC3G,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,IAAI,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,eAAe,CAChC,OAAO,CAAC,gBAAgB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,CAClB,CAAC;IACF,MAAM,gBAAgB,GAAG,eAAe,CACvC,OAAO,CAAC,gBAAgB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,kBAAkB,CAClB,CAAC;IACF,MAAM,aAAa,GAAG,eAAe,CACpC,OAAO,CAAC,aAAa,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,CACf,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,gBAAgB;QAC7F,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,iDAAiD,gBAAgB,EAAE,CACnE,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,8BAA8B,CAAC;IACtE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAChF,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,sBAAsB,CAAC,CAAC;IAE5F,MAAM,gBAAgB,GAAG,KAAK,EAC7B,GAAQ,EACR,OAAyC,EACzC,YAAqC,EACf,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,GAAG,CAAC;QAClB,KAAK,IAAI,QAAQ,GAAG,CAAC,GAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACvD,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE;oBAC9C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE;oBAC5E,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACtB,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACrB,MAAM,IAAI,+BAA+B,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;gBACjG,IAAI,WAAW,CAAC,KAAK,CAAC;oBACrB,MAAM,IAAI,+BAA+B,CAAC,WAAW,EAAE,mCAAmC,CAAC,CAAC;gBAC7F,MAAM,IAAI,+BAA+B,CAAC,gBAAgB,EAAE,4BAA4B,CAAC,CAAC;YAC3F,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBAC1B,MAAM,IAAI,+BAA+B,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;oBACjG,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;oBACvC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnB,MAAM,OAAO,GACZ,KAAK,CAAC,iBAAiB,KAAK,SAAS;4BACpC,CAAC,CAAC,yBAAyB;4BAC3B,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACrF,MAAM,IAAI,+BAA+B,CAAC,cAAc,EAAE,OAAO,EAAE;4BAClE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;yBAChG,CAAC,CAAC;oBACJ,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;wBAClD,MAAM,IAAI,+BAA+B,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;oBACpG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;wBAC5B,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,mCAAmC,CAAC,CAAC;oBACpG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzE,OAAO,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACV,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACrD,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACF,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrD,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,IAAI,YAAY;gBAChD,MAAM,IAAI,+BAA+B,CAAC,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;YACpG,IAAI,IAAS,CAAC;YACd,IAAI,CAAC;gBACJ,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;YACzG,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE;gBAC5G,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;YACzG,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,oBAAoB,GAAuD,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QACjG,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YACjC,MAAM,IAAI,+BAA+B,CAAC,WAAW,EAAE,sCAAsC,CAAC,CAAC;QAChG,MAAM,WAAW,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QAClE,MAAM,QAAQ,GAAG;YAChB,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;YACpD,OAAO;YACP,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/B,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3E,CAAC,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GACZ,KAAK,CAAC,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC;gBACA,sBAAsB,EAAE,YAAY;gBACpC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC;aAChF;YACF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS;YAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,OAAO,GACZ,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC1G,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C;YACC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,aAAa;YAC9B,SAAS;SACT,EACD;YACC,GAAG,EAAE,QAAQ;YACb,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAChG,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CACD,CAAC;QACF,OAAO;YACN,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW;SACX,CAAC;IAAA,CACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC;AAAA,CAC5C","sourcesContent":["import { downloadNodeUrlPackageV1 } from \"./node-url-package-source.ts\";\n\n/**\n * GitHub/Gitee release plugin package source (design\n * `插件独立分发与启动装配设计.md` §4.6 \"GitHub\"/\"Gitee\" rows). Two-step\n * protocol: resolve one release through the repo's release API — the exact\n * tag endpoint when a tag is given, otherwise the first non-draft entry of\n * the first releases page in API order (no client-side sorting) — then pick\n * the release's single `.zip`/`.tgz` asset and download it with the same\n * bounded http(s) semantics as custom URL packages (redirect-per-hop, budget,\n * timeout, optional strong sha256). Zero or multiple matching assets are\n * explicit structured errors listing the asset names; nothing is guessed.\n * Authentication is optional: GitHub uses an `Authorization: Bearer` header,\n * Gitee an `access_token` query parameter. Anonymous rate limits (403/429\n * with `X-RateLimit-Remaining: 0`, or any 429) surface as `rate_limited`\n * carrying the advertised `X-RateLimit-Reset` epoch; there is no retry.\n */\n\nconst DEFAULT_GITHUB_API_ORIGIN_V1 = \"https://api.github.com\";\nconst DEFAULT_GITEE_API_ORIGIN_V1 = \"https://gitee.com/api/v5\";\nconst DEFAULT_TIMEOUT_MS_V1 = 15_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;\nconst MAX_RESPONSE_BYTES_V1 = 16 * 1024 * 1024;\nconst DEFAULT_MAX_ASSET_BYTES_V1 = 128 * 1024 * 1024;\nconst MAX_ASSET_BYTES_V1 = 512 * 1024 * 1024;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport type NodeReleasePackageSourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"invalid_response\"\n\t| \"response_too_large\"\n\t| \"release_not_found\"\n\t| \"release_asset_not_found\"\n\t| \"release_asset_ambiguous\"\n\t| \"rate_limited\";\n\nexport class NodeReleasePackageSourceErrorV1 extends Error {\n\treadonly code: NodeReleasePackageSourceErrorCodeV1;\n\t/** Unix epoch seconds advertised by `X-RateLimit-Reset`; present only for `rate_limited`. */\n\treadonly resetEpochSeconds?: number;\n\n\tconstructor(\n\t\tcode: NodeReleasePackageSourceErrorCodeV1,\n\t\tmessage: string,\n\t\toptions?: { readonly resetEpochSeconds?: number },\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeReleasePackageSourceErrorV1\";\n\t\tthis.code = code;\n\t\tif (options?.resetEpochSeconds !== undefined) this.resetEpochSeconds = options.resetEpochSeconds;\n\t}\n}\n\nexport interface NodeReleasePackageSourceOptionsV1 {\n\t/** Bare http(s) GitHub API origin; defaults to `https://api.github.com`. */\n\treadonly githubApiOrigin?: string;\n\t/** Bare http(s) Gitee API origin; defaults to `https://gitee.com/api/v5`. */\n\treadonly giteeApiOrigin?: string;\n\t/** Optional GitHub API token sent as a bearer header. */\n\treadonly githubToken?: string;\n\t/** Optional Gitee API token sent as an `access_token` query parameter. */\n\treadonly giteeToken?: string;\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly maxAssetBytes?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeReleaseAssetDownloadV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: \"application/zip\" | \"application/gzip\";\n\treadonly sha256Hex: string;\n\t/** `github:<owner>/<repo>@<tag|latest>` or the `gitee:` equivalent. */\n\treadonly sourceLabel: string;\n}\n\nexport interface NodeReleasePackageSourceV1 {\n\treadonly version: 1;\n\treadonly downloadReleaseAsset: (input: {\n\t\treadonly kind: \"github\" | \"gitee\";\n\t\treadonly owner: string;\n\t\treadonly repo: string;\n\t\treadonly tag?: string;\n\t\treadonly expectedDigestHex?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<NodeReleaseAssetDownloadV1>;\n}\n\ninterface ReleaseAssetShapeV1 {\n\treadonly name?: unknown;\n\treadonly browser_download_url?: unknown;\n}\n\ninterface ReleaseShapeV1 {\n\treadonly draft?: unknown;\n\treadonly assets?: unknown;\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be a positive integer at most ${maximum}`,\n\t\t);\n\treturn result;\n}\n\nfunction boundedToken(value: string | undefined, label: string): string | undefined {\n\tif (value === undefined) return undefined;\n\tif (value.length === 0 || value.length > 4096 || /[\\r\\n\\s]/u.test(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", `${label} is invalid`);\n\treturn value;\n}\n\nfunction apiOrigin(value: string, label: string): { readonly origin: string; readonly pathPrefix: string } {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", `${label} is invalid`);\n\t}\n\tif (\n\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\tparsed.username !== \"\" ||\n\t\tparsed.password !== \"\"\n\t)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be http(s) without credentials`,\n\t\t);\n\tif (parsed.search !== \"\" || parsed.hash !== \"\")\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must not include a query or fragment`,\n\t\t);\n\t// The Gitee default origin carries the `/api/v5` path prefix. The prefix is\n\t// kept as a plain string because a URL normalizes an empty pathname back\n\t// to \"/\", which would reintroduce a double slash when joining endpoints.\n\tconst trimmed = parsed.pathname.replace(/\\/+$/u, \"\");\n\treturn { origin: parsed.origin, pathPrefix: trimmed === \"\" || trimmed === \"/\" ? \"\" : trimmed.replace(/^\\//u, \"\") };\n}\n\nfunction jsonBytes(value: Uint8Array): unknown {\n\ttry {\n\t\treturn JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(value));\n\t} catch {\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response is not valid JSON\");\n\t}\n}\n\nfunction parseReleaseList(bytes: Uint8Array): readonly ReleaseShapeV1[] {\n\tconst value = jsonBytes(bytes);\n\tif (!Array.isArray(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response is not a release list\");\n\treturn value as readonly ReleaseShapeV1[];\n}\n\nfunction parseReleaseObject(bytes: Uint8Array): ReleaseShapeV1 {\n\tconst value = jsonBytes(bytes);\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response is not a release object\");\n\treturn value as ReleaseShapeV1;\n}\n\n/** First non-draft entry in API order; the array itself is the ordering contract. */\nfunction firstPublishedRelease(releases: readonly ReleaseShapeV1[]): ReleaseShapeV1 {\n\tconst published = releases.find((release) => release.draft !== true);\n\tif (published === undefined)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"release_not_found\", \"repo has no published release\");\n\treturn published;\n}\n\ninterface ReleaseAssetNameV1 {\n\treadonly name: string;\n\treadonly url: unknown;\n}\n\n/** Assets with a usable name; entries without a string name are ignored as API noise. */\nfunction namedAssets(release: ReleaseShapeV1): readonly ReleaseAssetNameV1[] {\n\tif (release.assets === undefined) return [];\n\tif (!Array.isArray(release.assets))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release assets are invalid\");\n\tconst entries: ReleaseAssetNameV1[] = [];\n\tfor (const asset of release.assets) {\n\t\tif (typeof asset !== \"object\" || asset === null) continue;\n\t\tconst shape = asset as ReleaseAssetShapeV1;\n\t\tif (typeof shape.name !== \"string\" || shape.name.length === 0) continue;\n\t\tentries.push({ name: shape.name, url: shape.browser_download_url });\n\t}\n\treturn entries;\n}\n\nfunction isPackageAssetName(name: string): boolean {\n\tconst value = name.toLowerCase();\n\treturn value.endsWith(\".zip\") || value.endsWith(\".tgz\");\n}\n\n/** Select the release's single `.zip`/`.tgz` asset and return its download URL. */\nfunction selectPackageAssetUrl(release: ReleaseShapeV1): string {\n\tconst assets = namedAssets(release);\n\tconst candidates = assets.filter((asset) => isPackageAssetName(asset.name));\n\tconst assetNames = assets.map((asset) => asset.name).join(\", \");\n\tif (candidates.length === 0)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"release_asset_not_found\",\n\t\t\tassetNames.length === 0 ? \"release has no assets\" : `assets: ${assetNames}`,\n\t\t);\n\tif (candidates.length > 1)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"release_asset_ambiguous\",\n\t\t\t`candidates: ${candidates.map((asset) => asset.name).join(\", \")}`,\n\t\t);\n\tconst chosen = candidates[0]!;\n\tif (typeof chosen.url !== \"string\" || chosen.url.length === 0)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release asset has no download URL\");\n\treturn chosen.url;\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\");\n}\n\ninterface RequestSignal {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n}\n\nfunction requestSignal(parent: AbortSignal | undefined, timeoutMs: number): RequestSignal {\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => timedOut,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction isJsonResponse(response: Response): boolean {\n\tconst contentType = response.headers.get(\"content-type\");\n\tif (contentType === null) return false;\n\tconst mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\treturn mediaType === \"application/json\" || mediaType === \"application/vnd.github+json\";\n}\n\n/**\n * Rate-limit verdict for 403/429 responses: any 429, and a 403 whose\n * `X-RateLimit-Remaining` is exactly `0`. The reset epoch is passed through\n * verbatim when present and integer-like; absent headers stay absent.\n */\nfunction rateLimitState(response: Response): { readonly limited: boolean; readonly resetEpochSeconds?: number } {\n\tconst limited =\n\t\tresponse.status === 429 || (response.status === 403 && response.headers.get(\"x-ratelimit-remaining\") === \"0\");\n\tif (!limited) return { limited: false };\n\tconst reset = response.headers.get(\"x-ratelimit-reset\");\n\tconst resetValue = reset === null ? Number.NaN : Number.parseInt(reset, 10);\n\tif (!Number.isSafeInteger(resetValue) || resetValue < 0) return { limited: true };\n\treturn { limited: true, resetEpochSeconds: resetValue };\n}\n\nasync function readBody(response: Response, maxBytes: number, signal: AbortSignal): Promise<Uint8Array> {\n\tif (response.body === null)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response has no body\");\n\tconst reader = response.body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (signal.aborted) throw new DOMException(\"aborted\", \"AbortError\");\n\t\t\tconst item = await reader.read();\n\t\t\tif (item.done) break;\n\t\t\ttotal += item.value.byteLength;\n\t\t\tif (total > maxBytes)\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\"release API response exceeds the configured size limit\",\n\t\t\t\t);\n\t\t\tchunks.push(item.value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tbytes.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn bytes;\n}\n\n/** Create the bounded GitHub/Gitee release reader. */\nexport function createNodeReleasePackageSourceV1(\n\toptions: NodeReleasePackageSourceOptionsV1 = {},\n): NodeReleasePackageSourceV1 {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\")\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", \"Node fetch is unavailable\");\n\tconst githubOrigin = apiOrigin(options.githubApiOrigin ?? DEFAULT_GITHUB_API_ORIGIN_V1, \"githubApiOrigin\");\n\tconst giteeOrigin = apiOrigin(options.giteeApiOrigin ?? DEFAULT_GITEE_API_ORIGIN_V1, \"giteeApiOrigin\");\n\tconst githubToken = boundedToken(options.githubToken, \"githubToken\");\n\tconst giteeToken = boundedToken(options.giteeToken, \"giteeToken\");\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxResponseBytes = boundedPositive(\n\t\toptions.maxResponseBytes,\n\t\tDEFAULT_MAX_RESPONSE_BYTES_V1,\n\t\tMAX_RESPONSE_BYTES_V1,\n\t\t\"maxResponseBytes\",\n\t);\n\tconst maxAssetBytes = boundedPositive(\n\t\toptions.maxAssetBytes,\n\t\tDEFAULT_MAX_ASSET_BYTES_V1,\n\t\tMAX_ASSET_BYTES_V1,\n\t\t\"maxAssetBytes\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`,\n\t\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-release/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", \"userAgent is invalid\");\n\n\tconst fetchReleaseJson = async (\n\t\turl: URL,\n\t\theaders: Readonly<Record<string, string>>,\n\t\tparentSignal: AbortSignal | undefined,\n\t): Promise<Uint8Array> => {\n\t\tlet current = url;\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tconst request = requestSignal(parentSignal, timeoutMs);\n\t\t\tlet response: Response;\n\t\t\ttry {\n\t\t\t\tresponse = await transport(current.toString(), {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\theaders: { accept: \"application/json\", \"user-agent\": userAgent, ...headers },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: request.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\trequest.cleanup();\n\t\t\t\tif (request.timedOut())\n\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_timed_out\", \"release API request timed out\");\n\t\t\t\tif (isAbortLike(error))\n\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"cancelled\", \"release API request was cancelled\");\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", \"release API request failed\");\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(response.status)) {\n\t\t\t\ttry {\n\t\t\t\t\tif (response.status === 404)\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"release_not_found\", \"repo or release was not found\");\n\t\t\t\t\tconst limit = rateLimitState(response);\n\t\t\t\t\tif (limit.limited) {\n\t\t\t\t\t\tconst message =\n\t\t\t\t\t\t\tlimit.resetEpochSeconds === undefined\n\t\t\t\t\t\t\t\t? \"rate limit was exceeded\"\n\t\t\t\t\t\t\t\t: `rate limit resets at ${new Date(limit.resetEpochSeconds * 1000).toISOString()}`;\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"rate_limited\", message, {\n\t\t\t\t\t\t\t...(limit.resetEpochSeconds === undefined ? {} : { resetEpochSeconds: limit.resetEpochSeconds }),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\tif (response.status < 200 || response.status >= 300)\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", \"release API request did not succeed\");\n\t\t\t\t\tif (!isJsonResponse(response))\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API response must be JSON\");\n\t\t\t\t\tconst bytes = await readBody(response, maxResponseBytes, request.signal);\n\t\t\t\t\treturn bytes;\n\t\t\t\t} finally {\n\t\t\t\t\tawait response.body?.cancel().catch(() => undefined);\n\t\t\t\t\trequest.cleanup();\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst location = response.headers.get(\"location\");\n\t\t\tawait response.body?.cancel().catch(() => undefined);\n\t\t\trequest.cleanup();\n\t\t\tif (location === null || redirect >= maxRedirects)\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", \"release API redirect limit exceeded\");\n\t\t\tlet next: URL;\n\t\t\ttry {\n\t\t\t\tnext = new URL(location, current);\n\t\t\t} catch {\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API redirect target is invalid\");\n\t\t\t}\n\t\t\tif ((next.protocol !== \"http:\" && next.protocol !== \"https:\") || next.username !== \"\" || next.password !== \"\")\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", \"release API redirect must stay http(s)\");\n\t\t\tcurrent = next;\n\t\t}\n\t};\n\n\tconst downloadReleaseAsset: NodeReleasePackageSourceV1[\"downloadReleaseAsset\"] = async (input) => {\n\t\tif (input.signal?.aborted === true)\n\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"cancelled\", \"release asset download was cancelled\");\n\t\tconst sourceLabel = `${input.kind}:${input.owner}/${input.repo}@${input.tag ?? \"latest\"}`;\n\t\tconst base = input.kind === \"github\" ? githubOrigin : giteeOrigin;\n\t\tconst segments = [\n\t\t\tbase.pathPrefix === \"\" ? undefined : base.pathPrefix,\n\t\t\t\"repos\",\n\t\t\tencodeURIComponent(input.owner),\n\t\t\tencodeURIComponent(input.repo),\n\t\t\t\"releases\",\n\t\t\t...(input.tag === undefined ? [] : [\"tags\", encodeURIComponent(input.tag)]),\n\t\t].filter((segment): segment is string => segment !== undefined);\n\t\tconst endpoint = new URL(`${base.origin}/${segments.join(\"/\")}`);\n\t\tconst headers: Readonly<Record<string, string>> =\n\t\t\tinput.kind === \"github\"\n\t\t\t\t? {\n\t\t\t\t\t\t\"x-github-api-version\": \"2022-11-28\",\n\t\t\t\t\t\t...(githubToken === undefined ? {} : { authorization: `Bearer ${githubToken}` }),\n\t\t\t\t\t}\n\t\t\t\t: {};\n\t\tif (input.kind === \"gitee\" && giteeToken !== undefined) endpoint.searchParams.set(\"access_token\", giteeToken);\n\t\tconst payload = await fetchReleaseJson(endpoint, headers, input.signal);\n\t\tconst release =\n\t\t\tinput.tag === undefined ? firstPublishedRelease(parseReleaseList(payload)) : parseReleaseObject(payload);\n\t\tconst assetUrl = selectPackageAssetUrl(release);\n\t\tconst download = await downloadNodeUrlPackageV1(\n\t\t\t{\n\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\trequestTimeoutMs: timeoutMs,\n\t\t\t\tmaxPackageBytes: maxAssetBytes,\n\t\t\t\tuserAgent,\n\t\t\t},\n\t\t\t{\n\t\t\t\turl: assetUrl,\n\t\t\t\t...(input.expectedDigestHex === undefined ? {} : { expectedDigestHex: input.expectedDigestHex }),\n\t\t\t\tsignal: input.signal,\n\t\t\t},\n\t\t);\n\t\treturn {\n\t\t\tbytes: download.bytes,\n\t\t\tmediaType: download.mediaType,\n\t\t\tsha256Hex: download.digestHex,\n\t\t\tsourceLabel,\n\t\t};\n\t};\n\n\treturn { version: 1, downloadReleaseAsset };\n}\n"]}
+{"version":3,"file":"node-release-package-source.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-release-package-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAC7C,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE;;;;;;;;;;;;;;GAcG;AAEH,MAAM,4BAA4B,GAAG,wBAAwB,CAAC;AAC9D,MAAM,2BAA2B,GAAG,0BAA0B,CAAC;AAC/D,MAAM,qBAAqB,GAAG,MAAM,CAAC;AACrC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACtD,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,0BAA0B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACrD,MAAM,kBAAkB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AAC7C,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAC3B,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAc3D,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAChD,IAAI,CAAsC;IACnD,6FAA6F;IACpF,iBAAiB,CAAU;IAEpC,YACC,IAAyC,EACzC,OAAe,EACf,OAAiD,EAChD;QACD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,OAAO,EAAE,iBAAiB,KAAK,SAAS;YAAE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAAA,CACjG;CACD;AAkDD,SAAS,eAAe,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAe,EAAE,KAAa,EAAU;IAC7G,MAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,CAAC;IACjC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,OAAO;QACnE,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,CAAC,CAAC,sDAAsD,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAC7E,CAAC;IACH,OAAO,MAAM,CAAC;AAAA,CACd;AAED,SAAS,YAAY,CAAC,KAAyB,EAAE,KAAa,EAAsB;IACnF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC;QACvE,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxG,OAAO,KAAK,CAAC;AAAA,CACb;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,KAAa,EAA4D;IAC1G,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,CAAC,CAAC,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,IACC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7D,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;QAEtB,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,CAAC,CAAC,6CAA6C,EAAE,EAAE,KAAK,EAAE,CAAC,CAC3D,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE;QAC7C,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,CAAC,CAAC,8CAA8C,EAAE,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC;IACH,4EAA4E;IAC5E,yEAAyE;IACzE,yEAAyE;IACzE,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;AAAA,CACnH;AAED,SAAS,SAAS,CAAC,KAAiB,EAAW;IAC9C,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC;IAC5G,CAAC;AAAA,CACD;AAED,SAAS,gBAAgB,CAAC,KAAiB,EAA6B;IACvE,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACxB,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC;IAChH,OAAO,KAAkC,CAAC;AAAA,CAC1C;AAED,SAAS,kBAAkB,CAAC,KAAiB,EAAkB;IAC9D,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtE,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC;IAClH,OAAO,KAAuB,CAAC;AAAA,CAC/B;AAED,qFAAqF;AACrF,SAAS,qBAAqB,CAAC,QAAmC,EAAkB;IACnF,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IACrE,IAAI,SAAS,KAAK,SAAS;QAC1B,MAAM,IAAI,+BAA+B,CAAC,mBAAmB,EAAE,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;IACpG,OAAO,SAAS,CAAC;AAAA,CACjB;AAOD,yFAAyF;AACzF,SAAS,WAAW,CAAC,OAAuB,EAAiC;IAC5E,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAChG,MAAM,OAAO,GAAyB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,KAAK,GAAG,KAA4B,CAAC;QAC3C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAW;IAClD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAAA,CACxD;AAED,mFAAmF;AACnF,SAAS,qBAAqB,CAAC,OAAuB,EAAU;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM,IAAI,+BAA+B,CACxC,yBAAyB,EACzB,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAClG,CAAC;IACH,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC;QACxB,MAAM,IAAI,+BAA+B,CACxC,yBAAyB,EACzB,CAAC,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CACrF,CAAC;IACH,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC9B,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;QAC5D,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACvG,OAAO,MAAM,CAAC,GAAG,CAAC;AAAA,CAClB;AAED,SAAS,WAAW,CAAC,KAAc,EAAW;IAC7C,OAAO,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC;AAAA,CACpG;AAQD,SAAS,aAAa,CAAC,MAA+B,EAAE,SAAiB,EAAiB;IACzF,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,OAAO,KAAK,IAAI;QAAE,KAAK,EAAE,CAAC;;QACjC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC;QAChC,QAAQ,GAAG,IAAI,CAAC;QAChB,UAAU,CAAC,KAAK,EAAE,CAAC;IAAA,CACnB,EAAE,SAAS,CAAC,CAAC;IACd,OAAO;QACN,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;QACxB,OAAO,EAAE,GAAG,EAAE,CAAC;YACd,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAAA,CAC5C;KACD,CAAC;AAAA,CACF;AAED,SAAS,cAAc,CAAC,QAAkB,EAAW;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACzD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,OAAO,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,6BAA6B,CAAC;AAAA,CACvF;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAkB,EAAsE;IAC/G,MAAM,OAAO,GACZ,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/G,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,UAAU,EAAE,CAAC;AAAA,CACxD;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,QAAgB,EAAE,MAAmB,EAAuB;IACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI;QACzB,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC;IACtG,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACJ,SAAS,CAAC;YACT,IAAI,MAAM,CAAC,OAAO;gBAAE,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACjC,IAAI,IAAI,CAAC,IAAI;gBAAE,MAAM;YACrB,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,IAAI,KAAK,GAAG,QAAQ;gBACnB,MAAM,IAAI,+BAA+B,CACxC,oBAAoB,EACpB,CAAC,CAAC,wDAAwD,CAAC,CAC3D,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;YAAS,CAAC;QACV,MAAM,CAAC,WAAW,EAAE,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AAAA,CACb;AAED,sDAAsD;AACtD,MAAM,UAAU,gCAAgC,CAC/C,OAAO,GAAsC,EAAE,EAClB;IAC7B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACpD,IAAI,OAAO,SAAS,KAAK,UAAU;QAClC,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACpG,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,eAAe,IAAI,4BAA4B,EAAE,iBAAiB,CAAC,CAAC;IAC3G,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,IAAI,2BAA2B,EAAE,gBAAgB,CAAC,CAAC;IACvG,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrE,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,eAAe,CAChC,OAAO,CAAC,gBAAgB,EACxB,qBAAqB,EACrB,iBAAiB,EACjB,kBAAkB,CAClB,CAAC;IACF,MAAM,gBAAgB,GAAG,eAAe,CACvC,OAAO,CAAC,gBAAgB,EACxB,6BAA6B,EAC7B,qBAAqB,EACrB,kBAAkB,CAClB,CAAC;IACF,MAAM,aAAa,GAAG,eAAe,CACpC,OAAO,CAAC,aAAa,EACrB,0BAA0B,EAC1B,kBAAkB,EAClB,eAAe,CACf,CAAC;IACF,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,gBAAgB;QAC7F,MAAM,IAAI,+BAA+B,CACxC,uBAAuB,EACvB,CAAC,CAAC,qDAAqD,EAAE,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CACnF,CAAC;IACH,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,8BAA8B,CAAC;IACtE,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,GAAG,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAChF,MAAM,IAAI,+BAA+B,CAAC,uBAAuB,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAE/F,MAAM,gBAAgB,GAAG,KAAK,EAC7B,GAAQ,EACR,OAAyC,EACzC,YAAqC,EACf,EAAE,CAAC;QACzB,IAAI,OAAO,GAAG,GAAG,CAAC;QAClB,KAAK,IAAI,QAAQ,GAAG,CAAC,GAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,aAAa,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YACvD,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE;oBAC9C,MAAM,EAAE,KAAK;oBACb,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE;oBAC5E,QAAQ,EAAE,QAAQ;oBAClB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACtB,CAAC,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,OAAO,EAAE,CAAC;gBAClB,IAAI,OAAO,CAAC,QAAQ,EAAE;oBACrB,MAAM,IAAI,+BAA+B,CAAC,mBAAmB,EAAE,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;gBACpG,IAAI,WAAW,CAAC,KAAK,CAAC;oBACrB,MAAM,IAAI,+BAA+B,CAAC,WAAW,EAAE,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;gBAChG,MAAM,IAAI,+BAA+B,CAAC,gBAAgB,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3C,IAAI,CAAC;oBACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBAC1B,MAAM,IAAI,+BAA+B,CAAC,mBAAmB,EAAE,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;oBACpG,MAAM,KAAK,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;oBACvC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;wBACnB,MAAM,OAAO,GACZ,KAAK,CAAC,iBAAiB,KAAK,SAAS;4BACpC,CAAC,CAAC,yBAAyB;4BAC3B,CAAC,CAAC,wBAAwB,IAAI,IAAI,CAAC,KAAK,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;wBACrF,MAAM,IAAI,+BAA+B,CAAC,cAAc,EAAE,OAAO,EAAE;4BAClE,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;yBAChG,CAAC,CAAC;oBACJ,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;wBAClD,MAAM,IAAI,+BAA+B,CAAC,gBAAgB,EAAE,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC;oBACvG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC;wBAC5B,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;oBACvG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;oBACzE,OAAO,KAAK,CAAC;gBACd,CAAC;wBAAS,CAAC;oBACV,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBACrD,OAAO,CAAC,OAAO,EAAE,CAAC;gBACnB,CAAC;YACF,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrD,OAAO,CAAC,OAAO,EAAE,CAAC;YAClB,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,IAAI,YAAY;gBAChD,MAAM,IAAI,+BAA+B,CAAC,gBAAgB,EAAE,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC;YACvG,IAAI,IAAS,CAAC;YACd,IAAI,CAAC;gBACJ,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACR,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE;gBAC5G,MAAM,IAAI,+BAA+B,CAAC,kBAAkB,EAAE,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC;YAC5G,OAAO,GAAG,IAAI,CAAC;QAChB,CAAC;IAAA,CACD,CAAC;IAEF,MAAM,oBAAoB,GAAuD,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;QACjG,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,KAAK,IAAI;YACjC,MAAM,IAAI,+BAA+B,CAAC,WAAW,EAAE,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC;QACnG,MAAM,WAAW,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1F,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;QAClE,MAAM,QAAQ,GAAG;YAChB,IAAI,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU;YACpD,OAAO;YACP,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/B,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,UAAU;YACV,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;SAC3E,CAAC,MAAM,CAAC,CAAC,OAAO,EAAqB,EAAE,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GACZ,KAAK,CAAC,IAAI,KAAK,QAAQ;YACtB,CAAC,CAAC;gBACA,sBAAsB,EAAE,YAAY;gBACpC,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE,CAAC;aAChF;YACF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,KAAK,SAAS;YAAE,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;QAC9G,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACxE,MAAM,OAAO,GACZ,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC1G,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAC9C;YACC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;YAChE,gBAAgB,EAAE,SAAS;YAC3B,eAAe,EAAE,aAAa;YAC9B,SAAS;SACT,EACD;YACC,GAAG,EAAE,QAAQ;YACb,GAAG,CAAC,KAAK,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAChG,MAAM,EAAE,KAAK,CAAC,MAAM;SACpB,CACD,CAAC;QACF,OAAO;YACN,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;YAC7B,WAAW;SACX,CAAC;IAAA,CACF,CAAC;IAEF,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC;AAAA,CAC5C","sourcesContent":["import { t } from \"../../core/i18n/index.ts\";\nimport { downloadNodeUrlPackageV1 } from \"./node-url-package-source.ts\";\n\n/**\n * GitHub/Gitee release plugin package source (design\n * `插件独立分发与启动装配设计.md` §4.6 \"GitHub\"/\"Gitee\" rows). Two-step\n * protocol: resolve one release through the repo's release API — the exact\n * tag endpoint when a tag is given, otherwise the first non-draft entry of\n * the first releases page in API order (no client-side sorting) — then pick\n * the release's single `.zip`/`.tgz` asset and download it with the same\n * bounded http(s) semantics as custom URL packages (redirect-per-hop, budget,\n * timeout, optional strong sha256). Zero or multiple matching assets are\n * explicit structured errors listing the asset names; nothing is guessed.\n * Authentication is optional: GitHub uses an `Authorization: Bearer` header,\n * Gitee an `access_token` query parameter. Anonymous rate limits (403/429\n * with `X-RateLimit-Remaining: 0`, or any 429) surface as `rate_limited`\n * carrying the advertised `X-RateLimit-Reset` epoch; there is no retry.\n */\n\nconst DEFAULT_GITHUB_API_ORIGIN_V1 = \"https://api.github.com\";\nconst DEFAULT_GITEE_API_ORIGIN_V1 = \"https://gitee.com/api/v5\";\nconst DEFAULT_TIMEOUT_MS_V1 = 15_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_RESPONSE_BYTES_V1 = 8 * 1024 * 1024;\nconst MAX_RESPONSE_BYTES_V1 = 16 * 1024 * 1024;\nconst DEFAULT_MAX_ASSET_BYTES_V1 = 128 * 1024 * 1024;\nconst MAX_ASSET_BYTES_V1 = 512 * 1024 * 1024;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport type NodeReleasePackageSourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"invalid_response\"\n\t| \"response_too_large\"\n\t| \"release_not_found\"\n\t| \"release_asset_not_found\"\n\t| \"release_asset_ambiguous\"\n\t| \"rate_limited\";\n\nexport class NodeReleasePackageSourceErrorV1 extends Error {\n\treadonly code: NodeReleasePackageSourceErrorCodeV1;\n\t/** Unix epoch seconds advertised by `X-RateLimit-Reset`; present only for `rate_limited`. */\n\treadonly resetEpochSeconds?: number;\n\n\tconstructor(\n\t\tcode: NodeReleasePackageSourceErrorCodeV1,\n\t\tmessage: string,\n\t\toptions?: { readonly resetEpochSeconds?: number },\n\t) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeReleasePackageSourceErrorV1\";\n\t\tthis.code = code;\n\t\tif (options?.resetEpochSeconds !== undefined) this.resetEpochSeconds = options.resetEpochSeconds;\n\t}\n}\n\nexport interface NodeReleasePackageSourceOptionsV1 {\n\t/** Bare http(s) GitHub API origin; defaults to `https://api.github.com`. */\n\treadonly githubApiOrigin?: string;\n\t/** Bare http(s) Gitee API origin; defaults to `https://gitee.com/api/v5`. */\n\treadonly giteeApiOrigin?: string;\n\t/** Optional GitHub API token sent as a bearer header. */\n\treadonly githubToken?: string;\n\t/** Optional Gitee API token sent as an `access_token` query parameter. */\n\treadonly giteeToken?: string;\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxResponseBytes?: number;\n\treadonly maxAssetBytes?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeReleaseAssetDownloadV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: \"application/zip\" | \"application/gzip\";\n\treadonly sha256Hex: string;\n\t/** `github:<owner>/<repo>@<tag|latest>` or the `gitee:` equivalent. */\n\treadonly sourceLabel: string;\n}\n\nexport interface NodeReleasePackageSourceV1 {\n\treadonly version: 1;\n\treadonly downloadReleaseAsset: (input: {\n\t\treadonly kind: \"github\" | \"gitee\";\n\t\treadonly owner: string;\n\t\treadonly repo: string;\n\t\treadonly tag?: string;\n\t\treadonly expectedDigestHex?: string;\n\t\treadonly signal?: AbortSignal;\n\t}) => Promise<NodeReleaseAssetDownloadV1>;\n}\n\ninterface ReleaseAssetShapeV1 {\n\treadonly name?: unknown;\n\treadonly browser_download_url?: unknown;\n}\n\ninterface ReleaseShapeV1 {\n\treadonly draft?: unknown;\n\treadonly assets?: unknown;\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"{label} must be a positive integer at most {maximum}\", { label, maximum }),\n\t\t);\n\treturn result;\n}\n\nfunction boundedToken(value: string | undefined, label: string): string | undefined {\n\tif (value === undefined) return undefined;\n\tif (value.length === 0 || value.length > 4096 || /[\\r\\n\\s]/u.test(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", t(\"{label} is invalid\", { label }));\n\treturn value;\n}\n\nfunction apiOrigin(value: string, label: string): { readonly origin: string; readonly pathPrefix: string } {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", t(\"{label} is invalid\", { label }));\n\t}\n\tif (\n\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\tparsed.username !== \"\" ||\n\t\tparsed.password !== \"\"\n\t)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"{label} must be http(s) without credentials\", { label }),\n\t\t);\n\tif (parsed.search !== \"\" || parsed.hash !== \"\")\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"{label} must not include a query or fragment\", { label }),\n\t\t);\n\t// The Gitee default origin carries the `/api/v5` path prefix. The prefix is\n\t// kept as a plain string because a URL normalizes an empty pathname back\n\t// to \"/\", which would reintroduce a double slash when joining endpoints.\n\tconst trimmed = parsed.pathname.replace(/\\/+$/u, \"\");\n\treturn { origin: parsed.origin, pathPrefix: trimmed === \"\" || trimmed === \"/\" ? \"\" : trimmed.replace(/^\\//u, \"\") };\n}\n\nfunction jsonBytes(value: Uint8Array): unknown {\n\ttry {\n\t\treturn JSON.parse(new TextDecoder(\"utf-8\", { fatal: true }).decode(value));\n\t} catch {\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API response is not valid JSON\"));\n\t}\n}\n\nfunction parseReleaseList(bytes: Uint8Array): readonly ReleaseShapeV1[] {\n\tconst value = jsonBytes(bytes);\n\tif (!Array.isArray(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API response is not a release list\"));\n\treturn value as readonly ReleaseShapeV1[];\n}\n\nfunction parseReleaseObject(bytes: Uint8Array): ReleaseShapeV1 {\n\tconst value = jsonBytes(bytes);\n\tif (typeof value !== \"object\" || value === null || Array.isArray(value))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API response is not a release object\"));\n\treturn value as ReleaseShapeV1;\n}\n\n/** First non-draft entry in API order; the array itself is the ordering contract. */\nfunction firstPublishedRelease(releases: readonly ReleaseShapeV1[]): ReleaseShapeV1 {\n\tconst published = releases.find((release) => release.draft !== true);\n\tif (published === undefined)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"release_not_found\", t(\"repo has no published release\"));\n\treturn published;\n}\n\ninterface ReleaseAssetNameV1 {\n\treadonly name: string;\n\treadonly url: unknown;\n}\n\n/** Assets with a usable name; entries without a string name are ignored as API noise. */\nfunction namedAssets(release: ReleaseShapeV1): readonly ReleaseAssetNameV1[] {\n\tif (release.assets === undefined) return [];\n\tif (!Array.isArray(release.assets))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release assets are invalid\"));\n\tconst entries: ReleaseAssetNameV1[] = [];\n\tfor (const asset of release.assets) {\n\t\tif (typeof asset !== \"object\" || asset === null) continue;\n\t\tconst shape = asset as ReleaseAssetShapeV1;\n\t\tif (typeof shape.name !== \"string\" || shape.name.length === 0) continue;\n\t\tentries.push({ name: shape.name, url: shape.browser_download_url });\n\t}\n\treturn entries;\n}\n\nfunction isPackageAssetName(name: string): boolean {\n\tconst value = name.toLowerCase();\n\treturn value.endsWith(\".zip\") || value.endsWith(\".tgz\");\n}\n\n/** Select the release's single `.zip`/`.tgz` asset and return its download URL. */\nfunction selectPackageAssetUrl(release: ReleaseShapeV1): string {\n\tconst assets = namedAssets(release);\n\tconst candidates = assets.filter((asset) => isPackageAssetName(asset.name));\n\tconst assetNames = assets.map((asset) => asset.name).join(\", \");\n\tif (candidates.length === 0)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"release_asset_not_found\",\n\t\t\tassetNames.length === 0 ? t(\"release has no assets\") : t(\"assets: {names}\", { names: assetNames }),\n\t\t);\n\tif (candidates.length > 1)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"release_asset_ambiguous\",\n\t\t\tt(\"candidates: {names}\", { names: candidates.map((asset) => asset.name).join(\", \") }),\n\t\t);\n\tconst chosen = candidates[0]!;\n\tif (typeof chosen.url !== \"string\" || chosen.url.length === 0)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release asset has no download URL\"));\n\treturn chosen.url;\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\");\n}\n\ninterface RequestSignal {\n\treadonly signal: AbortSignal;\n\treadonly timedOut: () => boolean;\n\treadonly cleanup: () => void;\n}\n\nfunction requestSignal(parent: AbortSignal | undefined, timeoutMs: number): RequestSignal {\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(parent?.reason);\n\tif (parent?.aborted === true) abort();\n\telse parent?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\treturn {\n\t\tsignal: controller.signal,\n\t\ttimedOut: () => timedOut,\n\t\tcleanup: () => {\n\t\t\tclearTimeout(timeout);\n\t\t\tparent?.removeEventListener(\"abort\", abort);\n\t\t},\n\t};\n}\n\nfunction isJsonResponse(response: Response): boolean {\n\tconst contentType = response.headers.get(\"content-type\");\n\tif (contentType === null) return false;\n\tconst mediaType = contentType.split(\";\", 1)[0]?.trim().toLowerCase();\n\treturn mediaType === \"application/json\" || mediaType === \"application/vnd.github+json\";\n}\n\n/**\n * Rate-limit verdict for 403/429 responses: any 429, and a 403 whose\n * `X-RateLimit-Remaining` is exactly `0`. The reset epoch is passed through\n * verbatim when present and integer-like; absent headers stay absent.\n */\nfunction rateLimitState(response: Response): { readonly limited: boolean; readonly resetEpochSeconds?: number } {\n\tconst limited =\n\t\tresponse.status === 429 || (response.status === 403 && response.headers.get(\"x-ratelimit-remaining\") === \"0\");\n\tif (!limited) return { limited: false };\n\tconst reset = response.headers.get(\"x-ratelimit-reset\");\n\tconst resetValue = reset === null ? Number.NaN : Number.parseInt(reset, 10);\n\tif (!Number.isSafeInteger(resetValue) || resetValue < 0) return { limited: true };\n\treturn { limited: true, resetEpochSeconds: resetValue };\n}\n\nasync function readBody(response: Response, maxBytes: number, signal: AbortSignal): Promise<Uint8Array> {\n\tif (response.body === null)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API response has no body\"));\n\tconst reader = response.body.getReader();\n\tconst chunks: Uint8Array[] = [];\n\tlet total = 0;\n\ttry {\n\t\tfor (;;) {\n\t\t\tif (signal.aborted) throw new DOMException(t(\"aborted\"), \"AbortError\");\n\t\t\tconst item = await reader.read();\n\t\t\tif (item.done) break;\n\t\t\ttotal += item.value.byteLength;\n\t\t\tif (total > maxBytes)\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\tt(\"release API response exceeds the configured size limit\"),\n\t\t\t\t);\n\t\t\tchunks.push(item.value);\n\t\t}\n\t} finally {\n\t\treader.releaseLock();\n\t}\n\tconst bytes = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const chunk of chunks) {\n\t\tbytes.set(chunk, offset);\n\t\toffset += chunk.byteLength;\n\t}\n\treturn bytes;\n}\n\n/** Create the bounded GitHub/Gitee release reader. */\nexport function createNodeReleasePackageSourceV1(\n\toptions: NodeReleasePackageSourceOptionsV1 = {},\n): NodeReleasePackageSourceV1 {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\")\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", t(\"Node fetch is unavailable\"));\n\tconst githubOrigin = apiOrigin(options.githubApiOrigin ?? DEFAULT_GITHUB_API_ORIGIN_V1, \"githubApiOrigin\");\n\tconst giteeOrigin = apiOrigin(options.giteeApiOrigin ?? DEFAULT_GITEE_API_ORIGIN_V1, \"giteeApiOrigin\");\n\tconst githubToken = boundedToken(options.githubToken, \"githubToken\");\n\tconst giteeToken = boundedToken(options.giteeToken, \"giteeToken\");\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxResponseBytes = boundedPositive(\n\t\toptions.maxResponseBytes,\n\t\tDEFAULT_MAX_RESPONSE_BYTES_V1,\n\t\tMAX_RESPONSE_BYTES_V1,\n\t\t\"maxResponseBytes\",\n\t);\n\tconst maxAssetBytes = boundedPositive(\n\t\toptions.maxAssetBytes,\n\t\tDEFAULT_MAX_ASSET_BYTES_V1,\n\t\tMAX_ASSET_BYTES_V1,\n\t\t\"maxAssetBytes\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new NodeReleasePackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"maxRedirects must be an integer between 0 and {max}\", { max: MAX_REDIRECTS_V1 }),\n\t\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-release/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_configuration\", t(\"userAgent is invalid\"));\n\n\tconst fetchReleaseJson = async (\n\t\turl: URL,\n\t\theaders: Readonly<Record<string, string>>,\n\t\tparentSignal: AbortSignal | undefined,\n\t): Promise<Uint8Array> => {\n\t\tlet current = url;\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tconst request = requestSignal(parentSignal, timeoutMs);\n\t\t\tlet response: Response;\n\t\t\ttry {\n\t\t\t\tresponse = await transport(current.toString(), {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\theaders: { accept: \"application/json\", \"user-agent\": userAgent, ...headers },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: request.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\trequest.cleanup();\n\t\t\t\tif (request.timedOut())\n\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_timed_out\", t(\"release API request timed out\"));\n\t\t\t\tif (isAbortLike(error))\n\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"cancelled\", t(\"release API request was cancelled\"));\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", t(\"release API request failed\"));\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(response.status)) {\n\t\t\t\ttry {\n\t\t\t\t\tif (response.status === 404)\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"release_not_found\", t(\"repo or release was not found\"));\n\t\t\t\t\tconst limit = rateLimitState(response);\n\t\t\t\t\tif (limit.limited) {\n\t\t\t\t\t\tconst message =\n\t\t\t\t\t\t\tlimit.resetEpochSeconds === undefined\n\t\t\t\t\t\t\t\t? \"rate limit was exceeded\"\n\t\t\t\t\t\t\t\t: `rate limit resets at ${new Date(limit.resetEpochSeconds * 1000).toISOString()}`;\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"rate_limited\", message, {\n\t\t\t\t\t\t\t...(limit.resetEpochSeconds === undefined ? {} : { resetEpochSeconds: limit.resetEpochSeconds }),\n\t\t\t\t\t\t});\n\t\t\t\t\t}\n\t\t\t\t\tif (response.status < 200 || response.status >= 300)\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", t(\"release API request did not succeed\"));\n\t\t\t\t\tif (!isJsonResponse(response))\n\t\t\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API response must be JSON\"));\n\t\t\t\t\tconst bytes = await readBody(response, maxResponseBytes, request.signal);\n\t\t\t\t\treturn bytes;\n\t\t\t\t} finally {\n\t\t\t\t\tawait response.body?.cancel().catch(() => undefined);\n\t\t\t\t\trequest.cleanup();\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst location = response.headers.get(\"location\");\n\t\t\tawait response.body?.cancel().catch(() => undefined);\n\t\t\trequest.cleanup();\n\t\t\tif (location === null || redirect >= maxRedirects)\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"request_failed\", t(\"release API redirect limit exceeded\"));\n\t\t\tlet next: URL;\n\t\t\ttry {\n\t\t\t\tnext = new URL(location, current);\n\t\t\t} catch {\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API redirect target is invalid\"));\n\t\t\t}\n\t\t\tif ((next.protocol !== \"http:\" && next.protocol !== \"https:\") || next.username !== \"\" || next.password !== \"\")\n\t\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"invalid_response\", t(\"release API redirect must stay http(s)\"));\n\t\t\tcurrent = next;\n\t\t}\n\t};\n\n\tconst downloadReleaseAsset: NodeReleasePackageSourceV1[\"downloadReleaseAsset\"] = async (input) => {\n\t\tif (input.signal?.aborted === true)\n\t\t\tthrow new NodeReleasePackageSourceErrorV1(\"cancelled\", t(\"release asset download was cancelled\"));\n\t\tconst sourceLabel = `${input.kind}:${input.owner}/${input.repo}@${input.tag ?? \"latest\"}`;\n\t\tconst base = input.kind === \"github\" ? githubOrigin : giteeOrigin;\n\t\tconst segments = [\n\t\t\tbase.pathPrefix === \"\" ? undefined : base.pathPrefix,\n\t\t\t\"repos\",\n\t\t\tencodeURIComponent(input.owner),\n\t\t\tencodeURIComponent(input.repo),\n\t\t\t\"releases\",\n\t\t\t...(input.tag === undefined ? [] : [\"tags\", encodeURIComponent(input.tag)]),\n\t\t].filter((segment): segment is string => segment !== undefined);\n\t\tconst endpoint = new URL(`${base.origin}/${segments.join(\"/\")}`);\n\t\tconst headers: Readonly<Record<string, string>> =\n\t\t\tinput.kind === \"github\"\n\t\t\t\t? {\n\t\t\t\t\t\t\"x-github-api-version\": \"2022-11-28\",\n\t\t\t\t\t\t...(githubToken === undefined ? {} : { authorization: `Bearer ${githubToken}` }),\n\t\t\t\t\t}\n\t\t\t\t: {};\n\t\tif (input.kind === \"gitee\" && giteeToken !== undefined) endpoint.searchParams.set(\"access_token\", giteeToken);\n\t\tconst payload = await fetchReleaseJson(endpoint, headers, input.signal);\n\t\tconst release =\n\t\t\tinput.tag === undefined ? firstPublishedRelease(parseReleaseList(payload)) : parseReleaseObject(payload);\n\t\tconst assetUrl = selectPackageAssetUrl(release);\n\t\tconst download = await downloadNodeUrlPackageV1(\n\t\t\t{\n\t\t\t\t...(options.fetch === undefined ? {} : { fetch: options.fetch }),\n\t\t\t\trequestTimeoutMs: timeoutMs,\n\t\t\t\tmaxPackageBytes: maxAssetBytes,\n\t\t\t\tuserAgent,\n\t\t\t},\n\t\t\t{\n\t\t\t\turl: assetUrl,\n\t\t\t\t...(input.expectedDigestHex === undefined ? {} : { expectedDigestHex: input.expectedDigestHex }),\n\t\t\t\tsignal: input.signal,\n\t\t\t},\n\t\t);\n\t\treturn {\n\t\t\tbytes: download.bytes,\n\t\t\tmediaType: download.mediaType,\n\t\t\tsha256Hex: download.digestHex,\n\t\t\tsourceLabel,\n\t\t};\n\t};\n\n\treturn { version: 1, downloadReleaseAsset };\n}\n"]}

package/dist/plugins/ecosystem/node-tar-writer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-tar-writer.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-writer.ts"],"names":[],"mappings":"AAmBA,MAAM,MAAM,wBAAwB,GAAG,eAAe,GAAG,qBAAqB,CAAC;AAE/E,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAExC,YAAY,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAI1D;CACD;AAED,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC5B;AA6ED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,UAAU,CAyBxF;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,UAAU,CAI1F","sourcesContent":["import { gzipSync } from \"node:zlib\";\nimport { normalizedEntryName } from \"./node-package-install-host.ts\";\n\n/**\n * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin\n * directory can be packed into the same `application/gzip` package shape the\n * install host already parses (`node-tar-package.ts`), reusing its entry-name\n * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no\n * uname/gname, sorted-free (callers pass entries in their chosen order), and\n * a gzip wrapper with a zero mtime.\n */\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_MODE_LENGTH_V1 = 8;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_PREFIX_LENGTH_V1 = 155;\n\nexport type NodeTarWriterErrorCodeV1 = \"invalid_entry\" | \"entry_name_too_long\";\n\nexport class NodeTarWriterErrorV1 extends Error {\n\treadonly code: NodeTarWriterErrorCodeV1;\n\n\tconstructor(code: NodeTarWriterErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeTarWriterErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeTarWriterEntryV1 {\n\t/** Forward-slash normalized path; validated with the shared archive rules. */\n\treadonly name: string;\n\treadonly directory: boolean;\n\treadonly bytes?: Uint8Array;\n}\n\nfunction octalField(value: number, length: number): string {\n\tconst digits = length - 1;\n\tconst octal = value.toString(8);\n\tif (octal.length > digits) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar header field overflows\");\n\treturn `${octal.padStart(digits, \"0\")}\\0`;\n}\n\nfunction writeHeader(header: Uint8Array, entry: NodeTarWriterEntryV1, nameField: string, prefixField: string): void {\n\theader.fill(0);\n\tconst encode = (value: string, offset: number, length: number): void => {\n\t\tconst bytes = new TextEncoder().encode(value);\n\t\tif (bytes.byteLength > length)\n\t\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar header name field overflows\");\n\t\theader.set(bytes, offset);\n\t};\n\tencode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);\n\tconst contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);\n\tconst mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);\n\tconst encodedMode = new TextEncoder().encode(mode);\n\theader.set(encodedMode, 100);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);\n\theader.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);\n\theader[156] = entry.directory ? 0x35 : 0x30;\n\tconst magic = new TextEncoder().encode(\"ustar\\0\");\n\theader.set(magic, 257);\n\theader.set(new TextEncoder().encode(\"00\"), 263);\n\tif (prefixField.length > 0) encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);\n\tlet checksum = 0;\n\tfor (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1) header[index] = 0x20;\n\tfor (const byte of header) checksum += byte;\n\tconst checksumText = `${checksum.toString(8).padStart(6, \"0\")}\\0 `;\n\theader.set(new TextEncoder().encode(checksumText), 148);\n}\n\nfunction entryFields(name: string): { readonly name: string; readonly prefix: string } {\n\tconst bytes = new TextEncoder().encode(name);\n\tif (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1) return { name, prefix: \"\" };\n\tlet split = -1;\n\tfor (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {\n\t\tif (bytes[index] === 0x2f) {\n\t\t\tsplit = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (split <= 0)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\tconst prefix = name.slice(0, split);\n\tconst rest = name.slice(split + 1);\n\tconst restBytes = new TextEncoder().encode(rest);\n\tif (\n\t\trestBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||\n\t\tnew TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1\n\t)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\treturn { name: rest, prefix };\n}\n\nfunction headerBlock(entry: NodeTarWriterEntryV1): Uint8Array {\n\tif (typeof entry.name !== \"string\" || entry.name.length === 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is invalid\");\n\tconst normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);\n\tif (normalized.name !== entry.name)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is not normalized\");\n\tif (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar directory entry must be empty\");\n\tif (!entry.directory && !(entry.bytes instanceof Uint8Array))\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar file entry requires bytes\");\n\tconst header = new Uint8Array(TAR_BLOCK_BYTES_V1);\n\tconst fields = entryFields(entry.name);\n\twriteHeader(header, entry, fields.name, fields.prefix);\n\treturn header;\n}\n\n/** Build deterministic ustar tar bytes (two zero EOF blocks included). */\nexport function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\tif (!Array.isArray(entries)) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entries must be an array\");\n\tconst names = new Set<string>();\n\tconst blocks: Uint8Array[] = [];\n\tfor (const entry of entries) {\n\t\tif (names.has(entry.name))\n\t\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", `duplicate tar entry name: ${entry.name}`);\n\t\tnames.add(entry.name);\n\t\tblocks.push(headerBlock(entry));\n\t\tif (!entry.directory) {\n\t\t\tconst bytes = entry.bytes ?? new Uint8Array();\n\t\t\tconst padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;\n\t\t\tblocks.push(bytes, new Uint8Array(padding));\n\t\t}\n\t}\n\tblocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));\n\tlet total = 0;\n\tfor (const block of blocks) total += block.byteLength;\n\tconst output = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const block of blocks) {\n\t\toutput.set(block, offset);\n\t\toffset += block.byteLength;\n\t}\n\treturn output;\n}\n\n/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */\nexport function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\t// Node's gzip wrapper writes a zero mtime header unless configured, so the\n\t// default compression is deterministic within one runtime.\n\treturn gzipSync(buildNodeTarBytesV1(entries));\n}\n"]}
+{"version":3,"file":"node-tar-writer.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-writer.ts"],"names":[],"mappings":"AAoBA,MAAM,MAAM,wBAAwB,GAAG,eAAe,GAAG,qBAAqB,CAAC;AAE/E,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAExC,YAAY,IAAI,EAAE,wBAAwB,EAAE,OAAO,EAAE,MAAM,EAI1D;CACD;AAED,MAAM,WAAW,oBAAoB;IACpC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC5B;AA6ED,0EAA0E;AAC1E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,UAAU,CAyBxF;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,oBAAoB,EAAE,GAAG,UAAU,CAI1F","sourcesContent":["import { gzipSync } from \"node:zlib\";\nimport { t } from \"../../core/i18n/index.ts\";\nimport { normalizedEntryName } from \"./node-package-install-host.ts\";\n\n/**\n * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin\n * directory can be packed into the same `application/gzip` package shape the\n * install host already parses (`node-tar-package.ts`), reusing its entry-name\n * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no\n * uname/gname, sorted-free (callers pass entries in their chosen order), and\n * a gzip wrapper with a zero mtime.\n */\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_MODE_LENGTH_V1 = 8;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_PREFIX_LENGTH_V1 = 155;\n\nexport type NodeTarWriterErrorCodeV1 = \"invalid_entry\" | \"entry_name_too_long\";\n\nexport class NodeTarWriterErrorV1 extends Error {\n\treadonly code: NodeTarWriterErrorCodeV1;\n\n\tconstructor(code: NodeTarWriterErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeTarWriterErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeTarWriterEntryV1 {\n\t/** Forward-slash normalized path; validated with the shared archive rules. */\n\treadonly name: string;\n\treadonly directory: boolean;\n\treadonly bytes?: Uint8Array;\n}\n\nfunction octalField(value: number, length: number): string {\n\tconst digits = length - 1;\n\tconst octal = value.toString(8);\n\tif (octal.length > digits) throw new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar header field overflows\"));\n\treturn `${octal.padStart(digits, \"0\")}\\0`;\n}\n\nfunction writeHeader(header: Uint8Array, entry: NodeTarWriterEntryV1, nameField: string, prefixField: string): void {\n\theader.fill(0);\n\tconst encode = (value: string, offset: number, length: number): void => {\n\t\tconst bytes = new TextEncoder().encode(value);\n\t\tif (bytes.byteLength > length)\n\t\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", t(\"tar header name field overflows\"));\n\t\theader.set(bytes, offset);\n\t};\n\tencode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);\n\tconst contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);\n\tconst mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);\n\tconst encodedMode = new TextEncoder().encode(mode);\n\theader.set(encodedMode, 100);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);\n\theader.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);\n\theader[156] = entry.directory ? 0x35 : 0x30;\n\tconst magic = new TextEncoder().encode(\"ustar\\0\");\n\theader.set(magic, 257);\n\theader.set(new TextEncoder().encode(\"00\"), 263);\n\tif (prefixField.length > 0) encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);\n\tlet checksum = 0;\n\tfor (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1) header[index] = 0x20;\n\tfor (const byte of header) checksum += byte;\n\tconst checksumText = `${checksum.toString(8).padStart(6, \"0\")}\\0 `;\n\theader.set(new TextEncoder().encode(checksumText), 148);\n}\n\nfunction entryFields(name: string): { readonly name: string; readonly prefix: string } {\n\tconst bytes = new TextEncoder().encode(name);\n\tif (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1) return { name, prefix: \"\" };\n\tlet split = -1;\n\tfor (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {\n\t\tif (bytes[index] === 0x2f) {\n\t\t\tsplit = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (split <= 0)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", t(\"tar entry name cannot be split into ustar fields\"));\n\tconst prefix = name.slice(0, split);\n\tconst rest = name.slice(split + 1);\n\tconst restBytes = new TextEncoder().encode(rest);\n\tif (\n\t\trestBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||\n\t\tnew TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1\n\t)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", t(\"tar entry name cannot be split into ustar fields\"));\n\treturn { name: rest, prefix };\n}\n\nfunction headerBlock(entry: NodeTarWriterEntryV1): Uint8Array {\n\tif (typeof entry.name !== \"string\" || entry.name.length === 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar entry name is invalid\"));\n\tconst normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);\n\tif (normalized.name !== entry.name)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar entry name is not normalized\"));\n\tif (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar directory entry must be empty\"));\n\tif (!entry.directory && !(entry.bytes instanceof Uint8Array))\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar file entry requires bytes\"));\n\tconst header = new Uint8Array(TAR_BLOCK_BYTES_V1);\n\tconst fields = entryFields(entry.name);\n\twriteHeader(header, entry, fields.name, fields.prefix);\n\treturn header;\n}\n\n/** Build deterministic ustar tar bytes (two zero EOF blocks included). */\nexport function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\tif (!Array.isArray(entries)) throw new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar entries must be an array\"));\n\tconst names = new Set<string>();\n\tconst blocks: Uint8Array[] = [];\n\tfor (const entry of entries) {\n\t\tif (names.has(entry.name))\n\t\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"duplicate tar entry name: {name}\", { name: entry.name }));\n\t\tnames.add(entry.name);\n\t\tblocks.push(headerBlock(entry));\n\t\tif (!entry.directory) {\n\t\t\tconst bytes = entry.bytes ?? new Uint8Array();\n\t\t\tconst padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;\n\t\t\tblocks.push(bytes, new Uint8Array(padding));\n\t\t}\n\t}\n\tblocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));\n\tlet total = 0;\n\tfor (const block of blocks) total += block.byteLength;\n\tconst output = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const block of blocks) {\n\t\toutput.set(block, offset);\n\t\toffset += block.byteLength;\n\t}\n\treturn output;\n}\n\n/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */\nexport function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\t// Node's gzip wrapper writes a zero mtime header unless configured, so the\n\t// default compression is deterministic within one runtime.\n\treturn gzipSync(buildNodeTarBytesV1(entries));\n}\n"]}

package/dist/plugins/ecosystem/node-tar-writer.js

@@ -1,4 +1,5 @@
 import { gzipSync } from "node:zlib";
+import { t } from "../../core/i18n/index.js";
 import { normalizedEntryName } from "./node-package-install-host.js";
 /**
  * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin
@@ -26,7 +27,7 @@ function octalField(value, length) {
     const digits = length - 1;
     const octal = value.toString(8);
     if (octal.length > digits)
-        throw new NodeTarWriterErrorV1("invalid_entry", "tar header field overflows");
+        throw new NodeTarWriterErrorV1("invalid_entry", t("tar header field overflows"));
     return `${octal.padStart(digits, "0")}\0`;
 }
 function writeHeader(header, entry, nameField, prefixField) {
@@ -34,7 +35,7 @@ function writeHeader(header, entry, nameField, prefixField) {
     const encode = (value, offset, length) => {
         const bytes = new TextEncoder().encode(value);
         if (bytes.byteLength > length)
-            throw new NodeTarWriterErrorV1("entry_name_too_long", "tar header name field overflows");
+            throw new NodeTarWriterErrorV1("entry_name_too_long", t("tar header name field overflows"));
         header.set(bytes, offset);
     };
     encode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);
@@ -72,25 +73,25 @@ function entryFields(name) {
         }
     }
     if (split <= 0)
-        throw new NodeTarWriterErrorV1("entry_name_too_long", "tar entry name cannot be split into ustar fields");
+        throw new NodeTarWriterErrorV1("entry_name_too_long", t("tar entry name cannot be split into ustar fields"));
     const prefix = name.slice(0, split);
     const rest = name.slice(split + 1);
     const restBytes = new TextEncoder().encode(rest);
     if (restBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||
         new TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1)
-        throw new NodeTarWriterErrorV1("entry_name_too_long", "tar entry name cannot be split into ustar fields");
+        throw new NodeTarWriterErrorV1("entry_name_too_long", t("tar entry name cannot be split into ustar fields"));
     return { name: rest, prefix };
 }
 function headerBlock(entry) {
     if (typeof entry.name !== "string" || entry.name.length === 0)
-        throw new NodeTarWriterErrorV1("invalid_entry", "tar entry name is invalid");
+        throw new NodeTarWriterErrorV1("invalid_entry", t("tar entry name is invalid"));
     const normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);
     if (normalized.name !== entry.name)
-        throw new NodeTarWriterErrorV1("invalid_entry", "tar entry name is not normalized");
+        throw new NodeTarWriterErrorV1("invalid_entry", t("tar entry name is not normalized"));
     if (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)
-        throw new NodeTarWriterErrorV1("invalid_entry", "tar directory entry must be empty");
+        throw new NodeTarWriterErrorV1("invalid_entry", t("tar directory entry must be empty"));
     if (!entry.directory && !(entry.bytes instanceof Uint8Array))
-        throw new NodeTarWriterErrorV1("invalid_entry", "tar file entry requires bytes");
+        throw new NodeTarWriterErrorV1("invalid_entry", t("tar file entry requires bytes"));
     const header = new Uint8Array(TAR_BLOCK_BYTES_V1);
     const fields = entryFields(entry.name);
     writeHeader(header, entry, fields.name, fields.prefix);
@@ -99,12 +100,12 @@ function headerBlock(entry) {
 /** Build deterministic ustar tar bytes (two zero EOF blocks included). */
 export function buildNodeTarBytesV1(entries) {
     if (!Array.isArray(entries))
-        throw new NodeTarWriterErrorV1("invalid_entry", "tar entries must be an array");
+        throw new NodeTarWriterErrorV1("invalid_entry", t("tar entries must be an array"));
     const names = new Set();
     const blocks = [];
     for (const entry of entries) {
         if (names.has(entry.name))
-            throw new NodeTarWriterErrorV1("invalid_entry", `duplicate tar entry name: ${entry.name}`);
+            throw new NodeTarWriterErrorV1("invalid_entry", t("duplicate tar entry name: {name}", { name: entry.name }));
         names.add(entry.name);
         blocks.push(headerBlock(entry));
         if (!entry.directory) {

package/dist/plugins/ecosystem/node-tar-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"node-tar-writer.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE;;;;;;;GAOG;AAEH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAIjC,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,IAAI,CAA2B;IAExC,YAAY,IAA8B,EAAE,OAAe,EAAE;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AASD,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAU;IAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,4BAA4B,CAAC,CAAC;IACzG,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;AAAA,CAC1C;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,KAA2B,EAAE,SAAiB,EAAE,WAAmB,EAAQ;IACnH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc,EAAQ,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM;YAC5B,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,iCAAiC,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAA,CAC1B,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,GAAG,sBAAsB,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,QAAQ,IAAI,IAAI,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,WAAW,CAAC,IAAY,EAAsD;IACtF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,kBAAkB,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/F,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,GAAG,KAAK,CAAC;YACd,MAAM;QACP,CAAC;IACF,CAAC;IACD,IAAI,KAAK,IAAI,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAC;IAC3G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,IACC,SAAS,CAAC,UAAU,GAAG,kBAAkB,GAAG,CAAC;QAC7C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,GAAG,oBAAoB,GAAG,CAAC;QAEtE,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,kDAAkD,CAAC,CAAC;IAC3G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAAA,CAC9B;AAED,SAAS,WAAW,CAAC,KAA2B,EAAc;IAC7D,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAC5D,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,2BAA2B,CAAC,CAAC;IAC9E,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACjC,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;IACrF,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;QAC7E,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,mCAAmC,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,UAAU,CAAC;QAC3D,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,+BAA+B,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,OAAwC,EAAc;IACzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAC7G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,6BAA6B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5F,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,kBAAkB,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,kBAAkB,CAAC,CAAC,GAAG,kBAAkB,CAAC;YACpG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,OAAwC,EAAc;IAC3F,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CAC9C","sourcesContent":["import { gzipSync } from \"node:zlib\";\nimport { normalizedEntryName } from \"./node-package-install-host.ts\";\n\n/**\n * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin\n * directory can be packed into the same `application/gzip` package shape the\n * install host already parses (`node-tar-package.ts`), reusing its entry-name\n * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no\n * uname/gname, sorted-free (callers pass entries in their chosen order), and\n * a gzip wrapper with a zero mtime.\n */\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_MODE_LENGTH_V1 = 8;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_PREFIX_LENGTH_V1 = 155;\n\nexport type NodeTarWriterErrorCodeV1 = \"invalid_entry\" | \"entry_name_too_long\";\n\nexport class NodeTarWriterErrorV1 extends Error {\n\treadonly code: NodeTarWriterErrorCodeV1;\n\n\tconstructor(code: NodeTarWriterErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeTarWriterErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeTarWriterEntryV1 {\n\t/** Forward-slash normalized path; validated with the shared archive rules. */\n\treadonly name: string;\n\treadonly directory: boolean;\n\treadonly bytes?: Uint8Array;\n}\n\nfunction octalField(value: number, length: number): string {\n\tconst digits = length - 1;\n\tconst octal = value.toString(8);\n\tif (octal.length > digits) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar header field overflows\");\n\treturn `${octal.padStart(digits, \"0\")}\\0`;\n}\n\nfunction writeHeader(header: Uint8Array, entry: NodeTarWriterEntryV1, nameField: string, prefixField: string): void {\n\theader.fill(0);\n\tconst encode = (value: string, offset: number, length: number): void => {\n\t\tconst bytes = new TextEncoder().encode(value);\n\t\tif (bytes.byteLength > length)\n\t\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar header name field overflows\");\n\t\theader.set(bytes, offset);\n\t};\n\tencode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);\n\tconst contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);\n\tconst mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);\n\tconst encodedMode = new TextEncoder().encode(mode);\n\theader.set(encodedMode, 100);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);\n\theader.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);\n\theader[156] = entry.directory ? 0x35 : 0x30;\n\tconst magic = new TextEncoder().encode(\"ustar\\0\");\n\theader.set(magic, 257);\n\theader.set(new TextEncoder().encode(\"00\"), 263);\n\tif (prefixField.length > 0) encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);\n\tlet checksum = 0;\n\tfor (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1) header[index] = 0x20;\n\tfor (const byte of header) checksum += byte;\n\tconst checksumText = `${checksum.toString(8).padStart(6, \"0\")}\\0 `;\n\theader.set(new TextEncoder().encode(checksumText), 148);\n}\n\nfunction entryFields(name: string): { readonly name: string; readonly prefix: string } {\n\tconst bytes = new TextEncoder().encode(name);\n\tif (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1) return { name, prefix: \"\" };\n\tlet split = -1;\n\tfor (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {\n\t\tif (bytes[index] === 0x2f) {\n\t\t\tsplit = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (split <= 0)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\tconst prefix = name.slice(0, split);\n\tconst rest = name.slice(split + 1);\n\tconst restBytes = new TextEncoder().encode(rest);\n\tif (\n\t\trestBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||\n\t\tnew TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1\n\t)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", \"tar entry name cannot be split into ustar fields\");\n\treturn { name: rest, prefix };\n}\n\nfunction headerBlock(entry: NodeTarWriterEntryV1): Uint8Array {\n\tif (typeof entry.name !== \"string\" || entry.name.length === 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is invalid\");\n\tconst normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);\n\tif (normalized.name !== entry.name)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entry name is not normalized\");\n\tif (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar directory entry must be empty\");\n\tif (!entry.directory && !(entry.bytes instanceof Uint8Array))\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", \"tar file entry requires bytes\");\n\tconst header = new Uint8Array(TAR_BLOCK_BYTES_V1);\n\tconst fields = entryFields(entry.name);\n\twriteHeader(header, entry, fields.name, fields.prefix);\n\treturn header;\n}\n\n/** Build deterministic ustar tar bytes (two zero EOF blocks included). */\nexport function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\tif (!Array.isArray(entries)) throw new NodeTarWriterErrorV1(\"invalid_entry\", \"tar entries must be an array\");\n\tconst names = new Set<string>();\n\tconst blocks: Uint8Array[] = [];\n\tfor (const entry of entries) {\n\t\tif (names.has(entry.name))\n\t\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", `duplicate tar entry name: ${entry.name}`);\n\t\tnames.add(entry.name);\n\t\tblocks.push(headerBlock(entry));\n\t\tif (!entry.directory) {\n\t\t\tconst bytes = entry.bytes ?? new Uint8Array();\n\t\t\tconst padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;\n\t\t\tblocks.push(bytes, new Uint8Array(padding));\n\t\t}\n\t}\n\tblocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));\n\tlet total = 0;\n\tfor (const block of blocks) total += block.byteLength;\n\tconst output = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const block of blocks) {\n\t\toutput.set(block, offset);\n\t\toffset += block.byteLength;\n\t}\n\treturn output;\n}\n\n/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */\nexport function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\t// Node's gzip wrapper writes a zero mtime header unless configured, so the\n\t// default compression is deterministic within one runtime.\n\treturn gzipSync(buildNodeTarBytesV1(entries));\n}\n"]}
+{"version":3,"file":"node-tar-writer.js","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-tar-writer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,CAAC,EAAE,MAAM,0BAA0B,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAErE;;;;;;;GAOG;AAEH,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAIjC,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACrC,IAAI,CAA2B;IAExC,YAAY,IAA8B,EAAE,OAAe,EAAE;QAC5D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAAA,CACjB;CACD;AASD,SAAS,UAAU,CAAC,KAAa,EAAE,MAAc,EAAU;IAC1D,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC;IAC5G,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC;AAAA,CAC1C;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,KAA2B,EAAE,SAAiB,EAAE,WAAmB,EAAQ;IACnH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,MAAc,EAAE,MAAc,EAAQ,EAAE,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM;YAC5B,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAAA,CAC1B,CAAC;IACF,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,kBAAkB,GAAG,CAAC,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,EAAE,UAAU,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvB,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,oBAAoB,GAAG,CAAC,CAAC,CAAC;IAC/E,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,KAAK,GAAG,GAAG,EAAE,KAAK,GAAG,GAAG,GAAG,sBAAsB,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC;IAC7F,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,QAAQ,IAAI,IAAI,CAAC;IAC5C,MAAM,YAAY,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;IACnE,MAAM,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC;AAAA,CACxD;AAED,SAAS,WAAW,CAAC,IAAY,EAAsD;IACtF,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,UAAU,IAAI,kBAAkB,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC5E,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;IACf,KAAK,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/F,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3B,KAAK,GAAG,KAAK,CAAC;YACd,MAAM;QACP,CAAC;IACF,CAAC;IACD,IAAI,KAAK,IAAI,CAAC;QACb,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,IACC,SAAS,CAAC,UAAU,GAAG,kBAAkB,GAAG,CAAC;QAC7C,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,UAAU,GAAG,oBAAoB,GAAG,CAAC;QAEtE,MAAM,IAAI,oBAAoB,CAAC,qBAAqB,EAAE,CAAC,CAAC,kDAAkD,CAAC,CAAC,CAAC;IAC9G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAAA,CAC9B;AAED,SAAS,WAAW,CAAC,KAA2B,EAAc;IAC7D,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAC5D,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxF,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QACjC,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC;IACxF,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC;QAC7E,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,YAAY,UAAU,CAAC;QAC3D,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CAAC,OAAwC,EAAc;IACzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;YACxB,MAAM,IAAI,oBAAoB,CAAC,eAAe,EAAE,CAAC,CAAC,kCAAkC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9G,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtB,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,CAAC,kBAAkB,GAAG,CAAC,KAAK,CAAC,UAAU,GAAG,kBAAkB,CAAC,CAAC,GAAG,kBAAkB,CAAC;YACpG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,CAAC;IACF,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,kBAAkB,CAAC,EAAE,IAAI,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACpF,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;IACtD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC5B,CAAC;IACD,OAAO,MAAM,CAAC;AAAA,CACd;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,OAAwC,EAAc;IAC3F,2EAA2E;IAC3E,2DAA2D;IAC3D,OAAO,QAAQ,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAAA,CAC9C","sourcesContent":["import { gzipSync } from \"node:zlib\";\nimport { t } from \"../../core/i18n/index.ts\";\nimport { normalizedEntryName } from \"./node-package-install-host.ts\";\n\n/**\n * Minimal deterministic ustar tar+gzip writer. It exists so a local plugin\n * directory can be packed into the same `application/gzip` package shape the\n * install host already parses (`node-tar-package.ts`), reusing its entry-name\n * normalization. Output is fully deterministic: fixed mode/uid/gid/mtime, no\n * uname/gname, sorted-free (callers pass entries in their chosen order), and\n * a gzip wrapper with a zero mtime.\n */\n\nconst TAR_BLOCK_BYTES_V1 = 512;\nconst TAR_NAME_LENGTH_V1 = 100;\nconst TAR_MODE_LENGTH_V1 = 8;\nconst TAR_SIZE_LENGTH_V1 = 12;\nconst TAR_CHECKSUM_LENGTH_V1 = 8;\nconst TAR_PREFIX_LENGTH_V1 = 155;\n\nexport type NodeTarWriterErrorCodeV1 = \"invalid_entry\" | \"entry_name_too_long\";\n\nexport class NodeTarWriterErrorV1 extends Error {\n\treadonly code: NodeTarWriterErrorCodeV1;\n\n\tconstructor(code: NodeTarWriterErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeTarWriterErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeTarWriterEntryV1 {\n\t/** Forward-slash normalized path; validated with the shared archive rules. */\n\treadonly name: string;\n\treadonly directory: boolean;\n\treadonly bytes?: Uint8Array;\n}\n\nfunction octalField(value: number, length: number): string {\n\tconst digits = length - 1;\n\tconst octal = value.toString(8);\n\tif (octal.length > digits) throw new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar header field overflows\"));\n\treturn `${octal.padStart(digits, \"0\")}\\0`;\n}\n\nfunction writeHeader(header: Uint8Array, entry: NodeTarWriterEntryV1, nameField: string, prefixField: string): void {\n\theader.fill(0);\n\tconst encode = (value: string, offset: number, length: number): void => {\n\t\tconst bytes = new TextEncoder().encode(value);\n\t\tif (bytes.byteLength > length)\n\t\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", t(\"tar header name field overflows\"));\n\t\theader.set(bytes, offset);\n\t};\n\tencode(nameField, 0, TAR_NAME_LENGTH_V1 - 1);\n\tconst contentBytes = entry.directory ? 0 : (entry.bytes?.byteLength ?? 0);\n\tconst mode = octalField(entry.directory ? 0o755 : 0o644, TAR_MODE_LENGTH_V1);\n\tconst encodedMode = new TextEncoder().encode(mode);\n\theader.set(encodedMode, 100);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 108);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_MODE_LENGTH_V1)), 116);\n\theader.set(new TextEncoder().encode(octalField(contentBytes, TAR_SIZE_LENGTH_V1)), 124);\n\theader.set(new TextEncoder().encode(octalField(0, TAR_SIZE_LENGTH_V1)), 136);\n\theader[156] = entry.directory ? 0x35 : 0x30;\n\tconst magic = new TextEncoder().encode(\"ustar\\0\");\n\theader.set(magic, 257);\n\theader.set(new TextEncoder().encode(\"00\"), 263);\n\tif (prefixField.length > 0) encode(prefixField, 345, TAR_PREFIX_LENGTH_V1 - 1);\n\tlet checksum = 0;\n\tfor (let index = 148; index < 148 + TAR_CHECKSUM_LENGTH_V1; index += 1) header[index] = 0x20;\n\tfor (const byte of header) checksum += byte;\n\tconst checksumText = `${checksum.toString(8).padStart(6, \"0\")}\\0 `;\n\theader.set(new TextEncoder().encode(checksumText), 148);\n}\n\nfunction entryFields(name: string): { readonly name: string; readonly prefix: string } {\n\tconst bytes = new TextEncoder().encode(name);\n\tif (bytes.byteLength <= TAR_NAME_LENGTH_V1 - 1) return { name, prefix: \"\" };\n\tlet split = -1;\n\tfor (let index = Math.min(bytes.byteLength, TAR_PREFIX_LENGTH_V1) - 1; index >= 0; index -= 1) {\n\t\tif (bytes[index] === 0x2f) {\n\t\t\tsplit = index;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (split <= 0)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", t(\"tar entry name cannot be split into ustar fields\"));\n\tconst prefix = name.slice(0, split);\n\tconst rest = name.slice(split + 1);\n\tconst restBytes = new TextEncoder().encode(rest);\n\tif (\n\t\trestBytes.byteLength > TAR_NAME_LENGTH_V1 - 1 ||\n\t\tnew TextEncoder().encode(prefix).byteLength > TAR_PREFIX_LENGTH_V1 - 1\n\t)\n\t\tthrow new NodeTarWriterErrorV1(\"entry_name_too_long\", t(\"tar entry name cannot be split into ustar fields\"));\n\treturn { name: rest, prefix };\n}\n\nfunction headerBlock(entry: NodeTarWriterEntryV1): Uint8Array {\n\tif (typeof entry.name !== \"string\" || entry.name.length === 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar entry name is invalid\"));\n\tconst normalized = normalizedEntryName(entry.directory ? `${entry.name}/` : entry.name);\n\tif (normalized.name !== entry.name)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar entry name is not normalized\"));\n\tif (entry.directory && entry.bytes !== undefined && entry.bytes.byteLength > 0)\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar directory entry must be empty\"));\n\tif (!entry.directory && !(entry.bytes instanceof Uint8Array))\n\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar file entry requires bytes\"));\n\tconst header = new Uint8Array(TAR_BLOCK_BYTES_V1);\n\tconst fields = entryFields(entry.name);\n\twriteHeader(header, entry, fields.name, fields.prefix);\n\treturn header;\n}\n\n/** Build deterministic ustar tar bytes (two zero EOF blocks included). */\nexport function buildNodeTarBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\tif (!Array.isArray(entries)) throw new NodeTarWriterErrorV1(\"invalid_entry\", t(\"tar entries must be an array\"));\n\tconst names = new Set<string>();\n\tconst blocks: Uint8Array[] = [];\n\tfor (const entry of entries) {\n\t\tif (names.has(entry.name))\n\t\t\tthrow new NodeTarWriterErrorV1(\"invalid_entry\", t(\"duplicate tar entry name: {name}\", { name: entry.name }));\n\t\tnames.add(entry.name);\n\t\tblocks.push(headerBlock(entry));\n\t\tif (!entry.directory) {\n\t\t\tconst bytes = entry.bytes ?? new Uint8Array();\n\t\t\tconst padding = (TAR_BLOCK_BYTES_V1 - (bytes.byteLength % TAR_BLOCK_BYTES_V1)) % TAR_BLOCK_BYTES_V1;\n\t\t\tblocks.push(bytes, new Uint8Array(padding));\n\t\t}\n\t}\n\tblocks.push(new Uint8Array(TAR_BLOCK_BYTES_V1), new Uint8Array(TAR_BLOCK_BYTES_V1));\n\tlet total = 0;\n\tfor (const block of blocks) total += block.byteLength;\n\tconst output = new Uint8Array(total);\n\tlet offset = 0;\n\tfor (const block of blocks) {\n\t\toutput.set(block, offset);\n\t\toffset += block.byteLength;\n\t}\n\treturn output;\n}\n\n/** Build deterministic gzip-compressed ustar tar bytes (the `application/gzip` package shape). */\nexport function buildNodeTarGzBytesV1(entries: readonly NodeTarWriterEntryV1[]): Uint8Array {\n\t// Node's gzip wrapper writes a zero mtime header unless configured, so the\n\t// default compression is deterministic within one runtime.\n\treturn gzipSync(buildNodeTarBytesV1(entries));\n}\n"]}

package/dist/plugins/ecosystem/node-url-package-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"node-url-package-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-url-package-source.ts"],"names":[],"mappings":"AACA,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAiBxG,MAAM,MAAM,+BAA+B,GACxC,WAAW,GACX,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,CAAC;AAErB,qBAAa,2BAA4B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;IAE/C,YAAY,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAIjE;CACD;AAED,MAAM,WAAW,6BAA6B;IAC7C,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAkCD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,6BAA6B,EACtC,KAAK,EAAE;IACN,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B,GACC,OAAO,CAAC,wBAAwB,CAAC,CAyHnC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { detectPluginPackageMediaTypeV1, type PluginPackageMediaTypeV1 } from \"./node-package-media.ts\";\n\n/**\n * Custom-URL plugin package download (design §4.6 \"自定义 URL\" row). The URL\n * is the package file itself (zip/tgz); integrity is layered: a `#sha256:<hex>`\n * ref fragment becomes a strong digest check, otherwise TLS plus the double\n * manifest validation performed by the install host.\n */\n\nconst DEFAULT_TIMEOUT_MS_V1 = 30_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_PACKAGE_BYTES_V1 = 128 * 1024 * 1024;\nconst MAX_PACKAGE_BYTES_V1 = 512 * 1024 * 1024;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport type NodeUrlPackageSourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"invalid_url\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"response_too_large\"\n\t| \"digest_mismatch\";\n\nexport class NodeUrlPackageSourceErrorV1 extends Error {\n\treadonly code: NodeUrlPackageSourceErrorCodeV1;\n\n\tconstructor(code: NodeUrlPackageSourceErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeUrlPackageSourceErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeUrlPackageSourceOptionsV1 {\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxPackageBytes?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeUrlPackageDownloadV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: PluginPackageMediaTypeV1;\n\t/** sha256 hex of the downloaded bytes; always computed, verified when expected. */\n\treadonly digestHex: string;\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`${label} must be a positive integer at most ${maximum}`,\n\t\t);\n\treturn result;\n}\n\nfunction packageUrl(value: string): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"plugin package URL is invalid\");\n\t}\n\tif (\n\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\tparsed.username !== \"\" ||\n\t\tparsed.password !== \"\"\n\t)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"plugin package URL must use http(s) without credentials\");\n\tif (parsed.hash !== \"\")\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"plugin package URL must not include a fragment\");\n\treturn parsed;\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\");\n}\n\n/**\n * Download one package file over http(s). Redirects are followed manually and\n * every hop must again be a valid http(s) URL without credentials. When\n * `expectedDigestHex` is present the sha256 of the bytes must match exactly.\n */\nexport async function downloadNodeUrlPackageV1(\n\toptions: NodeUrlPackageSourceOptionsV1,\n\tinput: {\n\t\treadonly url: string;\n\t\treadonly expectedDigestHex?: string;\n\t\treadonly signal?: AbortSignal;\n\t},\n): Promise<NodeUrlPackageDownloadV1> {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\")\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_configuration\", \"Node fetch is unavailable\");\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxPackageBytes = boundedPositive(\n\t\toptions.maxPackageBytes,\n\t\tDEFAULT_MAX_PACKAGE_BYTES_V1,\n\t\tMAX_PACKAGE_BYTES_V1,\n\t\t\"maxPackageBytes\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\t`maxRedirects must be an integer between 0 and ${MAX_REDIRECTS_V1}`,\n\t\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-url/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_configuration\", \"userAgent is invalid\");\n\tif (input.expectedDigestHex !== undefined && !/^[0-9a-f]{64}$/u.test(input.expectedDigestHex))\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", \"expected sha256 digest is invalid\");\n\n\tlet current = packageUrl(input.url);\n\tlet response: Response | undefined;\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(input.signal?.reason);\n\tif (input.signal?.aborted === true) abort();\n\telse input.signal?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\ttry {\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tif (controller.signal.aborted)\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\t\tlet hop: Response;\n\t\t\ttry {\n\t\t\t\thop = await transport(current.toString(), {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\theaders: { accept: \"*/*\", \"user-agent\": userAgent },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: controller.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tif (timedOut)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_timed_out\", \"plugin package download timed out\");\n\t\t\t\tif (isAbortLike(error) || input.signal?.aborted === true)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package download failed\");\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(hop.status)) {\n\t\t\t\tresponse = hop;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tconst location = hop.headers.get(\"location\");\n\t\t\tawait hop.body?.cancel().catch(() => undefined);\n\t\t\tif (location === null || redirect >= maxRedirects)\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package redirect limit exceeded\");\n\t\t\tcurrent = packageUrl(new URL(location, current).toString());\n\t\t}\n\t\tif (response === undefined)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package download failed\");\n\t\tif (response.status < 200 || response.status >= 300)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package download did not succeed\");\n\t\tif (response.body === null)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", \"plugin package response has no body\");\n\t\tconst reader = response.body.getReader();\n\t\tconst chunks: Uint8Array[] = [];\n\t\tconst hash = createHash(\"sha256\");\n\t\tlet total = 0;\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tif (controller.signal.aborted)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\t\t\tconst item = await reader.read();\n\t\t\t\tif (item.done) break;\n\t\t\t\ttotal += item.value.byteLength;\n\t\t\t\tif (total > maxPackageBytes)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\t\"plugin package exceeds the configured size limit\",\n\t\t\t\t\t);\n\t\t\t\thash.update(item.value);\n\t\t\t\tchunks.push(item.value);\n\t\t\t}\n\t\t} finally {\n\t\t\treader.releaseLock();\n\t\t}\n\t\tif (controller.signal.aborted)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", \"plugin package download was cancelled\");\n\t\tconst bytes = new Uint8Array(total);\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tbytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t\tconst digestHex = hash.digest(\"hex\");\n\t\tif (input.expectedDigestHex !== undefined && digestHex !== input.expectedDigestHex)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\t\"digest_mismatch\",\n\t\t\t\t\"plugin package bytes do not match the expected sha256 digest\",\n\t\t\t);\n\t\tconst fileName = current.pathname.split(\"/\").pop();\n\t\tconst mediaType = detectPluginPackageMediaTypeV1(\n\t\t\tbytes,\n\t\t\tfileName === undefined || fileName.length === 0 ? undefined : fileName,\n\t\t);\n\t\treturn { bytes, mediaType, digestHex };\n\t} finally {\n\t\tclearTimeout(timeout);\n\t\tinput.signal?.removeEventListener(\"abort\", abort);\n\t\tawait response?.body?.cancel().catch(() => undefined);\n\t}\n}\n"]}
+{"version":3,"file":"node-url-package-source.d.ts","sourceRoot":"","sources":["../../../src/plugins/ecosystem/node-url-package-source.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,KAAK,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAiBxG,MAAM,MAAM,+BAA+B,GACxC,WAAW,GACX,uBAAuB,GACvB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,oBAAoB,GACpB,iBAAiB,CAAC;AAErB,qBAAa,2BAA4B,SAAQ,KAAK;IACrD,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;IAE/C,YAAY,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,MAAM,EAIjE;CACD;AAED,MAAM,WAAW,6BAA6B;IAC7C,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,wBAAwB,CAAC;IAC7C,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAqCD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,6BAA6B,EACtC,KAAK,EAAE;IACN,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC9B,GACC,OAAO,CAAC,wBAAwB,CAAC,CAyHnC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { t } from \"../../core/i18n/index.ts\";\nimport { detectPluginPackageMediaTypeV1, type PluginPackageMediaTypeV1 } from \"./node-package-media.ts\";\n\n/**\n * Custom-URL plugin package download (design §4.6 \"自定义 URL\" row). The URL\n * is the package file itself (zip/tgz); integrity is layered: a `#sha256:<hex>`\n * ref fragment becomes a strong digest check, otherwise TLS plus the double\n * manifest validation performed by the install host.\n */\n\nconst DEFAULT_TIMEOUT_MS_V1 = 30_000;\nconst MAX_TIMEOUT_MS_V1 = 120_000;\nconst DEFAULT_MAX_PACKAGE_BYTES_V1 = 128 * 1024 * 1024;\nconst MAX_PACKAGE_BYTES_V1 = 512 * 1024 * 1024;\nconst DEFAULT_REDIRECTS_V1 = 3;\nconst MAX_REDIRECTS_V1 = 5;\nconst REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);\n\nexport type NodeUrlPackageSourceErrorCodeV1 =\n\t| \"cancelled\"\n\t| \"invalid_configuration\"\n\t| \"invalid_url\"\n\t| \"request_failed\"\n\t| \"request_timed_out\"\n\t| \"response_too_large\"\n\t| \"digest_mismatch\";\n\nexport class NodeUrlPackageSourceErrorV1 extends Error {\n\treadonly code: NodeUrlPackageSourceErrorCodeV1;\n\n\tconstructor(code: NodeUrlPackageSourceErrorCodeV1, message: string) {\n\t\tsuper(message);\n\t\tthis.name = \"NodeUrlPackageSourceErrorV1\";\n\t\tthis.code = code;\n\t}\n}\n\nexport interface NodeUrlPackageSourceOptionsV1 {\n\t/** Real fetch or a deterministic test replacement. */\n\treadonly fetch?: typeof globalThis.fetch;\n\treadonly requestTimeoutMs?: number;\n\treadonly maxPackageBytes?: number;\n\treadonly maxRedirects?: number;\n\treadonly userAgent?: string;\n}\n\nexport interface NodeUrlPackageDownloadV1 {\n\treadonly bytes: Uint8Array;\n\treadonly mediaType: PluginPackageMediaTypeV1;\n\t/** sha256 hex of the downloaded bytes; always computed, verified when expected. */\n\treadonly digestHex: string;\n}\n\nfunction boundedPositive(value: number | undefined, fallback: number, maximum: number, label: string): number {\n\tconst result = value ?? fallback;\n\tif (!Number.isSafeInteger(result) || result <= 0 || result > maximum)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"{label} must be a positive integer at most {maximum}\", { label, maximum }),\n\t\t);\n\treturn result;\n}\n\nfunction packageUrl(value: string): URL {\n\tlet parsed: URL;\n\ttry {\n\t\tparsed = new URL(value);\n\t} catch {\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", t(\"plugin package URL is invalid\"));\n\t}\n\tif (\n\t\t(parsed.protocol !== \"http:\" && parsed.protocol !== \"https:\") ||\n\t\tparsed.username !== \"\" ||\n\t\tparsed.password !== \"\"\n\t)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_url\",\n\t\t\tt(\"plugin package URL must use http(s) without credentials\"),\n\t\t);\n\tif (parsed.hash !== \"\")\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", t(\"plugin package URL must not include a fragment\"));\n\treturn parsed;\n}\n\nfunction isAbortLike(error: unknown): boolean {\n\treturn error instanceof Error && (error.name === \"AbortError\" || error.name === \"AbortSignalError\");\n}\n\n/**\n * Download one package file over http(s). Redirects are followed manually and\n * every hop must again be a valid http(s) URL without credentials. When\n * `expectedDigestHex` is present the sha256 of the bytes must match exactly.\n */\nexport async function downloadNodeUrlPackageV1(\n\toptions: NodeUrlPackageSourceOptionsV1,\n\tinput: {\n\t\treadonly url: string;\n\t\treadonly expectedDigestHex?: string;\n\t\treadonly signal?: AbortSignal;\n\t},\n): Promise<NodeUrlPackageDownloadV1> {\n\tconst transport = options.fetch ?? globalThis.fetch;\n\tif (typeof transport !== \"function\")\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_configuration\", t(\"Node fetch is unavailable\"));\n\tconst timeoutMs = boundedPositive(\n\t\toptions.requestTimeoutMs,\n\t\tDEFAULT_TIMEOUT_MS_V1,\n\t\tMAX_TIMEOUT_MS_V1,\n\t\t\"requestTimeoutMs\",\n\t);\n\tconst maxPackageBytes = boundedPositive(\n\t\toptions.maxPackageBytes,\n\t\tDEFAULT_MAX_PACKAGE_BYTES_V1,\n\t\tMAX_PACKAGE_BYTES_V1,\n\t\t\"maxPackageBytes\",\n\t);\n\tconst maxRedirects = options.maxRedirects ?? DEFAULT_REDIRECTS_V1;\n\tif (!Number.isSafeInteger(maxRedirects) || maxRedirects < 0 || maxRedirects > MAX_REDIRECTS_V1)\n\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\"invalid_configuration\",\n\t\t\tt(\"maxRedirects must be an integer between 0 and {max}\", { max: MAX_REDIRECTS_V1 }),\n\t\t);\n\tconst userAgent = options.userAgent ?? \"agent-forge-plugin-url/1\";\n\tif (userAgent.length === 0 || userAgent.length > 256 || /[\\r\\n]/u.test(userAgent))\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_configuration\", t(\"userAgent is invalid\"));\n\tif (input.expectedDigestHex !== undefined && !/^[0-9a-f]{64}$/u.test(input.expectedDigestHex))\n\t\tthrow new NodeUrlPackageSourceErrorV1(\"invalid_url\", t(\"expected sha256 digest is invalid\"));\n\n\tlet current = packageUrl(input.url);\n\tlet response: Response | undefined;\n\tconst controller = new AbortController();\n\tlet timedOut = false;\n\tconst abort = () => controller.abort(input.signal?.reason);\n\tif (input.signal?.aborted === true) abort();\n\telse input.signal?.addEventListener(\"abort\", abort, { once: true });\n\tconst timeout = setTimeout(() => {\n\t\ttimedOut = true;\n\t\tcontroller.abort();\n\t}, timeoutMs);\n\ttry {\n\t\tfor (let redirect = 0; ; redirect += 1) {\n\t\t\tif (controller.signal.aborted)\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", t(\"plugin package download was cancelled\"));\n\t\t\tlet hop: Response;\n\t\t\ttry {\n\t\t\t\thop = await transport(current.toString(), {\n\t\t\t\t\tmethod: \"GET\",\n\t\t\t\t\theaders: { accept: \"*/*\", \"user-agent\": userAgent },\n\t\t\t\t\tredirect: \"manual\",\n\t\t\t\t\tsignal: controller.signal,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tif (timedOut)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_timed_out\", t(\"plugin package download timed out\"));\n\t\t\t\tif (isAbortLike(error) || input.signal?.aborted === true)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", t(\"plugin package download was cancelled\"));\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", t(\"plugin package download failed\"));\n\t\t\t}\n\t\t\tif (!REDIRECT_STATUS.has(hop.status)) {\n\t\t\t\tresponse = hop;\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tconst location = hop.headers.get(\"location\");\n\t\t\tawait hop.body?.cancel().catch(() => undefined);\n\t\t\tif (location === null || redirect >= maxRedirects)\n\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", t(\"plugin package redirect limit exceeded\"));\n\t\t\tcurrent = packageUrl(new URL(location, current).toString());\n\t\t}\n\t\tif (response === undefined)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", t(\"plugin package download failed\"));\n\t\tif (response.status < 200 || response.status >= 300)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", t(\"plugin package download did not succeed\"));\n\t\tif (response.body === null)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"request_failed\", t(\"plugin package response has no body\"));\n\t\tconst reader = response.body.getReader();\n\t\tconst chunks: Uint8Array[] = [];\n\t\tconst hash = createHash(\"sha256\");\n\t\tlet total = 0;\n\t\ttry {\n\t\t\tfor (;;) {\n\t\t\t\tif (controller.signal.aborted)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", t(\"plugin package download was cancelled\"));\n\t\t\t\tconst item = await reader.read();\n\t\t\t\tif (item.done) break;\n\t\t\t\ttotal += item.value.byteLength;\n\t\t\t\tif (total > maxPackageBytes)\n\t\t\t\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\t\t\t\"response_too_large\",\n\t\t\t\t\t\tt(\"plugin package exceeds the configured size limit\"),\n\t\t\t\t\t);\n\t\t\t\thash.update(item.value);\n\t\t\t\tchunks.push(item.value);\n\t\t\t}\n\t\t} finally {\n\t\t\treader.releaseLock();\n\t\t}\n\t\tif (controller.signal.aborted)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\"cancelled\", t(\"plugin package download was cancelled\"));\n\t\tconst bytes = new Uint8Array(total);\n\t\tlet offset = 0;\n\t\tfor (const chunk of chunks) {\n\t\t\tbytes.set(chunk, offset);\n\t\t\toffset += chunk.byteLength;\n\t\t}\n\t\tconst digestHex = hash.digest(\"hex\");\n\t\tif (input.expectedDigestHex !== undefined && digestHex !== input.expectedDigestHex)\n\t\t\tthrow new NodeUrlPackageSourceErrorV1(\n\t\t\t\t\"digest_mismatch\",\n\t\t\t\tt(\"plugin package bytes do not match the expected sha256 digest\"),\n\t\t\t);\n\t\tconst fileName = current.pathname.split(\"/\").pop();\n\t\tconst mediaType = detectPluginPackageMediaTypeV1(\n\t\t\tbytes,\n\t\t\tfileName === undefined || fileName.length === 0 ? undefined : fileName,\n\t\t);\n\t\treturn { bytes, mediaType, digestHex };\n\t} finally {\n\t\tclearTimeout(timeout);\n\t\tinput.signal?.removeEventListener(\"abort\", abort);\n\t\tawait response?.body?.cancel().catch(() => undefined);\n\t}\n}\n"]}