@ai-ecoverse/slicc-spectrum 1.101.2 → 1.101.3

package/dist/slicc-ui.js

@@ -44976,27 +44976,43 @@ var newer = (a23, b13) => {
 var certBlock = /<!--\s*cert-verify\s*-->([\s\S]*?)<!--\s*\/cert-verify\s*-->/g;
 var notesLimit = 8192;
 var noted = /* @__PURE__ */ new WeakMap();
-function releaseNotes(release3) {
-  const known = noted.get(release3);
+var bare = (version2) => version2.replace(/^v/, "");
+function trusted(url) {
+  try {
+    const { protocol, host: host4, username, password, pathname } = new URL(url);
+    const [owner2, repo, kind] = pathname.split("/").slice(1);
+    return protocol === "https:" && host4 === "github.com" && !username && !password && owner2.toLowerCase() === "ai-ecoverse" && Boolean(repo) && kind === "releases";
+  } catch {
+    return false;
+  }
+}
+function vouches(inner, release3, name) {
+  const token2 = /^certified\s+(\S+)/.exec(inner.trim())?.[1] ?? "";
+  const at = token2.lastIndexOf("@");
+  const named2 = token2.slice(0, at);
+  return at > 0 && bare(token2.slice(at + 1)) === bare(release3.version) && (name === void 0 || named2 === name);
+}
+function releaseNotes(release3, name) {
+  const cache5 = noted.get(release3) ?? /* @__PURE__ */ new Map();
+  noted.set(release3, cache5);
+  const known = cache5.get(name);
   if (known) return known;
   const text5 = release3.notes ?? "";
-  const certified = [...text5.matchAll(certBlock)].some(
-    ([, inner]) => /^certified\b/.test(inner.trim())
-  );
+  const certified = trusted(release3.url) && [...text5.matchAll(certBlock)].some(([, inner]) => vouches(inner, release3, name));
   const lines = text5.replace(certBlock, "").trim().split("\n");
-  const heading = /^#{1,6}\s/.test(lines[0]) && lines[0].includes(release3.version.replace(/^v/, ""));
+  const heading = /^#{1,6}\s/.test(lines[0]) && lines[0].includes(bare(release3.version));
   const full = lines.slice(heading ? 1 : 0).join("\n").trim();
   const cut = full.length > notesLimit;
   const head2 = full.slice(0, notesLimit);
   const line = head2.lastIndexOf("\n");
   const body4 = cut ? `${(line > notesLimit / 2 ? head2.slice(0, line) : head2).trimEnd()}\u2026` : full;
   const notes2 = { release: release3, body: body4, certified, cut };
-  noted.set(release3, notes2);
+  cache5.set(name, notes2);
   return notes2;
 }
-function whatsNew(releases, from, to) {
+function whatsNew(releases, from, to, name) {
   if (!releases || from === null || to === null || to === from) return [];
-  const range3 = releases.filter((release3) => newer(release3.version, from) > 0 && newer(release3.version, to) <= 0).sort((a23, b13) => newer(b13.version, a23.version)).map(releaseNotes);
+  const range3 = releases.filter((release3) => newer(release3.version, from) > 0 && newer(release3.version, to) <= 0).sort((a23, b13) => newer(b13.version, a23.version)).map((release3) => releaseNotes(release3, name));
   return range3.some((entry) => entry.body) ? range3 : [];
 }
 var secure = (url) => /^https:\/\//i.test(url);
@@ -45660,7 +45676,7 @@ var SliccUpdates = class extends ModelElement {
       ${item2.commands.length ? b`<p class="commands"><span class="hidden">Commands: </span>${item2.commands.map(
       (command3) => b`<code>${command3}</code>`
     )}</p>` : A}
-      ${this.#whatsNew(`releases:package:${item2.id}`, item2.label, whatsNew(item2.releases, item2.version, item2.offered), 4)}
+      ${this.#whatsNew(`releases:package:${item2.id}`, item2.label, whatsNew(item2.releases, item2.version, item2.offered, item2.package), 4)}
       ${this.#packageProgress(item2)}
       ${error ? b`<div class="error" role="alert" data-error>
               <swc-icon-alert-triangle size="s" aria-hidden="true"></swc-icon-alert-triangle>
@@ -46759,7 +46775,7 @@ function protects(path2, whole) {
   return rulePaths.some((rule) => glob.test(rule)) || top !== path2 && pattern(top).test("/etc/fnox") || whole && ruleParents.some((parent) => glob.test(parent));
 }
 var command2 = (word) => word.split("/").pop() ?? "";
-var trusted = (word) => readOnly.includes(word.replace(/^\/(?:usr\/)?bin\/(?=[^/]+$)/, ""));
+var trusted2 = (word) => readOnly.includes(word.replace(/^\/(?:usr\/)?bin\/(?=[^/]+$)/, ""));
 var expansion = /\$\([^)]*\)?|\$\{[^}]*\}?|\$[\w@*#?$!-]*|`[^`]*`?/;
 function moved(cwds, word) {
   for (const cwd of [...cwds]) {
@@ -46883,7 +46899,7 @@ function reach2(command3, cwd) {
   const plain2 = text5.split(separators).map((segment2) => commas(segment2.split(/[\s<>=]+/).map((word) => word.replace(/['"\\]/g, ""))));
   const aware = shield(text5).split(separators).map((segment2) => commas(quoted(unshield(segment2))));
   const segments = JSON.stringify(aware) === JSON.stringify(plain2) ? plain2 : [...plain2, ...aware];
-  const whole = segments.some((words2) => words2.length > 0 && !trusted(words2[0]));
+  const whole = segments.some((words2) => words2.length > 0 && !trusted2(words2[0]));
   for (const words2 of segments) {
     const hit = scan2(words2, cwds, whole);
     if (hit) return hit;