@aipt/platform-kernel 0.1.5

package/dist/catalog-source.d.ts

@@ -0,0 +1,167 @@
+import type { CapabilityBundleReleaseV2 } from "./adoption-contracts.js";
+export type RegistryConfigRelease = {
+    schemaVersion: 1;
+    revision: string;
+    registryId: string;
+    tenantId: string;
+    origin: string;
+    scopes: string[];
+    authentication: {
+        kind: "workload-identity" | "short-lived-token" | "restricted-token" | "anonymous-test";
+        credentialRef?: string;
+    };
+    capabilities: {
+        read: boolean;
+        write: boolean;
+        provenance: boolean;
+        staging: boolean;
+    };
+    status: "enabled" | "disabled";
+};
+export type PackageDeliveryReceipt = {
+    schemaVersion: 1;
+    receiptId: string;
+    registryId: string;
+    registryConfigRevision: string;
+    packageName: string;
+    version: string;
+    integrity: string;
+    tarballDigest: string;
+    access: "restricted" | "private";
+    provenance: "registry-attested" | "external-attested" | "local-readback-verified" | "development-readback-verified" | "registry-verified-no-attestation";
+    verificationIdentityDigest?: string;
+    sourceDeliveryReceiptId: string;
+    verifiedAt: string;
+};
+export type RegistryProviderRelease = {
+    schemaVersion: 1;
+    revision: string;
+    providerId: string;
+    kind: "cnpmcore" | "npm-registry" | "aws-codeartifact" | "fake";
+    deploymentDigest: string;
+    authentication: "short-lived-token" | "restricted-token" | "workload-identity" | "anonymous-test";
+    verification: "delivery-receipt" | "external" | "registry-native" | "fake";
+    capabilities: {
+        readBack: boolean;
+        versionRevision: boolean;
+        nativeStaging: boolean;
+        deletionRestricted: boolean;
+    };
+};
+export type RegistryCredentialLease = {
+    schemaVersion: 1;
+    kind: "bearer-token" | "anonymous-test";
+    secret: string;
+    subjectDigest: string;
+    issuedAt: string;
+    expiresAt: string;
+};
+export type RemotePackageObservation = {
+    schemaVersion: 1;
+    providerReleaseRevision: string;
+    registryId: string;
+    packageName: string;
+    version: string;
+    providerVersionRevision: string;
+    status: "published" | "unlisted";
+    origin: "internal-publish";
+    assetName: string;
+    integrity: string;
+    tarballDigest: string;
+    observedAt: string;
+};
+export type VerificationObservation = {
+    schemaVersion: 1;
+    mode: "delivery-receipt" | "external" | "registry-native" | "fake";
+    issuerDigest: string;
+    buildIdentityDigest: string;
+    subjectDigest: string;
+    statementDigest: string;
+    verifiedAt: string;
+};
+/** @deprecated Use VerificationObservation; retained as a source-compatible alias. */
+export type AttestationObservation = VerificationObservation;
+export type RemotePackageVerificationEvidence = {
+    schemaVersion: 1;
+    evidenceId: string;
+    providerReleaseRevision: string;
+    registryConfigRevision: string;
+    endpointBindingDigest: string;
+    credentialSubjectDigest: string;
+    packageName: string;
+    version: string;
+    providerVersionRevision: string;
+    integrity: string;
+    tarballDigest: string;
+    verificationMode: VerificationObservation["mode"];
+    verificationIdentityDigest: string;
+    verificationStatementDigest: string;
+    verifiedAt: string;
+};
+export type RegistryEndpointBinding = {
+    schemaVersion: 1;
+    registryId: string;
+    registryConfigRevision: string;
+    origin: string;
+    resolvedAt: string;
+    expiresAt: string;
+    bindingDigest: string;
+};
+export declare class CatalogSourceError extends Error {
+    readonly code: "REGISTRY_CONFIG_INVALID" | "REGISTRY_ENDPOINT_BINDING_INVALID" | "PACKAGE_RECEIPT_INVALID" | "REGISTRY_PROVIDER_INVALID" | "REGISTRY_CREDENTIAL_INVALID" | "REMOTE_PACKAGE_VERIFICATION_FAILED";
+    constructor(code: "REGISTRY_CONFIG_INVALID" | "REGISTRY_ENDPOINT_BINDING_INVALID" | "PACKAGE_RECEIPT_INVALID" | "REGISTRY_PROVIDER_INVALID" | "REGISTRY_CREDENTIAL_INVALID" | "REMOTE_PACKAGE_VERIFICATION_FAILED", message: string);
+}
+export declare function createRegistryConfigRelease(input: Omit<RegistryConfigRelease, "schemaVersion" | "revision">): RegistryConfigRelease;
+export declare function parseRegistryConfigRelease(value: unknown): RegistryConfigRelease;
+export declare function createRegistryEndpointBinding(input: Omit<RegistryEndpointBinding, "schemaVersion" | "bindingDigest">, config: RegistryConfigRelease): RegistryEndpointBinding;
+export declare function parseRegistryEndpointBinding(value: unknown, config: RegistryConfigRelease): RegistryEndpointBinding;
+export declare function createRegistryProviderRelease(input: Omit<RegistryProviderRelease, "schemaVersion" | "revision">): RegistryProviderRelease;
+export declare function parseRegistryProviderRelease(value: unknown): RegistryProviderRelease;
+export declare function validateRegistryCredentialLease(value: RegistryCredentialLease, now: string, minimumRemainingMs?: number): RegistryCredentialLease;
+export declare function verifyRemotePackage(input: {
+    provider: RegistryProviderRelease;
+    registry: RegistryConfigRelease;
+    binding: RegistryEndpointBinding;
+    credential: RegistryCredentialLease;
+    observation: RemotePackageObservation;
+    verification: VerificationObservation;
+    now: string;
+}): RemotePackageVerificationEvidence;
+export declare function createPackageDeliveryReceiptFromEvidence(input: {
+    evidence: RemotePackageVerificationEvidence;
+    registryId: string;
+    access: "restricted" | "private";
+    sourceDeliveryReceiptId: string;
+}): PackageDeliveryReceipt;
+export declare function createPackageDeliveryReceipt(input: Omit<PackageDeliveryReceipt, "schemaVersion" | "receiptId">): PackageDeliveryReceipt;
+export declare function parsePackageDeliveryReceipt(value: unknown): PackageDeliveryReceipt;
+type Principal = {
+    tenantId: string;
+    subjectId: string;
+    roles: Array<"catalog-consumer" | "catalog-maintainer">;
+};
+type FindingCode = "PACKAGE_SOURCE_CONFLICT" | "PACKAGE_SOURCE_RECEIPT_MISSING" | "PACKAGE_SOURCE_REGISTRY_INVALID" | "PACKAGE_SOURCE_SCOPE_DENIED" | "PACKAGE_SOURCE_INTEGRITY_MISMATCH";
+type SafeSummary = {
+    capabilityId: string;
+    version: string;
+    status: "diagnostic-only";
+};
+type IsolatedSummary = {
+    capabilityId: string;
+    version: string;
+    code: FindingCode;
+};
+export declare function resolveCapabilityCandidates(input: {
+    releases: CapabilityBundleReleaseV2[];
+    receipts: PackageDeliveryReceipt[];
+    registryConfigs: RegistryConfigRelease[];
+    principal: Principal;
+    consumerProfile: string;
+}): {
+    candidates: CapabilityBundleReleaseV2[];
+    diagnostics: SafeSummary[];
+    isolated: IsolatedSummary[];
+    findings: FindingCode[];
+};
+export {};
+//# sourceMappingURL=catalog-source.d.ts.map

package/dist/catalog-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-source.d.ts","sourceRoot":"","sources":["../src/catalog-source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAoB,MAAM,yBAAyB,CAAC;AAI3F,MAAM,MAAM,qBAAqB,GAAG;IAClC,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,cAAc,EAAE;QAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,kBAAkB,GAAG,gBAAgB,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpI,YAAY,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACvF,MAAM,EAAE,SAAS,GAAG,UAAU,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,mBAAmB,GAAG,mBAAmB,GAAG,yBAAyB,GAAG,+BAA+B,GAAG,kCAAkC,CAAC;IACzJ,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,GAAG,cAAc,GAAG,kBAAkB,GAAG,MAAM,CAAC;IAChE,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,gBAAgB,CAAC;IAClG,YAAY,EAAE,kBAAkB,GAAG,UAAU,GAAG,iBAAiB,GAAG,MAAM,CAAC;IAC3E,YAAY,EAAE;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAA;KAAE,CAAC;CACpH,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,cAAc,GAAG,gBAAgB,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,MAAM,CAAC;IAChC,MAAM,EAAE,WAAW,GAAG,UAAU,CAAC;IACjC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,IAAI,EAAE,kBAAkB,GAAG,UAAU,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,sFAAsF;AACtF,MAAM,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAE7D,MAAM,MAAM,iCAAiC,GAAG;IAC9C,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB,EAAE,MAAM,CAAC;IAChC,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,uBAAuB,EAAE,MAAM,CAAC;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,MAAM,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;IAClD,0BAA0B,EAAE,MAAM,CAAC;IACnC,2BAA2B,EAAE,MAAM,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,qBAAa,kBAAmB,SAAQ,KAAK;IAC/B,QAAQ,CAAC,IAAI,EAAE,yBAAyB,GAAG,mCAAmC,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,6BAA6B,GAAG,oCAAoC;gBAAtM,IAAI,EAAE,yBAAyB,GAAG,mCAAmC,GAAG,yBAAyB,GAAG,2BAA2B,GAAG,6BAA6B,GAAG,oCAAoC,EAAE,OAAO,EAAE,MAAM;CAC7O;AA6BD,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,eAAe,GAAG,UAAU,CAAC,GAAG,qBAAqB,CAInI;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CAOhF;AAUD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,eAAe,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,qBAAqB,GAAG,uBAAuB,CAK7K;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,uBAAuB,CAOnH;AAOD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,eAAe,GAAG,UAAU,CAAC,GAAG,uBAAuB,CAMzI;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAOpF;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,uBAAuB,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,SAAS,GAAG,uBAAuB,CAGjJ;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,uBAAuB,CAAC;IAAC,QAAQ,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,uBAAuB,CAAC;IAAC,UAAU,EAAE,uBAAuB,CAAC;IAAC,WAAW,EAAE,wBAAwB,CAAC;IAAC,YAAY,EAAE,uBAAuB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,iCAAiC,CAStT;AAED,wBAAgB,wCAAwC,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,iCAAiC,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAAC,uBAAuB,EAAE,MAAM,CAAA;CAAE,GAAG,sBAAsB,CAM9N;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,eAAe,GAAG,WAAW,CAAC,GAAG,sBAAsB,CAIvI;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAOlF;AAED,KAAK,SAAS,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC,kBAAkB,GAAG,oBAAoB,CAAC,CAAA;CAAE,CAAC;AAClH,KAAK,WAAW,GAAG,yBAAyB,GAAG,gCAAgC,GAAG,iCAAiC,GAAG,6BAA6B,GAAG,mCAAmC,CAAC;AAC1L,KAAK,WAAW,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,CAAC;AACxF,KAAK,eAAe,GAAG;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAAC;AAWpF,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IAAE,QAAQ,EAAE,yBAAyB,EAAE,CAAC;IAAC,QAAQ,EAAE,sBAAsB,EAAE,CAAC;IAAC,eAAe,EAAE,qBAAqB,EAAE,CAAC;IAAC,SAAS,EAAE,SAAS,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,yBAAyB,EAAE,CAAC;IAAC,WAAW,EAAE,WAAW,EAAE,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,QAAQ,EAAE,WAAW,EAAE,CAAA;CAAE,CA4CxV"}

package/dist/catalog-source.js

@@ -0,0 +1,252 @@
+import { canonicalize, sha256Digest } from "./integrity.js";
+import { calculateReleaseIntegrity } from "./release-loader.js";
+export class CatalogSourceError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+const digestPattern = /^sha256:[a-f0-9]{64}$/;
+const integrityPattern = /^sha512-[A-Za-z0-9+/]{86}==$/;
+const exactVersionPattern = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$/;
+const registryPattern = /^registry\.[a-z0-9][a-z0-9.-]{1,126}$/;
+const packagePattern = /^@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*$/;
+const identityPattern = /^[a-z][a-z0-9._:-]{2,127}$/;
+const providerRevisionPattern = /^[A-Za-z0-9][A-Za-z0-9._:-]{2,255}$/;
+function exactKeys(value, expected) {
+    const actual = Object.keys(value).sort();
+    return actual.length === expected.length && actual.every((key, index) => key === [...expected].sort()[index]);
+}
+function validRegistryContent(value) {
+    if (!exactKeys(value, ["registryId", "tenantId", "origin", "scopes", "authentication", "capabilities", "status"]) || !registryPattern.test(value.registryId) || !identityPattern.test(value.tenantId) || value.scopes.length === 0 || value.scopes.length > 32 || value.scopes.some((scope, index) => !/^@[a-z0-9][a-z0-9._-]*$/.test(scope) || value.scopes.indexOf(scope) !== index))
+        return false;
+    if (!exactKeys(value.authentication, value.authentication.credentialRef === undefined ? ["kind"] : ["kind", "credentialRef"]) || !exactKeys(value.capabilities, ["read", "write", "provenance", "staging"]))
+        return false;
+    if (!["workload-identity", "short-lived-token", "restricted-token", "anonymous-test"].includes(value.authentication.kind) || (value.authentication.kind === "anonymous-test") !== (value.authentication.credentialRef === undefined))
+        return false;
+    if (value.authentication.credentialRef !== undefined && !identityPattern.test(value.authentication.credentialRef))
+        return false;
+    let origin;
+    try {
+        origin = new URL(value.origin);
+    }
+    catch {
+        return false;
+    }
+    if (origin.username || origin.password || origin.search || origin.hash || !origin.pathname.endsWith("/") || origin.pathname.includes("..") || /%2f|%5c/iu.test(origin.pathname))
+        return false;
+    const loopback = origin.hostname === "127.0.0.1" || origin.hostname === "localhost" || origin.hostname === "[::1]";
+    if (value.authentication.kind === "anonymous-test" && (!loopback || origin.protocol !== "http:"))
+        return false;
+    if (value.authentication.kind !== "anonymous-test" && origin.protocol !== "https:")
+        return false;
+    return typeof value.capabilities.read === "boolean" && typeof value.capabilities.write === "boolean" && typeof value.capabilities.provenance === "boolean" && typeof value.capabilities.staging === "boolean" && (value.status === "enabled" || value.status === "disabled");
+}
+export function createRegistryConfigRelease(input) {
+    if (!validRegistryContent(input))
+        throw new CatalogSourceError("REGISTRY_CONFIG_INVALID", "Registry configuration is invalid");
+    const content = { schemaVersion: 1, ...input };
+    return Object.freeze({ ...content, scopes: Object.freeze([...input.scopes]), authentication: Object.freeze({ ...input.authentication }), capabilities: Object.freeze({ ...input.capabilities }), revision: sha256Digest(canonicalize(content)) });
+}
+export function parseRegistryConfigRelease(value) {
+    const candidate = value;
+    if (typeof candidate !== "object" || candidate === null || !exactKeys(candidate, ["schemaVersion", "revision", "registryId", "tenantId", "origin", "scopes", "authentication", "capabilities", "status"]) || candidate.schemaVersion !== 1 || !digestPattern.test(candidate.revision))
+        throw new CatalogSourceError("REGISTRY_CONFIG_INVALID", "Registry configuration is invalid");
+    const { schemaVersion: _schemaVersion, revision, ...input } = candidate;
+    const recreated = createRegistryConfigRelease(input);
+    if (recreated.revision !== revision)
+        throw new CatalogSourceError("REGISTRY_CONFIG_INVALID", "Registry configuration has been modified");
+    return candidate;
+}
+function endpointMatchesPolicy(config, originValue) {
+    let policy;
+    let origin;
+    try {
+        policy = new URL(config.origin);
+        origin = new URL(originValue);
+    }
+    catch {
+        return false;
+    }
+    if (origin.username || origin.password || origin.search || origin.hash || origin.pathname !== policy.pathname)
+        return false;
+    if (origin.protocol !== policy.protocol || origin.hostname !== policy.hostname)
+        return false;
+    return config.authentication.kind === "anonymous-test" || origin.port === policy.port;
+}
+export function createRegistryEndpointBinding(input, config) {
+    const parsedConfig = parseRegistryConfigRelease(config);
+    if (!exactKeys(input, ["registryId", "registryConfigRevision", "origin", "resolvedAt", "expiresAt"]) || input.registryId !== parsedConfig.registryId || input.registryConfigRevision !== parsedConfig.revision || !endpointMatchesPolicy(parsedConfig, input.origin) || Number.isNaN(Date.parse(input.resolvedAt)) || Number.isNaN(Date.parse(input.expiresAt)) || Date.parse(input.expiresAt) <= Date.parse(input.resolvedAt))
+        throw new CatalogSourceError("REGISTRY_ENDPOINT_BINDING_INVALID", "Registry endpoint binding is invalid");
+    const content = { schemaVersion: 1, ...input };
+    return Object.freeze({ ...content, bindingDigest: sha256Digest(canonicalize(content)) });
+}
+export function parseRegistryEndpointBinding(value, config) {
+    const candidate = value;
+    if (typeof candidate !== "object" || candidate === null || !exactKeys(candidate, ["schemaVersion", "bindingDigest", "registryId", "registryConfigRevision", "origin", "resolvedAt", "expiresAt"]) || candidate.schemaVersion !== 1 || !digestPattern.test(candidate.bindingDigest))
+        throw new CatalogSourceError("REGISTRY_ENDPOINT_BINDING_INVALID", "Registry endpoint binding is invalid");
+    const { schemaVersion: _schemaVersion, bindingDigest, ...input } = candidate;
+    const recreated = createRegistryEndpointBinding(input, config);
+    if (recreated.bindingDigest !== bindingDigest)
+        throw new CatalogSourceError("REGISTRY_ENDPOINT_BINDING_INVALID", "Registry endpoint binding has been modified");
+    return candidate;
+}
+function validReceiptContent(value) {
+    const expected = ["registryId", "registryConfigRevision", "packageName", "version", "integrity", "tarballDigest", "access", "provenance", "sourceDeliveryReceiptId", "verifiedAt", ...(value.verificationIdentityDigest === undefined ? [] : ["verificationIdentityDigest"])];
+    return exactKeys(value, expected) && registryPattern.test(value.registryId) && digestPattern.test(value.registryConfigRevision) && packagePattern.test(value.packageName) && exactVersionPattern.test(value.version) && integrityPattern.test(value.integrity) && digestPattern.test(value.tarballDigest) && digestPattern.test(value.sourceDeliveryReceiptId) && !Number.isNaN(Date.parse(value.verifiedAt)) && (value.access === "restricted" || value.access === "private") && ["registry-attested", "external-attested", "local-readback-verified", "development-readback-verified", "registry-verified-no-attestation"].includes(value.provenance) && (value.provenance !== "registry-verified-no-attestation" ? value.verificationIdentityDigest !== undefined && digestPattern.test(value.verificationIdentityDigest) : value.verificationIdentityDigest === undefined);
+}
+export function createRegistryProviderRelease(input) {
+    if (!exactKeys(input, ["providerId", "kind", "deploymentDigest", "authentication", "verification", "capabilities"]) || !identityPattern.test(input.providerId) || !digestPattern.test(input.deploymentDigest) || !["cnpmcore", "npm-registry", "aws-codeartifact", "fake"].includes(input.kind) || !["short-lived-token", "restricted-token", "workload-identity", "anonymous-test"].includes(input.authentication) || !["delivery-receipt", "external", "registry-native", "fake"].includes(input.verification) || !exactKeys(input.capabilities, ["readBack", "versionRevision", "nativeStaging", "deletionRestricted"]) || Object.values(input.capabilities).some((value) => typeof value !== "boolean") || !input.capabilities.readBack || !input.capabilities.versionRevision)
+        throw new CatalogSourceError("REGISTRY_PROVIDER_INVALID", "Registry provider release is invalid");
+    if (input.kind === "aws-codeartifact" && (input.verification !== "external" || input.capabilities.nativeStaging))
+        throw new CatalogSourceError("REGISTRY_PROVIDER_INVALID", "Registry provider release is invalid");
+    if (input.kind === "cnpmcore" && (input.authentication !== "restricted-token" || input.verification !== "delivery-receipt" || input.capabilities.nativeStaging))
+        throw new CatalogSourceError("REGISTRY_PROVIDER_INVALID", "Registry provider release is invalid");
+    const content = { schemaVersion: 1, ...input, capabilities: Object.freeze({ ...input.capabilities }) };
+    return Object.freeze({ ...content, revision: sha256Digest(canonicalize(content)) });
+}
+export function parseRegistryProviderRelease(value) {
+    const candidate = value;
+    if (typeof candidate !== "object" || candidate === null || candidate.schemaVersion !== 1 || !digestPattern.test(candidate.revision) || !exactKeys(candidate, ["schemaVersion", "revision", "providerId", "kind", "deploymentDigest", "authentication", "verification", "capabilities"]))
+        throw new CatalogSourceError("REGISTRY_PROVIDER_INVALID", "Registry provider release is invalid");
+    const { schemaVersion: _schemaVersion, revision, ...input } = candidate;
+    const recreated = createRegistryProviderRelease(input);
+    if (recreated.revision !== revision)
+        throw new CatalogSourceError("REGISTRY_PROVIDER_INVALID", "Registry provider release has been modified");
+    return candidate;
+}
+export function validateRegistryCredentialLease(value, now, minimumRemainingMs = 60_000) {
+    if (!exactKeys(value, ["schemaVersion", "kind", "secret", "subjectDigest", "issuedAt", "expiresAt"]) || value.schemaVersion !== 1 || !["bearer-token", "anonymous-test"].includes(value.kind) || typeof value.secret !== "string" || value.secret.length < 1 || value.secret.length > 16_384 || /[\r\n\0]/u.test(value.secret) || !digestPattern.test(value.subjectDigest) || [value.issuedAt, value.expiresAt, now].some((item) => Number.isNaN(Date.parse(item))) || Date.parse(value.issuedAt) > Date.parse(now) || Date.parse(value.expiresAt) - Date.parse(now) < minimumRemainingMs)
+        throw new CatalogSourceError("REGISTRY_CREDENTIAL_INVALID", "Registry credential lease is invalid");
+    return value;
+}
+export function verifyRemotePackage(input) {
+    const provider = parseRegistryProviderRelease(input.provider);
+    const registry = parseRegistryConfigRelease(input.registry);
+    const binding = parseRegistryEndpointBinding(input.binding, registry);
+    const credential = validateRegistryCredentialLease(input.credential, input.now);
+    const observationKeys = ["schemaVersion", "providerReleaseRevision", "registryId", "packageName", "version", "providerVersionRevision", "status", "origin", "assetName", "integrity", "tarballDigest", "observedAt"];
+    const verificationKeys = ["schemaVersion", "mode", "issuerDigest", "buildIdentityDigest", "subjectDigest", "statementDigest", "verifiedAt"];
+    const observation = input.observation;
+    const verification = input.verification;
+    if (!exactKeys(observation, observationKeys) || observation.schemaVersion !== 1 || observation.providerReleaseRevision !== provider.revision || observation.registryId !== registry.registryId || !packagePattern.test(observation.packageName) || !exactVersionPattern.test(observation.version) || !providerRevisionPattern.test(observation.providerVersionRevision) || observation.status !== "published" || observation.origin !== "internal-publish" || typeof observation.assetName !== "string" || !observation.assetName.endsWith(".tgz") || !integrityPattern.test(observation.integrity) || !digestPattern.test(observation.tarballDigest) || Number.isNaN(Date.parse(observation.observedAt)) || Date.parse(observation.observedAt) > Date.parse(input.now))
+        throw new CatalogSourceError("REMOTE_PACKAGE_VERIFICATION_FAILED", "Remote package verification failed");
+    if (!exactKeys(verification, verificationKeys) || verification.schemaVersion !== 1 || verification.mode !== provider.verification || !digestPattern.test(verification.issuerDigest) || !digestPattern.test(verification.buildIdentityDigest) || verification.subjectDigest !== observation.tarballDigest || !digestPattern.test(verification.statementDigest) || Number.isNaN(Date.parse(verification.verifiedAt)) || Date.parse(verification.verifiedAt) > Date.parse(input.now))
+        throw new CatalogSourceError("REMOTE_PACKAGE_VERIFICATION_FAILED", "Remote package verification failed");
+    const content = { schemaVersion: 1, providerReleaseRevision: provider.revision, registryConfigRevision: registry.revision, endpointBindingDigest: binding.bindingDigest, credentialSubjectDigest: credential.subjectDigest, packageName: observation.packageName, version: observation.version, providerVersionRevision: observation.providerVersionRevision, integrity: observation.integrity, tarballDigest: observation.tarballDigest, verificationMode: verification.mode, verificationIdentityDigest: verification.buildIdentityDigest, verificationStatementDigest: verification.statementDigest, verifiedAt: input.now };
+    return Object.freeze({ ...content, evidenceId: sha256Digest(canonicalize(content)) });
+}
+export function createPackageDeliveryReceiptFromEvidence(input) {
+    const evidence = input.evidence;
+    if (!exactKeys(evidence, ["schemaVersion", "evidenceId", "providerReleaseRevision", "registryConfigRevision", "endpointBindingDigest", "credentialSubjectDigest", "packageName", "version", "providerVersionRevision", "integrity", "tarballDigest", "verificationMode", "verificationIdentityDigest", "verificationStatementDigest", "verifiedAt"]) || evidence.schemaVersion !== 1 || !digestPattern.test(evidence.evidenceId) || evidence.evidenceId !== sha256Digest(canonicalize((({ evidenceId: _id, ...content }) => content)(evidence))))
+        throw new CatalogSourceError("REMOTE_PACKAGE_VERIFICATION_FAILED", "Remote package verification failed");
+    if (evidence.verificationMode === "delivery-receipt" && evidence.verificationStatementDigest !== input.sourceDeliveryReceiptId)
+        throw new CatalogSourceError("REMOTE_PACKAGE_VERIFICATION_FAILED", "Remote package verification failed");
+    const provenance = evidence.verificationMode === "delivery-receipt" ? "local-readback-verified" : evidence.verificationMode === "external" ? "external-attested" : "registry-attested";
+    return createPackageDeliveryReceipt({ registryId: input.registryId, registryConfigRevision: evidence.registryConfigRevision, packageName: evidence.packageName, version: evidence.version, integrity: evidence.integrity, tarballDigest: evidence.tarballDigest, access: input.access, provenance, verificationIdentityDigest: evidence.verificationIdentityDigest, sourceDeliveryReceiptId: input.sourceDeliveryReceiptId, verifiedAt: evidence.verifiedAt });
+}
+export function createPackageDeliveryReceipt(input) {
+    if (!validReceiptContent(input))
+        throw new CatalogSourceError("PACKAGE_RECEIPT_INVALID", "Package delivery receipt is invalid");
+    const content = { schemaVersion: 1, ...input };
+    return Object.freeze({ ...content, receiptId: sha256Digest(canonicalize(content)) });
+}
+export function parsePackageDeliveryReceipt(value) {
+    const candidate = value;
+    if (typeof candidate !== "object" || candidate === null || candidate.schemaVersion !== 1 || !digestPattern.test(candidate.receiptId))
+        throw new CatalogSourceError("PACKAGE_RECEIPT_INVALID", "Package delivery receipt is invalid");
+    const { schemaVersion: _schemaVersion, receiptId, ...input } = candidate;
+    const recreated = createPackageDeliveryReceipt(input);
+    if (recreated.receiptId !== receiptId)
+        throw new CatalogSourceError("PACKAGE_RECEIPT_INVALID", "Package delivery receipt has been modified");
+    return candidate;
+}
+function sourceMatches(source, receipt, registry, tenantId) {
+    if (registry.status !== "enabled" || registry.tenantId !== tenantId || registry.revision !== receipt.registryConfigRevision || !registry.capabilities.read)
+        return "PACKAGE_SOURCE_REGISTRY_INVALID";
+    const scope = source.packageName.slice(0, source.packageName.indexOf("/"));
+    if (!registry.scopes.includes(scope))
+        return "PACKAGE_SOURCE_SCOPE_DENIED";
+    if (receipt.provenance === "registry-verified-no-attestation" || receipt.provenance === "development-readback-verified" || receipt.verificationIdentityDigest === undefined)
+        return "PACKAGE_SOURCE_INTEGRITY_MISMATCH";
+    if (receipt.registryId !== source.registryId || receipt.packageName !== source.packageName || receipt.version !== source.version || receipt.integrity !== source.integrity || receipt.tarballDigest !== source.tarballDigest || receipt.receiptId !== source.deliveryReceiptId)
+        return "PACKAGE_SOURCE_INTEGRITY_MISMATCH";
+    return null;
+}
+export function resolveCapabilityCandidates(input) {
+    const maintainer = input.principal.roles.includes("catalog-maintainer");
+    const consumer = maintainer || input.principal.roles.includes("catalog-consumer");
+    if (!consumer || !identityPattern.test(input.principal.tenantId) || !identityPattern.test(input.principal.subjectId))
+        return { candidates: [], diagnostics: [], isolated: [], findings: [] };
+    const candidates = [];
+    const diagnostics = [];
+    const isolated = [];
+    const findings = new Set();
+    const conflicts = new Set();
+    const byIdentity = new Map();
+    for (const release of input.releases) {
+        const identity = `${release.capabilityId}@${release.version}`;
+        const values = byIdentity.get(identity) ?? new Set();
+        values.add(release.integrity);
+        byIdentity.set(identity, values);
+        if (values.size > 1)
+            conflicts.add(identity);
+    }
+    for (const release of input.releases) {
+        const identity = `${release.capabilityId}@${release.version}`;
+        if (conflicts.has(identity) || calculateReleaseIntegrity((({ integrity: _integrity, ...content }) => content)(release)) !== release.integrity) {
+            if (maintainer)
+                isolated.push({ capabilityId: release.capabilityId, version: release.version, code: "PACKAGE_SOURCE_CONFLICT" });
+            findings.add("PACKAGE_SOURCE_CONFLICT");
+            continue;
+        }
+        const profileAllowed = release.consumerProfile === input.consumerProfile || (release.consumerProfile === "any-project" && (release.dependencies?.profiles ?? []).includes(input.consumerProfile));
+        if (!profileAllowed)
+            continue;
+        if (release.availability.maturity === "candidate") {
+            if (maintainer)
+                diagnostics.push({ capabilityId: release.capabilityId, version: release.version, status: "diagnostic-only" });
+            continue;
+        }
+        if (release.availability.maturity === "withdrawn")
+            continue;
+        let code = null;
+        for (const source of release.packageSources) {
+            const registryRaw = input.registryConfigs.find((item) => item.registryId === source.registryId);
+            const receiptRaw = input.receipts.find((item) => item.receiptId === source.deliveryReceiptId);
+            let registry;
+            let receipt;
+            try {
+                if (registryRaw === undefined)
+                    throw new Error();
+                registry = parseRegistryConfigRelease(registryRaw);
+            }
+            catch {
+                code = "PACKAGE_SOURCE_REGISTRY_INVALID";
+                break;
+            }
+            try {
+                if (receiptRaw === undefined)
+                    throw new Error();
+                receipt = parsePackageDeliveryReceipt(receiptRaw);
+            }
+            catch {
+                code = "PACKAGE_SOURCE_RECEIPT_MISSING";
+                break;
+            }
+            code = sourceMatches(source, receipt, registry, input.principal.tenantId);
+            if (code !== null)
+                break;
+        }
+        if (code === null)
+            candidates.push(release);
+        else {
+            findings.add(code);
+            if (maintainer)
+                isolated.push({ capabilityId: release.capabilityId, version: release.version, code });
+        }
+    }
+    return { candidates, diagnostics, isolated, findings: maintainer ? [...findings].sort() : [] };
+}
+//# sourceMappingURL=catalog-source.js.map

package/dist/catalog-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catalog-source.js","sourceRoot":"","sources":["../src/catalog-source.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AA0GhE,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACtB;IAArB,YAAqB,IAAsM,EAAE,OAAe;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAA1O,SAAI,GAAJ,IAAI,CAAkM;IAAqC,CAAC;CAClQ;AAED,MAAM,aAAa,GAAG,uBAAuB,CAAC;AAC9C,MAAM,gBAAgB,GAAG,8BAA8B,CAAC;AACxD,MAAM,mBAAmB,GAAG,qDAAqD,CAAC;AAClF,MAAM,eAAe,GAAG,uCAAuC,CAAC;AAChE,MAAM,cAAc,GAAG,+CAA+C,CAAC;AACvE,MAAM,eAAe,GAAG,4BAA4B,CAAC;AACrD,MAAM,uBAAuB,GAAG,qCAAqC,CAAC;AAEtE,SAAS,SAAS,CAAC,KAAa,EAAE,QAA2B;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAgE;IAC5F,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrY,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1N,IAAI,CAAE,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9P,IAAI,KAAK,CAAC,cAAc,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC;QAAE,OAAO,KAAK,CAAC;IAChI,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9L,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;IACnH,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,gBAAgB,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/G,IAAI,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjG,OAAO,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;AAC/Q,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAgE;IAC1G,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,mCAAmC,CAAC,CAAC;IAC/H,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAwB,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3Q,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,SAAS,GAAG,KAA8B,CAAC;IACjD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC,IAAI,SAAS,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,mCAAmC,CAAC,CAAC;IACpX,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;IACxE,MAAM,SAAS,GAAG,2BAA2B,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,0CAA0C,CAAC,CAAC;IACzI,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,qBAAqB,CAAC,MAA6B,EAAE,WAAmB;IAC/E,IAAI,MAAW,CAAC;IAAC,IAAI,MAAW,CAAC;IACjC,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC/F,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5H,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC7F,OAAO,MAAM,CAAC,cAAc,CAAC,IAAI,KAAK,gBAAgB,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAuE,EAAE,MAA6B;IAClJ,MAAM,YAAY,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,YAAY,CAAC,UAAU,IAAI,KAAK,CAAC,sBAAsB,KAAK,YAAY,CAAC,QAAQ,IAAI,CAAC,qBAAqB,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,EAAE,sCAAsC,CAAC,CAAC;IAC1gB,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc,EAAE,MAA6B;IACxF,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,YAAY,EAAE,wBAAwB,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,IAAI,SAAS,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,EAAE,sCAAsC,CAAC,CAAC;IAC9X,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;IAC7E,MAAM,SAAS,GAAG,6BAA6B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC/D,IAAI,SAAS,CAAC,aAAa,KAAK,aAAa;QAAE,MAAM,IAAI,kBAAkB,CAAC,mCAAmC,EAAE,6CAA6C,CAAC,CAAC;IAChK,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAkE;IAC7F,MAAM,QAAQ,GAAG,CAAC,YAAY,EAAE,wBAAwB,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,eAAe,EAAE,QAAQ,EAAE,YAAY,EAAE,yBAAyB,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC;IAC9Q,OAAO,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,IAAK,CAAC,mBAAmB,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,+BAA+B,EAAE,kCAAkC,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,kCAAkC,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,KAAK,SAAS,CAAC,CAAC;AAC51B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAkE;IAC9G,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAE,CAAC,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,mBAAmB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAE,CAAC,kBAAkB,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC,UAAU,EAAE,iBAAiB,EAAE,eAAe,EAAE,oBAAoB,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;IACv3B,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,KAAK,CAAC,YAAY,KAAK,UAAU,IAAI,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;IACpN,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,kBAAkB,IAAI,KAAK,CAAC,YAAY,KAAK,kBAAkB,IAAI,KAAK,CAAC,YAAY,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;IACnQ,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC,EAAE,CAAC;IAChH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,eAAe,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,sCAAsC,CAAC,CAAC;IAC3X,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;IACxE,MAAM,SAAS,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ;QAAE,MAAM,IAAI,kBAAkB,CAAC,2BAA2B,EAAE,6CAA6C,CAAC,CAAC;IAC9I,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,KAA8B,EAAE,GAAW,EAAE,kBAAkB,GAAG,MAAM;IACtH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,IAAI,CAAE,CAAC,cAAc,EAAE,gBAAgB,CAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,kBAAkB;QAAE,MAAM,IAAI,kBAAkB,CAAC,6BAA6B,EAAE,sCAAsC,CAAC,CAAC;IAC1qB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAA+O;IACjR,MAAM,QAAQ,GAAG,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,MAAM,OAAO,GAAG,4BAA4B,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAAC,MAAM,UAAU,GAAG,+BAA+B,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACnR,MAAM,eAAe,GAAG,CAAC,eAAe,EAAE,yBAAyB,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,yBAAyB,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC;IACrN,MAAM,gBAAgB,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,cAAc,EAAE,qBAAqB,EAAE,eAAe,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC5I,MAAM,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;IAAC,MAAM,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;IAC/E,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,eAAe,CAAC,IAAI,WAAW,CAAC,aAAa,KAAK,CAAC,IAAI,WAAW,CAAC,uBAAuB,KAAK,QAAQ,CAAC,QAAQ,IAAI,WAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,WAAW,CAAC,uBAAuB,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,kBAAkB,IAAI,OAAO,WAAW,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,oCAAoC,CAAC,CAAC;IACl1B,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,gBAAgB,CAAC,IAAI,YAAY,CAAC,aAAa,KAAK,CAAC,IAAI,YAAY,CAAC,IAAI,KAAK,QAAQ,CAAC,YAAY,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,YAAY,CAAC,aAAa,KAAK,WAAW,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,oCAAoC,CAAC,CAAC;IAC5jB,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,uBAAuB,EAAE,QAAQ,CAAC,QAAQ,EAAE,sBAAsB,EAAE,QAAQ,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,CAAC,aAAa,EAAE,uBAAuB,EAAE,UAAU,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,uBAAuB,EAAE,WAAW,CAAC,uBAAuB,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,aAAa,EAAE,gBAAgB,EAAE,YAAY,CAAC,IAAI,EAAE,0BAA0B,EAAE,YAAY,CAAC,mBAAmB,EAAE,2BAA2B,EAAE,YAAY,CAAC,eAAe,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;IACzmB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,KAA6I;IACpM,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;IAChC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,eAAe,EAAE,YAAY,EAAE,yBAAyB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,aAAa,EAAE,SAAS,EAAE,yBAAyB,EAAE,WAAW,EAAE,eAAe,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,YAAY,CAAC,CAAC,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC,UAAU,KAAK,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,oCAAoC,CAAC,CAAC;IAC3nB,IAAI,QAAQ,CAAC,gBAAgB,KAAK,kBAAkB,IAAI,QAAQ,CAAC,2BAA2B,KAAK,KAAK,CAAC,uBAAuB;QAAE,MAAM,IAAI,kBAAkB,CAAC,oCAAoC,EAAE,oCAAoC,CAAC,CAAC;IACzO,MAAM,UAAU,GAAG,QAAQ,CAAC,gBAAgB,KAAK,kBAAkB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,mBAAmB,CAAC;IACvL,OAAO,4BAA4B,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,0BAA0B,EAAE,QAAQ,CAAC,0BAA0B,EAAE,uBAAuB,EAAE,KAAK,CAAC,uBAAuB,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;AACjc,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAkE;IAC7G,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,qCAAqC,CAAC,CAAC;IAChI,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,CAAU,EAAE,GAAG,KAAK,EAAE,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,SAAS,GAAG,KAA+B,CAAC;IAClD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,qCAAqC,CAAC,CAAC;IACrO,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;IACzE,MAAM,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,kBAAkB,CAAC,yBAAyB,EAAE,4CAA4C,CAAC,CAAC;IAC7I,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,SAAS,aAAa,CAAC,MAAwB,EAAE,OAA+B,EAAE,QAA+B,EAAE,QAAgB;IACjI,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,sBAAsB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI;QAAE,OAAO,iCAAiC,CAAC;IACrM,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,6BAA6B,CAAC;IAC3E,IAAI,OAAO,CAAC,UAAU,KAAK,kCAAkC,IAAI,OAAO,CAAC,UAAU,KAAK,+BAA+B,IAAI,OAAO,CAAC,0BAA0B,KAAK,SAAS;QAAE,OAAO,mCAAmC,CAAC;IACxN,IAAI,OAAO,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,iBAAiB;QAAE,OAAO,mCAAmC,CAAC;IAC3T,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAA6K;IACvN,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,UAAU,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAClF,IAAI,CAAC,QAAQ,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC7L,MAAM,UAAU,GAAgC,EAAE,CAAC;IACnD,MAAM,WAAW,GAAkB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAe,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAuB,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9H,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9D,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,yBAAyB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;YAC9I,IAAI,UAAU;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACjI,QAAQ,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;YAAC,SAAS;QACpD,CAAC;QACD,MAAM,cAAc,GAAG,OAAO,CAAC,eAAe,KAAK,KAAK,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,eAAe,KAAK,aAAa,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;QAClM,IAAI,CAAC,cAAc;YAAE,SAAS;QAC9B,IAAI,OAAO,CAAC,YAAY,CAAC,QAAQ,KAAK,WAAW,EAAE,CAAC;YAClD,IAAI,UAAU;gBAAE,WAAW,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;YAC9H,SAAS;QACX,CAAC;QACD,IAAI,OAAO,CAAC,YAAY,CAAC,QAAQ,KAAK,WAAW;YAAE,SAAS;QAC5D,IAAI,IAAI,GAAuB,IAAI,CAAC;QACpC,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,CAAC,CAAC;YAChG,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAC9F,IAAI,QAA+B,CAAC;YAAC,IAAI,OAA+B,CAAC;YACzE,IAAI,CAAC;gBAAC,IAAI,WAAW,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAAC,QAAQ,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;YAAC,CAAC;YAC7G,MAAM,CAAC;gBAAC,IAAI,GAAG,iCAAiC,CAAC;gBAAC,MAAM;YAAC,CAAC;YAC1D,IAAI,CAAC;gBAAC,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAAC,OAAO,GAAG,2BAA2B,CAAC,UAAU,CAAC,CAAC;YAAC,CAAC;YAC3G,MAAM,CAAC;gBAAC,IAAI,GAAG,gCAAgC,CAAC;gBAAC,MAAM;YAAC,CAAC;YACzD,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YAC1E,IAAI,IAAI,KAAK,IAAI;gBAAE,MAAM;QAC3B,CAAC;QACD,IAAI,IAAI,KAAK,IAAI;YAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aACvC,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,IAAI,UAAU;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACjG,CAAC"}

package/dist/code-module-publication.d.ts

@@ -0,0 +1,113 @@
+export type PublicationTargetKind = "private" | "public";
+export type PublishableModuleRelease = Readonly<{
+    schemaVersion: 1;
+    moduleId: string;
+    packageName: string;
+    version: string;
+    visibility: "private" | "public";
+    manifestDigest: string;
+    artifactDigest: string;
+    artifactIntegrity: string;
+    fileCount: number;
+    unpackedBytes: number;
+    license: string;
+    sbomDigest: string;
+    auditHighCount: number;
+    provenance: boolean;
+    revision: number;
+}>;
+export type RegistryPublicationBinding = Readonly<{
+    schemaVersion: 1;
+    target: PublicationTargetKind;
+    registryId: string;
+    origin: string;
+    authentication: "restricted-token" | "trusted-publishing";
+    credentialReference: string;
+    revision: number;
+}>;
+export type PublicationPlan = Readonly<{
+    schemaVersion: 1;
+    planId: string;
+    planDigest: string;
+    module: PublishableModuleRelease;
+    target: RegistryPublicationBinding;
+    remotePrecondition: "absent" | "same-digest";
+    authorizationDigest: string;
+    createdAt: string;
+    expiresAt: string;
+    approved: boolean;
+}>;
+export type PublicationReceipt = Readonly<{
+    schemaVersion: 1;
+    receiptId: string;
+    planId: string;
+    planDigest: string;
+    registryId: string;
+    packageName: string;
+    version: string;
+    artifactDigest: string;
+    outcome: "published" | "already-present";
+    publishedAt: string;
+}>;
+export type RemotePublicationObservation = Readonly<{
+    packageName: string;
+    version: string;
+    artifactDigest: string;
+    artifactIntegrity: string;
+}>;
+export declare class CodeModulePublicationError extends Error {
+    readonly code: "MODULE_NOT_ELIGIBLE" | "PUBLICATION_TARGET_INVALID" | "PUBLICATION_VERSION_CONFLICT" | "PUBLICATION_PLAN_INVALID" | "PUBLICATION_PLAN_EXPIRED" | "PUBLICATION_AUTHORIZATION_CHANGED" | "PUBLICATION_CREDENTIAL_UNAVAILABLE" | "PUBLICATION_REGISTRY_WRITE_FAILED" | "PUBLICATION_OUTCOME_UNKNOWN";
+    constructor(code: "MODULE_NOT_ELIGIBLE" | "PUBLICATION_TARGET_INVALID" | "PUBLICATION_VERSION_CONFLICT" | "PUBLICATION_PLAN_INVALID" | "PUBLICATION_PLAN_EXPIRED" | "PUBLICATION_AUTHORIZATION_CHANGED" | "PUBLICATION_CREDENTIAL_UNAVAILABLE" | "PUBLICATION_REGISTRY_WRITE_FAILED" | "PUBLICATION_OUTCOME_UNKNOWN");
+}
+export declare function assertPublishableModule(value: PublishableModuleRelease): void;
+export declare function publishableRegistryOrigin(origin: string): boolean;
+export declare function assertRegistryBinding(value: RegistryPublicationBinding): void;
+export declare function publicationEligibility(module: PublishableModuleRelease, target: PublicationTargetKind): Readonly<{
+    eligible: boolean;
+    findings: string[];
+}>;
+export interface PublicationRegistryPort {
+    observe(packageName: string, version: string): Promise<RemotePublicationObservation | undefined>;
+    publish(input: Readonly<{
+        module: PublishableModuleRelease;
+        binding: RegistryPublicationBinding;
+        credentialSecret: string;
+    }>): Promise<void>;
+}
+export declare function compilePublicationPlan(input: Readonly<{
+    module: PublishableModuleRelease;
+    target: RegistryPublicationBinding;
+    remote?: RemotePublicationObservation;
+    authorizationDigest: string;
+    createdAt: string;
+    expiresAt: string;
+}>): PublicationPlan;
+export declare function approvePublicationPlan(plan: PublicationPlan): PublicationPlan;
+export declare function applyPublicationPlan(input: Readonly<{
+    plan: PublicationPlan;
+    expectedPlanDigest: string;
+    currentModule: PublishableModuleRelease;
+    currentBinding: RegistryPublicationBinding;
+    authorizationDigest: string;
+    credentialSecret: string;
+    appliedAt: string;
+    registry: PublicationRegistryPort;
+}>): Promise<PublicationReceipt>;
+export declare class FakePublicationRegistry implements PublicationRegistryPort {
+    #private;
+    readonly expectedCredential: string;
+    readonly failAfterWrite: boolean;
+    constructor(expectedCredential: string, failAfterWrite?: boolean);
+    observe(name: string, version: string): Promise<Readonly<{
+        packageName: string;
+        version: string;
+        artifactDigest: string;
+        artifactIntegrity: string;
+    }> | undefined>;
+    publish({ module, credentialSecret }: Readonly<{
+        module: PublishableModuleRelease;
+        binding: RegistryPublicationBinding;
+        credentialSecret: string;
+    }>): Promise<void>;
+}
+//# sourceMappingURL=code-module-publication.d.ts.map

package/dist/code-module-publication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-module-publication.d.ts","sourceRoot":"","sources":["../src/code-module-publication.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,GAAC,SAAS,GAAC,QAAQ,CAAC;AACrD,MAAM,MAAM,wBAAwB,GAAC,QAAQ,CAAC;IAAC,aAAa,EAAC,CAAC,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,SAAS,GAAC,QAAQ,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,OAAO,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;CAAC,CAAC,CAAC;AACtV,MAAM,MAAM,0BAA0B,GAAC,QAAQ,CAAC;IAAC,aAAa,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,qBAAqB,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,kBAAkB,GAAC,oBAAoB,CAAC;IAAA,mBAAmB,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,MAAM,CAAA;CAAC,CAAC,CAAC;AAClO,MAAM,MAAM,eAAe,GAAC,QAAQ,CAAC;IAAC,aAAa,EAAC,CAAC,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,wBAAwB,CAAC;IAAA,MAAM,EAAC,0BAA0B,CAAC;IAAA,kBAAkB,EAAC,QAAQ,GAAC,aAAa,CAAC;IAAA,mBAAmB,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,OAAO,CAAA;CAAC,CAAC,CAAC;AAClR,MAAM,MAAM,kBAAkB,GAAC,QAAQ,CAAC;IAAC,aAAa,EAAC,CAAC,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,MAAM,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,UAAU,EAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,WAAW,GAAC,iBAAiB,CAAC;IAAA,WAAW,EAAC,MAAM,CAAA;CAAC,CAAC,CAAC;AAC/O,MAAM,MAAM,4BAA4B,GAAC,QAAQ,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAA,OAAO,EAAC,MAAM,CAAC;IAAA,cAAc,EAAC,MAAM,CAAC;IAAA,iBAAiB,EAAC,MAAM,CAAA;CAAC,CAAC,CAAC;AAGtI,qBAAa,0BAA2B,SAAQ,KAAK;IAAa,QAAQ,CAAC,IAAI,EAAC,qBAAqB,GAAC,4BAA4B,GAAC,8BAA8B,GAAC,0BAA0B,GAAC,0BAA0B,GAAC,mCAAmC,GAAC,oCAAoC,GAAC,mCAAmC,GAAC,6BAA6B;gBAAvR,IAAI,EAAC,qBAAqB,GAAC,4BAA4B,GAAC,8BAA8B,GAAC,0BAA0B,GAAC,0BAA0B,GAAC,mCAAmC,GAAC,oCAAoC,GAAC,mCAAmC,GAAC,6BAA6B;CAAsD;AAGxZ,wBAAgB,uBAAuB,CAAC,KAAK,EAAC,wBAAwB,QAAqtB;AAG3xB,wBAAgB,yBAAyB,CAAC,MAAM,EAAC,MAAM,WAA4N;AACnR,wBAAgB,qBAAqB,CAAC,KAAK,EAAC,0BAA0B,QAA0e;AAChjB,wBAAgB,sBAAsB,CAAC,MAAM,EAAC,wBAAwB,EAAC,MAAM,EAAC,qBAAqB;;;GAAmV;AACtb,MAAM,WAAW,uBAAuB;IAAC,OAAO,CAAC,WAAW,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,GAAE,OAAO,CAAC,4BAA4B,GAAC,SAAS,CAAC,CAAC;IAAA,OAAO,CAAC,KAAK,EAAC,QAAQ,CAAC;QAAC,MAAM,EAAC,wBAAwB,CAAC;QAAA,OAAO,EAAC,0BAA0B,CAAC;QAAA,gBAAgB,EAAC,MAAM,CAAA;KAAC,CAAC,GAAE,OAAO,CAAC,IAAI,CAAC,CAAA;CAAC;AACxQ,wBAAgB,sBAAsB,CAAC,KAAK,EAAC,QAAQ,CAAC;IAAC,MAAM,EAAC,wBAAwB,CAAC;IAAA,MAAM,EAAC,0BAA0B,CAAC;IAAA,MAAM,CAAC,EAAC,4BAA4B,CAAC;IAAA,mBAAmB,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,CAAC,GAAE,eAAe,CAAivB;AAC99B,wBAAgB,sBAAsB,CAAC,IAAI,EAAC,eAAe,GAAE,eAAe,CAA+C;AAC3H,wBAAsB,oBAAoB,CAAC,KAAK,EAAC,QAAQ,CAAC;IAAC,IAAI,EAAC,eAAe,CAAC;IAAA,kBAAkB,EAAC,MAAM,CAAC;IAAA,aAAa,EAAC,wBAAwB,CAAC;IAAA,cAAc,EAAC,0BAA0B,CAAC;IAAA,mBAAmB,EAAC,MAAM,CAAC;IAAA,gBAAgB,EAAC,MAAM,CAAC;IAAA,SAAS,EAAC,MAAM,CAAC;IAAA,QAAQ,EAAC,uBAAuB,CAAA;CAAC,CAAC,GAAE,OAAO,CAAC,kBAAkB,CAAC,CAAggE;AAC9zE,qBAAa,uBAAwB,YAAW,uBAAuB;;IAAkE,QAAQ,CAAC,kBAAkB,EAAC,MAAM;IAAC,QAAQ,CAAC,cAAc;gBAAjD,kBAAkB,EAAC,MAAM,EAAU,cAAc,UAAM;IAAS,OAAO,CAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM;qBAhBrL,MAAM;iBAAS,MAAM;wBAAgB,MAAM;2BAAmB,MAAM;;IAgByK,OAAO,CAAC,EAAC,MAAM,EAAC,gBAAgB,EAAC,EAAC,QAAQ,CAAC;QAAC,MAAM,EAAC,wBAAwB,CAAC;QAAA,OAAO,EAAC,0BAA0B,CAAC;QAAA,gBAAgB,EAAC,MAAM,CAAA;KAAC,CAAC;CAAuiB"}