@catladder/cli 5.1.1 → 5.1.3

package/dist/bundles/catenv/index.js

@@ -2678,10 +2678,19 @@ const TRIGGER_WORKFLOWS = {
     },
     taggedRelease: {
         name: "🛠️ catladder release",
-        // tags pushed with the default GITHUB_TOKEN (as the release job
-        // does) don't trigger `on: push: tags` — the release job therefore
-        // also dispatches this workflow explicitly for the new tag
+        // tags pushed with the default GITHUB_TOKEN don't trigger `on:
+        // push: tags`, and the release job's deploy-key push carries
+        // [skip ci] — the release job therefore dispatches this workflow
+        // explicitly for the new tag (the only run for it)
         on: { push: { tags: ["v*"] }, workflow_dispatch: {} },
+        // one run per tag at a time, never cancelled: should a second run
+        // for the same tag ever start (a redispatch, or a project whose
+        // own .releaserc drops the [skip ci] marker), it waits instead of
+        // deploying on top of the first
+        concurrency: {
+            group: "catladder-release-${{ github.ref_name }}",
+            "cancel-in-progress": false,
+        },
     },
 };
 class GithubBackend {
@@ -7169,7 +7178,7 @@ exports.isOfBuildType = isOfBuildType;
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.getCatciGeneratedFiles = exports.GENERATED_CATCI_FOLDER = void 0;
+exports.getCatciGeneratedFiles = exports.makeCatciGeneratedFiles = exports.GENERATED_CATCI_FOLDER = void 0;
 const fs_1 = __nccwpck_require__(79896);
 const path_1 = __nccwpck_require__(16928);
 exports.GENERATED_CATCI_FOLDER = ".catladder-generated/catci";
@@ -7197,14 +7206,29 @@ const getShippedCatciBundle = () => {
     return found;
 };
 /**
- * the catci files to materialize into the generated folder
+ * the files that make up the materialized catci folder for a given
+ * bundle content
  */
-const getCatciGeneratedFiles = () => [
+const makeCatciGeneratedFiles = (bundle) => [
     {
         path: (0, path_1.join)(exports.GENERATED_CATCI_FOLDER, "index.js"),
-        content: (0, fs_1.readFileSync)(getShippedCatciBundle(), "utf-8"),
+        content: bundle,
+    },
+    {
+        // the bundle is commonjs (ncc output using `__dirname`), but node
+        // resolves the module format from the nearest package.json: a
+        // consumer whose root package.json declares `"type": "module"`
+        // would parse the bundle as ESM and crash on the first `__dirname`.
+        // a sibling package.json pins the folder to commonjs regardless.
+        path: (0, path_1.join)(exports.GENERATED_CATCI_FOLDER, "package.json"),
+        content: `${JSON.stringify({ type: "commonjs" }, null, 2)}\n`,
     },
 ];
+exports.makeCatciGeneratedFiles = makeCatciGeneratedFiles;
+/**
+ * the catci files to materialize into the generated folder
+ */
+const getCatciGeneratedFiles = () => (0, exports.makeCatciGeneratedFiles)((0, fs_1.readFileSync)(getShippedCatciBundle(), "utf-8"));
 exports.getCatciGeneratedFiles = getCatciGeneratedFiles;
 //# sourceMappingURL=shippedCatci.js.map
 

package/dist/bundles/cli/index.js

@@ -869,6 +869,102 @@ exports.checkGithubImageCasing = checkGithubImageCasing;
 
 /***/ }),
 
+/***/ 64286:
+/***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
+
+"use strict";
+
+Object.defineProperty(exports, "__esModule", ({ value: true }));
+exports.checkGithubReleaseWorkflow = exports.findReleaseJobImageDrift = void 0;
+const promises_1 = __nccwpck_require__(91943);
+const path_1 = __nccwpck_require__(16928);
+const pipeline_1 = __nccwpck_require__(53695);
+const yaml_1 = __nccwpck_require__(99292);
+const WORKFLOWS_FOLDER = ".github/workflows";
+/** the job name of the release job, see githubReleaseJobs.ts */
+const RELEASE_JOB_NAME = "create release";
+const releaseJobImage = (workflow) => {
+    var _a;
+    const job = Object.values((_a = workflow.jobs) !== null && _a !== void 0 ? _a : {}).find((job) => (job === null || job === void 0 ? void 0 : job.name) === RELEASE_JOB_NAME);
+    const container = job === null || job === void 0 ? void 0 : job.container;
+    if (typeof container === "string")
+        return container;
+    if (container && typeof container === "object" && "image" in container) {
+        return `${container.image}`;
+    }
+    return null;
+};
+/**
+ * compares the release job image of every generated workflow carrying
+ * one against the committed workflow of the same name. The job images
+ * are tagged by a content hash of their definition, so a differing tag
+ * means the committed workflow runs an older release image.
+ */
+const findReleaseJobImageDrift = (generated, committed) => Object.entries(generated).flatMap(([file, workflow]) => {
+    var _a;
+    const expected = releaseJobImage(workflow);
+    if (!expected)
+        return [];
+    const content = committed[file];
+    let committedImage = null;
+    if (content) {
+        try {
+            committedImage = releaseJobImage((_a = (0, yaml_1.parse)(content)) !== null && _a !== void 0 ? _a : {});
+        }
+        catch (_b) {
+            committedImage = null;
+        }
+    }
+    return committedImage === expected
+        ? []
+        : [{ file, expected, committed: committedImage }];
+});
+exports.findReleaseJobImageDrift = findReleaseJobImageDrift;
+/**
+ * the release job image in the committed workflows must be the one this
+ * catladder version generates. The image tag encodes the image
+ * definition, so an older tag means an older release script — which is
+ * more than cosmetics: the semantic-release image before this check
+ * pushed with the workflow token and ignored the release deploy key,
+ * so every release on a repository with merge gating failed on GH013
+ * while `project setup` and the deploy-key checks reported all green.
+ *
+ * Needs no `gh` login — only the config and the committed files.
+ */
+const checkGithubReleaseWorkflow = async (report, config) => {
+    if (!(0, pipeline_1.getEnabledPipelineTypes)(config).includes("github"))
+        return;
+    report.section("github release workflow");
+    let generated;
+    try {
+        const images = new pipeline_1.JobImagesPlan("github", config.images, await (0, pipeline_1.resolveGithubRegistryImage)(config));
+        generated = await new pipeline_1.GithubBackend().createWorkflows(config, images);
+    }
+    catch (e) {
+        report.warn(`could not generate the github workflows (${e.message})`);
+        return;
+    }
+    const files = Object.keys(generated).filter((file) => releaseJobImage(generated[file]));
+    const committed = {};
+    for (const file of files) {
+        committed[file] = await (0, promises_1.readFile)((0, path_1.join)(WORKFLOWS_FOLDER, file), "utf8").catch(() => null);
+    }
+    const drift = (0, exports.findReleaseJobImageDrift)(generated, committed);
+    if (drift.length === 0) {
+        report.ok(`release job image up to date in ${files.length} generated workflow(s)`);
+        return;
+    }
+    for (const { file, expected, committed } of drift) {
+        report.fail(committed
+            ? `${WORKFLOWS_FOLDER}/${file}: the release job runs ${committed}, this catladder version generates ${expected} — the committed workflow was generated by an older catladder (its release script may push with the workflow token, ignoring the release deploy key)`
+            : `${WORKFLOWS_FOLDER}/${file}: missing or without a '${RELEASE_JOB_NAME}' job (expected image ${expected})`, "run: catenv (and commit the regenerated workflows)");
+    }
+};
+exports.checkGithubReleaseWorkflow = checkGithubReleaseWorkflow;
+//# sourceMappingURL=checkGithubReleaseWorkflow.js.map
+
+/***/ }),
+
 /***/ 26904:
 /***/ ((__unused_webpack_module, exports, __nccwpck_require__) => {
 
@@ -1014,6 +1110,7 @@ const getProjectConfig_1 = __nccwpck_require__(70478);
 const checkCloudRun_1 = __nccwpck_require__(55869);
 const checkGithub_1 = __nccwpck_require__(88480);
 const checkGithubImageCasing_1 = __nccwpck_require__(12668);
+const checkGithubReleaseWorkflow_1 = __nccwpck_require__(64286);
 const checkGitlab_1 = __nccwpck_require__(26904);
 const checkStore_1 = __nccwpck_require__(62878);
 const DoctorReport_1 = __nccwpck_require__(87354);
@@ -1050,6 +1147,7 @@ const doctorProject = async (instance, onlyComponents) => {
     }
     await (0, checkCloudRun_1.checkCloudRun)(report, contexts);
     await (0, checkGithubImageCasing_1.checkGithubImageCasing)(report, config);
+    await (0, checkGithubReleaseWorkflow_1.checkGithubReleaseWorkflow)(report, config);
     await (0, checkGithub_1.checkGithub)(report, config);
     report.summarize();
 };
@@ -1094,7 +1192,10 @@ exports.MERGE_GATING_RULESET_NAME = "catladder merge gating";
 exports.RELEASE_DEPLOY_KEY_TITLE = "catladder release";
 /**
  * actions secret holding the deploy key's private half; the generated
- * release jobs pass it to catci, which pushes over ssh when it is set
+ * release jobs pass it into the job env and both release methods push
+ * over ssh with it when it is set — changesets from catci itself,
+ * semantic-release via the ssh repository url catci prepares for it
+ * (see src/release/githubDeployKey.ts)
  */
 exports.RELEASE_DEPLOY_KEY_SECRET = "CATLADDER_RELEASE_KEY";
 /** the ruleset `project setup` creates (and restores on drift) */
@@ -9129,10 +9230,19 @@ const TRIGGER_WORKFLOWS = {
     },
     taggedRelease: {
         name: "🛠️ catladder release",
-        // tags pushed with the default GITHUB_TOKEN (as the release job
-        // does) don't trigger `on: push: tags` — the release job therefore
-        // also dispatches this workflow explicitly for the new tag
+        // tags pushed with the default GITHUB_TOKEN don't trigger `on:
+        // push: tags`, and the release job's deploy-key push carries
+        // [skip ci] — the release job therefore dispatches this workflow
+        // explicitly for the new tag (the only run for it)
         on: { push: { tags: ["v*"] }, workflow_dispatch: {} },
+        // one run per tag at a time, never cancelled: should a second run
+        // for the same tag ever start (a redispatch, or a project whose
+        // own .releaserc drops the [skip ci] marker), it waits instead of
+        // deploying on top of the first
+        concurrency: {
+            group: "catladder-release-${{ github.ref_name }}",
+            "cancel-in-progress": false,
+        },
     },
 };
 class GithubBackend {
@@ -13620,7 +13730,7 @@ exports.isOfBuildType = isOfBuildType;
 "use strict";
 
 Object.defineProperty(exports, "__esModule", ({ value: true }));
-exports.getCatciGeneratedFiles = exports.GENERATED_CATCI_FOLDER = void 0;
+exports.getCatciGeneratedFiles = exports.makeCatciGeneratedFiles = exports.GENERATED_CATCI_FOLDER = void 0;
 const fs_1 = __nccwpck_require__(79896);
 const path_1 = __nccwpck_require__(16928);
 exports.GENERATED_CATCI_FOLDER = ".catladder-generated/catci";
@@ -13648,14 +13758,29 @@ const getShippedCatciBundle = () => {
     return found;
 };
 /**
- * the catci files to materialize into the generated folder
+ * the files that make up the materialized catci folder for a given
+ * bundle content
  */
-const getCatciGeneratedFiles = () => [
+const makeCatciGeneratedFiles = (bundle) => [
     {
         path: (0, path_1.join)(exports.GENERATED_CATCI_FOLDER, "index.js"),
-        content: (0, fs_1.readFileSync)(getShippedCatciBundle(), "utf-8"),
+        content: bundle,
+    },
+    {
+        // the bundle is commonjs (ncc output using `__dirname`), but node
+        // resolves the module format from the nearest package.json: a
+        // consumer whose root package.json declares `"type": "module"`
+        // would parse the bundle as ESM and crash on the first `__dirname`.
+        // a sibling package.json pins the folder to commonjs regardless.
+        path: (0, path_1.join)(exports.GENERATED_CATCI_FOLDER, "package.json"),
+        content: `${JSON.stringify({ type: "commonjs" }, null, 2)}\n`,
     },
 ];
+exports.makeCatciGeneratedFiles = makeCatciGeneratedFiles;
+/**
+ * the catci files to materialize into the generated folder
+ */
+const getCatciGeneratedFiles = () => (0, exports.makeCatciGeneratedFiles)((0, fs_1.readFileSync)(getShippedCatciBundle(), "utf-8"));
 exports.getCatciGeneratedFiles = getCatciGeneratedFiles;
 //# sourceMappingURL=shippedCatci.js.map
 

package/dist/bundles/runner-images/semantic-release/Dockerfile

@@ -4,7 +4,9 @@
 # (@semantic-release/git and @semantic-release/changelog need node >=24.15).
 FROM node:24-alpine
 
-RUN apk add --no-cache bash git git-lfs
+# openssh: on github the release job pushes with the release deploy key
+# over ssh (see scripts/semanticRelease)
+RUN apk add --no-cache bash git git-lfs openssh-client
 
 # add semantic release
 # NOTE: pin every dependency exactly. These are the semantic-release@25 line

package/dist/bundles/runner-images/semantic-release/scripts/semanticRelease

@@ -39,7 +39,34 @@ fi
 
 echo "doing semantic release"
 
+SEMANTIC_RELEASE_ARGS=()
+# the commit message suffix, see the @semantic-release/git config below
+RELEASE_COMMIT_SUFFIX=""
 if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # [skip ci] on github only: a push with the deploy key triggers
+  # workflows (unlike a push with GITHUB_TOKEN), and neither the release
+  # commit nor the tag needs a push-triggered run — the taggedRelease
+  # workflow is dispatched explicitly at the end, the marker keeps it
+  # the only run (same as the changesets path). On gitlab the tag
+  # pipeline MUST fire natively, so no marker there.
+  RELEASE_COMMIT_SUFFIX=" [skip ci]"
+
+  if [ -n "$CATLADDER_RELEASE_KEY" ]; then
+    # merge gating (a ruleset requiring the `catladder ✅` check on the
+    # default branch) rejects the release push unless it comes from the
+    # release deploy key — the workflow token can never bypass a
+    # ruleset. catci writes the key, points git's ssh at it and checks
+    # that the key reaches the repository (a clear failure here instead
+    # of a GH013 inside @semantic-release/git). The ssh url has to be
+    # passed explicitly: semantic-release takes package.json's
+    # `repository` over origin, and origin is the token-authenticated
+    # https url actions/checkout left behind.
+    RELEASE_REPOSITORY_URL=$(node "$CATCI" release github-deploy-key-remote)
+    SEMANTIC_RELEASE_ARGS+=(--repository-url "$RELEASE_REPOSITORY_URL")
+  else
+    echo "CATLADDER_RELEASE_KEY not set — pushing with the workflow token (fails on a repository with merge gating: run 'catladder project setup')"
+  fi
+
   # the github counterpart of the gitlab plugin below: it creates the
   # entry on the releases page with the generated notes. Everything
   # beyond that is switched off on purpose — commenting on the
@@ -62,6 +89,10 @@ else
     "@semantic-release/gitlab"'
 fi
 
+# NOTE: a project bringing its own .releaserc has to keep "[skip ci]" in
+# the git plugin's commit message on github (see RELEASE_COMMIT_SUFFIX),
+# otherwise a deploy-key push starts the main workflow for the release
+# commit and a second taggedRelease run for the tag.
 if [ ! -e .releaserc ]; then
   cat >.releaserc <<EOF
 {
@@ -98,7 +129,7 @@ if [ ! -e .releaserc ]; then
     # loop-prevention rule keys on the literal "chore(release)" prefix, so keep
     # this literal. Don't "fix" it back to \${branch.type}.
     ["@semantic-release/git", {
-      "message": "chore(release): \${nextRelease.version}\n\n\${nextRelease.notes}"
+      "message": "chore(release): \${nextRelease.version}${RELEASE_COMMIT_SUFFIX}\n\n\${nextRelease.notes}"
     }]${PUBLISH_PLUGIN}
     ],
   "branches": [
@@ -124,11 +155,13 @@ if [ "$GITHUB_ACTIONS" = "true" ]; then
   TAGS_BEFORE=$(git tag --list 'v[0-9]*')
 fi
 
-semantic-release
+semantic-release "${SEMANTIC_RELEASE_ARGS[@]}"
 
 # tags pushed with the default GITHUB_TOKEN don't trigger `on: push:
-# tags` workflows (github's recursion guard) — dispatch the
-# taggedRelease workflow explicitly for a tag semantic-release created
+# tags` workflows (github's recursion guard), and a deploy-key push
+# carries [skip ci] (see above) — dispatch the taggedRelease workflow
+# explicitly for a tag semantic-release created, whichever way it was
+# pushed
 if [ "$GITHUB_ACTIONS" = "true" ] && [ -f "$CATCI" ]; then
   if [ -z "$TAGS_BEFORE" ]; then
     NEW_TAG=$(git tag --list 'v[0-9]*' | tail -n1)

package/dist/bundles/skills/catladder-migrate-ci-backend/SKILL.md

@@ -183,10 +183,15 @@ skill for the exact command surface.
 - **GitLab** needs a `GL_TOKEN` project access token (named
   `semantic-release`) to push the release commit and tag. It is created
   and rotated by `yarn catladder project setup`.
-- **GitHub** needs nothing extra — the release jobs use the built-in
-  `github.token`. Tags pushed by that token do not retrigger workflows,
-  so the release job dispatches the tagged-release workflow explicitly;
-  that is built in and needs no configuration.
+- **GitHub** needs the release deploy key that `yarn catladder project
+  setup` provisions together with the merge gating (Step 9): the release
+  job pushes the release commit and tag over ssh with it, because the
+  built-in `github.token` can never bypass the required `catladder ✅`
+  check on the default branch (the push fails with GH013 otherwise).
+  Without merge gating the job falls back to the token. The release
+  commit carries `[skip ci]` and the release job dispatches the
+  tagged-release workflow explicitly (one run per tag); that is built
+  in and needs no configuration.
 - **Only one backend should own releases at a time.** Both backends
   generate release jobs, and with `releases: { when: "auto" }` both would
   try to tag the same commit. During the parallel phase, agree with the
@@ -287,9 +292,13 @@ now-wrong `gitRemote`, regenerate once more, and finish with
   token bypass rulesets, so setup provisions a write deploy key
   ("catladder release", private half in the `CATLADDER_RELEASE_KEY`
   actions secret; deploy keys never expire) that the release job
-  pushes with over ssh. Classic branch protection has no bypass list
+  pushes with over ssh — with both release methods, semantic-release
+  and changesets. Classic branch protection has no bypass list
   at all, which is why setup uses a ruleset and migrates old
-  classic-protection gating away. `project doctor` verifies all of it.
+  classic-protection gating away. `project doctor` verifies all of it,
+  including that the committed release workflow runs the release image
+  of the installed catladder (an older semantic-release image pushed
+  with the token and ignored the key — regenerate with `catenv`).
   Required reviews stay a human choice.
 - Tell the team where the pipeline lives now and how manual actions
   work there (on GitHub, manual jobs are dispatch workflows in the

package/dist/bundles/skills/catladder-pipelines/SKILL.md

@@ -70,8 +70,9 @@ jobs). Their definitions are materialized into
 `.catladder-generated/images/` and built in the project's own registry
 under `catladder/` (content-hashed, rebuilt only on change).
 `.catladder-generated/catci/` holds a small bundled CI companion used by
-generated jobs (e.g. the release security audit) — all generated, never
-edit.
+generated jobs (e.g. the release security audit) plus a `package.json`
+pinning the folder to CommonJS (needed when the project's root
+`package.json` has `"type": "module"`) — all generated, never edit.
 
 Projects can declare their own job images under `images` in
 `catladder.ts` (`🐳 image <name>` build jobs, pushed to `job-images/` in

package/dist/bundles/skills/catladder-releases/SKILL.md

@@ -128,6 +128,20 @@ the `security` commands in the `catladder-cli` reference.
   MR adding a changeset describing the accumulated work.
 - Wrong version bump → check commit types (semantic-release) or the bump
   levels in the changeset files (changesets).
+- GitHub: the push is rejected with `GH013 … Required status check
+  "catladder ✅" is expected` (or GH006) → the release push has to use
+  the release deploy key, the only actor that bypasses the merge-gating
+  ruleset. `yarn catladder project setup` provisions it (deploy key
+  `catladder release` + secret `CATLADDER_RELEASE_KEY`), `yarn catladder
+  project doctor` verifies it — including that the committed release
+  workflow runs the current release image; an older semantic-release
+  image pushed with the workflow token and ignored the key (regenerate
+  with `yarn catenv` and commit).
+- GitHub, semantic-release with a project-provided `.releaserc`: keep
+  `[skip ci]` in the `@semantic-release/git` commit message. The
+  deploy-key push triggers workflows, and without the marker the release
+  commit starts a main run and the tag a second tagged run next to the
+  one the release job dispatches.
 - Tag pushed but nothing on the releases page → with `changesets` the
   entry is created via the host api after the push and never fails the
   job (the release itself is done); look for the `could not create the

package/dist/packages/pipeline/src/backends/github/GithubBackend.js

@@ -42,10 +42,19 @@ const TRIGGER_WORKFLOWS = {
     },
     taggedRelease: {
         name: "🛠️ catladder release",
-        // tags pushed with the default GITHUB_TOKEN (as the release job
-        // does) don't trigger `on: push: tags` — the release job therefore
-        // also dispatches this workflow explicitly for the new tag
+        // tags pushed with the default GITHUB_TOKEN don't trigger `on:
+        // push: tags`, and the release job's deploy-key push carries
+        // [skip ci] — the release job therefore dispatches this workflow
+        // explicitly for the new tag (the only run for it)
         on: { push: { tags: ["v*"] }, workflow_dispatch: {} },
+        // one run per tag at a time, never cancelled: should a second run
+        // for the same tag ever start (a redispatch, or a project whose
+        // own .releaserc drops the [skip ci] marker), it waits instead of
+        // deploying on top of the first
+        concurrency: {
+            group: "catladder-release-${{ github.ref_name }}",
+            "cancel-in-progress": false,
+        },
     },
 };
 class GithubBackend {

package/dist/packages/pipeline/src/backends/github/GithubBackend.js.map

@@ -1 +1 @@
-{"version":3,"file":"GithubBackend.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/github/GithubBackend.ts"],"names":[],"mappings":";;;AAAA,0CAAkD;AAClD,+BAA4B;AAC5B,gEAA6D;AAE7D,+CAA2D;AAI3D,+CAA6D;AAC7D,mDAA6D;AAC7D,oCAA8C;AAC9C,yDAI4B;AAC5B,oEAAiE;AACjE,uDAA8D;AAC9D,2DAA4D;AAC5D,2DAAkE;AAClE,2DAK6B;AAC7B,+CAAyE;AAEzE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C;;;GAGG;AACH,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAE3C,sEAAsE;AACtE,oEAAoE;AACpE,oEAAoE;AACpE,kEAAkE;AAClE,iEAAiE;AACjE,MAAM,iBAAiB,GAGnB;IACF,EAAE,EAAE;QACF,IAAI,EAAE,sBAAsB;QAC5B,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE;QACtE,WAAW,EAAE;YACX,KAAK,EAAE,6CAA6C;YACpD,oBAAoB,EAAE,IAAI;SAC3B;KACF;IACD,UAAU,EAAE;QACV,IAAI,EAAE,oBAAoB;QAC1B,6CAA6C;QAC7C,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;KACrC;IACD,aAAa,EAAE;QACb,IAAI,EAAE,uBAAuB;QAC7B,gEAAgE;QAChE,mEAAmE;QACnE,2DAA2D;QAC3D,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;KACtD;CACF,CAAC;AAEF,MAAa,aAAa;IAA1B;QACW,SAAI,GAAG,QAAiB,CAAC;IA4UpC,CAAC;IA1UC,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC,GAAG,CACf,OAAO;aACJ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,iBAAM,EAAC,IAAA,WAAI,EAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CACvD,CAAC;QACF,MAAM,IAAA,aAAE,EAAC,mCAAqB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,qEAAqE;QACrE,oEAAoE;QACpE,kDAAkD;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAClC,MAAM,EACN,MAAM,IAAA,0CAA0B,EAAC,MAAM,CAAC,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,+BAAiB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtE,OAAO;YACL,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1D,IAAI,EAAE,IAAA,WAAI,EAAC,gBAAgB,EAAE,QAAQ,CAAC;gBACtC,OAAO,EAAE,QAA8C;aACxD,CAAC,CAAC;YACH,6DAA6D;YAC7D,GAAG,OAAO,CAAC,iBAAiB,EAAE;YAC9B,GAAG,MAAM,CAAC,iBAAiB,EAAE;YAC7B,gEAAgE;YAChE,GAAG,IAAA,qCAAsB,GAAE;SAC5B,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,aAAsB;QAC7D,OAAO,IAAI,6BAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,MAAc,EACd,SAAwB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EACrD,UAA6B,IAAI,+BAAiB,EAAE;;QAEpD,MAAM,SAAS,GAAmC,EAAE,CAAC;QAErD,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,WAAW,GAAG;YAClB,GAAG,IAAA,0CAA4B,EAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC1D,GAAG,IAAA,0BAAkB,EAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe;SACzD,CAAC;QAEF,MAAM,cAAc,GAA8B,EAAE,CAAC;QACrD,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,yDAAyD;QACzD,MAAM,iBAAiB,GAAyC;YAC9D,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7D,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;SAClE,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,8BAAqB,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAa,EAAC;gBAClC,MAAM;gBACN,OAAO;gBACP,YAAY,EAAE,IAAI,CAAC,IAAI;aACxB,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,IAAA,uCAAoB,EAAC,OAAO,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,IAAA,qCAAkB,EAAC,OAAO,CAAC,CAAC;YAEhD,mEAAmE;YACnE,yCAAyC;YACzC,yDAAyD;YACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAGxB,CAAC;YACJ,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CACpD,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CACjC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1B,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,IAAA,gCAAa,EACnC,OAAO,EACP,GAAG,EACH,OAAO,EACP,iBAAiB,EACjB,MAAM,EACN,OAAO,EACP,WAAW,CACZ,CAAC;gBACF,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,CACL,CAAC;YAEF,oEAAoE;YACpE,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;gBACjE,IAAI,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;oBAClC,cAAc,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;oBAC/B,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,iEAAiE;YACjE,mBAAmB;YACnB,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;iBACtE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAErB,iEAAiE;YACjE,qEAAqE;YACrE,+DAA+D;YAC/D,oEAAoE;YACpE,iEAAiE;YACjE,8DAA8D;YAC9D,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,kEAAkE;YAClE,mEAAmE;YACnE,wDAAwD;YACxD,+DAA+D;YAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,MAAA,SAAS,CAAC,KAAK,mCAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,IAAI,IAAI;wBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;wBACnB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;YACpD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,GAAuB,CAAC;gBAC5B,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;oBACzC,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,+BAA+B;oBAChE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;wBACnB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAChC,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACjB,KAAK,MAAM,IAAI,IAAI,MAAA,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,0CAAE,SAAS,CAAC,KAAK,mCAAI,EAAE,EAAE,CAAC;wBAC/D,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;4BAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;oBAC/D,CAAC;oBACD,KAAK,MAAM,SAAS,IAAI,MAAA,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,EAAE,EAAE,CAAC;wBAClD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAChE,CAAC;YACF,MAAM,IAAI,GAA8B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACX,yDAAyD;oBACzD,4DAA4D;oBAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CACxB,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CACjD,EAAE,CAAC;wBACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;wBACvC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;wBAC5B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;6BAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;6BAC/C,IAAI,EAAE;6BACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,IAAI,GAAG,CAAC;6BACxC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;gBACvB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,OAAO,CAAC;gBAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAA,6CAAyB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC7B,4DAA4D;gBAC5D,uBAAuB;gBACvB,MAAM,CAAC,MAAM,CACX,IAAI,EACJ,IAAA,wCAAoB,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CACxD,CAAC;gBAEF,6DAA6D;gBAC7D,oDAAoD;gBACpD,SAAS,CAAC,GAAG,qBAAqB,oBAAoB,CAAC;oBACrD,IAAA,kDAA8B,EAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;gBAE9D,+DAA+D;gBAC/D,yCAAyC;gBACzC,MAAM,cAAc,GAAG,IAAA,mDAA+B,EACpD,MAAM,EACN,MAAM,EACN,iBAAiB,CAAC,UAAU,CAAC,IAAI,EACjC,WAAW,CACZ,CAAC;gBACF,IAAI,cAAc,EAAE,CAAC;oBACnB,SAAS,CAAC,GAAG,qBAAqB,sBAAsB,CAAC;wBACvD,cAAc,CAAC;gBACnB,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,EAAE,GAAG,IAAA,2CAAyB,EAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;gBACvE,SAAS,CAAC,GAAG,qBAAqB,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG;oBAClE,GAAG,iBAAiB,CAAC,OAAO,CAAC;oBAC7B,GAAG,mBAAmB,CAAC,MAAM,CAAC;oBAC9B,GAAG,EAAE,WAAW;oBAChB,4DAA4D;oBAC5D,oDAAoD;oBACpD,6DAA6D;oBAC7D,4DAA4D;oBAC5D,0DAA0D;oBAC1D,yDAAyD;oBACzD,wBAAwB;oBACxB,IAAI,EACF,OAAO,KAAK,IAAI;wBACd,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,IAAA,yCAAqB,EAAC,YAAY,CAAC,EAAE;wBAC7D,CAAC,CAAC,YAAY;iBACnB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,SAAS,CAAC,GAAG,qBAAqB,iBAAiB,CAAC,GAAG;gBACrD,IAAI,EAAE,8BAA8B;gBACpC,EAAE,EAAE;oBACF,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE;oBACnC,4DAA4D;oBAC5D,qDAAqD;oBACrD,uDAAuD;oBACvD,cAAc;oBACd,iBAAiB,EAAE;wBACjB,MAAM,EAAE;4BACN,EAAE,EAAE;gCACF,WAAW,EACT,qDAAqD;gCACvD,QAAQ,EAAE,IAAI;gCACd,IAAI,EAAE,QAAQ;6BACf;yBACF;qBACF;iBACF;gBACD,GAAG,mBAAmB,CAAC,MAAM,CAAC;gBAC9B,GAAG,EAAE;oBACH,GAAG,WAAW;oBACd,yDAAyD;oBACzD,uCAAuC;oBACvC,YAAY,EAAE,yCAAyC;iBACxD;gBACD,IAAI,EAAE,EAAE,GAAG,IAAA,2CAAyB,EAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE;aAClE,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAE5D,EAAE,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7C,mEAAmE;YACnE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;YACxC,gEAAgE;YAChE,iEAAiE;YACjE,iCAAiC;YACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACrB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC9C,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE;gBACnB,CAAC,CAAC,EAAE,CAAC;YACT,SAAS,CAAC,GAAG,qBAAqB,GAAG,IAAI,MAAM,CAAC,GAAG;gBACjD,IAAI,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE;gBACvD,EAAE,EAAE;oBACF,iBAAiB,EAAE,UAAU;wBAC3B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,MAAM,EAAE;gCACN,GAAG,EAAE;oCACH,WAAW,EAAE,iBAAiB;oCAC9B,QAAQ,EAAE,IAAI;oCACd,IAAI,EAAE,QAAQ;oCACd,OAAO;iCACR;6BACF;yBACF;iBACN;gBACD,GAAG,mBAAmB,CAAC,MAAM,CAAC;gBAC9B,GAAG,EAAE,WAAW;gBAChB,IAAI,EAAE;oBACJ,GAAG,IAAA,2CAAyB,EAAC,MAAM,CAAC;oBACpC,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;wBAC7C,EAAE;wBACF,UAAU;4BACR,CAAC,CAAC,GAAG;4BACL,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,QAAQ,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;qBACvD,CAAC,CACH;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA7UD,sCA6UC;AAED;;GAEG;AACH,MAAM,mBAAmB,GAAG,CAAC,OAAsB,EAAE,EAAE,CAAC,CAAC;IACvD,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,OAAwB,EAAU,EAAE;IAC5D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY;YACf,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,mBAAmB,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAE,GAAiB,EAAE,EAAE;;IAC9D,OAAA,CAAA,MAAA,GAAG,CAAC,WAAW,0CAAE,MAAM,MAAK,MAAM;QAClC,OAAO,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,CAAC,WAAW,CAAC,OAAO,KAAK,QAAQ,CAAA;CAAA,CAAC;AAE3C;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,GAAiB,EAAE,EAAE,CAC5C,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC;AAsBnD,MAAM,0BAA0B,GAA+B;IAC7D,MAAM,EAAE,qBAAqB;IAC7B,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,uBAAuB;CAClC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAc,EAAE,CACnD,GAAG,CAAC,KAAK,KAAK,MAAM;IAClB,CAAC,CAAC,MAAM;IACR,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU;QACxB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,CAAC"}
+{"version":3,"file":"GithubBackend.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/backends/github/GithubBackend.ts"],"names":[],"mappings":";;;AAAA,0CAAkD;AAClD,+BAA4B;AAC5B,gEAA6D;AAE7D,+CAA2D;AAI3D,+CAA6D;AAC7D,mDAA6D;AAC7D,oCAA8C;AAC9C,yDAI4B;AAC5B,oEAAiE;AACjE,uDAA8D;AAC9D,2DAA4D;AAC5D,2DAAkE;AAClE,2DAK6B;AAC7B,+CAAyE;AAEzE,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAE7C;;;GAGG;AACH,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAE3C,sEAAsE;AACtE,oEAAoE;AACpE,oEAAoE;AACpE,kEAAkE;AAClE,iEAAiE;AACjE,MAAM,iBAAiB,GAGnB;IACF,EAAE,EAAE;QACF,IAAI,EAAE,sBAAsB;QAC5B,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE;QACtE,WAAW,EAAE;YACX,KAAK,EAAE,6CAA6C;YACpD,oBAAoB,EAAE,IAAI;SAC3B;KACF;IACD,UAAU,EAAE;QACV,IAAI,EAAE,oBAAoB;QAC1B,6CAA6C;QAC7C,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE;KACrC;IACD,aAAa,EAAE;QACb,IAAI,EAAE,uBAAuB;QAC7B,+DAA+D;QAC/D,6DAA6D;QAC7D,iEAAiE;QACjE,mDAAmD;QACnD,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE;QACrD,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,gCAAgC;QAChC,WAAW,EAAE;YACX,KAAK,EAAE,0CAA0C;YACjD,oBAAoB,EAAE,KAAK;SAC5B;KACF;CACF,CAAC;AAEF,MAAa,aAAa;IAA1B;QACW,SAAI,GAAG,QAAiB,CAAC;IA4UpC,CAAC;IA1UC,KAAK,CAAC,OAAO;QACX,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAO,EAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,OAAO,CAAC,GAAG,CACf,OAAO;aACJ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;aACxD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAA,iBAAM,EAAC,IAAA,WAAI,EAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,CACvD,CAAC;QACF,MAAM,IAAA,aAAE,EAAC,mCAAqB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,qEAAqE;QACrE,oEAAoE;QACpE,kDAAkD;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,CAClC,MAAM,EACN,MAAM,IAAA,0CAA0B,EAAC,MAAM,CAAC,CACzC,CAAC;QACF,MAAM,OAAO,GAAG,IAAI,+BAAiB,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAEtE,OAAO;YACL,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1D,IAAI,EAAE,IAAA,WAAI,EAAC,gBAAgB,EAAE,QAAQ,CAAC;gBACtC,OAAO,EAAE,QAA8C;aACxD,CAAC,CAAC;YACH,6DAA6D;YAC7D,GAAG,OAAO,CAAC,iBAAiB,EAAE;YAC9B,GAAG,MAAM,CAAC,iBAAiB,EAAE;YAC7B,gEAAgE;YAChE,GAAG,IAAA,qCAAsB,GAAE;SAC5B,CAAC;IACJ,CAAC;IAEO,gBAAgB,CAAC,MAAc,EAAE,aAAsB;QAC7D,OAAO,IAAI,6BAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACpE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,MAAc,EACd,SAAwB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,EACrD,UAA6B,IAAI,+BAAiB,EAAE;;QAEpD,MAAM,SAAS,GAAmC,EAAE,CAAC;QAErD,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,WAAW,GAAG;YAClB,GAAG,IAAA,0CAA4B,EAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC1D,GAAG,IAAA,0BAAkB,EAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,eAAe;SACzD,CAAC;QAEF,MAAM,cAAc,GAA8B,EAAE,CAAC;QACrD,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,oEAAoE;QACpE,iEAAiE;QACjE,yDAAyD;QACzD,MAAM,iBAAiB,GAAyC;YAC9D,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC/D,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;YAC7D,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;SAClE,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,8BAAqB,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAa,EAAC;gBAClC,MAAM;gBACN,OAAO;gBACP,YAAY,EAAE,IAAI,CAAC,IAAI;aACxB,CAAC,CAAC;YAEH,MAAM,iBAAiB,GAAG,IAAA,uCAAoB,EAAC,OAAO,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,IAAA,qCAAkB,EAAC,OAAO,CAAC,CAAC;YAEhD,mEAAmE;YACnE,yCAAyC;YACzC,yDAAyD;YACzD,MAAM,WAAW,GAAG,IAAI,GAAG,EAGxB,CAAC;YACJ,CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,OAAO,CACpD,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CACjC,WAAW,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1B,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,GAAG,IAAA,gCAAa,EACnC,OAAO,EACP,GAAG,EACH,OAAO,EACP,iBAAiB,EACjB,MAAM,EACN,OAAO,EACP,WAAW,CACZ,CAAC;gBACF,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;YACnD,CAAC,CAAC,CACL,CAAC;YAEF,oEAAoE;YACpE,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,EAAE,CAAC;gBACjE,IAAI,eAAe,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;oBAClC,cAAc,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;oBAC/B,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YAED,oEAAoE;YACpE,iEAAiE;YACjE,mBAAmB;YACnB,MAAM,OAAO,GAAG,CAAC,GAAG,WAAW,CAAC;iBAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,CAAC;iBACtE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YAErB,iEAAiE;YACjE,qEAAqE;YACrE,+DAA+D;YAC/D,oEAAoE;YACpE,iEAAiE;YACjE,8DAA8D;YAC9D,sEAAsE;YACtE,qEAAqE;YACrE,mEAAmE;YACnE,kEAAkE;YAClE,mEAAmE;YACnE,wDAAwD;YACxD,+DAA+D;YAC/D,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;YAC/C,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC9C,KAAK,MAAM,IAAI,IAAI,MAAA,SAAS,CAAC,KAAK,mCAAI,EAAE,EAAE,CAAC;oBACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS;oBACrC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAClC,IAAI,IAAI;wBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;;wBACnB,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;YACpD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;gBAC3B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,GAAuB,CAAC;gBAC5B,OAAO,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC;oBACzC,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,GAAG,CAAC,IAAI,CAAC;wBAAE,SAAS,CAAC,+BAA+B;oBAChE,IAAI,CAAC,MAAM,EAAE,CAAC;wBACZ,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;wBACnB,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;oBAChC,CAAC;oBACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBACjB,KAAK,MAAM,IAAI,IAAI,MAAA,MAAA,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,0CAAE,SAAS,CAAC,KAAK,mCAAI,EAAE,EAAE,CAAC;wBAC/D,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC;4BAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB;oBAC/D,CAAC;oBACD,KAAK,MAAM,SAAS,IAAI,MAAA,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,EAAE,EAAE,CAAC;wBAClD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB;oBAChD,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAChE,CAAC;YACF,MAAM,IAAI,GAA8B,EAAE,CAAC;YAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACpC,IAAI,MAAM,EAAE,CAAC;oBACX,yDAAyD;oBACzD,4DAA4D;oBAC5D,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CACxB,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CACjD,EAAE,CAAC;wBACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;wBACvC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;wBAC5B,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC;6BAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC;6BAC/C,IAAI,EAAE;6BACN,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,IAAI,GAAG,CAAC;6BACxC,IAAI,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;gBACvB,CAAC;YACH,CAAC;YACD,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;gBACzB,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;gBACtD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACxB,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,OAAO,CAAC;gBAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBACjC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAED,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAA,6CAAyB,EAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,IAAI,OAAO,KAAK,YAAY,EAAE,CAAC;gBAC7B,4DAA4D;gBAC5D,uBAAuB;gBACvB,MAAM,CAAC,MAAM,CACX,IAAI,EACJ,IAAA,wCAAoB,EAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CACxD,CAAC;gBAEF,6DAA6D;gBAC7D,oDAAoD;gBACpD,SAAS,CAAC,GAAG,qBAAqB,oBAAoB,CAAC;oBACrD,IAAA,kDAA8B,EAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;gBAE9D,+DAA+D;gBAC/D,yCAAyC;gBACzC,MAAM,cAAc,GAAG,IAAA,mDAA+B,EACpD,MAAM,EACN,MAAM,EACN,iBAAiB,CAAC,UAAU,CAAC,IAAI,EACjC,WAAW,CACZ,CAAC;gBACF,IAAI,cAAc,EAAE,CAAC;oBACnB,SAAS,CAAC,GAAG,qBAAqB,sBAAsB,CAAC;wBACvD,cAAc,CAAC;gBACnB,CAAC;YACH,CAAC;YAED,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAG,EAAE,GAAG,IAAA,2CAAyB,EAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;gBACvE,SAAS,CAAC,GAAG,qBAAqB,GAAG,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG;oBAClE,GAAG,iBAAiB,CAAC,OAAO,CAAC;oBAC7B,GAAG,mBAAmB,CAAC,MAAM,CAAC;oBAC9B,GAAG,EAAE,WAAW;oBAChB,4DAA4D;oBAC5D,oDAAoD;oBACpD,6DAA6D;oBAC7D,4DAA4D;oBAC5D,0DAA0D;oBAC1D,yDAAyD;oBACzD,wBAAwB;oBACxB,IAAI,EACF,OAAO,KAAK,IAAI;wBACd,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,GAAG,IAAA,yCAAqB,EAAC,YAAY,CAAC,EAAE;wBAC7D,CAAC,CAAC,YAAY;iBACnB,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3C,SAAS,CAAC,GAAG,qBAAqB,iBAAiB,CAAC,GAAG;gBACrD,IAAI,EAAE,8BAA8B;gBACpC,EAAE,EAAE;oBACF,YAAY,EAAE,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE;oBACnC,4DAA4D;oBAC5D,qDAAqD;oBACrD,uDAAuD;oBACvD,cAAc;oBACd,iBAAiB,EAAE;wBACjB,MAAM,EAAE;4BACN,EAAE,EAAE;gCACF,WAAW,EACT,qDAAqD;gCACvD,QAAQ,EAAE,IAAI;gCACd,IAAI,EAAE,QAAQ;6BACf;yBACF;qBACF;iBACF;gBACD,GAAG,mBAAmB,CAAC,MAAM,CAAC;gBAC9B,GAAG,EAAE;oBACH,GAAG,WAAW;oBACd,yDAAyD;oBACzD,uCAAuC;oBACvC,YAAY,EAAE,yCAAyC;iBACxD;gBACD,IAAI,EAAE,EAAE,GAAG,IAAA,2CAAyB,EAAC,MAAM,CAAC,EAAE,GAAG,cAAc,EAAE;aAClE,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAE5D,EAAE,CAAC;YACF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7C,mEAAmE;YACnE,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC;YACxC,gEAAgE;YAChE,iEAAiE;YACjE,iCAAiC;YACjC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC/C,MAAM,SAAS,GACb,QAAQ,CAAC,MAAM,KAAK,CAAC;gBACrB,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,MAAM;gBAC9C,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE;gBACnB,CAAC,CAAC,EAAE,CAAC;YACT,SAAS,CAAC,GAAG,qBAAqB,GAAG,IAAI,MAAM,CAAC,GAAG;gBACjD,IAAI,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,SAAS,EAAE;gBACvD,EAAE,EAAE;oBACF,iBAAiB,EAAE,UAAU;wBAC3B,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,MAAM,EAAE;gCACN,GAAG,EAAE;oCACH,WAAW,EAAE,iBAAiB;oCAC9B,QAAQ,EAAE,IAAI;oCACd,IAAI,EAAE,QAAQ;oCACd,OAAO;iCACR;6BACF;yBACF;iBACN;gBACD,GAAG,mBAAmB,CAAC,MAAM,CAAC;gBAC9B,GAAG,EAAE,WAAW;gBAChB,IAAI,EAAE;oBACJ,GAAG,IAAA,2CAAyB,EAAC,MAAM,CAAC;oBACpC,GAAG,MAAM,CAAC,WAAW,CACnB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;wBAC7C,EAAE;wBACF,UAAU;4BACR,CAAC,CAAC,GAAG;4BACL,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,QAAQ,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE;qBACvD,CAAC,CACH;iBACF;aACF,CAAC;QACJ,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;CACF;AA7UD,sCA6UC;AAED;;GAEG;AACH,MAAM,mBAAmB,GAAG,CAAC,OAAsB,EAAE,EAAE,CAAC,CAAC;IACvD,WAAW,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,OAAwB,EAAU,EAAE;IAC5D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,IAAI;YACP,OAAO,YAAY,CAAC;QACtB,KAAK,YAAY;YACf,OAAO,UAAU,CAAC;QACpB,KAAK,eAAe;YAClB,OAAO,aAAa,CAAC;IACzB,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,OAAO,mBAAmB,CAAC,CAAC;AACjD,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,OAAgB,EAAE,GAAiB,EAAE,EAAE;;IAC9D,OAAA,CAAA,MAAA,GAAG,CAAC,WAAW,0CAAE,MAAM,MAAK,MAAM;QAClC,OAAO,CAAC,IAAI,KAAK,WAAW;QAC5B,OAAO,CAAC,WAAW,CAAC,OAAO,KAAK,QAAQ,CAAA;CAAA,CAAC;AAE3C;;;;GAIG;AACH,MAAM,eAAe,GAAG,CAAC,GAAiB,EAAE,EAAE,CAC5C,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,CAAC;AAsBnD,MAAM,0BAA0B,GAA+B;IAC7D,MAAM,EAAE,qBAAqB;IAC7B,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,uBAAuB;CAClC,CAAC;AAEF,MAAM,UAAU,GAAG,CAAC,GAAiB,EAAc,EAAE,CACnD,GAAG,CAAC,KAAK,KAAK,MAAM;IAClB,CAAC,CAAC,MAAM;IACR,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,UAAU;QACxB,CAAC,CAAC,UAAU;QACZ,CAAC,CAAC,QAAQ,CAAC"}

package/dist/packages/pipeline/src/catci/shippedCatci.d.ts

@@ -1,4 +1,12 @@
 export declare const GENERATED_CATCI_FOLDER = ".catladder-generated/catci";
+/**
+ * the files that make up the materialized catci folder for a given
+ * bundle content
+ */
+export declare const makeCatciGeneratedFiles: (bundle: string) => Array<{
+    path: string;
+    content: string;
+}>;
 /**
  * the catci files to materialize into the generated folder
  */

package/dist/packages/pipeline/src/catci/shippedCatci.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getCatciGeneratedFiles = exports.GENERATED_CATCI_FOLDER = void 0;
+exports.getCatciGeneratedFiles = exports.makeCatciGeneratedFiles = exports.GENERATED_CATCI_FOLDER = void 0;
 const fs_1 = require("fs");
 const path_1 = require("path");
 exports.GENERATED_CATCI_FOLDER = ".catladder-generated/catci";
@@ -28,13 +28,28 @@ const getShippedCatciBundle = () => {
     return found;
 };
 /**
- * the catci files to materialize into the generated folder
+ * the files that make up the materialized catci folder for a given
+ * bundle content
  */
-const getCatciGeneratedFiles = () => [
+const makeCatciGeneratedFiles = (bundle) => [
     {
         path: (0, path_1.join)(exports.GENERATED_CATCI_FOLDER, "index.js"),
-        content: (0, fs_1.readFileSync)(getShippedCatciBundle(), "utf-8"),
+        content: bundle,
+    },
+    {
+        // the bundle is commonjs (ncc output using `__dirname`), but node
+        // resolves the module format from the nearest package.json: a
+        // consumer whose root package.json declares `"type": "module"`
+        // would parse the bundle as ESM and crash on the first `__dirname`.
+        // a sibling package.json pins the folder to commonjs regardless.
+        path: (0, path_1.join)(exports.GENERATED_CATCI_FOLDER, "package.json"),
+        content: `${JSON.stringify({ type: "commonjs" }, null, 2)}\n`,
     },
 ];
+exports.makeCatciGeneratedFiles = makeCatciGeneratedFiles;
+/**
+ * the catci files to materialize into the generated folder
+ */
+const getCatciGeneratedFiles = () => (0, exports.makeCatciGeneratedFiles)((0, fs_1.readFileSync)(getShippedCatciBundle(), "utf-8"));
 exports.getCatciGeneratedFiles = getCatciGeneratedFiles;
 //# sourceMappingURL=shippedCatci.js.map

package/dist/packages/pipeline/src/catci/shippedCatci.js.map

@@ -1 +1 @@
-{"version":3,"file":"shippedCatci.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/catci/shippedCatci.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,+BAA4B;AAEf,QAAA,sBAAsB,GAAG,4BAA4B,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,GAAW,EAAE;IACzC,MAAM,UAAU,GAAG;QACjB,8EAA8E;QAC9E,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;QAC1C,oFAAoF;QACpF,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QACvE,+EAA+E;QAC/E,IAAA,WAAI,EACF,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,SAAS,EACT,OAAO,EACP,UAAU,CACX;KACF,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;GAEG;AACI,MAAM,sBAAsB,GAAG,GAGnC,EAAE,CAAC;IACJ;QACE,IAAI,EAAE,IAAA,WAAI,EAAC,8BAAsB,EAAE,UAAU,CAAC;QAC9C,OAAO,EAAE,IAAA,iBAAY,EAAC,qBAAqB,EAAE,EAAE,OAAO,CAAC;KACxD;CACF,CAAC;AARW,QAAA,sBAAsB,0BAQjC"}
+{"version":3,"file":"shippedCatci.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/catci/shippedCatci.ts"],"names":[],"mappings":";;;AAAA,2BAA8C;AAC9C,+BAA4B;AAEf,QAAA,sBAAsB,GAAG,4BAA4B,CAAC;AAEnE;;;;;;;GAOG;AACH,MAAM,qBAAqB,GAAG,GAAW,EAAE;IACzC,MAAM,UAAU,GAAG;QACjB,8EAA8E;QAC9E,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC;QAC1C,oFAAoF;QACpF,IAAA,WAAI,EAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QACvE,+EAA+E;QAC/E,IAAA,WAAI,EACF,SAAS,EACT,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,KAAK,EACL,MAAM,EACN,SAAS,EACT,OAAO,EACP,UAAU,CACX;KACF,CAAC;IACF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,eAAU,EAAC,SAAS,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CACrC,MAAc,EAC4B,EAAE,CAAC;IAC7C;QACE,IAAI,EAAE,IAAA,WAAI,EAAC,8BAAsB,EAAE,UAAU,CAAC;QAC9C,OAAO,EAAE,MAAM;KAChB;IACD;QACE,kEAAkE;QAClE,8DAA8D;QAC9D,+DAA+D;QAC/D,oEAAoE;QACpE,iEAAiE;QACjE,IAAI,EAAE,IAAA,WAAI,EAAC,8BAAsB,EAAE,cAAc,CAAC;QAClD,OAAO,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;KAC9D;CACF,CAAC;AAhBW,QAAA,uBAAuB,2BAgBlC;AAEF;;GAEG;AACI,MAAM,sBAAsB,GAAG,GAGnC,EAAE,CAAC,IAAA,+BAAuB,EAAC,IAAA,iBAAY,EAAC,qBAAqB,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AAHjE,QAAA,sBAAsB,0BAG2C"}

package/dist/runner-images/semantic-release/Dockerfile

@@ -4,7 +4,9 @@
 # (@semantic-release/git and @semantic-release/changelog need node >=24.15).
 FROM node:24-alpine
 
-RUN apk add --no-cache bash git git-lfs
+# openssh: on github the release job pushes with the release deploy key
+# over ssh (see scripts/semanticRelease)
+RUN apk add --no-cache bash git git-lfs openssh-client
 
 # add semantic release
 # NOTE: pin every dependency exactly. These are the semantic-release@25 line

package/dist/runner-images/semantic-release/scripts/semanticRelease

@@ -39,7 +39,34 @@ fi
 
 echo "doing semantic release"
 
+SEMANTIC_RELEASE_ARGS=()
+# the commit message suffix, see the @semantic-release/git config below
+RELEASE_COMMIT_SUFFIX=""
 if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # [skip ci] on github only: a push with the deploy key triggers
+  # workflows (unlike a push with GITHUB_TOKEN), and neither the release
+  # commit nor the tag needs a push-triggered run — the taggedRelease
+  # workflow is dispatched explicitly at the end, the marker keeps it
+  # the only run (same as the changesets path). On gitlab the tag
+  # pipeline MUST fire natively, so no marker there.
+  RELEASE_COMMIT_SUFFIX=" [skip ci]"
+
+  if [ -n "$CATLADDER_RELEASE_KEY" ]; then
+    # merge gating (a ruleset requiring the `catladder ✅` check on the
+    # default branch) rejects the release push unless it comes from the
+    # release deploy key — the workflow token can never bypass a
+    # ruleset. catci writes the key, points git's ssh at it and checks
+    # that the key reaches the repository (a clear failure here instead
+    # of a GH013 inside @semantic-release/git). The ssh url has to be
+    # passed explicitly: semantic-release takes package.json's
+    # `repository` over origin, and origin is the token-authenticated
+    # https url actions/checkout left behind.
+    RELEASE_REPOSITORY_URL=$(node "$CATCI" release github-deploy-key-remote)
+    SEMANTIC_RELEASE_ARGS+=(--repository-url "$RELEASE_REPOSITORY_URL")
+  else
+    echo "CATLADDER_RELEASE_KEY not set — pushing with the workflow token (fails on a repository with merge gating: run 'catladder project setup')"
+  fi
+
   # the github counterpart of the gitlab plugin below: it creates the
   # entry on the releases page with the generated notes. Everything
   # beyond that is switched off on purpose — commenting on the
@@ -62,6 +89,10 @@ else
     "@semantic-release/gitlab"'
 fi
 
+# NOTE: a project bringing its own .releaserc has to keep "[skip ci]" in
+# the git plugin's commit message on github (see RELEASE_COMMIT_SUFFIX),
+# otherwise a deploy-key push starts the main workflow for the release
+# commit and a second taggedRelease run for the tag.
 if [ ! -e .releaserc ]; then
   cat >.releaserc <<EOF
 {
@@ -98,7 +129,7 @@ if [ ! -e .releaserc ]; then
     # loop-prevention rule keys on the literal "chore(release)" prefix, so keep
     # this literal. Don't "fix" it back to \${branch.type}.
     ["@semantic-release/git", {
-      "message": "chore(release): \${nextRelease.version}\n\n\${nextRelease.notes}"
+      "message": "chore(release): \${nextRelease.version}${RELEASE_COMMIT_SUFFIX}\n\n\${nextRelease.notes}"
     }]${PUBLISH_PLUGIN}
     ],
   "branches": [
@@ -124,11 +155,13 @@ if [ "$GITHUB_ACTIONS" = "true" ]; then
   TAGS_BEFORE=$(git tag --list 'v[0-9]*')
 fi
 
-semantic-release
+semantic-release "${SEMANTIC_RELEASE_ARGS[@]}"
 
 # tags pushed with the default GITHUB_TOKEN don't trigger `on: push:
-# tags` workflows (github's recursion guard) — dispatch the
-# taggedRelease workflow explicitly for a tag semantic-release created
+# tags` workflows (github's recursion guard), and a deploy-key push
+# carries [skip ci] (see above) — dispatch the taggedRelease workflow
+# explicitly for a tag semantic-release created, whichever way it was
+# pushed
 if [ "$GITHUB_ACTIONS" = "true" ] && [ -f "$CATCI" ]; then
   if [ -z "$TAGS_BEFORE" ]; then
     NEW_TAG=$(git tag --list 'v[0-9]*' | tail -n1)