@dsh-enhanced/plugin-control-plane 0.1.47 → 0.1.49

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (167) hide show
  1. package/README.md +183 -15
  2. package/bin/dsh-live-qualification-authority.js +15 -0
  3. package/bin/dsh-local-release-adapter.js +328 -8
  4. package/bin/dsh-systemd-host-attestor.js +359 -9
  5. package/bin/dsh-systemd-host-authority.js +12 -0
  6. package/lib/adoption-coordinator.d.ts +3 -1
  7. package/lib/adoption-coordinator.d.ts.map +1 -1
  8. package/lib/adoption-coordinator.js +24 -9
  9. package/lib/adoption-coordinator.js.map +1 -1
  10. package/lib/cli.d.ts.map +1 -1
  11. package/lib/cli.js +33 -14
  12. package/lib/cli.js.map +1 -1
  13. package/lib/creation-capability-feedback.d.ts +23 -0
  14. package/lib/creation-capability-feedback.d.ts.map +1 -0
  15. package/lib/creation-capability-feedback.js +132 -0
  16. package/lib/creation-capability-feedback.js.map +1 -0
  17. package/lib/creation-capability-journal.d.ts +66 -0
  18. package/lib/creation-capability-journal.d.ts.map +1 -0
  19. package/lib/creation-capability-journal.js +751 -0
  20. package/lib/creation-capability-journal.js.map +1 -0
  21. package/lib/creation-capability-runtime.d.ts +63 -0
  22. package/lib/creation-capability-runtime.d.ts.map +1 -0
  23. package/lib/creation-capability-runtime.js +564 -0
  24. package/lib/creation-capability-runtime.js.map +1 -0
  25. package/lib/creation-capability-source.d.ts +37 -0
  26. package/lib/creation-capability-source.d.ts.map +1 -0
  27. package/lib/creation-capability-source.js +328 -0
  28. package/lib/creation-capability-source.js.map +1 -0
  29. package/lib/creation-capability-types.d.ts +252 -0
  30. package/lib/creation-capability-types.d.ts.map +1 -0
  31. package/lib/creation-capability-types.js +2 -0
  32. package/lib/creation-capability-types.js.map +1 -0
  33. package/lib/deployment-readiness.d.ts +16 -0
  34. package/lib/deployment-readiness.d.ts.map +1 -1
  35. package/lib/deployment-readiness.js +48 -1
  36. package/lib/deployment-readiness.js.map +1 -1
  37. package/lib/effect-blocked-replay.js +2 -2
  38. package/lib/effect-blocked-replay.js.map +1 -1
  39. package/lib/foreground-deployment-runtime.d.ts +3 -0
  40. package/lib/foreground-deployment-runtime.d.ts.map +1 -1
  41. package/lib/foreground-deployment-runtime.js +55 -13
  42. package/lib/foreground-deployment-runtime.js.map +1 -1
  43. package/lib/foreground-deployment.d.ts.map +1 -1
  44. package/lib/foreground-deployment.js +5 -0
  45. package/lib/foreground-deployment.js.map +1 -1
  46. package/lib/host-attestor.d.ts +2 -0
  47. package/lib/host-attestor.d.ts.map +1 -1
  48. package/lib/host-attestor.js +8 -1
  49. package/lib/host-attestor.js.map +1 -1
  50. package/lib/host-inputs.d.ts +13 -0
  51. package/lib/host-inputs.d.ts.map +1 -0
  52. package/lib/host-inputs.js +162 -0
  53. package/lib/host-inputs.js.map +1 -0
  54. package/lib/host-maintenance.d.ts +61 -0
  55. package/lib/host-maintenance.d.ts.map +1 -0
  56. package/lib/host-maintenance.js +158 -0
  57. package/lib/host-maintenance.js.map +1 -0
  58. package/lib/host-readiness.d.ts +5 -0
  59. package/lib/host-readiness.d.ts.map +1 -0
  60. package/lib/host-readiness.js +22 -0
  61. package/lib/host-readiness.js.map +1 -0
  62. package/lib/index.d.ts +16 -0
  63. package/lib/index.d.ts.map +1 -1
  64. package/lib/index.js +7 -0
  65. package/lib/index.js.map +1 -1
  66. package/lib/live-qualification-authority.d.ts +32 -0
  67. package/lib/live-qualification-authority.d.ts.map +1 -0
  68. package/lib/live-qualification-authority.js +280 -0
  69. package/lib/live-qualification-authority.js.map +1 -0
  70. package/lib/live-qualification-client.d.ts +4 -0
  71. package/lib/live-qualification-client.d.ts.map +1 -0
  72. package/lib/live-qualification-client.js +22 -0
  73. package/lib/live-qualification-client.js.map +1 -0
  74. package/lib/live-qualification-runtime.d.ts +78 -0
  75. package/lib/live-qualification-runtime.d.ts.map +1 -0
  76. package/lib/live-qualification-runtime.js +367 -0
  77. package/lib/live-qualification-runtime.js.map +1 -0
  78. package/lib/live-qualification.d.ts +73 -0
  79. package/lib/live-qualification.d.ts.map +1 -0
  80. package/lib/live-qualification.js +164 -0
  81. package/lib/live-qualification.js.map +1 -0
  82. package/lib/owner-task-gaps.d.ts +2 -0
  83. package/lib/owner-task-gaps.d.ts.map +1 -1
  84. package/lib/owner-task-gaps.js +9 -1
  85. package/lib/owner-task-gaps.js.map +1 -1
  86. package/lib/runtime-epoch.d.ts +69 -0
  87. package/lib/runtime-epoch.d.ts.map +1 -0
  88. package/lib/runtime-epoch.js +139 -0
  89. package/lib/runtime-epoch.js.map +1 -0
  90. package/lib/runtime-observer.d.ts.map +1 -1
  91. package/lib/runtime-observer.js +42 -6
  92. package/lib/runtime-observer.js.map +1 -1
  93. package/lib/service.d.ts +247 -4
  94. package/lib/service.d.ts.map +1 -1
  95. package/lib/service.js +1332 -27
  96. package/lib/service.js.map +1 -1
  97. package/lib/source-adoption-authority.d.ts +3 -0
  98. package/lib/source-adoption-authority.d.ts.map +1 -1
  99. package/lib/source-adoption-authority.js +13 -3
  100. package/lib/source-adoption-authority.js.map +1 -1
  101. package/lib/source-adoption-runner.d.ts +3 -0
  102. package/lib/source-adoption-runner.d.ts.map +1 -1
  103. package/lib/source-adoption-runner.js +16 -4
  104. package/lib/source-adoption-runner.js.map +1 -1
  105. package/lib/source-baseline.d.ts +37 -0
  106. package/lib/source-baseline.d.ts.map +1 -0
  107. package/lib/source-baseline.js +250 -0
  108. package/lib/source-baseline.js.map +1 -0
  109. package/lib/source-build.d.ts +17 -1
  110. package/lib/source-build.d.ts.map +1 -1
  111. package/lib/source-build.js +501 -7
  112. package/lib/source-build.js.map +1 -1
  113. package/lib/source-context.d.ts +18 -0
  114. package/lib/source-context.d.ts.map +1 -1
  115. package/lib/source-context.js +85 -11
  116. package/lib/source-context.js.map +1 -1
  117. package/lib/source-creation.d.ts +106 -0
  118. package/lib/source-creation.d.ts.map +1 -0
  119. package/lib/source-creation.js +664 -0
  120. package/lib/source-creation.js.map +1 -0
  121. package/lib/source-job-types.d.ts +19 -0
  122. package/lib/source-job-types.d.ts.map +1 -1
  123. package/lib/source-jobs.d.ts +30 -3
  124. package/lib/source-jobs.d.ts.map +1 -1
  125. package/lib/source-jobs.js +382 -40
  126. package/lib/source-jobs.js.map +1 -1
  127. package/lib/source-maintenance.d.ts +66 -0
  128. package/lib/source-maintenance.d.ts.map +1 -0
  129. package/lib/source-maintenance.js +177 -0
  130. package/lib/source-maintenance.js.map +1 -0
  131. package/lib/source-revision.d.ts +57 -0
  132. package/lib/source-revision.d.ts.map +1 -0
  133. package/lib/source-revision.js +175 -0
  134. package/lib/source-revision.js.map +1 -0
  135. package/lib/source-workspace.d.ts +19 -14
  136. package/lib/source-workspace.d.ts.map +1 -1
  137. package/lib/source-workspace.js +90 -17
  138. package/lib/source-workspace.js.map +1 -1
  139. package/lib/sqlite.d.ts +13 -3
  140. package/lib/sqlite.d.ts.map +1 -1
  141. package/lib/sqlite.js +362 -1
  142. package/lib/sqlite.js.map +1 -1
  143. package/lib/store.d.ts +258 -3
  144. package/lib/store.d.ts.map +1 -1
  145. package/lib/store.js +2211 -95
  146. package/lib/store.js.map +1 -1
  147. package/lib/systemd-host-authority.d.ts +68 -0
  148. package/lib/systemd-host-authority.d.ts.map +1 -0
  149. package/lib/systemd-host-authority.js +424 -0
  150. package/lib/systemd-host-authority.js.map +1 -0
  151. package/lib/task-observation-evidence.d.ts +32 -0
  152. package/lib/task-observation-evidence.d.ts.map +1 -0
  153. package/lib/task-observation-evidence.js +62 -0
  154. package/lib/task-observation-evidence.js.map +1 -0
  155. package/lib/task-observation-runtime.d.ts +2 -3
  156. package/lib/task-observation-runtime.d.ts.map +1 -1
  157. package/lib/task-observation-runtime.js +7 -39
  158. package/lib/task-observation-runtime.js.map +1 -1
  159. package/lib/task-observation-store.js +1 -1
  160. package/lib/trust.d.ts.map +1 -1
  161. package/lib/trust.js +0 -0
  162. package/lib/trust.js.map +1 -1
  163. package/lib/types.d.ts +43 -6
  164. package/lib/types.d.ts.map +1 -1
  165. package/lib/version.d.ts +1 -1
  166. package/lib/version.js +1 -1
  167. package/package.json +21 -14
@@ -0,0 +1,328 @@
1
+ import { createHash } from 'node:crypto';
2
+ import { lstat, mkdtemp, readdir, realpath, rm } from 'node:fs/promises';
3
+ import { tmpdir } from 'node:os';
4
+ import { join, resolve } from 'node:path';
5
+ import { canonicalGrowthJson } from '@dsh-enhanced/assistant-growth-contract';
6
+ import { ControlPlaneCliError } from './errors.js';
7
+ import { runLocalBuffer, runLocalCommand } from './source-workspace.js';
8
+ const PROTOCOL = 'dsh-created-capability-source/v1';
9
+ const DOMAIN = 'dsh-created-capability-source-v1\0';
10
+ const COMMIT = /^[a-f0-9]{40}$/u;
11
+ const DIGEST = /^[a-f0-9]{64}$/u;
12
+ const NAME = /^(?=.{1,64}$)[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/u;
13
+ const SEGMENT = /^[A-Za-z0-9][A-Za-z0-9._-]*$/u;
14
+ const MAX_FILES = 64;
15
+ const MAX_FILE_BYTES = 65_536;
16
+ const MAX_TOTAL_BYTES = 262_144;
17
+ const MAX_INDEX_BYTES = 131_072;
18
+ const MAX_PATCH_BYTES = 8_388_608;
19
+ const MAX_JSON_BYTES = 2_097_152;
20
+ const MAX_DIRECTORY_NODES = 256;
21
+ const MAX_DIRECTORY_DEPTH = 32;
22
+ const MAX_PATH_BYTES = 1_024;
23
+ function invalid(reason) {
24
+ throw new ControlPlaneCliError('SOURCE_BOUNDARY', `created capability source ${reason}`);
25
+ }
26
+ function sha256(bytes) { return createHash('sha256').update(bytes).digest('hex'); }
27
+ function exactRecord(value, keys, label) {
28
+ if (value === null || typeof value !== 'object' || Array.isArray(value)
29
+ || Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length !== 0)
30
+ invalid(label);
31
+ const descriptors = Object.getOwnPropertyDescriptors(value);
32
+ const actual = Object.keys(descriptors).sort();
33
+ if (actual.length !== keys.length || actual.some((key, index) => key !== [...keys].sort()[index])
34
+ || actual.some(key => !descriptors[key].enumerable || !('value' in descriptors[key])))
35
+ invalid(label);
36
+ return value;
37
+ }
38
+ function exactArray(value, max, label) {
39
+ if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype || value.length > max
40
+ || Object.getOwnPropertySymbols(value).length !== 0
41
+ || Object.getOwnPropertyNames(value).length !== value.length + 1
42
+ || !Array.from({ length: value.length }, (_, i) => Object.hasOwn(value, i)).every(Boolean)
43
+ || Object.entries(Object.getOwnPropertyDescriptors(value)).some(([key, descriptor]) => key !== 'length'
44
+ && (!/^(0|[1-9][0-9]*)$/u.test(key) || !descriptor.enumerable || !('value' in descriptor))))
45
+ invalid(label);
46
+ return value;
47
+ }
48
+ function certificatePlan(certificate) {
49
+ if (certificate === null || typeof certificate !== 'object' || Object.getPrototypeOf(certificate) !== Object.prototype)
50
+ invalid('certificate');
51
+ const descriptor = Object.getOwnPropertyDescriptor(certificate, 'plan');
52
+ if (!descriptor || !('value' in descriptor) || !descriptor.enumerable)
53
+ invalid('certificate plan');
54
+ return exactRecord(descriptor.value, ['id', 'digest', 'name', 'sourceTreeDigest', 'sourcePatchDigest',
55
+ 'artifactSha256', 'artifactBytes', 'generatorDigest'], 'certificate plan');
56
+ }
57
+ function checkedScope(name, scope) {
58
+ if (!NAME.test(name) || name.normalize('NFC') !== name)
59
+ invalid('plugin name');
60
+ const expected = [`plugins/${name}`, 'plugins/README.md', 'pnpm-lock.yaml'].sort();
61
+ const actual = exactArray(scope, 3, 'scope');
62
+ if (actual.length !== 3 || actual.some((value, index) => value !== expected[index]))
63
+ invalid('scope');
64
+ return expected;
65
+ }
66
+ function safePluginPath(path, root) {
67
+ if (path.length > MAX_PATH_BYTES || !path.startsWith(`${root}/`)
68
+ || path !== path.normalize('NFC') || Buffer.byteLength(path, 'utf8') > MAX_PATH_BYTES)
69
+ return false;
70
+ const relative = path.slice(root.length + 1);
71
+ const segments = relative.split('/');
72
+ return segments.every(segment => SEGMENT.test(segment) && !['.git', '.gitattributes', '.gitmodules', 'node_modules', 'lib'].includes(segment))
73
+ && !relative.includes('\\');
74
+ }
75
+ function strictUtf8(bytes, label, allowNul = false) {
76
+ if (!allowNul && bytes.includes(0))
77
+ invalid(`${label} contains NUL`);
78
+ let decoded;
79
+ try {
80
+ decoded = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(bytes);
81
+ }
82
+ catch {
83
+ invalid(`${label} is not UTF-8`);
84
+ }
85
+ if (!Buffer.from(decoded, 'utf8').equals(bytes))
86
+ invalid(`${label} is not canonical UTF-8`);
87
+ return decoded;
88
+ }
89
+ export function creationCapabilitySourceDigest(payload) {
90
+ // Bound strings and aggregate worst-case JSON escaping before allocating encoded JSON.
91
+ let nodes = 0, maximumEncodedBytes = 0;
92
+ const seen = new Set();
93
+ const bound = (value, depth) => {
94
+ if (++nodes > 8192 || depth > 16)
95
+ invalid('JSON complexity');
96
+ if (typeof value === 'string') {
97
+ if (value.length > MAX_FILE_BYTES)
98
+ invalid('JSON string exceeds bound');
99
+ maximumEncodedBytes += 6 * Buffer.byteLength(value) + 2;
100
+ }
101
+ else if (value === null || typeof value === 'boolean' || typeof value === 'number') {
102
+ maximumEncodedBytes += 24;
103
+ }
104
+ else {
105
+ if (!value || typeof value !== 'object' || seen.has(value))
106
+ invalid('JSON value');
107
+ seen.add(value);
108
+ if (Array.isArray(value)) {
109
+ for (const item of exactArray(value, MAX_FILES + 2, 'JSON array'))
110
+ bound(item, depth + 1);
111
+ maximumEncodedBytes += value.length + 2;
112
+ }
113
+ else {
114
+ if (Object.getPrototypeOf(value) !== Object.prototype || Reflect.ownKeys(value).length > 16)
115
+ invalid('JSON object');
116
+ const descriptors = Object.getOwnPropertyDescriptors(value);
117
+ for (const key of Reflect.ownKeys(value)) {
118
+ if (typeof key !== 'string' || key.length > 256)
119
+ invalid('JSON key');
120
+ const descriptor = descriptors[key];
121
+ if (!descriptor.enumerable || !('value' in descriptor))
122
+ invalid('JSON descriptor');
123
+ bound(key, depth + 1);
124
+ bound(descriptor.value, depth + 1);
125
+ maximumEncodedBytes += 2;
126
+ }
127
+ maximumEncodedBytes += 2;
128
+ }
129
+ seen.delete(value);
130
+ }
131
+ if (maximumEncodedBytes > MAX_JSON_BYTES)
132
+ invalid('JSON exceeds bound');
133
+ };
134
+ bound(payload, 0);
135
+ const encoded = canonicalGrowthJson(payload);
136
+ if (Buffer.byteLength(encoded, 'utf8') > MAX_JSON_BYTES)
137
+ invalid('JSON exceeds bound');
138
+ return sha256(`${DOMAIN}${encoded}`);
139
+ }
140
+ function indexText(entries) {
141
+ return entries.map(entry => `${entry.mode} ${entry.oid} 0\t${entry.path}\0`).join('');
142
+ }
143
+ function treeDigest(baseCommit, scope, text) {
144
+ return sha256(`dsh-source-tree-v2\0${baseCommit}\0${JSON.stringify(scope)}\0${text}`);
145
+ }
146
+ function patchDigest(baseCommit, scope, patch) {
147
+ return createHash('sha256').update(`dsh-source-patch-v2\0${baseCommit}\0${JSON.stringify(scope)}\0`).update(patch).digest('hex');
148
+ }
149
+ function inspectEntry(value, root, plugin) {
150
+ const entry = exactRecord(value, plugin ? ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'] : ['path', 'mode', 'oid'], 'entry');
151
+ if (typeof entry.path !== 'string' || typeof entry.mode !== 'string' || typeof entry.oid !== 'string'
152
+ || !COMMIT.test(entry.oid) || !['100644', '100755'].includes(entry.mode)
153
+ || !(safePluginPath(entry.path, root) || entry.path === 'plugins/README.md' || entry.path === 'pnpm-lock.yaml'))
154
+ invalid('entry metadata');
155
+ return entry;
156
+ }
157
+ /** Offline structural and byte verification; signature, owner and current authority belong to the journal. */
158
+ export function validateCreationCapabilitySource(snapshot, certificate) {
159
+ const plan = certificatePlan(certificate);
160
+ const value = exactRecord(snapshot, ['protocol', 'baseCommit', 'scope', 'treeDigest', 'patchDigest', 'entries', 'files', 'digest'], 'snapshot');
161
+ if (value.protocol !== PROTOCOL || typeof value.baseCommit !== 'string' || !COMMIT.test(value.baseCommit)
162
+ || typeof value.treeDigest !== 'string' || !DIGEST.test(value.treeDigest)
163
+ || typeof value.patchDigest !== 'string' || !DIGEST.test(value.patchDigest)
164
+ || typeof value.digest !== 'string' || !DIGEST.test(value.digest))
165
+ invalid('header');
166
+ const name = plan.name;
167
+ const scope = checkedScope(name, value.scope);
168
+ const root = `plugins/${name}`;
169
+ const entries = exactArray(value.entries, MAX_FILES + 2, 'entries');
170
+ const files = exactArray(value.files, MAX_FILES, 'files');
171
+ if (entries.length < 3 || files.length < 1)
172
+ invalid('empty source');
173
+ const seen = new Set();
174
+ const expectedFiles = [];
175
+ let previous = Buffer.alloc(0);
176
+ for (const unknownEntry of entries) {
177
+ const entry = inspectEntry(unknownEntry, root, false);
178
+ const order = Buffer.from(entry.path, 'utf8');
179
+ if (seen.has(entry.path) || previous.length && Buffer.compare(previous, order) >= 0)
180
+ invalid('index order or duplicate');
181
+ previous = order;
182
+ seen.add(entry.path);
183
+ if (entry.path.startsWith(`${root}/`))
184
+ expectedFiles.push(entry);
185
+ }
186
+ if (!seen.has('plugins/README.md') || !seen.has('pnpm-lock.yaml') || expectedFiles.length !== files.length)
187
+ invalid('index scope');
188
+ const text = indexText(entries);
189
+ if (Buffer.byteLength(text, 'utf8') > MAX_INDEX_BYTES || treeDigest(value.baseCommit, scope, text) !== value.treeDigest)
190
+ invalid('tree digest');
191
+ let total = 0;
192
+ for (let index = 0; index < files.length; index++) {
193
+ const file = exactRecord(files[index], ['path', 'mode', 'oid', 'bytes', 'sha256', 'content'], 'file');
194
+ const expected = expectedFiles[index];
195
+ if (file.path !== expected.path || file.mode !== expected.mode || file.oid !== expected.oid
196
+ || typeof file.content !== 'string' || file.content.length > MAX_FILE_BYTES
197
+ || typeof file.sha256 !== 'string' || !DIGEST.test(file.sha256)
198
+ || typeof file.bytes !== 'number' || !Number.isSafeInteger(file.bytes) || file.bytes < 0 || file.bytes > MAX_FILE_BYTES)
199
+ invalid('file metadata');
200
+ const bytes = Buffer.from(file.content, 'utf8');
201
+ if (bytes.length !== file.bytes || bytes.includes(0) || strictUtf8(bytes, String(file.path)) !== file.content
202
+ || sha256(bytes) !== file.sha256
203
+ || createHash('sha1').update(`blob ${bytes.length}\0`).update(bytes).digest('hex') !== file.oid)
204
+ invalid('file bytes');
205
+ total += bytes.length;
206
+ if (total > MAX_TOTAL_BYTES)
207
+ invalid('total bytes');
208
+ }
209
+ if (value.treeDigest !== plan.sourceTreeDigest || value.patchDigest !== plan.sourcePatchDigest)
210
+ invalid('certificate digest');
211
+ const payload = { protocol: PROTOCOL, baseCommit: value.baseCommit, scope: value.scope,
212
+ treeDigest: value.treeDigest, patchDigest: value.patchDigest, entries: value.entries, files: value.files };
213
+ if (creationCapabilitySourceDigest(payload) !== value.digest)
214
+ invalid('source digest');
215
+ }
216
+ async function listedPluginPaths(worktree, root, signal) {
217
+ const target = resolve(worktree, root);
218
+ const metadata = await lstat(target);
219
+ if (!metadata.isDirectory() || metadata.isSymbolicLink() || await realpath(target) !== target)
220
+ invalid('plugin root');
221
+ const paths = [];
222
+ let nodes = 0;
223
+ const visit = async (directory, prefix, depth) => {
224
+ signal?.throwIfAborted();
225
+ if (depth > MAX_DIRECTORY_DEPTH)
226
+ invalid('directory depth');
227
+ for (const entry of await readdir(directory, { withFileTypes: true })) {
228
+ signal?.throwIfAborted();
229
+ if (++nodes > MAX_DIRECTORY_NODES)
230
+ invalid('directory entries');
231
+ const relative = prefix ? `${prefix}/${entry.name}` : entry.name;
232
+ const path = `${root}/${relative}`;
233
+ if (!safePluginPath(path, root))
234
+ invalid('plugin path');
235
+ if (entry.isDirectory()) {
236
+ const parent = join(directory, entry.name);
237
+ const stat = await lstat(parent);
238
+ if (!stat.isDirectory() || stat.isSymbolicLink() || await realpath(parent) !== parent)
239
+ invalid('plugin directory');
240
+ await visit(parent, relative, depth + 1);
241
+ }
242
+ else if (entry.isFile()) {
243
+ const stat = await lstat(join(directory, entry.name));
244
+ if (!stat.isFile() || stat.isSymbolicLink() || stat.size > MAX_FILE_BYTES)
245
+ invalid('non-regular or oversized file');
246
+ paths.push(path);
247
+ }
248
+ else
249
+ invalid('non-regular plugin entry');
250
+ if (paths.length > MAX_FILES)
251
+ invalid('file count');
252
+ }
253
+ };
254
+ await visit(target, '', 0);
255
+ return paths.sort();
256
+ }
257
+ /** Capture exactly the same temporary-index digest domain as checkedSourceSnapshot. */
258
+ export async function captureCreationCapabilitySource(input) {
259
+ const plan = certificatePlan(input.certificate);
260
+ const scope = checkedScope(plan.name, input.scope);
261
+ if (!COMMIT.test(input.baseCommit))
262
+ invalid('base commit');
263
+ const root = `plugins/${plan.name}`;
264
+ const temporary = await mkdtemp(join(tmpdir(), 'dsh-created-source-index-'));
265
+ try {
266
+ const environment = { ...input.environment, GIT_INDEX_FILE: join(temporary, 'index') };
267
+ const run = (args, maximumOutput) => runLocalBuffer('git', args, input.worktree, environment, { maximumOutput, ...(input.signal ? { signal: input.signal } : {}) });
268
+ const head = (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim();
269
+ if (head !== input.baseCommit)
270
+ invalid('worktree HEAD drift');
271
+ const stage = async () => {
272
+ await runLocalCommand('git', ['read-tree', input.baseCommit], input.worktree, environment, input.signal ? { signal: input.signal } : {});
273
+ await runLocalCommand('git', ['--literal-pathspecs', 'add', '--all', '--', ...scope], input.worktree, environment, input.signal ? { signal: input.signal } : {});
274
+ const index = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'ls-files', '--stage', '-z', '--', ...scope], MAX_INDEX_BYTES);
275
+ const patch = await run(['--literal-pathspecs', '-c', 'core.quotepath=false', 'diff', '--cached', '--binary',
276
+ '--full-index', '--no-color', input.baseCommit, '--', ...scope], MAX_PATCH_BYTES);
277
+ return { index, patch };
278
+ };
279
+ const first = await stage();
280
+ const raw = strictUtf8(first.index, 'index', true);
281
+ const rows = raw.split('\0');
282
+ if (rows.pop() !== '' || rows.length < 3 || rows.length > MAX_FILES + 2)
283
+ invalid('index size');
284
+ const entries = rows.map(row => {
285
+ const match = /^(100644|100755) ([a-f0-9]{40}) 0\t(.+)$/u.exec(row);
286
+ if (!match)
287
+ invalid('index record');
288
+ return { path: match[3], mode: match[1], oid: match[2] };
289
+ });
290
+ if (indexText(entries) !== raw)
291
+ invalid('index roundtrip');
292
+ const paths = await listedPluginPaths(input.worktree, root, input.signal);
293
+ const indexPluginPaths = entries.filter(entry => entry.path.startsWith(`${root}/`)).map(entry => entry.path).sort();
294
+ if (paths.length !== indexPluginPaths.length || paths.some((path, index) => path !== indexPluginPaths[index]))
295
+ invalid('plugin file set');
296
+ const files = [];
297
+ let total = 0;
298
+ for (const entry of entries) {
299
+ if (!entry.path.startsWith(`${root}/`))
300
+ continue;
301
+ const bytes = await run(['cat-file', 'blob', entry.oid], MAX_FILE_BYTES);
302
+ if (bytes.length > MAX_FILE_BYTES)
303
+ invalid('file bytes');
304
+ total += bytes.length;
305
+ if (total > MAX_TOTAL_BYTES)
306
+ invalid('total bytes');
307
+ const content = strictUtf8(bytes, entry.path);
308
+ files.push({ ...entry, bytes: bytes.length, sha256: sha256(bytes), content });
309
+ }
310
+ const second = await stage();
311
+ if (!second.index.equals(first.index) || !second.patch.equals(first.patch)
312
+ || (await run(['rev-parse', '--verify', 'HEAD^{commit}'], 128)).toString('utf8').trim() !== input.baseCommit)
313
+ invalid('worktree drift');
314
+ const payload = { protocol: PROTOCOL, baseCommit: input.baseCommit, scope, treeDigest: treeDigest(input.baseCommit, scope, raw),
315
+ patchDigest: patchDigest(input.baseCommit, scope, first.patch), entries, files };
316
+ const snapshot = { ...payload, digest: creationCapabilitySourceDigest(payload) };
317
+ validateCreationCapabilitySource(snapshot, input.certificate);
318
+ for (const entry of entries)
319
+ Object.freeze(entry);
320
+ for (const file of files)
321
+ Object.freeze(file);
322
+ return Object.freeze({ ...snapshot, scope: Object.freeze(scope), entries: Object.freeze(entries), files: Object.freeze(files) });
323
+ }
324
+ finally {
325
+ await rm(temporary, { recursive: true, force: true });
326
+ }
327
+ }
328
+ //# sourceMappingURL=creation-capability-source.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"creation-capability-source.js","sourceRoot":"","sources":["../src/creation-capability-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAA8C,MAAM,yCAAyC,CAAA;AACzH,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvE,MAAM,QAAQ,GAAG,kCAA2C,CAAA;AAC5D,MAAM,MAAM,GAAG,oCAAoC,CAAA;AACnD,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,MAAM,GAAG,iBAAiB,CAAA;AAChC,MAAM,IAAI,GAAG,8CAA8C,CAAA;AAC3D,MAAM,OAAO,GAAG,+BAA+B,CAAA;AAC/C,MAAM,SAAS,GAAG,EAAE,CAAA;AACpB,MAAM,cAAc,GAAG,MAAM,CAAA;AAC7B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,OAAO,CAAA;AAC/B,MAAM,eAAe,GAAG,SAAS,CAAA;AACjC,MAAM,cAAc,GAAG,SAAS,CAAA;AAChC,MAAM,mBAAmB,GAAG,GAAG,CAAA;AAC/B,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAA;AA0B5B,SAAS,OAAO,CAAC,MAAc;IAC7B,MAAM,IAAI,oBAAoB,CAAC,iBAAiB,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,SAAS,MAAM,CAAC,KAAsB,IAAY,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA,CAAC,CAAC;AAE3G,SAAS,WAAW,CAAC,KAAc,EAAE,IAAuB,EAAE,KAAa;IACzE,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;WAClE,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC1H,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAA;IAC9C,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;WAC5F,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAE,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,WAAW,CAAC,GAAG,CAAE,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IACzG,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,GAAW,EAAE,KAAa;IAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;WAC9F,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;WAChD,MAAM,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;WAC7D,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;WACvF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,QAAQ;eAClG,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,KAAK,CAAC,CAAA;IAC/G,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,eAAe,CAAC,WAAgE;IACvF,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,KAAK,MAAM,CAAC,SAAS;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9I,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAA;IACvE,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU;QAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;IAClG,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,mBAAmB;QACnG,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,CAAC,EAAE,kBAAkB,CAA6D,CAAA;AAC1I,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAwB;IAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,CAAC,WAAW,IAAI,EAAE,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAA;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,CAAC,EAAE,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,CAAC,OAAO,CAAC,CAAA;IACrG,OAAO,QAAQ,CAAA;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,IAAY;IAChD,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;WAC3D,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,KAAK,CAAA;IACrG,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACpC,OAAO,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;WACzI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa,EAAE,QAAQ,GAAG,KAAK;IAChE,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IACpE,IAAI,OAAe,CAAA;IACnB,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IAC1F,MAAM,CAAC;QAAC,OAAO,CAAC,GAAG,KAAK,eAAe,CAAC,CAAA;IAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAA;IAC3F,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,OAAyD;IACtG,uFAAuF;IACvF,IAAI,KAAK,GAAG,CAAC,EAAE,mBAAmB,GAAG,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,KAAa,EAAQ,EAAE;QACpD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC5D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,2BAA2B,CAAC,CAAA;YACvE,mBAAmB,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,CAAC;aAAM,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrF,mBAAmB,IAAI,EAAE,CAAA;QAC3B,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACjF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,EAAE,SAAS,GAAG,CAAC,EAAE,YAAY,CAAC;oBAAE,KAAK,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBACzF,mBAAmB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAA;YACzC,CAAC;iBAAM,CAAC;gBACN,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;gBACnH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAA;gBAC3D,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;wBAAE,OAAO,CAAC,UAAU,CAAC,CAAA;oBACpE,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAE,CAAA;oBACpC,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC;wBAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;oBAClF,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAAC,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;oBACzD,mBAAmB,IAAI,CAAC,CAAA;gBAC1B,CAAC;gBACD,mBAAmB,IAAI,CAAC,CAAA;YAC1B,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACpB,CAAC;QACD,IAAI,mBAAmB,GAAG,cAAc;YAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACzE,CAAC,CAAA;IACD,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACjB,MAAM,OAAO,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,cAAc;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IACtF,OAAO,MAAM,CAAC,GAAG,MAAM,GAAG,OAAO,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,SAAS,CAAC,OAAiD;IAClE,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,GAAG,OAAO,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,KAAwB,EAAE,IAAY;IAC5E,OAAO,MAAM,CAAC,uBAAuB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAA;AACvF,CAAC;AAED,SAAS,WAAW,CAAC,UAAkB,EAAE,KAAwB,EAAE,KAAa;IAC9E,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,wBAAwB,UAAU,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAClI,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,MAAe;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAA;IACnI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;WAChG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;WACrE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,CAAC;QAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5I,OAAO,KAAiD,CAAA;AAC1D,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,gCAAgC,CAAC,QAAiB,EAChE,WAAgE;IAChE,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC,CAAA;IAC/I,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACpG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;WACtE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;WACxE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAA;IACtB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,KAA0B,CAAC,CAAA;IAClE,MAAM,IAAI,GAAG,WAAW,IAAI,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,GAAG,CAAC,EAAE,SAAS,CAAC,CAAA;IACnE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IACnE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,MAAM,aAAa,GAAoC,EAAE,CAAA;IACzD,IAAI,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC9B,KAAK,MAAM,YAAY,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAC7C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,0BAA0B,CAAC,CAAA;QACxH,QAAQ,GAAG,KAAK,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QACtC,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAClI,MAAM,IAAI,GAAG,SAAS,CAAC,OAA0C,CAAC,CAAA;IAClE,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,eAAe,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/I,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,CAAA;QACrG,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAE,CAAA;QACtC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;eACtF,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc;eACxE,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;eAC5D,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;YAAE,OAAO,CAAC,eAAe,CAAC,CAAA;QACnJ,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC/C,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO;eACxG,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM;eAC7B,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACxH,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;QACrB,IAAI,KAAK,GAAG,eAAe;YAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC,gBAAgB,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,iBAAiB;QAAE,OAAO,CAAC,oBAAoB,CAAC,CAAA;IAC7H,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK;QACpF,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAA;IAC5G,IAAI,8BAA8B,CAAC,OAA2D,CAAC,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,CAAC,eAAe,CAAC,CAAA;AAC5I,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY,EAAE,MAAoB;IACnF,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;IACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IACrH,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,KAAK,EAAE,SAAiB,EAAE,MAAc,EAAE,KAAa,EAAiB,EAAE;QACtF,MAAM,EAAE,cAAc,EAAE,CAAA;QACxB,IAAI,KAAK,GAAG,mBAAmB;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC3D,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,EAAE,cAAc,EAAE,CAAA;YACxB,IAAI,EAAE,KAAK,GAAG,mBAAmB;gBAAE,OAAO,CAAC,mBAAmB,CAAC,CAAA;YAC/D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;YAChE,MAAM,IAAI,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAA;YAClC,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACvD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBAC1C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAA;gBAChC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,MAAM,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM;oBAAE,OAAO,CAAC,kBAAkB,CAAC,CAAA;gBAClH,MAAM,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;YAC1C,CAAC;iBACI,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;gBACrD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,cAAc;oBAAE,OAAO,CAAC,+BAA+B,CAAC,CAAA;gBACnH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAClB,CAAC;;gBAAM,OAAO,CAAC,0BAA0B,CAAC,CAAA;YAC1C,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QACrD,CAAC;IACH,CAAC,CAAA;IACD,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC1B,OAAO,KAAK,CAAC,IAAI,EAAE,CAAA;AACrB,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,KAGrD;IACC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAA;IAC/C,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,CAAC,aAAa,CAAC,CAAA;IAC1D,MAAM,IAAI,GAAG,WAAW,IAAI,CAAC,IAAI,EAAE,CAAA;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC,CAAA;IAC5E,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,cAAc,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAA;QACtF,MAAM,GAAG,GAAG,CAAC,IAAuB,EAAE,aAAqB,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACrH,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;QACjG,IAAI,IAAI,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAC7D,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;YACvB,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EACvF,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,eAAe,CAAC,KAAK,EAAE,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,EAC/G,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YAC5I,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,qBAAqB,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;gBAC1G,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE,eAAe,CAAC,CAAA;YACnF,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;QACzB,CAAC,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,KAAK,EAAE,CAAA;QAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,CAAC,CAAA;QAC9F,MAAM,OAAO,GAAoC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YAC9D,MAAM,KAAK,GAAG,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACnE,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,cAAc,CAAC,CAAA;YACnC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAA2C,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAA;QACtG,CAAC,CAAC,CAAA;QACF,IAAI,SAAS,CAAC,OAAO,CAAC,KAAK,GAAG;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAC1D,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;QACzE,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAA;QACnH,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,gBAAgB,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,CAAC,iBAAiB,CAAC,CAAA;QACzI,MAAM,KAAK,GAAmC,EAAE,CAAA;QAChD,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC;gBAAE,SAAQ;YAChD,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAA;YACxE,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAAE,OAAO,CAAC,YAAY,CAAC,CAAA;YACxD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAA;YACrB,IAAI,KAAK,GAAG,eAAe;gBAAE,OAAO,CAAC,aAAa,CAAC,CAAA;YACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;QAC/E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,KAAK,EAAE,CAAA;QAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;eACrE,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,CAAC,UAAU;YAAE,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACzI,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC;YAC7H,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;QAClF,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,8BAA8B,CAAC,OAAO,CAAC,EAAE,CAAA;QAChF,gCAAgC,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;QAC7D,KAAK,MAAM,KAAK,IAAI,OAAO;YAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QACjD,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IAClI,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAAC,CAAC;AACrE,CAAC"}
@@ -0,0 +1,252 @@
1
+ import type { ToolRunContext } from '@deepseek-ai/dsh-tools';
2
+ import type { PluginCreationVerificationCertificate } from '@dsh-enhanced/assistant-growth-contract';
3
+ import type { SourceJobOwnerReceipt } from './source-job-types.js';
4
+ import type { CreationCapabilitySourceSnapshot } from './creation-capability-source.js';
5
+ export type CreationCapabilityOwner = Pick<SourceJobOwnerReceipt, 'authorityId' | 'authorityHash' | 'principalId' | 'principalRecordId' | 'principalVersion' | 'workspace' | 'agentPreset'>;
6
+ /** Separate owner authority for adoption and ordinary use; never a verifier policy. */
7
+ export interface CreationCapabilityConfig {
8
+ authorityId: string;
9
+ keyId: string;
10
+ keyPath: string;
11
+ owner: CreationCapabilityOwner;
12
+ namePrefix: string;
13
+ expiresAt: number;
14
+ maxAdoptions: number;
15
+ maxTools: number;
16
+ maxCallsPerAdoption: number;
17
+ maxCallRecords: number;
18
+ maxInputBytes: number;
19
+ /** Opt-in lifetime for an already adopted capability; never extends either use grant. */
20
+ retention?: {
21
+ maximumLifetimeMs: number;
22
+ };
23
+ runner: {
24
+ stateRoot: string;
25
+ image: string;
26
+ dockerPath: string;
27
+ expiresAt: number;
28
+ maxRuns: number;
29
+ maxTotalDurationMs: number;
30
+ maxDurationMs: number;
31
+ maxOutputBytes: number;
32
+ };
33
+ }
34
+ export interface CreationCapabilityTool {
35
+ originalName: string;
36
+ name: string;
37
+ description: string;
38
+ parameters: Record<string, unknown>;
39
+ }
40
+ export interface CreationCapabilityReceipt {
41
+ protocol: 'dsh-created-capability-adoption/v1' | 'dsh-created-capability-adoption/v2';
42
+ authorityId: string;
43
+ authorityDigest: string;
44
+ keyId: string;
45
+ planId: string;
46
+ planDigest: string;
47
+ verificationDigest: string;
48
+ artifactSha256: string;
49
+ artifactBytes: number;
50
+ source: PluginCreationVerificationCertificate['source'];
51
+ schemaDigest: string;
52
+ toolsDigest: string;
53
+ expiresAt: number;
54
+ adoptedAt: number;
55
+ signature: string;
56
+ }
57
+ export interface CreationCapabilityRecord {
58
+ planId: string;
59
+ status: 'claimed' | 'authorized' | 'active' | 'closed' | 'unknown' | 'rejected';
60
+ receipt?: CreationCapabilityReceipt;
61
+ certificate: PluginCreationVerificationCertificate;
62
+ tools?: readonly CreationCapabilityTool[];
63
+ artifact: Buffer;
64
+ reason?: string;
65
+ }
66
+ export interface CreationCapabilityObservation {
67
+ status: 'observed' | 'unknown';
68
+ quiescent: boolean;
69
+ jobId?: string;
70
+ artifactSha256: string;
71
+ reason?: string;
72
+ environment?: PluginCreationVerificationCertificate['environment'];
73
+ schemaDigest?: string;
74
+ schemas?: readonly unknown[];
75
+ calls?: readonly {
76
+ id: string;
77
+ toolName: string;
78
+ result: unknown;
79
+ }[];
80
+ }
81
+ export interface CreationCapabilityRunner {
82
+ run(input: {
83
+ key: string;
84
+ artifact: Buffer;
85
+ operation: {
86
+ kind: 'discover';
87
+ } | {
88
+ kind: 'invoke';
89
+ schemaDigest: string;
90
+ calls: readonly {
91
+ id: string;
92
+ toolName: string;
93
+ arguments: unknown;
94
+ }[];
95
+ };
96
+ signal: AbortSignal;
97
+ }): Promise<CreationCapabilityObservation>;
98
+ close(): Promise<void>;
99
+ }
100
+ /** The integration owns current authenticated task/owner fences, not model parameters. */
101
+ export interface CreationCapabilityPorts {
102
+ inspect(planId: string): {
103
+ certificate: PluginCreationVerificationCertificate;
104
+ artifact: Buffer;
105
+ owner: CreationCapabilityOwner;
106
+ };
107
+ recheck(planId: string, signal: AbortSignal): Promise<void>;
108
+ /** Capture checked staged source before first claim; legacy ports may have no archive. */
109
+ captureSource?(planId: string, signal: AbortSignal): Promise<CreationCapabilitySourceSnapshot>;
110
+ /** Historical evidence read for a v2 receipt; must recheck the current owner and frozen source. */
111
+ inspectRetained?(record: CreationCapabilityRecord): {
112
+ certificate: PluginCreationVerificationCertificate;
113
+ artifact: Buffer;
114
+ owner: CreationCapabilityOwner;
115
+ };
116
+ recheckRetained?(record: CreationCapabilityRecord, signal: AbortSignal): Promise<void>;
117
+ withCurrent<T>(record: CreationCapabilityRecord, callback: () => T): T;
118
+ assertCaller(record: CreationCapabilityRecord, execution: ToolRunContext): void;
119
+ /** Optional authenticated Host attribution; absence never implies a foreground task. */
120
+ inspectCall?(record: CreationCapabilityRecord, execution: ToolRunContext, toolAlias: string, argumentsJson: string): CreationCapabilityForegroundCallWitness | undefined;
121
+ }
122
+ export interface CreationCapabilityForegroundCallWitness {
123
+ protocol: 'assistant-delivery/foreground-tool-call/v1';
124
+ task: {
125
+ protocol: 'assistant-delivery/foreground-task/v1';
126
+ inboxId: string;
127
+ sessionId: string;
128
+ scope: {
129
+ workspace: string;
130
+ preset: string;
131
+ };
132
+ owner: {
133
+ principalRecordId: string;
134
+ principalVersion: number;
135
+ };
136
+ binding: {
137
+ id: string;
138
+ version: number;
139
+ generation: number;
140
+ };
141
+ dispatchedAt: number;
142
+ };
143
+ turn: number;
144
+ call: {
145
+ id: string;
146
+ toolName: string;
147
+ eventSeq: number;
148
+ eventDigest: string;
149
+ argumentsDigest: string;
150
+ };
151
+ }
152
+ export interface CreationCapabilityCallEvidence {
153
+ protocol: 'dsh-created-capability-call-evidence/v1';
154
+ planId: string;
155
+ key: string;
156
+ status: CreationCapabilityCall['status'];
157
+ attribution: 'foreground' | 'unattributed' | 'legacy-unattributed';
158
+ toolAlias?: string;
159
+ originalName?: string;
160
+ receiptDigest: string;
161
+ artifactSha256: string;
162
+ schemaDigest: string;
163
+ claimedAt?: number;
164
+ settledAt?: number;
165
+ foreground?: CreationCapabilityForegroundCallWitness;
166
+ }
167
+ /** A current, content-free task association; not a causal improvement claim. */
168
+ export interface CreationCapabilityTaskAssociation {
169
+ protocol: 'dsh-created-capability-task-association/v1';
170
+ planId: string;
171
+ inboxId: string;
172
+ sessionId: string;
173
+ callKeys: readonly string[];
174
+ receiptDigest: string;
175
+ artifactSha256: string;
176
+ schemaDigest: string;
177
+ adoptionStatus: CreationCapabilityRecord['status'];
178
+ /** Signed deadline only; current execution still requires runtime owner, mount and quota checks. */
179
+ withinSignedUseWindow: boolean;
180
+ task: {
181
+ projection: {
182
+ subjectKind: 'foreground-turn';
183
+ subjectRef: string;
184
+ version: number;
185
+ digest: string;
186
+ disposition: 'upsert';
187
+ };
188
+ scopeWatermark: number;
189
+ outcomeId: string;
190
+ judgement: 'owner-feedback' | 'independent-verifier';
191
+ status: 'achieved' | 'not-achieved';
192
+ sourceDigest: string;
193
+ };
194
+ }
195
+ export interface CreationCapabilityCall {
196
+ key: string;
197
+ status: 'claimed' | 'completed' | 'unknown';
198
+ result?: unknown;
199
+ jobId?: string;
200
+ }
201
+ /** Historical source data signed separately from the finite execution receipt. */
202
+ export interface CreationCapabilitySourceArchive {
203
+ protocol: 'dsh-created-capability-source-archive/v1';
204
+ authorityId: string;
205
+ authorityDigest: string;
206
+ keyId: string;
207
+ planId: string;
208
+ certificateDigest: string;
209
+ artifactSha256: string;
210
+ source: CreationCapabilitySourceSnapshot;
211
+ signature: string;
212
+ }
213
+ export interface CreationCapabilityJournalPort {
214
+ readonly authorityDigest: string;
215
+ readonly publicKey: string;
216
+ inspect(planId: string): CreationCapabilityRecord | undefined;
217
+ list(): readonly CreationCapabilityRecord[];
218
+ claim(input: {
219
+ certificate: PluginCreationVerificationCertificate;
220
+ artifact: Buffer;
221
+ source?: CreationCapabilitySourceSnapshot;
222
+ }): {
223
+ created: boolean;
224
+ record: CreationCapabilityRecord;
225
+ };
226
+ /** Lazy historical read; legacy rows have no archive and are never inferred or backfilled. */
227
+ inspectSourceArchive?(planId: string): CreationCapabilitySourceArchive | undefined;
228
+ authorize(planId: string, tools: readonly CreationCapabilityTool[]): CreationCapabilityRecord;
229
+ activate(planId: string): CreationCapabilityRecord;
230
+ settle(planId: string, status: 'closed' | 'unknown' | 'rejected', reason: string): void;
231
+ claimCall(input: {
232
+ planId: string;
233
+ key: string;
234
+ argumentsDigest: string;
235
+ toolAlias?: string;
236
+ foreground?: CreationCapabilityForegroundCallWitness;
237
+ }): {
238
+ created: boolean;
239
+ call: CreationCapabilityCall;
240
+ };
241
+ listCallEvidence?(planId: string): readonly CreationCapabilityCallEvidence[];
242
+ settleCall(input: {
243
+ planId: string;
244
+ key: string;
245
+ status: 'completed' | 'unknown';
246
+ result?: unknown;
247
+ jobId?: string;
248
+ }): void;
249
+ recoverClaims(): void;
250
+ close(): void;
251
+ }
252
+ //# sourceMappingURL=creation-capability-types.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"creation-capability-types.d.ts","sourceRoot":"","sources":["../src/creation-capability-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,yCAAyC,CAAA;AACpG,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAA;AAClE,OAAO,KAAK,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAA;AAEvF,MAAM,MAAM,uBAAuB,GAAG,IAAI,CAAC,qBAAqB,EAAE,aAAa,GAAG,eAAe,GAAG,aAAa,GAC7G,mBAAmB,GAAG,kBAAkB,GAAG,WAAW,GAAG,aAAa,CAAC,CAAA;AAE3E,uFAAuF;AACvF,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,uBAAuB,CAAA;IAC9B,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,mBAAmB,EAAE,MAAM,CAAA;IAC3B,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,yFAAyF;IACzF,SAAS,CAAC,EAAE;QAAE,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAA;IACzC,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE,MAAM,CAAA;QACb,UAAU,EAAE,MAAM,CAAA;QAClB,SAAS,EAAE,MAAM,CAAA;QACjB,OAAO,EAAE,MAAM,CAAA;QACf,kBAAkB,EAAE,MAAM,CAAA;QAC1B,aAAa,EAAE,MAAM,CAAA;QACrB,cAAc,EAAE,MAAM,CAAA;KACvB,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACpC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,EAAE,oCAAoC,GAAG,oCAAoC,CAAA;IACrF,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,qCAAqC,CAAC,QAAQ,CAAC,CAAA;IACvD,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAA;IAC/E,OAAO,CAAC,EAAE,yBAAyB,CAAA;IACnC,WAAW,EAAE,qCAAqC,CAAA;IAClD,KAAK,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAA;IACzC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,UAAU,GAAG,SAAS,CAAA;IAC9B,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,WAAW,CAAC,EAAE,qCAAqC,CAAC,aAAa,CAAC,CAAA;IAClE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,OAAO,CAAC,EAAE,SAAS,OAAO,EAAE,CAAA;IAC5B,KAAK,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CACrE;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE;YAAE,IAAI,EAAE,UAAU,CAAA;SAAE,GACvE;YAAE,IAAI,EAAE,QAAQ,CAAC;YAAC,YAAY,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,SAAS;gBAAE,EAAE,EAAE,MAAM,CAAC;gBAAC,QAAQ,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,OAAO,CAAA;aAAE,EAAE,CAAA;SAAE,CAAC;QACnH,MAAM,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,6BAA6B,CAAC,CAAA;IAChE,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG;QAAE,WAAW,EAAE,qCAAqC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,uBAAuB,CAAA;KAAE,CAAA;IACjI,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,0FAA0F;IAC1F,aAAa,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAA;IAC9F,mGAAmG;IACnG,eAAe,CAAC,CAAC,MAAM,EAAE,wBAAwB,GAAG;QAAE,WAAW,EAAE,qCAAqC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,uBAAuB,CAAA;KAAE,CAAA;IAC5J,eAAe,CAAC,CAAC,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtF,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;IACtE,YAAY,CAAC,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,GAAG,IAAI,CAAA;IAC/E,wFAAwF;IACxF,WAAW,CAAC,CAAC,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,EACzF,aAAa,EAAE,MAAM,GAAG,uCAAuC,GAAG,SAAS,CAAA;CAC9E;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,EAAE,4CAA4C,CAAA;IACtD,IAAI,EAAE;QACJ,QAAQ,EAAE,uCAAuC,CAAA;QACjD,OAAO,EAAE,MAAM,CAAA;QACf,SAAS,EAAE,MAAM,CAAA;QACjB,KAAK,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5C,KAAK,EAAE;YAAE,iBAAiB,EAAE,MAAM,CAAC;YAAC,gBAAgB,EAAE,MAAM,CAAA;SAAE,CAAA;QAC9D,OAAO,EAAE;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5D,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;IACD,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAA;CACvG;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,EAAE,yCAAyC,CAAA;IACnD,MAAM,EAAE,MAAM,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACxC,WAAW,EAAE,YAAY,GAAG,cAAc,GAAG,qBAAqB,CAAA;IAClE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,uCAAuC,CAAA;CACrD;AAED,gFAAgF;AAChF,MAAM,WAAW,iCAAiC;IAChD,QAAQ,EAAE,4CAA4C,CAAA;IACtD,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,aAAa,EAAE,MAAM,CAAA;IACrB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAA;IAClD,oGAAoG;IACpG,qBAAqB,EAAE,OAAO,CAAA;IAC9B,IAAI,EAAE;QACJ,UAAU,EAAE;YAAE,WAAW,EAAE,iBAAiB,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,QAAQ,CAAA;SAAE,CAAA;QAC1H,cAAc,EAAE,MAAM,CAAA;QACtB,SAAS,EAAE,MAAM,CAAA;QACjB,SAAS,EAAE,gBAAgB,GAAG,sBAAsB,CAAA;QACpD,MAAM,EAAE,UAAU,GAAG,cAAc,CAAA;QACnC,YAAY,EAAE,MAAM,CAAA;KACrB,CAAA;CACF;AAED,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;IAC3C,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,0CAA0C,CAAA;IACpD,WAAW,EAAE,MAAM,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,iBAAiB,EAAE,MAAM,CAAA;IACzB,cAAc,EAAE,MAAM,CAAA;IACtB,MAAM,EAAE,gCAAgC,CAAA;IACxC,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,GAAG,SAAS,CAAA;IAC7D,IAAI,IAAI,SAAS,wBAAwB,EAAE,CAAA;IAC3C,KAAK,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,qCAAqC,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAClF,MAAM,CAAC,EAAE,gCAAgC,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,EAAE,wBAAwB,CAAA;KAAE,CAAA;IACtG,8FAA8F;IAC9F,oBAAoB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,+BAA+B,GAAG,SAAS,CAAA;IAClF,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,sBAAsB,EAAE,GAAG,wBAAwB,CAAA;IAC7F,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,wBAAwB,CAAA;IAClD,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACvF,SAAS,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC1F,UAAU,CAAC,EAAE,uCAAuC,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,sBAAsB,CAAA;KAAE,CAAA;IAC7G,gBAAgB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,8BAA8B,EAAE,CAAA;IAC5E,UAAU,CAAC,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,WAAW,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC3H,aAAa,IAAI,IAAI,CAAA;IACrB,KAAK,IAAI,IAAI,CAAA;CACd"}
@@ -0,0 +1,2 @@
1
+ export {};
2
+ //# sourceMappingURL=creation-capability-types.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"creation-capability-types.js","sourceRoot":"","sources":["../src/creation-capability-types.ts"],"names":[],"mappings":""}