@dsh-enhanced/plugin-control-plane 0.1.6 → 0.1.12

package/lib/lockfile.js

@@ -0,0 +1,271 @@
+import { fileURLToPath } from 'node:url';
+import { isAbsolute, relative, resolve } from 'node:path';
+export class LockfileIntegrityError extends Error {
+    constructor(message) { super(message); this.name = 'LockfileIntegrityError'; }
+}
+function scalar(raw) {
+    const value = raw.trim();
+    if (value === '' || value === 'null' || value === '~' || /^[&*!]|<<:/u.test(value)) {
+        throw new LockfileIntegrityError('pnpm lockfile contains an unsupported or unsafe scalar');
+    }
+    if (value.startsWith("'")) {
+        if (!value.endsWith("'"))
+            throw new LockfileIntegrityError('pnpm lockfile contains an unterminated quoted scalar');
+        return value.slice(1, -1).replace(/''/gu, "'");
+    }
+    if (value.startsWith('"')) {
+        if (!value.endsWith('"'))
+            throw new LockfileIntegrityError('pnpm lockfile contains an unterminated quoted scalar');
+        try {
+            return JSON.parse(value);
+        }
+        catch {
+            throw new LockfileIntegrityError('pnpm lockfile contains an invalid quoted scalar');
+        }
+    }
+    if ((value.includes(':') && !value.startsWith('file:'))
+        || ['[', ']', '{', '}', ',', '#'].some(character => value.includes(character)) || /\s+#/u.test(value)) {
+        throw new LockfileIntegrityError('pnpm lockfile uses unsupported ambiguous YAML syntax');
+    }
+    return value;
+}
+function pair(line, indent) {
+    if (line.trim() === '' || line.trimStart().startsWith('#'))
+        return undefined;
+    if (line.slice(0, indent) !== ' '.repeat(indent) || line[indent] === ' ')
+        return undefined;
+    const remainder = line.slice(indent);
+    const match = /^((?:'[^']*(?:''[^']*)*'|"(?:[^"\\]|\\.)*"|[^:]+)):(?: +(.*))?$/u.exec(remainder);
+    if (match === null)
+        return undefined;
+    return { key: scalar(match[1]), value: match[2] === undefined ? '' : match[2].trim() };
+}
+function inlineResolution(raw) {
+    const match = /^\{(.+)\}$/u.exec(raw);
+    if (match === null)
+        throw new LockfileIntegrityError('pnpm lockfile resolution mapping is ambiguous');
+    const output = {};
+    const seen = new Set();
+    for (const field of match[1].split(/,\s*/u)) {
+        const item = /^(integrity|tarball): +(.*)$/u.exec(field);
+        if (item === null || seen.has(item[1]))
+            throw new LockfileIntegrityError('pnpm lockfile resolution mapping is ambiguous');
+        seen.add(item[1]);
+        output[item[1]] = scalar(item[2]);
+    }
+    return output;
+}
+function setOnce(target, key, raw, label) {
+    const fields = target;
+    if (fields[key] !== undefined)
+        throw new LockfileIntegrityError(`pnpm lockfile repeats ${label}`);
+    fields[key] = scalar(raw);
+}
+/**
+ * Parse only the pnpm v9 mappings needed to bind an install request. The
+ * accepted subset is deliberately strict: duplicate keys, aliases, tags,
+ * merge keys, tabs, and ambiguous inline YAML fail closed.
+ */
+function parsePnpmLockfile(source) {
+    if (Buffer.byteLength(source) > 8 * 1024 * 1024 || source.includes('\t') || /(^|\s)[&*!][^\s]*/mu.test(source) || /^\s*<<:/mu.test(source)) {
+        throw new LockfileIntegrityError('pnpm lockfile exceeds limits or uses aliases/tags/tabs');
+    }
+    const lines = source.replace(/\r\n?/gu, '\n').split('\n');
+    let section;
+    let packageKey;
+    let inResolution = false;
+    let importerKey;
+    let dependencyGroup = false;
+    let dependencyKey;
+    let sawPackages = false;
+    let sawImporters = false;
+    const packages = new Map();
+    const importers = new Map();
+    for (const line of lines) {
+        const top = pair(line, 0);
+        if (top !== undefined) {
+            section = top.value === '' && (top.key === 'packages' || top.key === 'importers') ? top.key : undefined;
+            if (section === 'packages')
+                sawPackages = true;
+            if (section === 'importers')
+                sawImporters = true;
+            packageKey = undefined;
+            inResolution = false;
+            importerKey = undefined;
+            dependencyGroup = false;
+            dependencyKey = undefined;
+            continue;
+        }
+        if (section === 'packages') {
+            const item = pair(line, 2);
+            if (item !== undefined) {
+                if (item.value !== '')
+                    throw new LockfileIntegrityError('pnpm lockfile package entry is ambiguous');
+                packageKey = item.key;
+                inResolution = false;
+                if (packages.has(packageKey))
+                    throw new LockfileIntegrityError(`pnpm lockfile contains duplicate package key ${packageKey}`);
+                packages.set(packageKey, {});
+                continue;
+            }
+            if (packageKey === undefined)
+                continue;
+            const property = pair(line, 4);
+            if (property !== undefined) {
+                inResolution = property.key === 'resolution' && property.value === '';
+                const target = packages.get(packageKey);
+                if (property.key === 'resolution' && property.value.startsWith('{')) {
+                    const resolution = inlineResolution(property.value);
+                    if (resolution.integrity !== undefined)
+                        setOnce(target, 'integrity', resolution.integrity, `integrity for ${packageKey}`);
+                    if (resolution.tarball !== undefined)
+                        setOnce(target, 'tarball', resolution.tarball, `tarball for ${packageKey}`);
+                }
+                else if (property.key === 'version')
+                    setOnce(target, 'version', property.value, `version for ${packageKey}`);
+                continue;
+            }
+            if (inResolution) {
+                const resolution = pair(line, 6);
+                const target = packages.get(packageKey);
+                if (resolution?.key === 'integrity')
+                    setOnce(target, 'integrity', resolution.value, `integrity for ${packageKey}`);
+                if (resolution?.key === 'tarball')
+                    setOnce(target, 'tarball', resolution.value, `tarball for ${packageKey}`);
+            }
+            continue;
+        }
+        if (section === 'importers') {
+            const importer = pair(line, 2);
+            if (importer !== undefined) {
+                if (importer.value !== '')
+                    throw new LockfileIntegrityError('pnpm lockfile importer entry is ambiguous');
+                importerKey = importer.key;
+                dependencyGroup = false;
+                dependencyKey = undefined;
+                if (importers.has(importerKey))
+                    throw new LockfileIntegrityError(`pnpm lockfile contains duplicate importer ${importerKey}`);
+                importers.set(importerKey, new Map());
+                continue;
+            }
+            if (importerKey === undefined)
+                continue;
+            const group = pair(line, 4);
+            if (group !== undefined) {
+                dependencyGroup = group.value === '' && ['dependencies', 'devDependencies', 'optionalDependencies'].includes(group.key);
+                dependencyKey = undefined;
+                continue;
+            }
+            if (!dependencyGroup)
+                continue;
+            const dependency = pair(line, 6);
+            if (dependency !== undefined) {
+                if (dependency.value !== '')
+                    throw new LockfileIntegrityError('pnpm lockfile importer dependency is ambiguous');
+                dependencyKey = dependency.key;
+                const target = importers.get(importerKey);
+                if (target.has(dependencyKey))
+                    throw new LockfileIntegrityError(`pnpm lockfile repeats importer dependency ${dependencyKey}`);
+                target.set(dependencyKey, {});
+                continue;
+            }
+            if (dependencyKey !== undefined) {
+                const property = pair(line, 8);
+                const target = importers.get(importerKey).get(dependencyKey);
+                if (property?.key === 'specifier')
+                    setOnce(target, 'specifier', property.value, `specifier for ${dependencyKey}`);
+                if (property?.key === 'version')
+                    setOnce(target, 'version', property.value, `importer version for ${dependencyKey}`);
+            }
+        }
+    }
+    if (!sawPackages || !sawImporters)
+        throw new LockfileIntegrityError('pnpm lockfile has no packages or importers mapping');
+    return { packages, importers };
+}
+export function parsePnpmPackageIntegrities(source) {
+    const parsed = parsePnpmLockfile(source);
+    return new Map([...parsed.packages].flatMap(([key, value]) => value.integrity === undefined ? [] : [[key, value.integrity]]));
+}
+function importerDependency(parsed, packageName) {
+    const importer = parsed.importers.get('.');
+    const dependency = importer?.get(packageName);
+    if (dependency === undefined || dependency.specifier === undefined || dependency.version === undefined) {
+        throw new LockfileIntegrityError(`pnpm lockfile does not bind importer dependency ${packageName}`);
+    }
+    return { specifier: dependency.specifier, version: dependency.version };
+}
+function resolvedFileSpecifier(specifier, lockfileDirectory, requireAbsolute) {
+    if (!specifier.startsWith('file:') || specifier.startsWith('file://')) {
+        throw new LockfileIntegrityError('pnpm lockfile local artifact specifier is not canonical');
+    }
+    const raw = specifier.slice('file:'.length);
+    if (raw === '' || raw.includes('\0') || raw.includes('\r') || raw.includes('\n') || raw.includes('\\')
+        || (requireAbsolute && !isAbsolute(raw)) || (!requireAbsolute && isAbsolute(raw))) {
+        throw new LockfileIntegrityError('pnpm lockfile local artifact specifier is not canonical');
+    }
+    const path = requireAbsolute ? raw : resolve(lockfileDirectory, raw);
+    const normalized = requireAbsolute ? path : relative(lockfileDirectory, path);
+    if (resolve(path) !== path || raw !== normalized)
+        throw new LockfileIntegrityError('pnpm lockfile local artifact specifier is not normalized');
+    return path;
+}
+function normalizedRelativeFileSpecifier(lockfileDirectory, artifactPath) {
+    const raw = relative(lockfileDirectory, artifactPath);
+    if (raw === '' || raw.includes('\\') || isAbsolute(raw) || resolve(lockfileDirectory, raw) !== artifactPath) {
+        throw new LockfileIntegrityError('approved local artifact cannot be represented by a canonical relative lockfile specifier');
+    }
+    return `file:${raw}`;
+}
+function packageMatches(key, exact) { return key === exact || key.startsWith(`${exact}(`); }
+function peerSuffixed(value, exact) { return value === exact || value.startsWith(`${exact}(`); }
+export function verifyApprovedPackagesInLockfile(source, approved, lockfileDirectory = '.') {
+    const parsed = parsePnpmLockfile(source);
+    const directory = resolve(lockfileDirectory);
+    for (const item of approved) {
+        const dependency = importerDependency(parsed, item.package);
+        let localReference = false;
+        if (item.registry !== undefined) {
+            try {
+                localReference = new URL(item.registry.reference).protocol === 'file:';
+            }
+            catch { /* parsed catalog prevents this */ }
+        }
+        if (!localReference) {
+            if (dependency.specifier !== item.version || !(dependency.version === item.version || dependency.version.startsWith(`${item.version}(`))) {
+                throw new LockfileIntegrityError(`pnpm lockfile does not bind ${item.package}@${item.version} to its approved registry specifier`);
+            }
+            const exact = `${item.package}@${item.version}`;
+            const matches = [...parsed.packages].filter(([key]) => packageMatches(key, exact));
+            if (matches.length !== 1 || matches[0][1].integrity !== item.integrity || matches[0][1].tarball !== undefined) {
+                throw new LockfileIntegrityError(`pnpm lockfile does not bind ${exact} to its approved integrity`);
+            }
+            continue;
+        }
+        let artifactPath;
+        const registry = item.registry;
+        if (registry === undefined)
+            throw new LockfileIntegrityError(`approved local artifact for ${item.package} is invalid`);
+        try {
+            artifactPath = fileURLToPath(registry.reference);
+        }
+        catch {
+            throw new LockfileIntegrityError(`approved local artifact for ${item.package} is invalid`);
+        }
+        const expectedVersion = normalizedRelativeFileSpecifier(directory, artifactPath);
+        if (resolvedFileSpecifier(dependency.specifier, directory, true) !== artifactPath
+            || !peerSuffixed(dependency.version, expectedVersion)) {
+            throw new LockfileIntegrityError(`pnpm lockfile importer does not bind ${item.package} to its approved local artifact`);
+        }
+        const exact = `${item.package}@${expectedVersion}`;
+        const matches = [...parsed.packages].filter(([key]) => packageMatches(key, exact));
+        const resolution = matches.length === 1 ? matches[0][1] : undefined;
+        const tarball = resolution?.tarball;
+        if (resolution === undefined || resolution.version !== item.version || resolution.integrity !== item.integrity
+            || tarball === undefined || tarball !== expectedVersion
+            || resolvedFileSpecifier(tarball, directory, false) !== artifactPath) {
+            throw new LockfileIntegrityError(`pnpm lockfile does not bind ${item.package}@${item.version} to its approved local artifact and integrity`);
+        }
+    }
+}
+//# sourceMappingURL=lockfile.js.map

package/lib/lockfile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lockfile.js","sourceRoot":"","sources":["../src/lockfile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAGzD,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA,CAAC,CAAC;CACtF;AAkBD,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAA;IACxB,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,GAAG,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,sBAAsB,CAAC,wDAAwD,CAAC,CAAA;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,sDAAsD,CAAC,CAAA;QAClH,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,sDAAsD,CAAC,CAAA;QAClH,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAW,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,sBAAsB,CAAC,iDAAiD,CAAC,CAAA;QAAC,CAAC;IAC1I,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;WAClD,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxG,MAAM,IAAI,sBAAsB,CAAC,sDAAsD,CAAC,CAAA;IAC1F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,IAAI,CAAC,IAAY,EAAE,MAAc;IACxC,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC5E,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IAC1F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,kEAAkE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAChG,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAA;AACzF,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,sBAAsB,CAAC,+CAA+C,CAAC,CAAA;IACrG,MAAM,MAAM,GAA0B,EAAE,CAAA;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,+BAA+B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxD,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;YAAE,MAAM,IAAI,sBAAsB,CAAC,+CAA+C,CAAC,CAAA;QAC1H,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;QAClB,MAAM,CAAC,IAAI,CAAC,CAAC,CAA4B,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,OAAO,CAAC,MAAsD,EAAE,GAAsD,EAC7H,GAAW,EAAE,KAAa;IAC1B,MAAM,MAAM,GAAG,MAA4C,CAAA;IAC3D,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,KAAK,EAAE,CAAC,CAAA;IACjG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3I,MAAM,IAAI,sBAAsB,CAAC,wDAAwD,CAAC,CAAA;IAC5F,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzD,IAAI,OAA6C,CAAA;IACjD,IAAI,UAA8B,CAAA;IAClC,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,WAA+B,CAAA;IACnC,IAAI,eAAe,GAAG,KAAK,CAAA;IAC3B,IAAI,aAAiC,CAAA;IACrC,IAAI,WAAW,GAAG,KAAK,CAAA;IACvB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAiC,CAAA;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+C,CAAA;IACxE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;QACzB,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,UAAU,IAAI,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAA;YACvG,IAAI,OAAO,KAAK,UAAU;gBAAE,WAAW,GAAG,IAAI,CAAA;YAC9C,IAAI,OAAO,KAAK,WAAW;gBAAE,YAAY,GAAG,IAAI,CAAA;YAChD,UAAU,GAAG,SAAS,CAAC;YAAC,YAAY,GAAG,KAAK,CAAC;YAAC,WAAW,GAAG,SAAS,CAAC;YAAC,eAAe,GAAG,KAAK,CAAC;YAAC,aAAa,GAAG,SAAS,CAAA;YACzH,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC1B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,IAAI,IAAI,CAAC,KAAK,KAAK,EAAE;oBAAE,MAAM,IAAI,sBAAsB,CAAC,0CAA0C,CAAC,CAAA;gBACnG,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC;gBAAC,YAAY,GAAG,KAAK,CAAA;gBAC3C,IAAI,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,MAAM,IAAI,sBAAsB,CAAC,gDAAgD,UAAU,EAAE,CAAC,CAAA;gBAC5H,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;gBAC5B,SAAQ;YACV,CAAC;YACD,IAAI,UAAU,KAAK,SAAS;gBAAE,SAAQ;YACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,YAAY,GAAG,QAAQ,CAAC,GAAG,KAAK,YAAY,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE,CAAA;gBACrE,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAE,CAAA;gBACxC,IAAI,QAAQ,CAAC,GAAG,KAAK,YAAY,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpE,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;oBACnD,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS;wBAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,SAAS,EAAE,iBAAiB,UAAU,EAAE,CAAC,CAAA;oBACzH,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS;wBAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,OAAO,EAAE,eAAe,UAAU,EAAE,CAAC,CAAA;gBACnH,CAAC;qBAAM,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;oBAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,eAAe,UAAU,EAAE,CAAC,CAAA;gBAC9G,SAAQ;YACV,CAAC;YACD,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;gBAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAE,CAAA;gBACxC,IAAI,UAAU,EAAE,GAAG,KAAK,WAAW;oBAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,iBAAiB,UAAU,EAAE,CAAC,CAAA;gBAClH,IAAI,UAAU,EAAE,GAAG,KAAK,SAAS;oBAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,KAAK,EAAE,eAAe,UAAU,EAAE,CAAC,CAAA;YAC9G,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,IAAI,QAAQ,CAAC,KAAK,KAAK,EAAE;oBAAE,MAAM,IAAI,sBAAsB,CAAC,2CAA2C,CAAC,CAAA;gBACxG,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC;gBAAC,eAAe,GAAG,KAAK,CAAC;gBAAC,aAAa,GAAG,SAAS,CAAA;gBAC9E,IAAI,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;oBAAE,MAAM,IAAI,sBAAsB,CAAC,6CAA6C,WAAW,EAAE,CAAC,CAAA;gBAC5H,SAAS,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,EAAE,CAAC,CAAA;gBACrC,SAAQ;YACV,CAAC;YACD,IAAI,WAAW,KAAK,SAAS;gBAAE,SAAQ;YACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAC3B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,eAAe,GAAG,KAAK,CAAC,KAAK,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;gBACvH,aAAa,GAAG,SAAS,CAAA;gBACzB,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,eAAe;gBAAE,SAAQ;YAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YAChC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,IAAI,UAAU,CAAC,KAAK,KAAK,EAAE;oBAAE,MAAM,IAAI,sBAAsB,CAAC,gDAAgD,CAAC,CAAA;gBAC/G,aAAa,GAAG,UAAU,CAAC,GAAG,CAAA;gBAC9B,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAE,CAAA;gBAC1C,IAAI,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC;oBAAE,MAAM,IAAI,sBAAsB,CAAC,6CAA6C,aAAa,EAAE,CAAC,CAAA;gBAC7H,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;gBAC7B,SAAQ;YACV,CAAC;YACD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC,GAAG,CAAC,aAAa,CAAE,CAAA;gBAC9F,IAAI,QAAQ,EAAE,GAAG,KAAK,WAAW;oBAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,iBAAiB,aAAa,EAAE,CAAC,CAAA;gBACjH,IAAI,QAAQ,EAAE,GAAG,KAAK,SAAS;oBAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,EAAE,wBAAwB,aAAa,EAAE,CAAC,CAAA;YACtH,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,sBAAsB,CAAC,oDAAoD,CAAC,CAAA;IACzH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAAc;IACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACxC,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;AAC/H,CAAC;AAED,SAAS,kBAAkB,CAAC,MAA0B,EAAE,WAAmB;IACzE,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAC1C,MAAM,UAAU,GAAG,QAAQ,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IAC7C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACvG,MAAM,IAAI,sBAAsB,CAAC,mDAAmD,WAAW,EAAE,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAA;AACzE,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,iBAAyB,EAAE,eAAwB;IACnG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,sBAAsB,CAAC,yDAAyD,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3C,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;WACjG,CAAC,eAAe,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,IAAI,sBAAsB,CAAC,yDAAyD,CAAC,CAAA;IAC7F,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAA;IACpE,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IAC7E,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,GAAG,KAAK,UAAU;QAAE,MAAM,IAAI,sBAAsB,CAAC,0DAA0D,CAAC,CAAA;IAC9I,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,+BAA+B,CAAC,iBAAyB,EAAE,YAAoB;IACtF,MAAM,GAAG,GAAG,QAAQ,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAA;IACrD,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,KAAK,YAAY,EAAE,CAAC;QAC5G,MAAM,IAAI,sBAAsB,CAAC,0FAA0F,CAAC,CAAA;IAC9H,CAAC;IACD,OAAO,QAAQ,GAAG,EAAE,CAAA;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,KAAa,IAAa,OAAO,GAAG,KAAK,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA,CAAC,CAAC;AACpH,SAAS,YAAY,CAAC,KAAa,EAAE,KAAa,IAAa,OAAO,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,KAAK,GAAG,CAAC,CAAA,CAAC,CAAC;AAExH,MAAM,UAAU,gCAAgC,CAAC,MAAc,EAAE,QAAmC,EAAE,iBAAiB,GAAG,GAAG;IAC3H,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,cAAc,GAAG,KAAK,CAAA;QAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC;gBAAC,cAAc,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,kCAAkC,CAAC,CAAC;QAC7H,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;gBACzI,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,qCAAqC,CAAC,CAAA;YACpI,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAA;YAC/C,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;YAClF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChH,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,KAAK,4BAA4B,CAAC,CAAA;YACpG,CAAC;YACD,SAAQ;QACV,CAAC;QACD,IAAI,YAAoB,CAAA;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC9B,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,IAAI,CAAC,OAAO,aAAa,CAAC,CAAA;QACtH,IAAI,CAAC;YAAC,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAC9D,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,IAAI,CAAC,OAAO,aAAa,CAAC,CAAA;QAC5F,CAAC;QACD,MAAM,eAAe,GAAG,+BAA+B,CAAC,SAAS,EAAE,YAAY,CAAC,CAAA;QAChF,IAAI,qBAAqB,CAAC,UAAU,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,KAAK,YAAY;eAC5E,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,EAAE,eAAe,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,sBAAsB,CAAC,wCAAwC,IAAI,CAAC,OAAO,iCAAiC,CAAC,CAAA;QACzH,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,eAAe,EAAE,CAAA;QAClD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;QAClF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACpE,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,CAAA;QACnC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;eACzG,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,eAAe;eACpD,qBAAqB,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,KAAK,YAAY,EAAE,CAAC;YACvE,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,+CAA+C,CAAC,CAAA;QAC9I,CAAC;IACH,CAAC;AACH,CAAC"}

package/lib/release.d.ts

@@ -0,0 +1,51 @@
+import { type PluginControlTrustConfig } from './trust.js';
+import type { PluginSourcePlan, SourcePublishReconciliationAuthority, SourcePublishReconciliationEvidence, SourcePublishReconciliationReceipt, SourcePublishReconciliationRequest, SourceReleaseArtifact, SourceReleaseAuthorization, SourceReleaseAuthorizationAuthority, SourceReleaseAuthority, SourceReleasePhase, SourceReleaseReceipt, SourceReleaseRequest, VerifiedSourceReleaseAuthorization, VerifiedSourceReleaseReceipt, VerifiedSourcePublishReconciliationReceipt } from './types.js';
+export declare function parseSourceReleaseAuthorization(value: unknown): SourceReleaseAuthorization;
+export declare function parseVerifiedSourceReleaseAuthorization(value: unknown): VerifiedSourceReleaseAuthorization;
+export declare function sourceReleaseAuthorizationSigningPayload(authorization: Omit<SourceReleaseAuthorization, 'signature'>): string;
+export declare class Ed25519SourceReleaseAuthorizationAuthority implements SourceReleaseAuthorizationAuthority {
+    readonly publicKey: string | Buffer;
+    readonly expectedAuthority: string;
+    readonly expectedKeyId: string;
+    readonly now: () => number;
+    constructor(publicKey: string | Buffer, expectedAuthority: string, expectedKeyId: string, now?: () => number);
+    verify(input: SourceReleaseAuthorization, plan: PluginSourcePlan): Promise<VerifiedSourceReleaseAuthorization>;
+}
+export declare function parseSourcePublishReconciliationRequest(value: unknown): SourcePublishReconciliationRequest;
+export declare function sourcePublishReconciliationRequestDigest(value: SourcePublishReconciliationRequest): string;
+export declare function sourcePublishReconciliationEvidenceDigest(value: SourcePublishReconciliationEvidence): string;
+export declare function parseSourcePublishReconciliationReceipt(value: unknown): SourcePublishReconciliationReceipt;
+export declare function sourcePublishReconciliationSigningPayload(receipt: Omit<SourcePublishReconciliationReceipt, 'signature'>): string;
+export declare class Ed25519SourcePublishReconciliationAuthority implements SourcePublishReconciliationAuthority {
+    readonly publicKey: string | Buffer;
+    readonly expectedAuthority: string;
+    readonly expectedKeyId: string;
+    readonly now: () => number;
+    constructor(publicKey: string | Buffer, expectedAuthority: string, expectedKeyId: string, now?: () => number);
+    verify(input: SourcePublishReconciliationReceipt, plan: PluginSourcePlan, rawRequest: SourcePublishReconciliationRequest): Promise<VerifiedSourcePublishReconciliationReceipt>;
+}
+export declare function parseSourceReleaseRequest(value: unknown): SourceReleaseRequest;
+export declare function sourceReleaseEvidenceDigest(value: SourceReleaseReceipt['evidence']): string;
+export declare function sourceReleaseRequestDigest(value: SourceReleaseRequest): string;
+export declare function sourceArtifactStatementDigest(value: SourceReleaseArtifact): string;
+export declare function sourceArtifactSigningPayload(value: SourceReleaseArtifact): string;
+export declare function parseSourceReleaseReceipt(value: unknown): SourceReleaseReceipt;
+export declare function sourceReleaseSigningPayload(receipt: Omit<SourceReleaseReceipt, 'signature'>): string;
+export declare class Ed25519SourceReleaseAuthority implements SourceReleaseAuthority {
+    readonly publicKey: string | Buffer;
+    readonly expectedAuthority: string;
+    readonly expectedKeyId: string;
+    readonly now: () => number;
+    readonly resolveRegistryVerifier?: ((authority: string, keyId: string) => string | Buffer | undefined) | undefined;
+    constructor(publicKey: string | Buffer, expectedAuthority: string, expectedKeyId: string, now?: () => number, resolveRegistryVerifier?: ((authority: string, keyId: string) => string | Buffer | undefined) | undefined);
+    verify(input: SourceReleaseReceipt, plan: PluginSourcePlan, request: SourceReleaseRequest): Promise<VerifiedSourceReleaseReceipt>;
+}
+export type ReleaseAdapterErrorCode = 'NOT_CONFIGURED' | 'FAILED' | 'OUTPUT_LIMIT' | 'TIMEOUT' | 'VERSION_MISMATCH' | 'EXECUTABLE_CHANGED';
+export declare class ReleaseAdapterError extends Error {
+    readonly code: ReleaseAdapterErrorCode;
+    readonly phase: SourceReleasePhase;
+    constructor(code: ReleaseAdapterErrorCode, phase: SourceReleasePhase, message: string);
+}
+export declare function invokeSourceReleaseAdapter(trust: PluginControlTrustConfig, request: SourceReleaseRequest): Promise<SourceReleaseReceipt>;
+export declare function invokeSourcePublishReconciliationAdapter(trust: PluginControlTrustConfig, request: SourcePublishReconciliationRequest): Promise<SourcePublishReconciliationReceipt>;
+//# sourceMappingURL=release.d.ts.map

package/lib/release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../src/release.ts"],"names":[],"mappings":"AAOA,OAAO,EACuB,KAAK,wBAAwB,EAAE,MAAM,YAAY,CAAA;AAC/E,OAAO,KAAK,EACV,gBAAgB,EAChB,oCAAoC,EACpC,mCAAmC,EACnC,kCAAkC,EAClC,kCAAkC,EAClC,qBAAqB,EACrB,0BAA0B,EAC1B,mCAAmC,EACnC,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,EAGpB,kCAAkC,EAClC,4BAA4B,EAC5B,0CAA0C,EAC3C,MAAM,YAAY,CAAA;AAwInB,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,GAAG,0BAA0B,CAa1F;AAED,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,OAAO,GAAG,kCAAkC,CAU1G;AAOD,wBAAgB,wCAAwC,CAAC,aAAa,EAAE,IAAI,CAAC,0BAA0B,EAAE,WAAW,CAAC,GAAG,MAAM,CAE7H;AAMD,qBAAa,0CAA2C,YAAW,mCAAmC;IACxF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM;IACjH,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;gBADP,SAAS,EAAE,MAAM,GAAG,MAAM,EAAW,iBAAiB,EAAE,MAAM,EAAW,aAAa,EAAE,MAAM,EACxG,GAAG,GAAE,MAAM,MAAiB;IAEjC,MAAM,CAAC,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,kCAAkC,CAAC;CAmBrH;AAMD,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,OAAO,GAAG,kCAAkC,CA2C1G;AAsDD,wBAAgB,wCAAwC,CAAC,KAAK,EAAE,kCAAkC,GAAG,MAAM,CAAyB;AACpI,wBAAgB,yCAAyC,CAAC,KAAK,EAAE,mCAAmC,GAAG,MAAM,CAAyB;AAEtI,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,OAAO,GAAG,kCAAkC,CAmB1G;AAOD,wBAAgB,yCAAyC,CAAC,OAAO,EAAE,IAAI,CAAC,kCAAkC,EAAE,WAAW,CAAC,GAAG,MAAM,CAEhI;AAED,qBAAa,2CAA4C,YAAW,oCAAoC;IAC1F,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM;IACjH,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;gBADP,SAAS,EAAE,MAAM,GAAG,MAAM,EAAW,iBAAiB,EAAE,MAAM,EAAW,aAAa,EAAE,MAAM,EACxG,GAAG,GAAE,MAAM,MAAiB;IAEjC,MAAM,CAAC,KAAK,EAAE,kCAAkC,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE,kCAAkC,GAC9H,OAAO,CAAC,0CAA0C,CAAC;CAmCpD;AA4ED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAgI9E;AAyED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,oBAAoB,CAAC,UAAU,CAAC,GAAG,MAAM,CAAyB;AACrH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAAyB;AACxG,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAAyB;AAC5G,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAA0F;AAE5K,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAiC9E;AAMD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,GAAG,MAAM,CAEpG;AAsJD,qBAAa,6BAA8B,YAAW,sBAAsB;IAC9D,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM;IAAE,QAAQ,CAAC,iBAAiB,EAAE,MAAM;IAAE,QAAQ,CAAC,aAAa,EAAE,MAAM;IACjH,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM;IAC1B,QAAQ,CAAC,uBAAuB,CAAC,GAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,SAAS;gBAFjF,SAAS,EAAE,MAAM,GAAG,MAAM,EAAW,iBAAiB,EAAE,MAAM,EAAW,aAAa,EAAE,MAAM,EACxG,GAAG,GAAE,MAAM,MAAiB,EAC5B,uBAAuB,CAAC,GAAE,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,SAAS,aAAA;IAEhG,MAAM,CAAC,KAAK,EAAE,oBAAoB,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,4BAA4B,CAAC;CA+GxI;AAED,MAAM,MAAM,uBAAuB,GAAG,gBAAgB,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,GAAG,kBAAkB,GAAG,oBAAoB,CAAA;AAC1I,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,uBAAuB;IAAE,QAAQ,CAAC,KAAK,EAAE,kBAAkB;gBAAjE,IAAI,EAAE,uBAAuB,EAAW,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM;CAGxG;AA4DD,wBAAsB,0BAA0B,CAAC,KAAK,EAAE,wBAAwB,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAwB9I;AAED,wBAAsB,wCAAwC,CAAC,KAAK,EAAE,wBAAwB,EAC5F,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAoB1F"}