@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.11

package/src/supply-chain/blueprint-verification-execution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blueprint-verification-execution.js","sourceRoot":"","sources":["../../../../../packages/nx/src/supply-chain/blueprint-verification-execution.ts"],"names":[],"mappings":";;AA0IA,sGAyCC;AAwlBD,sFAIC;AAED,wFAmBC;AA2KD,8EA2DC;AA1gCD,2DAAsE;AACtE,6CAAyC;AACzC,qCAYiB;AACjB,6CAA4C;AAC5C,qCAAiC;AACjC,yCAQmB;AACnB,mCAAmC;AAEnC,6DAK8B;AAC9B,6EAAmF;AACnF,+FAAoG;AAEpG,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,cAAc,GAAG;IACrB,cAAc;IACd,iBAAiB;IACjB,sBAAsB;CACd,CAAC;AACX,MAAM,YAAY,GAAG,4CAA4C,CAAC;AAElE,SAAS,6BAA6B,CAAC,KAAa;IAClD,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;QAC7B,IAAI;QACJ,IAAI;QACJ,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;QACH,GAAG;KACJ,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CACZ,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAClE,CAAC;AACJ,CAAC;AAkBD,SAAS,YAAY,CAAC,QAAe;IACnC,OAAO;QACL,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;KACpB,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAuC,EACvC,KAAwC;IAExC,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAC5B,CAAC,GAAG,EAAE,EAAE,CACN,IAAI,CAAC,GAA8C,CAAC;QACpD,KAAK,CAAC,GAA8C,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CACtB,IAAY,EACZ,QAAe,EACf,iBAAsC;IAEtC,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC;QAChC,IAAI;QACJ,MAAM,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KAC3E,CAAC;AACJ,CAAC;AAyBD,SAAgB,6CAA6C,CAAC,KAK7D;IACC,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAClE,MAAM,uBAAuB,GAAG,IAAA,mBAAS,EAAC,eAAe,CAAC,CAAC;IAC3D,IACE,uBAAuB,CAAC,cAAc,EAAE;QACxC,CAAC,uBAAuB,CAAC,WAAW,EAAE;QACtC,IAAA,sBAAY,EAAC,eAAe,CAAC,KAAK,eAAe,EACjD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,IAAA,oBAAQ,EAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,IAAA,oBAAQ,EAAC,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,MAAM,sBAAsB,GAAG,IAAA,oBAAQ,EAAC,eAAe,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAA,mBAAS,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7C,IACE,YAAY,KAAK,IAAI;QACrB,YAAY,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QACnC,iBAAiB,KAAK,EAAE;QACxB,iBAAiB,KAAK,IAAI;QAC1B,iBAAiB,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QACxC,IAAA,sBAAU,EAAC,iBAAiB,CAAC;QAC7B,sBAAsB,KAAK,EAAE;QAC7B,sBAAsB,KAAK,IAAI;QAC/B,sBAAsB,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QAC7C,IAAA,sBAAU,EAAC,sBAAsB,CAAC;QAClC,WAAW,CAAC,cAAc,EAAE;QAC5B,CAAC,WAAW,CAAC,MAAM,EAAE;QACrB,WAAW,CAAC,IAAI,IAAI,CAAC;QACrB,WAAW,CAAC,IAAI,GAAG,cAAc,EACjC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;AACH,CAAC;AAoED,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa;IAC/C,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IACjC,IACE,QAAQ,CAAC,cAAc,EAAE;QACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;QAClB,QAAQ,CAAC,IAAI,IAAI,CAAC;QAClB,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;QAC/B,IAAA,sBAAY,EAAC,IAAI,CAAC,KAAK,IAAI,EAC3B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2CAA2C,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,gCAAgC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAiC,EACjC,IAAY,EACZ,KAAa;IAEb,MAAM,YAAY,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,OAAO,MAAM;YACX,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACtB,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC;YAClD,CAAC,CAAC,CAAE,MAAkC,CAAC,IAAI,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;IACH,IACE,YAAY,CAAC,MAAM,GAAG,CAAC;QACvB,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAuB,CAAC;AAC/C,CAAC;AAED,SAAS,aAAa,CACpB,aAAqB,EACrB,cAAuB,EACvB,QAAoC,EACpC,gBAAyC,EACzC,IAA6B,EAC7B,OAAyB,EACzB,WAAoB,EACpB,iBAAsC;IAEtC,MAAM,SAAS,GAAG,mBAAmB,CACnC,gBAAgB,EAChB,IAAI,EACJ,0BAA0B,IAAI,EAAE,CACjC,CAAC;IACF,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,4CAA4C,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,IAAA,gBAAI,EAC/B,aAAa,EACb,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAChD,cAAc,CACf,CAAC;IACF,MAAM,OAAO,GAAG,IAAA,2BAAa,EAAC,oBAAoB,CAAC,CAAC;IACpD,MAAM,YAAY,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,YAAY,CAC3B,YAAY,EACZ,0BAA0B,IAAI,qBAAqB,CACpD,CAAC;IACF,MAAM,GAAG,GACP,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;QAC9B,CAAC,CAAC,QAAQ,CAAC,GAAG;QACd,CAAC,CAAC,QAAQ,CAAC,GAAG;YACV,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAChC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;YAC9B,CAAC,CAAE,QAAQ,CAAC,GAA+B,CAAC,OAAO,CAAC;YACpD,CAAC,CAAC,SAAS,CAAC;IAClB,IACE,QAAQ,CAAC,IAAI,KAAK,IAAI;QACtB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,CAAC,sCAAsC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC9D,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,sCAAsC,CACrE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,IAAA,mBAAO,EAAC,YAAY,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;IACxD,6CAA6C,CAAC;QAC5C,OAAO;QACP,YAAY;QACZ,WAAW;QACX,aAAa;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAC9B,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,IAAA,gEAA2C,EAC/D,cAAc,EACd,QAAQ,EACR,IAAI,EACJ,SAAS,CACV,CAAC;IACF,IAAI,QAAQ,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,0BAA0B,IAAI,kEAAkE,CACjG,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK,EAAE,WAAW;YAChB,CAAC,CAAC;gBACE,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE;gBACpD,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;aAC3C;YACH,CAAC,CAAC,EAAE;QACN,QAAQ,EAAE;YACR,GAAG;YACH,QAAQ;YACR,IAAI;YACJ,SAAS;YACT,OAAO,EAAE,QAAQ,CAAC,OAAO;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAC1B,SAAiC,EACjC,iBAAsC;IAEtC,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,IACE,IAAA,sBAAY,EAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YACrC,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClB,QAAQ,CAAC,IAAI,IAAI,CAAC;YAClB,QAAQ,CAAC,IAAI,GAAG,cAAc;YAC9B,IAAA,wBAAU,EAAC,QAAQ,CAAC;iBACjB,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;iBACpC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA+C,EAC/C,WAAmB;IAKnB,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,OAAO,CAAC,eAAe,EAAE,cAAc,EAAE,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAC;QACJ,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAC7D,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,YAAY,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YAC7D,MAAM,IAAI,GAAG,YAAY,KAAK,CAAC,IAAI,EAAW,CAAC;YAC/C,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACvC,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YACpE,IAAI,CAAC,IAAA,oBAAU,EAAC,YAAY,CAAC;gBAAE,SAAS;YACxC,MAAM,QAAQ,GAAG,YAAY,CAC3B,YAAY,EACZ,yCAAyC,IAAI,EAAE,CAChD,CAAC;YACF,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7C,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBAAE,SAAS;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACjC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAAiB,EACjB,WAAoB,EACpB,oBAAyC,sBAAY,EACrD,eAAsD;IAEtD,MAAM,aAAa,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,SAAS,CAAC,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,IAAA,sBAAY,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,YAAY,CAC/B,IAAA,gBAAI,EAAC,aAAa,EAAE,cAAc,CAAC,EACnC,8CAA8C,CAC/C,CAAC;IACF,MAAM,UAAU,GACd,YAAY,CAAC,OAAO;QACpB,OAAO,YAAY,CAAC,OAAO,KAAK,QAAQ;QACxC,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC;QAClC,CAAC,CAAE,YAAY,CAAC,OAAmC,CAAC,IAAI;QACxD,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,eAAe,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC7D,MAAM,mBAAmB,GAAG,IAAA,mBAAS,EAAC,eAAe,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC;IACvD,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,IAAI,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,IAAA,oBAAQ,EAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAChE,IACE,CAAC,IAAA,sBAAU,EAAC,IAAI,CAAC;QACjB,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,qBAAS,CAAC;QACjC,SAAS,KAAK,EAAE;QAChB,CAAC,SAAS,KAAK,IAAI;YACjB,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;YACjC,CAAC,IAAA,sBAAU,EAAC,SAAS,CAAC,CAAC;QACzB,YAAY,CAAC,cAAc,EAAE;QAC7B,CAAC,YAAY,CAAC,MAAM,EAAE;QACtB,YAAY,CAAC,KAAK,KAAK,CAAC;QACxB,YAAY,CAAC,IAAI,IAAI,CAAC;QACtB,YAAY,CAAC,IAAI,GAAG,cAAc;QAClC,mBAAmB,CAAC,cAAc,EAAE;QACpC,CAAC,mBAAmB,CAAC,MAAM,EAAE;QAC7B,mBAAmB,CAAC,KAAK,KAAK,CAAC;QAC/B,mBAAmB,CAAC,IAAI,IAAI,CAAC;QAC7B,mBAAmB,CAAC,IAAI,GAAG,GAAG;QAC9B,IAAA,sBAAY,EAAC,eAAe,CAAC,KAAK,eAAe;QACjD,YAAY,CAAC,cAAc,EAAE;QAC7B,CAAC,YAAY,CAAC,MAAM,EAAE;QACtB,YAAY,CAAC,KAAK,KAAK,CAAC;QACxB,YAAY,CAAC,IAAI,IAAI,CAAC;QACtB,YAAY,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QACpC,IAAA,sBAAY,EAAC,QAAQ,CAAC,KAAK,QAAQ;QACnC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC3B,CAAC,OAAO,UAAU,KAAK,QAAQ;gBAC7B,CAAC,IAAA,sBAAU,EAAC,UAAU,CAAC;gBACvB,UAAU,CAAC,QAAQ,CAAC,qBAAS,CAAC;gBAC9B,6BAA6B,CAAC,UAAU,CAAC;gBACzC,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAA,sBAAY,EAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAChE,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,IACE,OAAO,UAAU,KAAK,QAAQ;QAC9B,CAAC,IAAA,kBAAS,EAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;QAC7C,CAAC,oBAAoB,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC7C,CAAC,IAAA,kBAAS,EAAC,mBAAmB,EAAE,UAAU,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAA,8DAAyC,EAAC,QAAQ,CAAC,CAAC;IAC3E,eAAe,EAAE,eAAe,EAAE,EAAE,CAAC;IACrC,OAAO;QACL,WAAW;QACX,cAAc,EAAE,IAAI,GAAG,EAAE;QACzB,QAAQ;QACR,IAAI;QACJ,GAAG,CAAC,WAAW;YACb,CAAC,CAAC;gBACE,aAAa,EAAE,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,iBAAiB,CAAC;aACtE;YACH,CAAC,CAAC,EAAE,CAAC;QACP,cAAc;QACd,gBAAgB,EAAE,IAAI,GAAG,EAAE;QAC3B,iBAAiB;QACjB,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,YAAY;QACZ,aAAa;KACd,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAA+C,EAC/C,WAAmB,EACnB,KAAa;IAEb,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,QAAQ,GAAG,YAAY,CAC3B,IAAA,gBAAI,EAAC,OAAO,CAAC,aAAa,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,EACtE,KAAK,CACN,CAAC;IACF,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAC3B,OAA+C,EAC/C,QAAoC,EACpC,gBAAyC,EACzC,IAA6B,EAC7B,OAAyB;IAEzB,MAAM,GAAG,GAAG,GAAG,QAAQ,SAAS,IAAI,EAAE,CAAC;IACvC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,OAAO,CAAC,eAAe,EAAE,yBAAyB,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrE,MAAM,SAAS,GAAG,aAAa,CAC7B,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,cAAc,EACtB,QAAQ,EACR,gBAAgB,EAChB,IAAI,EACJ,OAAO,EACP,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,iBAAiB,CAC1B,CAAC;IACF,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA0C,EAC1C,WAAoB,EACpB,QAAiD,EACjD,oBAAyC,sBAAY;IAMrD,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1E,IACE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QACrC,KAAK,CAAC,WAAW,KAAK,YAAY,KAAK,CAAC,WAAW,EAAE,EACrD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,QAAQ;QACR,wBAAwB,CACtB,sBAAsB,EACtB,WAAW,EACX,iBAAiB,CAClB,CAAC;IACJ,IACE,OAAO,CAAC,aAAa,KAAK,sBAAsB;QAChD,OAAO,CAAC,WAAW,KAAK,WAAW,EACnC,CAAC;QACD,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAA,gBAAI,EAAC,aAAa,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,IACE,CAAC,IAAA,sBAAU,EAAC,WAAW,CAAC;QACxB,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW;QACzC,IAAA,oBAAQ,EAAC,aAAa,EAAE,WAAW,CAAC,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,uDAAkC,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CACb,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAC5C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACzB,OAAO;YACL,UAAU,EAAE;gBACV,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,WAAW;gBAChB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAClC,IAAI;aACL;YACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,eAAe,GAAG,sBAAsB,CAC5C,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,+CAA+C,CAChD,CAAC;QACF,MAAM,cAAc,GAAG,mBAAmB,CACxC,eAAe,EACf,YAAY,EACZ,yCAAyC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAG,CACf,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CACzB,CAAC;QAChC,MAAM,gBAAgB,GAAG,QAAQ,KAAK,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3E,MAAM,SAAS,GAAG,oBAAoB,CACpC,OAAO,EACP,QAAQ,EACR,gBAAgB,EAChB,YAAY,EACZ,KAAK,CACN,CAAC;QACF,OAAO;YACL,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE;gBACV,SAAS,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,eAAe,CAAC;gBACjE,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,WAAW;gBAChB,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAClC,IAAI;gBACJ,aAAa,EAAE,SAAS,CAAC,QAAQ;aAClC;YACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;SAC1D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;IACjE,MAAM,gBAAgB,GAAG,sBAAsB,CAC7C,OAAO,EACP,KAAK,CAAC,WAAW,EACjB,wDAAwD,CACzD,CAAC;IACF,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,YAAY,CAAC;QACnD,MAAM,SAAS,GAAG,YAAY,CAC5B,IAAA,gBAAI,EAAC,WAAW,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAC3C,iDAAiD,CAClD,CAAC;QACF,MAAM,QAAQ,GACZ,SAAS,CAAC,SAAS;YACnB,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;YACvC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;YACjC,CAAC,CAAE,SAAS,CAAC,SAAqC,CAAC,QAAQ;YAC3D,CAAC,CAAC,SAAS,CAAC;QAChB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,MAAM,kBAAkB,GACtB,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5D,CAAC,CAAE,MAAkC,CAAC,kBAAkB;YACxD,CAAC,CAAC,SAAS,CAAC;QAChB,IACE,CAAC,YAAY;YACb,OAAO,YAAY,KAAK,QAAQ;YAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC;YAC1B,YAAwC,CAAC,IAAI,CAAC,aAAa,CAAC;gBAC3D,aAAa;YACf,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YACxB,CAAC,QAAQ,CAAC,IAAI,CACZ,CAAC,WAAW,EAAE,EAAE,CACd,OAAO,WAAW,KAAK,QAAQ;gBAC/B,WAAW,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CACnD;YACD,CAAC,kBAAkB,KAAK,SAAS;gBAC/B,CAAC,OAAO,kBAAkB,KAAK,QAAQ;oBACrC,CAAC,kBAAkB,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAC9D,CAAC;YACD,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,IAAA,gBAAI,EACpB,aAAa,EACb,gDAAgD,CACjD,CAAC;QACF,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;QACtC,IACE,QAAQ,CAAC,cAAc,EAAE;YACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;YAClB,QAAQ,CAAC,KAAK,KAAK,CAAC;YACpB,QAAQ,CAAC,IAAI,IAAI,CAAC;YAClB,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI;YAC/B,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS;YACrC,IAAA,sBAAY,EAAC,SAAS,EAAE,MAAM,CAAC;gBAC7B,iFAA2C,EAC7C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC;IACnC,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,SAAS,GAAG,oBAAoB,CACpC,OAAO,EACP,GAAG,EACH,YAAY,EACZ,QAAQ,EACR,QAAQ,CACT,CAAC;IACF,OAAO;QACL,aAAa,EAAE,SAAS;QACxB,UAAU,EAAE;YACV,SAAS,EAAE;gBACT,SAAS,CAAC,OAAO;gBACjB,KAAK;gBACL,UAAU;gBACV,YAAY;gBACZ,QAAQ;gBACR,WAAW;gBACX,IAAI,CAAC,IAAI;aACV;YACD,OAAO,EAAE,IAAI;YACb,GAAG,EAAE,IAAA,gBAAI,EAAC,aAAa,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACnD,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;YAClC,IAAI;YACJ,aAAa,EAAE,SAAS,CAAC,QAAQ;SAClC;QACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qCAAqC,CACnD,KAA0C;IAE1C,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,UAAU,CAAC;AACpD,CAAC;AAED,SAAgB,sCAAsC,CACpD,MAAsD,EACtD,oBAAyC,sBAAY,EACrD,eAAsD;IAEtD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,wBAAwB,CACtC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,EACvB,KAAK,EACL,iBAAiB,EACjB,eAAe,CAChB,CAAC;IACF,OAAO,MAAM,CAAC,GAAG,CACf,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,UAAU,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,iCAAiC,CAAC,WAAmB;IAC5D,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAI,IAAA,oBAAU,EAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,+BAA+B,CACtC,aAAqB,EACrB,QAA+C;IAE/C,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,sBAAsB,GAAG,IAAA,sBAAY,EAAC,IAAA,gBAAM,GAAE,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAA,qBAAW,EAC7B,IAAA,gBAAI,EAAC,sBAAsB,EAAE,0BAA0B,CAAC,CACzD,CAAC;IACF,IAAI,CAAC;QACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,IAAA,mBAAS,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,IAAA,oBAAQ,EAAC,sBAAsB,EAAE,WAAW,CAAC,CAAC;QACnE,MAAM,eAAe,GAAG,IAAA,mBAAS,EAAC,WAAW,CAAC,CAAC;QAC/C,IACE,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW;YACzC,eAAe,CAAC,cAAc,EAAE;YAChC,CAAC,eAAe,CAAC,WAAW,EAAE;YAC9B,YAAY,KAAK,EAAE;YACnB,CAAC,YAAY,KAAK,IAAI;gBACpB,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;gBACpC,CAAC,IAAA,sBAAU,EAAC,YAAY,CAAC,CAAC;YAC5B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,WAAmC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACvD,IAAI,UAAkB,CAAC;IACvB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,CAAC,WAAW,CAC9B,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACrE,MAAM,SAAS,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAA,mBAAS,EAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACtC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,IAAA,mBAAS,EAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC3B,CAAC,CAAC,CACH,CAAC;QACF,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC5B;gBACE,sBAAsB;gBACtB,WAAW;gBACX,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC7B,UAAU;gBACV,YAAY;aACb,CAAC,IAAI,CACJ,CAAC,KAAK,EAAE,EAAE,CACR,CAAC,IAAA,sBAAU,EAAC,KAAK,CAAC;gBAClB,KAAK,CAAC,QAAQ,CAAC,qBAAS,CAAC;gBACzB,6BAA6B,CAAC,KAAK,CAAC,CACvC,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,2EAA2E,CAC5E,CAAC;QACJ,CAAC;QACD,IAAA,uBAAa,EAAC,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAA,uBAAa,EAAC,YAAY,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnE,MAAM,mBAAmB,GAAG,IAAA,gBAAI,EAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7D,IAAA,mBAAS,EAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,IAAA,mBAAS,EAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACxE,UAAU,GAAG,IAAA,gBAAI,EAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC;QACtD,IAAA,uBAAa,EAAC,UAAU,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAA,gBAAM,EAAC,WAAW,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,wBAAwB,GAAG,GAAG,EAAE;QACpC,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,WAAW,CAAC,CAAC;QAC5C,IACE,IAAA,sBAAY,EAAC,WAAW,CAAC,KAAK,WAAW;YACzC,YAAY,CAAC,cAAc,EAAE;YAC7B,CAAC,YAAY,CAAC,WAAW,EAAE;YAC3B,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EACvE,CAAC;YACD,MAAM,IAAI,KAAK,CACb,sEAAsE,CACvE,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;YACtC,IACE,IAAA,sBAAY,EAAC,SAAS,CAAC,KAAK,SAAS;gBACrC,QAAQ,CAAC,cAAc,EAAE;gBACzB,CAAC,QAAQ,CAAC,WAAW,EAAE;gBACvB,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;YACJ,CAAC;QACH,CAAC;QACD,KAAK,MAAM,aAAa,IAAI,CAAC,UAAU,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,aAAa,CAAC,CAAC;YAC1C,IACE,IAAA,sBAAY,EAAC,aAAa,CAAC,KAAK,aAAa;gBAC7C,QAAQ,CAAC,cAAc,EAAE;gBACzB,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAClB,QAAQ,CAAC,KAAK,KAAK,CAAC;gBACpB,QAAQ,CAAC,IAAI,KAAK,CAAC;gBACnB,IAAA,sBAAY,EAAC,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE;gBAC1C,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK,CAAC,EACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,wBAAwB,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC;YACtB,GAAG,IAAA,gEAAmC,GAAE;YACxC,+BAA+B,EAAE,GAAG;YACpC,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,uBAAuB,EAAE,YAAY;YACrC,0BAA0B,EAAE,MAAM;YAClC,uBAAuB,EAAE,EAAE;YAC3B,uBAAuB,EAAE,EAAE;YAC3B,qBAAqB,EAAE,UAAU;YACjC,2BAA2B,EAAE,MAAM;YACnC,wBAAwB,EAAE,EAAE;YAC5B,2BAA2B,EAAE,UAAU;YACvC,wBAAwB,EAAE,EAAE;YAC5B,IAAI,EAAE,WAAW,CAAC,SAAS;YAC3B,GAAG,EAAE,WAAW,CAAC,SAAS;YAC1B,MAAM,EAAE,WAAW,CAAC,SAAS;YAC7B,WAAW,EAAE,WAAW,CAAC,IAAI;YAC7B,cAAc,EAAE,WAAW,CAAC,KAAK;YACjC,eAAe,EAAE,WAAW,CAAC,MAAM;YACnC,aAAa,EAAE,WAAW,CAAC,IAAI;YAC/B,cAAc,EAAE,WAAW,CAAC,KAAK;YACjC,uBAAuB,EAAE,YAAY;YACrC,0BAA0B,EAAE,MAAM;YAClC,uBAAuB,EAAE,EAAE;YAC3B,uBAAuB,EAAE,EAAE;YAC3B,qBAAqB,EAAE,UAAU;YACjC,2BAA2B,EAAE,MAAM;YACnC,wBAAwB,EAAE,EAAE;YAC5B,2BAA2B,EAAE,UAAU;YACvC,wBAAwB,EAAE,EAAE;SAC7B,CAAC,CAAC;QACH,wBAAwB,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC;IAChB,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,wBAAwB,EAAE,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,iCAAiC,CAAC,WAAW,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAA0C,EAC1C,QAAoC,8BAAS,EAC7C,oBAAyC,sBAAY;IAKrD,MAAM,EACJ,aAAa,EAAE,IAAI,EACnB,UAAU,EACV,aAAa,GACd,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;IACjE,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,eAAe,GAAG,CAAC,MAAe,EAAE,EAAE;QAC1C,MAAM,YAAY,GAAG,IAAA,mBAAS,EAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QACnD,IACE,IAAA,sBAAY,EAAC,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI;YACvD,YAAY,CAAC,cAAc,EAAE;YAC7B,CAAC,YAAY,CAAC,MAAM,EAAE;YACtB,YAAY,CAAC,KAAK,KAAK,CAAC;YACxB,YAAY,CAAC,IAAI,IAAI,CAAC;YACtB,YAAY,CAAC,IAAI,GAAG,cAAc;YAClC,CAAC,gBAAgB,CAAC,aAAa,CAAC,QAAQ,EAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YACrE,CAAC,MAAM;gBACL,IAAA,wBAAU,EAAC,QAAQ,CAAC;qBACjB,MAAM,CAAC,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;qBAC7C,MAAM,CAAC,KAAK,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,EAC5C,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,IAAI,IAAI;YAAE,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QACjE,KAAK,CAAC,qBAAqB,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;QACxD,KAAK,CAAC,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC,CAAC;IACF,eAAe,CAAC,KAAK,CAAC,CAAC;IACvB,MAAM,MAAM,GAAG,+BAA+B,CAC5C,KAAK,CAAC,aAAa,EACnB,CAAC,WAAW,EAAE,EAAE;QACd,IAAI,CAAC;YACH,OAAO,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE;gBACrD,GAAG,EAAE,UAAU,CAAC,GAAG;gBACnB,QAAQ,EAAE,MAAM;gBAChB,GAAG,EAAE,WAAW;gBAChB,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;gBAC1B,KAAK,EAAE,KAAK;gBACZ,OAAO,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK;gBAC3C,WAAW,EAAE,IAAI;aAClB,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,eAAe,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;IACH,CAAC,CACF,CAAC;IACF,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AAChC,CAAC"}

package/src/supply-chain/build-output.d.ts

@@ -0,0 +1,35 @@
+import type { CycloneDxComponentInput } from './sbom.js';
+export declare const NEXTJS_BUILD_OUTPUT_INVENTORY_KIND: "ebk-nextjs-build-output-inventory";
+export declare const NEXTJS_BUILD_OUTPUT_INVENTORY_SCHEMA_VERSION: 1;
+export interface NextJsBuildOutputInventory {
+    artifactFamily: 'nextjs-build-output';
+    artifactId: string;
+    candidateDigest: string;
+    components: readonly CycloneDxComponentInput[];
+    contentDigest: string;
+    files: readonly {
+        path: string;
+        sha256: string;
+        size: number;
+    }[];
+    kind: typeof NEXTJS_BUILD_OUTPUT_INVENTORY_KIND;
+    materialDigest: string;
+    schemaVersion: typeof NEXTJS_BUILD_OUTPUT_INVENTORY_SCHEMA_VERSION;
+    sourceCommit: string;
+}
+export interface NextJsBuildOutputInventoryInput {
+    artifactId: string;
+    candidateDigest: string;
+    importerManifestPath: string;
+    materialPaths: readonly string[];
+    repositoryRoot: string;
+    sourceCommit: string;
+}
+/**
+ * Inventory a concrete Next.js build from its emitted node-file-trace
+ * manifests. Every material file and every traced runtime file is hashed.
+ * Package identities and dependency edges come from package manifests beside
+ * those traced files, never from the workspace lockfile projection.
+ */
+export declare function createNextJsBuildOutputInventory(input: NextJsBuildOutputInventoryInput): NextJsBuildOutputInventory;
+export declare function validateNextJsBuildOutputInventory(value: unknown, input: NextJsBuildOutputInventoryInput): NextJsBuildOutputInventory;

package/src/supply-chain/build-output.js

@@ -0,0 +1,398 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NEXTJS_BUILD_OUTPUT_INVENTORY_SCHEMA_VERSION = exports.NEXTJS_BUILD_OUTPUT_INVENTORY_KIND = void 0;
+exports.createNextJsBuildOutputInventory = createNextJsBuildOutputInventory;
+exports.validateNextJsBuildOutputInventory = validateNextJsBuildOutputInventory;
+const deterministic_order_js_1 = require("../deterministic-order.js");
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+const validation_js_1 = require("../validation.js");
+const common_js_1 = require("./common.js");
+const errors_js_1 = require("./errors.js");
+const license_expression_js_1 = require("./license-expression.js");
+exports.NEXTJS_BUILD_OUTPUT_INVENTORY_KIND = 'ebk-nextjs-build-output-inventory';
+exports.NEXTJS_BUILD_OUTPUT_INVENTORY_SCHEMA_VERSION = 1;
+const MAX_FILES = 50_000;
+const MAX_DIRECTORIES = 4_096;
+const MAX_FILE_BYTES = 100 * 1024 * 1024;
+const MAX_TOTAL_BYTES = 2 * 1024 * 1024 * 1024;
+const MAX_MATERIAL_PATHS = 64;
+const MAX_TRACE_REFERENCES = MAX_FILES;
+function npmPurl(name, version) {
+    return `pkg:npm/${encodeURIComponent(name)}@${version}`;
+}
+function normalizedChild(root, path, pointer) {
+    const child = (0, node_path_1.relative)(root, path);
+    if (child === '' ||
+        child === '..' ||
+        child.startsWith(`..${node_path_1.sep}`) ||
+        (0, node_path_1.isAbsolute)(child)) {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'resolves outside the build-output repository boundary');
+    }
+    return child.split(node_path_1.sep).join('/');
+}
+function repositoryRelativePath(repositoryRoot, value, pointer) {
+    if (typeof value !== 'string' ||
+        value === '' ||
+        value.trim() !== value ||
+        (0, node_path_1.isAbsolute)(value)) {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', pointer, 'must be a normalized repository-relative path');
+    }
+    const absolute = (0, node_path_1.resolve)(repositoryRoot, value);
+    let path;
+    try {
+        path = normalizedChild(repositoryRoot, absolute, pointer);
+    }
+    catch {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', pointer, 'must stay within the repository boundary');
+    }
+    if (path !== value) {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', pointer, 'must not contain path aliases or parent traversal');
+    }
+    let current = repositoryRoot;
+    for (const segment of path.split('/')) {
+        current = (0, node_path_1.join)(current, segment);
+        try {
+            if ((0, node_fs_1.lstatSync)(current).isSymbolicLink()) {
+                throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'may not traverse symbolic links');
+            }
+        }
+        catch (error) {
+            if (error instanceof errors_js_1.SupplyChainError)
+                throw error;
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'does not identify an existing repository path');
+        }
+    }
+    return { absolute, path };
+}
+function readJsonEvidence(repositoryRoot, absoluteInput, pointer) {
+    let absolute;
+    try {
+        absolute = (0, node_fs_1.realpathSync)(absoluteInput);
+    }
+    catch {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'does not identify readable build-output evidence');
+    }
+    const path = normalizedChild(repositoryRoot, absolute, pointer);
+    let metadata;
+    try {
+        metadata = (0, node_fs_1.lstatSync)(absolute);
+    }
+    catch {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'does not identify readable build-output evidence');
+    }
+    if (!metadata.isFile() || metadata.size > MAX_FILE_BYTES) {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'must be a bounded regular build-output evidence file');
+    }
+    let value;
+    try {
+        value = JSON.parse((0, node_fs_1.readFileSync)(absolute, 'utf8'));
+    }
+    catch {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'must contain valid JSON build-output evidence');
+    }
+    if (!(0, validation_js_1.isRecord)(value)) {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'must contain one JSON object');
+    }
+    return { absolute, path, value };
+}
+function packageRootForFile(path) {
+    const segments = (0, node_path_1.resolve)(path).split(node_path_1.sep);
+    const index = segments.lastIndexOf('node_modules');
+    if (index < 0 || index + 1 >= segments.length)
+        return undefined;
+    const name = segments[index + 1];
+    const end = name?.startsWith('@') ? index + 3 : index + 2;
+    if (end > segments.length)
+        return undefined;
+    return segments.slice(0, end).join(node_path_1.sep) || node_path_1.sep;
+}
+function dependencyManifest(packageRoot, name) {
+    const segments = name.split('/');
+    let current = packageRoot;
+    while (true) {
+        const candidate = (0, node_path_1.join)(current, 'node_modules', ...segments, 'package.json');
+        try {
+            const metadata = (0, node_fs_1.lstatSync)(candidate);
+            if (metadata.isFile() || metadata.isSymbolicLink()) {
+                return (0, node_fs_1.realpathSync)(candidate);
+            }
+        }
+        catch {
+            // Continue through the ordinary Node ancestor lookup.
+        }
+        const parent = (0, node_path_1.dirname)(current);
+        if (parent === current)
+            return undefined;
+        current = parent;
+    }
+}
+function licenseExpressions(manifest) {
+    const declared = Array.isArray(manifest.licenses)
+        ? manifest.licenses.map((license) => typeof license === 'string'
+            ? license
+            : (0, validation_js_1.isRecord)(license)
+                ? license.type
+                : undefined)
+        : [manifest.license];
+    const expressions = declared.flatMap((license) => {
+        if (typeof license !== 'string')
+            return [];
+        try {
+            return [(0, license_expression_js_1.normalizeSpdxLicenseExpression)(license)];
+        }
+        catch {
+            return [];
+        }
+    });
+    return expressions.length === 0
+        ? ['LicenseRef-Unknown']
+        : [...new Set(expressions)].sort();
+}
+function inventoryInput(inventory) {
+    const { materialDigest: _materialDigest, ...input } = inventory;
+    return input;
+}
+/**
+ * Inventory a concrete Next.js build from its emitted node-file-trace
+ * manifests. Every material file and every traced runtime file is hashed.
+ * Package identities and dependency edges come from package manifests beside
+ * those traced files, never from the workspace lockfile projection.
+ */
+function createNextJsBuildOutputInventory(input) {
+    if (!common_js_1.SUPPLY_CHAIN_REFERENCE.test(input.artifactId) ||
+        !common_js_1.SUPPLY_CHAIN_SHA256.test(input.candidateDigest) ||
+        !/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(input.sourceCommit) ||
+        !Array.isArray(input.materialPaths) ||
+        input.materialPaths.length === 0 ||
+        input.materialPaths.length > MAX_MATERIAL_PATHS ||
+        (0, common_js_1.hasSensitiveSupplyChainShape)(input)) {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', 'buildOutput', 'must identify one exact release candidate and nonempty material boundary');
+    }
+    let repositoryRoot;
+    try {
+        repositoryRoot = (0, node_fs_1.realpathSync)((0, node_path_1.resolve)(input.repositoryRoot));
+    }
+    catch {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', 'repositoryRoot', 'must identify one existing repository root');
+    }
+    const files = new Map();
+    const materialFiles = new Map();
+    let visitedDirectories = 0;
+    let discoveredBytes = 0;
+    const addFile = (absoluteInput, pointer) => {
+        let absolute;
+        try {
+            absolute = (0, node_fs_1.realpathSync)(absoluteInput);
+        }
+        catch {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'does not identify a readable build-output file');
+        }
+        const path = normalizedChild(repositoryRoot, absolute, pointer);
+        let metadata;
+        try {
+            metadata = (0, node_fs_1.lstatSync)(absolute);
+        }
+        catch {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'does not identify a readable build-output file');
+        }
+        const existing = files.get(path);
+        if (!metadata.isFile() || metadata.size > MAX_FILE_BYTES) {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'must be a bounded regular build-output file');
+        }
+        if (existing === undefined) {
+            if (files.size >= MAX_FILES ||
+                discoveredBytes + metadata.size > MAX_TOTAL_BYTES) {
+                throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'exceeds the bounded build-output file or byte inventory');
+            }
+            discoveredBytes += metadata.size;
+        }
+        else if (existing !== absolute) {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'aliases one build-output path to multiple files');
+        }
+        files.set(path, absolute);
+        return { absolute, path };
+    };
+    const visitMaterial = (absolute, pointer) => {
+        let metadata;
+        try {
+            metadata = (0, node_fs_1.lstatSync)(absolute);
+        }
+        catch {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'does not identify an existing build-output material path');
+        }
+        if (metadata.isSymbolicLink()) {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'material paths may not traverse symbolic links');
+        }
+        if (metadata.isDirectory()) {
+            visitedDirectories += 1;
+            if (visitedDirectories > MAX_DIRECTORIES) {
+                throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', pointer, 'exceeds the bounded build-output directory inventory');
+            }
+            for (const child of (0, node_fs_1.readdirSync)(absolute).sort()) {
+                visitMaterial((0, node_path_1.join)(absolute, child), pointer);
+            }
+            return;
+        }
+        const file = addFile(absolute, pointer);
+        materialFiles.set(file.path, file);
+    };
+    const materialPaths = input.materialPaths.map((path, index) => repositoryRelativePath(repositoryRoot, path, `materialPaths[${index}]`));
+    if (new Set(materialPaths.map(({ path }) => path)).size !== materialPaths.length) {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', 'materialPaths', 'must not contain duplicate build-output boundaries');
+    }
+    if (materialPaths.some(({ path }, index) => materialPaths.some(({ path: other }, otherIndex) => index !== otherIndex && other.startsWith(`${path}/`)))) {
+        throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', 'materialPaths', 'must contain disjoint non-overlapping build-output boundaries');
+    }
+    materialPaths.forEach(({ absolute }, index) => visitMaterial(absolute, `materialPaths[${index}]`));
+    const traces = [...materialFiles.values()].filter(({ path }) => path.endsWith('.nft.json'));
+    if (traces.length === 0) {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', 'buildOutput.traces', 'Next.js final-bundle coverage requires emitted node-file-trace manifests');
+    }
+    const packages = new Map();
+    for (const trace of traces) {
+        const document = readJsonEvidence(repositoryRoot, trace.absolute, trace.path).value;
+        if (!(0, validation_js_1.isRecord)(document) ||
+            document.version !== 1 ||
+            !Array.isArray(document.files) ||
+            document.files.length > MAX_TRACE_REFERENCES ||
+            document.files.some((path) => typeof path !== 'string' ||
+                path === '' ||
+                path.trim() !== path ||
+                (0, node_path_1.isAbsolute)(path))) {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', trace.path, 'must be a Next.js node-file-trace v1 document');
+        }
+        if (new Set(document.files).size !== document.files.length) {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', `${trace.path}#files`, 'must not contain duplicate traced-file references');
+        }
+        for (const [index, reference] of document.files.entries()) {
+            const traced = addFile((0, node_path_1.resolve)((0, node_path_1.dirname)(trace.absolute), reference), `${trace.path}#files[${index}]`);
+            const packageRoot = packageRootForFile(traced.absolute);
+            if (!packageRoot)
+                continue;
+            const manifestPath = (0, node_path_1.join)(packageRoot, 'package.json');
+            const manifestFile = readJsonEvidence(repositoryRoot, manifestPath, `${trace.path}#files[${index}].package`);
+            const manifest = manifestFile.value;
+            if (!(0, validation_js_1.isRecord)(manifest) ||
+                typeof manifest.name !== 'string' ||
+                !common_js_1.SUPPLY_CHAIN_PACKAGE_NAME.test(manifest.name) ||
+                typeof manifest.version !== 'string' ||
+                !common_js_1.SUPPLY_CHAIN_EXACT_VERSION.test(manifest.version)) {
+                throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', manifestFile.path, 'must identify one exact traced npm package');
+            }
+            const identity = `${manifest.name}@${manifest.version}`;
+            const previous = packages.get(identity);
+            if (previous && previous.root !== packageRoot) {
+                throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', manifestFile.path, `contains ambiguous package bytes for ${identity}`);
+            }
+            packages.set(identity, { manifest, root: packageRoot });
+        }
+    }
+    if (packages.size === 0) {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', 'buildOutput.components', 'the final bundle trace contains no attributable npm package bytes');
+    }
+    const importerPath = repositoryRelativePath(repositoryRoot, input.importerManifestPath, 'importerManifestPath');
+    const importerManifest = readJsonEvidence(repositoryRoot, importerPath.absolute, 'importerManifestPath').value;
+    const includedByManifest = new Map([...packages].map(([identity, record]) => [
+        (0, node_fs_1.realpathSync)((0, node_path_1.join)(record.root, 'package.json')),
+        identity,
+    ]));
+    const directIdentity = new Map();
+    for (const [section, scope] of [
+        ['dependencies', 'required'],
+        ['optionalDependencies', 'optional'],
+    ]) {
+        const dependencies = importerManifest[section];
+        if (!(0, validation_js_1.isRecord)(dependencies))
+            continue;
+        for (const name of Object.keys(dependencies)) {
+            const manifestPath = dependencyManifest((0, node_path_1.dirname)(importerPath.absolute), name);
+            const identity = manifestPath === undefined
+                ? undefined
+                : includedByManifest.get(manifestPath);
+            if (identity)
+                directIdentity.set(identity, scope);
+        }
+    }
+    const components = [...packages.entries()]
+        .sort(([left], [right]) => (0, deterministic_order_js_1.compareUtf16)(left, right))
+        .map(([identity, record]) => {
+        const manifest = record.manifest;
+        const dependencies = new Set();
+        for (const section of ['dependencies', 'optionalDependencies']) {
+            const declared = manifest[section];
+            if (!(0, validation_js_1.isRecord)(declared))
+                continue;
+            for (const name of Object.keys(declared)) {
+                const manifestPath = dependencyManifest(record.root, name);
+                const dependencyIdentity = manifestPath === undefined
+                    ? undefined
+                    : includedByManifest.get(manifestPath);
+                if (dependencyIdentity) {
+                    const dependency = packages.get(dependencyIdentity);
+                    if (!dependency)
+                        continue;
+                    dependencies.add(npmPurl(String(dependency.manifest.name), String(dependency.manifest.version)));
+                }
+            }
+        }
+        const name = String(manifest.name);
+        const version = String(manifest.version);
+        return {
+            dependencies: [...dependencies].sort(),
+            direct: directIdentity.has(identity),
+            licenses: licenseExpressions(manifest),
+            name,
+            purl: npmPurl(name, version),
+            scope: directIdentity.get(identity) ?? 'required',
+            type: name.startsWith('@empire-builder-kit/') ? 'framework' : 'library',
+            version,
+        };
+    });
+    let totalBytes = 0;
+    const fileInventory = [...files.entries()]
+        .sort(([left], [right]) => (0, deterministic_order_js_1.compareUtf16)(left, right))
+        .map(([path, absolute]) => {
+        const content = (0, node_fs_1.readFileSync)(absolute);
+        totalBytes += content.byteLength;
+        if (totalBytes > MAX_TOTAL_BYTES) {
+            throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', 'buildOutput.files', 'exceeds the bounded build-output byte inventory');
+        }
+        return {
+            path,
+            sha256: (0, node_crypto_1.createHash)('sha256').update(content).digest('hex'),
+            size: content.byteLength,
+        };
+    });
+    const normalized = {
+        artifactFamily: 'nextjs-build-output',
+        artifactId: input.artifactId,
+        candidateDigest: input.candidateDigest,
+        components,
+        contentDigest: (0, common_js_1.supplyChainDigest)(fileInventory),
+        files: fileInventory,
+        kind: exports.NEXTJS_BUILD_OUTPUT_INVENTORY_KIND,
+        schemaVersion: exports.NEXTJS_BUILD_OUTPUT_INVENTORY_SCHEMA_VERSION,
+        sourceCommit: input.sourceCommit,
+    };
+    return {
+        ...normalized,
+        materialDigest: (0, common_js_1.supplyChainDigest)(normalized),
+    };
+}
+function validateNextJsBuildOutputInventory(value, input) {
+    if (!(0, validation_js_1.isRecord)(value) ||
+        value.kind !== exports.NEXTJS_BUILD_OUTPUT_INVENTORY_KIND ||
+        value.schemaVersion !== exports.NEXTJS_BUILD_OUTPUT_INVENTORY_SCHEMA_VERSION ||
+        typeof value.materialDigest !== 'string') {
+        throw new errors_js_1.SupplyChainError('supply-chain-sbom-omission', 'buildOutput', 'must be an EBK Next.js build-output inventory v1');
+    }
+    const current = createNextJsBuildOutputInventory(input);
+    if ((0, common_js_1.supplyChainDigest)(value) !== (0, common_js_1.supplyChainDigest)(current) ||
+        value.materialDigest !== (0, common_js_1.supplyChainDigest)(inventoryInput(current))) {
+        throw new errors_js_1.SupplyChainError('supply-chain-artifact-mismatch', 'buildOutput', 'does not match the independently re-inventoried Next.js build output');
+    }
+    return current;
+}
+//# sourceMappingURL=build-output.js.map

package/src/supply-chain/build-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-output.js","sourceRoot":"","sources":["../../../../../packages/nx/src/supply-chain/build-output.ts"],"names":[],"mappings":";;;AAyQA,4EA4VC;AAED,gFA4BC;AAnoBD,sEAAyD;AACzD,6CAAyC;AACzC,qCAA6E;AAC7E,yCAA8E;AAE9E,oDAA4C;AAC5C,2CAOqB;AACrB,2CAA+C;AAC/C,mEAAyE;AAG5D,QAAA,kCAAkC,GAC7C,mCAA4C,CAAC;AAClC,QAAA,4CAA4C,GAAG,CAAU,CAAC;AAiCvE,MAAM,SAAS,GAAG,MAAM,CAAC;AACzB,MAAM,eAAe,GAAG,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,oBAAoB,GAAG,SAAS,CAAC;AAEvC,SAAS,OAAO,CAAC,IAAY,EAAE,OAAe;IAC5C,OAAO,WAAW,kBAAkB,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY,EAAE,OAAe;IAClE,MAAM,KAAK,GAAG,IAAA,oBAAQ,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACnC,IACE,KAAK,KAAK,EAAE;QACZ,KAAK,KAAK,IAAI;QACd,KAAK,CAAC,UAAU,CAAC,KAAK,eAAG,EAAE,CAAC;QAC5B,IAAA,sBAAU,EAAC,KAAK,CAAC,EACjB,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,sBAAsB,CAC7B,cAAsB,EACtB,KAAc,EACd,OAAe;IAEf,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,EAAE;QACZ,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK;QACtB,IAAA,sBAAU,EAAC,KAAK,CAAC,EACjB,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,eAAe,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,0CAA0C,CAC3C,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,cAAc,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,OAAO,GAAG,IAAA,gBAAI,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,IAAI,IAAA,mBAAS,EAAC,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC;gBACxC,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,iCAAiC,CAClC,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,4BAAgB;gBAAE,MAAM,KAAK,CAAC;YACnD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,+CAA+C,CAChD,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,gBAAgB,CACvB,cAAsB,EACtB,aAAqB,EACrB,OAAe;IAEf,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,IAAA,mBAAS,EAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;QACzD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAY,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,+CAA+C,CAChD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,8BAA8B,CAC/B,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,eAAG,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1D,IAAI,GAAG,GAAG,QAAQ,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,eAAG,CAAC,IAAI,eAAG,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CACzB,WAAmB,EACnB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,OAAO,GAAG,WAAW,CAAC;IAC1B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAA,gBAAI,EACpB,OAAO,EACP,cAAc,EACd,GAAG,QAAQ,EACX,cAAc,CACf,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAA,mBAAS,EAAC,SAAS,CAAC,CAAC;YACtC,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;gBACnD,OAAO,IAAA,sBAAY,EAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QACD,MAAM,MAAM,GAAG,IAAA,mBAAO,EAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QACzC,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAiC;IAC3D,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/C,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAChC,OAAO,OAAO,KAAK,QAAQ;YACzB,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,IAAA,wBAAQ,EAAC,OAAO,CAAC;gBACjB,CAAC,CAAC,OAAO,CAAC,IAAI;gBACd,CAAC,CAAC,SAAS,CAChB;QACH,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvB,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC/C,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,OAAO,CAAC,IAAA,sDAA8B,EAAC,OAAO,CAAC,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,WAAW,CAAC,MAAM,KAAK,CAAC;QAC7B,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACxB,CAAC,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,cAAc,CACrB,SAAqC;IAErC,MAAM,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,KAAK,EAAE,GAAG,SAAS,CAAC;IAChE,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gCAAgC,CAC9C,KAAsC;IAEtC,IACE,CAAC,kCAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;QAC9C,CAAC,+BAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC;QAChD,CAAC,iCAAiC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QAC3D,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC;QACnC,KAAK,CAAC,aAAa,CAAC,MAAM,KAAK,CAAC;QAChC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,kBAAkB;QAC/C,IAAA,wCAA4B,EAAC,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,aAAa,EACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,IAAA,sBAAY,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,gBAAgB,EAChB,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8C,CAAC;IAC5E,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,aAAqB,EAAE,OAAe,EAAE,EAAE;QACzD,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,sBAAY,EAAC,aAAa,CAAC,CAAC;QACzC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,eAAe,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,mBAAS,EAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,GAAG,cAAc,EAAE,CAAC;YACzD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,6CAA6C,CAC9C,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IACE,KAAK,CAAC,IAAI,IAAI,SAAS;gBACvB,eAAe,GAAG,QAAQ,CAAC,IAAI,GAAG,eAAe,EACjD,CAAC;gBACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,yDAAyD,CAC1D,CAAC;YACJ,CAAC;YACD,eAAe,IAAI,QAAQ,CAAC,IAAI,CAAC;QACnC,CAAC;aAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAAE,OAAe,EAAQ,EAAE;QAChE,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,mBAAS,EAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,0DAA0D,CAC3D,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,gDAAgD,CACjD,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;YAC3B,kBAAkB,IAAI,CAAC,CAAC;YACxB,IAAI,kBAAkB,GAAG,eAAe,EAAE,CAAC;gBACzC,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,OAAO,EACP,sDAAsD,CACvD,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;gBACjD,aAAa,CAAC,IAAA,gBAAI,EAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;YAChD,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACxC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC;IACF,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC5D,sBAAsB,CAAC,cAAc,EAAE,IAAI,EAAE,iBAAiB,KAAK,GAAG,CAAC,CACxE,CAAC;IACF,IACE,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAC5E,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,eAAe,EACf,oDAAoD,CACrD,CAAC;IACJ,CAAC;IACD,IACE,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,CACrC,aAAa,CAAC,IAAI,CAChB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAC9B,KAAK,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CACvD,CACF,EACD,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,eAAe,EACf,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,CAC5C,aAAa,CAAC,QAAQ,EAAE,iBAAiB,KAAK,GAAG,CAAC,CACnD,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAC7D,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC3B,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,oBAAoB,EACpB,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,cAAc,EACd,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,IAAI,CACX,CAAC,KAAK,CAAC;QACR,IACE,CAAC,IAAA,wBAAQ,EAAC,QAAQ,CAAC;YACnB,QAAQ,CAAC,OAAO,KAAK,CAAC;YACtB,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC9B,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,oBAAoB;YAC5C,QAAQ,CAAC,KAAK,CAAC,IAAI,CACjB,CAAC,IAAI,EAAE,EAAE,CACP,OAAO,IAAI,KAAK,QAAQ;gBACxB,IAAI,KAAK,EAAE;gBACX,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI;gBACpB,IAAA,sBAAU,EAAC,IAAI,CAAC,CACnB,EACD,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,KAAK,CAAC,IAAI,EACV,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3D,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,GAAG,KAAK,CAAC,IAAI,QAAQ,EACrB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1D,MAAM,MAAM,GAAG,OAAO,CACpB,IAAA,mBAAO,EAAC,IAAA,mBAAO,EAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,SAAmB,CAAC,EACrD,GAAG,KAAK,CAAC,IAAI,UAAU,KAAK,GAAG,CAChC,CAAC;YACF,MAAM,WAAW,GAAG,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACxD,IAAI,CAAC,WAAW;gBAAE,SAAS;YAC3B,MAAM,YAAY,GAAG,IAAA,gBAAI,EAAC,WAAW,EAAE,cAAc,CAAC,CAAC;YACvD,MAAM,YAAY,GAAG,gBAAgB,CACnC,cAAc,EACd,YAAY,EACZ,GAAG,KAAK,CAAC,IAAI,UAAU,KAAK,WAAW,CACxC,CAAC;YACF,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC;YACpC,IACE,CAAC,IAAA,wBAAQ,EAAC,QAAQ,CAAC;gBACnB,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;gBACjC,CAAC,qCAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC9C,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;gBACpC,CAAC,sCAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAClD,CAAC;gBACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,YAAY,CAAC,IAAI,EACjB,4CAA4C,CAC7C,CAAC;YACJ,CAAC;YACD,MAAM,QAAQ,GAAG,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxC,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBAC9C,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,YAAY,CAAC,IAAI,EACjB,wCAAwC,QAAQ,EAAE,CACnD,CAAC;YACJ,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,wBAAwB,EACxB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,sBAAsB,CACzC,cAAc,EACd,KAAK,CAAC,oBAAoB,EAC1B,sBAAsB,CACvB,CAAC;IACF,MAAM,gBAAgB,GAAG,gBAAgB,CACvC,cAAc,EACd,YAAY,CAAC,QAAQ,EACrB,sBAAsB,CACvB,CAAC,KAAK,CAAC;IACR,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC;QACxC,IAAA,sBAAY,EAAC,IAAA,gBAAI,EAAC,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC/C,QAAQ;KACT,CAAC,CACH,CAAC;IACF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmC,CAAC;IAClE,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI;QAC7B,CAAC,cAAc,EAAE,UAAU,CAAC;QAC5B,CAAC,sBAAsB,EAAE,UAAU,CAAC;KAC5B,EAAE,CAAC;QACX,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAA,wBAAQ,EAAC,YAAY,CAAC;YAAE,SAAS;QACtC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,kBAAkB,CACrC,IAAA,mBAAO,EAAC,YAAY,CAAC,QAAQ,CAAC,EAC9B,IAAI,CACL,CAAC;YACF,MAAM,QAAQ,GACZ,YAAY,KAAK,SAAS;gBACxB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC3C,IAAI,QAAQ;gBAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAA2B,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QACvC,KAAK,MAAM,OAAO,IAAI,CAAC,cAAc,EAAE,sBAAsB,CAAU,EAAE,CAAC;YACxE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YACnC,IAAI,CAAC,IAAA,wBAAQ,EAAC,QAAQ,CAAC;gBAAE,SAAS;YAClC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAC3D,MAAM,kBAAkB,GACtB,YAAY,KAAK,SAAS;oBACxB,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBAC3C,IAAI,kBAAkB,EAAE,CAAC;oBACvB,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;oBACpD,IAAI,CAAC,UAAU;wBAAE,SAAS;oBAC1B,YAAY,CAAC,GAAG,CACd,OAAO,CACL,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CACpC,CACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,OAAO;YACL,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;YACtC,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC;YACpC,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC;YACtC,IAAI;YACJ,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;YAC5B,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU;YACjD,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YACvE,OAAO;SACR,CAAC;IACJ,CAAC,CAAC,CAAC;IAEL,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,aAAa,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACvC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE;QACxB,MAAM,OAAO,GAAG,IAAA,sBAAY,EAAC,QAAQ,CAAC,CAAC;QACvC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;QACjC,IAAI,UAAU,GAAG,eAAe,EAAE,CAAC;YACjC,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,mBAAmB,EACnB,iDAAiD,CAClD,CAAC;QACJ,CAAC;QACD,OAAO;YACL,IAAI;YACJ,MAAM,EAAE,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC1D,IAAI,EAAE,OAAO,CAAC,UAAU;SACzB,CAAC;IACJ,CAAC,CAAC,CAAC;IACL,MAAM,UAAU,GAAuD;QACrE,cAAc,EAAE,qBAAqB;QACrC,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU;QACV,aAAa,EAAE,IAAA,6BAAiB,EAAC,aAAa,CAAC;QAC/C,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,0CAAkC;QACxC,aAAa,EAAE,oDAA4C;QAC3D,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC;IACF,OAAO;QACL,GAAG,UAAU;QACb,cAAc,EAAE,IAAA,6BAAiB,EAAC,UAAU,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAgB,kCAAkC,CAChD,KAAc,EACd,KAAsC;IAEtC,IACE,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;QAChB,KAAK,CAAC,IAAI,KAAK,0CAAkC;QACjD,KAAK,CAAC,aAAa,KAAK,oDAA4C;QACpE,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EACxC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,aAAa,EACb,kDAAkD,CACnD,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IACxD,IACE,IAAA,6BAAiB,EAAC,KAAK,CAAC,KAAK,IAAA,6BAAiB,EAAC,OAAO,CAAC;QACvD,KAAK,CAAC,cAAc,KAAK,IAAA,6BAAiB,EAAC,cAAc,CAAC,OAAO,CAAC,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,aAAa,EACb,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/src/supply-chain/common.d.ts

@@ -0,0 +1,21 @@
+import type { ValidationIssue } from '../validation.js';
+export declare const SUPPLY_CHAIN_SHA256: RegExp;
+export declare const SUPPLY_CHAIN_PACKAGE_NAME: RegExp;
+export declare const SUPPLY_CHAIN_EXACT_VERSION: RegExp;
+export declare const SUPPLY_CHAIN_REFERENCE: RegExp;
+export declare function addSupplyChainIssue(issues: ValidationIssue[], path: string, message: string): void;
+export declare function canonicalizeSupplyChainValue(value: unknown): string;
+export declare function supplyChainDigest(value: unknown): string;
+export declare function hasSensitiveSupplyChainShape(value: unknown): boolean;
+export declare function requireSupplyChainString(value: unknown, path: string, issues: ValidationIssue[], options?: {
+    maxLength?: number;
+    pattern?: RegExp;
+    sensitive?: boolean;
+}): value is string;
+export declare function requireSupplyChainTimestamp(value: unknown, path: string, issues: ValidationIssue[]): value is string;
+export declare function rejectSupplyChainProperties(value: Record<string, unknown>, allowed: readonly string[], path: string, issues: ValidationIssue[]): void;
+export declare function sortedUniqueSupplyChainStrings(value: unknown, path: string, issues: ValidationIssue[], options?: {
+    allowEmpty?: boolean;
+    pattern?: RegExp;
+    sensitive?: boolean;
+}): string[];

package/src/supply-chain/common.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SUPPLY_CHAIN_REFERENCE = exports.SUPPLY_CHAIN_EXACT_VERSION = exports.SUPPLY_CHAIN_PACKAGE_NAME = exports.SUPPLY_CHAIN_SHA256 = void 0;
+exports.addSupplyChainIssue = addSupplyChainIssue;
+exports.canonicalizeSupplyChainValue = canonicalizeSupplyChainValue;
+exports.supplyChainDigest = supplyChainDigest;
+exports.hasSensitiveSupplyChainShape = hasSensitiveSupplyChainShape;
+exports.requireSupplyChainString = requireSupplyChainString;
+exports.requireSupplyChainTimestamp = requireSupplyChainTimestamp;
+exports.rejectSupplyChainProperties = rejectSupplyChainProperties;
+exports.sortedUniqueSupplyChainStrings = sortedUniqueSupplyChainStrings;
+const node_crypto_1 = require("node:crypto");
+const canonical_json_1 = require("@empire-builder-kit/runtime/canonical-json");
+const safe_reference_1 = require("@empire-builder-kit/runtime/safe-reference");
+const sensitive_patterns_1 = require("@empire-builder-kit/runtime/sensitive-patterns");
+exports.SUPPLY_CHAIN_SHA256 = /^[a-f0-9]{64}$/;
+exports.SUPPLY_CHAIN_PACKAGE_NAME = /^(?:@[A-Za-z0-9][A-Za-z0-9._-]*\/)?[A-Za-z0-9][A-Za-z0-9._-]*$/;
+exports.SUPPLY_CHAIN_EXACT_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
+exports.SUPPLY_CHAIN_REFERENCE = new RegExp((0, safe_reference_1.safeReferencePatternSource)('supply-chain'));
+const SENSITIVE_FIELD = /(?:secret|password|token|credential|private[-_]?key|access[-_]?key)/i;
+function addSupplyChainIssue(issues, path, message) {
+    issues.push({ message, path });
+}
+function canonicalizeSupplyChainValue(value) {
+    return (0, canonical_json_1.canonicalJson)(value);
+}
+function supplyChainDigest(value) {
+    return (0, node_crypto_1.createHash)('sha256')
+        .update(typeof value === 'string' ? value : canonicalizeSupplyChainValue(value), 'utf8')
+        .digest('hex');
+}
+function hasSensitiveSupplyChainShape(value) {
+    if (typeof value === 'string') {
+        return (0, sensitive_patterns_1.hasCredentialShape)(value);
+    }
+    if (Array.isArray(value)) {
+        return value.some(hasSensitiveSupplyChainShape);
+    }
+    if (value !== null && typeof value === 'object') {
+        return Object.entries(value).some(([key, child]) => SENSITIVE_FIELD.test(key) || hasSensitiveSupplyChainShape(child));
+    }
+    return false;
+}
+function requireSupplyChainString(value, path, issues, options = {}) {
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value !== value.trim() ||
+        value.length > (options.maxLength ?? 1024) ||
+        [...value].some((character) => {
+            const codePoint = character.codePointAt(0) ?? 0;
+            return (codePoint <= 31 ||
+                (codePoint >= 127 && codePoint <= 159) ||
+                codePoint === 0x2028 ||
+                codePoint === 0x2029);
+        }) ||
+        (options.pattern !== undefined && !options.pattern.test(value))) {
+        addSupplyChainIssue(issues, path, 'must be a bounded, trimmed, control-free string');
+        return false;
+    }
+    if (options.sensitive && hasSensitiveSupplyChainShape(value)) {
+        addSupplyChainIssue(issues, path, 'must not contain a credential shape');
+        return false;
+    }
+    return true;
+}
+function requireSupplyChainTimestamp(value, path, issues) {
+    if (typeof value !== 'string' ||
+        !Number.isFinite(Date.parse(value)) ||
+        new Date(value).toISOString() !== value) {
+        addSupplyChainIssue(issues, path, 'must be a canonical ISO-8601 timestamp');
+        return false;
+    }
+    return true;
+}
+function rejectSupplyChainProperties(value, allowed, path, issues) {
+    const allowedSet = new Set(allowed);
+    for (const key of Object.keys(value)) {
+        if (!allowedSet.has(key)) {
+            addSupplyChainIssue(issues, `${path}.${key}`, SENSITIVE_FIELD.test(key)
+                ? 'sensitive-value properties are forbidden'
+                : 'is not a supported property');
+        }
+    }
+}
+function sortedUniqueSupplyChainStrings(value, path, issues, options = {}) {
+    if (!Array.isArray(value) || (!options.allowEmpty && value.length === 0)) {
+        addSupplyChainIssue(issues, path, options.allowEmpty
+            ? 'must be an array'
+            : 'must contain at least one entry');
+        return [];
+    }
+    const entries = [];
+    value.forEach((entry, index) => {
+        if (requireSupplyChainString(entry, `${path}[${index}]`, issues, {
+            maxLength: 256,
+            pattern: options.pattern,
+            sensitive: options.sensitive,
+        })) {
+            entries.push(entry);
+        }
+    });
+    if (new Set(entries).size !== entries.length) {
+        addSupplyChainIssue(issues, path, 'must not contain duplicates');
+    }
+    return [...entries].sort();
+}
+//# sourceMappingURL=common.js.map