@empire-builder-kit/nx 1.0.0-beta.9 → 1.0.0-rc.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/NOTICE +6 -0
- package/README.md +113 -3
- package/executors.json +30 -0
- package/package.json +84 -6
- package/src/api-contract/baseline-update.d.ts +82 -0
- package/src/api-contract/baseline-update.js +225 -0
- package/src/api-contract/baseline-update.js.map +1 -0
- package/src/api-contract/compatibility.d.ts +30 -0
- package/src/api-contract/compatibility.js +643 -0
- package/src/api-contract/compatibility.js.map +1 -0
- package/src/api-contract/contract-graph.d.ts +35 -0
- package/src/api-contract/contract-graph.js +141 -0
- package/src/api-contract/contract-graph.js.map +1 -0
- package/src/api-contract/evidence.d.ts +23 -0
- package/src/api-contract/evidence.js +87 -0
- package/src/api-contract/evidence.js.map +1 -0
- package/src/api-contract/index.d.ts +6 -0
- package/src/api-contract/index.js +10 -0
- package/src/api-contract/index.js.map +1 -0
- package/src/api-contract/model.d.ts +144 -0
- package/src/api-contract/model.fixtures.d.ts +2 -0
- package/src/api-contract/model.fixtures.js +81 -0
- package/src/api-contract/model.fixtures.js.map +1 -0
- package/src/api-contract/model.js +993 -0
- package/src/api-contract/model.js.map +1 -0
- package/src/api-contract/rollout.d.ts +32 -0
- package/src/api-contract/rollout.js +88 -0
- package/src/api-contract/rollout.js.map +1 -0
- package/src/authorization/compatibility.d.ts +62 -0
- package/src/authorization/compatibility.js +175 -0
- package/src/authorization/compatibility.js.map +1 -0
- package/src/authorization/index.d.ts +1 -0
- package/src/authorization/index.js +5 -0
- package/src/authorization/index.js.map +1 -0
- package/src/blueprints/execution.d.ts +25 -1
- package/src/blueprints/execution.js +246 -83
- package/src/blueprints/execution.js.map +1 -1
- package/src/blueprints/external-sandbox.d.ts +53 -0
- package/src/blueprints/external-sandbox.js +1182 -0
- package/src/blueprints/external-sandbox.js.map +1 -0
- package/src/blueprints/manifest.d.ts +42 -2
- package/src/blueprints/manifest.js +82 -27
- package/src/blueprints/manifest.js.map +1 -1
- package/src/blueprints/resolver.d.ts +14 -5
- package/src/blueprints/resolver.js +228 -68
- package/src/blueprints/resolver.js.map +1 -1
- package/src/cli/agent-command.d.ts +30 -0
- package/src/cli/agent-command.js +204 -0
- package/src/cli/agent-command.js.map +1 -0
- package/src/cli/agent-runtime.d.ts +25 -0
- package/src/cli/agent-runtime.js +488 -0
- package/src/cli/agent-runtime.js.map +1 -0
- package/src/cli/blueprint-authority.d.ts +9 -0
- package/src/cli/blueprint-authority.js +43 -0
- package/src/cli/blueprint-authority.js.map +1 -0
- package/src/cli/blueprint-command.d.ts +24 -0
- package/src/cli/blueprint-command.js +63 -0
- package/src/cli/blueprint-command.js.map +1 -0
- package/src/cli/bootstrap.d.ts +31 -0
- package/src/cli/bootstrap.js +165 -0
- package/src/cli/bootstrap.js.map +1 -0
- package/src/cli/dev-command.d.ts +92 -0
- package/src/cli/dev-command.js +561 -0
- package/src/cli/dev-command.js.map +1 -0
- package/src/cli/main.d.ts +131 -0
- package/src/cli/main.js +1199 -0
- package/src/cli/main.js.map +1 -0
- package/src/cli/output.d.ts +19 -0
- package/src/cli/output.js +51 -0
- package/src/cli/output.js.map +1 -0
- package/src/cli/personal-secret-runtime.d.ts +81 -0
- package/src/cli/personal-secret-runtime.js +567 -0
- package/src/cli/personal-secret-runtime.js.map +1 -0
- package/src/cli/secret-terminal.d.ts +12 -0
- package/src/cli/secret-terminal.js +128 -0
- package/src/cli/secret-terminal.js.map +1 -0
- package/src/container-images.d.ts +1 -0
- package/src/container-images.js +5 -0
- package/src/container-images.js.map +1 -0
- package/src/data-lifecycle/index.d.ts +3 -0
- package/src/data-lifecycle/index.js +7 -0
- package/src/data-lifecycle/index.js.map +1 -0
- package/src/data-lifecycle/model.d.ts +172 -0
- package/src/data-lifecycle/model.fixtures.d.ts +2 -0
- package/src/data-lifecycle/model.fixtures.js +244 -0
- package/src/data-lifecycle/model.fixtures.js.map +1 -0
- package/src/data-lifecycle/model.js +95 -0
- package/src/data-lifecycle/model.js.map +1 -0
- package/src/data-lifecycle/sensitive-artifacts.d.ts +28 -0
- package/src/data-lifecycle/sensitive-artifacts.js +146 -0
- package/src/data-lifecycle/sensitive-artifacts.js.map +1 -0
- package/src/data-lifecycle/validation.d.ts +32 -0
- package/src/data-lifecycle/validation.js +837 -0
- package/src/data-lifecycle/validation.js.map +1 -0
- package/src/database-retirement/contract.d.ts +68 -0
- package/src/database-retirement/contract.js +166 -0
- package/src/database-retirement/contract.js.map +1 -0
- package/src/database-retirement/index.d.ts +1 -0
- package/src/database-retirement/index.js +5 -0
- package/src/database-retirement/index.js.map +1 -0
- package/src/deterministic-order.d.ts +2 -0
- package/src/deterministic-order.js +7 -0
- package/src/deterministic-order.js.map +1 -0
- package/src/developer-agent/context.d.ts +27 -0
- package/src/developer-agent/context.js +497 -0
- package/src/developer-agent/context.js.map +1 -0
- package/src/developer-agent/generator-planning.d.ts +34 -0
- package/src/developer-agent/generator-planning.js +645 -0
- package/src/developer-agent/generator-planning.js.map +1 -0
- package/src/developer-agent/generator-preview.d.ts +8 -0
- package/src/developer-agent/generator-preview.js +650 -0
- package/src/developer-agent/generator-preview.js.map +1 -0
- package/src/developer-agent/git-inspection.d.ts +108 -0
- package/src/developer-agent/git-inspection.js +815 -0
- package/src/developer-agent/git-inspection.js.map +1 -0
- package/src/developer-agent/handoff.d.ts +43 -0
- package/src/developer-agent/handoff.js +698 -0
- package/src/developer-agent/handoff.js.map +1 -0
- package/src/developer-agent/index.d.ts +10 -0
- package/src/developer-agent/index.js +14 -0
- package/src/developer-agent/index.js.map +1 -0
- package/src/developer-agent/model.d.ts +481 -0
- package/src/developer-agent/model.js +143 -0
- package/src/developer-agent/model.js.map +1 -0
- package/src/developer-agent/operation-registry.d.ts +45 -0
- package/src/developer-agent/operation-registry.js +1255 -0
- package/src/developer-agent/operation-registry.js.map +1 -0
- package/src/developer-agent/ordering.d.ts +9 -0
- package/src/developer-agent/ordering.js +15 -0
- package/src/developer-agent/ordering.js.map +1 -0
- package/src/developer-agent/planning.d.ts +18 -0
- package/src/developer-agent/planning.js +447 -0
- package/src/developer-agent/planning.js.map +1 -0
- package/src/developer-agent/preview-changes.d.ts +26 -0
- package/src/developer-agent/preview-changes.js +203 -0
- package/src/developer-agent/preview-changes.js.map +1 -0
- package/src/developer-agent/preview-source.d.ts +2 -0
- package/src/developer-agent/preview-source.js +16 -0
- package/src/developer-agent/preview-source.js.map +1 -0
- package/src/developer-agent/validation.d.ts +18 -0
- package/src/developer-agent/validation.js +2617 -0
- package/src/developer-agent/validation.js.map +1 -0
- package/src/developer-agent/workspace-inspection.d.ts +20 -0
- package/src/developer-agent/workspace-inspection.js +1134 -0
- package/src/developer-agent/workspace-inspection.js.map +1 -0
- package/src/developer-agent/workspace-path.d.ts +6 -0
- package/src/developer-agent/workspace-path.js +22 -0
- package/src/developer-agent/workspace-path.js.map +1 -0
- package/src/executors/blueprint-trust/blueprint-trust.d.ts +29 -0
- package/src/executors/blueprint-trust/blueprint-trust.js +115 -0
- package/src/executors/blueprint-trust/blueprint-trust.js.map +1 -0
- package/src/executors/blueprint-trust/schema.json +27 -0
- package/src/executors/blueprint-verification/blueprint-verification.d.ts +13 -0
- package/src/executors/blueprint-verification/blueprint-verification.js +110 -0
- package/src/executors/blueprint-verification/blueprint-verification.js.map +1 -0
- package/src/executors/blueprint-verification/schema.json +44 -0
- package/src/executors/deployment-plan/deployment-plan.js +1 -0
- package/src/executors/deployment-plan/deployment-plan.js.map +1 -1
- package/src/executors/dev-doctor/dev-doctor.d.ts +19 -5
- package/src/executors/dev-doctor/dev-doctor.js +186 -32
- package/src/executors/dev-doctor/dev-doctor.js.map +1 -1
- package/src/executors/dev-doctor/schema.json +1 -6
- package/src/executors/dev-setup/dev-setup.d.ts +7 -1
- package/src/executors/dev-setup/dev-setup.js +14 -3
- package/src/executors/dev-setup/dev-setup.js.map +1 -1
- package/src/executors/developer-context/developer-context.d.ts +38 -0
- package/src/executors/developer-context/developer-context.js +78 -0
- package/src/executors/developer-context/developer-context.js.map +1 -0
- package/src/executors/developer-context/schema.json +87 -0
- package/src/executors/fleet/fleet.d.ts +12 -43
- package/src/executors/fleet/fleet.js +120 -500
- package/src/executors/fleet/fleet.js.map +1 -1
- package/src/executors/fleet/schema.json +64 -14
- package/src/executors/github-bootstrap/github-bootstrap.d.ts +1 -0
- package/src/executors/github-bootstrap/github-bootstrap.js +1 -0
- package/src/executors/github-bootstrap/github-bootstrap.js.map +1 -1
- package/src/executors/github-bootstrap/schema.json +5 -0
- package/src/executors/infrastructure-plan/infrastructure-plan.d.ts +144 -0
- package/src/executors/infrastructure-plan/infrastructure-plan.js +3320 -0
- package/src/executors/infrastructure-plan/infrastructure-plan.js.map +1 -0
- package/src/executors/infrastructure-plan/schema.json +78 -0
- package/src/executors/secret-guardrails/schema.json +6 -0
- package/src/executors/secret-guardrails/secret-guardrails.d.ts +3 -0
- package/src/executors/secret-guardrails/secret-guardrails.js +44 -0
- package/src/executors/secret-guardrails/secret-guardrails.js.map +1 -0
- package/src/executors/secret-metadata/schema.json +31 -0
- package/src/executors/secret-metadata/secret-metadata.d.ts +32 -0
- package/src/executors/secret-metadata/secret-metadata.js +131 -0
- package/src/executors/secret-metadata/secret-metadata.js.map +1 -0
- package/src/executors/sst-lifecycle/logging-preflight.d.ts +17 -0
- package/src/executors/sst-lifecycle/logging-preflight.js +196 -0
- package/src/executors/sst-lifecycle/logging-preflight.js.map +1 -0
- package/src/executors/sst-lifecycle/run-sst-command.d.ts +23 -3
- package/src/executors/sst-lifecycle/run-sst-command.js +113 -10
- package/src/executors/sst-lifecycle/run-sst-command.js.map +1 -1
- package/src/executors/sst-lifecycle/schema.json +9 -5
- package/src/executors/sst-lifecycle/secret-preflight.d.ts +25 -0
- package/src/executors/sst-lifecycle/secret-preflight.js +119 -0
- package/src/executors/sst-lifecycle/secret-preflight.js.map +1 -0
- package/src/foundation/discovery.d.ts +17 -1
- package/src/foundation/discovery.js +16 -1
- package/src/foundation/discovery.js.map +1 -1
- package/src/foundation/index.d.ts +3 -0
- package/src/foundation/index.js +3 -0
- package/src/foundation/index.js.map +1 -1
- package/src/foundation/local-database-contract.d.ts +1 -0
- package/src/foundation/local-database-contract.js +3 -0
- package/src/foundation/local-database-contract.js.map +1 -1
- package/src/foundation/logging-preflight.d.ts +30 -0
- package/src/foundation/logging-preflight.js +138 -0
- package/src/foundation/logging-preflight.js.map +1 -0
- package/src/foundation/logging.d.ts +70 -0
- package/src/foundation/logging.js +133 -0
- package/src/foundation/logging.js.map +1 -0
- package/src/foundation/preflight.d.ts +9 -0
- package/src/foundation/preflight.js +58 -2
- package/src/foundation/preflight.js.map +1 -1
- package/src/foundation/provision-database-bindings.d.ts +9 -1
- package/src/foundation/provision-database-bindings.js +25 -5
- package/src/foundation/provision-database-bindings.js.map +1 -1
- package/src/foundation/provision-logical-database.d.ts +10 -2
- package/src/foundation/provision-logical-database.js +68 -113
- package/src/foundation/provision-logical-database.js.map +1 -1
- package/src/foundation/router-origin-proof.d.ts +2 -0
- package/src/foundation/router-origin-proof.js +25 -0
- package/src/foundation/router-origin-proof.js.map +1 -0
- package/src/foundation/stages.d.ts +1 -0
- package/src/foundation/stages.js +9 -1
- package/src/foundation/stages.js.map +1 -1
- package/src/frontend-security/index.d.ts +1 -0
- package/src/frontend-security/index.js +5 -0
- package/src/frontend-security/index.js.map +1 -0
- package/src/frontend-security/security-headers.d.ts +50 -0
- package/src/frontend-security/security-headers.js +418 -0
- package/src/frontend-security/security-headers.js.map +1 -0
- package/src/generators/feature-registry.d.ts +13 -0
- package/src/generators/feature-registry.js +73 -0
- package/src/generators/feature-registry.js.map +1 -0
- package/src/generators/function/function.d.ts +1 -1
- package/src/generators/function/function.js +51 -6
- package/src/generators/function/function.js.map +1 -1
- package/src/generators/function/schema.d.ts +1 -0
- package/src/generators/function/schema.json +6 -1
- package/src/generators/logging-registry.d.ts +13 -0
- package/src/generators/logging-registry.js +62 -0
- package/src/generators/logging-registry.js.map +1 -0
- package/src/generators/post-generation-install.d.ts +67 -0
- package/src/generators/post-generation-install.js +3308 -0
- package/src/generators/post-generation-install.js.map +1 -0
- package/src/generators/preset/generator.js +3 -0
- package/src/generators/preset/generator.js.map +1 -1
- package/src/generators/preset/tool-versions.d.ts +18 -0
- package/src/generators/preset/tool-versions.js +22 -0
- package/src/generators/preset/tool-versions.js.map +1 -0
- package/src/generators/preset/workspace-files-developer-agent.d.ts +14 -0
- package/src/generators/preset/workspace-files-developer-agent.js +511 -0
- package/src/generators/preset/workspace-files-developer-agent.js.map +1 -0
- package/src/generators/preset/workspace-files-foundation-workload-roles.d.ts +6 -0
- package/src/generators/preset/workspace-files-foundation-workload-roles.js +406 -0
- package/src/generators/preset/workspace-files-foundation-workload-roles.js.map +1 -0
- package/src/generators/preset/workspace-files-performance-cost.d.ts +66 -0
- package/src/generators/preset/workspace-files-performance-cost.js +866 -0
- package/src/generators/preset/workspace-files-performance-cost.js.map +1 -0
- package/src/generators/preset/workspace-files-performance-load.d.ts +73 -0
- package/src/generators/preset/workspace-files-performance-load.js +801 -0
- package/src/generators/preset/workspace-files-performance-load.js.map +1 -0
- package/src/generators/preset/workspace-files-workload-role-baseline.d.ts +9 -0
- package/src/generators/preset/workspace-files-workload-role-baseline.js +1102 -0
- package/src/generators/preset/workspace-files-workload-role-baseline.js.map +1 -0
- package/src/generators/preset/workspace-files.d.ts +14 -1
- package/src/generators/preset/workspace-files.js +8189 -245
- package/src/generators/preset/workspace-files.js.map +1 -1
- package/src/generators/repository-policy/repository-policy.js +3 -47
- package/src/generators/repository-policy/repository-policy.js.map +1 -1
- package/src/generators/slice/built-in-plan-api-contract-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-api-contract-files.js +2656 -0
- package/src/generators/slice/built-in-plan-api-contract-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-api-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-api-files.js +1186 -0
- package/src/generators/slice/built-in-plan-api-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-async-work-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-async-work-files.js +7903 -0
- package/src/generators/slice/built-in-plan-async-work-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-authorization-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-authorization-files.js +2314 -0
- package/src/generators/slice/built-in-plan-authorization-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-authorization-infrastructure-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js +559 -0
- package/src/generators/slice/built-in-plan-authorization-infrastructure-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-deletion-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-deletion-files.js +1101 -0
- package/src/generators/slice/built-in-plan-data-deletion-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-export-infrastructure-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-export-infrastructure-files.js +249 -0
- package/src/generators/slice/built-in-plan-data-export-infrastructure-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-files.js +1530 -0
- package/src/generators/slice/built-in-plan-data-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-lifecycle-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-lifecycle-files.js +750 -0
- package/src/generators/slice/built-in-plan-data-lifecycle-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-lifecycle-runtime-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-lifecycle-runtime-files.js +828 -0
- package/src/generators/slice/built-in-plan-data-lifecycle-runtime-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-retention-job-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-retention-job-files.js +2604 -0
- package/src/generators/slice/built-in-plan-data-retention-job-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-retention-launcher-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-retention-launcher-files.js +144 -0
- package/src/generators/slice/built-in-plan-data-retention-launcher-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-data-rights-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-data-rights-files.js +4628 -0
- package/src/generators/slice/built-in-plan-data-rights-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-database-lifecycle-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-database-lifecycle-files.js +1901 -0
- package/src/generators/slice/built-in-plan-database-lifecycle-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-database-retirement-rehearsal-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-database-retirement-rehearsal-files.js +485 -0
- package/src/generators/slice/built-in-plan-database-retirement-rehearsal-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-foundation-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-foundation-files.js +184 -0
- package/src/generators/slice/built-in-plan-foundation-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-frontend-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-frontend-files.js +2233 -0
- package/src/generators/slice/built-in-plan-frontend-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-infrastructure-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-infrastructure-files.js +3038 -0
- package/src/generators/slice/built-in-plan-infrastructure-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-infrastructure-safety-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-infrastructure-safety-files.js +312 -0
- package/src/generators/slice/built-in-plan-infrastructure-safety-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-metadata-files.d.ts +3 -0
- package/src/generators/slice/built-in-plan-metadata-files.js +219 -0
- package/src/generators/slice/built-in-plan-metadata-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-operations-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-operations-files.js +630 -0
- package/src/generators/slice/built-in-plan-operations-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-performance-files.d.ts +3 -0
- package/src/generators/slice/built-in-plan-performance-files.js +3293 -0
- package/src/generators/slice/built-in-plan-performance-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-project-files.d.ts +3 -0
- package/src/generators/slice/built-in-plan-project-files.js +979 -0
- package/src/generators/slice/built-in-plan-project-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-release-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-release-files.js +6387 -0
- package/src/generators/slice/built-in-plan-release-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-reliability-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-reliability-files.js +4499 -0
- package/src/generators/slice/built-in-plan-reliability-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-secret-runtime-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-secret-runtime-files.js +1004 -0
- package/src/generators/slice/built-in-plan-secret-runtime-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-shared.d.ts +53 -0
- package/src/generators/slice/built-in-plan-shared.js +113 -0
- package/src/generators/slice/built-in-plan-shared.js.map +1 -0
- package/src/generators/slice/built-in-plan-testing-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-testing-files.js +2356 -0
- package/src/generators/slice/built-in-plan-testing-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-verification-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-verification-files.js +358 -0
- package/src/generators/slice/built-in-plan-verification-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-web-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-web-files.js +430 -0
- package/src/generators/slice/built-in-plan-web-files.js.map +1 -0
- package/src/generators/slice/built-in-plan-workload-role-files.d.ts +2 -0
- package/src/generators/slice/built-in-plan-workload-role-files.js +2356 -0
- package/src/generators/slice/built-in-plan-workload-role-files.js.map +1 -0
- package/src/generators/slice/built-in-plan.d.ts +8 -0
- package/src/generators/slice/built-in-plan.js +264 -0
- package/src/generators/slice/built-in-plan.js.map +1 -0
- package/src/generators/slice/schema.json +1 -1
- package/src/generators/slice/slice.d.ts +1 -22
- package/src/generators/slice/slice.js +185 -1510
- package/src/generators/slice/slice.js.map +1 -1
- package/src/generators/upgrade/schema.d.ts +2 -0
- package/src/generators/upgrade/schema.json +11 -1
- package/src/generators/upgrade/upgrade.d.ts +51 -1
- package/src/generators/upgrade/upgrade.js +820 -82
- package/src/generators/upgrade/upgrade.js.map +1 -1
- package/src/generators/workload/frozen-container.d.ts +8 -0
- package/src/generators/workload/frozen-container.js +36 -0
- package/src/generators/workload/frozen-container.js.map +1 -0
- package/src/generators/workload/performance-registration.d.ts +32 -0
- package/src/generators/workload/performance-registration.js +226 -0
- package/src/generators/workload/performance-registration.js.map +1 -0
- package/src/generators/workload/reliability-registration.d.ts +16 -0
- package/src/generators/workload/reliability-registration.js +150 -0
- package/src/generators/workload/reliability-registration.js.map +1 -0
- package/src/generators/workload/schema.d.ts +1 -0
- package/src/generators/workload/schema.json +6 -1
- package/src/generators/workload/service-performance-files.d.ts +4 -0
- package/src/generators/workload/service-performance-files.js +1846 -0
- package/src/generators/workload/service-performance-files.js.map +1 -0
- package/src/generators/workload/workload.d.ts +3 -2
- package/src/generators/workload/workload.js +1083 -18
- package/src/generators/workload/workload.js.map +1 -1
- package/src/git-policy/action-pins.d.ts +10 -0
- package/src/git-policy/action-pins.js +10 -0
- package/src/git-policy/action-pins.js.map +1 -1
- package/src/git-policy/github-bootstrap.d.ts +14 -1
- package/src/git-policy/github-bootstrap.js +274 -46
- package/src/git-policy/github-bootstrap.js.map +1 -1
- package/src/index.d.ts +2 -0
- package/src/index.js +2 -0
- package/src/index.js.map +1 -1
- package/src/infrastructure-change/convergence.d.ts +13 -0
- package/src/infrastructure-change/convergence.js +85 -0
- package/src/infrastructure-change/convergence.js.map +1 -0
- package/src/infrastructure-change/drift.d.ts +13 -0
- package/src/infrastructure-change/drift.js +112 -0
- package/src/infrastructure-change/drift.js.map +1 -0
- package/src/infrastructure-change/index.d.ts +7 -0
- package/src/infrastructure-change/index.js +11 -0
- package/src/infrastructure-change/index.js.map +1 -0
- package/src/infrastructure-change/model.d.ts +253 -0
- package/src/infrastructure-change/model.js +28 -0
- package/src/infrastructure-change/model.js.map +1 -0
- package/src/infrastructure-change/normalize.d.ts +12 -0
- package/src/infrastructure-change/normalize.js +245 -0
- package/src/infrastructure-change/normalize.js.map +1 -0
- package/src/infrastructure-change/plan.d.ts +40 -0
- package/src/infrastructure-change/plan.js +361 -0
- package/src/infrastructure-change/plan.js.map +1 -0
- package/src/infrastructure-change/risk.d.ts +7 -0
- package/src/infrastructure-change/risk.js +269 -0
- package/src/infrastructure-change/risk.js.map +1 -0
- package/src/infrastructure-change/summary.d.ts +20 -0
- package/src/infrastructure-change/summary.js +130 -0
- package/src/infrastructure-change/summary.js.map +1 -0
- package/src/local-dev/context-discovery.d.ts +2 -0
- package/src/local-dev/context-discovery.js +59 -0
- package/src/local-dev/context-discovery.js.map +1 -0
- package/src/local-dev/contract-validation.d.ts +15 -0
- package/src/local-dev/contract-validation.js +84 -0
- package/src/local-dev/contract-validation.js.map +1 -0
- package/src/local-dev/contracts.d.ts +10 -1
- package/src/local-dev/contracts.js +57 -5
- package/src/local-dev/contracts.js.map +1 -1
- package/src/local-dev/control-contract.d.ts +67 -0
- package/src/local-dev/control-contract.js +180 -0
- package/src/local-dev/control-contract.js.map +1 -0
- package/src/local-dev/dev-command-core.d.ts +60 -0
- package/src/local-dev/dev-command-core.js +89 -0
- package/src/local-dev/dev-command-core.js.map +1 -0
- package/src/local-dev/effects.d.ts +16 -0
- package/src/local-dev/effects.js +63 -0
- package/src/local-dev/effects.js.map +1 -0
- package/src/local-dev/environment-inspector.d.ts +125 -0
- package/src/local-dev/environment-inspector.js +687 -0
- package/src/local-dev/environment-inspector.js.map +1 -0
- package/src/local-dev/environment-state.d.ts +113 -0
- package/src/local-dev/environment-state.js +463 -0
- package/src/local-dev/environment-state.js.map +1 -0
- package/src/local-dev/errors.d.ts +6 -0
- package/src/local-dev/errors.js +41 -0
- package/src/local-dev/errors.js.map +1 -0
- package/src/local-dev/fleet-client.d.ts +33 -0
- package/src/local-dev/fleet-client.js +156 -0
- package/src/local-dev/fleet-client.js.map +1 -0
- package/src/local-dev/fleet-configuration.d.ts +13 -0
- package/src/local-dev/fleet-configuration.js +71 -0
- package/src/local-dev/fleet-configuration.js.map +1 -0
- package/src/local-dev/fleet-inventory.d.ts +56 -0
- package/src/local-dev/fleet-inventory.js +469 -0
- package/src/local-dev/fleet-inventory.js.map +1 -0
- package/src/local-dev/fleet-ipc.d.ts +28 -0
- package/src/local-dev/fleet-ipc.js +267 -0
- package/src/local-dev/fleet-ipc.js.map +1 -0
- package/src/local-dev/fleet-launcher.d.ts +53 -0
- package/src/local-dev/fleet-launcher.js +379 -0
- package/src/local-dev/fleet-launcher.js.map +1 -0
- package/src/local-dev/fleet-lock.d.ts +41 -0
- package/src/local-dev/fleet-lock.js +135 -0
- package/src/local-dev/fleet-lock.js.map +1 -0
- package/src/local-dev/fleet-logs.d.ts +66 -0
- package/src/local-dev/fleet-logs.js +542 -0
- package/src/local-dev/fleet-logs.js.map +1 -0
- package/src/local-dev/fleet-process.d.ts +50 -0
- package/src/local-dev/fleet-process.js +289 -0
- package/src/local-dev/fleet-process.js.map +1 -0
- package/src/local-dev/fleet-runtime.d.ts +22 -0
- package/src/local-dev/fleet-runtime.js +368 -0
- package/src/local-dev/fleet-runtime.js.map +1 -0
- package/src/local-dev/fleet-session.d.ts +70 -0
- package/src/local-dev/fleet-session.js +301 -0
- package/src/local-dev/fleet-session.js.map +1 -0
- package/src/local-dev/fleet-slice-runner-daemon.d.ts +1 -0
- package/src/local-dev/fleet-slice-runner-daemon.js +21 -0
- package/src/local-dev/fleet-slice-runner-daemon.js.map +1 -0
- package/src/local-dev/fleet-startup.d.ts +22 -0
- package/src/local-dev/fleet-startup.js +114 -0
- package/src/local-dev/fleet-startup.js.map +1 -0
- package/src/local-dev/fleet-state.d.ts +62 -0
- package/src/local-dev/fleet-state.js +297 -0
- package/src/local-dev/fleet-state.js.map +1 -0
- package/src/local-dev/fleet-supervisor-daemon.d.ts +1 -0
- package/src/local-dev/fleet-supervisor-daemon.js +41 -0
- package/src/local-dev/fleet-supervisor-daemon.js.map +1 -0
- package/src/local-dev/fleet-supervisor.d.ts +52 -0
- package/src/local-dev/fleet-supervisor.js +384 -0
- package/src/local-dev/fleet-supervisor.js.map +1 -0
- package/src/local-dev/gateway.js +1 -1
- package/src/local-dev/gateway.js.map +1 -1
- package/src/local-dev/identity.js +4 -6
- package/src/local-dev/identity.js.map +1 -1
- package/src/local-dev/index.d.ts +1 -0
- package/src/local-dev/index.js +1 -0
- package/src/local-dev/index.js.map +1 -1
- package/src/local-dev/local-context.d.ts +62 -0
- package/src/local-dev/local-context.js +299 -0
- package/src/local-dev/local-context.js.map +1 -0
- package/src/local-dev/nx-workspace.d.ts +45 -0
- package/src/local-dev/nx-workspace.js +228 -0
- package/src/local-dev/nx-workspace.js.map +1 -0
- package/src/local-dev/personal-secret-ledger.d.ts +75 -0
- package/src/local-dev/personal-secret-ledger.js +391 -0
- package/src/local-dev/personal-secret-ledger.js.map +1 -0
- package/src/local-dev/personal-stage.d.ts +18 -0
- package/src/local-dev/personal-stage.js +129 -0
- package/src/local-dev/personal-stage.js.map +1 -0
- package/src/local-dev/private-state.d.ts +17 -0
- package/src/local-dev/private-state.js +254 -0
- package/src/local-dev/private-state.js.map +1 -0
- package/src/local-dev/process-identity.d.ts +9 -0
- package/src/local-dev/process-identity.js +79 -0
- package/src/local-dev/process-identity.js.map +1 -0
- package/src/local-dev/runtime-paths.d.ts +17 -0
- package/src/local-dev/runtime-paths.js +33 -0
- package/src/local-dev/runtime-paths.js.map +1 -0
- package/src/local-dev/secret-slice-claim.d.ts +17 -0
- package/src/local-dev/secret-slice-claim.js +75 -0
- package/src/local-dev/secret-slice-claim.js.map +1 -0
- package/src/local-dev/slice-claim.d.ts +36 -0
- package/src/local-dev/slice-claim.js +199 -0
- package/src/local-dev/slice-claim.js.map +1 -0
- package/src/local-dev/slice-runner.d.ts +121 -0
- package/src/local-dev/slice-runner.js +715 -0
- package/src/local-dev/slice-runner.js.map +1 -0
- package/src/local-dev/tls.js +51 -17
- package/src/local-dev/tls.js.map +1 -1
- package/src/ownership/composition.d.ts +5 -2
- package/src/ownership/composition.js +26 -3
- package/src/ownership/composition.js.map +1 -1
- package/src/ownership/hash.d.ts +1 -1
- package/src/ownership/hash.js +3 -1
- package/src/ownership/hash.js.map +1 -1
- package/src/ownership/record.d.ts +32 -1
- package/src/ownership/record.js +139 -2
- package/src/ownership/record.js.map +1 -1
- package/src/performance/cost-collection.d.ts +225 -0
- package/src/performance/cost-collection.js +825 -0
- package/src/performance/cost-collection.js.map +1 -0
- package/src/performance/cost-controls.d.ts +131 -0
- package/src/performance/cost-controls.js +336 -0
- package/src/performance/cost-controls.js.map +1 -0
- package/src/performance/evidence.d.ts +140 -0
- package/src/performance/evidence.js +599 -0
- package/src/performance/evidence.js.map +1 -0
- package/src/performance/index.d.ts +10 -0
- package/src/performance/index.js +14 -0
- package/src/performance/index.js.map +1 -0
- package/src/performance/load-safety.d.ts +84 -0
- package/src/performance/load-safety.js +346 -0
- package/src/performance/load-safety.js.map +1 -0
- package/src/performance/model.d.ts +129 -0
- package/src/performance/model.js +452 -0
- package/src/performance/model.js.map +1 -0
- package/src/performance/pr-artifact-budget.d.ts +42 -0
- package/src/performance/pr-artifact-budget.js +151 -0
- package/src/performance/pr-artifact-budget.js.map +1 -0
- package/src/performance/runner.d.ts +75 -0
- package/src/performance/runner.js +227 -0
- package/src/performance/runner.js.map +1 -0
- package/src/performance/scenario-endpoint.d.ts +1 -0
- package/src/performance/scenario-endpoint.js +5 -0
- package/src/performance/scenario-endpoint.js.map +1 -0
- package/src/performance/scenario.d.ts +193 -0
- package/src/performance/scenario.js +736 -0
- package/src/performance/scenario.js.map +1 -0
- package/src/performance/test-fixtures.d.ts +7 -0
- package/src/performance/test-fixtures.js +169 -0
- package/src/performance/test-fixtures.js.map +1 -0
- package/src/performance/unit-cost.d.ts +105 -0
- package/src/performance/unit-cost.js +364 -0
- package/src/performance/unit-cost.js.map +1 -0
- package/src/release/index.d.ts +4 -0
- package/src/release/index.js +8 -0
- package/src/release/index.js.map +1 -0
- package/src/release/lifecycle.d.ts +132 -0
- package/src/release/lifecycle.js +411 -0
- package/src/release/lifecycle.js.map +1 -0
- package/src/release/manifest.d.ts +148 -0
- package/src/release/manifest.js +503 -0
- package/src/release/manifest.js.map +1 -0
- package/src/release/rollout.d.ts +170 -0
- package/src/release/rollout.js +578 -0
- package/src/release/rollout.js.map +1 -0
- package/src/release/source-authority.d.ts +19 -0
- package/src/release/source-authority.js +195 -0
- package/src/release/source-authority.js.map +1 -0
- package/src/repository-policy/deployment-plan.d.ts +2 -1
- package/src/repository-policy/deployment-plan.js +2 -0
- package/src/repository-policy/deployment-plan.js.map +1 -1
- package/src/repository-policy/policy.d.ts +1 -1
- package/src/repository-policy/policy.js +29 -25
- package/src/repository-policy/policy.js.map +1 -1
- package/src/schemas/aggregate-count-evidence-v1.json +135 -0
- package/src/schemas/api-contract-baseline-v1.json +674 -0
- package/src/schemas/api-contract-compatibility-report-v1.json +126 -0
- package/src/schemas/aws-billing-actual-evidence-v1.json +407 -0
- package/src/schemas/blueprint-v1.json +18 -1
- package/src/schemas/data-lifecycle-policy-v1.json +517 -0
- package/src/schemas/generated-ownership-v2.json +22 -0
- package/src/schemas/performance-policy-v1.json +335 -0
- package/src/schemas/repository-policy-v1.json +1 -0
- package/src/schemas/testing-evidence-quarantine-v1.json +168 -0
- package/src/schemas/testing-evidence-result-v1.json +319 -0
- package/src/secrets/adapters.d.ts +49 -0
- package/src/secrets/adapters.js +184 -0
- package/src/secrets/adapters.js.map +1 -0
- package/src/secrets/aws-control-plane.d.ts +20 -0
- package/src/secrets/aws-control-plane.js +255 -0
- package/src/secrets/aws-control-plane.js.map +1 -0
- package/src/secrets/declaration-verification.d.ts +11 -0
- package/src/secrets/declaration-verification.js +68 -0
- package/src/secrets/declaration-verification.js.map +1 -0
- package/src/secrets/guardrails.d.ts +26 -0
- package/src/secrets/guardrails.js +328 -0
- package/src/secrets/guardrails.js.map +1 -0
- package/src/secrets/index.d.ts +12 -0
- package/src/secrets/index.js +16 -0
- package/src/secrets/index.js.map +1 -0
- package/src/secrets/metadata.d.ts +48 -0
- package/src/secrets/metadata.js +171 -0
- package/src/secrets/metadata.js.map +1 -0
- package/src/secrets/model.d.ts +49 -0
- package/src/secrets/model.js +125 -0
- package/src/secrets/model.js.map +1 -0
- package/src/secrets/operator.d.ts +101 -0
- package/src/secrets/operator.js +229 -0
- package/src/secrets/operator.js.map +1 -0
- package/src/secrets/permissions.d.ts +34 -0
- package/src/secrets/permissions.js +86 -0
- package/src/secrets/permissions.js.map +1 -0
- package/src/secrets/personal-command.d.ts +83 -0
- package/src/secrets/personal-command.js +197 -0
- package/src/secrets/personal-command.js.map +1 -0
- package/src/secrets/personal-ledger.d.ts +21 -0
- package/src/secrets/personal-ledger.js +135 -0
- package/src/secrets/personal-ledger.js.map +1 -0
- package/src/secrets/registry.d.ts +9 -0
- package/src/secrets/registry.js +86 -0
- package/src/secrets/registry.js.map +1 -0
- package/src/secrets/verification.d.ts +18 -0
- package/src/secrets/verification.js +139 -0
- package/src/secrets/verification.js.map +1 -0
- package/src/secrets/workload-access.d.ts +46 -0
- package/src/secrets/workload-access.js +163 -0
- package/src/secrets/workload-access.js.map +1 -0
- package/src/supply-chain/action-pins.d.ts +26 -0
- package/src/supply-chain/action-pins.js +208 -0
- package/src/supply-chain/action-pins.js.map +1 -0
- package/src/supply-chain/blueprint-trust-git.d.ts +130 -0
- package/src/supply-chain/blueprint-trust-git.js +1581 -0
- package/src/supply-chain/blueprint-trust-git.js.map +1 -0
- package/src/supply-chain/blueprint-trust-process.d.ts +4 -0
- package/src/supply-chain/blueprint-trust-process.js +88 -0
- package/src/supply-chain/blueprint-trust-process.js.map +1 -0
- package/src/supply-chain/blueprint-trust.d.ts +354 -0
- package/src/supply-chain/blueprint-trust.js +1558 -0
- package/src/supply-chain/blueprint-trust.js.map +1 -0
- package/src/supply-chain/blueprint-verification-authority.d.ts +62 -0
- package/src/supply-chain/blueprint-verification-authority.js +588 -0
- package/src/supply-chain/blueprint-verification-authority.js.map +1 -0
- package/src/supply-chain/blueprint-verification-execution.d.ts +68 -0
- package/src/supply-chain/blueprint-verification-execution.js +624 -0
- package/src/supply-chain/blueprint-verification-execution.js.map +1 -0
- package/src/supply-chain/build-output.d.ts +35 -0
- package/src/supply-chain/build-output.js +398 -0
- package/src/supply-chain/build-output.js.map +1 -0
- package/src/supply-chain/common.d.ts +21 -0
- package/src/supply-chain/common.js +107 -0
- package/src/supply-chain/common.js.map +1 -0
- package/src/supply-chain/container-artifact-contract.d.ts +23 -0
- package/src/supply-chain/container-artifact-contract.js +208 -0
- package/src/supply-chain/container-artifact-contract.js.map +1 -0
- package/src/supply-chain/container-release.d.ts +119 -0
- package/src/supply-chain/container-release.js +496 -0
- package/src/supply-chain/container-release.js.map +1 -0
- package/src/supply-chain/ecr-applicability.d.ts +19 -0
- package/src/supply-chain/ecr-applicability.js +103 -0
- package/src/supply-chain/ecr-applicability.js.map +1 -0
- package/src/supply-chain/ecr-scanning.d.ts +83 -0
- package/src/supply-chain/ecr-scanning.js +321 -0
- package/src/supply-chain/ecr-scanning.js.map +1 -0
- package/src/supply-chain/ecs-deployed-image.d.ts +85 -0
- package/src/supply-chain/ecs-deployed-image.js +300 -0
- package/src/supply-chain/ecs-deployed-image.js.map +1 -0
- package/src/supply-chain/errors.d.ts +6 -0
- package/src/supply-chain/errors.js +15 -0
- package/src/supply-chain/errors.js.map +1 -0
- package/src/supply-chain/generated-blueprint-trust-command.d.ts +4 -0
- package/src/supply-chain/generated-blueprint-trust-command.js +1362 -0
- package/src/supply-chain/generated-blueprint-trust-command.js.map +1 -0
- package/src/supply-chain/generated-command.d.ts +1 -0
- package/src/supply-chain/generated-command.js +687 -0
- package/src/supply-chain/generated-command.js.map +1 -0
- package/src/supply-chain/generated-container-release-command.d.ts +16 -0
- package/src/supply-chain/generated-container-release-command.js +2087 -0
- package/src/supply-chain/generated-container-release-command.js.map +1 -0
- package/src/supply-chain/generated-ecr-collector-command.d.ts +21 -0
- package/src/supply-chain/generated-ecr-collector-command.js +1338 -0
- package/src/supply-chain/generated-ecr-collector-command.js.map +1 -0
- package/src/supply-chain/generated-files.d.ts +13 -0
- package/src/supply-chain/generated-files.js +401 -0
- package/src/supply-chain/generated-files.js.map +1 -0
- package/src/supply-chain/generated-scanner-command.d.ts +1 -0
- package/src/supply-chain/generated-scanner-command.js +718 -0
- package/src/supply-chain/generated-scanner-command.js.map +1 -0
- package/src/supply-chain/index.d.ts +28 -0
- package/src/supply-chain/index.js +35 -0
- package/src/supply-chain/index.js.map +1 -0
- package/src/supply-chain/inventory.d.ts +79 -0
- package/src/supply-chain/inventory.js +717 -0
- package/src/supply-chain/inventory.js.map +1 -0
- package/src/supply-chain/license-expression.d.ts +7 -0
- package/src/supply-chain/license-expression.js +128 -0
- package/src/supply-chain/license-expression.js.map +1 -0
- package/src/supply-chain/pnpm-toolchain-authority.d.ts +31 -0
- package/src/supply-chain/pnpm-toolchain-authority.js +316 -0
- package/src/supply-chain/pnpm-toolchain-authority.js.map +1 -0
- package/src/supply-chain/policy.d.ts +105 -0
- package/src/supply-chain/policy.js +301 -0
- package/src/supply-chain/policy.js.map +1 -0
- package/src/supply-chain/publication.d.ts +48 -0
- package/src/supply-chain/publication.js +85 -0
- package/src/supply-chain/publication.js.map +1 -0
- package/src/supply-chain/sbom.d.ts +228 -0
- package/src/supply-chain/sbom.js +826 -0
- package/src/supply-chain/sbom.js.map +1 -0
- package/src/supply-chain/scanner.d.ts +77 -0
- package/src/supply-chain/scanner.js +502 -0
- package/src/supply-chain/scanner.js.map +1 -0
- package/src/supply-chain/vendored-source.d.ts +95 -0
- package/src/supply-chain/vendored-source.js +315 -0
- package/src/supply-chain/vendored-source.js.map +1 -0
- package/src/testing-evidence/fixture-scope.d.ts +52 -0
- package/src/testing-evidence/fixture-scope.js +140 -0
- package/src/testing-evidence/fixture-scope.js.map +1 -0
- package/src/testing-evidence/index.d.ts +5 -0
- package/src/testing-evidence/index.js +9 -0
- package/src/testing-evidence/index.js.map +1 -0
- package/src/testing-evidence/quarantine.d.ts +48 -0
- package/src/testing-evidence/quarantine.js +253 -0
- package/src/testing-evidence/quarantine.js.map +1 -0
- package/src/testing-evidence/result.d.ts +108 -0
- package/src/testing-evidence/result.js +571 -0
- package/src/testing-evidence/result.js.map +1 -0
- package/src/testing-evidence/runner-adapter.d.ts +51 -0
- package/src/testing-evidence/runner-adapter.js +288 -0
- package/src/testing-evidence/runner-adapter.js.map +1 -0
- package/src/testing-evidence/sensitive-artifacts.d.ts +13 -0
- package/src/testing-evidence/sensitive-artifacts.js +93 -0
- package/src/testing-evidence/sensitive-artifacts.js.map +1 -0
- package/src/work-markers/work-markers.js +4 -3
- package/src/work-markers/work-markers.js.map +1 -1
- package/src/workload-roles/account-baseline.d.ts +132 -0
- package/src/workload-roles/account-baseline.js +743 -0
- package/src/workload-roles/account-baseline.js.map +1 -0
- package/src/workload-roles/authority.d.ts +38 -0
- package/src/workload-roles/authority.js +156 -0
- package/src/workload-roles/authority.js.map +1 -0
- package/src/workload-roles/aws-adapter.d.ts +99 -0
- package/src/workload-roles/aws-adapter.js +416 -0
- package/src/workload-roles/aws-adapter.js.map +1 -0
- package/src/workload-roles/aws-internal-handler.d.ts +27 -0
- package/src/workload-roles/aws-internal-handler.js +58 -0
- package/src/workload-roles/aws-internal-handler.js.map +1 -0
- package/src/workload-roles/aws-s3-state.d.ts +52 -0
- package/src/workload-roles/aws-s3-state.js +164 -0
- package/src/workload-roles/aws-s3-state.js.map +1 -0
- package/src/workload-roles/aws-sdk-control-plane.d.ts +12 -0
- package/src/workload-roles/aws-sdk-control-plane.js +291 -0
- package/src/workload-roles/aws-sdk-control-plane.js.map +1 -0
- package/src/workload-roles/boundary.d.ts +33 -0
- package/src/workload-roles/boundary.js +130 -0
- package/src/workload-roles/boundary.js.map +1 -0
- package/src/workload-roles/convergence.d.ts +66 -0
- package/src/workload-roles/convergence.js +186 -0
- package/src/workload-roles/convergence.js.map +1 -0
- package/src/workload-roles/effective-policy.d.ts +51 -0
- package/src/workload-roles/effective-policy.js +183 -0
- package/src/workload-roles/effective-policy.js.map +1 -0
- package/src/workload-roles/handler.d.ts +43 -0
- package/src/workload-roles/handler.js +130 -0
- package/src/workload-roles/handler.js.map +1 -0
- package/src/workload-roles/history.d.ts +47 -0
- package/src/workload-roles/history.js +324 -0
- package/src/workload-roles/history.js.map +1 -0
- package/src/workload-roles/index.d.ts +17 -0
- package/src/workload-roles/index.js +21 -0
- package/src/workload-roles/index.js.map +1 -0
- package/src/workload-roles/injection.d.ts +119 -0
- package/src/workload-roles/injection.js +495 -0
- package/src/workload-roles/injection.js.map +1 -0
- package/src/workload-roles/manifest.d.ts +54 -0
- package/src/workload-roles/manifest.js +343 -0
- package/src/workload-roles/manifest.js.map +1 -0
- package/src/workload-roles/provisioner.d.ts +70 -0
- package/src/workload-roles/provisioner.js +231 -0
- package/src/workload-roles/provisioner.js.map +1 -0
- package/src/workload-roles/registration.d.ts +101 -0
- package/src/workload-roles/registration.js +457 -0
- package/src/workload-roles/registration.js.map +1 -0
- package/src/workload-roles/stage-boundary.d.ts +31 -0
- package/src/workload-roles/stage-boundary.js +208 -0
- package/src/workload-roles/stage-boundary.js.map +1 -0
- package/src/workload-roles/standard-slice.d.ts +54 -0
- package/src/workload-roles/standard-slice.js +252 -0
- package/src/workload-roles/standard-slice.js.map +1 -0
- package/migrations/standard-pre-v1-to-v1.md +0 -11
- package/src/foundation/aurora-logical-database.d.ts +0 -76
- package/src/foundation/aurora-logical-database.js +0 -419
- package/src/foundation/aurora-logical-database.js.map +0 -1
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"sbom.js","sourceRoot":"","sources":["../../../../../packages/nx/src/supply-chain/sbom.ts"],"names":[],"mappings":";;;AA4OA,wFA+KC;AAyCD,4EAsQC;AAuDD,kDA4KC;AAED,sDA+UC;AAaD,0EAiDC;AAED,8EAoFC;AAl5CD,sEAAyD;AACzD,oDAA4C;AAC5C,2CAQqB;AACrB,2CAA+C;AAE/C,mEAAyE;AAE5D,QAAA,sBAAsB,GAAG,KAAc,CAAC;AACxC,QAAA,gCAAgC,GAAG,CAAU,CAAC;AAC9C,QAAA,iCAAiC,GAC5C,kCAA2C,CAAC;AACjC,QAAA,0BAA0B,GAAG;IACxC,qBAAqB;IACrB,uBAAuB;IACvB,4BAA4B;IAC5B,oBAAoB;CACZ,CAAC;AAwKX,SAAS,gBAAgB,CACvB,KAAa,EACb,IAAY;IAKZ,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,IAAI,EACJ,uCAAuC,KAAK,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IAClD,IACE,CAAC,qCAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;QACrC,CAAC,sCAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,EACzC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,IAAI,EACJ,8CAA8C,KAAK,EAAE,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,OAAO,CAAC,IAAY,EAAE,OAAe;IAC5C,OAAO,WAAW,kBAAkB,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sCAAsC,CACpD,KAAuC;IAEvC,IACE,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;QAClC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE;QAC5B,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EACxC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,UAAU,EACV,wCAAwC,CACzC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAoB,CAAC;IACvD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC/B,GAAG,CAAC,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAC3C,KAAK,CAAC,OAAO;SACd,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,CAClB,IAAY,EACZ,QAAgB,EAChB,IAAY,EACO,EAAE;QACrB,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,IAAI,EACJ,wBAAwB,IAAI,IAAI,QAAQ,kCAAkC,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,UAAU,GACd,kBAAkB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,IAAI,EACJ,oBAAoB,IAAI,IAAI,QAAQ,oCAAoC,CACzE,CAAC;QACJ,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkD,CAAC;IAC1E,MAAM,OAAO,GAIP,EAAE,CAAC;IACT,MAAM,kBAAkB,GAAG,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAC5D,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,EAAE,CACtB,QAAQ,KAAK,KAAK,CAAC,QAAQ;QAC3B,CAAC,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,UAAU,CAAC,CACnD,CAAC;IACF,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,0BAA0B,KAAK,CAAC,QAAQ,EAAE,EAC1C,sCAAsC,CACvC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC5C,KAAK,MAAM,GAAG,IAAI,WAAW,CAC3B,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,QAAQ,EACnB,0BAA0B,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,CAC9D,EAAE,CAAC;YACF,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,IAAI;gBACZ,GAAG;gBACH,QAAQ,EAAE,UAAU,CAAC,KAAK,KAAK,YAAY;aAC5C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO;YAAE,MAAM;QACpB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM;YACrD,QAAQ,EAAE,CAAC,QAAQ,EAAE,QAAQ,IAAI,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ;SAC5D,CAAC;QACF,IACE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC,MAAM;YAChC,QAAQ,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,EACnC,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,8BAA8B,OAAO,CAAC,GAAG,EAAE,EAC3C,yCAAyC,CAC1C,CAAC;QACJ,CAAC;QACD,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,gBAAgB,CAChC,UAAU,EACV,8BAA8B,OAAO,CAAC,GAAG,iBAAiB,KAAK,GAAG,CACnE,CAAC;YACF,KAAK,MAAM,GAAG,IAAI,WAAW,CAC3B,SAAS,CAAC,IAAI,EACd,SAAS,CAAC,OAAO,EACjB,8BAA8B,OAAO,CAAC,GAAG,iBAAiB,KAAK,GAAG,CACnE,EAAE,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC;oBACX,MAAM,EAAE,KAAK;oBACb,GAAG;oBACH,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACxB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EASpB,CAAC;IACJ,KAAK,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,IAAI,OAAO,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,QAAQ,GAAG,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI;YACzC,YAAY,EAAE,IAAI,GAAG,EAAU;YAC/B,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,QAAQ,EAAE,KAAK;YACf,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC;QACF,SAAS,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,CAAC;QACzC,SAAS,CAAC,QAAQ,KAAK,YAAY,CAAC,QAAQ,CAAC;QAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC/D,MAAM,SAAS,GAAG,gBAAgB,CAChC,UAAU,EACV,8BAA8B,GAAG,iBAAiB,KAAK,GAAG,CAC3D,CAAC;YACF,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;QAChD,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,QAAQ,EACN,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,KAAK,CAAC;YACtC,CAAC,CAAC,CAAC,oBAAoB,CAAC;YACxB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACxE,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC;QAChD,KAAK,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAE,UAAoB,CAAC,CAAC,CAAE,UAAoB;QACzE,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC;YACrD,CAAC,CAAE,WAAqB;YACxB,CAAC,CAAE,SAAmB;QACxB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC,CAAC,CAAC;AACR,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa,EAAE,IAAY;IACrD,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,EACvC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,IAAI,EACJ,wCAAwC,CACzC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;IAChB,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7B,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACjB,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;KACpB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED,SAAS,cAAc,CAAI,KAAQ;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,wCAA4B,EAAC,KAAK,CAAC,CAAM,CAAC;AAC9D,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,gCAAgC,CAC9C,KAAsC;IAEtC,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrD,MAAM,iBAAiB,GAAG,CAAC,aAAa,EAAE,aAAa,CAAU,CAAC;IAClE,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC1D,IAAA,qCAAY,EAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAC5C,CAAC;IACF,IACE,SAAS,CAAC,MAAM,KAAK,iBAAiB,CAAC,MAAM;QAC7C,SAAS,CAAC,IAAI,CACZ,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,KAAK,iBAAiB,CAAC,KAAK,CAAC,CAC/D;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,QAAQ;QAC7C,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC;QACtC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW;QACnC,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACvC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAChC,OAAO,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ;QAC1C,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QACrC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;QAClC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,SAAS;QAC3C,CAAC,+BAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC,EAClE,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,eAAe,EACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IACxC,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;SACrC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACvB,IACE,CAAC,IAAA,wBAAQ,EAAC,QAAQ,CAAC;YACnB,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YACjC,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;YAC1B,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;YAClC,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAC3B,QAAQ,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK;YAC7B,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAChC,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,4BAA4B,KAAK,GAAG,EACpC,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC,CAAC;SACD,IAAI,CACH,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QACnC,IAAA,qCAAY,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CACxC,CAAC;IACJ,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmC,CAAC;IAClE,MAAM,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;IACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAmC,CAAC;IAClE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,eAAe,GAIf,EAAE,CAAC;IAET,KAAK,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC,IAAI,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,2BAA2B,aAAa,QAAQ,CAAC;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;QAC3B,IACE,CAAC,IAAA,wBAAQ,EAAC,IAAI,CAAC;YACf,IAAI,CAAC,SAAS,KAAK,WAAW;YAC9B,IAAI,CAAC,WAAW,KAAK,8BAAsB;YAC3C,IAAI,CAAC,OAAO,KAAK,CAAC;YAClB,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC;YACtD,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC5B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YACjC,CAAC,IAAA,wBAAQ,EAAC,IAAI,CAAC,QAAQ,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,IAAI,EACJ,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;QACxC,MAAM,aAAa,GAKb,EAAE,CAAC;QACT,KAAK,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;YACpE,IAAI,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,GAAG,IAAI,eAAe,cAAc,GAAG,EACvC,8BAA8B,CAC/B,CAAC;YACJ,CAAC;YACD,MAAM,GAAG,GACP,OAAO,SAAS,CAAC,SAAS,CAAC,KAAK,QAAQ;gBACtC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;gBACtB,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC;YACrB,IACE,OAAO,GAAG,KAAK,QAAQ;gBACvB,GAAG,CAAC,MAAM,KAAK,CAAC;gBAChB,GAAG,CAAC,MAAM,GAAG,KAAK;gBAClB,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;gBACtB,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAClC,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAC3B,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAClC,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;gBAC3B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;gBACrC,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAC9B,CAAC;gBACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,GAAG,IAAI,eAAe,cAAc,GAAG,EACvC,iDAAiD,CAClD,CAAC;YACJ,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,SAAS,GAAG,cAAc,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACtC,IACE,KAAK,KAAK,SAAS;gBACnB,IAAA,wCAA4B,EAAC,KAAK,CAAC;oBACjC,IAAA,wCAA4B,EAAC,SAAS,CAAC,EACzC,CAAC;gBACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,GAAG,IAAI,eAAe,cAAc,GAAG,EACvC,iEAAiE,CAClE,CAAC;YACJ,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACnC,IACE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;gBAClC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,EACrC,CAAC;gBACD,aAAa,CAAC,IAAI,CAAC;oBACjB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,OAAO,EAAE,SAAS,CAAC,OAAO;iBAC3B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,WAAW,CAAC,IAAI,CACd,IAAA,wCAA4B,EAC1B,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACjC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CACpC,CACF,CACF,CAAC;QACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAAU,CAAC;QAC7C,KAAK,MAAM,CAAC,eAAe,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YACvE,IACE,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC;gBACpB,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ;gBACjC,SAAS,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC;gBAC1B,SAAS,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK;gBAC5B,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;gBACrC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC;gBACnC,SAAS,CAAC,SAAS,CAAC,IAAI,CACtB,CAAC,UAAU,EAAE,EAAE,CACb,OAAO,UAAU,KAAK,QAAQ;oBAC9B,UAAU,CAAC,MAAM,KAAK,CAAC;oBACvB,UAAU,CAAC,MAAM,GAAG,KAAK,CAC5B,EACD,CAAC;gBACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,GAAG,IAAI,iBAAiB,eAAe,GAAG,EAC1C,2DAA2D,CAC5D,CAAC;YACJ,CAAC;YACD,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;YACxE,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,SAAqB,EAAE,CAAC;gBACzD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC1B,CAAC;YACD,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC9C,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,wBAAQ,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YACzC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU;YAChC,CAAC,CAAC,SAAS,CAAC;QACd,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAA,wBAAQ,EAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBACnE,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,GAAG,IAAI,4BAA4B,EACnC,uCAAuC,CACxC,CAAC;YACJ,CAAC;YACD,KAAK,MAAM,IAAI,IAAI,KAAkC,EAAE,CAAC;gBACtD,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;gBACxC,cAAc,CAAC,GAAG,CAChB,IAAA,wCAA4B,EAAC,UAAU,CAAC,EACxC,UAAU,CACX,CAAC;YACJ,CAAC;QACH,CAAC;QACD,eAAe,CAAC,IAAI,CAAC;YACnB,MAAM,EAAE,IAAA,6BAAiB,EAAC,IAAI,CAAC;YAC/B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE;SAC9C,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,yBAAyB,EACzB,uEAAuE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;SAC7C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,CAAC,GAAG,eAAe,CAAC,OAAO,EAAE,CAAC;SAChD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAA,6BAAiB,EAAC;QACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,eAAe;QACf,UAAU;QACV,YAAY;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,UAAU;KACX,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,YAAY,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;IACjE,IACE,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,YAAY,CAAC,EAC1E,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,4BAA4B,EAC5B,wDAAwD,CACzD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;SACxC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,UAAU;QACV,YAAY;QACZ,QAAQ,EAAE;YACR,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC;YACzC,UAAU;YACV,SAAS,EAAE,KAAK,CAAC,WAAW;YAC5B,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D;QACD,YAAY;QACZ,WAAW,EAAE,8BAAsB;QACnC,OAAO,EAAE,CAAC;KACX,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAgD;IACpE,OAAO,SAAS,CAAC,IAAI,CAAC;AACxB,CAAC;AAED,SAAS,sBAAsB,CAC7B,SAAkC,EAClC,KAAa;IAEb,MAAM,IAAI,GAAG,cAAc,KAAK,GAAG,CAAC;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7E,IACE,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC;QACpB,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAC5D,SAAS,CAAC,IAAI,CACf;QACD,CAAC,sCAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;QACnD,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QAC5B,CAAC,uFAAuF,CAAC,IAAI,CAC3F,SAAS,CAAC,IAAI,CACf;QACD,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;QAC/D,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;QACtC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACxB,IAAI,CAAC;gBACH,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ;oBAC3B,OAAO,KAAK,IAAA,sDAA8B,EAAC,OAAO,CAAC,CACpD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC;QACF,IAAA,wCAA4B,EAAC,SAAS,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,IAAI,EACJ,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACnE,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,+BAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,GAAG,IAAI,WAAW,SAAS,GAAG,EAC9B,kCAAkC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAyB;IAC3D,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACrD,IACE,CAAC,+BAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAChD,CAAC,sCAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxD,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAC5D,KAAK,CAAC,QAAQ,CAAC,IAAI,CACpB;QACD,OAAO,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACvC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QACjC,CAAC,+BAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QACvD,CAAC,kCAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,CAAC,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC;QACnE,CAAC,sCAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC;QAC9D,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QACjD,CAAC,kCAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QAC1D,CAAC,CAAC,uBAAuB,EAAE,4BAA4B,CAAC,CAAC,QAAQ,CAC/D,KAAK,CAAC,cAAc,CACrB;YACC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,aAAa,CAAC;QACxC,CAAC,KAAK,CAAC,cAAc,KAAK,oBAAoB;YAC5C,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC;QACtC,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;QAC7B,IAAA,wCAA4B,EAAC,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,MAAM,EACN,4EAA4E,CAC7E,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,WAAW,EACX,+BAA+B,KAAK,CAAC,SAAS;aAC3C,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC;aACjC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACzD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,YAAY,EACZ,uCAAuC,CACxC,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,cAAc,KAAK,gBAAgB,EACnC,GAAG,UAAU,kDAAkD,CAChE,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,oBAAoB,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IAChE,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;SACrC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QACnB,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC;QAClC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM;YAC1B,CAAC,CAAC;gBACE,MAAM,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;qBAC1B,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;qBAC5D,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;oBACnB,GAAG,EAAE,SAAkB;oBACvB,OAAO,EAAE,KAAK;iBACf,CAAC,CAAC;aACN;YACH,CAAC,CAAC,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC;aAC9B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAClB,iDAAiD,CAAC,IAAI,CAAC,UAAU,CAAC;YAChE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE;YACjC,CAAC,CAAC,EAAE,UAAU,EAAE,CACnB;QACH,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,UAAU,EAAE;YACV;gBACE,IAAI,EAAE,uBAAgC;gBACtC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAqB;aACpD;SACF;QACD,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,KAAK,EAAE,SAAS,CAAC,KAAK;QACtB,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE,SAAS,CAAC,OAAO;KAC3B,CAAC,CAAC,CAAC;IACN,MAAM,YAAY,GAAG;QACnB;YACE,SAAS,EAAE,KAAK,CAAC,UAAU;iBACxB,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC;iBAC9B,GAAG,CAAC,YAAY,CAAC;iBACjB,IAAI,EAAE;YACT,GAAG,EAAE,WAAW;SACjB;QACD,GAAG,KAAK,CAAC,UAAU;aAChB,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YACnB,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;YAC7C,GAAG,EAAE,YAAY,CAAC,SAAS,CAAC;SAC7B,CAAC,CAAC;aACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;KAC5D,CAAC;IACF,MAAM,QAAQ,GAAG,IAAA,6BAAiB,EAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU;QACV,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,MAAM,oBAAoB,GAAG,IAAA,6BAAiB,EAC5C,KAAK,CAAC,UAAU;SACb,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACxC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;QACtC,MAAM;QACN,IAAI;KACL,CAAC,CAAC;SACF,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAC9D,CAAC;IACF,OAAO;QACL,SAAS,EAAE,WAAW;QACtB,UAAU;QACV,YAAY;QACZ,QAAQ,EAAE;YACR,SAAS,EAAE;gBACT,SAAS,EAAE,WAAW;gBACtB,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC5D,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;gBACzB,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;gBACzB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;aAChC;YACD,UAAU,EAAE;gBACV,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE;gBACnD;oBACE,IAAI,EAAE,6BAA6B;oBACnC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc;iBACpC;gBACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE;gBACzD,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE;gBACjE;oBACE,IAAI,EAAE,sCAAsC;oBAC5C,KAAK,EAAE,oBAAoB;iBAC5B;gBACD,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,KAAK,CAAC,cAAc,EAAE;aAC7D;YACD,SAAS,EAAE,KAAK,CAAC,WAAW;YAC5B,KAAK,EAAE;gBACL,UAAU,EAAE;oBACV;wBACE,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI;wBAC/B,IAAI,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI;wBAC/B,IAAI,EAAE,aAAa;wBACnB,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,OAAO;qBACtC;iBACF;aACF;SACF;QACD,YAAY,EAAE,YAAY,cAAc,CAAC,QAAQ,CAAC,EAAE;QACpD,WAAW,EAAE,8BAAsB;QACnC,OAAO,EAAE,CAAC;KACX,CAAC;AACJ,CAAC;AAED,SAAgB,qBAAqB,CACnC,KAAc,EACd,QAMC;IAED,IACE,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;QAChB,KAAK,CAAC,SAAS,KAAK,WAAW;QAC/B,KAAK,CAAC,WAAW,KAAK,8BAAsB;QAC5C,KAAK,CAAC,OAAO,KAAK,CAAC;QACnB,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QACtC,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC;QACpD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;QAChC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC;QAClC,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC;QACzB,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QACnC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QACzC,IAAA,wCAA4B,EAAC,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,MAAM,EACN,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;IACvD,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC;QAC9B,CAAC,cAAc,CAAC,IAAI,CAClB,CAAC,IAAI,EAAE,EAAE,CACP,IAAA,wBAAQ,EAAC,IAAI,CAAC;YACd,IAAI,CAAC,GAAG,KAAK,SAAS;YACtB,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAC5C,EACD,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,gCAAgC,EAChC,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,oBAAoB,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;IACnE,IACE,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,WAAW;QACnD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,IAAI;QACxD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,QAAQ,CAAC,IAAI;QACxD,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAC9D,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,yBAAyB,EACzB,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,GAAG,CACxB,KAAK,CAAC,QAAQ,CAAC,UAAU;SACtB,MAAM,CACL,CAAC,QAAQ,EAA+C,EAAE,CACxD,IAAA,wBAAQ,EAAC,QAAQ,CAAC;QAClB,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;QACjC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CACrC;SACA,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAClE,CAAC;IACF,IACE,CAAC,kCAA0B,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;QAC7D,CAAC,+BAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QACnD,CAAC,sCAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC3D,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAC1C,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;QACpC,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAC5D,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACvB;QACD,QAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,qBAAqB,EACrB,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,UAAU,CAAC;SAC3C,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACxB,IACE,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC;YACpB,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,CAAC,uFAAuF,CAAC,IAAI,CAC3F,SAAS,CAAC,IAAI,CACf;YACD,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC;YACtC,SAAS,CAAC,YAAY,CAAC,IAAI,CACzB,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,UAAU,KAAK,QAAQ,CAC/C;YACD,IAAI,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI;gBAClC,SAAS,CAAC,YAAY,CAAC,MAAM;YAC/B,OAAO,SAAS,CAAC,MAAM,KAAK,SAAS;YACrC,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAC/B,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;gBAClC,IAAI,CAAC;oBACH,OAAO,CACL,OAAO,OAAO,KAAK,QAAQ;wBAC3B,OAAO,KAAK,IAAA,sDAA8B,EAAC,OAAO,CAAC,CACpD,CAAC;gBACJ,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC;YACF,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5B,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;YAC/D,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAC5D,SAAS,CAAC,IAAI,CACf;YACD,CAAC,sCAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EACnD,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,uBAAuB,KAAK,GAAG,EAC/B,0EAA0E,CAC3E,CAAC;QACJ,CAAC;QACD,OAAO;YACL,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,EAAE;YAChD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,QAAQ,EAAE,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;YACxC,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,IACE,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAC5E,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,qBAAqB,EACrB,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IACE,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CACtC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CACpE,EACD,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,qBAAqB,EACrB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,IAAA,6BAAiB,EAC3C,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;QACrD,YAAY;QACZ,MAAM;QACN,IAAI;KACL,CAAC,CAAC,CACJ,CAAC;IACF,IACE,UAAU,CAAC,GAAG,CAAC,6BAA6B,CAAC;QAC3C,QAAQ,CAAC,qBAAqB;QAChC,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,KAAK,QAAQ,CAAC,YAAY;QAC7D,UAAU,CAAC,GAAG,CAAC,qBAAqB,CAAC,KAAK,QAAQ,CAAC,cAAc,EACjE,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,0BAA0B,EAC1B,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,MAAM,mBAAmB,GAAG,KAAK,CAAC,UAAU;SACzC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACxB,IACE,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC;YACpB,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,SAAS,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,IAAI;YACvC,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;YAClC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAC5B,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;YACrC,CAAC,sCAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YACnD,CAAC,CAAC,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAC5D,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CACvB;YACD,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,QAAQ,CAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CACxB;YACD,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC;YAClC,SAAS,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAC/B,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,mBAAmB,KAAK,GAAG,EAC3B,kDAAkD,CACnD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAI,SAAS,CAAC,QAAsB,CAAC,GAAG,CACpD,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE;YACxB,IACE,IAAA,wBAAQ,EAAC,OAAO,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;gBACjC,IAAA,wBAAQ,EAAC,OAAO,CAAC,OAAO,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;gBACzC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ;gBACtC,iDAAiD,CAAC,IAAI,CACpD,OAAO,CAAC,OAAO,CAAC,EAAE,CACnB,EACD,CAAC;gBACD,OAAO,IAAA,sDAA8B,EAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5D,CAAC;YACD,IACE,IAAA,wBAAQ,EAAC,OAAO,CAAC;gBACjB,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;gBACjC,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,EACtC,CAAC;gBACD,MAAM,UAAU,GAAG,IAAA,sDAA8B,EAC/C,OAAO,CAAC,UAAU,CACnB,CAAC;gBACF,IAAI,UAAU,KAAK,OAAO,CAAC,UAAU;oBAAE,OAAO,UAAU,CAAC;YAC3D,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,mBAAmB,KAAK,cAAc,YAAY,GAAG,EACrD,qDAAqD,CACtD,CAAC;QACJ,CAAC,CACF,CAAC;QACF,OAAO;YACL,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE;YAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,IAAI,EAAE,SAAS,CAAC,IAAI;YACpB,OAAO,EAAE,SAAS,CAAC,OAAO;SAC3B,CAAC;IACJ,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC5D,IACE,mBAAmB,CAAC,MAAM,KAAK,aAAa,CAAC,MAAM;QACnD,mBAAmB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;YAC3C,MAAM,gBAAgB,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YAC9C,OAAO,CACL,gBAAgB,KAAK,SAAS;gBAC9B,QAAQ,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI;gBACvC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC/B,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAC3C,QAAQ,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI;gBACvC,QAAQ,CAAC,KAAK,KAAK,gBAAgB,CAAC,KAAK;gBACzC,QAAQ,CAAC,IAAI,KAAK,gBAAgB,CAAC,IAAI;gBACvC,QAAQ,CAAC,OAAO,KAAK,gBAAgB,CAAC,OAAO,CAC9C,CAAC;QACJ,CAAC,CAAC,EACF,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,iBAAiB,EACjB,sEAAsE,CACvE,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,eAAe,GAAG,IAAI,GAAG,EAA6B,CAAC;IAC7D,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC1C,IACE,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;YAChB,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;YAC7B,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;YAC/B,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC;YAC5D,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM;YACxD,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAC7B,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,2BAA2B,EAC3B,qBAAqB,KAAK,GAAG,EAC7B,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAI,KAAK,CAAC,SAAsB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IACH,IACE,cAAc,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,GAAG,CAAC;QAChD,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC;QAChC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,mBAAmB,EACnB,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAA4B;QACjE;YACE,WAAW;YACX,aAAa;iBACV,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC;iBAC9B,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC;iBACvB,IAAI,EAAE;SACV;QACD,GAAG,aAAa,CAAC,GAAG,CAClB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,EAAE,EAAE,CACzB,CAAC,IAAI,EAAE,YAAY,CAAgC,CACtD;KACF,CAAC,CAAC;IACH,IACE,CAAC,GAAG,uBAAuB,CAAC,CAAC,IAAI,CAC/B,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,EAAE,CACjB,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACvE,EACD,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,mBAAmB,EACnB,mEAAmE,CACpE,CAAC;IACJ,CAAC;IACD,IACE,UAAU,CAAC,GAAG,CAAC,sCAAsC,CAAC;QACtD,mBAAmB,EACnB,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,0BAA0B,EAC1B,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,KAAiC,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CACnB,KAAgC;IAEhC,OAAO;QACL,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;KACnD,CAAC;AACJ,CAAC;AAED,SAAgB,+BAA+B,CAC7C,KAAqC;IAErC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACjD,IACE,CAAC,kCAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7C,CAAC,+BAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC;QACtD,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAC5B,IAAA,wCAA4B,EAAC,KAAK,CAAC,EACnC,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,gBAAgB,EAChB,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;SACnC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAA,qCAAY,EAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;SACpE,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QACvB,IACE,CAAC,kCAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAChD,CAAC,+BAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC;YACnD,CAAC,+BAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YACjD,CAAC,+BAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC9C,CAAC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAC5B,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,4BAA4B,KAAK,GAAG,EACpC,8CAA8C,CAC/C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC7B,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IACL,MAAM,UAAU,GAAmC;QACjD,SAAS;QACT,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;KACnD,CAAC;IACF,OAAO;QACL,GAAG,UAAU;QACb,IAAI,EAAE,yCAAiC;QACvC,cAAc,EAAE,IAAA,6BAAiB,EAAC,UAAU,CAAC;QAC7C,aAAa,EAAE,wCAAgC;KAChD,CAAC;AACJ,CAAC;AAED,SAAgB,iCAAiC,CAC/C,KAAc,EACd,QAKC;IAED,IACE,CAAC,IAAA,wBAAQ,EAAC,KAAK,CAAC;QAChB,KAAK,CAAC,IAAI,KAAK,yCAAiC;QAChD,KAAK,CAAC,aAAa,KAAK,wCAAgC;QACxD,CAAC,+BAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACvD,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,4BAA4B,EAC5B,gBAAgB,EAChB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,+BAA+B,CAC/C,KAAkD,CACnD,CAAC;IACF,IAAI,SAAS,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;QACtD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,+BAA+B,EAC/B,4CAA4C,CAC7C,CAAC;IACJ,CAAC;IACD,IACE,SAAS,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS;QAC1C,SAAS,CAAC,qBAAqB,KAAK,QAAQ,CAAC,qBAAqB,EAClE,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,gBAAgB,EAChB,8CAA8C,CAC/C,CAAC;IACJ,CAAC;IACD,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IACvE,MAAM,2BAA2B,GAAG,MAAM,CAAC,IAAI,CAC7C,QAAQ,CAAC,gBAAgB,CAC1B,CAAC,IAAI,EAAE,CAAC;IACT,MAAM,gBAAgB,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAC9C,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAC7B,CAAC;IACF,IACE,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC/B,2BAA2B,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM;QAChE,2BAA2B,CAAC,IAAI,CAC9B,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAC9D;QACD,gBAAgB,CAAC,MAAM,KAAK,kBAAkB,CAAC,MAAM;QACrD,gBAAgB,CAAC,IAAI,CACnB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,kBAAkB,CAAC,KAAK,CAAC,CAC9D,EACD,CAAC;QACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,0BAA0B,EAC1B,qEAAqE,CACtE,CAAC;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,aAAa,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAClE,MAAM,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QACtE,IACE,aAAa,KAAK,QAAQ,CAAC,aAAa;YACxC,eAAe,KAAK,QAAQ,CAAC,eAAe,EAC5C,CAAC;YACD,MAAM,IAAI,4BAAgB,CACxB,gCAAgC,EAChC,4BAA4B,QAAQ,CAAC,SAAS,EAAE,EAChD,qEAAqE,CACtE,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO;QACL,GAAG,SAAS;QACZ,cAAc,EAAE,IAAA,6BAAiB,EAAC,YAAY,CAAC,SAAS,CAAC,CAAC;KAC3D,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,77 @@
|
|
|
1
|
+
import type { SupplyChainInventory } from './inventory.js';
|
|
2
|
+
import { type LicenseFinding, type ScannerResult, type VulnerabilityFinding } from './policy.js';
|
|
3
|
+
export declare const SUPPLY_CHAIN_SCANNER_INPUT_SCHEMA_VERSION: 2;
|
|
4
|
+
export declare const OSV_SCANNER_VERSION: "2.3.8";
|
|
5
|
+
export declare const OSV_SCANNER_TOOL: "osv-scanner+ebk-vendored-admission";
|
|
6
|
+
export declare const OSV_SCANNER_RELEASES: {
|
|
7
|
+
readonly 'darwin-arm64': {
|
|
8
|
+
readonly name: "osv-scanner_darwin_arm64";
|
|
9
|
+
readonly sha256: "a8cd6507b06239f463a7642430cfd2d154882f150f6e30cdc0653e28dfc34216";
|
|
10
|
+
};
|
|
11
|
+
readonly 'darwin-x64': {
|
|
12
|
+
readonly name: "osv-scanner_darwin_amd64";
|
|
13
|
+
readonly sha256: "b8a80a9f14ca4c0cd0fc2d351b28f740da9e6a5b18385ac9f9d083360b5b504e";
|
|
14
|
+
};
|
|
15
|
+
readonly 'linux-arm64': {
|
|
16
|
+
readonly name: "osv-scanner_linux_arm64";
|
|
17
|
+
readonly sha256: "8158b18edd2d03b1a30d905ca91b032bc62262167be8f206c27114f08823e27c";
|
|
18
|
+
};
|
|
19
|
+
readonly 'linux-x64': {
|
|
20
|
+
readonly name: "osv-scanner_linux_amd64";
|
|
21
|
+
readonly sha256: "bc98e15319ed0d515e3f9235287ba53cdc5535d576d24fd573978ecfe9ab92dc";
|
|
22
|
+
};
|
|
23
|
+
readonly 'win32-arm64': {
|
|
24
|
+
readonly name: "osv-scanner_windows_arm64.exe";
|
|
25
|
+
readonly sha256: "285d1fbcf2c69ab5ee38ae3a850ab46e83f32ef1cd5f3c4c9eb161cc493f6d52";
|
|
26
|
+
};
|
|
27
|
+
readonly 'win32-x64': {
|
|
28
|
+
readonly name: "osv-scanner_windows_amd64.exe";
|
|
29
|
+
readonly sha256: "cb04e79dd9698a7bc821bbfdddec916a416d1409fda79c927c509d37d00c9716";
|
|
30
|
+
};
|
|
31
|
+
};
|
|
32
|
+
export type ScannerCoverage = ScannerResult['coverage'][number];
|
|
33
|
+
export interface ScannerResultDigest {
|
|
34
|
+
coverage: ScannerCoverage;
|
|
35
|
+
path: string;
|
|
36
|
+
sha256: string;
|
|
37
|
+
}
|
|
38
|
+
export interface SupplyChainScannerInput {
|
|
39
|
+
kind: 'ebk-supply-chain-scanner-input';
|
|
40
|
+
licenses: readonly LicenseFinding[];
|
|
41
|
+
requiredCoverage: readonly ScannerCoverage[];
|
|
42
|
+
scanner: ScannerResult;
|
|
43
|
+
schemaVersion: typeof SUPPLY_CHAIN_SCANNER_INPUT_SCHEMA_VERSION;
|
|
44
|
+
subject: {
|
|
45
|
+
containerInventoryDigest: string;
|
|
46
|
+
lockfileDigest: string;
|
|
47
|
+
repositoryCommit: string;
|
|
48
|
+
resultDigests: readonly ScannerResultDigest[];
|
|
49
|
+
vendoredRegistryDigest: string;
|
|
50
|
+
};
|
|
51
|
+
vulnerabilities: readonly VulnerabilityFinding[];
|
|
52
|
+
}
|
|
53
|
+
export declare function createSupplyChainScannerInput(input: SupplyChainScannerInput): SupplyChainScannerInput;
|
|
54
|
+
export declare function assertSupplyChainScannerSubject(scannerInput: SupplyChainScannerInput, expected: Omit<SupplyChainScannerInput['subject'], 'resultDigests'> & {
|
|
55
|
+
requiredCoverage: readonly ScannerCoverage[];
|
|
56
|
+
resultDigests: readonly ScannerResultDigest[];
|
|
57
|
+
}): void;
|
|
58
|
+
export declare function createInstalledLicenseFindings(input: {
|
|
59
|
+
inventory: SupplyChainInventory;
|
|
60
|
+
packageMetadata: readonly unknown[];
|
|
61
|
+
}): readonly LicenseFinding[];
|
|
62
|
+
type VulnerabilityScope = VulnerabilityFinding['component']['scope'];
|
|
63
|
+
export interface OsvScannerResultGroup {
|
|
64
|
+
context: {
|
|
65
|
+
releases: readonly string[];
|
|
66
|
+
scope: VulnerabilityScope;
|
|
67
|
+
slices: readonly string[];
|
|
68
|
+
};
|
|
69
|
+
document: unknown;
|
|
70
|
+
}
|
|
71
|
+
export declare function normalizeOsvScannerResults(input: {
|
|
72
|
+
coverage: 'container' | 'npm';
|
|
73
|
+
detectedAt: string;
|
|
74
|
+
inventory?: SupplyChainInventory;
|
|
75
|
+
resultGroups: readonly OsvScannerResultGroup[];
|
|
76
|
+
}): readonly VulnerabilityFinding[];
|
|
77
|
+
export {};
|
|
@@ -0,0 +1,502 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.OSV_SCANNER_RELEASES = exports.OSV_SCANNER_TOOL = exports.OSV_SCANNER_VERSION = exports.SUPPLY_CHAIN_SCANNER_INPUT_SCHEMA_VERSION = void 0;
|
|
4
|
+
exports.createSupplyChainScannerInput = createSupplyChainScannerInput;
|
|
5
|
+
exports.assertSupplyChainScannerSubject = assertSupplyChainScannerSubject;
|
|
6
|
+
exports.createInstalledLicenseFindings = createInstalledLicenseFindings;
|
|
7
|
+
exports.normalizeOsvScannerResults = normalizeOsvScannerResults;
|
|
8
|
+
const deterministic_order_js_1 = require("../deterministic-order.js");
|
|
9
|
+
const validation_js_1 = require("../validation.js");
|
|
10
|
+
const common_js_1 = require("./common.js");
|
|
11
|
+
const errors_js_1 = require("./errors.js");
|
|
12
|
+
const license_expression_js_1 = require("./license-expression.js");
|
|
13
|
+
const policy_js_1 = require("./policy.js");
|
|
14
|
+
exports.SUPPLY_CHAIN_SCANNER_INPUT_SCHEMA_VERSION = 2;
|
|
15
|
+
exports.OSV_SCANNER_VERSION = '2.3.8';
|
|
16
|
+
exports.OSV_SCANNER_TOOL = 'osv-scanner+ebk-vendored-admission';
|
|
17
|
+
exports.OSV_SCANNER_RELEASES = {
|
|
18
|
+
'darwin-arm64': {
|
|
19
|
+
name: 'osv-scanner_darwin_arm64',
|
|
20
|
+
sha256: 'a8cd6507b06239f463a7642430cfd2d154882f150f6e30cdc0653e28dfc34216',
|
|
21
|
+
},
|
|
22
|
+
'darwin-x64': {
|
|
23
|
+
name: 'osv-scanner_darwin_amd64',
|
|
24
|
+
sha256: 'b8a80a9f14ca4c0cd0fc2d351b28f740da9e6a5b18385ac9f9d083360b5b504e',
|
|
25
|
+
},
|
|
26
|
+
'linux-arm64': {
|
|
27
|
+
name: 'osv-scanner_linux_arm64',
|
|
28
|
+
sha256: '8158b18edd2d03b1a30d905ca91b032bc62262167be8f206c27114f08823e27c',
|
|
29
|
+
},
|
|
30
|
+
'linux-x64': {
|
|
31
|
+
name: 'osv-scanner_linux_amd64',
|
|
32
|
+
sha256: 'bc98e15319ed0d515e3f9235287ba53cdc5535d576d24fd573978ecfe9ab92dc',
|
|
33
|
+
},
|
|
34
|
+
'win32-arm64': {
|
|
35
|
+
name: 'osv-scanner_windows_arm64.exe',
|
|
36
|
+
sha256: '285d1fbcf2c69ab5ee38ae3a850ab46e83f32ef1cd5f3c4c9eb161cc493f6d52',
|
|
37
|
+
},
|
|
38
|
+
'win32-x64': {
|
|
39
|
+
name: 'osv-scanner_windows_amd64.exe',
|
|
40
|
+
sha256: 'cb04e79dd9698a7bc821bbfdddec916a416d1409fda79c927c509d37d00c9716',
|
|
41
|
+
},
|
|
42
|
+
};
|
|
43
|
+
const EXACT_PACKAGE_VERSION = /^[A-Za-z0-9][A-Za-z0-9.+:~_-]{0,127}$/;
|
|
44
|
+
const COVERAGE = ['container', 'npm', 'vendored-source'];
|
|
45
|
+
function exactKeys(value, keys) {
|
|
46
|
+
return (JSON.stringify(Object.keys(value).sort()) ===
|
|
47
|
+
JSON.stringify([...keys].sort()));
|
|
48
|
+
}
|
|
49
|
+
function timestamp(value, path) {
|
|
50
|
+
if (!Number.isFinite(Date.parse(value)) ||
|
|
51
|
+
new Date(value).toISOString() !== value) {
|
|
52
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', path, 'must be a canonical ISO-8601 timestamp');
|
|
53
|
+
}
|
|
54
|
+
}
|
|
55
|
+
function safeResultPath(value, path) {
|
|
56
|
+
if (typeof value !== 'string' ||
|
|
57
|
+
!/^\.ebk\/evidence\/supply-chain\/[A-Za-z0-9._/-]+\.json$/.test(value) ||
|
|
58
|
+
value.split('/').some((segment) => segment === '' || segment === '..')) {
|
|
59
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', path, 'must be a normalized scanner-evidence JSON path');
|
|
60
|
+
}
|
|
61
|
+
}
|
|
62
|
+
function createSupplyChainScannerInput(input) {
|
|
63
|
+
if (!(0, validation_js_1.isRecord)(input) ||
|
|
64
|
+
!exactKeys(input, [
|
|
65
|
+
'kind',
|
|
66
|
+
'licenses',
|
|
67
|
+
'requiredCoverage',
|
|
68
|
+
'scanner',
|
|
69
|
+
'schemaVersion',
|
|
70
|
+
'subject',
|
|
71
|
+
'vulnerabilities',
|
|
72
|
+
]) ||
|
|
73
|
+
input.kind !== 'ebk-supply-chain-scanner-input' ||
|
|
74
|
+
input.schemaVersion !== exports.SUPPLY_CHAIN_SCANNER_INPUT_SCHEMA_VERSION ||
|
|
75
|
+
!Array.isArray(input.licenses) ||
|
|
76
|
+
!Array.isArray(input.vulnerabilities) ||
|
|
77
|
+
!Array.isArray(input.requiredCoverage) ||
|
|
78
|
+
input.requiredCoverage.length === 0 ||
|
|
79
|
+
input.requiredCoverage.some((entry) => !COVERAGE.includes(entry)) ||
|
|
80
|
+
new Set(input.requiredCoverage).size !== input.requiredCoverage.length ||
|
|
81
|
+
!(0, validation_js_1.isRecord)(input.scanner) ||
|
|
82
|
+
!exactKeys(input.scanner, [
|
|
83
|
+
'coverage',
|
|
84
|
+
'resultSetDigest',
|
|
85
|
+
'scannedAt',
|
|
86
|
+
'schemaVersion',
|
|
87
|
+
'status',
|
|
88
|
+
'tool',
|
|
89
|
+
'version',
|
|
90
|
+
]) ||
|
|
91
|
+
!Array.isArray(input.scanner.coverage) ||
|
|
92
|
+
input.scanner.coverage.some((entry) => !COVERAGE.includes(String(entry))) ||
|
|
93
|
+
new Set(input.scanner.coverage).size !== input.scanner.coverage.length ||
|
|
94
|
+
!['complete', 'partial', 'unavailable'].includes(input.scanner.status) ||
|
|
95
|
+
input.scanner.schemaVersion !==
|
|
96
|
+
policy_js_1.SUPPLY_CHAIN_SCANNER_RESULT_SCHEMA_VERSION ||
|
|
97
|
+
!common_js_1.SUPPLY_CHAIN_SHA256.test(input.scanner.resultSetDigest) ||
|
|
98
|
+
input.scanner.tool !== exports.OSV_SCANNER_TOOL ||
|
|
99
|
+
input.scanner.version !== exports.OSV_SCANNER_VERSION ||
|
|
100
|
+
!(0, validation_js_1.isRecord)(input.subject) ||
|
|
101
|
+
!exactKeys(input.subject, [
|
|
102
|
+
'containerInventoryDigest',
|
|
103
|
+
'lockfileDigest',
|
|
104
|
+
'repositoryCommit',
|
|
105
|
+
'resultDigests',
|
|
106
|
+
'vendoredRegistryDigest',
|
|
107
|
+
]) ||
|
|
108
|
+
!common_js_1.SUPPLY_CHAIN_SHA256.test(input.subject.containerInventoryDigest) ||
|
|
109
|
+
!common_js_1.SUPPLY_CHAIN_SHA256.test(input.subject.lockfileDigest) ||
|
|
110
|
+
!/^[a-f0-9]{40}$/.test(input.subject.repositoryCommit) ||
|
|
111
|
+
!common_js_1.SUPPLY_CHAIN_SHA256.test(input.subject.vendoredRegistryDigest) ||
|
|
112
|
+
!Array.isArray(input.subject.resultDigests) ||
|
|
113
|
+
input.subject.resultDigests.length !== input.requiredCoverage.length ||
|
|
114
|
+
(0, common_js_1.hasSensitiveSupplyChainShape)(input)) {
|
|
115
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', 'scannerInput', 'must be the exact subject-bound normalized scanner envelope');
|
|
116
|
+
}
|
|
117
|
+
timestamp(input.scanner.scannedAt, 'scanner.scannedAt');
|
|
118
|
+
const resultCoverage = new Set();
|
|
119
|
+
for (const [index, result] of input.subject.resultDigests.entries()) {
|
|
120
|
+
if (!(0, validation_js_1.isRecord)(result)) {
|
|
121
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `scannerInput.subject.resultDigests[${index}]`, 'must uniquely bind one required coverage result');
|
|
122
|
+
}
|
|
123
|
+
const coverage = result.coverage;
|
|
124
|
+
const path = result.path;
|
|
125
|
+
const sha256 = result.sha256;
|
|
126
|
+
if (!exactKeys(result, ['coverage', 'path', 'sha256']) ||
|
|
127
|
+
typeof coverage !== 'string' ||
|
|
128
|
+
!COVERAGE.includes(coverage) ||
|
|
129
|
+
typeof path !== 'string' ||
|
|
130
|
+
typeof sha256 !== 'string' ||
|
|
131
|
+
!common_js_1.SUPPLY_CHAIN_SHA256.test(sha256) ||
|
|
132
|
+
resultCoverage.has(coverage)) {
|
|
133
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `scannerInput.subject.resultDigests[${index}]`, 'must uniquely bind one required coverage result');
|
|
134
|
+
}
|
|
135
|
+
safeResultPath(path, `scannerInput.subject.resultDigests[${index}].path`);
|
|
136
|
+
resultCoverage.add(coverage);
|
|
137
|
+
}
|
|
138
|
+
const required = [...input.requiredCoverage].sort();
|
|
139
|
+
if (JSON.stringify([...input.scanner.coverage].sort()) !==
|
|
140
|
+
JSON.stringify(required) ||
|
|
141
|
+
JSON.stringify([...resultCoverage].sort()) !== JSON.stringify(required) ||
|
|
142
|
+
input.scanner.status !== 'complete') {
|
|
143
|
+
throw new errors_js_1.SupplyChainError('supply-chain-scanner-unavailable', 'scannerInput.scanner.coverage', 'must completely cover the independently derived applicable ecosystems');
|
|
144
|
+
}
|
|
145
|
+
return {
|
|
146
|
+
...input,
|
|
147
|
+
licenses: [...input.licenses].sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.component.purl, right.component.purl)),
|
|
148
|
+
requiredCoverage: required,
|
|
149
|
+
scanner: {
|
|
150
|
+
...input.scanner,
|
|
151
|
+
coverage: [...input.scanner.coverage].sort(),
|
|
152
|
+
},
|
|
153
|
+
subject: {
|
|
154
|
+
...input.subject,
|
|
155
|
+
resultDigests: [...input.subject.resultDigests].sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.coverage, right.coverage)),
|
|
156
|
+
},
|
|
157
|
+
vulnerabilities: [...input.vulnerabilities].sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(`${left.id}\0${left.component.purl}\0${left.component.scope}`, `${right.id}\0${right.component.purl}\0${right.component.scope}`)),
|
|
158
|
+
};
|
|
159
|
+
}
|
|
160
|
+
function assertSupplyChainScannerSubject(scannerInput, expected) {
|
|
161
|
+
const normalized = createSupplyChainScannerInput(scannerInput);
|
|
162
|
+
const actualSubject = (0, common_js_1.canonicalizeSupplyChainValue)(normalized.subject);
|
|
163
|
+
const expectedSubject = (0, common_js_1.canonicalizeSupplyChainValue)({
|
|
164
|
+
containerInventoryDigest: expected.containerInventoryDigest,
|
|
165
|
+
lockfileDigest: expected.lockfileDigest,
|
|
166
|
+
repositoryCommit: expected.repositoryCommit,
|
|
167
|
+
resultDigests: [...expected.resultDigests].sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.coverage, right.coverage)),
|
|
168
|
+
vendoredRegistryDigest: expected.vendoredRegistryDigest,
|
|
169
|
+
});
|
|
170
|
+
if ((0, common_js_1.canonicalizeSupplyChainValue)(normalized.requiredCoverage) !==
|
|
171
|
+
(0, common_js_1.canonicalizeSupplyChainValue)([...expected.requiredCoverage].sort()) ||
|
|
172
|
+
actualSubject !== expectedSubject) {
|
|
173
|
+
throw new errors_js_1.SupplyChainError('supply-chain-artifact-mismatch', 'scannerInput.subject', 'does not bind the exact repository, lockfile, containers, vendored registry, and raw results');
|
|
174
|
+
}
|
|
175
|
+
}
|
|
176
|
+
function packageLicense(value) {
|
|
177
|
+
const candidates = Array.isArray(value)
|
|
178
|
+
? value.flatMap((candidate) => typeof candidate === 'string'
|
|
179
|
+
? [candidate]
|
|
180
|
+
: (0, validation_js_1.isRecord)(candidate) && typeof candidate.type === 'string'
|
|
181
|
+
? [candidate.type]
|
|
182
|
+
: [])
|
|
183
|
+
: typeof value === 'string'
|
|
184
|
+
? [value]
|
|
185
|
+
: (0, validation_js_1.isRecord)(value) && typeof value.type === 'string'
|
|
186
|
+
? [value.type]
|
|
187
|
+
: [];
|
|
188
|
+
try {
|
|
189
|
+
return (0, license_expression_js_1.normalizeSpdxLicenseExpression)(candidates
|
|
190
|
+
.map((candidate) => candidate.trim())
|
|
191
|
+
.filter(Boolean)
|
|
192
|
+
.sort()
|
|
193
|
+
.map((candidate) => `(${candidate})`)
|
|
194
|
+
.join(' OR '));
|
|
195
|
+
}
|
|
196
|
+
catch {
|
|
197
|
+
return 'LicenseRef-Unknown';
|
|
198
|
+
}
|
|
199
|
+
}
|
|
200
|
+
function createInstalledLicenseFindings(input) {
|
|
201
|
+
const resolvedByLockKey = new Map(input.inventory.resolvedPackages.map((entry) => [entry.lockKey, entry]));
|
|
202
|
+
const resolvedByIdentity = new Map();
|
|
203
|
+
for (const entry of input.inventory.resolvedPackages) {
|
|
204
|
+
const key = `${entry.name}@${entry.version}`;
|
|
205
|
+
resolvedByIdentity.set(key, [
|
|
206
|
+
...(resolvedByIdentity.get(key) ?? []),
|
|
207
|
+
entry,
|
|
208
|
+
]);
|
|
209
|
+
}
|
|
210
|
+
const runtimePackages = new Set();
|
|
211
|
+
const visit = (lockKey) => {
|
|
212
|
+
if (runtimePackages.has(lockKey))
|
|
213
|
+
return;
|
|
214
|
+
const entry = resolvedByLockKey.get(lockKey);
|
|
215
|
+
if (!entry)
|
|
216
|
+
return;
|
|
217
|
+
runtimePackages.add(lockKey);
|
|
218
|
+
entry.dependencies.forEach(visit);
|
|
219
|
+
};
|
|
220
|
+
for (const dependency of input.inventory.dependencies) {
|
|
221
|
+
if (!['production', 'optional', 'peer'].includes(dependency.scope)) {
|
|
222
|
+
continue;
|
|
223
|
+
}
|
|
224
|
+
const exact = `${dependency.name}@${dependency.resolved}`;
|
|
225
|
+
if (resolvedByLockKey.has(exact)) {
|
|
226
|
+
visit(exact);
|
|
227
|
+
continue;
|
|
228
|
+
}
|
|
229
|
+
const candidates = resolvedByIdentity.get(`${dependency.name}@${dependency.resolved.split('(')[0] ?? ''}`) ?? [];
|
|
230
|
+
if (candidates.length === 1 && candidates[0])
|
|
231
|
+
visit(candidates[0].lockKey);
|
|
232
|
+
}
|
|
233
|
+
const installedLicenses = new Map();
|
|
234
|
+
for (const [index, metadata] of input.packageMetadata.entries()) {
|
|
235
|
+
if (!(0, validation_js_1.isRecord)(metadata) ||
|
|
236
|
+
typeof metadata.name !== 'string' ||
|
|
237
|
+
typeof metadata.version !== 'string' ||
|
|
238
|
+
!resolvedByIdentity.has(`${metadata.name}@${metadata.version}`)) {
|
|
239
|
+
continue;
|
|
240
|
+
}
|
|
241
|
+
const identity = `${metadata.name}@${metadata.version}`;
|
|
242
|
+
const license = packageLicense(metadata.license ?? metadata.licenses);
|
|
243
|
+
const existing = installedLicenses.get(identity);
|
|
244
|
+
if (existing && existing !== license) {
|
|
245
|
+
throw new errors_js_1.SupplyChainError('supply-chain-inventory-incomplete', `packageMetadata[${index}].license`, `${identity} installed copies expose conflicting license metadata`);
|
|
246
|
+
}
|
|
247
|
+
installedLicenses.set(identity, license);
|
|
248
|
+
}
|
|
249
|
+
const findings = [];
|
|
250
|
+
for (const [identity, resolvedCopies] of [
|
|
251
|
+
...resolvedByIdentity.entries(),
|
|
252
|
+
].sort(([left], [right]) => (0, deterministic_order_js_1.compareUtf16)(left, right))) {
|
|
253
|
+
const representative = resolvedCopies[0];
|
|
254
|
+
if (!representative)
|
|
255
|
+
continue;
|
|
256
|
+
const installedLicense = installedLicenses.get(identity);
|
|
257
|
+
const applicablePlatforms = [
|
|
258
|
+
...new Set(resolvedCopies.flatMap(({ applicablePlatforms }) => applicablePlatforms)),
|
|
259
|
+
].sort();
|
|
260
|
+
findings.push({
|
|
261
|
+
applicablePlatforms,
|
|
262
|
+
component: {
|
|
263
|
+
name: representative.name,
|
|
264
|
+
purl: `pkg:npm/${encodeURIComponent(representative.name)}@${representative.version}`,
|
|
265
|
+
version: representative.version,
|
|
266
|
+
},
|
|
267
|
+
current: installedLicense ?? 'LicenseRef-Unknown',
|
|
268
|
+
source: installedLicense ? 'installed-package' : 'lockfile-only',
|
|
269
|
+
usage: resolvedCopies.some(({ lockKey }) => runtimePackages.has(lockKey))
|
|
270
|
+
? 'internal-runtime'
|
|
271
|
+
: 'build',
|
|
272
|
+
});
|
|
273
|
+
}
|
|
274
|
+
return findings.sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(left.component.purl, right.component.purl));
|
|
275
|
+
}
|
|
276
|
+
function severity(value) {
|
|
277
|
+
const candidate = (0, validation_js_1.isRecord)(value) && typeof value.severity === 'string'
|
|
278
|
+
? value.severity.toLowerCase()
|
|
279
|
+
: '';
|
|
280
|
+
return ['critical', 'high', 'medium', 'low'].includes(candidate)
|
|
281
|
+
? candidate
|
|
282
|
+
: 'unknown';
|
|
283
|
+
}
|
|
284
|
+
function packagePurl(ecosystem, name, version) {
|
|
285
|
+
const encodedName = encodeURIComponent(name);
|
|
286
|
+
const encodedVersion = encodeURIComponent(version);
|
|
287
|
+
switch (ecosystem.toLowerCase()) {
|
|
288
|
+
case 'npm':
|
|
289
|
+
return `pkg:npm/${encodedName}@${encodedVersion}`;
|
|
290
|
+
case 'alpine':
|
|
291
|
+
return `pkg:apk/alpine/${encodedName}@${encodedVersion}`;
|
|
292
|
+
case 'debian':
|
|
293
|
+
return `pkg:deb/debian/${encodedName}@${encodedVersion}`;
|
|
294
|
+
default:
|
|
295
|
+
return `pkg:generic/${encodedName}@${encodedVersion}`;
|
|
296
|
+
}
|
|
297
|
+
}
|
|
298
|
+
function fixedVersion(vulnerability) {
|
|
299
|
+
const versions = [];
|
|
300
|
+
for (const affected of Array.isArray(vulnerability.affected)
|
|
301
|
+
? vulnerability.affected
|
|
302
|
+
: []) {
|
|
303
|
+
if (!(0, validation_js_1.isRecord)(affected))
|
|
304
|
+
continue;
|
|
305
|
+
for (const range of Array.isArray(affected.ranges) ? affected.ranges : []) {
|
|
306
|
+
if (!(0, validation_js_1.isRecord)(range))
|
|
307
|
+
continue;
|
|
308
|
+
for (const event of Array.isArray(range.events) ? range.events : []) {
|
|
309
|
+
if ((0, validation_js_1.isRecord)(event) &&
|
|
310
|
+
typeof event.fixed === 'string' &&
|
|
311
|
+
EXACT_PACKAGE_VERSION.test(event.fixed)) {
|
|
312
|
+
versions.push(event.fixed);
|
|
313
|
+
}
|
|
314
|
+
}
|
|
315
|
+
}
|
|
316
|
+
}
|
|
317
|
+
return versions.sort()[0];
|
|
318
|
+
}
|
|
319
|
+
function directLockKey(inventory, name, resolved) {
|
|
320
|
+
const exact = `${name}@${resolved}`;
|
|
321
|
+
if (inventory.resolvedPackages.some(({ lockKey }) => lockKey === exact)) {
|
|
322
|
+
return exact;
|
|
323
|
+
}
|
|
324
|
+
const identity = `${name}@${resolved.split('(')[0] ?? ''}`;
|
|
325
|
+
const candidates = inventory.resolvedPackages.filter((entry) => `${entry.name}@${entry.version}` === identity);
|
|
326
|
+
return candidates.length === 1 ? candidates[0]?.lockKey : undefined;
|
|
327
|
+
}
|
|
328
|
+
function npmScopes(inventory) {
|
|
329
|
+
const byLockKey = new Map(inventory.resolvedPackages.map((entry) => [entry.lockKey, entry]));
|
|
330
|
+
const byIdentity = new Map();
|
|
331
|
+
for (const entry of inventory.resolvedPackages) {
|
|
332
|
+
const identity = `${entry.name}@${entry.version}`;
|
|
333
|
+
byIdentity.set(identity, [...(byIdentity.get(identity) ?? []), entry]);
|
|
334
|
+
}
|
|
335
|
+
const scopes = new Map();
|
|
336
|
+
const visited = new Set();
|
|
337
|
+
const visit = (lockKey, scope) => {
|
|
338
|
+
const visitKey = `${lockKey}\0${scope}`;
|
|
339
|
+
if (visited.has(visitKey))
|
|
340
|
+
return;
|
|
341
|
+
visited.add(visitKey);
|
|
342
|
+
const entry = byLockKey.get(lockKey);
|
|
343
|
+
if (!entry)
|
|
344
|
+
return;
|
|
345
|
+
const identity = `${entry.name}@${entry.version}`;
|
|
346
|
+
const assigned = scopes.get(identity) ?? new Set();
|
|
347
|
+
assigned.add(scope);
|
|
348
|
+
scopes.set(identity, assigned);
|
|
349
|
+
for (const dependency of entry.dependencies) {
|
|
350
|
+
if (byLockKey.has(dependency)) {
|
|
351
|
+
visit(dependency, scope);
|
|
352
|
+
continue;
|
|
353
|
+
}
|
|
354
|
+
const withoutPeers = dependency.replace(/\(.+$/, '');
|
|
355
|
+
const separator = withoutPeers.lastIndexOf('@');
|
|
356
|
+
const candidates = separator > 0
|
|
357
|
+
? (byIdentity.get(`${withoutPeers.slice(0, separator)}@${withoutPeers.slice(separator + 1)}`) ?? [])
|
|
358
|
+
: [];
|
|
359
|
+
if (candidates.length === 1 && candidates[0]) {
|
|
360
|
+
visit(candidates[0].lockKey, scope);
|
|
361
|
+
}
|
|
362
|
+
}
|
|
363
|
+
};
|
|
364
|
+
for (const dependency of inventory.dependencies) {
|
|
365
|
+
const lockKey = directLockKey(inventory, dependency.name, dependency.resolved);
|
|
366
|
+
if (!lockKey)
|
|
367
|
+
continue;
|
|
368
|
+
visit(lockKey, dependency.scope === 'development' ? 'development' : 'runtime');
|
|
369
|
+
}
|
|
370
|
+
return new Map([...byIdentity.keys()].map((identity) => {
|
|
371
|
+
const assigned = scopes.get(identity);
|
|
372
|
+
return [
|
|
373
|
+
identity,
|
|
374
|
+
assigned?.has('runtime')
|
|
375
|
+
? 'runtime'
|
|
376
|
+
: assigned?.has('development')
|
|
377
|
+
? 'development'
|
|
378
|
+
: 'unknown',
|
|
379
|
+
];
|
|
380
|
+
}));
|
|
381
|
+
}
|
|
382
|
+
function findingIdentities(value, path) {
|
|
383
|
+
if (!Array.isArray(value) ||
|
|
384
|
+
value.length > 100 ||
|
|
385
|
+
value.some((entry) => typeof entry !== 'string' || !common_js_1.SUPPLY_CHAIN_REFERENCE.test(entry)) ||
|
|
386
|
+
new Set(value).size !== value.length) {
|
|
387
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', path, 'must contain unique bounded Release or Slice identities');
|
|
388
|
+
}
|
|
389
|
+
return [...value].sort();
|
|
390
|
+
}
|
|
391
|
+
function normalizeOsvScannerResults(input) {
|
|
392
|
+
timestamp(input.detectedAt, 'detectedAt');
|
|
393
|
+
if (input.resultGroups.length === 0 ||
|
|
394
|
+
input.resultGroups.length > 100 ||
|
|
395
|
+
(input.coverage === 'npm' && input.inventory === undefined)) {
|
|
396
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', 'osv.resultGroups', 'must include one to 100 contextual result groups and npm inventory');
|
|
397
|
+
}
|
|
398
|
+
const packageScopes = input.coverage === 'npm' && input.inventory
|
|
399
|
+
? npmScopes(input.inventory)
|
|
400
|
+
: new Map();
|
|
401
|
+
const findings = new Map();
|
|
402
|
+
for (const [documentIndex, group] of input.resultGroups.entries()) {
|
|
403
|
+
if (!(0, validation_js_1.isRecord)(group) ||
|
|
404
|
+
!exactKeys(group, ['context', 'document']) ||
|
|
405
|
+
!(0, validation_js_1.isRecord)(group.context) ||
|
|
406
|
+
!exactKeys(group.context, ['releases', 'scope', 'slices']) ||
|
|
407
|
+
![
|
|
408
|
+
'build',
|
|
409
|
+
'deployed',
|
|
410
|
+
'development',
|
|
411
|
+
'runtime',
|
|
412
|
+
'test',
|
|
413
|
+
'unknown',
|
|
414
|
+
].includes(group.context.scope)) {
|
|
415
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.resultGroups[${documentIndex}].context`, 'must bind the exact scanner group to one applicability scope');
|
|
416
|
+
}
|
|
417
|
+
if (input.coverage === 'npm' && group.context.scope !== 'unknown') {
|
|
418
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.resultGroups[${documentIndex}].context.scope`, 'npm applicability must be derived from the exact lock inventory');
|
|
419
|
+
}
|
|
420
|
+
const releases = findingIdentities(group.context.releases, `osv.resultGroups[${documentIndex}].context.releases`);
|
|
421
|
+
const slices = findingIdentities(group.context.slices, `osv.resultGroups[${documentIndex}].context.slices`);
|
|
422
|
+
const document = group.document;
|
|
423
|
+
if (!(0, validation_js_1.isRecord)(document) || !Array.isArray(document.results)) {
|
|
424
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.documents[${documentIndex}]`, 'must be an OSV-Scanner JSON result document');
|
|
425
|
+
}
|
|
426
|
+
for (const result of document.results) {
|
|
427
|
+
if (!(0, validation_js_1.isRecord)(result) || !Array.isArray(result.packages))
|
|
428
|
+
continue;
|
|
429
|
+
for (const scannedPackage of result.packages) {
|
|
430
|
+
if (!(0, validation_js_1.isRecord)(scannedPackage) || !(0, validation_js_1.isRecord)(scannedPackage.package)) {
|
|
431
|
+
continue;
|
|
432
|
+
}
|
|
433
|
+
const packageValue = scannedPackage.package;
|
|
434
|
+
const name = String(packageValue.name ?? '');
|
|
435
|
+
const version = String(packageValue.version ?? '');
|
|
436
|
+
const ecosystem = String(packageValue.ecosystem ?? '');
|
|
437
|
+
if (!common_js_1.SUPPLY_CHAIN_REFERENCE.test(name) ||
|
|
438
|
+
!EXACT_PACKAGE_VERSION.test(version) ||
|
|
439
|
+
ecosystem.trim() === '') {
|
|
440
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.documents[${documentIndex}].package`, 'must identify an exact bounded package and ecosystem');
|
|
441
|
+
}
|
|
442
|
+
for (const vulnerability of Array.isArray(scannedPackage.vulnerabilities)
|
|
443
|
+
? scannedPackage.vulnerabilities
|
|
444
|
+
: []) {
|
|
445
|
+
if (!(0, validation_js_1.isRecord)(vulnerability) ||
|
|
446
|
+
typeof vulnerability.id !== 'string' ||
|
|
447
|
+
!common_js_1.SUPPLY_CHAIN_REFERENCE.test(vulnerability.id)) {
|
|
448
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.documents[${documentIndex}].vulnerability`, 'must identify one exact OSV advisory');
|
|
449
|
+
}
|
|
450
|
+
const affectedInput = Array.isArray(vulnerability.affected)
|
|
451
|
+
? vulnerability.affected
|
|
452
|
+
: [];
|
|
453
|
+
if ((0, common_js_1.hasSensitiveSupplyChainShape)(affectedInput)) {
|
|
454
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.documents[${documentIndex}].vulnerability.affected`, 'must not retain credential-shaped advisory data');
|
|
455
|
+
}
|
|
456
|
+
const scope = input.coverage === 'npm'
|
|
457
|
+
? (packageScopes.get(`${name}@${version}`) ?? 'unknown')
|
|
458
|
+
: group.context.scope;
|
|
459
|
+
const purl = packagePurl(ecosystem, name, version);
|
|
460
|
+
const key = `${vulnerability.id}\0${purl}\0${scope}`;
|
|
461
|
+
const affected = (0, common_js_1.canonicalizeSupplyChainValue)(affectedInput).slice(0, 2_000);
|
|
462
|
+
const fixed = fixedVersion(vulnerability);
|
|
463
|
+
const next = {
|
|
464
|
+
affectedRange: affected || '[]',
|
|
465
|
+
component: {
|
|
466
|
+
name,
|
|
467
|
+
purl,
|
|
468
|
+
scope,
|
|
469
|
+
version,
|
|
470
|
+
},
|
|
471
|
+
detectedAt: input.detectedAt,
|
|
472
|
+
exposure: 'unknown',
|
|
473
|
+
...(fixed ? { fixVersion: fixed } : {}),
|
|
474
|
+
id: vulnerability.id,
|
|
475
|
+
releases,
|
|
476
|
+
severity: severity(vulnerability.database_specific),
|
|
477
|
+
slices,
|
|
478
|
+
source: `osv-scanner@${exports.OSV_SCANNER_VERSION}`,
|
|
479
|
+
status: 'open',
|
|
480
|
+
};
|
|
481
|
+
const existing = findings.get(key);
|
|
482
|
+
if (existing) {
|
|
483
|
+
if (existing.affectedRange !== next.affectedRange ||
|
|
484
|
+
existing.fixVersion !== next.fixVersion ||
|
|
485
|
+
existing.severity !== next.severity) {
|
|
486
|
+
throw new errors_js_1.SupplyChainError('supply-chain-input-invalid', `osv.resultGroups[${documentIndex}].vulnerability`, 'contains contradictory advisory data for one exact component and scope');
|
|
487
|
+
}
|
|
488
|
+
next.releases = [
|
|
489
|
+
...new Set([...existing.releases, ...next.releases]),
|
|
490
|
+
].sort();
|
|
491
|
+
next.slices = [
|
|
492
|
+
...new Set([...existing.slices, ...next.slices]),
|
|
493
|
+
].sort();
|
|
494
|
+
}
|
|
495
|
+
findings.set(key, next);
|
|
496
|
+
}
|
|
497
|
+
}
|
|
498
|
+
}
|
|
499
|
+
}
|
|
500
|
+
return [...findings.values()].sort((left, right) => (0, deterministic_order_js_1.compareUtf16)(`${left.id}\0${left.component.purl}\0${left.component.scope}`, `${right.id}\0${right.component.purl}\0${right.component.scope}`));
|
|
501
|
+
}
|
|
502
|
+
//# sourceMappingURL=scanner.js.map
|