@enbox/gitd 0.0.1

package/dist/esm/shims/npm/server.js

@@ -0,0 +1,72 @@
+/**
+ * npm registry shim — HTTP server.
+ *
+ * Starts a local npm-compatible registry that resolves DID-scoped
+ * packages from DWN records.
+ *
+ * Usage:
+ *   gitd shim npm [--port 4873]
+ *
+ * Then:
+ *   npm install --registry=http://localhost:4873 @did:dht:abc123/my-pkg
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { createServer } from 'node:http';
+import { handleNpmRequest } from './registry.js';
+// ---------------------------------------------------------------------------
+// Server
+// ---------------------------------------------------------------------------
+/** Start the npm registry shim server. Returns the server instance. */
+export function startNpmShim(options) {
+    const { ctx, port } = options;
+    const server = createServer((req, res) => __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        // CORS preflight.
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204, {
+                'Access-Control-Allow-Origin': '*',
+                'Access-Control-Allow-Methods': 'GET, OPTIONS',
+                'Access-Control-Allow-Headers': 'Authorization, Accept',
+                'Access-Control-Max-Age': '86400',
+            });
+            res.end();
+            return;
+        }
+        // Only support GET — this is a read-only registry proxy.
+        if (req.method !== 'GET') {
+            res.writeHead(405, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Method not allowed. This is a read-only registry shim.' }));
+            return;
+        }
+        try {
+            const url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : '/', `http://localhost:${port}`);
+            const result = yield handleNpmRequest(ctx, url);
+            res.writeHead(result.status, result.headers);
+            res.end(result.body);
+        }
+        catch (err) {
+            console.error(`[npm-shim] Error: ${err.message}`);
+            res.writeHead(500, { 'Content-Type': 'application/json' });
+            res.end(JSON.stringify({ error: 'Internal server error' }));
+        }
+    }));
+    server.listen(port, () => {
+        console.log(`[npm-shim] npm registry shim running at http://localhost:${port}`);
+        console.log('[npm-shim] Usage:');
+        console.log(`  npm install --registry=http://localhost:${port} @did:dht:<id>/<package>`);
+        console.log(`  bun install --registry http://localhost:${port} @did:dht:<id>/<package>`);
+        console.log('');
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/esm/shims/npm/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/shims/npm/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAKzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAWjD,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE9B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;QAC7C,kBAAkB;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,6BAA6B,EAAI,GAAG;gBACpC,8BAA8B,EAAG,cAAc;gBAC/C,8BAA8B,EAAG,uBAAuB;gBACxD,wBAAwB,EAAS,OAAO;aACzC,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;YACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAA,GAAG,CAAC,GAAG,mCAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAgB,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAE7D,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;YAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC,CAAA,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,4DAA4D,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,0BAA0B,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,6CAA6C,IAAI,0BAA0B,CAAC,CAAC;QACzF,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/shims/oci/index.js

@@ -0,0 +1,9 @@
+/**
+ * OCI Distribution registry shim module — DID-scoped container image
+ * resolution via the OCI Distribution Spec HTTP API.
+ *
+ * @module
+ */
+export { handleOciRequest, parseOciName } from './registry.js';
+export { startOciShim } from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/shims/oci/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/shims/oci/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAI/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC"}

package/dist/esm/shims/oci/registry.js

@@ -0,0 +1,276 @@
+/**
+ * OCI Distribution registry shim — translates Docker/Podman pull
+ * requests into DWN queries.
+ *
+ * Implements the read-only subset of the OCI Distribution Spec v2
+ * needed by `docker pull` and `podman pull`.
+ *
+ * Container images are stored in the DWN using the forge-registry
+ * protocol with the `oci` ecosystem.  The mapping is:
+ *
+ *   OCI concept       → DWN record
+ *   ──────────────────────────────────────
+ *   Repository         → `package` (ecosystem: 'oci')
+ *   Tag / version      → `package/version` (semver = tag)
+ *   Manifest           → `package/version/tarball` (application/vnd.oci.image.manifest.v1+json)
+ *   Blob / layer       → queried by digest from version data
+ *
+ * Image naming:
+ *   `localhost:5555/did:dht:abc123/my-image:v1.0.0`
+ *
+ * The DID and image name are extracted from the Docker repository name.
+ *
+ * Endpoints (OCI Distribution Spec v2):
+ *   GET /v2/                                      API version check
+ *   GET /v2/{name}/manifests/{reference}           Pull manifest (by tag or digest)
+ *   HEAD /v2/{name}/manifests/{reference}          Check manifest existence
+ *   GET /v2/{name}/blobs/{digest}                  Pull blob
+ *   GET /v2/{name}/tags/list                       List tags
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { fetchTarball, listVersions, resolvePackage, resolveVersion, } from '../../resolver/resolve.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+/** OCI-required headers for all responses. */
+function ociHeaders(extra) {
+    return Object.assign({ 'Docker-Distribution-Api-Version': 'registry/2.0', 'Access-Control-Allow-Origin': '*' }, extra);
+}
+/** Build a 404 response with OCI error envelope. */
+function notFound(code, message) {
+    return {
+        status: 404,
+        headers: ociHeaders({ 'Content-Type': 'application/json' }),
+        body: JSON.stringify({
+            errors: [{ code, message, detail: null }],
+        }),
+    };
+}
+/**
+ * Parse an OCI repository name into DID + image name.
+ *
+ * OCI repositories use the format: `did:<method>:<id>/<image-name>`
+ * Docker CLI sends this as the `name` portion of the v2 API path.
+ */
+export function parseOciName(name) {
+    const match = name.match(/^(did:[a-z0-9]+:[a-zA-Z0-9._:%-]+)\/([a-zA-Z0-9._/-]+)$/);
+    if (!match) {
+        return null;
+    }
+    return { did: match[1], imageName: match[2] };
+}
+/**
+ * Compute a SHA-256 digest of the given data.
+ *
+ * Returns the digest in OCI format: `sha256:<hex>`.
+ */
+function sha256Digest(data) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const bytes = typeof data === 'string' ? new TextEncoder().encode(data) : data;
+        const hash = new Uint8Array(yield crypto.subtle.digest('SHA-256', bytes));
+        const hex = Array.from(hash).map((b) => b.toString(16).padStart(2, '0')).join('');
+        return `sha256:${hex}`;
+    });
+}
+// ---------------------------------------------------------------------------
+// Handlers
+// ---------------------------------------------------------------------------
+/** GET /v2/ — API version check. */
+function handleApiVersionCheck() {
+    return {
+        status: 200,
+        headers: ociHeaders({ 'Content-Type': 'application/json' }),
+        body: JSON.stringify({}),
+    };
+}
+/** GET /v2/{name}/tags/list — list tags for a repository. */
+function handleTagsList(ctx, did, imageName) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const pkg = yield resolvePackage(ctx, did, imageName, 'oci');
+        if (!pkg) {
+            return notFound('NAME_UNKNOWN', `repository not found: ${did}/${imageName}`);
+        }
+        const versions = yield listVersions(ctx, did, pkg.contextId);
+        const tags = versions.map((v) => v.semver);
+        return {
+            status: 200,
+            headers: ociHeaders({ 'Content-Type': 'application/json' }),
+            body: JSON.stringify({
+                name: `${did}/${imageName}`,
+                tags,
+            }),
+        };
+    });
+}
+/**
+ * GET /v2/{name}/manifests/{reference} — pull manifest.
+ *
+ * The manifest is stored as the tarball record's data.  The `reference`
+ * can be a tag (semver string) or a digest (`sha256:…`).
+ */
+function handleGetManifest(ctx, did, imageName, reference, headOnly) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const pkg = yield resolvePackage(ctx, did, imageName, 'oci');
+        if (!pkg) {
+            return notFound('NAME_UNKNOWN', `repository not found: ${did}/${imageName}`);
+        }
+        // Resolve by tag or digest.
+        let manifestBytes = null;
+        if (reference.startsWith('sha256:')) {
+            // Digest-based lookup: iterate versions and match by content digest.
+            const versions = yield listVersions(ctx, did, pkg.contextId);
+            for (const ver of versions) {
+                const data = yield fetchTarball(ctx, did, ver.contextId);
+                if (data) {
+                    const digest = yield sha256Digest(data);
+                    if (digest === reference) {
+                        manifestBytes = data;
+                        break;
+                    }
+                }
+            }
+        }
+        else {
+            // Tag-based lookup.
+            const ver = yield resolveVersion(ctx, did, pkg.contextId, reference);
+            if (ver) {
+                manifestBytes = yield fetchTarball(ctx, did, ver.contextId);
+            }
+        }
+        if (!manifestBytes) {
+            return notFound('MANIFEST_UNKNOWN', `manifest unknown: ${reference}`);
+        }
+        const digest = yield sha256Digest(manifestBytes);
+        // Determine content type from manifest content.
+        let contentType = 'application/vnd.oci.image.manifest.v1+json';
+        try {
+            const parsed = JSON.parse(new TextDecoder().decode(manifestBytes));
+            if (parsed.mediaType) {
+                contentType = parsed.mediaType;
+            }
+        }
+        catch (_a) {
+            // Not valid JSON — treat as raw manifest.
+        }
+        if (headOnly) {
+            return {
+                status: 200,
+                headers: ociHeaders({
+                    'Content-Type': contentType,
+                    'Content-Length': String(manifestBytes.byteLength),
+                    'Docker-Content-Digest': digest,
+                }),
+                body: '',
+            };
+        }
+        return {
+            status: 200,
+            headers: ociHeaders({
+                'Content-Type': contentType,
+                'Content-Length': String(manifestBytes.byteLength),
+                'Docker-Content-Digest': digest,
+            }),
+            body: manifestBytes,
+        };
+    });
+}
+/**
+ * GET /v2/{name}/blobs/{digest} — pull a blob.
+ *
+ * In this shim, blobs are also stored as version tarballs.  The digest
+ * is matched against all version tarballs for the repository.
+ *
+ * For a production implementation, blobs would be stored as separate
+ * DWN records keyed by content digest.
+ */
+function handleGetBlob(ctx, did, imageName, digest) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const pkg = yield resolvePackage(ctx, did, imageName, 'oci');
+        if (!pkg) {
+            return notFound('NAME_UNKNOWN', `repository not found: ${did}/${imageName}`);
+        }
+        // Search all versions for a tarball matching the digest.
+        const versions = yield listVersions(ctx, did, pkg.contextId);
+        for (const ver of versions) {
+            const data = yield fetchTarball(ctx, did, ver.contextId);
+            if (data) {
+                const d = yield sha256Digest(data);
+                if (d === digest) {
+                    return {
+                        status: 200,
+                        headers: ociHeaders({
+                            'Content-Type': 'application/octet-stream',
+                            'Content-Length': String(data.byteLength),
+                            'Docker-Content-Digest': digest,
+                        }),
+                        body: data,
+                    };
+                }
+            }
+        }
+        return notFound('BLOB_UNKNOWN', `blob unknown: ${digest}`);
+    });
+}
+// ---------------------------------------------------------------------------
+// Router
+// ---------------------------------------------------------------------------
+/**
+ * Route an OCI registry request to the appropriate handler.
+ *
+ * Exported for testing — tests can call this directly without starting
+ * an HTTP server.
+ */
+export function handleOciRequest(ctx_1, url_1) {
+    return __awaiter(this, arguments, void 0, function* (ctx, url, method = 'GET') {
+        const path = url.pathname;
+        // --- /v2/ — API version check ----------------------------------------
+        if (path === '/v2/' || path === '/v2') {
+            return handleApiVersionCheck();
+        }
+        // All other endpoints are under /v2/{name}/…
+        const v2Match = path.match(/^\/v2\/(.+)\/(manifests|blobs|tags)\/(.+)$/);
+        if (!v2Match) {
+            // Check for tags/list format: /v2/{name}/tags/list
+            const tagsMatch = path.match(/^\/v2\/(.+)\/tags\/list$/);
+            if (tagsMatch) {
+                const parsed = parseOciName(tagsMatch[1]);
+                if (!parsed) {
+                    return notFound('NAME_INVALID', 'Invalid repository name. Expected did:<method>:<id>/<name>');
+                }
+                return handleTagsList(ctx, parsed.did, parsed.imageName);
+            }
+            return notFound('NAME_INVALID', 'Invalid v2 API path');
+        }
+        const repoName = v2Match[1];
+        const endpoint = v2Match[2];
+        const reference = v2Match[3];
+        const parsed = parseOciName(repoName);
+        if (!parsed) {
+            return notFound('NAME_INVALID', 'Invalid repository name. Expected did:<method>:<id>/<name>');
+        }
+        switch (endpoint) {
+            case 'manifests':
+                return handleGetManifest(ctx, parsed.did, parsed.imageName, reference, method === 'HEAD');
+            case 'blobs':
+                return handleGetBlob(ctx, parsed.did, parsed.imageName, reference);
+            case 'tags':
+                if (reference === 'list') {
+                    return handleTagsList(ctx, parsed.did, parsed.imageName);
+                }
+                return notFound('NAME_INVALID', `Unknown tags endpoint: ${reference}`);
+            default:
+                return notFound('NAME_INVALID', `Unknown endpoint: ${endpoint}`);
+        }
+    });
+}
+//# sourceMappingURL=registry.js.map

package/dist/esm/shims/oci/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/shims/oci/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;;;;;;;;AAIH,OAAO,EACL,YAAY,EACZ,YAAY,EACZ,cAAc,EACd,cAAc,GACf,MAAM,2BAA2B,CAAC;AAanC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,8CAA8C;AAC9C,SAAS,UAAU,CAAC,KAA8B;IAChD,uBACE,iCAAiC,EAAG,cAAc,EAClD,6BAA6B,EAAO,GAAG,IACpC,KAAK,EACR;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAe;IAC7C,OAAO;QACL,MAAM,EAAI,GAAG;QACb,OAAO,EAAG,UAAU,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC5D,IAAI,EAAM,IAAI,CAAC,SAAS,CAAC;YACvB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;SAC1C,CAAC;KACH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACtB,yDAAyD,CAC1D,CAAC;IAEF,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAE5B,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAe,YAAY,CAAC,IAAyB;;QACnD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/E,MAAM,IAAI,GAAG,IAAI,UAAU,CACzB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAC7C,CAAC;QACF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,UAAU,GAAG,EAAE,CAAC;IACzB,CAAC;CAAA;AAED,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,oCAAoC;AACpC,SAAS,qBAAqB;IAC5B,OAAO;QACL,MAAM,EAAI,GAAG;QACb,OAAO,EAAG,UAAU,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC5D,IAAI,EAAM,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,6DAA6D;AAC7D,SAAe,cAAc,CAC3B,GAAiB,EACjB,GAAW,EACX,SAAiB;;QAEjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,QAAQ,CAAC,cAAc,EAAE,yBAAyB,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAE3C,OAAO;YACL,MAAM,EAAI,GAAG;YACb,OAAO,EAAG,UAAU,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;YAC5D,IAAI,EAAM,IAAI,CAAC,SAAS,CAAC;gBACvB,IAAI,EAAE,GAAG,GAAG,IAAI,SAAS,EAAE;gBAC3B,IAAI;aACL,CAAC;SACH,CAAC;IACJ,CAAC;CAAA;AAED;;;;;GAKG;AACH,SAAe,iBAAiB,CAC9B,GAAiB,EACjB,GAAW,EACX,SAAiB,EACjB,SAAiB,EACjB,QAAiB;;QAEjB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,QAAQ,CAAC,cAAc,EAAE,yBAAyB,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,4BAA4B;QAC5B,IAAI,aAAa,GAAsB,IAAI,CAAC;QAE5C,IAAI,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAC7D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;gBACzD,IAAI,IAAI,EAAE,CAAC;oBACT,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;oBACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;wBACzB,aAAa,GAAG,IAAI,CAAC;wBACrB,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;aAAM,CAAC;YACN,oBAAoB;YACpB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACrE,IAAI,GAAG,EAAE,CAAC;gBACR,aAAa,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,QAAQ,CAAC,kBAAkB,EAAE,qBAAqB,SAAS,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QAEjD,gDAAgD;QAChD,IAAI,WAAW,GAAG,4CAA4C,CAAC;QAC/D,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;YACnE,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACrB,WAAW,GAAG,MAAM,CAAC,SAAmB,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,WAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;QAED,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO;gBACL,MAAM,EAAI,GAAG;gBACb,OAAO,EAAG,UAAU,CAAC;oBACnB,cAAc,EAAY,WAAW;oBACrC,gBAAgB,EAAU,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;oBAC1D,uBAAuB,EAAG,MAAM;iBACjC,CAAC;gBACF,IAAI,EAAE,EAAE;aACT,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAI,GAAG;YACb,OAAO,EAAG,UAAU,CAAC;gBACnB,cAAc,EAAY,WAAW;gBACrC,gBAAgB,EAAU,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC;gBAC1D,uBAAuB,EAAG,MAAM;aACjC,CAAC;YACF,IAAI,EAAE,aAAa;SACpB,CAAC;IACJ,CAAC;CAAA;AAED;;;;;;;;GAQG;AACH,SAAe,aAAa,CAC1B,GAAiB,EACjB,GAAW,EACX,SAAiB,EACjB,MAAc;;QAEd,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,QAAQ,CAAC,cAAc,EAAE,yBAAyB,GAAG,IAAI,SAAS,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,yDAAyD;QACzD,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;oBACjB,OAAO;wBACL,MAAM,EAAI,GAAG;wBACb,OAAO,EAAG,UAAU,CAAC;4BACnB,cAAc,EAAY,0BAA0B;4BACpD,gBAAgB,EAAU,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;4BACjD,uBAAuB,EAAG,MAAM;yBACjC,CAAC;wBACF,IAAI,EAAE,IAAI;qBACX,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,cAAc,EAAE,iBAAiB,MAAM,EAAE,CAAC,CAAC;IAC7D,CAAC;CAAA;AAED,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,UAAgB,gBAAgB;yDACpC,GAAiB,EACjB,GAAQ,EACR,SAAiB,KAAK;QAEtB,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC;QAE1B,wEAAwE;QACxE,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;YACtC,OAAO,qBAAqB,EAAE,CAAC;QACjC,CAAC;QAED,6CAA6C;QAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACzE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,mDAAmD;YACnD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YACzD,IAAI,SAAS,EAAE,CAAC;gBACd,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,OAAO,QAAQ,CAAC,cAAc,EAAE,4DAA4D,CAAC,CAAC;gBAChG,CAAC;gBACD,OAAO,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC3D,CAAC;YAED,OAAO,QAAQ,CAAC,cAAc,EAAE,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAE7B,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,QAAQ,CAAC,cAAc,EAAE,4DAA4D,CAAC,CAAC;QAChG,CAAC;QAED,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,WAAW;gBACd,OAAO,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC;YAE5F,KAAK,OAAO;gBACV,OAAO,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAErE,KAAK,MAAM;gBACT,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;oBACzB,OAAO,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC3D,CAAC;gBACD,OAAO,QAAQ,CAAC,cAAc,EAAE,0BAA0B,SAAS,EAAE,CAAC,CAAC;YAEzE;gBACE,OAAO,QAAQ,CAAC,cAAc,EAAE,qBAAqB,QAAQ,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;CAAA"}

package/dist/esm/shims/oci/server.js

@@ -0,0 +1,82 @@
+/**
+ * OCI Distribution registry shim — HTTP server.
+ *
+ * Starts a local OCI-compatible registry that resolves DID-scoped
+ * container images from DWN records.
+ *
+ * Usage:
+ *   gitd shim oci [--port 5555]
+ *
+ * Then:
+ *   docker pull localhost:5555/did:dht:abc123/my-image:v1.0.0
+ *
+ * @module
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { createServer } from 'node:http';
+import { handleOciRequest } from './registry.js';
+// ---------------------------------------------------------------------------
+// Server
+// ---------------------------------------------------------------------------
+/** Start the OCI registry shim server. Returns the server instance. */
+export function startOciShim(options) {
+    const { ctx, port } = options;
+    const server = createServer((req, res) => __awaiter(this, void 0, void 0, function* () {
+        var _a;
+        // CORS preflight.
+        if (req.method === 'OPTIONS') {
+            res.writeHead(204, {
+                'Access-Control-Allow-Origin': '*',
+                'Access-Control-Allow-Methods': 'GET, HEAD, OPTIONS',
+                'Access-Control-Allow-Headers': 'Authorization, Accept, Docker-Distribution-Api-Version',
+                'Access-Control-Max-Age': '86400',
+            });
+            res.end();
+            return;
+        }
+        // Only support GET and HEAD — this is a pull-only registry.
+        if (req.method !== 'GET' && req.method !== 'HEAD') {
+            res.writeHead(405, {
+                'Content-Type': 'application/json',
+                'Docker-Distribution-Api-Version': 'registry/2.0',
+            });
+            res.end(JSON.stringify({
+                errors: [{ code: 'UNSUPPORTED', message: 'This is a read-only registry shim.', detail: null }],
+            }));
+            return;
+        }
+        try {
+            const url = new URL((_a = req.url) !== null && _a !== void 0 ? _a : '/', `http://localhost:${port}`);
+            const result = yield handleOciRequest(ctx, url, req.method);
+            res.writeHead(result.status, result.headers);
+            res.end(result.body);
+        }
+        catch (err) {
+            console.error(`[oci-shim] Error: ${err.message}`);
+            res.writeHead(500, {
+                'Content-Type': 'application/json',
+                'Docker-Distribution-Api-Version': 'registry/2.0',
+            });
+            res.end(JSON.stringify({
+                errors: [{ code: 'UNKNOWN', message: 'Internal server error', detail: null }],
+            }));
+        }
+    }));
+    server.listen(port, () => {
+        console.log(`[oci-shim] OCI registry shim running at http://localhost:${port}`);
+        console.log('[oci-shim] Usage:');
+        console.log(`  docker pull localhost:${port}/did:dht:<id>/<image>:<tag>`);
+        console.log(`  podman pull localhost:${port}/did:dht:<id>/<image>:<tag>`);
+        console.log('');
+    });
+    return server;
+}
+//# sourceMappingURL=server.js.map

package/dist/esm/shims/oci/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../../../src/shims/oci/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;;;;;;;;;;AAIH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAKzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAWjD,8EAA8E;AAC9E,SAAS;AACT,8EAA8E;AAE9E,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IAE9B,MAAM,MAAM,GAAG,YAAY,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;QAC7C,kBAAkB;QAClB,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,6BAA6B,EAAI,GAAG;gBACpC,8BAA8B,EAAG,oBAAoB;gBACrD,8BAA8B,EAAG,wDAAwD;gBACzF,wBAAwB,EAAS,OAAO;aACzC,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAsB,kBAAkB;gBACtD,iCAAiC,EAAG,cAAc;aACnD,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oCAAoC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aAC/F,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAA,GAAG,CAAC,GAAG,mCAAI,GAAG,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAChE,MAAM,MAAM,GAAgB,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAEzE,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,qBAAsB,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;gBACjB,cAAc,EAAsB,kBAAkB;gBACtD,iCAAiC,EAAG,cAAc;aACnD,CAAC,CAAC;YACH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aAC9E,CAAC,CAAC,CAAC;QACN,CAAC;IACH,CAAC,CAAA,CAAC,CAAC;IAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;QACvB,OAAO,CAAC,GAAG,CAAC,4DAA4D,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,6BAA6B,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,2BAA2B,IAAI,6BAA6B,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/esm/social.js

@@ -0,0 +1,70 @@
+/**
+ * Forge Social Protocol — stars, follows, and activity feeds.
+ *
+ * Stars and follows live on the actor's DWN, not the target's. This preserves
+ * data sovereignty: your social graph is yours. Aggregate counts (e.g., "how
+ * many stars does this repo have?") are computed by indexers.
+ *
+ * @module
+ */
+import { defineProtocol } from '@enbox/api';
+// ---------------------------------------------------------------------------
+// Protocol definition
+// ---------------------------------------------------------------------------
+export const ForgeSocialDefinition = {
+    protocol: 'https://enbox.org/protocols/forge/social',
+    published: true,
+    types: {
+        star: {
+            schema: 'https://enbox.org/schemas/forge/star',
+            dataFormats: ['application/json'],
+        },
+        follow: {
+            schema: 'https://enbox.org/schemas/forge/follow',
+            dataFormats: ['application/json'],
+        },
+        activity: {
+            schema: 'https://enbox.org/schemas/forge/activity',
+            dataFormats: ['application/json'],
+        },
+    },
+    structure: {
+        star: {
+            // Stars live on the STARRER's DWN — owner-only write, public read
+            $actions: [{ who: 'anyone', can: ['read'] }],
+            $tags: {
+                $requiredTags: ['repoDid', 'repoRecordId'],
+                $allowUndefinedTags: false,
+                repoDid: { type: 'string' },
+                repoRecordId: { type: 'string' },
+            },
+        },
+        follow: {
+            // Follows live on the FOLLOWER's DWN — owner-only write, public read
+            $actions: [{ who: 'anyone', can: ['read'] }],
+            $tags: {
+                $requiredTags: ['targetDid'],
+                $allowUndefinedTags: false,
+                targetDid: { type: 'string' },
+            },
+        },
+        activity: {
+            // Activity feed on the actor's DWN — public read
+            $actions: [{ who: 'anyone', can: ['read'] }],
+            $tags: {
+                $requiredTags: ['type'],
+                $allowUndefinedTags: true,
+                type: {
+                    type: 'string',
+                    enum: ['push', 'issue_open', 'issue_close', 'patch_open', 'patch_merge', 'release', 'star', 'fork'],
+                },
+            },
+        },
+    },
+};
+// ---------------------------------------------------------------------------
+// Typed protocol export
+// ---------------------------------------------------------------------------
+/** Typed Forge Social protocol for use with `dwn.using()`. */
+export const ForgeSocialProtocol = defineProtocol(ForgeSocialDefinition, {});
+//# sourceMappingURL=social.js.map

package/dist/esm/social.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"social.js","sourceRoot":"","sources":["../../src/social.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAuC5C,8EAA8E;AAC9E,sBAAsB;AACtB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ,EAAI,0CAA0C;IACtD,SAAS,EAAG,IAAI;IAChB,KAAK,EAAO;QACV,IAAI,EAAE;YACJ,MAAM,EAAQ,sCAAsC;YACpD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,MAAM,EAAE;YACN,MAAM,EAAQ,wCAAwC;YACtD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;QACD,QAAQ,EAAE;YACR,MAAM,EAAQ,0CAA0C;YACxD,WAAW,EAAG,CAAC,kBAAkB,CAAC;SACnC;KACF;IACD,SAAS,EAAE;QACT,IAAI,EAAE;YACJ,kEAAkE;YAClE,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,KAAK,EAAM;gBACT,aAAa,EAAS,CAAC,SAAS,EAAE,cAAc,CAAC;gBACjD,mBAAmB,EAAG,KAAK;gBAC3B,OAAO,EAAe,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACxC,YAAY,EAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzC;SACF;QACD,MAAM,EAAE;YACN,qEAAqE;YACrE,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,KAAK,EAAM;gBACT,aAAa,EAAS,CAAC,WAAW,CAAC;gBACnC,mBAAmB,EAAG,KAAK;gBAC3B,SAAS,EAAa,EAAE,IAAI,EAAE,QAAQ,EAAE;aACzC;SACF;QACD,QAAQ,EAAE;YACR,iDAAiD;YACjD,QAAQ,EAAG,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,KAAK,EAAM;gBACT,aAAa,EAAS,CAAC,MAAM,CAAC;gBAC9B,mBAAmB,EAAG,IAAI;gBAC1B,IAAI,EAAkB;oBACpB,IAAI,EAAG,QAAQ;oBACf,IAAI,EAAG,CAAC,MAAM,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;iBACrG;aACF;SACF;KACF;CACoC,CAAC;AAExC,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAC/C,qBAAqB,EACrB,EAA0B,CAC3B,CAAC"}