@eyeauras/cli-factory 0.1.0

package/dist/src/profile-commands.js

@@ -0,0 +1,265 @@
+import { rm } from "node:fs/promises";
+import { promptText } from "./auth.js";
+import { command } from "./command.js";
+import { assertProfileName, assertUniqueProfileName } from "./profile-store.js";
+function hasProfileValue(value) {
+    return (value !== undefined &&
+        value !== null &&
+        (typeof value !== "string" || value.trim() !== ""));
+}
+function configureSyntax(field) {
+    return (field.flags.match(/--[a-z0-9-]+(?:[ =](?:<[^>]+>|\[[^\]]+\]))?/i)?.[0] ??
+        field.flags);
+}
+/** Configure validates against candidate values without persisting credentials early. */
+function deferSecrets(store) {
+    const pending = new Map();
+    const secrets = {
+        get: async (name) => pending.has(name) ? pending.get(name) : store.get(name),
+        async require(name) {
+            const value = await secrets.get(name);
+            if (!value)
+                throw new Error("No credential is available. Run 'auth login' first.");
+            return value;
+        },
+        set: async (name, value) => {
+            pending.set(name, value);
+        },
+        delete: async (name) => {
+            pending.set(name, undefined);
+        },
+    };
+    return {
+        secrets,
+        async commit(saveProfile) {
+            // Fail closed: never bind an old credential to a newly saved endpoint.
+            for (const name of pending.keys())
+                await store.delete(name);
+            await saveProfile();
+            for (const [name, value] of pending) {
+                if (value !== undefined)
+                    await store.set(name, value);
+            }
+        },
+    };
+}
+function optionKey(flags) {
+    const longFlag = flags.split(/[ ,|]+/).find((part) => part.startsWith("--"));
+    if (!longFlag) {
+        throw new Error(`Option '${flags}' must include a long flag.`);
+    }
+    return longFlag
+        .replace(/^--(?:no-)?/, "")
+        .replace(/[ <[].*$/, "")
+        .replace(/-([a-z])/g, (_match, letter) => letter.toUpperCase());
+}
+/** Profile/auth declarations and onboarding share the same operations, not a second parser. */
+export function createProfileCommands(definition, profileStore, invocation, invalidateProfile) {
+    const profileDefinition = definition.profile ?? {};
+    const missingRequiredFields = (profile) => (profileDefinition.fields ?? []).filter((field) => field.required === true && !hasProfileValue(profile.values[field.name]));
+    const authenticationRequired = (profile) => definition.auth !== undefined &&
+        (definition.auth.required?.(profile) ?? true);
+    const configurationState = async (profile) => {
+        const missingFields = missingRequiredFields(profile);
+        const readiness = definition.auth?.isReady;
+        const { appArguments, secrets, signal, environment } = invocation.contextFor(profile);
+        const authenticationMissing = missingFields.length === 0 &&
+            authenticationRequired(profile) &&
+            readiness !== undefined &&
+            !(await readiness({
+                appArguments,
+                profile,
+                secrets,
+                signal,
+                environment,
+            }));
+        return {
+            missingFields,
+            authenticationMissing,
+        };
+    };
+    const configurationError = (profile, state) => {
+        const missing = [
+            ...state.missingFields.map((field) => configureSyntax(field)),
+            ...(state.authenticationMissing
+                ? (definition.auth?.loginOptions ?? []).map(configureSyntax)
+                : []),
+        ];
+        const details = [
+            ...(state.missingFields.length > 0
+                ? [
+                    `missing fields: ${state.missingFields.map((field) => field.name).join(", ")}`,
+                ]
+                : []),
+            ...(state.authenticationMissing ? ["authentication is missing"] : []),
+        ].join("; ");
+        return new Error(`Profile '${profile.name}' is not configured (${details}). ` +
+            `Run '${definition.name} profile configure ${profile.name}${missing.length > 0 ? ` ${missing.join(" ")}` : ""}'.`);
+    };
+    const authContext = (profile, interactive = false) => ({
+        ...invocation.contextFor(profile),
+        interactive,
+        stdinAvailable: invocation.stdinAvailable,
+    });
+    const configureProfile = async (profileName, options) => {
+        assertProfileName(profileName);
+        const listed = await profileStore.list();
+        const existing = listed.profiles.find((profile) => profile.name === profileName);
+        if (!existing)
+            assertUniqueProfileName(profileName, listed.profiles.map((profile) => profile.name));
+        const values = {
+            ...(profileDefinition.defaults ?? {}),
+            ...(existing?.values ?? {}),
+            ...options.values,
+        };
+        let candidate = { name: profileName, values };
+        const context = invocation.contextFor(candidate);
+        let missing = missingRequiredFields(candidate);
+        if (missing.length > 0 && options.interactive) {
+            for (const field of missing) {
+                const value = await promptText(context.io.input, context.io.error, field.description, context.signal);
+                if (hasProfileValue(value)) {
+                    values[field.name] = value;
+                }
+            }
+            candidate = { name: profileName, values };
+            missing = missingRequiredFields(candidate);
+        }
+        if (missing.length > 0) {
+            throw configurationError(candidate, {
+                missingFields: missing,
+                authenticationMissing: false,
+            });
+        }
+        await profileDefinition.validate?.(values);
+        const saveProfile = () => existing
+            ? profileStore.set(profileName, values)
+            : profileStore.create(profileName, values);
+        if (!definition.auth || !authenticationRequired(candidate)) {
+            const profile = await saveProfile();
+            await invalidateProfile(profile);
+            return {
+                configured: true,
+                profile: profile.name,
+                authenticated: true,
+                identity: null,
+            };
+        }
+        await invalidateProfile(candidate);
+        const loginContext = authContext(candidate, options.interactive);
+        const deferred = deferSecrets(loginContext.secrets);
+        const status = await definition.auth.login({ ...loginContext, secrets: deferred.secrets }, options.authOptions);
+        if (!status.authenticated)
+            throw configurationError(candidate, {
+                missingFields: [],
+                authenticationMissing: true,
+            });
+        loginContext.signal.throwIfAborted();
+        try {
+            await deferred.commit(saveProfile);
+        }
+        catch {
+            const flags = (definition.auth.loginOptions ?? [])
+                .map(configureSyntax)
+                .join(" ");
+            throw new Error("Could not save profile configuration or authentication. Check the OS credential store. Authentication may be incomplete. " +
+                `Run '${definition.name} profile configure ${profileName}${flags ? ` ${flags}` : ""}' again.`);
+        }
+        return {
+            configured: true,
+            profile: profileName,
+            authenticated: true,
+            identity: status.identity ?? null,
+        };
+    };
+    const fields = profileDefinition.fields ?? [];
+    // Profile prerequisites may already be stored or prompted; they are not mandatory CLI options.
+    const fieldOptions = fields.map(({ flags, description }) => ({
+        flags,
+        description,
+    }));
+    const profileValues = (options) => Object.fromEntries(fields
+        .map((field) => [field.name, options[optionKey(field.flags)]])
+        .filter((entry) => entry[1] !== undefined));
+    const profileCommands = command("profile", "Manage service profiles", [
+        command("list", "List profiles", async () => {
+            const list = await profileStore.list();
+            return list.profiles.map((profile) => ({
+                default: profile.name === list.active,
+                name: profile.name,
+                ...profile.values,
+            }));
+        }),
+        command("show [name]", "Show one profile", ({ args }, context) => args.name === undefined
+            ? context.profile
+            : profileStore.get(String(args.name))),
+        command("configure [name]", "Complete profile settings and authentication", ({ args, options }, context) => configureProfile(args.name === undefined ? context.profile.name : String(args.name), {
+            values: profileValues(options),
+            authOptions: options,
+            interactive: invocation.interactive(),
+        }), { options: [...fieldOptions, ...(definition.auth?.loginOptions ?? [])] }),
+        command("create <name>", "Create a profile without changing the default", ({ args, options }) => profileStore.create(String(args.name), profileValues(options)), { options: fieldOptions }),
+        command("set <name>", "Update an existing profile", async ({ args, options }) => {
+            const profile = await profileStore.set(String(args.name), profileValues(options));
+            await invalidateProfile(profile);
+            return profile;
+        }, { options: fieldOptions }),
+        command("set-default <name>", "Choose the default profile", ({ args }) => profileStore.setDefault(String(args.name))),
+        command("delete <name>", "Delete a non-default profile and its stored credential", async ({ args }) => {
+            const name = String(args.name);
+            const list = await profileStore.list();
+            if (!list.profiles.some((profile) => profile.name === name))
+                throw new Error(`Profile '${name}' does not exist.`);
+            if (list.profiles.length === 1)
+                throw new Error("Cannot delete the only profile. At least one default profile must exist.");
+            if (list.active === name)
+                throw new Error(`Cannot delete default profile '${name}'. Set another default with 'profile set-default <name>' first.`);
+            const profile = await profileStore.get(name);
+            const context = authContext(profile);
+            await definition.auth?.logout(context);
+            await invalidateProfile(profile);
+            const deleted = await profileStore.delete(name);
+            await rm(context.appArguments.AppDataDirectory, {
+                recursive: true,
+                force: true,
+            });
+            return deleted;
+        }),
+    ]);
+    const commands = [profileCommands];
+    const auth = definition.auth;
+    if (auth)
+        commands.push(command("auth", "Manage application authentication", [
+            command("login", "Authenticate the selected profile", async ({ options }, context) => {
+                const missingFields = missingRequiredFields(context.profile);
+                if (missingFields.length)
+                    throw configurationError(context.profile, {
+                        missingFields,
+                        authenticationMissing: false,
+                    });
+                if (!authenticationRequired(context.profile))
+                    throw new Error("This profile does not require authentication.");
+                const status = await auth.login(authContext(context.profile, invocation.interactive()), options);
+                return {
+                    ...status,
+                    profile: context.profile.name,
+                    identity: status.identity ?? null,
+                };
+            }, { options: auth.loginOptions ?? [] }),
+            command("status", "Show authentication status", async (_input, context) => {
+                const status = authenticationRequired(context.profile)
+                    ? await auth.status(authContext(context.profile))
+                    : { authenticated: true, identity: null };
+                return { ...status, profile: context.profile.name };
+            }),
+            command("logout", "Invalidate authentication for the selected profile", async (_input, context) => {
+                await auth.logout(authContext(context.profile));
+                return {
+                    authenticated: !authenticationRequired(context.profile),
+                    profile: context.profile.name,
+                };
+            }),
+        ]));
+    return { commands, configureProfile, configurationState, configurationError };
+}
+//# sourceMappingURL=profile-commands.js.map

package/dist/src/profile-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-commands.js","sourceRoot":"","sources":["../../src/profile-commands.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AA4BhF,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,IAAI;QACd,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CACnD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,8CAA8C,CAAC,EAAE,CAAC,CAAC,CAAC;QACtE,KAAK,CAAC,KAAK,CACZ,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,YAAY,CAAC,KAAoB;IACxC,MAAM,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACtD,MAAM,OAAO,GAAkB;QAC7B,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAClB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QACzD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK;gBACR,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC3B,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YACrB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC;IACF,OAAO;QACL,OAAO;QACP,KAAK,CAAC,MAAM,CAAC,WAAmC;YAC9C,uEAAuE;YACvE,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,EAAE;gBAAE,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC5D,MAAM,WAAW,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;gBACpC,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACxD,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,6BAA6B,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,QAAQ;SACZ,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;SAC1B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,qBAAqB,CACnC,UAA4D,EAC5D,YAAkC,EAClC,UAA6B,EAC7B,iBAAsD;IAEtD,MAAM,iBAAiB,GAAG,UAAU,CAAC,OAAO,IAAI,EAAE,CAAC;IACnD,MAAM,qBAAqB,GAAG,CAAC,OAAgB,EAA2B,EAAE,CAC1E,CAAC,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CACrC,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAC1E,CAAC;IACJ,MAAM,sBAAsB,GAAG,CAAC,OAAgB,EAAW,EAAE,CAC3D,UAAU,CAAC,IAAI,KAAK,SAAS;QAC7B,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IAChD,MAAM,kBAAkB,GAAG,KAAK,EAC9B,OAAgB,EACa,EAAE;QAC/B,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC;QAC3C,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,GAClD,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,qBAAqB,GACzB,aAAa,CAAC,MAAM,KAAK,CAAC;YAC1B,sBAAsB,CAAC,OAAO,CAAC;YAC/B,SAAS,KAAK,SAAS;YACvB,CAAC,CAAC,MAAM,SAAS,CAAC;gBAChB,YAAY;gBACZ,OAAO;gBACP,OAAO;gBACP,MAAM;gBACN,WAAW;aACZ,CAAC,CAAC,CAAC;QACN,OAAO;YACL,aAAa;YACb,qBAAqB;SACtB,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,CACzB,OAAgB,EAChB,KAAyB,EAClB,EAAE;QACT,MAAM,OAAO,GAAG;YACd,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;YAC7D,GAAG,CAAC,KAAK,CAAC,qBAAqB;gBAC7B,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC5D,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;QACF,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC;gBAChC,CAAC,CAAC;oBACE,mBAAmB,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;iBAC/E;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,OAAO,IAAI,KAAK,CACd,YAAY,OAAO,CAAC,IAAI,wBAAwB,OAAO,KAAK;YAC1D,QAAQ,UAAU,CAAC,IAAI,sBAAsB,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CACpH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,OAAgB,EAAE,WAAW,GAAG,KAAK,EAAe,EAAE,CAAC,CAAC;QAC3E,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;QACjC,WAAW;QACX,cAAc,EAAE,UAAU,CAAC,cAAc;KAC1C,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,KAAK,EAC5B,WAAmB,EACnB,OAAgC,EAM/B,EAAE;QACH,iBAAiB,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CACnC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAC1C,CAAC;QACF,IAAI,CAAC,QAAQ;YACX,uBAAuB,CACrB,WAAW,EACX,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAC/C,CAAC;QACJ,MAAM,MAAM,GAAG;YACb,GAAG,CAAC,iBAAiB,CAAC,QAAQ,IAAI,EAAE,CAAC;YACrC,GAAG,CAAC,QAAQ,EAAE,MAAM,IAAI,EAAE,CAAC;YAC3B,GAAG,OAAO,CAAC,MAAM;SAClB,CAAC;QACF,IAAI,SAAS,GAAY,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACvD,MAAM,OAAO,GAAG,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAE/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,KAAK,GAAG,MAAM,UAAU,CAC5B,OAAO,CAAC,EAAE,CAAC,KAAK,EAChB,OAAO,CAAC,EAAE,CAAC,KAAK,EAChB,KAAK,CAAC,WAAW,EACjB,OAAO,CAAC,MAAM,CACf,CAAC;gBACF,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC3B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;gBAC7B,CAAC;YACH,CAAC;YACD,SAAS,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;YAC1C,OAAO,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,kBAAkB,CAAC,SAAS,EAAE;gBAClC,aAAa,EAAE,OAAO;gBACtB,qBAAqB,EAAE,KAAK;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,MAAM,iBAAiB,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,GAAG,EAAE,CACvB,QAAQ;YACN,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC;YACvC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,MAAM,WAAW,EAAE,CAAC;YACpC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO;gBACL,UAAU,EAAE,IAAI;gBAChB,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,aAAa,EAAE,IAAI;gBACnB,QAAQ,EAAE,IAAI;aACf,CAAC;QACJ,CAAC;QAED,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CACxC,EAAE,GAAG,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAC9C,OAAO,CAAC,WAAW,CACpB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,aAAa;YACvB,MAAM,kBAAkB,CAAC,SAAS,EAAE;gBAClC,aAAa,EAAE,EAAE;gBACjB,qBAAqB,EAAE,IAAI;aAC5B,CAAC,CAAC;QACL,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,KAAK,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;iBAC/C,GAAG,CAAC,eAAe,CAAC;iBACpB,IAAI,CAAC,GAAG,CAAC,CAAC;YACb,MAAM,IAAI,KAAK,CACb,2HAA2H;gBACzH,QAAQ,UAAU,CAAC,IAAI,sBAAsB,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,CAChG,CAAC;QACJ,CAAC;QACD,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,WAAW;YACpB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;SAClC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,IAAI,EAAE,CAAC;IAC9C,+FAA+F;IAC/F,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,KAAK;QACL,WAAW;KACZ,CAAC,CAAC,CAAC;IACJ,MAAM,aAAa,GAAG,CAAC,OAAgC,EAAE,EAAE,CACzD,MAAM,CAAC,WAAW,CAChB,MAAM;SACH,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAC7D,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAC7C,CAAC;IACJ,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,yBAAyB,EAAE;QACpE,OAAO,CAAC,MAAM,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE;YAC1C,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACrC,OAAO,EAAE,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;gBACrC,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,GAAG,OAAO,CAAC,MAAM;aAClB,CAAC,CAAC,CAAC;QACN,CAAC,CAAC;QACF,OAAO,CAAC,aAAa,EAAE,kBAAkB,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAC/D,IAAI,CAAC,IAAI,KAAK,SAAS;YACrB,CAAC,CAAC,OAAO,CAAC,OAAO;YACjB,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACxC;QACD,OAAO,CACL,kBAAkB,EAClB,8CAA8C,EAC9C,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAC7B,gBAAgB,CACd,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAClE;YACE,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC;YAC9B,WAAW,EAAE,OAAO;YACpB,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE;SACtC,CACF,EACH,EAAE,OAAO,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC,CAAC,EAAE,CACzE;QACD,OAAO,CACL,eAAe,EACf,+CAA+C,EAC/C,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CACpB,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC,EAChE,EAAE,OAAO,EAAE,YAAY,EAAE,CAC1B;QACD,OAAO,CACL,YAAY,EACZ,4BAA4B,EAC5B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE;YAC1B,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CACpC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EACjB,aAAa,CAAC,OAAO,CAAC,CACvB,CAAC;YACF,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACjC,OAAO,OAAO,CAAC;QACjB,CAAC,EACD,EAAE,OAAO,EAAE,YAAY,EAAE,CAC1B;QACD,OAAO,CAAC,oBAAoB,EAAE,4BAA4B,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CACvE,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAC3C;QACD,OAAO,CACL,eAAe,EACf,wDAAwD,EACxD,KAAK,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE;YACjB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;YACvC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC;gBACzD,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,mBAAmB,CAAC,CAAC;YACvD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAC5B,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;YACJ,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI;gBACtB,MAAM,IAAI,KAAK,CACb,kCAAkC,IAAI,iEAAiE,CACxG,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC7C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;YACjC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,gBAAgB,EAAE;gBAC9C,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,IAAI;aACZ,CAAC,CAAC;YACH,OAAO,OAAO,CAAC;QACjB,CAAC,CACF;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,CAAC,eAAe,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,IAAI,IAAI;QACN,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,MAAM,EAAE,mCAAmC,EAAE;YACnD,OAAO,CACL,OAAO,EACP,mCAAmC,EACnC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE;gBAC7B,MAAM,aAAa,GAAG,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC7D,IAAI,aAAa,CAAC,MAAM;oBACtB,MAAM,kBAAkB,CAAC,OAAO,CAAC,OAAO,EAAE;wBACxC,aAAa;wBACb,qBAAqB,EAAE,KAAK;qBAC7B,CAAC,CAAC;gBACL,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC;oBAC1C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,EACtD,OAAO,CACR,CAAC;gBACF,OAAO;oBACL,GAAG,MAAM;oBACT,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;oBAC7B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;iBAClC,CAAC;YACJ,CAAC,EACD,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE,EAAE,CACrC;YACD,OAAO,CACL,QAAQ,EACR,4BAA4B,EAC5B,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;gBACxB,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC;oBACpD,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBACjD,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBAC5C,OAAO,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACtD,CAAC,CACF;YACD,OAAO,CACL,QAAQ,EACR,oDAAoD,EACpD,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;gBACxB,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;gBAChD,OAAO;oBACL,aAAa,EAAE,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC;oBACvD,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,IAAI;iBAC9B,CAAC;YACJ,CAAC,CACF;SACF,CAAC,CACH,CAAC;IACJ,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,CAAC;AAChF,CAAC"}

package/dist/src/profile-file.d.ts

@@ -0,0 +1,26 @@
+export declare class ProfileFileError extends Error {
+    readonly published: boolean;
+    readonly cleanupFailed: boolean;
+    constructor(message: string, published?: boolean, cleanupFailed?: boolean);
+}
+export interface PublishedProfileFile {
+    path: string;
+    bytes: number;
+    sha256: string;
+}
+export interface StagedProfileFile {
+    path: string;
+    bytes: number;
+    prefix: Uint8Array;
+}
+export interface ProfileFileOptions {
+    appDataDirectory: string;
+    name: string;
+    maxBytes: number;
+    signal?: AbortSignal | undefined;
+    openResponse: () => Promise<Response>;
+    inspectResponse: (response: Response) => void | Promise<void>;
+    validateFile?: ((file: StagedProfileFile) => void | Promise<void>) | undefined;
+}
+export declare function publishProfileFile(options: ProfileFileOptions): Promise<PublishedProfileFile>;
+//# sourceMappingURL=profile-file.d.ts.map

package/dist/src/profile-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-file.d.ts","sourceRoot":"","sources":["../../src/profile-file.ts"],"names":[],"mappings":"AAiBA,qBAAa,gBAAiB,SAAQ,KAAK;aAGvB,SAAS;aACT,aAAa;IAH/B,YACE,OAAO,EAAE,MAAM,EACC,SAAS,UAAQ,EACjB,aAAa,UAAQ,EAGtC;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IACjC,YAAY,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,eAAe,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,SAAS,CAAC;CAChF;AA0FD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,oBAAoB,CAAC,CA2N/B"}

package/dist/src/profile-file.js

@@ -0,0 +1,325 @@
+import { createHash } from "node:crypto";
+import { link, lstat, mkdir, mkdtemp, open, realpath, rmdir, unlink, } from "node:fs/promises";
+import { isAbsolute, join, parse, relative, resolve, sep } from "node:path";
+import { privateDirectory } from "./private-storage.js";
+import { consumeResponseBody } from "./response-body.js";
+export class ProfileFileError extends Error {
+    published;
+    cleanupFailed;
+    constructor(message, published = false, cleanupFailed = false) {
+        super(message);
+        this.published = published;
+        this.cleanupFailed = cleanupFailed;
+    }
+}
+function fileIdentityFromStat(path, stat) {
+    if (!stat.isFile())
+        throw new Error();
+    return {
+        path,
+        dev: stat.dev,
+        ino: stat.ino,
+        size: stat.size,
+        mtimeNs: stat.mtimeNs,
+        ctimeNs: stat.ctimeNs,
+    };
+}
+function inside(parent, child) {
+    const part = relative(parent, child);
+    if (part === ".." || part.startsWith(".." + sep) || isAbsolute(part))
+        throw new Error();
+}
+async function directoryIdentity(path) {
+    const stat = await lstat(path, { bigint: true });
+    if (!stat.isDirectory() || stat.isSymbolicLink())
+        throw new Error();
+    return { path, dev: stat.dev, ino: stat.ino };
+}
+async function fileIdentity(path) {
+    const stat = await lstat(path, { bigint: true });
+    if (!stat.isFile() || stat.isSymbolicLink())
+        throw new Error();
+    return fileIdentityFromStat(path, stat);
+}
+async function prepareDirectories(path) {
+    const absolute = resolve(path);
+    let current = parse(absolute).root;
+    const result = [await directoryIdentity(current)];
+    for (const segment of relative(current, absolute).split(sep).filter(Boolean)) {
+        current = join(current, segment);
+        try {
+            await mkdir(current, { mode: 0o700 });
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+        result.push(await directoryIdentity(current));
+    }
+    const actual = resolve(await realpath(absolute));
+    const equal = process.platform === "win32"
+        ? actual.toLowerCase() === absolute.toLowerCase()
+        : actual === absolute;
+    if (!equal)
+        throw new Error();
+    return result;
+}
+async function verifyIdentity(expected, kind) {
+    const actual = kind === "directory"
+        ? await directoryIdentity(expected.path)
+        : await fileIdentity(expected.path);
+    if (actual.dev !== expected.dev || actual.ino !== expected.ino)
+        throw new Error();
+}
+async function verifyDirectories(directories) {
+    for (const directory of directories)
+        await verifyIdentity(directory, "directory");
+}
+async function verifyFileSnapshot(expected) {
+    const actual = await fileIdentity(expected.path);
+    if (actual.dev !== expected.dev || actual.ino !== expected.ino ||
+        actual.size !== expected.size || actual.mtimeNs !== expected.mtimeNs ||
+        actual.ctimeNs !== expected.ctimeNs) {
+        throw new Error();
+    }
+}
+function safeBasename(value) {
+    return !!value && Buffer.byteLength(value, "utf8") <= 255 && value !== "." && value !== ".." &&
+        !/[<>:"/\\|?*\u0000-\u001f\u007f-\u009f\p{Cf}]/u.test(value) && !/[. ]$/.test(value) &&
+        !/^(?:con|prn|aux|nul|conin\$|conout\$|clock\$|com[1-9¹²³]|lpt[1-9¹²³])(?:[ .]|$)/i.test(value);
+}
+export async function publishProfileFile(options) {
+    const { appDataDirectory, name, maxBytes, signal } = options;
+    if (!isAbsolute(appDataDirectory)) {
+        throw new ProfileFileError("Downloads require an absolute profile AppData directory.");
+    }
+    if (!safeBasename(name)) {
+        throw new ProfileFileError("Download name must be one safe basename without reserved characters.");
+    }
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1) {
+        throw new ProfileFileError("Download byte limit must be a positive safe integer.");
+    }
+    const profileDirectory = resolve(appDataDirectory);
+    const downloadDirectory = join(profileDirectory, "downloads");
+    const tempDirectory = join(profileDirectory, "temp");
+    const destination = join(downloadDirectory, name);
+    inside(profileDirectory, downloadDirectory);
+    inside(profileDirectory, tempDirectory);
+    inside(downloadDirectory, destination);
+    let destinationDirectories = [];
+    let stagingDirectories = [];
+    let stagingDirectory;
+    let stagingDirectoryIdentity;
+    let stagingPath;
+    let stagingIdentity;
+    let file;
+    let response;
+    let published = false;
+    let cleanupFailed = false;
+    let failureMessage = "Download failed, exceeded its byte limit, was cancelled, or had an incomplete transfer; " +
+        "no destination was published.";
+    let result;
+    const hash = createHash("sha256");
+    const prefix = new Uint8Array(8);
+    let prefixBytes = 0;
+    try {
+        if (signal?.aborted)
+            throw new Error();
+        failureMessage =
+            "Download directories could not be verified; symlinks, junctions and replacement are " +
+                "unsupported; no destination was published.";
+        destinationDirectories = await prepareDirectories(downloadDirectory);
+        stagingDirectories = await prepareDirectories(tempDirectory);
+        try {
+            const existing = await lstat(destination);
+            void existing;
+            failureMessage =
+                "Download destination already exists; no overwrite; no destination was published.";
+            throw new Error();
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        await verifyDirectories([...destinationDirectories, ...stagingDirectories]);
+        stagingDirectory = await mkdtemp(join(tempDirectory, ".download-"));
+        stagingDirectoryIdentity = await directoryIdentity(stagingDirectory);
+        await privateDirectory(stagingDirectory);
+        await verifyIdentity(stagingDirectoryIdentity, "directory");
+        stagingPath = join(stagingDirectory, "content");
+        file = await open(stagingPath, "wx", 0o600);
+        const opened = await file.stat({ bigint: true });
+        if (!opened.isFile())
+            throw new Error();
+        stagingIdentity = fileIdentityFromStat(stagingPath, opened);
+        failureMessage =
+            "Download failed, exceeded its byte limit, was cancelled, or had an incomplete transfer; " +
+                "no destination was published.";
+        if (signal?.aborted)
+            throw new Error();
+        response = await options.openResponse();
+        if (signal?.aborted)
+            throw new Error();
+        try {
+            await options.inspectResponse(response);
+        }
+        catch (error) {
+            if (error instanceof ProfileFileError)
+                failureMessage = error.message;
+            throw error;
+        }
+        const bytes = await consumeResponseBody(response, { maxBytes, signal }, async (chunk) => {
+            const owned = Uint8Array.from(chunk);
+            if (prefixBytes < prefix.length) {
+                const count = Math.min(prefix.length - prefixBytes, owned.byteLength);
+                prefix.set(owned.subarray(0, count), prefixBytes);
+                prefixBytes += count;
+            }
+            hash.update(owned);
+            let offset = 0;
+            while (offset < owned.byteLength) {
+                const written = await file.write(owned, offset, owned.byteLength - offset);
+                if (!written.bytesWritten)
+                    throw new Error();
+                offset += written.bytesWritten;
+            }
+        });
+        if (signal?.aborted)
+            throw new Error();
+        await file.sync();
+        failureMessage =
+            "Download directories or private staging changed during the transfer; " +
+                "no destination was published.";
+        await verifyDirectories([...destinationDirectories, ...stagingDirectories]);
+        await verifyIdentity(stagingDirectoryIdentity, "directory");
+        const completedIdentity = await fileIdentity(stagingIdentity.path);
+        if (completedIdentity.dev !== stagingIdentity.dev ||
+            completedIdentity.ino !== stagingIdentity.ino || completedIdentity.size !== BigInt(bytes)) {
+            throw new Error();
+        }
+        stagingIdentity = completedIdentity;
+        failureMessage =
+            "Download failed file validation; no destination was published.";
+        if (options.validateFile) {
+            try {
+                await options.validateFile({
+                    path: stagingPath,
+                    bytes,
+                    prefix: prefix.subarray(0, prefixBytes),
+                });
+            }
+            catch (error) {
+                if (error instanceof ProfileFileError)
+                    failureMessage = error.message;
+                throw error;
+            }
+        }
+        if (signal?.aborted) {
+            failureMessage = "Download was cancelled; no destination was published.";
+            throw new Error();
+        }
+        failureMessage =
+            "Download directories or private staging changed during validation; " +
+                "no destination was published.";
+        await verifyDirectories([...destinationDirectories, ...stagingDirectories]);
+        await verifyIdentity(stagingDirectoryIdentity, "directory");
+        await verifyFileSnapshot(stagingIdentity);
+        if (signal?.aborted) {
+            failureMessage = "Download was cancelled; no destination was published.";
+            throw new Error();
+        }
+        const sha256 = hash.digest("hex");
+        try {
+            await link(stagingPath, destination);
+        }
+        catch (error) {
+            if (error.code === "EEXIST") {
+                failureMessage =
+                    "Download destination already exists; no overwrite; no destination was published.";
+            }
+            else {
+                failureMessage =
+                    "Download could not be published exclusively; the profile filesystem must support hard links.";
+            }
+            throw error;
+        }
+        published = true;
+        failureMessage =
+            "Download was published, but its destination identity could not be verified; " +
+                "inspect the profile downloads directory.";
+        await verifyDirectories([...destinationDirectories, ...stagingDirectories]);
+        await verifyIdentity(stagingDirectoryIdentity, "directory");
+        await verifyIdentity(stagingIdentity, "file");
+        const publishedIdentity = await fileIdentity(destination);
+        if (publishedIdentity.dev !== stagingIdentity.dev || publishedIdentity.ino !== stagingIdentity.ino) {
+            throw new Error();
+        }
+        result = { path: destination, bytes, sha256 };
+    }
+    catch {
+        // The selected static message is the only information exposed from this operation.
+    }
+    finally {
+        void response?.body?.cancel().catch(() => undefined);
+        let cleanupAllowed = true;
+        let cleanupIdentity;
+        if (file) {
+            try {
+                if (!stagingPath)
+                    throw new Error();
+                cleanupIdentity = fileIdentityFromStat(stagingPath, await file.stat({ bigint: true }));
+                await verifyFileSnapshot(cleanupIdentity);
+            }
+            catch {
+                cleanupFailed = true;
+                cleanupAllowed = false;
+            }
+        }
+        try {
+            await file?.close();
+            file = undefined;
+        }
+        catch {
+            cleanupFailed = true;
+            cleanupAllowed = false;
+        }
+        if (stagingDirectory && cleanupAllowed) {
+            try {
+                if (!stagingDirectoryIdentity)
+                    throw new Error();
+                await verifyDirectories(stagingDirectories);
+                await verifyIdentity(stagingDirectoryIdentity, "directory");
+                if (stagingPath && stagingIdentity) {
+                    try {
+                        if (!cleanupIdentity)
+                            throw new Error();
+                        await verifyFileSnapshot(cleanupIdentity);
+                        await unlink(stagingPath);
+                    }
+                    catch (error) {
+                        if (error.code !== "ENOENT")
+                            throw error;
+                    }
+                }
+                else if (stagingPath) {
+                    throw new Error();
+                }
+                await verifyDirectories(stagingDirectories);
+                await verifyIdentity(stagingDirectoryIdentity, "directory");
+                await rmdir(stagingDirectory);
+            }
+            catch {
+                cleanupFailed = true;
+            }
+        }
+    }
+    if (cleanupFailed) {
+        throw new ProfileFileError(published
+            ? "Download was published, but private staging cleanup failed; inspect the profile temp directory."
+            : "Download was not published, and private staging cleanup failed; inspect the profile temp directory.", published, true);
+    }
+    if (!result)
+        throw new ProfileFileError(failureMessage, published, false);
+    return result;
+}
+//# sourceMappingURL=profile-file.js.map

package/dist/src/profile-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-file.js","sourceRoot":"","sources":["../../src/profile-file.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,IAAI,EACJ,KAAK,EACL,KAAK,EACL,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,KAAK,EACL,MAAM,GAEP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEzD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAGvB,SAAS;IACT,aAAa;IAH/B,YACE,OAAe,EACC,SAAS,GAAG,KAAK,EACjB,aAAa,GAAG,KAAK;QAErC,KAAK,CAAC,OAAO,CAAC,CAAC;yBAHC,SAAS;6BACT,aAAa;IAG/B,CAAC;CACF;AAoCD,SAAS,oBAAoB,CAAC,IAAY,EAAE,IAAiB;IAC3D,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACtC,OAAO;QACL,IAAI;QACJ,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,KAAa;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACpE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IAC/D,OAAO,oBAAoB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAY;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IACnC,MAAM,MAAM,GAAG,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7E,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO;QACxC,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE;QACjD,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;IACxB,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,QAAsB,EAAE,IAA0B;IAC9E,MAAM,MAAM,GAAG,IAAI,KAAK,WAAW;QACjC,CAAC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxC,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,EAAE,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAoC;IACnE,KAAK,MAAM,SAAS,IAAI,WAAW;QAAE,MAAM,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAsB;IACtD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC1D,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;QACpE,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI;QAC1F,CAAC,+CAA+C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACpF,CAAC,kFAAkF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAA2B;IAE3B,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,gBAAgB,CAAC,0DAA0D,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,gBAAgB,CAAC,sEAAsE,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,gBAAgB,CAAC,sDAAsD,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACnD,MAAM,iBAAiB,GAAG,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,aAAa,GAAG,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAClD,MAAM,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IAC5C,MAAM,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;IACxC,MAAM,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;IAEvC,IAAI,sBAAsB,GAAmB,EAAE,CAAC;IAChD,IAAI,kBAAkB,GAAmB,EAAE,CAAC;IAC5C,IAAI,gBAAoC,CAAC;IACzC,IAAI,wBAAkD,CAAC;IACvD,IAAI,WAA+B,CAAC;IACpC,IAAI,eAAyC,CAAC;IAC9C,IAAI,IAA4B,CAAC;IACjC,IAAI,QAA8B,CAAC;IACnC,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,IAAI,cAAc,GAChB,0FAA0F;QAC1F,+BAA+B,CAAC;IAClC,IAAI,MAAwC,CAAC;IAC7C,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,IAAI,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACvC,cAAc;YACZ,sFAAsF;gBACtF,4CAA4C,CAAC;QAC/C,sBAAsB,GAAG,MAAM,kBAAkB,CAAC,iBAAiB,CAAC,CAAC;QACrE,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,aAAa,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,CAAC;YAC1C,KAAK,QAAQ,CAAC;YACd,cAAc;gBACZ,kFAAkF,CAAC;YACrF,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;QACD,MAAM,iBAAiB,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;QAC5E,gBAAgB,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;QACpE,wBAAwB,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QACrE,MAAM,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAC5D,WAAW,GAAG,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QAChD,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACxC,eAAe,GAAG,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE5D,cAAc;YACZ,0FAA0F;gBAC1F,+BAA+B,CAAC;QAClC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACvC,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,EAAE,CAAC;QACxC,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,gBAAgB;gBAAE,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;YACtE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtF,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;gBACtE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC;gBAClD,WAAW,IAAI,KAAK,CAAC;YACvB,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;gBACjC,MAAM,OAAO,GAAG,MAAM,IAAK,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;gBAC5E,IAAI,CAAC,OAAO,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAC7C,MAAM,IAAI,OAAO,CAAC,YAAY,CAAC;YACjC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACvC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,cAAc;YACZ,uEAAuE;gBACvE,+BAA+B,CAAC;QAClC,MAAM,iBAAiB,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;QAC5E,MAAM,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,iBAAiB,GAAG,MAAM,YAAY,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,IAAI,iBAAiB,CAAC,GAAG,KAAK,eAAe,CAAC,GAAG;YAC7C,iBAAiB,CAAC,GAAG,KAAK,eAAe,CAAC,GAAG,IAAI,iBAAiB,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,eAAe,GAAG,iBAAiB,CAAC;QACpC,cAAc;YACZ,gEAAgE,CAAC;QACnE,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,YAAY,CAAC;oBACzB,IAAI,EAAE,WAAW;oBACjB,KAAK;oBACL,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,WAAW,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,gBAAgB;oBAAE,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;gBACtE,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,cAAc,GAAG,uDAAuD,CAAC;YACzE,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,cAAc;YACZ,qEAAqE;gBACrE,+BAA+B,CAAC;QAClC,MAAM,iBAAiB,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;QAC5E,MAAM,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;QAC1C,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,cAAc,GAAG,uDAAuD,CAAC;YACzE,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACvD,cAAc;oBACZ,kFAAkF,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACN,cAAc;oBACZ,8FAA8F,CAAC;YACnG,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,SAAS,GAAG,IAAI,CAAC;QACjB,cAAc;YACZ,8EAA8E;gBAC9E,0CAA0C,CAAC;QAC7C,MAAM,iBAAiB,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;QAC5E,MAAM,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,iBAAiB,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,iBAAiB,CAAC,GAAG,KAAK,eAAe,CAAC,GAAG,IAAI,iBAAiB,CAAC,GAAG,KAAK,eAAe,CAAC,GAAG,EAAE,CAAC;YACnG,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,CAAC;QACD,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,mFAAmF;IACrF,CAAC;YAAS,CAAC;QACT,KAAK,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,cAAc,GAAG,IAAI,CAAC;QAC1B,IAAI,eAAyC,CAAC;QAC9C,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC;gBACH,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpC,eAAe,GAAG,oBAAoB,CACpC,WAAW,EACX,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAClC,CAAC;gBACF,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa,GAAG,IAAI,CAAC;gBACrB,cAAc,GAAG,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;YACpB,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,aAAa,GAAG,IAAI,CAAC;YACrB,cAAc,GAAG,KAAK,CAAC;QACzB,CAAC;QACD,IAAI,gBAAgB,IAAI,cAAc,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,IAAI,CAAC,wBAAwB;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBACjD,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;gBAC5C,MAAM,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;gBAC5D,IAAI,WAAW,IAAI,eAAe,EAAE,CAAC;oBACnC,IAAI,CAAC;wBACH,IAAI,CAAC,eAAe;4BAAE,MAAM,IAAI,KAAK,EAAE,CAAC;wBACxC,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAC;wBAC1C,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;oBAC5B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;4BAAE,MAAM,KAAK,CAAC;oBACtE,CAAC;gBACH,CAAC;qBAAM,IAAI,WAAW,EAAE,CAAC;oBACvB,MAAM,IAAI,KAAK,EAAE,CAAC;gBACpB,CAAC;gBACD,MAAM,iBAAiB,CAAC,kBAAkB,CAAC,CAAC;gBAC5C,MAAM,cAAc,CAAC,wBAAwB,EAAE,WAAW,CAAC,CAAC;gBAC5D,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACP,aAAa,GAAG,IAAI,CAAC;YACvB,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,IAAI,gBAAgB,CACxB,SAAS;YACP,CAAC,CAAC,iGAAiG;YACnG,CAAC,CAAC,qGAAqG,EACzG,SAAS,EACT,IAAI,CACL,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC;AAChB,CAAC"}