@mannyc1/ts-release 0.0.7 → 0.3.0

package/dist/release/prepared-store.js

@@ -0,0 +1,339 @@
+import * as Effect from "effect/Effect";
+import * as Context from "effect/Context";
+import * as Schema from "effect/Schema";
+import { constants, existsSync, lstatSync, mkdirSync, openSync, readdirSync, realpathSync, renameSync, rmSync, statSync, chmodSync, closeSync, fsyncSync } from "node:fs";
+import { randomUUID } from "node:crypto";
+import { basename, dirname, join } from "node:path";
+import { secureRead, secureWrite } from "../drivers/workspace.js";
+import { digestEquals, sha256Digest, Sha256Hex } from "../model/digest.js";
+import { decodePreparedRelease, encodePreparedRelease } from "./prepared.js";
+import { CompletePreparedReleaseRef, makeLocalCompletePreparedReleaseRef } from "./prepared-ref.js";
+export class PreparedStoreError extends Schema.TaggedErrorClass()("PreparedStoreError", { reason: Schema.String }) {
+}
+export class PreparedStoreProvenanceError extends Schema.TaggedErrorClass()("PreparedStoreProvenanceError", {
+    scheme: Schema.Literals(["local", "gha"]),
+    reason: Schema.String
+}) {
+}
+export class LocalPreparedStoreProvenance extends Schema.TaggedClass()("LocalPreparedStoreProvenance", {
+    scheme: Schema.Literal("local"),
+    filesystemRoot: Schema.NonEmptyString,
+    operatorBoundary: Schema.NonEmptyString
+}) {
+}
+export class GitHubActionsPreparedStoreProvenance extends Schema.TaggedClass()("GitHubActionsPreparedStoreProvenance", {
+    scheme: Schema.Literal("gha"),
+    repository: Schema.NonEmptyString,
+    workflowRef: Schema.NonEmptyString,
+    workflowSha: Schema.NonEmptyString,
+    runId: Schema.NonEmptyString,
+    attempt: Schema.NonEmptyString,
+    candidateCommit: Schema.NonEmptyString,
+    artifactName: Schema.NonEmptyString,
+    artifactDigest: Schema.NonEmptyString,
+    allowedWriter: Schema.Literal("repository-workflow")
+}) {
+}
+export const PreparedStoreProvenance = Schema.Union([
+    LocalPreparedStoreProvenance,
+    GitHubActionsPreparedStoreProvenance
+]);
+const canonicalPathEquals = (left, right) => {
+    try {
+        return realpathSync(left) === realpathSync(right);
+    }
+    catch {
+        return false;
+    }
+};
+/**
+ * GitHub artifact lookup is name-based and may span every rerun attempt in a
+ * workflow run. Bind the attempt as well as the content digest so an older
+ * prepared reference cannot be shadowed by a newer rerun's duplicate name.
+ */
+export const githubActionsPreparedArtifactName = (attempt, digest) => `ts-release-prepared-${attempt}-${digest}`;
+export const verifyPreparedStoreProvenance = Effect.fn("verifyPreparedStoreProvenance")(function* (input) {
+    if (input.reference.kind !== "complete" || input.bundle.manifest.kind !== "complete") {
+        return yield* new PreparedStoreProvenanceError({
+            scheme: input.reference.scheme,
+            reason: "Prepared store provenance verifies only complete references and bundles."
+        });
+    }
+    const digest = sha256Digest(encodePreparedRelease(input.bundle.manifest)).hex;
+    if (digest !== input.reference.digest.toString()) {
+        return yield* new PreparedStoreProvenanceError({
+            scheme: input.reference.scheme,
+            reason: "Prepared reference digest does not match canonical complete-bundle contents."
+        });
+    }
+    if (input.reference.scheme === "local") {
+        if (input.evidence.scheme !== "local" || input.evidence.filesystemRoot.trim().length === 0 ||
+            input.evidence.operatorBoundary.trim().length === 0 ||
+            !canonicalPathEquals(input.evidence.filesystemRoot, dirname(input.bundle.directory))) {
+            return yield* new PreparedStoreProvenanceError({
+                scheme: "local",
+                reason: "Local prepared bytes require an explicit filesystem/operator trust boundary."
+            });
+        }
+        return input.evidence;
+    }
+    if (input.evidence.scheme !== "gha") {
+        return yield* new PreparedStoreProvenanceError({
+            scheme: "gha",
+            reason: "Local evidence cannot be promoted into GitHub Actions trust by copying bytes or a digest."
+        });
+    }
+    const coordinate = `${input.reference.owner}/${input.reference.repository}`;
+    const mismatches = [
+        input.evidence.repository !== coordinate ? "repository" : undefined,
+        input.evidence.runId !== input.reference.runId.toString() ? "runId" : undefined,
+        input.evidence.attempt !== input.reference.attempt.toString() ? "attempt" : undefined,
+        input.evidence.candidateCommit !== input.bundle.manifest.source.commit.toString() ? "candidateCommit" : undefined,
+        input.evidence.artifactName !== input.reference.artifactName.toString() ? "artifactName" : undefined,
+        input.evidence.artifactDigest !== input.reference.digest.toString() ? "artifactDigest" : undefined,
+        !input.evidence.workflowRef.startsWith(`${coordinate}/.github/workflows/`) ||
+            !input.evidence.workflowRef.includes("@refs/") ? "workflowRef" : undefined,
+        !/^[a-f0-9]{40}(?:[a-f0-9]{24})?$/u.test(input.evidence.workflowSha) ? "workflowSha" : undefined,
+        input.reference.artifactName.toString() !== githubActionsPreparedArtifactName(input.reference.attempt.toString(), input.reference.digest.toString()) ? "immutableArtifactName" : undefined
+    ].filter((field) => field !== undefined);
+    if (mismatches.length > 0) {
+        return yield* new PreparedStoreProvenanceError({
+            scheme: "gha",
+            reason: `Hosted prepared-store provenance mismatched ${mismatches.join(", ")}.`
+        });
+    }
+    return input.evidence;
+});
+/**
+ * The bytes are already durable and verified, but the host failed to expose
+ * their recovery reference before publication could continue. This is a
+ * post-commit abort, never a preparation failure.
+ */
+export class PreparedCommitHandoffError extends Schema.TaggedErrorClass()("PreparedCommitHandoffError", {
+    prepared: CompletePreparedReleaseRef,
+    reason: Schema.String
+}) {
+}
+export const PreparedStoreFaultPoint = Schema.Literals([
+    "before-blob-write",
+    "after-blob-write",
+    "before-manifest-write",
+    "after-manifest-write",
+    "before-blob-directory-fsync",
+    "after-blob-directory-fsync",
+    "before-bundle-directory-fsync",
+    "after-bundle-directory-fsync",
+    "before-promotion",
+    "after-promotion",
+    "before-store-fsync",
+    "after-store-fsync",
+    "before-cleanup",
+    "after-cleanup"
+]);
+const equal = (left, right) => left.length === right.length && left.every((byte, index) => byte === right[index]);
+const fail = (reason) => { throw PreparedStoreError.make({ reason }); };
+const causeReason = (cause) => typeof cause === "object" && cause !== null && "reason" in cause && typeof cause.reason === "string"
+    ? cause.reason
+    : cause instanceof Error
+        ? cause.message
+        : String(cause);
+const canonicalDirectory = (directory) => {
+    if (!existsSync(directory))
+        mkdirSync(directory, { recursive: true, mode: 0o700 });
+    if (lstatSync(directory).isSymbolicLink())
+        fail("Prepared store root must not be a symlink.");
+    const real = realpathSync(directory);
+    if (!lstatSync(real).isDirectory())
+        fail("Prepared store root must be a directory.");
+    return real;
+};
+const syncDirectory = (directory) => {
+    const descriptor = openSync(directory, constants.O_RDONLY);
+    try {
+        fsyncSync(descriptor);
+    }
+    finally {
+        closeSync(descriptor);
+    }
+};
+const artifactsById = (manifest) => {
+    if (manifest.kind !== "complete")
+        fail("Prepared store accepts only a kind:'complete' publication bundle.");
+    const result = new Map();
+    for (const artifact of manifest.artifacts) {
+        const id = artifact.id.toString();
+        if (result.has(id))
+            fail(`Prepared manifest repeats artifact ${id}.`);
+        if (!digestEquals(artifact.digest, artifact.blob)) {
+            fail(`Prepared artifact ${id} does not carry a canonical SHA-256 blob reference.`);
+        }
+        result.set(id, artifact);
+    }
+    return result;
+};
+const validatePublications = (manifest, artifacts) => {
+    const ids = new Set();
+    for (const publication of manifest.publications) {
+        if (ids.has(publication.id.toString()))
+            fail(`Prepared manifest repeats publication ${publication.id}.`);
+        ids.add(publication.id.toString());
+        const references = publication._tag === "PreparedNpmPublication"
+            ? [publication.artifactId]
+            : publication._tag === "PreparedPyPiPublication"
+                ? publication.files.map((file) => file.artifactId)
+                : publication._tag === "PreparedGitHubPublication"
+                    ? publication.assets.map((asset) => asset.artifactId)
+                    : [publication.targetArtifactId, publication.stateArtifactId];
+        for (const id of references)
+            if (!artifacts.has(id.toString()))
+                fail(`Publication ${publication.id} references missing artifact ${id}.`);
+        if (publication._tag === "PreparedPyPiPublication")
+            for (const file of publication.files) {
+                const artifact = artifacts.get(file.artifactId.toString());
+                if (artifact.size !== file.size || !digestEquals(artifact.digest, file.sha256) ||
+                    artifact.mediaType !== file.mediaType || artifact.path.toString().split("/").at(-1) !== file.filename.toString()) {
+                    fail(`PyPI publication ${publication.id} file ${file.filename} disagrees with its prepared artifact.`);
+                }
+            }
+        if (publication._tag === "PreparedGitHubPublication" && publication.body !== undefined && publication.body.length === 0) {
+            fail(`GitHub publication ${publication.id} carries an empty body.`);
+        }
+    }
+};
+const readBundle = (directory) => {
+    if (lstatSync(directory).isSymbolicLink())
+        fail("Prepared bundle directory must not be a symlink.");
+    const real = realpathSync(directory);
+    const bytes = secureRead(real, "prepared-release.json").bytes;
+    const manifest = decodePreparedRelease(bytes);
+    if (manifest.kind !== "complete")
+        fail("Prepared store refuses every unknown or partial bundle kind.");
+    const manifestDigest = sha256Digest(bytes).hex;
+    if (basename(real) !== manifestDigest)
+        fail("Prepared bundle directory does not match its manifest digest.");
+    const entries = readdirSync(real, { withFileTypes: true });
+    if (entries.some((entry) => entry.name !== "prepared-release.json" && entry.name !== "blobs"))
+        fail("Prepared bundle contains an unexpected top-level entry.");
+    const blobDirectory = join(real, "blobs");
+    if (!existsSync(blobDirectory) || lstatSync(blobDirectory).isSymbolicLink() || !statSync(blobDirectory).isDirectory())
+        fail("Prepared bundle is missing its real blobs directory.");
+    const artifacts = artifactsById(manifest);
+    validatePublications(manifest, artifacts);
+    const expectedBlobs = new Set([...artifacts.values()].map((artifact) => artifact.blob.hex));
+    const actualBlobs = new Set(readdirSync(blobDirectory, { withFileTypes: true }).map((entry) => {
+        if (!entry.isFile() || !Schema.is(Sha256Hex)(entry.name))
+            fail(`Prepared blob entry ${entry.name} is invalid.`);
+        return entry.name;
+    }));
+    if (actualBlobs.size !== expectedBlobs.size || [...expectedBlobs].some((blob) => !actualBlobs.has(blob)))
+        fail("Prepared bundle blob set does not match its manifest.");
+    const blobs = new Map();
+    for (const artifact of artifacts.values()) {
+        const blob = secureRead(real, `blobs/${artifact.blob.hex}`).bytes;
+        if (blob.length !== artifact.size || !digestEquals(sha256Digest(blob), artifact.digest))
+            fail(`Prepared blob ${artifact.id} failed size or digest verification.`);
+        blobs.set(artifact.id.toString(), new Uint8Array(blob));
+    }
+    return { directory: real, manifest, blobs };
+};
+const atomicWrite = (directory, target, bytes) => {
+    const temporary = `${target}.${randomUUID()}.tmp`;
+    secureWrite(directory, temporary, bytes);
+    renameSync(join(directory, temporary), join(directory, target));
+    chmodSync(join(directory, target), 0o400);
+};
+const writeBundle = (storeDirectory, manifest, blobs, options = {}) => {
+    const fault = options.onFaultPoint ?? (() => undefined);
+    const store = canonicalDirectory(storeDirectory);
+    const manifestBytes = encodePreparedRelease(manifest);
+    if (manifest.kind !== "complete")
+        fail("Prepared store commits only a kind:'complete' publication bundle.");
+    const manifestDigest = sha256Digest(manifestBytes).hex;
+    const artifacts = artifactsById(manifest);
+    validatePublications(manifest, artifacts);
+    for (const artifact of artifacts.values()) {
+        const bytes = blobs.get(artifact.id.toString()) ?? fail(`No prepared bytes supplied for artifact ${artifact.id}.`);
+        if (bytes.length !== artifact.size || !digestEquals(sha256Digest(bytes), artifact.digest) || !digestEquals(artifact.blob, artifact.digest))
+            fail(`Prepared bytes do not match artifact ${artifact.id}.`);
+    }
+    const finalDirectory = join(store, manifestDigest);
+    if (existsSync(finalDirectory)) {
+        const existing = readBundle(finalDirectory);
+        if (!equal(secureRead(finalDirectory, "prepared-release.json").bytes, manifestBytes))
+            fail("Existing prepared bundle has a different manifest.");
+        return existing;
+    }
+    const temporary = join(store, `.${manifestDigest}.${randomUUID()}.tmp`);
+    mkdirSync(join(temporary, "blobs"), { recursive: true, mode: 0o700 });
+    let promoted = false;
+    try {
+        for (const artifact of artifacts.values()) {
+            fault("before-blob-write");
+            atomicWrite(join(temporary, "blobs"), artifact.blob.hex, blobs.get(artifact.id.toString()));
+            fault("after-blob-write");
+        }
+        fault("before-manifest-write");
+        atomicWrite(temporary, "prepared-release.json", manifestBytes);
+        fault("after-manifest-write");
+        fault("before-blob-directory-fsync");
+        syncDirectory(join(temporary, "blobs"));
+        fault("after-blob-directory-fsync");
+        fault("before-bundle-directory-fsync");
+        syncDirectory(temporary);
+        fault("after-bundle-directory-fsync");
+        fault("before-promotion");
+        renameSync(temporary, finalDirectory);
+        promoted = true;
+        fault("after-promotion");
+        fault("before-store-fsync");
+        syncDirectory(store);
+        fault("after-store-fsync");
+    }
+    catch (cause) {
+        let cleanupFailure;
+        if (existsSync(temporary)) {
+            try {
+                fault("before-cleanup");
+                rmSync(temporary, { recursive: true, force: true });
+                fault("after-cleanup");
+            }
+            catch (cleanupCause) {
+                cleanupFailure = cleanupCause;
+            }
+        }
+        if (!promoted && existsSync(finalDirectory)) {
+            const existing = readBundle(finalDirectory);
+            if (!equal(secureRead(finalDirectory, "prepared-release.json").bytes, manifestBytes)) {
+                fail("Concurrent prepared-store promotion produced a different manifest.");
+            }
+            return existing;
+        }
+        if (cleanupFailure !== undefined) {
+            throw PreparedStoreError.make({
+                reason: `Prepared-store cleanup failed after ${cause instanceof Error ? cause.message : String(cause)}: ${cleanupFailure instanceof Error ? cleanupFailure.message : String(cleanupFailure)}`
+            });
+        }
+        if (cause instanceof PreparedStoreError)
+            throw cause;
+        throw PreparedStoreError.make({ reason: cause instanceof Error ? cause.message : String(cause) });
+    }
+    return readBundle(finalDirectory);
+};
+export const storePreparedRelease = Effect.fn("storePreparedRelease")((storeDirectory, manifest, blobs, options) => Effect.try({ try: () => writeBundle(storeDirectory, manifest, blobs, options), catch: (cause) => cause instanceof PreparedStoreError ? cause : PreparedStoreError.make({ reason: causeReason(cause) })
+}));
+export const loadPreparedRelease = Effect.fn("loadPreparedRelease")((directory) => Effect.try({
+    try: () => readBundle(directory),
+    catch: (cause) => cause instanceof PreparedStoreError ? cause : PreparedStoreError.make({ reason: causeReason(cause) })
+}));
+export class PreparedReleaseStore extends Context.Service()("ts-release/PreparedReleaseStore") {
+}
+/** A local store resolves digest-only references against one explicit root. */
+export const makeLocalPreparedReleaseStore = (storeDirectory, options) => ({
+    commit: (manifest, blobs) => storePreparedRelease(storeDirectory, manifest, blobs, options).pipe(Effect.flatMap((bundle) => makeLocalCompletePreparedReleaseRef(basename(bundle.directory)).pipe(Effect.map((ref) => ({ ref, bundle })), Effect.mapError((cause) => PreparedStoreError.make({ reason: cause.reason }))))),
+    load: (reference) => reference.scheme === "local"
+        ? loadPreparedRelease(join(storeDirectory, reference.digest))
+        : Effect.fail(PreparedStoreError.make({
+            reason: "A GitHub Actions prepared reference is not loadable by the local store; rerun the failed workflow publish job or dispatch its recovery workflow."
+        }))
+});
+//# sourceMappingURL=prepared-store.js.map

package/dist/release/prepared-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared-store.js","sourceRoot":"","sources":["../../src/release/prepared-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAA;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAgB,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACvL,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC1E,OAAO,EAAuC,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAA;AACjH,OAAO,EAAE,0BAA0B,EAAE,mCAAmC,EAAE,MAAM,mBAAmB,CAAA;AAEnG,MAAM,OAAO,kBACX,SAAQ,MAAM,CAAC,gBAAgB,EAAsB,CAAC,oBAAoB,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;CAAG;AAE3G,MAAM,OAAO,4BACX,SAAQ,MAAM,CAAC,gBAAgB,EAAgC,CAAC,8BAA8B,EAAE;IAC9F,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC;CAAG;AAEP,MAAM,OAAO,4BACX,SAAQ,MAAM,CAAC,WAAW,EAAgC,CAAC,8BAA8B,EAAE;IACzF,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,gBAAgB,EAAE,MAAM,CAAC,cAAc;CACxC,CAAC;CAAG;AAEP,MAAM,OAAO,oCACX,SAAQ,MAAM,CAAC,WAAW,EAAwC,CAAC,sCAAsC,EAAE;IACzG,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC,cAAc;IACjC,WAAW,EAAE,MAAM,CAAC,cAAc;IAClC,WAAW,EAAE,MAAM,CAAC,cAAc;IAClC,KAAK,EAAE,MAAM,CAAC,cAAc;IAC5B,OAAO,EAAE,MAAM,CAAC,cAAc;IAC9B,eAAe,EAAE,MAAM,CAAC,cAAc;IACtC,YAAY,EAAE,MAAM,CAAC,cAAc;IACnC,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,qBAAqB,CAAC;CACrD,CAAC;CAAG;AAEP,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,4BAA4B;IAC5B,oCAAoC;CACrC,CAAC,CAAA;AAGF,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,KAAa,EAAW,EAAE;IACnE,IAAI,CAAC;QAAC,OAAO,YAAY,CAAC,IAAI,CAAC,KAAK,YAAY,CAAC,KAAK,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAA;IAAC,CAAC;AAClF,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,OAAe,EAAE,MAAc,EAAU,EAAE,CAC3F,uBAAuB,OAAO,IAAI,MAAM,EAAE,CAAA;AAE5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC,EAAE,CAAC,+BAA+B,CAAC,CAAC,QAAQ,CAAC,EAAC,KAIjG;IACC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrF,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;YAC7C,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,MAAM,EAAE,0EAA0E;SACnF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAA;IAC7E,IAAI,MAAM,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;YAC7C,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM;YAC9B,MAAM,EAAE,8EAA8E;SACvF,CAAC,CAAA;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YACtF,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YACnD,CAAC,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACzF,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;gBAC7C,MAAM,EAAE,OAAO;gBACf,MAAM,EAAE,8EAA8E;aACvF,CAAC,CAAA;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,QAAQ,CAAA;IACvB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;YAC7C,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,2FAA2F;SACpG,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,CAAA;IAC3E,MAAM,UAAU,GAAG;QACjB,KAAK,CAAC,QAAQ,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS;QACnE,KAAK,CAAC,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QAC/E,KAAK,CAAC,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;QACrF,KAAK,CAAC,QAAQ,CAAC,eAAe,KAAK,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS;QACjH,KAAK,CAAC,QAAQ,CAAC,YAAY,KAAK,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;QACpG,KAAK,CAAC,QAAQ,CAAC,cAAc,KAAK,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS;QAClG,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,UAAU,qBAAqB,CAAC;YACxE,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAC5E,CAAC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;QAChG,KAAK,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,iCAAiC,CAC3E,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,EAAE,EAClC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,EAAE,CAClC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS;KACxC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAA;IACzD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,CAAC,IAAI,4BAA4B,CAAC;YAC7C,MAAM,EAAE,KAAK;YACb,MAAM,EAAE,+CAA+C,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAChF,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAA;AACvB,CAAC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,OAAO,0BACX,SAAQ,MAAM,CAAC,gBAAgB,EAA8B,CAAC,4BAA4B,EAAE;IAC1F,QAAQ,EAAE,0BAA0B;IACpC,MAAM,EAAE,MAAM,CAAC,MAAM;CACtB,CAAC;CAAG;AAEP,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC,QAAQ,CAAC;IACrD,mBAAmB;IACnB,kBAAkB;IAClB,uBAAuB;IACvB,sBAAsB;IACtB,6BAA6B;IAC7B,4BAA4B;IAC5B,+BAA+B;IAC/B,8BAA8B;IAC9B,kBAAkB;IAClB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;CAChB,CAAC,CAAA;AAQF,MAAM,KAAK,GAAG,CAAC,IAAgB,EAAE,KAAiB,EAAW,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAClJ,MAAM,IAAI,GAAG,CAAC,MAAc,EAAS,EAAE,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA,CAAC,CAAC,CAAA;AACrF,MAAM,WAAW,GAAG,CAAC,KAAc,EAAU,EAAE,CAC7C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,QAAQ,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;IAClG,CAAC,CAAC,KAAK,CAAC,MAAM;IACd,CAAC,CAAC,KAAK,YAAY,KAAK;QACxB,CAAC,CAAC,KAAK,CAAC,OAAO;QACf,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnB,MAAM,kBAAkB,GAAG,CAAC,SAAiB,EAAU,EAAE;IACvD,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAClF,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAAE,IAAI,CAAC,4CAA4C,CAAC,CAAA;IAC7F,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IACpC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QAAE,IAAI,CAAC,0CAA0C,CAAC,CAAA;IACpF,OAAO,IAAI,CAAA;AACb,CAAC,CAAA;AACD,MAAM,aAAa,GAAG,CAAC,SAAiB,EAAQ,EAAE;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAA;IAC1D,IAAI,CAAC;QAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAAC,CAAC;AACjE,CAAC,CAAA;AACD,MAAM,aAAa,GAAG,CAAC,QAA2B,EAAiC,EAAE;IACnF,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,mEAAmE,CAAC,CAAA;IAC3G,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAA;IAClD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC1C,MAAM,EAAE,GAAG,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAA;QACjC,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,IAAI,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAA;QACrE,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,qBAAqB,EAAE,qDAAqD,CAAC,CAAA;QACpF,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC1B,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AACD,MAAM,oBAAoB,GAAG,CAAC,QAA2B,EAAE,SAAwC,EAAQ,EAAE;IAC3G,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,KAAK,MAAM,WAAW,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;YAAE,IAAI,CAAC,yCAAyC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAA;QACxG,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QAClC,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,KAAK,wBAAwB;YAC9D,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC;YAC1B,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,yBAAyB;gBAChD,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,2BAA2B;oBAClD,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;oBACrD,CAAC,CAAC,CAAC,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,eAAe,CAAC,CAAA;QAC/D,KAAK,MAAM,EAAE,IAAI,UAAU;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;gBAAE,IAAI,CAAC,eAAe,WAAW,CAAC,EAAE,gCAAgC,EAAE,GAAG,CAAC,CAAA;QACxI,IAAI,WAAW,CAAC,IAAI,KAAK,yBAAyB;YAAE,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;gBACzF,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAE,CAAA;gBAC3D,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;oBAC1E,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;oBACrH,IAAI,CAAC,oBAAoB,WAAW,CAAC,EAAE,SAAS,IAAI,CAAC,QAAQ,wCAAwC,CAAC,CAAA;gBACxG,CAAC;YACH,CAAC;QACD,IAAI,WAAW,CAAC,IAAI,KAAK,2BAA2B,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxH,IAAI,CAAC,sBAAsB,WAAW,CAAC,EAAE,yBAAyB,CAAC,CAAA;QACrE,CAAC;IACH,CAAC;AACH,CAAC,CAAA;AAaD,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAkB,EAAE;IACvD,IAAI,SAAS,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE;QAAE,IAAI,CAAC,kDAAkD,CAAC,CAAA;IACnG,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC,KAAK,CAAA;IAC7D,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC7C,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,8DAA8D,CAAC,CAAA;IACtG,MAAM,cAAc,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAA;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,cAAc;QAAE,IAAI,CAAC,+DAA+D,CAAC,CAAA;IAC5G,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,uBAAuB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;QAAE,IAAI,CAAC,yDAAyD,CAAC,CAAA;IAC9J,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACzC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC,aAAa,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE;QAAE,IAAI,CAAC,sDAAsD,CAAC,CAAA;IACnL,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACzC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACzC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;IAC3F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,aAAa,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5F,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,uBAAuB,KAAK,CAAC,IAAI,cAAc,CAAC,CAAA;QAC/G,OAAO,KAAK,CAAC,IAAI,CAAA;IACnB,CAAC,CAAC,CAAC,CAAA;IACH,IAAI,WAAW,CAAC,IAAI,KAAK,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,IAAI,CAAC,uDAAuD,CAAC,CAAA;IACvK,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC3C,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,SAAS,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAA;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,iBAAiB,QAAQ,CAAC,EAAE,sCAAsC,CAAC,CAAA;QACjK,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;AAC7C,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAAC,SAAiB,EAAE,MAAc,EAAE,KAAiB,EAAQ,EAAE;IACjF,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,UAAU,EAAE,MAAM,CAAA;IACjD,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAA;IACxC,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAA;IAC/D,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC3C,CAAC,CAAA;AAED,MAAM,WAAW,GAAG,CAClB,cAAsB,EACtB,QAA2B,EAC3B,KAAsC,EACtC,UAAgC,EAAE,EAClB,EAAE;IAClB,MAAM,KAAK,GAAG,OAAO,CAAC,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACvD,MAAM,KAAK,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAChD,MAAM,aAAa,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAA;IACrD,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU;QAAE,IAAI,CAAC,mEAAmE,CAAC,CAAA;IAC3G,MAAM,cAAc,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC,GAAG,CAAA;IACtD,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IACzC,oBAAoB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IACzC,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAC,2CAA2C,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;QAClH,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,wCAAwC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;IAC1M,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,EAAE,cAAc,CAAC,CAAA;IAClD,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;QAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC;YAAE,IAAI,CAAC,oDAAoD,CAAC,CAAA;QAChJ,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,cAAc,IAAI,UAAU,EAAE,MAAM,CAAC,CAAA;IACvE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrE,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,CAAC;QACH,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1C,KAAK,CAAC,mBAAmB,CAAC,CAAA;YAC1B,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAE,CAAC,CAAA;YAC5F,KAAK,CAAC,kBAAkB,CAAC,CAAA;QAC3B,CAAC;QACD,KAAK,CAAC,uBAAuB,CAAC,CAAA;QAC9B,WAAW,CAAC,SAAS,EAAE,uBAAuB,EAAE,aAAa,CAAC,CAAA;QAC9D,KAAK,CAAC,sBAAsB,CAAC,CAAA;QAC7B,KAAK,CAAC,6BAA6B,CAAC,CAAA;QACpC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;QACvC,KAAK,CAAC,4BAA4B,CAAC,CAAA;QACnC,KAAK,CAAC,+BAA+B,CAAC,CAAA;QACtC,aAAa,CAAC,SAAS,CAAC,CAAA;QACxB,KAAK,CAAC,8BAA8B,CAAC,CAAA;QACrC,KAAK,CAAC,kBAAkB,CAAC,CAAA;QACzB,UAAU,CAAC,SAAS,EAAE,cAAc,CAAC,CAAA;QACrC,QAAQ,GAAG,IAAI,CAAA;QACf,KAAK,CAAC,iBAAiB,CAAC,CAAA;QACxB,KAAK,CAAC,oBAAoB,CAAC,CAAA;QAC3B,aAAa,CAAC,KAAK,CAAC,CAAA;QACpB,KAAK,CAAC,mBAAmB,CAAC,CAAA;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,cAAuB,CAAA;QAC3B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1B,IAAI,CAAC;gBACH,KAAK,CAAC,gBAAgB,CAAC,CAAA;gBACvB,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;gBACnD,KAAK,CAAC,eAAe,CAAC,CAAA;YACxB,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,cAAc,GAAG,YAAY,CAAA;YAC/B,CAAC;QACH,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,cAAc,CAAC,CAAA;YAC3C,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;gBACrF,IAAI,CAAC,oEAAoE,CAAC,CAAA;YAC5E,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,kBAAkB,CAAC,IAAI,CAAC;gBAC5B,MAAM,EAAE,uCAAuC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,cAAc,YAAY,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;aAC9L,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,kBAAkB;YAAE,MAAM,KAAK,CAAA;QACpD,MAAM,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACnG,CAAC;IACD,OAAO,UAAU,CAAC,cAAc,CAAC,CAAA;AACnC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,EAAE,CAAC,sBAAsB,CAAC,CAAC,CACpE,cAAsB,EACtB,QAA2B,EAC3B,KAAsC,EACtC,OAA8B,EAC9B,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACnG,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;CACtG,CAAC,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAiB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;IACpG,GAAG,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;IAChC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,kBAAkB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;CACxH,CAAC,CAAC,CAAA;AAWH,MAAM,OAAO,oBACX,SAAQ,OAAO,CAAC,OAAO,EAAmD,CAAC,iCAAiC,CAAC;CAAG;AAElH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,cAAsB,EACtB,OAA8B,EACH,EAAE,CAAC,CAAC;IAC/B,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,oBAAoB,CAAC,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,mCAAmC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAC7F,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC,EACtC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAC9E,CAAC,CACH;IACD,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,KAAK,OAAO;QAC/C,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7D,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,kJAAkJ;SAC3J,CAAC,CAAC;CACN,CAAC,CAAA"}

package/dist/release/prepared.d.ts

@@ -0,0 +1,172 @@
+import * as Schema from "effect/Schema";
+import { ArtifactCollectionContract, ArtifactCollectionMember } from "../model/artifact-collection.js";
+import { Sha256Digest } from "../model/digest.js";
+import { PreparedCatalogRenderer } from "../model/catalog.js";
+import { ExplicitInputSnapshot, StagingSnapshot } from "./context.js";
+import { PublicationAuthorityIntent } from "./graph.js";
+declare const PreparedSource_base: Schema.Class<PreparedSource, Schema.Struct<{
+    readonly commit: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly tree: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly clean: Schema.Literal<true>;
+    readonly packageManifestPath: Schema.brand<Schema.String, "SafeRelativePath">;
+    readonly packageManifestDigest: typeof Sha256Digest;
+    readonly materialized: typeof StagingSnapshot;
+}>, {}>;
+export declare class PreparedSource extends PreparedSource_base {
+}
+declare const PreparedProject_base: Schema.Class<PreparedProject, Schema.Struct<{
+    readonly name: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly packageName: Schema.optionalKey<Schema.brand<Schema.NonEmptyString, "NonEmptyName">>;
+    readonly version: Schema.brand<Schema.NonEmptyString, "Version">;
+    readonly tag: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly repository: Schema.optionalKey<Schema.NonEmptyString>;
+}>, {}>;
+export declare class PreparedProject extends PreparedProject_base {
+}
+declare const PreparedArtifact_base: Schema.Class<PreparedArtifact, Schema.Struct<{
+    readonly id: Schema.brand<Schema.NonEmptyString, "OutputId">;
+    readonly path: Schema.brand<Schema.String, "SafeRelativePath">;
+    readonly kind: Schema.Literals<readonly ["file", "executable", "archive", "package", "digest"]>;
+    readonly size: Schema.Number;
+    readonly digest: typeof Sha256Digest;
+    readonly blob: typeof Sha256Digest;
+    readonly mediaType: Schema.optionalKey<Schema.NonEmptyString>;
+    readonly producer: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly inputBasis: typeof Sha256Digest;
+}>, {}>;
+export declare class PreparedArtifact extends PreparedArtifact_base {
+}
+declare const PreparedArtifactCollection_base: Schema.Class<PreparedArtifactCollection, Schema.Struct<{
+    readonly contract: typeof ArtifactCollectionContract;
+    readonly members: Schema.$Array<typeof ArtifactCollectionMember>;
+}>, {}>;
+/** Durable collection provenance; the graph itself remains ephemeral. */
+export declare class PreparedArtifactCollection extends PreparedArtifactCollection_base {
+}
+declare const PreparedExecutionInputs_base: Schema.Class<PreparedExecutionInputs, Schema.Struct<{
+    readonly environment: Schema.Literal<"closed">;
+    readonly network: Schema.Literal<"prohibited">;
+    readonly timezone: Schema.Literal<"UTC">;
+    readonly locale: Schema.Literal<"C">;
+    readonly clock: Schema.Literal<"source-date-epoch=0;host-clock-not-isolated">;
+    readonly randomness: Schema.Literal<"host-randomness-not-isolated">;
+    readonly platform: Schema.NonEmptyString;
+    readonly runtime: Schema.NonEmptyString;
+    readonly networkIsolation: Schema.NonEmptyString;
+    readonly bunCompileRuntimes: Schema.NonEmptyString;
+    readonly npmPack: Schema.NonEmptyString;
+    readonly releaseGraph: typeof Sha256Digest;
+    readonly preparer: Schema.NonEmptyString;
+}>, {}>;
+export declare class PreparedExecutionInputs extends PreparedExecutionInputs_base {
+}
+declare const PreparedProvenance_base: Schema.Class<PreparedProvenance, Schema.Struct<{
+    readonly source: typeof StagingSnapshot;
+    readonly externalInputs: Schema.$Array<typeof ExplicitInputSnapshot>;
+    readonly execution: typeof PreparedExecutionInputs;
+    readonly inputBasis: typeof Sha256Digest;
+    readonly reproducibility: Schema.Literal<"not-asserted">;
+}>, {}>;
+export declare class PreparedProvenance extends PreparedProvenance_base {
+}
+declare const PreparedNpmPublication_base: Schema.Class<PreparedNpmPublication, Schema.TaggedStruct<"PreparedNpmPublication", {
+    readonly id: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly artifactId: Schema.brand<Schema.NonEmptyString, "OutputId">;
+    readonly packageName: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly version: Schema.brand<Schema.NonEmptyString, "Version">;
+    readonly registryUrl: Schema.brand<Schema.NonEmptyString, "CanonicalNpmRegistryEndpoint">;
+    readonly distTag: Schema.brand<Schema.NonEmptyString, "NpmDistTag">;
+    readonly access: Schema.Literals<readonly ["public", "restricted"]>;
+    readonly authentication: Schema.Union<readonly [typeof import("../recipes/config.js").NpmTokenAuthentication, typeof import("../recipes/config.js").NpmTrustedPublishingAuthentication]>;
+    readonly provenance: Schema.Literals<readonly ["automatic", "required", "disabled"]>;
+    readonly authority: typeof PublicationAuthorityIntent;
+}>, {}>;
+export declare class PreparedNpmPublication extends PreparedNpmPublication_base {
+}
+declare const PreparedGitHubAsset_base: Schema.Class<PreparedGitHubAsset, Schema.Struct<{
+    readonly artifactId: Schema.brand<Schema.NonEmptyString, "OutputId">;
+    readonly name: Schema.NonEmptyString;
+    readonly mediaType: Schema.NonEmptyString;
+}>, {}>;
+export declare class PreparedGitHubAsset extends PreparedGitHubAsset_base {
+}
+declare const PreparedGitHubPublication_base: Schema.Class<PreparedGitHubPublication, Schema.TaggedStruct<"PreparedGitHubPublication", {
+    readonly id: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly repository: Schema.NonEmptyString;
+    readonly tag: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly title: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly draft: Schema.Boolean;
+    readonly prerelease: Schema.Boolean;
+    readonly targetCommit: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly body: Schema.optionalKey<Schema.String>;
+    readonly assets: Schema.$Array<typeof PreparedGitHubAsset>;
+    readonly authority: typeof PublicationAuthorityIntent;
+}>, {}>;
+export declare class PreparedGitHubPublication extends PreparedGitHubPublication_base {
+}
+declare const PreparedPyPiFile_base: Schema.Class<PreparedPyPiFile, Schema.Struct<{
+    readonly artifactId: Schema.brand<Schema.NonEmptyString, "OutputId">;
+    readonly filename: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly size: Schema.Number;
+    readonly sha256: typeof Sha256Digest;
+    readonly mediaType: Schema.Literals<readonly ["application/zip", "application/gzip"]>;
+    readonly distribution: Schema.Union<readonly [typeof import("../model/python-distribution.js").WheelDistribution, typeof import("../model/python-distribution.js").SourceDistribution]>;
+    readonly authority: typeof PublicationAuthorityIntent;
+}>, {}>;
+export declare class PreparedPyPiFile extends PreparedPyPiFile_base {
+}
+declare const PreparedPyPiPublication_base: Schema.Class<PreparedPyPiPublication, Schema.TaggedStruct<"PreparedPyPiPublication", {
+    readonly id: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly project: Schema.brand<Schema.NonEmptyString, "PyPiProjectName">;
+    readonly version: Schema.brand<Schema.NonEmptyString, "Version">;
+    readonly repository: Schema.Literals<readonly ["pypi", "testpypi"]>;
+    readonly simpleBaseUrl: Schema.NonEmptyString;
+    readonly projectUrl: Schema.NonEmptyString;
+    readonly uploadUrl: Schema.NonEmptyString;
+    readonly authentication: Schema.Union<readonly [typeof import("../recipes/config.js").PyPiTokenAuthentication, typeof import("../recipes/config.js").PyPiExternalTrustedPublishingAuthentication]>;
+    readonly files: Schema.NonEmptyArray<typeof PreparedPyPiFile>;
+}>, {}>;
+export declare class PreparedPyPiPublication extends PreparedPyPiPublication_base {
+}
+declare const PreparedCatalogPublication_base: Schema.Class<PreparedCatalogPublication, Schema.TaggedStruct<"PreparedCatalogPublication", {
+    readonly id: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly catalogId: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly targetArtifactId: Schema.brand<Schema.NonEmptyString, "OutputId">;
+    readonly stateArtifactId: Schema.brand<Schema.NonEmptyString, "OutputId">;
+    readonly targetDigest: typeof Sha256Digest;
+    readonly stateDigest: typeof Sha256Digest;
+    readonly repository: Schema.brand<Schema.NonEmptyString, "GitHubRepositoryCoordinate">;
+    readonly branch: Schema.brand<Schema.NonEmptyString, "GitBranchName">;
+    readonly targetPath: Schema.brand<Schema.brand<Schema.String, "SafeRelativePath">, "CatalogRepositoryPath">;
+    readonly statePath: Schema.brand<Schema.brand<Schema.String, "SafeRelativePath">, "CatalogRepositoryPath">;
+    readonly version: Schema.brand<Schema.NonEmptyString, "Version">;
+    readonly sourceRepository: Schema.brand<Schema.NonEmptyString, "GitHubRepositoryCoordinate">;
+    readonly sourceTag: Schema.brand<Schema.NonEmptyString, "NonEmptyName">;
+    readonly renderer: typeof PreparedCatalogRenderer;
+    readonly authority: typeof PublicationAuthorityIntent;
+}>, {}>;
+export declare class PreparedCatalogPublication extends PreparedCatalogPublication_base {
+}
+export declare const PreparedPublication: Schema.Union<readonly [typeof PreparedNpmPublication, typeof PreparedPyPiPublication, typeof PreparedGitHubPublication, typeof PreparedCatalogPublication]>;
+export type PreparedPublication = typeof PreparedPublication.Type;
+declare const PreparedReleaseV2_base: Schema.Class<PreparedReleaseV2, Schema.Struct<{
+    readonly kind: Schema.Literal<"complete">;
+    readonly schemaVersion: Schema.Literal<"prepared-release/v2">;
+    readonly source: typeof PreparedSource;
+    readonly project: typeof PreparedProject;
+    readonly provenance: typeof PreparedProvenance;
+    readonly artifacts: Schema.$Array<typeof PreparedArtifact>;
+    readonly collections: Schema.$Array<typeof PreparedArtifactCollection>;
+    readonly publications: Schema.$Array<Schema.Union<readonly [typeof PreparedNpmPublication, typeof PreparedPyPiPublication, typeof PreparedGitHubPublication, typeof PreparedCatalogPublication]>>;
+}>, {}>;
+export declare class PreparedReleaseV2 extends PreparedReleaseV2_base {
+}
+declare const PreparedManifestError_base: Schema.Class<PreparedManifestError, Schema.TaggedStruct<"PreparedManifestError", {
+    readonly reason: Schema.String;
+}>, import("effect/Cause").YieldableError>;
+export declare class PreparedManifestError extends PreparedManifestError_base {
+}
+export declare const encodePreparedRelease: (manifest: PreparedReleaseV2) => Uint8Array;
+export declare const decodePreparedRelease: (bytes: Uint8Array) => PreparedReleaseV2;
+export {};
+//# sourceMappingURL=prepared.d.ts.map

package/dist/release/prepared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepared.d.ts","sourceRoot":"","sources":["../../src/release/prepared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAA;AAEvC,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EAMzB,MAAM,iCAAiC,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACjD,OAAO,EAIL,uBAAuB,EACxB,MAAM,qBAAqB,CAAA;AAG5B,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAWrE,OAAO,EACL,0BAA0B,EAK3B,MAAM,YAAY,CAAA;;;;;;;;;AAKnB,qBAAa,cAAe,SAAQ,mBAIlC;CAAG;;;;;;;;AAEL,qBAAa,eAAgB,SAAQ,oBAGnC;CAAG;;;;;;;;;;;;AAEL,qBAAa,gBAAiB,SAAQ,qBAOpC;CAAG;;;;;AAEL,yEAAyE;AACzE,qBAAa,0BACX,SAAQ,+BAGN;CAAG;;;;;;;;;;;;;;;;AAEP,qBAAa,uBAAwB,SAAQ,4BAc3C;CAAG;;;;;;;;AAEL,qBAAa,kBAAmB,SAAQ,uBAMtC;CAAG;;;;;;;;;;;;;AAEL,qBAAa,sBAAuB,SAAQ,2BAW1C;CAAG;;;;;;AAEL,qBAAa,mBAAoB,SAAQ,wBAEvC;CAAG;;;;;;;;;;;;;AAEL,qBAAa,yBAA0B,SAAQ,8BAI7C;CAAG;;;;;;;;;;AAEL,qBAAa,gBAAiB,SAAQ,qBASpC;CAAG;;;;;;;;;;;;AAEL,qBAAa,uBAAwB,SAAQ,4BAU3C;CAAG;;;;;;;;;;;;;;;;;;AAEL,qBAAa,0BACX,SAAQ,+BAgBN;CAAG;AAKP,eAAO,MAAM,mBAAmB,6JAQ9B,CAAA;AACF,MAAM,MAAM,mBAAmB,GAAG,OAAO,mBAAmB,CAAC,IAAI,CAAA;;;;;;;;;;;AAEjE,qBAAa,iBAAkB,SAAQ,sBAOrC;CAAG;;;;AAEL,qBAAa,qBACX,SAAQ,0BAEN;CAAG;AAgGP,eAAO,MAAM,qBAAqB,GAAI,UAAU,iBAAiB,KAAG,UAGnE,CAAA;AAED,eAAO,MAAM,qBAAqB,GAAI,OAAO,UAAU,KAAG,iBAazD,CAAA"}