@nklisch/pi-enhanced 0.1.0

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/npm/npm-registry-client.js

@@ -0,0 +1,392 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+import { constants, createReadStream } from "node:fs";
+import { lstat, mkdir, open, realpath, rm } from "node:fs/promises";
+import { basename, dirname } from "node:path";
+import { z } from "zod";
+import { NpmIntegritySchema, PluginSourceSchema, } from "../../domain/source.js";
+import { DEFAULT_MATERIALIZATION_LIMITS, } from "../../application/ports/source-acquisition.js";
+import { SourceMaterializationError } from "../../application/source-materialization.js";
+import { BoundedFetchError, collectBoundedBytes, decodeUtf8, } from "../http/bounded-fetch.js";
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const semver = require("semver");
+const DEFAULT_REGISTRY = "https://registry.npmjs.org/";
+const NO_FOLLOW = constants.O_NOFOLLOW ?? 0;
+// Parse through a strict projection: metadata is validated at the boundary,
+// then unknown packument fields are discarded before selector logic sees it.
+const VersionMetadataSchema = z.object({
+    version: z.string().min(1),
+    dist: z.object({
+        tarball: z.string().min(1),
+        integrity: z.string().optional(),
+    }).strip(),
+}).strip();
+const PackumentSchema = z.object({
+    "dist-tags": z.record(z.string(), z.string().min(1)),
+    versions: z.record(z.string(), VersionMetadataSchema),
+}).strip();
+function safeFailure(code, classification, operation, message, cause) {
+    return new SourceMaterializationError({
+        code,
+        classification,
+        operation,
+        message,
+        details: { operation },
+        cause,
+    });
+}
+function throwIfAborted(signal) {
+    if (signal.aborted)
+        throw signal.reason ?? new DOMException("The operation was aborted", "AbortError");
+}
+function limitsWithDefaults(input = {}) {
+    const limits = { ...DEFAULT_MATERIALIZATION_LIMITS, ...(input ?? {}) };
+    for (const [name, value] of Object.entries(limits)) {
+        if (!Number.isSafeInteger(value) || value <= 0)
+            throw new TypeError(`materialization limit ${name} must be positive`);
+    }
+    if (limits.maxExpansionRatio < 1)
+        throw new TypeError("maxExpansionRatio must be at least one");
+    return Object.freeze(limits);
+}
+function validatePackageName(value) {
+    // npm package names are one document key. Deliberately do not accept URL
+    // paths, encoded separators, whitespace, or uppercase aliases.
+    const unscoped = /^[a-z0-9][a-z0-9._~-]*$/u;
+    const scoped = /^@[a-z0-9][a-z0-9._~-]*\/[a-z0-9][a-z0-9._~-]*$/u;
+    if ((!unscoped.test(value) && !scoped.test(value)) || value.includes("%")) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm package name is invalid");
+    }
+    return value;
+}
+function packageDocumentUrl(registry, packageName) {
+    let base;
+    try {
+        base = new URL(registry);
+    }
+    catch (error) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm registry is invalid", error);
+    }
+    if (base.protocol !== "https:" || base.username !== "" || base.password !== "") {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm registry must be credential-free HTTPS");
+    }
+    if (base.search !== "" || base.hash !== "") {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm registry must not contain query or fragment data");
+    }
+    if (!base.pathname.endsWith("/"))
+        base.pathname += "/";
+    const encoded = encodeURIComponent(packageName).replace(/%2F/gu, "%2f");
+    return new URL(encoded, base).toString();
+}
+function safeTarballUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch (error) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm tarball URL is invalid", error);
+    }
+    if (url.protocol !== "https:" || url.username !== "" || url.password !== "") {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm tarball URL must be credential-free HTTPS");
+    }
+    if (url.search !== "" || url.hash !== "") {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm tarball URL must not contain query or fragment data");
+    }
+    return url.toString();
+}
+function canonicalVersion(key, value) {
+    const parsed = semver.valid(value);
+    if (parsed === null || parsed !== value || key !== value) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm packument contains a non-canonical version");
+    }
+    return value;
+}
+function parseVersions(input) {
+    const versions = new Map();
+    for (const [key, value] of Object.entries(input.versions)) {
+        const version = canonicalVersion(key, value.version);
+        if (versions.has(version)) {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm packument contains duplicate versions");
+        }
+        versions.set(version, {
+            version,
+            tarball: value.dist.tarball,
+            integrity: value.dist.integrity,
+        });
+    }
+    return versions;
+}
+function parseSelected(record) {
+    const integrity = record.integrity;
+    if (integrity === undefined) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm package has no SHA-512 integrity");
+    }
+    let canonicalIntegrity;
+    try {
+        canonicalIntegrity = NpmIntegritySchema.parse(integrity);
+    }
+    catch (error) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm package integrity is not canonical SHA-512", error);
+    }
+    const tarball = safeTarballUrl(record.tarball);
+    return Object.freeze({ version: record.version, tarball, integrity: canonicalIntegrity });
+}
+function selectVersion(selector, tags, versions) {
+    let selected;
+    if (selector === undefined) {
+        selected = tags.latest;
+        if (selected === undefined) {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm package has no latest dist-tag");
+        }
+    }
+    else if (semver.valid(selector) !== null) {
+        // Exact selectors are key lookups, not loose semver aliases.
+        selected = selector;
+    }
+    else if (Object.prototype.hasOwnProperty.call(tags, selector)) {
+        selected = tags[selector];
+    }
+    else {
+        const range = semver.validRange(selector);
+        if (range === null) {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm selector is unknown or invalid");
+        }
+        const candidates = [...versions.keys()];
+        selected = semver.maxSatisfying(candidates, range, { includePrerelease: false }) ?? undefined;
+        if (selected === undefined) {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm selector matches no stable version");
+        }
+        // Keep this explicit: semver's prerelease rule is part of the contract,
+        // and this check prevents a future resolver change from widening it.
+        if (!semver.satisfies(selected, range, { includePrerelease: false })) {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm selector result is not satisfying");
+        }
+    }
+    if (selected === undefined || versions.get(selected) === undefined) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm selector resolves to a missing version");
+    }
+    return versions.get(selected);
+}
+function statusFailure(operation, status) {
+    const transient = status === 408 || status === 429 || status >= 500;
+    return safeFailure("SOURCE_RESOLUTION_FAILED", transient ? "transient" : "permanent", operation, transient ? "npm registry is temporarily unavailable" : "npm registry rejected the request");
+}
+function requestFailure(operation, error) {
+    if (error instanceof SourceMaterializationError)
+        return error;
+    if (error instanceof BoundedFetchError) {
+        if (error.kind === "limit") {
+            return safeFailure("PATH_CONTAINMENT_FAILED", "security", operation, "HTTP response exceeded its byte limit");
+        }
+        if (error.kind === "network") {
+            return safeFailure("SOURCE_RESOLUTION_FAILED", "transient", operation, "npm registry network request failed");
+        }
+        if (error.kind === "policy") {
+            return safeFailure("SOURCE_RESOLUTION_FAILED", "security", operation, "npm registry destination is not permitted");
+        }
+        if (error.kind === "credential") {
+            return safeFailure("ADAPTER_FAILED", "permanent", operation, "npm credential adapter failed");
+        }
+        return safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", operation, "npm registry response was invalid");
+    }
+    return safeFailure("ADAPTER_FAILED", "permanent", operation, "npm HTTP adapter failed", error);
+}
+async function responseBytes(client, credentials, url, maxBytes, signal, operation) {
+    throwIfAborted(signal);
+    let response;
+    try {
+        response = await client.request({ url, maxBytes, signal, credentials });
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw signal.reason ?? error;
+        throw requestFailure(operation, error);
+    }
+    if (response.status < 200 || response.status >= 300) {
+        try {
+            await collectBoundedBytes(response.body, Math.min(maxBytes, 64 * 1024), signal);
+        }
+        catch { /* body is never diagnostic */ }
+        throw statusFailure(operation, response.status);
+    }
+    try {
+        return { status: response.status, body: await collectBoundedBytes(response.body, maxBytes, signal) };
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw signal.reason ?? error;
+        if (error instanceof BoundedFetchError && error.kind === "limit") {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", operation, "npm packument exceeded its byte limit");
+        }
+        throw requestFailure(operation, error);
+    }
+}
+async function writePersisted(handle, chunk, digest) {
+    let offset = 0;
+    while (offset < chunk.byteLength) {
+        const result = await handle.write(chunk, offset, chunk.byteLength - offset);
+        const written = result.bytesWritten;
+        if (!Number.isSafeInteger(written) || written <= 0 || written > chunk.byteLength - offset)
+            throw new Error("file write made no progress");
+        digest.update(chunk.subarray(offset, offset + written));
+        offset += written;
+    }
+    return offset;
+}
+async function rehashPersisted(path) {
+    const digest = createHash("sha512");
+    const stream = createReadStream(path);
+    for await (const chunk of stream) {
+        if (!(chunk instanceof Uint8Array))
+            throw new Error("persisted tarball yielded a non-byte value");
+        digest.update(chunk);
+    }
+    return new Uint8Array(digest.digest());
+}
+async function writeAndVerify(client, credentials, record, destinationFile, limits, signal) {
+    let response;
+    try {
+        response = await client.request({
+            url: record.tarball,
+            maxBytes: limits.maxArchiveBytes,
+            signal,
+            credentials,
+        });
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw signal.reason ?? error;
+        throw requestFailure("downloadNpmTarball", error);
+    }
+    if (response.status < 200 || response.status >= 300) {
+        try {
+            await collectBoundedBytes(response.body, Math.min(limits.maxArchiveBytes, 64 * 1024), signal);
+        }
+        catch { /* never diagnostic */ }
+        throw statusFailure("downloadNpmTarball", response.status);
+    }
+    const expected = Buffer.from(record.integrity.slice("sha512-".length), "base64");
+    if (expected.byteLength !== 64) {
+        throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "downloadNpmTarball", "npm integrity is not a SHA-512 digest");
+    }
+    let handle;
+    let written = 0;
+    const digest = createHash("sha512");
+    try {
+        const parent = dirname(destinationFile);
+        await mkdir(parent, { recursive: true, mode: 0o700 });
+        const parentStat = await lstat(parent);
+        if (parentStat.isSymbolicLink() || !parentStat.isDirectory())
+            throw new Error("npm tarball scratch parent is not a real directory");
+        if (basename(await realpath(parent)) !== ".work")
+            throw new Error("npm tarball destination is outside private scratch work");
+        handle = await open(destinationFile, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | NO_FOLLOW, 0o600);
+        for await (const chunk of response.body) {
+            throwIfAborted(signal);
+            if (!(chunk instanceof Uint8Array))
+                throw safeFailure("ADAPTER_FAILED", "permanent", "downloadNpmTarball", "HTTP response body was not bytes");
+            if (written + chunk.byteLength > limits.maxArchiveBytes) {
+                throw safeFailure("PATH_CONTAINMENT_FAILED", "security", "downloadNpmTarball", "npm tarball byte limit exceeded");
+            }
+            written += await writePersisted(handle, chunk, digest);
+        }
+        throwIfAborted(signal);
+        const actual = new Uint8Array(digest.digest());
+        await handle.close();
+        handle = undefined;
+        const diskDigest = await rehashPersisted(destinationFile);
+        const equal = actual.byteLength === expected.byteLength
+            && diskDigest.byteLength === expected.byteLength
+            && timingSafeEqual(actual, expected)
+            && timingSafeEqual(diskDigest, expected);
+        if (!equal) {
+            throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "downloadNpmTarball", "npm tarball integrity mismatch");
+        }
+    }
+    catch (error) {
+        if (handle !== undefined)
+            await handle.close().catch(() => undefined);
+        let cleanupError;
+        try {
+            await rm(destinationFile, { force: true });
+        }
+        catch (failure) {
+            cleanupError = failure;
+        }
+        if (cleanupError !== undefined) {
+            throw safeFailure("ADAPTER_FAILED", "permanent", "abortMaterialization", "failed to remove npm tarball scratch data", new AggregateError([error, cleanupError]));
+        }
+        if (signal.aborted)
+            throw signal.reason ?? error;
+        if (error instanceof SourceMaterializationError)
+            throw error;
+        throw requestFailure("downloadNpmTarball", error);
+    }
+}
+export function createNpmRegistryClient(options) {
+    if (options === null || typeof options !== "object")
+        throw new TypeError("npm registry client options are required");
+    if (typeof options.fetch?.request !== "function")
+        throw new TypeError("npm registry client requires bounded fetch");
+    if (options.credentials === null || options.credentials === undefined)
+        throw new TypeError("npm registry client requires credentials");
+    return {
+        async resolve(input, signal) {
+            throwIfAborted(signal);
+            let source;
+            try {
+                const parsed = PluginSourceSchema.parse(input);
+                if (parsed.kind !== "npm")
+                    throw new Error("source is not npm");
+                source = parsed;
+            }
+            catch (error) {
+                throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm source declaration is invalid", error);
+            }
+            const packageName = validatePackageName(source.package);
+            const registry = source.registry ?? DEFAULT_REGISTRY;
+            const url = packageDocumentUrl(registry, packageName);
+            const limits = limitsWithDefaults(options.limits ?? {});
+            const result = await responseBytes(options.fetch, options.credentials, url, limits.maxPackumentBytes, signal, "resolveNpmSource");
+            throwIfAborted(signal);
+            let parsed;
+            try {
+                parsed = PackumentSchema.parse(JSON.parse(decodeUtf8(result.body)));
+            }
+            catch (error) {
+                if (error instanceof BoundedFetchError)
+                    throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm packument is not valid UTF-8", error);
+                throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm packument metadata is malformed", error);
+            }
+            const versions = parseVersions(parsed);
+            const selected = selectVersion(source.selector, parsed["dist-tags"], versions);
+            const record = parseSelected(selected);
+            return Object.freeze({ package: packageName, registry, selected: record });
+        },
+        async downloadVerified(record, destinationFile, limitsInput, signal) {
+            throwIfAborted(signal);
+            let selected;
+            try {
+                selected = {
+                    version: canonicalVersion(record.version, record.version),
+                    tarball: safeTarballUrl(record.tarball),
+                    integrity: NpmIntegritySchema.parse(record.integrity),
+                };
+            }
+            catch (error) {
+                if (error instanceof SourceMaterializationError)
+                    throw error;
+                throw safeFailure("SOURCE_RESOLUTION_FAILED", "permanent", "downloadNpmTarball", "npm tarball record is invalid", error);
+            }
+            if (typeof destinationFile !== "string" || destinationFile.length === 0)
+                throw new TypeError("npm tarball destination is required");
+            if (basename(dirname(destinationFile)) !== ".work") {
+                throw safeFailure("ADAPTER_FAILED", "permanent", "downloadNpmTarball", "npm tarball destination must be inside private scratch work");
+            }
+            const limits = limitsWithDefaults(limitsInput);
+            await writeAndVerify(options.fetch, options.credentials, selected, destinationFile, limits, signal);
+        },
+    };
+}
+export { DEFAULT_REGISTRY };
+//# sourceMappingURL=npm-registry-client.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/npm/npm-registry-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-registry-client.js","sourceRoot":"","sources":["../../../src/infrastructure/npm/npm-registry-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,GAGnB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,8BAA8B,GAE/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AACzF,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,UAAU,GAGX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAK7B,CAAC;AAEH,MAAM,gBAAgB,GAAG,6BAA6B,CAAC;AACvD,MAAM,SAAS,GAAI,SAAwD,CAAC,UAAU,IAAI,CAAC,CAAC;AAqC5F,4EAA4E;AAC5E,6EAA6E;AAC7E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC,CAAC,KAAK,EAAE;CACX,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC;CACtD,CAAC,CAAC,KAAK,EAAE,CAAC;AAEX,SAAS,WAAW,CAClB,IAA+E,EAC/E,cAAsD,EACtD,SAAiB,EACjB,OAAe,EACf,KAAe;IAEf,OAAO,IAAI,0BAA0B,CAAC;QACpC,IAAI;QACJ,cAAc;QACd,SAAS;QACT,OAAO;QACP,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAmB;IACzC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAK,GAAmC,EAAE;IACpE,MAAM,MAAM,GAAG,EAAE,GAAG,8BAA8B,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,yEAAyE;IACzE,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,0BAA0B,CAAC;IAC5C,MAAM,MAAM,GAAG,kDAAkD,CAAC;IAClE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,6BAA6B,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAgB,EAAE,WAAmB;IAC/D,IAAI,IAAS,CAAC;IACd,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/E,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IAC/H,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC3C,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,sDAAsD,CAAC,CAAC;IACzI,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;IACvD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,4BAA4B,EAAE,KAAK,CAAC,CAAC;IACtH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC5E,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,+CAA+C,CAAC,CAAC;IAClI,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACzC,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,yDAAyD,CAAC,CAAC;IAC5I,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAW,EAAE,KAAa;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QACzD,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,gDAAgD,CAAC,CAAC;IACnI,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAsC;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyB,CAAC;IAClD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1B,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;QAC9H,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE;YACpB,OAAO;YACP,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO;YAC3B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,MAAqB;IAC1C,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;IACzH,CAAC;IACD,IAAI,kBAAgC,CAAC;IACrC,IAAI,CAAC;QACH,kBAAkB,GAAG,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,gDAAgD,EAAE,KAAK,CAAC,CAAC;IAC1I,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CACpB,QAA4B,EAC5B,IAAsC,EACtC,QAA4C;IAE5C,IAAI,QAA4B,CAAC;IACjC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QACvB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;QACvH,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,6DAA6D;QAC7D,QAAQ,GAAG,QAAQ,CAAC;IACtB,CAAC;SAAM,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChE,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,oCAAoC,CAAC,CAAC;QACvH,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACxC,QAAQ,GAAG,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,IAAI,SAAS,CAAC;QAC9F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,wCAAwC,CAAC,CAAC;QAC3H,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;QAC1H,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACnE,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,4CAA4C,CAAC,CAAC;IAC/H,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;AACjC,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,MAAc;IACtD,MAAM,SAAS,GAAG,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,IAAI,GAAG,CAAC;IACpE,OAAO,WAAW,CAChB,0BAA0B,EAC1B,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,EACrC,SAAS,EACT,SAAS,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,mCAAmC,CAC5F,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,KAAc;IACvD,IAAI,KAAK,YAAY,0BAA0B;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC3B,OAAO,WAAW,CAAC,yBAAyB,EAAE,UAAU,EAAE,SAAS,EAAE,uCAAuC,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,OAAO,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,SAAS,EAAE,qCAAqC,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,WAAW,CAAC,0BAA0B,EAAE,UAAU,EAAE,SAAS,EAAE,2CAA2C,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAChC,OAAO,WAAW,CAAC,gBAAgB,EAAE,WAAW,EAAE,SAAS,EAAE,+BAA+B,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,SAAS,EAAE,mCAAmC,CAAC,CAAC;IAC9G,CAAC;IACD,OAAO,WAAW,CAAC,gBAAgB,EAAE,WAAW,EAAE,SAAS,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC;AACjG,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAoB,EACpB,WAAkC,EAClC,GAAW,EACX,QAAgB,EAChB,MAAmB,EACnB,SAAiB;IAEjB,cAAc,CAAC,MAAM,CAAC,CAAC;IACvB,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;QACjD,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,IAAI,CAAC;YAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;QACjI,MAAM,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;IACvG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;QACjD,IAAI,KAAK,YAAY,iBAAiB,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACjE,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,SAAS,EAAE,uCAAuC,CAAC,CAAC;QACjH,CAAC;QACD,MAAM,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAwC,EACxC,KAAiB,EACjB,MAAqC;IAErC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC;QAC5E,MAAM,OAAO,GAAG,MAAM,CAAC,YAAY,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,OAAO,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QAC1I,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;QACxD,MAAM,IAAI,OAAO,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAyC,CAAC;IAC9E,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACjC,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAClG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAoB,EACpB,WAAkC,EAClC,MAAwB,EACxB,eAAuB,EACvB,MAA6B,EAC7B,MAAmB;IAEnB,IAAI,QAAQ,CAAC;IACb,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAC9B,GAAG,EAAE,MAAM,CAAC,OAAO;YACnB,QAAQ,EAAE,MAAM,CAAC,eAAe;YAChC,MAAM;YACN,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;QACjD,MAAM,cAAc,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACpD,IAAI,CAAC;YAAC,MAAM,mBAAmB,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;QACvI,MAAM,aAAa,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC/B,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE,uCAAuC,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,MAAoD,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACpI,IAAI,QAAQ,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7H,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,EAAE,KAAK,CAAC,CAAC;QACnH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;gBAAE,MAAM,WAAW,CAAC,gBAAgB,EAAE,WAAW,EAAE,oBAAoB,EAAE,kCAAkC,CAAC,CAAC;YAC/I,IAAI,OAAO,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;gBACxD,MAAM,WAAW,CAAC,yBAAyB,EAAE,UAAU,EAAE,oBAAoB,EAAE,iCAAiC,CAAC,CAAC;YACpH,CAAC;YACD,OAAO,IAAI,MAAM,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACzD,CAAC;QACD,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/C,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QACnB,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;eAClD,UAAU,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;eAC7C,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC;eACjC,eAAe,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE,gCAAgC,CAAC,CAAC;QACrH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,YAAqB,CAAC;QAC1B,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,eAAe,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YAAC,YAAY,GAAG,OAAO,CAAC;QAAC,CAAC;QAC/F,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,WAAW,CAAC,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,EAAE,2CAA2C,EAAE,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;QACnK,CAAC;QACD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;QACjD,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,cAAc,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA8B;IACpE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACrH,IAAI,OAAO,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpH,IAAI,OAAO,CAAC,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IAEvI,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM;YACzB,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,MAA8C,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAChE,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAAC;YAC7H,CAAC;YACD,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,gBAAgB,CAAC;YACrD,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YACtD,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,EAAE,kBAAkB,CAAC,CAAC;YAClI,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,MAAuC,CAAC;YAC5C,IAAI,CAAC;gBACH,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACtE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,iBAAiB;oBAAE,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,kCAAkC,EAAE,KAAK,CAAC,CAAC;gBAClK,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC/H,CAAC;YACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;YACvC,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACvC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM;YACjE,cAAc,CAAC,MAAM,CAAC,CAAC;YACvB,IAAI,QAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,QAAQ,GAAG;oBACT,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;oBACzD,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC;oBACvC,SAAS,EAAE,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;iBACtD,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,0BAA0B;oBAAE,MAAM,KAAK,CAAC;gBAC7D,MAAM,WAAW,CAAC,0BAA0B,EAAE,WAAW,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,OAAO,eAAe,KAAK,QAAQ,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;YACpI,IAAI,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;gBACnD,MAAM,WAAW,CAAC,gBAAgB,EAAE,WAAW,EAAE,oBAAoB,EAAE,6DAA6D,CAAC,CAAC;YACxI,CAAC;YACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAC/C,MAAM,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACtG,CAAC;KACF,CAAC;AACJ,CAAC;AAID,OAAO,EAAE,gBAAgB,EAAE,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/npm/npm-source-acquirer.d.ts

@@ -0,0 +1,11 @@
+import { type Sha256 } from "../../domain/source.js";
+import { type MaterializationLimits, type NpmSourceAcquirer } from "../../application/ports/source-acquisition.js";
+import type { TarReader } from "../archive/tar-reader.js";
+import type { NpmRegistryClient } from "./npm-registry-client.js";
+export type NpmSourceAcquirerOptions = Readonly<{
+    registry: NpmRegistryClient;
+    archive: TarReader;
+    sha256: Sha256;
+    limits?: Partial<MaterializationLimits>;
+}>;
+export declare function createNpmSourceAcquirer(options: NpmSourceAcquirerOptions): NpmSourceAcquirer;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/npm/npm-source-acquirer.js

@@ -0,0 +1,147 @@
+import { createReadStream } from "node:fs";
+import { rm } from "node:fs/promises";
+import { join } from "node:path";
+import { PluginSourceSchema, createResolvedPluginSource, } from "../../domain/source.js";
+import { DEFAULT_MATERIALIZATION_LIMITS, } from "../../application/ports/source-acquisition.js";
+import { SourceMaterializationError } from "../../application/source-materialization.js";
+import { createRequire } from "node:module";
+const require = createRequire(import.meta.url);
+const semver = require("semver");
+function failure(code, classification, operation, message, cause) {
+    return new SourceMaterializationError({
+        code,
+        classification,
+        operation,
+        message,
+        details: { operation },
+        cause,
+    });
+}
+function throwIfAborted(signal) {
+    if (signal.aborted)
+        throw signal.reason ?? new DOMException("The operation was aborted", "AbortError");
+}
+function effectiveLimits(input) {
+    const limits = { ...DEFAULT_MATERIALIZATION_LIMITS, ...(input ?? {}) };
+    for (const [name, value] of Object.entries(limits)) {
+        if (!Number.isSafeInteger(value) || value <= 0)
+            throw new TypeError(`materialization limit ${name} must be positive`);
+    }
+    if (limits.maxExpansionRatio < 1)
+        throw new TypeError("maxExpansionRatio must be at least one");
+    return Object.freeze(limits);
+}
+async function cleanupScratch(path) {
+    await rm(path, { force: true });
+}
+async function archiveTarball(archive, tarball, sink, limits, signal) {
+    const input = createReadStream(tarball, { signal });
+    try {
+        await archive.read(input, sink, signal, {
+            compression: "gzip",
+            stripPrefix: "package",
+            requireRetainedEntries: true,
+            limits,
+        });
+    }
+    catch (error) {
+        if (signal.aborted)
+            throw signal.reason ?? error;
+        if (error instanceof SourceMaterializationError)
+            throw error;
+        throw failure("ADAPTER_FAILED", "permanent", "extractSourceArchive", "npm tarball extraction failed", error);
+    }
+}
+async function acquire(options, source, sink, signal) {
+    const limits = effectiveLimits(options.limits);
+    const workRoot = sink.workRoot;
+    if (workRoot === undefined || workRoot.length === 0) {
+        throw failure("ADAPTER_FAILED", "permanent", "resolveNpmSource", "content session does not expose private scratch work");
+    }
+    const tarball = join(workRoot, "npm-package.tgz");
+    let failureValue;
+    let result;
+    try {
+        const resolved = await options.registry.resolve(source, signal);
+        throwIfAborted(signal);
+        // The resolved source intentionally omits the mutable selector. Bind an
+        // exact selector at this adapter boundary before it can become a trusted
+        // immutable handoff; ranges and tags retain normal resolver semantics.
+        if (source.selector !== undefined && semver.valid(source.selector) !== null && resolved.selected.version !== source.selector) {
+            throw failure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm exact selector resolved to a different version");
+        }
+        await options.registry.downloadVerified(resolved.selected, tarball, limits, signal);
+        throwIfAborted(signal);
+        await archiveTarball(options.archive, tarball, sink, limits, signal);
+        throwIfAborted(signal);
+        try {
+            result = createResolvedPluginSource({
+                kind: "npm",
+                package: resolved.package,
+                version: resolved.selected.version,
+                integrity: resolved.selected.integrity,
+                registry: resolved.registry,
+            }, options.sha256);
+        }
+        catch (error) {
+            throw failure("ADAPTER_FAILED", "permanent", "resolveNpmSource", "resolved npm source contract could not be constructed", error);
+        }
+    }
+    catch (error) {
+        failureValue = error;
+    }
+    let cleanupFailure;
+    try {
+        await cleanupScratch(tarball);
+    }
+    catch (error) {
+        cleanupFailure = error;
+    }
+    if (failureValue !== undefined && cleanupFailure !== undefined) {
+        throw failure("ADAPTER_FAILED", "permanent", "abortMaterialization", "npm acquisition and scratch cleanup both failed", new AggregateError([failureValue, cleanupFailure]));
+    }
+    if (cleanupFailure !== undefined) {
+        throw failure("ADAPTER_FAILED", "permanent", "abortMaterialization", "failed to remove npm scratch data", cleanupFailure);
+    }
+    if (failureValue !== undefined) {
+        if (signal.aborted)
+            throw signal.reason ?? failureValue;
+        if (failureValue instanceof SourceMaterializationError)
+            throw failureValue;
+        throw failure("ADAPTER_FAILED", "permanent", "resolveNpmSource", "npm source adapter failed", failureValue);
+    }
+    if (result === undefined)
+        throw failure("ADAPTER_FAILED", "permanent", "resolveNpmSource", "npm source adapter returned no result");
+    return result;
+}
+export function createNpmSourceAcquirer(options) {
+    if (options === null || typeof options !== "object")
+        throw new TypeError("npm source acquirer options are required");
+    if (typeof options.registry?.resolve !== "function" || typeof options.registry?.downloadVerified !== "function") {
+        throw new TypeError("npm source acquirer requires a registry client");
+    }
+    if (typeof options.archive?.read !== "function")
+        throw new TypeError("npm source acquirer requires a tar reader");
+    if (typeof options.sha256 !== "function")
+        throw new TypeError("npm source acquirer requires SHA-256");
+    return {
+        async materialize(input, sink, signal) {
+            let source;
+            try {
+                const parsed = PluginSourceSchema.parse(input);
+                if (parsed.kind !== "npm")
+                    throw new Error("source is not npm");
+                source = parsed;
+            }
+            catch (error) {
+                throw failure("SOURCE_RESOLUTION_FAILED", "permanent", "resolveNpmSource", "npm source declaration is invalid", error);
+            }
+            if (sink === null || typeof sink?.add !== "function")
+                throw new TypeError("npm source acquirer requires a content sink");
+            if (typeof signal?.aborted !== "boolean")
+                throw new TypeError("npm source acquirer requires an AbortSignal");
+            return acquire(options, source, sink, signal);
+        },
+    };
+}
+//# sourceMappingURL=npm-source-acquirer.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/npm/npm-source-acquirer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-source-acquirer.js","sourceRoot":"","sources":["../../../src/infrastructure/npm/npm-source-acquirer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,kBAAkB,EAClB,0BAA0B,GAI3B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,8BAA8B,GAI/B,MAAM,+CAA+C,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,6CAA6C,CAAC;AAEzF,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAG5C,MAAM,OAAO,GAAG,aAAa,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAwD,CAAC;AASxF,SAAS,OAAO,CACd,IAA+E,EAC/E,cAAsD,EACtD,SAAiB,EACjB,OAAe,EACf,KAAe;IAEf,OAAO,IAAI,0BAA0B,CAAC;QACpC,IAAI;QACJ,cAAc;QACd,SAAS;QACT,OAAO;QACP,OAAO,EAAE,EAAE,SAAS,EAAE;QACtB,KAAK;KACN,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,MAAmB;IACzC,IAAI,MAAM,CAAC,OAAO;QAAE,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAC;AACzG,CAAC;AAED,SAAS,eAAe,CAAC,KAAsC;IAC7D,MAAM,MAAM,GAAG,EAAE,GAAG,8BAA8B,EAAE,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,IAAI,mBAAmB,CAAC,CAAC;IACxH,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAChG,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAAkB,EAClB,OAAe,EACf,IAA0B,EAC1B,MAA6B,EAC7B,MAAmB;IAEnB,MAAM,KAAK,GAAG,gBAAgB,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,CAAyC,CAAC;IAC5F,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;YACtC,WAAW,EAAE,MAAM;YACnB,WAAW,EAAE,SAAS;YACtB,sBAAsB,EAAE,IAAI;YAC5B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;QACjD,IAAI,KAAK,YAAY,0BAA0B;YAAE,MAAM,KAAK,CAAC;QAC7D,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,EAAE,+BAA+B,EAAE,KAAK,CAAC,CAAC;IAC/G,CAAC;AACH,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,OAAiC,EACjC,MAA8C,EAC9C,IAA0B,EAC1B,MAAmB;IAEnB,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC/B,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,sDAAsD,CAAC,CAAC;IAC3H,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IAClD,IAAI,YAAqB,CAAC;IAC1B,IAAI,MAAwC,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAChE,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,wEAAwE;QACxE,yEAAyE;QACzE,uEAAuE;QACvE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC7H,MAAM,OAAO,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,oDAAoD,CAAC,CAAC;QACnI,CAAC;QACD,MAAM,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACpF,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACrE,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,MAAM,GAAG,0BAA0B,CAAC;gBAClC,IAAI,EAAE,KAAK;gBACX,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO;gBAClC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS;gBACtC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,uDAAuD,EAAE,KAAK,CAAC,CAAC;QACnI,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,YAAY,GAAG,KAAK,CAAC;IACvB,CAAC;IAED,IAAI,cAAuB,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,cAAc,GAAG,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,EAAE,iDAAiD,EAAE,IAAI,cAAc,CAAC,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAC9K,CAAC;IACD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,sBAAsB,EAAE,mCAAmC,EAAE,cAAc,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,MAAM,CAAC,MAAM,IAAI,YAAY,CAAC;QACxD,IAAI,YAAY,YAAY,0BAA0B;YAAE,MAAM,YAAY,CAAC;QAC3E,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,YAAY,CAAC,CAAC;IAC9G,CAAC;IACD,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACpI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAiC;IACvE,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAC;IACrH,IAAI,OAAO,OAAO,CAAC,QAAQ,EAAE,OAAO,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,QAAQ,EAAE,gBAAgB,KAAK,UAAU,EAAE,CAAC;QAChH,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,OAAO,OAAO,CAAC,OAAO,EAAE,IAAI,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IAClH,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAEtG,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM;YACnC,IAAI,MAA8C,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK;oBAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;gBAChE,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,CAAC,0BAA0B,EAAE,WAAW,EAAE,kBAAkB,EAAE,mCAAmC,EAAE,KAAK,CAAC,CAAC;YACzH,CAAC;YACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,EAAE,GAAG,KAAK,UAAU;gBAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;YACzH,IAAI,OAAO,MAAM,EAAE,OAAO,KAAK,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;YAC7G,OAAO,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/process/command-runner.d.ts

@@ -0,0 +1,17 @@
+import { redactCommand } from "../logging/redaction.js";
+import type { CommandRunner } from "../../application/ports/process-runner.js";
+export type { CommandCapturePolicy, CommandEnvironment, CommandRequest, CommandResult, CommandRunner, } from "../../application/ports/process-runner.js";
+export type CommandRunnerErrorCode = "INVALID_REQUEST" | "SPAWN_FAILED" | "PIPE_FAILED" | "OUTPUT_LIMIT" | "TIMEOUT" | "CANCELLED" | "STDIN_FAILED" | "NULL_EXIT";
+export declare class CommandRunnerError extends Error {
+    readonly code: CommandRunnerErrorCode;
+    readonly command: ReturnType<typeof redactCommand>;
+    constructor(message: string, executable: string, args: readonly string[], code?: CommandRunnerErrorCode, cause?: unknown);
+}
+type RunnerOptions = Readonly<{
+    killGraceMs?: number;
+}>;
+/**
+ * The single Node process primitive. Both source acquisition and hook runtime
+ * callers use this adapter, so tree termination and pipe draining cannot drift.
+ */
+export declare function createNodeCommandRunner(options?: RunnerOptions): CommandRunner;