@nklisch/pi-enhanced 0.2.2 → 0.2.4

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/network/network-egress-policy.js

@@ -1,251 +0,0 @@
-import { isIP } from "node:net";
-import { lookup as nodeLookup } from "node:dns/promises";
-export class NetworkEgressPolicyError extends Error {
-    kind;
-    constructor(kind, message, cause) {
-        super(message, cause === undefined ? undefined : { cause });
-        this.name = "NetworkEgressPolicyError";
-        this.kind = kind;
-    }
-}
-const SCP_REMOTE = /^(?:(?<user>[A-Za-z0-9._-]+)@)?(?<host>[A-Za-z0-9.-]+):(?<path>[^/\\\s:][^\s]*)$/u;
-const FORBIDDEN_HOST_SUFFIXES = [
-    ".localhost",
-    ".local",
-    ".internal",
-    ".home.arpa",
-    ".test",
-    ".invalid",
-    ".example",
-];
-function ipv4Bytes(address) {
-    if (isIP(address) !== 4)
-        return undefined;
-    const values = address.split(".").map(Number);
-    return values.length === 4 && values.every((value) => Number.isInteger(value) && value >= 0 && value <= 255)
-        ? values
-        : undefined;
-}
-function ipv4Class(address) {
-    const bytes = ipv4Bytes(address);
-    if (bytes === undefined)
-        return "forbidden";
-    const [a, b, c] = bytes;
-    if (a === 10 || a === 100 && b >= 64 && b <= 127 || a === 127 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168)
-        return "private";
-    if (a === 0 || a === 169 && b === 254 ||
-        a === 192 && (b === 0 && (c === 0 || c === 2) || b === 31 && c === 196 ||
-            b === 52 && c === 193 || b === 88 && c === 99 || b === 175 && c === 48) ||
-        a === 198 && (b === 18 || b === 19 || b === 51 && c === 100) ||
-        a === 203 && b === 0 && c === 113 || a >= 224)
-        return "forbidden";
-    return "public";
-}
-function ipv6Value(address) {
-    const zone = address.indexOf("%");
-    const input = (zone < 0 ? address : address.slice(0, zone)).toLowerCase();
-    if (isIP(input) !== 6)
-        return undefined;
-    const halves = input.split("::");
-    if (halves.length > 2)
-        return undefined;
-    const parse = (part) => {
-        if (part.length === 0)
-            return [];
-        const words = [];
-        for (const segment of part.split(":")) {
-            if (segment.includes(".")) {
-                const bytes = ipv4Bytes(segment);
-                if (bytes === undefined)
-                    return [];
-                words.push((bytes[0] << 8) | bytes[1], (bytes[2] << 8) | bytes[3]);
-            }
-            else {
-                const value = Number.parseInt(segment, 16);
-                if (!/^[0-9a-f]{1,4}$/u.test(segment) || !Number.isInteger(value))
-                    return [];
-                words.push(value);
-            }
-        }
-        return words;
-    };
-    const left = parse(halves[0] ?? "");
-    const right = parse(halves[1] ?? "");
-    const zeroCount = halves.length === 2 ? 8 - left.length - right.length : 0;
-    const words = [...left, ...Array.from({ length: zeroCount }, () => 0), ...right];
-    if (words.length !== 8)
-        return undefined;
-    return words.reduce((result, word) => result << 16n | BigInt(word), 0n);
-}
-function prefix(value, bits, expected) {
-    return value >> BigInt(128 - bits) === expected >> BigInt(128 - bits);
-}
-function ipv6Class(address) {
-    const value = ipv6Value(address);
-    if (value === undefined)
-        return "forbidden";
-    // IPv4-mapped IPv6 must inherit the embedded IPv4 decision.
-    if (prefix(value, 96, 0xffffn << 32n)) {
-        const embedded = Number(value & 0xffffffffn);
-        return ipv4Class(`${embedded >>> 24}.${embedded >>> 16 & 255}.${embedded >>> 8 & 255}.${embedded & 255}`);
-    }
-    if (value === 1n)
-        return "private";
-    if (value === 0n || prefix(value, 10, 0xfe80n << 112n) ||
-        prefix(value, 8, 0xffn << 120n) || prefix(value, 96, 0x64ff9bn << 96n) ||
-        prefix(value, 48, 0x64ff9b0001n << 80n) || prefix(value, 64, 0x100n << 112n) ||
-        prefix(value, 23, 0x2001n << 112n) || prefix(value, 32, 0x20010db8n << 96n) ||
-        prefix(value, 16, 0x2002n << 112n))
-        return "forbidden";
-    if (prefix(value, 7, 0xfcn << 120n) || prefix(value, 10, 0xfec0n << 112n))
-        return "private";
-    return prefix(value, 3, 0x2n << 124n) ? "public" : "forbidden";
-}
-function addressClass(address) {
-    const family = isIP(address);
-    return family === 4 ? ipv4Class(address) : family === 6 ? ipv6Class(address) : "forbidden";
-}
-function stripBrackets(hostname) {
-    return hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
-}
-function endpointUrl(value) {
-    const scp = SCP_REMOTE.exec(value);
-    if (scp !== null) {
-        const user = scp.groups?.user;
-        const authority = `${user === undefined ? "" : `${encodeURIComponent(user)}@`}${scp.groups?.host ?? ""}`;
-        return new URL(`ssh://${authority}/${scp.groups?.path ?? ""}`);
-    }
-    return new URL(value);
-}
-function canonicalOrigin(parsed) {
-    const port = parsed.port || (parsed.protocol === "https:" ? "443" : "22");
-    const user = parsed.protocol === "ssh:" && parsed.username.length > 0 ? `${parsed.username}@` : "";
-    return `${parsed.protocol}//${user}${stripBrackets(parsed.hostname).toLowerCase()}:${port}`;
-}
-function exactOrigin(value) {
-    let parsed;
-    try {
-        parsed = endpointUrl(value);
-    }
-    catch (error) {
-        throw new TypeError("network authority is invalid", { cause: error });
-    }
-    if ((parsed.protocol !== "https:" && parsed.protocol !== "ssh:") || parsed.hostname.length === 0 ||
-        parsed.password.length > 0 || parsed.search.length > 0 || parsed.hash.length > 0 ||
-        parsed.pathname !== "" && parsed.pathname !== "/") {
-        throw new TypeError("network authority must be an exact credential-free HTTPS or SSH origin");
-    }
-    return canonicalOrigin(parsed);
-}
-function authoritySet(values) {
-    return new Set((values ?? []).map(exactOrigin));
-}
-function sourceEndpoint(value) {
-    let url;
-    try {
-        url = endpointUrl(value);
-    }
-    catch (error) {
-        throw new NetworkEgressPolicyError("policy", "network destination is invalid", error);
-    }
-    if ((url.protocol !== "https:" && url.protocol !== "ssh:") || url.hostname.length === 0 ||
-        url.password.length > 0 || url.search.length > 0 || url.hash.length > 0 ||
-        url.protocol === "https:" && url.username.length > 0) {
-        throw new NetworkEgressPolicyError("policy", "network destination is not an approved protocol authority");
-    }
-    const protocol = url.protocol;
-    const hostname = stripBrackets(url.hostname).toLowerCase();
-    const port = url.port || (protocol === "https:" ? "443" : "22");
-    return { url, origin: canonicalOrigin(url), protocol, hostname, port };
-}
-function forbiddenHostname(hostname) {
-    return hostname === "localhost" || !hostname.includes(".") && isIP(hostname) === 0 ||
-        FORBIDDEN_HOST_SUFFIXES.some((suffix) => hostname.endsWith(suffix));
-}
-function compareAddress(left, right) {
-    return left.family - right.family || left.address.localeCompare(right.address);
-}
-const NETWORK_POLICY_ENVIRONMENT = {
-    privateOrigins: "PI_PLUGIN_HOST_PRIVATE_ORIGINS",
-    credentialOrigins: "PI_PLUGIN_HOST_CREDENTIAL_ORIGINS",
-    redirectOrigins: "PI_PLUGIN_HOST_REDIRECT_ORIGINS",
-};
-function environmentOrigins(value, name) {
-    if (value === undefined || value.trim() === "")
-        return undefined;
-    let parsed;
-    try {
-        parsed = JSON.parse(value);
-    }
-    catch (error) {
-        throw new TypeError(`${name} must be a JSON array of exact origins`, { cause: error });
-    }
-    if (!Array.isArray(parsed) || parsed.some((entry) => typeof entry !== "string") || new Set(parsed).size !== parsed.length) {
-        throw new TypeError(`${name} must be a unique JSON array of exact origins`);
-    }
-    return Object.freeze([...parsed].sort());
-}
-export function networkEgressPolicyOptionsFromEnvironment(environment) {
-    if (environment === null || typeof environment !== "object")
-        throw new TypeError("network policy environment is required");
-    const result = {};
-    for (const [field, name] of Object.entries(NETWORK_POLICY_ENVIRONMENT)) {
-        const origins = environmentOrigins(environment[name], name);
-        if (origins !== undefined)
-            result[field] = origins;
-    }
-    return Object.freeze(result);
-}
-export function createNetworkEgressPolicy(options = {}) {
-    const privateOrigins = authoritySet(options.privateOrigins);
-    const credentialOrigins = authoritySet(options.credentialOrigins);
-    const redirectOrigins = authoritySet(options.redirectOrigins);
-    const lookup = options.lookup ?? (async (hostname, lookupOptions) => await nodeLookup(hostname, lookupOptions));
-    const policy = {
-        origin(value) {
-            return sourceEndpoint(value).origin;
-        },
-        async authorize(value, expectedProtocol) {
-            const endpoint = sourceEndpoint(value);
-            if (expectedProtocol !== undefined && endpoint.protocol !== expectedProtocol) {
-                throw new NetworkEgressPolicyError("policy", "network destination protocol changed");
-            }
-            if (forbiddenHostname(endpoint.hostname) && !privateOrigins.has(endpoint.origin)) {
-                throw new NetworkEgressPolicyError("policy", "network destination host is not globally routable");
-            }
-            let addresses;
-            const literalFamily = isIP(endpoint.hostname);
-            if (literalFamily === 4 || literalFamily === 6) {
-                addresses = [{ address: endpoint.hostname, family: literalFamily }];
-            }
-            else {
-                try {
-                    addresses = await lookup(endpoint.hostname, { all: true, verbatim: true });
-                }
-                catch (error) {
-                    throw new NetworkEgressPolicyError("resolution", "network destination could not be resolved", error);
-                }
-            }
-            if (addresses.length === 0 || addresses.some((entry) => (entry.family !== 4 && entry.family !== 6) || isIP(entry.address) !== entry.family)) {
-                throw new NetworkEgressPolicyError("resolution", "network destination returned invalid addresses");
-            }
-            const classified = addresses.map((entry) => ({ entry, classification: addressClass(entry.address) }));
-            if (classified.some(({ classification }) => classification === "forbidden") ||
-                classified.some(({ classification }) => classification === "private") && !privateOrigins.has(endpoint.origin)) {
-                throw new NetworkEgressPolicyError("policy", "network destination resolved outside its approved address class");
-            }
-            const selected = [...addresses].sort(compareAddress)[0];
-            return Object.freeze({
-                ...endpoint,
-                address: selected.address,
-                family: selected.family,
-                credentialsApproved: credentialOrigins.has(endpoint.origin),
-            });
-        },
-        redirectAllowed(fromOrigin, toOrigin) {
-            return fromOrigin === toOrigin || redirectOrigins.has(toOrigin);
-        },
-    };
-    return Object.freeze(policy);
-}
-//# sourceMappingURL=network-egress-policy.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/network/network-egress-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"network-egress-policy.js","sourceRoot":"","sources":["../../../src/infrastructure/network/network-egress-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,MAAM,IAAI,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA0BzD,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACxC,IAAI,CAA0B;IAEvC,YAAY,IAA6B,EAAE,OAAe,EAAE,KAAe;QACzE,KAAK,CAAC,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAID,MAAM,UAAU,GAAG,mFAAmF,CAAC;AACvG,MAAM,uBAAuB,GAAG;IAC9B,YAAY;IACZ,QAAQ;IACR,WAAW;IACX,YAAY;IACZ,OAAO;IACP,UAAU;IACV,UAAU;CACX,CAAC;AAEF,SAAS,SAAS,CAAC,OAAe;IAChC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,GAAG,CAAC;QAC1G,CAAC,CAAC,MAA0C;QAC5C,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC;IACxB,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IAC7I,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QACjC,CAAC,KAAK,GAAG,IAAI,CACX,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG;YACxD,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CACvE;QACD,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,CAAC;QAC5D,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,WAAW,CAAC;IACtE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAY,EAAE;QACvC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;gBACjC,IAAI,KAAK,KAAK,SAAS;oBAAE,OAAO,EAAE,CAAC;gBACnC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC3C,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;oBAAE,OAAO,EAAE,CAAC;gBAC7E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,CAAC;IACjF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,MAAM,CAAC,KAAa,EAAE,IAAY,EAAE,QAAgB;IAC3D,OAAO,KAAK,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,4DAA4D;IAC5D,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,GAAG,WAAY,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC,GAAG,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,EAAE,GAAG,GAAG,IAAI,QAAQ,KAAK,CAAC,GAAG,GAAG,IAAI,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACnC,IAAI,KAAK,KAAK,EAAE,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;QAClD,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,IAAI,GAAG,CAAC;QACtE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,aAAa,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,IAAI,IAAI,CAAC;QAC5E,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,WAAW,IAAI,GAAG,CAAC;QAC3E,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3D,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,OAAO,IAAI,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5F,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;AAC7F,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC;QAC9B,MAAM,SAAS,GAAG,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;QACzG,OAAO,IAAI,GAAG,CAAC,SAAS,SAAS,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,MAAW;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAC5F,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QAChF,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,wEAAwE,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,YAAY,CAAC,MAAqC;IACzD,OAAO,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,gCAAgC,EAAE,KAAK,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QACnF,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;QACvE,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,2DAA2D,CAAC,CAAC;IAC5G,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC3D,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAChF,uBAAuB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,IAAoB,EAAE,KAAqB;IACjE,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,0BAA0B,GAAG;IACjC,cAAc,EAAE,gCAAgC;IAChD,iBAAiB,EAAE,mCAAmC;IACtD,eAAe,EAAE,iCAAiC;CAC1C,CAAC;AAEX,SAAS,kBAAkB,CAAC,KAAyB,EAAE,IAAY;IACjE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACjE,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,wCAAwC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QAC1H,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,WAAyD;IAEzD,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACvE,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QAC5D,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAQD,MAAM,UAAU,yBAAyB,CAAC,OAAO,GAA+B,EAAE;IAChF,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC5D,MAAM,iBAAiB,GAAG,YAAY,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClE,MAAM,eAAe,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAkB,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CACjF,MAAM,UAAU,CAAC,QAAQ,EAAE,aAAa,CAA8B,CAAC,CAAC;IAE1E,MAAM,MAAM,GAAwB;QAClC,MAAM,CAAC,KAAa;YAClB,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,gBAAoC;YACjE,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAC7E,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,sCAAsC,CAAC,CAAC;YACvF,CAAC;YACD,IAAI,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjF,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,mDAAmD,CAAC,CAAC;YACpG,CAAC;YAED,IAAI,SAAoC,CAAC;YACzC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC9C,IAAI,aAAa,KAAK,CAAC,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;gBAC/C,SAAS,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACtE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,IAAI,wBAAwB,CAAC,YAAY,EAAE,2CAA2C,EAAE,KAAK,CAAC,CAAC;gBACvG,CAAC;YACH,CAAC;YACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CACrD,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,wBAAwB,CAAC,YAAY,EAAE,gDAAgD,CAAC,CAAC;YACrG,CAAC;YACD,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;YACtG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,KAAK,WAAW,CAAC;gBACvE,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClH,MAAM,IAAI,wBAAwB,CAAC,QAAQ,EAAE,iEAAiE,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAE,CAAC;YACzD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,GAAG,QAAQ;gBACX,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,mBAAmB,EAAE,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC;aAC5D,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,UAAkB,EAAE,QAAgB;YAClD,OAAO,UAAU,KAAK,QAAQ,IAAI,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAClE,CAAC;KACF,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-control-timeout.d.ts

@@ -1,2 +0,0 @@
-import type { NativeControlTimeoutPort } from "../../application/ports/native-control-execution.js";
-export declare function createNodeControlTimeoutPort(): NativeControlTimeoutPort;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-control-timeout.js

@@ -1,26 +0,0 @@
-export function createNodeControlTimeoutPort() {
-    return Object.freeze({
-        arm(timeoutMs, parent) {
-            const controller = new AbortController();
-            const abortParent = () => controller.abort(parent.reason);
-            if (parent.aborted)
-                abortParent();
-            else
-                parent.addEventListener("abort", abortParent, { once: true });
-            const timer = setTimeout(() => controller.abort(new DOMException("native control timeout", "TimeoutError")), timeoutMs);
-            timer.unref?.();
-            let disposed = false;
-            return Object.freeze({
-                signal: controller.signal,
-                dispose() {
-                    if (disposed)
-                        return;
-                    disposed = true;
-                    clearTimeout(timer);
-                    parent.removeEventListener("abort", abortParent);
-                },
-            });
-        },
-    });
-}
-//# sourceMappingURL=node-control-timeout.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-control-timeout.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node-control-timeout.js","sourceRoot":"","sources":["../../../src/infrastructure/node/node-control-timeout.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,4BAA4B;IAC1C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,SAAiB,EAAE,MAAmB;YACxC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,WAAW,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1D,IAAI,MAAM,CAAC,OAAO;gBAAE,WAAW,EAAE,CAAC;;gBAC7B,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,wBAAwB,EAAE,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;YACxH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,QAAQ,GAAG,KAAK,CAAC;YACrB,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO;oBACL,IAAI,QAAQ;wBAAE,OAAO;oBACrB,QAAQ,GAAG,IAAI,CAAC;oBAChB,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;gBACnD,CAAC;aACF,CAAC,CAAC;QACL,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-identifiers.d.ts

@@ -1,16 +0,0 @@
-import { type LifecycleOperationIdPort } from "../../application/ports/lifecycle-operation-id.js";
-import type { ConfigurationWriteIdPort } from "../../application/ports/configuration-write-id.js";
-import type { RefreshClaimIdPort } from "../../application/ports/refresh-claim-id.js";
-import { type ProjectIntentWriteIdPort } from "../../application/ports/project-intent-write-id.js";
-import type { UpdateSchedulerLeaseIdPort } from "../../application/ports/update-scheduler-lease-id.js";
-import type { NativeControlExecutionIdPort } from "../../application/ports/native-control-execution.js";
-export type NodeHostIdentifiers = Readonly<{
-    operationIds: LifecycleOperationIdPort;
-    configurationWriteIds: ConfigurationWriteIdPort;
-    refreshClaimIds: RefreshClaimIdPort;
-    updateSchedulerLeaseIds: UpdateSchedulerLeaseIdPort;
-    projectIntentWriteIds: ProjectIntentWriteIdPort;
-    controlExecutionIds: NativeControlExecutionIdPort;
-}>;
-/** One stateless cryptographic identifier authority for the composed host. */
-export declare function createNodeHostIdentifiers(): NodeHostIdentifiers;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-identifiers.js

@@ -1,47 +0,0 @@
-import { randomBytes, randomUUID } from "node:crypto";
-import { ConfigurationWriteIdSchema } from "../../domain/configured-values.js";
-import { RefreshClaimIdSchema, UpdateSchedulerLeaseIdSchema } from "../../domain/update-policy.js";
-import { LifecycleOperationIdSchema, } from "../../application/ports/lifecycle-operation-id.js";
-import { ProjectIntentWriteIdSchema } from "../../application/ports/project-intent-write-id.js";
-import { NativeControlExecutionIdSchema } from "../../application/native-control-contract.js";
-/** One stateless cryptographic identifier authority for the composed host. */
-export function createNodeHostIdentifiers() {
-    return Object.freeze({
-        operationIds: Object.freeze({
-            async create(signal) {
-                signal.throwIfAborted();
-                return LifecycleOperationIdSchema.parse(randomUUID());
-            },
-        }),
-        configurationWriteIds: Object.freeze({
-            async create(signal) {
-                signal.throwIfAborted();
-                return ConfigurationWriteIdSchema.parse(`config-write-v1:${randomBytes(24).toString("base64url")}`);
-            },
-        }),
-        refreshClaimIds: Object.freeze({
-            create() {
-                return RefreshClaimIdSchema.parse(`refresh-claim-v1:uuid:${randomUUID()}`);
-            },
-        }),
-        updateSchedulerLeaseIds: Object.freeze({
-            async create(signal) {
-                signal.throwIfAborted();
-                return UpdateSchedulerLeaseIdSchema.parse(`update-scheduler-lease-v1:uuid:${randomUUID()}`);
-            },
-        }),
-        projectIntentWriteIds: Object.freeze({
-            async create(signal) {
-                signal.throwIfAborted();
-                return ProjectIntentWriteIdSchema.parse(`project-intent-write-v1:${randomBytes(24).toString("base64url")}`);
-            },
-        }),
-        controlExecutionIds: Object.freeze({
-            async issue(signal) {
-                signal.throwIfAborted();
-                return NativeControlExecutionIdSchema.parse(`native-control-execution-v1:${randomUUID()}`);
-            },
-        }),
-    });
-}
-//# sourceMappingURL=node-identifiers.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-identifiers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node-identifiers.js","sourceRoot":"","sources":["../../../src/infrastructure/node/node-identifiers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,4BAA4B,EAAE,MAAM,+BAA+B,CAAC;AACnG,OAAO,EACL,0BAA0B,GAE3B,MAAM,mDAAmD,CAAC;AAG3D,OAAO,EAAE,0BAA0B,EAAiC,MAAM,oDAAoD,CAAC;AAE/H,OAAO,EAAE,8BAA8B,EAAE,MAAM,8CAA8C,CAAC;AAY9F,8EAA8E;AAC9E,MAAM,UAAU,yBAAyB;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC;YAC1B,KAAK,CAAC,MAAM,CAAC,MAAmB;gBAC9B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,0BAA0B,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;YACxD,CAAC;SACF,CAAC;QACF,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,MAAmB;gBAC9B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,0BAA0B,CAAC,KAAK,CAAC,mBAAmB,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACtG,CAAC;SACF,CAAC;QACF,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC;YAC7B,MAAM;gBACJ,OAAO,oBAAoB,CAAC,KAAK,CAAC,yBAAyB,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7E,CAAC;SACF,CAAC;QACF,uBAAuB,EAAE,MAAM,CAAC,MAAM,CAAC;YACrC,KAAK,CAAC,MAAM,CAAC,MAAmB;gBAC9B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,4BAA4B,CAAC,KAAK,CAAC,kCAAkC,UAAU,EAAE,EAAE,CAAC,CAAC;YAC9F,CAAC;SACF,CAAC;QACF,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC;YACnC,KAAK,CAAC,MAAM,CAAC,MAAmB;gBAC9B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,0BAA0B,CAAC,KAAK,CAAC,2BAA2B,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YAC9G,CAAC;SACF,CAAC;QACF,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC;YACjC,KAAK,CAAC,KAAK,CAAC,MAAmB;gBAC7B,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,OAAO,8BAA8B,CAAC,KAAK,CAAC,+BAA+B,UAAU,EAAE,EAAE,CAAC,CAAC;YAC7F,CAAC;SACF,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-lifecycle-clock.d.ts

@@ -1,4 +0,0 @@
-import type { LifecycleClock } from "../../application/ports/lifecycle-clock.js";
-/** Process-wide clock identity; it owns no timer and schedules no work. */
-export declare const nodeLifecycleClock: LifecycleClock;
-export declare function createNodeLifecycleClock(): LifecycleClock;

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-lifecycle-clock.js

@@ -1,15 +0,0 @@
-import { performance } from "node:perf_hooks";
-import { EpochMillisecondsSchema } from "../../domain/time.js";
-/** Process-wide clock identity; it owns no timer and schedules no work. */
-export const nodeLifecycleClock = Object.freeze({
-    nowEpochMilliseconds() {
-        return EpochMillisecondsSchema.parse(Date.now());
-    },
-    monotonicMilliseconds() {
-        return performance.now();
-    },
-});
-export function createNodeLifecycleClock() {
-    return nodeLifecycleClock;
-}
-//# sourceMappingURL=node-lifecycle-clock.js.map

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/node/node-lifecycle-clock.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node-lifecycle-clock.js","sourceRoot":"","sources":["../../../src/infrastructure/node/node-lifecycle-clock.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAG/D,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAmB,MAAM,CAAC,MAAM,CAAC;IAC9D,oBAAoB;QAClB,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC;IACD,qBAAqB;QACnB,OAAO,WAAW,CAAC,GAAG,EAAE,CAAC;IAC3B,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,wBAAwB;IACtC,OAAO,kBAAkB,CAAC;AAC5B,CAAC"}

package/node_modules/@nklisch/pi-plugins/dist/infrastructure/npm/npm-registry-client.d.ts

@@ -1,28 +0,0 @@
-import { type NpmIntegrity, type PluginSource } from "../../domain/source.js";
-import { type MaterializationLimits } from "../../application/ports/source-acquisition.js";
-import { type BoundedFetch, type NpmCredentialProvider } from "../http/bounded-fetch.js";
-declare const DEFAULT_REGISTRY = "https://registry.npmjs.org/";
-export type NpmVersionRecord = Readonly<{
-    version: string;
-    tarball: string;
-    integrity: NpmIntegrity;
-}>;
-export interface NpmRegistryClient {
-    resolve(source: Extract<PluginSource, {
-        kind: "npm";
-    }>, signal: AbortSignal): Promise<Readonly<{
-        package: string;
-        registry: string;
-        selected: NpmVersionRecord;
-    }>>;
-    downloadVerified(record: NpmVersionRecord, destinationFile: string, limits: MaterializationLimits, signal: AbortSignal): Promise<void>;
-}
-type RegistryClientOptions = Readonly<{
-    fetch: BoundedFetch;
-    credentials: NpmCredentialProvider;
-    limits?: Partial<MaterializationLimits>;
-}>;
-export declare function createNpmRegistryClient(options: RegistryClientOptions): NpmRegistryClient;
-export type { RegistryClientOptions as NpmRegistryClientOptions };
-export type { BoundedFetch, NpmCredentialProvider } from "../http/bounded-fetch.js";
-export { DEFAULT_REGISTRY };