@red-hat-developer-hub/backstage-plugin-ai-skills-common 0.0.0-stage → 0.3.0

package/dist/validation.cjs.js

@@ -0,0 +1,442 @@
+'use strict';
+
+const MAX_SNAPSHOT_RECORDS = 1e3;
+const MAX_SNAPSHOT_BYTES = 5 * 1024 * 1024;
+const SUPPORTED_SCHEMA_VERSION = "1";
+const SHA256_DIGEST_RE = /^sha256:[0-9a-f]{64}$/;
+const VALID_SOURCE_TYPES = /* @__PURE__ */ new Set([
+  "oci",
+  "npx"
+]);
+const VALID_STATUSES = /* @__PURE__ */ new Set([
+  "loading",
+  "ready",
+  "partial",
+  "failed"
+]);
+const ALLOWED_OCI_EXTENSION_KEYS = /* @__PURE__ */ new Set([
+  "namespace",
+  "prompt"
+]);
+const ALLOWED_NPX_EXTENSION_KEYS = /* @__PURE__ */ new Set(["type"]);
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.trim().length > 0;
+}
+function isValidDigest(digest) {
+  return SHA256_DIGEST_RE.test(digest);
+}
+function isValidUtcTimestamp(value) {
+  if (!value.endsWith("Z") && !value.endsWith("+00:00")) {
+    return false;
+  }
+  const d = new Date(value);
+  return !Number.isNaN(d.getTime());
+}
+function validateAuthor(author, path, errors) {
+  if (typeof author !== "object" || author === null) {
+    errors.push(`${path}: must be an object`);
+    return false;
+  }
+  const a = author;
+  if (!isNonEmptyString(a.name)) {
+    errors.push(`${path}.name: must be a non-empty string`);
+    return false;
+  }
+  if (a.email !== void 0 && typeof a.email !== "string") {
+    errors.push(`${path}.email: must be a string when present`);
+    return false;
+  }
+  const validAuthorKeys = /* @__PURE__ */ new Set(["name", "email"]);
+  for (const key of Object.keys(a)) {
+    if (!validAuthorKeys.has(key)) {
+      errors.push(`${path}: unknown key '${key}'`);
+      return false;
+    }
+  }
+  return true;
+}
+function validateRequiredRecordFields(r, prefix, errors) {
+  if (!isNonEmptyString(r.key)) {
+    errors.push(`${prefix}.key: must be a non-empty string`);
+    return false;
+  }
+  if (!isNonEmptyString(r.name)) {
+    errors.push(`${prefix}.name: must be a non-empty string`);
+    return false;
+  }
+  if (!isNonEmptyString(r.sourceUri)) {
+    errors.push(`${prefix}.sourceUri: must be a non-empty string`);
+    return false;
+  }
+  if (!isNonEmptyString(r.digest)) {
+    errors.push(`${prefix}.digest: must be a non-empty string`);
+    return false;
+  }
+  if (!isValidDigest(r.digest)) {
+    errors.push(
+      `${prefix}.digest: must match sha256:<64 lowercase hex digits>`
+    );
+    return false;
+  }
+  return true;
+}
+function validateOptionalRecordFields(r, prefix, errors) {
+  const optionalStrings = [
+    "description",
+    "version",
+    "license",
+    "compatibility",
+    "owner",
+    "lifecycle"
+  ];
+  for (const field of optionalStrings) {
+    if (r[field] !== void 0 && typeof r[field] !== "string") {
+      errors.push(`${prefix}.${field}: must be a string when present`);
+      return false;
+    }
+  }
+  if (!validateAuthorsField(r, prefix, errors)) {
+    return false;
+  }
+  return validateTagsField(r, prefix, errors);
+}
+function validateAuthorsField(r, prefix, errors) {
+  if (r.authors === void 0) {
+    return true;
+  }
+  if (!Array.isArray(r.authors)) {
+    errors.push(`${prefix}.authors: must be an array when present`);
+    return false;
+  }
+  let allValid = true;
+  for (let i = 0; i < r.authors.length; i++) {
+    if (!validateAuthor(r.authors[i], `${prefix}.authors[${i}]`, errors)) {
+      allValid = false;
+    }
+  }
+  return allValid;
+}
+function validateTagsField(r, prefix, errors) {
+  if (r.tags === void 0) {
+    return true;
+  }
+  if (!Array.isArray(r.tags)) {
+    errors.push(`${prefix}.tags: must be an array when present`);
+    return false;
+  }
+  for (let i = 0; i < r.tags.length; i++) {
+    if (typeof r.tags[i] !== "string") {
+      errors.push(`${prefix}.tags[${i}]: must be a string`);
+      return false;
+    }
+  }
+  return true;
+}
+function validateBaseRecord(record, index, errors) {
+  const prefix = `skills[${index}]`;
+  if (typeof record !== "object" || record === null) {
+    errors.push(`${prefix}: must be an object`);
+    return false;
+  }
+  const r = record;
+  if (!validateRequiredRecordFields(r, prefix, errors)) {
+    return false;
+  }
+  return validateOptionalRecordFields(r, prefix, errors);
+}
+function validateOciContainerKeys(oci, prefix, errors) {
+  for (const key of Object.keys(oci)) {
+    if (!ALLOWED_OCI_EXTENSION_KEYS.has(key)) {
+      errors.push(`${prefix}.extensions.oci: unknown key '${key}'`);
+      return false;
+    }
+    if (oci[key] !== void 0 && typeof oci[key] !== "string") {
+      errors.push(
+        `${prefix}.extensions.oci.${key}: must be a string when present`
+      );
+      return false;
+    }
+  }
+  return true;
+}
+function validateOciExtensions(record, index, errors) {
+  const prefix = `skills[${index}]`;
+  if (record.extensions === void 0) {
+    return true;
+  }
+  if (typeof record.extensions !== "object" || record.extensions === null) {
+    errors.push(`${prefix}.extensions: must be an object when present`);
+    return false;
+  }
+  const ext = record.extensions;
+  for (const key of Object.keys(ext)) {
+    if (key !== "oci") {
+      errors.push(
+        `${prefix}.extensions: unknown container '${key}'; only 'oci' is allowed for OCI source`
+      );
+      return false;
+    }
+  }
+  if (ext.oci === void 0) {
+    return true;
+  }
+  if (typeof ext.oci !== "object" || ext.oci === null) {
+    errors.push(`${prefix}.extensions.oci: must be an object when present`);
+    return false;
+  }
+  return validateOciContainerKeys(
+    ext.oci,
+    prefix,
+    errors
+  );
+}
+function validateNpxContainerKeys(npx, prefix, errors) {
+  for (const key of Object.keys(npx)) {
+    if (!ALLOWED_NPX_EXTENSION_KEYS.has(key)) {
+      errors.push(`${prefix}.extensions.npx: unknown key '${key}'`);
+      return false;
+    }
+  }
+  if (npx.type !== void 0 && npx.type !== "skill-md") {
+    errors.push(
+      `${prefix}.extensions.npx.type: must be 'skill-md' when present`
+    );
+    return false;
+  }
+  return true;
+}
+function validateNpxExtensions(record, index, errors) {
+  const prefix = `skills[${index}]`;
+  if (record.extensions === void 0) {
+    return true;
+  }
+  if (typeof record.extensions !== "object" || record.extensions === null) {
+    errors.push(`${prefix}.extensions: must be an object when present`);
+    return false;
+  }
+  const ext = record.extensions;
+  for (const key of Object.keys(ext)) {
+    if (key !== "npx") {
+      errors.push(
+        `${prefix}.extensions: unknown container '${key}'; only 'npx' is allowed for npx source`
+      );
+      return false;
+    }
+  }
+  if (ext.npx === void 0) {
+    return true;
+  }
+  if (typeof ext.npx !== "object" || ext.npx === null) {
+    errors.push(`${prefix}.extensions.npx: must be an object when present`);
+    return false;
+  }
+  return validateNpxContainerKeys(
+    ext.npx,
+    prefix,
+    errors
+  );
+}
+function validateRecordExtensions(record, index, sourceType, errors) {
+  if (sourceType === "oci") {
+    return validateOciExtensions(record, index, errors);
+  }
+  return validateNpxExtensions(record, index, errors);
+}
+function validateSnapshotShape(s, errors) {
+  if (s.schemaVersion !== SUPPORTED_SCHEMA_VERSION) {
+    errors.push(
+      `schemaVersion: must be '${SUPPORTED_SCHEMA_VERSION}', got '${String(
+        s.schemaVersion
+      )}'`
+    );
+    return null;
+  }
+  if (typeof s.source !== "object" || s.source === null) {
+    errors.push("source: must be an object");
+    return null;
+  }
+  const source = s.source;
+  if (!isNonEmptyString(source.id)) {
+    errors.push("source.id: must be a non-empty string");
+  }
+  if (!VALID_SOURCE_TYPES.has(source.type)) {
+    errors.push(
+      `source.type: must be one of 'oci', 'npx', got '${String(source.type)}'`
+    );
+  }
+  if (errors.length > 0) {
+    return null;
+  }
+  const sourceType = source.type;
+  if (!VALID_STATUSES.has(s.status)) {
+    errors.push(
+      `status: must be one of 'loading', 'ready', 'partial', 'failed', got '${String(
+        s.status
+      )}'`
+    );
+    return null;
+  }
+  const status = s.status;
+  if (!Array.isArray(s.skills)) {
+    errors.push("skills: must be an array");
+    return null;
+  }
+  if (!Array.isArray(s.failedSkillKeys)) {
+    errors.push("failedSkillKeys: must be an array");
+    return null;
+  }
+  return { sourceType, status };
+}
+function validateObservedAt(s, status, errors) {
+  if (status === "loading") {
+    if (s.observedAt !== null) {
+      errors.push("observedAt: must be null for loading status");
+    }
+  } else if (typeof s.observedAt !== "string") {
+    errors.push(
+      "observedAt: must be a UTC timestamp string for completed status"
+    );
+  } else if (!isValidUtcTimestamp(s.observedAt)) {
+    errors.push("observedAt: must be a valid UTC ISO 8601 timestamp");
+  }
+}
+function validateStatusInvariants(skills, failedSkillKeys, status, errors) {
+  if (status === "loading") {
+    if (skills.length > 0) {
+      errors.push("skills: must be empty for loading status");
+    }
+    if (failedSkillKeys.length > 0) {
+      errors.push("failedSkillKeys: must be empty for loading status");
+    }
+  }
+  if (status === "ready") {
+    if (failedSkillKeys.length > 0) {
+      errors.push("failedSkillKeys: must be empty for ready status");
+    }
+  }
+  if (status === "failed") {
+    if (skills.length > 0) {
+      errors.push("skills: must be empty for failed status");
+    }
+  }
+}
+function validateSnapshotRecords(skills, sourceType, errors) {
+  const skillKeys = /* @__PURE__ */ new Set();
+  for (let i = 0; i < skills.length; i++) {
+    const record = skills[i];
+    if (validateBaseRecord(record, i, errors)) {
+      const r = record;
+      if (skillKeys.has(r.key)) {
+        errors.push(`skills[${i}].key: duplicate key '${r.key}'`);
+      }
+      skillKeys.add(r.key);
+    }
+    if (typeof record === "object" && record !== null) {
+      validateRecordExtensions(
+        record,
+        i,
+        sourceType,
+        errors
+      );
+    }
+  }
+  return skillKeys;
+}
+function validateDisjointKeys(failedSkillKeys, skillKeys, errors) {
+  for (let i = 0; i < failedSkillKeys.length; i++) {
+    if (!isNonEmptyString(failedSkillKeys[i])) {
+      errors.push(`failedSkillKeys[${i}]: must be a non-empty string`);
+    }
+  }
+  const failedKeys = /* @__PURE__ */ new Set();
+  for (const fk of failedSkillKeys) {
+    if (typeof fk === "string") {
+      if (failedKeys.has(fk)) {
+        errors.push(`failedSkillKeys: duplicate key '${fk}'`);
+      }
+      failedKeys.add(fk);
+      if (skillKeys.has(fk)) {
+        errors.push(`failedSkillKeys: key '${fk}' overlaps with skills`);
+      }
+    }
+  }
+}
+function validateSnapshot(snapshot) {
+  const errors = [];
+  if (typeof snapshot !== "object" || snapshot === null) {
+    return { valid: false, errors: ["snapshot: must be an object"] };
+  }
+  const s = snapshot;
+  const shape = validateSnapshotShape(s, errors);
+  if (shape === null) {
+    return { valid: false, errors };
+  }
+  const { sourceType, status } = shape;
+  validateObservedAt(s, status, errors);
+  validateStatusInvariants(
+    s.skills,
+    s.failedSkillKeys,
+    status,
+    errors
+  );
+  const skillKeys = validateSnapshotRecords(
+    s.skills,
+    sourceType,
+    errors
+  );
+  validateDisjointKeys(s.failedSkillKeys, skillKeys, errors);
+  if (s.skills.length > MAX_SNAPSHOT_RECORDS) {
+    errors.push(
+      `skills: count ${s.skills.length} exceeds maximum ${MAX_SNAPSHOT_RECORDS}`
+    );
+  }
+  return { valid: errors.length === 0, errors };
+}
+function utf8ByteLength(str) {
+  if (typeof TextEncoder !== "undefined") {
+    return new TextEncoder().encode(str).byteLength;
+  }
+  return Buffer.byteLength(str, "utf8");
+}
+function validateSnapshotSize(snapshot) {
+  const errors = [];
+  const serialized = JSON.stringify(snapshot);
+  const byteLength = utf8ByteLength(serialized);
+  if (byteLength > MAX_SNAPSHOT_BYTES) {
+    errors.push(
+      `snapshot serialized size ${byteLength} bytes exceeds maximum ${MAX_SNAPSHOT_BYTES} bytes`
+    );
+  }
+  return { valid: errors.length === 0, errors };
+}
+function isOciSkillRecord(record, sourceType) {
+  if (sourceType !== "oci") {
+    return false;
+  }
+  if (!("extensions" in record) || record.extensions === void 0) {
+    return true;
+  }
+  const ext = record.extensions;
+  return ext !== void 0 && !("npx" in ext);
+}
+function isNpxSkillRecord(record, sourceType) {
+  if (sourceType !== "npx") {
+    return false;
+  }
+  if (!("extensions" in record) || record.extensions === void 0) {
+    return true;
+  }
+  const ext = record.extensions;
+  return ext !== void 0 && !("oci" in ext);
+}
+
+exports.MAX_SNAPSHOT_BYTES = MAX_SNAPSHOT_BYTES;
+exports.MAX_SNAPSHOT_RECORDS = MAX_SNAPSHOT_RECORDS;
+exports.SUPPORTED_SCHEMA_VERSION = SUPPORTED_SCHEMA_VERSION;
+exports.isNpxSkillRecord = isNpxSkillRecord;
+exports.isOciSkillRecord = isOciSkillRecord;
+exports.isValidDigest = isValidDigest;
+exports.isValidUtcTimestamp = isValidUtcTimestamp;
+exports.validateSnapshot = validateSnapshot;
+exports.validateSnapshotSize = validateSnapshotSize;
+//# sourceMappingURL=validation.cjs.js.map

package/dist/validation.cjs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.cjs.js","sources":["../src/validation.ts"],"sourcesContent":["/*\n * Copyright Red Hat, Inc.\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *     http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  NpxSkillRecord,\n  OciSkillRecord,\n  SkillAuthor,\n  SkillRecord,\n  SkillSnapshot,\n  SkillSourceType,\n  SnapshotStatus,\n} from './types';\n\n/**\n * Maximum number of records in a single snapshot (design D2).\n *\n * @public\n */\nexport const MAX_SNAPSHOT_RECORDS = 1_000;\n\n/**\n * Maximum serialized snapshot size in bytes (design D2: 5 MiB).\n *\n * @public\n */\nexport const MAX_SNAPSHOT_BYTES = 5 * 1024 * 1024;\n\n/**\n * Supported schema version.\n *\n * @public\n */\nexport const SUPPORTED_SCHEMA_VERSION = '1';\n\n/** Regex for valid SHA-256 digest: `sha256:` followed by 64 lowercase hex. */\nconst SHA256_DIGEST_RE = /^sha256:[0-9a-f]{64}$/;\n\n/** Valid source types. */\nconst VALID_SOURCE_TYPES: ReadonlySet<string> = new Set<SkillSourceType>([\n  'oci',\n  'npx',\n]);\n\n/** Valid snapshot statuses. */\nconst VALID_STATUSES: ReadonlySet<string> = new Set<SnapshotStatus>([\n  'loading',\n  'ready',\n  'partial',\n  'failed',\n]);\n\n/** Allowed OCI extension keys. */\nconst ALLOWED_OCI_EXTENSION_KEYS: ReadonlySet<string> = new Set([\n  'namespace',\n  'prompt',\n]);\n\n/** Allowed npx extension keys. */\nconst ALLOWED_NPX_EXTENSION_KEYS: ReadonlySet<string> = new Set(['type']);\n\n/**\n * Result of a validation operation.\n *\n * @public\n */\nexport interface ValidationResult {\n  /** Whether the validated input passed all checks. */\n  valid: boolean;\n  /** Human-readable error messages for each failed check. */\n  errors: string[];\n}\n\n/**\n * Returns true when the value is a non-empty string after trimming.\n */\nfunction isNonEmptyString(value: unknown): value is string {\n  return typeof value === 'string' && value.trim().length > 0;\n}\n\n/**\n * Validates a SHA-256 digest string.\n *\n * @public\n */\nexport function isValidDigest(digest: string): boolean {\n  return SHA256_DIGEST_RE.test(digest);\n}\n\n/**\n * Validates an ISO 8601 UTC date string. Accepts strings ending in `Z`\n * or `+00:00` that parse to a valid Date.\n *\n * @public\n */\nexport function isValidUtcTimestamp(value: string): boolean {\n  if (!value.endsWith('Z') && !value.endsWith('+00:00')) {\n    return false;\n  }\n  const d = new Date(value);\n  return !Number.isNaN(d.getTime());\n}\n\n/**\n * Validates a single SkillAuthor entry.\n */\nfunction validateAuthor(\n  author: unknown,\n  path: string,\n  errors: string[],\n): author is SkillAuthor {\n  if (typeof author !== 'object' || author === null) {\n    errors.push(`${path}: must be an object`);\n    return false;\n  }\n  const a = author as Record<string, unknown>;\n  if (!isNonEmptyString(a.name)) {\n    errors.push(`${path}.name: must be a non-empty string`);\n    return false;\n  }\n  if (a.email !== undefined && typeof a.email !== 'string') {\n    errors.push(`${path}.email: must be a string when present`);\n    return false;\n  }\n  // Reject unknown keys on author\n  const validAuthorKeys = new Set(['name', 'email']);\n  for (const key of Object.keys(a)) {\n    if (!validAuthorKeys.has(key)) {\n      errors.push(`${path}: unknown key '${key}'`);\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Validates the required fields of a SkillRecord (key, name, sourceUri, digest).\n */\nfunction validateRequiredRecordFields(\n  r: Record<string, unknown>,\n  prefix: string,\n  errors: string[],\n): boolean {\n  if (!isNonEmptyString(r.key)) {\n    errors.push(`${prefix}.key: must be a non-empty string`);\n    return false;\n  }\n  if (!isNonEmptyString(r.name)) {\n    errors.push(`${prefix}.name: must be a non-empty string`);\n    return false;\n  }\n  if (!isNonEmptyString(r.sourceUri)) {\n    errors.push(`${prefix}.sourceUri: must be a non-empty string`);\n    return false;\n  }\n  if (!isNonEmptyString(r.digest)) {\n    errors.push(`${prefix}.digest: must be a non-empty string`);\n    return false;\n  }\n  if (!isValidDigest(r.digest as string)) {\n    errors.push(\n      `${prefix}.digest: must match sha256:<64 lowercase hex digits>`,\n    );\n    return false;\n  }\n  return true;\n}\n\n/**\n * Validates optional string fields, authors array, and tags array on a record.\n */\nfunction validateOptionalRecordFields(\n  r: Record<string, unknown>,\n  prefix: string,\n  errors: string[],\n): boolean {\n  const optionalStrings = [\n    'description',\n    'version',\n    'license',\n    'compatibility',\n    'owner',\n    'lifecycle',\n  ] as const;\n  for (const field of optionalStrings) {\n    if (r[field] !== undefined && typeof r[field] !== 'string') {\n      errors.push(`${prefix}.${field}: must be a string when present`);\n      return false;\n    }\n  }\n\n  if (!validateAuthorsField(r, prefix, errors)) {\n    return false;\n  }\n\n  return validateTagsField(r, prefix, errors);\n}\n\n/**\n * Validates the optional `authors` array field on a record.\n */\nfunction validateAuthorsField(\n  r: Record<string, unknown>,\n  prefix: string,\n  errors: string[],\n): boolean {\n  if (r.authors === undefined) {\n    return true;\n  }\n  if (!Array.isArray(r.authors)) {\n    errors.push(`${prefix}.authors: must be an array when present`);\n    return false;\n  }\n  let allValid = true;\n  for (let i = 0; i < r.authors.length; i++) {\n    if (!validateAuthor(r.authors[i], `${prefix}.authors[${i}]`, errors)) {\n      allValid = false;\n    }\n  }\n  return allValid;\n}\n\n/**\n * Validates the optional `tags` array field on a record.\n */\nfunction validateTagsField(\n  r: Record<string, unknown>,\n  prefix: string,\n  errors: string[],\n): boolean {\n  if (r.tags === undefined) {\n    return true;\n  }\n  if (!Array.isArray(r.tags)) {\n    errors.push(`${prefix}.tags: must be an array when present`);\n    return false;\n  }\n  for (let i = 0; i < r.tags.length; i++) {\n    if (typeof r.tags[i] !== 'string') {\n      errors.push(`${prefix}.tags[${i}]: must be a string`);\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Validates a base SkillRecord (common fields).\n */\nfunction validateBaseRecord(\n  record: unknown,\n  index: number,\n  errors: string[],\n): record is SkillRecord {\n  const prefix = `skills[${index}]`;\n  if (typeof record !== 'object' || record === null) {\n    errors.push(`${prefix}: must be an object`);\n    return false;\n  }\n  const r = record as Record<string, unknown>;\n\n  if (!validateRequiredRecordFields(r, prefix, errors)) {\n    return false;\n  }\n\n  return validateOptionalRecordFields(r, prefix, errors);\n}\n\n/**\n * Validates keys within the OCI extension container.\n */\nfunction validateOciContainerKeys(\n  oci: Record<string, unknown>,\n  prefix: string,\n  errors: string[],\n): boolean {\n  for (const key of Object.keys(oci)) {\n    if (!ALLOWED_OCI_EXTENSION_KEYS.has(key)) {\n      errors.push(`${prefix}.extensions.oci: unknown key '${key}'`);\n      return false;\n    }\n    if (oci[key] !== undefined && typeof oci[key] !== 'string') {\n      errors.push(\n        `${prefix}.extensions.oci.${key}: must be a string when present`,\n      );\n      return false;\n    }\n  }\n  return true;\n}\n\n/**\n * Validates OCI-specific extension fields. Rejects unknown extension\n * containers and unknown keys within the `oci` container.\n */\nfunction validateOciExtensions(\n  record: Record<string, unknown>,\n  index: number,\n  errors: string[],\n): boolean {\n  const prefix = `skills[${index}]`;\n  if (record.extensions === undefined) {\n    return true;\n  }\n  if (typeof record.extensions !== 'object' || record.extensions === null) {\n    errors.push(`${prefix}.extensions: must be an object when present`);\n    return false;\n  }\n  const ext = record.extensions as Record<string, unknown>;\n\n  // Only 'oci' container is allowed for OCI records\n  for (const key of Object.keys(ext)) {\n    if (key !== 'oci') {\n      errors.push(\n        `${prefix}.extensions: unknown container '${key}'; only 'oci' is allowed for OCI source`,\n      );\n      return false;\n    }\n  }\n\n  if (ext.oci === undefined) {\n    return true;\n  }\n  if (typeof ext.oci !== 'object' || ext.oci === null) {\n    errors.push(`${prefix}.extensions.oci: must be an object when present`);\n    return false;\n  }\n  return validateOciContainerKeys(\n    ext.oci as Record<string, unknown>,\n    prefix,\n    errors,\n  );\n}\n\n/**\n * Validates keys within the npx extension container.\n */\nfunction validateNpxContainerKeys(\n  npx: Record<string, unknown>,\n  prefix: string,\n  errors: string[],\n): boolean {\n  for (const key of Object.keys(npx)) {\n    if (!ALLOWED_NPX_EXTENSION_KEYS.has(key)) {\n      errors.push(`${prefix}.extensions.npx: unknown key '${key}'`);\n      return false;\n    }\n  }\n  if (npx.type !== undefined && npx.type !== 'skill-md') {\n    errors.push(\n      `${prefix}.extensions.npx.type: must be 'skill-md' when present`,\n    );\n    return false;\n  }\n  return true;\n}\n\n/**\n * Validates npx-specific extension fields. Rejects unknown extension\n * containers and unknown keys within the `npx` container.\n */\nfunction validateNpxExtensions(\n  record: Record<string, unknown>,\n  index: number,\n  errors: string[],\n): boolean {\n  const prefix = `skills[${index}]`;\n  if (record.extensions === undefined) {\n    return true;\n  }\n  if (typeof record.extensions !== 'object' || record.extensions === null) {\n    errors.push(`${prefix}.extensions: must be an object when present`);\n    return false;\n  }\n  const ext = record.extensions as Record<string, unknown>;\n\n  // Only 'npx' container is allowed for npx records\n  for (const key of Object.keys(ext)) {\n    if (key !== 'npx') {\n      errors.push(\n        `${prefix}.extensions: unknown container '${key}'; only 'npx' is allowed for npx source`,\n      );\n      return false;\n    }\n  }\n\n  if (ext.npx === undefined) {\n    return true;\n  }\n  if (typeof ext.npx !== 'object' || ext.npx === null) {\n    errors.push(`${prefix}.extensions.npx: must be an object when present`);\n    return false;\n  }\n  return validateNpxContainerKeys(\n    ext.npx as Record<string, unknown>,\n    prefix,\n    errors,\n  );\n}\n\n/**\n * Validates source-discriminated records: OCI snapshots accept only\n * OCI extension containers; npx snapshots accept only npx extension\n * containers.\n */\nfunction validateRecordExtensions(\n  record: Record<string, unknown>,\n  index: number,\n  sourceType: SkillSourceType,\n  errors: string[],\n): boolean {\n  if (sourceType === 'oci') {\n    return validateOciExtensions(record, index, errors);\n  }\n  return validateNpxExtensions(record, index, errors);\n}\n\n/**\n * Validates the structural shape of a snapshot: schemaVersion, source,\n * status, and the presence of skills and failedSkillKeys arrays.\n *\n * Returns the parsed sourceType and status on success, or null on failure\n * (with errors pushed to the provided array).\n */\nfunction validateSnapshotShape(\n  s: Record<string, unknown>,\n  errors: string[],\n): { sourceType: SkillSourceType; status: SnapshotStatus } | null {\n  // Schema version\n  if (s.schemaVersion !== SUPPORTED_SCHEMA_VERSION) {\n    errors.push(\n      `schemaVersion: must be '${SUPPORTED_SCHEMA_VERSION}', got '${String(\n        s.schemaVersion,\n      )}'`,\n    );\n    return null;\n  }\n\n  // Source\n  if (typeof s.source !== 'object' || s.source === null) {\n    errors.push('source: must be an object');\n    return null;\n  }\n  const source = s.source as Record<string, unknown>;\n  if (!isNonEmptyString(source.id)) {\n    errors.push('source.id: must be a non-empty string');\n  }\n  if (!VALID_SOURCE_TYPES.has(source.type as string)) {\n    errors.push(\n      `source.type: must be one of 'oci', 'npx', got '${String(source.type)}'`,\n    );\n  }\n\n  // Early return if source is invalid — can't validate records\n  if (errors.length > 0) {\n    return null;\n  }\n  const sourceType = source.type as SkillSourceType;\n\n  // Status\n  if (!VALID_STATUSES.has(s.status as string)) {\n    errors.push(\n      `status: must be one of 'loading', 'ready', 'partial', 'failed', got '${String(\n        s.status,\n      )}'`,\n    );\n    return null;\n  }\n  const status = s.status as SnapshotStatus;\n\n  // Arrays must be present\n  if (!Array.isArray(s.skills)) {\n    errors.push('skills: must be an array');\n    return null;\n  }\n  if (!Array.isArray(s.failedSkillKeys)) {\n    errors.push('failedSkillKeys: must be an array');\n    return null;\n  }\n\n  return { sourceType, status };\n}\n\n/**\n * Validates the `observedAt` field based on the snapshot status.\n */\nfunction validateObservedAt(\n  s: Record<string, unknown>,\n  status: SnapshotStatus,\n  errors: string[],\n): void {\n  if (status === 'loading') {\n    if (s.observedAt !== null) {\n      errors.push('observedAt: must be null for loading status');\n    }\n  } else if (typeof s.observedAt !== 'string') {\n    errors.push(\n      'observedAt: must be a UTC timestamp string for completed status',\n    );\n  } else if (!isValidUtcTimestamp(s.observedAt)) {\n    errors.push('observedAt: must be a valid UTC ISO 8601 timestamp');\n  }\n}\n\n/**\n * Validates status invariants per design D6.\n */\nfunction validateStatusInvariants(\n  skills: unknown[],\n  failedSkillKeys: unknown[],\n  status: SnapshotStatus,\n  errors: string[],\n): void {\n  if (status === 'loading') {\n    if (skills.length > 0) {\n      errors.push('skills: must be empty for loading status');\n    }\n    if (failedSkillKeys.length > 0) {\n      errors.push('failedSkillKeys: must be empty for loading status');\n    }\n  }\n  if (status === 'ready') {\n    if (failedSkillKeys.length > 0) {\n      errors.push('failedSkillKeys: must be empty for ready status');\n    }\n  }\n  if (status === 'failed') {\n    if (skills.length > 0) {\n      errors.push('skills: must be empty for failed status');\n    }\n  }\n}\n\n/**\n * Validates individual records and collects unique skill keys.\n */\nfunction validateSnapshotRecords(\n  skills: unknown[],\n  sourceType: SkillSourceType,\n  errors: string[],\n): Set<string> {\n  const skillKeys = new Set<string>();\n  for (let i = 0; i < skills.length; i++) {\n    const record = skills[i];\n    if (validateBaseRecord(record, i, errors)) {\n      const r = record as SkillRecord;\n      if (skillKeys.has(r.key)) {\n        errors.push(`skills[${i}].key: duplicate key '${r.key}'`);\n      }\n      skillKeys.add(r.key);\n    }\n    if (typeof record === 'object' && record !== null) {\n      validateRecordExtensions(\n        record as Record<string, unknown>,\n        i,\n        sourceType,\n        errors,\n      );\n    }\n  }\n  return skillKeys;\n}\n\n/**\n * Validates failedSkillKeys entries and checks for disjointness\n * with successful skill keys.\n */\nfunction validateDisjointKeys(\n  failedSkillKeys: unknown[],\n  skillKeys: Set<string>,\n  errors: string[],\n): void {\n  for (let i = 0; i < failedSkillKeys.length; i++) {\n    if (!isNonEmptyString(failedSkillKeys[i])) {\n      errors.push(`failedSkillKeys[${i}]: must be a non-empty string`);\n    }\n  }\n\n  const failedKeys = new Set<string>();\n  for (const fk of failedSkillKeys) {\n    if (typeof fk === 'string') {\n      if (failedKeys.has(fk)) {\n        errors.push(`failedSkillKeys: duplicate key '${fk}'`);\n      }\n      failedKeys.add(fk);\n      if (skillKeys.has(fk)) {\n        errors.push(`failedSkillKeys: key '${fk}' overlaps with skills`);\n      }\n    }\n  }\n}\n\n/**\n * Validates a complete v1 SkillSnapshot.\n *\n * Checks:\n * - Schema version is supported\n * - Source identity is valid\n * - Status is valid\n * - Status invariants (loading/ready/partial/failed) per design D6\n * - Timestamp validity\n * - Record validation including source-discriminated extensions\n * - Unique record keys\n * - Disjoint successful/failed key sets\n * - Count and size bounds\n *\n * Does NOT check deterministic ordering — that is the producer's\n * responsibility enforced by {@link boundSnapshot}.\n *\n * @public\n */\nexport function validateSnapshot(snapshot: unknown): ValidationResult {\n  const errors: string[] = [];\n\n  if (typeof snapshot !== 'object' || snapshot === null) {\n    return { valid: false, errors: ['snapshot: must be an object'] };\n  }\n  const s = snapshot as Record<string, unknown>;\n\n  const shape = validateSnapshotShape(s, errors);\n  if (shape === null) {\n    return { valid: false, errors };\n  }\n  const { sourceType, status } = shape;\n\n  validateObservedAt(s, status, errors);\n  validateStatusInvariants(\n    s.skills as unknown[],\n    s.failedSkillKeys as unknown[],\n    status,\n    errors,\n  );\n\n  const skillKeys = validateSnapshotRecords(\n    s.skills as unknown[],\n    sourceType,\n    errors,\n  );\n\n  validateDisjointKeys(s.failedSkillKeys as unknown[], skillKeys, errors);\n\n  if ((s.skills as unknown[]).length > MAX_SNAPSHOT_RECORDS) {\n    errors.push(\n      `skills: count ${\n        (s.skills as unknown[]).length\n      } exceeds maximum ${MAX_SNAPSHOT_RECORDS}`,\n    );\n  }\n\n  return { valid: errors.length === 0, errors };\n}\n\n/**\n * Returns the UTF-8 byte length of a string in a portable way.\n *\n * Uses `TextEncoder` when available (browsers, modern Node.js) and\n * falls back to `Buffer.byteLength` in Node-only environments (e.g.,\n * older Jest jsdom setups where `TextEncoder` is not global).\n */\nfunction utf8ByteLength(str: string): number {\n  if (typeof TextEncoder !== 'undefined') {\n    return new TextEncoder().encode(str).byteLength;\n  }\n  // Node.js fallback for environments where TextEncoder is not global\n  return Buffer.byteLength(str, 'utf8');\n}\n\n/**\n * Validates the serialized byte size of a snapshot against the 5 MiB\n * limit. Call after `validateSnapshot` succeeds.\n *\n * @public\n */\nexport function validateSnapshotSize(\n  snapshot: SkillSnapshot,\n): ValidationResult {\n  const errors: string[] = [];\n  const serialized = JSON.stringify(snapshot);\n  const byteLength = utf8ByteLength(serialized);\n  if (byteLength > MAX_SNAPSHOT_BYTES) {\n    errors.push(\n      `snapshot serialized size ${byteLength} bytes exceeds maximum ${MAX_SNAPSHOT_BYTES} bytes`,\n    );\n  }\n  return { valid: errors.length === 0, errors };\n}\n\n/**\n * Type guard for OciSkillRecord.\n *\n * Requires the snapshot's `source.type` to disambiguate records that\n * have no `extensions` field — a bare record is only an OCI record\n * when the enclosing snapshot source is `'oci'`.\n *\n * @public\n */\nexport function isOciSkillRecord(\n  record: SkillRecord,\n  sourceType: SkillSourceType,\n): record is OciSkillRecord {\n  if (sourceType !== 'oci') {\n    return false;\n  }\n  if (!('extensions' in record) || record.extensions === undefined) {\n    return true; // No extensions is valid for OCI\n  }\n  const ext = (record as OciSkillRecord).extensions;\n  return ext !== undefined && !('npx' in ext);\n}\n\n/**\n * Type guard for NpxSkillRecord.\n *\n * Requires the snapshot's `source.type` to disambiguate records that\n * have no `extensions` field — a bare record is only an npx record\n * when the enclosing snapshot source is `'npx'`.\n *\n * @public\n */\nexport function isNpxSkillRecord(\n  record: SkillRecord,\n  sourceType: SkillSourceType,\n): record is NpxSkillRecord {\n  if (sourceType !== 'npx') {\n    return false;\n  }\n  if (!('extensions' in record) || record.extensions === undefined) {\n    return true; // No extensions is valid for npx\n  }\n  const ext = (record as NpxSkillRecord).extensions;\n  return ext !== undefined && !('oci' in ext);\n}\n"],"names":[],"mappings":";;AA+BO,MAAM,oBAAA,GAAuB;AAO7B,MAAM,kBAAA,GAAqB,IAAI,IAAA,GAAO;AAOtC,MAAM,wBAAA,GAA2B;AAGxC,MAAM,gBAAA,GAAmB,uBAAA;AAGzB,MAAM,kBAAA,uBAA8C,GAAA,CAAqB;AAAA,EACvE,KAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,MAAM,cAAA,uBAA0C,GAAA,CAAoB;AAAA,EAClE,SAAA;AAAA,EACA,OAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,MAAM,0BAAA,uBAAsD,GAAA,CAAI;AAAA,EAC9D,WAAA;AAAA,EACA;AACF,CAAC,CAAA;AAGD,MAAM,0BAAA,mBAAkD,IAAI,GAAA,CAAI,CAAC,MAAM,CAAC,CAAA;AAiBxE,SAAS,iBAAiB,KAAA,EAAiC;AACzD,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,IAAA,GAAO,MAAA,GAAS,CAAA;AAC5D;AAOO,SAAS,cAAc,MAAA,EAAyB;AACrD,EAAA,OAAO,gBAAA,CAAiB,KAAK,MAAM,CAAA;AACrC;AAQO,SAAS,oBAAoB,KAAA,EAAwB;AAC1D,EAAA,IAAI,CAAC,MAAM,QAAA,CAAS,GAAG,KAAK,CAAC,KAAA,CAAM,QAAA,CAAS,QAAQ,CAAA,EAAG;AACrD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,CAAA,GAAI,IAAI,IAAA,CAAK,KAAK,CAAA;AACxB,EAAA,OAAO,CAAC,MAAA,CAAO,KAAA,CAAM,CAAA,CAAE,SAAS,CAAA;AAClC;AAKA,SAAS,cAAA,CACP,MAAA,EACA,IAAA,EACA,MAAA,EACuB;AACvB,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,EAAM;AACjD,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAI,CAAA,mBAAA,CAAqB,CAAA;AACxC,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,CAAA,GAAI,MAAA;AACV,EAAA,IAAI,CAAC,gBAAA,CAAiB,CAAA,CAAE,IAAI,CAAA,EAAG;AAC7B,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAI,CAAA,iCAAA,CAAmC,CAAA;AACtD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,EAAE,KAAA,KAAU,MAAA,IAAa,OAAO,CAAA,CAAE,UAAU,QAAA,EAAU;AACxD,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAI,CAAA,qCAAA,CAAuC,CAAA;AAC1D,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,kCAAkB,IAAI,GAAA,CAAI,CAAC,MAAA,EAAQ,OAAO,CAAC,CAAA;AACjD,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,EAAG;AAChC,IAAA,IAAI,CAAC,eAAA,CAAgB,GAAA,CAAI,GAAG,CAAA,EAAG;AAC7B,MAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAI,CAAA,eAAA,EAAkB,GAAG,CAAA,CAAA,CAAG,CAAA;AAC3C,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,SAAS,4BAAA,CACP,CAAA,EACA,MAAA,EACA,MAAA,EACS;AACT,EAAA,IAAI,CAAC,gBAAA,CAAiB,CAAA,CAAE,GAAG,CAAA,EAAG;AAC5B,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,gCAAA,CAAkC,CAAA;AACvD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,gBAAA,CAAiB,CAAA,CAAE,IAAI,CAAA,EAAG;AAC7B,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,iCAAA,CAAmC,CAAA;AACxD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,gBAAA,CAAiB,CAAA,CAAE,SAAS,CAAA,EAAG;AAClC,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,sCAAA,CAAwC,CAAA;AAC7D,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,gBAAA,CAAiB,CAAA,CAAE,MAAM,CAAA,EAAG;AAC/B,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,mCAAA,CAAqC,CAAA;AAC1D,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,aAAA,CAAc,CAAA,CAAE,MAAgB,CAAA,EAAG;AACtC,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,GAAG,MAAM,CAAA,oDAAA;AAAA,KACX;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAKA,SAAS,4BAAA,CACP,CAAA,EACA,MAAA,EACA,MAAA,EACS;AACT,EAAA,MAAM,eAAA,GAAkB;AAAA,IACtB,aAAA;AAAA,IACA,SAAA;AAAA,IACA,SAAA;AAAA,IACA,eAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,KAAA,MAAW,SAAS,eAAA,EAAiB;AACnC,IAAA,IAAI,CAAA,CAAE,KAAK,CAAA,KAAM,MAAA,IAAa,OAAO,CAAA,CAAE,KAAK,MAAM,QAAA,EAAU;AAC1D,MAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,KAAK,CAAA,+BAAA,CAAiC,CAAA;AAC/D,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,IAAI,CAAC,oBAAA,CAAqB,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA,EAAG;AAC5C,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO,iBAAA,CAAkB,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA;AAC5C;AAKA,SAAS,oBAAA,CACP,CAAA,EACA,MAAA,EACA,MAAA,EACS;AACT,EAAA,IAAI,CAAA,CAAE,YAAY,MAAA,EAAW;AAC3B,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,OAAO,CAAA,EAAG;AAC7B,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,uCAAA,CAAyC,CAAA;AAC9D,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,QAAA,GAAW,IAAA;AACf,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,OAAA,CAAQ,QAAQ,CAAA,EAAA,EAAK;AACzC,IAAA,IAAI,CAAC,cAAA,CAAe,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAA,EAAG,CAAA,EAAG,MAAM,CAAA,SAAA,EAAY,CAAC,CAAA,CAAA,CAAA,EAAK,MAAM,CAAA,EAAG;AACpE,MAAA,QAAA,GAAW,KAAA;AAAA,IACb;AAAA,EACF;AACA,EAAA,OAAO,QAAA;AACT;AAKA,SAAS,iBAAA,CACP,CAAA,EACA,MAAA,EACA,MAAA,EACS;AACT,EAAA,IAAI,CAAA,CAAE,SAAS,MAAA,EAAW;AACxB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,IAAI,CAAA,EAAG;AAC1B,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,oCAAA,CAAsC,CAAA;AAC3D,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,KAAA,IAAS,IAAI,CAAA,EAAG,CAAA,GAAI,CAAA,CAAE,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACtC,IAAA,IAAI,OAAO,CAAA,CAAE,IAAA,CAAK,CAAC,MAAM,QAAA,EAAU;AACjC,MAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,MAAA,EAAS,CAAC,CAAA,mBAAA,CAAqB,CAAA;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAKA,SAAS,kBAAA,CACP,MAAA,EACA,KAAA,EACA,MAAA,EACuB;AACvB,EAAA,MAAM,MAAA,GAAS,UAAU,KAAK,CAAA,CAAA,CAAA;AAC9B,EAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,EAAM;AACjD,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,mBAAA,CAAqB,CAAA;AAC1C,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,CAAA,GAAI,MAAA;AAEV,EAAA,IAAI,CAAC,4BAAA,CAA6B,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA,EAAG;AACpD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,OAAO,4BAAA,CAA6B,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA;AACvD;AAKA,SAAS,wBAAA,CACP,GAAA,EACA,MAAA,EACA,MAAA,EACS;AACT,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,IAAI,CAAC,0BAAA,CAA2B,GAAA,CAAI,GAAG,CAAA,EAAG;AACxC,MAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,8BAAA,EAAiC,GAAG,CAAA,CAAA,CAAG,CAAA;AAC5D,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,IAAI,GAAA,CAAI,GAAG,CAAA,KAAM,MAAA,IAAa,OAAO,GAAA,CAAI,GAAG,MAAM,QAAA,EAAU;AAC1D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,EAAG,MAAM,CAAA,gBAAA,EAAmB,GAAG,CAAA,+BAAA;AAAA,OACjC;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,OAAO,IAAA;AACT;AAMA,SAAS,qBAAA,CACP,MAAA,EACA,KAAA,EACA,MAAA,EACS;AACT,EAAA,MAAM,MAAA,GAAS,UAAU,KAAK,CAAA,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAA,CAAO,eAAe,MAAA,EAAW;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,UAAA,KAAe,QAAA,IAAY,MAAA,CAAO,eAAe,IAAA,EAAM;AACvE,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,2CAAA,CAA6C,CAAA;AAClE,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,UAAA;AAGnB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,EAAG,MAAM,CAAA,gCAAA,EAAmC,GAAG,CAAA,uCAAA;AAAA,OACjD;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,IAAI,GAAA,CAAI,QAAQ,MAAA,EAAW;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,GAAA,CAAI,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,QAAQ,IAAA,EAAM;AACnD,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,+CAAA,CAAiD,CAAA;AACtE,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,wBAAA;AAAA,IACL,GAAA,CAAI,GAAA;AAAA,IACJ,MAAA;AAAA,IACA;AAAA,GACF;AACF;AAKA,SAAS,wBAAA,CACP,GAAA,EACA,MAAA,EACA,MAAA,EACS;AACT,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,IAAI,CAAC,0BAAA,CAA2B,GAAA,CAAI,GAAG,CAAA,EAAG;AACxC,MAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,8BAAA,EAAiC,GAAG,CAAA,CAAA,CAAG,CAAA;AAC5D,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AACA,EAAA,IAAI,GAAA,CAAI,IAAA,KAAS,MAAA,IAAa,GAAA,CAAI,SAAS,UAAA,EAAY;AACrD,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,GAAG,MAAM,CAAA,qDAAA;AAAA,KACX;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAMA,SAAS,qBAAA,CACP,MAAA,EACA,KAAA,EACA,MAAA,EACS;AACT,EAAA,MAAM,MAAA,GAAS,UAAU,KAAK,CAAA,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAA,CAAO,eAAe,MAAA,EAAW;AACnC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,MAAA,CAAO,UAAA,KAAe,QAAA,IAAY,MAAA,CAAO,eAAe,IAAA,EAAM;AACvE,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,2CAAA,CAA6C,CAAA;AAClE,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAM,MAAA,CAAO,UAAA;AAGnB,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,GAAG,CAAA,EAAG;AAClC,IAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,EAAG,MAAM,CAAA,gCAAA,EAAmC,GAAG,CAAA,uCAAA;AAAA,OACjD;AACA,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAEA,EAAA,IAAI,GAAA,CAAI,QAAQ,MAAA,EAAW;AACzB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,OAAO,GAAA,CAAI,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,QAAQ,IAAA,EAAM;AACnD,IAAA,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,MAAM,CAAA,+CAAA,CAAiD,CAAA;AACtE,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,wBAAA;AAAA,IACL,GAAA,CAAI,GAAA;AAAA,IACJ,MAAA;AAAA,IACA;AAAA,GACF;AACF;AAOA,SAAS,wBAAA,CACP,MAAA,EACA,KAAA,EACA,UAAA,EACA,MAAA,EACS;AACT,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,OAAO,qBAAA,CAAsB,MAAA,EAAQ,KAAA,EAAO,MAAM,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,qBAAA,CAAsB,MAAA,EAAQ,KAAA,EAAO,MAAM,CAAA;AACpD;AASA,SAAS,qBAAA,CACP,GACA,MAAA,EACgE;AAEhE,EAAA,IAAI,CAAA,CAAE,kBAAkB,wBAAA,EAA0B;AAChD,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,CAAA,wBAAA,EAA2B,wBAAwB,CAAA,QAAA,EAAW,MAAA;AAAA,QAC5D,CAAA,CAAE;AAAA,OACH,CAAA,CAAA;AAAA,KACH;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AAGA,EAAA,IAAI,OAAO,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,WAAW,IAAA,EAAM;AACrD,IAAA,MAAA,CAAO,KAAK,2BAA2B,CAAA;AACvC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AACjB,EAAA,IAAI,CAAC,gBAAA,CAAiB,MAAA,CAAO,EAAE,CAAA,EAAG;AAChC,IAAA,MAAA,CAAO,KAAK,uCAAuC,CAAA;AAAA,EACrD;AACA,EAAA,IAAI,CAAC,kBAAA,CAAmB,GAAA,CAAI,MAAA,CAAO,IAAc,CAAA,EAAG;AAClD,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,CAAA,+CAAA,EAAkD,MAAA,CAAO,MAAA,CAAO,IAAI,CAAC,CAAA,CAAA;AAAA,KACvE;AAAA,EACF;AAGA,EAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,aAAa,MAAA,CAAO,IAAA;AAG1B,EAAA,IAAI,CAAC,cAAA,CAAe,GAAA,CAAI,CAAA,CAAE,MAAgB,CAAA,EAAG;AAC3C,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,CAAA,qEAAA,EAAwE,MAAA;AAAA,QACtE,CAAA,CAAE;AAAA,OACH,CAAA,CAAA;AAAA,KACH;AACA,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,SAAS,CAAA,CAAE,MAAA;AAGjB,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,MAAM,CAAA,EAAG;AAC5B,IAAA,MAAA,CAAO,KAAK,0BAA0B,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,CAAA,CAAE,eAAe,CAAA,EAAG;AACrC,IAAA,MAAA,CAAO,KAAK,mCAAmC,CAAA;AAC/C,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO,EAAE,YAAY,MAAA,EAAO;AAC9B;AAKA,SAAS,kBAAA,CACP,CAAA,EACA,MAAA,EACA,MAAA,EACM;AACN,EAAA,IAAI,WAAW,SAAA,EAAW;AACxB,IAAA,IAAI,CAAA,CAAE,eAAe,IAAA,EAAM;AACzB,MAAA,MAAA,CAAO,KAAK,6CAA6C,CAAA;AAAA,IAC3D;AAAA,EACF,CAAA,MAAA,IAAW,OAAO,CAAA,CAAE,UAAA,KAAe,QAAA,EAAU;AAC3C,IAAA,MAAA,CAAO,IAAA;AAAA,MACL;AAAA,KACF;AAAA,EACF,CAAA,MAAA,IAAW,CAAC,mBAAA,CAAoB,CAAA,CAAE,UAAU,CAAA,EAAG;AAC7C,IAAA,MAAA,CAAO,KAAK,oDAAoD,CAAA;AAAA,EAClE;AACF;AAKA,SAAS,wBAAA,CACP,MAAA,EACA,eAAA,EACA,MAAA,EACA,MAAA,EACM;AACN,EAAA,IAAI,WAAW,SAAA,EAAW;AACxB,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,MAAA,CAAO,KAAK,0CAA0C,CAAA;AAAA,IACxD;AACA,IAAA,IAAI,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC9B,MAAA,MAAA,CAAO,KAAK,mDAAmD,CAAA;AAAA,IACjE;AAAA,EACF;AACA,EAAA,IAAI,WAAW,OAAA,EAAS;AACtB,IAAA,IAAI,eAAA,CAAgB,SAAS,CAAA,EAAG;AAC9B,MAAA,MAAA,CAAO,KAAK,iDAAiD,CAAA;AAAA,IAC/D;AAAA,EACF;AACA,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,IAAI,MAAA,CAAO,SAAS,CAAA,EAAG;AACrB,MAAA,MAAA,CAAO,KAAK,yCAAyC,CAAA;AAAA,IACvD;AAAA,EACF;AACF;AAKA,SAAS,uBAAA,CACP,MAAA,EACA,UAAA,EACA,MAAA,EACa;AACb,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAY;AAClC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,MAAA,CAAO,QAAQ,CAAA,EAAA,EAAK;AACtC,IAAA,MAAM,MAAA,GAAS,OAAO,CAAC,CAAA;AACvB,IAAA,IAAI,kBAAA,CAAmB,MAAA,EAAQ,CAAA,EAAG,MAAM,CAAA,EAAG;AACzC,MAAA,MAAM,CAAA,GAAI,MAAA;AACV,MAAA,IAAI,SAAA,CAAU,GAAA,CAAI,CAAA,CAAE,GAAG,CAAA,EAAG;AACxB,QAAA,MAAA,CAAO,KAAK,CAAA,OAAA,EAAU,CAAC,CAAA,sBAAA,EAAyB,CAAA,CAAE,GAAG,CAAA,CAAA,CAAG,CAAA;AAAA,MAC1D;AACA,MAAA,SAAA,CAAU,GAAA,CAAI,EAAE,GAAG,CAAA;AAAA,IACrB;AACA,IAAA,IAAI,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,IAAA,EAAM;AACjD,MAAA,wBAAA;AAAA,QACE,MAAA;AAAA,QACA,CAAA;AAAA,QACA,UAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,SAAA;AACT;AAMA,SAAS,oBAAA,CACP,eAAA,EACA,SAAA,EACA,MAAA,EACM;AACN,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,eAAA,CAAgB,QAAQ,CAAA,EAAA,EAAK;AAC/C,IAAA,IAAI,CAAC,gBAAA,CAAiB,eAAA,CAAgB,CAAC,CAAC,CAAA,EAAG;AACzC,MAAA,MAAA,CAAO,IAAA,CAAK,CAAA,gBAAA,EAAmB,CAAC,CAAA,6BAAA,CAA+B,CAAA;AAAA,IACjE;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,uBAAiB,GAAA,EAAY;AACnC,EAAA,KAAA,MAAW,MAAM,eAAA,EAAiB;AAChC,IAAA,IAAI,OAAO,OAAO,QAAA,EAAU;AAC1B,MAAA,IAAI,UAAA,CAAW,GAAA,CAAI,EAAE,CAAA,EAAG;AACtB,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,gCAAA,EAAmC,EAAE,CAAA,CAAA,CAAG,CAAA;AAAA,MACtD;AACA,MAAA,UAAA,CAAW,IAAI,EAAE,CAAA;AACjB,MAAA,IAAI,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA,EAAG;AACrB,QAAA,MAAA,CAAO,IAAA,CAAK,CAAA,sBAAA,EAAyB,EAAE,CAAA,sBAAA,CAAwB,CAAA;AAAA,MACjE;AAAA,IACF;AAAA,EACF;AACF;AAqBO,SAAS,iBAAiB,QAAA,EAAqC;AACpE,EAAA,MAAM,SAAmB,EAAC;AAE1B,EAAA,IAAI,OAAO,QAAA,KAAa,QAAA,IAAY,QAAA,KAAa,IAAA,EAAM;AACrD,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,MAAA,EAAQ,CAAC,6BAA6B,CAAA,EAAE;AAAA,EACjE;AACA,EAAA,MAAM,CAAA,GAAI,QAAA;AAEV,EAAA,MAAM,KAAA,GAAQ,qBAAA,CAAsB,CAAA,EAAG,MAAM,CAAA;AAC7C,EAAA,IAAI,UAAU,IAAA,EAAM;AAClB,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,MAAA,EAAO;AAAA,EAChC;AACA,EAAA,MAAM,EAAE,UAAA,EAAY,MAAA,EAAO,GAAI,KAAA;AAE/B,EAAA,kBAAA,CAAmB,CAAA,EAAG,QAAQ,MAAM,CAAA;AACpC,EAAA,wBAAA;AAAA,IACE,CAAA,CAAE,MAAA;AAAA,IACF,CAAA,CAAE,eAAA;AAAA,IACF,MAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,MAAM,SAAA,GAAY,uBAAA;AAAA,IAChB,CAAA,CAAE,MAAA;AAAA,IACF,UAAA;AAAA,IACA;AAAA,GACF;AAEA,EAAA,oBAAA,CAAqB,CAAA,CAAE,eAAA,EAA8B,SAAA,EAAW,MAAM,CAAA;AAEtE,EAAA,IAAK,CAAA,CAAE,MAAA,CAAqB,MAAA,GAAS,oBAAA,EAAsB;AACzD,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,CAAA,cAAA,EACG,CAAA,CAAE,MAAA,CAAqB,MAC1B,oBAAoB,oBAAoB,CAAA;AAAA,KAC1C;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,KAAW,GAAG,MAAA,EAAO;AAC9C;AASA,SAAS,eAAe,GAAA,EAAqB;AAC3C,EAAA,IAAI,OAAO,gBAAgB,WAAA,EAAa;AACtC,IAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,GAAG,CAAA,CAAE,UAAA;AAAA,EACvC;AAEA,EAAA,OAAO,MAAA,CAAO,UAAA,CAAW,GAAA,EAAK,MAAM,CAAA;AACtC;AAQO,SAAS,qBACd,QAAA,EACkB;AAClB,EAAA,MAAM,SAAmB,EAAC;AAC1B,EAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA;AAC1C,EAAA,MAAM,UAAA,GAAa,eAAe,UAAU,CAAA;AAC5C,EAAA,IAAI,aAAa,kBAAA,EAAoB;AACnC,IAAA,MAAA,CAAO,IAAA;AAAA,MACL,CAAA,yBAAA,EAA4B,UAAU,CAAA,uBAAA,EAA0B,kBAAkB,CAAA,MAAA;AAAA,KACpF;AAAA,EACF;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,MAAA,CAAO,MAAA,KAAW,GAAG,MAAA,EAAO;AAC9C;AAWO,SAAS,gBAAA,CACd,QACA,UAAA,EAC0B;AAC1B,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,EAAE,YAAA,IAAgB,MAAA,CAAA,IAAW,MAAA,CAAO,eAAe,MAAA,EAAW;AAChE,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAO,MAAA,CAA0B,UAAA;AACvC,EAAA,OAAO,GAAA,KAAQ,MAAA,IAAa,EAAE,KAAA,IAAS,GAAA,CAAA;AACzC;AAWO,SAAS,gBAAA,CACd,QACA,UAAA,EAC0B;AAC1B,EAAA,IAAI,eAAe,KAAA,EAAO;AACxB,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,IAAI,EAAE,YAAA,IAAgB,MAAA,CAAA,IAAW,MAAA,CAAO,eAAe,MAAA,EAAW;AAChE,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,MAAM,MAAO,MAAA,CAA0B,UAAA;AACvC,EAAA,OAAO,GAAA,KAAQ,MAAA,IAAa,EAAE,KAAA,IAAS,GAAA,CAAA;AACzC;;;;;;;;;;;;"}