@relayflows/sdk 2.0.29 → 2.0.31

package/dist/hosted-base-snapshot.js

@@ -0,0 +1,278 @@
+import { constants } from 'node:fs';
+import { chmod, mkdir, mkdtemp, realpath, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { canonicalize } from './canonical.js';
+import { sha256 } from './bundle.js';
+import { closeDescriptor, closeDirectory, descriptorIsDirectory, descriptorIsFile, directoryEntryIsDirectory, directoryEntryIsFile, openDirectory, openDescriptor, readDescriptor, readDirectory, readDirectoryEntry, statDescriptor, } from './fs-descriptor.js';
+import { findHostedProject } from './hosted-project.js';
+import { appendIntrinsicArray } from './intrinsic-array.js';
+import { assertHostedPromiseSafety, frozenHostedPromiseValue, hostedPromiseValue, } from './hosted-promise-safety.js';
+import { PluginError } from './plugin-manifest.js';
+const EXCLUDED_DIRECTORIES = new Set(['.flows', '.git', 'node_modules']);
+const CHMOD = chmod;
+const MKDIR = mkdir;
+const MKDTEMP = mkdtemp;
+const REALPATH = realpath;
+const RM = rm;
+const WRITE_FILE = writeFile;
+const TMPDIR = tmpdir;
+const PATH_DIRNAME = dirname;
+const PATH_IS_ABSOLUTE = isAbsolute;
+const PATH_JOIN = join;
+const PATH_RELATIVE = relative;
+const PATH_RESOLVE = resolve;
+const PATH_SEPARATOR = sep;
+const PROCESS_PLATFORM = process.platform;
+const ARRAY_SORT = Function.prototype.call.bind(Array.prototype.sort);
+const OBJECT_CREATE = Object.create;
+const OBJECT_FREEZE = Object.freeze;
+const OBJECT_GET_OWN_PROPERTY_DESCRIPTOR = Object.getOwnPropertyDescriptor;
+const BIG_INT = BigInt;
+const BUFFER_ALLOC_UNSAFE = Buffer.allocUnsafe;
+const NUMBER = Number;
+const SET_HAS = Function.prototype.call.bind(Set.prototype.has);
+const STRING_LOCALE_COMPARE = Function.prototype.call.bind(String.prototype.localeCompare);
+const STRING_STARTS_WITH = Function.prototype.call.bind(String.prototype.startsWith);
+const MAX_ENTRIES = 10_000;
+const MAX_BYTES = 64 * 1024 * 1024;
+const MAX_DEPTH = 64;
+const READ_FLAGS = constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK;
+const EMPTY_HOSTED_BASE_HOOKS = OBJECT_FREEZE(OBJECT_CREATE(null));
+/**
+ * Materialize project source without importing tenant code. Project
+ * node_modules is never linked or read. Every admitted source byte is
+ * represented in liveDigest and copied to the private identity directory.
+ */
+export async function createHostedBaseSnapshot(flowPath, projectRootOverride) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    const origin = await REALPATH(PATH_RESOLVE(flowPath));
+    const discovered = projectRootOverride ?? findHostedProject(PATH_DIRNAME(origin)) ?? PATH_DIRNAME(origin);
+    const projectRoot = await REALPATH(discovered);
+    const flowRelative = PATH_RELATIVE(projectRoot, origin);
+    if (flowRelative === '' ||
+        PATH_IS_ABSOLUTE(flowRelative) ||
+        flowRelative === '..' ||
+        STRING_STARTS_WITH(flowRelative, `..${PATH_SEPARATOR}`)) {
+        throw invalid('Hosted base flow must be a file inside its project root.');
+    }
+    const liveSources = frozenHostedPromiseValue([OBJECT_FREEZE({ root: projectRoot, prefix: '' })]);
+    const files = await readAuthorityFiles(liveSources);
+    const liveDigest = sourceDigest(files);
+    const liveFlow = sourceFileAt(files, flowRelative);
+    if (liveFlow === undefined)
+        throw invalid('Hosted base flow is missing from its admitted source.');
+    const snapshotRoot = await MKDTEMP(PATH_JOIN(TMPDIR(), 'flows-hosted-base-'));
+    await CHMOD(snapshotRoot, 0o700);
+    try {
+        for (let index = 0; index < files.length; index += 1) {
+            const file = files[index];
+            const target = PATH_JOIN(snapshotRoot, file.path);
+            await MKDIR(PATH_DIRNAME(target), { recursive: true, mode: 0o700 });
+            await WRITE_FILE(target, file.bytes, { flag: 'wx', mode: 0o400 });
+        }
+        const snapshotFiles = await readSnapshotTree(snapshotRoot);
+        const snapshotDigest = sourceDigest(snapshotFiles);
+        if (snapshotDigest !== liveDigest) {
+            throw invalid('Hosted base private snapshot does not match its buffered source.');
+        }
+        const snapshotFlow = sourceFileAt(snapshotFiles, flowRelative);
+        if (snapshotFlow === undefined || snapshotFlow.sha256 !== liveFlow.sha256) {
+            throw invalid('Hosted base private snapshot does not contain its buffered flow source.');
+        }
+        return frozenHostedPromiseValue({
+            liveSources,
+            liveDigest,
+            snapshotRoot,
+            snapshotFlowPath: PATH_JOIN(snapshotRoot, flowRelative),
+            snapshotFlowSha256: snapshotFlow.sha256,
+        });
+    }
+    catch (error) {
+        await RM(snapshotRoot, { recursive: true, force: true });
+        throw error;
+    }
+}
+export async function hostedBaseSourceDigest(sources, hooks = EMPTY_HOSTED_BASE_HOOKS) {
+    assertHostedPromiseSafety('plugin_source_invalid');
+    return sourceDigest(await readAuthorityFiles(sources, hooks));
+}
+export async function removeHostedBaseSnapshot(snapshot) {
+    await RM(snapshot.snapshotRoot, { recursive: true, force: true });
+}
+async function readAuthorityFiles(sources, hooks = EMPTY_HOSTED_BASE_HOOKS) {
+    const budget = { entries: 0, bytes: 0 };
+    const files = [];
+    for (let sourceIndex = 0; sourceIndex < sources.length; sourceIndex += 1) {
+        const source = sources[sourceIndex];
+        const sourceFiles = await readTree(source.root, source.prefix, budget, hooks);
+        for (let fileIndex = 0; fileIndex < sourceFiles.length; fileIndex += 1) {
+            appendIntrinsicArray(files, sourceFiles[fileIndex]);
+        }
+    }
+    ARRAY_SORT(files, (left, right) => STRING_LOCALE_COMPARE(left.path, right.path));
+    return frozenHostedPromiseValue(files);
+}
+async function readSnapshotTree(root) {
+    const files = [];
+    const budget = { entries: 0, bytes: 0 };
+    async function visit(directory, prefix) {
+        const entries = await readDirectory(directory);
+        ARRAY_SORT(entries, (left, right) => STRING_LOCALE_COMPARE(left.name, right.name));
+        for (let index = 0; index < entries.length; index += 1) {
+            const entry = entries[index];
+            budget.entries += 1;
+            if (budget.entries > MAX_ENTRIES)
+                throw tooLarge();
+            const path = prefix === '' ? entry.name : PATH_JOIN(prefix, entry.name);
+            const absolute = PATH_JOIN(directory, entry.name);
+            if (directoryEntryIsDirectory(entry))
+                await visit(absolute, path);
+            else if (directoryEntryIsFile(entry)) {
+                const descriptor = await openDescriptor(absolute, READ_FLAGS);
+                try {
+                    const before = await statDescriptor(descriptor, { bigint: true });
+                    if (!descriptorIsFile(before) || before.size < 0n || before.size > BIG_INT(MAX_BYTES - budget.bytes))
+                        throw tooLarge();
+                    const expectedBytes = NUMBER(before.size);
+                    const bytes = await readBounded(descriptor, expectedBytes, path);
+                    const after = await statDescriptor(descriptor, { bigint: true });
+                    if (after.size !== before.size || after.mtimeNs !== before.mtimeNs || after.ctimeNs !== before.ctimeNs) {
+                        throw invalid(`Hosted base snapshot changed while reading "${path}".`);
+                    }
+                    budget.bytes += expectedBytes;
+                    appendIntrinsicArray(files, OBJECT_FREEZE({ path, bytes, sha256: sha256(bytes) }));
+                }
+                finally {
+                    await closeDescriptor(descriptor);
+                }
+            }
+            else
+                throw invalid(`Hosted base snapshot contains unsupported entry "${path}".`);
+        }
+    }
+    await visit(root, '');
+    ARRAY_SORT(files, (left, right) => STRING_LOCALE_COMPARE(left.path, right.path));
+    return frozenHostedPromiseValue(files);
+}
+async function readTree(root, prefix, budget, hooks) {
+    if (PROCESS_PLATFORM !== 'linux') {
+        throw invalid('Hosted base source snapshotting requires Linux.');
+    }
+    const files = [];
+    async function visit(directory, relativeDirectory, depth) {
+        if (depth > MAX_DEPTH)
+            throw tooLarge();
+        const entries = await openDirectory(`/proc/self/fd/${directory}`);
+        try {
+            for (;;) {
+                const entry = await readDirectoryEntry(entries);
+                if (entry === null)
+                    break;
+                if (SET_HAS(EXCLUDED_DIRECTORIES, entry.name))
+                    continue;
+                budget.entries += 1;
+                if (budget.entries > MAX_ENTRIES)
+                    throw tooLarge();
+                const relativePath = relativeDirectory === '' ? entry.name : PATH_JOIN(relativeDirectory, entry.name);
+                const absolutePath = PATH_JOIN(root, relativePath);
+                await ownHook(hooks, 'beforeOpen')?.(absolutePath);
+                const descriptor = await openDescriptor(`/proc/self/fd/${directory}/${entry.name}`, READ_FLAGS);
+                try {
+                    const before = await statDescriptor(descriptor, { bigint: true });
+                    if (descriptorIsDirectory(before)) {
+                        await visit(descriptor, relativePath, depth + 1);
+                    }
+                    else if (descriptorIsFile(before)) {
+                        if (before.size < 0n || before.size > BIG_INT(MAX_BYTES - budget.bytes))
+                            throw tooLarge();
+                        const expectedBytes = NUMBER(before.size);
+                        await ownHook(hooks, 'afterStat')?.(absolutePath);
+                        const bytes = await readBounded(descriptor, expectedBytes, relativePath);
+                        const after = await statDescriptor(descriptor, { bigint: true });
+                        if (after.size !== before.size || after.mtimeNs !== before.mtimeNs || after.ctimeNs !== before.ctimeNs) {
+                            throw invalid(`Hosted base source changed while reading "${relativePath}".`);
+                        }
+                        budget.bytes += expectedBytes;
+                        appendIntrinsicArray(files, OBJECT_FREEZE({
+                            path: prefix === '' ? relativePath : PATH_JOIN(prefix, relativePath),
+                            bytes,
+                            sha256: sha256(bytes),
+                        }));
+                    }
+                    else {
+                        throw invalid(`Hosted base authority contains unsupported entry "${relativePath}".`);
+                    }
+                }
+                finally {
+                    await closeDescriptor(descriptor);
+                }
+            }
+        }
+        finally {
+            await closeDirectory(entries);
+        }
+    }
+    try {
+        const rootDescriptor = await openDescriptor(root, READ_FLAGS);
+        try {
+            if (!descriptorIsDirectory(await statDescriptor(rootDescriptor, { bigint: true }))) {
+                throw invalid('Hosted base source root is not a directory.');
+            }
+            await visit(rootDescriptor, '', 0);
+        }
+        finally {
+            await closeDescriptor(rootDescriptor);
+        }
+    }
+    catch (error) {
+        if (error instanceof PluginError)
+            throw error;
+        throw invalid('Hosted base source or trusted dependency is unreadable.');
+    }
+    return frozenHostedPromiseValue(files);
+}
+function ownHook(hooks, name) {
+    const descriptor = OBJECT_GET_OWN_PROPERTY_DESCRIPTOR(hooks, name);
+    return descriptor !== undefined && 'value' in descriptor && typeof descriptor.value === 'function'
+        ? descriptor.value
+        : undefined;
+}
+async function readBounded(descriptor, expectedBytes, relativePath) {
+    const bytes = BUFFER_ALLOC_UNSAFE(expectedBytes);
+    let offset = 0;
+    while (offset < expectedBytes) {
+        const bytesRead = await readDescriptor(descriptor, bytes, offset, expectedBytes - offset, offset);
+        if (bytesRead === 0) {
+            throw invalid(`Hosted base source changed while reading "${relativePath}".`);
+        }
+        offset += bytesRead;
+    }
+    const extra = BUFFER_ALLOC_UNSAFE(1);
+    if ((await readDescriptor(descriptor, extra, 0, 1, expectedBytes)) !== 0) {
+        throw invalid(`Hosted base source changed while reading "${relativePath}".`);
+    }
+    return hostedPromiseValue(bytes);
+}
+function tooLarge() {
+    return invalid('Hosted base source exceeds the snapshot entry or byte limit.');
+}
+function sourceDigest(files) {
+    const records = [];
+    for (let index = 0; index < files.length; index += 1) {
+        const file = files[index];
+        appendIntrinsicArray(records, { path: file.path, sha256: file.sha256 });
+    }
+    return sha256(canonicalize(records));
+}
+function sourceFileAt(files, path) {
+    for (let index = 0; index < files.length; index += 1) {
+        if (files[index].path === path)
+            return files[index];
+    }
+    return undefined;
+}
+function invalid(message) {
+    return new PluginError('plugin_source_invalid', message);
+}
+//# sourceMappingURL=hosted-base-snapshot.js.map

package/dist/hosted-base-snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-base-snapshot.js","sourceRoot":"","sources":["../src/hosted-base-snapshot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EACL,eAAe,EACf,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,yBAAyB,EACzB,oBAAoB,EACpB,aAAa,EACb,cAAc,EACd,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AACzE,MAAM,KAAK,GAAG,KAAK,CAAC;AACpB,MAAM,KAAK,GAAG,KAAK,CAAC;AACpB,MAAM,OAAO,GAAG,OAAO,CAAC;AACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,EAAE,GAAG,EAAE,CAAC;AACd,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,gBAAgB,GAAG,UAAU,CAAC;AACpC,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,YAAY,GAAG,OAAO,CAAC;AAC7B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC;AAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAG5D,CAAC;AACT,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,kCAAkC,GAAG,MAAM,CAAC,wBAAwB,CAAC;AAC3E,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC;AAC/C,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAA0C,CAAC;AACzG,MAAM,qBAAqB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAG9E,CAAC;AACZ,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAGvE,CAAC;AACb,MAAM,WAAW,GAAG,MAAM,CAAC;AAC3B,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC;AAmBpF,MAAM,uBAAuB,GAAG,aAAa,CAC3C,aAAa,CAAC,IAAI,CAAC,CACW,CAAC;AAejC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAAgB,EAChB,mBAA4B;IAE5B,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,mBAAmB,IAAI,iBAAiB,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;IAC1G,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACxD,IACE,YAAY,KAAK,EAAE;QACnB,gBAAgB,CAAC,YAAY,CAAC;QAC9B,YAAY,KAAK,IAAI;QACrB,kBAAkB,CAAC,YAAY,EAAE,KAAK,cAAc,EAAE,CAAC,EACvD,CAAC;QACD,MAAM,OAAO,CAAC,0DAA0D,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,UAAU,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,uDAAuD,CAAC,CAAC;IACnG,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC9E,MAAM,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,MAAM,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACpE,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,cAAc,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,OAAO,CAAC,kEAAkE,CAAC,CAAC;QACpF,CAAC;QACD,MAAM,YAAY,GAAG,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC/D,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC1E,MAAM,OAAO,CAAC,yEAAyE,CAAC,CAAC;QAC3F,CAAC;QACD,OAAO,wBAAwB,CAAC;YAC9B,WAAW;YACX,UAAU;YACV,YAAY;YACZ,gBAAgB,EAAE,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC;YACvD,kBAAkB,EAAE,YAAY,CAAC,MAAM;SACxC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,OAAwC,EACxC,QAAqC,uBAAuB;IAE5D,yBAAyB,CAAC,uBAAuB,CAAC,CAAC;IACnD,OAAO,YAAY,CAAC,MAAM,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAA4B;IACzE,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAwC,EACxC,QAAqC,uBAAuB;IAE5D,MAAM,MAAM,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,IAAI,WAAW,GAAG,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,OAAO,CAAC,WAAW,CAAE,CAAC;QACrC,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9E,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;YACvE,oBAAoB,CAAC,KAAK,EAAE,WAAW,CAAC,SAAS,CAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IACD,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,KAAK,UAAU,KAAK,CAAC,SAAiB,EAAE,MAAc;QACpD,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/C,UAAU,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACnF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAE,CAAC;YAC9B,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;YACpB,IAAI,MAAM,CAAC,OAAO,GAAG,WAAW;gBAAE,MAAM,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,yBAAyB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;iBAC7D,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrC,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC9D,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;wBAClG,MAAM,QAAQ,EAAE,CAAC;oBACnB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC1C,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;oBACjE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBACjE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;wBACvG,MAAM,OAAO,CAAC,+CAA+C,IAAI,IAAI,CAAC,CAAC;oBACzE,CAAC;oBACD,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;oBAC9B,oBAAoB,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrF,CAAC;wBAAS,CAAC;oBACT,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;;gBAAM,MAAM,OAAO,CAAC,oDAAoD,IAAI,IAAI,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IACD,MAAM,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtB,UAAU,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjF,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,MAAc,EACd,MAAoB,EACpB,KAAkC;IAElC,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,UAAU,KAAK,CAAC,SAAiB,EAAE,iBAAyB,EAAE,KAAa;QAC9E,IAAI,KAAK,GAAG,SAAS;YAAE,MAAM,QAAQ,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,iBAAiB,SAAS,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM;gBAC1B,IAAI,OAAO,CAAC,oBAAoB,EAAE,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACxD,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC;gBACpB,IAAI,MAAM,CAAC,OAAO,GAAG,WAAW;oBAAE,MAAM,QAAQ,EAAE,CAAC;gBACnD,MAAM,YAAY,GAAG,iBAAiB,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACtG,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACnD,MAAM,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,iBAAiB,SAAS,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;gBAChG,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;oBAClE,IAAI,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC;wBAClC,MAAM,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBACnD,CAAC;yBAAM,IAAI,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;wBACpC,IAAI,MAAM,CAAC,IAAI,GAAG,EAAE,IAAI,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC;4BAAE,MAAM,QAAQ,EAAE,CAAC;wBAC1F,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;wBAC1C,MAAM,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;wBAClD,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;wBACzE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;wBACjE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC;4BACvG,MAAM,OAAO,CAAC,6CAA6C,YAAY,IAAI,CAAC,CAAC;wBAC/E,CAAC;wBACD,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC;wBAC9B,oBAAoB,CAClB,KAAK,EACL,aAAa,CAAC;4BACZ,IAAI,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,YAAY,CAAC;4BACpE,KAAK;4BACL,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;yBACtB,CAAC,CACH,CAAC;oBACJ,CAAC;yBAAM,CAAC;wBACN,MAAM,OAAO,CAAC,qDAAqD,YAAY,IAAI,CAAC,CAAC;oBACvF,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACT,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC9D,IAAI,CAAC;YACH,IAAI,CAAC,qBAAqB,CAAC,MAAM,cAAc,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,OAAO,CAAC,6CAA6C,CAAC,CAAC;YAC/D,CAAC;YACD,MAAM,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACrC,CAAC;gBAAS,CAAC;YACT,MAAM,eAAe,CAAC,cAAc,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW;YAAE,MAAM,KAAK,CAAC;QAC9C,MAAM,OAAO,CAAC,yDAAyD,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,wBAAwB,CAAC,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,OAAO,CACd,KAAkC,EAClC,IAAuC;IAEvC,MAAM,UAAU,GAAG,kCAAkC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,UAAU;QAChG,CAAC,CAAC,UAAU,CAAC,KAAwC;QACrD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,UAAkB,EAAE,aAAqB,EAAE,YAAoB;IACxF,MAAM,KAAK,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,MAAM,GAAG,aAAa,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;QAClG,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,OAAO,CAAC,6CAA6C,YAAY,IAAI,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,IAAI,SAAS,CAAC;IACtB,CAAC;IACD,MAAM,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM,cAAc,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,MAAM,OAAO,CAAC,6CAA6C,YAAY,IAAI,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,OAAO,CAAC,8DAA8D,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,YAAY,CAAC,KAA4B;IAChD,MAAM,OAAO,GAA4C,EAAE,CAAC;IAC5D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,oBAAoB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,KAA4B,EAAE,IAAY;IAC9D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,KAAK,CAAE,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,IAAI,WAAW,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC"}

package/dist/hosted-extension-declarations.d.ts

@@ -0,0 +1,10 @@
+import { type PluginLockEntry } from "./plugin-lock.js";
+import { type PluginSourceRef } from "./plugin-source.js";
+export interface HostedDeclaredExtension {
+    readonly ref: string;
+    readonly entry: PluginLockEntry;
+    readonly source: PluginSourceRef;
+}
+export declare function declarationSignature(declared: readonly HostedDeclaredExtension[]): string;
+export declare function hostedDeclaredExtensions(root: string): readonly HostedDeclaredExtension[];
+//# sourceMappingURL=hosted-extension-declarations.d.ts.map

package/dist/hosted-extension-declarations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-declarations.d.ts","sourceRoot":"","sources":["../src/hosted-extension-declarations.ts"],"names":[],"mappings":"AAeA,OAAO,EAGL,KAAK,eAAe,EACrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAsB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAqD9E,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;CAClC;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,SAAS,uBAAuB,EAAE,GAC3C,MAAM,CAmBR;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,GACX,SAAS,uBAAuB,EAAE,CAgGpC"}

package/dist/hosted-extension-declarations.js

@@ -0,0 +1,272 @@
+import { constants, closeSync, existsSync, fstatSync, openSync, readSync, } from "node:fs";
+import { join } from "node:path";
+import { safePath } from "./bundle.js";
+import { canonicalize } from "./canonical.js";
+import { descriptorIsFile } from "./fs-descriptor.js";
+import { snapshotJsonValue } from "./json-value.js";
+import { PluginError } from "./plugin-manifest.js";
+import { appendIntrinsicArray } from "./intrinsic-array.js";
+import { PLUGIN_LOCK_FILE, PLUGIN_LOCK_VERSION, } from "./plugin-lock.js";
+import { canonicalPluginRef } from "./plugin-source.js";
+const CLOSE_SYNC = closeSync;
+const EXISTS_SYNC = existsSync;
+const FSTAT_SYNC = fstatSync;
+const OPEN_SYNC = openSync;
+const READ_SYNC = readSync;
+const PATH_JOIN = join;
+const ERROR = Error;
+const PLUGIN_ERROR_IS_INSTANCE = Function.prototype.call.bind(Function.prototype[Symbol.hasInstance], PluginError);
+const MAX_DECLARATION_BYTES = 1024 * 1024;
+const BIG_INT = BigInt;
+const BUFFER_ALLOC_UNSAFE = Buffer.allocUnsafe;
+const BUFFER_TO_STRING = Function.prototype.call.bind(Buffer.prototype.toString);
+const NUMBER = Number;
+const DECLARATION_READ_FLAGS = constants.O_RDONLY |
+    (constants.O_NOFOLLOW ?? 0) |
+    (constants.O_NONBLOCK ?? 0);
+const JSON_PARSE = JSON.parse;
+const ARRAY_IS_ARRAY = Array.isArray;
+const DATE_PARSE = Date.parse;
+const NUMBER_IS_NAN = Number.isNaN;
+const OBJECT_FREEZE = Object.freeze;
+const OBJECT_HAS_OWN = Object.hasOwn;
+const OBJECT_KEYS = Object.keys;
+const REGEXP_TEST = Function.prototype.call.bind(RegExp.prototype.test);
+const SET = Set;
+const SET_ADD = Function.prototype.call.bind(Set.prototype.add);
+const SET_HAS = Function.prototype.call.bind(Set.prototype.has);
+const STRING_STARTS_WITH = Function.prototype.call.bind(String.prototype.startsWith);
+const LOCK_HEX64 = /^[0-9a-f]{64}$/;
+const LOCK_SHA = /^[0-9a-f]{40}$/;
+const LOCK_OWNER = /^[A-Za-z0-9](?:[A-Za-z0-9-]{0,38})$/;
+const LOCK_REPO = /^[A-Za-z0-9_.-]{1,100}$/;
+const HTTPS_GITHUB = /^https:\/\/github\.com\//;
+export function declarationSignature(declared) {
+    const records = [];
+    for (let index = 0; index < declared.length; index += 1) {
+        const { ref, entry } = declared[index];
+        appendIntrinsicArray(records, {
+            ref,
+            name: entry.name,
+            version: entry.version,
+            digest: entry.digest,
+            manifestSha256: entry.manifestSha256,
+        });
+    }
+    return canonicalize(records);
+}
+export function hostedDeclaredExtensions(root) {
+    if (EXISTS_SYNC(PATH_JOIN(root, "flows.json.tmp")) ||
+        EXISTS_SYNC(PATH_JOIN(root, `${PLUGIN_LOCK_FILE}.tmp`))) {
+        throw new PluginError("plugin_lock_invalid", "Hosted extension declarations have a pending transaction.");
+    }
+    let config;
+    try {
+        config = JSON_PARSE(BUFFER_TO_STRING(readBoundedDeclaration(PATH_JOIN(root, "flows.json")), "utf8"));
+    }
+    catch (error) {
+        if (PLUGIN_ERROR_IS_INSTANCE(error))
+            throw error;
+        throw new PluginError("plugin_manifest_invalid", "Invalid or oversized flows.json.");
+    }
+    if (typeof config !== "object" || config === null || ARRAY_IS_ARRAY(config)) {
+        throw new PluginError("plugin_manifest_invalid", "flows.json plugins must be strings.");
+    }
+    const plugins = OBJECT_HAS_OWN(config, "plugins")
+        ? config.plugins
+        : undefined;
+    if (plugins !== undefined && !ARRAY_IS_ARRAY(plugins)) {
+        throw new PluginError("plugin_manifest_invalid", "flows.json plugins must be strings.");
+    }
+    const declared = [];
+    if (plugins !== undefined) {
+        for (let index = 0; index < plugins.length; index += 1) {
+            const ref = plugins[index];
+            if (typeof ref !== "string") {
+                throw new PluginError("plugin_manifest_invalid", "flows.json plugins must be strings.");
+            }
+            if (isHostedGithubPluginRef(ref))
+                appendIntrinsicArray(declared, ref);
+        }
+    }
+    let lock = OBJECT_FREEZE({
+        version: PLUGIN_LOCK_VERSION,
+        plugins: OBJECT_FREEZE([]),
+    });
+    const lockPath = PATH_JOIN(root, PLUGIN_LOCK_FILE);
+    if (EXISTS_SYNC(lockPath)) {
+        let value;
+        try {
+            value = JSON_PARSE(BUFFER_TO_STRING(readBoundedDeclaration(lockPath), "utf8"));
+        }
+        catch (error) {
+            if (PLUGIN_ERROR_IS_INSTANCE(error))
+                throw error;
+            throw new PluginError("plugin_lock_invalid", `${PLUGIN_LOCK_FILE}: not valid or exceeds the hosted size limit.`);
+        }
+        lock = parseHostedPluginLock(value);
+    }
+    if (declared.length !== lock.plugins.length) {
+        throw new PluginError("plugin_lock_invalid", "Hosted flows.json and flows.lock.json declarations differ.");
+    }
+    const result = [];
+    for (let index = 0; index < lock.plugins.length; index += 1) {
+        const entry = lock.plugins[index];
+        const source = OBJECT_FREEZE({ ...entry.source, ref: entry.source.sha });
+        const ref = canonicalPluginRef(source);
+        if (declared[index] !== ref) {
+            throw new PluginError("plugin_lock_invalid", "Hosted flows.lock.json order differs from flows.json.plugins.");
+        }
+        appendIntrinsicArray(result, OBJECT_FREEZE({ ref, entry, source }));
+    }
+    return OBJECT_FREEZE(result);
+}
+function parseHostedPluginLock(input) {
+    let value;
+    try {
+        value = snapshotJsonValue(input, "hosted plugin lock");
+    }
+    catch {
+        return invalidHostedLock(`expected { version: ${PLUGIN_LOCK_VERSION}, plugins: [] }.`);
+    }
+    if (!hostedRecord(value) ||
+        value.version !== PLUGIN_LOCK_VERSION ||
+        !ARRAY_IS_ARRAY(value.plugins) ||
+        !hostedHasOnlyKeys(value, ["version", "plugins"])) {
+        return invalidHostedLock(`expected { version: ${PLUGIN_LOCK_VERSION}, plugins: [] }.`);
+    }
+    const names = new SET();
+    const plugins = [];
+    for (let index = 0; index < value.plugins.length; index += 1) {
+        const entry = value.plugins[index];
+        if (!hostedRecord(entry) ||
+            !hostedHasOnlyKeys(entry, [
+                "digest",
+                "kind",
+                "manifestSha256",
+                "name",
+                "order",
+                "resolvedAt",
+                "source",
+                "version",
+            ]) ||
+            entry.kind !== "flow-extension" ||
+            typeof entry.name !== "string" ||
+            typeof entry.version !== "string" ||
+            typeof entry.digest !== "string" ||
+            !REGEXP_TEST(LOCK_HEX64, entry.digest) ||
+            typeof entry.manifestSha256 !== "string" ||
+            !REGEXP_TEST(LOCK_HEX64, entry.manifestSha256) ||
+            entry.order !== index + 1 ||
+            typeof entry.resolvedAt !== "string" ||
+            NUMBER_IS_NAN(DATE_PARSE(entry.resolvedAt)) ||
+            !hostedRecord(entry.source) ||
+            !hostedHasOnlyKeys(entry.source, [
+                "host",
+                "owner",
+                "repo",
+                "sha",
+                "path",
+            ]) ||
+            entry.source.host !== "github" ||
+            typeof entry.source.owner !== "string" ||
+            !REGEXP_TEST(LOCK_OWNER, entry.source.owner) ||
+            typeof entry.source.repo !== "string" ||
+            !REGEXP_TEST(LOCK_REPO, entry.source.repo) ||
+            entry.source.repo === "." ||
+            entry.source.repo === ".." ||
+            typeof entry.source.sha !== "string" ||
+            !REGEXP_TEST(LOCK_SHA, entry.source.sha) ||
+            typeof entry.source.path !== "string" ||
+            (entry.source.path !== "" && !safePath(entry.source.path))) {
+            return invalidHostedLock(`plugins[${index}] is malformed.`);
+        }
+        if (SET_HAS(names, entry.name))
+            return invalidHostedLock(`plugin ${entry.name} is listed twice.`);
+        SET_ADD(names, entry.name);
+        appendIntrinsicArray(plugins, OBJECT_FREEZE({
+            name: entry.name,
+            kind: "flow-extension",
+            version: entry.version,
+            source: OBJECT_FREEZE({
+                host: "github",
+                owner: entry.source.owner,
+                repo: entry.source.repo,
+                sha: entry.source.sha,
+                path: entry.source.path,
+            }),
+            digest: entry.digest,
+            manifestSha256: entry.manifestSha256,
+            order: entry.order,
+            resolvedAt: entry.resolvedAt,
+        }));
+    }
+    return OBJECT_FREEZE({
+        version: PLUGIN_LOCK_VERSION,
+        plugins: OBJECT_FREEZE(plugins),
+    });
+}
+function isHostedGithubPluginRef(value) {
+    return (STRING_STARTS_WITH(value, "github:") || REGEXP_TEST(HTTPS_GITHUB, value));
+}
+function hostedRecord(value) {
+    return typeof value === "object" && value !== null && !ARRAY_IS_ARRAY(value);
+}
+function hostedHasOnlyKeys(value, allowed) {
+    const keys = OBJECT_KEYS(value);
+    for (let index = 0; index < keys.length; index += 1) {
+        let found = false;
+        for (let allowedIndex = 0; allowedIndex < allowed.length; allowedIndex += 1) {
+            if (keys[index] === allowed[allowedIndex]) {
+                found = true;
+                break;
+            }
+        }
+        if (!found)
+            return false;
+    }
+    return true;
+}
+function invalidHostedLock(message) {
+    throw new PluginError("plugin_lock_invalid", `${PLUGIN_LOCK_FILE}: ${message}`);
+}
+function readBoundedDeclaration(path) {
+    let descriptor;
+    try {
+        descriptor = OPEN_SYNC(path, DECLARATION_READ_FLAGS);
+        const before = FSTAT_SYNC(descriptor, { bigint: true });
+        if (!descriptorIsFile(before) ||
+            before.size < 0n ||
+            before.size > BIG_INT(MAX_DECLARATION_BYTES)) {
+            throw new PluginError("plugin_source_invalid", "Hosted extension declaration is not a bounded regular file.");
+        }
+        const expected = NUMBER(before.size);
+        const bytes = BUFFER_ALLOC_UNSAFE(expected);
+        let offset = 0;
+        while (offset < expected) {
+            const count = READ_SYNC(descriptor, bytes, offset, expected - offset, offset);
+            if (count === 0)
+                throw new ERROR("short read");
+            offset += count;
+        }
+        if (READ_SYNC(descriptor, BUFFER_ALLOC_UNSAFE(1), 0, 1, expected) !== 0)
+            throw new ERROR("grew");
+        const after = FSTAT_SYNC(descriptor, { bigint: true });
+        if (after.size !== before.size ||
+            after.mtimeNs !== before.mtimeNs ||
+            after.ctimeNs !== before.ctimeNs) {
+            throw new ERROR("changed");
+        }
+        return bytes;
+    }
+    catch (error) {
+        if (PLUGIN_ERROR_IS_INSTANCE(error))
+            throw error;
+        throw new PluginError("plugin_source_invalid", "Hosted extension declaration is unreadable or changed while reading.");
+    }
+    finally {
+        if (descriptor !== undefined)
+            CLOSE_SYNC(descriptor);
+    }
+}
+//# sourceMappingURL=hosted-extension-declarations.js.map

package/dist/hosted-extension-declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-extension-declarations.js","sourceRoot":"","sources":["../src/hosted-extension-declarations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,QAAQ,EACR,QAAQ,GACT,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EACL,gBAAgB,EAChB,mBAAmB,GAEpB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAwB,MAAM,oBAAoB,CAAC;AAE9E,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,SAAS,GAAG,QAAQ,CAAC;AAC3B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,KAAK,GAAG,KAAK,CAAC;AACpB,MAAM,wBAAwB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAC3D,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EACtC,WAAW,CACmB,CAAC;AACjC,MAAM,qBAAqB,GAAG,IAAI,GAAG,IAAI,CAAC;AAC1C,MAAM,OAAO,GAAG,MAAM,CAAC;AACvB,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC;AAC/C,MAAM,gBAAgB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACnD,MAAM,CAAC,SAAS,CAAC,QAAQ,CAC6B,CAAC;AACzD,MAAM,MAAM,GAAG,MAAM,CAAC;AACtB,MAAM,sBAAsB,GAC1B,SAAS,CAAC,QAAQ;IAClB,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC;IAC3B,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;AAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;AAC9B,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,CAAC;AACrC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC;AAC9B,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC;AACnC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;AACpC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;AACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC;AAChC,MAAM,WAAW,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAG1D,CAAC;AACb,MAAM,GAAG,GAAG,GAAG,CAAC;AAChB,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAGnD,CAAC;AACZ,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAGlD,CAAC;AACb,MAAM,kBAAkB,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CACrD,MAAM,CAAC,SAAS,CAAC,UAAU,CACkB,CAAC;AAChD,MAAM,UAAU,GAAG,gBAAgB,CAAC;AACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAC5C,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAQhD,MAAM,UAAU,oBAAoB,CAClC,QAA4C;IAE5C,MAAM,OAAO,GAMR,EAAE,CAAC;IACR,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACxD,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAE,CAAC;QACxC,oBAAoB,CAAC,OAAO,EAAE;YAC5B,GAAG;YACH,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;SACrC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,IAAY;IAEZ,IACE,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAC9C,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,gBAAgB,MAAM,CAAC,CAAC,EACvD,CAAC;QACD,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CACjB,gBAAgB,CACd,sBAAsB,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,EACrD,MAAM,CACP,CACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,WAAW,CACnB,yBAAyB,EACzB,kCAAkC,CACnC,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,WAAW,CACnB,yBAAyB,EACzB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC;QAC/C,CAAC,CAAE,MAAgC,CAAC,OAAO;QAC3C,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,WAAW,CACnB,yBAAyB,EACzB,qCAAqC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACvD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAC5B,MAAM,IAAI,WAAW,CACnB,yBAAyB,EACzB,qCAAqC,CACtC,CAAC;YACJ,CAAC;YACD,IAAI,uBAAuB,CAAC,GAAG,CAAC;gBAAE,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAGJ,aAAa,CAAC;QAChB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACnD,IAAI,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1B,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,UAAU,CAChB,gBAAgB,CAAC,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YACjD,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,GAAG,gBAAgB,+CAA+C,CACnE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAA8B,EAAE,CAAC;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,oBAAoB,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAI3C,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAiB,CACtB,uBAAuB,mBAAmB,kBAAkB,CAC7D,CAAC;IACJ,CAAC;IACD,IACE,CAAC,YAAY,CAAC,KAAK,CAAC;QACpB,KAAK,CAAC,OAAO,KAAK,mBAAmB;QACrC,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,CAAC,iBAAiB,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,EACjD,CAAC;QACD,OAAO,iBAAiB,CACtB,uBAAuB,mBAAmB,kBAAkB,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACnC,IACE,CAAC,YAAY,CAAC,KAAK,CAAC;YACpB,CAAC,iBAAiB,CAAC,KAAK,EAAE;gBACxB,QAAQ;gBACR,MAAM;gBACN,gBAAgB;gBAChB,MAAM;gBACN,OAAO;gBACP,YAAY;gBACZ,QAAQ;gBACR,SAAS;aACV,CAAC;YACF,KAAK,CAAC,IAAI,KAAK,gBAAgB;YAC/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAC9B,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YACjC,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC;YACtC,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;YACxC,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,cAAc,CAAC;YAC9C,KAAK,CAAC,KAAK,KAAK,KAAK,GAAG,CAAC;YACzB,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;YACpC,aAAa,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC3C,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC;YAC3B,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE;gBAC/B,MAAM;gBACN,OAAO;gBACP,MAAM;gBACN,KAAK;gBACL,MAAM;aACP,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,KAAK,QAAQ;YACtC,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC;YAC5C,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YACrC,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;YAC1C,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,GAAG;YACzB,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI;YAC1B,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,QAAQ;YACpC,CAAC,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YACxC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;YACrC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAC1D,CAAC;YACD,OAAO,iBAAiB,CAAC,WAAW,KAAK,iBAAiB,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC;YAC5B,OAAO,iBAAiB,CAAC,UAAU,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;QACpE,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3B,oBAAoB,CAAC,OAAO,EAAE,aAAa,CAAC;YAC1C,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,aAAa,CAAC;gBACpB,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK;gBACzB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;gBACvB,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,GAAG;gBACrB,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI;aACxB,CAAC;YACF,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,aAAa,CAAC;QACnB,OAAO,EAAE,mBAAmB;QAC5B,OAAO,EAAE,aAAa,CAAC,OAAO,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,OAAO,CACL,kBAAkB,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,WAAW,CAAC,YAAY,EAAE,KAAK,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,iBAAiB,CACxB,KAA8B,EAC9B,OAA0B;IAE1B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,KACE,IAAI,YAAY,GAAG,CAAC,EACpB,YAAY,GAAG,OAAO,CAAC,MAAM,EAC7B,YAAY,IAAI,CAAC,EACjB,CAAC;YACD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;gBAC1C,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM;YACR,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACxC,MAAM,IAAI,WAAW,CACnB,qBAAqB,EACrB,GAAG,gBAAgB,KAAK,OAAO,EAAE,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY;IAC1C,IAAI,UAA8B,CAAC;IACnC,IAAI,CAAC;QACH,UAAU,GAAG,SAAS,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,IACE,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACzB,MAAM,CAAC,IAAI,GAAG,EAAE;YAChB,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,qBAAqB,CAAC,EAC5C,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,QAAQ,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,SAAS,CACrB,UAAU,EACV,KAAK,EACL,MAAM,EACN,QAAQ,GAAG,MAAM,EACjB,MAAM,CACP,CAAC;YACF,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,SAAS,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,IACE,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;YAC1B,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO;YAChC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,OAAO,EAChC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,wBAAwB,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACjD,MAAM,IAAI,WAAW,CACnB,uBAAuB,EACvB,sEAAsE,CACvE,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,UAAU,KAAK,SAAS;YAAE,UAAU,CAAC,UAAU,CAAC,CAAC;IACvD,CAAC;AACH,CAAC"}