@serve.zone/appstore 32.27.0 → 33.0.0

package/dist_ts_client/catalog.d.ts

@@ -0,0 +1,16 @@
+import type * as plugins from './plugins.js';
+type TCatalog = plugins.servezoneInterfaces.appstore.IAppStoreCatalog;
+type TCatalogApp = plugins.servezoneInterfaces.appstore.IAppStoreCatalogApp;
+type TCatalogVersion = plugins.servezoneInterfaces.appstore.IAppStoreCatalogVersion;
+/** The npm package that carries the signed App Store catalog. */
+export declare const appStoreCatalogPackageName = "@serve.zone/appstore";
+/** Where the signed envelope sits inside the published package (and its `./catalog.envelope.json` export). */
+export declare const appStoreCatalogEnvelopePackagePath = "dist_catalog/catalog.envelope.json";
+/** The app a catalog lists under `appIdArg`. */
+export declare const findAppStoreCatalogApp: (catalogArg: TCatalog, appIdArg: string) => TCatalogApp | undefined;
+/**
+ * The listed `app@version`, withdrawn ones included: an installed service keeps reading its
+ * version. Whether it is an install or upgrade target is `appstore.judgeAppStoreCatalogInstallTarget`.
+ */
+export declare const findAppStoreCatalogVersion: (catalogArg: TCatalog, appIdArg: string, versionArg: string) => TCatalogVersion | undefined;
+export {};

package/dist_ts_client/catalog.js

@@ -0,0 +1,12 @@
+/** The npm package that carries the signed App Store catalog. */
+export const appStoreCatalogPackageName = '@serve.zone/appstore';
+/** Where the signed envelope sits inside the published package (and its `./catalog.envelope.json` export). */
+export const appStoreCatalogEnvelopePackagePath = 'dist_catalog/catalog.envelope.json';
+/** The app a catalog lists under `appIdArg`. */
+export const findAppStoreCatalogApp = (catalogArg, appIdArg) => catalogArg.apps.find((appArg) => appArg.info.id === appIdArg);
+/**
+ * The listed `app@version`, withdrawn ones included: an installed service keeps reading its
+ * version. Whether it is an install or upgrade target is `appstore.judgeAppStoreCatalogInstallTarget`.
+ */
+export const findAppStoreCatalogVersion = (catalogArg, appIdArg, versionArg) => findAppStoreCatalogApp(catalogArg, appIdArg)?.versions.find((entryArg) => entryArg.version === versionArg);
+//# sourceMappingURL=data:application/json;base64,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

package/dist_ts_client/index.d.ts

@@ -1,3 +1,5 @@
-export * from './classes.appstoreresolver.js';
+export * from './catalog.js';
+export * from './loader.js';
+export * from './projection.js';
 export * from './storage.js';
 export * from './types.js';

package/dist_ts_client/index.js

@@ -1,4 +1,6 @@
-export * from './classes.appstoreresolver.js';
+export * from './catalog.js';
+export * from './loader.js';
+export * from './projection.js';
 export * from './storage.js';
 export * from './types.js';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi90c19jbGllbnQvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYywrQkFBK0IsQ0FBQztBQUM5QyxjQUFjLGNBQWMsQ0FBQztBQUM3QixjQUFjLFlBQVksQ0FBQyJ9
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi90c19jbGllbnQvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsY0FBYyxjQUFjLENBQUM7QUFDN0IsY0FBYyxhQUFhLENBQUM7QUFDNUIsY0FBYyxpQkFBaUIsQ0FBQztBQUNoQyxjQUFjLGNBQWMsQ0FBQztBQUM3QixjQUFjLFlBQVksQ0FBQyJ9

package/dist_ts_client/loader.d.ts

@@ -0,0 +1,69 @@
+import * as plugins from './plugins.js';
+import type { IAppStoreCatalogLoadOptions, IAppStoreCatalogLoaderOptions, IAppStoreCatalogStoredRecord, TAppStoreCatalogJudgement, TAppStoreCatalogLoadResult, TAppStoreCatalogRestoreResult } from './types.js';
+type TEnvelope = plugins.servezoneInterfaces.appstore.IAppStoreCatalogEnvelope;
+/**
+ * Loads the signed App Store catalog from npm registries and judges it against the consumer's
+ * active catalog. It holds the consumer's options only: no timer, no schedule, no catalog.
+ *
+ * One load asks every configured registry for the package its `latest` dist-tag names, downloads
+ * the tarball, checks it against the registry's `dist.integrity`, extracts the envelope, verifies
+ * it against the trusted keys (`verifyAppStoreCatalogEnvelope`) and judges its succession
+ * (`judgeAppStoreCatalogSuccession`). The first registry whose catalog activates ends the load;
+ * otherwise the result is the first `unchanged`, else the first `refused`, else `failed`, and
+ * `registries` reports what each registry answered.
+ *
+ * The loader holds no state, runs no schedule and persists nothing: the consumer's catalog runtime
+ * owns the one refresh schedule of its process, passes its active envelope in, stores an activated
+ * one as its last-known-good catalog and restores it with `restoreEnvelopeText` at start. Every
+ * request is bounded in time and size; a transport, integrity or packaging failure and every
+ * refusal are results, never thrown. Aborting `signal` (the consumer stopping) ends the load at
+ * once and rejects it with the signal's reason; no attempt is reported for it.
+ */
+export declare class AppStoreCatalogLoader {
+    private readonly trustedKeys;
+    private readonly supportedFeatureIds;
+    private readonly registries;
+    private readonly fetchFunction;
+    private readonly now;
+    private readonly requestTimeoutMs;
+    private readonly maximumTarballBytes;
+    private readonly maximumUnpackedBytes;
+    constructor(optionsArg: IAppStoreCatalogLoaderOptions);
+    /** One load from the configured registries; see the class description. */
+    loadFromRegistries(activeArg: TEnvelope | null, optionsArg?: IAppStoreCatalogLoadOptions): Promise<TAppStoreCatalogLoadResult>;
+    /**
+     * Judges an envelope an operator imported (an offline signed bundle, or the envelope a package
+     * carries at `./catalog.envelope.json`) exactly as a fetched one: authentication, contract,
+     * schema, digests, then succession against the active catalog.
+     */
+    judgeImportedEnvelope(candidateArg: unknown, activeArg: TEnvelope | null): Promise<TAppStoreCatalogJudgement>;
+    /** An envelope read as text: bytes that are not JSON are refused as `schemaInvalid`. */
+    judgeImportedEnvelopeText(textArg: string, activeArg: TEnvelope | null): Promise<TAppStoreCatalogJudgement>;
+    /**
+     * Restores the last-known-good catalog a consumer stored, at start: the stored envelope text is
+     * verified again against today's trusted keys and supported features, exactly as a fetched one,
+     * and answers the status `active` member it activates (`origin` and `loadedAt` as stored, the
+     * verifying key as verified now) or the refusal that keeps it inactive, e.g. `signatureInvalid`
+     * once its key is no longer trusted.
+     */
+    restoreEnvelopeText(textArg: string, recordArg: IAppStoreCatalogStoredRecord): Promise<TAppStoreCatalogRestoreResult>;
+    private judgeText;
+    /** Envelope text as a value; bytes that are not JSON are a `schemaInvalid` refusal. */
+    private parseEnvelopeText;
+    private judge;
+    /**
+     * Authenticates and reads a candidate (`verifyAppStoreCatalogEnvelope`), before and without
+     * succession. The verifier answers every refusal as a result; should it throw, the candidate is
+     * refused as `schemaInvalid` with the cause, so a load never fails on an input it could not read.
+     */
+    private verify;
+    /** The envelope text the package the registry's `latest` dist-tag names carries. */
+    private fetchEnvelopeText;
+    /**
+     * GET with the request bound covering the response body and a byte bound on the body. The
+     * caller's `signalArg` aborts it too; that abort is rethrown as the signal's reason. A redirect is
+     * never followed: a registry that answers with one fails, so a request never leaves https.
+     */
+    private fetchBytes;
+}
+export {};

package/dist_ts_client/loader.js

@@ -0,0 +1,361 @@
+import * as plugins from './plugins.js';
+import { appStoreCatalogEnvelopePackagePath, appStoreCatalogPackageName, } from './catalog.js';
+const defaultRequestTimeoutMs = 30_000;
+const defaultMaximumTarballBytes = 32 * 1024 * 1024;
+const maximumManifestBytes = 1024 * 1024;
+const maximumEnvelopeBytes = 16 * 1024 * 1024;
+const defaultMaximumUnpackedBytes = 256 * 1024 * 1024;
+const envelopeTarballEntryName = `package/${appStoreCatalogEnvelopePackagePath}`;
+/** A failure of the transport, the integrity check or the package layout: no candidate was read. */
+class AppStoreCatalogTransportError extends Error {
+}
+const isRecord = (valueArg) => typeof valueArg === 'object' && valueArg !== null && !Array.isArray(valueArg);
+const isPositiveSafeInteger = (valueArg) => Number.isSafeInteger(valueArg) && valueArg > 0;
+const toBase64 = (bytesArg) => {
+    let binary = '';
+    for (const byte of bytesArg)
+        binary += String.fromCharCode(byte);
+    return btoa(binary);
+};
+/** The `sha512-<base64>` values of an npm `dist.integrity` (Subresource Integrity syntax). */
+const readSha512Integrity = (integrityArg) => integrityArg.split(/\s+/)
+    .filter((entryArg) => entryArg.startsWith('sha512-'))
+    .map((entryArg) => entryArg.slice('sha512-'.length).replace(/\?.*$/, ''));
+/**
+ * Loads the signed App Store catalog from npm registries and judges it against the consumer's
+ * active catalog. It holds the consumer's options only: no timer, no schedule, no catalog.
+ *
+ * One load asks every configured registry for the package its `latest` dist-tag names, downloads
+ * the tarball, checks it against the registry's `dist.integrity`, extracts the envelope, verifies
+ * it against the trusted keys (`verifyAppStoreCatalogEnvelope`) and judges its succession
+ * (`judgeAppStoreCatalogSuccession`). The first registry whose catalog activates ends the load;
+ * otherwise the result is the first `unchanged`, else the first `refused`, else `failed`, and
+ * `registries` reports what each registry answered.
+ *
+ * The loader holds no state, runs no schedule and persists nothing: the consumer's catalog runtime
+ * owns the one refresh schedule of its process, passes its active envelope in, stores an activated
+ * one as its last-known-good catalog and restores it with `restoreEnvelopeText` at start. Every
+ * request is bounded in time and size; a transport, integrity or packaging failure and every
+ * refusal are results, never thrown. Aborting `signal` (the consumer stopping) ends the load at
+ * once and rejects it with the signal's reason; no attempt is reported for it.
+ */
+export class AppStoreCatalogLoader {
+    trustedKeys;
+    supportedFeatureIds;
+    registries;
+    fetchFunction;
+    now;
+    requestTimeoutMs;
+    maximumTarballBytes;
+    maximumUnpackedBytes;
+    constructor(optionsArg) {
+        if (optionsArg.trustedKeys.length === 0) {
+            throw new Error('App Store catalog loader needs at least one trusted key');
+        }
+        this.trustedKeys = optionsArg.trustedKeys.map((keyArg) => ({ ...keyArg }));
+        this.supportedFeatureIds = [...new Set(optionsArg.supportedFeatureIds)].sort();
+        this.registries = plugins.servezoneInterfaces.appstore.resolveAppStoreCatalogRegistries(optionsArg.registries);
+        this.fetchFunction = optionsArg.fetch ?? ((inputArg, initArg) => fetch(inputArg, initArg));
+        this.now = optionsArg.now ?? (() => new Date());
+        this.requestTimeoutMs = optionsArg.requestTimeoutMs ?? defaultRequestTimeoutMs;
+        this.maximumTarballBytes = optionsArg.maximumTarballBytes ?? defaultMaximumTarballBytes;
+        this.maximumUnpackedBytes = optionsArg.maximumUnpackedBytes ?? defaultMaximumUnpackedBytes;
+        if (!isPositiveSafeInteger(this.requestTimeoutMs)) {
+            throw new Error('App Store catalog requestTimeoutMs must be a positive integer');
+        }
+        if (!isPositiveSafeInteger(this.maximumTarballBytes)) {
+            throw new Error('App Store catalog maximumTarballBytes must be a positive integer');
+        }
+        if (!isPositiveSafeInteger(this.maximumUnpackedBytes)) {
+            throw new Error('App Store catalog maximumUnpackedBytes must be a positive integer');
+        }
+    }
+    /** One load from the configured registries; see the class description. */
+    async loadFromRegistries(activeArg, optionsArg = {}) {
+        const { signal } = optionsArg;
+        const reports = [];
+        const judgements = [];
+        for (const registry of this.registries) {
+            signal?.throwIfAborted();
+            try {
+                const { packageVersion, envelopeText } = await this.fetchEnvelopeText(registry, signal);
+                const judgement = await this.judgeText(envelopeText, activeArg, 'registry');
+                judgements.push(judgement);
+                reports.push({
+                    registry,
+                    outcome: judgement.outcome,
+                    packageVersion,
+                    ...(judgement.outcome === 'refused' ? { message: judgement.refused.message } : {}),
+                });
+                if (judgement.outcome === 'activated')
+                    break;
+            }
+            catch (error) {
+                signal?.throwIfAborted();
+                if (!(error instanceof AppStoreCatalogTransportError))
+                    throw error;
+                reports.push({ registry, outcome: 'failed', message: error.message });
+            }
+        }
+        signal?.throwIfAborted();
+        const chosen = judgements.find((judgementArg) => judgementArg.outcome === 'activated')
+            ?? judgements.find((judgementArg) => judgementArg.outcome === 'unchanged')
+            ?? judgements.find((judgementArg) => judgementArg.outcome === 'refused');
+        if (chosen !== undefined)
+            return { ...chosen, registries: reports };
+        const message = reports.map((reportArg) => `${reportArg.registry}: ${reportArg.message ?? reportArg.outcome}`).join('; ');
+        const failure = {
+            outcome: 'failed',
+            message,
+            attempt: { at: this.now().toISOString(), outcome: 'failed', message },
+        };
+        return { ...failure, registries: reports };
+    }
+    /**
+     * Judges an envelope an operator imported (an offline signed bundle, or the envelope a package
+     * carries at `./catalog.envelope.json`) exactly as a fetched one: authentication, contract,
+     * schema, digests, then succession against the active catalog.
+     */
+    async judgeImportedEnvelope(candidateArg, activeArg) {
+        return await this.judge(candidateArg, activeArg, 'operatorImport');
+    }
+    /** An envelope read as text: bytes that are not JSON are refused as `schemaInvalid`. */
+    async judgeImportedEnvelopeText(textArg, activeArg) {
+        return await this.judgeText(textArg, activeArg, 'operatorImport');
+    }
+    /**
+     * Restores the last-known-good catalog a consumer stored, at start: the stored envelope text is
+     * verified again against today's trusted keys and supported features, exactly as a fetched one,
+     * and answers the status `active` member it activates (`origin` and `loadedAt` as stored, the
+     * verifying key as verified now) or the refusal that keeps it inactive, e.g. `signatureInvalid`
+     * once its key is no longer trusted.
+     */
+    async restoreEnvelopeText(textArg, recordArg) {
+        const candidate = this.parseEnvelopeText(textArg);
+        const verified = candidate.parsed
+            ? await this.verify(candidate.value, recordArg.origin)
+            : refuseCandidate(undefined, this.now().toISOString(), candidate.refusal);
+        if (verified.outcome === 'refused')
+            return verified;
+        return {
+            outcome: 'restored',
+            envelope: verified.envelope,
+            active: { ...verified.active, loadedAt: recordArg.loadedAt },
+        };
+    }
+    async judgeText(textArg, activeArg, originArg) {
+        const candidate = this.parseEnvelopeText(textArg);
+        return candidate.parsed
+            ? await this.judge(candidate.value, activeArg, originArg)
+            : refuseCandidate(undefined, this.now().toISOString(), candidate.refusal);
+    }
+    /** Envelope text as a value; bytes that are not JSON are a `schemaInvalid` refusal. */
+    parseEnvelopeText(textArg) {
+        try {
+            return { parsed: true, value: JSON.parse(textArg) };
+        }
+        catch {
+            return { parsed: false, refusal: { reason: 'schemaInvalid', message: 'envelope is not JSON' } };
+        }
+    }
+    async judge(candidateArg, activeArg, originArg) {
+        const verified = await this.verify(candidateArg, originArg);
+        if (verified.outcome === 'refused')
+            return verified;
+        const succession = plugins.servezoneInterfaces.appstore.judgeAppStoreCatalogSuccession(activeArg, verified.envelope);
+        if (succession.outcome === 'refused')
+            return refuseCandidate(candidateArg, verified.attempt.at, succession.refusal);
+        if (succession.outcome === 'unchanged') {
+            return { outcome: 'unchanged', attempt: { at: verified.attempt.at, outcome: 'unchanged' } };
+        }
+        return verified;
+    }
+    /**
+     * Authenticates and reads a candidate (`verifyAppStoreCatalogEnvelope`), before and without
+     * succession. The verifier answers every refusal as a result; should it throw, the candidate is
+     * refused as `schemaInvalid` with the cause, so a load never fails on an input it could not read.
+     */
+    async verify(candidateArg, originArg) {
+        const at = this.now().toISOString();
+        let verification;
+        try {
+            verification = await plugins.servezoneInterfacesRuntime.verifyAppStoreCatalogEnvelope(candidateArg, {
+                trustedKeys: this.trustedKeys,
+                supportedFeatureIds: this.supportedFeatureIds,
+            });
+        }
+        catch (error) {
+            return refuseCandidate(candidateArg, at, {
+                reason: 'schemaInvalid',
+                message: `envelope could not be verified: ${error instanceof Error ? error.message : String(error)}`,
+            });
+        }
+        if (!verification.accepted)
+            return refuseCandidate(candidateArg, at, verification.refusal);
+        const { envelope, keyId } = verification;
+        const { catalog, catalogDigest } = envelope;
+        return {
+            outcome: 'activated',
+            envelope,
+            active: {
+                contract: { ...catalog.contract },
+                revision: catalog.revision,
+                catalogDigest,
+                publishedAt: catalog.publishedAt,
+                sourceRevision: catalog.sourceRevision,
+                loadedAt: at,
+                keyId,
+                origin: originArg,
+            },
+            attempt: { at, outcome: 'activated' },
+        };
+    }
+    /** The envelope text the package the registry's `latest` dist-tag names carries. */
+    async fetchEnvelopeText(registryArg, signalArg) {
+        const manifestUrl = `${registryArg}/${appStoreCatalogPackageName.replace('/', '%2f')}/latest`;
+        const manifestBytes = await this.fetchBytes(manifestUrl, maximumManifestBytes, signalArg);
+        let manifest;
+        try {
+            manifest = JSON.parse(new TextDecoder().decode(manifestBytes));
+        }
+        catch {
+            throw new AppStoreCatalogTransportError(`${manifestUrl} did not answer JSON`);
+        }
+        const dist = isRecord(manifest) ? manifest.dist : undefined;
+        if (!isRecord(manifest) || manifest.name !== appStoreCatalogPackageName || typeof manifest.version !== 'string'
+            || !isRecord(dist) || typeof dist.tarball !== 'string' || typeof dist.integrity !== 'string') {
+            throw new AppStoreCatalogTransportError(`${manifestUrl} is not the ${appStoreCatalogPackageName} version manifest`);
+        }
+        const packageVersion = manifest.version;
+        const expectedSha512 = readSha512Integrity(dist.integrity);
+        if (expectedSha512.length === 0) {
+            throw new AppStoreCatalogTransportError(`${appStoreCatalogPackageName}@${packageVersion} has no sha512 dist.integrity`);
+        }
+        let tarballUrl;
+        try {
+            tarballUrl = new URL(dist.tarball);
+        }
+        catch {
+            throw new AppStoreCatalogTransportError(`${appStoreCatalogPackageName}@${packageVersion} names no tarball URL`);
+        }
+        if (tarballUrl.protocol !== 'https:' || tarballUrl.username !== '' || tarballUrl.password !== '') {
+            throw new AppStoreCatalogTransportError(`${appStoreCatalogPackageName}@${packageVersion} tarball URL must be https without credentials`);
+        }
+        const tarball = await this.fetchBytes(tarballUrl.toString(), this.maximumTarballBytes, signalArg);
+        const actualSha512 = toBase64(new Uint8Array(await crypto.subtle.digest('SHA-512', tarball)));
+        if (!expectedSha512.includes(actualSha512)) {
+            throw new AppStoreCatalogTransportError(`${appStoreCatalogPackageName}@${packageVersion} tarball does not match its dist.integrity`);
+        }
+        const envelopeText = await readTarballEntry(tarball, envelopeTarballEntryName, packageVersion, this.maximumUnpackedBytes);
+        return { packageVersion, envelopeText };
+    }
+    /**
+     * GET with the request bound covering the response body and a byte bound on the body. The
+     * caller's `signalArg` aborts it too; that abort is rethrown as the signal's reason. A redirect is
+     * never followed: a registry that answers with one fails, so a request never leaves https.
+     */
+    async fetchBytes(urlArg, maximumBytesArg, signalArg) {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.requestTimeoutMs);
+        const signal = signalArg === undefined ? controller.signal : AbortSignal.any([controller.signal, signalArg]);
+        try {
+            const response = await this.fetchFunction(urlArg, {
+                signal,
+                redirect: 'error',
+                headers: { accept: 'application/json, application/octet-stream' },
+            });
+            if (!response.ok) {
+                await response.body?.cancel();
+                throw new AppStoreCatalogTransportError(`HTTP ${response.status} for ${urlArg}`);
+            }
+            const declaredLength = Number(response.headers.get('content-length') ?? '0');
+            if (declaredLength > maximumBytesArg) {
+                await response.body?.cancel();
+                throw new AppStoreCatalogTransportError(`${urlArg} exceeds ${maximumBytesArg} bytes`);
+            }
+            if (response.body === null)
+                throw new AppStoreCatalogTransportError(`${urlArg} answered no body`);
+            return await readBounded(response.body, maximumBytesArg, urlArg);
+        }
+        catch (error) {
+            signalArg?.throwIfAborted();
+            if (controller.signal.aborted) {
+                throw new AppStoreCatalogTransportError(`${urlArg} timed out after ${this.requestTimeoutMs} ms`);
+            }
+            if (error instanceof AppStoreCatalogTransportError)
+                throw error;
+            throw new AppStoreCatalogTransportError(`${urlArg} failed: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+/** The refusal record and attempt of a candidate, with its revision when it can be read. */
+const refuseCandidate = (candidateArg, atArg, refusalArg) => {
+    const revision = readCandidateRevision(candidateArg);
+    return {
+        outcome: 'refused',
+        refused: { ...refusalArg, at: atArg, ...(revision === undefined ? {} : { revision }) },
+        attempt: { at: atArg, outcome: 'refused', message: `${refusalArg.reason}: ${refusalArg.message}` },
+    };
+};
+const readCandidateRevision = (candidateArg) => {
+    const catalog = isRecord(candidateArg) ? candidateArg.catalog : undefined;
+    const revision = isRecord(catalog) ? catalog.revision : undefined;
+    return typeof revision === 'number' && Number.isSafeInteger(revision) ? revision : undefined;
+};
+const readBounded = async (streamArg, maximumBytesArg, labelArg) => {
+    const reader = streamArg.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        for (;;) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > maximumBytesArg) {
+                await reader.cancel();
+                throw new AppStoreCatalogTransportError(`${labelArg} exceeds ${maximumBytesArg} bytes`);
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let offset = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.byteLength;
+    }
+    return bytes;
+};
+/**
+ * The text of one regular file in a gzip-compressed npm tarball. The archive is decompressed in
+ * full (bounded) before it is decoded: decoding straight from the decompression stream stalls on
+ * entries larger than one stream chunk.
+ */
+const readTarballEntry = async (tarballArg, entryNameArg, packageVersionArg, maximumUnpackedBytesArg) => {
+    const label = `${appStoreCatalogPackageName}@${packageVersionArg}`;
+    try {
+        const archive = await readBounded(new Blob([tarballArg]).stream().pipeThrough(new DecompressionStream('gzip')), maximumUnpackedBytesArg, `${label} unpacked tarball`);
+        const entry = (await plugins.modernTar.unpackTar(archive, { strict: true }))
+            .find((entryArg) => entryArg.header.name === entryNameArg && (entryArg.header.type ?? 'file') === 'file');
+        if (entry?.data === undefined) {
+            throw new AppStoreCatalogTransportError(`${label} carries no ${appStoreCatalogEnvelopePackagePath}`);
+        }
+        if (entry.data.byteLength > maximumEnvelopeBytes) {
+            throw new AppStoreCatalogTransportError(`${label} ${appStoreCatalogEnvelopePackagePath} exceeds ${maximumEnvelopeBytes} bytes`);
+        }
+        return new TextDecoder().decode(entry.data);
+    }
+    catch (error) {
+        if (error instanceof AppStoreCatalogTransportError)
+            throw error;
+        throw new AppStoreCatalogTransportError(`${label} tarball could not be read: ${error instanceof Error ? error.message : String(error)}`);
+    }
+};
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoibG9hZGVyLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHNfY2xpZW50L2xvYWRlci50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiQUFBQSxPQUFPLEtBQUssT0FBTyxNQUFNLGNBQWMsQ0FBQztBQUN4QyxPQUFPLEVBQ0wsa0NBQWtDLEVBQ2xDLDBCQUEwQixHQUMzQixNQUFNLGNBQWMsQ0FBQztBQW1CdEIsTUFBTSx1QkFBdUIsR0FBRyxNQUFNLENBQUM7QUFDdkMsTUFBTSwwQkFBMEIsR0FBRyxFQUFFLEdBQUcsSUFBSSxHQUFHLElBQUksQ0FBQztBQUNwRCxNQUFNLG9CQUFvQixHQUFHLElBQUksR0FBRyxJQUFJLENBQUM7QUFDekMsTUFBTSxvQkFBb0IsR0FBRyxFQUFFLEdBQUcsSUFBSSxHQUFHLElBQUksQ0FBQztBQUM5QyxNQUFNLDJCQUEyQixHQUFHLEdBQUcsR0FBRyxJQUFJLEdBQUcsSUFBSSxDQUFDO0FBQ3RELE1BQU0sd0JBQXdCLEdBQUcsV0FBVyxrQ0FBa0MsRUFBRSxDQUFDO0FBRWpGLG9HQUFvRztBQUNwRyxNQUFNLDZCQUE4QixTQUFRLEtBQUs7Q0FBRztBQUVwRCxNQUFNLFFBQVEsR0FBRyxDQUFDLFFBQWlCLEVBQXVDLEVBQUUsQ0FDMUUsT0FBTyxRQUFRLEtBQUssUUFBUSxJQUFJLFFBQVEsS0FBSyxJQUFJLElBQUksQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLFFBQVEsQ0FBQyxDQUFDO0FBRWhGLE1BQU0scUJBQXFCLEdBQUcsQ0FBQyxRQUFnQixFQUFXLEVBQUUsQ0FBQyxNQUFNLENBQUMsYUFBYSxDQUFDLFFBQVEsQ0FBQyxJQUFJLFFBQVEsR0FBRyxDQUFDLENBQUM7QUFFNUcsTUFBTSxRQUFRLEdBQUcsQ0FBQyxRQUFvQixFQUFVLEVBQUU7SUFDaEQsSUFBSSxNQUFNLEdBQUcsRUFBRSxDQUFDO0lBQ2hCLEtBQUssTUFBTSxJQUFJLElBQUksUUFBUTtRQUFFLE1BQU0sSUFBSSxNQUFNLENBQUMsWUFBWSxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQ2pFLE9BQU8sSUFBSSxDQUFDLE1BQU0sQ0FBQyxDQUFDO0FBQ3RCLENBQUMsQ0FBQztBQUVGLDhGQUE4RjtBQUM5RixNQUFNLG1CQUFtQixHQUFHLENBQUMsWUFBb0IsRUFBWSxFQUFFLENBQzdELFlBQVksQ0FBQyxLQUFLLENBQUMsS0FBSyxDQUFDO0tBQ3RCLE1BQU0sQ0FBQyxDQUFDLFFBQVEsRUFBRSxFQUFFLENBQUMsUUFBUSxDQUFDLFVBQVUsQ0FBQyxTQUFTLENBQUMsQ0FBQztLQUNwRCxHQUFHLENBQUMsQ0FBQyxRQUFRLEVBQUUsRUFBRSxDQUFDLFFBQVEsQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDLE1BQU0sQ0FBQyxDQUFDLE9BQU8sQ0FBQyxPQUFPLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQztBQUU5RTs7Ozs7Ozs7Ozs7Ozs7Ozs7R0FpQkc7QUFDSCxNQUFNLE9BQU8scUJBQXFCO0lBQ2YsV0FBVyxDQUF5QjtJQUNwQyxtQkFBbUIsQ0FBb0I7SUFDdkMsVUFBVSxDQUFvQjtJQUM5QixhQUFhLENBQWU7SUFDNUIsR0FBRyxDQUFhO0lBQ2hCLGdCQUFnQixDQUFTO0lBQ3pCLG1CQUFtQixDQUFTO0lBQzVCLG9CQUFvQixDQUFTO0lBRTlDLFlBQVksVUFBeUM7UUFDbkQsSUFBSSxVQUFVLENBQUMsV0FBVyxDQUFDLE1BQU0sS0FBSyxDQUFDLEVBQUUsQ0FBQztZQUN4QyxNQUFNLElBQUksS0FBSyxDQUFDLHlEQUF5RCxDQUFDLENBQUM7UUFDN0UsQ0FBQztRQUNELElBQUksQ0FBQyxXQUFXLEdBQUcsVUFBVSxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxNQUFNLEVBQUUsRUFBRSxDQUFDLENBQUMsRUFBRSxHQUFHLE1BQU0sRUFBRSxDQUFDLENBQUMsQ0FBQztRQUMzRSxJQUFJLENBQUMsbUJBQW1CLEdBQUcsQ0FBQyxHQUFHLElBQUksR0FBRyxDQUFDLFVBQVUsQ0FBQyxtQkFBbUIsQ0FBQyxDQUFDLENBQUMsSUFBSSxFQUFFLENBQUM7UUFDL0UsSUFBSSxDQUFDLFVBQVUsR0FBRyxPQUFPLENBQUMsbUJBQW1CLENBQUMsUUFBUSxDQUFDLGdDQUFnQyxDQUFDLFVBQVUsQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUMvRyxJQUFJLENBQUMsYUFBYSxHQUFHLFVBQVUsQ0FBQyxLQUFLLElBQUksQ0FBQyxDQUFDLFFBQVEsRUFBRSxPQUFPLEVBQUUsRUFBRSxDQUFDLEtBQUssQ0FBQyxRQUFRLEVBQUUsT0FBTyxDQUFDLENBQUMsQ0FBQztRQUMzRixJQUFJLENBQUMsR0FBRyxHQUFHLFVBQVUsQ0FBQyxHQUFHLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQyxJQUFJLElBQUksRUFBRSxDQUFDLENBQUM7UUFDaEQsSUFBSSxDQUFDLGdCQUFnQixHQUFHLFVBQVUsQ0FBQyxnQkFBZ0IsSUFBSSx1QkFBdUIsQ0FBQztRQUMvRSxJQUFJLENBQUMsbUJBQW1CLEdBQUcsVUFBVSxDQUFDLG1CQUFtQixJQUFJLDBCQUEwQixDQUFDO1FBQ3hGLElBQUksQ0FBQyxvQkFBb0IsR0FBRyxVQUFVLENBQUMsb0JBQW9CLElBQUksMkJBQTJCLENBQUM7UUFDM0YsSUFBSSxDQUFDLHFCQUFxQixDQUFDLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxFQUFFLENBQUM7WUFDbEQsTUFBTSxJQUFJLEtBQUssQ0FBQywrREFBK0QsQ0FBQyxDQUFDO1FBQ25GLENBQUM7UUFDRCxJQUFJLENBQUMscUJBQXFCLENBQUMsSUFBSSxDQUFDLG1CQUFtQixDQUFDLEVBQUUsQ0FBQztZQUNyRCxNQUFNLElBQUksS0FBSyxDQUFDLGtFQUFrRSxDQUFDLENBQUM7UUFDdEYsQ0FBQztRQUNELElBQUksQ0FBQyxxQkFBcUIsQ0FBQyxJQUFJLENBQUMsb0JBQW9CLENBQUMsRUFBRSxDQUFDO1lBQ3RELE1BQU0sSUFBSSxLQUFLLENBQUMsbUVBQW1FLENBQUMsQ0FBQztRQUN2RixDQUFDO0lBQ0gsQ0FBQztJQUVELDBFQUEwRTtJQUNuRSxLQUFLLENBQUMsa0JBQWtCLENBQzdCLFNBQTJCLEVBQzNCLFVBQVUsR0FBZ0MsRUFBRTtRQUU1QyxNQUFNLEVBQUUsTUFBTSxFQUFFLEdBQUcsVUFBVSxDQUFDO1FBQzlCLE1BQU0sT0FBTyxHQUFxQyxFQUFFLENBQUM7UUFDckQsTUFBTSxVQUFVLEdBQWdDLEVBQUUsQ0FBQztRQUNuRCxLQUFLLE1BQU0sUUFBUSxJQUFJLElBQUksQ0FBQyxVQUFVLEVBQUUsQ0FBQztZQUN2QyxNQUFNLEVBQUUsY0FBYyxFQUFFLENBQUM7WUFDekIsSUFBSSxDQUFDO2dCQUNILE1BQU0sRUFBRSxjQUFjLEVBQUUsWUFBWSxFQUFFLEdBQUcsTUFBTSxJQUFJLENBQUMsaUJBQWlCLENBQUMsUUFBUSxFQUFFLE1BQU0sQ0FBQyxDQUFDO2dCQUN4RixNQUFNLFNBQVMsR0FBRyxNQUFNLElBQUksQ0FBQyxTQUFTLENBQUMsWUFBWSxFQUFFLFNBQVMsRUFBRSxVQUFVLENBQUMsQ0FBQztnQkFDNUUsVUFBVSxDQUFDLElBQUksQ0FBQyxTQUFTLENBQUMsQ0FBQztnQkFDM0IsT0FBTyxDQUFDLElBQUksQ0FBQztvQkFDWCxRQUFRO29CQUNSLE9BQU8sRUFBRSxTQUFTLENBQUMsT0FBTztvQkFDMUIsY0FBYztvQkFDZCxHQUFHLENBQUMsU0FBUyxDQUFDLE9BQU8sS0FBSyxTQUFTLENBQUMsQ0FBQyxDQUFDLEVBQUUsT0FBTyxFQUFFLFNBQVMsQ0FBQyxPQUFPLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQyxDQUFDLEVBQUUsQ0FBQztpQkFDbkYsQ0FBQyxDQUFDO2dCQUNILElBQUksU0FBUyxDQUFDLE9BQU8sS0FBSyxXQUFXO29CQUFFLE1BQU07WUFDL0MsQ0FBQztZQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7Z0JBQ2YsTUFBTSxFQUFFLGNBQWMsRUFBRSxDQUFDO2dCQUN6QixJQUFJLENBQUMsQ0FBQyxLQUFLLFlBQVksNkJBQTZCLENBQUM7b0JBQUUsTUFBTSxLQUFLLENBQUM7Z0JBQ25FLE9BQU8sQ0FBQyxJQUFJLENBQUMsRUFBRSxRQUFRLEVBQUUsT0FBTyxFQUFFLFFBQVEsRUFBRSxPQUFPLEVBQUUsS0FBSyxDQUFDLE9BQU8sRUFBRSxDQUFDLENBQUM7WUFDeEUsQ0FBQztRQUNILENBQUM7UUFDRCxNQUFNLEVBQUUsY0FBYyxFQUFFLENBQUM7UUFDekIsTUFBTSxNQUFNLEdBQUcsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLFlBQVksRUFBRSxFQUFFLENBQUMsWUFBWSxDQUFDLE9BQU8sS0FBSyxXQUFXLENBQUM7ZUFDakYsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLFlBQVksRUFBRSxFQUFFLENBQUMsWUFBWSxDQUFDLE9BQU8sS0FBSyxXQUFXLENBQUM7ZUFDdkUsVUFBVSxDQUFDLElBQUksQ0FBQyxDQUFDLFlBQVksRUFBRSxFQUFFLENBQUMsWUFBWSxDQUFDLE9BQU8sS0FBSyxTQUFTLENBQUMsQ0FBQztRQUMzRSxJQUFJLE1BQU0sS0FBSyxTQUFTO1lBQUUsT0FBTyxFQUFFLEdBQUcsTUFBTSxFQUFFLFVBQVUsRUFBRSxPQUFPLEVBQUUsQ0FBQztRQUNwRSxNQUFNLE9BQU8sR0FBRyxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUMsU0FBUyxFQUFFLEVBQUUsQ0FBQyxHQUFHLFNBQVMsQ0FBQyxRQUFRLEtBQUssU0FBUyxDQUFDLE9BQU8sSUFBSSxTQUFTLENBQUMsT0FBTyxFQUFFLENBQUMsQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLENBQUM7UUFDMUgsTUFBTSxPQUFPLEdBQTRCO1lBQ3ZDLE9BQU8sRUFBRSxRQUFRO1lBQ2pCLE9BQU87WUFDUCxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsSUFBSSxDQUFDLEdBQUcsRUFBRSxDQUFDLFdBQVcsRUFBRSxFQUFFLE9BQU8sRUFBRSxRQUFRLEVBQUUsT0FBTyxFQUFFO1NBQ3RFLENBQUM7UUFDRixPQUFPLEVBQUUsR0FBRyxPQUFPLEVBQUUsVUFBVSxFQUFFLE9BQU8sRUFBRSxDQUFDO0lBQzdDLENBQUM7SUFFRDs7OztPQUlHO0lBQ0ksS0FBSyxDQUFDLHFCQUFxQixDQUFDLFlBQXFCLEVBQUUsU0FBMkI7UUFDbkYsT0FBTyxNQUFNLElBQUksQ0FBQyxLQUFLLENBQUMsWUFBWSxFQUFFLFNBQVMsRUFBRSxnQkFBZ0IsQ0FBQyxDQUFDO0lBQ3JFLENBQUM7SUFFRCx3RkFBd0Y7SUFDakYsS0FBSyxDQUFDLHlCQUF5QixDQUFDLE9BQWUsRUFBRSxTQUEyQjtRQUNqRixPQUFPLE1BQU0sSUFBSSxDQUFDLFNBQVMsQ0FBQyxPQUFPLEVBQUUsU0FBUyxFQUFFLGdCQUFnQixDQUFDLENBQUM7SUFDcEUsQ0FBQztJQUVEOzs7Ozs7T0FNRztJQUNJLEtBQUssQ0FBQyxtQkFBbUIsQ0FDOUIsT0FBZSxFQUNmLFNBQXVDO1FBRXZDLE1BQU0sU0FBUyxHQUFHLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNsRCxNQUFNLFFBQVEsR0FBRyxTQUFTLENBQUMsTUFBTTtZQUMvQixDQUFDLENBQUMsTUFBTSxJQUFJLENBQUMsTUFBTSxDQUFDLFNBQVMsQ0FBQyxLQUFLLEVBQUUsU0FBUyxDQUFDLE1BQU0sQ0FBQztZQUN0RCxDQUFDLENBQUMsZUFBZSxDQUFDLFNBQVMsRUFBRSxJQUFJLENBQUMsR0FBRyxFQUFFLENBQUMsV0FBVyxFQUFFLEVBQUUsU0FBUyxDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQzVFLElBQUksUUFBUSxDQUFDLE9BQU8sS0FBSyxTQUFTO1lBQUUsT0FBTyxRQUFRLENBQUM7UUFDcEQsT0FBTztZQUNMLE9BQU8sRUFBRSxVQUFVO1lBQ25CLFFBQVEsRUFBRSxRQUFRLENBQUMsUUFBUTtZQUMzQixNQUFNLEVBQUUsRUFBRSxHQUFHLFFBQVEsQ0FBQyxNQUFNLEVBQUUsUUFBUSxFQUFFLFNBQVMsQ0FBQyxRQUFRLEVBQUU7U0FDN0QsQ0FBQztJQUNKLENBQUM7SUFFTyxLQUFLLENBQUMsU0FBUyxDQUFDLE9BQWUsRUFBRSxTQUEyQixFQUFFLFNBQWtCO1FBQ3RGLE1BQU0sU0FBUyxHQUFHLElBQUksQ0FBQyxpQkFBaUIsQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNsRCxPQUFPLFNBQVMsQ0FBQyxNQUFNO1lBQ3JCLENBQUMsQ0FBQyxNQUFNLElBQUksQ0FBQyxLQUFLLENBQUMsU0FBUyxDQUFDLEtBQUssRUFBRSxTQUFTLEVBQUUsU0FBUyxDQUFDO1lBQ3pELENBQUMsQ0FBQyxlQUFlLENBQUMsU0FBUyxFQUFFLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQyxXQUFXLEVBQUUsRUFBRSxTQUFTLENBQUMsT0FBTyxDQUFDLENBQUM7SUFDOUUsQ0FBQztJQUVELHVGQUF1RjtJQUMvRSxpQkFBaUIsQ0FBQyxPQUFlO1FBQ3ZDLElBQUksQ0FBQztZQUNILE9BQU8sRUFBRSxNQUFNLEVBQUUsSUFBSSxFQUFFLEtBQUssRUFBRSxJQUFJLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxFQUFFLENBQUM7UUFDdEQsQ0FBQztRQUFDLE1BQU0sQ0FBQztZQUNQLE9BQU8sRUFBRSxNQUFNLEVBQUUsS0FBSyxFQUFFLE9BQU8sRUFBRSxFQUFFLE1BQU0sRUFBRSxlQUFlLEVBQUUsT0FBTyxFQUFFLHNCQUFzQixFQUFFLEVBQUUsQ0FBQztRQUNsRyxDQUFDO0lBQ0gsQ0FBQztJQUVPLEtBQUssQ0FBQyxLQUFLLENBQUMsWUFBcUIsRUFBRSxTQUEyQixFQUFFLFNBQWtCO1FBQ3hGLE1BQU0sUUFBUSxHQUFHLE1BQU0sSUFBSSxDQUFDLE1BQU0sQ0FBQyxZQUFZLEVBQUUsU0FBUyxDQUFDLENBQUM7UUFDNUQsSUFBSSxRQUFRLENBQUMsT0FBTyxLQUFLLFNBQVM7WUFBRSxPQUFPLFFBQVEsQ0FBQztRQUNwRCxNQUFNLFVBQVUsR0FBRyxPQUFPLENBQUMsbUJBQW1CLENBQUMsUUFBUSxDQUFDLDhCQUE4QixDQUFDLFNBQVMsRUFBRSxRQUFRLENBQUMsUUFBUSxDQUFDLENBQUM7UUFDckgsSUFBSSxVQUFVLENBQUMsT0FBTyxLQUFLLFNBQVM7WUFBRSxPQUFPLGVBQWUsQ0FBQyxZQUFZLEVBQUUsUUFBUSxDQUFDLE9BQU8sQ0FBQyxFQUFFLEVBQUUsVUFBVSxDQUFDLE9BQU8sQ0FBQyxDQUFDO1FBQ3BILElBQUksVUFBVSxDQUFDLE9BQU8sS0FBSyxXQUFXLEVBQUUsQ0FBQztZQUN2QyxPQUFPLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLEVBQUUsUUFBUSxDQUFDLE9BQU8sQ0FBQyxFQUFFLEVBQUUsT0FBTyxFQUFFLFdBQVcsRUFBRSxFQUFFLENBQUM7UUFDOUYsQ0FBQztRQUNELE9BQU8sUUFBUSxDQUFDO0lBQ2xCLENBQUM7SUFFRDs7OztPQUlHO0lBQ0ssS0FBSyxDQUFDLE1BQU0sQ0FBQyxZQUFxQixFQUFFLFNBQWtCO1FBQzVELE1BQU0sRUFBRSxHQUFHLElBQUksQ0FBQyxHQUFHLEVBQUUsQ0FBQyxXQUFXLEVBQUUsQ0FBQztRQUNwQyxJQUFJLFlBQTZFLENBQUM7UUFDbEYsSUFBSSxDQUFDO1lBQ0gsWUFBWSxHQUFHLE1BQU0sT0FBTyxDQUFDLDBCQUEwQixDQUFDLDZCQUE2QixDQUFDLFlBQVksRUFBRTtnQkFDbEcsV0FBVyxFQUFFLElBQUksQ0FBQyxXQUFXO2dCQUM3QixtQkFBbUIsRUFBRSxJQUFJLENBQUMsbUJBQW1CO2FBQzlDLENBQUMsQ0FBQztRQUNMLENBQUM7UUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1lBQ2YsT0FBTyxlQUFlLENBQUMsWUFBWSxFQUFFLEVBQUUsRUFBRTtnQkFDdkMsTUFBTSxFQUFFLGVBQWU7Z0JBQ3ZCLE9BQU8sRUFBRSxtQ0FBbUMsS0FBSyxZQUFZLEtBQUssQ0FBQyxDQUFDLENBQUMsS0FBSyxDQUFDLE9BQU8sQ0FBQyxDQUFDLENBQUMsTUFBTSxDQUFDLEtBQUssQ0FBQyxFQUFFO2FBQ3JHLENBQUMsQ0FBQztRQUNMLENBQUM7UUFDRCxJQUFJLENBQUMsWUFBWSxDQUFDLFFBQVE7WUFBRSxPQUFPLGVBQWUsQ0FBQyxZQUFZLEVBQUUsRUFBRSxFQUFFLFlBQVksQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUMzRixNQUFNLEVBQUUsUUFBUSxFQUFFLEtBQUssRUFBRSxHQUFHLFlBQVksQ0FBQztRQUN6QyxNQUFNLEVBQUUsT0FBTyxFQUFFLGFBQWEsRUFBRSxHQUFHLFFBQVEsQ0FBQztRQUM1QyxPQUFPO1lBQ0wsT0FBTyxFQUFFLFdBQVc7WUFDcEIsUUFBUTtZQUNSLE1BQU0sRUFBRTtnQkFDTixRQUFRLEVBQUUsRUFBRSxHQUFHLE9BQU8sQ0FBQyxRQUFRLEVBQUU7Z0JBQ2pDLFFBQVEsRUFBRSxPQUFPLENBQUMsUUFBUTtnQkFDMUIsYUFBYTtnQkFDYixXQUFXLEVBQUUsT0FBTyxDQUFDLFdBQVc7Z0JBQ2hDLGNBQWMsRUFBRSxPQUFPLENBQUMsY0FBYztnQkFDdEMsUUFBUSxFQUFFLEVBQUU7Z0JBQ1osS0FBSztnQkFDTCxNQUFNLEVBQUUsU0FBUzthQUNsQjtZQUNELE9BQU8sRUFBRSxFQUFFLEVBQUUsRUFBRSxPQUFPLEVBQUUsV0FBVyxFQUFFO1NBQ3RDLENBQUM7SUFDSixDQUFDO0lBRUQsb0ZBQW9GO0lBQzVFLEtBQUssQ0FBQyxpQkFBaUIsQ0FDN0IsV0FBbUIsRUFDbkIsU0FBa0M7UUFFbEMsTUFBTSxXQUFXLEdBQUcsR0FBRyxXQUFXLElBQUksMEJBQTBCLENBQUMsT0FBTyxDQUFDLEdBQUcsRUFBRSxLQUFLLENBQUMsU0FBUyxDQUFDO1FBQzlGLE1BQU0sYUFBYSxHQUFHLE1BQU0sSUFBSSxDQUFDLFVBQVUsQ0FBQyxXQUFXLEVBQUUsb0JBQW9CLEVBQUUsU0FBUyxDQUFDLENBQUM7UUFDMUYsSUFBSSxRQUFpQixDQUFDO1FBQ3RCLElBQUksQ0FBQztZQUNILFFBQVEsR0FBRyxJQUFJLENBQUMsS0FBSyxDQUFDLElBQUksV0FBVyxFQUFFLENBQUMsTUFBTSxDQUFDLGFBQWEsQ0FBQyxDQUFDLENBQUM7UUFDakUsQ0FBQztRQUFDLE1BQU0sQ0FBQztZQUNQLE1BQU0sSUFBSSw2QkFBNkIsQ0FBQyxHQUFHLFdBQVcsc0JBQXNCLENBQUMsQ0FBQztRQUNoRixDQUFDO1FBQ0QsTUFBTSxJQUFJLEdBQUcsUUFBUSxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsSUFBSSxDQUFDLENBQUMsQ0FBQyxTQUFTLENBQUM7UUFDNUQsSUFBSSxDQUFDLFFBQVEsQ0FBQyxRQUFRLENBQUMsSUFBSSxRQUFRLENBQUMsSUFBSSxLQUFLLDBCQUEwQixJQUFJLE9BQU8sUUFBUSxDQUFDLE9BQU8sS0FBSyxRQUFRO2VBQzFHLENBQUMsUUFBUSxDQUFDLElBQUksQ0FBQyxJQUFJLE9BQU8sSUFBSSxDQUFDLE9BQU8sS0FBSyxRQUFRLElBQUksT0FBTyxJQUFJLENBQUMsU0FBUyxLQUFLLFFBQVEsRUFBRSxDQUFDO1lBQy9GLE1BQU0sSUFBSSw2QkFBNkIsQ0FBQyxHQUFHLFdBQVcsZUFBZSwwQkFBMEIsbUJBQW1CLENBQUMsQ0FBQztRQUN0SCxDQUFDO1FBQ0QsTUFBTSxjQUFjLEdBQUcsUUFBUSxDQUFDLE9BQU8sQ0FBQztRQUN4QyxNQUFNLGNBQWMsR0FBRyxtQkFBbUIsQ0FBQyxJQUFJLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDM0QsSUFBSSxjQUFjLENBQUMsTUFBTSxLQUFLLENBQUMsRUFBRSxDQUFDO1lBQ2hDLE1BQU0sSUFBSSw2QkFBNkIsQ0FBQyxHQUFHLDBCQUEwQixJQUFJLGNBQWMsK0JBQStCLENBQUMsQ0FBQztRQUMxSCxDQUFDO1FBQ0QsSUFBSSxVQUFlLENBQUM7UUFDcEIsSUFBSSxDQUFDO1lBQ0gsVUFBVSxHQUFHLElBQUksR0FBRyxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsQ0FBQztRQUNyQyxDQUFDO1FBQUMsTUFBTSxDQUFDO1lBQ1AsTUFBTSxJQUFJLDZCQUE2QixDQUFDLEdBQUcsMEJBQTBCLElBQUksY0FBYyx1QkFBdUIsQ0FBQyxDQUFDO1FBQ2xILENBQUM7UUFDRCxJQUFJLFVBQVUsQ0FBQyxRQUFRLEtBQUssUUFBUSxJQUFJLFVBQVUsQ0FBQyxRQUFRLEtBQUssRUFBRSxJQUFJLFVBQVUsQ0FBQyxRQUFRLEtBQUssRUFBRSxFQUFFLENBQUM7WUFDakcsTUFBTSxJQUFJLDZCQUE2QixDQUFDLEdBQUcsMEJBQTBCLElBQUksY0FBYyxnREFBZ0QsQ0FBQyxDQUFDO1FBQzNJLENBQUM7UUFDRCxNQUFNLE9BQU8sR0FBRyxNQUFNLElBQUksQ0FBQyxVQUFVLENBQUMsVUFBVSxDQUFDLFFBQVEsRUFBRSxFQUFFLElBQUksQ0FBQyxtQkFBbUIsRUFBRSxTQUFTLENBQUMsQ0FBQztRQUNsRyxNQUFNLFlBQVksR0FBRyxRQUFRLENBQUMsSUFBSSxVQUFVLENBQUMsTUFBTSxNQUFNLENBQUMsTUFBTSxDQUFDLE1BQU0sQ0FBQyxTQUFTLEVBQUUsT0FBTyxDQUFDLENBQUMsQ0FBQyxDQUFDO1FBQzlGLElBQUksQ0FBQyxjQUFjLENBQUMsUUFBUSxDQUFDLFlBQVksQ0FBQyxFQUFFLENBQUM7WUFDM0MsTUFBTSxJQUFJLDZCQUE2QixDQUNyQyxHQUFHLDBCQUEwQixJQUFJLGNBQWMsNENBQTRDLENBQzVGLENBQUM7UUFDSixDQUFDO1FBQ0QsTUFBTSxZQUFZLEdBQUcsTUFBTSxnQkFBZ0IsQ0FBQyxPQUFPLEVBQUUsd0JBQXdCLEVBQUUsY0FBYyxFQUFFLElBQUksQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDO1FBQzFILE9BQU8sRUFBRSxjQUFjLEVBQUUsWUFBWSxFQUFFLENBQUM7SUFDMUMsQ0FBQztJQUVEOzs7O09BSUc7SUFDSyxLQUFLLENBQUMsVUFBVSxDQUN0QixNQUFjLEVBQ2QsZUFBdUIsRUFDdkIsU0FBa0M7UUFFbEMsTUFBTSxVQUFVLEdBQUcsSUFBSSxlQUFlLEVBQUUsQ0FBQztRQUN6QyxNQUFNLEtBQUssR0FBRyxVQUFVLENBQUMsR0FBRyxFQUFFLENBQUMsVUFBVSxDQUFDLEtBQUssRUFBRSxFQUFFLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxDQUFDO1FBQzFFLE1BQU0sTUFBTSxHQUFHLFNBQVMsS0FBSyxTQUFTLENBQUMsQ0FBQyxDQUFDLFVBQVUsQ0FBQyxNQUFNLENBQUMsQ0FBQyxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsQ0FBQyxVQUFVLENBQUMsTUFBTSxFQUFFLFNBQVMsQ0FBQyxDQUFDLENBQUM7UUFDN0csSUFBSSxDQUFDO1lBQ0gsTUFBTSxRQUFRLEdBQUcsTUFBTSxJQUFJLENBQUMsYUFBYSxDQUFDLE1BQU0sRUFBRTtnQkFDaEQsTUFBTTtnQkFDTixRQUFRLEVBQUUsT0FBTztnQkFDakIsT0FBTyxFQUFFLEVBQUUsTUFBTSxFQUFFLDRDQUE0QyxFQUFFO2FBQ2xFLENBQUMsQ0FBQztZQUNILElBQUksQ0FBQyxRQUFRLENBQUMsRUFBRSxFQUFFLENBQUM7Z0JBQ2pCLE1BQU0sUUFBUSxDQUFDLElBQUksRUFBRSxNQUFNLEVBQUUsQ0FBQztnQkFDOUIsTUFBTSxJQUFJLDZCQUE2QixDQUFDLFFBQVEsUUFBUSxDQUFDLE1BQU0sUUFBUSxNQUFNLEVBQUUsQ0FBQyxDQUFDO1lBQ25GLENBQUM7WUFDRCxNQUFNLGNBQWMsR0FBRyxNQUFNLENBQUMsUUFBUSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsZ0JBQWdCLENBQUMsSUFBSSxHQUFHLENBQUMsQ0FBQztZQUM3RSxJQUFJLGNBQWMsR0FBRyxlQUFlLEVBQUUsQ0FBQztnQkFDckMsTUFBTSxRQUFRLENBQUMsSUFBSSxFQUFFLE1BQU0sRUFBRSxDQUFDO2dCQUM5QixNQUFNLElBQUksNkJBQTZCLENBQUMsR0FBRyxNQUFNLFlBQVksZUFBZSxRQUFRLENBQUMsQ0FBQztZQUN4RixDQUFDO1lBQ0QsSUFBSSxRQUFRLENBQUMsSUFBSSxLQUFLLElBQUk7Z0JBQUUsTUFBTSxJQUFJLDZCQUE2QixDQUFDLEdBQUcsTUFBTSxtQkFBbUIsQ0FBQyxDQUFDO1lBQ2xHLE9BQU8sTUFBTSxXQUFXLENBQUMsUUFBUSxDQUFDLElBQUksRUFBRSxlQUFlLEVBQUUsTUFBTSxDQUFDLENBQUM7UUFDbkUsQ0FBQztRQUFDLE9BQU8sS0FBSyxFQUFFLENBQUM7WUFDZixTQUFTLEVBQUUsY0FBYyxFQUFFLENBQUM7WUFDNUIsSUFBSSxVQUFVLENBQUMsTUFBTSxDQUFDLE9BQU8sRUFBRSxDQUFDO2dCQUM5QixNQUFNLElBQUksNkJBQTZCLENBQUMsR0FBRyxNQUFNLG9CQUFvQixJQUFJLENBQUMsZ0JBQWdCLEtBQUssQ0FBQyxDQUFDO1lBQ25HLENBQUM7WUFDRCxJQUFJLEtBQUssWUFBWSw2QkFBNkI7Z0JBQUUsTUFBTSxLQUFLLENBQUM7WUFDaEUsTUFBTSxJQUFJLDZCQUE2QixDQUNyQyxHQUFHLE1BQU0sWUFBWSxLQUFLLFlBQVksS0FBSyxDQUFDLENBQUMsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FDOUUsQ0FBQztRQUNKLENBQUM7Z0JBQVMsQ0FBQztZQUNULFlBQVksQ0FBQyxLQUFLLENBQUMsQ0FBQztRQUN0QixDQUFDO0lBQ0gsQ0FBQztDQUNGO0FBRUQsNEZBQTRGO0FBQzVGLE1BQU0sZUFBZSxHQUFHLENBQUMsWUFBcUIsRUFBRSxLQUFhLEVBQUUsVUFBb0IsRUFBMkIsRUFBRTtJQUM5RyxNQUFNLFFBQVEsR0FBRyxxQkFBcUIsQ0FBQyxZQUFZLENBQUMsQ0FBQztJQUNyRCxPQUFPO1FBQ0wsT0FBTyxFQUFFLFNBQVM7UUFDbEIsT0FBTyxFQUFFLEVBQUUsR0FBRyxVQUFVLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxHQUFHLENBQUMsUUFBUSxLQUFLLFNBQVMsQ0FBQyxDQUFDLENBQUMsRUFBRSxDQUFDLENBQUMsQ0FBQyxFQUFFLFFBQVEsRUFBRSxDQUFDLEVBQUU7UUFDdEYsT0FBTyxFQUFFLEVBQUUsRUFBRSxFQUFFLEtBQUssRUFBRSxPQUFPLEVBQUUsU0FBUyxFQUFFLE9BQU8sRUFBRSxHQUFHLFVBQVUsQ0FBQyxNQUFNLEtBQUssVUFBVSxDQUFDLE9BQU8sRUFBRSxFQUFFO0tBQ25HLENBQUM7QUFDSixDQUFDLENBQUM7QUFFRixNQUFNLHFCQUFxQixHQUFHLENBQUMsWUFBcUIsRUFBc0IsRUFBRTtJQUMxRSxNQUFNLE9BQU8sR0FBRyxRQUFRLENBQUMsWUFBWSxDQUFDLENBQUMsQ0FBQyxDQUFDLFlBQVksQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQztJQUMxRSxNQUFNLFFBQVEsR0FBRyxRQUFRLENBQUMsT0FBTyxDQUFDLENBQUMsQ0FBQyxDQUFDLE9BQU8sQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQztJQUNsRSxPQUFPLE9BQU8sUUFBUSxLQUFLLFFBQVEsSUFBSSxNQUFNLENBQUMsYUFBYSxDQUFDLFFBQVEsQ0FBQyxDQUFDLENBQUMsQ0FBQyxRQUFRLENBQUMsQ0FBQyxDQUFDLFNBQVMsQ0FBQztBQUMvRixDQUFDLENBQUM7QUFFRixNQUFNLFdBQVcsR0FBRyxLQUFLLEVBQ3ZCLFNBQXFDLEVBQ3JDLGVBQXVCLEVBQ3ZCLFFBQWdCLEVBQ2tCLEVBQUU7SUFDcEMsTUFBTSxNQUFNLEdBQUcsU0FBUyxDQUFDLFNBQVMsRUFBRSxDQUFDO0lBQ3JDLE1BQU0sTUFBTSxHQUFpQixFQUFFLENBQUM7SUFDaEMsSUFBSSxLQUFLLEdBQUcsQ0FBQyxDQUFDO0lBQ2QsSUFBSSxDQUFDO1FBQ0gsU0FBUyxDQUFDO1lBQ1IsTUFBTSxFQUFFLElBQUksRUFBRSxLQUFLLEVBQUUsR0FBRyxNQUFNLE1BQU0sQ0FBQyxJQUFJLEVBQUUsQ0FBQztZQUM1QyxJQUFJLElBQUk7Z0JBQUUsTUFBTTtZQUNoQixLQUFLLElBQUksS0FBSyxDQUFDLFVBQVUsQ0FBQztZQUMxQixJQUFJLEtBQUssR0FBRyxlQUFlLEVBQUUsQ0FBQztnQkFDNUIsTUFBTSxNQUFNLENBQUMsTUFBTSxFQUFFLENBQUM7Z0JBQ3RCLE1BQU0sSUFBSSw2QkFBNkIsQ0FBQyxHQUFHLFFBQVEsWUFBWSxlQUFlLFFBQVEsQ0FBQyxDQUFDO1lBQzFGLENBQUM7WUFDRCxNQUFNLENBQUMsSUFBSSxDQUFDLEtBQUssQ0FBQyxDQUFDO1FBQ3JCLENBQUM7SUFDSCxDQUFDO1lBQVMsQ0FBQztRQUNULE1BQU0sQ0FBQyxXQUFXLEVBQUUsQ0FBQztJQUN2QixDQUFDO0lBQ0QsTUFBTSxLQUFLLEdBQUcsSUFBSSxVQUFVLENBQUMsS0FBSyxDQUFDLENBQUM7SUFDcEMsSUFBSSxNQUFNLEdBQUcsQ0FBQyxDQUFDO0lBQ2YsS0FBSyxNQUFNLEtBQUssSUFBSSxNQUFNLEVBQUUsQ0FBQztRQUMzQixLQUFLLENBQUMsR0FBRyxDQUFDLEtBQUssRUFBRSxNQUFNLENBQUMsQ0FBQztRQUN6QixNQUFNLElBQUksS0FBSyxDQUFDLFVBQVUsQ0FBQztJQUM3QixDQUFDO0lBQ0QsT0FBTyxLQUFLLENBQUM7QUFDZixDQUFDLENBQUM7QUFFRjs7OztHQUlHO0FBQ0gsTUFBTSxnQkFBZ0IsR0FBRyxLQUFLLEVBQzVCLFVBQW1DLEVBQ25DLFlBQW9CLEVBQ3BCLGlCQUF5QixFQUN6Qix1QkFBK0IsRUFDZCxFQUFFO0lBQ25CLE1BQU0sS0FBSyxHQUFHLEdBQUcsMEJBQTBCLElBQUksaUJBQWlCLEVBQUUsQ0FBQztJQUNuRSxJQUFJLENBQUM7UUFDSCxNQUFNLE9BQU8sR0FBRyxNQUFNLFdBQVcsQ0FDL0IsSUFBSSxJQUFJLENBQUMsQ0FBQyxVQUFVLENBQUMsQ0FBQyxDQUFDLE1BQU0sRUFBRSxDQUFDLFdBQVcsQ0FBQyxJQUFJLG1CQUFtQixDQUFDLE1BQU0sQ0FBQyxDQUFDLEVBQzVFLHVCQUF1QixFQUN2QixHQUFHLEtBQUssbUJBQW1CLENBQzVCLENBQUM7UUFDRixNQUFNLEtBQUssR0FBRyxDQUFDLE1BQU0sT0FBTyxDQUFDLFNBQVMsQ0FBQyxTQUFTLENBQUMsT0FBTyxFQUFFLEVBQUUsTUFBTSxFQUFFLElBQUksRUFBRSxDQUFDLENBQUM7YUFDekUsSUFBSSxDQUFDLENBQUMsUUFBUSxFQUFFLEVBQUUsQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLElBQUksS0FBSyxZQUFZLElBQUksQ0FBQyxRQUFRLENBQUMsTUFBTSxDQUFDLElBQUksSUFBSSxNQUFNLENBQUMsS0FBSyxNQUFNLENBQUMsQ0FBQztRQUM1RyxJQUFJLEtBQUssRUFBRSxJQUFJLEtBQUssU0FBUyxFQUFFLENBQUM7WUFDOUIsTUFBTSxJQUFJLDZCQUE2QixDQUFDLEdBQUcsS0FBSyxlQUFlLGtDQUFrQyxFQUFFLENBQUMsQ0FBQztRQUN2RyxDQUFDO1FBQ0QsSUFBSSxLQUFLLENBQUMsSUFBSSxDQUFDLFVBQVUsR0FBRyxvQkFBb0IsRUFBRSxDQUFDO1lBQ2pELE1BQU0sSUFBSSw2QkFBNkIsQ0FBQyxHQUFHLEtBQUssSUFBSSxrQ0FBa0MsWUFBWSxvQkFBb0IsUUFBUSxDQUFDLENBQUM7UUFDbEksQ0FBQztRQUNELE9BQU8sSUFBSSxXQUFXLEVBQUUsQ0FBQyxNQUFNLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxDQUFDO0lBQzlDLENBQUM7SUFBQyxPQUFPLEtBQUssRUFBRSxDQUFDO1FBQ2YsSUFBSSxLQUFLLFlBQVksNkJBQTZCO1lBQUUsTUFBTSxLQUFLLENBQUM7UUFDaEUsTUFBTSxJQUFJLDZCQUE2QixDQUNyQyxHQUFHLEtBQUssK0JBQStCLEtBQUssWUFBWSxLQUFLLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBQyxPQUFPLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQyxLQUFLLENBQUMsRUFBRSxDQUNoRyxDQUFDO0lBQ0osQ0FBQztBQUNILENBQUMsQ0FBQyJ9

package/dist_ts_client/plugins.d.ts

@@ -0,0 +1,5 @@
+import * as servezoneInterfaces from '@serve.zone/interfaces';
+import * as servezoneInterfacesRuntime from '@serve.zone/interfaces/runtime';
+export { servezoneInterfaces, servezoneInterfacesRuntime };
+import * as modernTar from 'modern-tar';
+export { modernTar };

package/dist_ts_client/plugins.js

@@ -0,0 +1,8 @@
+// @serve.zone scope
+import * as servezoneInterfaces from '@serve.zone/interfaces';
+import * as servezoneInterfacesRuntime from '@serve.zone/interfaces/runtime';
+export { servezoneInterfaces, servezoneInterfacesRuntime };
+// third party
+import * as modernTar from 'modern-tar';
+export { modernTar };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicGx1Z2lucy5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uL3RzX2NsaWVudC9wbHVnaW5zLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLG9CQUFvQjtBQUNwQixPQUFPLEtBQUssbUJBQW1CLE1BQU0sd0JBQXdCLENBQUM7QUFDOUQsT0FBTyxLQUFLLDBCQUEwQixNQUFNLGdDQUFnQyxDQUFDO0FBRTdFLE9BQU8sRUFBRSxtQkFBbUIsRUFBRSwwQkFBMEIsRUFBRSxDQUFDO0FBRTNELGNBQWM7QUFDZCxPQUFPLEtBQUssU0FBUyxNQUFNLFlBQVksQ0FBQztBQUV4QyxPQUFPLEVBQUUsU0FBUyxFQUFFLENBQUMifQ==

package/dist_ts_client/projection.d.ts

@@ -0,0 +1,59 @@
+import * as plugins from './plugins.js';
+type TCatalog = plugins.servezoneInterfaces.appstore.IAppStoreCatalog;
+type TCatalogApp = plugins.servezoneInterfaces.appstore.IAppStoreCatalogApp;
+type TAppStoreApp = plugins.servezoneInterfaces.appstore.IAppStoreApp;
+type TAppStoreAppMeta = plugins.servezoneInterfaces.appstore.IAppStoreAppMeta;
+type TVersionState = plugins.servezoneInterfaces.appstore.IAppStoreAppVersionState;
+/** The consumer a projection is for: the feature ids it fulfils, and which host release it is. */
+export interface IAppStoreCatalogProjectionOptions {
+    /** The `requiresFeatures` ids this consumer fulfils, e.g. `appStoreStorageFeatureIds` values. */
+    supportedFeatureIds: Iterable<string>;
+    /** The host and its release, judged against each version's `minOneboxVersion` / `minCloudlyVersion`. */
+    consumer: plugins.servezoneInterfaces.appstore.IAppStoreCatalogConsumer;
+}
+/** The App Store shapes Onebox and Cloudly carry in their views and requests for one app. */
+export interface IAppStoreCatalogAppDisplay {
+    /** The listing entry (`getAppStoreTemplates`). */
+    app: TAppStoreApp;
+    /** The app metadata (`getAppStoreConfig`, the upgrade preview). */
+    meta: TAppStoreAppMeta;
+}
+/** One catalog app as a consumer with its supported feature ids sees it. */
+export interface IAppStoreCatalogAppProjection {
+    appId: string;
+    /** The catalog's `latestVersion`, the publisher's latest, whether or not this consumer may install it. */
+    catalogLatestVersion: string;
+    /**
+     * Every listed version in catalog order, withdrawn, feature-gated and newer-release-gated ones
+     * included, each with `installRefusal` as `appstore.judgeAppStoreCatalogInstallTarget` answers it.
+     */
+    versions: TVersionState[];
+    /**
+     * The newest version this consumer may install, or `null` when none is: every version withdrawn,
+     * gated on a feature it does not fulfil or requiring a newer release of it. Under `semver` the highest install target; under
+     * `branch` the catalog's `latestVersion` when it is one, since branch tokens have no order.
+     */
+    latestInstallableVersion: string | null;
+    /**
+     * The display shapes, or `null` when `latestInstallableVersion` is: their `versions` list only
+     * install targets and their `latestVersion` names `latestInstallableVersion`, so a version
+     * picker built from them never offers a version the consumer refuses; their `versionStates`
+     * state every listed version with its refusal.
+     */
+    display: IAppStoreCatalogAppDisplay | null;
+}
+/**
+ * Projects one catalog app for a consumer: every listed version with its install refusal, the
+ * newest install target for this consumer, and the `IAppStoreApp` / `IAppStoreAppMeta` shapes its App Store views
+ * show. Pure: it reads the catalog app and never changes it.
+ */
+export declare const projectAppStoreCatalogApp: (appArg: TCatalogApp, optionsArg: IAppStoreCatalogProjectionOptions) => IAppStoreCatalogAppProjection;
+/** Projects every catalog app, in catalog order (by id). */
+export declare const projectAppStoreCatalog: (catalogArg: TCatalog, optionsArg: IAppStoreCatalogProjectionOptions) => IAppStoreCatalogAppProjection[];
+/**
+ * The App Store listing a consumer serves (`getAppStoreTemplates`): one `IAppStoreApp` per app
+ * that has an install target for it, in catalog order. An app without one is left out of the
+ * listing; its projection (`projectAppStoreCatalogApp`) still states why.
+ */
+export declare const getAppStoreCatalogListing: (catalogArg: TCatalog, optionsArg: IAppStoreCatalogProjectionOptions) => TAppStoreApp[];
+export {};