@snappedly-tools/shipyard 0.8.0 → 0.9.1

package/dist/integrations/releases.js

@@ -0,0 +1,500 @@
+import { createHash } from 'crypto';
+
+// src/integrations/releases/index.ts
+var InMemoryReleaseStore = class {
+  states = /* @__PURE__ */ new Map();
+  get(key) {
+    const state = this.states.get(key);
+    return state === void 0 ? void 0 : structuredClone(state);
+  }
+  save(state) {
+    this.states.set(state.key, structuredClone(state));
+  }
+};
+var canonicalCandidate = (candidate) => JSON.stringify({
+  artifactDigest: candidate.artifactDigest,
+  artifactRef: candidate.artifactRef,
+  briefHash: candidate.briefHash,
+  reviewedHeadSha: candidate.reviewedHeadSha,
+  sourceSha: candidate.sourceSha,
+  version: candidate.version ?? ""
+});
+var releaseCandidateKey = (candidate) => createHash("sha256").update(canonicalCandidate(candidate)).digest("hex");
+var sameCandidate = (left, right) => releaseCandidateKey(left) === releaseCandidateKey(right);
+var defaultNow = () => (/* @__PURE__ */ new Date()).toISOString();
+var isFreshTimestamp = (value, now, maxAgeSeconds) => {
+  const timestamp = Date.parse(value);
+  const current = Date.parse(now);
+  return Number.isFinite(timestamp) && Number.isFinite(current) && timestamp <= current && current - timestamp <= maxAgeSeconds * 1e3;
+};
+var approvalRoles = (policy) => policy.approvalRoles ?? ["owner", "maintainer"];
+var validCandidate = (candidate, validateArtifactRef) => {
+  const fields = [
+    ["sourceSha", candidate.sourceSha],
+    ["reviewedHeadSha", candidate.reviewedHeadSha],
+    ["briefHash", candidate.briefHash],
+    ["artifactDigest", candidate.artifactDigest],
+    ["artifactRef", candidate.artifactRef]
+  ];
+  const missing = fields.find(
+    ([, value]) => typeof value !== "string" || value.trim().length === 0
+  );
+  if (missing !== void 0) return `${missing[0]} is required`;
+  const gitObject = /^[0-9a-f]{40}(?:[0-9a-f]{24})?$/i;
+  if (!gitObject.test(candidate.sourceSha)) {
+    return "sourceSha must be a full Git object id";
+  }
+  if (!gitObject.test(candidate.reviewedHeadSha)) {
+    return "reviewedHeadSha must be a full Git object id";
+  }
+  if (!/^[0-9a-f]{64}$/i.test(candidate.briefHash)) {
+    return "briefHash must be a SHA-256 hash";
+  }
+  if (!/^sha256:[0-9a-f]{64}$/i.test(candidate.artifactDigest)) {
+    return "artifactDigest must be a SHA-256 digest";
+  }
+  if (/[\s?#]/.test(candidate.artifactRef)) {
+    return "artifactRef must not contain whitespace, a query, or a fragment";
+  }
+  const digestReference = candidate.artifactRef.match(
+    /@sha256:([0-9a-f]{64})$/i
+  );
+  if (digestReference !== null) {
+    return digestReference[1].toLowerCase() === candidate.artifactDigest.slice("sha256:".length).toLowerCase() ? void 0 : "digest-qualified artifactRef must match artifactDigest";
+  }
+  const immutableNpmReference = /^npm:(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*@v?\d+\.\d+\.\d+(?:-[0-9a-z.-]+)?(?:\+[0-9a-z.-]+)?$/i;
+  const immutableGitReference = /^(?:git|github):[^\s/@]+\/[^\s@]+@[0-9a-f]{40}(?:[0-9a-f]{24})?$/i;
+  if (immutableNpmReference.test(candidate.artifactRef) || immutableGitReference.test(candidate.artifactRef)) {
+    return void 0;
+  }
+  if (validateArtifactRef !== void 0) {
+    return validateArtifactRef(candidate);
+  }
+  return "artifactRef format is not proven immutable";
+};
+var isIntentDeploymentId = (deploymentId) => deploymentId.startsWith("intent:");
+var requiredChecksPassed = (policy, checks) => {
+  const reasons = [];
+  for (const required of policy.requiredStagingChecks) {
+    const check = checks.find((candidate) => candidate.name === required);
+    if (check === void 0)
+      reasons.push(`Required staging check is missing: ${required}`);
+    else if (check.status !== "passed") {
+      reasons.push(`Required staging check ${required} is ${check.status}`);
+    }
+  }
+  return reasons;
+};
+var verificationReasons = (policy, verification) => [
+  ...requiredChecksPassed(policy, verification.checks),
+  ...verification.smoke === "passed" ? [] : [`Staging smoke is ${verification.smoke}`],
+  ...verification.health === "passed" ? [] : [`Staging health is ${verification.health}`],
+  ...verification.failureReason ? [verification.failureReason] : []
+];
+var blocked = (reason, state) => ({
+  outcome: "blocked",
+  reason,
+  state
+});
+var ReleaseIntegration = class {
+  policy;
+  store;
+  transport;
+  actor;
+  validateArtifactRef;
+  now;
+  constructor(options) {
+    if (options.policy.repository.trim().length === 0) {
+      throw new Error("Release policy repository is required");
+    }
+    if (options.policy.stagingName.trim().length === 0) {
+      throw new Error("Release policy staging environment is required");
+    }
+    if (options.policy.productionName.trim().length === 0) {
+      throw new Error("Release policy production environment is required");
+    }
+    if (options.actor.id.trim().length === 0) {
+      throw new Error("Release actor is required");
+    }
+    if (options.policy.approvalRoles?.some(
+      (role) => role !== "owner" && role !== "maintainer"
+    )) {
+      throw new Error("Release approval roles are invalid");
+    }
+    this.policy = structuredClone(options.policy);
+    this.store = options.store;
+    this.transport = options.transport;
+    this.actor = options.actor;
+    this.validateArtifactRef = options.validateArtifactRef;
+    this.now = options.now ?? defaultNow;
+  }
+  // Bind evidence and remote idempotency to the deployment target and gate.
+  // Candidate-only records from older versions deliberately do not authorize releases.
+  stateKey(candidate) {
+    return createHash("sha256").update(
+      JSON.stringify({
+        candidate: releaseCandidateKey(candidate),
+        repository: this.policy.repository,
+        staging: this.policy.stagingName,
+        production: this.policy.productionName,
+        checks: [...this.policy.requiredStagingChecks].sort(),
+        humanApproval: this.policy.requireHumanApproval,
+        roles: [...approvalRoles(this.policy)].sort(),
+        freshness: this.policy.approvalFreshnessSeconds ?? 300,
+        recovery: this.policy.recoveryMode
+      })
+    ).digest("hex");
+  }
+  async requestStaging(candidate) {
+    const invalid = validCandidate(candidate, this.validateArtifactRef);
+    if (invalid !== void 0)
+      return blocked(`Invalid release candidate: ${invalid}`);
+    const key = this.stateKey(candidate);
+    const existing = this.store.get(key);
+    const idempotencyKey = `shipyard:${key}:staging`;
+    const intentId = `intent:${idempotencyKey}`;
+    if (existing !== void 0 && (existing.status !== "staging-requested" || existing.staging?.deploymentId !== intentId)) {
+      return { outcome: "duplicate", state: existing };
+    }
+    const timestamp = this.now();
+    const intent = existing ?? {
+      key,
+      candidate,
+      status: "staging-requested",
+      staging: {
+        environment: "staging",
+        candidate,
+        deploymentId: intentId,
+        checks: [],
+        smoke: "unknown",
+        health: "unknown",
+        recordedAt: timestamp
+      },
+      updatedAt: timestamp
+    };
+    this.store.save(intent);
+    const deployment = await this.requestDeployment(
+      "staging",
+      candidate,
+      idempotencyKey
+    );
+    if (deployment === void 0) {
+      return {
+        outcome: "failed",
+        reason: "Staging deployment could not be requested",
+        state: this.store.get(key)
+      };
+    }
+    const updated = {
+      ...intent,
+      staging: {
+        ...intent.staging,
+        deploymentId: deployment.deploymentId,
+        recordedAt: this.now()
+      },
+      updatedAt: this.now()
+    };
+    this.store.save(updated);
+    return { outcome: "requested", state: updated };
+  }
+  recordStagingVerification(verification) {
+    const invalid = validCandidate(
+      verification.candidate,
+      this.validateArtifactRef
+    );
+    if (invalid !== void 0)
+      return blocked(`Invalid release candidate: ${invalid}`);
+    if (verification.environment !== "staging")
+      return blocked("Verification is not for staging");
+    const key = this.stateKey(verification.candidate);
+    const state = this.store.get(key);
+    if (state === void 0)
+      return blocked("Staging deployment was not requested");
+    if (state.staging === void 0 || isIntentDeploymentId(state.staging.deploymentId)) {
+      return blocked(
+        "Staging deployment request has not been confirmed",
+        state
+      );
+    }
+    if (state.staging?.deploymentId !== verification.deploymentId) {
+      return blocked(
+        "Staging verification references a different deployment",
+        state
+      );
+    }
+    if (state.status === "production-failed") {
+      return blocked(
+        "Production verification failed; recovery is required before staging can be recorded",
+        state
+      );
+    }
+    if (!sameCandidate(state.candidate, verification.candidate)) {
+      return blocked(
+        "Staging verification references a different candidate",
+        state
+      );
+    }
+    const reasons = verificationReasons(this.policy, verification);
+    const updated = {
+      ...state,
+      status: reasons.length === 0 ? "staging-verified" : "staging-failed",
+      staging: structuredClone(verification),
+      updatedAt: this.now()
+    };
+    this.store.save(updated);
+    return reasons.length === 0 ? { outcome: "verified", state: updated } : { outcome: "failed", reason: reasons.join("; "), state: updated };
+  }
+  approveProduction(input) {
+    const invalid = validCandidate(input.candidate, this.validateArtifactRef);
+    if (invalid !== void 0)
+      return blocked(`Invalid release candidate: ${invalid}`);
+    const key = this.stateKey(input.candidate);
+    const state = this.store.get(key);
+    if (state === void 0)
+      return blocked("Candidate has no staging release state");
+    if (state.status !== "staging-verified") {
+      if (state.status === "production-approved") {
+        return { outcome: "duplicate", state };
+      }
+      return blocked("Production approval requires verified staging", state);
+    }
+    if (!this.policy.requireHumanApproval) {
+      return blocked(
+        "Production approval policy is not configured for a human gate",
+        state
+      );
+    }
+    if (!sameCandidate(input.candidate, input.approval.candidate)) {
+      return blocked(
+        "Production approval does not match the exact candidate",
+        state
+      );
+    }
+    if (input.approval.actor.id.trim().length === 0) {
+      return blocked("Production approval actor is missing", state);
+    }
+    const actorRole = input.approval.actor.role;
+    if (actorRole === "release-coordinator") {
+      return blocked(
+        "Production approval requires an owner or maintainer",
+        state
+      );
+    }
+    if (!approvalRoles(this.policy).includes(actorRole)) {
+      return blocked(
+        "Production approval role is not allowed by release policy",
+        state
+      );
+    }
+    if (input.approval.approvedAt.trim().length === 0) {
+      return blocked("Production approval timestamp is missing", state);
+    }
+    const approvalFreshnessSeconds = this.policy.approvalFreshnessSeconds ?? 300;
+    if (!Number.isFinite(approvalFreshnessSeconds) || approvalFreshnessSeconds <= 0) {
+      return blocked("Production approval freshness policy is invalid", state);
+    }
+    if (!isFreshTimestamp(
+      input.approval.approvedAt,
+      this.now(),
+      approvalFreshnessSeconds
+    )) {
+      return blocked("Production approval evidence is not fresh", state);
+    }
+    const updated = {
+      ...state,
+      status: "production-approved",
+      approval: structuredClone(input.approval),
+      updatedAt: this.now()
+    };
+    this.store.save(updated);
+    return { outcome: "approved", state: updated };
+  }
+  async promoteProduction(candidate) {
+    const invalid = validCandidate(candidate, this.validateArtifactRef);
+    if (invalid !== void 0)
+      return blocked(`Invalid release candidate: ${invalid}`);
+    const key = this.stateKey(candidate);
+    const state = this.store.get(key);
+    if (state === void 0) return blocked("Candidate has no release state");
+    const idempotencyKey = `shipyard:${key}:production`;
+    const intentId = `intent:${idempotencyKey}`;
+    if (state.status === "production-verified") {
+      return { outcome: "duplicate", state };
+    }
+    const pendingIntent = state.status === "production-requested" && state.production?.deploymentId === intentId;
+    if (state.status === "production-requested" && !pendingIntent) {
+      return { outcome: "duplicate", state };
+    }
+    if (state.status === "production-failed") {
+      return blocked(
+        "Production verification failed; recovery decision is required",
+        state
+      );
+    }
+    if (!pendingIntent && (state.status !== "production-approved" || state.approval === void 0)) {
+      return blocked(
+        "Production promotion requires exact human approval after staging",
+        state
+      );
+    }
+    if (state.approval === void 0 || !sameCandidate(candidate, state.approval.candidate)) {
+      return blocked("Production approval is stale for this candidate", state);
+    }
+    const approvalFreshnessSeconds = this.policy.approvalFreshnessSeconds ?? 300;
+    if (!Number.isFinite(approvalFreshnessSeconds) || approvalFreshnessSeconds <= 0) {
+      return blocked("Production approval freshness policy is invalid", state);
+    }
+    if (!isFreshTimestamp(
+      state.approval.approvedAt,
+      this.now(),
+      approvalFreshnessSeconds
+    )) {
+      return blocked("Production approval evidence is not fresh", state);
+    }
+    const intent = pendingIntent ? state : {
+      ...state,
+      status: "production-requested",
+      production: {
+        environment: "production",
+        candidate,
+        deploymentId: intentId,
+        checks: [],
+        smoke: "unknown",
+        health: "unknown",
+        recordedAt: this.now()
+      },
+      updatedAt: this.now()
+    };
+    if (!pendingIntent) this.store.save(intent);
+    const deployment = await this.requestDeployment(
+      "production",
+      candidate,
+      idempotencyKey
+    );
+    if (deployment === void 0) {
+      return {
+        outcome: "failed",
+        reason: "Production deployment could not be requested",
+        state: this.store.get(key)
+      };
+    }
+    const updated = {
+      ...intent,
+      production: {
+        ...intent.production,
+        deploymentId: deployment.deploymentId,
+        recordedAt: this.now()
+      },
+      updatedAt: this.now()
+    };
+    this.store.save(updated);
+    return { outcome: "requested", state: updated };
+  }
+  async requestDeployment(environment, candidate, idempotencyKey) {
+    const environmentName = environment === "staging" ? this.policy.stagingName : this.policy.productionName;
+    let reconciled;
+    try {
+      reconciled = this.transport.reconcileDeployment ? await this.transport.reconcileDeployment({
+        environment,
+        environmentName,
+        candidate,
+        idempotencyKey
+      }) : void 0;
+    } catch {
+      reconciled = void 0;
+    }
+    if (reconciled !== void 0) {
+      return reconciled.deploymentId.trim().length > 0 ? reconciled : void 0;
+    }
+    try {
+      const deployment = await this.transport.requestDeployment({
+        environment,
+        environmentName,
+        candidate,
+        actor: this.actor,
+        idempotencyKey
+      });
+      if (deployment.deploymentId.trim().length === 0) {
+        return void 0;
+      }
+      return deployment;
+    } catch {
+      return void 0;
+    }
+  }
+  recordProductionVerification(verification) {
+    const invalid = validCandidate(
+      verification.candidate,
+      this.validateArtifactRef
+    );
+    if (invalid !== void 0)
+      return blocked(`Invalid release candidate: ${invalid}`);
+    if (verification.environment !== "production")
+      return blocked("Verification is not for production");
+    const key = this.stateKey(verification.candidate);
+    const state = this.store.get(key);
+    if (state === void 0 || state.production === void 0) {
+      return blocked("Production deployment was not requested");
+    }
+    if (isIntentDeploymentId(state.production.deploymentId)) {
+      return blocked(
+        "Production deployment request has not been confirmed",
+        state
+      );
+    }
+    if (state.status === "production-failed") {
+      return blocked(
+        "Production verification already failed; record recovery before any new candidate",
+        state
+      );
+    }
+    if (state.production.deploymentId !== verification.deploymentId || !sameCandidate(state.candidate, verification.candidate)) {
+      return blocked(
+        "Production verification references a different deployment or candidate",
+        state
+      );
+    }
+    const failed = requiredChecksPassed(this.policy, verification.checks).length > 0 || verification.smoke !== "passed" || verification.health !== "passed" || verification.checks.some((check) => check.status !== "passed");
+    const updated = {
+      ...state,
+      status: failed ? "production-failed" : "production-verified",
+      production: structuredClone(verification),
+      updatedAt: this.now()
+    };
+    this.store.save(updated);
+    return failed ? {
+      outcome: "failed",
+      reason: verification.failureReason ?? "Production verification failed",
+      state: updated
+    } : { outcome: "verified", state: updated };
+  }
+  recordRecovery(input) {
+    const key = this.stateKey(input.candidate);
+    const state = this.store.get(key);
+    if (state === void 0 || state.status !== "production-failed") {
+      throw new Error(
+        "Recovery can only be recorded for a failed production candidate"
+      );
+    }
+    if (input.reason.trim().length === 0) {
+      throw new Error("Recovery reason is required");
+    }
+    if (input.authorizedBy.id.trim().length === 0 || input.authorizedBy.role === "release-coordinator" || !approvalRoles(this.policy).includes(input.authorizedBy.role)) {
+      throw new Error("Recovery requires an authorized owner or maintainer");
+    }
+    const recovery = {
+      candidate: structuredClone(input.candidate),
+      action: this.policy.recoveryMode,
+      reason: input.reason,
+      authorizedBy: input.authorizedBy,
+      recordedAt: this.now()
+    };
+    this.store.save({ ...state, recovery, updatedAt: this.now() });
+    return recovery;
+  }
+};
+var candidateMatchesApproval = (candidate, approval) => sameCandidate(candidate, approval.candidate);
+
+export { InMemoryReleaseStore, ReleaseIntegration, candidateMatchesApproval, releaseCandidateKey };
+//# sourceMappingURL=releases.js.map
+//# sourceMappingURL=releases.js.map

package/dist/integrations/releases.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/integrations/releases/index.ts"],"names":[],"mappings":";;;AAkFO,IAAM,uBAAN,MAAmD;AAAA,EACvC,MAAA,uBAAa,GAAA,EAA0B;AAAA,EAExD,IAAI,GAAA,EAAuC;AACzC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,GAAG,CAAA;AACjC,IAAA,OAAO,KAAA,KAAU,MAAA,GAAY,MAAA,GAAY,eAAA,CAAgB,KAAK,CAAA;AAAA,EAChE;AAAA,EAEA,KAAK,KAAA,EAA2B;AAC9B,IAAA,IAAA,CAAK,OAAO,GAAA,CAAI,KAAA,CAAM,GAAA,EAAK,eAAA,CAAgB,KAAK,CAAC,CAAA;AAAA,EACnD;AACF;AAkDA,IAAM,kBAAA,GAAqB,CAAC,SAAA,KAC1B,IAAA,CAAK,SAAA,CAAU;AAAA,EACb,gBAAgB,SAAA,CAAU,cAAA;AAAA,EAC1B,aAAa,SAAA,CAAU,WAAA;AAAA,EACvB,WAAW,SAAA,CAAU,SAAA;AAAA,EACrB,iBAAiB,SAAA,CAAU,eAAA;AAAA,EAC3B,WAAW,SAAA,CAAU,SAAA;AAAA,EACrB,OAAA,EAAS,UAAU,OAAA,IAAW;AAChC,CAAC,CAAA;AAEI,IAAM,mBAAA,GAAsB,CAAC,SAAA,KAClC,UAAA,CAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,kBAAA,CAAmB,SAAS,CAAC,CAAA,CAAE,MAAA,CAAO,KAAK;AAEzE,IAAM,aAAA,GAAgB,CACpB,IAAA,EACA,KAAA,KACY,oBAAoB,IAAI,CAAA,KAAM,oBAAoB,KAAK,CAAA;AAErE,IAAM,UAAA,GAAa,MAAA,iBAAc,IAAI,IAAA,IAAO,WAAA,EAAY;AAExD,IAAM,gBAAA,GAAmB,CACvB,KAAA,EACA,GAAA,EACA,aAAA,KACY;AACZ,EAAA,MAAM,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,KAAK,CAAA;AAClC,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC9B,EAAA,OACE,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,IACzB,MAAA,CAAO,QAAA,CAAS,OAAO,CAAA,IACvB,SAAA,IAAa,OAAA,IACb,OAAA,GAAU,SAAA,IAAa,aAAA,GAAgB,GAAA;AAE3C,CAAA;AAEA,IAAM,gBAAgB,CACpB,MAAA,KAEA,OAAO,aAAA,IAAiB,CAAC,SAAS,YAAY,CAAA;AAEhD,IAAM,cAAA,GAAiB,CACrB,SAAA,EACA,mBAAA,KACuB;AACvB,EAAA,MAAM,MAAA,GAAuC;AAAA,IAC3C,CAAC,WAAA,EAAa,SAAA,CAAU,SAAS,CAAA;AAAA,IACjC,CAAC,iBAAA,EAAmB,SAAA,CAAU,eAAe,CAAA;AAAA,IAC7C,CAAC,WAAA,EAAa,SAAA,CAAU,SAAS,CAAA;AAAA,IACjC,CAAC,gBAAA,EAAkB,SAAA,CAAU,cAAc,CAAA;AAAA,IAC3C,CAAC,aAAA,EAAe,SAAA,CAAU,WAAW;AAAA,GACvC;AACA,EAAA,MAAM,UAAU,MAAA,CAAO,IAAA;AAAA,IACrB,CAAC,GAAG,KAAK,CAAA,KAAM,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,CAAM,IAAA,EAAK,CAAE,MAAA,KAAW;AAAA,GACtE;AACA,EAAA,IAAI,YAAY,MAAA,EAAW,OAAO,CAAA,EAAG,OAAA,CAAQ,CAAC,CAAC,CAAA,YAAA,CAAA;AAC/C,EAAA,MAAM,SAAA,GAAY,kCAAA;AAClB,EAAA,IAAI,CAAC,SAAA,CAAU,IAAA,CAAK,SAAA,CAAU,SAAS,CAAA,EAAG;AACxC,IAAA,OAAO,wCAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,SAAA,CAAU,IAAA,CAAK,SAAA,CAAU,eAAe,CAAA,EAAG;AAC9C,IAAA,OAAO,8CAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,iBAAA,CAAkB,IAAA,CAAK,SAAA,CAAU,SAAS,CAAA,EAAG;AAChD,IAAA,OAAO,kCAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,wBAAA,CAAyB,IAAA,CAAK,SAAA,CAAU,cAAc,CAAA,EAAG;AAC5D,IAAA,OAAO,yCAAA;AAAA,EACT;AACA,EAAA,IAAI,QAAA,CAAS,IAAA,CAAK,SAAA,CAAU,WAAW,CAAA,EAAG;AACxC,IAAA,OAAO,iEAAA;AAAA,EACT;AACA,EAAA,MAAM,eAAA,GAAkB,UAAU,WAAA,CAAY,KAAA;AAAA,IAC5C;AAAA,GACF;AACA,EAAA,IAAI,oBAAoB,IAAA,EAAM;AAC5B,IAAA,OAAO,eAAA,CAAgB,CAAC,CAAA,CAAG,WAAA,EAAY,KACrC,SAAA,CAAU,cAAA,CAAe,KAAA,CAAM,SAAA,CAAU,MAAM,CAAA,CAAE,WAAA,KAC/C,MAAA,GACA,wDAAA;AAAA,EACN;AACA,EAAA,MAAM,qBAAA,GACJ,4GAAA;AACF,EAAA,MAAM,qBAAA,GACJ,mEAAA;AACF,EAAA,IACE,qBAAA,CAAsB,KAAK,SAAA,CAAU,WAAW,KAChD,qBAAA,CAAsB,IAAA,CAAK,SAAA,CAAU,WAAW,CAAA,EAChD;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AACA,EAAA,IAAI,wBAAwB,MAAA,EAAW;AACrC,IAAA,OAAO,oBAAoB,SAAS,CAAA;AAAA,EACtC;AACA,EAAA,OAAO,4CAAA;AACT,CAAA;AAEA,IAAM,oBAAA,GAAuB,CAAC,YAAA,KAC5B,YAAA,CAAa,WAAW,SAAS,CAAA;AAEnC,IAAM,oBAAA,GAAuB,CAC3B,MAAA,EACA,MAAA,KACa;AACb,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,QAAA,IAAY,OAAO,qBAAA,EAAuB;AACnD,IAAA,MAAM,QAAQ,MAAA,CAAO,IAAA,CAAK,CAAC,SAAA,KAAc,SAAA,CAAU,SAAS,QAAQ,CAAA;AACpE,IAAA,IAAI,KAAA,KAAU,MAAA;AACZ,MAAA,OAAA,CAAQ,IAAA,CAAK,CAAA,mCAAA,EAAsC,QAAQ,CAAA,CAAE,CAAA;AAAA,SAAA,IACtD,KAAA,CAAM,WAAW,QAAA,EAAU;AAClC,MAAA,OAAA,CAAQ,KAAK,CAAA,uBAAA,EAA0B,QAAQ,CAAA,IAAA,EAAO,KAAA,CAAM,MAAM,CAAA,CAAE,CAAA;AAAA,IACtE;AAAA,EACF;AACA,EAAA,OAAO,OAAA;AACT,CAAA;AAEA,IAAM,mBAAA,GAAsB,CAC1B,MAAA,EACA,YAAA,KACa;AAAA,EACb,GAAG,oBAAA,CAAqB,MAAA,EAAQ,YAAA,CAAa,MAAM,CAAA;AAAA,EACnD,GAAI,YAAA,CAAa,KAAA,KAAU,QAAA,GACvB,KACA,CAAC,CAAA,iBAAA,EAAoB,YAAA,CAAa,KAAK,CAAA,CAAE,CAAA;AAAA,EAC7C,GAAI,YAAA,CAAa,MAAA,KAAW,QAAA,GACxB,KACA,CAAC,CAAA,kBAAA,EAAqB,YAAA,CAAa,MAAM,CAAA,CAAE,CAAA;AAAA,EAC/C,GAAI,YAAA,CAAa,aAAA,GAAgB,CAAC,YAAA,CAAa,aAAa,IAAI;AAClE,CAAA;AAEA,IAAM,OAAA,GAAU,CACd,MAAA,EACA,KAAA,MAC4B;AAAA,EAC5B,OAAA,EAAS,SAAA;AAAA,EACT,MAAA;AAAA,EACA;AACF,CAAA,CAAA;AAEO,IAAM,qBAAN,MAAyB;AAAA,EACb,MAAA;AAAA,EACA,KAAA;AAAA,EACA,SAAA;AAAA,EACA,KAAA;AAAA,EACA,mBAAA;AAAA,EACA,GAAA;AAAA,EAEjB,YAAY,OAAA,EAAoC;AAC9C,IAAA,IAAI,QAAQ,MAAA,CAAO,UAAA,CAAW,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AACjD,MAAA,MAAM,IAAI,MAAM,uCAAuC,CAAA;AAAA,IACzD;AACA,IAAA,IAAI,QAAQ,MAAA,CAAO,WAAA,CAAY,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AAClD,MAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,IAClE;AACA,IAAA,IAAI,QAAQ,MAAA,CAAO,cAAA,CAAe,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AACrD,MAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,IACrE;AACA,IAAA,IAAI,QAAQ,KAAA,CAAM,EAAA,CAAG,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AACxC,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AACA,IAAA,IACE,OAAA,CAAQ,OAAO,aAAA,EAAe,IAAA;AAAA,MAC5B,CAAC,IAAA,KAAS,IAAA,KAAS,OAAA,IAAW,IAAA,KAAS;AAAA,KACzC,EACA;AACA,MAAA,MAAM,IAAI,MAAM,oCAAoC,CAAA;AAAA,IACtD;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,eAAA,CAAgB,OAAA,CAAQ,MAAM,CAAA;AAC5C,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,YAAY,OAAA,CAAQ,SAAA;AACzB,IAAA,IAAA,CAAK,QAAQ,OAAA,CAAQ,KAAA;AACrB,IAAA,IAAA,CAAK,sBAAsB,OAAA,CAAQ,mBAAA;AACnC,IAAA,IAAA,CAAK,GAAA,GAAM,QAAQ,GAAA,IAAO,UAAA;AAAA,EAC5B;AAAA;AAAA;AAAA,EAIQ,SAAS,SAAA,EAAqC;AACpD,IAAA,OAAO,UAAA,CAAW,QAAQ,CAAA,CACvB,MAAA;AAAA,MACC,KAAK,SAAA,CAAU;AAAA,QACb,SAAA,EAAW,oBAAoB,SAAS,CAAA;AAAA,QACxC,UAAA,EAAY,KAAK,MAAA,CAAO,UAAA;AAAA,QACxB,OAAA,EAAS,KAAK,MAAA,CAAO,WAAA;AAAA,QACrB,UAAA,EAAY,KAAK,MAAA,CAAO,cAAA;AAAA,QACxB,QAAQ,CAAC,GAAG,KAAK,MAAA,CAAO,qBAAqB,EAAE,IAAA,EAAK;AAAA,QACpD,aAAA,EAAe,KAAK,MAAA,CAAO,oBAAA;AAAA,QAC3B,KAAA,EAAO,CAAC,GAAG,aAAA,CAAc,KAAK,MAAM,CAAC,EAAE,IAAA,EAAK;AAAA,QAC5C,SAAA,EAAW,IAAA,CAAK,MAAA,CAAO,wBAAA,IAA4B,GAAA;AAAA,QACnD,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB;AAAA,KACH,CACC,OAAO,KAAK,CAAA;AAAA,EACjB;AAAA,EAEA,MAAM,eACJ,SAAA,EACiC;AACjC,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,SAAA,EAAW,IAAA,CAAK,mBAAmB,CAAA;AAClE,IAAA,IAAI,OAAA,KAAY,MAAA;AACd,MAAA,OAAO,OAAA,CAAQ,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AACnC,IAAA,MAAM,QAAA,GAAW,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AACnC,IAAA,MAAM,cAAA,GAAiB,YAAY,GAAG,CAAA,QAAA,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,UAAU,cAAc,CAAA,CAAA;AACzC,IAAA,IACE,QAAA,KAAa,WACZ,QAAA,CAAS,MAAA,KAAW,uBACnB,QAAA,CAAS,OAAA,EAAS,iBAAiB,QAAA,CAAA,EACrC;AACA,MAAA,OAAO,EAAE,OAAA,EAAS,WAAA,EAAa,KAAA,EAAO,QAAA,EAAS;AAAA,IACjD;AACA,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,IAAA,MAAM,SAAuB,QAAA,IAAY;AAAA,MACvC,GAAA;AAAA,MACA,SAAA;AAAA,MACA,MAAA,EAAQ,mBAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,WAAA,EAAa,SAAA;AAAA,QACb,SAAA;AAAA,QACA,YAAA,EAAc,QAAA;AAAA,QACd,QAAQ,EAAC;AAAA,QACT,KAAA,EAAO,SAAA;AAAA,QACP,MAAA,EAAQ,SAAA;AAAA,QACR,UAAA,EAAY;AAAA,OACd;AAAA,MACA,SAAA,EAAW;AAAA,KACb;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,MAAM,CAAA;AACtB,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,iBAAA;AAAA,MAC5B,SAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,QAAA;AAAA,QACT,MAAA,EAAQ,2CAAA;AAAA,QACR,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG;AAAA,OAC3B;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC5B,GAAG,MAAA;AAAA,MACH,OAAA,EAAS;AAAA,QACP,GAAG,MAAA,CAAO,OAAA;AAAA,QACV,cAAc,UAAA,CAAW,YAAA;AAAA,QACzB,UAAA,EAAY,KAAK,GAAA;AAAI,OACvB;AAAA,MACA,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,EAAE,OAAA,EAAS,WAAA,EAAa,KAAA,EAAO,OAAA,EAAQ;AAAA,EAChD;AAAA,EAEA,0BACE,YAAA,EACwB;AACxB,IAAA,MAAM,OAAA,GAAU,cAAA;AAAA,MACd,YAAA,CAAa,SAAA;AAAA,MACb,IAAA,CAAK;AAAA,KACP;AACA,IAAA,IAAI,OAAA,KAAY,MAAA;AACd,MAAA,OAAO,OAAA,CAAQ,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,IAAI,aAAa,WAAA,KAAgB,SAAA;AAC/B,MAAA,OAAO,QAAQ,iCAAiC,CAAA;AAClD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,YAAA,CAAa,SAAS,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,KAAU,MAAA;AACZ,MAAA,OAAO,QAAQ,sCAAsC,CAAA;AACvD,IAAA,IACE,MAAM,OAAA,KAAY,MAAA,IAClB,qBAAqB,KAAA,CAAM,OAAA,CAAQ,YAAY,CAAA,EAC/C;AACA,MAAA,OAAO,OAAA;AAAA,QACL,mDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,OAAA,EAAS,YAAA,KAAiB,YAAA,CAAa,YAAA,EAAc;AAC7D,MAAA,OAAO,OAAA;AAAA,QACL,wDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,WAAW,mBAAA,EAAqB;AACxC,MAAA,OAAO,OAAA;AAAA,QACL,qFAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,aAAA,CAAc,KAAA,CAAM,SAAA,EAAW,YAAA,CAAa,SAAS,CAAA,EAAG;AAC3D,MAAA,OAAO,OAAA;AAAA,QACL,uDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,mBAAA,CAAoB,IAAA,CAAK,MAAA,EAAQ,YAAY,CAAA;AAC7D,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC5B,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,OAAA,CAAQ,MAAA,KAAW,CAAA,GAAI,kBAAA,GAAqB,gBAAA;AAAA,MACpD,OAAA,EAAS,gBAAgB,YAAY,CAAA;AAAA,MACrC,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,QAAQ,MAAA,KAAW,CAAA,GACtB,EAAE,OAAA,EAAS,UAAA,EAAY,OAAO,OAAA,EAAQ,GACtC,EAAE,OAAA,EAAS,UAAU,MAAA,EAAQ,OAAA,CAAQ,KAAK,IAAI,CAAA,EAAG,OAAO,OAAA,EAAQ;AAAA,EACtE;AAAA,EAEA,kBAAkB,KAAA,EAGS;AACzB,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,KAAA,CAAM,SAAA,EAAW,KAAK,mBAAmB,CAAA;AACxE,IAAA,IAAI,OAAA,KAAY,MAAA;AACd,MAAA,OAAO,OAAA,CAAQ,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,SAAS,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,KAAU,MAAA;AACZ,MAAA,OAAO,QAAQ,wCAAwC,CAAA;AACzD,IAAA,IAAI,KAAA,CAAM,WAAW,kBAAA,EAAoB;AACvC,MAAA,IAAI,KAAA,CAAM,WAAW,qBAAA,EAAuB;AAC1C,QAAA,OAAO,EAAE,OAAA,EAAS,WAAA,EAAa,KAAA,EAAM;AAAA,MACvC;AACA,MAAA,OAAO,OAAA,CAAQ,iDAAiD,KAAK,CAAA;AAAA,IACvE;AACA,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAsB;AACrC,MAAA,OAAO,OAAA;AAAA,QACL,+DAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,aAAA,CAAc,KAAA,CAAM,WAAW,KAAA,CAAM,QAAA,CAAS,SAAS,CAAA,EAAG;AAC7D,MAAA,OAAO,OAAA;AAAA,QACL,wDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,MAAM,QAAA,CAAS,KAAA,CAAM,GAAG,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AAC/C,MAAA,OAAO,OAAA,CAAQ,wCAAwC,KAAK,CAAA;AAAA,IAC9D;AACA,IAAA,MAAM,SAAA,GAAY,KAAA,CAAM,QAAA,CAAS,KAAA,CAAM,IAAA;AACvC,IAAA,IAAI,cAAc,qBAAA,EAAuB;AACvC,MAAA,OAAO,OAAA;AAAA,QACL,qDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,MAAM,CAAA,CAAE,QAAA,CAAS,SAAS,CAAA,EAAG;AACnD,MAAA,OAAO,OAAA;AAAA,QACL,2DAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,MAAM,QAAA,CAAS,UAAA,CAAW,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AACjD,MAAA,OAAO,OAAA,CAAQ,4CAA4C,KAAK,CAAA;AAAA,IAClE;AACA,IAAA,MAAM,wBAAA,GACJ,IAAA,CAAK,MAAA,CAAO,wBAAA,IAA4B,GAAA;AAC1C,IAAA,IACE,CAAC,MAAA,CAAO,QAAA,CAAS,wBAAwB,CAAA,IACzC,4BAA4B,CAAA,EAC5B;AACA,MAAA,OAAO,OAAA,CAAQ,mDAAmD,KAAK,CAAA;AAAA,IACzE;AACA,IAAA,IACE,CAAC,gBAAA;AAAA,MACC,MAAM,QAAA,CAAS,UAAA;AAAA,MACf,KAAK,GAAA,EAAI;AAAA,MACT;AAAA,KACF,EACA;AACA,MAAA,OAAO,OAAA,CAAQ,6CAA6C,KAAK,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC5B,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,qBAAA;AAAA,MACR,QAAA,EAAU,eAAA,CAAgB,KAAA,CAAM,QAAQ,CAAA;AAAA,MACxC,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,EAAE,OAAA,EAAS,UAAA,EAAY,KAAA,EAAO,OAAA,EAAQ;AAAA,EAC/C;AAAA,EAEA,MAAM,kBACJ,SAAA,EACiC;AACjC,IAAA,MAAM,OAAA,GAAU,cAAA,CAAe,SAAA,EAAW,IAAA,CAAK,mBAAmB,CAAA;AAClE,IAAA,IAAI,OAAA,KAAY,MAAA;AACd,MAAA,OAAO,OAAA,CAAQ,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,SAAS,CAAA;AACnC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,KAAU,MAAA,EAAW,OAAO,OAAA,CAAQ,gCAAgC,CAAA;AACxE,IAAA,MAAM,cAAA,GAAiB,YAAY,GAAG,CAAA,WAAA,CAAA;AACtC,IAAA,MAAM,QAAA,GAAW,UAAU,cAAc,CAAA,CAAA;AACzC,IAAA,IAAI,KAAA,CAAM,WAAW,qBAAA,EAAuB;AAC1C,MAAA,OAAO,EAAE,OAAA,EAAS,WAAA,EAAa,KAAA,EAAM;AAAA,IACvC;AACA,IAAA,MAAM,gBACJ,KAAA,CAAM,MAAA,KAAW,sBAAA,IACjB,KAAA,CAAM,YAAY,YAAA,KAAiB,QAAA;AACrC,IAAA,IAAI,KAAA,CAAM,MAAA,KAAW,sBAAA,IAA0B,CAAC,aAAA,EAAe;AAC7D,MAAA,OAAO,EAAE,OAAA,EAAS,WAAA,EAAa,KAAA,EAAM;AAAA,IACvC;AACA,IAAA,IAAI,KAAA,CAAM,WAAW,mBAAA,EAAqB;AACxC,MAAA,OAAO,OAAA;AAAA,QACL,+DAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IACE,CAAC,aAAA,KACA,KAAA,CAAM,WAAW,qBAAA,IAAyB,KAAA,CAAM,aAAa,MAAA,CAAA,EAC9D;AACA,MAAA,OAAO,OAAA;AAAA,QACL,kEAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IACE,KAAA,CAAM,aAAa,MAAA,IACnB,CAAC,cAAc,SAAA,EAAW,KAAA,CAAM,QAAA,CAAS,SAAS,CAAA,EAClD;AACA,MAAA,OAAO,OAAA,CAAQ,mDAAmD,KAAK,CAAA;AAAA,IACzE;AACA,IAAA,MAAM,wBAAA,GACJ,IAAA,CAAK,MAAA,CAAO,wBAAA,IAA4B,GAAA;AAC1C,IAAA,IACE,CAAC,MAAA,CAAO,QAAA,CAAS,wBAAwB,CAAA,IACzC,4BAA4B,CAAA,EAC5B;AACA,MAAA,OAAO,OAAA,CAAQ,mDAAmD,KAAK,CAAA;AAAA,IACzE;AACA,IAAA,IACE,CAAC,gBAAA;AAAA,MACC,MAAM,QAAA,CAAS,UAAA;AAAA,MACf,KAAK,GAAA,EAAI;AAAA,MACT;AAAA,KACF,EACA;AACA,MAAA,OAAO,OAAA,CAAQ,6CAA6C,KAAK,CAAA;AAAA,IACnE;AACA,IAAA,MAAM,MAAA,GAAS,gBACX,KAAA,GACA;AAAA,MACE,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,sBAAA;AAAA,MACR,UAAA,EAAY;AAAA,QACV,WAAA,EAAa,YAAA;AAAA,QACb,SAAA;AAAA,QACA,YAAA,EAAc,QAAA;AAAA,QACd,QAAQ,EAAC;AAAA,QACT,KAAA,EAAO,SAAA;AAAA,QACP,MAAA,EAAQ,SAAA;AAAA,QACR,UAAA,EAAY,KAAK,GAAA;AAAI,OACvB;AAAA,MACA,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACJ,IAAA,IAAI,CAAC,aAAA,EAAe,IAAA,CAAK,KAAA,CAAM,KAAK,MAAM,CAAA;AAC1C,IAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,iBAAA;AAAA,MAC5B,YAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,OAAO;AAAA,QACL,OAAA,EAAS,QAAA;AAAA,QACT,MAAA,EAAQ,8CAAA;AAAA,QACR,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG;AAAA,OAC3B;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC5B,GAAG,MAAA;AAAA,MACH,UAAA,EAAY;AAAA,QACV,GAAG,MAAA,CAAO,UAAA;AAAA,QACV,cAAc,UAAA,CAAW,YAAA;AAAA,QACzB,UAAA,EAAY,KAAK,GAAA;AAAI,OACvB;AAAA,MACA,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,EAAE,OAAA,EAAS,WAAA,EAAa,KAAA,EAAO,OAAA,EAAQ;AAAA,EAChD;AAAA,EAEA,MAAc,iBAAA,CACZ,WAAA,EACA,SAAA,EACA,cAAA,EACwD;AACxD,IAAA,MAAM,kBACJ,WAAA,KAAgB,SAAA,GACZ,KAAK,MAAA,CAAO,WAAA,GACZ,KAAK,MAAA,CAAO,cAAA;AAClB,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,KAAK,SAAA,CAAU,mBAAA,GACxB,MAAM,IAAA,CAAK,UAAU,mBAAA,CAAoB;AAAA,QACvC,WAAA;AAAA,QACA,eAAA;AAAA,QACA,SAAA;AAAA,QACA;AAAA,OACD,CAAA,GACD,KAAA,CAAA;AAAA,IACN,CAAA,CAAA,MAAQ;AACN,MAAA,UAAA,GAAa,MAAA;AAAA,IACf;AACA,IAAA,IAAI,eAAe,MAAA,EAAW;AAC5B,MAAA,OAAO,WAAW,YAAA,CAAa,IAAA,EAAK,CAAE,MAAA,GAAS,IAAI,UAAA,GAAa,MAAA;AAAA,IAClE;AACA,IAAA,IAAI;AACF,MAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,SAAA,CAAU,iBAAA,CAAkB;AAAA,QACxD,WAAA;AAAA,QACA,eAAA;AAAA,QACA,SAAA;AAAA,QACA,OAAO,IAAA,CAAK,KAAA;AAAA,QACZ;AAAA,OACD,CAAA;AACD,MAAA,IAAI,UAAA,CAAW,YAAA,CAAa,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AAC/C,QAAA,OAAO,KAAA,CAAA;AAAA,MACT;AACA,MAAA,OAAO,UAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,MAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,6BACE,YAAA,EACwB;AACxB,IAAA,MAAM,OAAA,GAAU,cAAA;AAAA,MACd,YAAA,CAAa,SAAA;AAAA,MACb,IAAA,CAAK;AAAA,KACP;AACA,IAAA,IAAI,OAAA,KAAY,MAAA;AACd,MAAA,OAAO,OAAA,CAAQ,CAAA,2BAAA,EAA8B,OAAO,CAAA,CAAE,CAAA;AACxD,IAAA,IAAI,aAAa,WAAA,KAAgB,YAAA;AAC/B,MAAA,OAAO,QAAQ,oCAAoC,CAAA;AACrD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,YAAA,CAAa,SAAS,CAAA;AAChD,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,UAAA,KAAe,MAAA,EAAW;AACzD,MAAA,OAAO,QAAQ,yCAAyC,CAAA;AAAA,IAC1D;AACA,IAAA,IAAI,oBAAA,CAAqB,KAAA,CAAM,UAAA,CAAW,YAAY,CAAA,EAAG;AACvD,MAAA,OAAO,OAAA;AAAA,QACL,sDAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,WAAW,mBAAA,EAAqB;AACxC,MAAA,OAAO,OAAA;AAAA,QACL,kFAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,IACE,KAAA,CAAM,UAAA,CAAW,YAAA,KAAiB,YAAA,CAAa,YAAA,IAC/C,CAAC,aAAA,CAAc,KAAA,CAAM,SAAA,EAAW,YAAA,CAAa,SAAS,CAAA,EACtD;AACA,MAAA,OAAO,OAAA;AAAA,QACL,wEAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GACJ,qBAAqB,IAAA,CAAK,MAAA,EAAQ,aAAa,MAAM,CAAA,CAAE,MAAA,GAAS,CAAA,IAChE,YAAA,CAAa,KAAA,KAAU,YACvB,YAAA,CAAa,MAAA,KAAW,YACxB,YAAA,CAAa,MAAA,CAAO,KAAK,CAAC,KAAA,KAAU,KAAA,CAAM,MAAA,KAAW,QAAQ,CAAA;AAC/D,IAAA,MAAM,OAAA,GAAwB;AAAA,MAC5B,GAAG,KAAA;AAAA,MACH,MAAA,EAAQ,SAAS,mBAAA,GAAsB,qBAAA;AAAA,MACvC,UAAA,EAAY,gBAAgB,YAAY,CAAA;AAAA,MACxC,SAAA,EAAW,KAAK,GAAA;AAAI,KACtB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,KAAK,OAAO,CAAA;AACvB,IAAA,OAAO,MAAA,GACH;AAAA,MACE,OAAA,EAAS,QAAA;AAAA,MACT,MAAA,EACE,aAAa,aAAA,IAAiB,gCAAA;AAAA,MAChC,KAAA,EAAO;AAAA,KACT,GACA,EAAE,OAAA,EAAS,UAAA,EAAY,OAAO,OAAA,EAAQ;AAAA,EAC5C;AAAA,EAEA,eAAe,KAAA,EAII;AACjB,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,KAAA,CAAM,SAAS,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,GAAA,CAAI,GAAG,CAAA;AAChC,IAAA,IAAI,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,MAAA,KAAW,mBAAA,EAAqB;AAC/D,MAAA,MAAM,IAAI,KAAA;AAAA,QACR;AAAA,OACF;AAAA,IACF;AACA,IAAA,IAAI,KAAA,CAAM,MAAA,CAAO,IAAA,EAAK,CAAE,WAAW,CAAA,EAAG;AACpC,MAAA,MAAM,IAAI,MAAM,6BAA6B,CAAA;AAAA,IAC/C;AACA,IAAA,IACE,KAAA,CAAM,aAAa,EAAA,CAAG,IAAA,GAAO,MAAA,KAAW,CAAA,IACxC,MAAM,YAAA,CAAa,IAAA,KAAS,yBAC5B,CAAC,aAAA,CAAc,KAAK,MAAM,CAAA,CAAE,SAAS,KAAA,CAAM,YAAA,CAAa,IAAI,CAAA,EAC5D;AACA,MAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,IACvE;AACA,IAAA,MAAM,QAAA,GAA2B;AAAA,MAC/B,SAAA,EAAW,eAAA,CAAgB,KAAA,CAAM,SAAS,CAAA;AAAA,MAC1C,MAAA,EAAQ,KAAK,MAAA,CAAO,YAAA;AAAA,MACpB,QAAQ,KAAA,CAAM,MAAA;AAAA,MACd,cAAc,KAAA,CAAM,YAAA;AAAA,MACpB,UAAA,EAAY,KAAK,GAAA;AAAI,KACvB;AACA,IAAA,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,EAAE,GAAG,KAAA,EAAO,UAAU,SAAA,EAAW,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAC7D,IAAA,OAAO,QAAA;AAAA,EACT;AACF;AAEO,IAAM,2BAA2B,CACtC,SAAA,EACA,aACY,aAAA,CAAc,SAAA,EAAW,SAAS,SAAS","file":"releases.js","sourcesContent":["import { createHash } from \"node:crypto\";\n\nexport type ReleaseEnvironment = \"staging\" | \"production\";\nexport type ReleaseCheckStatus = \"passed\" | \"failed\" | \"missing\" | \"unknown\";\n\nexport interface ReleaseCandidate {\n  readonly sourceSha: string;\n  readonly reviewedHeadSha: string;\n  readonly briefHash: string;\n  readonly artifactDigest: string;\n  /** Provider-specific immutable locator; integrity is bound separately by artifactDigest. */\n  readonly artifactRef: string;\n  readonly version?: string;\n}\n\nexport interface ReleasePolicy {\n  readonly repository: string;\n  readonly stagingName: string;\n  readonly productionName: string;\n  readonly requiredStagingChecks: readonly string[];\n  readonly requireHumanApproval: boolean;\n  /** Maximum age for a production approval before it must be renewed. */\n  readonly approvalFreshnessSeconds?: number;\n  /** Roles allowed to approve production; release coordinators may request but not approve. */\n  readonly approvalRoles?: readonly (\"owner\" | \"maintainer\")[];\n  /** Recovery is recorded as a requested action; it is never inferred or executed by default. */\n  readonly recoveryMode: \"roll-forward\" | \"rollback\" | \"owner-decision\";\n}\n\nexport interface ReleaseActor {\n  readonly id: string;\n  readonly role: \"release-coordinator\" | \"owner\" | \"maintainer\";\n}\n\nexport interface ReleaseCheck {\n  readonly name: string;\n  readonly status: ReleaseCheckStatus;\n  readonly summary: string;\n}\n\nexport interface ReleaseVerification {\n  readonly environment: ReleaseEnvironment;\n  readonly candidate: ReleaseCandidate;\n  readonly deploymentId: string;\n  readonly checks: readonly ReleaseCheck[];\n  readonly smoke: \"passed\" | \"failed\" | \"missing\" | \"unknown\";\n  readonly health: \"passed\" | \"failed\" | \"missing\" | \"unknown\";\n  readonly recordedAt: string;\n  readonly failureReason?: string;\n}\n\nexport interface ProductionApproval {\n  readonly actor: ReleaseActor;\n  readonly approvedAt: string;\n  readonly candidate: ReleaseCandidate;\n}\n\nexport type ReleaseStateStatus =\n  | \"staging-requested\"\n  | \"staging-failed\"\n  | \"staging-verified\"\n  | \"production-approved\"\n  | \"production-requested\"\n  | \"production-failed\"\n  | \"production-verified\";\n\nexport interface ReleaseState {\n  readonly key: string;\n  readonly candidate: ReleaseCandidate;\n  readonly status: ReleaseStateStatus;\n  readonly staging?: ReleaseVerification;\n  readonly approval?: ProductionApproval;\n  readonly recovery?: RecoveryRecord;\n  readonly production?: ReleaseVerification;\n  readonly updatedAt: string;\n}\n\nexport interface ReleaseStore {\n  get(key: string): ReleaseState | undefined;\n  save(state: ReleaseState): void;\n}\n\nexport class InMemoryReleaseStore implements ReleaseStore {\n  private readonly states = new Map<string, ReleaseState>();\n\n  get(key: string): ReleaseState | undefined {\n    const state = this.states.get(key);\n    return state === undefined ? undefined : structuredClone(state);\n  }\n\n  save(state: ReleaseState): void {\n    this.states.set(state.key, structuredClone(state));\n  }\n}\n\nexport interface ReleaseTransport {\n  requestDeployment(input: {\n    readonly environment: ReleaseEnvironment;\n    readonly environmentName: string;\n    readonly candidate: ReleaseCandidate;\n    readonly actor: ReleaseActor;\n    readonly idempotencyKey: string;\n  }): Promise<{ readonly deploymentId: string }>;\n  reconcileDeployment?(input: {\n    readonly environment: ReleaseEnvironment;\n    readonly environmentName: string;\n    readonly candidate: ReleaseCandidate;\n    readonly idempotencyKey: string;\n  }): Promise<{ readonly deploymentId: string } | undefined>;\n}\n\nexport interface ReleaseIntegrationOptions {\n  readonly policy: ReleasePolicy;\n  readonly store: ReleaseStore;\n  readonly transport: ReleaseTransport;\n  readonly actor: ReleaseActor;\n  /** Validate a provider-specific immutable locator not covered by built-in formats. */\n  readonly validateArtifactRef?: (\n    candidate: ReleaseCandidate,\n  ) => string | undefined;\n  readonly now?: () => string;\n}\n\nexport interface ReleaseOperationResult {\n  readonly outcome:\n    | \"requested\"\n    | \"duplicate\"\n    | \"verified\"\n    | \"approved\"\n    | \"blocked\"\n    | \"failed\";\n  readonly reason?: string;\n  readonly state?: ReleaseState;\n}\n\nexport interface RecoveryRecord {\n  readonly candidate: ReleaseCandidate;\n  readonly action: ReleasePolicy[\"recoveryMode\"];\n  readonly reason: string;\n  readonly authorizedBy: ReleaseActor;\n  readonly recordedAt: string;\n}\n\nconst canonicalCandidate = (candidate: ReleaseCandidate): string =>\n  JSON.stringify({\n    artifactDigest: candidate.artifactDigest,\n    artifactRef: candidate.artifactRef,\n    briefHash: candidate.briefHash,\n    reviewedHeadSha: candidate.reviewedHeadSha,\n    sourceSha: candidate.sourceSha,\n    version: candidate.version ?? \"\",\n  });\n\nexport const releaseCandidateKey = (candidate: ReleaseCandidate): string =>\n  createHash(\"sha256\").update(canonicalCandidate(candidate)).digest(\"hex\");\n\nconst sameCandidate = (\n  left: ReleaseCandidate,\n  right: ReleaseCandidate,\n): boolean => releaseCandidateKey(left) === releaseCandidateKey(right);\n\nconst defaultNow = (): string => new Date().toISOString();\n\nconst isFreshTimestamp = (\n  value: string,\n  now: string,\n  maxAgeSeconds: number,\n): boolean => {\n  const timestamp = Date.parse(value);\n  const current = Date.parse(now);\n  return (\n    Number.isFinite(timestamp) &&\n    Number.isFinite(current) &&\n    timestamp <= current &&\n    current - timestamp <= maxAgeSeconds * 1000\n  );\n};\n\nconst approvalRoles = (\n  policy: ReleasePolicy,\n): readonly (\"owner\" | \"maintainer\")[] =>\n  policy.approvalRoles ?? [\"owner\", \"maintainer\"];\n\nconst validCandidate = (\n  candidate: ReleaseCandidate,\n  validateArtifactRef?: ReleaseIntegrationOptions[\"validateArtifactRef\"],\n): string | undefined => {\n  const fields: readonly [string, unknown][] = [\n    [\"sourceSha\", candidate.sourceSha],\n    [\"reviewedHeadSha\", candidate.reviewedHeadSha],\n    [\"briefHash\", candidate.briefHash],\n    [\"artifactDigest\", candidate.artifactDigest],\n    [\"artifactRef\", candidate.artifactRef],\n  ];\n  const missing = fields.find(\n    ([, value]) => typeof value !== \"string\" || value.trim().length === 0,\n  );\n  if (missing !== undefined) return `${missing[0]} is required`;\n  const gitObject = /^[0-9a-f]{40}(?:[0-9a-f]{24})?$/i;\n  if (!gitObject.test(candidate.sourceSha)) {\n    return \"sourceSha must be a full Git object id\";\n  }\n  if (!gitObject.test(candidate.reviewedHeadSha)) {\n    return \"reviewedHeadSha must be a full Git object id\";\n  }\n  if (!/^[0-9a-f]{64}$/i.test(candidate.briefHash)) {\n    return \"briefHash must be a SHA-256 hash\";\n  }\n  if (!/^sha256:[0-9a-f]{64}$/i.test(candidate.artifactDigest)) {\n    return \"artifactDigest must be a SHA-256 digest\";\n  }\n  if (/[\\s?#]/.test(candidate.artifactRef)) {\n    return \"artifactRef must not contain whitespace, a query, or a fragment\";\n  }\n  const digestReference = candidate.artifactRef.match(\n    /@sha256:([0-9a-f]{64})$/i,\n  );\n  if (digestReference !== null) {\n    return digestReference[1]!.toLowerCase() ===\n      candidate.artifactDigest.slice(\"sha256:\".length).toLowerCase()\n      ? undefined\n      : \"digest-qualified artifactRef must match artifactDigest\";\n  }\n  const immutableNpmReference =\n    /^npm:(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*@v?\\d+\\.\\d+\\.\\d+(?:-[0-9a-z.-]+)?(?:\\+[0-9a-z.-]+)?$/i;\n  const immutableGitReference =\n    /^(?:git|github):[^\\s/@]+\\/[^\\s@]+@[0-9a-f]{40}(?:[0-9a-f]{24})?$/i;\n  if (\n    immutableNpmReference.test(candidate.artifactRef) ||\n    immutableGitReference.test(candidate.artifactRef)\n  ) {\n    return undefined;\n  }\n  if (validateArtifactRef !== undefined) {\n    return validateArtifactRef(candidate);\n  }\n  return \"artifactRef format is not proven immutable\";\n};\n\nconst isIntentDeploymentId = (deploymentId: string): boolean =>\n  deploymentId.startsWith(\"intent:\");\n\nconst requiredChecksPassed = (\n  policy: ReleasePolicy,\n  checks: readonly ReleaseCheck[],\n): string[] => {\n  const reasons: string[] = [];\n  for (const required of policy.requiredStagingChecks) {\n    const check = checks.find((candidate) => candidate.name === required);\n    if (check === undefined)\n      reasons.push(`Required staging check is missing: ${required}`);\n    else if (check.status !== \"passed\") {\n      reasons.push(`Required staging check ${required} is ${check.status}`);\n    }\n  }\n  return reasons;\n};\n\nconst verificationReasons = (\n  policy: ReleasePolicy,\n  verification: ReleaseVerification,\n): string[] => [\n  ...requiredChecksPassed(policy, verification.checks),\n  ...(verification.smoke === \"passed\"\n    ? []\n    : [`Staging smoke is ${verification.smoke}`]),\n  ...(verification.health === \"passed\"\n    ? []\n    : [`Staging health is ${verification.health}`]),\n  ...(verification.failureReason ? [verification.failureReason] : []),\n];\n\nconst blocked = (\n  reason: string,\n  state?: ReleaseState,\n): ReleaseOperationResult => ({\n  outcome: \"blocked\",\n  reason,\n  state,\n});\n\nexport class ReleaseIntegration {\n  private readonly policy: ReleasePolicy;\n  private readonly store: ReleaseStore;\n  private readonly transport: ReleaseTransport;\n  private readonly actor: ReleaseActor;\n  private readonly validateArtifactRef?: ReleaseIntegrationOptions[\"validateArtifactRef\"];\n  private readonly now: () => string;\n\n  constructor(options: ReleaseIntegrationOptions) {\n    if (options.policy.repository.trim().length === 0) {\n      throw new Error(\"Release policy repository is required\");\n    }\n    if (options.policy.stagingName.trim().length === 0) {\n      throw new Error(\"Release policy staging environment is required\");\n    }\n    if (options.policy.productionName.trim().length === 0) {\n      throw new Error(\"Release policy production environment is required\");\n    }\n    if (options.actor.id.trim().length === 0) {\n      throw new Error(\"Release actor is required\");\n    }\n    if (\n      options.policy.approvalRoles?.some(\n        (role) => role !== \"owner\" && role !== \"maintainer\",\n      )\n    ) {\n      throw new Error(\"Release approval roles are invalid\");\n    }\n    this.policy = structuredClone(options.policy);\n    this.store = options.store;\n    this.transport = options.transport;\n    this.actor = options.actor;\n    this.validateArtifactRef = options.validateArtifactRef;\n    this.now = options.now ?? defaultNow;\n  }\n\n  // Bind evidence and remote idempotency to the deployment target and gate.\n  // Candidate-only records from older versions deliberately do not authorize releases.\n  private stateKey(candidate: ReleaseCandidate): string {\n    return createHash(\"sha256\")\n      .update(\n        JSON.stringify({\n          candidate: releaseCandidateKey(candidate),\n          repository: this.policy.repository,\n          staging: this.policy.stagingName,\n          production: this.policy.productionName,\n          checks: [...this.policy.requiredStagingChecks].sort(),\n          humanApproval: this.policy.requireHumanApproval,\n          roles: [...approvalRoles(this.policy)].sort(),\n          freshness: this.policy.approvalFreshnessSeconds ?? 300,\n          recovery: this.policy.recoveryMode,\n        }),\n      )\n      .digest(\"hex\");\n  }\n\n  async requestStaging(\n    candidate: ReleaseCandidate,\n  ): Promise<ReleaseOperationResult> {\n    const invalid = validCandidate(candidate, this.validateArtifactRef);\n    if (invalid !== undefined)\n      return blocked(`Invalid release candidate: ${invalid}`);\n    const key = this.stateKey(candidate);\n    const existing = this.store.get(key);\n    const idempotencyKey = `shipyard:${key}:staging`;\n    const intentId = `intent:${idempotencyKey}`;\n    if (\n      existing !== undefined &&\n      (existing.status !== \"staging-requested\" ||\n        existing.staging?.deploymentId !== intentId)\n    ) {\n      return { outcome: \"duplicate\", state: existing };\n    }\n    const timestamp = this.now();\n    const intent: ReleaseState = existing ?? {\n      key,\n      candidate,\n      status: \"staging-requested\",\n      staging: {\n        environment: \"staging\",\n        candidate,\n        deploymentId: intentId,\n        checks: [],\n        smoke: \"unknown\",\n        health: \"unknown\",\n        recordedAt: timestamp,\n      },\n      updatedAt: timestamp,\n    };\n    this.store.save(intent);\n    const deployment = await this.requestDeployment(\n      \"staging\",\n      candidate,\n      idempotencyKey,\n    );\n    if (deployment === undefined) {\n      return {\n        outcome: \"failed\",\n        reason: \"Staging deployment could not be requested\",\n        state: this.store.get(key),\n      };\n    }\n    const updated: ReleaseState = {\n      ...intent,\n      staging: {\n        ...intent.staging!,\n        deploymentId: deployment.deploymentId,\n        recordedAt: this.now(),\n      },\n      updatedAt: this.now(),\n    };\n    this.store.save(updated);\n    return { outcome: \"requested\", state: updated };\n  }\n\n  recordStagingVerification(\n    verification: ReleaseVerification,\n  ): ReleaseOperationResult {\n    const invalid = validCandidate(\n      verification.candidate,\n      this.validateArtifactRef,\n    );\n    if (invalid !== undefined)\n      return blocked(`Invalid release candidate: ${invalid}`);\n    if (verification.environment !== \"staging\")\n      return blocked(\"Verification is not for staging\");\n    const key = this.stateKey(verification.candidate);\n    const state = this.store.get(key);\n    if (state === undefined)\n      return blocked(\"Staging deployment was not requested\");\n    if (\n      state.staging === undefined ||\n      isIntentDeploymentId(state.staging.deploymentId)\n    ) {\n      return blocked(\n        \"Staging deployment request has not been confirmed\",\n        state,\n      );\n    }\n    if (state.staging?.deploymentId !== verification.deploymentId) {\n      return blocked(\n        \"Staging verification references a different deployment\",\n        state,\n      );\n    }\n    if (state.status === \"production-failed\") {\n      return blocked(\n        \"Production verification failed; recovery is required before staging can be recorded\",\n        state,\n      );\n    }\n    if (!sameCandidate(state.candidate, verification.candidate)) {\n      return blocked(\n        \"Staging verification references a different candidate\",\n        state,\n      );\n    }\n    const reasons = verificationReasons(this.policy, verification);\n    const updated: ReleaseState = {\n      ...state,\n      status: reasons.length === 0 ? \"staging-verified\" : \"staging-failed\",\n      staging: structuredClone(verification),\n      updatedAt: this.now(),\n    };\n    this.store.save(updated);\n    return reasons.length === 0\n      ? { outcome: \"verified\", state: updated }\n      : { outcome: \"failed\", reason: reasons.join(\"; \"), state: updated };\n  }\n\n  approveProduction(input: {\n    readonly candidate: ReleaseCandidate;\n    readonly approval: ProductionApproval;\n  }): ReleaseOperationResult {\n    const invalid = validCandidate(input.candidate, this.validateArtifactRef);\n    if (invalid !== undefined)\n      return blocked(`Invalid release candidate: ${invalid}`);\n    const key = this.stateKey(input.candidate);\n    const state = this.store.get(key);\n    if (state === undefined)\n      return blocked(\"Candidate has no staging release state\");\n    if (state.status !== \"staging-verified\") {\n      if (state.status === \"production-approved\") {\n        return { outcome: \"duplicate\", state };\n      }\n      return blocked(\"Production approval requires verified staging\", state);\n    }\n    if (!this.policy.requireHumanApproval) {\n      return blocked(\n        \"Production approval policy is not configured for a human gate\",\n        state,\n      );\n    }\n    if (!sameCandidate(input.candidate, input.approval.candidate)) {\n      return blocked(\n        \"Production approval does not match the exact candidate\",\n        state,\n      );\n    }\n    if (input.approval.actor.id.trim().length === 0) {\n      return blocked(\"Production approval actor is missing\", state);\n    }\n    const actorRole = input.approval.actor.role;\n    if (actorRole === \"release-coordinator\") {\n      return blocked(\n        \"Production approval requires an owner or maintainer\",\n        state,\n      );\n    }\n    if (!approvalRoles(this.policy).includes(actorRole)) {\n      return blocked(\n        \"Production approval role is not allowed by release policy\",\n        state,\n      );\n    }\n    if (input.approval.approvedAt.trim().length === 0) {\n      return blocked(\"Production approval timestamp is missing\", state);\n    }\n    const approvalFreshnessSeconds =\n      this.policy.approvalFreshnessSeconds ?? 300;\n    if (\n      !Number.isFinite(approvalFreshnessSeconds) ||\n      approvalFreshnessSeconds <= 0\n    ) {\n      return blocked(\"Production approval freshness policy is invalid\", state);\n    }\n    if (\n      !isFreshTimestamp(\n        input.approval.approvedAt,\n        this.now(),\n        approvalFreshnessSeconds,\n      )\n    ) {\n      return blocked(\"Production approval evidence is not fresh\", state);\n    }\n    const updated: ReleaseState = {\n      ...state,\n      status: \"production-approved\",\n      approval: structuredClone(input.approval),\n      updatedAt: this.now(),\n    };\n    this.store.save(updated);\n    return { outcome: \"approved\", state: updated };\n  }\n\n  async promoteProduction(\n    candidate: ReleaseCandidate,\n  ): Promise<ReleaseOperationResult> {\n    const invalid = validCandidate(candidate, this.validateArtifactRef);\n    if (invalid !== undefined)\n      return blocked(`Invalid release candidate: ${invalid}`);\n    const key = this.stateKey(candidate);\n    const state = this.store.get(key);\n    if (state === undefined) return blocked(\"Candidate has no release state\");\n    const idempotencyKey = `shipyard:${key}:production`;\n    const intentId = `intent:${idempotencyKey}`;\n    if (state.status === \"production-verified\") {\n      return { outcome: \"duplicate\", state };\n    }\n    const pendingIntent =\n      state.status === \"production-requested\" &&\n      state.production?.deploymentId === intentId;\n    if (state.status === \"production-requested\" && !pendingIntent) {\n      return { outcome: \"duplicate\", state };\n    }\n    if (state.status === \"production-failed\") {\n      return blocked(\n        \"Production verification failed; recovery decision is required\",\n        state,\n      );\n    }\n    if (\n      !pendingIntent &&\n      (state.status !== \"production-approved\" || state.approval === undefined)\n    ) {\n      return blocked(\n        \"Production promotion requires exact human approval after staging\",\n        state,\n      );\n    }\n    if (\n      state.approval === undefined ||\n      !sameCandidate(candidate, state.approval.candidate)\n    ) {\n      return blocked(\"Production approval is stale for this candidate\", state);\n    }\n    const approvalFreshnessSeconds =\n      this.policy.approvalFreshnessSeconds ?? 300;\n    if (\n      !Number.isFinite(approvalFreshnessSeconds) ||\n      approvalFreshnessSeconds <= 0\n    ) {\n      return blocked(\"Production approval freshness policy is invalid\", state);\n    }\n    if (\n      !isFreshTimestamp(\n        state.approval.approvedAt,\n        this.now(),\n        approvalFreshnessSeconds,\n      )\n    ) {\n      return blocked(\"Production approval evidence is not fresh\", state);\n    }\n    const intent = pendingIntent\n      ? state\n      : {\n          ...state,\n          status: \"production-requested\" as const,\n          production: {\n            environment: \"production\" as const,\n            candidate,\n            deploymentId: intentId,\n            checks: [],\n            smoke: \"unknown\" as const,\n            health: \"unknown\" as const,\n            recordedAt: this.now(),\n          },\n          updatedAt: this.now(),\n        };\n    if (!pendingIntent) this.store.save(intent);\n    const deployment = await this.requestDeployment(\n      \"production\",\n      candidate,\n      idempotencyKey,\n    );\n    if (deployment === undefined) {\n      return {\n        outcome: \"failed\",\n        reason: \"Production deployment could not be requested\",\n        state: this.store.get(key),\n      };\n    }\n    const updated: ReleaseState = {\n      ...intent,\n      production: {\n        ...intent.production!,\n        deploymentId: deployment.deploymentId,\n        recordedAt: this.now(),\n      },\n      updatedAt: this.now(),\n    };\n    this.store.save(updated);\n    return { outcome: \"requested\", state: updated };\n  }\n\n  private async requestDeployment(\n    environment: ReleaseEnvironment,\n    candidate: ReleaseCandidate,\n    idempotencyKey: string,\n  ): Promise<{ readonly deploymentId: string } | undefined> {\n    const environmentName =\n      environment === \"staging\"\n        ? this.policy.stagingName\n        : this.policy.productionName;\n    let reconciled: { readonly deploymentId: string } | undefined;\n    try {\n      reconciled = this.transport.reconcileDeployment\n        ? await this.transport.reconcileDeployment({\n            environment,\n            environmentName,\n            candidate,\n            idempotencyKey,\n          })\n        : undefined;\n    } catch {\n      reconciled = undefined;\n    }\n    if (reconciled !== undefined) {\n      return reconciled.deploymentId.trim().length > 0 ? reconciled : undefined;\n    }\n    try {\n      const deployment = await this.transport.requestDeployment({\n        environment,\n        environmentName,\n        candidate,\n        actor: this.actor,\n        idempotencyKey,\n      });\n      if (deployment.deploymentId.trim().length === 0) {\n        return undefined;\n      }\n      return deployment;\n    } catch {\n      return undefined;\n    }\n  }\n\n  recordProductionVerification(\n    verification: ReleaseVerification,\n  ): ReleaseOperationResult {\n    const invalid = validCandidate(\n      verification.candidate,\n      this.validateArtifactRef,\n    );\n    if (invalid !== undefined)\n      return blocked(`Invalid release candidate: ${invalid}`);\n    if (verification.environment !== \"production\")\n      return blocked(\"Verification is not for production\");\n    const key = this.stateKey(verification.candidate);\n    const state = this.store.get(key);\n    if (state === undefined || state.production === undefined) {\n      return blocked(\"Production deployment was not requested\");\n    }\n    if (isIntentDeploymentId(state.production.deploymentId)) {\n      return blocked(\n        \"Production deployment request has not been confirmed\",\n        state,\n      );\n    }\n    if (state.status === \"production-failed\") {\n      return blocked(\n        \"Production verification already failed; record recovery before any new candidate\",\n        state,\n      );\n    }\n    if (\n      state.production.deploymentId !== verification.deploymentId ||\n      !sameCandidate(state.candidate, verification.candidate)\n    ) {\n      return blocked(\n        \"Production verification references a different deployment or candidate\",\n        state,\n      );\n    }\n    const failed =\n      requiredChecksPassed(this.policy, verification.checks).length > 0 ||\n      verification.smoke !== \"passed\" ||\n      verification.health !== \"passed\" ||\n      verification.checks.some((check) => check.status !== \"passed\");\n    const updated: ReleaseState = {\n      ...state,\n      status: failed ? \"production-failed\" : \"production-verified\",\n      production: structuredClone(verification),\n      updatedAt: this.now(),\n    };\n    this.store.save(updated);\n    return failed\n      ? {\n          outcome: \"failed\",\n          reason:\n            verification.failureReason ?? \"Production verification failed\",\n          state: updated,\n        }\n      : { outcome: \"verified\", state: updated };\n  }\n\n  recordRecovery(input: {\n    readonly candidate: ReleaseCandidate;\n    readonly reason: string;\n    readonly authorizedBy: ReleaseActor;\n  }): RecoveryRecord {\n    const key = this.stateKey(input.candidate);\n    const state = this.store.get(key);\n    if (state === undefined || state.status !== \"production-failed\") {\n      throw new Error(\n        \"Recovery can only be recorded for a failed production candidate\",\n      );\n    }\n    if (input.reason.trim().length === 0) {\n      throw new Error(\"Recovery reason is required\");\n    }\n    if (\n      input.authorizedBy.id.trim().length === 0 ||\n      input.authorizedBy.role === \"release-coordinator\" ||\n      !approvalRoles(this.policy).includes(input.authorizedBy.role)\n    ) {\n      throw new Error(\"Recovery requires an authorized owner or maintainer\");\n    }\n    const recovery: RecoveryRecord = {\n      candidate: structuredClone(input.candidate),\n      action: this.policy.recoveryMode,\n      reason: input.reason,\n      authorizedBy: input.authorizedBy,\n      recordedAt: this.now(),\n    };\n    this.store.save({ ...state, recovery, updatedAt: this.now() });\n    return recovery;\n  }\n}\n\nexport const candidateMatchesApproval = (\n  candidate: ReleaseCandidate,\n  approval: ProductionApproval,\n): boolean => sameCandidate(candidate, approval.candidate);\n"]}