@stigmer/cli 3.16.0 → 3.17.0

package/marketplace/config.js

@@ -0,0 +1,162 @@
+// The marketplaces a CLI knows: the official one, built in, and the ones a
+// user added under the `marketplaces` key of ~/.stigmer/config.yaml.
+//
+// A marketplace is client-side configuration, never a server resource: the
+// server only ever sees the plugin archive a client pushes. That is why the
+// list lives beside the named backends and the context, and why `stigmer
+// marketplace` is a noun group like `config` and `auth`.
+//
+// The config module keeps the on-disk entry loose (`MarketplaceEntryConfig`,
+// every field optional) so a hand-edited entry this CLI cannot read survives
+// the next save; this module is where the entry is narrowed into a
+// `MarketplaceSource` the fetchers act on, and where an unreadable entry
+// becomes a reason `stigmer marketplace list` prints instead of a silent gap.
+import { load as loadConfig, save as saveConfig, } from "../config/index.js";
+import { OFFICIAL_MARKETPLACE_NAME, describeGitHubSource, isOwnerRepo, } from "@stigmer/plugin-package/client";
+import { UsageError } from "../errors/index.js";
+import { isStandalone } from "../runtime.js";
+export { OFFICIAL_MARKETPLACE_NAME, isOwnerRepo };
+export const OFFICIAL_MARKETPLACE = {
+    name: OFFICIAL_MARKETPLACE_NAME,
+    source: { type: "official" },
+};
+/** Every marketplace the config names, the official one first. */
+export function listMarketplaces(config = loadConfig()) {
+    const known = [OFFICIAL_MARKETPLACE];
+    const unreadable = [];
+    for (const [name, entry] of Object.entries(config.marketplaces ?? {})) {
+        const narrowed = narrowEntry(entry);
+        if (narrowed.ok)
+            known.push({ name, source: narrowed.source });
+        else
+            unreadable.push({ name, reason: narrowed.reason });
+    }
+    return { known, unreadable };
+}
+/** The marketplace called `name`, or `undefined`; an unreadable entry refuses with its reason. */
+export function findMarketplace(name, config = loadConfig()) {
+    const listing = listMarketplaces(config);
+    const known = listing.known.find((marketplace) => marketplace.name === name);
+    if (known !== undefined)
+        return known;
+    const broken = listing.unreadable.find((marketplace) => marketplace.name === name);
+    if (broken !== undefined) {
+        throw new UsageError(`marketplace '${name}' is configured but cannot be read: ${broken.reason}\n\n` +
+            `Fix the entry under 'marketplaces.${name}' in the config file, or remove it with 'stigmer marketplace remove ${name}'.`);
+    }
+    return undefined;
+}
+/**
+ * Record a marketplace under `name` and save. Refuses the reserved name, a
+ * name already taken, and a run under `--standalone` (the config file is
+ * ignored there, so there is nothing to add to; saving would write a fresh
+ * default file over the user's own).
+ */
+export function addMarketplace(name, source) {
+    refuseStandalone("add");
+    if (name === OFFICIAL_MARKETPLACE_NAME) {
+        throw new UsageError(`'${OFFICIAL_MARKETPLACE_NAME}' is the built-in marketplace and cannot be added or replaced\n\n` +
+            "Pass --name <other-name> to add this source under a different name.");
+    }
+    const config = loadConfig();
+    if (config.marketplaces?.[name] !== undefined) {
+        throw new UsageError(`a marketplace named '${name}' is already configured\n\n` +
+            `Remove it first with 'stigmer marketplace remove ${name}', or pass --name <other-name>.`);
+    }
+    saveConfig({
+        ...config,
+        marketplaces: { ...config.marketplaces, [name]: toEntry(source) },
+    });
+}
+/** Remove the marketplace called `name` and save. Refuses the reserved name and an unknown one. */
+export function removeMarketplace(name) {
+    refuseStandalone("remove");
+    if (name === OFFICIAL_MARKETPLACE_NAME) {
+        throw new UsageError(`'${OFFICIAL_MARKETPLACE_NAME}' is the built-in marketplace and cannot be removed`);
+    }
+    const config = loadConfig();
+    if (config.marketplaces?.[name] === undefined) {
+        throw new UsageError(`no marketplace named '${name}' is configured\n\nRun 'stigmer marketplace list' to see the configured names.`);
+    }
+    const { [name]: _removed, ...rest } = config.marketplaces;
+    saveConfig({
+        ...config,
+        marketplaces: Object.keys(rest).length === 0 ? undefined : rest,
+    });
+}
+function refuseStandalone(verb) {
+    if (isStandalone()) {
+        throw new UsageError(`--standalone ignores the config file, so there is no marketplace list to ${verb} to\n\n` +
+            "Run without --standalone to change the configured marketplaces.");
+    }
+}
+/** The loose on-disk entry as a source, or the reason it is not one. */
+export function narrowEntry(entry) {
+    switch (entry.type) {
+        case "github": {
+            if (typeof entry.repo !== "string" || !isOwnerRepo(entry.repo)) {
+                return { ok: false, reason: "type 'github' needs 'repo: owner/repo'" };
+            }
+            if (entry.ref !== undefined &&
+                (typeof entry.ref !== "string" || entry.ref === "")) {
+                return {
+                    ok: false,
+                    reason: "'ref' must be a non-empty branch, tag or commit",
+                };
+            }
+            return {
+                ok: true,
+                source: {
+                    type: "github",
+                    repo: entry.repo,
+                    ...(entry.ref !== undefined && { ref: entry.ref }),
+                },
+            };
+        }
+        case "local": {
+            if (typeof entry.path !== "string" || entry.path === "") {
+                return { ok: false, reason: "type 'local' needs 'path: <directory>'" };
+            }
+            return { ok: true, source: { type: "local", path: entry.path } };
+        }
+        case undefined:
+            return { ok: false, reason: "no 'type' (expected 'github' or 'local')" };
+        default:
+            return {
+                ok: false,
+                reason: `unknown type '${String(entry.type)}' (expected 'github' or 'local')`,
+            };
+    }
+}
+function toEntry(source) {
+    switch (source.type) {
+        case "github":
+            return {
+                type: "github",
+                repo: source.repo,
+                ...(source.ref !== undefined && { ref: source.ref }),
+            };
+        case "local":
+            return { type: "local", path: source.path };
+        default: {
+            const exhaustive = source;
+            return exhaustive;
+        }
+    }
+}
+/** One sentence naming where a source comes from, for lists and sentences. */
+export function describeSource(source) {
+    switch (source.type) {
+        case "official":
+            return "built in";
+        case "github":
+            return describeGitHubSource(source);
+        case "local":
+            return source.path;
+        default: {
+            const exhaustive = source;
+            return exhaustive;
+        }
+    }
+}
+//# sourceMappingURL=config.js.map

package/marketplace/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/marketplace/config.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,qEAAqE;AACrE,EAAE;AACF,2EAA2E;AAC3E,4EAA4E;AAC5E,yEAAyE;AACzE,yDAAyD;AACzD,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,mEAAmE;AACnE,yEAAyE;AACzE,8EAA8E;AAE9E,OAAO,EAGL,IAAI,IAAI,UAAU,EAClB,IAAI,IAAI,UAAU,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,yBAAyB,EACzB,oBAAoB,EACpB,WAAW,GACZ,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,OAAO,EAAE,yBAAyB,EAAE,WAAW,EAAE,CAAC;AA6BlD,MAAM,CAAC,MAAM,oBAAoB,GAAqB;IACpD,IAAI,EAAE,yBAAyB;IAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;CAC7B,CAAC;AAEF,kEAAkE;AAClE,MAAM,UAAU,gBAAgB,CAC9B,SAAiB,UAAU,EAAE;IAE7B,MAAM,KAAK,GAAuB,CAAC,oBAAoB,CAAC,CAAC;IACzD,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,QAAQ,CAAC,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;;YAC1D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AAC/B,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,eAAe,CAC7B,IAAY,EACZ,SAAiB,UAAU,EAAE;IAE7B,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAC7E,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CACpC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,KAAK,IAAI,CAC3C,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,UAAU,CAClB,gBAAgB,IAAI,uCAAuC,MAAM,CAAC,MAAM,MAAM;YAC5E,qCAAqC,IAAI,uEAAuE,IAAI,IAAI,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAY,EACZ,MAAwD;IAExD,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAClB,IAAI,yBAAyB,mEAAmE;YAC9F,qEAAqE,CACxE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAClB,wBAAwB,IAAI,6BAA6B;YACvD,oDAAoD,IAAI,iCAAiC,CAC5F,CAAC;IACJ,CAAC;IACD,UAAU,CAAC;QACT,GAAG,MAAM;QACT,YAAY,EAAE,EAAE,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;KAClE,CAAC,CAAC;AACL,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAClB,IAAI,yBAAyB,qDAAqD,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,UAAU,CAClB,yBAAyB,IAAI,gFAAgF,CAC9G,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC,YAAY,CAAC;IAC1D,UAAU,CAAC;QACT,GAAG,MAAM;QACT,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;KAChE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,IAAI,YAAY,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,UAAU,CAClB,4EAA4E,IAAI,SAAS;YACvF,iEAAiE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC;AAMD,wEAAwE;AACxE,MAAM,UAAU,WAAW,CAAC,KAA6B;IACvD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YACzE,CAAC;YACD,IACE,KAAK,CAAC,GAAG,KAAK,SAAS;gBACvB,CAAC,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,KAAK,EAAE,CAAC,EACnD,CAAC;gBACD,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,iDAAiD;iBAC1D,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,KAAK,CAAC,IAAI;oBAChB,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;iBACnD;aACF,CAAC;QACJ,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;gBACxD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;YACzE,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QACnE,CAAC;QACD,KAAK,SAAS;YACZ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAC;QAC3E;YACE,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,iBAAiB,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,kCAAkC;aAC9E,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CACd,MAAwD;IAExD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;aACrD,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC9C,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,MAAM,CAAC;YACjC,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,cAAc,CAAC,MAAyB;IACtD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,MAAM,CAAC;YACjC,OAAO,UAAU,CAAC;QACpB,CAAC;IACH,CAAC;AACH,CAAC"}

package/marketplace/github.d.ts

@@ -0,0 +1,31 @@
+/** The caps a repository zipball must fit under; each refusal names the one it hit. */
+export declare const GITHUB_ZIPBALL_LIMITS: {
+    /** The compressed archive as downloaded. */
+    readonly downloadBytes: number;
+    /** The sum of every entry's declared uncompressed size. */
+    readonly inflatedBytes: number;
+    /** Files and directories the central directory lists. */
+    readonly entries: 20000;
+};
+export interface GitHubTreeSource {
+    /** `owner/repo`. */
+    readonly repo: string;
+    /** Branch, tag or commit; the default branch when absent. */
+    readonly ref?: string;
+}
+export interface FetchGitHubTreeOptions {
+    /** Where the tree is written; created if missing. The caller owns its lifetime. */
+    readonly destDir: string;
+    /** The HTTP client (injectable for tests). */
+    readonly fetchImpl?: typeof globalThis.fetch;
+}
+/** The URL codeload answers with the zipball of `ref` (no API, no token). */
+export declare function zipballUrl(source: GitHubTreeSource): string;
+/**
+ * Download the zipball and extract it into `destDir` with the zipball's
+ * single top-level directory (`<repo>-<ref>/`) stripped, so `destDir` IS the
+ * repository root. Throws a `CliExitError` naming what refused: the
+ * repository, a cap, or an entry that would escape the directory.
+ */
+export declare function fetchGitHubTree(source: GitHubTreeSource, options: FetchGitHubTreeOptions): Promise<void>;
+//# sourceMappingURL=github.d.ts.map

package/marketplace/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../src/marketplace/github.ts"],"names":[],"mappings":"AA2CA,uFAAuF;AACvF,eAAO,MAAM,qBAAqB;IAChC,4CAA4C;;IAE5C,2DAA2D;;IAE3D,yDAAyD;;CAEjD,CAAC;AAKX,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,sBAAsB;IACrC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CAC9C;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAE3D;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgBf"}

package/marketplace/github.js

@@ -0,0 +1,203 @@
+// A public GitHub repository as a marketplace tree: the zipball of one ref,
+// downloaded from codeload and extracted into a directory the one plugin
+// walker then reads like any other.
+//
+// Why a zipball and not `git`: codeload needs no API call, no token and no
+// `git` binary, and the tree convention every vendor publishes (Cursor,
+// Claude Code, Codex) is "the repository at a ref", which is exactly what a
+// zipball is. Why to disk and not in memory: `install` and `push plugin`
+// must yield one digest for one tree, and the digest is a function of the
+// CLI's gitignore-aware, symlink-skipping walk over a directory. A second,
+// in-memory walk with its own rules would be a second identity.
+//
+// The archive is untrusted input, so it is read the way the server's push
+// gate reads one: the shape from the central directory (the shared
+// `@stigmer/zip-structure` parser) BEFORE a byte is inflated, entry count and
+// total declared size against the caps, every path contained; then each
+// entry inflated with node:zlib under its declared size as a hard output cap
+// and its CRC verified, because a declaration is a claim and the bytes are
+// the fact. That per-entry read mirrors `archive/inflate.ts` in the server,
+// its second consumer; when a third appears it moves to `@stigmer/zip-
+// structure` beside `crc32`. The caps are set against the three vendors'
+// real trees at HEAD (cursor/plugins 4.5 MiB down and 5.5 MiB inflated over
+// 1,169 entries; anthropics/claude-code 11.7 / 13.6 / 1,595; openai/codex
+// 18.6 / 76.8 / 9,188, its marketplace file at the repository root so the
+// whole repository is the tree), with room above the largest.
+import { mkdirSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { inflateRawSync } from "node:zlib";
+import { isContainedPath } from "@stigmer/plugin-package";
+import { crc32, parseZipStructure, } from "@stigmer/zip-structure";
+import { CliExitError } from "../errors/cli-exit-error.js";
+import { ExitCode } from "../errors/exit-codes.js";
+import { log } from "../logger.js";
+/** ZIP compression methods this reader opens, the two the platform's gates register. */
+const METHOD_STORED = 0;
+const METHOD_DEFLATED = 8;
+/** The caps a repository zipball must fit under; each refusal names the one it hit. */
+export const GITHUB_ZIPBALL_LIMITS = {
+    /** The compressed archive as downloaded. */
+    downloadBytes: 64 * 1024 * 1024,
+    /** The sum of every entry's declared uncompressed size. */
+    inflatedBytes: 256 * 1024 * 1024,
+    /** Files and directories the central directory lists. */
+    entries: 20_000,
+};
+/** The ref codeload serves when none is named: the repository's default branch. */
+const DEFAULT_REF = "HEAD";
+/** The URL codeload answers with the zipball of `ref` (no API, no token). */
+export function zipballUrl(source) {
+    return `https://codeload.github.com/${source.repo}/zip/${source.ref ?? DEFAULT_REF}`;
+}
+/**
+ * Download the zipball and extract it into `destDir` with the zipball's
+ * single top-level directory (`<repo>-<ref>/`) stripped, so `destDir` IS the
+ * repository root. Throws a `CliExitError` naming what refused: the
+ * repository, a cap, or an entry that would escape the directory.
+ */
+export async function fetchGitHubTree(source, options) {
+    const bytes = await download(source, options.fetchImpl ?? globalThis.fetch);
+    const entries = inspect(bytes, source);
+    mkdirSync(options.destDir, { recursive: true });
+    for (const entry of entries) {
+        const content = inflate(entry, source);
+        const target = join(options.destDir, ...entry.relative.split("/"));
+        mkdirSync(dirname(target), { recursive: true });
+        writeFileSync(target, content);
+    }
+    log.debug("github tree extracted", {
+        repo: source.repo,
+        ref: source.ref ?? DEFAULT_REF,
+        files: entries.length,
+    });
+}
+/**
+ * One entry's bytes, inflated under its declared size as the output cap
+ * and checked against its CRC. An entry that inflates past what it declared
+ * lied about its budget; one whose bytes do not match its CRC is corrupt or
+ * tampered; a method neither the server nor Go registers is not opened.
+ */
+function inflate(entry, source) {
+    let content;
+    switch (entry.zip.compressionMethod) {
+        case METHOD_STORED:
+            content = entry.zip.compressedData;
+            break;
+        case METHOD_DEFLATED:
+            try {
+                content = new Uint8Array(inflateRawSync(entry.zip.compressedData, {
+                    maxOutputLength: entry.declaredSize + 1,
+                }));
+            }
+            catch (error) {
+                if (isOutputLengthError(error)) {
+                    throw refusal(source, `entry '${entry.relative}' inflated past its declared size`);
+                }
+                throw refusal(source, `entry '${entry.relative}' could not be inflated (${error instanceof Error ? error.message : String(error)})`);
+            }
+            break;
+        default:
+            throw refusal(source, `entry '${entry.relative}' uses compression method ${entry.zip.compressionMethod}, which is not supported`);
+    }
+    if (content.length > entry.declaredSize) {
+        throw refusal(source, `entry '${entry.relative}' inflated past its declared size`);
+    }
+    if (crc32(content) !== entry.zip.crc32) {
+        throw refusal(source, `entry '${entry.relative}' failed its checksum`);
+    }
+    return content;
+}
+async function download(source, fetchImpl) {
+    const url = zipballUrl(source);
+    let response;
+    try {
+        response = await fetchImpl(url, { redirect: "follow" });
+    }
+    catch (error) {
+        throw new CliExitError(`could not reach GitHub for ${source.repo}`, ExitCode.Connection, [
+            `URL: ${url}`,
+            "Check the network connection and retry.",
+            error instanceof Error ? error.message : String(error),
+        ]);
+    }
+    if (response.status === 404) {
+        throw new CliExitError(`GitHub has no public repository '${source.repo}'${source.ref === undefined ? "" : ` at ref '${source.ref}'`}`, ExitCode.NotFound, [
+            "Check the owner, the repository name and the ref.",
+            "Private repositories are not supported; a marketplace is public content.",
+        ]);
+    }
+    if (!response.ok) {
+        throw new CliExitError(`GitHub answered ${response.status} for ${source.repo}`, ExitCode.General, [`URL: ${url}`]);
+    }
+    const declaredLength = Number(response.headers.get("content-length") ?? "0");
+    if (declaredLength > GITHUB_ZIPBALL_LIMITS.downloadBytes) {
+        throw refusal(source, `the archive is ${mib(declaredLength)}, over the ${mib(GITHUB_ZIPBALL_LIMITS.downloadBytes)} download cap`);
+    }
+    const bytes = new Uint8Array(await response.arrayBuffer());
+    if (bytes.length > GITHUB_ZIPBALL_LIMITS.downloadBytes) {
+        throw refusal(source, `the archive is ${mib(bytes.length)}, over the ${mib(GITHUB_ZIPBALL_LIMITS.downloadBytes)} download cap`);
+    }
+    return bytes;
+}
+// node:zlib's maxOutputLength violation: the output-cap arm.
+function isOutputLengthError(error) {
+    return (error instanceof Error &&
+        (("code" in error &&
+            error.code === "ERR_BUFFER_TOO_LARGE") ||
+            error.message.includes("maxOutputLength")));
+}
+/**
+ * The files to extract, in archive order, decided from the central directory
+ * alone. Refuses the caps, an entry outside the one top directory, and a
+ * path that would escape the destination.
+ */
+function inspect(bytes, source) {
+    let structure;
+    try {
+        structure = parseZipStructure(bytes);
+    }
+    catch (error) {
+        throw refusal(source, `the archive is not a readable zip (${error instanceof Error ? error.message : String(error)})`);
+    }
+    if (structure.length > GITHUB_ZIPBALL_LIMITS.entries) {
+        throw refusal(source, `the archive lists ${structure.length} entries, over the ${GITHUB_ZIPBALL_LIMITS.entries} cap`);
+    }
+    let inflated = 0;
+    for (const entry of structure)
+        inflated += entry.uncompressedSize;
+    if (inflated > GITHUB_ZIPBALL_LIMITS.inflatedBytes) {
+        throw refusal(source, `the archive inflates to ${mib(inflated)}, over the ${mib(GITHUB_ZIPBALL_LIMITS.inflatedBytes)} cap`);
+    }
+    const entries = [];
+    let top;
+    for (const entry of structure) {
+        const slash = entry.name.indexOf("/");
+        const head = slash === -1 ? entry.name : entry.name.slice(0, slash);
+        if (top === undefined)
+            top = head;
+        if (head !== top) {
+            throw refusal(source, `the archive holds more than one top-level directory ('${top}' and '${head}')`);
+        }
+        const relative = slash === -1 ? "" : entry.name.slice(slash + 1).replace(/\/+$/, "");
+        if (relative === "")
+            continue; // the top directory itself
+        if (!isContainedPath(relative)) {
+            throw refusal(source, `entry '${entry.name}' would escape the destination directory`);
+        }
+        if (entry.isDirectory)
+            continue;
+        entries.push({
+            relative,
+            declaredSize: entry.uncompressedSize,
+            zip: entry,
+        });
+    }
+    return entries;
+}
+function refusal(source, reason) {
+    return new CliExitError(`cannot read ${source.repo} as a marketplace: ${reason}`, ExitCode.Usage, ["A marketplace is a repository tree with a marketplace file at its root."]);
+}
+function mib(bytes) {
+    return `${(bytes / (1024 * 1024)).toFixed(1)} MiB`;
+}
+//# sourceMappingURL=github.js.map

package/marketplace/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/marketplace/github.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,yEAAyE;AACzE,oCAAoC;AACpC,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,gEAAgE;AAChE,EAAE;AACF,0EAA0E;AAC1E,mEAAmE;AACnE,8EAA8E;AAC9E,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,8DAA8D;AAE9D,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAEL,KAAK,EACL,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACnD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAEnC,wFAAwF;AACxF,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,4CAA4C;IAC5C,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;IAC/B,2DAA2D;IAC3D,aAAa,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;IAChC,yDAAyD;IACzD,OAAO,EAAE,MAAM;CACP,CAAC;AAEX,mFAAmF;AACnF,MAAM,WAAW,GAAG,MAAM,CAAC;AAgB3B,6EAA6E;AAC7E,MAAM,UAAU,UAAU,CAAC,MAAwB;IACjD,OAAO,+BAA+B,MAAM,CAAC,IAAI,QAAQ,MAAM,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC;AACvF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAwB,EACxB,OAA+B;IAE/B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAEvC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,uBAAuB,EAAE;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,WAAW;QAC9B,KAAK,EAAE,OAAO,CAAC,MAAM;KACtB,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,KAAmB,EAAE,MAAwB;IAC5D,IAAI,OAAmB,CAAC;IACxB,QAAQ,KAAK,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACpC,KAAK,aAAa;YAChB,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;YACnC,MAAM;QACR,KAAK,eAAe;YAClB,IAAI,CAAC;gBACH,OAAO,GAAG,IAAI,UAAU,CACtB,cAAc,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,EAAE;oBACvC,eAAe,EAAE,KAAK,CAAC,YAAY,GAAG,CAAC;iBACxC,CAAC,CACH,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,mBAAmB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAC/B,MAAM,OAAO,CACX,MAAM,EACN,UAAU,KAAK,CAAC,QAAQ,mCAAmC,CAC5D,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,CACX,MAAM,EACN,UAAU,KAAK,CAAC,QAAQ,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAC9G,CAAC;YACJ,CAAC;YACD,MAAM;QACR;YACE,MAAM,OAAO,CACX,MAAM,EACN,UAAU,KAAK,CAAC,QAAQ,6BAA6B,KAAK,CAAC,GAAG,CAAC,iBAAiB,0BAA0B,CAC3G,CAAC;IACN,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;QACxC,MAAM,OAAO,CACX,MAAM,EACN,UAAU,KAAK,CAAC,QAAQ,mCAAmC,CAC5D,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACvC,MAAM,OAAO,CAAC,MAAM,EAAE,UAAU,KAAK,CAAC,QAAQ,uBAAuB,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAwB,EACxB,SAAkC;IAElC,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/B,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,YAAY,CACpB,8BAA8B,MAAM,CAAC,IAAI,EAAE,EAC3C,QAAQ,CAAC,UAAU,EACnB;YACE,QAAQ,GAAG,EAAE;YACb,yCAAyC;YACzC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SACvD,CACF,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,YAAY,CACpB,oCAAoC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,GAAG,GAAG,EAAE,EAC9G,QAAQ,CAAC,QAAQ,EACjB;YACE,mDAAmD;YACnD,0EAA0E;SAC3E,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,YAAY,CACpB,mBAAmB,QAAQ,CAAC,MAAM,QAAQ,MAAM,CAAC,IAAI,EAAE,EACvD,QAAQ,CAAC,OAAO,EAChB,CAAC,QAAQ,GAAG,EAAE,CAAC,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,IAAI,cAAc,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,OAAO,CACX,MAAM,EACN,kBAAkB,GAAG,CAAC,cAAc,CAAC,cAAc,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,eAAe,CAC3G,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC;QACvD,MAAM,OAAO,CACX,MAAM,EACN,kBAAkB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,eAAe,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6DAA6D;AAC7D,SAAS,mBAAmB,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,YAAY,KAAK;QACtB,CAAC,CAAC,MAAM,IAAI,KAAK;YACd,KAA2B,CAAC,IAAI,KAAK,sBAAsB,CAAC;YAC7D,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAC7C,CAAC;AACJ,CAAC;AAWD;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAAiB,EAAE,MAAwB;IAC1D,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CACX,MAAM,EACN,sCAAsC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAChG,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,CAAC;QACrD,MAAM,OAAO,CACX,MAAM,EACN,qBAAqB,SAAS,CAAC,MAAM,sBAAsB,qBAAqB,CAAC,OAAO,MAAM,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,MAAM,KAAK,IAAI,SAAS;QAAE,QAAQ,IAAI,KAAK,CAAC,gBAAgB,CAAC;IAClE,IAAI,QAAQ,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC;QACnD,MAAM,OAAO,CACX,MAAM,EACN,2BAA2B,GAAG,CAAC,QAAQ,CAAC,cAAc,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC,MAAM,CACrG,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,GAAuB,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACpE,IAAI,GAAG,KAAK,SAAS;YAAE,GAAG,GAAG,IAAI,CAAC;QAClC,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjB,MAAM,OAAO,CACX,MAAM,EACN,yDAAyD,GAAG,UAAU,IAAI,IAAI,CAC/E,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GACZ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtE,IAAI,QAAQ,KAAK,EAAE;YAAE,SAAS,CAAC,2BAA2B;QAC1D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,CACX,MAAM,EACN,UAAU,KAAK,CAAC,IAAI,0CAA0C,CAC/D,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,WAAW;YAAE,SAAS;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ;YACR,YAAY,EAAE,KAAK,CAAC,gBAAgB;YACpC,GAAG,EAAE,KAAK;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,MAAwB,EAAE,MAAc;IACvD,OAAO,IAAI,YAAY,CACrB,eAAe,MAAM,CAAC,IAAI,sBAAsB,MAAM,EAAE,EACxD,QAAQ,CAAC,KAAK,EACd,CAAC,yEAAyE,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AACrD,CAAC"}

package/marketplace/index.d.ts

@@ -0,0 +1,8 @@
+export { OFFICIAL_MARKETPLACE, OFFICIAL_MARKETPLACE_NAME, type KnownMarketplace, type MarketplaceListing, type MarketplaceSource, type UnreadableMarketplace, addMarketplace, describeSource, findMarketplace, listMarketplaces, removeMarketplace, } from "./config.js";
+export { type LocatedEntry, assertVersion, locateEntry, prepareEntry, } from "./install.js";
+export { type OpenMarketplace, type OpenMarketplaceOptions, openMarketplace, withMarketplace, } from "./materialize.js";
+export { type OfficialMarketplaceDir, type ResolveOfficialOptions, resolveOfficialMarketplace, } from "./official.js";
+export { type ReadMarketplaceTree, entryDirectory, findEntry, marketplaceRefusal, readMarketplaceTree, } from "./read.js";
+export { type InstallRef, formatInstallRef, parseAddSource, parseInstallRef, } from "./ref.js";
+export { type ShownEntry, inspectEntries, renderMarketplaceList, renderMarketplaceShow, } from "./render.js";
+//# sourceMappingURL=index.d.ts.map

package/marketplace/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/marketplace/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EACzB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,cAAc,EACd,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,YAAY,EACjB,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,eAAe,EACf,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,KAAK,mBAAmB,EACxB,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,UAAU,EACf,gBAAgB,EAChB,cAAc,EACd,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EACL,KAAK,UAAU,EACf,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAC"}

package/marketplace/index.js

@@ -0,0 +1,12 @@
+// Public surface of the marketplace module: the sources a CLI knows, the two
+// grammars a user types, one way to get a tree on disk, one way to read it,
+// one way to turn an entry into a push, and the two renderers. Commands
+// lazy-import this barrel inside their actions so `--help` stays fast.
+export { OFFICIAL_MARKETPLACE, OFFICIAL_MARKETPLACE_NAME, addMarketplace, describeSource, findMarketplace, listMarketplaces, removeMarketplace, } from "./config.js";
+export { assertVersion, locateEntry, prepareEntry, } from "./install.js";
+export { openMarketplace, withMarketplace, } from "./materialize.js";
+export { resolveOfficialMarketplace, } from "./official.js";
+export { entryDirectory, findEntry, marketplaceRefusal, readMarketplaceTree, } from "./read.js";
+export { formatInstallRef, parseAddSource, parseInstallRef, } from "./ref.js";
+export { inspectEntries, renderMarketplaceList, renderMarketplaceShow, } from "./render.js";
+//# sourceMappingURL=index.js.map

package/marketplace/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/marketplace/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,4EAA4E;AAC5E,wEAAwE;AACxE,uEAAuE;AAEvE,OAAO,EACL,oBAAoB,EACpB,yBAAyB,EAKzB,cAAc,EACd,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,aAAa,EACb,WAAW,EACX,YAAY,GACb,MAAM,cAAc,CAAC;AACtB,OAAO,EAGL,eAAe,EACf,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAGL,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,cAAc,EACd,SAAS,EACT,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAEL,gBAAgB,EAChB,cAAc,EACd,eAAe,GAChB,MAAM,UAAU,CAAC;AAClB,OAAO,EAEL,cAAc,EACd,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,aAAa,CAAC"}

package/marketplace/install.d.ts

@@ -0,0 +1,28 @@
+import { type PreparedPluginPush } from "../resources/plugin.js";
+import { type KnownMarketplace, type MarketplaceListing } from "./config.js";
+import { type OpenMarketplace, type OpenMarketplaceOptions } from "./materialize.js";
+import { type ReadMarketplaceTree } from "./read.js";
+import { type InstallRef } from "./ref.js";
+/** A ref resolved to the one marketplace that offers it, with that marketplace open on disk. */
+export interface LocatedEntry {
+    readonly marketplace: KnownMarketplace;
+    readonly open: OpenMarketplace;
+    readonly tree: ReadMarketplaceTree;
+}
+/**
+ * Find the marketplace a ref names. A prefixed ref names it outright; a bare
+ * name is searched across every configured marketplace in listing order
+ * (the official one first), and exactly one must offer it: none refuses
+ * toward `marketplace show`, more than one refuses by naming each holder,
+ * because "the first one wins" would make the answer depend on the order
+ * the user added marketplaces in. The caller owns `open` and disposes it.
+ */
+export declare function locateEntry(ref: InstallRef, listing: MarketplaceListing, options?: OpenMarketplaceOptions): Promise<LocatedEntry>;
+/** Read, validate and zip the entry called `name`; refuses an entry the marketplace does not offer. */
+export declare function prepareEntry(tree: ReadMarketplaceTree, name: string): Promise<PreparedPluginPush>;
+/**
+ * `@version` in a ref is an assertion, not a selector: a marketplace tree
+ * holds one version of each plugin, so the ref either names it or is wrong.
+ */
+export declare function assertVersion(prepared: PreparedPluginPush, wanted: string | undefined, ref: string): void;
+//# sourceMappingURL=install.d.ts.map

package/marketplace/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/marketplace/install.ts"],"names":[],"mappings":"AAUA,OAAO,EACL,KAAK,kBAAkB,EAExB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EAExB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAE5B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,KAAK,mBAAmB,EAIzB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,UAAU,EAAoB,MAAM,UAAU,CAAC;AAE7D,gGAAgG;AAChG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,UAAU,EACf,OAAO,EAAE,kBAAkB,EAC3B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,YAAY,CAAC,CA4DvB;AAED,uGAAuG;AACvG,wBAAsB,YAAY,CAChC,IAAI,EAAE,mBAAmB,EACzB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,kBAAkB,CAAC,CAI7B;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,GAAG,EAAE,MAAM,GACV,IAAI,CASN"}

package/marketplace/install.js

@@ -0,0 +1,109 @@
+// An entry of an open marketplace becomes a prepared push. This is the one
+// place that happens, for both callers: `stigmer install <ref>` and the
+// `stigmer up` default-set step. Neither re-derives the entry's directory or
+// the archive's digest; both hand the prepared value to `pushPrepared` (or,
+// for `up`, compare its digest first). The entry's directory goes through the
+// same walker `push plugin <dir>` uses, so a marketplace install and a push
+// of the same checked-out folder yield one digest for one tree.
+import { UsageError } from "../errors/index.js";
+import { preparePluginPush, } from "../resources/plugin.js";
+import { describeSource, } from "./config.js";
+import { openMarketplace, } from "./materialize.js";
+import { entryDirectory, findEntry, readMarketplaceTree, } from "./read.js";
+import { formatInstallRef } from "./ref.js";
+/**
+ * Find the marketplace a ref names. A prefixed ref names it outright; a bare
+ * name is searched across every configured marketplace in listing order
+ * (the official one first), and exactly one must offer it: none refuses
+ * toward `marketplace show`, more than one refuses by naming each holder,
+ * because "the first one wins" would make the answer depend on the order
+ * the user added marketplaces in. The caller owns `open` and disposes it.
+ */
+export async function locateEntry(ref, listing, options = {}) {
+    if (ref.marketplace !== undefined) {
+        const marketplace = listing.known.find((known) => known.name === ref.marketplace);
+        if (marketplace === undefined) {
+            throw new UsageError(`no marketplace named '${ref.marketplace}' is configured\n\n` +
+                "Run 'stigmer marketplace list' to see the configured names, or add one with 'stigmer marketplace add <source>'.");
+        }
+        const open = await openMarketplace(marketplace.source, options);
+        try {
+            const tree = readMarketplaceTree(open.root, describeSource(marketplace.source));
+            if (findEntry(tree.marketplace, ref.name) === undefined)
+                throw entryNotOffered(tree, ref.name);
+            return { marketplace, open, tree };
+        }
+        catch (error) {
+            open.dispose();
+            throw error;
+        }
+    }
+    const holders = [];
+    for (const marketplace of listing.known) {
+        const open = await openMarketplace(marketplace.source, options);
+        let tree;
+        try {
+            tree = readMarketplaceTree(open.root, describeSource(marketplace.source));
+        }
+        catch (error) {
+            open.dispose();
+            for (const holder of holders)
+                holder.open.dispose();
+            throw error;
+        }
+        if (findEntry(tree.marketplace, ref.name) === undefined) {
+            open.dispose();
+            continue;
+        }
+        holders.push({ marketplace, open, tree });
+    }
+    if (holders.length === 1)
+        return holders[0];
+    for (const holder of holders)
+        holder.open.dispose();
+    if (holders.length === 0) {
+        const skipped = listing.unreadable.length === 0
+            ? ""
+            : ` Not searched, because its entry cannot be read: ${listing.unreadable.map((entry) => entry.name).join(", ")} (see 'stigmer marketplace list').`;
+        throw new UsageError(`no configured marketplace offers a plugin named '${ref.name}'\n\n` +
+            `Searched: ${listing.known.map((known) => known.name).join(", ")}.${skipped} ` +
+            "Run 'stigmer marketplace show <name>' to see what each offers, or add the marketplace that has it.");
+    }
+    throw new UsageError(`'${ref.name}' is offered by more than one marketplace: ${holders.map((holder) => holder.marketplace.name).join(", ")}\n\n` +
+        `Name the one you mean: ${holders.map((holder) => formatInstallRef({ ...ref, marketplace: holder.marketplace.name })).join(" or ")}.`);
+}
+/** Read, validate and zip the entry called `name`; refuses an entry the marketplace does not offer. */
+export async function prepareEntry(tree, name) {
+    const entry = findEntry(tree.marketplace, name);
+    if (entry === undefined)
+        throw entryNotOffered(tree, name);
+    return preparePluginPush(entryDirectory(tree, entry));
+}
+/**
+ * `@version` in a ref is an assertion, not a selector: a marketplace tree
+ * holds one version of each plugin, so the ref either names it or is wrong.
+ */
+export function assertVersion(prepared, wanted, ref) {
+    if (wanted === undefined)
+        return;
+    const offered = prepared.plugin.version;
+    if (offered === wanted)
+        return;
+    throw new UsageError(offered === undefined
+        ? `'${ref}' pins version ${wanted}, but the marketplace's '${prepared.plugin.name}' declares no version\n\nInstall it without '@${wanted}'.`
+        : `'${ref}' pins version ${wanted}, but the marketplace offers '${prepared.plugin.name}' at ${offered}\n\nInstall it as '${ref.slice(0, ref.lastIndexOf("@"))}@${offered}', or without a version.`);
+}
+function entryNotOffered(tree, name) {
+    const dropped = tree.warnings.find((warning) => warning.subject === name);
+    const offered = tree.marketplace.plugins.map((entry) => entry.name);
+    const lines = [
+        `marketplace '${tree.marketplace.name}' does not offer a plugin named '${name}'`,
+    ];
+    if (dropped !== undefined)
+        lines.push("", dropped.message);
+    lines.push("", offered.length === 0
+        ? "It offers no plugins this CLI can install."
+        : `Run 'stigmer marketplace show ${tree.marketplace.name}' to see the ${offered.length} it offers.`);
+    return new UsageError(lines.join("\n"));
+}
+//# sourceMappingURL=install.js.map

package/marketplace/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/marketplace/install.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,wEAAwE;AACxE,6EAA6E;AAC7E,4EAA4E;AAC5E,8EAA8E;AAC9E,4EAA4E;AAC5E,gEAAgE;AAGhE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAEL,iBAAiB,GAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAGL,cAAc,GACf,MAAM,aAAa,CAAC;AACrB,OAAO,EAGL,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,cAAc,EACd,SAAS,EACT,mBAAmB,GACpB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAmB,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAS7D;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAe,EACf,OAA2B,EAC3B,UAAkC,EAAE;IAEpC,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CACpC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,WAAW,CAC1C,CAAC;QACF,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,IAAI,UAAU,CAClB,yBAAyB,GAAG,CAAC,WAAW,qBAAqB;gBAC3D,iHAAiH,CACpH,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,mBAAmB,CAC9B,IAAI,CAAC,IAAI,EACT,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CACnC,CAAC;YACF,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS;gBACrD,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAChE,IAAI,IAAyB,CAAC;QAC9B,IAAI,CAAC;YACH,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACxD,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;IAC7C,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,OAAO,GACX,OAAO,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC;YAC7B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,oDAAoD,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,CAAC;QACvJ,MAAM,IAAI,UAAU,CAClB,oDAAoD,GAAG,CAAC,IAAI,OAAO;YACjE,aAAa,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,OAAO,GAAG;YAC9E,oGAAoG,CACvG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,UAAU,CAClB,IAAI,GAAG,CAAC,IAAI,8CAA8C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM;QACzH,0BAA0B,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,EAAE,GAAG,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CACxI,CAAC;AACJ,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAyB,EACzB,IAAY;IAEZ,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,iBAAiB,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,QAA4B,EAC5B,MAA0B,EAC1B,GAAW;IAEX,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO;IACjC,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC;IACxC,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO;IAC/B,MAAM,IAAI,UAAU,CAClB,OAAO,KAAK,SAAS;QACnB,CAAC,CAAC,IAAI,GAAG,kBAAkB,MAAM,4BAA4B,QAAQ,CAAC,MAAM,CAAC,IAAI,iDAAiD,MAAM,IAAI;QAC5I,CAAC,CAAC,IAAI,GAAG,kBAAkB,MAAM,iCAAiC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,OAAO,sBAAsB,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,0BAA0B,CACrM,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAAyB,EAAE,IAAY;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAC1C,CAAC,KAAuB,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CACxC,CAAC;IACF,MAAM,KAAK,GAAG;QACZ,gBAAgB,IAAI,CAAC,WAAW,CAAC,IAAI,oCAAoC,IAAI,GAAG;KACjF,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,KAAK,CAAC,IAAI,CACR,EAAE,EACF,OAAO,CAAC,MAAM,KAAK,CAAC;QAClB,CAAC,CAAC,4CAA4C;QAC9C,CAAC,CAAC,iCAAiC,IAAI,CAAC,WAAW,CAAC,IAAI,gBAAgB,OAAO,CAAC,MAAM,aAAa,CACtG,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/marketplace/materialize.d.ts

@@ -0,0 +1,19 @@
+import type { MarketplaceSource } from "./config.js";
+import { type ResolveOfficialOptions } from "./official.js";
+/** A marketplace tree on disk, for as long as the caller holds it. */
+export interface OpenMarketplace {
+    /** Absolute path to the tree root: the directory the marketplace file sits in. */
+    readonly root: string;
+    /** Release whatever the open created (a temp directory); a no-op for a tree that was already there. */
+    dispose(): void;
+}
+export interface OpenMarketplaceOptions {
+    /** The HTTP client for GitHub sources (injectable for tests). */
+    readonly fetchImpl?: typeof globalThis.fetch;
+    /** How the official tree is found (injectable for tests). */
+    readonly official?: ResolveOfficialOptions;
+}
+export declare function openMarketplace(source: MarketplaceSource, options?: OpenMarketplaceOptions): Promise<OpenMarketplace>;
+/** Open, hand the tree to `use`, and dispose whatever the outcome. */
+export declare function withMarketplace<T>(source: MarketplaceSource, use: (open: OpenMarketplace) => Promise<T> | T, options?: OpenMarketplaceOptions): Promise<T>;
+//# sourceMappingURL=materialize.d.ts.map

package/marketplace/materialize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialize.d.ts","sourceRoot":"","sources":["../../src/marketplace/materialize.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErD,OAAO,EACL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAEvB,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uGAAuG;IACvG,OAAO,IAAI,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC7C,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;CAC5C;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,eAAe,CAAC,CA6B1B;AAED,sEAAsE;AACtE,wBAAsB,eAAe,CAAC,CAAC,EACrC,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,EAC9C,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,CAAC,CAAC,CAOZ"}