@stll/oxlint-config 1.8.0 → 2.0.0

package/dist/quarantine-policy.d.cts

@@ -1,3 +1,25 @@
+//#region src/dated-entry-scope.d.ts
+/** A tracked file at the base revision: absent (`text: undefined`) or unreadable. */
+type BaseFile = {
+  text: string | undefined;
+} | {
+  unavailable: string;
+};
+/**
+ * Which overdue dated entries (quarantine excludes, Rust exceptions) fail. The
+ * clock alone never fails a change that leaves an entry untouched: `enforce`
+ * fails every overdue entry (default branch, schedule), `advisory` only warns
+ * (local runs), and `changed` fails entries absent or different at the base.
+ */
+type ExpiryScope = {
+  kind: "enforce";
+} | {
+  kind: "advisory";
+} | {
+  kind: "changed";
+  readBase: (path: string) => BaseFile;
+};
+//#endregion
 //#region src/quarantine-policy-core.d.ts
 export declare const REQUIRED_RELEASE_AGE_SECONDS: number;
 export declare const NPM_REGISTRY = "https://registry.npmjs.org";
@@ -15,13 +37,14 @@ type RepositoryQuarantineOptions = {
   files: Record<string, string>;
   now?: Date | undefined;
   npmrcPresent?: boolean | undefined;
+  expiry?: ExpiryScope | undefined;
 };
-export declare const checkRepositoryQuarantine: ({ files, now, npmrcPresent }: RepositoryQuarantineOptions) => CheckResult;
+export declare const checkRepositoryQuarantine: ({ files, now, npmrcPresent, expiry }: RepositoryQuarantineOptions) => CheckResult;
 export declare const synchronizeRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => string;
 export declare const pruneRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => {
   bunfig: string;
   pruned: string[];
 };
 //#endregion
-export {};
+export type { ExpiryScope };
 //# sourceMappingURL=quarantine-policy.d.cts.map

package/dist/quarantine-policy.d.mts

@@ -1,3 +1,25 @@
+//#region src/dated-entry-scope.d.ts
+/** A tracked file at the base revision: absent (`text: undefined`) or unreadable. */
+type BaseFile = {
+  text: string | undefined;
+} | {
+  unavailable: string;
+};
+/**
+ * Which overdue dated entries (quarantine excludes, Rust exceptions) fail. The
+ * clock alone never fails a change that leaves an entry untouched: `enforce`
+ * fails every overdue entry (default branch, schedule), `advisory` only warns
+ * (local runs), and `changed` fails entries absent or different at the base.
+ */
+type ExpiryScope = {
+  kind: "enforce";
+} | {
+  kind: "advisory";
+} | {
+  kind: "changed";
+  readBase: (path: string) => BaseFile;
+};
+//#endregion
 //#region src/quarantine-policy-core.d.ts
 export declare const REQUIRED_RELEASE_AGE_SECONDS: number;
 export declare const NPM_REGISTRY = "https://registry.npmjs.org";
@@ -15,13 +37,14 @@ type RepositoryQuarantineOptions = {
   files: Record<string, string>;
   now?: Date | undefined;
   npmrcPresent?: boolean | undefined;
+  expiry?: ExpiryScope | undefined;
 };
-export declare const checkRepositoryQuarantine: ({ files, now, npmrcPresent }: RepositoryQuarantineOptions) => CheckResult;
+export declare const checkRepositoryQuarantine: ({ files, now, npmrcPresent, expiry }: RepositoryQuarantineOptions) => CheckResult;
 export declare const synchronizeRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => string;
 export declare const pruneRepositoryQuarantine: ({ files, now }: RepositoryQuarantineOptions) => {
   bunfig: string;
   pruned: string[];
 };
 //#endregion
-export {};
+export type { ExpiryScope };
 //# sourceMappingURL=quarantine-policy.d.mts.map

package/dist/quarantine-policy2.cjs

@@ -1,5 +1,154 @@
 const require_jsonc = require("./jsonc.cjs");
+let node_child_process = require("node:child_process");
+let node_fs = require("node:fs");
 let smol_toml = require("smol-toml");
+//#region src/dated-entry-scope.ts
+/**
+* Decide one overdue entry. `unchangedAt` reports whether the base file text
+* declares the same entry identically; a base that cannot prove that fails.
+* The base is read only here, so runs without overdue entries never need it.
+*/
+const overdueVerdict = (scope, path, unchangedAt) => {
+	if (scope.kind === "enforce") return { fail: true };
+	if (scope.kind === "advisory") return { fail: false };
+	const base = scope.readBase(path);
+	if ("unavailable" in base) return {
+		fail: true,
+		unavailable: base.unavailable
+	};
+	if (base.text === void 0) return { fail: true };
+	try {
+		return unchangedAt(base.text) ? { fail: false } : { fail: true };
+	} catch {
+		return { fail: true };
+	}
+};
+const scopedEvents = /* @__PURE__ */ new Set([
+	"pull_request",
+	"pull_request_target",
+	"merge_group"
+]);
+const COMMIT = /^[0-9a-f]{40}(?:[0-9a-f]{24})?$/u;
+const record$1 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+const eventBase = (event, eventPath) => {
+	if (eventPath === void 0 || eventPath === "") return void 0;
+	const payload = JSON.parse((0, node_fs.readFileSync)(eventPath, "utf8"));
+	if (!record$1(payload)) return void 0;
+	let sha;
+	if (event === "merge_group") {
+		const group = payload["merge_group"];
+		sha = record$1(group) ? group["base_sha"] : void 0;
+	} else {
+		const pullRequest = payload["pull_request"];
+		const base = record$1(pullRequest) ? pullRequest["base"] : void 0;
+		sha = record$1(base) ? base["sha"] : void 0;
+	}
+	return typeof sha === "string" && COMMIT.test(sha) ? sha : void 0;
+};
+/**
+* Derive the expiry scope from the run context. Pushes, schedules, dispatches,
+* other GitHub events and non-GitHub CI enforce; pull requests and merge groups
+* compare with the event's base commit, fetching only that commit when a
+* shallow checkout lacks it; local runs are advisory.
+*/
+const resolveExpiryScope = (root, env = process.env) => {
+	if (env["GITHUB_ACTIONS"] !== "true") {
+		const ci = env["CI"];
+		return ci === void 0 || ci === "" || ci === "false" || ci === "0" ? { kind: "advisory" } : { kind: "enforce" };
+	}
+	const event = env["GITHUB_EVENT_NAME"];
+	if (event === void 0 || !scopedEvents.has(event)) return { kind: "enforce" };
+	let sha;
+	try {
+		sha = eventBase(event, env["GITHUB_EVENT_PATH"]);
+	} catch {
+		sha = void 0;
+	}
+	if (sha === void 0) {
+		const unavailable = `the ${event} event payload (GITHUB_EVENT_PATH) has no readable base commit`;
+		return {
+			kind: "changed",
+			readBase: () => ({ unavailable })
+		};
+	}
+	const base = sha;
+	const git = (args) => (0, node_child_process.execFileSync)("git", args, {
+		cwd: root,
+		encoding: "utf8",
+		env: {
+			...env,
+			GIT_TERMINAL_PROMPT: "0"
+		},
+		stdio: [
+			"ignore",
+			"pipe",
+			"ignore"
+		],
+		maxBuffer: 16777216,
+		timeout: 12e4
+	});
+	const succeeds = (args) => {
+		try {
+			git(args);
+			return true;
+		} catch {
+			return false;
+		}
+	};
+	const hasCommit = () => succeeds([
+		"cat-file",
+		"-e",
+		`${base}^{commit}`
+	]);
+	let commitProblem;
+	const ensureCommit = () => {
+		if (commitProblem !== void 0) return commitProblem;
+		if (hasCommit()) return commitProblem = null;
+		let remotes;
+		try {
+			remotes = git(["remote"]).split("\n").filter(Boolean);
+		} catch {
+			remotes = [];
+		}
+		let remote;
+		if (remotes.includes("origin")) remote = "origin";
+		else if (remotes.length === 1) remote = remotes.at(0);
+		if (remote === void 0) return commitProblem = `base commit ${base} is not in the clone and no single checkout remote can fetch it; check out with actions/checkout`;
+		succeeds([
+			"fetch",
+			"--no-tags",
+			"--depth=1",
+			remote,
+			base
+		]);
+		commitProblem = hasCommit() ? null : `base commit ${base} is not in the clone and "git fetch --no-tags --depth=1 ${remote} ${base}" failed; keep the actions/checkout credentials (persist-credentials: true) or check out with fetch-depth: 0`;
+		return commitProblem;
+	};
+	const files = /* @__PURE__ */ new Map();
+	const read = (path) => {
+		const problem = ensureCommit();
+		if (problem !== null) return { unavailable: problem };
+		if (!succeeds([
+			"cat-file",
+			"-e",
+			`${base}:./${path}`
+		])) return { text: void 0 };
+		try {
+			return { text: git(["show", `${base}:./${path}`]) };
+		} catch {
+			return { unavailable: `cannot read ${path} at base commit ${base}` };
+		}
+	};
+	return {
+		kind: "changed",
+		readBase: (path) => {
+			const cached = files.get(path) ?? read(path);
+			files.set(path, cached);
+			return cached;
+		}
+	};
+};
+//#endregion
 //#region src/quarantine-policy-core.ts
 const REQUIRED_RELEASE_AGE_SECONDS = 432e3;
 const NPM_REGISTRY = "https://registry.npmjs.org";
@@ -182,7 +331,12 @@ const validNow = (now) => {
 	if (!Number.isFinite(now.getTime())) return fail("Quarantine policy requires a valid current date");
 	return now.getTime();
 };
-const checkQuarantinePolicy = ({ bunfig, lockfile, parseToml, npmrcPresent = false, now = /* @__PURE__ */ new Date(), firstPartyPackages }) => {
+/** Whether the base bunfig declares this temporary exclude with the same expiry. */
+const declaresTemporary = (baseBunfig, parseToml, name, timestamp) => readSourceArray(baseBunfig, parseToml).entries.some((entry) => {
+	const annotation = annotationOf(entry);
+	return entry.name === name && annotation.type === "expires" && annotation.timestamp === timestamp;
+});
+const checkQuarantinePolicy = ({ bunfig, lockfile, parseToml, npmrcPresent = false, now = /* @__PURE__ */ new Date(), firstPartyPackages, expiry = { kind: "enforce" } }) => {
 	const errors = [];
 	const warnings = [];
 	try {
@@ -210,8 +364,13 @@ const checkQuarantinePolicy = ({ bunfig, lockfile, parseToml, npmrcPresent = fal
 				errors.push(`bunfig.toml third-party quarantine exclude "${entry.name}" must use quarantine-expires:`);
 				continue;
 			}
-			if (nowMs >= timestampMs + 24 * HOUR_MS) errors.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expired at ${annotation.timestamp} and is still present`);
-			else if (nowMs >= timestampMs) warnings.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expired at ${annotation.timestamp}; its removal PR should be merged`);
+			if (nowMs >= timestampMs + 24 * HOUR_MS) {
+				const overdue = `bunfig.toml temporary quarantine exclude "${entry.name}" expired at ${annotation.timestamp} and is still present`;
+				const verdict = overdueVerdict(expiry, "bunfig.toml", (base) => declaresTemporary(base, parseToml, entry.name, annotation.timestamp));
+				if (!verdict.fail) warnings.push(`${overdue}; merge its removal PR (default-branch and scheduled runs fail, as do changes that add or edit it)`);
+				else if (verdict.unavailable === void 0) errors.push(overdue);
+				else errors.push(`${overdue}; cannot tell whether this change adds it: ${verdict.unavailable}`);
+			} else if (nowMs >= timestampMs) warnings.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expired at ${annotation.timestamp}; its removal PR should be merged`);
 			else if (nowMs >= timestampMs - 48 * HOUR_MS) warnings.push(`bunfig.toml temporary quarantine exclude "${entry.name}" expires at ${annotation.timestamp}; prepare its removal PR`);
 		}
 		const required = readRegistryFirstPartyPackages(lockfile);
@@ -324,13 +483,14 @@ const declaredFirstPartyPackages = (files) => {
 	}
 	return names;
 };
-const checkRepositoryQuarantine = ({ files, now, npmrcPresent }) => checkQuarantinePolicy({
+const checkRepositoryQuarantine = ({ files, now, npmrcPresent, expiry }) => checkQuarantinePolicy({
 	bunfig: files["bunfig.toml"] ?? "",
 	lockfile: files["bun.lock"],
 	firstPartyPackages: declaredFirstPartyPackages(files),
 	parseToml: smol_toml.parse,
 	...now === void 0 ? {} : { now },
-	...npmrcPresent === void 0 ? {} : { npmrcPresent }
+	...npmrcPresent === void 0 ? {} : { npmrcPresent },
+	...expiry === void 0 ? {} : { expiry }
 });
 const synchronizeRepositoryQuarantine = ({ files, now }) => {
 	const firstPartyPackages = /* @__PURE__ */ new Set([...declaredFirstPartyPackages(files), ...readRegistryFirstPartyPackages(files["bun.lock"])]);
@@ -383,12 +543,24 @@ Object.defineProperty(exports, "exactTimestamp", {
 		return exactTimestamp;
 	}
 });
+Object.defineProperty(exports, "overdueVerdict", {
+	enumerable: true,
+	get: function() {
+		return overdueVerdict;
+	}
+});
 Object.defineProperty(exports, "pruneRepositoryQuarantine", {
 	enumerable: true,
 	get: function() {
 		return pruneRepositoryQuarantine;
 	}
 });
+Object.defineProperty(exports, "resolveExpiryScope", {
+	enumerable: true,
+	get: function() {
+		return resolveExpiryScope;
+	}
+});
 Object.defineProperty(exports, "synchronizeRepositoryQuarantine", {
 	enumerable: true,
 	get: function() {

package/dist/quarantine-policy2.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"quarantine-policy2.cjs","names":["parseJsonc","parse"],"sources":["../src/quarantine-policy-core.ts","../src/quarantine-policy.ts"],"sourcesContent":["import { parseJsonc } from \"./jsonc\";\n\nexport const REQUIRED_RELEASE_AGE_SECONDS = 5 * 24 * 60 * 60;\nexport const NPM_REGISTRY = \"https://registry.npmjs.org\";\nexport const EXACT_UTC_TIMESTAMP =\n  /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst HOUR_MS = 60 * 60 * 1000;\nconst EXACT_PACKAGE = /^(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*$/u;\nconst REGISTRY_VERSION =\n  /^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/u;\n\ntype ParseToml = (text: string) => unknown;\ntype FirstPartyPackages = ReadonlySet<string> | readonly string[];\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\nconst fail: (message: string) => never = (message) => {\n  throw new Error(message);\n};\nconst ownPackage = (name: string) => name.startsWith(\"@stll/\");\nconst exactPackage = (name: string) =>\n  name.length <= 214 && EXACT_PACKAGE.test(name);\nexport const isFirstPartyPackageName = (name: string): boolean =>\n  exactPackage(name) && ownPackage(name);\n\nexport const exactTimestamp = (value: string): boolean => {\n  const timestamp = Date.parse(value);\n  return (\n    EXACT_UTC_TIMESTAMP.test(value) &&\n    !Number.isNaN(timestamp) &&\n    new Date(timestamp).toISOString() === value\n  );\n};\n\nexport const readParsedExcludes = (\n  bunfig: string,\n  parseToml: ParseToml,\n): string[] => {\n  const parsed = parseToml(bunfig);\n  if (!isRecord(parsed) || !isRecord(parsed[\"install\"]))\n    return fail(\"bunfig.toml must contain an [install] table\");\n  const install = parsed[\"install\"];\n  if (\n    (\"registry\" in install && install[\"registry\"] !== NPM_REGISTRY) ||\n    (\"scopes\" in install &&\n      (!isRecord(install[\"scopes\"]) ||\n        Object.keys(install[\"scopes\"]).length > 0))\n  )\n    fail(\"bunfig.toml quarantine policy requires the canonical npm registry\");\n  if (install[\"minimumReleaseAge\"] !== REQUIRED_RELEASE_AGE_SECONDS)\n    fail(\n      `bunfig.toml must set minimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}`,\n    );\n  if (!Array.isArray(install[\"minimumReleaseAgeExcludes\"]))\n    return fail(\n      \"bunfig.toml must declare minimumReleaseAgeExcludes as an array\",\n    );\n  const names: string[] = [];\n  for (const value of install[\"minimumReleaseAgeExcludes\"]) {\n    if (typeof value !== \"string\" || !exactPackage(value))\n      return fail(\n        \"bunfig.toml minimumReleaseAgeExcludes must contain only exact npm package names\",\n      );\n    names.push(value);\n  }\n  if (new Set(names).size !== names.length)\n    fail(\"bunfig.toml minimumReleaseAgeExcludes must not contain duplicates\");\n  return names;\n};\n\ntype Token = {\n  type: \"string\" | \"atom\" | \"punctuation\" | \"comment\" | \"newline\";\n  start: number;\n  end: number;\n  text: string;\n};\n// Tokenize before locating declarations: text in comments, multiline strings and\n// unrelated tables cannot masquerade as the install policy's source array.\nconst tokensOf = (text: string): Token[] => {\n  const tokens: Token[] = [];\n  let index = 0;\n  while (index < text.length) {\n    const start = index;\n    const character = text.charAt(index++);\n    if (character === \"\\n\") {\n      tokens.push({ type: \"newline\", start, end: index, text: character });\n      continue;\n    }\n    if (/\\s/u.test(character)) continue;\n    let type: Token[\"type\"];\n    if (character === \"#\") {\n      type = \"comment\";\n      while (index < text.length && text.charAt(index) !== \"\\n\") index++;\n    } else if (character === '\"' || character === \"'\") {\n      type = \"string\";\n      const triple = text.slice(start, start + 3) === character.repeat(3);\n      if (triple) index = start + 3;\n      while (index < text.length) {\n        const current = text.charAt(index++);\n        if (character === '\"' && current === \"\\\\\") {\n          index++;\n          continue;\n        }\n        if (current !== character) continue;\n        if (!triple) break;\n        if (text.slice(index - 1, index + 2) !== character.repeat(3)) continue;\n        index += 2;\n        while (text.charAt(index) === character) index++;\n        break;\n      }\n    } else if (\"[]=.,{}\".includes(character)) type = \"punctuation\";\n    else {\n      type = \"atom\";\n      while (\n        index < text.length &&\n        !/[\\s#[\\]=.,{}\"']/u.test(text.charAt(index))\n      )\n        index++;\n    }\n    tokens.push({\n      type,\n      start,\n      end: index,\n      text:\n        type === \"comment\"\n          ? text.slice(start, index).replace(/\\r$/u, \"\")\n          : text.slice(start, index),\n    });\n  }\n  return tokens;\n};\n\nconst stringValue = (token: Token, parseToml: ParseToml): string => {\n  const parsed = parseToml(`value = ${token.text}`);\n  if (!isRecord(parsed) || typeof parsed[\"value\"] !== \"string\")\n    return fail(\"bunfig.toml has an unsupported quarantine string\");\n  return parsed[\"value\"];\n};\nconst keyParts = (tokens: readonly Token[], parseToml: ParseToml): string[] =>\n  tokens\n    .filter(({ text }) => text !== \".\")\n    .map((token) =>\n      token.type === \"string\" ? stringValue(token, parseToml) : token.text,\n    );\n\ntype Entry = {\n  name: string;\n  token: Token;\n  comment: Token | undefined;\n  comma: Token | undefined;\n};\ntype SourceArray = {\n  open: Token;\n  close: Token;\n  entries: Entry[];\n  comments: Token[];\n};\nconst readSourceArray = (bunfig: string, parseToml: ParseToml): SourceArray => {\n  const names = readParsedExcludes(bunfig, parseToml);\n  let table: string[] = [];\n  let statement: Token[] = [];\n  let depth = 0;\n  let found: SourceArray | undefined;\n  const visitStatement = () => {\n    const meaningful = statement.filter(\n      ({ type }) => type !== \"comment\" && type !== \"newline\",\n    );\n    const first = meaningful.at(0);\n    if (first?.text === \"[\") {\n      const end = meaningful.at(-1);\n      if (end?.text === \"]\")\n        table = keyParts(meaningful.slice(1, -1), parseToml);\n      return;\n    }\n    const equals = meaningful.findIndex(({ text }) => text === \"=\");\n    if (equals < 0) return;\n    const key = [...table, ...keyParts(meaningful.slice(0, equals), parseToml)];\n    if (\n      key.join(\".\") !== \"install.minimumReleaseAgeExcludes\" ||\n      key.length !== 2\n    )\n      return;\n    const open = meaningful.at(equals + 1);\n    const close = meaningful.at(-1);\n    if (\n      open === undefined ||\n      close === undefined ||\n      open.text !== \"[\" ||\n      close.text !== \"]\" ||\n      found !== undefined\n    )\n      fail(\n        \"bunfig.toml must declare a single install minimumReleaseAgeExcludes array\",\n      );\n    const values = meaningful.slice(equals + 2, -1);\n    if (values.some(({ type, text }) => type !== \"string\" && text !== \",\"))\n      fail(\"bunfig.toml quarantine array must contain package strings\");\n    const strings = values.filter(({ type }) => type === \"string\");\n    const comments = statement.filter(({ type }) => type === \"comment\");\n    const entries = strings.map((token, index) => {\n      const next = strings.at(index + 1)?.start ?? Number.POSITIVE_INFINITY;\n      const comment = comments.find(\n        (candidate) =>\n          candidate.start >= token.end &&\n          candidate.start < next &&\n          !bunfig.slice(token.end, candidate.start).includes(\"\\n\"),\n      );\n      const following = values.find(\n        (candidate) => candidate.start >= token.end,\n      );\n      return {\n        name: stringValue(token, parseToml),\n        token,\n        comment,\n        comma: following?.text === \",\" ? following : undefined,\n      };\n    });\n    if (\n      entries.length !== names.length ||\n      entries.some(({ name }, index) => name !== names.at(index))\n    )\n      fail(\n        \"bunfig.toml quarantine source does not match its parsed install array\",\n      );\n    found = { open, close, entries, comments };\n  };\n  for (const token of tokensOf(bunfig)) {\n    if (token.type === \"newline\" && depth === 0) {\n      visitStatement();\n      statement = [];\n      continue;\n    }\n    statement.push(token);\n    if (token.type !== \"punctuation\") continue;\n    if (token.text === \"[\" || token.text === \"{\") depth++;\n    if (token.text === \"]\" || token.text === \"}\") depth--;\n  }\n  visitStatement();\n  if (found === undefined)\n    return fail(\n      \"bunfig.toml must declare an explicit [install] minimumReleaseAgeExcludes array\",\n    );\n  return found;\n};\n\ntype Annotation =\n  | { type: \"none\" }\n  | { type: \"invalid\" }\n  | { type: \"expires\" | \"excluded-since\"; timestamp: string };\nconst annotationOf = ({ comment }: Entry): Annotation => {\n  if (comment === undefined) return { type: \"none\" };\n  const match = /^#\\s*quarantine-(expires|excluded-since):\\s*(\\S+)\\s*$/u.exec(\n    comment.text,\n  );\n  const marker = match?.at(1);\n  const timestamp = match?.at(2);\n  if (\n    (marker === \"expires\" || marker === \"excluded-since\") &&\n    timestamp !== undefined\n  )\n    return { type: marker, timestamp };\n  return { type: \"invalid\" };\n};\n\nexport const readRegistryFirstPartyPackages = (\n  lockfile: string | undefined,\n): Set<string> => {\n  if (lockfile === undefined) return new Set();\n  const parsed = parseJsonc(lockfile);\n  if (!isRecord(parsed) || !isRecord(parsed[\"packages\"]))\n    return fail(\"bun.lock must contain a packages mapping\");\n  const names = new Set<string>();\n  for (const value of Object.values(parsed[\"packages\"])) {\n    if (!Array.isArray(value)) continue;\n    const identity: unknown = value.at(0);\n    if (typeof identity !== \"string\") continue;\n    const separator = identity.lastIndexOf(\"@\");\n    const name = identity.slice(0, separator);\n    if (\n      exactPackage(name) &&\n      ownPackage(name) &&\n      REGISTRY_VERSION.test(identity.slice(separator + 1))\n    )\n      names.add(name);\n  }\n  return names;\n};\n\nconst ownNames = (names: FirstPartyPackages): Set<string> => {\n  const result = new Set(names);\n  for (const name of result)\n    if (!exactPackage(name) || !ownPackage(name))\n      fail(`Expected an exact first-party npm package name: ${name}`);\n  return result;\n};\nconst validNow = (now: Date): number => {\n  if (!Number.isFinite(now.getTime()))\n    return fail(\"Quarantine policy requires a valid current date\");\n  return now.getTime();\n};\nexport type CheckResult = { errors: string[]; warnings: string[] };\ntype CheckOptions = {\n  bunfig: string;\n  lockfile: string | undefined;\n  parseToml: ParseToml;\n  npmrcPresent?: boolean;\n  now?: Date;\n  firstPartyPackages?: FirstPartyPackages;\n};\nexport const checkQuarantinePolicy = ({\n  bunfig,\n  lockfile,\n  parseToml,\n  npmrcPresent = false,\n  now = new Date(),\n  firstPartyPackages,\n}: CheckOptions): CheckResult => {\n  const errors: string[] = [];\n  const warnings: string[] = [];\n  try {\n    const nowMs = validNow(now);\n    const { entries } = readSourceArray(bunfig, parseToml);\n    if (npmrcPresent)\n      errors.push(\n        \"bunfig.toml quarantine policy does not allow a repository .npmrc\",\n      );\n    for (const entry of entries) {\n      const annotation = annotationOf(entry);\n      if (ownPackage(entry.name) && annotation.type === \"none\") continue;\n      if (annotation.type === \"none\" || annotation.type === \"invalid\") {\n        errors.push(\n          `bunfig.toml has an unannotated or malformed quarantine exclude: ${entry.name}`,\n        );\n        continue;\n      }\n      if (!exactTimestamp(annotation.timestamp)) {\n        errors.push(\n          `bunfig.toml quarantine exclude \"${entry.name}\" has an invalid UTC timestamp: ${annotation.timestamp}`,\n        );\n        continue;\n      }\n      const timestampMs = Date.parse(annotation.timestamp);\n      if (ownPackage(entry.name)) {\n        if (annotation.type !== \"excluded-since\")\n          errors.push(\n            `bunfig.toml first-party quarantine exclude \"${entry.name}\" must be permanent (quarantine-excluded-since: or no timestamp)`,\n          );\n        else if (timestampMs > nowMs)\n          errors.push(\n            `bunfig.toml first-party quarantine exclude \"${entry.name}\" has a future exclusion date`,\n          );\n        continue;\n      }\n      if (annotation.type !== \"expires\") {\n        errors.push(\n          `bunfig.toml third-party quarantine exclude \"${entry.name}\" must use quarantine-expires:`,\n        );\n        continue;\n      }\n      if (nowMs >= timestampMs + 24 * HOUR_MS)\n        errors.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expired at ${annotation.timestamp} and is still present`,\n        );\n      else if (nowMs >= timestampMs)\n        warnings.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expired at ${annotation.timestamp}; its removal PR should be merged`,\n        );\n      else if (nowMs >= timestampMs - 48 * HOUR_MS)\n        warnings.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expires at ${annotation.timestamp}; prepare its removal PR`,\n        );\n    }\n    const required = readRegistryFirstPartyPackages(lockfile);\n    if (firstPartyPackages !== undefined) {\n      for (const name of ownNames(firstPartyPackages)) required.add(name);\n    }\n    const declared = new Set(entries.map(({ name }) => name));\n    const missing = [...required].filter((name) => !declared.has(name)).sort();\n    if (missing.length > 0)\n      errors.push(\n        `bunfig.toml is missing registry-backed first-party quarantine excludes: ${missing.join(\", \")}`,\n      );\n  } catch (error) {\n    errors.push(error instanceof Error ? error.message : String(error));\n  }\n  return { errors, warnings };\n};\n\ntype PruneOptions = { bunfig: string; parseToml: ParseToml; now?: Date };\nexport const pruneExpiredExcludes = ({\n  bunfig,\n  parseToml,\n  now = new Date(),\n}: PruneOptions): { bunfig: string; pruned: string[] } => {\n  const nowMs = validNow(now);\n  const { entries, close } = readSourceArray(bunfig, parseToml);\n  const removals: { start: number; end: number }[] = [];\n  const pruned: string[] = [];\n  for (const entry of entries) {\n    if (ownPackage(entry.name)) continue;\n    const annotation = annotationOf(entry);\n    if (annotation.type !== \"expires\" || !exactTimestamp(annotation.timestamp))\n      return fail(\n        `bunfig.toml third-party quarantine exclude \"${entry.name}\" must have an exact UTC quarantine-expires: annotation`,\n      );\n    if (nowMs < Date.parse(annotation.timestamp)) continue;\n    const lineStart = bunfig.lastIndexOf(\"\\n\", entry.token.start - 1) + 1;\n    const nextNewline = bunfig.indexOf(\"\\n\", entry.token.end);\n    const lineEnd = nextNewline < 0 ? bunfig.length : nextNewline;\n    const commentInside =\n      entry.comment !== undefined && entry.comment.start < close.start;\n    const end = commentInside\n      ? (entry.comment?.end ?? entry.token.end)\n      : (entry.comma?.end ?? entry.token.end);\n    if (\n      bunfig.slice(lineStart, entry.token.start).trim() === \"\" &&\n      bunfig.slice(end, lineEnd).trim() === \"\"\n    )\n      removals.push({\n        start: lineStart,\n        end: nextNewline < 0 ? lineEnd : lineEnd + 1,\n      });\n    else removals.push({ start: entry.token.start, end });\n    if (entry.comment !== undefined && !commentInside)\n      removals.push({ start: entry.comment.start, end: entry.comment.end });\n    pruned.push(entry.name);\n  }\n  let result = bunfig;\n  for (const removal of removals.toReversed())\n    result = result.slice(0, removal.start) + result.slice(removal.end);\n  // Never return edited TOML without confirming the resulting source is valid.\n  readSourceArray(result, parseToml);\n  return { bunfig: result, pruned };\n};\n\ntype SynchronizeOptions = {\n  bunfig: string;\n  firstPartyPackages: FirstPartyPackages;\n  parseToml: ParseToml;\n  now?: Date;\n};\nexport const synchronizeFirstPartyExcludes = ({\n  bunfig,\n  firstPartyPackages,\n  parseToml,\n  now = new Date(),\n}: SynchronizeOptions): string => {\n  validNow(now);\n  const required = ownNames(firstPartyPackages);\n  const { open, close, entries, comments } = readSourceArray(bunfig, parseToml);\n  const attachedComments = new Set(\n    entries.flatMap(({ comment }) => (comment === undefined ? [] : [comment])),\n  );\n  const lines = comments\n    .filter((comment) => !attachedComments.has(comment))\n    .map(({ text }) => `  ${text}`);\n  const seen = new Set<string>();\n  for (const entry of entries) {\n    if (!ownPackage(entry.name)) {\n      const annotation = annotationOf(entry);\n      if (\n        annotation.type !== \"expires\" ||\n        !exactTimestamp(annotation.timestamp)\n      )\n        return fail(\n          `bunfig.toml third-party quarantine exclude \"${entry.name}\" must have an exact UTC quarantine-expires: annotation`,\n        );\n      lines.push(\n        `  ${entry.token.text},${entry.comment === undefined ? \"\" : ` ${entry.comment.text}`}`,\n      );\n      continue;\n    }\n    if (!required.has(entry.name)) continue;\n    seen.add(entry.name);\n    const annotation = annotationOf(entry);\n    const timestamp =\n      annotation.type === \"excluded-since\" &&\n      exactTimestamp(annotation.timestamp)\n        ? annotation.timestamp\n        : now.toISOString();\n    lines.push(\n      `  ${JSON.stringify(entry.name)}, # quarantine-excluded-since: ${timestamp}`,\n    );\n  }\n  for (const name of [...required]\n    .filter((requiredPackage) => !seen.has(requiredPackage))\n    .sort())\n    lines.push(\n      `  ${JSON.stringify(name)}, # quarantine-excluded-since: ${now.toISOString()}`,\n    );\n  const newline = bunfig.includes(\"\\r\\n\") ? \"\\r\\n\" : \"\\n\";\n  const trailingComment = entries.at(-1)?.comment;\n  const end =\n    trailingComment !== undefined && trailingComment.start > close.end\n      ? trailingComment.end\n      : close.end;\n  const result =\n    bunfig.slice(0, open.start) +\n    `[${newline}${lines.join(newline)}${lines.length === 0 ? \"\" : newline}]` +\n    bunfig.slice(end);\n  readSourceArray(result, parseToml);\n  return result;\n};\n","import { parse } from \"smol-toml\";\n\nimport {\n  checkQuarantinePolicy,\n  isFirstPartyPackageName,\n  pruneExpiredExcludes,\n  readRegistryFirstPartyPackages,\n  REQUIRED_RELEASE_AGE_SECONDS,\n  synchronizeFirstPartyExcludes,\n} from \"./quarantine-policy-core\";\n\nexport {\n  EXACT_UTC_TIMESTAMP,\n  NPM_REGISTRY,\n  REQUIRED_RELEASE_AGE_SECONDS,\n  exactTimestamp,\n} from \"./quarantine-policy-core\";\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n/** Derive exact registry identities before install, including catalog references. */\nexport const declaredFirstPartyPackages = (files: Record<string, string>) => {\n  const names = new Set<string>();\n  for (const [file, text] of Object.entries(files)) {\n    if (!/(?:^|\\/)package\\.json$/.test(file)) continue;\n    const manifest: unknown = JSON.parse(text);\n    if (!record(manifest)) throw new Error(`${file} must contain an object`);\n    for (const field of [\n      \"dependencies\",\n      \"devDependencies\",\n      \"optionalDependencies\",\n      \"peerDependencies\",\n    ]) {\n      const dependencies = manifest[field];\n      if (!record(dependencies)) continue;\n      for (const [name, specifier] of Object.entries(dependencies)) {\n        if (typeof specifier !== \"string\") continue;\n        if (\n          /^(?:workspace:|file:|link:|git(?:\\+|:)|https?:|github:|\\.\\.?\\/|\\/)/.test(\n            specifier,\n          )\n        )\n          continue;\n        if (specifier.startsWith(\"npm:\")) {\n          const alias = /^npm:(@[^/]+\\/[^@]+|[^@]+)@/.exec(specifier)?.at(1);\n          if (alias !== undefined && isFirstPartyPackageName(alias))\n            names.add(alias);\n          continue;\n        }\n        if (isFirstPartyPackageName(name)) names.add(name);\n      }\n    }\n  }\n  return names;\n};\n\ntype RepositoryQuarantineOptions = {\n  files: Record<string, string>;\n  now?: Date | undefined;\n  npmrcPresent?: boolean | undefined;\n};\n\nexport const checkRepositoryQuarantine = ({\n  files,\n  now,\n  npmrcPresent,\n}: RepositoryQuarantineOptions) =>\n  checkQuarantinePolicy({\n    bunfig: files[\"bunfig.toml\"] ?? \"\",\n    lockfile: files[\"bun.lock\"],\n    firstPartyPackages: declaredFirstPartyPackages(files),\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n    ...(npmrcPresent === undefined ? {} : { npmrcPresent }),\n  });\n\nexport const synchronizeRepositoryQuarantine = ({\n  files,\n  now,\n}: RepositoryQuarantineOptions) => {\n  const firstPartyPackages = new Set([\n    ...declaredFirstPartyPackages(files),\n    ...readRegistryFirstPartyPackages(files[\"bun.lock\"]),\n  ]);\n  return synchronizeFirstPartyExcludes({\n    bunfig:\n      files[\"bunfig.toml\"] ??\n      `[install]\\nminimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}\\nminimumReleaseAgeExcludes = []\\n`,\n    firstPartyPackages,\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n  });\n};\n\nexport const pruneRepositoryQuarantine = ({\n  files,\n  now,\n}: RepositoryQuarantineOptions) =>\n  pruneExpiredExcludes({\n    bunfig: files[\"bunfig.toml\"] ?? \"\",\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n  });\n"],"mappings":";;;AAEA,MAAa,+BAA+B;AAC5C,MAAa,eAAe;AAC5B,MAAa,sBACX;AACF,MAAM,UAAU;AAChB,MAAM,gBAAgB;AACtB,MAAM,mBACJ;AAIF,MAAM,YAAY,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AACrE,MAAM,QAAoC,YAAY;CACpD,MAAM,IAAI,MAAM,OAAO;AACzB;AACA,MAAM,cAAc,SAAiB,KAAK,WAAW,QAAQ;AAC7D,MAAM,gBAAgB,SACpB,KAAK,UAAU,OAAO,cAAc,KAAK,IAAI;AAC/C,MAAa,2BAA2B,SACtC,aAAa,IAAI,KAAK,WAAW,IAAI;AAEvC,MAAa,kBAAkB,UAA2B;CACxD,MAAM,YAAY,KAAK,MAAM,KAAK;CAClC,OACE,oBAAoB,KAAK,KAAK,KAC9B,CAAC,OAAO,MAAM,SAAS,KACvB,IAAI,KAAK,SAAS,CAAC,CAAC,YAAY,MAAM;AAE1C;AAEA,MAAa,sBACX,QACA,cACa;CACb,MAAM,SAAS,UAAU,MAAM;CAC/B,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,SAAS,OAAO,UAAU,GAClD,OAAO,KAAK,6CAA6C;CAC3D,MAAM,UAAU,OAAO;CACvB,IACG,cAAc,WAAW,QAAQ,gBAAA,gCACjC,YAAY,YACV,CAAC,SAAS,QAAQ,SAAS,KAC1B,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,IAE5C,KAAK,mEAAmE;CAC1E,IAAI,QAAQ,yBAAA,OACV,KACE,4CAA4C,8BAC9C;CACF,IAAI,CAAC,MAAM,QAAQ,QAAQ,4BAA4B,GACrD,OAAO,KACL,gEACF;CACF,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAAQ,8BAA8B;EACxD,IAAI,OAAO,UAAU,YAAY,CAAC,aAAa,KAAK,GAClD,OAAO,KACL,iFACF;EACF,MAAM,KAAK,KAAK;CAClB;CACA,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAChC,KAAK,mEAAmE;CAC1E,OAAO;AACT;AAUA,MAAM,YAAY,SAA0B;CAC1C,MAAM,SAAkB,CAAC;CACzB,IAAI,QAAQ;CACZ,OAAO,QAAQ,KAAK,QAAQ;EAC1B,MAAM,QAAQ;EACd,MAAM,YAAY,KAAK,OAAO,OAAO;EACrC,IAAI,cAAc,MAAM;GACtB,OAAO,KAAK;IAAE,MAAM;IAAW;IAAO,KAAK;IAAO,MAAM;GAAU,CAAC;GACnE;EACF;EACA,IAAI,MAAM,KAAK,SAAS,GAAG;EAC3B,IAAI;EACJ,IAAI,cAAc,KAAK;GACrB,OAAO;GACP,OAAO,QAAQ,KAAK,UAAU,KAAK,OAAO,KAAK,MAAM,MAAM;EAC7D,OAAO,IAAI,cAAc,QAAO,cAAc,KAAK;GACjD,OAAO;GACP,MAAM,SAAS,KAAK,MAAM,OAAO,QAAQ,CAAC,MAAM,UAAU,OAAO,CAAC;GAClE,IAAI,QAAQ,QAAQ,QAAQ;GAC5B,OAAO,QAAQ,KAAK,QAAQ;IAC1B,MAAM,UAAU,KAAK,OAAO,OAAO;IACnC,IAAI,cAAc,QAAO,YAAY,MAAM;KACzC;KACA;IACF;IACA,IAAI,YAAY,WAAW;IAC3B,IAAI,CAAC,QAAQ;IACb,IAAI,KAAK,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,UAAU,OAAO,CAAC,GAAG;IAC9D,SAAS;IACT,OAAO,KAAK,OAAO,KAAK,MAAM,WAAW;IACzC;GACF;EACF,OAAO,IAAI,UAAU,SAAS,SAAS,GAAG,OAAO;OAC5C;GACH,OAAO;GACP,OACE,QAAQ,KAAK,UACb,CAAC,mBAAmB,KAAK,KAAK,OAAO,KAAK,CAAC,GAE3C;EACJ;EACA,OAAO,KAAK;GACV;GACA;GACA,KAAK;GACL,MACE,SAAS,YACL,KAAK,MAAM,OAAO,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE,IAC3C,KAAK,MAAM,OAAO,KAAK;EAC/B,CAAC;CACH;CACA,OAAO;AACT;AAEA,MAAM,eAAe,OAAc,cAAiC;CAClE,MAAM,SAAS,UAAU,WAAW,MAAM,MAAM;CAChD,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAAO,aAAa,UAClD,OAAO,KAAK,kDAAkD;CAChE,OAAO,OAAO;AAChB;AACA,MAAM,YAAY,QAA0B,cAC1C,OACG,QAAQ,EAAE,WAAW,SAAS,GAAG,CAAC,CAClC,KAAK,UACJ,MAAM,SAAS,WAAW,YAAY,OAAO,SAAS,IAAI,MAAM,IAClE;AAcJ,MAAM,mBAAmB,QAAgB,cAAsC;CAC7E,MAAM,QAAQ,mBAAmB,QAAQ,SAAS;CAClD,IAAI,QAAkB,CAAC;CACvB,IAAI,YAAqB,CAAC;CAC1B,IAAI,QAAQ;CACZ,IAAI;CACJ,MAAM,uBAAuB;EAC3B,MAAM,aAAa,UAAU,QAC1B,EAAE,WAAW,SAAS,aAAa,SAAS,SAC/C;EAEA,IADc,WAAW,GAAG,CACpB,CAAC,EAAE,SAAS,KAAK;GAEvB,IADY,WAAW,GAAG,EACpB,CAAC,EAAE,SAAS,KAChB,QAAQ,SAAS,WAAW,MAAM,GAAG,EAAE,GAAG,SAAS;GACrD;EACF;EACA,MAAM,SAAS,WAAW,WAAW,EAAE,WAAW,SAAS,GAAG;EAC9D,IAAI,SAAS,GAAG;EAChB,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,SAAS,WAAW,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;EAC1E,IACE,IAAI,KAAK,GAAG,MAAM,uCAClB,IAAI,WAAW,GAEf;EACF,MAAM,OAAO,WAAW,GAAG,SAAS,CAAC;EACrC,MAAM,QAAQ,WAAW,GAAG,EAAE;EAC9B,IACE,SAAS,KAAA,KACT,UAAU,KAAA,KACV,KAAK,SAAS,OACd,MAAM,SAAS,OACf,UAAU,KAAA,GAEV,KACE,2EACF;EACF,MAAM,SAAS,WAAW,MAAM,SAAS,GAAG,EAAE;EAC9C,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,SAAS,YAAY,SAAS,GAAG,GACnE,KAAK,2DAA2D;EAClE,MAAM,UAAU,OAAO,QAAQ,EAAE,WAAW,SAAS,QAAQ;EAC7D,MAAM,WAAW,UAAU,QAAQ,EAAE,WAAW,SAAS,SAAS;EAClE,MAAM,UAAU,QAAQ,KAAK,OAAO,UAAU;GAC5C,MAAM,OAAO,QAAQ,GAAG,QAAQ,CAAC,CAAC,EAAE,SAAS,OAAO;GACpD,MAAM,UAAU,SAAS,MACtB,cACC,UAAU,SAAS,MAAM,OACzB,UAAU,QAAQ,QAClB,CAAC,OAAO,MAAM,MAAM,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,IAAI,CAC3D;GACA,MAAM,YAAY,OAAO,MACtB,cAAc,UAAU,SAAS,MAAM,GAC1C;GACA,OAAO;IACL,MAAM,YAAY,OAAO,SAAS;IAClC;IACA;IACA,OAAO,WAAW,SAAS,MAAM,YAAY,KAAA;GAC/C;EACF,CAAC;EACD,IACE,QAAQ,WAAW,MAAM,UACzB,QAAQ,MAAM,EAAE,QAAQ,UAAU,SAAS,MAAM,GAAG,KAAK,CAAC,GAE1D,KACE,uEACF;EACF,QAAQ;GAAE;GAAM;GAAO;GAAS;EAAS;CAC3C;CACA,KAAK,MAAM,SAAS,SAAS,MAAM,GAAG;EACpC,IAAI,MAAM,SAAS,aAAa,UAAU,GAAG;GAC3C,eAAe;GACf,YAAY,CAAC;GACb;EACF;EACA,UAAU,KAAK,KAAK;EACpB,IAAI,MAAM,SAAS,eAAe;EAClC,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK;EAC9C,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK;CAChD;CACA,eAAe;CACf,IAAI,UAAU,KAAA,GACZ,OAAO,KACL,gFACF;CACF,OAAO;AACT;AAMA,MAAM,gBAAgB,EAAE,cAAiC;CACvD,IAAI,YAAY,KAAA,GAAW,OAAO,EAAE,MAAM,OAAO;CACjD,MAAM,QAAQ,yDAAyD,KACrE,QAAQ,IACV;CACA,MAAM,SAAS,OAAO,GAAG,CAAC;CAC1B,MAAM,YAAY,OAAO,GAAG,CAAC;CAC7B,KACG,WAAW,aAAa,WAAW,qBACpC,cAAc,KAAA,GAEd,OAAO;EAAE,MAAM;EAAQ;CAAU;CACnC,OAAO,EAAE,MAAM,UAAU;AAC3B;AAEA,MAAa,kCACX,aACgB;CAChB,IAAI,aAAa,KAAA,GAAW,uBAAO,IAAI,IAAI;CAC3C,MAAM,SAASA,cAAAA,WAAW,QAAQ;CAClC,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,SAAS,OAAO,WAAW,GACnD,OAAO,KAAK,0CAA0C;CACxD,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,SAAS,OAAO,OAAO,OAAO,WAAW,GAAG;EACrD,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAC3B,MAAM,WAAoB,MAAM,GAAG,CAAC;EACpC,IAAI,OAAO,aAAa,UAAU;EAClC,MAAM,YAAY,SAAS,YAAY,GAAG;EAC1C,MAAM,OAAO,SAAS,MAAM,GAAG,SAAS;EACxC,IACE,aAAa,IAAI,KACjB,WAAW,IAAI,KACf,iBAAiB,KAAK,SAAS,MAAM,YAAY,CAAC,CAAC,GAEnD,MAAM,IAAI,IAAI;CAClB;CACA,OAAO;AACT;AAEA,MAAM,YAAY,UAA2C;CAC3D,MAAM,SAAS,IAAI,IAAI,KAAK;CAC5B,KAAK,MAAM,QAAQ,QACjB,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,IAAI,GACzC,KAAK,mDAAmD,MAAM;CAClE,OAAO;AACT;AACA,MAAM,YAAY,QAAsB;CACtC,IAAI,CAAC,OAAO,SAAS,IAAI,QAAQ,CAAC,GAChC,OAAO,KAAK,iDAAiD;CAC/D,OAAO,IAAI,QAAQ;AACrB;AAUA,MAAa,yBAAyB,EACpC,QACA,UACA,WACA,eAAe,OACf,sBAAM,IAAI,KAAK,GACf,yBAC+B;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,IAAI;EACF,MAAM,QAAQ,SAAS,GAAG;EAC1B,MAAM,EAAE,YAAY,gBAAgB,QAAQ,SAAS;EACrD,IAAI,cACF,OAAO,KACL,kEACF;EACF,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,aAAa,aAAa,KAAK;GACrC,IAAI,WAAW,MAAM,IAAI,KAAK,WAAW,SAAS,QAAQ;GAC1D,IAAI,WAAW,SAAS,UAAU,WAAW,SAAS,WAAW;IAC/D,OAAO,KACL,mEAAmE,MAAM,MAC3E;IACA;GACF;GACA,IAAI,CAAC,eAAe,WAAW,SAAS,GAAG;IACzC,OAAO,KACL,mCAAmC,MAAM,KAAK,kCAAkC,WAAW,WAC7F;IACA;GACF;GACA,MAAM,cAAc,KAAK,MAAM,WAAW,SAAS;GACnD,IAAI,WAAW,MAAM,IAAI,GAAG;IAC1B,IAAI,WAAW,SAAS,kBACtB,OAAO,KACL,+CAA+C,MAAM,KAAK,iEAC5D;SACG,IAAI,cAAc,OACrB,OAAO,KACL,+CAA+C,MAAM,KAAK,8BAC5D;IACF;GACF;GACA,IAAI,WAAW,SAAS,WAAW;IACjC,OAAO,KACL,+CAA+C,MAAM,KAAK,+BAC5D;IACA;GACF;GACA,IAAI,SAAS,cAAc,KAAK,SAC9B,OAAO,KACL,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,sBAC9F;QACG,IAAI,SAAS,aAChB,SAAS,KACP,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,kCAC9F;QACG,IAAI,SAAS,cAAc,KAAK,SACnC,SAAS,KACP,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,yBAC9F;EACJ;EACA,MAAM,WAAW,+BAA+B,QAAQ;EACxD,IAAI,uBAAuB,KAAA,GACzB,KAAK,MAAM,QAAQ,SAAS,kBAAkB,GAAG,SAAS,IAAI,IAAI;EAEpE,MAAM,WAAW,IAAI,IAAI,QAAQ,KAAK,EAAE,WAAW,IAAI,CAAC;EACxD,MAAM,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK;EACzE,IAAI,QAAQ,SAAS,GACnB,OAAO,KACL,2EAA2E,QAAQ,KAAK,IAAI,GAC9F;CACJ,SAAS,OAAO;EACd,OAAO,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CACpE;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B;AAGA,MAAa,wBAAwB,EACnC,QACA,WACA,sBAAM,IAAI,KAAK,QACyC;CACxD,MAAM,QAAQ,SAAS,GAAG;CAC1B,MAAM,EAAE,SAAS,UAAU,gBAAgB,QAAQ,SAAS;CAC5D,MAAM,WAA6C,CAAC;CACpD,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,WAAW,MAAM,IAAI,GAAG;EAC5B,MAAM,aAAa,aAAa,KAAK;EACrC,IAAI,WAAW,SAAS,aAAa,CAAC,eAAe,WAAW,SAAS,GACvE,OAAO,KACL,+CAA+C,MAAM,KAAK,wDAC5D;EACF,IAAI,QAAQ,KAAK,MAAM,WAAW,SAAS,GAAG;EAC9C,MAAM,YAAY,OAAO,YAAY,MAAM,MAAM,MAAM,QAAQ,CAAC,IAAI;EACpE,MAAM,cAAc,OAAO,QAAQ,MAAM,MAAM,MAAM,GAAG;EACxD,MAAM,UAAU,cAAc,IAAI,OAAO,SAAS;EAClD,MAAM,gBACJ,MAAM,YAAY,KAAA,KAAa,MAAM,QAAQ,QAAQ,MAAM;EAC7D,MAAM,MAAM,gBACP,MAAM,SAAS,OAAO,MAAM,MAAM,MAClC,MAAM,OAAO,OAAO,MAAM,MAAM;EACrC,IACE,OAAO,MAAM,WAAW,MAAM,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,MACtD,OAAO,MAAM,KAAK,OAAO,CAAC,CAAC,KAAK,MAAM,IAEtC,SAAS,KAAK;GACZ,OAAO;GACP,KAAK,cAAc,IAAI,UAAU,UAAU;EAC7C,CAAC;OACE,SAAS,KAAK;GAAE,OAAO,MAAM,MAAM;GAAO;EAAI,CAAC;EACpD,IAAI,MAAM,YAAY,KAAA,KAAa,CAAC,eAClC,SAAS,KAAK;GAAE,OAAO,MAAM,QAAQ;GAAO,KAAK,MAAM,QAAQ;EAAI,CAAC;EACtE,OAAO,KAAK,MAAM,IAAI;CACxB;CACA,IAAI,SAAS;CACb,KAAK,MAAM,WAAW,SAAS,WAAW,GACxC,SAAS,OAAO,MAAM,GAAG,QAAQ,KAAK,IAAI,OAAO,MAAM,QAAQ,GAAG;CAEpE,gBAAgB,QAAQ,SAAS;CACjC,OAAO;EAAE,QAAQ;EAAQ;CAAO;AAClC;AAQA,MAAa,iCAAiC,EAC5C,QACA,oBACA,WACA,sBAAM,IAAI,KAAK,QACiB;CAChC,SAAS,GAAG;CACZ,MAAM,WAAW,SAAS,kBAAkB;CAC5C,MAAM,EAAE,MAAM,OAAO,SAAS,aAAa,gBAAgB,QAAQ,SAAS;CAC5E,MAAM,mBAAmB,IAAI,IAC3B,QAAQ,SAAS,EAAE,cAAe,YAAY,KAAA,IAAY,CAAC,IAAI,CAAC,OAAO,CAAE,CAC3E;CACA,MAAM,QAAQ,SACX,QAAQ,YAAY,CAAC,iBAAiB,IAAI,OAAO,CAAC,CAAC,CACnD,KAAK,EAAE,WAAW,KAAK,MAAM;CAChC,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,CAAC,WAAW,MAAM,IAAI,GAAG;GAC3B,MAAM,aAAa,aAAa,KAAK;GACrC,IACE,WAAW,SAAS,aACpB,CAAC,eAAe,WAAW,SAAS,GAEpC,OAAO,KACL,+CAA+C,MAAM,KAAK,wDAC5D;GACF,MAAM,KACJ,KAAK,MAAM,MAAM,KAAK,GAAG,MAAM,YAAY,KAAA,IAAY,KAAK,IAAI,MAAM,QAAQ,QAChF;GACA;EACF;EACA,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,GAAG;EAC/B,KAAK,IAAI,MAAM,IAAI;EACnB,MAAM,aAAa,aAAa,KAAK;EACrC,MAAM,YACJ,WAAW,SAAS,oBACpB,eAAe,WAAW,SAAS,IAC/B,WAAW,YACX,IAAI,YAAY;EACtB,MAAM,KACJ,KAAK,KAAK,UAAU,MAAM,IAAI,EAAE,iCAAiC,WACnE;CACF;CACA,KAAK,MAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAC7B,QAAQ,oBAAoB,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CACvD,KAAK,GACN,MAAM,KACJ,KAAK,KAAK,UAAU,IAAI,EAAE,iCAAiC,IAAI,YAAY,GAC7E;CACF,MAAM,UAAU,OAAO,SAAS,MAAM,IAAI,SAAS;CACnD,MAAM,kBAAkB,QAAQ,GAAG,EAAE,CAAC,EAAE;CACxC,MAAM,MACJ,oBAAoB,KAAA,KAAa,gBAAgB,QAAQ,MAAM,MAC3D,gBAAgB,MAChB,MAAM;CACZ,MAAM,SACJ,OAAO,MAAM,GAAG,KAAK,KAAK,IAC1B,IAAI,UAAU,MAAM,KAAK,OAAO,IAAI,MAAM,WAAW,IAAI,KAAK,QAAQ,KACtE,OAAO,MAAM,GAAG;CAClB,gBAAgB,QAAQ,SAAS;CACjC,OAAO;AACT;;;ACneA,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;;AAGrE,MAAa,8BAA8B,UAAkC;CAC3E,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,CAAC,yBAAyB,KAAK,IAAI,GAAG;EAC1C,MAAM,WAAoB,KAAK,MAAM,IAAI;EACzC,IAAI,CAAC,OAAO,QAAQ,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,wBAAwB;EACvE,KAAK,MAAM,SAAS;GAClB;GACA;GACA;GACA;EACF,GAAG;GACD,MAAM,eAAe,SAAS;GAC9B,IAAI,CAAC,OAAO,YAAY,GAAG;GAC3B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,YAAY,GAAG;IAC5D,IAAI,OAAO,cAAc,UAAU;IACnC,IACE,qEAAqE,KACnE,SACF,GAEA;IACF,IAAI,UAAU,WAAW,MAAM,GAAG;KAChC,MAAM,QAAQ,8BAA8B,KAAK,SAAS,CAAC,EAAE,GAAG,CAAC;KACjE,IAAI,UAAU,KAAA,KAAa,wBAAwB,KAAK,GACtD,MAAM,IAAI,KAAK;KACjB;IACF;IACA,IAAI,wBAAwB,IAAI,GAAG,MAAM,IAAI,IAAI;GACnD;EACF;CACF;CACA,OAAO;AACT;AAQA,MAAa,6BAA6B,EACxC,OACA,KACA,mBAEA,sBAAsB;CACpB,QAAQ,MAAM,kBAAkB;CAChC,UAAU,MAAM;CAChB,oBAAoB,2BAA2B,KAAK;CACpD,WAAWC,UAAAA;CACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;CACnC,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;AACvD,CAAC;AAEH,MAAa,mCAAmC,EAC9C,OACA,UACiC;CACjC,MAAM,qCAAqB,IAAI,IAAI,CACjC,GAAG,2BAA2B,KAAK,GACnC,GAAG,+BAA+B,MAAM,WAAW,CACrD,CAAC;CACD,OAAO,8BAA8B;EACnC,QACE,MAAM,kBACN;EACF;EACA,WAAWA,UAAAA;EACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;CACrC,CAAC;AACH;AAEA,MAAa,6BAA6B,EACxC,OACA,UAEA,qBAAqB;CACnB,QAAQ,MAAM,kBAAkB;CAChC,WAAWA,UAAAA;CACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC,CAAC"}
+{"version":3,"file":"quarantine-policy2.cjs","names":["record","readFileSync","execFileSync","parseJsonc","parse"],"sources":["../src/dated-entry-scope.ts","../src/quarantine-policy-core.ts","../src/quarantine-policy.ts"],"sourcesContent":["import { execFileSync } from \"node:child_process\";\nimport { readFileSync } from \"node:fs\";\n\n/** A tracked file at the base revision: absent (`text: undefined`) or unreadable. */\nexport type BaseFile = { text: string | undefined } | { unavailable: string };\n\n/**\n * Which overdue dated entries (quarantine excludes, Rust exceptions) fail. The\n * clock alone never fails a change that leaves an entry untouched: `enforce`\n * fails every overdue entry (default branch, schedule), `advisory` only warns\n * (local runs), and `changed` fails entries absent or different at the base.\n */\nexport type ExpiryScope =\n  | { kind: \"enforce\" }\n  | { kind: \"advisory\" }\n  | { kind: \"changed\"; readBase: (path: string) => BaseFile };\n\nexport type OverdueVerdict =\n  { fail: false } | { fail: true; unavailable?: string };\n\n/**\n * Decide one overdue entry. `unchangedAt` reports whether the base file text\n * declares the same entry identically; a base that cannot prove that fails.\n * The base is read only here, so runs without overdue entries never need it.\n */\nexport const overdueVerdict = (\n  scope: ExpiryScope,\n  path: string,\n  unchangedAt: (baseText: string) => boolean,\n): OverdueVerdict => {\n  if (scope.kind === \"enforce\") return { fail: true };\n  if (scope.kind === \"advisory\") return { fail: false };\n  const base = scope.readBase(path);\n  if (\"unavailable\" in base)\n    return { fail: true, unavailable: base.unavailable };\n  if (base.text === undefined) return { fail: true };\n  try {\n    return unchangedAt(base.text) ? { fail: false } : { fail: true };\n  } catch {\n    return { fail: true };\n  }\n};\n\ntype Environment = Readonly<Record<string, string | undefined>>;\n\nconst scopedEvents = new Set([\n  \"pull_request\",\n  \"pull_request_target\",\n  \"merge_group\",\n]);\nconst COMMIT = /^[0-9a-f]{40}(?:[0-9a-f]{24})?$/u;\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\nconst eventBase = (event: string, eventPath: string | undefined) => {\n  if (eventPath === undefined || eventPath === \"\") return undefined;\n  const payload: unknown = JSON.parse(readFileSync(eventPath, \"utf8\"));\n  if (!record(payload)) return undefined;\n  let sha: unknown;\n  if (event === \"merge_group\") {\n    const group = payload[\"merge_group\"];\n    sha = record(group) ? group[\"base_sha\"] : undefined;\n  } else {\n    const pullRequest = payload[\"pull_request\"];\n    const base = record(pullRequest) ? pullRequest[\"base\"] : undefined;\n    sha = record(base) ? base[\"sha\"] : undefined;\n  }\n  return typeof sha === \"string\" && COMMIT.test(sha) ? sha : undefined;\n};\n\n/**\n * Derive the expiry scope from the run context. Pushes, schedules, dispatches,\n * other GitHub events and non-GitHub CI enforce; pull requests and merge groups\n * compare with the event's base commit, fetching only that commit when a\n * shallow checkout lacks it; local runs are advisory.\n */\nexport const resolveExpiryScope = (\n  root: string,\n  env: Environment = process.env,\n): ExpiryScope => {\n  if (env[\"GITHUB_ACTIONS\"] !== \"true\") {\n    const ci = env[\"CI\"];\n    return ci === undefined || ci === \"\" || ci === \"false\" || ci === \"0\"\n      ? { kind: \"advisory\" }\n      : { kind: \"enforce\" };\n  }\n  const event = env[\"GITHUB_EVENT_NAME\"];\n  if (event === undefined || !scopedEvents.has(event))\n    return { kind: \"enforce\" };\n  let sha: string | undefined;\n  try {\n    sha = eventBase(event, env[\"GITHUB_EVENT_PATH\"]);\n  } catch {\n    sha = undefined;\n  }\n  if (sha === undefined) {\n    const unavailable = `the ${event} event payload (GITHUB_EVENT_PATH) has no readable base commit`;\n    return { kind: \"changed\", readBase: () => ({ unavailable }) };\n  }\n  const base = sha;\n  const git = (args: string[]) =>\n    execFileSync(\"git\", args, {\n      cwd: root,\n      encoding: \"utf8\",\n      env: { ...env, GIT_TERMINAL_PROMPT: \"0\" },\n      stdio: [\"ignore\", \"pipe\", \"ignore\"],\n      maxBuffer: 16 * 1024 * 1024,\n      timeout: 120_000,\n    });\n  const succeeds = (args: string[]) => {\n    try {\n      git(args);\n      return true;\n    } catch {\n      return false;\n    }\n  };\n  const hasCommit = () => succeeds([\"cat-file\", \"-e\", `${base}^{commit}`]);\n  let commitProblem: string | null | undefined;\n  // Shallow checkouts lack the base; fetch exactly that commit once.\n  const ensureCommit = () => {\n    if (commitProblem !== undefined) return commitProblem;\n    if (hasCommit()) return (commitProblem = null);\n    let remotes: string[];\n    try {\n      remotes = git([\"remote\"]).split(\"\\n\").filter(Boolean);\n    } catch {\n      remotes = [];\n    }\n    let remote: string | undefined;\n    if (remotes.includes(\"origin\")) remote = \"origin\";\n    else if (remotes.length === 1) remote = remotes.at(0);\n    if (remote === undefined)\n      return (commitProblem = `base commit ${base} is not in the clone and no single checkout remote can fetch it; check out with actions/checkout`);\n    succeeds([\"fetch\", \"--no-tags\", \"--depth=1\", remote, base]);\n    commitProblem = hasCommit()\n      ? null\n      : `base commit ${base} is not in the clone and \"git fetch --no-tags --depth=1 ${remote} ${base}\" failed; keep the actions/checkout credentials (persist-credentials: true) or check out with fetch-depth: 0`;\n    return commitProblem;\n  };\n  const files = new Map<string, BaseFile>();\n  const read = (path: string): BaseFile => {\n    const problem = ensureCommit();\n    if (problem !== null) return { unavailable: problem };\n    if (!succeeds([\"cat-file\", \"-e\", `${base}:./${path}`]))\n      return { text: undefined };\n    try {\n      return { text: git([\"show\", `${base}:./${path}`]) };\n    } catch {\n      return { unavailable: `cannot read ${path} at base commit ${base}` };\n    }\n  };\n  return {\n    kind: \"changed\",\n    readBase: (path) => {\n      const cached = files.get(path) ?? read(path);\n      files.set(path, cached);\n      return cached;\n    },\n  };\n};\n","import { type ExpiryScope, overdueVerdict } from \"./dated-entry-scope\";\nimport { parseJsonc } from \"./jsonc\";\n\nexport const REQUIRED_RELEASE_AGE_SECONDS = 5 * 24 * 60 * 60;\nexport const NPM_REGISTRY = \"https://registry.npmjs.org\";\nexport const EXACT_UTC_TIMESTAMP =\n  /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/u;\nconst HOUR_MS = 60 * 60 * 1000;\nconst EXACT_PACKAGE = /^(?:@[a-z0-9][a-z0-9._-]*\\/)?[a-z0-9][a-z0-9._-]*$/u;\nconst REGISTRY_VERSION =\n  /^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?(?:\\+[0-9A-Za-z.-]+)?$/u;\n\ntype ParseToml = (text: string) => unknown;\ntype FirstPartyPackages = ReadonlySet<string> | readonly string[];\nconst isRecord = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\nconst fail: (message: string) => never = (message) => {\n  throw new Error(message);\n};\nconst ownPackage = (name: string) => name.startsWith(\"@stll/\");\nconst exactPackage = (name: string) =>\n  name.length <= 214 && EXACT_PACKAGE.test(name);\nexport const isFirstPartyPackageName = (name: string): boolean =>\n  exactPackage(name) && ownPackage(name);\n\nexport const exactTimestamp = (value: string): boolean => {\n  const timestamp = Date.parse(value);\n  return (\n    EXACT_UTC_TIMESTAMP.test(value) &&\n    !Number.isNaN(timestamp) &&\n    new Date(timestamp).toISOString() === value\n  );\n};\n\nexport const readParsedExcludes = (\n  bunfig: string,\n  parseToml: ParseToml,\n): string[] => {\n  const parsed = parseToml(bunfig);\n  if (!isRecord(parsed) || !isRecord(parsed[\"install\"]))\n    return fail(\"bunfig.toml must contain an [install] table\");\n  const install = parsed[\"install\"];\n  if (\n    (\"registry\" in install && install[\"registry\"] !== NPM_REGISTRY) ||\n    (\"scopes\" in install &&\n      (!isRecord(install[\"scopes\"]) ||\n        Object.keys(install[\"scopes\"]).length > 0))\n  )\n    fail(\"bunfig.toml quarantine policy requires the canonical npm registry\");\n  if (install[\"minimumReleaseAge\"] !== REQUIRED_RELEASE_AGE_SECONDS)\n    fail(\n      `bunfig.toml must set minimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}`,\n    );\n  if (!Array.isArray(install[\"minimumReleaseAgeExcludes\"]))\n    return fail(\n      \"bunfig.toml must declare minimumReleaseAgeExcludes as an array\",\n    );\n  const names: string[] = [];\n  for (const value of install[\"minimumReleaseAgeExcludes\"]) {\n    if (typeof value !== \"string\" || !exactPackage(value))\n      return fail(\n        \"bunfig.toml minimumReleaseAgeExcludes must contain only exact npm package names\",\n      );\n    names.push(value);\n  }\n  if (new Set(names).size !== names.length)\n    fail(\"bunfig.toml minimumReleaseAgeExcludes must not contain duplicates\");\n  return names;\n};\n\ntype Token = {\n  type: \"string\" | \"atom\" | \"punctuation\" | \"comment\" | \"newline\";\n  start: number;\n  end: number;\n  text: string;\n};\n// Tokenize before locating declarations: text in comments, multiline strings and\n// unrelated tables cannot masquerade as the install policy's source array.\nconst tokensOf = (text: string): Token[] => {\n  const tokens: Token[] = [];\n  let index = 0;\n  while (index < text.length) {\n    const start = index;\n    const character = text.charAt(index++);\n    if (character === \"\\n\") {\n      tokens.push({ type: \"newline\", start, end: index, text: character });\n      continue;\n    }\n    if (/\\s/u.test(character)) continue;\n    let type: Token[\"type\"];\n    if (character === \"#\") {\n      type = \"comment\";\n      while (index < text.length && text.charAt(index) !== \"\\n\") index++;\n    } else if (character === '\"' || character === \"'\") {\n      type = \"string\";\n      const triple = text.slice(start, start + 3) === character.repeat(3);\n      if (triple) index = start + 3;\n      while (index < text.length) {\n        const current = text.charAt(index++);\n        if (character === '\"' && current === \"\\\\\") {\n          index++;\n          continue;\n        }\n        if (current !== character) continue;\n        if (!triple) break;\n        if (text.slice(index - 1, index + 2) !== character.repeat(3)) continue;\n        index += 2;\n        while (text.charAt(index) === character) index++;\n        break;\n      }\n    } else if (\"[]=.,{}\".includes(character)) type = \"punctuation\";\n    else {\n      type = \"atom\";\n      while (\n        index < text.length &&\n        !/[\\s#[\\]=.,{}\"']/u.test(text.charAt(index))\n      )\n        index++;\n    }\n    tokens.push({\n      type,\n      start,\n      end: index,\n      text:\n        type === \"comment\"\n          ? text.slice(start, index).replace(/\\r$/u, \"\")\n          : text.slice(start, index),\n    });\n  }\n  return tokens;\n};\n\nconst stringValue = (token: Token, parseToml: ParseToml): string => {\n  const parsed = parseToml(`value = ${token.text}`);\n  if (!isRecord(parsed) || typeof parsed[\"value\"] !== \"string\")\n    return fail(\"bunfig.toml has an unsupported quarantine string\");\n  return parsed[\"value\"];\n};\nconst keyParts = (tokens: readonly Token[], parseToml: ParseToml): string[] =>\n  tokens\n    .filter(({ text }) => text !== \".\")\n    .map((token) =>\n      token.type === \"string\" ? stringValue(token, parseToml) : token.text,\n    );\n\ntype Entry = {\n  name: string;\n  token: Token;\n  comment: Token | undefined;\n  comma: Token | undefined;\n};\ntype SourceArray = {\n  open: Token;\n  close: Token;\n  entries: Entry[];\n  comments: Token[];\n};\nconst readSourceArray = (bunfig: string, parseToml: ParseToml): SourceArray => {\n  const names = readParsedExcludes(bunfig, parseToml);\n  let table: string[] = [];\n  let statement: Token[] = [];\n  let depth = 0;\n  let found: SourceArray | undefined;\n  const visitStatement = () => {\n    const meaningful = statement.filter(\n      ({ type }) => type !== \"comment\" && type !== \"newline\",\n    );\n    const first = meaningful.at(0);\n    if (first?.text === \"[\") {\n      const end = meaningful.at(-1);\n      if (end?.text === \"]\")\n        table = keyParts(meaningful.slice(1, -1), parseToml);\n      return;\n    }\n    const equals = meaningful.findIndex(({ text }) => text === \"=\");\n    if (equals < 0) return;\n    const key = [...table, ...keyParts(meaningful.slice(0, equals), parseToml)];\n    if (\n      key.join(\".\") !== \"install.minimumReleaseAgeExcludes\" ||\n      key.length !== 2\n    )\n      return;\n    const open = meaningful.at(equals + 1);\n    const close = meaningful.at(-1);\n    if (\n      open === undefined ||\n      close === undefined ||\n      open.text !== \"[\" ||\n      close.text !== \"]\" ||\n      found !== undefined\n    )\n      fail(\n        \"bunfig.toml must declare a single install minimumReleaseAgeExcludes array\",\n      );\n    const values = meaningful.slice(equals + 2, -1);\n    if (values.some(({ type, text }) => type !== \"string\" && text !== \",\"))\n      fail(\"bunfig.toml quarantine array must contain package strings\");\n    const strings = values.filter(({ type }) => type === \"string\");\n    const comments = statement.filter(({ type }) => type === \"comment\");\n    const entries = strings.map((token, index) => {\n      const next = strings.at(index + 1)?.start ?? Number.POSITIVE_INFINITY;\n      const comment = comments.find(\n        (candidate) =>\n          candidate.start >= token.end &&\n          candidate.start < next &&\n          !bunfig.slice(token.end, candidate.start).includes(\"\\n\"),\n      );\n      const following = values.find(\n        (candidate) => candidate.start >= token.end,\n      );\n      return {\n        name: stringValue(token, parseToml),\n        token,\n        comment,\n        comma: following?.text === \",\" ? following : undefined,\n      };\n    });\n    if (\n      entries.length !== names.length ||\n      entries.some(({ name }, index) => name !== names.at(index))\n    )\n      fail(\n        \"bunfig.toml quarantine source does not match its parsed install array\",\n      );\n    found = { open, close, entries, comments };\n  };\n  for (const token of tokensOf(bunfig)) {\n    if (token.type === \"newline\" && depth === 0) {\n      visitStatement();\n      statement = [];\n      continue;\n    }\n    statement.push(token);\n    if (token.type !== \"punctuation\") continue;\n    if (token.text === \"[\" || token.text === \"{\") depth++;\n    if (token.text === \"]\" || token.text === \"}\") depth--;\n  }\n  visitStatement();\n  if (found === undefined)\n    return fail(\n      \"bunfig.toml must declare an explicit [install] minimumReleaseAgeExcludes array\",\n    );\n  return found;\n};\n\ntype Annotation =\n  | { type: \"none\" }\n  | { type: \"invalid\" }\n  | { type: \"expires\" | \"excluded-since\"; timestamp: string };\nconst annotationOf = ({ comment }: Entry): Annotation => {\n  if (comment === undefined) return { type: \"none\" };\n  const match = /^#\\s*quarantine-(expires|excluded-since):\\s*(\\S+)\\s*$/u.exec(\n    comment.text,\n  );\n  const marker = match?.at(1);\n  const timestamp = match?.at(2);\n  if (\n    (marker === \"expires\" || marker === \"excluded-since\") &&\n    timestamp !== undefined\n  )\n    return { type: marker, timestamp };\n  return { type: \"invalid\" };\n};\n\nexport const readRegistryFirstPartyPackages = (\n  lockfile: string | undefined,\n): Set<string> => {\n  if (lockfile === undefined) return new Set();\n  const parsed = parseJsonc(lockfile);\n  if (!isRecord(parsed) || !isRecord(parsed[\"packages\"]))\n    return fail(\"bun.lock must contain a packages mapping\");\n  const names = new Set<string>();\n  for (const value of Object.values(parsed[\"packages\"])) {\n    if (!Array.isArray(value)) continue;\n    const identity: unknown = value.at(0);\n    if (typeof identity !== \"string\") continue;\n    const separator = identity.lastIndexOf(\"@\");\n    const name = identity.slice(0, separator);\n    if (\n      exactPackage(name) &&\n      ownPackage(name) &&\n      REGISTRY_VERSION.test(identity.slice(separator + 1))\n    )\n      names.add(name);\n  }\n  return names;\n};\n\nconst ownNames = (names: FirstPartyPackages): Set<string> => {\n  const result = new Set(names);\n  for (const name of result)\n    if (!exactPackage(name) || !ownPackage(name))\n      fail(`Expected an exact first-party npm package name: ${name}`);\n  return result;\n};\nconst validNow = (now: Date): number => {\n  if (!Number.isFinite(now.getTime()))\n    return fail(\"Quarantine policy requires a valid current date\");\n  return now.getTime();\n};\nexport type CheckResult = { errors: string[]; warnings: string[] };\ntype CheckOptions = {\n  bunfig: string;\n  lockfile: string | undefined;\n  parseToml: ParseToml;\n  npmrcPresent?: boolean;\n  now?: Date;\n  firstPartyPackages?: FirstPartyPackages;\n  expiry?: ExpiryScope;\n};\n/** Whether the base bunfig declares this temporary exclude with the same expiry. */\nconst declaresTemporary = (\n  baseBunfig: string,\n  parseToml: ParseToml,\n  name: string,\n  timestamp: string,\n) =>\n  readSourceArray(baseBunfig, parseToml).entries.some((entry) => {\n    const annotation = annotationOf(entry);\n    return (\n      entry.name === name &&\n      annotation.type === \"expires\" &&\n      annotation.timestamp === timestamp\n    );\n  });\nexport const checkQuarantinePolicy = ({\n  bunfig,\n  lockfile,\n  parseToml,\n  npmrcPresent = false,\n  now = new Date(),\n  firstPartyPackages,\n  expiry = { kind: \"enforce\" },\n}: CheckOptions): CheckResult => {\n  const errors: string[] = [];\n  const warnings: string[] = [];\n  try {\n    const nowMs = validNow(now);\n    const { entries } = readSourceArray(bunfig, parseToml);\n    if (npmrcPresent)\n      errors.push(\n        \"bunfig.toml quarantine policy does not allow a repository .npmrc\",\n      );\n    for (const entry of entries) {\n      const annotation = annotationOf(entry);\n      if (ownPackage(entry.name) && annotation.type === \"none\") continue;\n      if (annotation.type === \"none\" || annotation.type === \"invalid\") {\n        errors.push(\n          `bunfig.toml has an unannotated or malformed quarantine exclude: ${entry.name}`,\n        );\n        continue;\n      }\n      if (!exactTimestamp(annotation.timestamp)) {\n        errors.push(\n          `bunfig.toml quarantine exclude \"${entry.name}\" has an invalid UTC timestamp: ${annotation.timestamp}`,\n        );\n        continue;\n      }\n      const timestampMs = Date.parse(annotation.timestamp);\n      if (ownPackage(entry.name)) {\n        if (annotation.type !== \"excluded-since\")\n          errors.push(\n            `bunfig.toml first-party quarantine exclude \"${entry.name}\" must be permanent (quarantine-excluded-since: or no timestamp)`,\n          );\n        else if (timestampMs > nowMs)\n          errors.push(\n            `bunfig.toml first-party quarantine exclude \"${entry.name}\" has a future exclusion date`,\n          );\n        continue;\n      }\n      if (annotation.type !== \"expires\") {\n        errors.push(\n          `bunfig.toml third-party quarantine exclude \"${entry.name}\" must use quarantine-expires:`,\n        );\n        continue;\n      }\n      if (nowMs >= timestampMs + 24 * HOUR_MS) {\n        const overdue = `bunfig.toml temporary quarantine exclude \"${entry.name}\" expired at ${annotation.timestamp} and is still present`;\n        const verdict = overdueVerdict(expiry, \"bunfig.toml\", (base) =>\n          declaresTemporary(base, parseToml, entry.name, annotation.timestamp),\n        );\n        if (!verdict.fail)\n          warnings.push(\n            `${overdue}; merge its removal PR (default-branch and scheduled runs fail, as do changes that add or edit it)`,\n          );\n        else if (verdict.unavailable === undefined) errors.push(overdue);\n        else\n          errors.push(\n            `${overdue}; cannot tell whether this change adds it: ${verdict.unavailable}`,\n          );\n      } else if (nowMs >= timestampMs)\n        warnings.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expired at ${annotation.timestamp}; its removal PR should be merged`,\n        );\n      else if (nowMs >= timestampMs - 48 * HOUR_MS)\n        warnings.push(\n          `bunfig.toml temporary quarantine exclude \"${entry.name}\" expires at ${annotation.timestamp}; prepare its removal PR`,\n        );\n    }\n    const required = readRegistryFirstPartyPackages(lockfile);\n    if (firstPartyPackages !== undefined) {\n      for (const name of ownNames(firstPartyPackages)) required.add(name);\n    }\n    const declared = new Set(entries.map(({ name }) => name));\n    const missing = [...required].filter((name) => !declared.has(name)).sort();\n    if (missing.length > 0)\n      errors.push(\n        `bunfig.toml is missing registry-backed first-party quarantine excludes: ${missing.join(\", \")}`,\n      );\n  } catch (error) {\n    errors.push(error instanceof Error ? error.message : String(error));\n  }\n  return { errors, warnings };\n};\n\ntype PruneOptions = { bunfig: string; parseToml: ParseToml; now?: Date };\nexport const pruneExpiredExcludes = ({\n  bunfig,\n  parseToml,\n  now = new Date(),\n}: PruneOptions): { bunfig: string; pruned: string[] } => {\n  const nowMs = validNow(now);\n  const { entries, close } = readSourceArray(bunfig, parseToml);\n  const removals: { start: number; end: number }[] = [];\n  const pruned: string[] = [];\n  for (const entry of entries) {\n    if (ownPackage(entry.name)) continue;\n    const annotation = annotationOf(entry);\n    if (annotation.type !== \"expires\" || !exactTimestamp(annotation.timestamp))\n      return fail(\n        `bunfig.toml third-party quarantine exclude \"${entry.name}\" must have an exact UTC quarantine-expires: annotation`,\n      );\n    if (nowMs < Date.parse(annotation.timestamp)) continue;\n    const lineStart = bunfig.lastIndexOf(\"\\n\", entry.token.start - 1) + 1;\n    const nextNewline = bunfig.indexOf(\"\\n\", entry.token.end);\n    const lineEnd = nextNewline < 0 ? bunfig.length : nextNewline;\n    const commentInside =\n      entry.comment !== undefined && entry.comment.start < close.start;\n    const end = commentInside\n      ? (entry.comment?.end ?? entry.token.end)\n      : (entry.comma?.end ?? entry.token.end);\n    if (\n      bunfig.slice(lineStart, entry.token.start).trim() === \"\" &&\n      bunfig.slice(end, lineEnd).trim() === \"\"\n    )\n      removals.push({\n        start: lineStart,\n        end: nextNewline < 0 ? lineEnd : lineEnd + 1,\n      });\n    else removals.push({ start: entry.token.start, end });\n    if (entry.comment !== undefined && !commentInside)\n      removals.push({ start: entry.comment.start, end: entry.comment.end });\n    pruned.push(entry.name);\n  }\n  let result = bunfig;\n  for (const removal of removals.toReversed())\n    result = result.slice(0, removal.start) + result.slice(removal.end);\n  // Never return edited TOML without confirming the resulting source is valid.\n  readSourceArray(result, parseToml);\n  return { bunfig: result, pruned };\n};\n\ntype SynchronizeOptions = {\n  bunfig: string;\n  firstPartyPackages: FirstPartyPackages;\n  parseToml: ParseToml;\n  now?: Date;\n};\nexport const synchronizeFirstPartyExcludes = ({\n  bunfig,\n  firstPartyPackages,\n  parseToml,\n  now = new Date(),\n}: SynchronizeOptions): string => {\n  validNow(now);\n  const required = ownNames(firstPartyPackages);\n  const { open, close, entries, comments } = readSourceArray(bunfig, parseToml);\n  const attachedComments = new Set(\n    entries.flatMap(({ comment }) => (comment === undefined ? [] : [comment])),\n  );\n  const lines = comments\n    .filter((comment) => !attachedComments.has(comment))\n    .map(({ text }) => `  ${text}`);\n  const seen = new Set<string>();\n  for (const entry of entries) {\n    if (!ownPackage(entry.name)) {\n      const annotation = annotationOf(entry);\n      if (\n        annotation.type !== \"expires\" ||\n        !exactTimestamp(annotation.timestamp)\n      )\n        return fail(\n          `bunfig.toml third-party quarantine exclude \"${entry.name}\" must have an exact UTC quarantine-expires: annotation`,\n        );\n      lines.push(\n        `  ${entry.token.text},${entry.comment === undefined ? \"\" : ` ${entry.comment.text}`}`,\n      );\n      continue;\n    }\n    if (!required.has(entry.name)) continue;\n    seen.add(entry.name);\n    const annotation = annotationOf(entry);\n    const timestamp =\n      annotation.type === \"excluded-since\" &&\n      exactTimestamp(annotation.timestamp)\n        ? annotation.timestamp\n        : now.toISOString();\n    lines.push(\n      `  ${JSON.stringify(entry.name)}, # quarantine-excluded-since: ${timestamp}`,\n    );\n  }\n  for (const name of [...required]\n    .filter((requiredPackage) => !seen.has(requiredPackage))\n    .sort())\n    lines.push(\n      `  ${JSON.stringify(name)}, # quarantine-excluded-since: ${now.toISOString()}`,\n    );\n  const newline = bunfig.includes(\"\\r\\n\") ? \"\\r\\n\" : \"\\n\";\n  const trailingComment = entries.at(-1)?.comment;\n  const end =\n    trailingComment !== undefined && trailingComment.start > close.end\n      ? trailingComment.end\n      : close.end;\n  const result =\n    bunfig.slice(0, open.start) +\n    `[${newline}${lines.join(newline)}${lines.length === 0 ? \"\" : newline}]` +\n    bunfig.slice(end);\n  readSourceArray(result, parseToml);\n  return result;\n};\n","import { parse } from \"smol-toml\";\n\nimport type { ExpiryScope } from \"./dated-entry-scope\";\nimport {\n  checkQuarantinePolicy,\n  isFirstPartyPackageName,\n  pruneExpiredExcludes,\n  readRegistryFirstPartyPackages,\n  REQUIRED_RELEASE_AGE_SECONDS,\n  synchronizeFirstPartyExcludes,\n} from \"./quarantine-policy-core\";\n\nexport type { ExpiryScope } from \"./dated-entry-scope\";\nexport {\n  EXACT_UTC_TIMESTAMP,\n  NPM_REGISTRY,\n  REQUIRED_RELEASE_AGE_SECONDS,\n  exactTimestamp,\n} from \"./quarantine-policy-core\";\n\nconst record = (value: unknown): value is Record<string, unknown> =>\n  typeof value === \"object\" && value !== null && !Array.isArray(value);\n\n/** Derive exact registry identities before install, including catalog references. */\nexport const declaredFirstPartyPackages = (files: Record<string, string>) => {\n  const names = new Set<string>();\n  for (const [file, text] of Object.entries(files)) {\n    if (!/(?:^|\\/)package\\.json$/.test(file)) continue;\n    const manifest: unknown = JSON.parse(text);\n    if (!record(manifest)) throw new Error(`${file} must contain an object`);\n    for (const field of [\n      \"dependencies\",\n      \"devDependencies\",\n      \"optionalDependencies\",\n      \"peerDependencies\",\n    ]) {\n      const dependencies = manifest[field];\n      if (!record(dependencies)) continue;\n      for (const [name, specifier] of Object.entries(dependencies)) {\n        if (typeof specifier !== \"string\") continue;\n        if (\n          /^(?:workspace:|file:|link:|git(?:\\+|:)|https?:|github:|\\.\\.?\\/|\\/)/.test(\n            specifier,\n          )\n        )\n          continue;\n        if (specifier.startsWith(\"npm:\")) {\n          const alias = /^npm:(@[^/]+\\/[^@]+|[^@]+)@/.exec(specifier)?.at(1);\n          if (alias !== undefined && isFirstPartyPackageName(alias))\n            names.add(alias);\n          continue;\n        }\n        if (isFirstPartyPackageName(name)) names.add(name);\n      }\n    }\n  }\n  return names;\n};\n\ntype RepositoryQuarantineOptions = {\n  files: Record<string, string>;\n  now?: Date | undefined;\n  npmrcPresent?: boolean | undefined;\n  expiry?: ExpiryScope | undefined;\n};\n\nexport const checkRepositoryQuarantine = ({\n  files,\n  now,\n  npmrcPresent,\n  expiry,\n}: RepositoryQuarantineOptions) =>\n  checkQuarantinePolicy({\n    bunfig: files[\"bunfig.toml\"] ?? \"\",\n    lockfile: files[\"bun.lock\"],\n    firstPartyPackages: declaredFirstPartyPackages(files),\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n    ...(npmrcPresent === undefined ? {} : { npmrcPresent }),\n    ...(expiry === undefined ? {} : { expiry }),\n  });\n\nexport const synchronizeRepositoryQuarantine = ({\n  files,\n  now,\n}: RepositoryQuarantineOptions) => {\n  const firstPartyPackages = new Set([\n    ...declaredFirstPartyPackages(files),\n    ...readRegistryFirstPartyPackages(files[\"bun.lock\"]),\n  ]);\n  return synchronizeFirstPartyExcludes({\n    bunfig:\n      files[\"bunfig.toml\"] ??\n      `[install]\\nminimumReleaseAge = ${REQUIRED_RELEASE_AGE_SECONDS}\\nminimumReleaseAgeExcludes = []\\n`,\n    firstPartyPackages,\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n  });\n};\n\nexport const pruneRepositoryQuarantine = ({\n  files,\n  now,\n}: RepositoryQuarantineOptions) =>\n  pruneExpiredExcludes({\n    bunfig: files[\"bunfig.toml\"] ?? \"\",\n    parseToml: parse,\n    ...(now === undefined ? {} : { now }),\n  });\n"],"mappings":";;;;;;;;;;AAyBA,MAAa,kBACX,OACA,MACA,gBACmB;CACnB,IAAI,MAAM,SAAS,WAAW,OAAO,EAAE,MAAM,KAAK;CAClD,IAAI,MAAM,SAAS,YAAY,OAAO,EAAE,MAAM,MAAM;CACpD,MAAM,OAAO,MAAM,SAAS,IAAI;CAChC,IAAI,iBAAiB,MACnB,OAAO;EAAE,MAAM;EAAM,aAAa,KAAK;CAAY;CACrD,IAAI,KAAK,SAAS,KAAA,GAAW,OAAO,EAAE,MAAM,KAAK;CACjD,IAAI;EACF,OAAO,YAAY,KAAK,IAAI,IAAI,EAAE,MAAM,MAAM,IAAI,EAAE,MAAM,KAAK;CACjE,QAAQ;EACN,OAAO,EAAE,MAAM,KAAK;CACtB;AACF;AAIA,MAAM,+BAAe,IAAI,IAAI;CAC3B;CACA;CACA;AACF,CAAC;AACD,MAAM,SAAS;AAEf,MAAMA,YAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAErE,MAAM,aAAa,OAAe,cAAkC;CAClE,IAAI,cAAc,KAAA,KAAa,cAAc,IAAI,OAAO,KAAA;CACxD,MAAM,UAAmB,KAAK,OAAA,GAAMC,QAAAA,aAAAA,CAAa,WAAW,MAAM,CAAC;CACnE,IAAI,CAACD,SAAO,OAAO,GAAG,OAAO,KAAA;CAC7B,IAAI;CACJ,IAAI,UAAU,eAAe;EAC3B,MAAM,QAAQ,QAAQ;EACtB,MAAMA,SAAO,KAAK,IAAI,MAAM,cAAc,KAAA;CAC5C,OAAO;EACL,MAAM,cAAc,QAAQ;EAC5B,MAAM,OAAOA,SAAO,WAAW,IAAI,YAAY,UAAU,KAAA;EACzD,MAAMA,SAAO,IAAI,IAAI,KAAK,SAAS,KAAA;CACrC;CACA,OAAO,OAAO,QAAQ,YAAY,OAAO,KAAK,GAAG,IAAI,MAAM,KAAA;AAC7D;;;;;;;AAQA,MAAa,sBACX,MACA,MAAmB,QAAQ,QACX;CAChB,IAAI,IAAI,sBAAsB,QAAQ;EACpC,MAAM,KAAK,IAAI;EACf,OAAO,OAAO,KAAA,KAAa,OAAO,MAAM,OAAO,WAAW,OAAO,MAC7D,EAAE,MAAM,WAAW,IACnB,EAAE,MAAM,UAAU;CACxB;CACA,MAAM,QAAQ,IAAI;CAClB,IAAI,UAAU,KAAA,KAAa,CAAC,aAAa,IAAI,KAAK,GAChD,OAAO,EAAE,MAAM,UAAU;CAC3B,IAAI;CACJ,IAAI;EACF,MAAM,UAAU,OAAO,IAAI,oBAAoB;CACjD,QAAQ;EACN,MAAM,KAAA;CACR;CACA,IAAI,QAAQ,KAAA,GAAW;EACrB,MAAM,cAAc,OAAO,MAAM;EACjC,OAAO;GAAE,MAAM;GAAW,iBAAiB,EAAE,YAAY;EAAG;CAC9D;CACA,MAAM,OAAO;CACb,MAAM,OAAO,UAAA,GACXE,mBAAAA,aAAAA,CAAa,OAAO,MAAM;EACxB,KAAK;EACL,UAAU;EACV,KAAK;GAAE,GAAG;GAAK,qBAAqB;EAAI;EACxC,OAAO;GAAC;GAAU;GAAQ;EAAQ;EAClC,WAAW;EACX,SAAS;CACX,CAAC;CACH,MAAM,YAAY,SAAmB;EACnC,IAAI;GACF,IAAI,IAAI;GACR,OAAO;EACT,QAAQ;GACN,OAAO;EACT;CACF;CACA,MAAM,kBAAkB,SAAS;EAAC;EAAY;EAAM,GAAG,KAAK;CAAU,CAAC;CACvE,IAAI;CAEJ,MAAM,qBAAqB;EACzB,IAAI,kBAAkB,KAAA,GAAW,OAAO;EACxC,IAAI,UAAU,GAAG,OAAQ,gBAAgB;EACzC,IAAI;EACJ,IAAI;GACF,UAAU,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,OAAO;EACtD,QAAQ;GACN,UAAU,CAAC;EACb;EACA,IAAI;EACJ,IAAI,QAAQ,SAAS,QAAQ,GAAG,SAAS;OACpC,IAAI,QAAQ,WAAW,GAAG,SAAS,QAAQ,GAAG,CAAC;EACpD,IAAI,WAAW,KAAA,GACb,OAAQ,gBAAgB,eAAe,KAAK;EAC9C,SAAS;GAAC;GAAS;GAAa;GAAa;GAAQ;EAAI,CAAC;EAC1D,gBAAgB,UAAU,IACtB,OACA,eAAe,KAAK,0DAA0D,OAAO,GAAG,KAAK;EACjG,OAAO;CACT;CACA,MAAM,wBAAQ,IAAI,IAAsB;CACxC,MAAM,QAAQ,SAA2B;EACvC,MAAM,UAAU,aAAa;EAC7B,IAAI,YAAY,MAAM,OAAO,EAAE,aAAa,QAAQ;EACpD,IAAI,CAAC,SAAS;GAAC;GAAY;GAAM,GAAG,KAAK,KAAK;EAAM,CAAC,GACnD,OAAO,EAAE,MAAM,KAAA,EAAU;EAC3B,IAAI;GACF,OAAO,EAAE,MAAM,IAAI,CAAC,QAAQ,GAAG,KAAK,KAAK,MAAM,CAAC,EAAE;EACpD,QAAQ;GACN,OAAO,EAAE,aAAa,eAAe,KAAK,kBAAkB,OAAO;EACrE;CACF;CACA,OAAO;EACL,MAAM;EACN,WAAW,SAAS;GAClB,MAAM,SAAS,MAAM,IAAI,IAAI,KAAK,KAAK,IAAI;GAC3C,MAAM,IAAI,MAAM,MAAM;GACtB,OAAO;EACT;CACF;AACF;;;AC9JA,MAAa,+BAA+B;AAC5C,MAAa,eAAe;AAC5B,MAAa,sBACX;AACF,MAAM,UAAU;AAChB,MAAM,gBAAgB;AACtB,MAAM,mBACJ;AAIF,MAAM,YAAY,UAChB,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AACrE,MAAM,QAAoC,YAAY;CACpD,MAAM,IAAI,MAAM,OAAO;AACzB;AACA,MAAM,cAAc,SAAiB,KAAK,WAAW,QAAQ;AAC7D,MAAM,gBAAgB,SACpB,KAAK,UAAU,OAAO,cAAc,KAAK,IAAI;AAC/C,MAAa,2BAA2B,SACtC,aAAa,IAAI,KAAK,WAAW,IAAI;AAEvC,MAAa,kBAAkB,UAA2B;CACxD,MAAM,YAAY,KAAK,MAAM,KAAK;CAClC,OACE,oBAAoB,KAAK,KAAK,KAC9B,CAAC,OAAO,MAAM,SAAS,KACvB,IAAI,KAAK,SAAS,CAAC,CAAC,YAAY,MAAM;AAE1C;AAEA,MAAa,sBACX,QACA,cACa;CACb,MAAM,SAAS,UAAU,MAAM;CAC/B,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,SAAS,OAAO,UAAU,GAClD,OAAO,KAAK,6CAA6C;CAC3D,MAAM,UAAU,OAAO;CACvB,IACG,cAAc,WAAW,QAAQ,gBAAA,gCACjC,YAAY,YACV,CAAC,SAAS,QAAQ,SAAS,KAC1B,OAAO,KAAK,QAAQ,SAAS,CAAC,CAAC,SAAS,IAE5C,KAAK,mEAAmE;CAC1E,IAAI,QAAQ,yBAAA,OACV,KACE,4CAA4C,8BAC9C;CACF,IAAI,CAAC,MAAM,QAAQ,QAAQ,4BAA4B,GACrD,OAAO,KACL,gEACF;CACF,MAAM,QAAkB,CAAC;CACzB,KAAK,MAAM,SAAS,QAAQ,8BAA8B;EACxD,IAAI,OAAO,UAAU,YAAY,CAAC,aAAa,KAAK,GAClD,OAAO,KACL,iFACF;EACF,MAAM,KAAK,KAAK;CAClB;CACA,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,SAAS,MAAM,QAChC,KAAK,mEAAmE;CAC1E,OAAO;AACT;AAUA,MAAM,YAAY,SAA0B;CAC1C,MAAM,SAAkB,CAAC;CACzB,IAAI,QAAQ;CACZ,OAAO,QAAQ,KAAK,QAAQ;EAC1B,MAAM,QAAQ;EACd,MAAM,YAAY,KAAK,OAAO,OAAO;EACrC,IAAI,cAAc,MAAM;GACtB,OAAO,KAAK;IAAE,MAAM;IAAW;IAAO,KAAK;IAAO,MAAM;GAAU,CAAC;GACnE;EACF;EACA,IAAI,MAAM,KAAK,SAAS,GAAG;EAC3B,IAAI;EACJ,IAAI,cAAc,KAAK;GACrB,OAAO;GACP,OAAO,QAAQ,KAAK,UAAU,KAAK,OAAO,KAAK,MAAM,MAAM;EAC7D,OAAO,IAAI,cAAc,QAAO,cAAc,KAAK;GACjD,OAAO;GACP,MAAM,SAAS,KAAK,MAAM,OAAO,QAAQ,CAAC,MAAM,UAAU,OAAO,CAAC;GAClE,IAAI,QAAQ,QAAQ,QAAQ;GAC5B,OAAO,QAAQ,KAAK,QAAQ;IAC1B,MAAM,UAAU,KAAK,OAAO,OAAO;IACnC,IAAI,cAAc,QAAO,YAAY,MAAM;KACzC;KACA;IACF;IACA,IAAI,YAAY,WAAW;IAC3B,IAAI,CAAC,QAAQ;IACb,IAAI,KAAK,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,UAAU,OAAO,CAAC,GAAG;IAC9D,SAAS;IACT,OAAO,KAAK,OAAO,KAAK,MAAM,WAAW;IACzC;GACF;EACF,OAAO,IAAI,UAAU,SAAS,SAAS,GAAG,OAAO;OAC5C;GACH,OAAO;GACP,OACE,QAAQ,KAAK,UACb,CAAC,mBAAmB,KAAK,KAAK,OAAO,KAAK,CAAC,GAE3C;EACJ;EACA,OAAO,KAAK;GACV;GACA;GACA,KAAK;GACL,MACE,SAAS,YACL,KAAK,MAAM,OAAO,KAAK,CAAC,CAAC,QAAQ,QAAQ,EAAE,IAC3C,KAAK,MAAM,OAAO,KAAK;EAC/B,CAAC;CACH;CACA,OAAO;AACT;AAEA,MAAM,eAAe,OAAc,cAAiC;CAClE,MAAM,SAAS,UAAU,WAAW,MAAM,MAAM;CAChD,IAAI,CAAC,SAAS,MAAM,KAAK,OAAO,OAAO,aAAa,UAClD,OAAO,KAAK,kDAAkD;CAChE,OAAO,OAAO;AAChB;AACA,MAAM,YAAY,QAA0B,cAC1C,OACG,QAAQ,EAAE,WAAW,SAAS,GAAG,CAAC,CAClC,KAAK,UACJ,MAAM,SAAS,WAAW,YAAY,OAAO,SAAS,IAAI,MAAM,IAClE;AAcJ,MAAM,mBAAmB,QAAgB,cAAsC;CAC7E,MAAM,QAAQ,mBAAmB,QAAQ,SAAS;CAClD,IAAI,QAAkB,CAAC;CACvB,IAAI,YAAqB,CAAC;CAC1B,IAAI,QAAQ;CACZ,IAAI;CACJ,MAAM,uBAAuB;EAC3B,MAAM,aAAa,UAAU,QAC1B,EAAE,WAAW,SAAS,aAAa,SAAS,SAC/C;EAEA,IADc,WAAW,GAAG,CACpB,CAAC,EAAE,SAAS,KAAK;GAEvB,IADY,WAAW,GAAG,EACpB,CAAC,EAAE,SAAS,KAChB,QAAQ,SAAS,WAAW,MAAM,GAAG,EAAE,GAAG,SAAS;GACrD;EACF;EACA,MAAM,SAAS,WAAW,WAAW,EAAE,WAAW,SAAS,GAAG;EAC9D,IAAI,SAAS,GAAG;EAChB,MAAM,MAAM,CAAC,GAAG,OAAO,GAAG,SAAS,WAAW,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;EAC1E,IACE,IAAI,KAAK,GAAG,MAAM,uCAClB,IAAI,WAAW,GAEf;EACF,MAAM,OAAO,WAAW,GAAG,SAAS,CAAC;EACrC,MAAM,QAAQ,WAAW,GAAG,EAAE;EAC9B,IACE,SAAS,KAAA,KACT,UAAU,KAAA,KACV,KAAK,SAAS,OACd,MAAM,SAAS,OACf,UAAU,KAAA,GAEV,KACE,2EACF;EACF,MAAM,SAAS,WAAW,MAAM,SAAS,GAAG,EAAE;EAC9C,IAAI,OAAO,MAAM,EAAE,MAAM,WAAW,SAAS,YAAY,SAAS,GAAG,GACnE,KAAK,2DAA2D;EAClE,MAAM,UAAU,OAAO,QAAQ,EAAE,WAAW,SAAS,QAAQ;EAC7D,MAAM,WAAW,UAAU,QAAQ,EAAE,WAAW,SAAS,SAAS;EAClE,MAAM,UAAU,QAAQ,KAAK,OAAO,UAAU;GAC5C,MAAM,OAAO,QAAQ,GAAG,QAAQ,CAAC,CAAC,EAAE,SAAS,OAAO;GACpD,MAAM,UAAU,SAAS,MACtB,cACC,UAAU,SAAS,MAAM,OACzB,UAAU,QAAQ,QAClB,CAAC,OAAO,MAAM,MAAM,KAAK,UAAU,KAAK,CAAC,CAAC,SAAS,IAAI,CAC3D;GACA,MAAM,YAAY,OAAO,MACtB,cAAc,UAAU,SAAS,MAAM,GAC1C;GACA,OAAO;IACL,MAAM,YAAY,OAAO,SAAS;IAClC;IACA;IACA,OAAO,WAAW,SAAS,MAAM,YAAY,KAAA;GAC/C;EACF,CAAC;EACD,IACE,QAAQ,WAAW,MAAM,UACzB,QAAQ,MAAM,EAAE,QAAQ,UAAU,SAAS,MAAM,GAAG,KAAK,CAAC,GAE1D,KACE,uEACF;EACF,QAAQ;GAAE;GAAM;GAAO;GAAS;EAAS;CAC3C;CACA,KAAK,MAAM,SAAS,SAAS,MAAM,GAAG;EACpC,IAAI,MAAM,SAAS,aAAa,UAAU,GAAG;GAC3C,eAAe;GACf,YAAY,CAAC;GACb;EACF;EACA,UAAU,KAAK,KAAK;EACpB,IAAI,MAAM,SAAS,eAAe;EAClC,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK;EAC9C,IAAI,MAAM,SAAS,OAAO,MAAM,SAAS,KAAK;CAChD;CACA,eAAe;CACf,IAAI,UAAU,KAAA,GACZ,OAAO,KACL,gFACF;CACF,OAAO;AACT;AAMA,MAAM,gBAAgB,EAAE,cAAiC;CACvD,IAAI,YAAY,KAAA,GAAW,OAAO,EAAE,MAAM,OAAO;CACjD,MAAM,QAAQ,yDAAyD,KACrE,QAAQ,IACV;CACA,MAAM,SAAS,OAAO,GAAG,CAAC;CAC1B,MAAM,YAAY,OAAO,GAAG,CAAC;CAC7B,KACG,WAAW,aAAa,WAAW,qBACpC,cAAc,KAAA,GAEd,OAAO;EAAE,MAAM;EAAQ;CAAU;CACnC,OAAO,EAAE,MAAM,UAAU;AAC3B;AAEA,MAAa,kCACX,aACgB;CAChB,IAAI,aAAa,KAAA,GAAW,uBAAO,IAAI,IAAI;CAC3C,MAAM,SAASC,cAAAA,WAAW,QAAQ;CAClC,IAAI,CAAC,SAAS,MAAM,KAAK,CAAC,SAAS,OAAO,WAAW,GACnD,OAAO,KAAK,0CAA0C;CACxD,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,SAAS,OAAO,OAAO,OAAO,WAAW,GAAG;EACrD,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;EAC3B,MAAM,WAAoB,MAAM,GAAG,CAAC;EACpC,IAAI,OAAO,aAAa,UAAU;EAClC,MAAM,YAAY,SAAS,YAAY,GAAG;EAC1C,MAAM,OAAO,SAAS,MAAM,GAAG,SAAS;EACxC,IACE,aAAa,IAAI,KACjB,WAAW,IAAI,KACf,iBAAiB,KAAK,SAAS,MAAM,YAAY,CAAC,CAAC,GAEnD,MAAM,IAAI,IAAI;CAClB;CACA,OAAO;AACT;AAEA,MAAM,YAAY,UAA2C;CAC3D,MAAM,SAAS,IAAI,IAAI,KAAK;CAC5B,KAAK,MAAM,QAAQ,QACjB,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,WAAW,IAAI,GACzC,KAAK,mDAAmD,MAAM;CAClE,OAAO;AACT;AACA,MAAM,YAAY,QAAsB;CACtC,IAAI,CAAC,OAAO,SAAS,IAAI,QAAQ,CAAC,GAChC,OAAO,KAAK,iDAAiD;CAC/D,OAAO,IAAI,QAAQ;AACrB;;AAYA,MAAM,qBACJ,YACA,WACA,MACA,cAEA,gBAAgB,YAAY,SAAS,CAAC,CAAC,QAAQ,MAAM,UAAU;CAC7D,MAAM,aAAa,aAAa,KAAK;CACrC,OACE,MAAM,SAAS,QACf,WAAW,SAAS,aACpB,WAAW,cAAc;AAE7B,CAAC;AACH,MAAa,yBAAyB,EACpC,QACA,UACA,WACA,eAAe,OACf,sBAAM,IAAI,KAAK,GACf,oBACA,SAAS,EAAE,MAAM,UAAU,QACI;CAC/B,MAAM,SAAmB,CAAC;CAC1B,MAAM,WAAqB,CAAC;CAC5B,IAAI;EACF,MAAM,QAAQ,SAAS,GAAG;EAC1B,MAAM,EAAE,YAAY,gBAAgB,QAAQ,SAAS;EACrD,IAAI,cACF,OAAO,KACL,kEACF;EACF,KAAK,MAAM,SAAS,SAAS;GAC3B,MAAM,aAAa,aAAa,KAAK;GACrC,IAAI,WAAW,MAAM,IAAI,KAAK,WAAW,SAAS,QAAQ;GAC1D,IAAI,WAAW,SAAS,UAAU,WAAW,SAAS,WAAW;IAC/D,OAAO,KACL,mEAAmE,MAAM,MAC3E;IACA;GACF;GACA,IAAI,CAAC,eAAe,WAAW,SAAS,GAAG;IACzC,OAAO,KACL,mCAAmC,MAAM,KAAK,kCAAkC,WAAW,WAC7F;IACA;GACF;GACA,MAAM,cAAc,KAAK,MAAM,WAAW,SAAS;GACnD,IAAI,WAAW,MAAM,IAAI,GAAG;IAC1B,IAAI,WAAW,SAAS,kBACtB,OAAO,KACL,+CAA+C,MAAM,KAAK,iEAC5D;SACG,IAAI,cAAc,OACrB,OAAO,KACL,+CAA+C,MAAM,KAAK,8BAC5D;IACF;GACF;GACA,IAAI,WAAW,SAAS,WAAW;IACjC,OAAO,KACL,+CAA+C,MAAM,KAAK,+BAC5D;IACA;GACF;GACA,IAAI,SAAS,cAAc,KAAK,SAAS;IACvC,MAAM,UAAU,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU;IAC5G,MAAM,UAAU,eAAe,QAAQ,gBAAgB,SACrD,kBAAkB,MAAM,WAAW,MAAM,MAAM,WAAW,SAAS,CACrE;IACA,IAAI,CAAC,QAAQ,MACX,SAAS,KACP,GAAG,QAAQ,mGACb;SACG,IAAI,QAAQ,gBAAgB,KAAA,GAAW,OAAO,KAAK,OAAO;SAE7D,OAAO,KACL,GAAG,QAAQ,6CAA6C,QAAQ,aAClE;GACJ,OAAO,IAAI,SAAS,aAClB,SAAS,KACP,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,kCAC9F;QACG,IAAI,SAAS,cAAc,KAAK,SACnC,SAAS,KACP,6CAA6C,MAAM,KAAK,eAAe,WAAW,UAAU,yBAC9F;EACJ;EACA,MAAM,WAAW,+BAA+B,QAAQ;EACxD,IAAI,uBAAuB,KAAA,GACzB,KAAK,MAAM,QAAQ,SAAS,kBAAkB,GAAG,SAAS,IAAI,IAAI;EAEpE,MAAM,WAAW,IAAI,IAAI,QAAQ,KAAK,EAAE,WAAW,IAAI,CAAC;EACxD,MAAM,UAAU,CAAC,GAAG,QAAQ,CAAC,CAAC,QAAQ,SAAS,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK;EACzE,IAAI,QAAQ,SAAS,GACnB,OAAO,KACL,2EAA2E,QAAQ,KAAK,IAAI,GAC9F;CACJ,SAAS,OAAO;EACd,OAAO,KAAK,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;CACpE;CACA,OAAO;EAAE;EAAQ;CAAS;AAC5B;AAGA,MAAa,wBAAwB,EACnC,QACA,WACA,sBAAM,IAAI,KAAK,QACyC;CACxD,MAAM,QAAQ,SAAS,GAAG;CAC1B,MAAM,EAAE,SAAS,UAAU,gBAAgB,QAAQ,SAAS;CAC5D,MAAM,WAA6C,CAAC;CACpD,MAAM,SAAmB,CAAC;CAC1B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,WAAW,MAAM,IAAI,GAAG;EAC5B,MAAM,aAAa,aAAa,KAAK;EACrC,IAAI,WAAW,SAAS,aAAa,CAAC,eAAe,WAAW,SAAS,GACvE,OAAO,KACL,+CAA+C,MAAM,KAAK,wDAC5D;EACF,IAAI,QAAQ,KAAK,MAAM,WAAW,SAAS,GAAG;EAC9C,MAAM,YAAY,OAAO,YAAY,MAAM,MAAM,MAAM,QAAQ,CAAC,IAAI;EACpE,MAAM,cAAc,OAAO,QAAQ,MAAM,MAAM,MAAM,GAAG;EACxD,MAAM,UAAU,cAAc,IAAI,OAAO,SAAS;EAClD,MAAM,gBACJ,MAAM,YAAY,KAAA,KAAa,MAAM,QAAQ,QAAQ,MAAM;EAC7D,MAAM,MAAM,gBACP,MAAM,SAAS,OAAO,MAAM,MAAM,MAClC,MAAM,OAAO,OAAO,MAAM,MAAM;EACrC,IACE,OAAO,MAAM,WAAW,MAAM,MAAM,KAAK,CAAC,CAAC,KAAK,MAAM,MACtD,OAAO,MAAM,KAAK,OAAO,CAAC,CAAC,KAAK,MAAM,IAEtC,SAAS,KAAK;GACZ,OAAO;GACP,KAAK,cAAc,IAAI,UAAU,UAAU;EAC7C,CAAC;OACE,SAAS,KAAK;GAAE,OAAO,MAAM,MAAM;GAAO;EAAI,CAAC;EACpD,IAAI,MAAM,YAAY,KAAA,KAAa,CAAC,eAClC,SAAS,KAAK;GAAE,OAAO,MAAM,QAAQ;GAAO,KAAK,MAAM,QAAQ;EAAI,CAAC;EACtE,OAAO,KAAK,MAAM,IAAI;CACxB;CACA,IAAI,SAAS;CACb,KAAK,MAAM,WAAW,SAAS,WAAW,GACxC,SAAS,OAAO,MAAM,GAAG,QAAQ,KAAK,IAAI,OAAO,MAAM,QAAQ,GAAG;CAEpE,gBAAgB,QAAQ,SAAS;CACjC,OAAO;EAAE,QAAQ;EAAQ;CAAO;AAClC;AAQA,MAAa,iCAAiC,EAC5C,QACA,oBACA,WACA,sBAAM,IAAI,KAAK,QACiB;CAChC,SAAS,GAAG;CACZ,MAAM,WAAW,SAAS,kBAAkB;CAC5C,MAAM,EAAE,MAAM,OAAO,SAAS,aAAa,gBAAgB,QAAQ,SAAS;CAC5E,MAAM,mBAAmB,IAAI,IAC3B,QAAQ,SAAS,EAAE,cAAe,YAAY,KAAA,IAAY,CAAC,IAAI,CAAC,OAAO,CAAE,CAC3E;CACA,MAAM,QAAQ,SACX,QAAQ,YAAY,CAAC,iBAAiB,IAAI,OAAO,CAAC,CAAC,CACnD,KAAK,EAAE,WAAW,KAAK,MAAM;CAChC,MAAM,uBAAO,IAAI,IAAY;CAC7B,KAAK,MAAM,SAAS,SAAS;EAC3B,IAAI,CAAC,WAAW,MAAM,IAAI,GAAG;GAC3B,MAAM,aAAa,aAAa,KAAK;GACrC,IACE,WAAW,SAAS,aACpB,CAAC,eAAe,WAAW,SAAS,GAEpC,OAAO,KACL,+CAA+C,MAAM,KAAK,wDAC5D;GACF,MAAM,KACJ,KAAK,MAAM,MAAM,KAAK,GAAG,MAAM,YAAY,KAAA,IAAY,KAAK,IAAI,MAAM,QAAQ,QAChF;GACA;EACF;EACA,IAAI,CAAC,SAAS,IAAI,MAAM,IAAI,GAAG;EAC/B,KAAK,IAAI,MAAM,IAAI;EACnB,MAAM,aAAa,aAAa,KAAK;EACrC,MAAM,YACJ,WAAW,SAAS,oBACpB,eAAe,WAAW,SAAS,IAC/B,WAAW,YACX,IAAI,YAAY;EACtB,MAAM,KACJ,KAAK,KAAK,UAAU,MAAM,IAAI,EAAE,iCAAiC,WACnE;CACF;CACA,KAAK,MAAM,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAC7B,QAAQ,oBAAoB,CAAC,KAAK,IAAI,eAAe,CAAC,CAAC,CACvD,KAAK,GACN,MAAM,KACJ,KAAK,KAAK,UAAU,IAAI,EAAE,iCAAiC,IAAI,YAAY,GAC7E;CACF,MAAM,UAAU,OAAO,SAAS,MAAM,IAAI,SAAS;CACnD,MAAM,kBAAkB,QAAQ,GAAG,EAAE,CAAC,EAAE;CACxC,MAAM,MACJ,oBAAoB,KAAA,KAAa,gBAAgB,QAAQ,MAAM,MAC3D,gBAAgB,MAChB,MAAM;CACZ,MAAM,SACJ,OAAO,MAAM,GAAG,KAAK,KAAK,IAC1B,IAAI,UAAU,MAAM,KAAK,OAAO,IAAI,MAAM,WAAW,IAAI,KAAK,QAAQ,KACtE,OAAO,MAAM,GAAG;CAClB,gBAAgB,QAAQ,SAAS;CACjC,OAAO;AACT;;;AC7fA,MAAM,UAAU,UACd,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;;AAGrE,MAAa,8BAA8B,UAAkC;CAC3E,MAAM,wBAAQ,IAAI,IAAY;CAC9B,KAAK,MAAM,CAAC,MAAM,SAAS,OAAO,QAAQ,KAAK,GAAG;EAChD,IAAI,CAAC,yBAAyB,KAAK,IAAI,GAAG;EAC1C,MAAM,WAAoB,KAAK,MAAM,IAAI;EACzC,IAAI,CAAC,OAAO,QAAQ,GAAG,MAAM,IAAI,MAAM,GAAG,KAAK,wBAAwB;EACvE,KAAK,MAAM,SAAS;GAClB;GACA;GACA;GACA;EACF,GAAG;GACD,MAAM,eAAe,SAAS;GAC9B,IAAI,CAAC,OAAO,YAAY,GAAG;GAC3B,KAAK,MAAM,CAAC,MAAM,cAAc,OAAO,QAAQ,YAAY,GAAG;IAC5D,IAAI,OAAO,cAAc,UAAU;IACnC,IACE,qEAAqE,KACnE,SACF,GAEA;IACF,IAAI,UAAU,WAAW,MAAM,GAAG;KAChC,MAAM,QAAQ,8BAA8B,KAAK,SAAS,CAAC,EAAE,GAAG,CAAC;KACjE,IAAI,UAAU,KAAA,KAAa,wBAAwB,KAAK,GACtD,MAAM,IAAI,KAAK;KACjB;IACF;IACA,IAAI,wBAAwB,IAAI,GAAG,MAAM,IAAI,IAAI;GACnD;EACF;CACF;CACA,OAAO;AACT;AASA,MAAa,6BAA6B,EACxC,OACA,KACA,cACA,aAEA,sBAAsB;CACpB,QAAQ,MAAM,kBAAkB;CAChC,UAAU,MAAM;CAChB,oBAAoB,2BAA2B,KAAK;CACpD,WAAWC,UAAAA;CACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;CACnC,GAAI,iBAAiB,KAAA,IAAY,CAAC,IAAI,EAAE,aAAa;CACrD,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;AAC3C,CAAC;AAEH,MAAa,mCAAmC,EAC9C,OACA,UACiC;CACjC,MAAM,qCAAqB,IAAI,IAAI,CACjC,GAAG,2BAA2B,KAAK,GACnC,GAAG,+BAA+B,MAAM,WAAW,CACrD,CAAC;CACD,OAAO,8BAA8B;EACnC,QACE,MAAM,kBACN;EACF;EACA,WAAWA,UAAAA;EACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;CACrC,CAAC;AACH;AAEA,MAAa,6BAA6B,EACxC,OACA,UAEA,qBAAqB;CACnB,QAAQ,MAAM,kBAAkB;CAChC,WAAWA,UAAAA;CACX,GAAI,QAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,IAAI;AACrC,CAAC"}