@try-works/dsh-model-as-tool 0.3.6 → 0.4.0

package/lib/extensions-service.js

@@ -50,8 +50,8 @@
  */
 import { accessSync, constants, existsSync, readFileSync, readdirSync, statSync } from 'node:fs';
 import { dirname, join, resolve } from 'node:path';
-import { digestInstalledContent, discoverExtension, ExtensionStore, ManagementError, stagedInstallFromDirectory, } from '@try-works/tool-mode-extension-sdk';
-import { createFirstPartyDependencyGraph, resolveFirstPartyDependency } from "./extension-dependencies.js";
+import { createTarGzipArchiveSource, digestInstalledContent, discoverExtension, ExtensionStore, ManagementError, stagedInstall, stagedInstallFromDirectory, } from '@try-works/tool-mode-extension-sdk';
+import { createFirstPartyDependencyGraph, createRegistryDependencyGraph, createRegistrySession, DEFAULT_REGISTRY_URL, MAX_DEPENDENCY_ARCHIVE_BYTES, RegistryError, resolveFirstPartyDependency, } from "./extension-dependencies.js";
 import { createHttpSource } from "./http-acquisition.js";
 /**
  * The readiness values that permit activation (the SDK's callable set).
@@ -645,23 +645,42 @@ export class ExtensionsService {
         else {
             requirements.push(requirement('store', true, `the extension store at ${input.storeDir} is configured and readable`));
         }
-        // SOURCE: the package bytes an install would copy, or the installed copy.
+        // SOURCE: where an install would get the bytes. The registry route is preferred
+        // by `auto`; the directory route (developer mode) is named when it applies.
         if (input.installed) {
             requirements.push(requirement('source', true, `the installed copy is the source of record (version ${input.record?.version ?? 'unknown'})`));
         }
-        else if (input.sourcePackage === undefined) {
-            requirements.push(requirement('source', false, input.sourceDir === ''
-                ? 'not installed, and no first-party source directory is configured (config.extensionSourceDir)'
-                : `no first-party package with this identity exists under ${input.sourceDir}`, input.sourceDir === '' ? 'config' : 'none'));
-        }
-        else if (input.sourcePackage.problem !== null) {
-            requirements.push(requirement('source', false, input.sourcePackage.problem, 'none'));
-        }
-        else if (this.#options.allowSourceDirectories !== true) {
-            requirements.push(requirement('source', false, 'installing from a source directory is disabled by configuration (extensions.allowSourceDirectories)', 'config'));
-        }
         else {
-            requirements.push(requirement('source', true, `the first-party package is available at ${join(input.sourceDir, packageDirFor(input.id))}`, 'install'));
+            const installSource = this.#options.installSource ?? 'auto';
+            const registryUrl = this.#registryBaseUrl();
+            const directoryRoute = input.sourceDir !== ''
+                && input.sourcePackage !== undefined
+                && input.sourcePackage.problem === null
+                && this.#options.allowSourceDirectories === true;
+            const registryRoute = installSource !== 'directory' && registryUrl !== '';
+            if (registryRoute) {
+                requirements.push(requirement('source', true, `the npm registry ${registryUrl} can supply ${input.id}@latest, resolved and sha512-verified at install time`
+                    + (installSource === 'auto' && directoryRoute
+                        ? '; a directory fallback is available if the registry is unreachable'
+                        : ''), 'install'));
+            }
+            else if (installSource === 'registry') {
+                requirements.push(requirement('source', false, 'no npm registry is configured (config.extensionRegistry), and registry-only installs are selected (config.extensionInstallSource)', 'config'));
+            }
+            else if (input.sourcePackage === undefined) {
+                requirements.push(requirement('source', false, input.sourceDir === ''
+                    ? 'not installed, and no first-party source directory is configured (config.extensionSourceDir)'
+                    : `no first-party package with this identity exists under ${input.sourceDir}`, input.sourceDir === '' ? 'config' : 'none'));
+            }
+            else if (input.sourcePackage.problem !== null) {
+                requirements.push(requirement('source', false, input.sourcePackage.problem, 'none'));
+            }
+            else if (this.#options.allowSourceDirectories !== true) {
+                requirements.push(requirement('source', false, 'installing from a source directory is disabled by configuration (extensions.allowSourceDirectories)', 'config'));
+            }
+            else {
+                requirements.push(requirement('source', true, `the first-party package is available at ${join(input.sourceDir, packageDirFor(input.id))}`, 'install'));
+            }
         }
         // DEPENDENCIES: declared runtime dependencies must be resolvable/materialized.
         requirements.push(this.#dependencyRequirement(input));
@@ -978,15 +997,12 @@ export class ExtensionsService {
         if (!view.installed) {
             if (view.sourcePackage?.problem !== null && view.sourcePackage?.problem !== undefined)
                 return view.sourcePackage.problem;
-            if (view.sourceDir === '') {
-                return 'not installed, and no first-party source directory is configured (config.extensionSourceDir)';
-            }
-            if (this.#options.allowSourceDirectories !== true) {
-                return 'not installed; installing from a source directory is disabled by configuration (extensions.allowSourceDirectories)';
-            }
-            return view.sourcePackage === undefined
-                ? 'not installed, and no first-party package with this identity exists under the configured source directory'
-                : `not installed; the first-party package is available at ${join(view.sourceDir, packageDirFor(view.id))}`;
+            // The route-aware source requirement already explains where an install would
+            // get the bytes (registry, directory, or why neither is available).
+            const sourceRequirement = view.requirements.find(candidate => candidate.kind === 'source');
+            if (sourceRequirement !== undefined)
+                return sourceRequirement.reason;
+            return 'not installed';
         }
         if (unmet !== undefined)
             return unmet.reason;
@@ -997,6 +1013,165 @@ export class ExtensionsService {
         }
         return null;
     }
+    /**
+     * Install one extension, choosing the route from the operator configuration.
+     *
+     * - An EXPLICIT `source` path is always a developer-mode directory install (the
+     *   existing source-directory gate and refusals apply).
+     * - Otherwise `installSource` decides. `registry` resolves `id@latest` from the
+     *   npm registry. `directory` uses the configured source directory. `auto` (the
+     *   default) prefers the registry and falls back to the directory ONLY for a
+     *   transport-level registry failure (unreachable/timeout/5xx) when directory
+     *   installs are allowed — a package-level refusal (404, missing integrity, bad
+     *   tarball, digest mismatch) is always named and never retried locally.
+     *
+     * INSTALLATION IS NOT ACTIVATION: the result is always `active: false`, and it
+     * names the route that actually supplied the bytes.
+     * @param extensionId - the package identity to install.
+     * @param source - an explicit source directory (developer override), or absent.
+     * @param signal - cancellation.
+     * @returns the installed identity, version and route.
+     * @throws ExtensionsServiceError for every refusal and failure.
+     */
+    async install(extensionId, source, signal) {
+        signal?.throwIfAborted();
+        assertUsableId(extensionId);
+        const storeDir = this.#requireStoreDir();
+        if (source !== undefined && source.trim().length > 0) {
+            return this.#installFromDirectory(extensionId, resolve(source), storeDir, signal);
+        }
+        const mode = this.#options.installSource ?? 'auto';
+        if (mode === 'directory') {
+            return this.#installFromDirectory(extensionId, undefined, storeDir, signal);
+        }
+        try {
+            return await this.#installFromRegistry(extensionId, storeDir, signal);
+        }
+        catch (error) {
+            const transportFallback = mode === 'auto'
+                && error instanceof ExtensionsServiceError
+                && (error.code === 'extension-registry-unavailable' || error.code === 'extension-registry-unconfigured')
+                && this.#options.allowSourceDirectories === true
+                && this.#directorySourceAvailable(extensionId);
+            if (!transportFallback)
+                throw error;
+            return this.#installFromDirectory(extensionId, undefined, storeDir, signal);
+        }
+    }
+    /** The configured registry base URL, trimmed ('' when the operator set it empty). */
+    #registryBaseUrl() {
+        return (this.#options.registryUrl ?? DEFAULT_REGISTRY_URL).trim();
+    }
+    /** Whether the configured source directory holds a package directory for this id. */
+    #directorySourceAvailable(extensionId) {
+        const sourceDir = this.#sourceDir();
+        if (sourceDir === '')
+            return false;
+        try {
+            return statSync(join(sourceDir, packageDirFor(extensionId))).isDirectory();
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Map a registry failure onto this service's named codes.
+     * @param error - an error from the registry session or the SDK install.
+     * @returns the service refusal, preserving the message and cause.
+     */
+    #mapRegistryFailure(error) {
+        if (!(error instanceof RegistryError)) {
+            return new ExtensionsServiceError('extension-install-failed', messageOf(error), { cause: error });
+        }
+        const codes = {
+            'registry-not-configured': 'extension-registry-unconfigured',
+            'registry-not-found': 'extension-registry-not-found',
+            'registry-no-matching-version': 'extension-registry-not-found',
+            'registry-integrity-missing': 'extension-registry-integrity-missing',
+            'registry-invalid-metadata': 'extension-registry-invalid-metadata',
+            'registry-tarball-fetch-failed': 'extension-registry-fetch-failed',
+            'registry-tarball-too-large': 'extension-registry-fetch-failed',
+            'registry-unavailable': 'extension-registry-unavailable',
+        };
+        return new ExtensionsServiceError(codes[error.code], error.message, { cause: error });
+    }
+    /**
+     * Install the extension package from the npm registry (task-104).
+     *
+     * The registry metadata is resolved to one exact version with a sha512 integrity;
+     * the tarball is fetched bounded, verified by `stagedInstall` BEFORE extraction,
+     * and installed through the SDK's tar-gzip ArchiveSource. The extension's runtime
+     * dependencies are resolved from the SAME registry through the SDK dependency
+     * graph (never the host-tree resolver), and EXT-10's install-script refusal is the
+     * SDK's own.
+     * @param extensionId - the package identity to install.
+     * @param storeDir - the configured store.
+     * @param signal - cancellation.
+     * @returns the installed identity/version and `source: 'registry'`.
+     * @throws ExtensionsServiceError for every refusal.
+     */
+    async #installFromRegistry(extensionId, storeDir, signal) {
+        const registryUrl = this.#registryBaseUrl();
+        if (registryUrl === '') {
+            throw new ExtensionsServiceError('extension-registry-unconfigured', 'no npm registry is configured (config.extensionRegistry), so registry installs are unavailable');
+        }
+        const session = createRegistrySession({
+            registryUrl,
+            archiveFactory: createTarGzipArchiveSource,
+            maxTarballBytes: this.#options.registryTarballMaxBytes ?? MAX_DEPENDENCY_ARCHIVE_BYTES,
+        });
+        let resolved;
+        try {
+            // Initial slice: the Settings page does not carry a version yet, so the
+            // configured route installs the registry's `latest` dist-tag. Exact versions
+            // and semver ranges are supported by the resolver itself (dependency ranges
+            // use them); a wire version field is a later slice.
+            resolved = await session.resolve(extensionId, 'latest', signal);
+        }
+        catch (error) {
+            throw this.#mapRegistryFailure(error);
+        }
+        let installed;
+        try {
+            installed = await stagedInstall({
+                source: { kind: 'registry', requested: `${extensionId}@${resolved.version}` },
+                storeDir,
+                expectedSha512: resolved.integrity,
+                archive: session.archive,
+                // Registry metadata recorded AS DATA, never as trust: the bytes are
+                // verified against the same sha512 before anything is extracted.
+                provenance: { registryIntegrity: resolved.integrity },
+                dependencies: createRegistryDependencyGraph(session),
+            });
+        }
+        catch (error) {
+            if (error instanceof RegistryError)
+                throw this.#mapRegistryFailure(error);
+            if (error instanceof ManagementError) {
+                if (error.code === 'INTEGRITY_MISMATCH') {
+                    throw new ExtensionsServiceError('extension-registry-integrity-mismatch', `${extensionId}@${resolved.version}: ${error.message}`, { cause: error });
+                }
+                if (error.code === 'DEPENDENCY_UNSATISFIED') {
+                    throw new ExtensionsServiceError('extension-dependency-unsatisfied', `[DEPENDENCY_UNSATISFIED] ${error.message}`, { cause: error });
+                }
+                throw new ExtensionsServiceError('extension-install-failed', `[${error.code}] ${error.message}`, { cause: error });
+            }
+            throw new ExtensionsServiceError('extension-install-failed', messageOf(error), { cause: error });
+        }
+        if (installed.extensionId !== extensionId) {
+            throw new ExtensionsServiceError('extension-source-mismatch', `the registry tarball requested as ${extensionId}@${resolved.version} contains ${JSON.stringify(installed.extensionId)}`);
+        }
+        if (installed.archiveDigest.trim().length === 0) {
+            throw new ExtensionsServiceError('extension-digest-unavailable', `${installed.extensionId}@${installed.version} was installed without a content digest, so it cannot be verified before activation`);
+        }
+        return {
+            id: installed.extensionId,
+            version: installed.version,
+            active: false,
+            source: 'registry',
+            resolvedVersion: resolved.version,
+        };
+    }
     /**
      * Install one extension from a local source directory (EXT-06 developer mode).
      *
@@ -1006,21 +1181,17 @@ export class ExtensionsService {
      * digested. The SDK then copies, validates, verifies and records the install; a
      * failure there is re-thrown as `extension-install-failed` with the SDK's own
      * named code in the message.
-     *
-     * INSTALLATION IS NOT ACTIVATION: the result is always `active: false`.
      * @param extensionId - the package identity to install.
-     * @param source - an explicit source directory, or absent to use the configured one.
+     * @param explicitSource - an explicit source directory, or undefined for the configured one.
+     * @param storeDir - the configured store.
      * @param signal - cancellation.
-     * @returns the installed identity and version.
+     * @returns the installed identity/version and `source: 'directory'`.
      * @throws ExtensionsServiceError for every refusal and failure.
      */
-    async install(extensionId, source, signal) {
+    async #installFromDirectory(extensionId, explicitSource, storeDir, signal) {
         signal?.throwIfAborted();
-        assertUsableId(extensionId);
-        const storeDir = this.#requireStoreDir();
-        const sourceDir = source !== undefined && source.trim().length > 0
-            ? resolve(source)
-            : (() => {
+        const sourceDir = explicitSource
+            ?? (() => {
                 const configured = this.#sourceDir();
                 if (configured === '') {
                     throw new ExtensionsServiceError('extension-source-unconfigured', `no source was given for ${extensionId} and no first-party source directory is configured (config.extensionSourceDir)`);
@@ -1065,10 +1236,9 @@ export class ExtensionsService {
                 storeDir,
                 allowSourceDirectories: true,
                 /**
-                 * The dependency graph is supplied only on this developer-mode path. It is
-                 * consulted by the SDK only when the package declares runtime dependencies;
-                 * every declared dependency is then resolved from the host's own installed
-                 * tree or the install fails with a named DEPENDENCY_UNSATISFIED reason.
+                 * The host-tree dependency graph is supplied only on this developer-mode
+                 * path. Registry installs resolve dependencies from the registry instead
+                 * (never from the host's tree).
                  */
                 dependencies: this.#dependencyGraph(sourceDir),
             });
@@ -1083,7 +1253,13 @@ export class ExtensionsService {
         if (installed.archiveDigest.trim().length === 0) {
             throw new ExtensionsServiceError('extension-digest-unavailable', `${installed.extensionId}@${installed.version} was installed without a content digest, so it cannot be verified before activation`);
         }
-        return { id: installed.extensionId, version: installed.version, active: false };
+        return {
+            id: installed.extensionId,
+            version: installed.version,
+            active: false,
+            source: 'directory',
+            resolvedVersion: installed.version,
+        };
     }
     /**
      * Activate an installed extension and clear its disabled override.

package/lib/index.d.ts

@@ -132,6 +132,27 @@ export interface Config {
      * the tree rather than linking it, and the installation lands INACTIVE.
      */
     extensionSourceDir?: string;
+    /**
+     * How an install with no explicit source directory gets its package bytes.
+     *
+     * - `registry`: resolve the package from the npm registry (`extensionRegistry`),
+     *   verify the registry-declared sha512 and install the tarball.
+     * - `directory`: the developer-mode source-directory path above.
+     * - `auto` (default): prefer the registry; fall back to the source directory
+     *   ONLY when the registry is unreachable (transport/timeout/5xx/unconfigured)
+     *   and `extensions.allowSourceDirectories` is on. A package-level registry
+     *   refusal (404, missing integrity, bad tarball, digest mismatch) is always a
+     *   named error and is NEVER silently retried against a local directory.
+     */
+    extensionInstallSource?: 'registry' | 'directory' | 'auto';
+    /**
+     * The npm registry registry installs resolve against. Defaults to the public
+     * npm registry; set it empty to disable the registry route (directory installs
+     * still need `extensions.allowSourceDirectories`).
+     */
+    extensionRegistry?: string;
+    /** Hard cap on one registry package tarball download. Default 256 MiB. */
+    extensionTarballMaxBytes?: number;
     /**
      * Operator gate: allow dependency content that arrived already materialized.
      *

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAMxC,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAavE,OAAO,EAAoH,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC5K,OAAO,EAAe,KAAK,WAAW,EAAuB,MAAM,8BAA8B,CAAA;AAuCjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAuB/D,eAAO,MAAM,IAAI,gBAAgB,CAAA;AACjC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B;;;GAGG;AACH,eACA,MAAM,qBAAqB,MAAM,CAAA;AAajC,4BAA4B;AAC5B,MAAM,WAAW,MAAM;IACrB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,GAAG,CAAC,EAAE;QACJ,0EAA0E;QAC1E,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,0DAA0D;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAA;IACD;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE;QACP,mEAAmE;QACnE,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,gDAAgD;QAChD,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;;;;;;OAUG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAA;IACvC;;;;;;;OAOG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;;;;;;;;;;OAaG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC;;;6DAGyD;IACzD,kBAAkB,CAAC,EAAE,MAAM,iBAAiB,CAAA;IAC5C,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE;QACX,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,kBAAkB,CAAC,EAAE,OAAO,CAAA;QAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAA;QAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC,gBAAgB,CAAC,EAAE,OAAO,CAAA;QAC1B,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAC5B,CAAA;IACD,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;QACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;QACtB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAA;KACrE,CAAA;IACD,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAC9B,CAAA;IACD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,CAAA;IACD,iBAAiB,CAAC,EAAE;QAClB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACtC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAA;QAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAA;QAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAC9B,CAAA;IACD,SAAS,CAAC,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IACD,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAA;IAC/C,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,mBAAmB,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KACpE,CAAA;IACD;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,UAAU,GAAG,eAAe,CAAA;IAC7C;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,iEAAiE;IACjE,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvF;AAkBD,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAkI3B,CAAA;AAEF;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAiBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAStD;AAYD,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,EAAE,CAgBpF;AAkCD,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAonG5E;AAED,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACrH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EACL,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AACxF,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAMxC,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAavE,OAAO,EAAoH,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AAC5K,OAAO,EAAe,KAAK,WAAW,EAAuB,MAAM,8BAA8B,CAAA;AAuCjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAA;AAuB/D,eAAO,MAAM,IAAI,gBAAgB,CAAA;AACjC,eAAO,MAAM,MAAM,UAAY,CAAA;AAE/B;;;GAGG;AACH,eACA,MAAM,qBAAqB,MAAM,CAAA;AAajC,4BAA4B;AAC5B,MAAM,WAAW,MAAM;IACrB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;;;;;OAQG;IACH,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;IACjB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,2DAA2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,gEAAgE;IAChE,mBAAmB,CAAC,EAAE,OAAO,CAAA;IAC7B;;;;;;;;;OASG;IACH,UAAU,CAAC,EAAE,OAAO,CAAA;IACpB;;;;OAIG;IACH,GAAG,CAAC,EAAE;QACJ,0EAA0E;QAC1E,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,0DAA0D;QAC1D,OAAO,CAAC,EAAE,MAAM,CAAA;KACjB,CAAA;IACD;;;;;;;OAOG;IACH,MAAM,CAAC,EAAE;QACP,mEAAmE;QACnE,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,gDAAgD;QAChD,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;;;;;;;OAaG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAA;IAC3B;;;;;;;;;;;OAWG;IACH,sBAAsB,CAAC,EAAE,UAAU,GAAG,WAAW,GAAG,MAAM,CAAA;IAC1D;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,0EAA0E;IAC1E,wBAAwB,CAAC,EAAE,MAAM,CAAA;IACjC;;;;;;;;;;OAUG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAA;IACvC;;;;;;;OAOG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAA;IACrC;;;;;;;;;;;;;OAaG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC;;;6DAGyD;IACzD,kBAAkB,CAAC,EAAE,MAAM,iBAAiB,CAAA;IAC5C,mFAAmF;IACnF,sBAAsB,CAAC,EAAE,MAAM,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE;QACX,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,kBAAkB,CAAC,EAAE,OAAO,CAAA;QAC5B,kBAAkB,CAAC,EAAE,OAAO,CAAA;QAC5B,sBAAsB,CAAC,EAAE,OAAO,CAAA;QAChC,gBAAgB,CAAC,EAAE,OAAO,CAAA;QAC1B,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAC5B,CAAA;IACD,KAAK,CAAC,EAAE;QACN,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC3B,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,IAAI,CAAC,EAAE,MAAM,CAAA;QACb,cAAc,CAAC,EAAE,MAAM,EAAE,CAAA;QACzB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;QACtB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,IAAI,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAA;KACrE,CAAA;IACD,aAAa,CAAC,EAAE;QACd,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAC9B,CAAA;IACD,YAAY,CAAC,EAAE;QACb,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,iBAAiB,CAAC,EAAE,MAAM,CAAA;QAC1B,uBAAuB,CAAC,EAAE,OAAO,CAAA;KAClC,CAAA;IACD,iBAAiB,CAAC,EAAE;QAClB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACtC,QAAQ,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAA;QAC9C,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAA;QAC/B,gBAAgB,CAAC,EAAE,MAAM,CAAA;QACzB,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;KAC9B,CAAA;IACD,SAAS,CAAC,EAAE;QACV,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAA;QAC7B,wBAAwB,CAAC,EAAE,OAAO,CAAA;KACnC,CAAA;IACD,SAAS,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAA;IAC/C,SAAS,CAAC,EAAE;QACV,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,aAAa,CAAC,EAAE,MAAM,CAAA;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;QACjB,mBAAmB,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,OAAO,CAAC;YAAC,aAAa,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KACpE,CAAA;IACD;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,UAAU,GAAG,eAAe,CAAA;IAC7C;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,WAAW,CAAA;IAC7B;;;;;;;;;;OAUG;IACH,YAAY,CAAC,EAAE,kBAAkB,CAAA;IACjC;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC/B,iEAAiE;IACjE,MAAM,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACvF;AAkBD,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CA4I3B,CAAA;AAEF;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAiBhE;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAStD;AAYD,8DAA8D;AAC9D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,2EAA2E;AAC3E,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,eAAe,EAAE,CAgBpF;AAkCD,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CA6nG5E;AAED,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAC9E,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,aAAa,EAAE,MAAM,iBAAiB,CAAA;AACrH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AACtE,OAAO,EACL,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,KAAK,aAAa,EAAE,MAAM,eAAe,CAAA;AACxF,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,UAAU,EACV,WAAW,EACX,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,UAAU,GAChB,MAAM,YAAY,CAAA;AACnB,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,cAAc,EACd,UAAU,EACV,aAAa,EACb,cAAc,EACd,cAAc,GACf,MAAM,YAAY,CAAA"}

package/lib/index.js

@@ -93,6 +93,16 @@ export const Config = z.object({
      * Empty by default: a deployment with no first-party source advertises none.
      */
     extensionSourceDir: z.string().default(''),
+    /**
+     * Install route for the Settings page: registry, directory, or auto (registry
+     * first, directory only for a transport failure when directory installs are
+     * allowed). Default auto.
+     */
+    extensionInstallSource: z.union([z.const('registry'), z.const('directory'), z.const('auto')]).default('auto'),
+    /** npm registry base URL; empty disables the registry route. Default: public npm. */
+    extensionRegistry: z.string().default('https://registry.npmjs.org/'),
+    /** Hard cap on one registry tarball download, in bytes. Default 256 MiB. */
+    extensionTarballMaxBytes: z.number().min(1).default(256 * 1024 * 1024),
     allowPreinstalledDependencies: z.boolean().default(false),
     preinstalledDependenciesRoot: z.string().default(''),
     /**
@@ -354,6 +364,15 @@ export async function apply(ctx, config = {}) {
         storeDir: config.extensionStore ?? '',
         sourceDir: config.extensionSourceDir ?? '',
         allowSourceDirectories: config.extensions?.allowSourceDirectories === true,
+        /**
+         * Registry installs (task-104). `auto` prefers the registry and uses the
+         * developer-mode directory only as a TRANSPORT-failure fallback when the
+         * source-directory gate is on; package-level registry refusals are named and
+         * never retried locally.
+         */
+        installSource: config.extensionInstallSource ?? 'auto',
+        registryUrl: config.extensionRegistry ?? 'https://registry.npmjs.org/',
+        registryTarballMaxBytes: config.extensionTarballMaxBytes ?? 256 * 1024 * 1024,
         /**
          * The operator gate for already-materialized dependencies. OFF by default:
          * a dependency whose package.json declares install-time scripts still

package/node_modules/@try-works/tool-mode-extension-sdk/lib/index.d.ts

@@ -20,6 +20,7 @@ export { digestInstalledContent, ExtensionStore, LOCK_FILE, type InstalledRecord
 export { commitUpdate, recordApproval, rollback, stageUpdate, type SchemaDelta, type UpdateCommitResult, type UpdateRollbackResult, type UpdateStageResult, type UpdateValidationReport, } from './install/update-flow.ts';
 export { installDependencyGraph, refuseInstallScripts, type DependencyContent, type DependencyResolver, type InstallDependencyGraph, type LockedDependency, } from './install/dependencies.ts';
 export { stagedInstallFromDirectory } from './install/source-directory.ts';
+export { createTarGzipArchiveSource, type TarGzipLimits } from './install/tar-gzip-source.ts';
 export { LEGACY_MODEL_MIGRATIONS, STATE_SCHEMA_VERSION, STATE_VERSION, applyLegacyChoices, parseLegacyModelState, type AppliedMigration, type LegacyModelMigration, type LegacyModelState, type LegacyParseResult, type MigratedAssetRecord, type MigrationEntry, type MigrationEntryKind, type MigrationOutcome, type MigrationReport, } from './install/migration.ts';
 export { assessReadiness, DEFAULT_STOP_GRACE_MS, ExtensionLifecycle, type ActivationDiagnostic, type ActivationResult, type Contribution, type ContributionRegistrar, type DeactivationResult, } from './install/lifecycle.ts';
 export { assertNoReservedMeta, defineExtension, EXTENSION_API_VERSION, RESERVED_META_FIELD, type DisposeReason, type ExtensionContextV1, type ExtensionInstanceV1, type ExtensionLoggerV1, type ExtensionStorageV1, type InvocationContextV1, type JsonObject, type JsonValue, type ModelProviderV1, type PreparedAssetMapV1, type ProviderInspectionV1, type ToolModeExtensionV1, } from './runtime.ts';

package/node_modules/@try-works/tool-mode-extension-sdk/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,eAAe,CAAA;AAEtB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,SAAS,EACT,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAA;AAE1E,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAA;AAErB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,KAAK,EACV,KAAK,UAAU,GAChB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,iCAAiC,EACjC,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAA;AAEpB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,EACjB,SAAS,EACT,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,aAAa,GACnB,MAAM,YAAY,CAAA;AAEnB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,eAAe,CAAA;AAEtB,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,sBAAsB,EACtB,eAAe,EACf,sBAAsB,EACtB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,aAAa,GACnB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,aAAa,EACb,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,mBAAmB,GACzB,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAEhE,OAAO,EACL,sBAAsB,EACtB,cAAc,EACd,SAAS,EACT,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,SAAS,EACd,KAAK,oBAAoB,GAC1B,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,YAAY,EACZ,cAAc,EACd,QAAQ,EACR,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,2BAA2B,CAAA;AAElC,OAAO,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAA;AAC1E,OAAO,EAAE,0BAA0B,EAAE,KAAK,aAAa,EAAE,MAAM,8BAA8B,CAAA;AAE7F,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,wBAAwB,CAAA;AAE/B,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAA;AAErB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,WAAW,CAAA;AAClB,OAAO,EACL,SAAS,EACT,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,KAAK,EACV,KAAK,UAAU,GAChB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,iBAAiB,EACjB,cAAc,EACd,oBAAoB,EACpB,eAAe,EACf,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,qBAAqB,GAC3B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,iCAAiC,EACjC,wBAAwB,EACxB,KAAK,gBAAgB,GACtB,MAAM,0BAA0B,CAAA;AAEjC,OAAO,EACL,sBAAsB,EACtB,WAAW,EACX,KAAK,oBAAoB,EACzB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAA"}

package/node_modules/@try-works/tool-mode-extension-sdk/lib/index.js

@@ -20,6 +20,7 @@ export { digestInstalledContent, ExtensionStore, LOCK_FILE, } from "./install/st
 export { commitUpdate, recordApproval, rollback, stageUpdate, } from "./install/update-flow.js";
 export { installDependencyGraph, refuseInstallScripts, } from "./install/dependencies.js";
 export { stagedInstallFromDirectory } from "./install/source-directory.js";
+export { createTarGzipArchiveSource } from "./install/tar-gzip-source.js";
 export { LEGACY_MODEL_MIGRATIONS, STATE_SCHEMA_VERSION, STATE_VERSION, applyLegacyChoices, parseLegacyModelState, } from "./install/migration.js";
 export { assessReadiness, DEFAULT_STOP_GRACE_MS, ExtensionLifecycle, } from "./install/lifecycle.js";
 export { assertNoReservedMeta, defineExtension, EXTENSION_API_VERSION, RESERVED_META_FIELD, } from "./runtime.js";

package/node_modules/@try-works/tool-mode-extension-sdk/lib/install/archive.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../src/install/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,iCAAiC;AACjC,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAA;AAE5E,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,EAAE,aAKpC,CAAA;AAiDD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,MAAM,GAAE,aAAsC,GAC7C,MAAM,EAAE,CA4FV;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAoBhE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAkBjF"}
+{"version":3,"file":"archive.d.ts","sourceRoot":"","sources":["../../src/install/archive.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,iCAAiC;AACjC,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAA;AAE5E,qEAAqE;AACrE,MAAM,WAAW,YAAY;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,+DAA+D;IAC/D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,mEAAmE;IACnE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,4EAA4E;IAC5E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,wCAAwC;IACxC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AAED,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,EAAE,aAKpC,CAAA;AAiDD;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,MAAM,GAAE,aAAsC,GAC7C,MAAM,EAAE,CA4FV;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAoBhE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,GAAG,MAAM,CAwBjF"}

package/node_modules/@try-works/tool-mode-extension-sdk/lib/install/archive.js

@@ -171,12 +171,18 @@ export function findPackageRoot(paths) {
  */
 export function verifyIntegrity(bytes, expectedSha512) {
     const digest = createHash('sha512').update(bytes).digest('hex');
-    const expected = expectedSha512.trim().toLowerCase().replace(/^sha512-/, '');
-    // Accept base64 as well as hex, because registry metadata uses base64 while a
-    // manifest is easier to read in hex; compare on the decoded form.
-    const expectedHex = /^[0-9a-f]+$/.test(expected)
-        ? expected
-        : Buffer.from(expected, 'base64').toString('hex');
+    // Strip the optional SRI prefix and trim, but do NOT lowercase before the
+    // format decision: base64 is CASE-SENSITIVE (npm's dist.integrity is base64
+    // SRI), so lowercasing first corrupts a correct digest. npm's base64 SRI for
+    // a SHA-512 always carries '=' padding, which hex never does — that is the
+    // deterministic discriminator, and the hex arm is lowercased only after it
+    // is recognized as hex.
+    const stripped = expectedSha512.trim().replace(/^sha512-/, '');
+    const expectedHex = stripped.includes('=')
+        ? Buffer.from(stripped, 'base64').toString('hex')
+        : /^[0-9a-f]+$/i.test(stripped)
+            ? stripped.toLowerCase()
+            : Buffer.from(stripped, 'base64').toString('hex');
     if (digest !== expectedHex) {
         throw new ManagementError('INTEGRITY_MISMATCH', 'install', 'the fetched archive does not match its declared SHA-512', 'Do not retry blindly: re-fetch from the declared source and confirm the expected digest with the publisher.');
     }

package/node_modules/@try-works/tool-mode-extension-sdk/lib/install/tar-gzip-source.d.ts

@@ -0,0 +1,44 @@
+/**
+ * A real, npm-tarball-backed {@link ArchiveSource} (gzip + POSIX tar).
+ *
+ * npm publishes `.tgz` files; the ZIP reader cannot serve them. This reader
+ * applies the SAME defense discipline as the ZIP path, plus the inflate-time
+ * bound that a zip bomb's metadata makes unnecessary there:
+ *
+ * - gzip inflation is STREAMED under a byte cap (the cap fires BEFORE the
+ *   inflated payload is allocated), then the expansion ratio is checked;
+ * - tar headers are parsed per block (regular/directory/symlink/hardlink, GNU
+ *   longname 'L'/'K', pax 'x'/'g' path records); symlinks and hardlinks are
+ *   reported as links so the entry-list validator REFUSES them — never resolved;
+ * - the entry list then flows through the shared `validateArchiveEntries`
+ *   defenses (traversal, absolute paths, Windows device names, duplicates,
+ *   case collisions, count/byte/ratio caps) exactly like the ZIP reader;
+ * - npm roots everything under `package/`: that one leading segment is
+ *   stripped, the bare `package` directory entry is ignored, and a MIXED
+ *   layout (entries both under and outside `package/`) is refused as
+ *   ambiguous rather than guessed at;
+ * - truncation and malformed headers refuse with named codes.
+ *
+ * Like the ZIP reader, it carries no fetcher of its own: a caller supplies
+ * the tarball bytes (a host wraps its registry transport), and a test
+ * supplies bytes directly.
+ *
+ * @module @try-works/tool-mode-extension-sdk/install/tar-gzip-source
+ */
+import type { ArchiveSource, InstallSource } from './staged.ts';
+/** Bounds for the inflate side of a tarball. */
+export interface TarGzipLimits {
+    /** Maximum inflated bytes, enforced DURING inflation before allocation. */
+    readonly maxInflatedBytes: number;
+    /** Maximum inflated-to-compressed ratio, checked before the payload is kept. */
+    readonly maxExpansionRatio: number;
+}
+/**
+ * Build an {@link ArchiveSource} over npm `.tgz` (gzip+tar) bytes.
+ *
+ * @param fetchBytes - the tarball transport; absent, `fetch` refuses (the SDK
+ *   carries no network stack — a host supplies its registry fetch).
+ * @param limits - inflate-time bounds, mirroring the shared archive defaults.
+ */
+export declare function createTarGzipArchiveSource(fetchBytes?: (source: InstallSource) => Promise<Uint8Array>, limits?: TarGzipLimits): ArchiveSource;
+//# sourceMappingURL=tar-gzip-source.d.ts.map

package/node_modules/@try-works/tool-mode-extension-sdk/lib/install/tar-gzip-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar-gzip-source.d.ts","sourceRoot":"","sources":["../../src/install/tar-gzip-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAc/D,gDAAgD;AAChD,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,gFAAgF;IAChF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;CACnC;AA2LD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,OAAO,CAAC,UAAU,CAAC,EAC3D,MAAM,GAAE,aAAuC,GAC9C,aAAa,CAkCf"}