@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.4

package/dist/cli/npm/publish/package-artifact.js

@@ -0,0 +1,418 @@
+import { resolveFileSystemAdapter } from "@vibesdotdev/filesystem";
+import { getRuntimePath } from "@vibesdotdev/paths";
+import { z } from "zod/v4";
+import { isSourceFilePattern, publishAccessForManifest, registryCanonicalGzipCommand, registryPublishBuildPlan, } from "@vibesdotdev/registry";
+import { stageRegistryPublishPackage } from "@vibesdotdev/registry/publish-stage";
+import { runRuntimeCommand, registryTokenEnv, } from "../../shared/runtime-execution.js";
+import { repositoryUrl } from "./forge-source-identity.js";
+import { pathExists, readPackageJson, requirePathFileURL } from "./fs-paths.js";
+import { newestTarball, writeIsolatedBunfig } from "./npm-exec.js";
+import { readProofArtifactManifest } from "./proof-registry.js";
+import { writeFreshReleaseConsumerSourceNpmrc } from "./proof-source-credentials.js";
+import { PUBLIC_NPM_REGISTRY } from "./registry-credentials.js";
+import { resolvePublishRegistry } from "./registry-credentials.js";
+/**
+ * The one constructor for sealed publish metadata. The seal and the live
+ * publish both build through it, so the sealed-metadata comparison sees the
+ * same key order: access and tag sit between registry and provenance, and are
+ * omitted when absent.
+ */
+export function sealedPublishMetadata(parts) {
+    const { registry, access, tag, provenance } = parts;
+    return access
+        ? tag
+            ? { registry, access, tag, provenance }
+            : { registry, access, provenance }
+        : tag
+            ? { registry, tag, provenance }
+            : { registry, provenance };
+}
+/**
+ * Copy a package into `stageDir` and write its canonical publish manifest.
+ * `version` stamps the assigned release version into the STAGED manifest only;
+ * the source manifest is never modified. Staging is owned by
+ * `@vibesdotdev/registry`, the same owner Forge CI packs through.
+ */
+export async function stagePackageForPublish(options) {
+    const { runtime, ...stage } = options;
+    await stageRegistryPublishPackage(runtime, stage);
+}
+function collectExportTargets(value, targets) {
+    const text = z.string().safeParse(value);
+    if (text.success) {
+        if (text.data.startsWith("./"))
+            targets.add(text.data.slice(2));
+        return;
+    }
+    const list = z.array(z.unknown()).safeParse(value);
+    if (list.success) {
+        for (const entry of list.data)
+            collectExportTargets(entry, targets);
+        return;
+    }
+    const record = z.record(z.string(), z.unknown()).safeParse(value);
+    if (!record.success)
+        return;
+    for (const entry of Object.values(record.data))
+        collectExportTargets(entry, targets);
+}
+function wildcardMatches(pattern, candidate) {
+    const escaped = pattern
+        .replace(/[.+?^${}()|[\]\\]/g, "\\$&")
+        .replaceAll("*", ".*");
+    return new RegExp(`^${escaped}$`).test(candidate);
+}
+const TS_SPECIFIER_EXTENSIONS = [".ts", ".tsx", ".mts", ".cts"];
+// Matches the specifier string literal in `from '…'`, `require('…')`, and
+// `import('…')` — this covers `import x from '…'`, `import '…'` (side
+// effect), `export … from '…'`, `export * from '…'`, dynamic `import()`,
+// and CommonJS `require()`.
+const TS_SPECIFIER_RE = /\b(?:from\s+|import\s*\(\s*|require\s*\(\s*|import\s+)(['"])(\.\.?\/[^'"]+)\1/g;
+/**
+ * Blank out `//` and `/* *‍/` comments and the *contents* of template
+ * literals, leaving real single/double-quoted string literals untouched, so
+ * a doc-string code example or a JSDoc `@example` fence never counts as a
+ * real specifier. A false positive here is acceptable; a false negative is
+ * not, so genuine quoted specifiers are always preserved verbatim.
+ */
+const SPECIFIER_POSITION_RE = /(?:\bfrom|\bimport|\bimport\s*\(|\brequire\s*\()\s*$/;
+function maskNonCode(text) {
+    let out = "";
+    let i = 0;
+    const n = text.length;
+    let state = "code";
+    while (i < n) {
+        const ch = text[i];
+        const next = text[i + 1];
+        if (state === "code") {
+            if (ch === "/" && next === "/") {
+                state = "line-comment";
+                out += "  ";
+                i += 2;
+                continue;
+            }
+            if (ch === "/" && next === "*") {
+                state = "block-comment";
+                out += "  ";
+                i += 2;
+                continue;
+            }
+            if (ch === "`") {
+                state = "template";
+                out += " ";
+                i += 1;
+                continue;
+            }
+            if (ch === "'" || ch === '"') {
+                const quote = ch;
+                let j = i + 1;
+                let literal = quote;
+                while (j < n) {
+                    if (text[j] === "\\" && j + 1 < n) {
+                        literal += text[j] + text[j + 1];
+                        j += 2;
+                        continue;
+                    }
+                    if (text[j] === quote) {
+                        literal += quote;
+                        j += 1;
+                        break;
+                    }
+                    if (text[j] === "\n")
+                        break;
+                    literal += text[j];
+                    j += 1;
+                }
+                // A specifier is a literal in specifier position; any other string's
+                // contents (a rule message quoting `import('./x.ts')`) are not code.
+                out += SPECIFIER_POSITION_RE.test(out)
+                    ? literal
+                    : quote + " ".repeat(literal.length - 1);
+                i = j;
+                continue;
+            }
+            out += ch;
+            i += 1;
+            continue;
+        }
+        if (state === "line-comment") {
+            if (ch === "\n") {
+                state = "code";
+                out += "\n";
+            }
+            else {
+                out += " ";
+            }
+            i += 1;
+            continue;
+        }
+        if (state === "block-comment") {
+            if (ch === "*" && next === "/") {
+                state = "code";
+                out += "  ";
+                i += 2;
+                continue;
+            }
+            out += ch === "\n" ? "\n" : " ";
+            i += 1;
+            continue;
+        }
+        // state === 'template'
+        if (ch === "\\" && i + 1 < n) {
+            out += "  ";
+            i += 2;
+            continue;
+        }
+        if (ch === "`") {
+            state = "code";
+            out += " ";
+            i += 1;
+            continue;
+        }
+        out += ch === "\n" ? "\n" : " ";
+        i += 1;
+    }
+    return out;
+}
+function findTsImportSpecifiers(content) {
+    const masked = maskNonCode(content);
+    const found = [];
+    TS_SPECIFIER_RE.lastIndex = 0;
+    let match;
+    while ((match = TS_SPECIFIER_RE.exec(masked))) {
+        const specifier = match[2];
+        if (!specifier.startsWith("./") && !specifier.startsWith("../"))
+            continue;
+        if (TS_SPECIFIER_EXTENSIONS.some((ext) => specifier.endsWith(ext)))
+            found.push(specifier);
+    }
+    return found;
+}
+/**
+ * Verify a packed file list against the manifest: every export/main target is
+ * packed, no source, test or TypeScript specifier ships, and declared files staged.
+ */
+export async function verifyPackedPackage(pkg, files, readFileContent, sourceDeclaration) {
+    const forbidden = files.filter((file) => /(?:^src\/|(?:^|\/)(?:__tests__\/|SPEC\.md$|tsconfig(?:\.[^/]*)?\.json$)|\.tsbuildinfo$|(?:^|\/)\.build-ok\.json$|\.(?:test|spec)\.[cm]?[jt]sx?$)/i.test(file));
+    if (forbidden.length > 0) {
+        throw new Error(`${pkg.name ?? "package"}@${pkg.version ?? "unknown"} packs development-only files: ${forbidden.join(", ")}`);
+    }
+    const targets = new Set();
+    if (pkg.main?.startsWith("./"))
+        targets.add(pkg.main.slice(2));
+    if (pkg.types?.startsWith("./"))
+        targets.add(pkg.types.slice(2));
+    collectExportTargets(pkg.exports, targets);
+    const missing = [...targets].filter((target) => target.includes("*")
+        ? !files.some((file) => wildcardMatches(target, file))
+        : !files.includes(target));
+    if (missing.length > 0) {
+        throw new Error(`${pkg.name ?? "package"}@${pkg.version ?? "unknown"} declares unpacked export artifacts: ${missing.join(", ")}`);
+    }
+    // Staging rewrites the owner's `files` declaration (dropping `src`, keeping
+    // the rest) before packing; this is a second, independent check that the
+    // rewrite never silently dropped a declared entry that actually exists in
+    // the staged tree. A negation pattern (`!dist/**/*.test.js`) or a glob is
+    // not a concrete entry to require, so only literal path-shaped declarations
+    // are checked.
+    if (sourceDeclaration?.files) {
+        const stagedFiles = new Set(pkg.files ?? []);
+        const dropped = [];
+        for (const entry of sourceDeclaration.files) {
+            if (entry.startsWith("!") || entry.includes("*"))
+                continue;
+            // `src` is the one entry staging drops on purpose (dist is authoritative);
+            // the same predicate the rewrite uses decides it, never a second copy.
+            if (isSourceFilePattern(entry))
+                continue;
+            const normalized = entry.replace(/^\.\//, "");
+            if (stagedFiles.has(entry) ||
+                stagedFiles.has(normalized) ||
+                stagedFiles.has(`./${normalized}`)) {
+                continue;
+            }
+            if (!(await sourceDeclaration.entryStaged(entry)))
+                continue;
+            dropped.push(entry);
+        }
+        if (dropped.length > 0) {
+            throw new Error(`${pkg.name ?? "package"}@${pkg.version ?? "unknown"} staging drops source-declared files entries that exist: ${dropped.join(", ")}`);
+        }
+    }
+    // A published dist must never import a `.ts` specifier — consumers resolve
+    // the compiled `.js`, and a raw TS specifier throws at runtime (proven for
+    // @vibesdotdev/bridge and @vibesdotdev/platform: vite's SSR build fails).
+    // Fail closed: read every packed JS file's content and reject any relative
+    // import/export/require specifier that still ends in a TS extension.
+    const scriptFiles = files.filter((file) => /\.(?:js|mjs|cjs)$/i.test(file) && !file.endsWith(".d.ts"));
+    const specifierOffenses = [];
+    for (const file of scriptFiles) {
+        const content = await readFileContent(file);
+        for (const specifier of findTsImportSpecifiers(content)) {
+            specifierOffenses.push(`${file}: ${specifier}`);
+        }
+    }
+    if (specifierOffenses.length > 0) {
+        throw new Error(`${pkg.name ?? "package"}@${pkg.version ?? "unknown"} ships .ts import specifiers: ${specifierOffenses.join(", ")}`);
+    }
+    return { verifiedFiles: files.length, verifiedExports: targets.size };
+}
+/**
+ * Build the package when it has a build script, then prove its built main loads
+ * under its declared runtime.
+ */
+export async function buildAndVerifyLoadable(options) {
+    const plan = registryPublishBuildPlan(options.pkg);
+    if (options.build !== false && plan.build) {
+        if (!options.quiet)
+            options.ui.info(`Building ${options.pkg.name}@${options.pkg.version}`);
+        const result = await runRuntimeCommand({
+            runtime: options.runtime,
+            execution: options.execution,
+            command: "bun",
+            env: await registryTokenEnv(options.runtime),
+            args: ["run", "build"],
+            cwd: options.packageDir,
+            onLine: options.quiet
+                ? undefined
+                : (_stream, line) => options.ui.log(line),
+        });
+        if (result.code !== 0) {
+            throw new Error(`Build failed for ${options.pkg.name}@${options.pkg.version}`);
+        }
+    }
+    if (!plan.main)
+        return;
+    const paths = await getRuntimePath(options.runtime);
+    const mainPath = paths.resolve(options.packageDir, plan.main);
+    if (!(await pathExists(options.runtime, mainPath))) {
+        throw new Error(`${options.pkg.name}@${options.pkg.version} main artifact does not exist: ${options.pkg.main}`);
+    }
+    const result = await runRuntimeCommand({
+        runtime: options.runtime,
+        execution: options.execution,
+        command: plan.loadRuntime ?? "node",
+        env: await registryTokenEnv(options.runtime),
+        args: [
+            "--input-type=module",
+            "--eval",
+            `import(${JSON.stringify(requirePathFileURL(paths, mainPath).href)})`,
+        ],
+        cwd: options.packageDir,
+        onLine: options.quiet ? undefined : (_stream, line) => options.ui.log(line),
+    });
+    if (result.code !== 0) {
+        throw new Error(`Built main export is not loadable for ${options.pkg.name}@${options.pkg.version}`);
+    }
+}
+/**
+ * Build, stage (stamping `version` into the staged manifest), pack, verify and
+ * canonically gzip one package under `tempRoot`. Returns the tarball, its
+ * verification counts, the copy retained in `artifactDir` (if any) and the
+ * publish metadata read back from the staged manifest.
+ */
+export async function sealPackageArtifact(options) {
+    const { pkg, version, packageDir } = options;
+    // Refuse a manifest whose access disagrees with its tier before building it.
+    publishAccessForManifest(pkg);
+    const paths = await getRuntimePath(options.runtime);
+    const files = await resolveFileSystemAdapter(options.runtime, { binding: false });
+    const packDir = paths.join(options.tempRoot, "pack");
+    const stageDir = paths.join(options.tempRoot, "stage");
+    await buildAndVerifyLoadable({
+        pkg,
+        packageDir,
+        execution: options.execution,
+        runtime: options.runtime,
+        quiet: options.quiet,
+        ui: options.ui,
+        build: options.build,
+    });
+    await files.mkdir(packDir, { recursive: true });
+    await stagePackageForPublish({
+        runtime: options.runtime,
+        packageDir,
+        stageDir,
+        bunPackWorkspaceRoot: options.tempRoot,
+        versions: options.versions,
+        version,
+        gitHead: options.gitHead,
+        provenance: options.workspaceProvenance,
+    });
+    const stagedPkg = await readPackageJson(options.runtime, stageDir);
+    const stagedProvenance = {
+        repository: repositoryUrl(stagedPkg) ?? "",
+        repositoryId: stagedPkg.vibes?.registry?.repositoryId ?? "",
+        directory: stagedPkg.vibes?.registry?.directory ?? "",
+    };
+    if (JSON.stringify(stagedProvenance) !==
+        JSON.stringify(options.workspaceProvenance)) {
+        throw new Error(`Staged publish provenance differs for ${pkg.name}@${version}`);
+    }
+    const publishMetadata = sealedPublishMetadata({
+        registry: resolvePublishRegistry(stagedPkg, options.registry),
+        access: publishAccessForManifest(stagedPkg),
+        tag: options.tag ?? stagedPkg.publishConfig?.tag,
+        provenance: stagedProvenance,
+    });
+    if (!options.quiet)
+        options.ui.info(`Packing ${pkg.name}@${version} from ${packageDir}`);
+    await writeIsolatedBunfig(options.runtime, options.tempRoot);
+    await writeFreshReleaseConsumerSourceNpmrc(options.npmEnv.NPM_CONFIG_USERCONFIG, options.sourceRegistry ?? { defaultRegistry: PUBLIC_NPM_REGISTRY }, options.runtime);
+    const packingLock = await runRuntimeCommand({
+        execution: options.execution, runtime: options.runtime, command: "bun",
+        args: ["install", "--lockfile-only", "--ignore-scripts"],
+        cwd: options.tempRoot, env: options.npmEnv,
+    });
+    if (packingLock.code !== 0)
+        throw new Error(`Bun packing lock preparation failed for ${pkg.name}@${version}`);
+    const packResult = await runRuntimeCommand({
+        execution: options.execution,
+        command: "bun",
+        args: ["pm", "pack", "--ignore-scripts", "--destination", packDir, "--quiet"],
+        runtime: options.runtime,
+        cwd: stageDir,
+        env: options.npmEnv,
+        onLine: options.quiet ? undefined : (_stream, line) => options.ui.log(line),
+    });
+    if (packResult.code !== 0)
+        throw new Error(`Bun packing failed for ${pkg.name}@${version}`);
+    const tarball = await newestTarball(options.runtime, packDir);
+    const packed = await runRuntimeCommand({
+        execution: options.execution, runtime: options.runtime, command: "tar",
+        args: ["-tzf", tarball], cwd: options.tempRoot, env: options.npmEnv,
+    });
+    if (packed.code !== 0)
+        throw new Error(`Packed file list is unreadable for ${pkg.name}@${version}`);
+    const packedFiles = packed.stdout.split(/\r?\n/).filter((file) => file.startsWith("package/") && !file.endsWith("/")).map((file) => file.slice("package/".length));
+    const packedManifest = await readProofArtifactManifest(options.execution, options.runtime, tarball);
+    if (packedManifest.name !== pkg.name || packedManifest.version !== version)
+        throw new Error(`Packed package identity differs for ${pkg.name}@${version}`);
+    for (const field of ["dependencies", "peerDependencies", "optionalDependencies"]) {
+        if (Object.values(packedManifest[field] ?? {}).some((selector) => selector.startsWith("workspace:")))
+            throw new Error(`Bun packing left workspace selectors in ${pkg.name}@${version}`);
+    }
+    const verification = await verifyPackedPackage(packedManifest, packedFiles, async (file) => z.string().parse(await files.readFile(paths.join(stageDir, file), "utf8")), {
+        files: pkg.files,
+        entryStaged: (entry) => pathExists(options.runtime, paths.join(stageDir, entry.replace(/^\.\//, ""))),
+    });
+    const canonicalized = await runRuntimeCommand({
+        runtime: options.runtime,
+        execution: options.execution,
+        command: "sh",
+        env: await registryTokenEnv(options.runtime),
+        args: ["-c", registryCanonicalGzipCommand(tarball)],
+        cwd: options.tempRoot,
+    });
+    if (canonicalized.code !== 0) {
+        throw new Error(`Canonical gzip packaging failed for ${pkg.name}@${version}`);
+    }
+    let retainedTarball;
+    if (options.artifactDir) {
+        await files.mkdir(options.artifactDir, { recursive: true });
+        retainedTarball = paths.join(options.artifactDir, paths.basename(tarball));
+        await files.copy(tarball, retainedTarball);
+    }
+    return { tarball, retainedTarball, verification, publishMetadata };
+}
+//# sourceMappingURL=package-artifact.js.map

package/dist/cli/npm/publish/package-artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-artifact.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/package-artifact.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,OAAO,EACL,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAsC,MAAM,qBAAqB,CAAC;AACpG,OAAO,EAAE,oCAAoC,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAOnE;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAKrC;IACC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC;IACpD,OAAO,MAAM;QACX,CAAC,CAAC,GAAG;YACH,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE;YACvC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;QACpC,CAAC,CAAC,GAAG;YACH,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE;YAC/B,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAU5C;IACC,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,2BAA2B,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,OAAoB;IAChE,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI;YAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,eAAe,CAAC,OAAe,EAAE,SAAiB;IACzD,MAAM,OAAO,GAAG,OAAO;SACpB,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC;SACrC,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACzB,OAAO,IAAI,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,uBAAuB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEhE,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,4BAA4B;AAC5B,MAAM,eAAe,GACnB,gFAAgF,CAAC;AAEnF;;;;;;GAMG;AACH,MAAM,qBAAqB,GAAG,sDAAsD,CAAC;AAErF,SAAS,WAAW,CAAC,IAAY;IAC/B,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACtB,IAAI,KAAK,GAA2D,MAAM,CAAC;IAC3E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,KAAK,GAAG,cAAc,CAAC;gBACvB,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,KAAK,GAAG,eAAe,CAAC;gBACxB,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACf,KAAK,GAAG,UAAU,CAAC;gBACnB,GAAG,IAAI,GAAG,CAAC;gBACX,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBAC7B,MAAM,KAAK,GAAG,EAAE,CAAC;gBACjB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBACd,IAAI,OAAO,GAAG,KAAK,CAAC;gBACpB,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;oBACb,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;wBAClC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;wBACjC,CAAC,IAAI,CAAC,CAAC;wBACP,SAAS;oBACX,CAAC;oBACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;wBACtB,OAAO,IAAI,KAAK,CAAC;wBACjB,CAAC,IAAI,CAAC,CAAC;wBACP,MAAM;oBACR,CAAC;oBACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;wBAAE,MAAM;oBAC5B,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;oBACnB,CAAC,IAAI,CAAC,CAAC;gBACT,CAAC;gBACD,qEAAqE;gBACrE,qEAAqE;gBACrE,GAAG,IAAI,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC;oBACpC,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;gBAC3C,CAAC,GAAG,CAAC,CAAC;gBACN,SAAS;YACX,CAAC;YACD,GAAG,IAAI,EAAE,CAAC;YACV,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YAC7B,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,KAAK,GAAG,MAAM,CAAC;gBACf,GAAG,IAAI,IAAI,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,GAAG,IAAI,GAAG,CAAC;YACb,CAAC;YACD,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,KAAK,KAAK,eAAe,EAAE,CAAC;YAC9B,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;gBAC/B,KAAK,GAAG,MAAM,CAAC;gBACf,GAAG,IAAI,IAAI,CAAC;gBACZ,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YAChC,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,uBAAuB;QACvB,IAAI,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC7B,GAAG,IAAI,IAAI,CAAC;YACZ,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,KAAK,GAAG,MAAM,CAAC;YACf,GAAG,IAAI,GAAG,CAAC;YACX,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,GAAG,IAAI,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAChC,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAe;IAC7C,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,eAAe,CAAC,SAAS,GAAG,CAAC,CAAC;IAC9B,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,GAGC,EACD,KAAe,EACf,eAAkD,EAClD,iBAKC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACtC,mJAAmJ,CAAC,IAAI,CACtJ,IAAI,CACL,CACF,CAAC;IACF,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,kCAAkC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC7G,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,IAAI,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,oBAAoB,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAC7C,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAClB,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC5B,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,wCAAwC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjH,CAAC;IACJ,CAAC;IAED,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,0EAA0E;IAC1E,4EAA4E;IAC5E,eAAe;IACf,IAAI,iBAAiB,EAAE,KAAK,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC;YAC5C,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC3D,2EAA2E;YAC3E,uEAAuE;YACvE,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,SAAS;YACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAC9C,IACE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;gBACtB,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;gBAC3B,WAAW,CAAC,GAAG,CAAC,KAAK,UAAU,EAAE,CAAC,EAClC,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAAE,SAAS;YAC5D,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,4DAA4D,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrI,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrE,MAAM,WAAW,GAAG,KAAK,CAAC,MAAM,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CACrE,CAAC;IACF,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5C,KAAK,MAAM,SAAS,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,SAAS,EAAE,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,GAAG,CAAC,OAAO,IAAI,SAAS,iCAAiC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpH,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAS5C;IACC,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,KAAK;YAChB,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,KAAK;YACd,GAAG,EAAE,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;YAC5C,IAAI,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC;YACtB,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,MAAM,EAAE,OAAO,CAAC,KAAK;gBACnB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,oBAAoB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAC9D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO;IACvB,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,kCAAkC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,IAAI,CAAC,WAAW,IAAI,MAAM;QACnC,GAAG,EAAE,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,IAAI,EAAE;YACJ,qBAAqB;YACrB,QAAQ;YACR,UAAU,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG;SACtE;QACD,GAAG,EAAE,OAAO,CAAC,UAAU;QACvB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KAC5E,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,yCAAyC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAmBzC;IAMC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC7C,6EAA6E;IAC7E,wBAAwB,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACvD,MAAM,sBAAsB,CAAC;QAC3B,GAAG;QACH,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,sBAAsB,CAAC;QAC3B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU;QACV,QAAQ;QACR,oBAAoB,EAAE,OAAO,CAAC,QAAQ;QACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,OAAO;QACP,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,UAAU,EAAE,OAAO,CAAC,mBAAmB;KACxC,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAgC;QACpD,UAAU,EAAE,aAAa,CAAC,SAAS,CAAC,IAAI,EAAE;QAC1C,YAAY,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,IAAI,EAAE;QAC3D,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,IAAI,EAAE;KACtD,CAAC;IACF,IACE,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC;QAChC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,eAAe,GAAG,qBAAqB,CAAC;QAC5C,QAAQ,EAAE,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC;QAC7D,MAAM,EAAE,wBAAwB,CAAC,SAAS,CAAC;QAC3C,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,SAAS,CAAC,aAAa,EAAE,GAAG;QAChD,UAAU,EAAE,gBAAgB;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,OAAO,CAAC,KAAK;QAChB,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,IAAI,IAAI,OAAO,SAAS,UAAU,EAAE,CAAC,CAAC;IACvE,MAAM,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,MAAM,oCAAoC,CACxC,OAAO,CAAC,MAAM,CAAC,qBAAqB,EACpC,OAAO,CAAC,cAAc,IAAI,EAAE,eAAe,EAAE,mBAAmB,EAAE,EAClE,OAAO,CAAC,OAAO,CAChB,CAAC;IACF,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC;QAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK;QACtE,IAAI,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,kBAAkB,CAAC;QACxD,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM;KAC3C,CAAC,CAAC;IACH,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC9G,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC;QACvC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,CAAC;QAC7E,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,OAAO,CAAC,MAAM;QACnB,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;KAC5E,CAAC,CAAC;IACL,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC5F,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK;QACtE,IAAI,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM;KACpE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IACpG,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACnK,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpG,IAAI,cAAc,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,cAAc,CAAC,OAAO,KAAK,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC1J,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,EAAE,CAAC;QAC1F,IAAI,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAC1L,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAC5C,cAAc,EACd,WAAW,EACX,KAAK,EAAE,IAAI,EAAE,EAAE,CACb,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,EAC5E;QACE,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CACrB,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;KAChF,CACF,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,MAAM,gBAAgB,CAAC,OAAO,CAAC,OAAO,CAAC;QAC5C,IAAI,EAAE,CAAC,IAAI,EAAE,4BAA4B,CAAC,OAAO,CAAC,CAAC;QACnD,GAAG,EAAE,OAAO,CAAC,QAAQ;KACtB,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,eAAmC,CAAC;IACxC,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,eAAe,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;AACrE,CAAC"}

package/dist/cli/npm/publish/platform-registry.d.ts

@@ -0,0 +1,76 @@
+import { CapabilityError, type RuntimeRef, type VibesRuntime } from "@vibesdotdev/kernel";
+import { type JsonValue } from "@vibesdotdev/kernel/schemas/json";
+/** What the platform Registry client reads from the runtime it is handed. */
+export type PlatformRegistryRuntime = RuntimeRef & Pick<VibesRuntime, "query" | "resolveCredential">;
+/** A one-use publish credential minted by the platform. */
+export type ManagedPublishLease = {
+    token: string;
+    id: string;
+    expiresAt: string;
+};
+/** One platform registry-authority response, status preserved for poll logic. */
+export type PlatformRegistryResponse = {
+    status: number;
+    ok: boolean;
+    /** Parsed from the `Retry-After` header or the payload's `retryAfterSeconds`. */
+    retryAfterSeconds?: number;
+    payload: JsonValue;
+};
+/** The human error message of a platform Registry error payload. */
+export declare function registryErrorMessage(payload: JsonValue): string;
+/**
+ * The platform that mints a publish lease must belong to the SAME environment
+ * as the registry being published to. Resolving 'platform' from the CLI's
+ * ambient environment is wrong whenever they differ — a CLI sitting in `local`
+ * would ask `platform.vibes.local` to authorize a publish to the production
+ * registry — and `resolve-app-origin` documents that ambient selection falls
+ * through to a NODE_ENV default outside the browser, so the CLI cannot be
+ * trusted to be in the right tier. Deriving the environment FROM the target
+ * registry origin removes the guess.
+ */
+export declare function resolvePlatformOriginForRegistry(runtime: PlatformRegistryRuntime, registry: string | undefined, resolvers?: {
+    environmentForOrigin?: (origin: string) => Promise<{
+        apps?: Record<string, string>;
+    } | null>;
+    ambientPlatformOrigin?: () => Promise<string | null>;
+}): Promise<string | null>;
+/**
+ * An authenticated request to the platform that owns `registry`, status preserved.
+ */
+export declare function platformRegistryRequestRaw(runtime: PlatformRegistryRuntime, path: string, method: "POST" | "DELETE", body: JsonValue, registry?: string, signal?: AbortSignal): Promise<PlatformRegistryResponse>;
+/**
+ * An authenticated platform Registry request that throws on a non-2xx response.
+ */
+export declare function platformRegistryRequest(runtime: PlatformRegistryRuntime, path: string, method: "POST" | "DELETE", body: JsonValue, registry?: string, signal?: AbortSignal): Promise<JsonValue>;
+/** One authenticated Platform Registry request, status preserved (bound to a runtime). */
+export type PlatformRegistryRawRequest = (path: string, method: "POST" | "DELETE", body: JsonValue, registry?: string, signal?: AbortSignal) => Promise<PlatformRegistryResponse>;
+/** The Platform Registry calls one release run makes, bound to the runtime it was handed. */
+export interface PlatformRegistryClient {
+    raw: PlatformRegistryRawRequest;
+    request(path: string, method: "POST" | "DELETE", body: JsonValue, registry?: string, signal?: AbortSignal): Promise<JsonValue>;
+    /** Whether scoped CI authority or a signed-in Vibes session is available. */
+    hasSession(): Promise<boolean>;
+    sessionJwt(): Promise<string | null>;
+    freshSessionJwt(): Promise<string | null>;
+}
+/** The Platform Registry client of `runtime`, the runtime the release command was handed. */
+export declare function createPlatformRegistryClient(runtime: PlatformRegistryRuntime, signal?: AbortSignal): PlatformRegistryClient;
+/** Deadline for a Forge release build started while minting a publish lease. */
+export declare const MANAGED_LEASE_POLL_DEADLINE_MS: number;
+/** Default delay when the Platform sends no Retry-After. */
+export declare const MANAGED_LEASE_POLL_INTERVAL_MS = 15000;
+export declare class ManagedPublishLeasePendingError extends CapabilityError {
+    readonly retryAfterMs: number;
+    constructor(retryAfterMs: number);
+}
+/**
+ * Make one idempotent lease request. A pending build is returned to the
+ * Workers job, which schedules the next request with the adapter's delay.
+ */
+export declare function pollManagedPublishLease(options: {
+    request: () => Promise<PlatformRegistryResponse>;
+    deadlineAt: number;
+    defaultRetryAfterMs?: number;
+    now: () => number;
+}): Promise<ManagedPublishLease>;
+//# sourceMappingURL=platform-registry.d.ts.map

package/dist/cli/npm/publish/platform-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-registry.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/platform-registry.ts"],"names":[],"mappings":"AAcA,OAAO,EACL,eAAe,EAGf,KAAK,UAAU,EACf,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,kCAAkC,CAAC;AAG1C,6EAA6E;AAC7E,MAAM,MAAM,uBAAuB,GAAG,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,OAAO,GAAG,mBAAmB,CAAC,CAAC;AAqBrG,2DAA2D;AAC3D,MAAM,MAAM,mBAAmB,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,iFAAiF;AACjF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,OAAO,CAAC;IACZ,iFAAiF;IACjF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,SAAS,CAAC;CACpB,CAAC;AAyCF,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,GAAG,MAAM,CAuB/D;AAwCD;;;;;;;;;GASG;AACH,wBAAsB,gCAAgC,CACpD,OAAO,EAAE,uBAAuB,EAChC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,SAAS,GAAE;IACT,oBAAoB,CAAC,EAAE,CACrB,MAAM,EAAE,MAAM,KACX,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IACvD,qBAAqB,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACjD,GACL,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAkCxB;AAED;;GAEG;AACH,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,IAAI,EAAE,SAAS,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,wBAAwB,CAAC,CAiFnC;AAED;;GAEG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,uBAAuB,EAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,IAAI,EAAE,SAAS,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,SAAS,CAAC,CAepB;AAED,0FAA0F;AAC1F,MAAM,MAAM,0BAA0B,GAAG,CACvC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,QAAQ,EACzB,IAAI,EAAE,SAAS,EACf,QAAQ,CAAC,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,KACjB,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAEvC,6FAA6F;AAC7F,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,0BAA0B,CAAC;IAChC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC/H,6EAA6E;IAC7E,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,UAAU,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACrC,eAAe,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C;AAED,6FAA6F;AAC7F,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,uBAAuB,EAChC,MAAM,CAAC,EAAE,WAAW,GACnB,sBAAsB,CAUxB;AAED,gFAAgF;AAChF,eAAO,MAAM,8BAA8B,QAAc,CAAC;AAC1D,4DAA4D;AAC5D,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAErD,qBAAa,+BAAgC,SAAQ,eAAe;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM;gBAApB,YAAY,EAAE,MAAM;CAQ1C;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACrD,OAAO,EAAE,MAAM,OAAO,CAAC,wBAAwB,CAAC,CAAC;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAoC/B"}