@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.5

package/dist/cli/npm/publish/npm-exec.js

@@ -0,0 +1,311 @@
+import { chmodChecked, resolveFileSystemAdapter } from "@vibesdotdev/filesystem";
+import { getRuntimePath } from "@vibesdotdev/paths";
+import { CapabilityError, CaughtFailureSchema, valueFreeFailure, } from "@vibesdotdev/kernel";
+import { z } from "zod/v4";
+import { runRuntimeCommand, } from "../../shared/runtime-execution.js";
+import { formatVibesRegistryPublishAuthFailure, normalizeRegistryUrl, } from "./registry-credentials.js";
+/** A failed npm command, carrying its arguments and (redacted) output. */
+export class NpmCommandError extends CapabilityError {
+    args;
+    status;
+    stdout;
+    stderr;
+    constructor(args, result) {
+        super(`npm ${args.join(" ")} failed with exit ${result.status ?? "unknown"}`, "UNAVAILABLE", { reason: "npm-command-failed" });
+        this.name = "NpmCommandError";
+        this.args = args;
+        this.status = result.status;
+        this.stdout = result.stdout;
+        this.stderr = result.stderr;
+    }
+}
+/** Replace every exact occurrence of each secret with `[REDACTED]`. */
+export function redactExactSecrets(value, secrets) {
+    return secrets
+        .filter((secret) => secret.length > 0)
+        .reduce((redacted, secret) => redacted.split(secret).join("[REDACTED]"), value);
+}
+/**
+ * Run npm through the runtime execution with secrets redacted from output;
+ * throws `NpmCommandError` on failure unless `allowFailure`.
+ */
+export async function runNpm(execution, args, options) {
+    const redactValues = options.redactValues ?? [];
+    const result = await runRuntimeCommand({
+        runtime: options.runtime,
+        execution,
+        command: "npm",
+        args,
+        cwd: options.cwd,
+        env: options.env,
+        onLine: options.quiet || !options.onLine
+            ? undefined
+            : (stream, line) => options.onLine(stream, redactExactSecrets(line, redactValues)),
+    });
+    const npmResult = {
+        status: result.code,
+        stdout: redactExactSecrets(result.stdout, redactValues),
+        stderr: redactExactSecrets(result.stderr, redactValues),
+    };
+    if (!options.allowFailure && npmResult.status !== 0) {
+        throw new NpmCommandError(args, npmResult);
+    }
+    return npmResult;
+}
+/** The npm output (plus any Registry auth hint) or message of a failure. */
+export function npmOutput(error) {
+    const parsed = CaughtFailureSchema.safeParse(error);
+    if (!parsed.success)
+        return "npm failure is unreadable.";
+    const failure = parsed.data;
+    if (failure instanceof NpmCommandError) {
+        const raw = `${failure.stdout}\n${failure.stderr}`;
+        const hint = formatVibesRegistryPublishAuthFailure(raw);
+        return hint ? `${raw}\n${hint}` : raw;
+    }
+    return failure instanceof Error ? failure.message : failure.description;
+}
+/** `npm pack --json` was JSON, but not an array whose first entry is an object. */
+function unreadablePackManifest() {
+    throw new CapabilityError("npm pack did not return a manifest.", "INVALID_INPUT", { reason: "npm-pack-manifest-unreadable" });
+}
+/**
+ * The pack entry's selected fields. Other fields, including a non-finite
+ * number JSON parses as `Infinity`, are not part of admission.
+ */
+const PackEntrySchema = z.object({
+    files: z.unknown().optional(),
+    integrity: z.unknown().optional(),
+});
+/** One pack file row's path. A row that is not `{ path: string }` is skipped. */
+const PackFilePathSchema = z.object({ path: z.string() });
+/** The file list and integrity from `npm pack --json` output. */
+export function parsePackManifest(stdout) {
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch (error) {
+        throw new CapabilityError("npm pack did not return valid JSON.", "INVALID_INPUT", {
+            reason: "npm-pack-manifest-unreadable",
+            cause: valueFreeFailure(CaughtFailureSchema.parse(error)),
+        });
+    }
+    if (!Array.isArray(parsed))
+        unreadablePackManifest();
+    const entry = PackEntrySchema.safeParse(parsed[0]);
+    if (!entry.success)
+        unreadablePackManifest();
+    const listed = entry.data.files;
+    const files = Array.isArray(listed)
+        ? listed.flatMap((file) => {
+            const row = PackFilePathSchema.safeParse(file);
+            return row.success ? [row.data.path] : [];
+        })
+        : [];
+    const integrity = z.string().safeParse(entry.data.integrity);
+    if (!integrity.success || !integrity.data.startsWith("sha512-")) {
+        throw new CapabilityError("npm pack returned no SHA-512 integrity", "INVALID_INPUT", { reason: "npm-pack-integrity-missing" });
+    }
+    return { files, integrity: integrity.data };
+}
+/** True when npm failed with a rate limit (E429). */
+export function isNpmRateLimitError(error) {
+    const parsed = CaughtFailureSchema.safeParse(error);
+    if (!parsed.success)
+        return false;
+    return /(?:\bE429\b|429 Too Many Requests|rate limited exceeded|rate limit)/i.test(npmOutput(parsed.data));
+}
+/**
+ * True when a publish attempt failed in transport or the registry marked its
+ * PUT refusal retryable: the same publish may run again. A retry whose first
+ * upload did land is refused as an existing version, which the caller skips.
+ */
+export function isTransientPublishError(error) {
+    const parsed = CaughtFailureSchema.safeParse(error);
+    if (!parsed.success)
+        return false;
+    const failure = parsed.data;
+    if (failure instanceof CapabilityError && failure.reason === "registry-put-failed") {
+        return failure.retryable === true;
+    }
+    return /\b(?:ECONNRESET|ETIMEDOUT|EPIPE|UND_ERR_SOCKET)\b|socket connection was closed unexpectedly/i.test(npmOutput(failure));
+}
+/** True when npm refused to publish over an existing version (E409). */
+export function isNpmExistingVersionError(error) {
+    const parsed = CaughtFailureSchema.safeParse(error);
+    if (!parsed.success)
+        return false;
+    return /(?:\bE409\b|cannot publish(?: .+)? over (?:an existing version|the previously published versions))/i.test(npmOutput(parsed.data));
+}
+/** The `name@version` npm spec. */
+export function versionSpec(name, version) {
+    return name.startsWith("@") ? `${name}@${version}` : `${name}@${version}`;
+}
+/** The file name `npm pack` gives `name@version`. */
+export function npmTarballFilename(name, version) {
+    return `${name.replace(/^@/, "").replaceAll("/", "-")}-${version}.tgz`;
+}
+/**
+ * npm's output with its `npm error` lines first and each repeated line kept
+ * once. npm prints its warnings before the error that failed the command, so
+ * a bounded message cut from the front would otherwise show only warnings.
+ */
+export function npmErrorLinesFirst(output) {
+    const lines = output.split("\n").map((line) => line.trimEnd()).filter(Boolean);
+    const isError = (line) => /^npm (?:error|ERR!)/.test(line);
+    const ordered = [...lines.filter(isError), ...lines.filter((line) => !isError(line))];
+    return [...new Set(ordered)].join("\n");
+}
+/**
+ * A redacted, whitespace-collapsed failure message of at most `limit`
+ * characters (500 by default).
+ */
+export function boundedCleanupFailureMessage(error, redactValues, limit = 500) {
+    const parsed = CaughtFailureSchema.safeParse(error);
+    if (!parsed.success)
+        return "unknown failure";
+    const failure = parsed.data;
+    const output = npmErrorLinesFirst(npmOutput(failure).trim());
+    const raw = output || (failure instanceof Error ? failure.message : failure.description);
+    const normalized = redactExactSecrets(raw, redactValues).replace(/\s+/g, " ").trim() ||
+        "unknown failure";
+    return normalized.length <= limit ? normalized : `${normalized.slice(0, limit - 1)}…`;
+}
+/**
+ * The installed-release-proof install failure, bounded and redacted. An npm
+ * resolution refusal (ERESOLVE) names the conflicting edge only after its
+ * preamble, so this keeps enough of npm's own output to name it.
+ */
+const RELEASE_CONSUMER_INSTALL_FAILURE_LIMIT = 4000;
+export function releaseConsumerNpmInstallFailure(error, redactValues) {
+    const parsed = CaughtFailureSchema.safeParse(error);
+    if (!parsed.success) {
+        return new Error("Installed release npm install failed: unknown failure");
+    }
+    return new Error(`Installed release npm install failed: ${boundedCleanupFailureMessage(parsed.data, redactValues, RELEASE_CONSUMER_INSTALL_FAILURE_LIMIT)}`, { cause: parsed.data });
+}
+/**
+ * npm treats the nearest directory with a package.json as the project root and
+ * stops walking ancestor `.npmrc` files there. Release temp dirs live under
+ * `<workspace>/.vibes/tmp/registry-release/`, so without this file npm loads
+ * the compose-root `//packages.vibes.dev/:_authToken=${VIBES_REGISTRY_TOKEN}`
+ * line, interpolates the env var this command deletes, and overrides the
+ * isolated lease with an empty Bearer.
+ */
+export const ISOLATED_NPM_PROJECT_MANIFEST = '{"private":true}\n';
+/** Pin `dir` as its own npm project so ancestor `.npmrc` files are not read. */
+export async function writeIsolatedNpmProjectManifest(runtime, dir) {
+    const paths = await getRuntimePath(runtime);
+    const files = await resolveFileSystemAdapter(runtime, { binding: false });
+    await files.writeFile(paths.join(dir, "package.json"), ISOLATED_NPM_PROJECT_MANIFEST);
+}
+/**
+ * bun walks ancestor `bunfig.toml` files independently of package.json.
+ * Release temps live under `<workspace>/.vibes/tmp/registry-release/`, so a
+ * throwaway consumer with `envMode:replace` (no VIBES_REGISTRY_TOKEN) still
+ * inherits the worktree `[install.scopes] token = "$VIBES_REGISTRY_TOKEN"`.
+ * Bun interpolates the empty env var and 404s restricted packuments — a leak
+ * that looks like a missing publish. Nearest bunfig wins: pin one with no
+ * scopes so that walk stops before the worktree file.
+ */
+export const ISOLATED_BUNFIG = "# Isolated release temp: do not inherit ancestor [install.scopes].\n[install]\n";
+/** Pin `dir` with a scope-free bunfig so ancestor bunfig files are not read. */
+export async function writeIsolatedBunfig(runtime, dir) {
+    const paths = await getRuntimePath(runtime);
+    const files = await resolveFileSystemAdapter(runtime, { binding: false });
+    await files.writeFile(paths.join(dir, "bunfig.toml"), ISOLATED_BUNFIG);
+}
+/** The single tarball in `dir`; throws unless exactly one exists. */
+export async function newestTarball(runtime, dir) {
+    const paths = await getRuntimePath(runtime);
+    const files = await resolveFileSystemAdapter(runtime, { binding: false });
+    const tarballs = (await files.list(dir))
+        .filter((entry) => entry.kind === "file" && entry.name.endsWith(".tgz"))
+        .map((entry) => entry.name)
+        .sort();
+    const [tarball] = tarballs;
+    if (tarballs.length !== 1 || tarball === undefined) {
+        throw new Error(`Expected one packed tarball in ${dir}, found ${tarballs.length}`);
+    }
+    return paths.join(dir, tarball);
+}
+/** The npmrc `_authToken` key for `registry`. */
+export function authConfigLine(registry) {
+    const url = new URL(registry);
+    const path = url.pathname.endsWith("/") ? url.pathname : `${url.pathname}/`;
+    return `//${url.host}${path}:_authToken`;
+}
+/** An npmrc for authenticated Registry reads; one token never spans origins. */
+export function registryReadNpmrc(options) {
+    const registries = [...new Set(options.registries.map(normalizeRegistryUrl))];
+    if (options.token && registries.length > 1) {
+        throw new Error("Authenticated Registry reads require one registry per run; one token is never shared across origins");
+    }
+    const lines = [
+        registries[0] ? `registry=${registries[0]}` : undefined,
+        options.scope && registries[0]
+            ? `${options.scope}:registry=${registries[0]}`
+            : undefined,
+        ...registries.map((registry) => options.token
+            ? `${authConfigLine(registry)}=${options.token}`
+            : undefined),
+    ].filter((line) => Boolean(line));
+    return `${lines.join("\n")}\n`;
+}
+/**
+ * The declared environment of an isolated npm run: its own home, cache and user
+ * config. The child composes its base from the runtime (`envMode: 'replace'`),
+ * so no host variable, npm config or Registry credential is inherited.
+ */
+export function isolatedNpmPackEnv(options) {
+    return {
+        HOME: options.homeDir,
+        USERPROFILE: options.homeDir,
+        NPM_CONFIG_CACHE: options.cacheDir,
+        NPM_CONFIG_USERCONFIG: options.npmrcPath,
+    };
+}
+/**
+ * An npmrc for publishing to `registry`, optionally scoped and authenticated.
+ */
+export function registryPublishNpmrc(options) {
+    const lines = [
+        `registry=${options.registry}`,
+        options.scope ? `${options.scope}:registry=${options.registry}` : undefined,
+        options.token
+            ? `${authConfigLine(options.registry)}=${options.token}`
+            : undefined,
+    ].filter((line) => Boolean(line));
+    return `${lines.join("\n")}\n`;
+}
+/**
+ * Write a mode-0600 publish npmrc (and the same file in `homeDir`, if given).
+ */
+export async function writeTempNpmrc(options) {
+    const npmrc = registryPublishNpmrc(options);
+    const paths = await getRuntimePath(options.runtime);
+    const files = await resolveFileSystemAdapter(options.runtime, { binding: false });
+    await files.writeFile(options.path, npmrc, { mode: 0o600 });
+    await chmodChecked(files, options.path, 0o600);
+    if (options.homeDir) {
+        await files.mkdir(options.homeDir, { recursive: true });
+        const homeNpmrc = paths.join(options.homeDir, ".npmrc");
+        await files.writeFile(homeNpmrc, npmrc, { mode: 0o600 });
+        await chmodChecked(files, homeNpmrc, 0o600);
+    }
+}
+/** The `npm publish` arguments for a tarball. */
+export function publishArgs(options) {
+    const args = ["publish", options.tarball, "--registry", options.registry];
+    if (options.access)
+        args.push("--access", options.access);
+    if (options.tag)
+        args.push("--tag", options.tag);
+    if (options.provenance)
+        args.push("--provenance");
+    if (options.dryRun)
+        args.push("--dry-run");
+    return args;
+}
+//# sourceMappingURL=npm-exec.js.map

package/dist/cli/npm/publish/npm-exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-exec.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/npm-exec.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAEL,iBAAiB,GAClB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EACL,qCAAqC,EACrC,oBAAoB,GACrB,MAAM,2BAA2B,CAAC;AASnC,0EAA0E;AAC1E,MAAM,OAAO,eAAgB,SAAQ,eAAe;IACzC,IAAI,CAAW;IACf,MAAM,CAAgB;IACtB,MAAM,CAAS;IACf,MAAM,CAAS;IAExB,YAAY,IAAc,EAAE,MAAoB;QAC9C,KAAK,CACH,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,qBAAqB,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,EACtE,aAAa,EACb,EAAE,MAAM,EAAE,oBAAoB,EAAE,CACjC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9B,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,kBAAkB,CAChC,KAAa,EACb,OAA0B;IAE1B,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;SACrC,MAAM,CACL,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,EAC/D,KAAK,CACN,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,SAA2B,EAC3B,IAAc,EACd,OASC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,OAAO,EAAE,KAAK;QACd,IAAI;QACJ,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EACJ,OAAO,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM;YAC9B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CACf,OAAO,CAAC,MAAO,CAAC,MAAM,EAAE,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;KACxE,CAAC,CAAC;IACH,MAAM,SAAS,GAAG;QAChB,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC;QACvD,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC;KACxD,CAAC;IACF,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,eAAe,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,4BAA4B,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,IAAI,OAAO,YAAY,eAAe,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,qCAAqC,CAAC,GAAG,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;AAC1E,CAAC;AAED,mFAAmF;AACnF,SAAS,sBAAsB;IAC7B,MAAM,IAAI,eAAe,CACvB,qCAAqC,EACrC,eAAe,EACf,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAC3C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE1D,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,eAAe,CACvB,qCAAqC,EACrC,eAAe,EACf;YACE,MAAM,EAAE,8BAA8B;YACtC,KAAK,EAAE,gBAAgB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;SAC1D,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,sBAAsB,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,sBAAsB,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IAChC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,MAAM,GAAG,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,CAAC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7D,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,eAAe,CACvB,wCAAwC,EACxC,eAAe,EACf,EAAE,MAAM,EAAE,4BAA4B,EAAE,CACzC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAC9C,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,sEAAsE,CAAC,IAAI,CAChF,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,IAAI,OAAO,YAAY,eAAe,IAAI,OAAO,CAAC,MAAM,KAAK,qBAAqB,EAAE,CAAC;QACnF,OAAO,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,8FAA8F,CAAC,IAAI,CACxG,SAAS,CAAC,OAAO,CAAC,CACnB,CAAC;AACJ,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAClC,OAAO,qGAAqG,CAAC,IAAI,CAC/G,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,mCAAmC;AACnC,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe;IACvD,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC;AAC5E,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAAe;IAC9D,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAAc,EACd,YAA+B,EAC/B,KAAK,GAAG,GAAG;IAEX,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,iBAAiB,CAAC;IAC9C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,MAAM,GAAG,GACP,MAAM,IAAI,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC/E,MAAM,UAAU,GACd,kBAAkB,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;QACjE,iBAAiB,CAAC;IACpB,OAAO,UAAU,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,sCAAsC,GAAG,IAAI,CAAC;AACpD,MAAM,UAAU,gCAAgC,CAC9C,KAAc,EACd,YAA+B;IAE/B,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,KAAK,CACd,yCAAyC,4BAA4B,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,sCAAsC,CAAC,EAAE,EAC1I,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,oBAAoB,CAAC;AAElE,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAwB,EACxB,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,6BAA6B,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAC1B,iFAAiF,CAAC;AAEpF,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAwB,EACxB,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,eAAe,CAAC,CAAC;AACzE,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAwB,EACxB,GAAW;IAEX,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;SACrC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACvE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;SAC1B,IAAI,EAAE,CAAC;IACV,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,WAAW,QAAQ,CAAC,MAAM,EAAE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,GAAG,CAAC;IAC5E,OAAO,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,aAAa,CAAC;AAC3C,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,OAIjC;IACC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG;QACZ,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;QACvD,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC;YAC5B,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,aAAa,UAAU,CAAC,CAAC,CAAC,EAAE;YAC9C,CAAC,CAAC,SAAS;QACb,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC7B,OAAO,CAAC,KAAK;YACX,CAAC,CAAC,GAAG,cAAc,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE;YAChD,CAAC,CAAC,SAAS,CACd;KACF,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAIlC;IACC,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,WAAW,EAAE,OAAO,CAAC,OAAO;QAC5B,gBAAgB,EAAE,OAAO,CAAC,QAAQ;QAClC,qBAAqB,EAAE,OAAO,CAAC,SAAS;KACzC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAIpC;IACC,MAAM,KAAK,GAAG;QACZ,YAAY,OAAO,CAAC,QAAQ,EAAE;QAC9B,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,aAAa,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;QAC3E,OAAO,CAAC,KAAK;YACX,CAAC,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE;YACxD,CAAC,CAAC,SAAS;KACd,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAOpC;IACC,MAAM,KAAK,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,MAAM,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACzD,MAAM,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,WAAW,CAAC,OAO3B;IACC,MAAM,IAAI,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,UAAU;QAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAClD,IAAI,OAAO,CAAC,MAAM;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/npm/publish/package-artifact.d.ts

@@ -0,0 +1,107 @@
+/**
+ * Package artifact preparation: staging a package with its canonical publish
+ * manifest at its assigned version, building it, packing it canonically, and
+ * verifying the packed file list and export targets.
+ */
+import type { ChildEnvRuntime } from "../../shared/runtime-execution.ts";
+import type { UIContext } from "@vibesdotdev/cli/providers";
+import type { RuntimeExecution } from "@vibesdotdev/kernel/execution";
+import { type ReleaseConsumerSourceRegistry } from "./proof-registry.ts";
+import type { PackageJson, RegistryWorkspaceProvenance, SealedPublishMetadata } from "./types.ts";
+/**
+ * The one constructor for sealed publish metadata. The seal and the live
+ * publish both build through it, so the sealed-metadata comparison sees the
+ * same key order: access and tag sit between registry and provenance, and are
+ * omitted when absent.
+ */
+export declare function sealedPublishMetadata(parts: {
+    registry: string;
+    access?: string;
+    tag?: string;
+    provenance: RegistryWorkspaceProvenance;
+}): SealedPublishMetadata;
+/**
+ * Copy a package into `stageDir` and write its canonical publish manifest.
+ * `version` stamps the assigned release version into the STAGED manifest only;
+ * the source manifest is never modified. Staging is owned by
+ * `@vibesdotdev/registry`, the same owner Forge CI packs through.
+ */
+export declare function stagePackageForPublish(options: {
+    /** The invoking command's runtime: staging copies through its host filesystem adapter. */
+    runtime: ChildEnvRuntime;
+    packageDir: string;
+    stageDir: string;
+    bunPackWorkspaceRoot?: string;
+    versions: Map<string, string>;
+    version?: string;
+    gitHead?: string;
+    provenance?: RegistryWorkspaceProvenance;
+}): Promise<void>;
+/**
+ * Verify a packed file list against the manifest: every export/main target is
+ * packed, no source, test or TypeScript specifier ships, and declared files staged.
+ */
+export declare function verifyPackedPackage(pkg: Pick<PackageJson, "name" | "version" | "main" | "types" | "exports" | "files">, files: string[], readFileContent: (file: string) => Promise<string>, sourceDeclaration?: {
+    /** The package's own (pre-staging) `package.json` `files` declaration. */
+    files: string[] | undefined;
+    /** Whether an undeclared-glob-free entry from that declaration actually staged. */
+    entryStaged: (entry: string) => Promise<boolean> | boolean;
+}): Promise<{
+    verifiedFiles: number;
+    verifiedExports: number;
+}>;
+/**
+ * Build the package when it has a build script, then prove its built main loads
+ * under its declared runtime.
+ */
+export declare function buildAndVerifyLoadable(options: {
+    pkg: PackageJson & {
+        name: string;
+        version: string;
+    };
+    packageDir: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+    quiet: boolean;
+    ui: Pick<UIContext, "info" | "log">;
+    build?: boolean;
+}): Promise<void>;
+/**
+ * Build, stage (stamping `version` into the staged manifest), pack, verify and
+ * canonically gzip one package under `tempRoot`. Returns the tarball, its
+ * verification counts, the copy retained in `artifactDir` (if any) and the
+ * publish metadata read back from the staged manifest.
+ */
+export declare function sealPackageArtifact(options: {
+    pkg: PackageJson & {
+        name: string;
+        version: string;
+    };
+    version: string;
+    packageDir: string;
+    tempRoot: string;
+    versions: Map<string, string>;
+    gitHead: string;
+    workspaceProvenance: RegistryWorkspaceProvenance;
+    registry?: string;
+    tag?: string;
+    artifactDir?: string;
+    build?: boolean;
+    npmEnv: Record<string, string>;
+    sourceRegistry?: ReleaseConsumerSourceRegistry;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+    quiet: boolean;
+    ui: Pick<UIContext, "info" | "log">;
+}): Promise<{
+    tarball: string;
+    retainedTarball?: string;
+    verification: {
+        verifiedFiles: number;
+        verifiedExports: number;
+    };
+    publishMetadata: SealedPublishMetadata;
+}>;
+//# sourceMappingURL=package-artifact.d.ts.map

package/dist/cli/npm/publish/package-artifact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-artifact.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/package-artifact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAW5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAQtE,OAAO,EAA6B,KAAK,6BAA6B,EAAE,MAAM,qBAAqB,CAAC;AAIpG,OAAO,KAAK,EACV,WAAW,EACX,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAEpB;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,2BAA2B,CAAC;CACzC,GAAG,qBAAqB,CASxB;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,0FAA0F;IAC1F,OAAO,EAAE,eAAe,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,2BAA2B,CAAC;CAC1C,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhB;AA0JD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,IAAI,CACP,WAAW,EACX,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,CAC5D,EACD,KAAK,EAAE,MAAM,EAAE,EACf,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,EAClD,iBAAiB,CAAC,EAAE;IAClB,0EAA0E;IAC1E,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5B,mFAAmF;IACnF,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC;CAC5D,GACA,OAAO,CAAC;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC,CAiF7D;AAED;;;GAGG;AACH,wBAAsB,sBAAsB,CAAC,OAAO,EAAE;IACpD,GAAG,EAAE,WAAW,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiDhB;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,OAAO,EAAE;IACjD,GAAG,EAAE,WAAW,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,mBAAmB,EAAE,2BAA2B,CAAC;IACjD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,cAAc,CAAC,EAAE,6BAA6B,CAAC;IAC/C,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;CACrC,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,CAAA;KAAE,CAAC;IACjE,eAAe,EAAE,qBAAqB,CAAC;CACxC,CAAC,CAiHD"}