@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.5

package/dist/cli/npm/publish/platform-registry.js

@@ -0,0 +1,324 @@
+/**
+ * Platform Registry API client: authenticated requests to the platform that
+ * owns a registry, error decoding, retry-after handling and lease polling.
+ */
+import {} from "@vibesdotdev/infra-core/service";
+import { normalizeRegistryUrl } from "./registry-credentials.js";
+import { infraDeployLogger } from "../../../logger.js";
+import { VIBES_CI_REGISTRY_AUTHORITY_KEY } from '@vibesdotdev/registry/publish-authentication';
+import { getVibesClient } from "@vibesdotdev/kernel/client";
+import { resolveVibesAppOrigin, resolveVibesEnvironment, } from "@vibesdotdev/config/environment/resolve-app-origin";
+import { CapabilityError, settle, valueFreeFailure, } from "@vibesdotdev/kernel";
+import { isJsonObject, JsonValueSchema, } from "@vibesdotdev/kernel/schemas/json";
+import { z } from "zod/v4";
+/** Only confirmed absence permits ordinary human-session authentication. */
+async function ciPublishAuthority(runtime) {
+    const credential = await runtime.resolveCredential({ source: 'secret', key: VIBES_CI_REGISTRY_AUTHORITY_KEY });
+    if (credential.ok)
+        return credential.value;
+    if (credential.error.code === 'NOT_FOUND' && credential.error.reason === 'credential-not-set')
+        return null;
+    throw credential.error;
+}
+/** A CI authority cannot be sent to a generic Registry or Auth endpoint. */
+function ciRegistryPath(path, method) {
+    if ((method === 'POST' && (path === '/api/registry/package-grants' || path === '/api/registry/publish-leases' ||
+        path === '/api/registry/publish-leases/preflight')) || (method === 'DELETE' && path === '/api/registry/tokens')) {
+        return path.replace('/api/registry/', '/api/registry/ci/');
+    }
+    throw new CapabilityError('CI publish authority cannot authorize this Registry operation.', 'PERMISSION_DENIED', {
+        reason: 'ci-registry-operation-forbidden'
+    });
+}
+const FiniteNumberSchema = z.number().finite();
+const PositiveFiniteSchema = FiniteNumberSchema.gt(0);
+/** A path segment the platform named on a validation issue: text or an index. */
+function issuePath(path) {
+    if (path === undefined || !Array.isArray(path))
+        return "";
+    const parts = [];
+    for (const part of path) {
+        const text = z.string().safeParse(part);
+        if (text.success) {
+            parts.push(text.data);
+            continue;
+        }
+        const index = FiniteNumberSchema.safeParse(part);
+        if (index.success)
+            parts.push(`${index.data}`);
+    }
+    return parts.join(".");
+}
+/** One validation issue, or absence when the entry has no usable message. */
+function registryIssueText(issue) {
+    if (!isJsonObject(issue))
+        return undefined;
+    const message = z.string().safeParse(issue.message);
+    if (!message.success || message.data.trim().length === 0)
+        return undefined;
+    const path = issuePath(issue.path);
+    return path.length > 0 ? `${path}: ${message.data}` : message.data;
+}
+/**
+ * The nested `error.message` string, including an empty one.
+ * A non-object error is absence so the caller can try the next field.
+ */
+function registryErrorObjectMessage(error) {
+    if (error === undefined || !isJsonObject(error))
+        return undefined;
+    const message = z.string().safeParse(error.message);
+    if (!message.success)
+        return undefined;
+    return message.data;
+}
+/** The human error message of a platform Registry error payload. */
+export function registryErrorMessage(payload) {
+    if (!isJsonObject(payload))
+        return "unknown error";
+    const errorText = z.string().safeParse(payload.error);
+    if (errorText.success && errorText.data.trim().length > 0)
+        return errorText.data;
+    const nested = registryErrorObjectMessage(payload.error);
+    if (nested !== undefined)
+        return nested;
+    if (Array.isArray(payload.issues)) {
+        const issues = [];
+        for (const issue of payload.issues) {
+            const text = registryIssueText(issue);
+            if (text !== undefined)
+                issues.push(text);
+        }
+        if (issues.length > 0) {
+            const prefix = z.string().safeParse(payload.message);
+            if (prefix.success && prefix.data.trim().length > 0) {
+                return `${prefix.data}: ${issues.join("; ")}`;
+            }
+            return issues.join("; ");
+        }
+    }
+    const message = z.string().safeParse(payload.message);
+    if (message.success && message.data.trim().length > 0)
+        return message.data;
+    return "unknown error";
+}
+function registryRetryAfterSeconds(headerValue, payload) {
+    if (headerValue !== null && headerValue.length > 0) {
+        const fromHeader = PositiveFiniteSchema.safeParse(Number(headerValue));
+        if (fromHeader.success)
+            return fromHeader.data;
+    }
+    if (!isJsonObject(payload))
+        return undefined;
+    const fromPayload = PositiveFiniteSchema.safeParse(payload.retryAfterSeconds);
+    if (fromPayload.success)
+        return fromPayload.data;
+    return undefined;
+}
+/**
+ * How long to wait for the platform to answer a lease request before failing
+ * with a message that names the origin. Undici's default header timeout is 300s
+ * and produces a bare "The operation timed out." with no URL in it, which is
+ * indistinguishable from a hung publish: the release path sat silent for five
+ * minutes and then said nothing useful about where it had been pointed.
+ */
+const PLATFORM_REGISTRY_REQUEST_TIMEOUT_MS_DEFAULT = 30_000;
+/**
+ * Operators need to widen this while diagnosing a slow authority: the default is
+ * tuned for "the platform should answer 202 immediately", and when it does not,
+ * the only way to learn whether it answers LATE or never is to be able to wait.
+ */
+function platformRegistryRequestTimeoutMs(runtime) {
+    // RC04: this knob becomes a declared config key when the config mechanism lands.
+    const override = Number(runtime.getEnv("VIBES_REGISTRY_AUTHORITY_TIMEOUT_MS") ?? "");
+    return Number.isFinite(override) && override > 0
+        ? override
+        : PLATFORM_REGISTRY_REQUEST_TIMEOUT_MS_DEFAULT;
+}
+/**
+ * The platform that mints a publish lease must belong to the SAME environment
+ * as the registry being published to. Resolving 'platform' from the CLI's
+ * ambient environment is wrong whenever they differ — a CLI sitting in `local`
+ * would ask `platform.vibes.local` to authorize a publish to the production
+ * registry — and `resolve-app-origin` documents that ambient selection falls
+ * through to a NODE_ENV default outside the browser, so the CLI cannot be
+ * trusted to be in the right tier. Deriving the environment FROM the target
+ * registry origin removes the guess.
+ */
+export async function resolvePlatformOriginForRegistry(runtime, registry, resolvers = {}) {
+    const environmentForOrigin = resolvers.environmentForOrigin ??
+        ((origin) => resolveVibesEnvironment({ origin, fallbackToActive: false }, runtime));
+    const ambientPlatformOrigin = resolvers.ambientPlatformOrigin ??
+        (() => resolveVibesAppOrigin("platform", runtime));
+    if (registry) {
+        // An overridden service origin need not appear in config/environment's
+        // ownership map. Keep the service owner's selected tier across this hop.
+        if (!resolvers.environmentForOrigin && runtime.hasKind("infra/service")) {
+            const service = await runtime.query("infra/service")
+                .withId("registry").select();
+            if (service) {
+                const target = await service.impl.target();
+                if (normalizeRegistryUrl(registry) === normalizeRegistryUrl(target.origin)) {
+                    const owning = await resolveVibesEnvironment({
+                        environmentId: target.environment, fallbackToActive: false,
+                    }, runtime);
+                    const platform = owning?.apps.platform;
+                    if (!platform)
+                        throw new CapabilityError("The Registry service environment has no Platform origin.", "UNAVAILABLE", { reason: "registry-platform-unmapped" });
+                    return platform;
+                }
+            }
+        }
+        const owning = await environmentForOrigin(registry);
+        const origin = owning?.apps?.platform;
+        if (origin !== undefined && origin.length > 0)
+            return origin;
+    }
+    return await ambientPlatformOrigin();
+}
+/**
+ * An authenticated request to the platform that owns `registry`, status preserved.
+ */
+export async function platformRegistryRequestRaw(runtime, path, method, body, registry, signal) {
+    const ciAuthority = await ciPublishAuthority(runtime);
+    const [origin, jwt] = await Promise.all([
+        resolvePlatformOriginForRegistry(runtime, registry),
+        ciAuthority === null
+            ? getVibesClient("auth", runtime).then(auth => auth.resolveAppJwt())
+            : Promise.resolve(ciAuthority),
+    ]);
+    if (!origin || !jwt)
+        throw new CapabilityError("Vibes authentication is required to publish. Run `vibes auth login`.", "AUTH_REQUIRED", { reason: "not-signed-in" });
+    const url = `${origin.replace(/\/$/, "")}${ciAuthority === null ? path : ciRegistryPath(path, method)}`;
+    const timeoutMs = platformRegistryRequestTimeoutMs(runtime);
+    const requestInit = {
+        method,
+        headers: {
+            authorization: `Bearer ${jwt}`,
+            "content-type": "application/json",
+            accept: "application/json",
+        },
+        body: JSON.stringify(body),
+    };
+    // One bounded retry covers a stale pooled connection after a long build.
+    // Credentials remain in the request object only; no debug path may write or
+    // print an Authorization header.
+    const attempt = () => {
+        const timeout = AbortSignal.timeout(timeoutMs);
+        const requestSignal = signal ? AbortSignal.any([timeout, signal]) : timeout;
+        return fetch(url, { ...requestInit, signal: requestSignal });
+    };
+    const first = await settle(attempt);
+    const settled = first.ok || signal?.aborted ? first : await settle(attempt);
+    if (!settled.ok) {
+        if (signal?.aborted) {
+            throw signal.reason ?? new CapabilityError("Platform Registry request was cancelled.", "CANCELLED", { reason: "request-aborted" });
+        }
+        throw new CapabilityError(`Managed Registry publish lease request to ${url} failed after ${timeoutMs}ms.`, "UNAVAILABLE", { reason: "registry-request-failed", cause: valueFreeFailure(settled.cause) });
+    }
+    const response = settled.value;
+    const parsedJson = await settle(() => response.json());
+    let payload = null;
+    if (!parsedJson.ok) {
+        // A non-JSON body is a valid answer with no payload.
+        infraDeployLogger(runtime).warn("Registry authority response body was not JSON", {
+            url,
+            status: response.status,
+            reason: "registry-body-not-json",
+        });
+    }
+    else {
+        const admitted = JsonValueSchema.safeParse(parsedJson.value);
+        if (admitted.success)
+            payload = admitted.data;
+        else {
+            infraDeployLogger(runtime).warn("Registry authority response body was not JSON", {
+                url,
+                status: response.status,
+                reason: "registry-body-not-json",
+            });
+        }
+    }
+    const answered = {
+        status: response.status,
+        ok: response.ok,
+        payload,
+    };
+    const retryAfterSeconds = registryRetryAfterSeconds(response.headers.get("retry-after"), payload);
+    if (retryAfterSeconds !== undefined)
+        answered.retryAfterSeconds = retryAfterSeconds;
+    return answered;
+}
+/**
+ * An authenticated platform Registry request that throws on a non-2xx response.
+ */
+export async function platformRegistryRequest(runtime, path, method, body, registry, signal) {
+    const response = await platformRegistryRequestRaw(runtime, path, method, body, registry, signal);
+    if (!response.ok) {
+        throw new Error(`Registry authority request failed (${response.status}): ${registryErrorMessage(response.payload)}`);
+    }
+    return response.payload;
+}
+/** The Platform Registry client of `runtime`, the runtime the release command was handed. */
+export function createPlatformRegistryClient(runtime, signal) {
+    return {
+        raw: (path, method, body, registry, requestSignal) => platformRegistryRequestRaw(runtime, path, method, body, registry, requestSignal ?? signal),
+        request: (path, method, body, registry, requestSignal) => platformRegistryRequest(runtime, path, method, body, registry, requestSignal ?? signal),
+        hasSession: async () => (await ciPublishAuthority(runtime)) !== null || Boolean(await (await getVibesClient("auth", runtime)).resolveAppJwt()),
+        sessionJwt: async () => (await ciPublishAuthority(runtime)) === null ? (await getVibesClient("auth", runtime)).resolveAppJwt() : null,
+        freshSessionJwt: async () => (await ciPublishAuthority(runtime)) === null ? (await getVibesClient("auth", runtime)).resolveFreshAppJwt() : null,
+    };
+}
+/** Deadline for a Forge release build started while minting a publish lease. */
+export const MANAGED_LEASE_POLL_DEADLINE_MS = 20 * 60_000;
+/** Default delay when the Platform sends no Retry-After. */
+export const MANAGED_LEASE_POLL_INTERVAL_MS = 15_000;
+export class ManagedPublishLeasePendingError extends CapabilityError {
+    retryAfterMs;
+    constructor(retryAfterMs) {
+        super("The Registry release build is still running.", "UNAVAILABLE", {
+            reason: "managed-publish-lease-pending",
+            retryable: true,
+            details: { retryAfterMs },
+        });
+        this.retryAfterMs = retryAfterMs;
+        this.name = "ManagedPublishLeasePendingError";
+    }
+}
+/**
+ * Make one idempotent lease request. A pending build is returned to the
+ * Workers job, which schedules the next request with the adapter's delay.
+ */
+export async function pollManagedPublishLease(options) {
+    const response = await options.request();
+    if (response.status === 202) {
+        const retryAfterMs = response.retryAfterSeconds
+            ? response.retryAfterSeconds * 1000
+            : options.defaultRetryAfterMs ?? MANAGED_LEASE_POLL_INTERVAL_MS;
+        if (options.now() + retryAfterMs > options.deadlineAt) {
+            throw new Error("Registry release build did not complete before the publish deadline; " +
+                "the Forge build may still be running — retry the publish to resume polling.");
+        }
+        throw new ManagedPublishLeasePendingError(retryAfterMs);
+    }
+    if (!response.ok) {
+        throw new Error(`Registry authority request failed (${response.status}): ${registryErrorMessage(response.payload)}`);
+    }
+    const payload = z
+        .object({
+        token: z.string().min(1),
+        result: z.object({
+            id: z.string().min(1),
+            expiresAt: z.string().min(1),
+        }),
+    })
+        .safeParse(response.payload);
+    if (!payload.success) {
+        throw new Error("Registry publish lease response was incomplete");
+    }
+    return {
+        token: payload.data.token,
+        id: payload.data.result.id,
+        expiresAt: payload.data.result.expiresAt,
+    };
+}
+//# sourceMappingURL=platform-registry.js.map

package/dist/cli/npm/publish/platform-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-registry.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/platform-registry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAsD,MAAM,iCAAiC,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,+BAA+B,EAAE,MAAM,8CAA8C,CAAC;AAE/F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EACL,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,oDAAoD,CAAC;AAC5D,OAAO,EACL,eAAe,EACf,MAAM,EACN,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,YAAY,EACZ,eAAe,GAEhB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAK3B,4EAA4E;AAC5E,KAAK,UAAU,kBAAkB,CAAC,OAAgC;IAChE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,+BAA+B,EAAE,CAAC,CAAC;IAC/G,IAAI,UAAU,CAAC,EAAE;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC3C,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,KAAK,oBAAoB;QAAE,OAAO,IAAI,CAAC;IAC3G,MAAM,UAAU,CAAC,KAAK,CAAC;AACzB,CAAC;AAED,4EAA4E;AAC5E,SAAS,cAAc,CAAC,IAAY,EAAE,MAAyB;IAC7D,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,IAAI,KAAK,8BAA8B,IAAI,IAAI,KAAK,8BAA8B;QACzG,IAAI,KAAK,wCAAwC,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,KAAK,sBAAsB,CAAC,EAAE,CAAC;QACpH,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,eAAe,CAAC,gEAAgE,EAAE,mBAAmB,EAAE;QAC/G,MAAM,EAAE,iCAAiC;KAC1C,CAAC,CAAC;AACL,CAAC;AAcD,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC;AAC/C,MAAM,oBAAoB,GAAG,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAEtD,iFAAiF;AACjF,SAAS,SAAS,CAAC,IAA2B;IAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,6EAA6E;AAC7E,SAAS,iBAAiB,CAAC,KAAgB;IACzC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3E,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,SAAS,0BAA0B,CAAC,KAA4B;IAC9D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,oBAAoB,CAAC,OAAkB;IACrD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,eAAe,CAAC;IACnD,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtD,IAAI,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC;IACjF,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YACrD,IAAI,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpD,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAChD,CAAC;YACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IAC3E,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,yBAAyB,CAChC,WAA0B,EAC1B,OAAkB;IAElB,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QACvE,IAAI,UAAU,CAAC,OAAO;YAAE,OAAO,UAAU,CAAC,IAAI,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,WAAW,GAAG,oBAAoB,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9E,IAAI,WAAW,CAAC,OAAO;QAAE,OAAO,WAAW,CAAC,IAAI,CAAC;IACjD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,4CAA4C,GAAG,MAAM,CAAC;AAE5D;;;;GAIG;AACH,SAAS,gCAAgC,CAAC,OAAqC;IAC7E,iFAAiF;IACjF,MAAM,QAAQ,GAAG,MAAM,CACrB,OAAO,CAAC,MAAM,CAAC,qCAAqC,CAAC,IAAI,EAAE,CAC5D,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC;QAC9C,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,4CAA4C,CAAC;AACnD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAgC,EAChC,QAA4B,EAC5B,YAKI,EAAE;IAEN,MAAM,oBAAoB,GACxB,SAAS,CAAC,oBAAoB;QAC9B,CAAC,CAAC,MAAc,EAAE,EAAE,CAClB,uBAAuB,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3E,MAAM,qBAAqB,GACzB,SAAS,CAAC,qBAAqB;QAC/B,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,QAAQ,EAAE,CAAC;QACb,uEAAuE;QACvE,yEAAyE;QACzE,IAAI,CAAC,SAAS,CAAC,oBAAoB,IAAI,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;YACxE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,KAAK,CAA2C,eAAe,CAAC;iBAC3F,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,CAAC;YAC/B,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC3C,IAAI,oBAAoB,CAAC,QAAQ,CAAC,KAAK,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC3E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC;wBAC3C,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,gBAAgB,EAAE,KAAK;qBAC3D,EAAE,OAAO,CAAC,CAAC;oBACZ,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC;oBACvC,IAAI,CAAC,QAAQ;wBAAE,MAAM,IAAI,eAAe,CACtC,0DAA0D,EAAE,aAAa,EACzE,EAAE,MAAM,EAAE,4BAA4B,EAAE,CACzC,CAAC;oBACF,OAAO,QAAQ,CAAC;gBAClB,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC;QACtC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,qBAAqB,EAAE,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgC,EAChC,IAAY,EACZ,MAAyB,EACzB,IAAe,EACf,QAAiB,EACjB,MAAoB;IAEpB,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtC,gCAAgC,CAAC,OAAO,EAAE,QAAQ,CAAC;QACnD,WAAW,KAAK,IAAI;YAClB,CAAC,CAAC,cAAc,CAAgB,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACnF,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;KACjC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QACjB,MAAM,IAAI,eAAe,CACvB,sEAAsE,EACtE,eAAe,EACf,EAAE,MAAM,EAAE,eAAe,EAAE,CAC5B,CAAC;IACJ,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;IACxG,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAgB;QAC/B,MAAM;QACN,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,GAAG,EAAE;YAC9B,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC;IACF,yEAAyE;IACzE,4EAA4E;IAC5E,iCAAiC;IACjC,MAAM,OAAO,GAAG,GAAG,EAAE;QACnB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,aAAa,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5E,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;IAC/D,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,EAAE,IAAI,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,CAAC,MAAM,IAAI,IAAI,eAAe,CACxC,0CAA0C,EAC1C,WAAW,EACX,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAC9B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,6CAA6C,GAAG,iBAAiB,SAAS,KAAK,EAC/E,aAAa,EACb,EAAE,MAAM,EAAE,yBAAyB,EAAE,KAAK,EAAE,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,OAAO,GAAc,IAAI,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,qDAAqD;QACrD,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,+CAA+C,EAAE;YAC/E,GAAG;YACH,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,MAAM,EAAE,wBAAwB;SACjC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,QAAQ,CAAC,OAAO;YAAE,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC;aACzC,CAAC;YACJ,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,+CAA+C,EAAE;gBAC/E,GAAG;gBACH,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,MAAM,EAAE,wBAAwB;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAA6B;QACzC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,EAAE,EAAE,QAAQ,CAAC,EAAE;QACf,OAAO;KACR,CAAC;IACF,MAAM,iBAAiB,GAAG,yBAAyB,CACjD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EACnC,OAAO,CACR,CAAC;IACF,IAAI,iBAAiB,KAAK,SAAS;QAAE,QAAQ,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IACpF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,OAAgC,EAChC,IAAY,EACZ,MAAyB,EACzB,IAAe,EACf,QAAiB,EACjB,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,0BAA0B,CAC/C,OAAO,EACP,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,QAAQ,EACR,MAAM,CACP,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,MAAM,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAqBD,6FAA6F;AAC7F,MAAM,UAAU,4BAA4B,CAC1C,OAAgC,EAChC,MAAoB;IAEpB,OAAO;QACL,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CACnD,0BAA0B,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,IAAI,MAAM,CAAC;QAC5F,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,EAAE,CACvD,uBAAuB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,aAAa,IAAI,MAAM,CAAC;QACzF,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,cAAc,CAAgB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC7J,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,CAAgB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,IAAI;QACpJ,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,CAAgB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,IAAI;KAC/J,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,MAAM,CAAC;AAC1D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,8BAA8B,GAAG,MAAM,CAAC;AAErD,MAAM,OAAO,+BAAgC,SAAQ,eAAe;IAC7C;IAArB,YAAqB,YAAoB;QACvC,KAAK,CAAC,8CAA8C,EAAE,aAAa,EAAE;YACnE,MAAM,EAAE,+BAA+B;YACvC,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE,YAAY,EAAE;SAC1B,CAAC,CAAC;QALgB,iBAAY,GAAZ,YAAY,CAAQ;QAMvC,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAK7C;IACC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC,iBAAiB;YAC7C,CAAC,CAAC,QAAQ,CAAC,iBAAiB,GAAG,IAAI;YACnC,CAAC,CAAC,OAAO,CAAC,mBAAmB,IAAI,8BAA8B,CAAC;QAClE,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CACb,uEAAuE;gBACrE,6EAA6E,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,+BAA+B,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,sCAAsC,QAAQ,CAAC,MAAM,MAAM,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,CAAC;SACd,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;YACf,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;SAC7B,CAAC;KACH,CAAC;SACD,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK;QACzB,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QAC1B,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS;KACzC,CAAC;AACJ,CAAC"}

package/dist/cli/npm/publish/proof-external-closure.d.ts

@@ -0,0 +1,139 @@
+/**
+ * The external closure of an installed release proof: every non-release
+ * package the release needs, fetched once from its source registry (or taken
+ * from a preflight-sealed workspace input), with its private-registry
+ * dependency graph. Public npm transitive edges stay unsealed; the proof
+ * registry proxies them upstream at install time.
+ */
+import type { ChildEnvRuntime } from "../../shared/runtime-execution.ts";
+import type { RegistryReleaseExternalRequirement, RegistryReleaseSetPlan, RegistryReleaseWorkspacePackage } from "@vibesdotdev/registry";
+import type { RuntimeExecution } from "@vibesdotdev/kernel/execution";
+import type { JsonValue } from "@vibesdotdev/kernel/schemas/json";
+import { type SealedWorkspaceRegistryInput } from "./external-requirements.ts";
+import type { ProofSourceCredentials } from "./proof-source-credentials.ts";
+import { type ReleaseConsumerSourceRegistry } from "./proof-registry.ts";
+import type { PackageJson } from "./types.ts";
+/** A sealed release artifact and its manifest. */
+export type ReleaseProofArtifact = {
+    manifest: PackageJson & {
+        name: string;
+        version: string;
+    };
+    tarball: string;
+};
+/** A dependency edge from a proof node to an acquired external node. */
+export type ExternalProofEdge = {
+    key: string;
+    packageName: string;
+    selector: string;
+    dependencySelector: string;
+    optionalPeer?: boolean;
+};
+/** One fetched external artifact, keyed by name@version#registry-digest. */
+export type ExternalProofNode = {
+    key: string;
+    registry: string;
+    manifest: PackageJson & {
+        name: string;
+        version: string;
+    };
+    dependencies: Map<string, ExternalProofEdge>;
+    optionalDependencies: Map<string, ExternalProofEdge>;
+    peerDependencies: Map<string, ExternalProofEdge>;
+    tarball: string;
+    artifactSha256: string;
+};
+/** An optional peer a release artifact declares that the release does not satisfy. */
+export type InternalOptionalPeerRequirement = {
+    artifact: ReleaseProofArtifact;
+    name: string;
+    selector: string;
+};
+/** Everything the proof acquired outside the release set. */
+export type ExternalProofClosure = {
+    nodes: Map<string, ExternalProofNode>;
+    /** Nodes acquired for the plan's direct external requirements. */
+    rootKeys: Set<string>;
+    /** Requirements whose resolution must be one of the acquired nodes. */
+    acquiredRequirements: Set<RegistryReleaseExternalRequirement>;
+    /** Optional-peer edges of release artifacts, by release package name. */
+    internalOptionalPeerEdges: Map<string, Map<string, ExternalProofEdge>>;
+};
+/**
+ * Whether an optional coordinate's fetch failed only because it is absent: the
+ * package is not in the registry, or no published version satisfies the
+ * selector yet (an optional peer on a release line whose own batch has not
+ * published). Either way a consumer installs without it.
+ */
+export declare function optionalCoordinateAbsent(output: string): boolean;
+/** A public-npm edge of a sealed node the closure left unsealed (the upstream proxy serves it). */
+export interface SkippedPublicEdge {
+    from: string;
+    name: string;
+    selector: string;
+    effectiveSelector: string;
+    packageName: string;
+    optional: boolean;
+}
+/**
+ * The skipped public edges the proof registry would break. Its filter hides every upstream version
+ * of a sealed package that is newer than a sealed one and inside `^sealed`, so an edge to a package
+ * the closure already sealed, whose selector no sealed version satisfies, needs that version sealed
+ * too (a transitive's exact pin on a version npm's engine preference skipped). An edge to a package
+ * with nothing sealed stays unsealed: the filter leaves that package's upstream versions alone.
+ */
+export declare function publicEdgesToSeal(skipped: readonly SkippedPublicEdge[], sealedVersions: ReadonlyMap<string, readonly string[]>): SkippedPublicEdge[];
+/**
+ * Optional peers of release artifacts that no release package satisfies; the
+ * proof acquires them so an installed consumer can exercise them.
+ */
+export declare function internalOptionalPeerRequirements(options: {
+    artifacts: readonly ReleaseProofArtifact[];
+    internalVersions: ReadonlyMap<string, string>;
+    rootOverrides: Readonly<Record<string, JsonValue>>;
+}): InternalOptionalPeerRequirement[];
+/**
+ * Fetch the plan's external requirements and optional peers, and every
+ * private-registry dependency beneath them, into `externalRoot`.
+ */
+export declare function acquireExternalProofClosure(options: {
+    plan: RegistryReleaseSetPlan;
+    workspace: ReadonlyMap<string, RegistryReleaseWorkspacePackage>;
+    rootOverrides: Readonly<Record<string, JsonValue>>;
+    internalNames: ReadonlySet<string>;
+    internalVersions: ReadonlyMap<string, string>;
+    optionalPeerRequirements: readonly InternalOptionalPeerRequirement[];
+    sealedWorkspaceInputs?: readonly SealedWorkspaceRegistryInput[];
+    sourceRegistry: ReleaseConsumerSourceRegistry;
+    credentials: ProofSourceCredentials;
+    proofRoot: string;
+    externalRoot: string;
+    env: Record<string, string>;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<ExternalProofClosure>;
+/** Every package name the external closure can install, for override scoping. */
+export declare function externalProofPackageNames(plan: RegistryReleaseSetPlan, closure: ExternalProofClosure): Set<string>;
+export interface ReleaseConsumerPlanRecord {
+    internalInstallRoots: readonly string[];
+    externalInstallRoots: string[];
+    consumerOverrides: Readonly<Record<string, JsonValue>>;
+    internalOptionalPeerDependencies: Record<string, Record<string, string>>;
+    externalNodes: Array<{
+        key: string;
+        registry: string;
+        dependencies: Record<string, string>;
+        optionalDependencies: Record<string, string>;
+        peerDependencies: Record<string, string>;
+        tarball: string;
+        artifactSha256: string;
+    }>;
+}
+/** The auditable `release-consumer-plan.json` record of what the proof installs. */
+export declare function releaseConsumerPlanRecord(options: {
+    internalInstallRoots: readonly string[];
+    consumerOverrides: Readonly<Record<string, JsonValue>>;
+    closure: ExternalProofClosure;
+}): ReleaseConsumerPlanRecord;
+//# sourceMappingURL=proof-external-closure.d.ts.map

package/dist/cli/npm/publish/proof-external-closure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-external-closure.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/proof-external-closure.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAKzE,OAAO,KAAK,EACV,kCAAkC,EAClC,sBAAsB,EACtB,+BAA+B,EAChC,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,EAML,KAAK,4BAA4B,EAClC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAGL,KAAK,6BAA6B,EACnC,MAAM,qBAAqB,CAAC;AAK7B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,kDAAkD;AAClD,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,EAAE,WAAW,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wEAAwE;AACxE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,WAAW,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1D,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC7C,oBAAoB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACrD,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,sFAAsF;AACtF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,6DAA6D;AAC7D,MAAM,MAAM,oBAAoB,GAAG;IACjC,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACtC,kEAAkE;IAClE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,uEAAuE;IACvE,oBAAoB,EAAE,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC9D,yEAAyE;IACzE,yBAAyB,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;CACxE,CAAC;AAIF;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhE;AAyBD,mGAAmG;AACnG,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,GACrD,iBAAiB,EAAE,CAQrB;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,OAAO,EAAE;IACxD,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;CACpD,GAAG,+BAA+B,EAAE,CAiBpC;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,IAAI,EAAE,sBAAsB,CAAC;IAC7B,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAChE,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,aAAa,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,wBAAwB,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACrE,qBAAqB,CAAC,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAChE,cAAc,EAAE,6BAA6B,CAAC;IAC9C,WAAW,EAAE,sBAAsB,CAAC;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAkUhC;AAED,iFAAiF;AACjF,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,oBAAoB,GAC5B,GAAG,CAAC,MAAM,CAAC,CAab;AAED,MAAM,WAAW,yBAAyB;IACxC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,gCAAgC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,aAAa,EAAE,KAAK,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACrC,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC7C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;KACxB,CAAC,CAAC;CACJ;AAED,oFAAoF;AACpF,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,oBAAoB,CAAC;CAC/B,GAAG,yBAAyB,CAwB5B"}