@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.5

package/dist/cli/npm/publish/workspace-discovery.js

@@ -0,0 +1,313 @@
+/**
+ * Publish invocation and workspace discovery: which package directories were
+ * requested, which workspace root owns them, and the workspace package inventory.
+ */
+import { realpathChecked, resolveFileSystemAdapter } from "@vibesdotdev/filesystem";
+import { getRuntimePath } from "@vibesdotdev/paths";
+import { CapabilityError, settle, settleNow, valueFreeFailure, } from "@vibesdotdev/kernel";
+import { z } from "zod/v4";
+import { isPathAbsentError, isWithinDirectory, pathExists } from "./fs-paths.js";
+import { parsePublisherManifest, readDeclaredWorkspacePatterns, workspaceRootManifestSchema, } from "./publisher-manifest.js";
+import { RELEASE_EXECUTOR_PATH } from "./release-executor.js";
+import { ENVIRONMENT_LOADER_ID, listDeclaredPackages, listPatternPackages } from "@vibesdotdev/kernel/bootstrap";
+import { assertCanonicalRegistryReleaseWorkspaceFile, resolveRegistryReleaseWorkspacePaths, } from "./release-lock.js";
+/** Platform and architecture the runtime's environment captured. */
+export function hostPlatformFacts(runtime) {
+    const platform = runtime.localEnvironment.getPlatform?.();
+    const architecture = runtime.localEnvironment.getArch?.();
+    if (!platform || !architecture) {
+        throw new CapabilityError("This runtime does not provide host platform facts.", "UNAVAILABLE", { reason: "host-platform-unavailable" });
+    }
+    return { platform, architecture };
+}
+/** True when the manifest's `os`/`cpu` allow this platform. */
+export function isPackagePlatformCompatible(manifest, platform, architecture) {
+    const allows = (values, current) => {
+        if (!values || values.length === 0)
+            return true;
+        if (values.includes(`!${current}`))
+            return false;
+        const positive = values.filter((value) => !value.startsWith("!"));
+        return positive.length === 0 || positive.includes(current);
+    };
+    return allows(manifest.os, platform) && allows(manifest.cpu, architecture);
+}
+/**
+ * Absolute package directories for the requested paths. Relative paths resolve
+ * against the invocation cwd. An absent value or an empty string selects the
+ * cwd itself. Any other present value must be a string or an array of strings.
+ */
+export async function resolvePublishPackageDirs(runtime, paths, cwd) {
+    const absent = z.undefined().safeParse(paths);
+    const empty = z.literal("").safeParse(paths);
+    let requested;
+    if (absent.success || empty.success) {
+        requested = ["."];
+    }
+    else {
+        const text = z.string().safeParse(paths);
+        if (text.success) {
+            requested = [text.data];
+        }
+        else {
+            const list = z.array(z.unknown()).safeParse(paths);
+            if (!list.success) {
+                throw new CapabilityError("Publish paths are invalid.", "INVALID_INPUT", { reason: "publish-paths-invalid" });
+            }
+            requested = [];
+            for (const [index, item] of list.data.entries()) {
+                const path = z.string().safeParse(item);
+                if (!path.success) {
+                    throw new CapabilityError("Publish paths are invalid.", "INVALID_INPUT", {
+                        reason: "publish-paths-invalid",
+                        details: { index },
+                    });
+                }
+                requested.push(path.data);
+            }
+        }
+    }
+    const pathOwner = await getRuntimePath(runtime);
+    return requested.map((packagePath) => pathOwner.resolve(cwd, packagePath));
+}
+/**
+ * The publish workspace is the bound workspace (`runtime/workspace-path`):
+ * `--workspace-root`, else the nearest workspace root above the invocation
+ * cwd. Every requested package must sit inside it; nothing walks from a
+ * package to find another root.
+ */
+export async function resolvePublishWorkspaceRoot(runtime, packageDirs, workspaceRoot) {
+    if (packageDirs.length === 0) {
+        throw new CapabilityError("npm publish requires at least one package path", "INVALID_INPUT", { reason: "package-path-missing" });
+    }
+    const pathOwner = await getRuntimePath(runtime);
+    const files = await resolveFileSystemAdapter(runtime, { binding: false });
+    const canonical = await realpathChecked(files, workspaceRoot);
+    for (const dir of packageDirs) {
+        const resolved = await settle(() => realpathChecked(files, dir));
+        if (!resolved.ok && !isPathAbsentError(resolved.cause))
+            throw resolved.cause;
+        const canonicalPackageDir = resolved.ok
+            ? resolved.value
+            : pathOwner.resolve(dir);
+        if (!(await isWithinDirectory(runtime, canonical, canonicalPackageDir))) {
+            throw new CapabilityError(`npm publish path resolves outside its selected workspace root: ${canonicalPackageDir}`, "INVALID_INPUT", {
+                reason: "package-outside-workspace",
+                recoveryHint: "Run from the package's workspace, or pass --workspace-root <dir> for a workspace that contains it.",
+                details: { packageDir: canonicalPackageDir, workspaceRoot: canonical },
+            });
+        }
+    }
+    return canonical;
+}
+/**
+ * The sealed follow runs the executor inside the publish workspace itself,
+ * which must carry it at {@link RELEASE_EXECUTOR_PATH}; no ancestor is searched.
+ */
+export async function resolveSealedFollowWorkspaceRoot(runtime, workspaceRoot) {
+    const files = await resolveFileSystemAdapter(runtime, { binding: false });
+    const pathOwner = await getRuntimePath(runtime);
+    const root = await realpathChecked(files, workspaceRoot);
+    if (await pathExists(runtime, pathOwner.join(root, RELEASE_EXECUTOR_PATH), { binding: false })) {
+        return root;
+    }
+    throw new CapabilityError(`Sealed publish follow requires a workspace that contains ${RELEASE_EXECUTOR_PATH}; the bound workspace is ${workspaceRoot}`, "INVALID_INPUT", {
+        reason: "release-executor-missing",
+        recoveryHint: "Run from the release snapshot root, or pass --workspace-root <snapshot root>.",
+        details: { workspaceRoot: root, executorPath: RELEASE_EXECUTOR_PATH },
+    });
+}
+async function readWorkspaceText(runtime, path) {
+    const read = await settle(async () => {
+        const files = await resolveFileSystemAdapter(runtime);
+        return z.string().parse(await files.readFile(path, "utf8"));
+    });
+    if (read.ok)
+        return read.value;
+    if (isPathAbsentError(read.cause))
+        return null;
+    throw read.cause;
+}
+/** Every package the workspace manifest declares, by name. */
+export async function collectWorkspacePackages(runtime, workspaceRoot, workspaceManifestPath = "package.json") {
+    const pathOwner = await getRuntimePath(runtime);
+    const hostFiles = await resolveFileSystemAdapter(runtime, { binding: false });
+    if (pathOwner.isAbsolute(workspaceManifestPath)) {
+        throw new Error("Workspace inventory manifest path must be relative to the workspace root");
+    }
+    const manifestAbsolutePath = pathOwner.resolve(workspaceRoot, workspaceManifestPath);
+    const manifestPosition = pathOwner.relative(pathOwner.resolve(workspaceRoot), manifestAbsolutePath);
+    if (!manifestPosition ||
+        manifestPosition === ".." ||
+        manifestPosition.startsWith("../") ||
+        manifestPosition.startsWith("..\\") ||
+        pathOwner.isAbsolute(manifestPosition)) {
+        throw new Error("Workspace inventory manifest escapes the workspace root");
+    }
+    const manifestText = await readWorkspaceText(runtime, manifestAbsolutePath);
+    if (manifestText === null) {
+        throw new Error(`${workspaceManifestPath} is unreadable`);
+    }
+    const rootRaw = JSON.parse(manifestText);
+    const rootRecord = z.record(z.string(), z.unknown()).parse(rootRaw);
+    const hasDeclaredWorkspaces = Object.prototype.hasOwnProperty.call(rootRecord, "workspaces");
+    const rootVibes = z.record(z.string(), z.unknown()).safeParse(rootRecord.vibes);
+    const hasDeclaredPackageRoots = rootVibes.success &&
+        Array.isArray(rootVibes.data.packageRoots) &&
+        rootVibes.data.packageRoots.length > 0;
+    if (!hasDeclaredWorkspaces && !hasDeclaredPackageRoots) {
+        const rootManifest = parsePublisherManifest(rootRaw);
+        if (!rootManifest.name || !rootManifest.version) {
+            throw new Error(`${workspaceManifestPath} must include name and version when no workspaces are declared`);
+        }
+        const canonicalRoot = await realpathChecked(hostFiles, workspaceRoot);
+        return new Map([
+            [
+                rootManifest.name,
+                {
+                    directory: canonicalRoot,
+                    manifest: {
+                        ...rootManifest,
+                        name: rootManifest.name,
+                        version: rootManifest.version,
+                    },
+                },
+            ],
+        ]);
+    }
+    const workspacePatterns = hasDeclaredWorkspaces
+        ? readDeclaredWorkspacePatterns(rootRecord.workspaces)
+        : [];
+    if (workspacePatterns === undefined) {
+        throw new Error(`${workspaceManifestPath} must declare a string workspaces array for release inventory`);
+    }
+    const canonicalRoot = await realpathChecked(hostFiles, workspaceRoot);
+    const packages = new Map();
+    const directories = new Set();
+    // A release inventory names packages, never a recursion or an escape.
+    for (const declaredPattern of workspacePatterns) {
+        const pattern = declaredPattern.startsWith("!") ? declaredPattern.slice(1) : declaredPattern;
+        if (!pattern ||
+            pathOwner.isAbsolute(pattern) ||
+            pattern.split("/").some((part) => !part || part === ".." || part === "**")) {
+            throw new Error(`Invalid workspace package pattern: ${declaredPattern}`);
+        }
+    }
+    // The kernel's declared-package inventory is the one source: the root
+    // manifest's workspaces (braces, negation) plus its declared
+    // vibes.packageRoots; a named release manifest's own patterns read through
+    // the same rules. No publisher-local expansion.
+    const declaredDirectories = await declaredPackageDirectories(runtime, canonicalRoot, workspaceManifestPath === "package.json" ? undefined : workspacePatterns);
+    for (const directory of declaredDirectories) {
+        const canonical = await settle(() => realpathChecked(hostFiles, directory));
+        if (!canonical.ok && isPathAbsentError(canonical.cause)) {
+            throw new CapabilityError(`Workspace package path does not exist: ${pathOwner.relative(workspaceRoot, directory)}`, "NOT_FOUND", {
+                reason: "workspace-package-missing",
+                cause: valueFreeFailure(canonical.cause),
+            });
+        }
+        if (!canonical.ok)
+            throw canonical.cause;
+        const canonicalDirectory = canonical.value;
+        if (canonicalDirectory !== canonicalRoot &&
+            !canonicalDirectory.startsWith(`${canonicalRoot}/`)) {
+            throw new Error(`Workspace package escapes the workspace root: ${directory}`);
+        }
+        // Match Bun workspace membership: overlapping patterns de-duplicate an
+        // identical canonical directory. Distinct directories with one package
+        // name still fail below.
+        if (directories.has(canonicalDirectory))
+            continue;
+        // Same rule as the deploy-side reader: a glob match with no manifest is not a
+        // workspace member. Fold residue at a retired package path must not be able to
+        // abort a publish closure. A manifest that exists but does not parse still throws.
+        const manifestSource = await readWorkspaceText(runtime, pathOwner.join(canonicalDirectory, "package.json"));
+        if (manifestSource === null)
+            continue;
+        directories.add(canonicalDirectory);
+        const parsedRaw = settleNow(() => JSON.parse(manifestSource));
+        if (!parsedRaw.ok) {
+            throw new CapabilityError(`Invalid workspace package manifest at ${pathOwner.relative(workspaceRoot, canonicalDirectory)}.`, "INVALID_INPUT", {
+                reason: "workspace-manifest-invalid",
+                cause: valueFreeFailure(parsedRaw.cause),
+            });
+        }
+        // A private package is not a publisher manifest. App hosts use visibility
+        // "app"; other private roots use values such as "never-publish". Both are
+        // absent from the publish inventory.
+        const privateMember = z
+            .object({ private: z.literal(true) })
+            .loose()
+            .safeParse(parsedRaw.value);
+        if (privateMember.success)
+            continue;
+        const appMember = workspaceRootManifestSchema.safeParse(parsedRaw.value);
+        if (appMember.success && (appMember.data.vibes?.visibility === "app" || appMember.data.vibes?.visibility === "never-publish"))
+            continue;
+        const parsedManifest = settleNow(() => parsePublisherManifest(parsedRaw.value));
+        if (!parsedManifest.ok) {
+            throw new CapabilityError(`Invalid workspace package manifest at ${pathOwner.relative(workspaceRoot, canonicalDirectory)}.`, "INVALID_INPUT", {
+                reason: "workspace-manifest-invalid",
+                cause: valueFreeFailure(parsedManifest.cause),
+            });
+        }
+        const parsed = parsedManifest.value;
+        if ((!parsed.name || !parsed.version) && parsed.private === true)
+            continue;
+        if (!parsed.name || !parsed.version) {
+            throw new Error(`${pathOwner.relative(workspaceRoot, canonicalDirectory)}/package.json must include name and version`);
+        }
+        if (packages.has(parsed.name))
+            throw new Error(`Duplicate workspace package name: ${parsed.name}`);
+        packages.set(parsed.name, {
+            directory: canonicalDirectory,
+            manifest: { ...parsed, name: parsed.name, version: parsed.version },
+        });
+    }
+    return packages;
+}
+/**
+ * The package directories the workspace at `root` declares, root excluded,
+ * through the kernel's inventory (`listDeclaredPackages`: workspaces plus
+ * `vibes.packageRoots`), or, for a named release manifest, its `patterns`
+ * through the same rules (`listPatternPackages`).
+ */
+export async function declaredPackageDirectories(runtime, root, patterns) {
+    const loader = await runtime
+        .query("runtime/loader")
+        .withId(ENVIRONMENT_LOADER_ID)
+        .resolve();
+    const listed = patterns === undefined
+        ? listDeclaredPackages(loader, root)
+        : listPatternPackages(loader, root, patterns);
+    return listed.filter((directory) => directory !== root);
+}
+/** Select the exact package inventory before release-set planning begins. */
+export async function collectRegistryReleaseWorkspaceInventory(options) {
+    const releaseWorkspacePaths = options.releaseWorkspaceManifest
+        ? await resolveRegistryReleaseWorkspacePaths({
+            runtime: options.runtime,
+            workspaceRoot: options.workspaceRoot,
+            workspaceManifestPath: options.releaseWorkspaceManifest,
+        })
+        : undefined;
+    if (releaseWorkspacePaths) {
+        await Promise.all([
+            assertCanonicalRegistryReleaseWorkspaceFile({
+                runtime: options.runtime,
+                workspaceRoot: options.workspaceRoot,
+                path: releaseWorkspacePaths.workspaceManifestPath,
+            }),
+            assertCanonicalRegistryReleaseWorkspaceFile({
+                runtime: options.runtime,
+                workspaceRoot: options.workspaceRoot,
+                path: releaseWorkspacePaths.lockfilePath,
+            }),
+        ]);
+    }
+    return {
+        workspace: await collectWorkspacePackages(options.runtime, options.workspaceRoot, releaseWorkspacePaths?.workspaceManifestPath),
+        releaseWorkspacePaths,
+    };
+}
+//# sourceMappingURL=workspace-discovery.js.map

package/dist/cli/npm/publish/workspace-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-discovery.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/workspace-discovery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EACL,eAAe,EACf,MAAM,EACN,SAAS,EACT,gBAAgB,GAGjB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AACjF,OAAO,EACL,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACjH,OAAO,EACL,2CAA2C,EAC3C,oCAAoC,GAErC,MAAM,mBAAmB,CAAC;AAG3B,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,OAAwB;IACxD,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB,CAAC,OAAO,EAAE,EAAE,CAAC;IAC1D,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,eAAe,CACvB,oDAAoD,EACpD,aAAa,EACb,EAAE,MAAM,EAAE,2BAA2B,EAAE,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,2BAA2B,CACzC,QAAyC,EACzC,QAAgB,EAChB,YAAoB;IAEpB,MAAM,MAAM,GAAG,CAAC,MAA4B,EAAE,OAAe,EAAE,EAAE;QAC/D,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,OAAwB,EACxB,KAAc,EACd,GAAW;IAEX,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,SAAmB,CAAC;IACxB,IAAI,MAAM,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACpC,SAAS,GAAG,CAAC,GAAG,CAAC,CAAC;IACpB,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,SAAS,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,eAAe,CACvB,4BAA4B,EAC5B,eAAe,EACf,EAAE,MAAM,EAAE,uBAAuB,EAAE,CACpC,CAAC;YACJ,CAAC;YACD,SAAS,GAAG,EAAE,CAAC;YACf,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACxC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBAClB,MAAM,IAAI,eAAe,CACvB,4BAA4B,EAC5B,eAAe,EACf;wBACE,MAAM,EAAE,uBAAuB;wBAC/B,OAAO,EAAE,EAAE,KAAK,EAAE;qBACnB,CACF,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,OAAwB,EACxB,WAAqB,EACrB,aAAqB;IAErB,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,eAAe,CACvB,gDAAgD,EAChD,eAAe,EACf,EAAE,MAAM,EAAE,sBAAsB,EAAE,CACnC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC9D,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,MAAM,QAAQ,CAAC,KAAK,CAAC;QAC7E,MAAM,mBAAmB,GAAG,QAAQ,CAAC,EAAE;YACrC,CAAC,CAAC,QAAQ,CAAC,KAAK;YAChB,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,EAAE,mBAAmB,CAAC,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,eAAe,CACvB,kEAAkE,mBAAmB,EAAE,EACvF,eAAe,EACf;gBACE,MAAM,EAAE,2BAA2B;gBACnC,YAAY,EACV,oGAAoG;gBACtG,OAAO,EAAE,EAAE,UAAU,EAAE,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE;aACvE,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,OAAwB,EACxB,aAAqB;IAErB,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACzD,IAAI,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC/F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,IAAI,eAAe,CACvB,4DAA4D,qBAAqB,4BAA4B,aAAa,EAAE,EAC5H,eAAe,EACf;QACE,MAAM,EAAE,0BAA0B;QAClC,YAAY,EACV,+EAA+E;QACjF,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,qBAAqB,EAAE;KACtE,CACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,OAAwB,EACxB,IAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,IAAI,EAAE;QACnC,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACtD,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IAC/B,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,IAAI,CAAC,KAAK,CAAC;AACnB,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,OAAwB,EACxB,aAAqB,EACrB,qBAAqB,GAAG,cAAc;IAEtC,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,IAAI,SAAS,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IACD,MAAM,oBAAoB,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAC;IACrF,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,CACzC,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAChC,oBAAoB,CACrB,CAAC;IACF,IACE,CAAC,gBAAgB;QACjB,gBAAgB,KAAK,IAAI;QACzB,gBAAgB,CAAC,UAAU,CAAC,KAAK,CAAC;QAClC,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC;QACnC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,EACtC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IAC5E,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,GAAG,qBAAqB,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,qBAAqB,GAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAChE,UAAU,EACV,YAAY,CACb,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChF,MAAM,uBAAuB,GAC3B,SAAS,CAAC,OAAO;QACjB,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;QAC1C,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,qBAAqB,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACvD,MAAM,YAAY,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,GAAG,qBAAqB,gEAAgE,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACtE,OAAO,IAAI,GAAG,CAAC;YACb;gBACE,YAAY,CAAC,IAAI;gBACjB;oBACE,SAAS,EAAE,aAAa;oBACxB,QAAQ,EAAE;wBACR,GAAG,YAAY;wBACf,IAAI,EAAE,YAAY,CAAC,IAAI;wBACvB,OAAO,EAAE,YAAY,CAAC,OAAO;qBAC9B;iBACF;aACF;SACF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,iBAAiB,GAAG,qBAAqB;QAC7C,CAAC,CAAC,6BAA6B,CAAC,UAAU,CAAC,UAAU,CAAC;QACtD,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,GAAG,qBAAqB,+DAA+D,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA2C,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,sEAAsE;IACtE,KAAK,MAAM,eAAe,IAAI,iBAAiB,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAC7F,IACE,CAAC,OAAO;YACR,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC;YAC7B,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,EAC1E,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,eAAe,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,sEAAsE;IACtE,6DAA6D;IAC7D,2EAA2E;IAC3E,gDAAgD;IAChD,MAAM,mBAAmB,GAAG,MAAM,0BAA0B,CAC1D,OAAO,EACP,aAAa,EACb,qBAAqB,KAAK,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CACzE,CAAC;IACF,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,eAAe,CACvB,0CAA0C,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,EAAE,EACxF,WAAW,EACX;gBACE,MAAM,EAAE,2BAA2B;gBACnC,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;aACzC,CACF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,EAAE;YAAE,MAAM,SAAS,CAAC,KAAK,CAAC;QACzC,MAAM,kBAAkB,GAAG,SAAS,CAAC,KAAK,CAAC;QAC3C,IACE,kBAAkB,KAAK,aAAa;YACpC,CAAC,kBAAkB,CAAC,UAAU,CAAC,GAAG,aAAa,GAAG,CAAC,EACnD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,iDAAiD,SAAS,EAAE,CAC7D,CAAC;QACJ,CAAC;QACD,uEAAuE;QACvE,uEAAuE;QACvE,yBAAyB;QACzB,IAAI,WAAW,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAAE,SAAS;QAClD,8EAA8E;QAC9E,+EAA+E;QAC/E,mFAAmF;QACnF,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAC5C,OAAO,EACP,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,CAAC,CACnD,CAAC;QACF,IAAI,cAAc,KAAK,IAAI;YAAE,SAAS;QACtC,WAAW,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QACpC,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CACvB,yCAAyC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,GAAG,EACjG,eAAe,EACf;gBACE,MAAM,EAAE,4BAA4B;gBACpC,KAAK,EAAE,gBAAgB,CAAC,SAAS,CAAC,KAAK,CAAC;aACzC,CACF,CAAC;QACJ,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,qCAAqC;QACrC,MAAM,aAAa,GAAG,CAAC;aACpB,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;aACpC,KAAK,EAAE;aACP,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,aAAa,CAAC,OAAO;YAAE,SAAS;QACpC,MAAM,SAAS,GAAG,2BAA2B,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzE,IAAI,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,KAAK,eAAe,CAAC;YAAE,SAAS;QACxI,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,EAAE,CACpC,sBAAsB,CAAC,SAAS,CAAC,KAAK,CAAC,CACxC,CAAC;QACF,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,eAAe,CACvB,yCAAyC,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,GAAG,EACjG,eAAe,EACf;gBACE,MAAM,EAAE,4BAA4B;gBACpC,KAAK,EAAE,gBAAgB,CAAC,cAAc,CAAC,KAAK,CAAC;aAC9C,CACF,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC;QACpC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI;YAC9D,SAAS;QACX,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,GAAG,SAAS,CAAC,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC,6CAA6C,CACtG,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE;YACxB,SAAS,EAAE,kBAAkB;YAC7B,QAAQ,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAwB,EACxB,IAAY,EACZ,QAAuC;IAEvC,MAAM,MAAM,GAAG,MAAM,OAAO;SACzB,KAAK,CAAiD,gBAAgB,CAAC;SACvE,MAAM,CAAC,qBAAqB,CAAC;SAC7B,OAAO,EAAE,CAAC;IACb,MAAM,MAAM,GAAG,QAAQ,KAAK,SAAS;QACnC,CAAC,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC;QACpC,CAAC,CAAC,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;AAC1D,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,wCAAwC,CAAC,OAI9D;IAIC,MAAM,qBAAqB,GAAG,OAAO,CAAC,wBAAwB;QAC5D,CAAC,CAAC,MAAM,oCAAoC,CAAC;YACzC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,qBAAqB,EAAE,OAAO,CAAC,wBAAwB;SACxD,CAAC;QACJ,CAAC,CAAC,SAAS,CAAC;IACd,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,2CAA2C,CAAC;gBAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,IAAI,EAAE,qBAAqB,CAAC,qBAAqB;aAClD,CAAC;YACF,2CAA2C,CAAC;gBAC1C,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,IAAI,EAAE,qBAAqB,CAAC,YAAY;aACzC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IACD,OAAO;QACL,SAAS,EAAE,MAAM,wBAAwB,CACvC,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,aAAa,EACrB,qBAAqB,EAAE,qBAAqB,CAC7C;QACD,qBAAqB;KACtB,CAAC;AACJ,CAAC"}

package/dist/cli/npm/put-attested-packument.d.ts

@@ -0,0 +1,142 @@
+import { type RegistryPublishManifest } from '@vibesdotdev/registry';
+import { valueFreeFailure, type RuntimeRef } from '@vibesdotdev/kernel';
+/**
+ * The registry's `{ error }` text for a failed response, only when it is
+ * short and reads the same after the shared credential redaction (with the
+ * request's token as a secret). Any other body is never read into a failure.
+ */
+export declare function registryErrorText(response: Response, secrets: readonly string[]): Promise<string | undefined>;
+/**
+ * What a refusal's headers say beyond its status: the wait a rate limit asks for, the
+ * body's media type (an HTML page is an edge refusal, not the registry's JSON), and
+ * npm's `npm-notice` text when it reads the same after credential redaction.
+ */
+export type RegistryRefusalDetails = {
+    status: number;
+    retryAfter?: string;
+    contentType?: string;
+    notice?: string;
+};
+export declare function registryRefusalDetails(response: Response, secrets: readonly string[]): RegistryRefusalDetails;
+export type AttestedPublishManifest = RegistryPublishManifest & {
+    name: string;
+    version: string;
+};
+export type AttestedPublishPayload = {
+    _id: string;
+    name: string;
+    'dist-tags': Record<string, string>;
+    versions: Record<string, AttestedPublishManifest & {
+        dist: Partial<TarballDigests> & {
+            tarball: string;
+        };
+    }>;
+    _attachments: Record<string, {
+        content_type: string;
+        data: string;
+        length: number;
+    }>;
+    access?: string;
+};
+export declare function tarballFilename(name: string, version: string): string;
+export declare function extractPackageJsonFromTgz(gzipBytes: Uint8Array): Promise<RegistryPublishManifest>;
+export declare function bytesToBase64(bytes: Uint8Array): string;
+/** Default dist-tag when no explicit tag is supplied: `rc` for prereleases, `latest` for stable releases. */
+export declare function defaultDistTagForVersion(version: string): string;
+/** The tarball digests a registry records on the version (`dist.integrity`, `dist.shasum`). */
+export type TarballDigests = {
+    integrity: string;
+    shasum: string;
+};
+export declare function buildAttestedPublishPayload(options: {
+    tarball: Uint8Array;
+    registry: string;
+    tag?: string;
+    access?: string;
+    /** Digests of exactly these bytes, recorded on the version for registries that require them. */
+    dist?: TarballDigests;
+}): Promise<{
+    name: string;
+    version: string;
+    payload: AttestedPublishPayload;
+    url: string;
+}>;
+export declare function putAttestedPackument(options: {
+    runtime: RuntimeRef;
+    /** The packed tarball: a file the publisher staged, or bytes already read and verified. */
+    tarball: {
+        path: string;
+    } | {
+        bytes: Uint8Array;
+    };
+    registry: string;
+    token: string;
+    tag?: string;
+    access?: string;
+    dist?: TarballDigests;
+    /** A one-time password for a registry account that requires 2FA on writes (`npm-otp`). */
+    otp?: string;
+    /**
+     * npm's web second factor: the PUT asks for it (`npm-auth-type: web`), a 401 names the
+     * approval URL, `announce` shows it to the account owner, and the PUT runs once more
+     * with the one-time token the registry hands back after approval.
+     */
+    webAuth?: WebAuthOptions;
+    fetchImpl?: typeof fetch;
+}): Promise<{
+    name: string;
+    version: string;
+    status: number;
+    latestTag: LatestTagOutcome;
+}>;
+/**
+ * One registry write (`PUT` of a JSON body) answered with the second factor the
+ * caller holds: a one-time password, or npm's web flow (the write asks for it, a
+ * 401 names the approval URL, `announce` shows it, and the write runs once more
+ * with the token the approval issues). The final response is returned unread.
+ */
+export declare function writeWithSecondFactor(options: {
+    runtime: RuntimeRef;
+    url: string;
+    body: string;
+    token: string;
+    otp?: string;
+    webAuth?: WebAuthOptions;
+    fetchImpl: typeof fetch;
+}): Promise<Response>;
+/**
+ * npm's web second factor. `session` is the `npm-session` id npm's own client sends on
+ * every request of one command; the challenge PUT and the `doneUrl` poll carry the same one.
+ */
+export type WebAuthOptions = {
+    announce: (authUrl: string) => void | Promise<void>;
+    session: string;
+    timeoutMs?: number;
+    /** Ask for a fresh approval each time one expires unanswered, instead of failing the write. */
+    retryOnTimeout?: boolean;
+};
+/** What a non-`latest` publish did to `latest`: moved with the version, left alone, or not read (so not moved). */
+export type LatestTagOutcome = {
+    state: 'moved' | 'unchanged';
+} | {
+    state: 'unread';
+    failure: ReturnType<typeof valueFreeFailure>;
+};
+/**
+ * Whether `published`, released on a tag other than `latest`, displaces the
+ * package's current `latest`. Prereleases (`1.0.0-rc.*`, etc.) are published on
+ * `rc` only and never displace `latest`. A stable release displaces `latest`
+ * when `latest` is absent (or not a version) or when `latest` is an older
+ * prerelease (`gt(published, latest)`). A stable published on another tag never
+ * displaces an existing stable `latest`. The publish PUT and the train's latest
+ * reconcile share this rule.
+ */
+export declare function latestDisplacedBy(latest: string | undefined, published: string): boolean;
+/** The package's current dist-tags; empty for a package the registry does not hold yet. */
+export declare function readDistTags(options: {
+    registry: string;
+    token: string;
+    name: string;
+    fetchImpl: typeof fetch;
+}): Promise<Record<string, string>>;
+//# sourceMappingURL=put-attested-packument.d.ts.map

package/dist/cli/npm/put-attested-packument.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"put-attested-packument.d.ts","sourceRoot":"","sources":["../../../src/cli/npm/put-attested-packument.ts"],"names":[],"mappings":"AAQA,OAAO,EAAgC,KAAK,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACnG,OAAO,EAAsC,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAW5G;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAUnH;AAED;;;;GAIG;AACH,MAAM,MAAM,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,sBAAsB,CAS7G;AAED,MAAM,MAAM,uBAAuB,GAAG,uBAAuB,GAAG;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,GAAG;QAAE,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAC;IAC5G,YAAY,EAAE,MAAM,CACnB,MAAM,EACN;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CACtD,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC;AAEF,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAGrE;AASD,wBAAsB,yBAAyB,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAqCvG;AAiBD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIvD;AAED,6GAA6G;AAC7G,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,+FAA+F;AAC/F,MAAM,MAAM,cAAc,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IAC1D,OAAO,EAAE,UAAU,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gGAAgG;IAChG,IAAI,CAAC,EAAE,cAAc,CAAC;CACtB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CA0C3F;AAED,wBAAsB,oBAAoB,CAAC,OAAO,EAAE;IACnD,OAAO,EAAE,UAAU,CAAC;IACpB,2FAA2F;IAC3F,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;IAClD,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,0FAA0F;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACzB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAqD1F;AAcD;;;;;GAKG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE;IACpD,OAAO,EAAE,UAAU,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,OAAO,KAAK,CAAC;CACxB,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8BpB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+FAA+F;IAC/F,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAqDF,mHAAmH;AACnH,MAAM,MAAM,gBAAgB,GACzB;IAAE,KAAK,EAAE,OAAO,GAAG,WAAW,CAAA;CAAE,GAChC;IAAE,KAAK,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAA;CAAE,CAAC;AAErE;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAKxF;AAID,2FAA2F;AAC3F,wBAAsB,YAAY,CAAC,OAAO,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,OAAO,KAAK,CAAA;CAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAmBvJ"}