@xemahq/xema 0.26.0 → 0.27.0

package/dist/runtime/distribution/available-biome.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"available-biome.js","sourceRoot":"","sources":["../../../src/runtime/distribution/available-biome.ts"],"names":[],"mappings":";;AAwCA,wDAGC;AASD,gEA6GC;AA2GD,oDAgBC;AA5RD,mDAaiC;AACjC,iEAAsF;AA0BtF,SAAgB,sBAAsB,CAAC,CAAc;IACnD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC;AACd,CAAC;AASD,SAAgB,0BAA0B,CAAC,CAAkB,EAAE,UAAkB;IAC/E,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAyB,CAAC;IAG7C,MAAM,SAAS,GAAG,WAAW,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAMnE,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IACE,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,kCAA0B,CAAC,IAAI;YAC3D,SAAS,CAAC,QAAQ,CAAC,WAAW,KAAK,SAAS,EAC5C,CAAC;YACD,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpF,CAAC;IACH,CAAC;IAQD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IACE,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,kCAA0B,CAAC,IAAI;YAC3D,CAAC,SAAS,CAAC,QAAQ,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EACtD,CAAC;YACD,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,CAAC,EAAE,cAAc,UAAU,kCAAkC;gBACtE,cAAc,SAAS,CAAC,GAAG,6CAA6C;gBACxE,yEAAyE;gBACzE,yEAAyE;gBACzE,gEAAgE,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAMD,MAAM,iBAAiB,GAAG,IAAA,6BAAqB,EAC7C,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAC3D,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAiB;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAW,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAW,CAAC,GAAG;QACpE,MAAM,EAAE,SAAS,IAAI,mBAAW,CAAC,UAAU;QAC3C,QAAQ,EAAE,IAAA,wBAAgB,EAAC,QAAQ,CAAC;QAKpC,MAAM,EAAE,8BAAe,CAAC,MAAM;QAC9B,oBAAoB,EAAE,CAAC,CAAC,QAAQ;QAChC,IAAI,EAAE,UAAU,UAAU,EAAE;QAG5B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG;QAC9C,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACvC,gBAAgB;QAChB,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,WAAW,EAAE,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC;QACxC,mBAAmB,EAAE,EAAE;QAGvB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,oBAAoB,EAClB,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE;QAChE,WAAW,EAAE,IAAA,0BAAkB,EAAC,QAAQ,CAAC;QACzC,aAAa,EAAE,IAAA,uBAAe,EAAC,QAAQ,CAAC;QACxC,kBAAkB,EAAE,CAAC,CAAC,kBAAkB;QACxC,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAMjE,GAAG,iBAAiB,CAAC,IAAI,CAAC;QAM1B,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS;YAC5B,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;wBACrC,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;wBACpC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE;wBACnC,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9E;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAUD,SAAS,iBAAiB,CACxB,IAA2B;IAE3B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,aAAa,GAA2D,EAAE,CAAC;IACjF,MAAM,aAAa,GAA2D,EAAE,CAAC;IACjF,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IACE,SAAS,CAAC,IAAI,KAAK,0BAAkB,CAAC,MAAM;YAC5C,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,kCAA0B,CAAC,MAAM;YAC7D,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,QAAQ,CAAC;YAChC,SAAS,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,EACtC,CAAC;YACD,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC5D,aAAa,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,SAAS,CAAC,GAAG;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC5D,aAAa,CAAC,IAAI,CAAC;gBACjB,SAAS,EAAE,SAAS,CAAC,GAAG;gBACxB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,UAAU,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;gBACjC,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,IAAA,kCAAmB,EAAC,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC;AAC/D,CAAC;AAYD,SAAS,kBAAkB,CACzB,CAAkB,EAClB,IAA2B;IAE3B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,kCAA0B,CAAC,UAAU,EAAE,CAAC;YACtE,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,CAAC,EAAE,wBAAwB,SAAS,CAAC,GAAG,oBAAoB;gBACrE,qEAAqE;gBACrE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QACD,IACE,SAAS,CAAC,UAAU,EAAE,IAAI,KAAK,oCAA4B,CAAC,YAAY;YACxE,SAAS,CAAC,OAAO,KAAK,SAAS,EAC/B,CAAC;YACD,MAAM,IAAI,KAAK,CACb,UAAU,CAAC,CAAC,EAAE,kBAAkB,SAAS,CAAC,GAAG,mBAAmB;gBAC9D,yCAAyC,CAC5C,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC;YACX,YAAY,EAAE,SAAS,CAAC,GAAG;YAC3B,YAAY,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI;YACrC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,MAAM;YACvC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,UAAU;YAC3C,OAAO,EAAE;gBACP,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI;gBAC5B,YAAY,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY;aAC7C;YACD,YAAY,EAAE,IAAI,CAAC,YAAY;SAChC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;AAC5F,CAAC;AAOD,SAAgB,oBAAoB,CAClC,IAA+B,EAC/B,IAA+B;IAE/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC/C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AACpD,CAAC"}

package/dist/runtime/distribution/compose.d.ts

@@ -1,23 +0,0 @@
-import type { Distribution, DistributionLock, RuntimeImagePlatformKey } from '@xemahq/contracts/distribution';
-export interface UserBiomeSource {
-    readonly name: string;
-    readonly root: string;
-}
-export interface ComposeInput {
-    readonly id: string;
-    readonly displayName?: string;
-    readonly baseEdition: string;
-    readonly requiredPlatforms: readonly RuntimeImagePlatformKey[];
-    readonly userSources: readonly UserBiomeSource[];
-    readonly allowThirdParty: boolean;
-    readonly resolvedAt: string;
-}
-export interface ComposeResult {
-    readonly definition: Distribution;
-    readonly lock: DistributionLock;
-    readonly baseBiomeCount: number;
-    readonly userBiomeCount: number;
-    readonly overridden: readonly string[];
-}
-export declare function composeDistribution(input: ComposeInput): ComposeResult;
-//# sourceMappingURL=compose.d.ts.map

package/dist/runtime/distribution/compose.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACxB,MAAM,gCAAgC,CAAC;AAGxC,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAE3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAY7B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAE/D,QAAQ,CAAC,WAAW,EAAE,SAAS,eAAe,EAAE,CAAC;IAEjD,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAElC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAWD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,GAAG,aAAa,CA8DtE"}

package/dist/runtime/distribution/compose.js

@@ -1,48 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.composeDistribution = composeDistribution;
-const biome_1 = require("@xemahq/contracts/biome");
-const distribution_1 = require("@xemahq/contracts/distribution");
-const distribution_resolver_1 = require("@xemahq/distribution-resolver");
-const lock_loader_1 = require("../lock-loader");
-const available_biome_1 = require("./available-biome");
-const manifest_walk_1 = require("../sources/manifest-walk");
-function composeDistribution(input) {
-    const { lock: baseLock } = (0, lock_loader_1.loadDistributionLock)({ edition: input.baseEdition });
-    (0, distribution_1.assertLockNexusFactsCurrent)(baseLock);
-    const baseBiomes = baseLock.biomes.map(available_biome_1.lockedBiomeToAvailable);
-    const userBiomes = [];
-    for (const source of input.userSources) {
-        const { biomes } = (0, manifest_walk_1.walkBiomeManifests)(source.root);
-        for (const b of biomes) {
-            userBiomes.push((0, available_biome_1.discoveredBiomeToAvailable)(b, source.name));
-        }
-    }
-    const { biomes: pool, overridden } = (0, available_biome_1.mergeAvailableBiomes)(baseBiomes, userBiomes);
-    const definition = {
-        schemaVersion: 1,
-        id: input.id,
-        displayName: input.displayName ?? input.id,
-        description: `Custom distribution composed from "${input.baseEdition}" + ${String(input.userSources.length)} user source(s).`,
-        include: pool.map((b) => ({ biome: b.id })),
-        requiredPlatforms: input.requiredPlatforms,
-        trustPolicy: {
-            allow: input.allowThirdParty
-                ? [biome_1.BiomeOrigin.FirstParty, biome_1.BiomeOrigin.ThirdParty]
-                : [biome_1.BiomeOrigin.FirstParty],
-        },
-        platformServices: baseLock.platformServices.map((ps) => ({ name: ps.name, tier: ps.tier })),
-    };
-    const lock = (0, distribution_resolver_1.resolveDistribution)(definition, pool, baseLock.capabilityDomainOwners, {
-        resolvedAt: input.resolvedAt,
-        platformServiceSources: baseLock.platformServices.map((ps) => ps.source),
-    });
-    return {
-        definition,
-        lock,
-        baseBiomeCount: baseBiomes.length,
-        userBiomeCount: userBiomes.length,
-        overridden,
-    };
-}
-//# sourceMappingURL=compose.js.map

package/dist/runtime/distribution/compose.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"compose.js","sourceRoot":"","sources":["../../../src/runtime/distribution/compose.ts"],"names":[],"mappings":";;AAoEA,kDA8DC;AAlID,mDAAsD;AACtD,iEAA6E;AAC7E,yEAAyF;AAEzF,gDAAsD;AACtD,uDAI2B;AAC3B,4DAA8D;AA0D9D,SAAgB,mBAAmB,CAAC,KAAmB;IACrD,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,IAAA,kCAAoB,EAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAKhF,IAAA,0CAA2B,EAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,UAAU,GAAqB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,wCAAsB,CAAC,CAAC;IAEjF,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACvC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAA,kCAAkB,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,UAAU,CAAC,IAAI,CAAC,IAAA,4CAA0B,EAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAA,sCAAoB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAElF,MAAM,UAAU,GAAiB;QAC/B,aAAa,EAAE,CAAC;QAChB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE;QAC1C,WAAW,EAAE,sCAAsC,KAAK,CAAC,WAAW,OAAO,MAAM,CAC/E,KAAK,CAAC,WAAW,CAAC,MAAM,CACzB,kBAAkB;QAInB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;QAC1C,WAAW,EAAE;YACX,KAAK,EAAE,KAAK,CAAC,eAAe;gBAC1B,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,EAAE,mBAAW,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,CAAC,mBAAW,CAAC,UAAU,CAAC;SAC7B;QACD,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5F,CAAC;IAOF,MAAM,IAAI,GAAG,IAAA,2CAAmB,EAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,sBAAsB,EAAE;QAClF,UAAU,EAAE,KAAK,CAAC,UAAU;QAO5B,sBAAsB,EAAE,QAAQ,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC;KACzE,CAAC,CAAC;IAEH,OAAO;QACL,UAAU;QACV,IAAI;QACJ,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,cAAc,EAAE,UAAU,CAAC,MAAM;QACjC,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/runtime/runner/chart-trust.d.ts

@@ -1,57 +0,0 @@
-import { type ResolvedChart } from './chart-resolver';
-export declare const CHART_TRUST_ENV = "XEMA_CHART_TRUST";
-export declare const CHART_SIGNER_IDENTITY_REGEXP = "^https://github\\.com/xema-dev/(xema-deploy|xema-infra-services)/\\.github/workflows/publish-charts\\.yaml@refs/(heads/main|tags/charts-v.+)$";
-export declare const CHART_SIGNER_OIDC_ISSUER = "https://token.actions.githubusercontent.com";
-export declare enum ChartTrustMode {
-    Verify = "verify",
-    Insecure = "insecure"
-}
-export declare function parseChartTrustMode(raw: string | undefined): ChartTrustMode;
-export declare enum ChartTrustOutcome {
-    NoRemoteCharts = "no-remote-charts",
-    LocalUnattested = "local-unattested",
-    LocalUnrecorded = "local-unrecorded",
-    Verified = "verified",
-    Insecure = "insecure",
-    CosignMissing = "cosign-missing",
-    Unverified = "unverified"
-}
-export interface ChartTrustReport {
-    readonly mode: ChartTrustMode;
-    readonly outcome: ChartTrustOutcome;
-    readonly subjects: readonly string[];
-    readonly unverified: readonly string[];
-    readonly message: string;
-    readonly passed: boolean;
-}
-export interface CosignRunner {
-    available(): Promise<boolean>;
-    verify(subject: string): Promise<boolean>;
-}
-export declare function cosignVerifyArgs(subject: string): readonly string[];
-export declare function chartSignatureSubject(chart: ResolvedChart): string;
-export interface ChartTrustVerifierOptions {
-    readonly mode?: ChartTrustMode;
-    readonly cosign?: CosignRunner;
-    readonly env?: NodeJS.ProcessEnv;
-}
-export declare class ChartTrustVerifier {
-    readonly mode: ChartTrustMode;
-    private readonly cosign;
-    private readonly verifiedSubjects;
-    private readonly stageRecords;
-    private readonly admittedLocalRefs;
-    constructor(opts?: ChartTrustVerifierOptions);
-    evaluate(charts: readonly ResolvedChart[]): Promise<ChartTrustReport>;
-    private evaluateLocalProvenance;
-    assertVerified(charts: readonly ResolvedChart[]): Promise<ChartTrustReport>;
-}
-export declare function assertChartTrust(report: ChartTrustReport): void;
-export declare class ExecCosignRunner implements CosignRunner {
-    private readonly bin;
-    constructor(bin?: string);
-    available(): Promise<boolean>;
-    verify(subject: string): Promise<boolean>;
-    private run;
-}
-//# sourceMappingURL=chart-trust.d.ts.map

package/dist/runtime/runner/chart-trust.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chart-trust.d.ts","sourceRoot":"","sources":["../../../src/runtime/runner/chart-trust.ts"],"names":[],"mappings":"AAEA,OAAO,EAAmB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA8CvE,eAAO,MAAM,eAAe,qBAAqB,CAAC;AAalD,eAAO,MAAM,4BAA4B,kJACwG,CAAC;AAElJ,eAAO,MAAM,wBAAwB,gDACU,CAAC;AAMhD,oBAAY,cAAc;IAExB,MAAM,WAAW;IAOjB,QAAQ,aAAa;CACtB;AAQD,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc,CAe3E;AAGD,oBAAY,iBAAiB;IAQ3B,cAAc,qBAAqB;IAQnC,eAAe,qBAAqB;IAOpC,eAAe,qBAAqB;IAEpC,QAAQ,aAAa;IAErB,QAAQ,aAAa;IAErB,aAAa,mBAAmB;IAEhC,UAAU,eAAe;CAC1B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IAEpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAMrC,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAEvC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAGD,MAAM,WAAW,YAAY;IAE3B,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC3C;AAQD,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CASnE;AAUD,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAclE;AAcD,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,CAAC,EAAE,cAAc,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CAClC;AAYD,qBAAa,kBAAkB;IAC7B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAe;IACtC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAqB;IAEtD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA8C;IAE3E,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAqB;gBAE3C,IAAI,GAAE,yBAA8B;IAU1C,QAAQ,CACZ,MAAM,EAAE,SAAS,aAAa,EAAE,GAC/B,OAAO,CAAC,gBAAgB,CAAC;IA2I5B,OAAO,CAAC,uBAAuB;IA4EzB,cAAc,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;CAKlF;AAGD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAI/D;AAYD,qBAAa,gBAAiB,YAAW,YAAY;IACvC,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAAH,GAAG,SAAW;IAErC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC;IAI7B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI/C,OAAO,CAAC,GAAG;CAOZ"}

package/dist/runtime/runner/chart-trust.js

@@ -1,270 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ExecCosignRunner = exports.ChartTrustVerifier = exports.ChartTrustOutcome = exports.ChartTrustMode = exports.CHART_SIGNER_OIDC_ISSUER = exports.CHART_SIGNER_IDENTITY_REGEXP = exports.CHART_TRUST_ENV = void 0;
-exports.parseChartTrustMode = parseChartTrustMode;
-exports.cosignVerifyArgs = cosignVerifyArgs;
-exports.chartSignatureSubject = chartSignatureSubject;
-exports.assertChartTrust = assertChartTrust;
-const node_child_process_1 = require("node:child_process");
-const chart_resolver_1 = require("./chart-resolver");
-const chart_stage_record_1 = require("./chart-stage-record");
-exports.CHART_TRUST_ENV = 'XEMA_CHART_TRUST';
-exports.CHART_SIGNER_IDENTITY_REGEXP = '^https://github\\.com/xema-dev/(xema-deploy|xema-infra-services)/\\.github/workflows/publish-charts\\.yaml@refs/(heads/main|tags/charts-v.+)$';
-exports.CHART_SIGNER_OIDC_ISSUER = 'https://token.actions.githubusercontent.com';
-var ChartTrustMode;
-(function (ChartTrustMode) {
-    ChartTrustMode["Verify"] = "verify";
-    ChartTrustMode["Insecure"] = "insecure";
-})(ChartTrustMode || (exports.ChartTrustMode = ChartTrustMode = {}));
-function parseChartTrustMode(raw) {
-    if (raw === undefined || raw.length === 0) {
-        return ChartTrustMode.Verify;
-    }
-    const mode = Object.values(ChartTrustMode).find((candidate) => candidate === raw);
-    if (mode === undefined) {
-        throw new Error(`${exports.CHART_TRUST_ENV}='${raw}' is not a value this understands. Use ` +
-            `'${ChartTrustMode.Verify}' (the default) or, only for a mirror that ` +
-            `carries no signatures, '${ChartTrustMode.Insecure}'.`);
-    }
-    return mode;
-}
-var ChartTrustOutcome;
-(function (ChartTrustOutcome) {
-    ChartTrustOutcome["NoRemoteCharts"] = "no-remote-charts";
-    ChartTrustOutcome["LocalUnattested"] = "local-unattested";
-    ChartTrustOutcome["LocalUnrecorded"] = "local-unrecorded";
-    ChartTrustOutcome["Verified"] = "verified";
-    ChartTrustOutcome["Insecure"] = "insecure";
-    ChartTrustOutcome["CosignMissing"] = "cosign-missing";
-    ChartTrustOutcome["Unverified"] = "unverified";
-})(ChartTrustOutcome || (exports.ChartTrustOutcome = ChartTrustOutcome = {}));
-function cosignVerifyArgs(subject) {
-    return [
-        'verify',
-        '--certificate-identity-regexp',
-        exports.CHART_SIGNER_IDENTITY_REGEXP,
-        '--certificate-oidc-issuer',
-        exports.CHART_SIGNER_OIDC_ISSUER,
-        subject,
-    ];
-}
-function chartSignatureSubject(chart) {
-    if (chart.kind !== chart_resolver_1.ChartSourceKind.Oci) {
-        throw new Error(`Chart '${chart.name}' resolved locally (${chart.kind}) and has no registry ` +
-            'signature subject.');
-    }
-    if (chart.version.length === 0) {
-        throw new Error(`Chart '${chart.name}' resolved from the registry with no pinned version; ` +
-            'a signature subject cannot be formed without one.');
-    }
-    return `${chart.ref.replace(/^oci:\/\//, '')}:${chart.version}`;
-}
-class ChartTrustVerifier {
-    mode;
-    cosign;
-    verifiedSubjects = new Set();
-    stageRecords = new Map();
-    admittedLocalRefs = new Set();
-    constructor(opts = {}) {
-        const env = opts.env ?? process.env;
-        this.mode = opts.mode ?? parseChartTrustMode(env[exports.CHART_TRUST_ENV]);
-        this.cosign = opts.cosign ?? new ExecCosignRunner();
-    }
-    async evaluate(charts) {
-        const remote = charts.filter((chart) => chart.kind === chart_resolver_1.ChartSourceKind.Oci);
-        const subjects = remote.map((chart) => chart.name);
-        const localProvenance = this.evaluateLocalProvenance(charts.filter((chart) => chart.kind !== chart_resolver_1.ChartSourceKind.Oci));
-        if (localProvenance.unrecorded.length > 0) {
-            return {
-                mode: this.mode,
-                outcome: ChartTrustOutcome.LocalUnrecorded,
-                subjects,
-                unverified: localProvenance.unrecorded.map((entry) => entry.name),
-                message: 'Refusing to install a LOCAL chart the stage record does not cover:\n' +
-                    localProvenance.unrecorded
-                        .map((entry) => `  - ${entry.name}: ${entry.reason}`)
-                        .join('\n') +
-                    `\nThe record at ${String(localProvenance.recordPath)} is the chart ` +
-                    'digests `install-bundle.sh` carried out of the air-gap bundle AFTER ' +
-                    'verifying that bundle against the pinned Sigstore root. A chart it ' +
-                    'does not name came from somewhere else, and a local chart outranks ' +
-                    'the signed one the lock names — so it cannot be admitted on the ' +
-                    'strength of being in the directory. Re-run airgap/install-bundle.sh ' +
-                    'to restage from a verified bundle, or remove the file.',
-                passed: false,
-            };
-        }
-        if (remote.length === 0) {
-            return {
-                mode: this.mode,
-                outcome: localProvenance.attested
-                    ? ChartTrustOutcome.NoRemoteCharts
-                    : ChartTrustOutcome.LocalUnattested,
-                subjects: [],
-                unverified: [],
-                message: localProvenance.message,
-                passed: true,
-            };
-        }
-        if (this.mode === ChartTrustMode.Insecure) {
-            return {
-                mode: this.mode,
-                outcome: ChartTrustOutcome.Insecure,
-                subjects,
-                unverified: [],
-                message: `${exports.CHART_TRUST_ENV}=${ChartTrustMode.Insecure} — NOT verifying signatures ` +
-                    `for ${String(remote.length)} chart(s) pulled from the registry. These ` +
-                    'charts are being installed on the operator’s authority, not the ' +
-                    'publisher’s.',
-                passed: true,
-            };
-        }
-        if (!(await this.cosign.available())) {
-            return {
-                mode: this.mode,
-                outcome: ChartTrustOutcome.CosignMissing,
-                subjects,
-                unverified: [],
-                message: `cosign is required to verify the ${String(remote.length)} chart(s) this ` +
-                    'install pulls from the registry (install sigstore/cosign). Charts are ' +
-                    'keyless-signed by their publishing workflow and the helm client is the ' +
-                    'only place that signature can be checked — a Kubernetes image policy ' +
-                    'cannot gate a Helm chart. To install from a mirror that carries no ' +
-                    `signatures, set ${exports.CHART_TRUST_ENV}=${ChartTrustMode.Insecure} and own ` +
-                    'that decision.',
-                passed: false,
-            };
-        }
-        const unverified = [];
-        const inScope = [];
-        for (const chart of remote) {
-            const subject = chartSignatureSubject(chart);
-            inScope.push(subject);
-            if (this.verifiedSubjects.has(subject)) {
-                continue;
-            }
-            if (await this.cosign.verify(subject)) {
-                this.verifiedSubjects.add(subject);
-                continue;
-            }
-            unverified.push(chart.name);
-        }
-        if (unverified.length > 0) {
-            return {
-                mode: this.mode,
-                outcome: ChartTrustOutcome.Unverified,
-                subjects: inScope,
-                unverified,
-                message: `Signature verification FAILED for ${unverified.join(', ')}. A chart that ` +
-                    'does not verify was not published by xema-dev’s publish-charts workflow ' +
-                    '— it may be unsigned, signed by something else, or tampered with. ' +
-                    `Refusing to install it. Expected a signer identity matching ` +
-                    `${exports.CHART_SIGNER_IDENTITY_REGEXP} via ${exports.CHART_SIGNER_OIDC_ISSUER}.`,
-                passed: false,
-            };
-        }
-        return {
-            mode: this.mode,
-            outcome: ChartTrustOutcome.Verified,
-            subjects: inScope,
-            unverified: [],
-            message: localProvenance.message,
-            passed: true,
-        };
-    }
-    evaluateLocalProvenance(local) {
-        if (local.length === 0) {
-            return { attested: true, unrecorded: [], recordPath: null, message: '' };
-        }
-        const unrecorded = [];
-        let recordPath = null;
-        let unattested = 0;
-        for (const chart of local) {
-            if (this.admittedLocalRefs.has(chart.ref)) {
-                continue;
-            }
-            const chartsDir = (0, chart_stage_record_1.chartsDirOf)(chart.ref);
-            let record = this.stageRecords.get(chartsDir);
-            if (record === undefined) {
-                record = (0, chart_stage_record_1.loadChartStageRecord)(chartsDir);
-                this.stageRecords.set(chartsDir, record);
-            }
-            if (record !== null) {
-                recordPath = record.path;
-            }
-            const verdict = (0, chart_stage_record_1.chartStageVerdict)(chart.ref, chart.kind === chart_resolver_1.ChartSourceKind.LocalArchive, record);
-            switch (verdict) {
-                case chart_stage_record_1.ChartStageVerdict.NoRecord:
-                    unattested += 1;
-                    break;
-                case chart_stage_record_1.ChartStageVerdict.Admitted:
-                    this.admittedLocalRefs.add(chart.ref);
-                    break;
-                case chart_stage_record_1.ChartStageVerdict.NotRecorded:
-                    unrecorded.push({
-                        name: chart.name,
-                        reason: `${chart.ref} is not named in the stage record`,
-                    });
-                    break;
-                case chart_stage_record_1.ChartStageVerdict.DigestMismatch:
-                    unrecorded.push({
-                        name: chart.name,
-                        reason: `${chart.ref} is named in the stage record at DIFFERENT bytes`,
-                    });
-                    break;
-                case chart_stage_record_1.ChartStageVerdict.NotAnArchive:
-                    unrecorded.push({
-                        name: chart.name,
-                        reason: `${chart.ref} is a chart DIRECTORY, and a record of packaged ` +
-                            'charts cannot cover one — the bundle stages .tgz only',
-                    });
-                    break;
-            }
-        }
-        return {
-            attested: unattested === 0,
-            unrecorded,
-            recordPath,
-            message: unattested === 0
-                ? ''
-                : `${String(unattested)} local chart(s) resolved from a charts ` +
-                    'directory with NO stage record — nothing attests where they came ' +
-                    'from. That is expected for a checkout or a hand-placed chart and ' +
-                    'is NOT expected on a box installed from an air-gap bundle, which ' +
-                    'always writes one. These charts are being installed on the ' +
-                    'operator’s authority, not the publisher’s.',
-        };
-    }
-    async assertVerified(charts) {
-        const report = await this.evaluate(charts);
-        assertChartTrust(report);
-        return report;
-    }
-}
-exports.ChartTrustVerifier = ChartTrustVerifier;
-function assertChartTrust(report) {
-    if (!report.passed) {
-        throw new Error(report.message);
-    }
-}
-class ExecCosignRunner {
-    bin;
-    constructor(bin = 'cosign') {
-        this.bin = bin;
-    }
-    async available() {
-        return this.run(['version']);
-    }
-    async verify(subject) {
-        return this.run(cosignVerifyArgs(subject));
-    }
-    run(args) {
-        return new Promise((resolve) => {
-            (0, node_child_process_1.execFile)(this.bin, [...args], { maxBuffer: 8 * 1024 * 1024 }, (err) => {
-                resolve(err === null);
-            });
-        });
-    }
-}
-exports.ExecCosignRunner = ExecCosignRunner;
-//# sourceMappingURL=chart-trust.js.map

package/dist/runtime/runner/chart-trust.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chart-trust.js","sourceRoot":"","sources":["../../../src/runtime/runner/chart-trust.ts"],"names":[],"mappings":";;;AAyFA,kDAeC;AAoED,4CASC;AAUD,sDAcC;AAkRD,4CAIC;AAneD,2DAA8C;AAE9C,qDAAuE;AACvE,6DAM8B;AAuCjB,QAAA,eAAe,GAAG,kBAAkB,CAAC;AAarC,QAAA,4BAA4B,GACvC,+IAA+I,CAAC;AAErI,QAAA,wBAAwB,GACnC,6CAA6C,CAAC;AAMhD,IAAY,cAUX;AAVD,WAAY,cAAc;IAExB,mCAAiB,CAAA;IAOjB,uCAAqB,CAAA;AACvB,CAAC,EAVW,cAAc,8BAAd,cAAc,QAUzB;AAQD,SAAgB,mBAAmB,CAAC,GAAuB;IACzD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,cAAc,CAAC,MAAM,CAAC;IAC/B,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,CAC7C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,GAAG,CACjC,CAAC;IACF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,GAAG,uBAAe,KAAK,GAAG,yCAAyC;YACjE,IAAI,cAAc,CAAC,MAAM,6CAA6C;YACtE,2BAA2B,cAAc,CAAC,QAAQ,IAAI,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAGD,IAAY,iBAgCX;AAhCD,WAAY,iBAAiB;IAQ3B,wDAAmC,CAAA;IAQnC,yDAAoC,CAAA;IAOpC,yDAAoC,CAAA;IAEpC,0CAAqB,CAAA;IAErB,0CAAqB,CAAA;IAErB,qDAAgC,CAAA;IAEhC,8CAAyB,CAAA;AAC3B,CAAC,EAhCW,iBAAiB,iCAAjB,iBAAiB,QAgC5B;AAiCD,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO;QACL,QAAQ;QACR,+BAA+B;QAC/B,oCAA4B;QAC5B,2BAA2B;QAC3B,gCAAwB;QACxB,OAAO;KACR,CAAC;AACJ,CAAC;AAUD,SAAgB,qBAAqB,CAAC,KAAoB;IACxD,IAAI,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,IAAI,uBAAuB,KAAK,CAAC,IAAI,wBAAwB;YAC3E,oBAAoB,CACvB,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,UAAU,KAAK,CAAC,IAAI,uDAAuD;YACzE,mDAAmD,CACtD,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AAClE,CAAC;AA8BD,MAAa,kBAAkB;IACpB,IAAI,CAAiB;IACb,MAAM,CAAe;IACrB,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAErC,YAAY,GAAG,IAAI,GAAG,EAAmC,CAAC;IAE1D,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvD,YAAY,OAAkC,EAAE;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,mBAAmB,CAAC,GAAG,CAAC,uBAAe,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;IACtD,CAAC;IAMD,KAAK,CAAC,QAAQ,CACZ,MAAgC;QAEhC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAOnD,MAAM,eAAe,GAAG,IAAI,CAAC,uBAAuB,CAClD,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,GAAG,CAAC,CAC7D,CAAC;QACF,IAAI,eAAe,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,eAAe;gBAC1C,QAAQ;gBACR,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;gBACjE,OAAO,EACL,sEAAsE;oBACtE,eAAe,CAAC,UAAU;yBACvB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;yBACpD,IAAI,CAAC,IAAI,CAAC;oBACb,mBAAmB,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,gBAAgB;oBACrE,sEAAsE;oBACtE,qEAAqE;oBACrE,qEAAqE;oBACrE,kEAAkE;oBAClE,sEAAsE;oBACtE,wDAAwD;gBAC1D,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,eAAe,CAAC,QAAQ;oBAC/B,CAAC,CAAC,iBAAiB,CAAC,cAAc;oBAClC,CAAC,CAAC,iBAAiB,CAAC,eAAe;gBACrC,QAAQ,EAAE,EAAE;gBACZ,UAAU,EAAE,EAAE;gBACd,OAAO,EAAE,eAAe,CAAC,OAAO;gBAChC,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,QAAQ,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,QAAQ;gBACnC,QAAQ;gBACR,UAAU,EAAE,EAAE;gBACd,OAAO,EACL,GAAG,uBAAe,IAAI,cAAc,CAAC,QAAQ,8BAA8B;oBAC3E,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,4CAA4C;oBACxE,kEAAkE;oBAClE,cAAc;gBAChB,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAMD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACrC,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,aAAa;gBACxC,QAAQ;gBACR,UAAU,EAAE,EAAE;gBACd,OAAO,EACL,oCAAoC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB;oBAC1E,wEAAwE;oBACxE,yEAAyE;oBACzE,uEAAuE;oBACvE,qEAAqE;oBACrE,mBAAmB,uBAAe,IAAI,cAAc,CAAC,QAAQ,WAAW;oBACxE,gBAAgB;gBAClB,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACnC,SAAS;YACX,CAAC;YACD,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,iBAAiB,CAAC,UAAU;gBACrC,QAAQ,EAAE,OAAO;gBACjB,UAAU;gBACV,OAAO,EACL,qCAAqC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB;oBAC3E,0EAA0E;oBAC1E,oEAAoE;oBACpE,8DAA8D;oBAC9D,GAAG,oCAA4B,QAAQ,gCAAwB,GAAG;gBACpE,MAAM,EAAE,KAAK;aACd,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,iBAAiB,CAAC,QAAQ;YACnC,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,EAAE;YAKd,OAAO,EAAE,eAAe,CAAC,OAAO;YAChC,MAAM,EAAE,IAAI;SACb,CAAC;IACJ,CAAC;IAYO,uBAAuB,CAC7B,KAA+B;QAE/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3E,CAAC;QAED,MAAM,UAAU,GAAuC,EAAE,CAAC;QAC1D,IAAI,UAAU,GAAkB,IAAI,CAAC;QACrC,IAAI,UAAU,GAAG,CAAC,CAAC;QAEnB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,gCAAW,EAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,GAAG,IAAA,yCAAoB,EAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;gBACpB,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC;YAC3B,CAAC;YACD,MAAM,OAAO,GAAG,IAAA,sCAAiB,EAC/B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,IAAI,KAAK,gCAAe,CAAC,YAAY,EAC3C,MAAM,CACP,CAAC;YACF,QAAQ,OAAO,EAAE,CAAC;gBAChB,KAAK,sCAAiB,CAAC,QAAQ;oBAC7B,UAAU,IAAI,CAAC,CAAC;oBAChB,MAAM;gBACR,KAAK,sCAAiB,CAAC,QAAQ;oBAC7B,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBACtC,MAAM;gBACR,KAAK,sCAAiB,CAAC,WAAW;oBAChC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,mCAAmC;qBACxD,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,sCAAiB,CAAC,cAAc;oBACnC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,kDAAkD;qBACvE,CAAC,CAAC;oBACH,MAAM;gBACR,KAAK,sCAAiB,CAAC,YAAY;oBACjC,UAAU,CAAC,IAAI,CAAC;wBACd,IAAI,EAAE,KAAK,CAAC,IAAI;wBAChB,MAAM,EACJ,GAAG,KAAK,CAAC,GAAG,kDAAkD;4BAC9D,uDAAuD;qBAC1D,CAAC,CAAC;oBACH,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,UAAU,KAAK,CAAC;YAC1B,UAAU;YACV,UAAU;YACV,OAAO,EACL,UAAU,KAAK,CAAC;gBACd,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,yCAAyC;oBAC9D,mEAAmE;oBACnE,mEAAmE;oBACnE,mEAAmE;oBACnE,6DAA6D;oBAC7D,4CAA4C;SACnD,CAAC;IACJ,CAAC;IAGD,KAAK,CAAC,cAAc,CAAC,MAAgC;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACzB,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAjPD,gDAiPC;AAGD,SAAgB,gBAAgB,CAAC,MAAwB;IACvD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAYD,MAAa,gBAAgB;IACE;IAA7B,YAA6B,MAAM,QAAQ;QAAd,QAAG,GAAH,GAAG,CAAW;IAAG,CAAC;IAE/C,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAAe;QAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEO,GAAG,CAAC,IAAuB;QACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAA,6BAAQ,EAAC,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;gBACpE,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;CACF;AAlBD,4CAkBC"}