app-builder-lib 27.0.0-alpha.7 → 27.0.0-alpha.9

package/dist/util/electronGet.js

@@ -233,6 +233,47 @@ function initializeProxyOnce() {
 export function reinitializeProxy() {
     get.initializeProxy();
 }
+/**
+ * Error codes considered transient for artifact downloads. Plain node socket errors carry the code
+ * directly on `error.code`; undici (the fetch implementation used by @electron/get v5) wraps them in
+ * a `TypeError: fetch failed` whose code lives on `error.cause.code` — including undici's own
+ * `UND_ERR_*` codes for connection resets and connect timeouts.
+ */
+const TRANSIENT_DOWNLOAD_ERROR_CODES = new Set([
+    "ENOTFOUND",
+    "ETIMEDOUT",
+    "ECONNRESET",
+    "ECONNREFUSED",
+    "EAI_AGAIN",
+    "EPIPE",
+    "ENOENT",
+    "UND_ERR_SOCKET",
+    "UND_ERR_CONNECT_TIMEOUT",
+]);
+/**
+ * Decides whether a failed @electron/get download should be retried. Handles all three error shapes
+ * seen in practice (exported for tests):
+ * - builder-util-runtime's `HttpError` — retry on 5xx.
+ * - @electron/get v5's `HTTPError` (`FetchDownloader`) — a plain `Error` subclass with the fetch
+ *   `Response` on `.response` and NO `.code`; retry on 5xx and 429. Matched by class and by
+ *   `name === "HTTPError"` as a fallback in case multiple @electron/get copies are loaded.
+ * - transient network errors — code on `error.code`, or on `error.cause.code` for undici's
+ *   `TypeError: fetch failed` wrapper.
+ */
+export function shouldRetryDownloadError(e) {
+    if (e == null) {
+        return false;
+    }
+    if (e instanceof HttpError) {
+        return e.isServerError();
+    }
+    if (e instanceof get.HTTPError || e.name === "HTTPError") {
+        const status = e.response?.status;
+        return typeof status === "number" && (status >= 500 || status === 429);
+    }
+    const code = typeof e.code === "string" ? e.code : typeof e.cause?.code === "string" ? e.cause.code : undefined;
+    return code != null && TRANSIENT_DOWNLOAD_ERROR_CODES.has(code);
+}
 async function downloadArtifactToFile(config, label) {
     // Serialize concurrent downloads of the same artifact across vitest workers to prevent @electron/get's
     // non-atomic putFileInCache (remove + move) from racing with a concurrent reader.
@@ -298,7 +339,7 @@ async function downloadArtifactToFile(config, label) {
                 retries: 3,
                 interval: 2000,
                 backoff: 2000,
-                shouldRetry: (e) => e instanceof HttpError ? e.isServerError() : typeof e?.code === "string" && ["ENOTFOUND", "ETIMEDOUT", "ECONNRESET", "EPIPE", "ENOENT"].includes(e.code),
+                shouldRetry: shouldRetryDownloadError,
             });
         }
         catch (err) {
@@ -498,7 +539,7 @@ const CUSTOM_DIR_ENV_VARS = [
  * Resolves the final download URL for a builder binary, honouring:
  *   ELECTRON_BUILDER_BINARIES_DOWNLOAD_OVERRIDE_URL  – fully replaces the URL directory
  *   ELECTRON_BUILDER_BINARIES_CUSTOM_DIR (and npm_ variants) – replaces releaseName in the path
- *   overrideUrl (caller-supplied)                     – used as-is when no env var is set
+ *   overrideUrl (caller-supplied)                     – the complete file URL, used as-is when no env var is set
  *
  * Exported for unit testing; not part of the public API.
  * @internal
@@ -509,7 +550,9 @@ export function resolveBuilderBinaryUrl(releaseName, filenameWithExt, baseUrl, o
         return `${envOverrideUrl}/${filenameWithExt}`;
     }
     if (overrideUrl != null) {
-        return `${overrideUrl}/${filenameWithExt}`;
+        // The caller-supplied override (ToolsetCustom.url) points directly at the file — appending
+        // filenameWithExt would double the last path segment (e.g. …/bundle.7z/bundle.7z, issue #10084).
+        return overrideUrl;
     }
     const customDirEntry = CUSTOM_DIR_ENV_VARS.map(name => ({ name, value: process.env[name] })).find(e => e.value != null);
     if (customDirEntry != null) {
@@ -521,8 +564,25 @@ export function resolveBuilderBinaryUrl(releaseName, filenameWithExt, baseUrl, o
  * Downloads a generic artifact (.tar.gz or .zip) from a GitHub release.
  * Used for electron-builder-binaries tools (appimage, etc.).
  */
+/** Toolsets already announced this process, so a multi-target build logs each one once. */
+const announcedToolsets = new Set();
+/**
+ * Every `toolsets.*` property now defaults to "latest", which resolves to a newer bundle than v26
+ * pinned (NSIS 3.0.4.1 -> 3.12, winCodeSign 2.6.0 -> 1.3.0, Wine 4.0.1 -> 11.0, AppImage FUSE2 ->
+ * static FUSE3). Nothing recorded which version was used: `downloadBuilderToolset` logged only at
+ * debug level, and on a warm cache it printed nothing at all — so a regression introduced by a new
+ * bundle had no trace in the build log tying it to the toolset.
+ */
+function announceToolsetVersion(releaseName) {
+    if (announcedToolsets.has(releaseName)) {
+        return;
+    }
+    announcedToolsets.add(releaseName);
+    log.info({ toolset: releaseName }, "using toolset");
+}
 export async function downloadBuilderToolset(options) {
     const { releaseName, filenameWithExt, checksums, githubOrgRepo = "electron-userland/electron-builder-binaries", overrideUrl } = options;
+    announceToolsetVersion(releaseName);
     if (/[/\\]|^\.\./.test(filenameWithExt) || filenameWithExt.includes("..")) {
         throw new Error(`downloadBuilderToolset: unsafe filenameWithExt "${filenameWithExt}" — must be a plain filename with no path separators or traversal sequences`);
     }

package/dist/util/electronGet.js.map

@@ -1 +1 @@
-{"version":3,"file":"electronGet.js","sourceRoot":"","sources":["../../src/util/electronGet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,eAAe,CAAA;AACpC,OAAO,EAEL,yBAAyB,GAM1B,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5I,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,KAAK,CAAA;AAC1B,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AA8BtJ,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IACnD,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,CAAA;IACX,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7B,OAAO,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAChF,CAAC;AAED,sGAAsG;AACtG,sGAAsG;AACtG,8FAA8F;AAC9F,wDAAwD;AACxD,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,QAAQ,CACvD,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,EAChD,KAAK,IAAI,EAAE;IACT,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAA;IACxG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;IACpB,OAAO,GAAG,CAAA;AACZ,CAAC,CACF,CAAA;AACD,qGAAqG;AACrG,wGAAwG;AACxG,kCAAkC;AAClC,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAA2E;IACzH,MAAM,EAAE,sBAAsB,GAAG,IAAI,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAA;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAA;IACtD,IAAI,mBAAmB,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAA;IAClC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAE5B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAA;QAC5D,oEAAoE;QACpE,MAAM,YAAY,GAAG,sBAAsB,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAA;QACxI,IAAI,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IAC3C,OAAO,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AACrH,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,8BAA8B,CAAA;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,yBAAyB,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAA8B,CAAA;QAC/D,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,qCAAqC,OAAO,EAAE,CAAC,CAAA;QACnE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,yBAAyB,CAAC,SAAS,CAAA;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,CAAA;QACtC,MAAM,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;QACrC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,cAAc,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,aAAa,CAAA;AAChG,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAW;IAC1D,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAA;QAC1D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,QAAQ,CAAA;IAElE,mEAAmE;IACnE,oFAAoF;IACpF,6DAA6D;IAC7D,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAwC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1D,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;gBAChD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAA;gBAC/D,CAAC;gBACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;gBACnE,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAA;gBACrE,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACtC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC7C,KAAK,CAAC,SAAS,EAAE,CAAA;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,MAAM,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAClD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;oBACb,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAC,CAAA;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,OAAO,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAErC,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;QAC1C,iGAAiG;QACjG,+FAA+F;QAC/F,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,MAAM,EAAE,uDAAuD;KACvE,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,yGAAyG;QACzG,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,mGAAmG;QACnG,qGAAqG;QACrG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACnH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,8CAA8C,CAAC,CAAA;YAClF,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzF,6FAA6F;YAC7F,wDAAwD;YACxD,kGAAkG;YAClG,uIAAuI;YACvI,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,MAAM,gBAAgB,GAAG,GAAG,MAAM,aAAa,CAAA;YAC/C,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;gBAClG,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBACnF,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;gBACrF,CAAC;gBACD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3F,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,kEAAkE;gBAClE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAA;oBAC1H,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;gBACnE,CAAC;gBACD,8DAA8D;gBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAA;YACvG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,mCAAmC;QACnC,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,IAAI,gBAAgB,GAAG,KAAK,CAAA;AAC5B,SAAS,mBAAmB;IAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,iBAAiB,EAAE,CAAA;QACnB,gBAAgB,GAAG,IAAI,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,GAAG,CAAC,eAAe,EAAE,CAAA;AACvB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,MAA+B,EAAE,KAAa;IAClF,uGAAuG;IACvG,kFAAkF;IAClF,MAAM,GAAG,GAAG;QACV,CAAC,EAAG,MAA0C,CAAC,QAAQ;QACvD,CAAC,EAAG,MAA0C,CAAC,IAAI;QACnD,CAAC,EAAE,MAAM,CAAC,OAAO;QACjB,CAAC,EAAE,MAAM,CAAC,YAAY;QACtB,CAAC,EAAE,MAAM,CAAC,SAAS;KACpB,CAAA;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1G,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,eAAe,OAAO,CAAC,CAAA;IAChF,oGAAoG;IACpG,mGAAmG;IACnG,qGAAqG;IACrG,kGAAkG;IAClG,2FAA2F;IAC3F,MAAM,mBAAmB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE;QAChE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;QAC5D,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAA;IACF,IAAI,mBAAmB,GAAG,CAAC,CAAC,CAAA;IAC5B,MAAM,KAAK,GAAqC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;IAElE,mGAAmG;IACnG,uGAAuG;IACvG,mBAAmB,EAAE,CAAA;IAErB,MAAM,eAAe,GAA2B;QAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,iDAAiD;QAC9F,GAAG,MAAM,CAAC,eAAe;QACzB,mBAAmB,EAAE,IAAI,CAAC,EAAE;YAC1B,iFAAiF;YACjF,kFAAkF;YAClF,iFAAiF;YACjF,8EAA8E;YAC9E,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;gBACzC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;YAC1B,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;gBAClC,KAAK,CAAC,GAAG,GAAG,IAAI,aAAa,EAAE,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,qBAAqB,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;YACnH,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACrE,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACvB,CAAC;iBAAM,CAAC;gBACN,oKAAoK;gBACpK,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA;gBACvI,IAAI,gBAAgB,GAAG,mBAAmB,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACnE,mBAAmB,GAAG,gBAAgB,CAAA;oBACtC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,gBAAgB,GAAG,EAAE,EAAE,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;gBAChH,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;IAED,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,CAAA;IACzD,IAAI,CAAC;QACH,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE;gBACrE,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,CAAC,CAAM,EAAE,EAAE,CACtB,CAAC,YAAY,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;aAC3J,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAQ,GAAW,EAAE,OAAO,KAAK,QAAQ,IAAK,GAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACtG,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,8DAA8D,CAAC,CAAA;YAC7F,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,kBAAkB,EAAE,SAAS,EAAE,yBAAyB,CAAC,SAAS,EAAE,CAAC,CAAA;QAClH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,CAAA;QACtB,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0CAA0C,CAAC,CAAC,CAAA;IACzG,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,uBAAuB,CAAC,gBAAwB,EAAE,KAAa,EAAE,cAAkC;IAChH,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YACrC,MAAM,CAAC,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;YAC5C,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACrB,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YACzD,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QACF,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,gEAAgE,CAAC,CAAA;YAC7G,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,0CAA0C,CAAC,CAAA;IACxF,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,gBAAwB;IAC/E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,iEAAiE,CAAC,CAAA;IACxG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAA+B,EAAE,UAAkB,EAAE,KAAa,EAAE,gBAAyB;IAC7H,gGAAgG;IAChG,mGAAmG;IACnG,iGAAiG;IACjG,8FAA8F;IAC9F,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;IAEzC,2FAA2F;IAC3F,+FAA+F;IAC/F,yFAAyF;IACzF,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAA;IACtD,IAAI,SAAS,EAAE,KAAK,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;QAC7E,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,qCAAqC,CAAC,CAAA;YACnF,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,kGAAkG;IAClG,8FAA8F;IAC9F,oGAAoG;IACpG,+EAA+E;IAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE;QAC9C,8FAA8F;QAC9F,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,yCAAyC;QACzC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,MAAM;KACd,CAAC,CAAA;IACF,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,CAAC;QACH,oFAAoF;QACpF,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAC/D,IAAI,kBAAkB,EAAE,KAAK,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;YACtF,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,mDAAmD,CAAC,CAAA;gBACjG,OAAO,UAAU,CAAA;YACnB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,mDAAmD,CAAC,CAAA;QAC/E,CAAC;aAAM,IAAI,kBAAkB,EAAE,KAAK,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,yDAAyD,CAAC,CAAA;QACrF,CAAC;QAED,yEAAyE;QACzE,MAAM,qBAAqB,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,MAAM,SAAS,CAAC,UAAU,CAAC,CAAA;QAE3B,4EAA4E;QAC5E,kFAAkF;QAClF,sFAAsF;QACtF,8CAA8C;QAC9C,IAAI,gBAAgB,EAAE,CAAC;YACrB,cAAc,GAAG,MAAM,uBAAuB,CAAC,gBAAgB,EAAE,KAAK,EAAG,MAAc,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7G,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;YACzC,cAAc,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAA;YAC1D,CAAC;YACD,iFAAiF;YACjF,qCAAqC;YACrC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,qBAAqB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;QAExD,uFAAuF;QACvF,MAAM,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;QAExD,oEAAoE;QACpE,MAAM,cAAc,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;QAEhD,6FAA6F;QAC7F,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAA;QAE3E,uFAAuF;QACvF,+FAA+F;QAC/F,MAAM,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;IAC5F,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,QAAwB;IAClF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC5D,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,oGAAoG,CAAC,CAAA;IACzH,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,sBAAsB,CACjD;QACE,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,6BAA6B,CAAC,KAAK,EAAE,WAAW,CAAC;QAC/E,SAAS,EAAE,gBAAgB,EAAE;QAC7B,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;QAC3G,aAAa,EAAE,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACpE,SAAS,EAAE,IAAI;KAChB,EACD,eAAe,CAChB,CAAA;IACD,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB,EAAE,KAAa;IAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,kEAAkE,GAAG,0EAA0E,KAAK,GAAG,CACrK,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,mBAAmB,GAAG;IAC1B,iDAAiD;IACjD,iDAAiD;IACjD,yDAAyD;IACzD,sCAAsC;CAC9B,CAAA;AAEV;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,eAAuB,EAAE,OAAe,EAAE,WAAoB;IACzH,MAAM,cAAc,GAAG,mBAAmB,CAAC,iDAAiD,CAAC,CAAA;IAC7F,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,GAAG,cAAc,IAAI,eAAe,EAAE,CAAA;IAC/C,CAAC;IACD,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,OAAO,GAAG,WAAW,IAAI,eAAe,EAAE,CAAA;IAC5C,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;IACvH,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,GAAG,OAAO,GAAG,uBAAuB,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,KAAM,CAAC,IAAI,eAAe,EAAE,CAAA;IAC9G,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,WAAW,IAAI,eAAe,EAAE,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAM5C;IACC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,GAAG,6CAA6C,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IAEvI,IAAI,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mDAAmD,eAAe,6EAA6E,CAAC,CAAA;IAClK,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,uBAAuB,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACtC,yGAAyG;IACzG,8GAA8G;IAC9G,kGAAkG;IAClG,MAAM,UAAU,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAA;IAC5G,sHAAsH;IACtH,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAA;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;IAE1F,uFAAuF;IACvF,+FAA+F;IAC/F,MAAM,aAAa,GAAkB;QACnC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KACtD,CAAA;IAED,2FAA2F;IAC3F,6FAA6F;IAC7F,yFAAyF;IACzF,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAA;IAErG,MAAM,MAAM,GAAmF;QAC7F,OAAO,EAAE,OAAO,EAAE,6DAA6D;QAC/E,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,6BAA6B,CAAC,KAAK,EAAE,WAAW,CAAC;QAC/E,SAAS,EAAE,gBAAgB,EAAE;QAC7B,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;QAC3E,aAAa;QACb,SAAS,EAAE,IAAI;KAChB,CAAA;IACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,UAAU,CAAA;IACvB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC5B,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QACtD,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACrG;YACE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;IACtF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,OAAe,EAAE,gBAAwB;IACvG,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAC9G,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC/B,SAAQ;QACV,CAAC;QACD,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,kDAAkD,CAAC,CAAA;YACjH,SAAQ;QACV,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,SAAS,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,2EAA2E,CAAC,CAAA;YAC1I,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,iFAAiF,CAAC,CAAA;QACjJ,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,eAAwC;IACxF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;IAE7G,IAAI,OAAO,EAAE,wBAAwB,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CACN,EAAE,YAAY,EAAE,EAChB,2JAA2J,CAC5J,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAoC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,CAAA;IACvJ,IAAI,cAAc,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,wBAAwB,EAAE,CAAC;QACjF,8FAA8F;QAC9F,oFAAoF;QACpF,MAAM,gBAAgB,GAAG,GAAG,YAAY,KAAK,OAAO,IAAI,QAAQ,IAAI,IAAI,MAAM,CAAA;QAC9E,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,SAAS,IAAI,2BAA2B,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;QAC3H,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;YAC5B,cAAc,CAAC,SAAS,GAAG,eAAe,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgC;IAChF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAA;IACzD,OAAO,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAgC;IAC7E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IACvE,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAA;IAEjE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,OAAO,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAA;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,6BAA6B,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;IAElH,OAAO,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,KAAK,MAAM,CAAA;IACnF,KAAK,MAAM,MAAM,IAAI;QACnB,6CAA6C;QAC7C,6CAA6C;QAC7C,qDAAqD;QACrD,kCAAkC;KACnC,EAAE,CAAC;QACF,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAClD,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,sBAAsB,aAAa,qBAAqB,CAAA;AACjE,CAAC","sourcesContent":["import * as get from \"@electron/get\"\nimport {\n  ElectronArtifactDetails,\n  ElectronDownloadCacheMode,\n  ElectronDownloadRequest,\n  ElectronDownloadRequestOptions,\n  ElectronPlatformArtifactDetails,\n  FetchDownloaderOptions,\n  MirrorOptions,\n} from \"@electron/get\"\nimport { exec, exists, log, PADDING, parseValidEnvVarUrl, sanitizeDirPath, to7zaOutputSwitch, ensureDir, moveDirAtomic } from \"builder-util\"\nimport { HttpError, MemoLazy, retry, sleep } from \"builder-util-runtime\"\nimport * as crypto from \"crypto\"\nimport type { ProgressBar } from \"electron-publish\"\nimport { MultiProgress } from \"electron-publish\"\nimport { createReadStream, createWriteStream } from \"fs\"\nimport * as fs from \"fs/promises\"\nimport * as os from \"os\"\nimport * as path from \"path\"\nimport * as lockfile from \"proper-lockfile\"\nimport { pipeline } from \"stream/promises\"\nimport * as tar from \"tar\"\nimport * as unzipper from \"unzipper\"\nimport { getPath7za } from \"../toolsets/7zip.js\"\nimport { CacheState, cleanupCacheDirectory, computeCacheMetadata, readCacheStateFile, validateCacheDirectory, writeCacheState } from \"./cacheState.js\"\n\nexport interface ElectronGetOptions extends Omit<\n  ElectronPlatformArtifactDetails,\n  | \"platform\"\n  | \"arch\"\n  | \"version\"\n  | \"artifactName\"\n  | \"artifactSuffix\"\n  | \"customFilename\"\n  | \"tempDirectory\"\n  | \"downloader\"\n  | \"cacheMode\"\n  | \"cacheRoot\"\n  | \"downloadOptions\"\n  | \"isGeneric\"\n  | \"mirrorOptions\"\n> {\n  mirrorOptions?: Omit<MirrorOptions, \"customDir\" | \"customFilename\" | \"customVersion\">\n}\n\nexport type ArtifactDownloadOptions = {\n  options?: ElectronGetOptions | null\n  artifactName: string\n  platformName: string\n  arch: string\n  version: string\n  cacheDir?: string\n}\n\nexport function hashUrlSafe(input: string, length = 6): string {\n  let hash = 5381\n  for (let i = 0; i < input.length; i++) {\n    hash = ((hash << 5) + hash) ^ input.charCodeAt(i)\n  }\n  hash >>>= 0\n  const out = hash.toString(36)\n  return out.length >= length ? out.slice(0, length) : out.padStart(length, \"0\")\n}\n\n// MemoLazy (not Lazy): keyed on ELECTRON_BUILDER_CACHE so the resolved cache dir is recomputed if the\n// override env var changes, while staying memoized when it doesn't (the production case). The creator\n// also ensures the resolved dir exists — that side effect lives here, at the point of use, so\n// getCacheDirectoryInternal stays a pure path resolver.\nexport const cacheDirectoryOverrideAllowed = new MemoLazy<string | undefined, string>(\n  () => process.env.ELECTRON_BUILDER_CACHE?.trim(),\n  async () => {\n    const dir = await getCacheDirectoryInternal({ isAvoidSystemOnWindows: true, allowEnvVarOverride: true })\n    await ensureDir(dir)\n    return dir\n  }\n)\n// Exposed for testing; not intended for public use. Pure path resolution (no I/O) — use the memoized\n// const's above when you need the directory to exist on disk. Kept async for a stable Promise-returning\n// contract across all call sites.\n// eslint-disable-next-line @typescript-eslint/require-await\nexport async function getCacheDirectoryInternal(options: { isAvoidSystemOnWindows?: boolean; allowEnvVarOverride: boolean }): Promise<string> {\n  const { isAvoidSystemOnWindows = true, allowEnvVarOverride } = options\n  const env = process.env.ELECTRON_BUILDER_CACHE?.trim()\n  if (allowEnvVarOverride && env && path.parse(env).root) {\n    return sanitizeDirPath(env)\n  }\n\n  const appName = \"electron-builder\"\n  const platform = os.platform()\n  const homeDir = os.homedir()\n\n  if (platform === \"darwin\") {\n    return path.join(homeDir, \"Library\", \"Caches\", appName)\n  }\n  if (platform === \"win32\") {\n    const localAppData = process.env.LOCALAPPDATA?.trim()\n    const username = process.env.USERNAME?.trim()?.toLowerCase()\n    // https://github.com/electron-userland/electron-builder/issues/1164\n    const isSystemUser = isAvoidSystemOnWindows && (localAppData?.toLowerCase()?.includes(\"\\\\windows\\\\system32\\\\\") || username === \"system\")\n    if (!localAppData || isSystemUser) {\n      return path.join(os.tmpdir(), `${appName}-cache`)\n    }\n    return path.join(localAppData, appName, \"Cache\")\n  }\n\n  const xdgCache = process.env.XDG_CACHE_HOME\n  return xdgCache && path.parse(xdgCache).root ? path.join(xdgCache, appName) : path.join(homeDir, \".cache\", appName)\n}\n\nfunction resolveCacheMode(): ElectronDownloadCacheMode {\n  const varName = \"ELECTRON_DOWNLOAD_CACHE_MODE\"\n  const cacheOverride = process.env[varName]?.trim()\n  if (cacheOverride && Number(cacheOverride) in ElectronDownloadCacheMode) {\n    const mode = Number(cacheOverride) as ElectronDownloadCacheMode\n    log.debug({ mode }, `cache mode overridden via env var ${varName}`)\n    return mode\n  }\n  return ElectronDownloadCacheMode.ReadWrite\n}\n\n/**\n * Returns true when `destPath` is safely contained within `dir` (direct child or deeper).\n * On Windows the filesystem is case-insensitive so the comparison is normalised to lowercase.\n * @internal exported for unit testing\n */\nexport function isSafeExtractPath(destPath: string, dir: string): boolean {\n  const normalizedDest = path.resolve(destPath)\n  const normalizedDir = path.resolve(dir)\n  if (process.platform === \"win32\") {\n    const d = normalizedDest.toLowerCase()\n    const b = normalizedDir.toLowerCase()\n    return d.startsWith(b + path.sep) || d === b\n  }\n  return normalizedDest.startsWith(normalizedDir + path.sep) || normalizedDest === normalizedDir\n}\n\nasync function extractZipStreaming(file: string, dir: string): Promise<void> {\n  // Pass 1: read central directory once to collect Unix modes (one seek to EOF)\n  const zipDir = await unzipper.Open.file(file)\n  const entryModes = new Map<string, number>()\n  for (const entry of zipDir.files) {\n    const mode = (entry.externalFileAttributes >> 16) & 0xffff\n    if (mode > 0) {\n      entryModes.set(entry.path, mode)\n    }\n  }\n  const isSymlink = (mode: number) => (mode & 0o170000) === 0o120000\n\n  // Pass 2: stream from byte 0 — no per-entry seeks, no Docker hang.\n  // Destroy the read stream in a finally block so the file handle is always released,\n  // including when the loop exits early due to a thrown error.\n  const readStream = createReadStream(file)\n  try {\n    const entries = readStream.pipe(unzipper.Parse({ forceStream: true }))\n    for await (const entry of entries as AsyncIterable<unzipper.Entry>) {\n      const destPath = path.resolve(dir, entry.path)\n      if (!isSafeExtractPath(destPath, dir)) {\n        throw new Error(`Path traversal blocked: ${entry.path}`)\n      }\n      const mode = entryModes.get(entry.path) ?? 0\n      if (mode > 0 && isSymlink(mode)) {\n        const target = (await entry.buffer()).toString()\n        if (path.isAbsolute(target)) {\n          throw new Error(`Absolute symlink target blocked: ${target}`)\n        }\n        const resolvedTarget = path.resolve(path.dirname(destPath), target)\n        if (!isSafeExtractPath(resolvedTarget, dir)) {\n          throw new Error(`Symlink target escapes extraction dir: ${target}`)\n        }\n        await fs.mkdir(path.dirname(destPath), { recursive: true })\n        await fs.symlink(target, destPath)\n      } else if (entry.type === \"Directory\") {\n        await fs.mkdir(destPath, { recursive: true })\n        entry.autodrain()\n      } else {\n        await fs.mkdir(path.dirname(destPath), { recursive: true })\n        await pipeline(entry, createWriteStream(destPath))\n        if (mode > 0) {\n          await fs.chmod(destPath, mode & 0o7777)\n        }\n      }\n    }\n  } finally {\n    readStream.destroy()\n  }\n}\n\nexport async function extractArchive(archive: string, dir: string) {\n  const file = sanitizeDirPath(archive)\n\n  const tmpDir = `${dir}.tmp`\n  await fs.mkdir(tmpDir, { recursive: true })\n\n  const release = await lockfile.lock(tmpDir, {\n    // 100 retries (not 15) so concurrent callers wait out a slow first extraction instead of failing\n    // with ELOCKED; the update heartbeat keeps an in-progress holder's lock fresh against `stale`.\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120000, // Increased from 60s to allow long-running extractions\n  })\n\n  try {\n    // rm + mkdir happen AFTER acquiring the lock so no concurrent caller can clear our tmpDir mid-extraction\n    await fs.rm(tmpDir, { recursive: true, force: true })\n    await fs.mkdir(tmpDir, { recursive: true })\n\n    // Guard against the transient window in @electron/get's non-atomic putFileInCache (remove → move).\n    // A concurrent worker may have deleted and not yet replaced the source archive; wait briefly for it.\n    for (let i = 0; !(await exists(file)); i++) {\n      if (i >= 4) {\n        throw Object.assign(new Error(`Source archive not found after retries: ${file}`), { code: \"ENOENT\", path: file })\n      }\n      log.warn({ file, attempt: i + 1 }, \"source archive transiently missing, retrying\")\n      await sleep(300 * (i + 1))\n    }\n\n    if (file.endsWith(\".tar.gz\") || file.endsWith(\".tgz\")) {\n      await tar.extract({ file, cwd: tmpDir, strip: 1 })\n    } else if (file.endsWith(\".tar.xz\") || file.endsWith(\".txz\") || file.endsWith(\".tar.7z\")) {\n      // Compressed tarballs node-tar cannot decompress itself (xz, 7z): use 7za to strip the outer\n      // compression layer into a .tar, then extract that tar.\n      // Note: the .tar.7z check MUST stay ahead of the plain .7z branch below, otherwise only the outer\n      // 7z layer is removed and the inner tar is left behind as-is (see https://github.com/electron-userland/electron-builder/issues/10002).\n      const cmd7za = await getPath7za()\n      const decompressOutDir = `${tmpDir}.decompress`\n      await fs.rm(decompressOutDir, { recursive: true, force: true })\n      await fs.mkdir(decompressOutDir, { recursive: true })\n      try {\n        await exec(cmd7za, [\"x\", \"-bd\", file, to7zaOutputSwitch(sanitizeDirPath(decompressOutDir)), \"-y\"])\n        const innerTar = (await fs.readdir(decompressOutDir)).find(f => f.endsWith(\".tar\"))\n        if (innerTar == null) {\n          throw new Error(`decompression of ${path.basename(file)} produced no .tar archive`)\n        }\n        await tar.extract({ file: path.join(decompressOutDir, innerTar), cwd: tmpDir, strip: 1 })\n      } finally {\n        await fs.rm(decompressOutDir, { recursive: true, force: true })\n      }\n    } else if (file.endsWith(\".zip\")) {\n      await extractZipStreaming(file, tmpDir)\n    } else if (file.endsWith(\".7z\")) {\n      const cmd7za = await getPath7za()\n      try {\n        await exec(cmd7za, [\"x\", \"-bd\", file, to7zaOutputSwitch(sanitizeDirPath(tmpDir)), \"-y\"])\n      } catch (e: any) {\n        // Check if extraction actually failed or just had benign warnings\n        const files = await fs.readdir(tmpDir)\n        if (files.length === 0) {\n          log.warn({ file: log.filePath(file), tmpDir: log.filePath(tmpDir), error: e.message }, \"7z extraction produced no output\")\n          throw new Error(`7z extraction failed for ${file}: ${e.message}`)\n        }\n        // If files were extracted despite the error, log and continue\n        log.warn({ error: e.message, filesExtracted: files.length }, \"7z reported error but extracted files\")\n      }\n    } else {\n      throw new Error(`Unsupported archive format: ${path.basename(file)}`)\n    }\n\n    // Verify extraction produced files\n    const extractedFiles = await fs.readdir(tmpDir)\n    if (extractedFiles.length === 0) {\n      throw new Error(`Extraction of ${path.basename(file)} produced no files`)\n    }\n\n    await fs.rm(dir, { recursive: true, force: true })\n    await moveDirAtomic(tmpDir, dir)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n}\n\nlet proxyInitialized = false\nfunction initializeProxyOnce(): void {\n  if (!proxyInitialized) {\n    reinitializeProxy()\n    proxyInitialized = true\n  }\n}\n\n/**\n * Forces undici's global proxy dispatcher to re-read the current HTTP(S)_PROXY / NO_PROXY env vars,\n * bypassing the once-guard in initializeProxyOnce(). Exported for integration testing only.\n */\nexport function reinitializeProxy(): void {\n  get.initializeProxy()\n}\n\nasync function downloadArtifactToFile(config: ElectronArtifactDetails, label: string): Promise<string> {\n  // Serialize concurrent downloads of the same artifact across vitest workers to prevent @electron/get's\n  // non-atomic putFileInCache (remove + move) from racing with a concurrent reader.\n  const key = {\n    p: (config as ElectronPlatformArtifactDetails).platform,\n    a: (config as ElectronPlatformArtifactDetails).arch,\n    v: config.version,\n    n: config.artifactName,\n    g: config.isGeneric,\n  }\n\n  const artifactLockKey = crypto.createHash(\"sha256\").update(JSON.stringify(key)).digest(\"hex\").slice(0, 20)\n  const artifactLockPath = path.join(os.tmpdir(), `eb-dl-${artifactLockKey}.lock`)\n  // This lock is taken even for cache hits (the cache-hit check lives inside @electron/get), so under\n  // heavy concurrency many builds serialize here. 30 retries (~137s of backoff) is too few — waiters\n  // were exhausting it and failing with ELOCKED while the holder fetched a large artifact. 100 retries\n  // matches the other toolset locks; stale (10min) + proper-lockfile's update heartbeat keep a live\n  // downloader's lock fresh so the longer wait never falsely steals an in-progress download.\n  const releaseArtifactLock = await lockfile.lock(artifactLockPath, {\n    retries: { retries: 100, minTimeout: 500, maxTimeout: 5000 },\n    stale: 600_000,\n    realpath: false,\n  })\n  let lastLoggedMilestone = -1\n  const state: { bar: ProgressBar | undefined } = { bar: undefined }\n\n  // @electron/get v5 downloads via fetch, whose proxy support comes from undici's global dispatcher.\n  // initializeProxy() wires that up from HTTP(S)_PROXY/NO_PROXY env vars (replaces the got proxy agent).\n  initializeProxyOnce()\n\n  const downloadOptions: FetchDownloaderOptions = {\n    signal: AbortSignal.timeout(10 * 60 * 1000), // prevent indefinite hang on stalled connections\n    ...config.downloadOptions,\n    getProgressCallback: info => {\n      // @electron/get passes downloadOptions (including this callback) to its internal\n      // SHASUMS256.txt validation download. That file is tiny (<1 MB) and fires at 100%\n      // immediately, producing a spurious bar even when the artifact itself is cached.\n      // Skip progress display for any download whose total size is known and small.\n      if (info.total && info.total < 1_000_000) {\n        return Promise.resolve()\n      }\n      if (!state.bar && process.stdout.isTTY) {\n        log.info({ label }, \"downloading\")\n        state.bar = new MultiProgress().createBar(`${\" \".repeat(PADDING + 2)}[:bar] :percent | ${label}`, { total: 100 })\n      }\n      const pct = info.percent != null ? Math.floor(info.percent * 100) : 0\n      if (state.bar) {\n        state.bar.update(pct)\n      } else {\n        // log every 25% milestone for non-TTY environments (e.g. CI logs) to provide some visibility into download progress without overwhelming logs with too many updates\n        const percentCompleted = info.transferred && info.total ? Math.floor((info.transferred / info.total) * 100) : Math.floor(pct / 25) * 25\n        if (percentCompleted > lastLoggedMilestone && percentCompleted > 0) {\n          lastLoggedMilestone = percentCompleted\n          log.info({ label, progress: `${percentCompleted}%` }, percentCompleted !== 100 ? \"downloading\" : \"downloaded\")\n        }\n      }\n      return Promise.resolve()\n    },\n  }\n\n  const configWithProgress = { ...config, downloadOptions }\n  try {\n    let filePath: string\n    try {\n      filePath = await retry(() => get.downloadArtifact(configWithProgress), {\n        retries: 3,\n        interval: 2000,\n        backoff: 2000,\n        shouldRetry: (e: any) =>\n          e instanceof HttpError ? e.isServerError() : typeof e?.code === \"string\" && [\"ENOTFOUND\", \"ETIMEDOUT\", \"ECONNRESET\", \"EPIPE\", \"ENOENT\"].includes(e.code),\n      })\n    } catch (err) {\n      if (typeof (err as any)?.message === \"string\" && (err as any).message.includes(\"dest already exists\")) {\n        filePath = await get.downloadArtifact(configWithProgress)\n      } else {\n        throw err\n      }\n    }\n    if (!(await exists(filePath))) {\n      log.warn({ filePath, label }, \"cached artifact missing from disk; retrying with cache write\")\n      filePath = await get.downloadArtifact({ ...configWithProgress, cacheMode: ElectronDownloadCacheMode.WriteOnly })\n    }\n    if (!state.bar && lastLoggedMilestone === -1) {\n      log.info({ label }, \"using cached artifact\")\n    }\n    return filePath\n  } finally {\n    state.bar?.update(100)\n    state.bar?.terminate()\n    await releaseArtifactLock().catch(err => log.warn({ err }, \"failed to release artifact download lock\"))\n  }\n}\n\n/**\n * Checks electron-builder's own archive cache for a previously downloaded archive.\n * Validates the SHA-256 checksum when one is known. Returns the cached path on hit,\n * null on miss or checksum mismatch (mismatch also deletes the stale file).\n *\n * Air-gapped seeding contract: placing the archive at\n * `<cacheDir>/<releaseName>/<archive>` (e.g. `$ELECTRON_BUILDER_CACHE/appimage@1.0.3/appimage-tools-runtime-20251108.tar.gz`)\n * is sufficient for a fully offline toolset resolution — the checksum here is computed locally\n * against the value hardcoded in the toolset module, and extraction happens locally too. No\n * `.state` file needs to be seeded. See https://www.electron.build/tutorials/offline-air-gapped-builds.\n */\nasync function resolveFromArchiveCache(archiveCachePath: string, label: string, expectedSha256: string | undefined): Promise<string | null> {\n  if (!(await exists(archiveCachePath))) {\n    return null\n  }\n  if (expectedSha256) {\n    const hash = await new Promise<string>((resolve, reject) => {\n      const h = crypto.createHash(\"sha256\")\n      const s = createReadStream(archiveCachePath)\n      s.on(\"error\", reject)\n      s.on(\"data\", (chunk: Buffer | string) => h.update(chunk))\n      s.on(\"end\", () => resolve(h.digest(\"hex\")))\n    })\n    if (hash !== expectedSha256) {\n      log.warn({ file: label, archiveCachePath }, \"cached archive checksum mismatch — removing and re-downloading\")\n      await fs.rm(archiveCachePath).catch(() => {})\n      return null\n    }\n  }\n  log.debug({ file: label, archiveCachePath }, \"using cached archive — skipping download\")\n  return archiveCachePath\n}\n\n/**\n * Copies a freshly downloaded archive into electron-builder's own archive cache so that\n * future builds (including offline environments) can skip the network request entirely.\n */\nasync function persistToArchiveCache(sourcePath: string, archiveCachePath: string): Promise<void> {\n  try {\n    await fs.mkdir(path.dirname(archiveCachePath), { recursive: true })\n    await fs.copyFile(sourcePath, archiveCachePath)\n  } catch (err) {\n    log.warn({ err, archiveCachePath }, \"failed to persist archive to cache — will re-download next time\")\n  }\n}\n\n/**\n * Core download + extract engine. Handles lockfile, cache-hit short-circuit,\n * progress bar, extraction (.zip or .tar.gz), and completion marker.\n * Both public download functions delegate here after building their respective configs.\n */\nasync function downloadAndExtract(config: ElectronArtifactDetails, extractDir: string, label: string, archiveCachePath?: string): Promise<string> {\n  // Create only the PARENT dir (e.g. <cache>/fpm@2.2.1), never extractDir itself, before locking.\n  // The parent is stable — cleanup only ever removes extractDir and its .state/.tmp/.lock siblings —\n  // so extractDir's whole lifecycle (mkdir, rm, re-mkdir) stays inside the lock. ensureDir absorbs\n  // the concurrent-recursive-mkdir ENOENT/EEXIST race while peers populate the cold cache tree.\n  await ensureDir(path.dirname(extractDir))\n\n  // Pre-lock fast path: read-only short-circuit for a definitively complete and valid cache.\n  // Safe unlocked — the cache-state helpers return null/false for a missing or half-written dir,\n  // so a racing read only ever falls through to take the lock. Do NOT mutate the dir here.\n  const stateData = await readCacheStateFile(extractDir)\n  if (stateData?.state === CacheState.complete) {\n    const isValid = await validateCacheDirectory(extractDir, stateData.fileCount)\n    if (isValid) {\n      log.debug({ file: label, path: extractDir }, \"using cached artifact - cache valid\")\n      return extractDir\n    }\n  }\n\n  // Be patient: when many targets/builds contend on the same toolset cache concurrently, all but the\n  // first wait here while the winner downloads+extracts (a large bundle can take >1min). 15 retries\n  // (~67s) is too few and waiters fail with ELOCKED before the winner finishes; 100 matches the\n  // patience of withToolsetLock. proper-lockfile's update heartbeat keeps a live holder's lock fresh,\n  // so increasing waiter retries never falsely steals an in-progress extraction.\n  const release = await lockfile.lock(extractDir, {\n    // realpath:false so proper-lockfile creates <extractDir>.lock in the (already-created) parent\n    // WITHOUT calling fs.realpath(extractDir) first — which would throw ENOENT now that extractDir\n    // is created lazily inside the lock. This filesystem lock serializes peers both across worker\n    // processes AND within a single process (a second lock() for the same path retries until the\n    // first releases), so no in-process promise cache is needed — and one wouldn't help across the\n    // separate test worker processes anyway.\n    realpath: false,\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120000,\n  })\n  let downloadedFile: string | null = null\n  try {\n    // Re-check after acquiring lock: another worker may have completed while we waited.\n    const stateDataAfterLock = await readCacheStateFile(extractDir)\n    if (stateDataAfterLock?.state === CacheState.complete) {\n      const isValid = await validateCacheDirectory(extractDir, stateDataAfterLock.fileCount)\n      if (isValid) {\n        log.debug({ file: label, path: extractDir }, \"using cached artifact - skipping download/extract\")\n        return extractDir\n      }\n      log.warn({ extractDir }, \"Cache marked complete but files invalid, clearing\")\n    } else if (stateDataAfterLock?.state === CacheState.corrupted) {\n      log.warn({ extractDir }, \"Corrupted cache detected, cleaning up and re-extracting\")\n    }\n\n    // Cleanup inside the lock — skip lock files since we currently hold them\n    await cleanupCacheDirectory(extractDir, { skipLockFiles: true })\n    await ensureDir(extractDir)\n\n    // Check electron-builder's own archive cache before touching @electron/get.\n    // The cache lives alongside the extract dir: <cacheDir>/<releaseName>/<filename>.\n    // This lets repeated builds (or offline environments) skip the download entirely once\n    // the archive has been fetched at least once.\n    if (archiveCachePath) {\n      downloadedFile = await resolveFromArchiveCache(archiveCachePath, label, (config as any).checksums?.[label])\n    }\n\n    if (!downloadedFile) {\n      log.debug({ file: label }, \"downloading\")\n      downloadedFile = await downloadArtifactToFile(config, label)\n      if (!downloadedFile) {\n        throw new Error(`Failed to download artifact: ${label}`)\n      }\n      // Persist the downloaded archive so future builds (and offline environments) can\n      // skip the network request entirely.\n      if (archiveCachePath) {\n        await persistToArchiveCache(downloadedFile, archiveCachePath)\n      }\n    }\n\n    await writeCacheState(extractDir, CacheState.downloaded)\n\n    // Mark extracting so stale-lock detection can recover a crashed mid-extraction process\n    await writeCacheState(extractDir, CacheState.extracting)\n\n    // Extract while holding the lock to prevent concurrent interference\n    await extractArchive(downloadedFile, extractDir)\n\n    // Compute metadata with a full recursive walk now that tmpDir has been renamed to extractDir\n    const { fileCount, extractedSize } = await computeCacheMetadata(extractDir)\n\n    // Write complete state with metadata BEFORE releasing the lock; throwOnError=true so a\n    // failed write (disk full, permissions) propagates instead of silently producing a no-op cache\n    await writeCacheState(extractDir, CacheState.complete, { fileCount, extractedSize }, true)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n  return extractDir\n}\n\n// ─── Public API ───────────────────────────────────────────────────────────────\n\n/**\n * Copies a remote artifact to a specific output path on disk.\n * Unlike downloadBuilderToolset, this does not extract archives — it copies the raw file.\n * Used for certificate imports where the caller needs the file at a known path.\n */\nexport async function download(url: string, output: string, checksum?: string | null): Promise<void> {\n  const filenameWithExt = path.basename(new URL(url).pathname)\n  if (checksum == null) {\n    log.warn({ url }, \"downloading without an integrity checksum — the download is not verified against a known-good hash\")\n  }\n  const downloadedFile = await downloadArtifactToFile(\n    {\n      version: \"9.9.9\",\n      artifactName: filenameWithExt,\n      cacheRoot: path.resolve(await cacheDirectoryOverrideAllowed.value, \"downloads\"),\n      cacheMode: resolveCacheMode(),\n      ...(checksum != null ? { checksums: { [filenameWithExt]: checksum } } : { unsafelyDisableChecksums: true }),\n      mirrorOptions: { resolveAssetURL: async () => Promise.resolve(url) },\n      isGeneric: true,\n    },\n    filenameWithExt\n  )\n  await fs.copyFile(downloadedFile, output)\n}\n\nfunction validateBinaryCustomDir(envVarName: string, value: string): string {\n  if (value.includes(\"://\") || value.includes(\"..\") || value.startsWith(\"/\")) {\n    throw new Error(\n      `${envVarName} must be a safe relative path component (e.g. \"v1.0.0-custom\"). ` + `Values containing \"://\", \"..\", or a leading \"/\" are not allowed. Got: \"${value}\"`\n    )\n  }\n  return value\n}\n\nconst CUSTOM_DIR_ENV_VARS = [\n  \"NPM_CONFIG_ELECTRON_BUILDER_BINARIES_CUSTOM_DIR\",\n  \"npm_config_electron_builder_binaries_custom_dir\",\n  \"npm_package_config_electron_builder_binaries_custom_dir\",\n  \"ELECTRON_BUILDER_BINARIES_CUSTOM_DIR\",\n] as const\n\n/**\n * Resolves the final download URL for a builder binary, honouring:\n *   ELECTRON_BUILDER_BINARIES_DOWNLOAD_OVERRIDE_URL  – fully replaces the URL directory\n *   ELECTRON_BUILDER_BINARIES_CUSTOM_DIR (and npm_ variants) – replaces releaseName in the path\n *   overrideUrl (caller-supplied)                     – used as-is when no env var is set\n *\n * Exported for unit testing; not part of the public API.\n * @internal\n */\nexport function resolveBuilderBinaryUrl(releaseName: string, filenameWithExt: string, baseUrl: string, overrideUrl?: string): string {\n  const envOverrideUrl = parseValidEnvVarUrl(\"ELECTRON_BUILDER_BINARIES_DOWNLOAD_OVERRIDE_URL\")\n  if (envOverrideUrl != null) {\n    return `${envOverrideUrl}/${filenameWithExt}`\n  }\n  if (overrideUrl != null) {\n    return `${overrideUrl}/${filenameWithExt}`\n  }\n  const customDirEntry = CUSTOM_DIR_ENV_VARS.map(name => ({ name, value: process.env[name] })).find(e => e.value != null)\n  if (customDirEntry != null) {\n    return `${baseUrl}${validateBinaryCustomDir(customDirEntry.name, customDirEntry.value!)}/${filenameWithExt}`\n  }\n  return `${baseUrl}${releaseName}/${filenameWithExt}`\n}\n\n/**\n * Downloads a generic artifact (.tar.gz or .zip) from a GitHub release.\n * Used for electron-builder-binaries tools (appimage, etc.).\n */\nexport async function downloadBuilderToolset(options: {\n  releaseName: string\n  filenameWithExt: string\n  checksums?: Record<string, string>\n  githubOrgRepo?: string\n  overrideUrl?: string\n}): Promise<string> {\n  const { releaseName, filenameWithExt, checksums, githubOrgRepo = \"electron-userland/electron-builder-binaries\", overrideUrl } = options\n\n  if (/[/\\\\]|^\\.\\./.test(filenameWithExt) || filenameWithExt.includes(\"..\")) {\n    throw new Error(`downloadBuilderToolset: unsafe filenameWithExt \"${filenameWithExt}\" — must be a plain filename with no path separators or traversal sequences`)\n  }\n\n  const baseUrl = getBinariesMirrorUrl(githubOrgRepo)\n  const fullUrl = resolveBuilderBinaryUrl(releaseName, filenameWithExt, baseUrl, overrideUrl)\n  const suffix = hashUrlSafe(fullUrl, 5)\n  // tar.7z is listed before 7z so the full extension is stripped. Deliberate side effect: this changes the\n  // extract-dir name for .tar.7z toolsets (e.g. the snap template) from \"<name>.tar-<hash>\" to \"<name>-<hash>\",\n  // which busts caches poisoned by the broken .tar.7z extraction in 26.15.0-26.15.6 (issue #10002).\n  const folderName = `${filenameWithExt.replace(/\\.(tar\\.gz|tgz|tar\\.xz|txz|tar\\.7z|zip|7z)$/, \"\")}-${suffix}`\n  // releaseName is library input; enforce cache-dir containment (rejects traversal, clears taint into shell extraction)\n  const cacheDir = await cacheDirectoryOverrideAllowed.value\n  const extractDir = sanitizeDirPath(path.join(cacheDir, releaseName, folderName), cacheDir)\n\n  // Use resolveAssetURL so @electron/get's ELECTRON_MIRROR env var check cannot override\n  // the builder-binaries URL we've already resolved (see getArtifactRemoteURL in @electron/get).\n  const mirrorOptions: MirrorOptions = {\n    resolveAssetURL: async () => Promise.resolve(fullUrl),\n  }\n\n  // Predictable archive cache: <cacheDir>/<releaseName>/<filename>, next to the extract dir.\n  // downloadAndExtract checks here before touching @electron/get and persists the archive here\n  // after every successful download, so subsequent builds never need a network round-trip.\n  const archiveCachePath = sanitizeDirPath(path.join(cacheDir, releaseName, filenameWithExt), cacheDir)\n\n  const config: ElectronDownloadRequest & ElectronDownloadRequestOptions & { isGeneric: true } = {\n    version: \"9.9.9\", // must be >1.3.2 to bypass @electron/get validation shortcut\n    artifactName: filenameWithExt,\n    cacheRoot: path.resolve(await cacheDirectoryOverrideAllowed.value, \"downloads\"),\n    cacheMode: resolveCacheMode(),\n    ...(checksums != null ? { checksums } : { unsafelyDisableChecksums: true }),\n    mirrorOptions,\n    isGeneric: true,\n  }\n  return downloadAndExtract(config, extractDir, filenameWithExt, archiveCachePath)\n}\n\n/**\n * Mirrors @electron/get's default cache root (`env-paths(\"electron\", { suffix: \"\" }).cache`).\n * @electron/get does not export it and its package `exports` map blocks deep imports, so the\n * (deliberately tiny) platform switch is replicated here. Must stay in sync with the\n * `cacheRoot` default documented in @electron/get's `ElectronDownloadRequestOptions`.\n * @internal exported for unit testing\n */\nexport function defaultElectronGetCacheRoot(): string {\n  const name = \"electron\"\n  const homeDir = os.homedir()\n  switch (os.platform()) {\n    case \"darwin\":\n      return path.join(homeDir, \"Library\", \"Caches\", name)\n    case \"win32\":\n      return path.join(process.env.LOCALAPPDATA || path.join(homeDir, \"AppData\", \"Local\"), name, \"Cache\")\n    default:\n      return path.join(process.env.XDG_CACHE_HOME || path.join(homeDir, \".cache\"), name)\n  }\n}\n\n/**\n * Parses the upstream `SHASUMS256.txt` format into the `Record<filename, sha256-hex>` shape that\n * @electron/get accepts as inline `checksums`. Each line is `<sha256-hex> *<filename>` (binary\n * mode) or `<sha256-hex>  <filename>` (text mode); malformed lines are ignored.\n * @internal exported for unit testing\n */\nexport function parseChecksumFile(content: string): Record<string, string> {\n  const checksums: Record<string, string> = {}\n  for (const rawLine of content.split(\"\\n\")) {\n    const match = /^([a-fA-F0-9]{64})\\s+\\*?(.+)$/.exec(rawLine.trim())\n    if (match != null) {\n      checksums[match[2]] = match[1].toLowerCase()\n    }\n  }\n  return checksums\n}\n\n/**\n * Looks for a locally seeded SHASUMS256 file at the root of the @electron/get cache and returns\n * its contents as inline `checksums`, or null when nothing usable is seeded.\n *\n * Why: without inline `checksums`, @electron/get re-downloads `SHASUMS256.txt` with a hardcoded\n * `cacheMode: Bypass` on EVERY build — even when the artifact itself is a cache hit — so a fully\n * seeded cache still requires network access and air-gapped builds fail (#10039). Cache-seeding\n * tools (e.g. flatpak-node-generator) already place `SHASUMS256.txt-<version>` flat at the cache\n * root; feeding it back as inline `checksums` keeps checksum validation enabled while making it\n * fully offline. A plain `SHASUMS256.txt` at the cache root is accepted as a manual-seeding\n * fallback. A candidate file is only used when it actually contains an entry for the requested\n * artifact, so a stale file for another version can never break an online build.\n * See https://www.electron.build/tutorials/offline-air-gapped-builds for the seeding contract.\n * @internal exported for unit testing\n */\nexport async function resolveSeededChecksums(cacheRoot: string, version: string, artifactFileName: string): Promise<Record<string, string> | null> {\n  const candidates = [path.join(cacheRoot, `SHASUMS256.txt-${version}`), path.join(cacheRoot, \"SHASUMS256.txt\")]\n  for (const candidate of candidates) {\n    if (!(await exists(candidate))) {\n      continue\n    }\n    let content: string\n    try {\n      content = await fs.readFile(candidate, \"utf-8\")\n    } catch (err: any) {\n      log.warn({ file: log.filePath(candidate), err: err.message }, \"failed to read seeded SHASUMS file — ignoring it\")\n      continue\n    }\n    const checksums = parseChecksumFile(content)\n    if (checksums[artifactFileName] == null) {\n      log.warn({ file: log.filePath(candidate), artifactFileName }, \"seeded SHASUMS file has no entry for the requested artifact — ignoring it\")\n      continue\n    }\n    log.debug({ file: log.filePath(candidate), artifactFileName }, \"using locally seeded SHASUMS256 checksums — checksum validation can run offline\")\n    return checksums\n  }\n  return null\n}\n\n/**\n * Assembles the `@electron/get` artifact config (`ElectronPlatformArtifactDetails`) from\n * `ArtifactDownloadOptions`: spreads the caller's options and pins `cacheRoot`/`platform`/`arch`/\n * `version`/`artifactName` and the resolved cache mode, warning when checksum verification is\n * disabled. When the caller provides no `checksums` (user-provided `electronGet.checksums` always\n * wins) and verification is not disabled, a locally seeded `SHASUMS256.txt-<version>` at the cache\n * root is picked up as inline `checksums` so validation works offline (see resolveSeededChecksums).\n * Callers pass the result to `downloadArtifactToFile` / `downloadAndExtract`.\n * @internal exported for unit testing\n */\nexport async function buildElectronArtifactConfig(artifactOptions: ArtifactDownloadOptions): Promise<ElectronPlatformArtifactDetails> {\n  const { options, arch, version, platformName: platform, artifactName, cacheDir: cacheRoot } = artifactOptions\n\n  if (options?.unsafelyDisableChecksums) {\n    log.warn(\n      { artifactName },\n      \"electronGet.unsafelyDisableChecksums is enabled — downloaded artifacts will NOT be verified; a compromised mirror can serve malicious binaries undetected\"\n    )\n  }\n\n  const artifactConfig: ElectronPlatformArtifactDetails = { ...options, cacheRoot, platform, arch, version, artifactName, cacheMode: resolveCacheMode() }\n  if (artifactConfig.checksums == null && !artifactConfig.unsafelyDisableChecksums) {\n    // Matches @electron/get's getArtifactFileName for non-generic artifacts; `artifactSuffix` and\n    // `customFilename` cannot diverge here — both are excluded from ElectronGetOptions.\n    const artifactFileName = `${artifactName}-v${version}-${platform}-${arch}.zip`\n    const seededChecksums = await resolveSeededChecksums(cacheRoot ?? defaultElectronGetCacheRoot(), version, artifactFileName)\n    if (seededChecksums != null) {\n      artifactConfig.checksums = seededChecksums\n    }\n  }\n  return artifactConfig\n}\n\n/**\n * Downloads the electron artifact zip via @electron/get (with caching) and returns the zip file path.\n * Use when you need to extract the zip yourself (e.g. directly to appOutDir to preserve empty dirs and symlinks).\n */\nexport async function downloadElectronArtifactZip(options: ArtifactDownloadOptions): Promise<string> {\n  const config = await buildElectronArtifactConfig(options)\n  return downloadArtifactToFile(config, config.artifactName)\n}\n\n/**\n * Downloads an electron platform artifact (e.g. ffmpeg) via `@electron/get` and extracts it into a\n * content-addressed cache directory (keyed on a hash of the resolved artifact config), returning the\n * extraction path.\n */\nexport async function downloadElectronArtifact(options: ArtifactDownloadOptions): Promise<string> {\n  const { arch, version, platformName: platform, artifactName } = options\n  const artifactConfig = await buildElectronArtifactConfig(options)\n\n  const suffix = hashUrlSafe(JSON.stringify(artifactConfig), 5)\n  const folderName = `${artifactName}-v${version}-${platform}-${arch}-${suffix}`\n  const extractDir = path.join(await cacheDirectoryOverrideAllowed.value, `${artifactName}-v${version}`, folderName)\n\n  return downloadAndExtract(artifactConfig, extractDir, artifactName)\n}\n\n/**\n * Get the binaries mirror URL from environment variables.\n * Supports various npm config formats and falls back to GitHub.\n */\nexport function getBinariesMirrorUrl(githubOrgRepo: string): string {\n  const allowHttp = process.env[\"ELECTRON_BUILDER_DANGEROUSLY_ALLOW_HTTP\"] === \"true\"\n  for (const envVar of [\n    \"NPM_CONFIG_ELECTRON_BUILDER_BINARIES_MIRROR\",\n    \"npm_config_electron_builder_binaries_mirror\",\n    \"npm_package_config_electron_builder_binaries_mirror\",\n    \"ELECTRON_BUILDER_BINARIES_MIRROR\",\n  ]) {\n    const url = parseValidEnvVarUrl(envVar, allowHttp)\n    if (url) {\n      return url.endsWith(\"/\") ? url : `${url}/`\n    }\n  }\n  return `https://github.com/${githubOrgRepo}/releases/download/`\n}\n"]}
+{"version":3,"file":"electronGet.js","sourceRoot":"","sources":["../../src/util/electronGet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,eAAe,CAAA;AACpC,OAAO,EAEL,yBAAyB,GAM1B,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,iBAAiB,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5I,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAEhC,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAA;AACxD,OAAO,KAAK,EAAE,MAAM,aAAa,CAAA;AACjC,OAAO,KAAK,EAAE,MAAM,IAAI,CAAA;AACxB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAA;AAC5B,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAA;AAC3C,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,OAAO,KAAK,GAAG,MAAM,KAAK,CAAA;AAC1B,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAA;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AA8BtJ,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,MAAM,GAAG,CAAC;IACnD,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;IACnD,CAAC;IACD,IAAI,MAAM,CAAC,CAAA;IACX,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC7B,OAAO,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;AAChF,CAAC;AAED,sGAAsG;AACtG,sGAAsG;AACtG,8FAA8F;AAC9F,wDAAwD;AACxD,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,QAAQ,CACvD,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,EAChD,KAAK,IAAI,EAAE;IACT,MAAM,GAAG,GAAG,MAAM,yBAAyB,CAAC,EAAE,sBAAsB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAA;IACxG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAA;IACpB,OAAO,GAAG,CAAA;AACZ,CAAC,CACF,CAAA;AACD,qGAAqG;AACrG,wGAAwG;AACxG,kCAAkC;AAClC,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,OAA2E;IACzH,MAAM,EAAE,sBAAsB,GAAG,IAAI,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAA;IACtE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAA;IACtD,IAAI,mBAAmB,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACvD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,MAAM,OAAO,GAAG,kBAAkB,CAAA;IAClC,MAAM,QAAQ,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;IAC9B,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAE5B,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IACzD,CAAC;IACD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAA;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,CAAA;QAC5D,oEAAoE;QACpE,MAAM,YAAY,GAAG,sBAAsB,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,uBAAuB,CAAC,IAAI,QAAQ,KAAK,QAAQ,CAAC,CAAA;QACxI,IAAI,CAAC,YAAY,IAAI,YAAY,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAClD,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IAC3C,OAAO,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;AACrH,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,OAAO,GAAG,8BAA8B,CAAA;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAA;IAClD,IAAI,aAAa,IAAI,MAAM,CAAC,aAAa,CAAC,IAAI,yBAAyB,EAAE,CAAC;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAA8B,CAAA;QAC/D,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,qCAAqC,OAAO,EAAE,CAAC,CAAA;QACnE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,yBAAyB,CAAC,SAAS,CAAA;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,GAAW;IAC7D,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,cAAc,CAAC,WAAW,EAAE,CAAA;QACtC,MAAM,CAAC,GAAG,aAAa,CAAC,WAAW,EAAE,CAAA;QACrC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,cAAc,CAAC,UAAU,CAAC,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,cAAc,KAAK,aAAa,CAAA;AAChG,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,GAAW;IAC1D,8EAA8E;IAC9E,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,sBAAsB,IAAI,EAAE,CAAC,GAAG,MAAM,CAAA;QAC1D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAClC,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,KAAK,QAAQ,CAAA;IAElE,mEAAmE;IACnE,oFAAoF;IACpF,6DAA6D;IAC7D,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;IACzC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;QACtE,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAwC,EAAE,CAAC;YACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YAC9C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC1D,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC5C,IAAI,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;gBAChD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,EAAE,CAAC,CAAA;gBAC/D,CAAC;gBACD,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAA;gBACnE,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;oBAC5C,MAAM,IAAI,KAAK,CAAC,0CAA0C,MAAM,EAAE,CAAC,CAAA;gBACrE,CAAC;gBACD,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YACpC,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACtC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC7C,KAAK,CAAC,SAAS,EAAE,CAAA;YACnB,CAAC;iBAAM,CAAC;gBACN,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;gBAC3D,MAAM,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAClD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;oBACb,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,MAAM,CAAC,CAAA;gBACzC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,UAAU,CAAC,OAAO,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,GAAW;IAC/D,MAAM,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAA;IAErC,MAAM,MAAM,GAAG,GAAG,GAAG,MAAM,CAAA;IAC3B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAE3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;QAC1C,iGAAiG;QACjG,+FAA+F;QAC/F,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,MAAM,EAAE,uDAAuD;KACvE,CAAC,CAAA;IAEF,IAAI,CAAC;QACH,yGAAyG;QACzG,MAAM,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACrD,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QAE3C,mGAAmG;QACnG,qGAAqG;QACrG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,2CAA2C,IAAI,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;YACnH,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,8CAA8C,CAAC,CAAA;YAClF,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5B,CAAC;QAED,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACtD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACpD,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzF,6FAA6F;YAC7F,wDAAwD;YACxD,kGAAkG;YAClG,uIAAuI;YACvI,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,MAAM,gBAAgB,GAAG,GAAG,MAAM,aAAa,CAAA;YAC/C,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAC/D,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,gBAAgB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;gBAClG,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;gBACnF,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;oBACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAA;gBACrF,CAAC;gBACD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;YAC3F,CAAC;oBAAS,CAAC;gBACT,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACjC,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACzC,CAAC;aAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAA;YACjC,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;YAC1F,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBAChB,kEAAkE;gBAClE,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;gBACtC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACvB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAA;oBAC1H,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAA;gBACnE,CAAC;gBACD,8DAA8D;gBAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAA;YACvG,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACvE,CAAC;QAED,mCAAmC;QACnC,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QAC/C,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;QAC3E,CAAC;QAED,MAAM,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClD,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;IAClC,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;AACH,CAAC;AAED,IAAI,gBAAgB,GAAG,KAAK,CAAA;AAC5B,SAAS,mBAAmB;IAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,iBAAiB,EAAE,CAAA;QACnB,gBAAgB,GAAG,IAAI,CAAA;IACzB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB;IAC/B,GAAG,CAAC,eAAe,EAAE,CAAA;AACvB,CAAC;AAED;;;;;GAKG;AACH,MAAM,8BAA8B,GAAG,IAAI,GAAG,CAAC;IAC7C,WAAW;IACX,WAAW;IACX,YAAY;IACZ,cAAc;IACd,WAAW;IACX,OAAO;IACP,QAAQ;IACR,gBAAgB;IAChB,yBAAyB;CAC1B,CAAC,CAAA;AAEF;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,CAAM;IAC7C,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;QACd,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,CAAC,YAAY,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,CAAC,aAAa,EAAE,CAAA;IAC1B,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAA;QACjC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,CAAA;IACxE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAA;IAC/G,OAAO,IAAI,IAAI,IAAI,IAAI,8BAA8B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACjE,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,MAA+B,EAAE,KAAa;IAClF,uGAAuG;IACvG,kFAAkF;IAClF,MAAM,GAAG,GAAG;QACV,CAAC,EAAG,MAA0C,CAAC,QAAQ;QACvD,CAAC,EAAG,MAA0C,CAAC,IAAI;QACnD,CAAC,EAAE,MAAM,CAAC,OAAO;QACjB,CAAC,EAAE,MAAM,CAAC,YAAY;QACtB,CAAC,EAAE,MAAM,CAAC,SAAS;KACpB,CAAA;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IAC1G,MAAM,gBAAgB,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,eAAe,OAAO,CAAC,CAAA;IAChF,oGAAoG;IACpG,mGAAmG;IACnG,qGAAqG;IACrG,kGAAkG;IAClG,2FAA2F;IAC3F,MAAM,mBAAmB,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE;QAChE,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE;QAC5D,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAA;IACF,IAAI,mBAAmB,GAAG,CAAC,CAAC,CAAA;IAC5B,MAAM,KAAK,GAAqC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;IAElE,mGAAmG;IACnG,uGAAuG;IACvG,mBAAmB,EAAE,CAAA;IAErB,MAAM,eAAe,GAA2B;QAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,iDAAiD;QAC9F,GAAG,MAAM,CAAC,eAAe;QACzB,mBAAmB,EAAE,IAAI,CAAC,EAAE;YAC1B,iFAAiF;YACjF,kFAAkF;YAClF,iFAAiF;YACjF,8EAA8E;YAC9E,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,SAAS,EAAE,CAAC;gBACzC,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;YAC1B,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;gBAClC,KAAK,CAAC,GAAG,GAAG,IAAI,aAAa,EAAE,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,qBAAqB,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;YACnH,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YACrE,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;gBACd,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YACvB,CAAC;iBAAM,CAAC;gBACN,oKAAoK;gBACpK,MAAM,gBAAgB,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA;gBACvI,IAAI,gBAAgB,GAAG,mBAAmB,IAAI,gBAAgB,GAAG,CAAC,EAAE,CAAC;oBACnE,mBAAmB,GAAG,gBAAgB,CAAA;oBACtC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,gBAAgB,GAAG,EAAE,EAAE,gBAAgB,KAAK,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;gBAChH,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;QAC1B,CAAC;KACF,CAAA;IAED,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,EAAE,eAAe,EAAE,CAAA;IACzD,IAAI,CAAC;QACH,IAAI,QAAgB,CAAA;QACpB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,EAAE;gBACrE,OAAO,EAAE,CAAC;gBACV,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,IAAI;gBACb,WAAW,EAAE,wBAAwB;aACtC,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,OAAQ,GAAW,EAAE,OAAO,KAAK,QAAQ,IAAK,GAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;gBACtG,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAA;YAC3D,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,CAAA;YACX,CAAC;QACH,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,8DAA8D,CAAC,CAAA;YAC7F,QAAQ,GAAG,MAAM,GAAG,CAAC,gBAAgB,CAAC,EAAE,GAAG,kBAAkB,EAAE,SAAS,EAAE,yBAAyB,CAAC,SAAS,EAAE,CAAC,CAAA;QAClH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,mBAAmB,KAAK,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,uBAAuB,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,QAAQ,CAAA;IACjB,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,CAAA;QACtB,MAAM,mBAAmB,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,0CAA0C,CAAC,CAAC,CAAA;IACzG,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,uBAAuB,CAAC,gBAAwB,EAAE,KAAa,EAAE,cAAkC;IAChH,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,cAAc,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACzD,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YACrC,MAAM,CAAC,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;YAC5C,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;YACrB,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA;YACzD,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7C,CAAC,CAAC,CAAA;QACF,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,gEAAgE,CAAC,CAAA;YAC7G,MAAM,EAAE,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,0CAA0C,CAAC,CAAA;IACxF,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,qBAAqB,CAAC,UAAkB,EAAE,gBAAwB;IAC/E,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACnE,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAA;IACjD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,iEAAiE,CAAC,CAAA;IACxG,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,MAA+B,EAAE,UAAkB,EAAE,KAAa,EAAE,gBAAyB;IAC7H,gGAAgG;IAChG,mGAAmG;IACnG,iGAAiG;IACjG,8FAA8F;IAC9F,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAA;IAEzC,2FAA2F;IAC3F,+FAA+F;IAC/F,yFAAyF;IACzF,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAA;IACtD,IAAI,SAAS,EAAE,KAAK,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,SAAS,CAAC,CAAA;QAC7E,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,qCAAqC,CAAC,CAAA;YACnF,OAAO,UAAU,CAAA;QACnB,CAAC;IACH,CAAC;IAED,mGAAmG;IACnG,kGAAkG;IAClG,8FAA8F;IAC9F,oGAAoG;IACpG,+EAA+E;IAC/E,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE;QAC9C,8FAA8F;QAC9F,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,+FAA+F;QAC/F,yCAAyC;QACzC,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;QAC7D,KAAK,EAAE,MAAM;KACd,CAAC,CAAA;IACF,IAAI,cAAc,GAAkB,IAAI,CAAA;IACxC,IAAI,CAAC;QACH,oFAAoF;QACpF,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAA;QAC/D,IAAI,kBAAkB,EAAE,KAAK,KAAK,UAAU,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,UAAU,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;YACtF,IAAI,OAAO,EAAE,CAAC;gBACZ,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,mDAAmD,CAAC,CAAA;gBACjG,OAAO,UAAU,CAAA;YACnB,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,mDAAmD,CAAC,CAAA;QAC/E,CAAC;aAAM,IAAI,kBAAkB,EAAE,KAAK,KAAK,UAAU,CAAC,SAAS,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,EAAE,yDAAyD,CAAC,CAAA;QACrF,CAAC;QAED,yEAAyE;QACzE,MAAM,qBAAqB,CAAC,UAAU,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QAChE,MAAM,SAAS,CAAC,UAAU,CAAC,CAAA;QAE3B,4EAA4E;QAC5E,kFAAkF;QAClF,sFAAsF;QACtF,8CAA8C;QAC9C,IAAI,gBAAgB,EAAE,CAAC;YACrB,cAAc,GAAG,MAAM,uBAAuB,CAAC,gBAAgB,EAAE,KAAK,EAAG,MAAc,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC,CAAA;QAC7G,CAAC;QAED,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,CAAC,CAAA;YACzC,cAAc,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;YAC5D,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAA;YAC1D,CAAC;YACD,iFAAiF;YACjF,qCAAqC;YACrC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,qBAAqB,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAA;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;QAExD,uFAAuF;QACvF,MAAM,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;QAExD,oEAAoE;QACpE,MAAM,cAAc,CAAC,cAAc,EAAE,UAAU,CAAC,CAAA;QAEhD,6FAA6F;QAC7F,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAA;QAE3E,uFAAuF;QACvF,+FAA+F;QAC/F,MAAM,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,CAAC,CAAA;IAC5F,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,4BAA4B,CAAC,CAAC,CAAA;IAC/E,CAAC;IACD,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAc,EAAE,QAAwB;IAClF,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC5D,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,EAAE,oGAAoG,CAAC,CAAA;IACzH,CAAC;IACD,MAAM,cAAc,GAAG,MAAM,sBAAsB,CACjD;QACE,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,6BAA6B,CAAC,KAAK,EAAE,WAAW,CAAC;QAC/E,SAAS,EAAE,gBAAgB,EAAE;QAC7B,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;QAC3G,aAAa,EAAE,EAAE,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;QACpE,SAAS,EAAE,IAAI;KAChB,EACD,eAAe,CAChB,CAAA;IACD,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;AAC3C,CAAC;AAED,SAAS,uBAAuB,CAAC,UAAkB,EAAE,KAAa;IAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,kEAAkE,GAAG,0EAA0E,KAAK,GAAG,CACrK,CAAA;IACH,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,mBAAmB,GAAG;IAC1B,iDAAiD;IACjD,iDAAiD;IACjD,yDAAyD;IACzD,sCAAsC;CAC9B,CAAA;AAEV;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,WAAmB,EAAE,eAAuB,EAAE,OAAe,EAAE,WAAoB;IACzH,MAAM,cAAc,GAAG,mBAAmB,CAAC,iDAAiD,CAAC,CAAA;IAC7F,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,GAAG,cAAc,IAAI,eAAe,EAAE,CAAA;IAC/C,CAAC;IACD,IAAI,WAAW,IAAI,IAAI,EAAE,CAAC;QACxB,2FAA2F;QAC3F,iGAAiG;QACjG,OAAO,WAAW,CAAA;IACpB,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAA;IACvH,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;QAC3B,OAAO,GAAG,OAAO,GAAG,uBAAuB,CAAC,cAAc,CAAC,IAAI,EAAE,cAAc,CAAC,KAAM,CAAC,IAAI,eAAe,EAAE,CAAA;IAC9G,CAAC;IACD,OAAO,GAAG,OAAO,GAAG,WAAW,IAAI,eAAe,EAAE,CAAA;AACtD,CAAC;AAED;;;GAGG;AACH,2FAA2F;AAC3F,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAA;AAE3C;;;;;;GAMG;AACH,SAAS,sBAAsB,CAAC,WAAmB;IACjD,IAAI,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACvC,OAAM;IACR,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;IAClC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,eAAe,CAAC,CAAA;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAM5C;IACC,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,SAAS,EAAE,aAAa,GAAG,6CAA6C,EAAE,WAAW,EAAE,GAAG,OAAO,CAAA;IACvI,sBAAsB,CAAC,WAAW,CAAC,CAAA;IAEnC,IAAI,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CAAC,mDAAmD,eAAe,6EAA6E,CAAC,CAAA;IAClK,CAAC;IAED,MAAM,OAAO,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,uBAAuB,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;IAC3F,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IACtC,yGAAyG;IACzG,8GAA8G;IAC9G,kGAAkG;IAClG,MAAM,UAAU,GAAG,GAAG,eAAe,CAAC,OAAO,CAAC,6CAA6C,EAAE,EAAE,CAAC,IAAI,MAAM,EAAE,CAAA;IAC5G,sHAAsH;IACtH,MAAM,QAAQ,GAAG,MAAM,6BAA6B,CAAC,KAAK,CAAA;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAA;IAE1F,uFAAuF;IACvF,+FAA+F;IAC/F,MAAM,aAAa,GAAkB;QACnC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;KACtD,CAAA;IAED,2FAA2F;IAC3F,6FAA6F;IAC7F,yFAAyF;IACzF,MAAM,gBAAgB,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAA;IAErG,MAAM,MAAM,GAAmF;QAC7F,OAAO,EAAE,OAAO,EAAE,6DAA6D;QAC/E,YAAY,EAAE,eAAe;QAC7B,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,6BAA6B,CAAC,KAAK,EAAE,WAAW,CAAC;QAC/E,SAAS,EAAE,gBAAgB,EAAE;QAC7B,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC;QAC3E,aAAa;QACb,SAAS,EAAE,IAAI;KAChB,CAAA;IACD,OAAO,kBAAkB,CAAC,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAA;AAClF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,IAAI,GAAG,UAAU,CAAA;IACvB,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAA;IAC5B,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAA;QACtD,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;QACrG;YACE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAA;IACtF,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAClE,IAAI,KAAK,IAAI,IAAI,EAAE,CAAC;YAClB,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAA;QAC9C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,SAAiB,EAAE,OAAe,EAAE,gBAAwB;IACvG,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,OAAO,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAA;IAC9G,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YAC/B,SAAQ;QACV,CAAC;QACD,IAAI,OAAe,CAAA;QACnB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;QACjD,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,EAAE,EAAE,kDAAkD,CAAC,CAAA;YACjH,SAAQ;QACV,CAAC;QACD,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;QAC5C,IAAI,SAAS,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,CAAC;YACxC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,2EAA2E,CAAC,CAAA;YAC1I,SAAQ;QACV,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,EAAE,iFAAiF,CAAC,CAAA;QACjJ,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,eAAwC;IACxF,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,eAAe,CAAA;IAE7G,IAAI,OAAO,EAAE,wBAAwB,EAAE,CAAC;QACtC,GAAG,CAAC,IAAI,CACN,EAAE,YAAY,EAAE,EAChB,2JAA2J,CAC5J,CAAA;IACH,CAAC;IAED,MAAM,cAAc,GAAoC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,EAAE,CAAA;IACvJ,IAAI,cAAc,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,cAAc,CAAC,wBAAwB,EAAE,CAAC;QACjF,8FAA8F;QAC9F,oFAAoF;QACpF,MAAM,gBAAgB,GAAG,GAAG,YAAY,KAAK,OAAO,IAAI,QAAQ,IAAI,IAAI,MAAM,CAAA;QAC9E,MAAM,eAAe,GAAG,MAAM,sBAAsB,CAAC,SAAS,IAAI,2BAA2B,EAAE,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;QAC3H,IAAI,eAAe,IAAI,IAAI,EAAE,CAAC;YAC5B,cAAc,CAAC,SAAS,GAAG,eAAe,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,OAAgC;IAChF,MAAM,MAAM,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAA;IACzD,OAAO,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAAgC;IAC7E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,OAAO,CAAA;IACvE,MAAM,cAAc,GAAG,MAAM,2BAA2B,CAAC,OAAO,CAAC,CAAA;IAEjE,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7D,MAAM,UAAU,GAAG,GAAG,YAAY,KAAK,OAAO,IAAI,QAAQ,IAAI,IAAI,IAAI,MAAM,EAAE,CAAA;IAC9E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,6BAA6B,CAAC,KAAK,EAAE,GAAG,YAAY,KAAK,OAAO,EAAE,EAAE,UAAU,CAAC,CAAA;IAElH,OAAO,kBAAkB,CAAC,cAAc,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACxD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,KAAK,MAAM,CAAA;IACnF,KAAK,MAAM,MAAM,IAAI;QACnB,6CAA6C;QAC7C,6CAA6C;QAC7C,qDAAqD;QACrD,kCAAkC;KACnC,EAAE,CAAC;QACF,MAAM,GAAG,GAAG,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;QAClD,IAAI,GAAG,EAAE,CAAC;YACR,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAA;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,sBAAsB,aAAa,qBAAqB,CAAA;AACjE,CAAC","sourcesContent":["import * as get from \"@electron/get\"\nimport {\n  ElectronArtifactDetails,\n  ElectronDownloadCacheMode,\n  ElectronDownloadRequest,\n  ElectronDownloadRequestOptions,\n  ElectronPlatformArtifactDetails,\n  FetchDownloaderOptions,\n  MirrorOptions,\n} from \"@electron/get\"\nimport { exec, exists, log, PADDING, parseValidEnvVarUrl, sanitizeDirPath, to7zaOutputSwitch, ensureDir, moveDirAtomic } from \"builder-util\"\nimport { HttpError, MemoLazy, retry, sleep } from \"builder-util-runtime\"\nimport * as crypto from \"crypto\"\nimport type { ProgressBar } from \"electron-publish\"\nimport { MultiProgress } from \"electron-publish\"\nimport { createReadStream, createWriteStream } from \"fs\"\nimport * as fs from \"fs/promises\"\nimport * as os from \"os\"\nimport * as path from \"path\"\nimport * as lockfile from \"proper-lockfile\"\nimport { pipeline } from \"stream/promises\"\nimport * as tar from \"tar\"\nimport * as unzipper from \"unzipper\"\nimport { getPath7za } from \"../toolsets/7zip.js\"\nimport { CacheState, cleanupCacheDirectory, computeCacheMetadata, readCacheStateFile, validateCacheDirectory, writeCacheState } from \"./cacheState.js\"\n\nexport interface ElectronGetOptions extends Omit<\n  ElectronPlatformArtifactDetails,\n  | \"platform\"\n  | \"arch\"\n  | \"version\"\n  | \"artifactName\"\n  | \"artifactSuffix\"\n  | \"customFilename\"\n  | \"tempDirectory\"\n  | \"downloader\"\n  | \"cacheMode\"\n  | \"cacheRoot\"\n  | \"downloadOptions\"\n  | \"isGeneric\"\n  | \"mirrorOptions\"\n> {\n  mirrorOptions?: Omit<MirrorOptions, \"customDir\" | \"customFilename\" | \"customVersion\">\n}\n\nexport type ArtifactDownloadOptions = {\n  options?: ElectronGetOptions | null\n  artifactName: string\n  platformName: string\n  arch: string\n  version: string\n  cacheDir?: string\n}\n\nexport function hashUrlSafe(input: string, length = 6): string {\n  let hash = 5381\n  for (let i = 0; i < input.length; i++) {\n    hash = ((hash << 5) + hash) ^ input.charCodeAt(i)\n  }\n  hash >>>= 0\n  const out = hash.toString(36)\n  return out.length >= length ? out.slice(0, length) : out.padStart(length, \"0\")\n}\n\n// MemoLazy (not Lazy): keyed on ELECTRON_BUILDER_CACHE so the resolved cache dir is recomputed if the\n// override env var changes, while staying memoized when it doesn't (the production case). The creator\n// also ensures the resolved dir exists — that side effect lives here, at the point of use, so\n// getCacheDirectoryInternal stays a pure path resolver.\nexport const cacheDirectoryOverrideAllowed = new MemoLazy<string | undefined, string>(\n  () => process.env.ELECTRON_BUILDER_CACHE?.trim(),\n  async () => {\n    const dir = await getCacheDirectoryInternal({ isAvoidSystemOnWindows: true, allowEnvVarOverride: true })\n    await ensureDir(dir)\n    return dir\n  }\n)\n// Exposed for testing; not intended for public use. Pure path resolution (no I/O) — use the memoized\n// const's above when you need the directory to exist on disk. Kept async for a stable Promise-returning\n// contract across all call sites.\n// eslint-disable-next-line @typescript-eslint/require-await\nexport async function getCacheDirectoryInternal(options: { isAvoidSystemOnWindows?: boolean; allowEnvVarOverride: boolean }): Promise<string> {\n  const { isAvoidSystemOnWindows = true, allowEnvVarOverride } = options\n  const env = process.env.ELECTRON_BUILDER_CACHE?.trim()\n  if (allowEnvVarOverride && env && path.parse(env).root) {\n    return sanitizeDirPath(env)\n  }\n\n  const appName = \"electron-builder\"\n  const platform = os.platform()\n  const homeDir = os.homedir()\n\n  if (platform === \"darwin\") {\n    return path.join(homeDir, \"Library\", \"Caches\", appName)\n  }\n  if (platform === \"win32\") {\n    const localAppData = process.env.LOCALAPPDATA?.trim()\n    const username = process.env.USERNAME?.trim()?.toLowerCase()\n    // https://github.com/electron-userland/electron-builder/issues/1164\n    const isSystemUser = isAvoidSystemOnWindows && (localAppData?.toLowerCase()?.includes(\"\\\\windows\\\\system32\\\\\") || username === \"system\")\n    if (!localAppData || isSystemUser) {\n      return path.join(os.tmpdir(), `${appName}-cache`)\n    }\n    return path.join(localAppData, appName, \"Cache\")\n  }\n\n  const xdgCache = process.env.XDG_CACHE_HOME\n  return xdgCache && path.parse(xdgCache).root ? path.join(xdgCache, appName) : path.join(homeDir, \".cache\", appName)\n}\n\nfunction resolveCacheMode(): ElectronDownloadCacheMode {\n  const varName = \"ELECTRON_DOWNLOAD_CACHE_MODE\"\n  const cacheOverride = process.env[varName]?.trim()\n  if (cacheOverride && Number(cacheOverride) in ElectronDownloadCacheMode) {\n    const mode = Number(cacheOverride) as ElectronDownloadCacheMode\n    log.debug({ mode }, `cache mode overridden via env var ${varName}`)\n    return mode\n  }\n  return ElectronDownloadCacheMode.ReadWrite\n}\n\n/**\n * Returns true when `destPath` is safely contained within `dir` (direct child or deeper).\n * On Windows the filesystem is case-insensitive so the comparison is normalised to lowercase.\n * @internal exported for unit testing\n */\nexport function isSafeExtractPath(destPath: string, dir: string): boolean {\n  const normalizedDest = path.resolve(destPath)\n  const normalizedDir = path.resolve(dir)\n  if (process.platform === \"win32\") {\n    const d = normalizedDest.toLowerCase()\n    const b = normalizedDir.toLowerCase()\n    return d.startsWith(b + path.sep) || d === b\n  }\n  return normalizedDest.startsWith(normalizedDir + path.sep) || normalizedDest === normalizedDir\n}\n\nasync function extractZipStreaming(file: string, dir: string): Promise<void> {\n  // Pass 1: read central directory once to collect Unix modes (one seek to EOF)\n  const zipDir = await unzipper.Open.file(file)\n  const entryModes = new Map<string, number>()\n  for (const entry of zipDir.files) {\n    const mode = (entry.externalFileAttributes >> 16) & 0xffff\n    if (mode > 0) {\n      entryModes.set(entry.path, mode)\n    }\n  }\n  const isSymlink = (mode: number) => (mode & 0o170000) === 0o120000\n\n  // Pass 2: stream from byte 0 — no per-entry seeks, no Docker hang.\n  // Destroy the read stream in a finally block so the file handle is always released,\n  // including when the loop exits early due to a thrown error.\n  const readStream = createReadStream(file)\n  try {\n    const entries = readStream.pipe(unzipper.Parse({ forceStream: true }))\n    for await (const entry of entries as AsyncIterable<unzipper.Entry>) {\n      const destPath = path.resolve(dir, entry.path)\n      if (!isSafeExtractPath(destPath, dir)) {\n        throw new Error(`Path traversal blocked: ${entry.path}`)\n      }\n      const mode = entryModes.get(entry.path) ?? 0\n      if (mode > 0 && isSymlink(mode)) {\n        const target = (await entry.buffer()).toString()\n        if (path.isAbsolute(target)) {\n          throw new Error(`Absolute symlink target blocked: ${target}`)\n        }\n        const resolvedTarget = path.resolve(path.dirname(destPath), target)\n        if (!isSafeExtractPath(resolvedTarget, dir)) {\n          throw new Error(`Symlink target escapes extraction dir: ${target}`)\n        }\n        await fs.mkdir(path.dirname(destPath), { recursive: true })\n        await fs.symlink(target, destPath)\n      } else if (entry.type === \"Directory\") {\n        await fs.mkdir(destPath, { recursive: true })\n        entry.autodrain()\n      } else {\n        await fs.mkdir(path.dirname(destPath), { recursive: true })\n        await pipeline(entry, createWriteStream(destPath))\n        if (mode > 0) {\n          await fs.chmod(destPath, mode & 0o7777)\n        }\n      }\n    }\n  } finally {\n    readStream.destroy()\n  }\n}\n\nexport async function extractArchive(archive: string, dir: string) {\n  const file = sanitizeDirPath(archive)\n\n  const tmpDir = `${dir}.tmp`\n  await fs.mkdir(tmpDir, { recursive: true })\n\n  const release = await lockfile.lock(tmpDir, {\n    // 100 retries (not 15) so concurrent callers wait out a slow first extraction instead of failing\n    // with ELOCKED; the update heartbeat keeps an in-progress holder's lock fresh against `stale`.\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120000, // Increased from 60s to allow long-running extractions\n  })\n\n  try {\n    // rm + mkdir happen AFTER acquiring the lock so no concurrent caller can clear our tmpDir mid-extraction\n    await fs.rm(tmpDir, { recursive: true, force: true })\n    await fs.mkdir(tmpDir, { recursive: true })\n\n    // Guard against the transient window in @electron/get's non-atomic putFileInCache (remove → move).\n    // A concurrent worker may have deleted and not yet replaced the source archive; wait briefly for it.\n    for (let i = 0; !(await exists(file)); i++) {\n      if (i >= 4) {\n        throw Object.assign(new Error(`Source archive not found after retries: ${file}`), { code: \"ENOENT\", path: file })\n      }\n      log.warn({ file, attempt: i + 1 }, \"source archive transiently missing, retrying\")\n      await sleep(300 * (i + 1))\n    }\n\n    if (file.endsWith(\".tar.gz\") || file.endsWith(\".tgz\")) {\n      await tar.extract({ file, cwd: tmpDir, strip: 1 })\n    } else if (file.endsWith(\".tar.xz\") || file.endsWith(\".txz\") || file.endsWith(\".tar.7z\")) {\n      // Compressed tarballs node-tar cannot decompress itself (xz, 7z): use 7za to strip the outer\n      // compression layer into a .tar, then extract that tar.\n      // Note: the .tar.7z check MUST stay ahead of the plain .7z branch below, otherwise only the outer\n      // 7z layer is removed and the inner tar is left behind as-is (see https://github.com/electron-userland/electron-builder/issues/10002).\n      const cmd7za = await getPath7za()\n      const decompressOutDir = `${tmpDir}.decompress`\n      await fs.rm(decompressOutDir, { recursive: true, force: true })\n      await fs.mkdir(decompressOutDir, { recursive: true })\n      try {\n        await exec(cmd7za, [\"x\", \"-bd\", file, to7zaOutputSwitch(sanitizeDirPath(decompressOutDir)), \"-y\"])\n        const innerTar = (await fs.readdir(decompressOutDir)).find(f => f.endsWith(\".tar\"))\n        if (innerTar == null) {\n          throw new Error(`decompression of ${path.basename(file)} produced no .tar archive`)\n        }\n        await tar.extract({ file: path.join(decompressOutDir, innerTar), cwd: tmpDir, strip: 1 })\n      } finally {\n        await fs.rm(decompressOutDir, { recursive: true, force: true })\n      }\n    } else if (file.endsWith(\".zip\")) {\n      await extractZipStreaming(file, tmpDir)\n    } else if (file.endsWith(\".7z\")) {\n      const cmd7za = await getPath7za()\n      try {\n        await exec(cmd7za, [\"x\", \"-bd\", file, to7zaOutputSwitch(sanitizeDirPath(tmpDir)), \"-y\"])\n      } catch (e: any) {\n        // Check if extraction actually failed or just had benign warnings\n        const files = await fs.readdir(tmpDir)\n        if (files.length === 0) {\n          log.warn({ file: log.filePath(file), tmpDir: log.filePath(tmpDir), error: e.message }, \"7z extraction produced no output\")\n          throw new Error(`7z extraction failed for ${file}: ${e.message}`)\n        }\n        // If files were extracted despite the error, log and continue\n        log.warn({ error: e.message, filesExtracted: files.length }, \"7z reported error but extracted files\")\n      }\n    } else {\n      throw new Error(`Unsupported archive format: ${path.basename(file)}`)\n    }\n\n    // Verify extraction produced files\n    const extractedFiles = await fs.readdir(tmpDir)\n    if (extractedFiles.length === 0) {\n      throw new Error(`Extraction of ${path.basename(file)} produced no files`)\n    }\n\n    await fs.rm(dir, { recursive: true, force: true })\n    await moveDirAtomic(tmpDir, dir)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n}\n\nlet proxyInitialized = false\nfunction initializeProxyOnce(): void {\n  if (!proxyInitialized) {\n    reinitializeProxy()\n    proxyInitialized = true\n  }\n}\n\n/**\n * Forces undici's global proxy dispatcher to re-read the current HTTP(S)_PROXY / NO_PROXY env vars,\n * bypassing the once-guard in initializeProxyOnce(). Exported for integration testing only.\n */\nexport function reinitializeProxy(): void {\n  get.initializeProxy()\n}\n\n/**\n * Error codes considered transient for artifact downloads. Plain node socket errors carry the code\n * directly on `error.code`; undici (the fetch implementation used by @electron/get v5) wraps them in\n * a `TypeError: fetch failed` whose code lives on `error.cause.code` — including undici's own\n * `UND_ERR_*` codes for connection resets and connect timeouts.\n */\nconst TRANSIENT_DOWNLOAD_ERROR_CODES = new Set([\n  \"ENOTFOUND\",\n  \"ETIMEDOUT\",\n  \"ECONNRESET\",\n  \"ECONNREFUSED\",\n  \"EAI_AGAIN\",\n  \"EPIPE\",\n  \"ENOENT\",\n  \"UND_ERR_SOCKET\",\n  \"UND_ERR_CONNECT_TIMEOUT\",\n])\n\n/**\n * Decides whether a failed @electron/get download should be retried. Handles all three error shapes\n * seen in practice (exported for tests):\n * - builder-util-runtime's `HttpError` — retry on 5xx.\n * - @electron/get v5's `HTTPError` (`FetchDownloader`) — a plain `Error` subclass with the fetch\n *   `Response` on `.response` and NO `.code`; retry on 5xx and 429. Matched by class and by\n *   `name === \"HTTPError\"` as a fallback in case multiple @electron/get copies are loaded.\n * - transient network errors — code on `error.code`, or on `error.cause.code` for undici's\n *   `TypeError: fetch failed` wrapper.\n */\nexport function shouldRetryDownloadError(e: any): boolean {\n  if (e == null) {\n    return false\n  }\n  if (e instanceof HttpError) {\n    return e.isServerError()\n  }\n  if (e instanceof get.HTTPError || e.name === \"HTTPError\") {\n    const status = e.response?.status\n    return typeof status === \"number\" && (status >= 500 || status === 429)\n  }\n  const code = typeof e.code === \"string\" ? e.code : typeof e.cause?.code === \"string\" ? e.cause.code : undefined\n  return code != null && TRANSIENT_DOWNLOAD_ERROR_CODES.has(code)\n}\n\nasync function downloadArtifactToFile(config: ElectronArtifactDetails, label: string): Promise<string> {\n  // Serialize concurrent downloads of the same artifact across vitest workers to prevent @electron/get's\n  // non-atomic putFileInCache (remove + move) from racing with a concurrent reader.\n  const key = {\n    p: (config as ElectronPlatformArtifactDetails).platform,\n    a: (config as ElectronPlatformArtifactDetails).arch,\n    v: config.version,\n    n: config.artifactName,\n    g: config.isGeneric,\n  }\n\n  const artifactLockKey = crypto.createHash(\"sha256\").update(JSON.stringify(key)).digest(\"hex\").slice(0, 20)\n  const artifactLockPath = path.join(os.tmpdir(), `eb-dl-${artifactLockKey}.lock`)\n  // This lock is taken even for cache hits (the cache-hit check lives inside @electron/get), so under\n  // heavy concurrency many builds serialize here. 30 retries (~137s of backoff) is too few — waiters\n  // were exhausting it and failing with ELOCKED while the holder fetched a large artifact. 100 retries\n  // matches the other toolset locks; stale (10min) + proper-lockfile's update heartbeat keep a live\n  // downloader's lock fresh so the longer wait never falsely steals an in-progress download.\n  const releaseArtifactLock = await lockfile.lock(artifactLockPath, {\n    retries: { retries: 100, minTimeout: 500, maxTimeout: 5000 },\n    stale: 600_000,\n    realpath: false,\n  })\n  let lastLoggedMilestone = -1\n  const state: { bar: ProgressBar | undefined } = { bar: undefined }\n\n  // @electron/get v5 downloads via fetch, whose proxy support comes from undici's global dispatcher.\n  // initializeProxy() wires that up from HTTP(S)_PROXY/NO_PROXY env vars (replaces the got proxy agent).\n  initializeProxyOnce()\n\n  const downloadOptions: FetchDownloaderOptions = {\n    signal: AbortSignal.timeout(10 * 60 * 1000), // prevent indefinite hang on stalled connections\n    ...config.downloadOptions,\n    getProgressCallback: info => {\n      // @electron/get passes downloadOptions (including this callback) to its internal\n      // SHASUMS256.txt validation download. That file is tiny (<1 MB) and fires at 100%\n      // immediately, producing a spurious bar even when the artifact itself is cached.\n      // Skip progress display for any download whose total size is known and small.\n      if (info.total && info.total < 1_000_000) {\n        return Promise.resolve()\n      }\n      if (!state.bar && process.stdout.isTTY) {\n        log.info({ label }, \"downloading\")\n        state.bar = new MultiProgress().createBar(`${\" \".repeat(PADDING + 2)}[:bar] :percent | ${label}`, { total: 100 })\n      }\n      const pct = info.percent != null ? Math.floor(info.percent * 100) : 0\n      if (state.bar) {\n        state.bar.update(pct)\n      } else {\n        // log every 25% milestone for non-TTY environments (e.g. CI logs) to provide some visibility into download progress without overwhelming logs with too many updates\n        const percentCompleted = info.transferred && info.total ? Math.floor((info.transferred / info.total) * 100) : Math.floor(pct / 25) * 25\n        if (percentCompleted > lastLoggedMilestone && percentCompleted > 0) {\n          lastLoggedMilestone = percentCompleted\n          log.info({ label, progress: `${percentCompleted}%` }, percentCompleted !== 100 ? \"downloading\" : \"downloaded\")\n        }\n      }\n      return Promise.resolve()\n    },\n  }\n\n  const configWithProgress = { ...config, downloadOptions }\n  try {\n    let filePath: string\n    try {\n      filePath = await retry(() => get.downloadArtifact(configWithProgress), {\n        retries: 3,\n        interval: 2000,\n        backoff: 2000,\n        shouldRetry: shouldRetryDownloadError,\n      })\n    } catch (err) {\n      if (typeof (err as any)?.message === \"string\" && (err as any).message.includes(\"dest already exists\")) {\n        filePath = await get.downloadArtifact(configWithProgress)\n      } else {\n        throw err\n      }\n    }\n    if (!(await exists(filePath))) {\n      log.warn({ filePath, label }, \"cached artifact missing from disk; retrying with cache write\")\n      filePath = await get.downloadArtifact({ ...configWithProgress, cacheMode: ElectronDownloadCacheMode.WriteOnly })\n    }\n    if (!state.bar && lastLoggedMilestone === -1) {\n      log.info({ label }, \"using cached artifact\")\n    }\n    return filePath\n  } finally {\n    state.bar?.update(100)\n    state.bar?.terminate()\n    await releaseArtifactLock().catch(err => log.warn({ err }, \"failed to release artifact download lock\"))\n  }\n}\n\n/**\n * Checks electron-builder's own archive cache for a previously downloaded archive.\n * Validates the SHA-256 checksum when one is known. Returns the cached path on hit,\n * null on miss or checksum mismatch (mismatch also deletes the stale file).\n *\n * Air-gapped seeding contract: placing the archive at\n * `<cacheDir>/<releaseName>/<archive>` (e.g. `$ELECTRON_BUILDER_CACHE/appimage@1.0.3/appimage-tools-runtime-20251108.tar.gz`)\n * is sufficient for a fully offline toolset resolution — the checksum here is computed locally\n * against the value hardcoded in the toolset module, and extraction happens locally too. No\n * `.state` file needs to be seeded. See https://www.electron.build/tutorials/offline-air-gapped-builds.\n */\nasync function resolveFromArchiveCache(archiveCachePath: string, label: string, expectedSha256: string | undefined): Promise<string | null> {\n  if (!(await exists(archiveCachePath))) {\n    return null\n  }\n  if (expectedSha256) {\n    const hash = await new Promise<string>((resolve, reject) => {\n      const h = crypto.createHash(\"sha256\")\n      const s = createReadStream(archiveCachePath)\n      s.on(\"error\", reject)\n      s.on(\"data\", (chunk: Buffer | string) => h.update(chunk))\n      s.on(\"end\", () => resolve(h.digest(\"hex\")))\n    })\n    if (hash !== expectedSha256) {\n      log.warn({ file: label, archiveCachePath }, \"cached archive checksum mismatch — removing and re-downloading\")\n      await fs.rm(archiveCachePath).catch(() => {})\n      return null\n    }\n  }\n  log.debug({ file: label, archiveCachePath }, \"using cached archive — skipping download\")\n  return archiveCachePath\n}\n\n/**\n * Copies a freshly downloaded archive into electron-builder's own archive cache so that\n * future builds (including offline environments) can skip the network request entirely.\n */\nasync function persistToArchiveCache(sourcePath: string, archiveCachePath: string): Promise<void> {\n  try {\n    await fs.mkdir(path.dirname(archiveCachePath), { recursive: true })\n    await fs.copyFile(sourcePath, archiveCachePath)\n  } catch (err) {\n    log.warn({ err, archiveCachePath }, \"failed to persist archive to cache — will re-download next time\")\n  }\n}\n\n/**\n * Core download + extract engine. Handles lockfile, cache-hit short-circuit,\n * progress bar, extraction (.zip or .tar.gz), and completion marker.\n * Both public download functions delegate here after building their respective configs.\n */\nasync function downloadAndExtract(config: ElectronArtifactDetails, extractDir: string, label: string, archiveCachePath?: string): Promise<string> {\n  // Create only the PARENT dir (e.g. <cache>/fpm@2.2.1), never extractDir itself, before locking.\n  // The parent is stable — cleanup only ever removes extractDir and its .state/.tmp/.lock siblings —\n  // so extractDir's whole lifecycle (mkdir, rm, re-mkdir) stays inside the lock. ensureDir absorbs\n  // the concurrent-recursive-mkdir ENOENT/EEXIST race while peers populate the cold cache tree.\n  await ensureDir(path.dirname(extractDir))\n\n  // Pre-lock fast path: read-only short-circuit for a definitively complete and valid cache.\n  // Safe unlocked — the cache-state helpers return null/false for a missing or half-written dir,\n  // so a racing read only ever falls through to take the lock. Do NOT mutate the dir here.\n  const stateData = await readCacheStateFile(extractDir)\n  if (stateData?.state === CacheState.complete) {\n    const isValid = await validateCacheDirectory(extractDir, stateData.fileCount)\n    if (isValid) {\n      log.debug({ file: label, path: extractDir }, \"using cached artifact - cache valid\")\n      return extractDir\n    }\n  }\n\n  // Be patient: when many targets/builds contend on the same toolset cache concurrently, all but the\n  // first wait here while the winner downloads+extracts (a large bundle can take >1min). 15 retries\n  // (~67s) is too few and waiters fail with ELOCKED before the winner finishes; 100 matches the\n  // patience of withToolsetLock. proper-lockfile's update heartbeat keeps a live holder's lock fresh,\n  // so increasing waiter retries never falsely steals an in-progress extraction.\n  const release = await lockfile.lock(extractDir, {\n    // realpath:false so proper-lockfile creates <extractDir>.lock in the (already-created) parent\n    // WITHOUT calling fs.realpath(extractDir) first — which would throw ENOENT now that extractDir\n    // is created lazily inside the lock. This filesystem lock serializes peers both across worker\n    // processes AND within a single process (a second lock() for the same path retries until the\n    // first releases), so no in-process promise cache is needed — and one wouldn't help across the\n    // separate test worker processes anyway.\n    realpath: false,\n    retries: { retries: 100, minTimeout: 1000, maxTimeout: 5000 },\n    stale: 120000,\n  })\n  let downloadedFile: string | null = null\n  try {\n    // Re-check after acquiring lock: another worker may have completed while we waited.\n    const stateDataAfterLock = await readCacheStateFile(extractDir)\n    if (stateDataAfterLock?.state === CacheState.complete) {\n      const isValid = await validateCacheDirectory(extractDir, stateDataAfterLock.fileCount)\n      if (isValid) {\n        log.debug({ file: label, path: extractDir }, \"using cached artifact - skipping download/extract\")\n        return extractDir\n      }\n      log.warn({ extractDir }, \"Cache marked complete but files invalid, clearing\")\n    } else if (stateDataAfterLock?.state === CacheState.corrupted) {\n      log.warn({ extractDir }, \"Corrupted cache detected, cleaning up and re-extracting\")\n    }\n\n    // Cleanup inside the lock — skip lock files since we currently hold them\n    await cleanupCacheDirectory(extractDir, { skipLockFiles: true })\n    await ensureDir(extractDir)\n\n    // Check electron-builder's own archive cache before touching @electron/get.\n    // The cache lives alongside the extract dir: <cacheDir>/<releaseName>/<filename>.\n    // This lets repeated builds (or offline environments) skip the download entirely once\n    // the archive has been fetched at least once.\n    if (archiveCachePath) {\n      downloadedFile = await resolveFromArchiveCache(archiveCachePath, label, (config as any).checksums?.[label])\n    }\n\n    if (!downloadedFile) {\n      log.debug({ file: label }, \"downloading\")\n      downloadedFile = await downloadArtifactToFile(config, label)\n      if (!downloadedFile) {\n        throw new Error(`Failed to download artifact: ${label}`)\n      }\n      // Persist the downloaded archive so future builds (and offline environments) can\n      // skip the network request entirely.\n      if (archiveCachePath) {\n        await persistToArchiveCache(downloadedFile, archiveCachePath)\n      }\n    }\n\n    await writeCacheState(extractDir, CacheState.downloaded)\n\n    // Mark extracting so stale-lock detection can recover a crashed mid-extraction process\n    await writeCacheState(extractDir, CacheState.extracting)\n\n    // Extract while holding the lock to prevent concurrent interference\n    await extractArchive(downloadedFile, extractDir)\n\n    // Compute metadata with a full recursive walk now that tmpDir has been renamed to extractDir\n    const { fileCount, extractedSize } = await computeCacheMetadata(extractDir)\n\n    // Write complete state with metadata BEFORE releasing the lock; throwOnError=true so a\n    // failed write (disk full, permissions) propagates instead of silently producing a no-op cache\n    await writeCacheState(extractDir, CacheState.complete, { fileCount, extractedSize }, true)\n  } finally {\n    await release().catch(err => log.warn({ err }, \"failed to release lockfile\"))\n  }\n  return extractDir\n}\n\n// ─── Public API ───────────────────────────────────────────────────────────────\n\n/**\n * Copies a remote artifact to a specific output path on disk.\n * Unlike downloadBuilderToolset, this does not extract archives — it copies the raw file.\n * Used for certificate imports where the caller needs the file at a known path.\n */\nexport async function download(url: string, output: string, checksum?: string | null): Promise<void> {\n  const filenameWithExt = path.basename(new URL(url).pathname)\n  if (checksum == null) {\n    log.warn({ url }, \"downloading without an integrity checksum — the download is not verified against a known-good hash\")\n  }\n  const downloadedFile = await downloadArtifactToFile(\n    {\n      version: \"9.9.9\",\n      artifactName: filenameWithExt,\n      cacheRoot: path.resolve(await cacheDirectoryOverrideAllowed.value, \"downloads\"),\n      cacheMode: resolveCacheMode(),\n      ...(checksum != null ? { checksums: { [filenameWithExt]: checksum } } : { unsafelyDisableChecksums: true }),\n      mirrorOptions: { resolveAssetURL: async () => Promise.resolve(url) },\n      isGeneric: true,\n    },\n    filenameWithExt\n  )\n  await fs.copyFile(downloadedFile, output)\n}\n\nfunction validateBinaryCustomDir(envVarName: string, value: string): string {\n  if (value.includes(\"://\") || value.includes(\"..\") || value.startsWith(\"/\")) {\n    throw new Error(\n      `${envVarName} must be a safe relative path component (e.g. \"v1.0.0-custom\"). ` + `Values containing \"://\", \"..\", or a leading \"/\" are not allowed. Got: \"${value}\"`\n    )\n  }\n  return value\n}\n\nconst CUSTOM_DIR_ENV_VARS = [\n  \"NPM_CONFIG_ELECTRON_BUILDER_BINARIES_CUSTOM_DIR\",\n  \"npm_config_electron_builder_binaries_custom_dir\",\n  \"npm_package_config_electron_builder_binaries_custom_dir\",\n  \"ELECTRON_BUILDER_BINARIES_CUSTOM_DIR\",\n] as const\n\n/**\n * Resolves the final download URL for a builder binary, honouring:\n *   ELECTRON_BUILDER_BINARIES_DOWNLOAD_OVERRIDE_URL  – fully replaces the URL directory\n *   ELECTRON_BUILDER_BINARIES_CUSTOM_DIR (and npm_ variants) – replaces releaseName in the path\n *   overrideUrl (caller-supplied)                     – the complete file URL, used as-is when no env var is set\n *\n * Exported for unit testing; not part of the public API.\n * @internal\n */\nexport function resolveBuilderBinaryUrl(releaseName: string, filenameWithExt: string, baseUrl: string, overrideUrl?: string): string {\n  const envOverrideUrl = parseValidEnvVarUrl(\"ELECTRON_BUILDER_BINARIES_DOWNLOAD_OVERRIDE_URL\")\n  if (envOverrideUrl != null) {\n    return `${envOverrideUrl}/${filenameWithExt}`\n  }\n  if (overrideUrl != null) {\n    // The caller-supplied override (ToolsetCustom.url) points directly at the file — appending\n    // filenameWithExt would double the last path segment (e.g. …/bundle.7z/bundle.7z, issue #10084).\n    return overrideUrl\n  }\n  const customDirEntry = CUSTOM_DIR_ENV_VARS.map(name => ({ name, value: process.env[name] })).find(e => e.value != null)\n  if (customDirEntry != null) {\n    return `${baseUrl}${validateBinaryCustomDir(customDirEntry.name, customDirEntry.value!)}/${filenameWithExt}`\n  }\n  return `${baseUrl}${releaseName}/${filenameWithExt}`\n}\n\n/**\n * Downloads a generic artifact (.tar.gz or .zip) from a GitHub release.\n * Used for electron-builder-binaries tools (appimage, etc.).\n */\n/** Toolsets already announced this process, so a multi-target build logs each one once. */\nconst announcedToolsets = new Set<string>()\n\n/**\n * Every `toolsets.*` property now defaults to \"latest\", which resolves to a newer bundle than v26\n * pinned (NSIS 3.0.4.1 -> 3.12, winCodeSign 2.6.0 -> 1.3.0, Wine 4.0.1 -> 11.0, AppImage FUSE2 ->\n * static FUSE3). Nothing recorded which version was used: `downloadBuilderToolset` logged only at\n * debug level, and on a warm cache it printed nothing at all — so a regression introduced by a new\n * bundle had no trace in the build log tying it to the toolset.\n */\nfunction announceToolsetVersion(releaseName: string): void {\n  if (announcedToolsets.has(releaseName)) {\n    return\n  }\n  announcedToolsets.add(releaseName)\n  log.info({ toolset: releaseName }, \"using toolset\")\n}\n\nexport async function downloadBuilderToolset(options: {\n  releaseName: string\n  filenameWithExt: string\n  checksums?: Record<string, string>\n  githubOrgRepo?: string\n  overrideUrl?: string\n}): Promise<string> {\n  const { releaseName, filenameWithExt, checksums, githubOrgRepo = \"electron-userland/electron-builder-binaries\", overrideUrl } = options\n  announceToolsetVersion(releaseName)\n\n  if (/[/\\\\]|^\\.\\./.test(filenameWithExt) || filenameWithExt.includes(\"..\")) {\n    throw new Error(`downloadBuilderToolset: unsafe filenameWithExt \"${filenameWithExt}\" — must be a plain filename with no path separators or traversal sequences`)\n  }\n\n  const baseUrl = getBinariesMirrorUrl(githubOrgRepo)\n  const fullUrl = resolveBuilderBinaryUrl(releaseName, filenameWithExt, baseUrl, overrideUrl)\n  const suffix = hashUrlSafe(fullUrl, 5)\n  // tar.7z is listed before 7z so the full extension is stripped. Deliberate side effect: this changes the\n  // extract-dir name for .tar.7z toolsets (e.g. the snap template) from \"<name>.tar-<hash>\" to \"<name>-<hash>\",\n  // which busts caches poisoned by the broken .tar.7z extraction in 26.15.0-26.15.6 (issue #10002).\n  const folderName = `${filenameWithExt.replace(/\\.(tar\\.gz|tgz|tar\\.xz|txz|tar\\.7z|zip|7z)$/, \"\")}-${suffix}`\n  // releaseName is library input; enforce cache-dir containment (rejects traversal, clears taint into shell extraction)\n  const cacheDir = await cacheDirectoryOverrideAllowed.value\n  const extractDir = sanitizeDirPath(path.join(cacheDir, releaseName, folderName), cacheDir)\n\n  // Use resolveAssetURL so @electron/get's ELECTRON_MIRROR env var check cannot override\n  // the builder-binaries URL we've already resolved (see getArtifactRemoteURL in @electron/get).\n  const mirrorOptions: MirrorOptions = {\n    resolveAssetURL: async () => Promise.resolve(fullUrl),\n  }\n\n  // Predictable archive cache: <cacheDir>/<releaseName>/<filename>, next to the extract dir.\n  // downloadAndExtract checks here before touching @electron/get and persists the archive here\n  // after every successful download, so subsequent builds never need a network round-trip.\n  const archiveCachePath = sanitizeDirPath(path.join(cacheDir, releaseName, filenameWithExt), cacheDir)\n\n  const config: ElectronDownloadRequest & ElectronDownloadRequestOptions & { isGeneric: true } = {\n    version: \"9.9.9\", // must be >1.3.2 to bypass @electron/get validation shortcut\n    artifactName: filenameWithExt,\n    cacheRoot: path.resolve(await cacheDirectoryOverrideAllowed.value, \"downloads\"),\n    cacheMode: resolveCacheMode(),\n    ...(checksums != null ? { checksums } : { unsafelyDisableChecksums: true }),\n    mirrorOptions,\n    isGeneric: true,\n  }\n  return downloadAndExtract(config, extractDir, filenameWithExt, archiveCachePath)\n}\n\n/**\n * Mirrors @electron/get's default cache root (`env-paths(\"electron\", { suffix: \"\" }).cache`).\n * @electron/get does not export it and its package `exports` map blocks deep imports, so the\n * (deliberately tiny) platform switch is replicated here. Must stay in sync with the\n * `cacheRoot` default documented in @electron/get's `ElectronDownloadRequestOptions`.\n * @internal exported for unit testing\n */\nexport function defaultElectronGetCacheRoot(): string {\n  const name = \"electron\"\n  const homeDir = os.homedir()\n  switch (os.platform()) {\n    case \"darwin\":\n      return path.join(homeDir, \"Library\", \"Caches\", name)\n    case \"win32\":\n      return path.join(process.env.LOCALAPPDATA || path.join(homeDir, \"AppData\", \"Local\"), name, \"Cache\")\n    default:\n      return path.join(process.env.XDG_CACHE_HOME || path.join(homeDir, \".cache\"), name)\n  }\n}\n\n/**\n * Parses the upstream `SHASUMS256.txt` format into the `Record<filename, sha256-hex>` shape that\n * @electron/get accepts as inline `checksums`. Each line is `<sha256-hex> *<filename>` (binary\n * mode) or `<sha256-hex>  <filename>` (text mode); malformed lines are ignored.\n * @internal exported for unit testing\n */\nexport function parseChecksumFile(content: string): Record<string, string> {\n  const checksums: Record<string, string> = {}\n  for (const rawLine of content.split(\"\\n\")) {\n    const match = /^([a-fA-F0-9]{64})\\s+\\*?(.+)$/.exec(rawLine.trim())\n    if (match != null) {\n      checksums[match[2]] = match[1].toLowerCase()\n    }\n  }\n  return checksums\n}\n\n/**\n * Looks for a locally seeded SHASUMS256 file at the root of the @electron/get cache and returns\n * its contents as inline `checksums`, or null when nothing usable is seeded.\n *\n * Why: without inline `checksums`, @electron/get re-downloads `SHASUMS256.txt` with a hardcoded\n * `cacheMode: Bypass` on EVERY build — even when the artifact itself is a cache hit — so a fully\n * seeded cache still requires network access and air-gapped builds fail (#10039). Cache-seeding\n * tools (e.g. flatpak-node-generator) already place `SHASUMS256.txt-<version>` flat at the cache\n * root; feeding it back as inline `checksums` keeps checksum validation enabled while making it\n * fully offline. A plain `SHASUMS256.txt` at the cache root is accepted as a manual-seeding\n * fallback. A candidate file is only used when it actually contains an entry for the requested\n * artifact, so a stale file for another version can never break an online build.\n * See https://www.electron.build/tutorials/offline-air-gapped-builds for the seeding contract.\n * @internal exported for unit testing\n */\nexport async function resolveSeededChecksums(cacheRoot: string, version: string, artifactFileName: string): Promise<Record<string, string> | null> {\n  const candidates = [path.join(cacheRoot, `SHASUMS256.txt-${version}`), path.join(cacheRoot, \"SHASUMS256.txt\")]\n  for (const candidate of candidates) {\n    if (!(await exists(candidate))) {\n      continue\n    }\n    let content: string\n    try {\n      content = await fs.readFile(candidate, \"utf-8\")\n    } catch (err: any) {\n      log.warn({ file: log.filePath(candidate), err: err.message }, \"failed to read seeded SHASUMS file — ignoring it\")\n      continue\n    }\n    const checksums = parseChecksumFile(content)\n    if (checksums[artifactFileName] == null) {\n      log.warn({ file: log.filePath(candidate), artifactFileName }, \"seeded SHASUMS file has no entry for the requested artifact — ignoring it\")\n      continue\n    }\n    log.debug({ file: log.filePath(candidate), artifactFileName }, \"using locally seeded SHASUMS256 checksums — checksum validation can run offline\")\n    return checksums\n  }\n  return null\n}\n\n/**\n * Assembles the `@electron/get` artifact config (`ElectronPlatformArtifactDetails`) from\n * `ArtifactDownloadOptions`: spreads the caller's options and pins `cacheRoot`/`platform`/`arch`/\n * `version`/`artifactName` and the resolved cache mode, warning when checksum verification is\n * disabled. When the caller provides no `checksums` (user-provided `electronGet.checksums` always\n * wins) and verification is not disabled, a locally seeded `SHASUMS256.txt-<version>` at the cache\n * root is picked up as inline `checksums` so validation works offline (see resolveSeededChecksums).\n * Callers pass the result to `downloadArtifactToFile` / `downloadAndExtract`.\n * @internal exported for unit testing\n */\nexport async function buildElectronArtifactConfig(artifactOptions: ArtifactDownloadOptions): Promise<ElectronPlatformArtifactDetails> {\n  const { options, arch, version, platformName: platform, artifactName, cacheDir: cacheRoot } = artifactOptions\n\n  if (options?.unsafelyDisableChecksums) {\n    log.warn(\n      { artifactName },\n      \"electronGet.unsafelyDisableChecksums is enabled — downloaded artifacts will NOT be verified; a compromised mirror can serve malicious binaries undetected\"\n    )\n  }\n\n  const artifactConfig: ElectronPlatformArtifactDetails = { ...options, cacheRoot, platform, arch, version, artifactName, cacheMode: resolveCacheMode() }\n  if (artifactConfig.checksums == null && !artifactConfig.unsafelyDisableChecksums) {\n    // Matches @electron/get's getArtifactFileName for non-generic artifacts; `artifactSuffix` and\n    // `customFilename` cannot diverge here — both are excluded from ElectronGetOptions.\n    const artifactFileName = `${artifactName}-v${version}-${platform}-${arch}.zip`\n    const seededChecksums = await resolveSeededChecksums(cacheRoot ?? defaultElectronGetCacheRoot(), version, artifactFileName)\n    if (seededChecksums != null) {\n      artifactConfig.checksums = seededChecksums\n    }\n  }\n  return artifactConfig\n}\n\n/**\n * Downloads the electron artifact zip via @electron/get (with caching) and returns the zip file path.\n * Use when you need to extract the zip yourself (e.g. directly to appOutDir to preserve empty dirs and symlinks).\n */\nexport async function downloadElectronArtifactZip(options: ArtifactDownloadOptions): Promise<string> {\n  const config = await buildElectronArtifactConfig(options)\n  return downloadArtifactToFile(config, config.artifactName)\n}\n\n/**\n * Downloads an electron platform artifact (e.g. ffmpeg) via `@electron/get` and extracts it into a\n * content-addressed cache directory (keyed on a hash of the resolved artifact config), returning the\n * extraction path.\n */\nexport async function downloadElectronArtifact(options: ArtifactDownloadOptions): Promise<string> {\n  const { arch, version, platformName: platform, artifactName } = options\n  const artifactConfig = await buildElectronArtifactConfig(options)\n\n  const suffix = hashUrlSafe(JSON.stringify(artifactConfig), 5)\n  const folderName = `${artifactName}-v${version}-${platform}-${arch}-${suffix}`\n  const extractDir = path.join(await cacheDirectoryOverrideAllowed.value, `${artifactName}-v${version}`, folderName)\n\n  return downloadAndExtract(artifactConfig, extractDir, artifactName)\n}\n\n/**\n * Get the binaries mirror URL from environment variables.\n * Supports various npm config formats and falls back to GitHub.\n */\nexport function getBinariesMirrorUrl(githubOrgRepo: string): string {\n  const allowHttp = process.env[\"ELECTRON_BUILDER_DANGEROUSLY_ALLOW_HTTP\"] === \"true\"\n  for (const envVar of [\n    \"NPM_CONFIG_ELECTRON_BUILDER_BINARIES_MIRROR\",\n    \"npm_config_electron_builder_binaries_mirror\",\n    \"npm_package_config_electron_builder_binaries_mirror\",\n    \"ELECTRON_BUILDER_BINARIES_MIRROR\",\n  ]) {\n    const url = parseValidEnvVarUrl(envVar, allowHttp)\n    if (url) {\n      return url.endsWith(\"/\") ? url : `${url}/`\n    }\n  }\n  return `https://github.com/${githubOrgRepo}/releases/download/`\n}\n"]}

package/dist/util/flags.d.ts

@@ -8,4 +8,9 @@ export declare function isNpmNoBinLinks(): boolean;
 export declare function isTravis(): boolean;
 export declare function isFpmDebug(): boolean;
 export declare function isSnapDestructiveMode(): boolean;
+/**
+ * Throws when a removed environment variable is set. Called once per process from `Packager.build()`
+ * so it runs for every entrypoint (CLI, programmatic `build()`, and a directly constructed Packager).
+ */
+export declare function assertNoRemovedEnvVars(): void;
 //# sourceMappingURL=flags.d.ts.map

package/dist/util/flags.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/util/flags.ts"],"names":[],"mappings":"AAIA,wBAAgB,+BAA+B,YAE9C;AAED,wBAAgB,mBAAmB,YAElC;AAID,wBAAgB,mBAAmB,YAElC;AAED,wBAAgB,2BAA2B,YAE1C;AAED,wBAAgB,oBAAoB,YAEnC;AAID,wBAAgB,uBAAuB,YAEtC;AAID,wBAAgB,eAAe,YAE9B;AAID,wBAAgB,QAAQ,YAEvB;AAID,wBAAgB,UAAU,YAEzB;AAED,wBAAgB,qBAAqB,YAEpC"}
+{"version":3,"file":"flags.d.ts","sourceRoot":"","sources":["../../src/util/flags.ts"],"names":[],"mappings":"AAIA,wBAAgB,+BAA+B,YAE9C;AAED,wBAAgB,mBAAmB,YAElC;AAID,wBAAgB,mBAAmB,YAElC;AAED,wBAAgB,2BAA2B,YAE1C;AAED,wBAAgB,oBAAoB,YAEnC;AAID,wBAAgB,uBAAuB,YAEtC;AAID,wBAAgB,eAAe,YAE9B;AAID,wBAAgB,QAAQ,YAEvB;AAID,wBAAgB,UAAU,YAEzB;AAED,wBAAgB,qBAAqB,YAEpC;AAyHD;;;GAGG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAS7C"}

package/dist/util/flags.js

@@ -1,4 +1,4 @@
-import { isEnvTrue } from "builder-util";
+import { InvalidConfigurationError, isEnvTrue } from "builder-util";
 // ─── Code signing ─────────────────────────────────────────────────────────────
 export function isAutoDiscoveryCodeSignIdentity() {
     return process.env.CSC_IDENTITY_AUTO_DISCOVERY !== "false";
@@ -35,4 +35,127 @@ export function isFpmDebug() {
 export function isSnapDestructiveMode() {
     return isEnvTrue(process.env.SNAP_DESTRUCTIVE_MODE);
 }
+/**
+ * Environment variables that v26 honored and v27 ignores.
+ *
+ * These are the most silent of all the v27 breaking changes: unlike a removed config key, nothing
+ * validates `process.env`, so a CI image exporting `USE_SYSTEM_WINE` or `ELECTRON_BUILDER_NSIS_DIR`
+ * silently switches toolchain with a green build. `CI_BUILD_TAG` is worse still — combined with the
+ * removal of implicit publishing, a tagged release simply stops uploading.
+ *
+ * Toolsets are now configured through the `toolsets` build option, which accepts an `https://` URL
+ * (downloaded and cached) or a `file://` path (used as-is).
+ */
+const REMOVED_ENV_VARS = {
+    APPIMAGE_TOOLS_PATH: {
+        controlled: "the AppImage build tools (mksquashfs, runtime)",
+        replacement: 'toolsets.appimage: { url: "file:///path/to/appimage-tools-dir" }',
+    },
+    LINUX_TOOLS_MAC_PATH: {
+        controlled: "the linux-tools-mac bundle (ar, lzip, gtar) used when building Linux targets on macOS",
+        replacement: 'toolsets.linuxToolsMac: { url: "file:///path/to/linux-tools-mac-dir" }',
+    },
+    CUSTOM_FPM_PATH: {
+        controlled: "the FPM executable",
+        replacement: 'toolsets.fpm: { url: "file:///path/to/fpm-dir" }',
+    },
+    USE_SYSTEM_FPM: {
+        controlled: "forcing the host-installed fpm instead of the bundled one",
+        replacement: 'toolsets.fpm: { url: "file:///path/to/fpm-dir" }',
+    },
+    ELECTRON_BUILDER_NSIS_DIR: {
+        controlled: "the NSIS compiler bundle directory",
+        replacement: 'toolsets.nsis: { url: "file:///path/to/nsis-bundle-dir" }',
+    },
+    ELECTRON_BUILDER_NSIS_RESOURCES_DIR: {
+        controlled: "the NSIS resources/plugins directory",
+        replacement: 'toolsets.nsis: { url: "file:///path/to/nsis-bundle-dir" } (the v27 nsis bundle carries compiler and resources together)',
+    },
+    ELECTRON_BUILDER_WINE_TOOLSET_DIR: {
+        controlled: "the Wine bundle directory",
+        replacement: 'toolsets.wine: { url: "file:///path/to/wine-dir" }',
+    },
+    USE_SYSTEM_WINE: {
+        controlled: "forcing the host-installed Wine instead of the downloaded bundle",
+        replacement: 'toolsets.wine: "system" (the host `wine` on PATH is already the default on macOS and Linux, so you can simply drop this variable)',
+    },
+    USE_SYSTEM_SIGNCODE: {
+        controlled: "forcing the host signtool/signcode instead of the bundled winCodeSign toolset",
+        replacement: 'win.sign (e.g. { "win": { "sign": { "type": "signtool", … } } }) together with toolsets.winCodeSign: { url: "file:///path/to/bundle-dir" }',
+    },
+    USE_SYSTEM_OSSLSIGNCODE: {
+        controlled: "forcing the host osslsigncode instead of the bundled one",
+        replacement: 'win.sign together with toolsets.winCodeSign: { url: "file:///path/to/bundle-dir" }',
+    },
+    SIGNTOOL_PATH: {
+        controlled: "the path to signtool.exe",
+        replacement: 'toolsets.winCodeSign: { url: "file:///path/to/bundle-dir" }',
+    },
+    ELECTRON_BUILDER_7ZIP_PATH: {
+        controlled: "the 7-Zip executable",
+        replacement: 'toolsets.sevenZip: { url: "file:///path/to/dir" } (a custom sevenZip bundle must be a .tar.gz, .zip, or bare file:// directory)',
+    },
+    ELECTRON_BUILDER_ICONS_TOOLSET_DIR: {
+        controlled: "the icons toolset bundle directory",
+        replacement: 'toolsets.icons: { url: "file:///path/to/icons-bundle-dir" }',
+    },
+    CI_BUILD_TAG: {
+        controlled: "the release tag used by the publisher",
+        replacement: "the CI_COMMIT_TAG environment variable (the standard GitLab CI variable)",
+    },
+    ALLOW_ELECTRON_BUILDER_AS_PRODUCTION_DEPENDENCY: {
+        controlled: "bundling electron-builder itself when it was listed under production dependencies",
+        replacement: 'the ignoredProductionDependencies build option — drop "electron-builder" from the list to ship it inside your app',
+    },
+};
+/** Emitted once per process; a build can invoke the packager more than once. */
+let removedEnvVarsChecked = false;
+/**
+ * Fails the build when a removed environment variable is set, naming the `toolsets` (or other)
+ * replacement. Without this the variable is simply ignored and the build silently uses a different
+ * toolchain than the one CI asked for.
+ *
+ * @internal exported for tests
+ */
+export function checkRemovedEnvVars(env = process.env) {
+    const found = Object.keys(REMOVED_ENV_VARS)
+        .filter(name => env[name] != null && env[name] !== "")
+        .sort();
+    if (found.length === 0) {
+        return null;
+    }
+    const header = found.length === 1
+        ? `The environment variable ${found[0]} was removed in electron-builder v27 and is now ignored:`
+        : `${found.length} environment variables set here were removed in electron-builder v27 and are now ignored:`;
+    const entries = found.map(name => {
+        const { controlled, replacement } = REMOVED_ENV_VARS[name];
+        return `• ${name} controlled ${controlled}.\n  Use ${replacement} instead.`;
+    });
+    return [
+        header,
+        "",
+        ...entries,
+        "",
+        "Unset the variable once you have moved the setting into your configuration.",
+        "https://www.electron.build/docs/migration/v27-breaking-changes#toolset-env-var-overrides-removed",
+    ].join("\n");
+}
+/**
+ * Throws when a removed environment variable is set. Called once per process from `Packager.build()`
+ * so it runs for every entrypoint (CLI, programmatic `build()`, and a directly constructed Packager).
+ */
+export function assertNoRemovedEnvVars() {
+    if (removedEnvVarsChecked) {
+        return;
+    }
+    removedEnvVarsChecked = true;
+    const message = checkRemovedEnvVars();
+    if (message != null) {
+        throw new InvalidConfigurationError(message);
+    }
+}
+/** @internal exported for tests — lets a test re-arm the once-per-process guard. */
+export function resetRemovedEnvVarsCheck() {
+    removedEnvVarsChecked = false;
+}
 //# sourceMappingURL=flags.js.map

package/dist/util/flags.js.map

@@ -1 +1 @@
-{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../src/util/flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAExC,iFAAiF;AAEjF,MAAM,UAAU,+BAA+B;IAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,OAAO,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;AACpD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AACxD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,uBAAuB;IACrC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AACxD,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAChD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,QAAQ;IACtB,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AACtC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;AACrD,CAAC","sourcesContent":["import { isEnvTrue } from \"builder-util\"\n\n// ─── Code signing ─────────────────────────────────────────────────────────────\n\nexport function isAutoDiscoveryCodeSignIdentity() {\n  return process.env.CSC_IDENTITY_AUTO_DISCOVERY !== \"false\"\n}\n\nexport function isCscForPullRequest() {\n  return isEnvTrue(process.env.CSC_FOR_PULL_REQUEST)\n}\n\n// ─── Build behaviour ──────────────────────────────────────────────────────────\n\nexport function isBuildCacheEnabled() {\n  return !isEnvTrue(process.env.ELECTRON_BUILDER_DISABLE_BUILD_CACHE)\n}\n\nexport function isRemoveStageDirEvenIfDebug() {\n  return isEnvTrue(process.env.ELECTRON_BUILDER_REMOVE_STAGE_EVEN_IF_DEBUG)\n}\n\nexport function isOfflineModeEnabled() {\n  return isEnvTrue(process.env.ELECTRON_BUILDER_OFFLINE)\n}\n\n// ─── Publishing ───────────────────────────────────────────────────────────────\n\nexport function isPublishForPullRequest() {\n  return isEnvTrue(process.env.PUBLISH_FOR_PULL_REQUEST)\n}\n\n// ─── Package metadata / dependencies ─────────────────────────────────────────\n\nexport function isNpmNoBinLinks() {\n  return isEnvTrue(process.env.NPM_NO_BIN_LINKS)\n}\n\n// ─── CI environment detection ─────────────────────────────────────────────────\n\nexport function isTravis() {\n  return isEnvTrue(process.env.TRAVIS)\n}\n\n// ─── Platform toolset overrides ───────────────────────────────────────────────\n\nexport function isFpmDebug() {\n  return isEnvTrue(process.env.FPM_DEBUG)\n}\n\nexport function isSnapDestructiveMode() {\n  return isEnvTrue(process.env.SNAP_DESTRUCTIVE_MODE)\n}\n"]}
+{"version":3,"file":"flags.js","sourceRoot":"","sources":["../../src/util/flags.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAA;AAEnE,iFAAiF;AAEjF,MAAM,UAAU,+BAA+B;IAC7C,OAAO,OAAO,CAAC,GAAG,CAAC,2BAA2B,KAAK,OAAO,CAAA;AAC5D,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;AACpD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,mBAAmB;IACjC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,oCAAoC,CAAC,CAAA;AACrE,CAAC;AAED,MAAM,UAAU,2BAA2B;IACzC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,2CAA2C,CAAC,CAAA;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB;IAClC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AACxD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,uBAAuB;IACrC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;AACxD,CAAC;AAED,gFAAgF;AAEhF,MAAM,UAAU,eAAe;IAC7B,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAChD,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,QAAQ;IACtB,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AACtC,CAAC;AAED,iFAAiF;AAEjF,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;AACzC,CAAC;AAED,MAAM,UAAU,qBAAqB;IACnC,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAA;AACrD,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,gBAAgB,GAAkC;IACtD,mBAAmB,EAAE;QACnB,UAAU,EAAE,gDAAgD;QAC5D,WAAW,EAAE,kEAAkE;KAChF;IACD,oBAAoB,EAAE;QACpB,UAAU,EAAE,uFAAuF;QACnG,WAAW,EAAE,wEAAwE;KACtF;IACD,eAAe,EAAE;QACf,UAAU,EAAE,oBAAoB;QAChC,WAAW,EAAE,kDAAkD;KAChE;IACD,cAAc,EAAE;QACd,UAAU,EAAE,2DAA2D;QACvE,WAAW,EAAE,kDAAkD;KAChE;IACD,yBAAyB,EAAE;QACzB,UAAU,EAAE,oCAAoC;QAChD,WAAW,EAAE,2DAA2D;KACzE;IACD,mCAAmC,EAAE;QACnC,UAAU,EAAE,sCAAsC;QAClD,WAAW,EAAE,yHAAyH;KACvI;IACD,iCAAiC,EAAE;QACjC,UAAU,EAAE,2BAA2B;QACvC,WAAW,EAAE,oDAAoD;KAClE;IACD,eAAe,EAAE;QACf,UAAU,EAAE,kEAAkE;QAC9E,WAAW,EAAE,mIAAmI;KACjJ;IACD,mBAAmB,EAAE;QACnB,UAAU,EAAE,+EAA+E;QAC3F,WAAW,EAAE,4IAA4I;KAC1J;IACD,uBAAuB,EAAE;QACvB,UAAU,EAAE,0DAA0D;QACtE,WAAW,EAAE,oFAAoF;KAClG;IACD,aAAa,EAAE;QACb,UAAU,EAAE,0BAA0B;QACtC,WAAW,EAAE,6DAA6D;KAC3E;IACD,0BAA0B,EAAE;QAC1B,UAAU,EAAE,sBAAsB;QAClC,WAAW,EAAE,iIAAiI;KAC/I;IACD,kCAAkC,EAAE;QAClC,UAAU,EAAE,oCAAoC;QAChD,WAAW,EAAE,6DAA6D;KAC3E;IACD,YAAY,EAAE;QACZ,UAAU,EAAE,uCAAuC;QACnD,WAAW,EAAE,0EAA0E;KACxF;IACD,+CAA+C,EAAE;QAC/C,UAAU,EAAE,mFAAmF;QAC/F,WAAW,EAAE,mHAAmH;KACjI;CACF,CAAA;AAED,gFAAgF;AAChF,IAAI,qBAAqB,GAAG,KAAK,CAAA;AAEjC;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC;SACxC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;SACrD,IAAI,EAAE,CAAA;IACT,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,IAAI,CAAA;IACb,CAAC;IAED,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,4BAA4B,KAAK,CAAC,CAAC,CAAC,0DAA0D;QAChG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,2FAA2F,CAAA;IAChH,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QAC/B,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC1D,OAAO,KAAK,IAAI,eAAe,UAAU,YAAY,WAAW,WAAW,CAAA;IAC7E,CAAC,CAAC,CAAA;IACF,OAAO;QACL,MAAM;QACN,EAAE;QACF,GAAG,OAAO;QACV,EAAE;QACF,6EAA6E;QAC7E,kGAAkG;KACnG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,qBAAqB,EAAE,CAAC;QAC1B,OAAM;IACR,CAAC;IACD,qBAAqB,GAAG,IAAI,CAAA;IAC5B,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;IACrC,IAAI,OAAO,IAAI,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,yBAAyB,CAAC,OAAO,CAAC,CAAA;IAC9C,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,wBAAwB;IACtC,qBAAqB,GAAG,KAAK,CAAA;AAC/B,CAAC","sourcesContent":["import { InvalidConfigurationError, isEnvTrue } from \"builder-util\"\n\n// ─── Code signing ─────────────────────────────────────────────────────────────\n\nexport function isAutoDiscoveryCodeSignIdentity() {\n  return process.env.CSC_IDENTITY_AUTO_DISCOVERY !== \"false\"\n}\n\nexport function isCscForPullRequest() {\n  return isEnvTrue(process.env.CSC_FOR_PULL_REQUEST)\n}\n\n// ─── Build behaviour ──────────────────────────────────────────────────────────\n\nexport function isBuildCacheEnabled() {\n  return !isEnvTrue(process.env.ELECTRON_BUILDER_DISABLE_BUILD_CACHE)\n}\n\nexport function isRemoveStageDirEvenIfDebug() {\n  return isEnvTrue(process.env.ELECTRON_BUILDER_REMOVE_STAGE_EVEN_IF_DEBUG)\n}\n\nexport function isOfflineModeEnabled() {\n  return isEnvTrue(process.env.ELECTRON_BUILDER_OFFLINE)\n}\n\n// ─── Publishing ───────────────────────────────────────────────────────────────\n\nexport function isPublishForPullRequest() {\n  return isEnvTrue(process.env.PUBLISH_FOR_PULL_REQUEST)\n}\n\n// ─── Package metadata / dependencies ─────────────────────────────────────────\n\nexport function isNpmNoBinLinks() {\n  return isEnvTrue(process.env.NPM_NO_BIN_LINKS)\n}\n\n// ─── CI environment detection ─────────────────────────────────────────────────\n\nexport function isTravis() {\n  return isEnvTrue(process.env.TRAVIS)\n}\n\n// ─── Platform toolset overrides ───────────────────────────────────────────────\n\nexport function isFpmDebug() {\n  return isEnvTrue(process.env.FPM_DEBUG)\n}\n\nexport function isSnapDestructiveMode() {\n  return isEnvTrue(process.env.SNAP_DESTRUCTIVE_MODE)\n}\n\n// ─── Removed environment variables (v26 → v27) ───────────────────────────────\n\ninterface RemovedEnvVar {\n  /** How to achieve the same thing in v27. */\n  readonly replacement: string\n  /** What the variable used to control, so the user can tell whether they still need it. */\n  readonly controlled: string\n}\n\n/**\n * Environment variables that v26 honored and v27 ignores.\n *\n * These are the most silent of all the v27 breaking changes: unlike a removed config key, nothing\n * validates `process.env`, so a CI image exporting `USE_SYSTEM_WINE` or `ELECTRON_BUILDER_NSIS_DIR`\n * silently switches toolchain with a green build. `CI_BUILD_TAG` is worse still — combined with the\n * removal of implicit publishing, a tagged release simply stops uploading.\n *\n * Toolsets are now configured through the `toolsets` build option, which accepts an `https://` URL\n * (downloaded and cached) or a `file://` path (used as-is).\n */\nconst REMOVED_ENV_VARS: Record<string, RemovedEnvVar> = {\n  APPIMAGE_TOOLS_PATH: {\n    controlled: \"the AppImage build tools (mksquashfs, runtime)\",\n    replacement: 'toolsets.appimage: { url: \"file:///path/to/appimage-tools-dir\" }',\n  },\n  LINUX_TOOLS_MAC_PATH: {\n    controlled: \"the linux-tools-mac bundle (ar, lzip, gtar) used when building Linux targets on macOS\",\n    replacement: 'toolsets.linuxToolsMac: { url: \"file:///path/to/linux-tools-mac-dir\" }',\n  },\n  CUSTOM_FPM_PATH: {\n    controlled: \"the FPM executable\",\n    replacement: 'toolsets.fpm: { url: \"file:///path/to/fpm-dir\" }',\n  },\n  USE_SYSTEM_FPM: {\n    controlled: \"forcing the host-installed fpm instead of the bundled one\",\n    replacement: 'toolsets.fpm: { url: \"file:///path/to/fpm-dir\" }',\n  },\n  ELECTRON_BUILDER_NSIS_DIR: {\n    controlled: \"the NSIS compiler bundle directory\",\n    replacement: 'toolsets.nsis: { url: \"file:///path/to/nsis-bundle-dir\" }',\n  },\n  ELECTRON_BUILDER_NSIS_RESOURCES_DIR: {\n    controlled: \"the NSIS resources/plugins directory\",\n    replacement: 'toolsets.nsis: { url: \"file:///path/to/nsis-bundle-dir\" } (the v27 nsis bundle carries compiler and resources together)',\n  },\n  ELECTRON_BUILDER_WINE_TOOLSET_DIR: {\n    controlled: \"the Wine bundle directory\",\n    replacement: 'toolsets.wine: { url: \"file:///path/to/wine-dir\" }',\n  },\n  USE_SYSTEM_WINE: {\n    controlled: \"forcing the host-installed Wine instead of the downloaded bundle\",\n    replacement: 'toolsets.wine: \"system\" (the host `wine` on PATH is already the default on macOS and Linux, so you can simply drop this variable)',\n  },\n  USE_SYSTEM_SIGNCODE: {\n    controlled: \"forcing the host signtool/signcode instead of the bundled winCodeSign toolset\",\n    replacement: 'win.sign (e.g. { \"win\": { \"sign\": { \"type\": \"signtool\", … } } }) together with toolsets.winCodeSign: { url: \"file:///path/to/bundle-dir\" }',\n  },\n  USE_SYSTEM_OSSLSIGNCODE: {\n    controlled: \"forcing the host osslsigncode instead of the bundled one\",\n    replacement: 'win.sign together with toolsets.winCodeSign: { url: \"file:///path/to/bundle-dir\" }',\n  },\n  SIGNTOOL_PATH: {\n    controlled: \"the path to signtool.exe\",\n    replacement: 'toolsets.winCodeSign: { url: \"file:///path/to/bundle-dir\" }',\n  },\n  ELECTRON_BUILDER_7ZIP_PATH: {\n    controlled: \"the 7-Zip executable\",\n    replacement: 'toolsets.sevenZip: { url: \"file:///path/to/dir\" } (a custom sevenZip bundle must be a .tar.gz, .zip, or bare file:// directory)',\n  },\n  ELECTRON_BUILDER_ICONS_TOOLSET_DIR: {\n    controlled: \"the icons toolset bundle directory\",\n    replacement: 'toolsets.icons: { url: \"file:///path/to/icons-bundle-dir\" }',\n  },\n  CI_BUILD_TAG: {\n    controlled: \"the release tag used by the publisher\",\n    replacement: \"the CI_COMMIT_TAG environment variable (the standard GitLab CI variable)\",\n  },\n  ALLOW_ELECTRON_BUILDER_AS_PRODUCTION_DEPENDENCY: {\n    controlled: \"bundling electron-builder itself when it was listed under production dependencies\",\n    replacement: 'the ignoredProductionDependencies build option — drop \"electron-builder\" from the list to ship it inside your app',\n  },\n}\n\n/** Emitted once per process; a build can invoke the packager more than once. */\nlet removedEnvVarsChecked = false\n\n/**\n * Fails the build when a removed environment variable is set, naming the `toolsets` (or other)\n * replacement. Without this the variable is simply ignored and the build silently uses a different\n * toolchain than the one CI asked for.\n *\n * @internal exported for tests\n */\nexport function checkRemovedEnvVars(env: NodeJS.ProcessEnv = process.env): string | null {\n  const found = Object.keys(REMOVED_ENV_VARS)\n    .filter(name => env[name] != null && env[name] !== \"\")\n    .sort()\n  if (found.length === 0) {\n    return null\n  }\n\n  const header =\n    found.length === 1\n      ? `The environment variable ${found[0]} was removed in electron-builder v27 and is now ignored:`\n      : `${found.length} environment variables set here were removed in electron-builder v27 and are now ignored:`\n  const entries = found.map(name => {\n    const { controlled, replacement } = REMOVED_ENV_VARS[name]\n    return `• ${name} controlled ${controlled}.\\n  Use ${replacement} instead.`\n  })\n  return [\n    header,\n    \"\",\n    ...entries,\n    \"\",\n    \"Unset the variable once you have moved the setting into your configuration.\",\n    \"https://www.electron.build/docs/migration/v27-breaking-changes#toolset-env-var-overrides-removed\",\n  ].join(\"\\n\")\n}\n\n/**\n * Throws when a removed environment variable is set. Called once per process from `Packager.build()`\n * so it runs for every entrypoint (CLI, programmatic `build()`, and a directly constructed Packager).\n */\nexport function assertNoRemovedEnvVars(): void {\n  if (removedEnvVarsChecked) {\n    return\n  }\n  removedEnvVarsChecked = true\n  const message = checkRemovedEnvVars()\n  if (message != null) {\n    throw new InvalidConfigurationError(message)\n  }\n}\n\n/** @internal exported for tests — lets a test re-arm the once-per-process guard. */\nexport function resetRemovedEnvVarsCheck(): void {\n  removedEnvVarsChecked = false\n}\n"]}