autoremediator 0.21.2 → 0.22.0

package/dist/platform/policy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/platform/policy.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,EACtB,SAAS,EACT,SAAS,EACT,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,qBAAqB,CAAC,EAAE,2BAA2B,CAAC;IACpD,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,eAAO,MAAM,cAAc,EAAE,oBAoB5B,CAAC;AAwGF;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,oBAAoB,CA6CnF;AAyBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAY3F;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,cAAc,GAAG,OAAO,CAMxE;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,MAAM,GACZ,cAAc,GAAG,SAAS,CAY5B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAkBvE;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,GACnB,SAAS,GAAG,IAAI,CAuBlB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CA4CR;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,GAAG,IAAI,CAuCzF"}
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/platform/policy.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAEL,KAAK,cAAc,EAMpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EACV,WAAW,EACX,iBAAiB,EACjB,eAAe,EACf,2BAA2B,EAC3B,yBAAyB,EACzB,sBAAsB,EACtB,SAAS,EACT,SAAS,EACT,cAAc,EACf,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,oBAAoB;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,sBAAsB,CAAC;IACrC,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,qBAAqB,CAAC,EAAE,2BAA2B,CAAC;IACpD,YAAY,CAAC,EAAE,cAAc,EAAE,CAAC;IAChC,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+HAA+H;IAC/H,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,4FAA4F;IAC5F,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACjC,mFAAmF;IACnF,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,qGAAqG;IACrG,SAAS,CAAC,EAAE,eAAe,CAAC;CAC7B;AAED,eAAO,MAAM,cAAc,EAAE,oBAqB5B,CAAC;AAIF,eAAO,MAAM,iBAAiB;;;;;;;;;;kBAOnB,CAAC;AAEZ,mGAAmG;AACnG,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA0ClB,CAAC;AAcZ;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,mBAAmB,CAAC,EAAE,MAAM,GAAG,oBAAoB,CAgD1F;AAyBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAY3F;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,cAAc,GAAG,OAAO,CAMxE;AAED,wBAAgB,eAAe,CAC7B,MAAM,EAAE,oBAAoB,EAC5B,KAAK,EAAE,MAAM,GACZ,cAAc,GAAG,SAAS,CAY5B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,cAAc,EAAE,CAkBvE;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,WAAW,EACrB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,SAAS,GACnB,SAAS,GAAG,IAAI,CAuBlB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,WAAW,EAAE,cAAc,EAC3B,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CA4CR;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,GAAG,IAAI,CAuCzF"}

package/dist/platform/policy.js

@@ -2,6 +2,8 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { parse as yamlParse, stringify as yamlStringify } from "yaml";
 import { z } from "zod";
+import { freshnessPolicySchema } from "./freshness-policy.js";
+import { autonomyPolicySchema, constraintsSchema, dispositionPolicySchema, escalationGraphSchema, exploitSignalOverrideSchema, patchConfidenceThresholdsSchema, } from "./option-schemas.js";
 export const DEFAULT_POLICY = {
     allowMajorBumps: false,
     denyPackages: [],
@@ -19,37 +21,13 @@ export const DEFAULT_POLICY = {
     suppressions: [],
     sla: undefined,
     skipUnreachable: false,
+    trustMaintainerVex: false,
     dispositionPolicy: undefined,
     containmentMode: false,
     escalationGraph: undefined,
 };
-const severitySchema = z.enum(["UNKNOWN", "LOW", "MEDIUM", "HIGH", "CRITICAL"]);
-const unitInterval = z.number().min(0).max(1);
 const packagePattern = z.string().trim().min(1);
-const supplyChainPolicySchema = z
-    .object({
-    minPublishAgeHours: z.number().nonnegative(),
-    blockInstallScripts: z.boolean(),
-    requireProvenance: z.boolean(),
-})
-    .partial()
-    .strict();
-const constraintsSchema = z
-    .object({
-    directDependenciesOnly: z.boolean(),
-    preferVersionBump: z.boolean(),
-    installMode: z.enum(["standard", "prefer-offline", "deterministic"]),
-    installPreferOffline: z.boolean(),
-    enforceFrozenLockfile: z.boolean(),
-    workspace: z.string().min(1),
-    typecheck: z.boolean(),
-    requireProofOfFix: z.boolean(),
-    enableBreakingChangeRefactor: z.boolean(),
-    supplyChainPolicy: supplyChainPolicySchema,
-})
-    .partial()
-    .strict();
-const suppressionSchema = z
+export const suppressionSchema = z
     .object({
     cveId: z.string().min(1),
     justification: z.enum(["not_affected", "fixed", "mitigated", "under_investigation"]),
@@ -58,25 +36,14 @@ const suppressionSchema = z
 })
     .strict();
 /** Shape of the policy YAML. Unknown keys are rejected so typos and removed options are caught. */
-const policyFileSchema = z
+export const policyFileSchema = z
     .object({
     allowMajorBumps: z.boolean().default(false),
     denyPackages: z.array(packagePattern).default([]),
     allowPackages: z.array(packagePattern).default([]),
     constraints: constraintsSchema.optional(),
-    patchConfidenceThresholds: z
-        .object({ low: unitInterval, medium: unitInterval, high: unitInterval })
-        .partial()
-        .strict()
-        .optional(),
-    exploitSignalOverride: z
-        .object({
-        kev: z.object({ mandatory: z.boolean() }).strict(),
-        epss: z.object({ mandatory: z.boolean(), threshold: unitInterval }).strict(),
-    })
-        .partial()
-        .strict()
-        .optional(),
+    patchConfidenceThresholds: patchConfidenceThresholdsSchema.optional(),
+    exploitSignalOverride: exploitSignalOverrideSchema.optional(),
     suppressions: z.array(suppressionSchema).default([]),
     sla: z
         .object({
@@ -89,20 +56,22 @@ const policyFileSchema = z
         .strict()
         .optional(),
     skipUnreachable: z.boolean().default(false),
-    dispositionPolicy: z
+    trustMaintainerVex: z.boolean().default(false),
+    dispositionPolicy: dispositionPolicySchema.optional(),
+    containmentMode: z.boolean().default(false),
+    escalationGraph: escalationGraphSchema.optional(),
+    recipes: z
         .object({
-        minConfidenceForAutoApply: unitInterval,
-        holdForTransitive: z.boolean(),
-        escalateOnKev: z.boolean(),
-        escalateOnSlaBreachSeverities: z.array(severitySchema),
+        packages: z
+            .array(z
+            .string()
+            .regex(/^(?:@[a-z0-9][a-z0-9._-]*\/)?[a-z0-9][a-z0-9._-]*$/, "must be an npm package name"))
+            .default([]),
     })
-        .partial()
         .strict()
         .optional(),
-    containmentMode: z.boolean().default(false),
-    escalationGraph: z
-        .record(z.string(), z.enum(["open-issue", "notify-channel", "create-draft-pr", "hold-branch", "none"]))
-        .optional(),
+    autonomy: autonomyPolicySchema.optional(),
+    freshness: freshnessPolicySchema.optional(),
 })
     .strict();
 function describePolicyIssues(error) {
@@ -124,7 +93,10 @@ function describePolicyIssues(error) {
  * means "no policy". An explicit path that does not exist, unreadable files, invalid YAML and
  * schema violations all throw, so a broken policy can never silently degrade to defaults.
  */
-export function loadPolicy(cwd, explicitPath) {
+export function loadPolicy(cwd, explicitPathOrEmpty) {
+    // An empty path means "none given", as the remediation pipeline passes `policy: ""` down to its
+    // tools. Treating it as a path would silently skip the project's own policy file.
+    const explicitPath = explicitPathOrEmpty?.trim() ? explicitPathOrEmpty : undefined;
     const isInline = explicitPath !== undefined &&
         (explicitPath.trim().startsWith("{") || explicitPath.trim().startsWith("---"));
     const location = isInline

package/dist/platform/policy.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/platform/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6BxB,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK;QAC7B,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,eAAe;QAC5B,oBAAoB,EAAE,SAAS;QAC/B,qBAAqB,EAAE,SAAS;QAChC,SAAS,EAAE,SAAS;KACrB;IACD,yBAAyB,EAAE,EAAE;IAC7B,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE,EAAE;IAChB,GAAG,EAAE,SAAS;IACd,eAAe,EAAE,KAAK;IACtB,iBAAiB,EAAE,SAAS;IAC5B,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,SAAS;CAC3B,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAChF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9C,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,uBAAuB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IAC5C,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE;IAChC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;CAC/B,CAAC;KACD,OAAO,EAAE;KACT,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,sBAAsB,EAAE,CAAC,CAAC,OAAO,EAAE;IACnC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC;IACpE,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,qBAAqB,EAAE,CAAC,CAAC,OAAO,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,4BAA4B,EAAE,CAAC,CAAC,OAAO,EAAE;IACzC,iBAAiB,EAAE,uBAAuB;CAC3C,CAAC;KACD,OAAO,EAAE;KACT,MAAM,EAAE,CAAC;AAEZ,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACpF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,mGAAmG;AACnG,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,yBAAyB,EAAE,CAAC;SACzB,MAAM,CAAC,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;SACvE,OAAO,EAAE;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,qBAAqB,EAAE,CAAC;SACrB,MAAM,CAAC;QACN,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QAClD,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;KAC7E,CAAC;SACD,OAAO,EAAE;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;SACD,OAAO,EAAE;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,iBAAiB,EAAE,CAAC;SACjB,MAAM,CAAC;QACN,yBAAyB,EAAE,YAAY;QACvC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;QAC9B,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;QAC1B,6BAA6B,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;KACvD,CAAC;SACD,OAAO,EAAE;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,eAAe,EAAE,CAAC;SACf,MAAM,CACL,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC,CACnF;SACA,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,SAAS,oBAAoB,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvC,OAAO,GAAG,KAAK,sBAAsB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,YAAqB;IAC3D,MAAM,QAAQ,GACZ,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAEjE,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,GAAG,YAAa,CAAC;IAC1B,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,IAAI,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,cAAc,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE;gBAClF,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE;YACjF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,KAAK,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,MAAM,CAAC,IAAI;QACd,WAAW,EAAE,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC1E,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,EAAE;QACtE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAA2B,EAAE,WAAmB;IACvE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,YAAY,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,YAAY,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA4B,EAAE,WAAmB;IAChF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/F,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAA2B;IAC7D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1D,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAA4B,EAC5B,KAAa;IAEb,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC7C,mBAAmB,CAAC,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACtG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC;SACb,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;SACpD,MAAM,EAAE;SACR,SAAS,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,KAAK,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,QAAqB,EACrB,WAAmB,EACnB,SAAoB;IAEpB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,EAAqB,CAAC;IAC9D,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,UAAU,GAAG,WAAW,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,KAAK,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO;QACL,KAAK;QACL,QAAQ;QACR,WAAW;QACX,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QAC9C,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,WAA2B,EAC3B,YAAqB;IAErB,MAAM,UAAU,GAAG,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,GAAG,MAAiC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3D,CAAC,CAAE,IAAI,CAAC,YAAiC;QACzC,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAClD,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAC5D,CAAC;IAEF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,oBAAoB,CAAC,aAAa,CAAC,GAAG;YACpC,GAAG,oBAAoB,CAAC,aAAa,CAAC;YACtC,GAAG,WAAW;SACf,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC;IACzC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,WAA2B;IACjF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,GAAwC,EAAE,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,GAAG,MAA6C,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAClD,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAC5D,CAAC;IAEF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,oBAAoB,CAAC,aAAa,CAAC,GAAG;YACpC,GAAG,oBAAoB,CAAC,aAAa,CAAC;YACtC,GAAG,WAAW;SACf,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC;IACzC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC"}
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/platform/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AACtE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,qBAAqB,EAAwB,MAAM,uBAAuB,CAAC;AACpF,OAAO,EACL,oBAAoB,EAEpB,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACrB,2BAA2B,EAC3B,+BAA+B,GAChC,MAAM,qBAAqB,CAAC;AAoC7B,MAAM,CAAC,MAAM,cAAc,GAAyB;IAClD,eAAe,EAAE,KAAK;IACtB,YAAY,EAAE,EAAE;IAChB,aAAa,EAAE,EAAE;IACjB,WAAW,EAAE;QACX,sBAAsB,EAAE,KAAK;QAC7B,iBAAiB,EAAE,KAAK;QACxB,WAAW,EAAE,eAAe;QAC5B,oBAAoB,EAAE,SAAS;QAC/B,qBAAqB,EAAE,SAAS;QAChC,SAAS,EAAE,SAAS;KACrB;IACD,yBAAyB,EAAE,EAAE;IAC7B,qBAAqB,EAAE,SAAS;IAChC,YAAY,EAAE,EAAE;IAChB,GAAG,EAAE,SAAS;IACd,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,KAAK;IACzB,iBAAiB,EAAE,SAAS;IAC5B,eAAe,EAAE,KAAK;IACtB,eAAe,EAAE,SAAS;CAC3B,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,qBAAqB,CAAC,CAAC;IACpF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,mGAAmG;AACnG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,yBAAyB,EAAE,+BAA+B,CAAC,QAAQ,EAAE;IACrE,qBAAqB,EAAE,2BAA2B,CAAC,QAAQ,EAAE;IAC7D,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC3B,CAAC;SACD,OAAO,EAAE;SACT,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,iBAAiB,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IACrD,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,eAAe,EAAE,qBAAqB,CAAC,QAAQ,EAAE;IACjD,OAAO,EAAE,CAAC;SACP,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC;aACR,KAAK,CACJ,CAAC;aACE,MAAM,EAAE;aACR,KAAK,CACJ,oDAAoD,EACpD,6BAA6B,CAC9B,CACJ;aACA,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;IACb,QAAQ,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IACzC,SAAS,EAAE,qBAAqB,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,SAAS,oBAAoB,CAAC,KAAiB;IAC7C,OAAO,KAAK,CAAC,MAAM;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACtE,IAAI,KAAK,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YACvC,OAAO,GAAG,KAAK,sBAAsB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,GAAG,KAAK,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACtC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW,EAAE,mBAA4B;IAClE,gGAAgG;IAChG,kFAAkF;IAClF,MAAM,YAAY,GAAG,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,QAAQ,GACZ,YAAY,KAAK,SAAS;QAC1B,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACjF,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,CAAC,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAEjE,IAAI,OAAe,CAAC;IACpB,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,GAAG,YAAa,CAAC;IAC1B,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,IAAI,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QACxE,OAAO,cAAc,CAAC;IACxB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE;gBAClF,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,KAAM,KAAe,CAAC,OAAO,EAAE,EAAE;YACjF,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,kBAAkB,QAAQ,KAAK,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,CAAC;IAED,OAAO;QACL,GAAG,cAAc;QACjB,GAAG,MAAM,CAAC,IAAI;QACd,WAAW,EAAE,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE;QAC1E,yBAAyB,EAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,IAAI,EAAE;QACtE,eAAe,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe;KAC7C,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,IAA2B,EAAE,WAAmB;IACvE,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,OAAO,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAChC,IAAI,YAAY,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACzC,IAAI,YAAY,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,YAAY,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzC,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,MAA4B,EAAE,WAAmB;IAChF,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,eAAe,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QACnD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/F,CAAC,CAAC,EAAE,CAAC;IACP,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,WAA2B;IAC7D,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC,WAAW,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1D,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAA4B,EAC5B,KAAa;IAEb,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,CAAC,IAAI,CAC7B,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE;QAC7C,mBAAmB,CAAC,CAAC,CAAC,CACzB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,iCAAiC,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACtG,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,CAAC;SACb,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC;SACpD,MAAM,EAAE;SACR,SAAS,CAAC,MAAM,CAAC,CAAC;IACrB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6BAA6B,QAAQ,KAAK,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAa,EACb,QAAqB,EACrB,WAAmB,EACnB,SAAoB;IAEpB,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,EAAqB,CAAC;IAC9D,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3C,MAAM,UAAU,GAAG,WAAW,GAAG,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,KAAK,IAAI,UAAU;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO;QACL,KAAK;QACL,QAAQ;QACR,WAAW;QACX,UAAU,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE;QAC9C,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,WAA2B,EAC3B,YAAqB;IAErB,MAAM,UAAU,GAAG,YAAY,IAAI,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,oBAAoB,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,GAA4B,EAAE,CAAC;IACvC,IAAI,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACjD,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,GAAG,MAAiC,CAAC;YAC3C,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;QAC3D,CAAC,CAAE,IAAI,CAAC,YAAiC;QACzC,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAClD,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAC5D,CAAC;IAEF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,oBAAoB,CAAC,aAAa,CAAC,GAAG;YACpC,GAAG,oBAAoB,CAAC,aAAa,CAAC;YACtC,GAAG,WAAW;SACf,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC;IACzC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,WAA2B;IACjF,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,IAAI,GAAwC,EAAE,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACzC,IAAI,GAAG,MAA6C,CAAC;YACvD,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACvF,MAAM,aAAa,GAAG,oBAAoB,CAAC,SAAS,CAClD,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC;QACD,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC,KAAK,CAAC,WAAW,EAAE,CAC5D,CAAC;IAEF,IAAI,aAAa,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,oBAAoB,CAAC,aAAa,CAAC,GAAG;YACpC,GAAG,oBAAoB,CAAC,aAAa,CAAC;YACtC,GAAG,WAAW;SACf,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,CAAC,YAAY,GAAG,oBAAoB,CAAC;IACzC,aAAa,CAAC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;AACvD,CAAC"}

package/dist/platform/redact.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Remove credentials from text that is about to be shown or stored. git is given its auth header on
+ * the command line (older gits cannot take it from the environment), and a failed command's error
+ * message repeats the whole command line, so anything that surfaces such an error goes through here.
+ */
+export declare function redactSecrets(text: string): string;
+//# sourceMappingURL=redact.d.ts.map

package/dist/platform/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/platform/redact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIlD"}

package/dist/platform/redact.js

@@ -0,0 +1,11 @@
+/**
+ * Remove credentials from text that is about to be shown or stored. git is given its auth header on
+ * the command line (older gits cannot take it from the environment), and a failed command's error
+ * message repeats the whole command line, so anything that surfaces such an error goes through here.
+ */
+export function redactSecrets(text) {
+    return text
+        .replaceAll(/(AUTHORIZATION:\s*(?:basic|bearer)\s+)[^\s'"]+/gi, "$1***")
+        .replaceAll(/(\/\/)[^/@\s'"]+:[^@\s'"]+@/g, "$1***@");
+}
+//# sourceMappingURL=redact.js.map

package/dist/platform/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/platform/redact.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAO,IAAI;SACR,UAAU,CAAC,kDAAkD,EAAE,OAAO,CAAC;SACvE,UAAU,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC"}

package/dist/platform/registry-config.d.ts

@@ -0,0 +1,27 @@
+export declare const DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
+export interface RegistryConfig {
+    /** Registry base URL (no trailing slash) that serves `packageName`. */
+    registryUrlFor(packageName: string): string;
+    /** Request headers (currently just Authorization) that are safe to send to `url`. */
+    headersFor(url: string): Record<string, string>;
+}
+export type NpmrcValues = Map<string, string>;
+/**
+ * Whether a project-level `.npmrc` may put `${name}` into the credential `key`. A repository controls
+ * that file, so a pull request could name its own registry and a credential that expands to an
+ * ambient secret (`GITHUB_TOKEN`) to have it sent there. Variables made for npm, and the public
+ * registry hosts, are fine; anything else is dropped.
+ */
+export declare function projectEnvCredentialAllowed(key: string, name: string): boolean;
+export declare function parseNpmrc(content: string, env?: NodeJS.ProcessEnv, options?: {
+    allowEnv?: (key: string, name: string) => boolean;
+}): NpmrcValues;
+export declare function createRegistryConfig(npmrc: NpmrcValues, env?: NodeJS.ProcessEnv): RegistryConfig;
+/** User `.npmrc` overlaid by the project `.npmrc` in `cwd`; later sources win. */
+export declare function readNpmrcChain(cwd?: string, env?: NodeJS.ProcessEnv): NpmrcValues;
+export declare function loadRegistryConfig(cwd?: string, env?: NodeJS.ProcessEnv): RegistryConfig;
+/** Public registry, no credentials: the behaviour when no project configuration is supplied. */
+export declare const defaultRegistryConfig: RegistryConfig;
+/** URL of a package's packument (`/<name>`; scoped names keep the `@` and encode the `/`). */
+export declare function packumentUrl(config: RegistryConfig, packageName: string): string;
+//# sourceMappingURL=registry-config.d.ts.map

package/dist/platform/registry-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-config.d.ts","sourceRoot":"","sources":["../../src/platform/registry-config.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AAEjE,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5C,qFAAqF;IACrF,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD;AAED,MAAM,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAuB9C;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAK9E;AAED,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,GAAG,GAAE,MAAM,CAAC,UAAwB,EACpC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAA;CAAO,GAClE,WAAW,CAuBb;AA+BD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,WAAW,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,cAAc,CAuDhB;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,WAAW,CAO9F;AAED,wBAAgB,kBAAkB,CAChC,GAAG,CAAC,EAAE,MAAM,EACZ,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,cAAc,CAEhB;AAED,gGAAgG;AAChG,eAAO,MAAM,qBAAqB,EAAE,cAAoD,CAAC;AAEzF,8FAA8F;AAC9F,wBAAgB,YAAY,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAIhF"}

package/dist/platform/registry-config.js

@@ -0,0 +1,175 @@
+/**
+ * npm registry configuration resolved from `.npmrc` files and `npm_config_*` environment variables.
+ *
+ * Supports the subset of npm's config that decides where a package is fetched from and with
+ * which credentials: `registry`, `@scope:registry`, and per-registry `_authToken` / `_auth`
+ * entries keyed by "nerf-dart" prefixes (`//host/path/:_authToken=...`). Sources, lowest to highest
+ * precedence: user `.npmrc` (`NPM_CONFIG_USERCONFIG` or `~/.npmrc`), project `.npmrc` in `cwd`,
+ * `npm_config_registry`. Credentials are only attached to requests whose URL matches the
+ * registry they were configured for, and never over plain http except to localhost.
+ */
+import { readFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { assertValidPackageName } from "./package-name.js";
+export const DEFAULT_NPM_REGISTRY = "https://registry.npmjs.org";
+function expandEnv(value, env) {
+    let missing = false;
+    const expanded = value.replaceAll(/\$\{([^}]+)}/g, (_match, name) => {
+        const resolved = env[name];
+        if (resolved === undefined)
+            missing = true;
+        return resolved ?? "";
+    });
+    return missing ? undefined : expanded;
+}
+/**
+ * Hosts whose registry credentials a project `.npmrc` may fill from any environment variable
+ * (`//npm.pkg.github.com/:_authToken=${GITHUB_TOKEN}` is the normal way to use them).
+ */
+const KNOWN_REGISTRY_HOSTS = new Set([
+    "registry.npmjs.org",
+    "npm.pkg.github.com",
+    "registry.yarnpkg.com",
+]);
+const NPM_SPECIFIC_ENV = /^(?:NPM|NODE_AUTH|YARN|PNPM|BUN)|NPM_(?:TOKEN|AUTH)|REGISTRY/i;
+/**
+ * Whether a project-level `.npmrc` may put `${name}` into the credential `key`. A repository controls
+ * that file, so a pull request could name its own registry and a credential that expands to an
+ * ambient secret (`GITHUB_TOKEN`) to have it sent there. Variables made for npm, and the public
+ * registry hosts, are fine; anything else is dropped.
+ */
+export function projectEnvCredentialAllowed(key, name) {
+    const credential = /^\/\/([^/]+)\/.*:(?:_authToken|_auth|_password|username)$/.exec(key);
+    if (!credential)
+        return true; // not a credential key: nothing secret is being attached
+    if (NPM_SPECIFIC_ENV.test(name))
+        return true;
+    return KNOWN_REGISTRY_HOSTS.has(credential[1] ?? "");
+}
+export function parseNpmrc(content, env = process.env, options = {}) {
+    const values = new Map();
+    for (const rawLine of content.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (!line || line.startsWith(";") || line.startsWith("#"))
+            continue;
+        const eq = line.indexOf("=");
+        if (eq <= 0)
+            continue;
+        const key = line.slice(0, eq).trim();
+        let value = line.slice(eq + 1).trim();
+        if (value.length >= 2 &&
+            ((value.startsWith('"') && value.endsWith('"')) ||
+                (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        // An entry referencing an unset ${VAR} (or one this file may not read) is dropped, not half-expanded.
+        const referenced = [...value.matchAll(/\$\{([^}]+)}/g)].map((match) => match[1] ?? "");
+        if (options.allowEnv && referenced.some((name) => !options.allowEnv?.(key, name)))
+            continue;
+        const expanded = expandEnv(value, env);
+        if (expanded !== undefined)
+            values.set(key, expanded);
+    }
+    return values;
+}
+function readNpmrc(path, env, projectLevel = false) {
+    try {
+        return parseNpmrc(readFileSync(path, "utf8"), env, projectLevel ? { allowEnv: projectEnvCredentialAllowed } : {});
+    }
+    catch {
+        return new Map();
+    }
+}
+const trimTrailingSlashes = (url) => url.replace(/\/+$/, "");
+/** `https://host:8080/a/b/` -> `//host:8080/a/b/` (npm's "nerf dart" credential key). */
+function toNerfDart(url) {
+    try {
+        const parsed = new URL(url);
+        const path = parsed.pathname.endsWith("/") ? parsed.pathname : `${parsed.pathname}/`;
+        return `//${parsed.host}${path}`;
+    }
+    catch {
+        return undefined;
+    }
+}
+function isLocalhost(hostname) {
+    return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
+}
+export function createRegistryConfig(npmrc, env = process.env) {
+    const defaultRegistry = trimTrailingSlashes(env["npm_config_registry"] ??
+        env["NPM_CONFIG_REGISTRY"] ??
+        npmrc.get("registry") ??
+        DEFAULT_NPM_REGISTRY);
+    const scopeRegistries = new Map();
+    const credentials = new Map(); // nerf-dart -> Authorization header value
+    for (const [key, value] of npmrc) {
+        const scoped = /^(@[^:]+):registry$/.exec(key);
+        if (scoped?.[1]) {
+            scopeRegistries.set(scoped[1], trimTrailingSlashes(value));
+            continue;
+        }
+        const credential = /^(\/\/.+\/):(_authToken|_auth)$/.exec(key);
+        if (!credential?.[1] || !credential[2])
+            continue;
+        credentials.set(credential[1], credential[2] === "_authToken" ? `Bearer ${value}` : `Basic ${value}`);
+    }
+    return {
+        registryUrlFor(packageName) {
+            if (packageName.startsWith("@")) {
+                const scope = packageName.slice(0, packageName.indexOf("/"));
+                const scoped = scopeRegistries.get(scope);
+                if (scoped)
+                    return scoped;
+            }
+            return defaultRegistry;
+        },
+        headersFor(url) {
+            let parsed;
+            try {
+                parsed = new URL(url);
+            }
+            catch {
+                return {};
+            }
+            if (parsed.protocol !== "https:" && !isLocalhost(parsed.hostname))
+                return {};
+            // Longest matching configured prefix wins, as in npm.
+            const target = toNerfDart(url);
+            if (!target)
+                return {};
+            let best;
+            for (const prefix of credentials.keys()) {
+                if (target.startsWith(prefix) && (!best || prefix.length > best.length))
+                    best = prefix;
+            }
+            const authorization = best ? credentials.get(best) : undefined;
+            const headers = {};
+            if (authorization)
+                headers["Authorization"] = authorization;
+            return headers;
+        },
+    };
+}
+/** User `.npmrc` overlaid by the project `.npmrc` in `cwd`; later sources win. */
+export function readNpmrcChain(cwd, env = process.env) {
+    const userConfigPath = env["NPM_CONFIG_USERCONFIG"] ?? join(homedir(), ".npmrc");
+    const merged = new Map(readNpmrc(userConfigPath, env));
+    if (cwd) {
+        for (const [key, value] of readNpmrc(join(cwd, ".npmrc"), env, true))
+            merged.set(key, value);
+    }
+    return merged;
+}
+export function loadRegistryConfig(cwd, env = process.env) {
+    return createRegistryConfig(readNpmrcChain(cwd, env), env);
+}
+/** Public registry, no credentials: the behaviour when no project configuration is supplied. */
+export const defaultRegistryConfig = createRegistryConfig(new Map(), {});
+/** URL of a package's packument (`/<name>`; scoped names keep the `@` and encode the `/`). */
+export function packumentUrl(config, packageName) {
+    // The name becomes a path segment of an authenticated request: only a real package name may.
+    assertValidPackageName(packageName);
+    return `${config.registryUrlFor(packageName)}/${packageName.replaceAll("/", "%2F")}`;
+}
+//# sourceMappingURL=registry-config.js.map

package/dist/platform/registry-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-config.js","sourceRoot":"","sources":["../../src/platform/registry-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,MAAM,CAAC,MAAM,oBAAoB,GAAG,4BAA4B,CAAC;AAWjE,SAAS,SAAS,CAAC,KAAa,EAAE,GAAsB;IACtD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC,MAAM,EAAE,IAAY,EAAE,EAAE;QAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAC;QAC3C,OAAO,QAAQ,IAAI,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC;IACnC,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;CACvB,CAAC,CAAC;AACH,MAAM,gBAAgB,GAAG,+DAA+D,CAAC;AAEzF;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAAW,EAAE,IAAY;IACnE,MAAM,UAAU,GAAG,2DAA2D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,CAAC,yDAAyD;IACvF,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,OAAO,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,GAAG,GAAsB,OAAO,CAAC,GAAG,EACpC,OAAO,GAA0D,EAAE;IAEnE,MAAM,MAAM,GAAgB,IAAI,GAAG,EAAE,CAAC;IACtC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QACtB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EACjD,CAAC;YACD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,sGAAsG;QACtG,MAAM,UAAU,GAAG,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvF,IAAI,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAE,SAAS;QAC5F,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvC,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,GAAsB,EAAE,YAAY,GAAG,KAAK;IAC3E,IAAI,CAAC;QACH,OAAO,UAAU,CACf,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAC1B,GAAG,EACH,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC,EAAE,CAC9D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE7E,yFAAyF;AACzF,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,QAAQ,GAAG,CAAC;QACrF,OAAO,KAAK,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,WAAW,IAAI,QAAQ,KAAK,OAAO,CAAC;AACtF,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,KAAkB,EAClB,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,MAAM,eAAe,GAAG,mBAAmB,CACzC,GAAG,CAAC,qBAAqB,CAAC;QACxB,GAAG,CAAC,qBAAqB,CAAC;QAC1B,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QACrB,oBAAoB,CACvB,CAAC;IAEF,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0CAA0C;IACzF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,SAAS;QACX,CAAC;QACD,MAAM,UAAU,GAAG,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,SAAS;QACjD,WAAW,CAAC,GAAG,CACb,UAAU,CAAC,CAAC,CAAC,EACb,UAAU,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,UAAU,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,EAAE,CACtE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,cAAc,CAAC,WAAW;YACxB,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;gBAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1C,IAAI,MAAM;oBAAE,OAAO,MAAM,CAAC;YAC5B,CAAC;YACD,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,UAAU,CAAC,GAAG;YACZ,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,OAAO,EAAE,CAAC;YAE7E,sDAAsD;YACtD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM;gBAAE,OAAO,EAAE,CAAC;YACvB,IAAI,IAAwB,CAAC;YAC7B,KAAK,MAAM,MAAM,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;oBAAE,IAAI,GAAG,MAAM,CAAC;YACzF,CAAC;YACD,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,MAAM,OAAO,GAA2B,EAAE,CAAC;YAC3C,IAAI,aAAa;gBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,aAAa,CAAC;YAC5D,OAAO,OAAO,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,cAAc,CAAC,GAAY,EAAE,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC/E,MAAM,cAAc,GAAG,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC;IACjF,MAAM,MAAM,GAAgB,IAAI,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAY,EACZ,GAAG,GAAsB,OAAO,CAAC,GAAG;IAEpC,OAAO,oBAAoB,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,qBAAqB,GAAmB,oBAAoB,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;AAEzF,8FAA8F;AAC9F,MAAM,UAAU,YAAY,CAAC,MAAsB,EAAE,WAAmB;IACtE,6FAA6F;IAC7F,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACpC,OAAO,GAAG,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,CAAC;AACvF,CAAC"}

package/dist/platform/repair-agent.d.ts

@@ -0,0 +1,84 @@
+import type { MemoryProposal } from "./memory/propose.js";
+import type { LlmUsageMetrics } from "./types.js";
+export type { MemoryProposal };
+/** Limits on one repair attempt. There is deliberately no money figure: that would need a price table. */
+export interface RepairBudget {
+    /** Model turns (each may call several tools). */
+    maxSteps: number;
+    /** Wall-clock time for one agent round. */
+    maxWallMs: number;
+    /** Test, type-check and build runs the agent may start. */
+    maxCommandRuns: number;
+    /** Times the verifier's findings are handed back to the agent. */
+    maxRepairRounds: number;
+    /** Input plus output tokens across the attempt; unlimited when unset. */
+    maxTotalTokens?: number;
+}
+export declare const DEFAULT_REPAIR_BUDGET: RepairBudget;
+/** What the verifier found wrong, in terms an agent can act on. */
+export interface RepairFailure {
+    /** The first failed check, e.g. "typecheck". */
+    failedCheck: string;
+    /** One line per check that ran, with its outcome. */
+    summary: string[];
+    /** The failing check's details: the tail of the compiler or test output. */
+    details: string[];
+}
+export interface RepairTask {
+    runId: string;
+    attemptId: string;
+    cveId: string;
+    packageName: string;
+    fromVersion: string;
+    toVersion: string;
+    /** 1 for the first handover, then once per verifier rejection. */
+    round: number;
+    failure: RepairFailure;
+    /** What earlier rounds said they changed, oldest first. */
+    previousRounds: string[];
+    /**
+     * What the repository's memory holds about this upgrade, already quoted as data (see
+     * `renderMemoryForAgent`). Undefined when memory has nothing to say.
+     */
+    memory?: string;
+}
+/** Commands an agent may run inside the worktree; each is the project's own, never free-form. */
+export interface RepairCommands {
+    typecheck?: readonly string[];
+    tests?: readonly string[];
+    build?: readonly string[];
+}
+export interface RepairEnv {
+    /** Isolated checkout the agent works in. Nothing outside it is touched. */
+    worktree: string;
+    budget: RepairBudget;
+    signal: AbortSignal;
+    commands: RepairCommands;
+    /**
+     * Propose a memory entry. It is stored as `proposed` and changes nothing until a person accepts it;
+     * the answer says what happened. Absent when the host does not want proposals.
+     */
+    proposeMemory?: (proposal: MemoryProposal) => Promise<string>;
+}
+export interface TranscriptEntry {
+    step: number;
+    /** What the agent said or did: its text, or `tool(args) -> result` for a tool call. */
+    text: string;
+}
+export interface RepairOutcome {
+    /** `submitted`: the agent says it is done; the verifier decides whether it is. */
+    status: "submitted" | "gave-up" | "budget-exhausted";
+    rationale: string;
+    usage: LlmUsageMetrics[];
+    transcript: TranscriptEntry[];
+}
+/**
+ * Port for anything that can repair a project broken by a dependency upgrade. The built-in
+ * implementation drives a language model through scoped tools; SDK callers can supply their own.
+ * Whatever it does, it only proposes: the verifier decides whether the result stands.
+ */
+export interface RepairAgent {
+    readonly id: string;
+    repair(task: RepairTask, env: RepairEnv): Promise<RepairOutcome>;
+}
+//# sourceMappingURL=repair-agent.d.ts.map

package/dist/platform/repair-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-agent.d.ts","sourceRoot":"","sources":["../../src/platform/repair-agent.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,YAAY,EAAE,cAAc,EAAE,CAAC;AAE/B,0GAA0G;AAC1G,MAAM,WAAW,YAAY;IAC3B,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,qBAAqB,EAAE,YAKnC,CAAC;AAEF,mEAAmE;AACnE,MAAM,WAAW,aAAa;IAC5B,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,qDAAqD;IACrD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,aAAa,CAAC;IACvB,2DAA2D;IAC3D,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,iGAAiG;AACjG,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,SAAS;IACxB,2EAA2E;IAC3E,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,WAAW,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB;;;OAGG;IACH,aAAa,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/D;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAa;IAC5B,kFAAkF;IAClF,MAAM,EAAE,WAAW,GAAG,SAAS,GAAG,kBAAkB,CAAC;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,eAAe,EAAE,CAAC;IACzB,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;CAClE"}

package/dist/platform/repair-agent.js

@@ -0,0 +1,7 @@
+export const DEFAULT_REPAIR_BUDGET = {
+    maxSteps: 40,
+    maxWallMs: 10 * 60_000,
+    maxCommandRuns: 12,
+    maxRepairRounds: 3,
+};
+//# sourceMappingURL=repair-agent.js.map

package/dist/platform/repair-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repair-agent.js","sourceRoot":"","sources":["../../src/platform/repair-agent.ts"],"names":[],"mappings":"AAmBA,MAAM,CAAC,MAAM,qBAAqB,GAAiB;IACjD,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,EAAE,GAAG,MAAM;IACtB,cAAc,EAAE,EAAE;IAClB,eAAe,EAAE,CAAC;CACnB,CAAC"}

package/dist/platform/rollback.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/platform/rollback.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C;AAgBD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAEtE;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAExE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAsBtD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAI,EAAE,YAAY,SAAI,GAAG,MAAM,EAAE,CAgC1F;AA0CD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAK5D;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,GACX;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAWjD;AAcD;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,aAAa,CAAC,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,eAAe,CAAC,CAoC1B;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ErF;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAiF1E;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE;IACP,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC;CACpC,GACL,OAAO,CAAC,CAAC,CAAC,CAgBZ"}
+{"version":3,"file":"rollback.d.ts","sourceRoot":"","sources":["../../src/platform/rollback.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,eAAe;IAC9B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,4FAA4F;IAC5F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;CAC3C;AAiBD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAEtE;AAED,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAExE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAsBtD;AAED;;GAEG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAI,EAAE,YAAY,SAAI,GAAG,MAAM,EAAE,CAgC1F;AAiDD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAK5D;AAED,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,GACX;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAWjD;AAcD;;GAEG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,aAAa,CAAC,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,eAAe,CAAC,CAoC1B;AAED;;GAEG;AACH,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA8ErF;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI,CAiF1E;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACxB,OAAO,GAAE;IACP,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,OAAO,CAAC;CACpC,GACL,OAAO,CAAC,CAAC,CAAC,CAgBZ"}

package/dist/platform/rollback.js

@@ -1,13 +1,16 @@
 import { execFileSync, execSync } from "node:child_process";
 import { existsSync, readdirSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync, } from "node:fs";
 import { isAbsolute, join, relative, resolve } from "node:path";
+import { MEMORY_PATH } from "./memory/path.js";
 import { safeExeca } from "./safe-exec.js";
+import { TRACK_RECORD_PATH } from "./track-record-path.js";
 const MANIFEST_PATTERNS = [
     /package\.json$/,
     /^(package-lock\.json|npm-shrinkwrap\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb?|deno\.lock)$/,
     /deno\.jsonc?$/,
     /\.patch$/,
     /\.autoremediator\.ya?ml$/,
+    /^pnpm-workspace\.ya?ml$/,
     /tsconfig.*\.json$/,
 ];
 const IGNORED_DIRS = new Set(["node_modules", ".git", "dist", "build", "coverage", ".pnpm-store"]);
@@ -124,6 +127,15 @@ function resolveGitStatusPath(snapshot, filePath) {
     const rel = relative(realCwd, full);
     if (rel === "" || rel.startsWith("..") || isAbsolute(rel))
         return null;
+    // The autonomy track record is history, not project state: a rollback must not rewind it.
+    // Remediation memory is history too.
+    const normalized = rel.replaceAll("\\", "/");
+    if (normalized === TRACK_RECORD_PATH || normalized === MEMORY_PATH)
+        return null;
+    // Everything else the tool keeps under `.autoremediator/` (other runs, recipes, evidence, locks) is
+    // its own bookkeeping or committed knowledge, not project state, whether or not it is gitignored.
+    if (normalized.startsWith(".autoremediator/"))
+        return null;
     return join(snapshot.cwd, rel);
 }
 export function parsePorcelainLines(stdout) {