autoremediator 0.21.2 → 0.22.0

package/dist/remediation/impact/manifest-diff.js

@@ -0,0 +1,223 @@
+/**
+ * Package-level changes between two versions of a package that can break a consumer regardless of
+ * which functions it calls: the supported Node range, the module format, the `exports` map and
+ * required peer dependencies.
+ */
+import semver from "semver";
+import { exportsMapOf, moduleFormat } from "./package-index.js";
+function stringRecord(value) {
+    if (typeof value !== "object" || value === null)
+        return {};
+    return Object.fromEntries(Object.entries(value).filter((entry) => typeof entry[1] === "string"));
+}
+function enginesNode(manifest) {
+    const engines = manifest.engines;
+    if (typeof engines !== "object" || engines === null)
+        return undefined;
+    const node = engines.node;
+    return typeof node === "string" ? node : undefined;
+}
+function validRange(range) {
+    if (range === undefined)
+        return undefined;
+    try {
+        return semver.validRange(range) ?? undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeSubset(sub, dom) {
+    try {
+        return semver.subset(sub, dom);
+    }
+    catch {
+        return undefined;
+    }
+}
+function safeIntersects(a, b) {
+    try {
+        return semver.intersects(a, b);
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Whether `subpath` (`./lib/x`) is exposed by the package's `exports` map. */
+export function isSubpathExported(manifest, subpath) {
+    const map = exportsMapOf(manifest);
+    if (!map)
+        return true;
+    const candidates = new Set([subpath, subpath.replace(/\.[cm]?js$/, "")]);
+    for (const key of map.keys()) {
+        if (candidates.has(key))
+            return true;
+        const star = key.indexOf("*");
+        if (star !== -1) {
+            const before = key.slice(0, star);
+            const after = key.slice(star + 1);
+            for (const candidate of candidates) {
+                if (candidate.startsWith(before) &&
+                    candidate.endsWith(after) &&
+                    candidate.length > before.length + after.length)
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+export function comparePackageManifests(before, after, project, runtimeNode = process.version) {
+    const changes = [];
+    // Node range
+    const oldNode = enginesNode(before);
+    const newNode = enginesNode(after);
+    if (newNode !== undefined && newNode !== oldNode) {
+        const oldRange = validRange(oldNode ?? "*");
+        const newRange = validRange(newNode);
+        const narrowed = oldRange && newRange ? safeSubset(oldRange, newRange) === false : undefined;
+        if (narrowed !== false) {
+            const projectNode = project ? enginesNode(project) : undefined;
+            const projectRange = validRange(projectNode);
+            const conflict = projectRange && newRange ? safeSubset(projectRange, newRange) === false : false;
+            const runtimeOk = newRange ? semver.satisfies(runtimeNode, newRange) : undefined;
+            // The project's own declared range already fits inside the new one: nothing to flag.
+            const projectFits = projectRange !== undefined && !conflict;
+            if (!projectFits) {
+                changes.push({
+                    category: "engines",
+                    severity: conflict ? "breaking" : "possibly-breaking",
+                    reason: conflict
+                        ? `engines.node narrowed to "${newNode}" and the project declares engines.node "${projectNode}", which allows versions outside it`
+                        : `engines.node ${oldNode === undefined ? "was unset and is now" : `changed from "${oldNode}" to`} "${newNode}"${projectNode ? "" : "; the project declares no engines.node"}${runtimeOk === undefined ? "" : runtimeOk ? `; Node ${runtimeNode} on this machine satisfies it` : `; Node ${runtimeNode} on this machine does NOT satisfy it`}`,
+                    before: oldNode,
+                    after: newNode,
+                    evidence: conflict ? "project-conflict" : "unresolved",
+                });
+            }
+        }
+    }
+    // Module format
+    const oldFormat = moduleFormat(before);
+    const newFormat = moduleFormat(after);
+    if (oldFormat !== newFormat) {
+        if (newFormat === "esm-only") {
+            changes.push({
+                category: "module-format",
+                severity: "possibly-breaking",
+                reason: `package is now ESM-only (was ${oldFormat}): require() of it fails on Node before 20.19/22.12 and when it uses top-level await`,
+                before: oldFormat,
+                after: newFormat,
+                evidence: "unresolved",
+                affectsRequire: true,
+            });
+        }
+        else if (newFormat === "cjs-only" && oldFormat !== "cjs-only") {
+            changes.push({
+                category: "module-format",
+                severity: "possibly-breaking",
+                reason: `package is now CommonJS-only (was ${oldFormat}): named ESM imports of it may no longer resolve`,
+                before: oldFormat,
+                after: newFormat,
+                evidence: "unresolved",
+            });
+        }
+    }
+    // exports map
+    const oldMap = exportsMapOf(before);
+    const newMap = exportsMapOf(after);
+    if (newMap && !oldMap) {
+        changes.push({
+            category: "exports-map",
+            severity: "possibly-breaking",
+            reason: `package now has an "exports" map: deep imports not listed in it (${[...newMap.keys()].slice(0, 6).join(", ")}${newMap.size > 6 ? ", ..." : ""}) stop working`,
+            after: [...newMap.keys()].join(", "),
+            evidence: "unresolved",
+            restrictsDeepImports: true,
+        });
+    }
+    else if (newMap && oldMap) {
+        const removed = [...oldMap.keys()].filter((key) => !newMap.has(key) && !key.includes("*"));
+        if (removed.length > 0) {
+            changes.push({
+                category: "exports-map",
+                severity: "breaking",
+                reason: `"exports" no longer lists ${removed.slice(0, 6).join(", ")}${removed.length > 6 ? ", ..." : ""}`,
+                before: removed.join(", "),
+                evidence: "unresolved",
+                removedSubpaths: removed,
+            });
+        }
+    }
+    // Peer dependencies
+    const oldPeers = stringRecord(before.peerDependencies);
+    const newPeers = stringRecord(after.peerDependencies);
+    const newMeta = (typeof after.peerDependenciesMeta === "object" && after.peerDependenciesMeta !== null
+        ? after.peerDependenciesMeta
+        : {});
+    const projectDeps = project
+        ? {
+            ...stringRecord(project.peerDependencies),
+            ...stringRecord(project.devDependencies),
+            ...stringRecord(project.dependencies),
+        }
+        : {};
+    for (const [peer, range] of Object.entries(newPeers).toSorted((a, b) => a[0].localeCompare(b[0]))) {
+        if (newMeta[peer]?.optional === true)
+            continue;
+        const previous = oldPeers[peer];
+        const projectRange = projectDeps[peer];
+        const validNew = validRange(range);
+        if (previous === undefined) {
+            if (projectRange === undefined) {
+                changes.push({
+                    category: "peer-dependency",
+                    severity: "possibly-breaking",
+                    reason: `new required peer dependency ${peer}@${range}${project ? ", which the project does not declare" : ""}`,
+                    after: `${peer}@${range}`,
+                    evidence: "unresolved",
+                });
+            }
+            else if (validNew &&
+                validRange(projectRange) &&
+                safeIntersects(projectRange, validNew) === false) {
+                changes.push({
+                    category: "peer-dependency",
+                    severity: "breaking",
+                    reason: `new required peer dependency ${peer}@${range} conflicts with the project's ${peer}@${projectRange}`,
+                    after: `${peer}@${range}`,
+                    evidence: "project-conflict",
+                });
+            }
+        }
+        else if (previous !== range) {
+            const validOld = validRange(previous);
+            const narrowed = validOld && validNew ? safeSubset(validOld, validNew) === false : false;
+            if (!narrowed)
+                continue;
+            if (projectRange !== undefined &&
+                validRange(projectRange) &&
+                safeIntersects(projectRange, validNew ?? "*") === false) {
+                changes.push({
+                    category: "peer-dependency",
+                    severity: "breaking",
+                    reason: `peer dependency ${peer} narrowed from ${previous} to ${range}, which the project's ${peer}@${projectRange} does not satisfy`,
+                    before: `${peer}@${previous}`,
+                    after: `${peer}@${range}`,
+                    evidence: "project-conflict",
+                });
+            }
+            else {
+                changes.push({
+                    category: "peer-dependency",
+                    severity: "possibly-breaking",
+                    reason: `peer dependency ${peer} narrowed from ${previous} to ${range}`,
+                    before: `${peer}@${previous}`,
+                    after: `${peer}@${range}`,
+                    evidence: "unresolved",
+                });
+            }
+        }
+    }
+    return changes;
+}
+//# sourceMappingURL=manifest-diff.js.map

package/dist/remediation/impact/manifest-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-diff.js","sourceRoot":"","sources":["../../../src/remediation/impact/manifest-diff.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAG5B,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAqBhE,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC3D,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,MAAM,CACrD,CAAC,KAAK,EAA6B,EAAE,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,CACnE,CACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAiC;IACpD,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,IAAI,GAAI,OAAmC,CAAC,IAAI,CAAC;IACvD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,GAAW,EAAE,GAAW;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,CAAS,EAAE,CAAS;IAC1C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,QAAiC,EAAE,OAAe;IAClF,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7B,IAAI,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;YAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;gBACnC,IACE,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC;oBAC5B,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC;oBACzB,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;oBAE/C,OAAO,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAA+B,EAC/B,KAA8B,EAC9B,OAA4C,EAC5C,WAAW,GAAW,OAAO,CAAC,OAAO;IAErC,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,aAAa;IACb,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,MAAM,YAAY,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,QAAQ,GACZ,YAAY,IAAI,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAClF,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACjF,qFAAqF;YACrF,MAAM,WAAW,GAAG,YAAY,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC;YAC5D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB;oBACrD,MAAM,EAAE,QAAQ;wBACd,CAAC,CAAC,6BAA6B,OAAO,4CAA4C,WAAW,qCAAqC;wBAClI,CAAC,CAAC,gBAAgB,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,iBAAiB,OAAO,MAAM,KAAK,OAAO,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,wCAAwC,GAAG,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,WAAW,+BAA+B,CAAC,CAAC,CAAC,UAAU,WAAW,sCAAsC,EAAE;oBAChV,MAAM,EAAE,OAAO;oBACf,KAAK,EAAE,OAAO;oBACd,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,YAAY;iBACvD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,gBAAgB;IAChB,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,eAAe;gBACzB,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,gCAAgC,SAAS,sFAAsF;gBACvI,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,YAAY;gBACtB,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,SAAS,KAAK,UAAU,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAChE,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,eAAe;gBACzB,QAAQ,EAAE,mBAAmB;gBAC7B,MAAM,EAAE,qCAAqC,SAAS,kDAAkD;gBACxG,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,YAAY;aACvB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,cAAc;IACd,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC;YACX,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,oEAAoE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gBAAgB;YACtK,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACpC,QAAQ,EAAE,YAAY;YACtB,oBAAoB,EAAE,IAAI;SAC3B,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3F,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,aAAa;gBACvB,QAAQ,EAAE,UAAU;gBACpB,MAAM,EAAE,6BAA6B,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;gBACzG,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC1B,QAAQ,EAAE,YAAY;gBACtB,eAAe,EAAE,OAAO;aACzB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,QAAQ,GAAG,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,CACd,OAAO,KAAK,CAAC,oBAAoB,KAAK,QAAQ,IAAI,KAAK,CAAC,oBAAoB,KAAK,IAAI;QACnF,CAAC,CAAC,KAAK,CAAC,oBAAoB;QAC5B,CAAC,CAAC,EAAE,CAC+C,CAAC;IACxD,MAAM,WAAW,GAAG,OAAO;QACzB,CAAC,CAAC;YACE,GAAG,YAAY,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACzC,GAAG,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC;YACxC,GAAG,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC;SACtC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CACzB,EAAE,CAAC;QACF,IAAI,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,IAAI;YAAE,SAAS;QAC/C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,YAAY,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,mBAAmB;oBAC7B,MAAM,EAAE,gCAAgC,IAAI,IAAI,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,EAAE,EAAE;oBAC/G,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;oBACzB,QAAQ,EAAE,YAAY;iBACvB,CAAC,CAAC;YACL,CAAC;iBAAM,IACL,QAAQ;gBACR,UAAU,CAAC,YAAY,CAAC;gBACxB,cAAc,CAAC,YAAY,EAAE,QAAQ,CAAC,KAAK,KAAK,EAChD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,gCAAgC,IAAI,IAAI,KAAK,iCAAiC,IAAI,IAAI,YAAY,EAAE;oBAC5G,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;oBACzB,QAAQ,EAAE,kBAAkB;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC9B,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;YACtC,MAAM,QAAQ,GAAG,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YACzF,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,IACE,YAAY,KAAK,SAAS;gBAC1B,UAAU,CAAC,YAAY,CAAC;gBACxB,cAAc,CAAC,YAAY,EAAE,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,EACvD,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,UAAU;oBACpB,MAAM,EAAE,mBAAmB,IAAI,kBAAkB,QAAQ,OAAO,KAAK,yBAAyB,IAAI,IAAI,YAAY,mBAAmB;oBACrI,MAAM,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;oBAC7B,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;oBACzB,QAAQ,EAAE,kBAAkB;iBAC7B,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CAAC;oBACX,QAAQ,EAAE,iBAAiB;oBAC3B,QAAQ,EAAE,mBAAmB;oBAC7B,MAAM,EAAE,mBAAmB,IAAI,kBAAkB,QAAQ,OAAO,KAAK,EAAE;oBACvE,MAAM,EAAE,GAAG,IAAI,IAAI,QAAQ,EAAE;oBAC7B,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,EAAE;oBACzB,QAAQ,EAAE,YAAY;iBACvB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/remediation/impact/package-index.d.ts

@@ -0,0 +1,37 @@
+import { type ExportBinding, type ModuleInfo } from "./js-exports.js";
+import type { PackageSource } from "./types.js";
+export interface EntryPoint {
+    /** `.` or a subpath such as `./sub`. */
+    subpath: string;
+    /** JavaScript file (package-relative) the subpath resolves to. */
+    file?: string;
+    /** Declaration file for the subpath. */
+    typesFile?: string;
+}
+export interface ResolvedExport extends ExportBinding {
+    definedIn: string;
+}
+/** The `exports` field as `subpath -> target value`, or undefined when absent. */
+export declare function exportsMapOf(manifest: Record<string, unknown>): Map<string, unknown> | undefined;
+/** Whether a package's published files can all be deep-imported (no `exports` map to restrict them). */
+export declare function allowsDeepImports(manifest: Record<string, unknown>): boolean;
+/** Entry points of a package: every `exports` subpath, or `main`/`module`/`types` and `index`. */
+export declare function entryPoints(source: PackageSource): EntryPoint[];
+/** The import specifier a consumer writes for a subpath of the package. */
+export declare function specifierFor(packageName: string, subpath: string): string;
+export type ModuleFormat = "esm-only" | "cjs-only" | "dual";
+/** Which module systems a consumer can load the package with, judged from the manifest. */
+export declare function moduleFormat(manifest: Record<string, unknown>): ModuleFormat;
+export declare class PackageIndex {
+    readonly source: PackageSource;
+    readonly entries: EntryPoint[];
+    private readonly modules;
+    private readonly resolved;
+    constructor(source: PackageSource);
+    hasFile(path: string): boolean;
+    module(path: string): ModuleInfo | undefined;
+    resolveRelative(from: string, specifier: string): string | undefined;
+    /** Effective exports of a module: its own, plus those it re-exports from other modules. */
+    exportsOf(path: string, stack?: Set<string>): Map<string, ResolvedExport>;
+}
+//# sourceMappingURL=package-index.d.ts.map

package/dist/remediation/impact/package-index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-index.d.ts","sourceRoot":"","sources":["../../../src/remediation/impact/package-index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAiB,KAAK,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACrF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,UAAU;IACzB,wCAAwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,kEAAkE;IAClE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wCAAwC;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,cAAe,SAAQ,aAAa;IACnD,SAAS,EAAE,MAAM,CAAC;CACnB;AA2CD,kFAAkF;AAClF,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAMhG;AAED,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAE5E;AA0CD,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,MAAM,EAAE,aAAa,GAAG,UAAU,EAAE,CAkE/D;AAED,2EAA2E;AAC3E,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;AAE5D,2FAA2F;AAC3F,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,YAAY,CA2C5E;AAED,qBAAa,YAAY;IACvB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6C;IACrE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAkD;IAE3E,YAAY,MAAM,EAAE,aAAa,EAGhC;IAED,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE7B;IAED,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAM3C;IAED,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAYnE;IAED,2FAA2F;IAC3F,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,GAAG,CAAC,MAAM,CAAa,GAAG,GAAG,CAAC,MAAM,EAAE,cAAc,CAAC,CAmDnF;CACF"}

package/dist/remediation/impact/package-index.js

@@ -0,0 +1,313 @@
+/**
+ * A package version as a set of modules: entry points from `package.json` (`exports`, `main`,
+ * `module`, `types`), module resolution inside the package, and the effective exports of a module
+ * after following its re-exports.
+ */
+import { posix } from "node:path";
+import { analyzeModule } from "./js-exports.js";
+// `require` before `import`: the CommonJS build is usually the implementation, while the ESM entry
+// is often a thin wrapper that re-exports it.
+const RUNTIME_CONDITIONS = ["node", "require", "default", "import", "module"];
+const JS_EXTENSIONS = [".js", ".mjs", ".cjs", ".ts", ".mts", ".cts", ".tsx", ".jsx"];
+function asRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function cleanTarget(target) {
+    return posix.normalize(target.replace(/^\.\//, ""));
+}
+/** Find the first string leaf reachable through the given condition order. */
+function pickLeaf(value, conditions, depth = 0) {
+    if (depth > 8)
+        return undefined;
+    if (typeof value === "string")
+        return value;
+    if (Array.isArray(value)) {
+        for (const item of value) {
+            const found = pickLeaf(item, conditions, depth + 1);
+            if (found)
+                return found;
+        }
+        return undefined;
+    }
+    const record = asRecord(value);
+    if (!record)
+        return undefined;
+    for (const condition of conditions) {
+        if (condition in record) {
+            const found = pickLeaf(record[condition], conditions, depth + 1);
+            if (found)
+                return found;
+        }
+    }
+    return undefined;
+}
+function isSubpathMap(exportsField) {
+    return Object.keys(exportsField).some((key) => key.startsWith("."));
+}
+/** The `exports` field as `subpath -> target value`, or undefined when absent. */
+export function exportsMapOf(manifest) {
+    const field = manifest.exports;
+    if (field === undefined || field === null)
+        return undefined;
+    const record = asRecord(field);
+    if (record && isSubpathMap(record))
+        return new Map(Object.entries(record));
+    return new Map([[".", field]]);
+}
+/** Whether a package's published files can all be deep-imported (no `exports` map to restrict them). */
+export function allowsDeepImports(manifest) {
+    return exportsMapOf(manifest) === undefined;
+}
+function withExtensionVariants(file) {
+    const variants = [file];
+    for (const extension of JS_EXTENSIONS)
+        variants.push(`${file}${extension}`);
+    for (const extension of JS_EXTENSIONS)
+        variants.push(`${file}/index${extension}`);
+    return variants;
+}
+function resolveExisting(files, target) {
+    const cleaned = cleanTarget(target);
+    return withExtensionVariants(cleaned).find((candidate) => files.has(candidate));
+}
+function declarationFor(files, runtimeFile) {
+    const base = runtimeFile.replace(/\.(?:[cm]?[jt]sx?)$/, "");
+    const extensionMap = { ".mjs": ".d.mts", ".cjs": ".d.cts" };
+    const extension = /\.[cm]?[jt]sx?$/.exec(runtimeFile)?.[0] ?? ".js";
+    const candidates = [`${base}${extensionMap[extension] ?? ".d.ts"}`, `${base}.d.ts`];
+    return candidates.find((candidate) => files.has(candidate));
+}
+function expandPattern(subpath, target, files) {
+    const cleaned = cleanTarget(target);
+    const star = cleaned.indexOf("*");
+    if (star === -1)
+        return [];
+    const before = cleaned.slice(0, star);
+    const after = cleaned.slice(star + 1);
+    const result = [];
+    for (const file of files.keys()) {
+        if (!file.startsWith(before) || !file.endsWith(after) || file.endsWith(".d.ts"))
+            continue;
+        const middle = file.slice(before.length, file.length - after.length);
+        if (middle === "")
+            continue;
+        result.push({ subpath: subpath.replaceAll("*", middle), file });
+    }
+    return result.toSorted((a, b) => a.subpath.localeCompare(b.subpath)).slice(0, 500);
+}
+/** Entry points of a package: every `exports` subpath, or `main`/`module`/`types` and `index`. */
+export function entryPoints(source) {
+    const { manifest, files } = source;
+    const map = exportsMapOf(manifest);
+    const entries = [];
+    if (map) {
+        for (const [subpath, value] of map) {
+            const typesLeaf = pickLeaf(value, ["types", ...RUNTIME_CONDITIONS]);
+            const runtimeLeaf = pickLeaf(value, RUNTIME_CONDITIONS);
+            if (subpath.includes("*")) {
+                const pattern = runtimeLeaf ?? typesLeaf;
+                if (pattern) {
+                    for (const expanded of expandPattern(subpath, pattern, files)) {
+                        entries.push({
+                            subpath: expanded.subpath,
+                            file: expanded.file,
+                            typesFile: declarationFor(files, expanded.file),
+                        });
+                    }
+                }
+                continue;
+            }
+            const typesCandidate = typesLeaf && /\.d\.[cm]?ts$/.test(typesLeaf)
+                ? resolveExisting(files, typesLeaf)
+                : undefined;
+            const file = runtimeLeaf && !/\.d\.[cm]?ts$/.test(runtimeLeaf)
+                ? resolveExisting(files, runtimeLeaf)
+                : undefined;
+            const manifestTypes = typeof manifest.types === "string"
+                ? manifest.types
+                : typeof manifest.typings === "string"
+                    ? manifest.typings
+                    : undefined;
+            entries.push({
+                subpath,
+                file,
+                typesFile: typesCandidate ??
+                    (file ? declarationFor(files, file) : undefined) ??
+                    (subpath === "." && manifestTypes ? resolveExisting(files, manifestTypes) : undefined),
+            });
+        }
+        return entries;
+    }
+    const main = typeof manifest.main === "string" ? manifest.main : undefined;
+    const moduleField = typeof manifest.module === "string" ? manifest.module : undefined;
+    const file = (main ? resolveExisting(files, main) : undefined) ??
+        (moduleField ? resolveExisting(files, moduleField) : undefined) ??
+        resolveExisting(files, "index");
+    const typesField = typeof manifest.types === "string"
+        ? manifest.types
+        : typeof manifest.typings === "string"
+            ? manifest.typings
+            : undefined;
+    const typesFile = (typesField ? resolveExisting(files, typesField) : undefined) ??
+        (file ? declarationFor(files, file) : undefined) ??
+        (files.has("index.d.ts") ? "index.d.ts" : undefined);
+    entries.push({ subpath: ".", file, typesFile });
+    return entries;
+}
+/** The import specifier a consumer writes for a subpath of the package. */
+export function specifierFor(packageName, subpath) {
+    return subpath === "." ? packageName : `${packageName}${subpath.slice(1)}`;
+}
+/** Which module systems a consumer can load the package with, judged from the manifest. */
+export function moduleFormat(manifest) {
+    const isModuleType = manifest.type === "module";
+    const formatOf = (path) => {
+        if (path.endsWith(".mjs") || path.endsWith(".mts"))
+            return "esm";
+        if (path.endsWith(".cjs") || path.endsWith(".cts"))
+            return "cjs";
+        return isModuleType ? "esm" : "cjs";
+    };
+    const map = exportsMapOf(manifest);
+    const formats = new Set();
+    if (map) {
+        const rootValue = map.get(".") ?? [...map.values()][0];
+        const visit = (value, condition, depth) => {
+            if (depth > 8)
+                return;
+            if (typeof value === "string") {
+                if (/\.d\.[cm]?ts$/.test(value))
+                    return;
+                if (condition === "require")
+                    formats.add("cjs");
+                else if (condition === "import" || condition === "module")
+                    formats.add("esm");
+                else
+                    formats.add(formatOf(value));
+                return;
+            }
+            if (Array.isArray(value)) {
+                for (const item of value)
+                    visit(item, condition, depth + 1);
+                return;
+            }
+            const record = asRecord(value);
+            if (!record)
+                return;
+            for (const [key, nested] of Object.entries(record)) {
+                if (key === "types")
+                    continue;
+                visit(nested, key === "require" || key === "import" || key === "module" ? key : condition, depth + 1);
+            }
+        };
+        visit(rootValue, undefined, 0);
+    }
+    else {
+        if (typeof manifest.main === "string")
+            formats.add(formatOf(manifest.main));
+        else
+            formats.add(formatOf("index.js"));
+        if (typeof manifest.module === "string")
+            formats.add("esm");
+    }
+    if (formats.has("esm") && formats.has("cjs"))
+        return "dual";
+    return formats.has("esm") ? "esm-only" : "cjs-only";
+}
+export class PackageIndex {
+    source;
+    entries;
+    modules = new Map();
+    resolved = new Map();
+    constructor(source) {
+        this.source = source;
+        this.entries = entryPoints(source);
+    }
+    hasFile(path) {
+        return this.source.files.has(path);
+    }
+    module(path) {
+        if (this.modules.has(path))
+            return this.modules.get(path);
+        const code = this.source.files.get(path);
+        const info = code === undefined ? undefined : analyzeModule(path, code);
+        this.modules.set(path, info);
+        return info;
+    }
+    resolveRelative(from, specifier) {
+        if (!specifier.startsWith("."))
+            return undefined;
+        const joined = posix.normalize(posix.join(posix.dirname(from), specifier));
+        if (joined.startsWith(".."))
+            return undefined;
+        const stripped = joined.replace(/\.(?:[cm]?js|jsx)$/, "");
+        const candidates = [
+            ...withExtensionVariants(joined),
+            ...(stripped === joined ? [] : withExtensionVariants(stripped)),
+        ];
+        return candidates.find((candidate) => this.source.files.has(candidate) && !candidate.endsWith(".d.ts"));
+    }
+    /** Effective exports of a module: its own, plus those it re-exports from other modules. */
+    exportsOf(path, stack = new Set()) {
+        const cached = this.resolved.get(path);
+        if (cached)
+            return cached;
+        if (stack.has(path))
+            return new Map();
+        stack.add(path);
+        const result = new Map();
+        const info = this.module(path);
+        if (info) {
+            for (const [name, binding] of info.exports) {
+                let resolved = { ...binding, definedIn: path };
+                if (binding.moduleRef) {
+                    const target = this.resolveRelative(path, binding.moduleRef);
+                    const targetInfo = target ? this.module(target) : undefined;
+                    if (targetInfo) {
+                        resolved = { ...resolved, fingerprint: `module:${targetInfo.fingerprint}` };
+                    }
+                }
+                result.set(name, resolved);
+            }
+            for (const reexport of info.reexports) {
+                const target = this.resolveRelative(path, reexport.source);
+                if (!target)
+                    continue;
+                const targetExports = this.exportsOf(target, stack);
+                if (reexport.kind === "all") {
+                    for (const [name, binding] of targetExports) {
+                        if (name === "default" && !reexport.includeDefault)
+                            continue;
+                        if (!result.has(name))
+                            result.set(name, binding);
+                    }
+                }
+                else if (reexport.kind === "named") {
+                    for (const { exported, imported } of reexport.names) {
+                        const binding = targetExports.get(imported);
+                        if (binding)
+                            result.set(exported, { ...binding, name: exported });
+                    }
+                }
+                else if (reexport.namespace) {
+                    const targetInfo = this.module(target);
+                    result.set(reexport.namespace, {
+                        name: reexport.namespace,
+                        kind: "module",
+                        fingerprint: `module:${targetInfo?.fingerprint ?? target}`,
+                        refs: new Set(),
+                        tokens: new Set(),
+                        nodeCount: 1,
+                        definedIn: target,
+                    });
+                }
+            }
+        }
+        stack.delete(path);
+        this.resolved.set(path, result);
+        return result;
+    }
+}
+//# sourceMappingURL=package-index.js.map

package/dist/remediation/impact/package-index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-index.js","sourceRoot":"","sources":["../../../src/remediation/impact/package-index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,aAAa,EAAuC,MAAM,iBAAiB,CAAC;AAgBrF,mGAAmG;AACnG,8CAA8C;AAC9C,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AACvF,MAAM,aAAa,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAErF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,8EAA8E;AAC9E,SAAS,QAAQ,CAAC,KAAc,EAAE,UAA6B,EAAE,KAAK,GAAG,CAAC;IACxE,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACpD,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,YAAqC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,YAAY,CAAC,QAAiC;IAC5D,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC;IAC/B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,QAAiC;IACjE,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,KAAK,MAAM,SAAS,IAAI,aAAa;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,CAAC;IAC5E,KAAK,MAAM,SAAS,IAAI,aAAa;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,SAAS,SAAS,EAAE,CAAC,CAAC;IAClF,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B,EAAE,MAAc;IACjE,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,OAAO,qBAAqB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,cAAc,CAAC,KAA0B,EAAE,WAAmB;IACrE,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAC5D,MAAM,YAAY,GAA2B,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpF,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IACpE,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,OAAO,EAAE,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IACpF,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,MAAc,EACd,KAA0B;IAE1B,MAAM,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAA6C,EAAE,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACrF,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,WAAW,CAAC,MAAqB;IAC/C,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IACnC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAiB,EAAE,CAAC;IAEjC,IAAI,GAAG,EAAE,CAAC;QACR,KAAK,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC,CAAC;YACxD,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,WAAW,IAAI,SAAS,CAAC;gBACzC,IAAI,OAAO,EAAE,CAAC;oBACZ,KAAK,MAAM,QAAQ,IAAI,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;wBAC9D,OAAO,CAAC,IAAI,CAAC;4BACX,OAAO,EAAE,QAAQ,CAAC,OAAO;4BACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;4BACnB,SAAS,EAAE,cAAc,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC;yBAChD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,cAAc,GAClB,SAAS,IAAI,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC;gBAC1C,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,SAAS,CAAC;gBACnC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,IAAI,GACR,WAAW,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC;gBACrC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,aAAa,GACjB,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;gBAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;gBAChB,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;oBACpC,CAAC,CAAC,QAAQ,CAAC,OAAO;oBAClB,CAAC,CAAC,SAAS,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO;gBACP,IAAI;gBACJ,SAAS,EACP,cAAc;oBACd,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAChD,CAAC,OAAO,KAAK,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;aACzF,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACtF,MAAM,IAAI,GACR,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACjD,CAAC,WAAW,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,eAAe,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,UAAU,GACd,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ;QAChC,CAAC,CAAC,QAAQ,CAAC,KAAK;QAChB,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;YACpC,CAAC,CAAC,QAAQ,CAAC,OAAO;YAClB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,SAAS,GACb,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACvD,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;IAChD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,OAAe;IAC/D,OAAO,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAID,2FAA2F;AAC3F,MAAM,UAAU,YAAY,CAAC,QAAiC;IAC5D,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,CAAC;IAChD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAiB,EAAE;QAC/C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IACtC,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACzC,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,CAAC,KAAc,EAAE,SAA6B,EAAE,KAAa,EAAQ,EAAE;YACnF,IAAI,KAAK,GAAG,CAAC;gBAAE,OAAO;YACtB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;oBAAE,OAAO;gBACxC,IAAI,SAAS,KAAK,SAAS;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;qBAC3C,IAAI,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,QAAQ;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;;oBACzE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;gBAClC,OAAO;YACT,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,KAAK,MAAM,IAAI,IAAI,KAAK;oBAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnD,IAAI,GAAG,KAAK,OAAO;oBAAE,SAAS;gBAC9B,KAAK,CACH,MAAM,EACN,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAC3E,KAAK,GAAG,CAAC,CACV,CAAC;YACJ,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;;YACvE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QACvC,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC5D,OAAO,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AACtD,CAAC;AAED,MAAM,OAAO,YAAY;IACd,MAAM,CAAgB;IACtB,OAAO,CAAe;IACd,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IACpD,QAAQ,GAAG,IAAI,GAAG,EAAuC,CAAC;IAE3E,YAAY,MAAqB;QAC/B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,eAAe,CAAC,IAAY,EAAE,SAAiB;QAC7C,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,oBAAoB,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAG;YACjB,GAAG,qBAAqB,CAAC,MAAM,CAAC;YAChC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC;SAChE,CAAC;QACF,OAAO,UAAU,CAAC,IAAI,CACpB,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAChF,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,SAAS,CAAC,IAAY,EAAE,KAAK,GAAgB,IAAI,GAAG,EAAE;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,GAAG,EAAE,CAAC;QACtC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEhB,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,EAAE,CAAC;YACT,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3C,IAAI,QAAQ,GAAmB,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;gBAC/D,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;oBAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC5D,IAAI,UAAU,EAAE,CAAC;wBACf,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,UAAU,UAAU,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC9E,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7B,CAAC;YACD,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACpD,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;oBAC5B,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;wBAC5C,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,cAAc;4BAAE,SAAS;wBAC7D,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC;4BAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACnD,CAAC;gBACH,CAAC;qBAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBACrC,KAAK,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;wBACpD,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;wBAC5C,IAAI,OAAO;4BAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;qBAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;oBAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;oBACvC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;wBAC7B,IAAI,EAAE,QAAQ,CAAC,SAAS;wBACxB,IAAI,EAAE,QAAQ;wBACd,WAAW,EAAE,UAAU,UAAU,EAAE,WAAW,IAAI,MAAM,EAAE;wBAC1D,IAAI,EAAE,IAAI,GAAG,EAAE;wBACf,MAAM,EAAE,IAAI,GAAG,EAAE;wBACjB,SAAS,EAAE,CAAC;wBACZ,SAAS,EAAE,MAAM;qBAClB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChC,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/remediation/impact/tarball.d.ts

@@ -0,0 +1,43 @@
+export interface TarballLimits {
+    /** Largest allowed size of the decompressed archive. */
+    maxUnpackedBytes: number;
+    /** Largest allowed number of archive entries. */
+    maxEntries: number;
+    /** Source files larger than this are skipped, not read. */
+    maxFileBytes: number;
+    /** Largest total size of retained source text. */
+    maxRetainedBytes: number;
+    /** Largest number of retained source files. */
+    maxRetainedFiles: number;
+}
+export declare const DEFAULT_TARBALL_LIMITS: TarballLimits;
+export interface PackageFiles {
+    /** Retained source files by package-relative path (`lib/index.js`), UTF-8 text. */
+    files: Map<string, string>;
+    /** Parsed root `package.json`. */
+    manifest: Record<string, unknown>;
+    /** Root-level changelog and release-notes files by name, when `includeDocs` was asked for. */
+    docs?: Map<string, string>;
+    stats: {
+        entries: number;
+        unpackedBytes: number;
+        skippedLinks: number;
+        skippedLarge: number;
+        skippedOther: number;
+    };
+}
+export declare class TarballError extends Error {
+    constructor(message: string, options?: ErrorOptions);
+}
+/**
+ * Validate an entry path and strip the leading directory (`package/`) the way npm does.
+ * Throws for a path that is absolute, contains `..`, a NUL byte or a drive letter.
+ */
+export declare function normalizeEntryPath(raw: string): string;
+export interface ReadTarballOptions {
+    /** Also keep root-level changelog files (read as text, capped at 2 MiB each). */
+    includeDocs?: boolean;
+}
+/** Decompress and read a package tarball; see the module comment for what is refused. */
+export declare function readPackageTarball(bytes: Uint8Array, limits?: TarballLimits, options?: ReadTarballOptions): PackageFiles;
+//# sourceMappingURL=tarball.d.ts.map