codequill 0.8.1-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 CodeQuill
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,121 @@
+CodeQuill CLI
+
+CodeQuill CLI lets you authenticate, claim repositories, create on-chain snapshots, and push backups via the CodeQuill backend. The CLI makes only HTTP requests; all on-chain activity and backup processing happen on the backend.
+
+Requirements
+- Node.js 18+
+- TypeScript 5+
+
+Install (from source)
+- npm install
+- npm run build
+- npm link (optional, to get the `codequill` binary on PATH)
+
+Configuration
+- API base URL: set environment variable `CODEQUILL_API_BASE_URL` (defaults to `https://api.staging.codequill.dev`).
+- Tokens are stored at `~/.config/codequill/config.json` with 0600 permissions.
+- For testing or sandboxing, you can override the config directory with `CODEQUILL_CONFIG_DIR` (mainly used by unit tests).
+
+Session duration and auto-refresh
+- The CLI automatically refreshes your access token using the stored `refresh_token` when it expires.
+- As long as your refresh token remains valid (typically around 30 days), you will stay signed in and won’t be prompted to log in again.
+- If your access token is expired and no valid `refresh_token` is present, the CLI will ask you to run `codequill login` again.
+
+Usage
+- Show help
+  - `codequill --help`
+  - `codequill <command> --help`
+
+Commands
+- codequill login
+  - Authenticates via device-code flow.
+  - Behavior:
+    - POST `/api/v1/cli/device-code` with `{ client_name: "codequill-cli", client_version }`.
+    - Prints a `verification_url` — open it in your browser.
+    - Prerequisite: make sure you are already signed in to the CodeQuill web app in that browser session.
+    - Polls POST `/api/v1/cli/device-token` until approved.
+    - Saves tokens with a small expiry margin. Subsequent commands auto-refresh access tokens using the stored `refresh_token`.
+
+- codequill whoami
+  - Displays the current authenticated user and repos.
+  - GET `/api/v1/cli/me` with `Authorization: Bearer <access_token>`.
+
+- codequill quota
+  - Shows your subscription plan and quota usage details.
+  - GET `/v1/cli/quota` with `Authorization: Bearer <access_token>`.
+  - Displays:
+    - Plan code
+    - Claimed repos (public/private used vs limit)
+    - Snapshots used this month vs limit
+    - Backups used this month vs limit
+    - GitHub Actions used vs limit
+    - Plagiarism scans used this month vs limit
+
+- codequill claim [--repo <name>] [--path <path>]
+  - Claims authorship of a repository via the backend.
+  - If run inside a git repo, auto-detects repo name from `origin` remote or folder name.
+  - POST `/api/v1/cli/claim` with `{ repo_name, path, git_remote }`.
+
+- codequill snapshot [--repo <name>] [--commit <hash>] [--path <path>] [--dry-run]
+  - Creates a new on-chain snapshot for a repo+commit (backend performs on-chain work).
+  - If inside git, defaults to `HEAD` commit and derives repo name from remote.
+  - `--dry-run` prints resolved parameters without calling the API.
+  - POST `/api/v1/cli/snapshot` with `{ repo_name, commit_hash, path, git: { is_repo, remote } }`.
+
+- codequill push [--repo <name>] [--path <path>] [--snapshot-id <id>] [--dry-run]
+  - Backs up the latest (or a specified) snapshot.
+  - Important: the backend performs zipping, encryption, and IPFS upload. The CLI only sends intent and metadata.
+  - `--dry-run` prints resolved parameters without calling the API.
+  - POST `/api/v1/cli/push` with `{ repo_name, path, snapshot_id }`.
+
+Git-aware vs explicit mode
+- When run inside a git repository, the CLI tries to determine:
+  - repo root (`git rev-parse --show-toplevel`)
+  - `HEAD` commit hash
+  - `origin` remote URL to derive `user/name`
+- When run outside git, pass `--repo` and optionally `--commit` and `--path`.
+
+Environment variables
+- `CODEQUILL_API_BASE_URL` — base HTTP URL for backend (default: staging placeholder).
+- `CODEQUILL_CONFIG_DIR` — override tokens/config directory (used by tests).
+
+Development
+- Build: `npm run build`
+- Watch: `npm run dev`
+- Tests: `npm test`
+- Coverage: `npm run coverage`
+
+Project Structure
+- src/index.ts — Commander entrypoint
+- src/version.ts — CLI version via package.json
+- src/commands/login.ts — device-code login
+- src/commands/whoami.ts — prints current user
+- src/commands/claim.ts — claim authorship
+- src/commands/snapshot.ts — create snapshots
+- src/commands/push.ts — request backups (backend handles zip/encrypt/upload)
+- src/services/apiClient.ts — HTTP wrapper with auth header injection
+- src/services/authStore.ts — token persistence (0600)
+- src/services/config.ts — config dir/file paths
+- src/services/errors.ts — ApiError type
+- src/services/ui.ts — colors, spinner, open browser helper
+- src/services/git.ts — git detection (root/head/remote) and repo name derivation
+- src/services/paths.ts — path helpers
+- src/services/zip.ts — zip helper (currently unused in `push` since backend handles it)
+- src/services/ipfs.ts — placeholder IPFS helper (currently unused)
+- src/types/api.ts — API types
+- test/*.test.ts — unit tests (Vitest)
+
+Testing
+- The test suite is API-free and uses mocks; it verifies:
+  - Token storage and permissions
+  - API client behavior and error handling
+  - Git remote parsing logic
+  - Command flows for `login`, `whoami`, `claim`, `snapshot` (incl. dry-run), and `push` (incl. dry-run)
+- Run: `npm test`
+
+Notes & assumptions
+- The CLI relies on the backend for all on-chain actions and, for backups, for zipping/encryption/IPFS upload.
+- Token refresh is not yet implemented; if expired, the CLI asks you to re-login.
+
+License
+MIT © CodeQuill

package/dist/commands/attest.js

@@ -0,0 +1,442 @@
+import path from 'node:path';
+import fs from 'node:fs/promises';
+import { gzipSync } from 'node:zlib';
+import { colors, shortCommit, spinner } from '../services/ui.js';
+import { apiClient } from '../services/apiClient.js';
+import { assertAuthenticated } from '../services/utilities.js';
+import { detectGitRepo } from '../services/git.js';
+import { fileExists, readFileUtf8 } from '../services/fs.js';
+import { getBaseUrl } from '../services/config.js';
+import { waitForTxConfirmation } from '../services/txWaiter.js';
+import { confirmDangerousAction } from '../services/confirm.js';
+import { buildAttestationManifest, } from '../services/manifests/attestationManifest.js';
+import { fetchSnapshot } from '../services/api.js';
+import { sha256File } from '../services/crypto.js';
+export async function handleAttest(buildPath, snapshotId, opts) {
+    if (!assertAuthenticated())
+        return;
+    const log = (...args) => { if (!opts.json)
+        console.log(...args); };
+    const git = detectGitRepo(process.cwd());
+    if (!git.isRepo || !git.root) {
+        console.error(colors.error('This command must be run inside a git repository.'));
+        process.exitCode = 1;
+        return;
+    }
+    const buildAbs = path.resolve(String(buildPath || '').trim());
+    if (!buildAbs) {
+        console.error(colors.error('Missing <build> path.'));
+        process.exitCode = 1;
+        return;
+    }
+    if (!(await fileExists(buildAbs))) {
+        console.error(colors.error('Build artifact not found.'));
+        if (!opts.json) {
+            console.error(colors.dim(`Expected: ${path.relative(process.cwd(), buildAbs)}`));
+        }
+        process.exitCode = 1;
+        return;
+    }
+    const snapId = String(snapshotId || '').trim();
+    if (!snapId) {
+        console.error(colors.error('Missing <snapshotId>.'));
+        process.exitCode = 1;
+        return;
+    }
+    // Normalize manual upstreams early (repeatable --upstream)
+    const manualUpstreams = normalizePurls(opts.upstreams ?? []);
+    // 1) Ecosystem (NO auto detection; used only for subject formatting)
+    const ecoRaw = String(opts.ecosystem ?? 'auto').trim().toLowerCase();
+    const allowed = ['npm', 'composer', 'pypi', 'docker', 'generic'];
+    let ecosystem;
+    if (ecoRaw === 'auto' || ecoRaw === '') {
+        ecosystem = await detectEcosystemForSubjectOnly(git.root); // ✅ still auto, but no deps
+    }
+    else if (allowed.includes(ecoRaw)) {
+        ecosystem = ecoRaw;
+    }
+    else {
+        console.error(colors.error(`Invalid --ecosystem "${ecoRaw}". Expected auto|${allowed.join('|')}.`));
+        process.exitCode = 1;
+        return;
+    }
+    // 2) Fetch snapshot meta (must be fully published/anchored or FAIL)
+    const sSnap = spinner('Fetching published snapshot info ...', opts.json);
+    let snapshotMeta;
+    try {
+        snapshotMeta = await fetchSnapshot(snapId);
+        sSnap.succeed(colors.success('Snapshot is published & anchored.'));
+    }
+    catch (e) {
+        sSnap.fail(colors.error('Snapshot is not ready.'));
+        console.error(colors.error(String(e?.message || e)));
+        if (!opts.json) {
+            console.error(colors.dim('Tip: run `codequill publish` and wait for confirmation before attesting.'));
+        }
+        process.exitCode = 1;
+        return;
+    }
+    // 3) Compute artifact sha256 hex digest + metadata
+    const sHash = spinner('Hashing artifact (sha256) ...', opts.json);
+    let artifactDigest;
+    let artifactSize = 0;
+    try {
+        const fh = await fs.open(buildAbs, 'r');
+        const stat = await fh.stat();
+        artifactSize = Number(stat.size || 0);
+        artifactDigest = await sha256File(buildAbs);
+        sHash.succeed(colors.success(`sha256: ${artifactDigest.slice(0, 16)}… (${artifactSize} bytes)`));
+    }
+    catch (e) {
+        sHash.fail(colors.error('Failed to hash artifact.'));
+        console.error(colors.error(String(e?.message || e)));
+        process.exitCode = 1;
+        return;
+    }
+    // 4) Build subject (required; ecosystem-aware; generic uses repo-purl by snapshot meta)
+    const subject = await buildSubject({
+        ecosystem,
+        repoRoot: git.root,
+        artifactPathAbs: buildAbs,
+        artifactDigestHex: artifactDigest,
+        snapshotMeta,
+    });
+    // 5) Resolve upstreams (MANUAL ONLY; no lockfile-derived deps)
+    let upstreams;
+    const mergedPurls = normalizePurls(opts.upstreams ?? []);
+    if (mergedPurls.length > 0) {
+        const sUp = spinner('Resolving upstream attestations ...', opts.json);
+        try {
+            const resolved = await resolveUpstreamsByPurl(mergedPurls);
+            upstreams = resolved.map((r) => ({
+                purl: r.purl,
+                attestation: {
+                    attestation_id: r.attestation_id,
+                    artifact_digest: r.artifact_digest,
+                    chain_id: r.chain_id,
+                    tx_hash: r.tx_hash,
+                    explorer_url: r.explorer_url,
+                },
+            }));
+            sUp.succeed(colors.success(`Upstreams: ${upstreams.length}/${mergedPurls.length} resolved on CodeQuill`));
+        }
+        catch (e) {
+            sUp.fail(colors.error('Failed to resolve upstreams.'));
+            console.error(colors.error(String(e?.message || e)));
+            process.exitCode = 1;
+            return;
+        }
+    }
+    // 6) Build manifest JSON (locked v1)
+    const manifest = buildAttestationManifest({
+        ecosystem,
+        snapshot: snapshotMeta,
+        artifact: {
+            kind: ecosystem === 'npm' ? 'npm' : ecosystem === 'docker' ? 'docker' : 'file',
+            algorithm: 'sha256',
+            digest: artifactDigest,
+            name: path.basename(buildAbs),
+            size: artifactSize,
+            media_type: guessMediaType(buildAbs),
+        },
+        subject,
+        upstreams
+    });
+    // 7) Serialize + gzip (like publish)
+    const rawJson = Buffer.from(JSON.stringify(manifest, null, 2), 'utf8');
+    const sGz = spinner('Compressing attestation manifest (gzip) ...', opts.json);
+    let gzBytes;
+    try {
+        gzBytes = gzipSync(rawJson, { level: 9 });
+        sGz.succeed(colors.success(`Compressed (${rawJson.length} → ${gzBytes.length} bytes).`));
+    }
+    catch (e) {
+        sGz.fail(colors.error('Failed to gzip manifest.'));
+        console.error(colors.error(String(e?.message || e)));
+        process.exitCode = 1;
+        return;
+    }
+    // 7.5) Human confirmation (default NO)
+    if (!opts.noConfirm && !opts.json) {
+        const ok = await confirmDangerousAction('You are about to create an irreversible attestation', [
+            `  Repo        ${snapshotMeta.repository_name}`,
+            `  Snapshot    ${snapshotMeta.snapshot_id}`,
+            `  Commit      ${shortCommit(snapshotMeta.commit_hash)}`,
+            `  Artifact    ${path.relative(process.cwd(), buildAbs)}`,
+            `  Digest      ${artifactDigest}`,
+            `  Subject     ${subject.purl}`,
+            `  Upstreams   ${upstreams?.length ?? 0}`,
+        ], 'This action will permanently anchor a claim on-chain.');
+        if (!ok) {
+            log(colors.dim('Attestation cancelled.'));
+            return;
+        }
+    }
+    // 8) Upload attestation manifest
+    const sPub = spinner('Publishing attestation ...', opts.json);
+    let res;
+    try {
+        const form = new FormData();
+        form.append('snapshot_id', snapshotMeta.snapshot_id);
+        form.append('ecosystem', ecosystem);
+        form.append('artifact_digest', artifactDigest);
+        form.append('subject_purl', subject.purl);
+        form.append('version', manifest.version);
+        form.append('manifest_encoding', 'gzip');
+        const gzFilename = `attestation-${artifactDigest.slice(0, 12)}.json.gz`;
+        const file = new File([new Uint8Array(gzBytes)], gzFilename, { type: 'application/gzip' });
+        form.append('manifest', file);
+        res = await apiClient.postMultipart('/v1/cli/attest', form);
+        sPub.succeed(colors.success('Attestation submitted.'));
+    }
+    catch (e) {
+        sPub.fail(colors.error('Attestation failed.'));
+        console.error(colors.error(String(e?.message || e)));
+        process.exitCode = 1;
+        return;
+    }
+    // 9) Output
+    if (opts.json) {
+        console.log(JSON.stringify(res, null, 2));
+    }
+    else {
+        console.log('');
+        console.log(colors.bold('🧾 Attestation started'));
+        console.log(colors.dim('────────────────────────────────────────'));
+        console.log(colors.dim('Attestation'));
+        console.log(`  Snapshot ID     ${snapshotMeta.snapshot_id}`);
+        console.log(`  Repo            ${snapshotMeta.repository_name}`);
+        console.log(`  Commit          ${shortCommit(snapshotMeta.commit_hash)}`);
+        console.log(`  Merkle Root     ${snapshotMeta.merkle_root}`);
+        console.log(`  Attestation URL ${getBaseUrl() + '/a/' + res.attestation_id}`);
+        console.log('');
+        console.log(colors.dim('Artifact'));
+        console.log(`  File            ${path.relative(process.cwd(), buildAbs)}`);
+        console.log(`  Digest          ${artifactDigest}`);
+        console.log(`  Algorithm       sha256`);
+        console.log('');
+        console.log(colors.dim('Subject'));
+        console.log(`  PURL            ${subject.purl}`);
+        console.log(`  Name            ${subject.name}`);
+        console.log(`  Version         ${subject.version}`);
+        if (upstreams && upstreams.length > 0) {
+            console.log('');
+            console.log(colors.dim('Upstreams'));
+            for (const u of upstreams) {
+                console.log(`  ${u.purl}`);
+            }
+        }
+        console.log('');
+        console.log(colors.dim('Chain'));
+        console.log(`  Tx Hash         ${res.tx_hash}`);
+        if (res.chain_id)
+            console.log(`  Chain ID        ${res.chain_id}`);
+        if (res.explorer_url)
+            console.log(`  Explorer        ${res.explorer_url}`);
+        console.log(colors.dim('────────────────────────────────────────'));
+    }
+    if (opts.noWait) {
+        log(colors.dim('Note: skipping confirmation wait (--no-wait).'));
+        return;
+    }
+    // 10) Wait confirmation
+    const confTarget = Math.max(1, Number(opts.confirmations ?? 1));
+    try {
+        await waitForTxConfirmation({
+            txHash: res.tx_hash,
+            confirmations: confTarget,
+            timeoutMs: opts.timeoutMs,
+            silent: opts.json,
+        });
+        log(colors.success(`✓ Confirmed on-chain (${confTarget} confirmation${confTarget > 1 ? 's' : ''}).`));
+    }
+    catch (e) {
+        console.error(colors.error(String(e?.message || e)));
+        process.exitCode = 1;
+    }
+}
+export function registerAttestCommand(program) {
+    program
+        .command('attest <build> <snapshotId>')
+        .description('Create an attestation linking a build artifact to a published snapshot, and resolve upstream attestations by purl (manual --upstream only)')
+        .option('--ecosystem <type>', 'Ecosystem (auto|npm|composer|pypi|docker|generic). Default: auto', 'auto')
+        .option('--upstream <purl>', 'Upstream purl to resolve to an anchored CodeQuill attestation (repeatable)', collectRepeatableString, [])
+        .option('--confirmations <n>', 'Wait for N confirmations (default: 1)', (v) => parseInt(v, 10))
+        .option('--timeout <ms>', 'Timeout waiting for confirmation (ms)', (v) => parseInt(v, 10))
+        .option('--no-wait', 'Do not wait for confirmation')
+        .option('--no-confirm', 'Skip confirmation prompt (for CI)', false)
+        .option('--json', 'Output result in JSON format', false)
+        .action(async (build, snapshotId, options) => {
+        await handleAttest(build, snapshotId, {
+            ecosystem: options.ecosystem,
+            upstreams: Array.isArray(options.upstream) ? options.upstream : [],
+            confirmations: options.confirmations,
+            timeoutMs: options.timeout,
+            noWait: options.wait === false,
+            noConfirm: !!options.noConfirm,
+            json: !!options.json
+        });
+    });
+}
+function collectRepeatableString(value, previous) {
+    const v = String(value ?? '').trim();
+    if (!v)
+        return previous;
+    return [...previous, v];
+}
+function uniqStrings(xs) {
+    const out = [];
+    const seen = new Set();
+    for (const x of xs) {
+        const k = String(x).trim();
+        if (!k)
+            continue;
+        const kk = k.toLowerCase();
+        if (seen.has(kk))
+            continue;
+        seen.add(kk);
+        out.push(k);
+    }
+    return out;
+}
+function normalizePurls(purls) {
+    return uniqStrings((purls ?? [])
+        .map((p) => (typeof p === 'string' ? p.trim() : ''))
+        .filter((p) => !!p));
+}
+function guessMediaType(p) {
+    const lower = p.toLowerCase();
+    if (lower.endsWith('.tgz') || lower.endsWith('.tar.gz'))
+        return 'application/gzip';
+    if (lower.endsWith('.zip'))
+        return 'application/zip';
+    if (lower.endsWith('.json'))
+        return 'application/json';
+    if (lower.endsWith('.tar'))
+        return 'application/x-tar';
+    return undefined;
+}
+async function detectEcosystemForSubjectOnly(repoRoot) {
+    // NO lockfiles. Only identity files.
+    if (await fileExists(path.join(repoRoot, 'package.json')))
+        return 'npm';
+    if (await fileExists(path.join(repoRoot, 'composer.json')))
+        return 'composer';
+    if (await fileExists(path.join(repoRoot, 'pyproject.toml')))
+        return 'pypi';
+    return 'generic';
+}
+async function buildSubject(args) {
+    // Must always return name/version/purl.
+    if (args.ecosystem === 'npm') {
+        // Best effort: package.json (more reliable than lock for project identity)
+        const pkgJson = path.join(args.repoRoot, 'package.json');
+        if (await fileExists(pkgJson)) {
+            try {
+                const raw = await readFileUtf8(pkgJson);
+                const obj = JSON.parse(raw);
+                const name = String(obj?.name || '').trim();
+                const version = String(obj?.version || '').trim();
+                if (name && version) {
+                    const purl = toPurlNpm(name, version);
+                    return { purl, name, version };
+                }
+            }
+            catch {
+                /* fallback */
+            }
+        }
+    }
+    if (args.ecosystem === 'composer') {
+        const compJson = path.join(args.repoRoot, 'composer.json');
+        if (await fileExists(compJson)) {
+            try {
+                const raw = await readFileUtf8(compJson);
+                const obj = JSON.parse(raw);
+                const name = String(obj?.name || '').trim(); // vendor/package
+                const version = String(obj?.version || '').trim(); // may not exist
+                if (name) {
+                    const v = version || 'unknown';
+                    const purl = toPurlComposer(name, v);
+                    return { purl, name, version: v };
+                }
+            }
+            catch {
+                /* fallback */
+            }
+        }
+    }
+    if (args.ecosystem === 'pypi') {
+        // v1: best effort from pyproject.toml (very rough)
+        const pyproj = path.join(args.repoRoot, 'pyproject.toml');
+        if (await fileExists(pyproj)) {
+            try {
+                const raw = await readFileUtf8(pyproj);
+                const name = matchTomlValue(raw, 'name');
+                const version = matchTomlValue(raw, 'version');
+                if (name && version) {
+                    const purl = toPurlPypi(name, version);
+                    return { purl, name, version };
+                }
+            }
+            catch {
+                /* fallback */
+            }
+        }
+    }
+    const repoName = String(args.snapshotMeta.repository_name || '').trim(); // expected "org/repo"
+    const commit = String(args.snapshotMeta.commit_hash || '').trim();
+    if (repoName && commit && repoName.includes('/')) {
+        const purl = toPurlGithubRepo(repoName, commit);
+        // For display, name = "org/repo", version = commit SHA
+        return { purl, name: repoName, version: commit };
+    }
+    // Fallback: digest-derived identity
+    const baseName = path.basename(args.artifactPathAbs) || 'artifact';
+    const version = `sha256:${args.artifactDigestHex}`;
+    const purl = toPurlGeneric(baseName, version);
+    return { purl, name: baseName, version };
+}
+function matchTomlValue(raw, key) {
+    // extremely light parser: key = "value"
+    const re = new RegExp(`\\b${escapeRegExp(key)}\\s*=\\s*"(.*?)"`);
+    const m = raw.match(re);
+    return m && m[1] ? String(m[1]).trim() : null;
+}
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+function toPurlGeneric(name, version) {
+    return `pkg:generic/${encodeURIComponent(name)}@${encodeURIComponent(version)}`;
+}
+function toPurlGithubRepo(repoName, commit) {
+    // repoName should be "org/repo"
+    const [org, repo] = repoName.split('/', 2);
+    if (!org || !repo) {
+        // fallback (still deterministic)
+        return `pkg:github/${encodeURIComponent(repoName)}@${encodeURIComponent(commit)}`;
+    }
+    return `pkg:github/${encodeURIComponent(org)}/${encodeURIComponent(repo)}@${encodeURIComponent(commit)}`;
+}
+function toPurlNpm(name, version) {
+    const encoded = name.startsWith('@')
+        ? `%40${encodeURIComponent(name.slice(1)).replace(/%2F/g, '/')}`
+        : encodeURIComponent(name);
+    return `pkg:npm/${encoded}@${encodeURIComponent(version)}`;
+}
+function toPurlComposer(name, version) {
+    return `pkg:composer/${encodeURIComponent(name)}@${encodeURIComponent(version)}`;
+}
+function toPurlPypi(name, version) {
+    return `pkg:pypi/${encodeURIComponent(name)}@${encodeURIComponent(version)}`;
+}
+async function resolveUpstreamsByPurl(purls) {
+    if (!purls.length)
+        return [];
+    const body = { purls };
+    const res = await apiClient.post('/v1/cli/upstreams/resolve', body);
+    const out = Array.isArray(res?.resolved) ? res.resolved : [];
+    // Filter only anchored (must have chain fields)
+    return out.filter((r) => r && r.purl && r.attestation_id && r.artifact_digest && r.chain_id && r.tx_hash && r.explorer_url);
+}
+//# sourceMappingURL=attest.js.map

package/dist/commands/attest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.js","sourceRoot":"","sources":["../../src/commands/attest.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EACH,wBAAwB,GAI3B,MAAM,8CAA8C,CAAC;AAEtD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAuBnD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,UAAkB,EAAE,IAAmB;IACzF,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO;IAEnC,MAAM,GAAG,GAAG,CAAC,GAAG,IAAW,EAAE,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;QACjF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;QACV,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,2DAA2D;IAC3D,MAAM,eAAe,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAE7D,qEAAqE;IACrE,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACrE,MAAM,OAAO,GAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAE9E,IAAI,SAAoB,CAAC;IACzB,IAAI,MAAM,KAAK,MAAM,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACrC,SAAS,GAAG,MAAM,6BAA6B,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,4BAA4B;IAC3F,CAAC;SAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAmB,CAAC,EAAE,CAAC;QAC/C,SAAS,GAAG,MAAmB,CAAC;IACpC,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,MAAM,oBAAoB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACpG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,oEAAoE;IACpE,MAAM,KAAK,GAAG,OAAO,CAAC,sCAAsC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzE,IAAI,YAAyB,CAAC;IAC9B,IAAI,CAAC;QACD,YAAY,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC;QAC3C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,0EAA0E,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,mDAAmD;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,+BAA+B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,cAAsB,CAAC;IAC3B,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,IAAI,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;QAC7B,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC;QACtC,cAAc,GAAG,MAAM,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,YAAY,SAAS,CAAC,CAAC,CAAC;IACrG,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,wFAAwF;IACxF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC;QAC/B,SAAS;QACT,QAAQ,EAAE,GAAG,CAAC,IAAI;QAClB,eAAe,EAAE,QAAQ;QACzB,iBAAiB,EAAE,cAAc;QACjC,YAAY;KACf,CAAC,CAAC;IAEH,+DAA+D;IAC/D,IAAI,SAA8C,CAAC;IAEnD,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;IAEzD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,OAAO,CAAC,qCAAqC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;YAC3D,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE;oBACT,cAAc,EAAE,CAAC,CAAC,cAAc;oBAChC,eAAe,EAAE,CAAC,CAAC,eAAe;oBAClC,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,OAAO,EAAE,CAAC,CAAC,OAAO;oBAClB,YAAY,EAAE,CAAC,CAAC,YAAY;iBAC/B;aACJ,CAAC,CAAC,CAAC;YACJ,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,SAAS,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,wBAAwB,CAAC,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,CAAM,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACrB,OAAO;QACX,CAAC;IACL,CAAC;IAED,qCAAqC;IACrC,MAAM,QAAQ,GAAwB,wBAAwB,CAAC;QAC3D,SAAS;QACT,QAAQ,EAAE,YAAY;QACtB,QAAQ,EAAE;YACN,IAAI,EAAE,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YAC9E,SAAS,EAAE,QAAQ;YACnB,MAAM,EAAE,cAAc;YACtB,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7B,IAAI,EAAE,YAAY;YAClB,UAAU,EAAE,cAAc,CAAC,QAAQ,CAAC;SACvC;QACD,OAAO;QACP,SAAS;KACZ,CAAC,CAAC;IAEH,qCAAqC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAEvE,MAAM,GAAG,GAAG,OAAO,CAAC,6CAA6C,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9E,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACD,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,OAAO,CAAC,MAAM,MAAM,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC;IAC7F,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,uCAAuC;IACvC,IAAI,CAAC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,sBAAsB,CAAC,qDAAqD,EAAE;YAC3F,iBAAiB,YAAY,CAAC,eAAe,EAAE;YAC/C,iBAAiB,YAAY,CAAC,WAAW,EAAE;YAC3C,iBAAiB,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE;YACxD,iBAAiB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,EAAE;YACzD,iBAAiB,cAAc,EAAE;YACjC,iBAAiB,OAAO,CAAC,IAAI,EAAE;YAC/B,iBAAiB,SAAS,EAAE,MAAM,IAAI,CAAC,EAAE;SAC5C,EAAE,uDAAuD,CAAC,CAAC;QAC5D,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC1C,OAAO;QACX,CAAC;IACL,CAAC;IAED,iCAAiC;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,4BAA4B,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,IAAI,GAAsB,CAAC;IAE3B,IAAI,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,YAAY,CAAC,WAAW,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;QAEzC,MAAM,UAAU,GAAG,eAAe,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAE9B,GAAG,GAAG,MAAM,SAAS,CAAC,aAAa,CAAoB,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAE/E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACX,CAAC;IAED,YAAY;IACZ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;QACpE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,eAAe,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,qBAAqB,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,CAAC,GAAG,CAAC,qBAAqB,YAAY,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,qBAAqB,UAAU,EAAE,GAAG,KAAK,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,qBAAqB,cAAc,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;QACxC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACpD,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBACxB,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC/B,CAAC;QACL,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACnE,IAAI,GAAG,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC,CAAC;QACjE,OAAO;IACX,CAAC;IAED,wBAAwB;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC;QACD,MAAM,qBAAqB,CAAC;YACxB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,aAAa,EAAE,UAAU;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,MAAM,EAAE,IAAI,CAAC,IAAI;SACpB,CAAC,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,yBAAyB,UAAU,gBAAgB,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1G,CAAC;IAAC,OAAO,CAAM,EAAE,CAAC;QACd,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACzB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IAClD,OAAO;SACF,OAAO,CAAC,6BAA6B,CAAC;SACtC,WAAW,CAAC,4IAA4I,CAAC;SACzJ,MAAM,CAAC,oBAAoB,EAAE,kEAAkE,EAAE,MAAM,CAAC;SACxG,MAAM,CACH,mBAAmB,EACnB,4EAA4E,EAC5E,uBAAuB,EACvB,EAAc,CACjB;SACA,MAAM,CAAC,qBAAqB,EAAE,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SAC9F,MAAM,CAAC,gBAAgB,EAAE,uCAAuC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;SACzF,MAAM,CAAC,WAAW,EAAE,8BAA8B,CAAC;SACnD,MAAM,CAAC,cAAc,EAAE,mCAAmC,EAAE,KAAK,CAAC;SAClE,MAAM,CAAC,QAAQ,EAAE,8BAA8B,EAAE,KAAK,CAAC;SACvD,MAAM,CAAC,KAAK,EAAE,KAAa,EAAE,UAAkB,EAAE,OAAY,EAAE,EAAE;QAC9D,MAAM,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAClE,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,SAAS,EAAE,OAAO,CAAC,OAAO;YAC1B,MAAM,EAAE,OAAO,CAAC,IAAI,KAAK,KAAK;YAC9B,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS;YAC9B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;SACvB,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACX,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa,EAAE,QAAkB;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,IAAI,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxB,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,EAAY;IAC7B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACnC,OAAO,WAAW,CACd,CAAC,KAAK,IAAI,EAAE,CAAC;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SACnD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC1B,CAAC;AACN,CAAC;AAED,SAAS,cAAc,CAAC,CAAS;IAC7B,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACnF,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,iBAAiB,CAAC;IACrD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,kBAAkB,CAAC;IACvD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACvD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,6BAA6B,CAAC,QAAgB;IACzD,qCAAqC;IACrC,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IAC9E,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3E,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAM3B;IACG,wCAAwC;IAExC,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAC3B,2EAA2E;QAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACzD,IAAI,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC;gBACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;gBAClD,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACtC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACnC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,cAAc;YAClB,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC3D,IAAI,MAAM,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACzC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,iBAAiB;gBAC9D,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,gBAAgB;gBACnE,IAAI,IAAI,EAAE,CAAC;oBACP,MAAM,CAAC,GAAG,OAAO,IAAI,SAAS,CAAC;oBAC/B,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;oBACrC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;gBACtC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,cAAc;YAClB,CAAC;QACL,CAAC;IACL,CAAC;IAED,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QAC5B,mDAAmD;QACnD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAC1D,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACD,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC;gBACvC,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBACzC,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;gBAC/C,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACvC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBACnC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACL,cAAc;YAClB,CAAC;QACL,CAAC;IACL,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,sBAAsB;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAElE,IAAI,QAAQ,IAAI,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,uDAAuD;QACvD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IACrD,CAAC;IAED,oCAAoC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC;IACnE,MAAM,OAAO,GAAG,UAAU,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,cAAc,CAAC,GAAW,EAAE,GAAW;IAC5C,wCAAwC;IACxC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC3B,OAAO,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,OAAe;IAChD,OAAO,eAAe,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB,EAAE,MAAc;IACtD,gCAAgC;IAChC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAChB,iCAAiC;QACjC,OAAO,cAAc,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,OAAO,cAAc,kBAAkB,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,OAAe;IAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAChC,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE;QAChE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,WAAW,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;IACjD,OAAO,gBAAgB,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACrF,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,OAAe;IAC7C,OAAO,YAAY,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,KAAe;IACjD,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAE7B,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAA2B,2BAA2B,EAAE,IAAI,CAAC,CAAC;IAE9F,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7D,gDAAgD;IAChD,OAAO,GAAG,CAAC,MAAM,CACb,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,cAAc,IAAI,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,CAChH,CAAC;AACN,CAAC"}