pray-cli 1.9.1 → 1.10.0

package/dist/manifest/validate.js

@@ -0,0 +1,43 @@
+import { isAbsolute, win32 } from "node:path";
+import { PrayError } from "../errors.js";
+export function validateManifestPaths(manifest) {
+    for (const target of manifest.targets) {
+        for (const path of [
+            ...target.outputs,
+            ...target.skills,
+            ...target.commands,
+            ...target.rules,
+        ]) {
+            validateDestinationPath(path);
+        }
+    }
+    for (const packageEntry of manifest.packages) {
+        if (packageEntry.path)
+            validateProjectRelativePath(packageEntry.path);
+        if (packageEntry.file)
+            validateDestinationPath(packageEntry.file);
+    }
+    for (const local of manifest.local)
+        validateProjectRelativePath(local.path);
+}
+export function validateProjectRelativePath(value) {
+    const path = value.trim();
+    if (path.length === 0 || isAbsolute(path) || win32.isAbsolute(path)) {
+        throw PrayError.manifest(`project path must be repository-relative: ${value}`);
+    }
+    const parts = path.replaceAll("\\", "/").split("/");
+    if (parts.includes("..") || path.includes("\0")) {
+        throw PrayError.manifest(`project path escapes repository root: ${value}`);
+    }
+    if (parts.every((part) => part.length === 0 || part === ".")) {
+        throw PrayError.manifest(`project path must be repository-relative: ${value}`);
+    }
+    return path;
+}
+export function validateDestinationPath(value) {
+    if (value.trim().startsWith("~")) {
+        throw PrayError.manifest(`project path must be repository-relative: ${value}`);
+    }
+    return validateProjectRelativePath(value);
+}
+//# sourceMappingURL=validate.js.map

package/dist/manifest/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../src/manifest/validate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,MAAM,UAAU,qBAAqB,CAAC,QAAkB;IACtD,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI;YACjB,GAAG,MAAM,CAAC,OAAO;YACjB,GAAG,MAAM,CAAC,MAAM;YAChB,GAAG,MAAM,CAAC,QAAQ;YAClB,GAAG,MAAM,CAAC,KAAK;SAChB,EAAE,CAAC;YACF,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC7C,IAAI,YAAY,CAAC,IAAI;YAAE,2BAA2B,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,YAAY,CAAC,IAAI;YAAE,uBAAuB,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,KAAK;QAAE,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACpE,MAAM,SAAS,CAAC,QAAQ,CACtB,6CAA6C,KAAK,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,SAAS,CAAC,QAAQ,CAAC,yCAAyC,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,SAAS,CAAC,QAAQ,CACtB,6CAA6C,KAAK,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,CAAC,QAAQ,CACtB,6CAA6C,KAAK,EAAE,CACrD,CAAC;IACJ,CAAC;IACD,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC"}

package/dist/registry/cache.d.ts

@@ -0,0 +1,2 @@
+export declare function registryCacheDirectory(projectRoot: string, sourceKey: string, packageName: string, version: string, artifactHash?: string): string;
+//# sourceMappingURL=cache.d.ts.map

package/dist/registry/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/registry/cache.ts"],"names":[],"mappings":"AAQA,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAqBR"}

package/dist/registry/cache.js

@@ -0,0 +1,16 @@
+import { join } from "node:path";
+import { sha256Hex } from "../hashing.js";
+import { resolveDistributionPath, validatePackageName, validatePathSegment, } from "../sync/path-safety.js";
+export function registryCacheDirectory(projectRoot, sourceKey, packageName, version, artifactHash) {
+    validatePackageName(packageName);
+    validatePathSegment(version, "package version");
+    const identifier = [
+        sourceKey,
+        packageName,
+        version,
+        artifactHash ?? "no-artifact-hash",
+    ].join(":");
+    const digest = sha256Hex(identifier).slice(0, 16);
+    return resolveDistributionPath(projectRoot, join(".pray", "cache", "registry", packageName.replaceAll("/", "-"), version, digest));
+}
+//# sourceMappingURL=cache.js.map

package/dist/registry/cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../src/registry/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,SAAiB,EACjB,WAAmB,EACnB,OAAe,EACf,YAAqB;IAErB,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjC,mBAAmB,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG;QACjB,SAAS;QACT,WAAW;QACX,OAAO;QACP,YAAY,IAAI,kBAAkB;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,uBAAuB,CAC5B,WAAW,EACX,IAAI,CACF,OAAO,EACP,OAAO,EACP,UAAU,EACV,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAChC,OAAO,EACP,MAAM,CACP,CACF,CAAC;AACJ,CAAC"}

package/dist/registry/index.d.ts

@@ -1,4 +1,6 @@
 import type { ManifestPackage } from "../manifest/types.js";
+export { registryCacheDirectory } from "./cache.js";
+export { registryArtifactSignature } from "./signature.js";
 import type { RegistryPackageMetadata, RegistryPackageResolution, RegistryPackageVersion } from "./types.js";
 export declare function resolveRegistryPackageRoot(projectRoot: string, sourceUrl: string, declaration: ManifestPackage, options?: RegistryResolveOptions): Promise<RegistryPackageResolution>;
 export declare function resolveLocalRegistryPackageRoot(projectRoot: string, sourceKey: string, sourceRoot: string, declaration: ManifestPackage, options?: RegistryResolveOptions): Promise<RegistryPackageResolution>;
@@ -11,7 +13,5 @@ export declare function parseMetadata(text: string): RegistryPackageMetadata;
 export declare function versionFromHash(entry: Record<string, unknown>): RegistryPackageVersion;
 export declare function selectPackageVersion(metadata: RegistryPackageMetadata, constraint: string, preferredVersion?: string): RegistryPackageVersion;
 export declare function registryLatestVersionLabel(metadata: RegistryPackageMetadata): string | undefined;
-export declare function registryCacheDirectory(projectRoot: string, sourceKey: string, packageName: string, version: string, artifactHash?: string): string;
-export declare function registryArtifactSignature(artifactBytes: Buffer, treeHash: string, signer: string): string;
 export { joinUrl } from "../http/client.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/registry/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAM5D,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CA2CpC;AAED,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CAyDpC;AAED,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,CAAC,CAalC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CASnE;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,sBAAsB,CAoBxB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,MAAM,GACxB,sBAAsB,CA8BxB;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,uBAAuB,GAChC,MAAM,GAAG,SAAS,CAWpB;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,MAAM,EACf,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAiBR;AAED,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CASR;AAyFD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAc5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,KAAK,EACV,uBAAuB,EACvB,yBAAyB,EACzB,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB,wBAAsB,0BAA0B,CAC9C,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CAuCpC;AAED,wBAAsB,+BAA+B,CACnD,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,eAAe,EAC5B,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CAqDpC;AAED,MAAM,WAAW,sBAAsB;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,wBAAsB,oBAAoB,CACxC,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,uBAAuB,CAAC,CAclC;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CASnE;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,sBAAsB,CAoBxB;AAED,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,uBAAuB,EACjC,UAAU,EAAE,MAAM,EAClB,gBAAgB,CAAC,EAAE,MAAM,GACxB,sBAAsB,CA8BxB;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,uBAAuB,GAChC,MAAM,GAAG,SAAS,CAWpB;AAmDD,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/registry/index.js

@@ -1,16 +1,20 @@
-import { existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
 import semver from "semver";
-import { unpackPraypkg } from "../archive/praypkg.js";
 import { versionSatisfies } from "../constraint.js";
 import { PrayError } from "../errors.js";
-import { sha256Hex, sha256Prefixed } from "../hashing.js";
 import { httpGet, httpGetText, isLocalSourceUrl, joinUrl, } from "../http/client.js";
 import { findPrayspecFile, parsePackageSpec, treeHashForRoot, } from "../package-spec/index.js";
+import { rejectAbsoluteArtifactPath, resolveDistributionPath, validatePackageName, } from "../sync/path-safety.js";
+import { registryCacheDirectory } from "./cache.js";
+import { installArtifactToCache, requireIntegrityFields } from "./install.js";
+export { registryCacheDirectory } from "./cache.js";
+export { registryArtifactSignature } from "./signature.js";
 export async function resolveRegistryPackageRoot(projectRoot, sourceUrl, declaration, options = {}) {
     const metadata = await fetchPackageMetadata(sourceUrl, declaration.name);
     const registryLatestVersion = registryLatestVersionLabel(metadata);
     const selected = selectPackageVersion(metadata, declaration.constraint, options.preferredVersion);
+    requireIntegrityFields(declaration.name, selected);
     const cacheDirectory = registryCacheDirectory(projectRoot, sourceUrl, declaration.name, selected.version, selected.artifactHash);
     if (cacheReady(cacheDirectory, selected)) {
         return {
@@ -22,12 +26,8 @@ export async function resolveRegistryPackageRoot(projectRoot, sourceUrl, declara
     if (options.offline) {
         throw PrayError.resolution(offlinePackageError(declaration.name, selected.version));
     }
-    if (existsSync(cacheDirectory)) {
-        rmSync(cacheDirectory, { recursive: true, force: true });
-    }
-    mkdirSync(cacheDirectory, { recursive: true });
     const artifactBytes = await readArtifactBytes(sourceUrl, selected.artifact);
-    validateAndUnpack(cacheDirectory, declaration, selected, artifactBytes);
+    installArtifactToCache(cacheDirectory, declaration, selected, artifactBytes);
     return {
         root: cacheDirectory,
         signerFingerprint: selected.signerFingerprint,
@@ -44,6 +44,7 @@ export async function resolveLocalRegistryPackageRoot(projectRoot, sourceKey, so
     const metadata = parseMetadata(readFileSync(metadataPath, "utf8"));
     const registryLatestVersion = registryLatestVersionLabel(metadata);
     const selected = selectPackageVersion(metadata, declaration.constraint, options.preferredVersion);
+    requireIntegrityFields(declaration.name, selected);
     const cacheDirectory = registryCacheDirectory(projectRoot, sourceKey, declaration.name, selected.version, selected.artifactHash);
     if (cacheReady(cacheDirectory, selected)) {
         return {
@@ -55,12 +56,8 @@ export async function resolveLocalRegistryPackageRoot(projectRoot, sourceKey, so
     if (options.offline) {
         throw PrayError.resolution(offlinePackageError(declaration.name, selected.version));
     }
-    if (existsSync(cacheDirectory)) {
-        rmSync(cacheDirectory, { recursive: true, force: true });
-    }
-    mkdirSync(cacheDirectory, { recursive: true });
     const artifactBytes = readLocalArtifactBytes(sourceRoot, selected.artifact);
-    validateAndUnpack(cacheDirectory, declaration, selected, artifactBytes);
+    installArtifactToCache(cacheDirectory, declaration, selected, artifactBytes);
     return {
         root: cacheDirectory,
         signerFingerprint: selected.signerFingerprint,
@@ -68,6 +65,7 @@ export async function resolveLocalRegistryPackageRoot(projectRoot, sourceKey, so
     };
 }
 export async function fetchPackageMetadata(sourceUrl, packageName) {
+    validatePackageName(packageName);
     if (isLocalSourceUrl(sourceUrl)) {
         const metadataPath = join(sourceUrl, "v1", "packages", `${packageName}.json`);
         return parseMetadata(readFileSync(metadataPath, "utf8"));
@@ -138,49 +136,6 @@ export function registryLatestVersionLabel(metadata) {
     }
     return highest?.version;
 }
-export function registryCacheDirectory(projectRoot, sourceKey, packageName, version, artifactHash) {
-    const identifier = [
-        sourceKey,
-        packageName,
-        version,
-        artifactHash ?? "no-artifact-hash",
-    ].join(":");
-    const digest = sha256Hex(identifier).slice(0, 16);
-    return join(projectRoot, ".pray", "cache", "registry", packageName.replaceAll("/", "-"), version, digest);
-}
-export function registryArtifactSignature(artifactBytes, treeHash, signer) {
-    const payload = Buffer.concat([
-        artifactBytes,
-        Buffer.from("\0"),
-        Buffer.from(treeHash, "utf8"),
-        Buffer.from("\0"),
-        Buffer.from(signer, "utf8"),
-    ]);
-    return sha256Prefixed(payload);
-}
-function validateAndUnpack(cacheDirectory, declaration, selected, artifactBytes) {
-    if (selected.artifactHash) {
-        const artifactHash = sha256Prefixed(artifactBytes);
-        if (artifactHash !== selected.artifactHash) {
-            throw PrayError.integrity(`package artifact hash mismatch for ${declaration.name} ${selected.version}`);
-        }
-    }
-    unpackPraypkg(artifactBytes, cacheDirectory);
-    const specPath = findPrayspecFile(cacheDirectory);
-    const spec = parsePackageSpec(readFileSync(specPath, "utf8"));
-    if (spec.name !== declaration.name) {
-        throw PrayError.resolution(`package path ${cacheDirectory} declares ${spec.name}, expected ${declaration.name}`);
-    }
-    if (spec.version !== selected.version) {
-        throw PrayError.resolution(`package ${declaration.name} version ${spec.version} does not match registry version ${selected.version}`);
-    }
-    if (selected.treeHash) {
-        const treeHash = treeHashForRoot(cacheDirectory, spec);
-        if (treeHash !== selected.treeHash) {
-            throw PrayError.integrity(`package tree hash mismatch for ${declaration.name} ${selected.version}`);
-        }
-    }
-}
 function cacheReady(cacheDirectory, selected) {
     if (!existsSync(cacheDirectory)) {
         return false;
@@ -188,7 +143,9 @@ function cacheReady(cacheDirectory, selected) {
     try {
         const specPath = findPrayspecFile(cacheDirectory);
         const spec = parsePackageSpec(readFileSync(specPath, "utf8"));
-        return spec.version === selected.version;
+        return (spec.version === selected.version &&
+            selected.treeHash !== undefined &&
+            treeHashForRoot(cacheDirectory, spec) === selected.treeHash);
     }
     catch {
         return false;
@@ -198,19 +155,15 @@ async function readArtifactBytes(sourceUrl, artifact) {
     if (isLocalSourceUrl(sourceUrl)) {
         return readLocalArtifactBytes(sourceUrl, artifact);
     }
-    if (artifact.startsWith("http://") || artifact.startsWith("https://")) {
-        return httpGet(artifact);
-    }
+    rejectAbsoluteArtifactPath(artifact);
     return httpGet(joinUrl(sourceUrl, artifact));
 }
 function readLocalArtifactBytes(sourceRoot, artifact) {
-    if (artifact.startsWith("http://") || artifact.startsWith("https://")) {
-        throw PrayError.unsupported("remote artifact URLs in local distribution require async fetch");
-    }
     if (artifact.startsWith("file://")) {
-        return readFileSync(artifact.slice("file://".length));
+        return readFileSync(resolveDistributionPath(sourceRoot, artifact.slice("file://".length)));
     }
-    const path = join(sourceRoot, artifact);
+    rejectAbsoluteArtifactPath(artifact);
+    const path = resolveDistributionPath(sourceRoot, artifact);
     if (!existsSync(path)) {
         throw PrayError.resolution(`package artifact missing at ${path}`);
     }

package/dist/registry/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACtE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,OAAO,GACR,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAOlC,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,SAAiB,EACjB,WAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,sBAAsB,CAC3C,WAAW,EACX,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,YAAY,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,qBAAqB;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,UAAU,CACxB,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,iBAAiB,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAExE,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB,EACnB,SAAiB,EACjB,UAAkB,EAClB,WAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,YAAY,GAAG,IAAI,CACvB,UAAU,EACV,IAAI,EACJ,UAAU,EACV,GAAG,WAAW,CAAC,IAAI,OAAO,CAC3B,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,CAAC,UAAU,CACxB,WAAW,WAAW,CAAC,IAAI,8BAA8B,UAAU,IAAI;YACrE,WAAW,YAAY,kDAAkD,WAAW,CAAC,UAAU,MAAM;YACrG,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,MAAM,cAAc,GAAG,sBAAsB,CAC3C,WAAW,EACX,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,YAAY,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,qBAAqB;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,UAAU,CACxB,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,SAAS,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE/C,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,iBAAiB,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAExE,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,WAAmB;IAEnB,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,IAAI,CACvB,SAAS,EACT,IAAI,EACJ,UAAU,EACV,GAAG,WAAW,OAAO,CACtB,CAAC;QACF,OAAO,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,aAAa,CAClB,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,WAAW,OAAO,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG3B,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAA8B;IAE9B,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE;QACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACvD,iBAAiB,EAAE,KAAK,CAAC,kBAAkB;YACzC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAClC,CAAC,CAAC,SAAS;QACb,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,UAAkB,EAClB,gBAAyB;IAEzB,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,CAC/D,CAAC;QACF,IAAI,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,QAA4C,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,CAAC,UAAU,CACxB,2BAA2B,QAAQ,CAAC,IAAI,cAAc,UAAU,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAiC;IAEjC,IAAI,OAA2C,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,EAAE,OAAO,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,SAAiB,EACjB,WAAmB,EACnB,OAAe,EACf,YAAqB;IAErB,MAAM,UAAU,GAAG;QACjB,SAAS;QACT,WAAW;QACX,OAAO;QACP,YAAY,IAAI,kBAAkB;KACnC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAClD,OAAO,IAAI,CACT,WAAW,EACX,OAAO,EACP,OAAO,EACP,UAAU,EACV,WAAW,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,EAChC,OAAO,EACP,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,aAAqB,EACrB,QAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,aAAa;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,iBAAiB,CACxB,cAAsB,EACtB,WAA4B,EAC5B,QAAgC,EAChC,aAAqB;IAErB,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,YAAY,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,SAAS,CAAC,SAAS,CACvB,sCAAsC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAC7E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,UAAU,CACxB,gBAAgB,cAAc,aAAa,IAAI,CAAC,IAAI,cAAc,WAAW,CAAC,IAAI,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,SAAS,CAAC,UAAU,CACxB,WAAW,WAAW,CAAC,IAAI,YAAY,IAAI,CAAC,OAAO,oCAAoC,QAAQ,CAAC,OAAO,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACnC,MAAM,SAAS,CAAC,SAAS,CACvB,kCAAkC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,cAAsB,EACtB,QAAgC;IAEhC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,QAAgB;IAEhB,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,QAAgB;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,MAAM,SAAS,CAAC,WAAW,CACzB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,SAAS,CAAC,UAAU,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB,EAAE,OAAe;IAC/D,OAAO,WAAW,WAAW,IAAI,OAAO,4CAA4C,CAAC;AACvF,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/registry/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EACL,OAAO,EACP,WAAW,EACX,gBAAgB,EAChB,OAAO,GACR,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,0BAA0B,EAC1B,uBAAuB,EACvB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACpD,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAQ3D,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,WAAmB,EACnB,SAAiB,EACjB,WAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,SAAS,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;IACzE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,sBAAsB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,sBAAsB,CAC3C,WAAW,EACX,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,YAAY,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,qBAAqB;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,UAAU,CACxB,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE7E,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,WAAmB,EACnB,SAAiB,EACjB,UAAkB,EAClB,WAA4B,EAC5B,UAAkC,EAAE;IAEpC,MAAM,YAAY,GAAG,IAAI,CACvB,UAAU,EACV,IAAI,EACJ,UAAU,EACV,GAAG,WAAW,CAAC,IAAI,OAAO,CAC3B,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,CAAC,UAAU,CACxB,WAAW,WAAW,CAAC,IAAI,8BAA8B,UAAU,IAAI;YACrE,WAAW,YAAY,kDAAkD,WAAW,CAAC,UAAU,MAAM;YACrG,kDAAkD,CACrD,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IACnE,MAAM,qBAAqB,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,oBAAoB,CACnC,QAAQ,EACR,WAAW,CAAC,UAAU,EACtB,OAAO,CAAC,gBAAgB,CACzB,CAAC;IACF,sBAAsB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,sBAAsB,CAC3C,WAAW,EACX,SAAS,EACT,WAAW,CAAC,IAAI,EAChB,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,YAAY,CACtB,CAAC;IAEF,IAAI,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,qBAAqB;SACtB,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,SAAS,CAAC,UAAU,CACxB,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CACxD,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5E,sBAAsB,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE7E,OAAO;QACL,IAAI,EAAE,cAAc;QACpB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;QAC7C,qBAAqB;KACtB,CAAC;AACJ,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,SAAiB,EACjB,WAAmB;IAEnB,mBAAmB,CAAC,WAAW,CAAC,CAAC;IACjC,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,IAAI,CACvB,SAAS,EACT,IAAI,EACJ,UAAU,EACV,GAAG,WAAW,OAAO,CACtB,CAAC;QACF,OAAO,aAAa,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,aAAa,CAClB,MAAM,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,eAAe,WAAW,OAAO,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAG3B,CAAC;IACF,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;KAC/D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,KAA8B;IAE9B,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;QAChC,YAAY,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS;QAC3E,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE;QACN,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7C,CAAC,CAAC,EAAE;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QACvD,iBAAiB,EAAE,KAAK,CAAC,kBAAkB;YACzC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC;YAClC,CAAC,CAAC,SAAS;QACb,WAAW,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS;QACxE,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;KACjE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,QAAiC,EACjC,UAAkB,EAClB,gBAAyB;IAEzB,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACtC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,CAC/D,CAAC;QACF,IAAI,SAAS,IAAI,gBAAgB,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACjE,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,QAA4C,CAAC;IACjD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,CAAC;YACnD,SAAS;QACX,CAAC;QACD,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9D,QAAQ,GAAG,OAAO,CAAC;QACrB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,SAAS,CAAC,UAAU,CACxB,2BAA2B,QAAQ,CAAC,IAAI,cAAc,UAAU,EAAE,CACnE,CAAC;IACJ,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,QAAiC;IAEjC,IAAI,OAA2C,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,OAAO,GAAG,OAAO,CAAC;QACpB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,EAAE,OAAO,CAAC;AAC1B,CAAC;AAED,SAAS,UAAU,CACjB,cAAsB,EACtB,QAAgC;IAEhC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAChC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,OAAO,CACL,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;YACjC,QAAQ,CAAC,QAAQ,KAAK,SAAS;YAC/B,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAC5D,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,SAAiB,EACjB,QAAgB;IAEhB,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC;IACD,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAkB,EAAE,QAAgB;IAClE,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,YAAY,CACjB,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CACtE,CAAC;IACJ,CAAC;IACD,0BAA0B,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,uBAAuB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC3D,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,SAAS,CAAC,UAAU,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB,EAAE,OAAe;IAC/D,OAAO,WAAW,WAAW,IAAI,OAAO,4CAA4C,CAAC;AACvF,CAAC;AAED,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/registry/install.d.ts

@@ -0,0 +1,5 @@
+import type { ManifestPackage } from "../manifest/types.js";
+import type { RegistryPackageVersion } from "./types.js";
+export declare function installArtifactToCache(cacheDirectory: string, declaration: ManifestPackage, selected: RegistryPackageVersion, artifactBytes: Buffer): void;
+export declare function requireIntegrityFields(packageName: string, selected: RegistryPackageVersion): void;
+//# sourceMappingURL=install.d.ts.map

package/dist/registry/install.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/registry/install.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAO5D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,wBAAgB,sBAAsB,CACpC,cAAc,EAAE,MAAM,EACtB,WAAW,EAAE,eAAe,EAC5B,QAAQ,EAAE,sBAAsB,EAChC,aAAa,EAAE,MAAM,GACpB,IAAI,CAmBN;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,sBAAsB,GAC/B,IAAI,CAWN"}

package/dist/registry/install.js

@@ -0,0 +1,55 @@
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, } from "node:fs";
+import { unpackPraypkg } from "../archive/praypkg.js";
+import { PrayError } from "../errors.js";
+import { sha256Prefixed } from "../hashing.js";
+import { findPrayspecFile, parsePackageSpec, treeHashForRoot, } from "../package-spec/index.js";
+import { verifyRegistrySignature } from "./signature.js";
+export function installArtifactToCache(cacheDirectory, declaration, selected, artifactBytes) {
+    requireIntegrityFields(declaration.name, selected);
+    const stagingDirectory = `${cacheDirectory}.staging`;
+    rmSync(stagingDirectory, { recursive: true, force: true });
+    mkdirSync(stagingDirectory, { recursive: true });
+    const unpackedDirectory = `${stagingDirectory}/unpacked`;
+    mkdirSync(unpackedDirectory, { recursive: true });
+    try {
+        validateAndUnpack(unpackedDirectory, declaration, selected, artifactBytes);
+        if (existsSync(cacheDirectory)) {
+            rmSync(cacheDirectory, { recursive: true, force: true });
+        }
+        renameSync(unpackedDirectory, cacheDirectory);
+    }
+    catch (error) {
+        rmSync(stagingDirectory, { recursive: true, force: true });
+        throw error;
+    }
+    rmSync(stagingDirectory, { recursive: true, force: true });
+}
+export function requireIntegrityFields(packageName, selected) {
+    if (!selected.artifactHash) {
+        throw PrayError.integrity(`package ${packageName} ${selected.version} is missing artifact_hash`);
+    }
+    if (!selected.treeHash) {
+        throw PrayError.integrity(`package ${packageName} ${selected.version} is missing tree_hash`);
+    }
+}
+function validateAndUnpack(cacheDirectory, declaration, selected, artifactBytes) {
+    const artifactHash = sha256Prefixed(artifactBytes);
+    if (artifactHash !== selected.artifactHash) {
+        throw PrayError.integrity(`package artifact hash mismatch for ${declaration.name} ${selected.version}`);
+    }
+    verifyRegistrySignature(declaration.name, selected, artifactBytes);
+    unpackPraypkg(artifactBytes, cacheDirectory);
+    const specPath = findPrayspecFile(cacheDirectory);
+    const spec = parsePackageSpec(readFileSync(specPath, "utf8"));
+    if (spec.name !== declaration.name) {
+        throw PrayError.resolution(`package path ${cacheDirectory} declares ${spec.name}, expected ${declaration.name}`);
+    }
+    if (spec.version !== selected.version) {
+        throw PrayError.resolution(`package ${declaration.name} version ${spec.version} does not match registry version ${selected.version}`);
+    }
+    const treeHash = treeHashForRoot(cacheDirectory, spec);
+    if (treeHash !== selected.treeHash) {
+        throw PrayError.integrity(`package tree hash mismatch for ${declaration.name} ${selected.version}`);
+    }
+}
+//# sourceMappingURL=install.js.map

package/dist/registry/install.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"install.js","sourceRoot":"","sources":["../../src/registry/install.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,MAAM,GACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,MAAM,UAAU,sBAAsB,CACpC,cAAsB,EACtB,WAA4B,EAC5B,QAAgC,EAChC,aAAqB;IAErB,sBAAsB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,gBAAgB,GAAG,GAAG,cAAc,UAAU,CAAC;IACrD,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3D,SAAS,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,MAAM,iBAAiB,GAAG,GAAG,gBAAgB,WAAW,CAAC;IACzD,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,iBAAiB,CAAC,iBAAiB,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC3E,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,UAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,KAAK,CAAC;IACd,CAAC;IACD,MAAM,CAAC,gBAAgB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,WAAmB,EACnB,QAAgC;IAEhC,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3B,MAAM,SAAS,CAAC,SAAS,CACvB,WAAW,WAAW,IAAI,QAAQ,CAAC,OAAO,2BAA2B,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,SAAS,CACvB,WAAW,WAAW,IAAI,QAAQ,CAAC,OAAO,uBAAuB,CAClE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CACxB,cAAsB,EACtB,WAA4B,EAC5B,QAAgC,EAChC,aAAqB;IAErB,MAAM,YAAY,GAAG,cAAc,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,YAAY,KAAK,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,CACvB,sCAAsC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CAC7E,CAAC;IACJ,CAAC;IAED,uBAAuB,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;IACnE,aAAa,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,UAAU,CACxB,gBAAgB,cAAc,aAAa,IAAI,CAAC,IAAI,cAAc,WAAW,CAAC,IAAI,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,MAAM,SAAS,CAAC,UAAU,CACxB,WAAW,WAAW,CAAC,IAAI,YAAY,IAAI,CAAC,OAAO,oCAAoC,QAAQ,CAAC,OAAO,EAAE,CAC1G,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,SAAS,CAAC,SAAS,CACvB,kCAAkC,WAAW,CAAC,IAAI,IAAI,QAAQ,CAAC,OAAO,EAAE,CACzE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/registry/signature.d.ts

@@ -0,0 +1,4 @@
+import type { RegistryPackageVersion } from "./types.js";
+export declare function registryArtifactSignature(artifactBytes: Buffer, treeHash: string, signer: string): string;
+export declare function verifyRegistrySignature(packageName: string, selected: RegistryPackageVersion, artifactBytes: Buffer): void;
+//# sourceMappingURL=signature.d.ts.map

package/dist/registry/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/registry/signature.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAEzD,wBAAgB,yBAAyB,CACvC,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,MAAM,CASR;AAED,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,sBAAsB,EAChC,aAAa,EAAE,MAAM,GACpB,IAAI,CAmBN"}

package/dist/registry/signature.js

@@ -0,0 +1,25 @@
+import { PrayError } from "../errors.js";
+import { sha256Prefixed } from "../hashing.js";
+export function registryArtifactSignature(artifactBytes, treeHash, signer) {
+    const payload = Buffer.concat([
+        artifactBytes,
+        Buffer.from("\0"),
+        Buffer.from(treeHash, "utf8"),
+        Buffer.from("\0"),
+        Buffer.from(signer, "utf8"),
+    ]);
+    return sha256Prefixed(payload);
+}
+export function verifyRegistrySignature(packageName, selected, artifactBytes) {
+    if (!selected.signature) {
+        return;
+    }
+    if (!selected.signer || !selected.treeHash) {
+        throw PrayError.integrity(`package signature metadata incomplete for ${packageName} ${selected.version}`);
+    }
+    const expected = registryArtifactSignature(artifactBytes, selected.treeHash, selected.signer);
+    if (expected !== selected.signature) {
+        throw PrayError.integrity(`package signature mismatch for ${packageName} ${selected.version}`);
+    }
+}
+//# sourceMappingURL=signature.js.map

package/dist/registry/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/registry/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,MAAM,UAAU,yBAAyB,CACvC,aAAqB,EACrB,QAAgB,EAChB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,aAAa;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;KAC5B,CAAC,CAAC;IACH,OAAO,cAAc,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,WAAmB,EACnB,QAAgC,EAChC,aAAqB;IAErB,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO;IACT,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,SAAS,CAAC,SAAS,CACvB,6CAA6C,WAAW,IAAI,QAAQ,CAAC,OAAO,EAAE,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,yBAAyB,CACxC,aAAa,EACb,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,MAAM,CAChB,CAAC;IACF,IAAI,QAAQ,KAAK,QAAQ,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,SAAS,CAAC,SAAS,CACvB,kCAAkC,WAAW,IAAI,QAAQ,CAAC,OAAO,EAAE,CACpE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/render/compose-dest.d.ts

@@ -0,0 +1,5 @@
+import type { ManifestTarget } from "../manifest/types.js";
+export declare function composeWritesHeader(target: ManifestTarget, output: string, projectHeader: boolean): boolean;
+export declare function composeHeaderText(target: ManifestTarget, output: string, projectHeader: boolean): string | undefined;
+export declare function ensureHtmlCommentComposeDest(output: string): void;
+//# sourceMappingURL=compose-dest.d.ts.map

package/dist/render/compose-dest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-dest.d.ts","sourceRoot":"","sources":["../../src/render/compose-dest.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAwB3D,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,OAAO,GACrB,OAAO,CAKT;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,OAAO,GACrB,MAAM,GAAG,SAAS,CASpB;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAmBjE"}

package/dist/render/compose-dest.js

@@ -0,0 +1,57 @@
+import { basename, extname } from "node:path";
+import { PrayError } from "../errors.js";
+const HTML_COMMENT_EXTENSIONS = new Set([".md", ".markdown", ".html", ".htm"]);
+const BINARY_EXTENSIONS = new Set([
+    ".png",
+    ".jpg",
+    ".jpeg",
+    ".gif",
+    ".webp",
+    ".ico",
+    ".pdf",
+    ".zip",
+    ".gz",
+    ".tgz",
+    ".tar",
+    ".wasm",
+    ".bin",
+    ".woff",
+    ".woff2",
+    ".exe",
+    ".dylib",
+    ".so",
+]);
+export function composeWritesHeader(target, output, projectHeader) {
+    if (target.header !== undefined) {
+        return target.header;
+    }
+    return projectHeader && isAgentsMarkdown(output);
+}
+export function composeHeaderText(target, output, projectHeader) {
+    if (!composeWritesHeader(target, output, projectHeader)) {
+        return undefined;
+    }
+    const name = basename(output);
+    const guidance = isAgentsMarkdown(output)
+        ? `Do not edit managed blocks in \`${name}\` or provisioned files under \`.agents/\`.`
+        : `Do not edit managed blocks in \`${name}\`.`;
+    return `<!-- pray:0 ignore-comments -->\n\n# Agent context\n\n${guidance}\nTo change shared guidance, update \`Prayfile\` and run \`pray install\`.`;
+}
+export function ensureHtmlCommentComposeDest(output) {
+    const dest = output.replaceAll("\\", "/");
+    const extension = extname(output).toLowerCase();
+    if (HTML_COMMENT_EXTENSIONS.has(extension)) {
+        return;
+    }
+    if (extension === ".json") {
+        throw PrayError.render(`compose cannot write JSON; use file: "${dest}" for unmarked bytes`);
+    }
+    if (BINARY_EXTENSIONS.has(extension)) {
+        throw PrayError.render(`compose cannot write a binary file; use file: "${dest}" for unmarked bytes`);
+    }
+    throw PrayError.render(`compose cannot write this file type; use file: "${dest}" for unmarked bytes`);
+}
+function isAgentsMarkdown(output) {
+    return basename(output) === "AGENTS.md";
+}
+//# sourceMappingURL=compose-dest.js.map

package/dist/render/compose-dest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compose-dest.js","sourceRoot":"","sources":["../../src/render/compose-dest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAGzC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/E,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,KAAK;CACN,CAAC,CAAC;AAEH,MAAM,UAAU,mBAAmB,CACjC,MAAsB,EACtB,MAAc,EACd,aAAsB;IAEtB,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,aAAa,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAsB,EACtB,MAAc,EACd,aAAsB;IAEtB,IAAI,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,CAAC;QACxD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC;QACvC,CAAC,CAAC,mCAAmC,IAAI,6CAA6C;QACtF,CAAC,CAAC,mCAAmC,IAAI,KAAK,CAAC;IACjD,OAAO,yDAAyD,QAAQ,4EAA4E,CAAC;AACvJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,MAAc;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,IAAI,uBAAuB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,OAAO;IACT,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,SAAS,CAAC,MAAM,CACpB,yCAAyC,IAAI,sBAAsB,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,CAAC,MAAM,CACpB,kDAAkD,IAAI,sBAAsB,CAC7E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,CAAC,MAAM,CACpB,mDAAmD,IAAI,sBAAsB,CAC9E,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,QAAQ,CAAC,MAAM,CAAC,KAAK,WAAW,CAAC;AAC1C,CAAC"}

package/dist/render/dest.d.ts

@@ -0,0 +1,8 @@
+import type { Lockfile, ProvisionedFileRecord } from "../lockfile/types.js";
+import type { ResolvedProject } from "../resolve/types.js";
+import { type PlannedProvisionedFile } from "./provisioned.js";
+export declare function provisionedLockRecords(project: ResolvedProject): ProvisionedFileRecord[];
+export declare function materializeProvisionedExports(project: ResolvedProject, previousLockfile?: Lockfile): void;
+export type ProvisionedDestinationStatus = "write" | "unchanged" | "update";
+export declare function provisionedDestinationStatus(project: ResolvedProject, file: PlannedProvisionedFile, previousLockfile?: Lockfile): ProvisionedDestinationStatus;
+//# sourceMappingURL=dest.d.ts.map

package/dist/render/dest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dest.d.ts","sourceRoot":"","sources":["../../src/render/dest.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,QAAQ,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAS3D,OAAO,EAEL,KAAK,sBAAsB,EAE5B,MAAM,kBAAkB,CAAC;AAE1B,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,eAAe,GACvB,qBAAqB,EAAE,CAazB;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,eAAe,EACxB,gBAAgB,CAAC,EAAE,QAAQ,GAC1B,IAAI,CAYN;AAED,MAAM,MAAM,4BAA4B,GAAG,OAAO,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE5E,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,eAAe,EACxB,IAAI,EAAE,sBAAsB,EAC5B,gBAAgB,CAAC,EAAE,QAAQ,GAC1B,4BAA4B,CAa9B"}

package/dist/render/dest.js

@@ -0,0 +1,120 @@
+import { closeSync, constants, ftruncateSync, mkdirSync, readFileSync, unlinkSync, } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { PrayError } from "../errors.js";
+import { sha256Prefixed } from "../hashing.js";
+import { validateDestinationPath } from "../manifest/validate.js";
+import { createBytes, destinationKind, openRegular, readRegularBytes, writeAll, } from "./destination-io.js";
+import { ensureSafeDestinationAncestors } from "./path-guard.js";
+import { expectedProvisionedBytes, plannedProvisionedFiles, } from "./provisioned.js";
+export function provisionedLockRecords(project) {
+    return plannedProvisionedFiles(project).map((file) => {
+        const expected = expectedProvisionedBytes(file.source, project.manifest.symbols ?? {});
+        return {
+            path: file.path.replaceAll("\\", "/"),
+            content_hash: sha256Prefixed(expected),
+            package: file.package,
+            export: file.export,
+        };
+    });
+}
+export function materializeProvisionedExports(project, previousLockfile) {
+    const planned = plannedProvisionedFiles(project);
+    const previous = previousMap(previousLockfile);
+    const plannedPaths = new Set(planned.map((file) => file.path.replaceAll("\\", "/")));
+    for (const file of planned) {
+        writeLeaf(project, file, previous);
+    }
+    if (previousLockfile) {
+        pruneDropped(project, previousLockfile, plannedPaths);
+    }
+}
+export function provisionedDestinationStatus(project, file, previousLockfile) {
+    validateDestinationPath(file.path);
+    ensureSafeDestinationAncestors(project.projectRoot, file.path, file.path);
+    const expected = expectedProvisionedBytes(file.source, project.manifest.symbols ?? {});
+    return classifyDestination(resolve(project.projectRoot, file.path), file.path, expected, previousMap(previousLockfile).get(file.path.replaceAll("\\", "/")));
+}
+function previousMap(lockfile) {
+    const records = new Map();
+    for (const record of lockfile?.provisioned ?? []) {
+        records.set(record.path, record);
+    }
+    return records;
+}
+function writeLeaf(project, file, previous) {
+    validateDestinationPath(file.path);
+    ensureSafeDestinationAncestors(project.projectRoot, file.path, file.path);
+    const destination = resolve(project.projectRoot, file.path);
+    const expected = expectedProvisionedBytes(file.source, project.manifest.symbols ?? {});
+    const record = previous.get(file.path.replaceAll("\\", "/"));
+    const status = classifyDestination(destination, file.path, expected, record);
+    if (status === "write") {
+        mkdirSync(dirname(destination), { recursive: true });
+        ensureSafeDestinationAncestors(project.projectRoot, file.path, file.path);
+        createBytes(destination, file.path, expected);
+        return;
+    }
+    if (status === "unchanged") {
+        return;
+    }
+    if (!record) {
+        throw PrayError.render(`missing lock ownership for \`${file.path}\``);
+    }
+    ensureSafeDestinationAncestors(project.projectRoot, file.path, file.path);
+    updateBytes(destination, file.path, expected, record.content_hash);
+}
+function classifyDestination(destination, display, expected, record) {
+    const kind = destinationKind(destination);
+    if (kind === "missing")
+        return "write";
+    if (kind === "symlink") {
+        throw PrayError.render(`refusing to write \`${display}\` because it is a symbolic link`);
+    }
+    if (kind !== "regular") {
+        throw PrayError.render(`refusing to write \`${display}\`; destination is not a regular file`);
+    }
+    const onDisk = readRegularBytes(destination, display);
+    if (onDisk.equals(expected))
+        return "unchanged";
+    if (record && sha256Prefixed(onDisk) === record.content_hash)
+        return "update";
+    if (record) {
+        throw PrayError.render(`refusing to overwrite \`${display}\`; it was provisioned and then edited`);
+    }
+    throw PrayError.render(`refusing to overwrite \`${display}\`; it already exists and is not the expected provisioned file`);
+}
+function pruneDropped(project, previous, plannedPaths) {
+    for (const record of previous.provisioned ?? []) {
+        validateDestinationPath(record.path);
+        if (plannedPaths.has(record.path)) {
+            continue;
+        }
+        const destination = resolve(project.projectRoot, record.path);
+        ensureSafeDestinationAncestors(project.projectRoot, record.path, record.path);
+        if (destinationKind(destination) !== "regular") {
+            continue;
+        }
+        const onDisk = readRegularBytes(destination, record.path);
+        if (sha256Prefixed(onDisk) === record.content_hash) {
+            ensureSafeDestinationAncestors(project.projectRoot, record.path, record.path);
+            unlinkSync(destination);
+        }
+    }
+}
+function updateBytes(path, display, bytes, authorizedHash) {
+    const descriptor = openRegular(path, display, constants.O_RDWR);
+    try {
+        const onDisk = readFileSync(descriptor);
+        if (onDisk.equals(bytes))
+            return;
+        if (sha256Prefixed(onDisk) !== authorizedHash) {
+            throw PrayError.render(`refusing to overwrite \`${display}\`; it was provisioned and then edited`);
+        }
+        ftruncateSync(descriptor, 0);
+        writeAll(descriptor, bytes);
+    }
+    finally {
+        closeSync(descriptor);
+    }
+}
+//# sourceMappingURL=dest.js.map