upstream-radar 0.4.0

package/dist/src/scan.js

@@ -0,0 +1,293 @@
+import { createHash } from 'node:crypto';
+import { lstat, readFile, readdir, readlink, } from 'node:fs/promises';
+import { dirname, isAbsolute, relative, resolve, sep } from 'node:path';
+import { decideVerdict, stricterVerdict } from './policy.js';
+import { REPORT_SCHEMA, } from './types.js';
+import { TOOL_VERSION } from './version.js';
+const MAX_FILES = 10_000;
+const MAX_TOTAL_BYTES = 64 * 1024 * 1024;
+const MAX_MANIFEST_BYTES = 1024 * 1024;
+const EXCLUDED_DIRECTORIES = new Set(['.git', 'node_modules']);
+const LOCKFILES = ['pnpm-lock.yaml', 'package-lock.json', 'yarn.lock', 'bun.lock', 'bun.lockb'];
+const LIFECYCLE_SCRIPTS = ['preinstall', 'install', 'postinstall', 'prepare'];
+const NATIVE_SUFFIXES = ['.node', '.dll', '.dylib', '.so', '.exe'];
+function addFinding(findings, code, severity, summary, detail, evidence, remediation) {
+    const finding = { code, severity, summary, detail };
+    if (evidence !== undefined)
+        finding.evidence = evidence;
+    if (remediation !== undefined)
+        finding.remediation = remediation;
+    findings.push(finding);
+}
+function asRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return undefined;
+    return value;
+}
+function asString(value) {
+    return typeof value === 'string' ? value : undefined;
+}
+function insideRoot(root, candidate) {
+    const pathFromRoot = relative(root, candidate);
+    return pathFromRoot === '' || (!pathFromRoot.startsWith(`..${sep}`) && pathFromRoot !== '..' && !isAbsolute(pathFromRoot));
+}
+async function hashFile(path) {
+    const contents = await readFile(path);
+    return createHash('sha256').update(contents).digest('hex');
+}
+async function walkPackage(root, options, findings) {
+    const maxFiles = options.maxFiles ?? MAX_FILES;
+    const maxTotalBytes = options.maxTotalBytes ?? MAX_TOTAL_BYTES;
+    const files = [];
+    let bytesHashed = 0;
+    let entriesVisited = 0;
+    let incomplete = false;
+    async function visit(directory) {
+        if (incomplete)
+            return;
+        const entries = await readdir(directory, { withFileTypes: true });
+        entries.sort((left, right) => left.name.localeCompare(right.name));
+        for (const entry of entries) {
+            if (incomplete)
+                return;
+            if (entry.isDirectory() && EXCLUDED_DIRECTORIES.has(entry.name))
+                continue;
+            entriesVisited += 1;
+            if (entriesVisited > maxFiles) {
+                incomplete = true;
+                addFinding(findings, 'scan-budget-exceeded', 'high', 'Static scan coverage is incomplete', 'The package exceeded the configured filesystem-entry budget, so not every entry was inspected.', { entriesVisited, filesScanned: files.length, bytesHashed, maxFiles, maxTotalBytes }, 'Increase the scan budget in an isolated worker or reduce the artifact size.');
+                return;
+            }
+            const absolutePath = resolve(directory, entry.name);
+            const relativePath = relative(root, absolutePath).split(sep).join('/');
+            const stats = await lstat(absolutePath);
+            if (stats.isSymbolicLink()) {
+                const target = await readlink(absolutePath);
+                const resolvedTarget = resolve(dirname(absolutePath), target);
+                const escapesRoot = !insideRoot(root, resolvedTarget);
+                const digest = createHash('sha256').update(`symlink:${target}`).digest('hex');
+                files.push({ path: relativePath, size: stats.size, digest, mode: stats.mode, symlinkTarget: target });
+                addFinding(findings, escapesRoot ? 'symlink-escapes-package' : 'symlink-present', escapesRoot ? 'critical' : 'medium', escapesRoot ? 'Symlink escapes the package root' : 'Package contains a symlink', escapesRoot
+                    ? 'Following this link would access content outside the reviewed artifact.'
+                    : 'Symlinks need manual review because their target semantics vary across packaging and installation.', { path: relativePath, target }, 'Remove the symlink or replace it with an in-package regular file.');
+                continue;
+            }
+            if (stats.isDirectory()) {
+                await visit(absolutePath);
+                continue;
+            }
+            if (!stats.isFile())
+                continue;
+            if (bytesHashed + stats.size > maxTotalBytes) {
+                incomplete = true;
+                addFinding(findings, 'scan-budget-exceeded', 'high', 'Static scan coverage is incomplete', 'The package exceeded the configured file or byte budget, so not every file was hashed.', { filesScanned: files.length, bytesHashed, maxFiles, maxTotalBytes }, 'Increase the scan budget in an isolated worker or reduce the artifact size.');
+                return;
+            }
+            const digest = await hashFile(absolutePath);
+            files.push({ path: relativePath, size: stats.size, digest, mode: stats.mode });
+            bytesHashed += stats.size;
+        }
+    }
+    await visit(root);
+    return { files, bytesHashed, incomplete };
+}
+function artifactDigest(files) {
+    const aggregate = createHash('sha256');
+    for (const file of [...files].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0)) {
+        aggregate.update(file.path);
+        aggregate.update('\0');
+        aggregate.update(file.digest);
+        aggregate.update('\0');
+        aggregate.update(String(file.mode & 0o777));
+        aggregate.update('\n');
+    }
+    return `sha256:${aggregate.digest('hex')}`;
+}
+function collectDependencies(manifest) {
+    const groups = [
+        ['dependencies', 'dependency'],
+        ['devDependencies', 'devDependency'],
+        ['optionalDependencies', 'optionalDependency'],
+        ['peerDependencies', 'peerDependency'],
+    ];
+    const dependencies = [];
+    for (const [key, scope] of groups) {
+        const values = asRecord(manifest[key]);
+        if (values === undefined)
+            continue;
+        for (const [name, rawSpec] of Object.entries(values)) {
+            const spec = asString(rawSpec);
+            if (spec !== undefined)
+                dependencies.push({ name, scope, spec });
+        }
+    }
+    return dependencies.sort((left, right) => `${left.scope}:${left.name}`.localeCompare(`${right.scope}:${right.name}`));
+}
+function collectLifecycleScripts(manifest) {
+    const scripts = asRecord(manifest.scripts);
+    if (scripts === undefined)
+        return [];
+    const result = [];
+    for (const name of LIFECYCLE_SCRIPTS) {
+        const command = asString(scripts[name]);
+        if (command !== undefined)
+            result.push({ name, command });
+    }
+    return result;
+}
+function inspectLifecycleScripts(scripts, findings) {
+    for (const script of scripts) {
+        const pipesRemoteContentToShell = /(?:curl|wget)\b[^\n|;&]*(?:\||&&|;)\s*(?:ba)?sh\b/i.test(script.command);
+        const invokesRemoteDownload = /\b(?:curl|wget|Invoke-WebRequest|Start-BitsTransfer)\b|https?:\/\//i.test(script.command);
+        if (pipesRemoteContentToShell) {
+            addFinding(findings, 'install-script-remote-shell', 'critical', `Lifecycle script ${script.name} pipes remote content to a shell`, 'Remote content can change independently of the reviewed package and executes during installation.', { script: script.name }, 'Publish a prebuilt artifact and remove the remote shell pipeline.');
+        }
+        else if (invokesRemoteDownload) {
+            addFinding(findings, 'install-script-network-access', 'high', `Lifecycle script ${script.name} appears to access the network`, 'Install-time downloads are not covered by the package digest and require isolated review.', { script: script.name }, 'Vendor the artifact with a verified digest or build it in a provenance-producing CI workflow.');
+        }
+        else {
+            addFinding(findings, 'lifecycle-script-present', 'high', `Lifecycle script ${script.name} executes during installation`, 'Lifecycle scripts run before a plugin is admitted into DSH and therefore require review.', { script: script.name, command: script.command }, 'Prefer a prebuilt package with no install-time lifecycle scripts.');
+        }
+    }
+}
+function inspectDependencySpecs(dependencies, hasLockfile, dependencyGraphResolved, findings) {
+    const runtimeDependencies = dependencies.filter(dependency => dependency.scope !== 'devDependency');
+    if (!hasLockfile && !dependencyGraphResolved && runtimeDependencies.length > 0) {
+        addFinding(findings, 'dependency-graph-unlocked', 'medium', 'Runtime dependency graph is not locked in the reviewed source tree', 'A future resolution of the same manifest may select different transitive artifacts.', { runtimeDependencyCount: runtimeDependencies.length }, 'Commit a supported lockfile and verify every resolved artifact integrity.');
+    }
+    for (const dependency of dependencies) {
+        const isGit = /^(?:git\+|git:|github:|gitlab:|bitbucket:)|\.git(?:#|$)/i.test(dependency.spec);
+        const pinnedGitCommit = /#[0-9a-f]{40}(?:$|&)/i.test(dependency.spec) || /#[0-9a-f]{64}(?:$|&)/i.test(dependency.spec);
+        if (isGit && !pinnedGitCommit) {
+            addFinding(findings, 'mutable-git-dependency', 'high', `Git dependency ${dependency.name} is not pinned to a full commit`, 'Branches, tags and abbreviated revisions can resolve to different source over time.', { dependency: dependency.name, scope: dependency.scope, spec: dependency.spec }, 'Pin the dependency to a full commit and record the produced artifact digest.');
+        }
+        else if (/^https?:\/\//i.test(dependency.spec)) {
+            addFinding(findings, 'remote-tarball-dependency', 'high', `Dependency ${dependency.name} is fetched from a URL`, 'A URL dependency bypasses normal registry provenance and publisher controls.', { dependency: dependency.name, scope: dependency.scope, spec: dependency.spec }, 'Use a signed registry release or independently pin and verify the artifact digest.');
+        }
+        else if (['*', 'latest', 'next'].includes(dependency.spec.trim())) {
+            addFinding(findings, 'floating-dependency-spec', 'medium', `Dependency ${dependency.name} uses a floating version`, 'The same manifest can resolve to a different artifact without a source change.', { dependency: dependency.name, scope: dependency.scope, spec: dependency.spec }, 'Use a bounded version and a verified lockfile.');
+        }
+    }
+}
+function inspectFiles(root, files, findings) {
+    for (const file of files) {
+        const lowercase = file.path.toLowerCase();
+        if (NATIVE_SUFFIXES.some(suffix => lowercase.endsWith(suffix))) {
+            addFinding(findings, 'native-binary-present', 'high', `Native executable artifact found: ${file.path}`, 'Native artifacts cannot be fully explained by JavaScript source review and require provenance or sandbox analysis.', { path: file.path, sha256: file.digest, size: file.size }, 'Provide build provenance and a reproducible build for this artifact.');
+        }
+        if (lowercase === '.pnpmfile.cjs' || lowercase.endsWith('/.pnpmfile.cjs')) {
+            addFinding(findings, 'package-manager-hook-present', 'high', 'Package contains a pnpm resolution hook', 'A pnpm hook can rewrite dependency manifests during resolution.', { path: file.path }, 'Remove the hook or require dedicated human review.');
+        }
+    }
+    void root;
+}
+function inspectBundledDependencies(manifest, findings) {
+    const bundled = manifest.bundledDependencies ?? manifest.bundleDependencies;
+    if (Array.isArray(bundled) && bundled.length > 0) {
+        const names = bundled.filter((entry) => typeof entry === 'string');
+        addFinding(findings, 'bundled-dependencies-present', 'medium', 'Package embeds bundled dependencies', 'Bundled dependencies must be inspected from the artifact rather than trusted from registry metadata.', { dependencies: names }, 'Prefer normal locked dependencies or include the bundled components in an SBOM.');
+    }
+}
+function inspectNpmrc(root, files, findings) {
+    const npmrc = files.find(file => file.path === '.npmrc');
+    if (npmrc === undefined || npmrc.size > MAX_MANIFEST_BYTES)
+        return Promise.resolve();
+    return readFile(resolve(root, npmrc.path), 'utf8').then((contents) => {
+        if (/(?:_authToken|_password|username)\s*=/i.test(contents)) {
+            addFinding(findings, 'credential-in-npmrc', 'critical', 'Package contains registry credentials in .npmrc', 'Credential material must never be distributed inside a plugin artifact.', { path: '.npmrc' }, 'Revoke the credential, remove it from history and publish a clean artifact.');
+        }
+        if (/^registry\s*=\s*https?:\/\//im.test(contents)) {
+            addFinding(findings, 'custom-registry-config', 'medium', 'Package configures a custom npm registry', 'Dependency provenance depends on a registry selected by package-local configuration.', { path: '.npmrc' }, 'Review the registry endpoint and enforce it through consumer policy instead.');
+        }
+    });
+}
+function extractDshEvidence(manifest, root, files, scanIncomplete, findings) {
+    const dsh = asRecord(manifest.dsh);
+    const bundle = asRecord(dsh?.bundle);
+    const patch = asString(bundle?.patch);
+    if (patch === undefined)
+        return { isBundle: false };
+    const patchPath = resolve(root, patch);
+    if (!insideRoot(root, patchPath)) {
+        addFinding(findings, 'dsh-patch-escapes-package', 'critical', 'DSH bundle patch path escapes the package root', 'The manifest points DSH at configuration outside the reviewed artifact.', { patch }, 'Keep the bundle patch inside the published package.');
+    }
+    else if (!scanIncomplete) {
+        const patchRelative = relative(root, patchPath).split(sep).join('/');
+        const patchEntry = files.find(file => file.path === patchRelative);
+        if (patchEntry === undefined || patchEntry.symlinkTarget !== undefined) {
+            addFinding(findings, 'dsh-patch-not-regular-file', 'high', 'DSH bundle patch is missing or not a regular file', 'The published package does not contain the declared patch as a reviewed regular file.', { patch }, 'Publish the declared patch inside the package as a regular file.');
+        }
+    }
+    return { isBundle: true, patch };
+}
+async function readManifest(root) {
+    const manifestPath = resolve(root, 'package.json');
+    const stats = await lstat(manifestPath);
+    if (!stats.isFile())
+        throw new Error('package.json is not a regular file');
+    if (stats.size > MAX_MANIFEST_BYTES)
+        throw new Error('package.json exceeds the 1 MiB safety limit');
+    const parsed = JSON.parse(await readFile(manifestPath, 'utf8'));
+    const record = asRecord(parsed);
+    if (record === undefined)
+        throw new Error('package.json must contain a JSON object');
+    return record;
+}
+export async function scanDirectory(input, options = {}) {
+    const root = resolve(input);
+    const rootStats = await lstat(root);
+    if (!rootStats.isDirectory())
+        throw new Error(`scan target is not a directory: ${input}`);
+    const manifest = await readManifest(root);
+    const findings = [];
+    const walk = await walkPackage(root, options, findings);
+    const fileNames = new Set(walk.files.map(file => file.path));
+    const lockfiles = LOCKFILES.filter(lockfile => fileNames.has(lockfile));
+    const lifecycleScripts = collectLifecycleScripts(manifest);
+    const dependencies = collectDependencies(manifest);
+    inspectLifecycleScripts(lifecycleScripts, findings);
+    inspectDependencySpecs(dependencies, lockfiles.length > 0, options.dependencyGraphResolved ?? false, findings);
+    inspectBundledDependencies(manifest, findings);
+    inspectFiles(root, walk.files, findings);
+    await inspectNpmrc(root, walk.files, findings);
+    const dsh = extractDshEvidence(manifest, root, walk.files, walk.incomplete, findings);
+    findings.sort((left, right) => {
+        const order = { critical: 0, high: 1, medium: 2, low: 3, info: 4 };
+        return order[left.severity] - order[right.severity] || (left.code < right.code ? -1 : left.code > right.code ? 1 : 0);
+    });
+    const riskVerdict = decideVerdict(findings);
+    const coverageVerdict = 'incomplete';
+    return {
+        schema: REPORT_SCHEMA,
+        tool: { name: 'upstream-radar', version: TOOL_VERSION },
+        target: {
+            kind: 'directory',
+            name: asString(manifest.name) ?? '(unnamed)',
+            version: asString(manifest.version) ?? null,
+            artifactDigest: artifactDigest(walk.files),
+        },
+        dsh,
+        evidence: {
+            filesScanned: walk.files.length,
+            bytesHashed: walk.bytesHashed,
+            lockfiles,
+            packageManager: asString(manifest.packageManager) ?? null,
+            lifecycleScripts,
+            dependencies,
+        },
+        coverage: {
+            staticSource: walk.incomplete ? 'incomplete' : 'complete',
+            artifactIntegrity: 'locally-hashed',
+            registrySignature: 'not-checked',
+            dependencyResolution: options.dependencyGraphResolved === true ? 'resolved' : 'manifest-only',
+            provenance: 'not-checked',
+            sourceArtifactMatch: 'not-checked',
+            sandboxDetonation: 'not-run',
+        },
+        findings,
+        riskVerdict,
+        coverageVerdict,
+        verdict: stricterVerdict(riskVerdict, 'review'),
+    };
+}
+//# sourceMappingURL=scan.js.map

package/dist/src/scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan.js","sourceRoot":"","sources":["../../src/scan.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EACL,KAAK,EACL,QAAQ,EACR,OAAO,EACP,QAAQ,GACT,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAA;AACvE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC5D,OAAO,EACL,aAAa,GAOd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,SAAS,GAAG,MAAM,CAAA;AACxB,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AACxC,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAA;AACtC,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAA;AAC9D,MAAM,SAAS,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,CAAA;AAC/F,MAAM,iBAAiB,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,CAAU,CAAA;AACtF,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAA;AAoClE,SAAS,UAAU,CACjB,QAAmB,EACnB,IAAY,EACZ,QAAkB,EAClB,OAAe,EACf,MAAc,EACd,QAA8B,EAC9B,WAAoB;IAEpB,MAAM,OAAO,GAAY,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;IAC5D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAA;IACvD,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,CAAC,WAAW,GAAG,WAAW,CAAA;IAChE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAA;AACtD,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,SAAiB;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAC9C,OAAO,YAAY,KAAK,EAAE,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,YAAY,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAA;AAC5H,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAA;IACrC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC5D,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,IAAY,EAAE,OAAoB,EAAE,QAAmB;IAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,SAAS,CAAA;IAC9C,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,eAAe,CAAA;IAC9D,MAAM,KAAK,GAAkB,EAAE,CAAA;IAC/B,IAAI,WAAW,GAAG,CAAC,CAAA;IACnB,IAAI,cAAc,GAAG,CAAC,CAAA;IACtB,IAAI,UAAU,GAAG,KAAK,CAAA;IAEtB,KAAK,UAAU,KAAK,CAAC,SAAiB;QACpC,IAAI,UAAU;YAAE,OAAM;QACtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAA;QACjE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;QAElE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,UAAU;gBAAE,OAAM;YACtB,IAAI,KAAK,CAAC,WAAW,EAAE,IAAI,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAQ;YAEzE,cAAc,IAAI,CAAC,CAAA;YACnB,IAAI,cAAc,GAAG,QAAQ,EAAE,CAAC;gBAC9B,UAAU,GAAG,IAAI,CAAA;gBACjB,UAAU,CACR,QAAQ,EACR,sBAAsB,EACtB,MAAM,EACN,oCAAoC,EACpC,gGAAgG,EAChG,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,EACpF,6EAA6E,CAC9E,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,YAAY,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;YACnD,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACtE,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;YAEvC,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAA;gBAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,CAAA;gBAC7D,MAAM,WAAW,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;gBACrD,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;gBAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;gBACrG,UAAU,CACR,QAAQ,EACR,WAAW,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,iBAAiB,EAC3D,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EACnC,WAAW,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,4BAA4B,EAC/E,WAAW;oBACT,CAAC,CAAC,yEAAyE;oBAC3E,CAAC,CAAC,oGAAoG,EACxG,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,EAC9B,mEAAmE,CACpE,CAAA;gBACD,SAAQ;YACV,CAAC;YAED,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;gBACzB,SAAQ;YACV,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;gBAAE,SAAQ;YAE7B,IAAI,WAAW,GAAG,KAAK,CAAC,IAAI,GAAG,aAAa,EAAE,CAAC;gBAC7C,UAAU,GAAG,IAAI,CAAA;gBACjB,UAAU,CACR,QAAQ,EACR,sBAAsB,EACtB,MAAM,EACN,oCAAoC,EACpC,wFAAwF,EACxF,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,EACpE,6EAA6E,CAC9E,CAAA;gBACD,OAAM;YACR,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAA;YAC3C,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;YAC9E,WAAW,IAAI,KAAK,CAAC,IAAI,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IACjB,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,KAA6B;IACnD,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACtC,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClH,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACtB,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC7B,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACtB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAA;QAC3C,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxB,CAAC;IACD,OAAO,UAAU,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC5C,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAyB;IACpD,MAAM,MAAM,GAAgE;QAC1E,CAAC,cAAc,EAAE,YAAY,CAAC;QAC9B,CAAC,iBAAiB,EAAE,eAAe,CAAC;QACpC,CAAC,sBAAsB,EAAE,oBAAoB,CAAC;QAC9C,CAAC,kBAAkB,EAAE,gBAAgB,CAAC;KACvC,CAAA;IACD,MAAM,YAAY,GAAyB,EAAE,CAAA;IAE7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;QACtC,IAAI,MAAM,KAAK,SAAS;YAAE,SAAQ;QAClC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAA;YAC9B,IAAI,IAAI,KAAK,SAAS;gBAAE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAClE,CAAC;IACH,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;AACvH,CAAC;AAED,SAAS,uBAAuB,CAAC,QAAyB;IACxD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC1C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACpC,MAAM,MAAM,GAA8B,EAAE,CAAA;IAC5C,KAAK,MAAM,IAAI,IAAI,iBAAiB,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;QACvC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA2C,EAAE,QAAmB;IAC/F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,yBAAyB,GAAG,oDAAoD,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAC3G,MAAM,qBAAqB,GAAG,qEAAqE,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QAExH,IAAI,yBAAyB,EAAE,CAAC;YAC9B,UAAU,CACR,QAAQ,EACR,6BAA6B,EAC7B,UAAU,EACV,oBAAoB,MAAM,CAAC,IAAI,kCAAkC,EACjE,mGAAmG,EACnG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EACvB,mEAAmE,CACpE,CAAA;QACH,CAAC;aAAM,IAAI,qBAAqB,EAAE,CAAC;YACjC,UAAU,CACR,QAAQ,EACR,+BAA+B,EAC/B,MAAM,EACN,oBAAoB,MAAM,CAAC,IAAI,gCAAgC,EAC/D,2FAA2F,EAC3F,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EACvB,+FAA+F,CAChG,CAAA;QACH,CAAC;aAAM,CAAC;YACN,UAAU,CACR,QAAQ,EACR,0BAA0B,EAC1B,MAAM,EACN,oBAAoB,MAAM,CAAC,IAAI,+BAA+B,EAC9D,0FAA0F,EAC1F,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAChD,mEAAmE,CACpE,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,YAA2C,EAC3C,WAAoB,EACpB,uBAAgC,EAChC,QAAmB;IAEnB,MAAM,mBAAmB,GAAG,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,KAAK,eAAe,CAAC,CAAA;IACnG,IAAI,CAAC,WAAW,IAAI,CAAC,uBAAuB,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,UAAU,CACR,QAAQ,EACR,2BAA2B,EAC3B,QAAQ,EACR,oEAAoE,EACpE,qFAAqF,EACrF,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,MAAM,EAAE,EACtD,2EAA2E,CAC5E,CAAA;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,YAAY,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,0DAA0D,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QAC9F,MAAM,eAAe,GAAG,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACtH,IAAI,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAC9B,UAAU,CACR,QAAQ,EACR,wBAAwB,EACxB,MAAM,EACN,kBAAkB,UAAU,CAAC,IAAI,iCAAiC,EAClE,qFAAqF,EACrF,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAC/E,8EAA8E,CAC/E,CAAA;QACH,CAAC;aAAM,IAAI,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,UAAU,CACR,QAAQ,EACR,2BAA2B,EAC3B,MAAM,EACN,cAAc,UAAU,CAAC,IAAI,wBAAwB,EACrD,8EAA8E,EAC9E,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAC/E,oFAAoF,CACrF,CAAA;QACH,CAAC;aAAM,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,UAAU,CACR,QAAQ,EACR,0BAA0B,EAC1B,QAAQ,EACR,cAAc,UAAU,CAAC,IAAI,0BAA0B,EACvD,gFAAgF,EAChF,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,EAC/E,gDAAgD,CACjD,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAA6B,EAAE,QAAmB;IACpF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;QACzC,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC/D,UAAU,CACR,QAAQ,EACR,uBAAuB,EACvB,MAAM,EACN,qCAAqC,IAAI,CAAC,IAAI,EAAE,EAChD,oHAAoH,EACpH,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACzD,sEAAsE,CACvE,CAAA;QACH,CAAC;QAED,IAAI,SAAS,KAAK,eAAe,IAAI,SAAS,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAC1E,UAAU,CACR,QAAQ,EACR,8BAA8B,EAC9B,MAAM,EACN,yCAAyC,EACzC,iEAAiE,EACjE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EACnB,oDAAoD,CACrD,CAAA;QACH,CAAC;IACH,CAAC;IAED,KAAK,IAAI,CAAA;AACX,CAAC;AAED,SAAS,0BAA0B,CAAC,QAAyB,EAAE,QAAmB;IAChF,MAAM,OAAO,GAAG,QAAQ,CAAC,mBAAmB,IAAI,QAAQ,CAAC,kBAAkB,CAAA;IAC3E,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAA;QACnF,UAAU,CACR,QAAQ,EACR,8BAA8B,EAC9B,QAAQ,EACR,qCAAqC,EACrC,sGAAsG,EACtG,EAAE,YAAY,EAAE,KAAK,EAAE,EACvB,iFAAiF,CAClF,CAAA;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,KAA6B,EAAE,QAAmB;IACpF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAA;IACxD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,GAAG,kBAAkB;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAA;IACpF,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;QACnE,IAAI,wCAAwC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5D,UAAU,CACR,QAAQ,EACR,qBAAqB,EACrB,UAAU,EACV,iDAAiD,EACjD,yEAAyE,EACzE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,6EAA6E,CAC9E,CAAA;QACH,CAAC;QACD,IAAI,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnD,UAAU,CACR,QAAQ,EACR,wBAAwB,EACxB,QAAQ,EACR,0CAA0C,EAC1C,sFAAsF,EACtF,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,8EAA8E,CAC/E,CAAA;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,QAAyB,EACzB,IAAY,EACZ,KAA6B,EAC7B,cAAuB,EACvB,QAAmB;IAEnB,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAA;IAEnD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;IACtC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACjC,UAAU,CACR,QAAQ,EACR,2BAA2B,EAC3B,UAAU,EACV,gDAAgD,EAChD,yEAAyE,EACzE,EAAE,KAAK,EAAE,EACT,qDAAqD,CACtD,CAAA;IACH,CAAC;SAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3B,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACpE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,CAAC,CAAA;QAClE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACvE,UAAU,CACR,QAAQ,EACR,4BAA4B,EAC5B,MAAM,EACN,mDAAmD,EACnD,uFAAuF,EACvF,EAAE,KAAK,EAAE,EACT,kEAAkE,CACnE,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAA;AAClC,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAA;IACvC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IAC1E,IAAI,KAAK,CAAC,IAAI,GAAG,kBAAkB;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;IAEnG,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/B,IAAI,MAAM,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAA;IACpF,OAAO,MAAyB,CAAA;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,KAAa,EAAE,OAAO,GAAgB,EAAE;IAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;IAC3B,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,KAAK,EAAE,CAAC,CAAA;IAEzF,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAA;IACzC,MAAM,QAAQ,GAAc,EAAE,CAAA;IAC9B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IACvD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAC5D,MAAM,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;IACvE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAA;IAC1D,MAAM,YAAY,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAA;IAElD,uBAAuB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAA;IACnD,sBAAsB,CAAC,YAAY,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,uBAAuB,IAAI,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC9G,0BAA0B,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC9C,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IACxC,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;IAC9C,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAErF,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GAA6B,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAA;QAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvH,CAAC,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC3C,MAAM,eAAe,GAAG,YAAqB,CAAA;IAE7C,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE;QACvD,MAAM,EAAE;YACN,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,WAAW;YAC5C,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI;YAC3C,cAAc,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;SAC3C;QACD,GAAG;QACH,QAAQ,EAAE;YACR,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC/B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS;YACT,cAAc,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,IAAI;YACzD,gBAAgB;YAChB,YAAY;SACb;QACD,QAAQ,EAAE;YACR,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YACzD,iBAAiB,EAAE,gBAAgB;YACnC,iBAAiB,EAAE,aAAa;YAChC,oBAAoB,EAAE,OAAO,CAAC,uBAAuB,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,eAAe;YAC7F,UAAU,EAAE,aAAa;YACzB,mBAAmB,EAAE,aAAa;YAClC,iBAAiB,EAAE,SAAS;SAC7B;QACD,QAAQ;QACR,WAAW;QACX,eAAe;QACf,OAAO,EAAE,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC;KAChD,CAAA;AACH,CAAC"}

package/dist/src/semver.d.ts

@@ -0,0 +1,13 @@
+interface Semver {
+    major: number;
+    minor: number;
+    patch: number;
+    prerelease: Array<string | number>;
+}
+export declare function parseSemver(value: string, allowPartial?: boolean): Semver | undefined;
+export declare function compareSemver(left: Semver, right: Semver): number;
+/** Evaluate common npm ranges. Undefined means the range syntax was intentionally not guessed. */
+export declare function satisfiesSemverRange(versionValue: string, rangeValue: string): boolean | undefined;
+export declare function crossesBreakingVersionBoundary(previousValue: string, candidateValue: string): boolean;
+export {};
+//# sourceMappingURL=semver.d.ts.map

package/dist/src/semver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../src/semver.ts"],"names":[],"mappings":"AAAA,UAAU,MAAM;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,UAAU,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAA;CACnC;AAMD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,UAAQ,GAAG,MAAM,GAAG,SAAS,CAUnF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAkBjE;AA4DD,kGAAkG;AAClG,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAYlG;AAED,wBAAgB,8BAA8B,CAAC,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,OAAO,CAMrG"}

package/dist/src/semver.js

@@ -0,0 +1,136 @@
+function parsePart(value) {
+    return /^\d+$/.test(value) ? Number(value) : value;
+}
+export function parseSemver(value, allowPartial = false) {
+    const match = /^(?:v)?(0|[1-9]\d*)(?:\.(0|[1-9]\d*))?(?:\.(0|[1-9]\d*))?(?:-([0-9A-Za-z.-]+))?(?:\+[0-9A-Za-z.-]+)?$/.exec(value.trim());
+    if (match === null)
+        return undefined;
+    if (!allowPartial && (match[2] === undefined || match[3] === undefined))
+        return undefined;
+    return {
+        major: Number(match[1]),
+        minor: Number(match[2] ?? 0),
+        patch: Number(match[3] ?? 0),
+        prerelease: match[4] === undefined ? [] : match[4].split('.').map(parsePart),
+    };
+}
+export function compareSemver(left, right) {
+    const numeric = left.major - right.major || left.minor - right.minor || left.patch - right.patch;
+    if (numeric !== 0)
+        return Math.sign(numeric);
+    if (left.prerelease.length === 0 || right.prerelease.length === 0) {
+        return left.prerelease.length === right.prerelease.length ? 0 : left.prerelease.length === 0 ? 1 : -1;
+    }
+    const length = Math.max(left.prerelease.length, right.prerelease.length);
+    for (let index = 0; index < length; index += 1) {
+        const leftPart = left.prerelease[index];
+        const rightPart = right.prerelease[index];
+        if (leftPart === undefined || rightPart === undefined)
+            return leftPart === rightPart ? 0 : leftPart === undefined ? -1 : 1;
+        if (leftPart === rightPart)
+            continue;
+        if (typeof leftPart === 'number' && typeof rightPart === 'number')
+            return leftPart < rightPart ? -1 : 1;
+        if (typeof leftPart === 'number')
+            return -1;
+        if (typeof rightPart === 'number')
+            return 1;
+        return leftPart < rightPart ? -1 : 1;
+    }
+    return 0;
+}
+function comparatorMatches(version, token) {
+    const match = /^(>=|<=|>|<|=)?\s*(.+)$/.exec(token);
+    if (match === null)
+        return undefined;
+    const operator = match[1] ?? '=';
+    const target = parseSemver(match[2] ?? '', true);
+    if (target === undefined)
+        return undefined;
+    const comparison = compareSemver(version, target);
+    switch (operator) {
+        case '>=': return comparison >= 0;
+        case '<=': return comparison <= 0;
+        case '>': return comparison > 0;
+        case '<': return comparison < 0;
+        case '=': return comparison === 0;
+        default: return undefined;
+    }
+}
+function caretMatches(version, value) {
+    const lower = parseSemver(value, true);
+    if (lower === undefined)
+        return undefined;
+    const upper = lower.major > 0
+        ? { major: lower.major + 1, minor: 0, patch: 0, prerelease: [] }
+        : lower.minor > 0
+            ? { major: 0, minor: lower.minor + 1, patch: 0, prerelease: [] }
+            : { major: 0, minor: 0, patch: lower.patch + 1, prerelease: [] };
+    return compareSemver(version, lower) >= 0 && compareSemver(version, upper) < 0;
+}
+function tildeMatches(version, value) {
+    const lower = parseSemver(value, true);
+    if (lower === undefined)
+        return undefined;
+    const upper = { major: lower.major, minor: lower.minor + 1, patch: 0, prerelease: [] };
+    return compareSemver(version, lower) >= 0 && compareSemver(version, upper) < 0;
+}
+function branchMatches(version, rawBranch) {
+    const branch = rawBranch.trim();
+    if (branch === '' || branch === '*' || /^latest$/i.test(branch))
+        return true;
+    if (/\s-\s/.test(branch))
+        return undefined;
+    const wildcard = /^(?:v)?(\d+|[xX*])(?:\.(\d+|[xX*]))?(?:\.(\d+|[xX*]))?$/.exec(branch);
+    if (wildcard !== null && [wildcard[1], wildcard[2], wildcard[3]].some(value => value === undefined || /^[xX*]$/.test(value))) {
+        if (wildcard[1] !== undefined && !/^[xX*]$/.test(wildcard[1]) && version.major !== Number(wildcard[1]))
+            return false;
+        if (wildcard[2] !== undefined && !/^[xX*]$/.test(wildcard[2]) && version.minor !== Number(wildcard[2]))
+            return false;
+        if (wildcard[3] !== undefined && !/^[xX*]$/.test(wildcard[3]) && version.patch !== Number(wildcard[3]))
+            return false;
+        return true;
+    }
+    if (branch.startsWith('^'))
+        return caretMatches(version, branch.slice(1));
+    if (branch.startsWith('~'))
+        return tildeMatches(version, branch.slice(1));
+    const tokens = branch.split(/\s+/);
+    let unknown = false;
+    for (const token of tokens) {
+        const result = comparatorMatches(version, token);
+        if (result === false)
+            return false;
+        if (result === undefined)
+            unknown = true;
+    }
+    return unknown ? undefined : true;
+}
+/** Evaluate common npm ranges. Undefined means the range syntax was intentionally not guessed. */
+export function satisfiesSemverRange(versionValue, rangeValue) {
+    const version = parseSemver(versionValue);
+    if (version === undefined)
+        return undefined;
+    const normalized = rangeValue.trim().replace(/^workspace:/, '');
+    if (normalized === '^' || normalized === '~' || normalized === '*')
+        return undefined;
+    let sawUnknown = false;
+    for (const branch of normalized.split('||')) {
+        const result = branchMatches(version, branch);
+        if (result === true)
+            return true;
+        if (result === undefined)
+            sawUnknown = true;
+    }
+    return sawUnknown ? undefined : false;
+}
+export function crossesBreakingVersionBoundary(previousValue, candidateValue) {
+    const previous = parseSemver(previousValue);
+    const candidate = parseSemver(candidateValue);
+    if (previous === undefined || candidate === undefined || compareSemver(candidate, previous) <= 0)
+        return false;
+    if (previous.major !== candidate.major)
+        return true;
+    return previous.major === 0 && previous.minor !== candidate.minor;
+}
+//# sourceMappingURL=semver.js.map

package/dist/src/semver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.js","sourceRoot":"","sources":["../../src/semver.ts"],"names":[],"mappings":"AAOA,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AACpD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,YAAY,GAAG,KAAK;IAC7D,MAAM,KAAK,GAAG,uGAAuG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;IACxI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,IAAI,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IACzF,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;KAC7E,CAAA;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,KAAa;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAA;IAChG,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACvG,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;IACxE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACvC,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAA;QACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QAC1H,IAAI,QAAQ,KAAK,SAAS;YAAE,SAAQ;QACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;QACvG,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,CAAA;QAC3C,IAAI,OAAO,SAAS,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAA;QAC3C,OAAO,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe,EAAE,KAAa;IACvD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACnD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAA;IAChC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAA;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC1C,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACjD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,IAAI,EAAE,OAAO,UAAU,IAAI,CAAC,CAAA;QACjC,KAAK,IAAI,EAAE,OAAO,UAAU,IAAI,CAAC,CAAA;QACjC,KAAK,GAAG,EAAE,OAAO,UAAU,GAAG,CAAC,CAAA;QAC/B,KAAK,GAAG,EAAE,OAAO,UAAU,GAAG,CAAC,CAAA;QAC/B,KAAK,GAAG,EAAE,OAAO,UAAU,KAAK,CAAC,CAAA;QACjC,SAAS,OAAO,SAAS,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,MAAM,KAAK,GAAW,KAAK,CAAC,KAAK,GAAG,CAAC;QACnC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;QAChE,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC;YACf,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE;YAChE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IACpE,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,YAAY,CAAC,OAAe,EAAE,KAAa;IAClD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IACzC,MAAM,KAAK,GAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAA;IAC9F,OAAO,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,aAAa,CAAC,OAAe,EAAE,SAAiB;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,CAAA;IAC/B,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5E,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAA;IAC1C,MAAM,QAAQ,GAAG,yDAAyD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IACvF,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7H,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACpH,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACpH,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACpH,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;IACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClC,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAChD,IAAI,MAAM,KAAK,KAAK;YAAE,OAAO,KAAK,CAAA;QAClC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,GAAG,IAAI,CAAA;IAC1C,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;AACnC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,oBAAoB,CAAC,YAAoB,EAAE,UAAkB;IAC3E,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,CAAC,CAAA;IACzC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC3C,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAA;IAC/D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IACpF,IAAI,UAAU,GAAG,KAAK,CAAA;IACtB,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAC7C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,UAAU,GAAG,IAAI,CAAA;IAC7C,CAAC;IACD,OAAO,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,aAAqB,EAAE,cAAsB;IAC1F,MAAM,QAAQ,GAAG,WAAW,CAAC,aAAa,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,WAAW,CAAC,cAAc,CAAC,CAAA;IAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAA;IAC9G,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IACnD,OAAO,QAAQ,CAAC,KAAK,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,KAAK,CAAA;AACnE,CAAC"}

package/dist/src/tar.d.ts

@@ -0,0 +1,25 @@
+import type { Finding } from './types.js';
+export interface TarOptions {
+    maxEntries?: number;
+    maxUnpackedBytes?: number;
+    maxFileBytes?: number;
+    maxCompressionRatio?: number;
+}
+export interface TarEntry {
+    path: string;
+    type: 'file' | 'directory' | 'symlink' | 'hardlink';
+    mode: number;
+    size: number;
+    digest: string;
+    contents?: Buffer;
+    linkTarget?: string;
+}
+export interface ParsedNpmTarball {
+    entries: TarEntry[];
+    findings: Finding[];
+    compressedBytes: number;
+    unpackedBytes: number;
+    treeDigest: string;
+}
+export declare function parseNpmTarball(compressed: Buffer, options?: TarOptions): ParsedNpmTarball;
+//# sourceMappingURL=tar.d.ts.map

package/dist/src/tar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tar.d.ts","sourceRoot":"","sources":["../../src/tar.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAazC,MAAM,WAAW,UAAU;IACzB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAA;IACnD,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,QAAQ,EAAE,CAAA;IACnB,QAAQ,EAAE,OAAO,EAAE,CAAA;IACnB,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE,MAAM,CAAA;CACnB;AAiJD,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,GAAE,UAAe,GAAG,gBAAgB,CA2M9F"}