upstream-radar 0.41.0 → 0.42.0

package/dist/src/dsh-directory-feed.js

@@ -0,0 +1,267 @@
+import { parseDshCompatibilityLedger } from './dsh-compatibility-ledger.js';
+import { parseDshInstallTargets } from './dsh-install-plan.js';
+import { parseNpmSpec } from './npm.js';
+import { TOOL_VERSION } from './version.js';
+export const AWESOME_DSH_COHORT_SCHEMA = 'upstream-radar.awesome-dsh-cohort/v1alpha1';
+export const DSH_DIRECTORY_COMPATIBILITY_FEED_SCHEMA = 'upstream-radar.dsh-directory-compatibility-feed/v1alpha1';
+const MAX_COHORT_PLUGINS = 100;
+const REPOSITORY = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+const CATALOG_ENTRY = /^data\/plugins\/[A-Za-z0-9_.@-]+\.ya?ml$/;
+function record(value, label) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new Error(`${label} must be an object`);
+    return value;
+}
+function boundedString(value, label, maximum) {
+    if (typeof value !== 'string' || value.trim() === '' || value.length > maximum) {
+        throw new Error(`${label} must be a non-empty string no longer than ${maximum} characters`);
+    }
+    return value;
+}
+function timestamp(value, label) {
+    const parsed = boundedString(value, label, 64);
+    if (!Number.isFinite(Date.parse(parsed)))
+        throw new Error(`${label} must be an ISO timestamp`);
+    return parsed;
+}
+function repository(value, label) {
+    const parsed = boundedString(value, label, 256);
+    if (!REPOSITORY.test(parsed))
+        throw new Error(`${label} must be an owner/repository coordinate`);
+    return parsed;
+}
+function httpsUrl(value, label) {
+    const parsed = new URL(boundedString(value, label, 2_048));
+    if (parsed.protocol !== 'https:' || parsed.username !== '' || parsed.password !== '') {
+        throw new Error(`${label} must be a credential-free HTTPS URL`);
+    }
+    return parsed.toString();
+}
+function githubCatalogUrl(value, repositoryName, label) {
+    const parsed = new URL(httpsUrl(value, label));
+    const expectedPath = `/${repositoryName}`.toLowerCase();
+    const actualPath = parsed.pathname.replace(/\/$/, '').toLowerCase();
+    if (parsed.hostname.toLowerCase() !== 'github.com' || (actualPath !== expectedPath && !actualPath.startsWith(`${expectedPath}/`))) {
+        throw new Error(`${label} must stay within the selected GitHub repository`);
+    }
+    parsed.pathname = parsed.pathname.replace(/\/$/, '');
+    return parsed.toString();
+}
+function parseDistribution(value, label) {
+    const item = record(value, label);
+    const kind = boundedString(item.kind, `${label}.kind`, 64);
+    if (kind === 'npm') {
+        const name = boundedString(item.name, `${label}.name`, 214);
+        const selectedVersion = boundedString(item.selectedVersion, `${label}.selectedVersion`, 256);
+        parseNpmSpec(`${name}@${selectedVersion}`);
+        const distTag = item.distTag === undefined ? undefined : boundedString(item.distTag, `${label}.distTag`, 128);
+        return { kind, name, selectedVersion, ...(distTag === undefined ? {} : { distTag }) };
+    }
+    if (kind === 'github') {
+        const reason = boundedString(item.reason, `${label}.reason`, 2_048);
+        const installSpec = item.installSpec === undefined
+            ? undefined
+            : boundedString(item.installSpec, `${label}.installSpec`, 512);
+        return { kind, reason, ...(installSpec === undefined ? {} : { installSpec }) };
+    }
+    if (kind === 'repository-installer') {
+        return { kind, reason: boundedString(item.reason, `${label}.reason`, 2_048) };
+    }
+    throw new Error(`${label}.kind is unsupported`);
+}
+export function parseAwesomeDshCohort(input) {
+    const root = record(input, 'awesome-dsh-plugin cohort');
+    if (root.schema !== AWESOME_DSH_COHORT_SCHEMA) {
+        throw new Error(`awesome-dsh-plugin cohort schema must be ${AWESOME_DSH_COHORT_SCHEMA}`);
+    }
+    const source = record(root.source, 'awesome-dsh-plugin cohort source');
+    const commit = boundedString(source.commit, 'awesome-dsh-plugin cohort source.commit', 40);
+    if (!/^[a-f0-9]{40}$/.test(commit))
+        throw new Error('awesome-dsh-plugin cohort source.commit must be a full Git commit');
+    const entryCount = Number(source.entryCount);
+    if (!Number.isSafeInteger(entryCount) || entryCount < 1 || entryCount > 100_000) {
+        throw new Error('awesome-dsh-plugin cohort source.entryCount must be a positive bounded integer');
+    }
+    if (!Array.isArray(root.plugins) || root.plugins.length === 0 || root.plugins.length > MAX_COHORT_PLUGINS) {
+        throw new Error(`awesome-dsh-plugin cohort plugins must contain between 1 and ${MAX_COHORT_PLUGINS} entries`);
+    }
+    const ids = new Set();
+    const repositories = new Set();
+    const plugins = root.plugins.map((value, index) => {
+        const item = record(value, `plugins[${index}]`);
+        const id = boundedString(item.id, `plugins[${index}].id`, 64);
+        if (!/^[a-z0-9][a-z0-9._-]{0,63}$/.test(id))
+            throw new Error(`plugins[${index}].id must be a short lowercase label`);
+        if (ids.has(id))
+            throw new Error(`duplicate awesome-dsh-plugin cohort id: ${id}`);
+        ids.add(id);
+        const repositoryName = repository(item.repository, `plugins[${index}].repository`);
+        if (repositories.has(repositoryName))
+            throw new Error(`duplicate awesome-dsh-plugin cohort repository: ${repositoryName}`);
+        repositories.add(repositoryName);
+        const catalogEntry = boundedString(item.catalogEntry, `plugins[${index}].catalogEntry`, 512);
+        if (!CATALOG_ENTRY.test(catalogEntry))
+            throw new Error(`plugins[${index}].catalogEntry must identify one catalog YAML entry`);
+        return {
+            id,
+            catalogEntry,
+            catalogUrl: githubCatalogUrl(item.catalogUrl, repositoryName, `plugins[${index}].catalogUrl`),
+            repository: repositoryName,
+            category: boundedString(item.category, `plugins[${index}].category`, 64),
+            distribution: parseDistribution(item.distribution, `plugins[${index}].distribution`),
+        };
+    });
+    plugins.sort((left, right) => left.repository.localeCompare(right.repository));
+    return {
+        schema: AWESOME_DSH_COHORT_SCHEMA,
+        selectedAt: timestamp(root.selectedAt, 'awesome-dsh-plugin cohort selectedAt'),
+        source: {
+            repository: repository(source.repository, 'awesome-dsh-plugin cohort source.repository'),
+            commit,
+            commitUrl: httpsUrl(source.commitUrl, 'awesome-dsh-plugin cohort source.commitUrl'),
+            entryDirectory: boundedString(source.entryDirectory, 'awesome-dsh-plugin cohort source.entryDirectory', 512),
+            entryCount,
+            license: boundedString(source.license, 'awesome-dsh-plugin cohort source.license', 128),
+        },
+        plugins,
+    };
+}
+function cellStatus(result) {
+    if (result === 'compatible')
+        return 'observed-compatible';
+    if (result === 'runtime-incompatible' || result === 'install-failed' || result === 'load-failed') {
+        return 'observed-incompatible';
+    }
+    return 'needs-review';
+}
+function aggregateStatus(cells) {
+    if (cells.length === 0)
+        return 'not-observed';
+    if (cells.some(cell => cell.status === 'observed-incompatible'))
+        return 'observed-incompatible';
+    if (cells.some(cell => cell.status === 'needs-review'))
+        return 'needs-review';
+    return 'observed-compatible';
+}
+function dueAt(observedAt, refreshAfterHours) {
+    return new Date(Date.parse(observedAt) + refreshAfterHours * 60 * 60 * 1_000).toISOString();
+}
+function normalizedRepositoryBaseUrl(value) {
+    const parsed = new URL(value);
+    if (parsed.protocol !== 'https:' || parsed.username !== '' || parsed.password !== '' || parsed.search !== '' || parsed.hash !== '') {
+        throw new Error('repositoryBaseUrl must be a credential-free HTTPS URL without query or fragment');
+    }
+    return parsed.toString().replace(/\/$/, '');
+}
+export function buildDshDirectoryCompatibilityFeed(input) {
+    const cohort = parseAwesomeDshCohort(input.cohort);
+    const installTargets = parseDshInstallTargets(input.installTargets);
+    const ledger = parseDshCompatibilityLedger(input.ledger);
+    const generatedAt = timestamp(input.generatedAt, 'directory feed generatedAt');
+    const repositoryBaseUrl = normalizedRepositoryBaseUrl(input.repositoryBaseUrl ?? 'https://github.com/MicroMilo/upstream-radar');
+    const targetByObserverId = new Map(installTargets.plugins
+        .filter(target => target.observerTargetId !== undefined)
+        .map(target => [target.observerTargetId, target]));
+    const plugins = cohort.plugins.map((plugin) => {
+        const installTarget = targetByObserverId.get(plugin.id);
+        const observations = installTarget === undefined
+            ? []
+            : ledger.entries.filter(entry => entry.targetId === installTarget.id);
+        const cells = observations.map((entry) => ({
+            caseId: entry.caseId,
+            artifact: {
+                spec: entry.plugin,
+                ...(entry.artifact.sha256 === undefined ? {} : { sha256: entry.artifact.sha256 }),
+            },
+            dsh: { package: '@deepseek-ai/dsh', version: entry.dshVersion },
+            runtime: {
+                nodeMajor: entry.runtime.nodeMajor,
+                nodeVersion: entry.runtime.nodeVersion,
+                platform: entry.runtime.platform,
+                architecture: entry.runtime.architecture,
+            },
+            executionPlane: 'headless',
+            profile: 'headless',
+            status: cellStatus(entry.result),
+            radarResult: entry.result,
+            ...(entry.requiredDependencyBuilds === undefined ? {} : { requiredDependencyBuilds: entry.requiredDependencyBuilds }),
+            observedAt: entry.observedAt,
+            recheckDueAt: dueAt(entry.observedAt, installTargets.refreshAfterHours),
+            reason: entry.reason,
+        })).sort((left, right) => left.caseId.localeCompare(right.caseId));
+        return {
+            id: plugin.id,
+            repository: plugin.repository,
+            repositoryUrl: `https://github.com/${plugin.repository}`,
+            catalogUrl: plugin.catalogUrl,
+            catalogEntry: plugin.catalogEntry,
+            catalogEntryUrl: `https://github.com/${cohort.source.repository}/blob/${cohort.source.commit}/${plugin.catalogEntry}`,
+            category: plugin.category,
+            distribution: plugin.distribution,
+            status: aggregateStatus(cells),
+            cells,
+            evidenceUrl: `${repositoryBaseUrl}/blob/main/compatibility-ledger.json`,
+        };
+    }).sort((left, right) => left.repository.localeCompare(right.repository));
+    const summary = {
+        total: plugins.length,
+        'observed-compatible': 0,
+        'observed-incompatible': 0,
+        'needs-review': 0,
+        'not-observed': 0,
+    };
+    for (const plugin of plugins)
+        summary[plugin.status] += 1;
+    return {
+        schema: DSH_DIRECTORY_COMPATIBILITY_FEED_SCHEMA,
+        generatedAt,
+        producer: { name: 'upstream-radar', version: TOOL_VERSION, repository: repositoryBaseUrl, license: 'Apache-2.0' },
+        sourceCatalog: cohort.source,
+        boundary: {
+            claim: 'exact-cell compatibility evidence; not a security review, endorsement, or timeless compatibility badge',
+            executionPlane: 'headless',
+            profile: 'headless',
+            isolation: 'fresh GitHub-hosted VM plus restricted container',
+            consumptionRule: 'Treat a cell as stale after recheckDueAt. needs-review and not-observed must never be rendered as pass or fail.',
+            refreshAfterHours: installTargets.refreshAfterHours,
+        },
+        summary,
+        plugins,
+    };
+}
+function markdown(value) {
+    return value.replace(/[|<>\r\n]/g, ' ').replace(/\s+/g, ' ').trim();
+}
+function cellCoordinate(entry) {
+    if (entry.cells.length === 0)
+        return '—';
+    return entry.cells.map(cell => `\`${markdown(cell.artifact.spec)}\``).join('<br>');
+}
+function dshCoordinate(entry) {
+    if (entry.cells.length === 0)
+        return '—';
+    return entry.cells.map(cell => `\`${markdown(cell.dsh.version)}\` / Node ${cell.runtime.nodeMajor}`).join('<br>');
+}
+function observedCoordinate(entry) {
+    if (entry.cells.length === 0)
+        return '—';
+    return entry.cells.map(cell => markdown(cell.observedAt)).join('<br>');
+}
+export function renderDshDirectoryCompatibilityFeed(feed) {
+    const lines = [
+        '# DSH directory compatibility evidence',
+        '',
+        `Generated from catalog commit [\`${feed.sourceCatalog.commit.slice(0, 12)}\`](${feed.sourceCatalog.commitUrl}) at \`${feed.generatedAt}\`.`,
+        '',
+        `**${feed.summary['observed-compatible']} observed compatible · ${feed.summary['observed-incompatible']} observed incompatible · ${feed.summary['needs-review']} needs review · ${feed.summary['not-observed']} not observed**`,
+        '',
+        '| Catalog plugin | Exact artifact | Exact DSH / runtime | Evidence status | Observed |',
+        '| --- | --- | --- | --- | --- |',
+    ];
+    for (const entry of feed.plugins) {
+        lines.push(`| [${markdown(entry.repository)}](${entry.catalogUrl}) | ${cellCoordinate(entry)} | ${dshCoordinate(entry)} | \`${entry.status}\` | ${observedCoordinate(entry)} |`);
+    }
+    lines.push('', '## Reading the status', '', '- `observed-compatible`: the exact artifact installed, registered and loaded in the stated headless cell.', '- `observed-incompatible`: the exact cell reproduced a runtime gate, install, registration or load failure.', '- `needs-review`: evidence exists, but Radar cannot yet separate a plugin defect from an uncovered execution plane, environment condition, or explicit dependency-build approval gate.', '- `not-observed`: the catalog entry is monitored statically but has no matching executable npm artifact in this cohort.', '', `A cell expires at its \`recheckDueAt\` value (${feed.boundary.refreshAfterHours} hours after observation). Consumers must then show it as stale. This is exact compatibility evidence, not a security review or endorsement.`, '', `[Machine-readable feed](dsh-plugin-compatibility.json) · [Full compatibility ledger](${feed.producer.repository}/blob/main/compatibility-ledger.json)`, '');
+    return lines.join('\n');
+}
+//# sourceMappingURL=dsh-directory-feed.js.map

package/dist/src/dsh-directory-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh-directory-feed.js","sourceRoot":"","sources":["../../src/dsh-directory-feed.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAoC,MAAM,+BAA+B,CAAA;AAC7G,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,4CAAqD,CAAA;AAC9F,MAAM,CAAC,MAAM,uCAAuC,GAAG,0DAAmE,CAAA;AAE1H,MAAM,kBAAkB,GAAG,GAAG,CAAA;AAC9B,MAAM,UAAU,GAAG,oCAAoC,CAAA;AACvD,MAAM,aAAa,GAAG,0CAA0C,CAAA;AAgGhE,SAAS,MAAM,CAAC,KAAc,EAAE,KAAa;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAA;IACtH,OAAO,KAAgC,CAAA;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa,EAAE,OAAe;IACnE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,8CAA8C,OAAO,aAAa,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,2BAA2B,CAAC,CAAA;IAC9F,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,CAAA;IAC/C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,yCAAyC,CAAC,CAAA;IAChG,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc,EAAE,KAAa;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAC1D,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACrF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sCAAsC,CAAC,CAAA;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,cAAsB,EAAE,KAAa;IAC7E,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAA;IAC9C,MAAM,YAAY,GAAG,IAAI,cAAc,EAAE,CAAC,WAAW,EAAE,CAAA;IACvD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAA;IACnE,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,YAAY,IAAI,CAAC,UAAU,KAAK,YAAY,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,YAAY,GAAG,CAAC,CAAC,EAAE,CAAC;QAClI,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,kDAAkD,CAAC,CAAA;IAC7E,CAAC;IACD,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACpD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAA;AAC1B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,EAAE,EAAE,CAAC,CAAA;IAC1D,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,OAAO,EAAE,GAAG,CAAC,CAAA;QAC3D,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,KAAK,kBAAkB,EAAE,GAAG,CAAC,CAAA;QAC5F,YAAY,CAAC,GAAG,IAAI,IAAI,eAAe,EAAE,CAAC,CAAA;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,EAAE,GAAG,CAAC,CAAA;QAC7G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAA;IACvF,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,KAAK,CAAC,CAAA;QACnE,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,KAAK,SAAS;YAChD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,KAAK,cAAc,EAAE,GAAG,CAAC,CAAA;QAChE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAA;IAChF,CAAC;IACD,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;QACpC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,SAAS,EAAE,KAAK,CAAC,EAAE,CAAA;IAC/E,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAA;AACjD,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,2BAA2B,CAAC,CAAA;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,4CAA4C,yBAAyB,EAAE,CAAC,CAAA;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,kCAAkC,CAAC,CAAA;IACtE,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,yCAAyC,EAAE,EAAE,CAAC,CAAA;IAC1F,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACxH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAC5C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,OAAO,EAAE,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAA;IACnG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,gEAAgE,kBAAkB,UAAU,CAAC,CAAA;IAC/G,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAA;IAC7B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAA;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAA0B,EAAE;QACxE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,EAAE,WAAW,KAAK,GAAG,CAAC,CAAA;QAC/C,MAAM,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,WAAW,KAAK,MAAM,EAAE,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,sCAAsC,CAAC,CAAA;QACpH,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAA;QACjF,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACX,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,KAAK,cAAc,CAAC,CAAA;QAClF,IAAI,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,cAAc,EAAE,CAAC,CAAA;QAC1H,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAA;QAChC,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,KAAK,gBAAgB,EAAE,GAAG,CAAC,CAAA;QAC5F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,KAAK,qDAAqD,CAAC,CAAA;QAC7H,OAAO;YACL,EAAE;YACF,YAAY;YACZ,UAAU,EAAE,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,EAAE,WAAW,KAAK,cAAc,CAAC;YAC7F,UAAU,EAAE,cAAc;YAC1B,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,KAAK,YAAY,EAAE,EAAE,CAAC;YACxE,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,KAAK,gBAAgB,CAAC;SACrF,CAAA;IACH,CAAC,CAAC,CAAA;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IAC9E,OAAO;QACL,MAAM,EAAE,yBAAyB;QACjC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,sCAAsC,CAAC;QAC9E,MAAM,EAAE;YACN,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,6CAA6C,CAAC;YACxF,MAAM;YACN,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,4CAA4C,CAAC;YACnF,cAAc,EAAE,aAAa,CAAC,MAAM,CAAC,cAAc,EAAE,iDAAiD,EAAE,GAAG,CAAC;YAC5G,UAAU;YACV,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,OAAO,EAAE,0CAA0C,EAAE,GAAG,CAAC;SACxF;QACD,OAAO;KACR,CAAA;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAA6C;IAC/D,IAAI,MAAM,KAAK,YAAY;QAAE,OAAO,qBAAqB,CAAA;IACzD,IAAI,MAAM,KAAK,sBAAsB,IAAI,MAAM,KAAK,gBAAgB,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;QACjG,OAAO,uBAAuB,CAAA;IAChC,CAAC;IACD,OAAO,cAAc,CAAA;AACvB,CAAC;AAED,SAAS,eAAe,CAAC,KAA0C;IACjE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAA;IAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,uBAAuB,CAAC;QAAE,OAAO,uBAAuB,CAAA;IAC/F,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,cAAc,CAAC;QAAE,OAAO,cAAc,CAAA;IAC7E,OAAO,qBAAqB,CAAA;AAC9B,CAAC;AAED,SAAS,KAAK,CAAC,UAAkB,EAAE,iBAAyB;IAC1D,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAA;AAC7F,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa;IAChD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAA;IAC7B,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACnI,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAA;IACpG,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAMlD;IACC,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAClD,MAAM,cAAc,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IACnE,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IACxD,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,EAAE,4BAA4B,CAAC,CAAA;IAC9E,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,KAAK,CAAC,iBAAiB,IAAI,6CAA6C,CAAC,CAAA;IAC/H,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO;SACtD,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS,CAAC;SACvD,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,gBAA0B,EAAE,MAAM,CAAC,CAAC,CAAC,CAAA;IAE9D,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAkC,EAAE;QAC5E,MAAM,aAAa,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QACvD,MAAM,YAAY,GAAG,aAAa,KAAK,SAAS;YAC9C,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,aAAa,CAAC,EAAE,CAAC,CAAA;QACvE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,KAAK,EAA4B,EAAE,CAAC,CAAC;YACnE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE;gBACR,IAAI,EAAE,KAAK,CAAC,MAAM;gBAClB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;aAClF;YACD,GAAG,EAAE,EAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE;YAC/D,OAAO,EAAE;gBACP,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS;gBAClC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;gBACtC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;gBAChC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY;aACzC;YACD,cAAc,EAAE,UAAU;YAC1B,OAAO,EAAE,UAAU;YACnB,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC;YAChC,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,GAAG,CAAC,KAAK,CAAC,wBAAwB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACrH,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,iBAAiB,CAAC;YACvE,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;QAClE,OAAO;YACL,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,aAAa,EAAE,sBAAsB,MAAM,CAAC,UAAU,EAAE;YACxD,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,eAAe,EAAE,sBAAsB,MAAM,CAAC,MAAM,CAAC,UAAU,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,EAAE;YACrH,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC;YAC9B,KAAK;YACL,WAAW,EAAE,GAAG,iBAAiB,sCAAsC;SACxE,CAAA;IACH,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;IAEzE,MAAM,OAAO,GAA6C;QACxD,KAAK,EAAE,OAAO,CAAC,MAAM;QACrB,qBAAqB,EAAE,CAAC;QACxB,uBAAuB,EAAE,CAAC;QAC1B,cAAc,EAAE,CAAC;QACjB,cAAc,EAAE,CAAC;KAClB,CAAA;IACD,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAEzD,OAAO;QACL,MAAM,EAAE,uCAAuC;QAC/C,WAAW;QACX,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,iBAAiB,EAAE,OAAO,EAAE,YAAY,EAAE;QACjH,aAAa,EAAE,MAAM,CAAC,MAAM;QAC5B,QAAQ,EAAE;YACR,KAAK,EAAE,wGAAwG;YAC/G,cAAc,EAAE,UAAU;YAC1B,OAAO,EAAE,UAAU;YACnB,SAAS,EAAE,kDAAkD;YAC7D,eAAe,EAAE,iHAAiH;YAClI,iBAAiB,EAAE,cAAc,CAAC,iBAAiB;SACpD;QACD,OAAO;QACP,OAAO;KACR,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,KAAqC;IAC3D,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACxC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,aAAa,CAAC,KAAqC;IAC1D,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACxC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACnH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAqC;IAC/D,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAA;IACxC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,IAAmC;IACrF,MAAM,KAAK,GAAG;QACZ,wCAAwC;QACxC,EAAE;QACF,oCAAoC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,UAAU,IAAI,CAAC,WAAW,KAAK;QAC5I,EAAE;QACF,KAAK,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,0BAA0B,IAAI,CAAC,OAAO,CAAC,uBAAuB,CAAC,4BAA4B,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,mBAAmB,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,iBAAiB;QAC/N,EAAE;QACF,wFAAwF;QACxF,iCAAiC;KAClC,CAAA;IACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,KAAK,CAAC,UAAU,OAAO,cAAc,CAAC,KAAK,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,QAAQ,KAAK,CAAC,MAAM,QAAQ,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAClL,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,uBAAuB,EACvB,EAAE,EACF,2GAA2G,EAC3G,6GAA6G,EAC7G,wLAAwL,EACxL,yHAAyH,EACzH,EAAE,EACF,iDAAiD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,8IAA8I,EAC9N,EAAE,EACF,wFAAwF,IAAI,CAAC,QAAQ,CAAC,UAAU,uCAAuC,EACvJ,EAAE,CACH,CAAA;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/src/dsh-install-observation.d.ts

@@ -1,6 +1,6 @@
 import type { DependencyKind } from './radar-types.js';
 export declare const DSH_INSTALL_OBSERVATION_SCHEMA: 'upstream-radar.dsh-install-observation/v1alpha1';
-export type DshInstallObservationResult = 'compatible' | 'runtime-incompatible' | 'peer-contract-incompatible' | 'install-failed' | 'load-failed' | 'unknown';
+export type DshInstallObservationResult = 'compatible' | 'runtime-incompatible' | 'peer-contract-incompatible' | 'build-approval-required' | 'install-failed' | 'load-failed' | 'unknown';
 export type InstallObservationPhase = 'runtime' | 'artifact' | 'profile' | 'install' | 'load';
 export type InstallObservationIsolationProvider = 'github-actions-hosted-runner' | 'firecracker' | 'other';
 export interface InstallObservationCommand {
@@ -219,6 +219,7 @@ export interface DshInstallObservationReport {
         pluginCodeMayExecuteDuringLoad: true;
         inheritedHostSecrets: false;
         approvedDependencyBuilds: string[];
+        requiredDependencyBuilds: string[];
         note: string;
     };
 }

package/dist/src/dsh-install-observation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dsh-install-observation.d.ts","sourceRoot":"","sources":["../../src/dsh-install-observation.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAA;AAKxE,eAAO,MAAM,8BAA8B,EAAG,iDAA0D,CAAA;AA2BxG,MAAM,MAAM,2BAA2B,GAAG,YAAY,GAAG,sBAAsB,GAAG,4BAA4B,GAAG,gBAAgB,GAAG,aAAa,GAAG,SAAS,CAAA;AAC7J,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAA;AAC7F,MAAM,MAAM,mCAAmC,GAAG,8BAA8B,GAAG,aAAa,GAAG,OAAO,CAAA;AAE1G,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,uBAAuB,CAAA;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,cAAc,EAAE,OAAO,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,yBAAyB,KAAK,OAAO,CAAC,+BAA+B,CAAC,CAAA;AAEvH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAA;IACvC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE;QACR,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAA;QAC5C,MAAM,EAAE,QAAQ,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,CAAA;QACb,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,gBAAgB,EAAE,4BAA4B,CAAA;KAC/C,CAAA;IACD,SAAS,EAAE,mBAAmB,EAAE,CAAA;IAChC,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,SAAS,EAAE,OAAO,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,sBAAsB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CACrD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,cAAc,CAAA;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,CAAA;IAClD,8EAA8E;IAC9E,WAAW,EAAE,yBAAyB,CAAA;IACtC,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,GACzB,8BAA8B,GAC9B,+BAA+B,GAC/B,iBAAiB,CAAA;AAErB,kFAAkF;AAClF,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,SAAS,CAAA;IAChE,WAAW,EAAE,yBAAyB,CAAA;IACtC,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,sFAAsF;IACtF,SAAS,EAAE,8BAA8B,EAAE,CAAA;IAC3C,MAAM,CAAC,EAAE,2BAA2B,EAAE,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,oGAAoG;IACpG,UAAU,EAAE,MAAM,CAAA;IAClB,sBAAsB,CAAC,EAAE,yBAAyB,EAAE,CAAA;IACpD,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+BAA+B,CAAC,EAAE,yBAAyB,EAAE,CAAA;IAC7D,mBAAmB,EAAE,6BAA6B,CAAA;IAClD,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,sBAAsB,GAAG,aAAa,CAAA;QAC9C,aAAa,EAAE,MAAM,CAAA;QACrB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,8BAA8B,CAAA;IAC7C,IAAI,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,KAAK,EAAE,aAAa,CAAA;IACpB,KAAK,EAAE,2BAA2B,CAAA;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAA;QAChB,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,cAAc,EAAE;YACd,IAAI,EAAE,MAAM,CAAA;YACZ,OAAO,CAAC,EAAE,MAAM,CAAA;SACjB,CAAA;KACF,CAAA;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAC3B,CAAA;IACD,MAAM,EAAE;QACN,OAAO,EAAE,uBAAuB,CAAA;QAChC,QAAQ,EAAE,uBAAuB,CAAA;QACjC,OAAO,EAAE,uBAAuB,CAAA;QAChC,OAAO,EAAE,uBAAuB,CAAA;QAChC,YAAY,EAAE,uBAAuB,CAAA;QACrC,IAAI,EAAE,uBAAuB,CAAA;KAC9B,CAAA;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,uBAAuB,CAAA;QAChC,IAAI,EAAE,uBAAuB,CAAA;KAC9B,CAAA;IACD,UAAU,EAAE;QACV,OAAO,EAAE,qBAAqB,CAAA;QAC9B,IAAI,EAAE,qBAAqB,CAAA;KAC5B,CAAA;IACD,UAAU,EAAE;QACV,2FAA2F;QAC3F,eAAe,CAAC,EAAE,iCAAiC,CAAA;QACnD,2EAA2E;QAC3E,YAAY,CAAC,EAAE,8BAA8B,CAAA;QAC7C,+EAA+E;QAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,MAAM,EAAE,2BAA2B,CAAA;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE;QACR,sBAAsB,EAAE,mCAAmC,CAAA;QAC3D,wBAAwB,EAAE,KAAK,CAAA;QAC/B,6BAA6B,EAAE,IAAI,CAAA;QACnC,uCAAuC,EAAE,IAAI,CAAA;QAC7C,8BAA8B,EAAE,IAAI,CAAA;QACpC,oBAAoB,EAAE,KAAK,CAAA;QAC3B,wBAAwB,EAAE,MAAM,EAAE,CAAA;QAClC,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,OAAO,CAAA;IACvB,iBAAiB,EAAE,mCAAmC,CAAA;IACtD,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACnC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAClC;AAiKD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,uBAAuB,CA2GzB;AAi5BD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAmRzH;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,2BAA2B,GAAG,MAAM,CAuCvF"}
+{"version":3,"file":"dsh-install-observation.d.ts","sourceRoot":"","sources":["../../src/dsh-install-observation.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAA;AAKxE,eAAO,MAAM,8BAA8B,EAAG,iDAA0D,CAAA;AA4BxG,MAAM,MAAM,2BAA2B,GACnC,YAAY,GACZ,sBAAsB,GACtB,4BAA4B,GAC5B,yBAAyB,GACzB,gBAAgB,GAChB,aAAa,GACb,SAAS,CAAA;AACb,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,MAAM,CAAA;AAC7F,MAAM,MAAM,mCAAmC,GAAG,8BAA8B,GAAG,aAAa,GAAG,OAAO,CAAA;AAE1G,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,uBAAuB,CAAA;IAC9B,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,GAAG,EAAE,MAAM,CAAA;IACX,GAAG,EAAE,MAAM,CAAC,UAAU,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,+BAA+B;IAC9C,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,QAAQ,EAAE,OAAO,CAAA;IACjB,cAAc,EAAE,OAAO,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,EAAE,yBAAyB,KAAK,OAAO,CAAC,+BAA+B,CAAC,CAAA;AAEvH,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAA;IACvC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,cAAc,CAAC,EAAE,OAAO,CAAA;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAA;IAC3C,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,OAAO,CAAA;IAClB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE;QACR,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAA;QAC5C,MAAM,EAAE,QAAQ,CAAA;QAChB,UAAU,EAAE,MAAM,CAAA;QAClB,KAAK,EAAE,MAAM,CAAA;QACb,KAAK,EAAE,MAAM,CAAA;QACb,YAAY,EAAE,MAAM,CAAA;QACpB,UAAU,EAAE,MAAM,CAAA;QAClB,gBAAgB,EAAE,4BAA4B,CAAA;KAC/C,CAAA;IACD,SAAS,EAAE,mBAAmB,EAAE,CAAA;IAChC,OAAO,EAAE,mBAAmB,EAAE,CAAA;IAC9B,UAAU,EAAE,qBAAqB,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAA;QACf,QAAQ,EAAE,MAAM,CAAA;QAChB,OAAO,EAAE,MAAM,CAAA;KAChB,CAAA;IACD,SAAS,EAAE,OAAO,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,iCAAiC;IAChD,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,sBAAsB,CAAC,EAAE,yBAAyB,EAAE,CAAA;CACrD;AAED,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,cAAc,CAAA;CACrB;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,CAAA;IAClD,8EAA8E;IAC9E,WAAW,EAAE,yBAAyB,CAAA;IACtC,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GACjC,yBAAyB,GACzB,8BAA8B,GAC9B,+BAA+B,GAC/B,iBAAiB,CAAA;AAErB,kFAAkF;AAClF,MAAM,WAAW,8BAA8B;IAC7C,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,eAAe,GAAG,SAAS,CAAA;IAChE,WAAW,EAAE,yBAAyB,CAAA;IACtC,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,sFAAsF;IACtF,SAAS,EAAE,8BAA8B,EAAE,CAAA;IAC3C,MAAM,CAAC,EAAE,2BAA2B,EAAE,CAAA;CACvC;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,oGAAoG;IACpG,UAAU,EAAE,MAAM,CAAA;IAClB,sBAAsB,CAAC,EAAE,yBAAyB,EAAE,CAAA;IACpD,4EAA4E;IAC5E,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,+BAA+B,CAAC,EAAE,yBAAyB,EAAE,CAAA;IAC7D,mBAAmB,EAAE,6BAA6B,CAAA;IAClD,WAAW,CAAC,EAAE;QACZ,MAAM,EAAE,sBAAsB,GAAG,aAAa,CAAA;QAC9C,aAAa,EAAE,MAAM,CAAA;QACrB,UAAU,CAAC,EAAE,MAAM,CAAA;KACpB,CAAA;CACF;AAED,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,OAAO,8BAA8B,CAAA;IAC7C,IAAI,EAAE;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACjD,KAAK,EAAE,aAAa,CAAA;IACpB,KAAK,EAAE,2BAA2B,CAAA;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE;QACP,QAAQ,EAAE,MAAM,CAAA;QAChB,YAAY,EAAE,MAAM,CAAA;QACpB,WAAW,EAAE,MAAM,CAAA;QACnB,cAAc,EAAE;YACd,IAAI,EAAE,MAAM,CAAA;YACZ,OAAO,CAAC,EAAE,MAAM,CAAA;SACjB,CAAA;KACF,CAAA;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAA;QACZ,OAAO,EAAE,MAAM,CAAA;QACf,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,gBAAgB,EAAE,MAAM,EAAE,CAAA;KAC3B,CAAA;IACD,MAAM,EAAE;QACN,OAAO,EAAE,uBAAuB,CAAA;QAChC,QAAQ,EAAE,uBAAuB,CAAA;QACjC,OAAO,EAAE,uBAAuB,CAAA;QAChC,OAAO,EAAE,uBAAuB,CAAA;QAChC,YAAY,EAAE,uBAAuB,CAAA;QACrC,IAAI,EAAE,uBAAuB,CAAA;KAC9B,CAAA;IACD,YAAY,EAAE;QACZ,OAAO,EAAE,uBAAuB,CAAA;QAChC,IAAI,EAAE,uBAAuB,CAAA;KAC9B,CAAA;IACD,UAAU,EAAE;QACV,OAAO,EAAE,qBAAqB,CAAA;QAC9B,IAAI,EAAE,qBAAqB,CAAA;KAC5B,CAAA;IACD,UAAU,EAAE;QACV,2FAA2F;QAC3F,eAAe,CAAC,EAAE,iCAAiC,CAAA;QACnD,2EAA2E;QAC3E,YAAY,CAAC,EAAE,8BAA8B,CAAA;QAC7C,+EAA+E;QAC/E,iBAAiB,CAAC,EAAE,MAAM,CAAA;KAC3B,CAAA;IACD,MAAM,EAAE,2BAA2B,CAAA;IACnC,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE;QACR,sBAAsB,EAAE,mCAAmC,CAAA;QAC3D,wBAAwB,EAAE,KAAK,CAAA;QAC/B,6BAA6B,EAAE,IAAI,CAAA;QACnC,uCAAuC,EAAE,IAAI,CAAA;QAC7C,8BAA8B,EAAE,IAAI,CAAA;QACpC,oBAAoB,EAAE,KAAK,CAAA;QAC3B,wBAAwB,EAAE,MAAM,EAAE,CAAA;QAClC,wBAAwB,EAAE,MAAM,EAAE,CAAA;QAClC,IAAI,EAAE,MAAM,CAAA;KACb,CAAA;CACF;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,EAAE,MAAM,CAAA;IACnB,UAAU,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,OAAO,CAAA;IACvB,iBAAiB,EAAE,mCAAmC,CAAA;IACtD,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACjC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACnC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAClC;AAwMD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAA;CAAO,GACzC,uBAAuB,CA2GzB;AA25BD,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,4BAA4B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CA4RzH;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,2BAA2B,GAAG,MAAM,CAwCvF"}

package/dist/src/dsh-install-observation.js

@@ -16,6 +16,7 @@ export const DSH_INSTALL_OBSERVATION_SCHEMA = 'upstream-radar.dsh-install-observ
 const EXACT_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
 const DEFAULT_TIMEOUT_MS = 180_000;
 const MAX_ARTIFACT_BYTES = 64 * 1024 * 1024;
+const MAX_ARTIFACT_UNPACKED_BYTES = 192 * 1024 * 1024;
 const MAX_COMMAND_OUTPUT_BYTES = 64 * 1024;
 const MAX_REPORT_DETAIL_BYTES = 4 * 1024;
 const MAX_TRACE_BYTES = 16 * 1024 * 1024;
@@ -55,6 +56,51 @@ function normalizeAllowedBuilds(values) {
 function isNpmPackageName(value) {
     return /^(?:@[a-z0-9][a-z0-9._-]*\/[a-z0-9][a-z0-9._-]*|[a-z0-9][a-z0-9._-]*)$/.test(value);
 }
+/**
+ * pnpm 10+ deliberately stops before running dependency lifecycle scripts
+ * unless each package is approved. Keep that policy gate distinct from a
+ * plugin install defect, but only when pnpm supplied a bounded, exact list.
+ */
+function requiredDependencyBuilds(output, artifactName) {
+    const normalized = output.replace(/\r\n?/g, '\n');
+    const marker = '[ERR_PNPM_IGNORED_BUILDS]';
+    const markerIndex = normalized.indexOf(marker);
+    if (markerIndex < 0)
+        return [];
+    const tail = normalized.slice(markerIndex, markerIndex + MAX_COMMAND_OUTPUT_BYTES);
+    const prefix = 'Ignored build scripts:';
+    const prefixIndex = tail.indexOf(prefix);
+    if (prefixIndex < marker.length || prefixIndex > 256)
+        return [];
+    let list = tail.slice(prefixIndex + prefix.length);
+    const terminator = list.search(/\n\s*\n|\n\s*Run\s+["']pnpm approve-builds["']/);
+    if (terminator >= 0)
+        list = list.slice(0, terminator);
+    const coordinates = list.split(',').map(value => value.trim()).filter(Boolean);
+    if (coordinates.length === 0 || coordinates.length > MAX_ALLOWED_BUILDS)
+        return [];
+    const names = new Set();
+    for (const coordinate of coordinates) {
+        try {
+            const parsed = parseNpmSpec(coordinate);
+            if (!EXACT_VERSION.test(parsed.version) || !isNpmPackageName(parsed.name))
+                return [];
+            names.add(parsed.name);
+        }
+        catch {
+            // When the exact reviewed tarball itself has a lifecycle script, pnpm
+            // prints its profile-relative file: coordinate alongside registry
+            // dependencies. Accept only the already-established artifact identity;
+            // an arbitrary local coordinate must not become an approval suggestion.
+            const prefix = `${artifactName}@file:`;
+            const localPath = coordinate.startsWith(prefix) ? coordinate.slice(prefix.length) : '';
+            if (localPath === '' || localPath.length > 4_096 || /[\u0000-\u0020\u007f]/.test(localPath))
+                return [];
+            names.add(artifactName);
+        }
+    }
+    return [...names].sort();
+}
 function staticPeerUsage(entries, requirements) {
     const state = new Map(requirements.map(requirement => [requirement.name, 'no-literal-reference-observed']));
     let scanned = 0;
@@ -482,18 +528,30 @@ async function readRegularFileNoFollow(path, maximum) {
 async function parsePackedArtifact(result, artifactDirectory, expectedName, expectedVersion) {
     if (commandStage(result).status !== 'passed')
         throw new Error(commandStage(result).detail ?? 'npm pack failed');
-    let output;
-    try {
-        output = JSON.parse(result.stdout.trim());
-    }
-    catch {
-        throw new Error('npm pack did not return JSON');
+    const stdout = result.stdout.trim();
+    let filename;
+    let integrity;
+    if (stdout.startsWith('[')) {
+        let output;
+        try {
+            output = JSON.parse(stdout);
+        }
+        catch {
+            throw new Error('npm pack did not return valid JSON');
+        }
+        if (!Array.isArray(output) || output.length !== 1 || typeof output[0] !== 'object' || output[0] === null) {
+            throw new Error('npm pack returned an unexpected result');
+        }
+        const item = output[0];
+        filename = item.filename;
+        integrity = typeof item.integrity === 'string' ? bounded(item.integrity, 1_024) : undefined;
     }
-    if (!Array.isArray(output) || output.length !== 1 || typeof output[0] !== 'object' || output[0] === null) {
-        throw new Error('npm pack returned an unexpected result');
+    else {
+        const lines = stdout.split(/\r?\n/);
+        if (lines.length !== 1)
+            throw new Error('npm pack returned an unexpected result');
+        filename = lines[0];
     }
-    const item = output[0];
-    const filename = item.filename;
     if (typeof filename !== 'string' || filename === '' || filename !== basename(filename) || !filename.endsWith('.tgz')) {
         throw new Error('npm pack returned an unsafe artifact filename');
     }
@@ -501,7 +559,10 @@ async function parsePackedArtifact(result, artifactDirectory, expectedName, expe
     if (!path.startsWith(`${resolve(artifactDirectory)}${sep}`))
         throw new Error('npm pack artifact escaped its directory');
     const compressed = await readRegularFileNoFollow(path, MAX_ARTIFACT_BYTES);
-    const parsed = parseNpmTarball(compressed);
+    const parsed = parseNpmTarball(compressed, {
+        maxFileBytes: MAX_ARTIFACT_BYTES,
+        maxUnpackedBytes: MAX_ARTIFACT_UNPACKED_BYTES,
+    });
     const manifestEntry = parsed.entries.find(entry => entry.path === 'package.json' && entry.type === 'file');
     if (manifestEntry?.contents === undefined)
         throw new Error('packed artifact has no package.json');
@@ -546,7 +607,6 @@ async function parsePackedArtifact(result, artifactDirectory, expectedName, expe
         throw new Error('packed artifact Node engine requirement exceeds 512 characters');
     }
     const nodeEngine = rawNodeEngine === undefined || rawNodeEngine === '' ? undefined : bounded(rawNodeEngine, 512);
-    const integrity = typeof item.integrity === 'string' ? bounded(item.integrity, 1_024) : undefined;
     const peerRequirements = requiredPeerDependencies(manifest, parsed.entries);
     return {
         path,
@@ -901,12 +961,12 @@ async function readProfilePeerContracts(path, requirements, sandboxRoot) {
     return contracts;
 }
 /**
- * Run the plugin's real ESM entry from the profile resolution anchor, then
- * boot DSH. The config dumper intentionally skips `!!js` and module imports;
- * this tiny trusted wrapper proves that the installed plugin can resolve its
- * own direct imports before the DSH headless app exits through `--help`.
+ * Resolve direct peer contracts from the profile anchor, then boot the actual
+ * composed DSH profile. A DSH bundle does not have to export its package root:
+ * its patch may load one or more package subpaths (or a command adapter).
+ * Importing the root here would therefore test a contract DSH never declared.
  */
-async function writeProfileLoadProbe(dshHome, pluginName, dshVersion, pnpmCommand, peerRequirements) {
+async function writeProfileLoadProbe(dshHome, dshVersion, pnpmCommand, peerRequirements) {
     const profileDirectory = join(dshHome, 'profiles', PROFILE);
     const profileMetadata = await lstat(profileDirectory);
     if (!profileMetadata.isDirectory() || profileMetadata.isSymbolicLink()) {
@@ -929,7 +989,6 @@ async function writeProfileLoadProbe(dshHome, pluginName, dshVersion, pnpmComman
         '  catch { peers.push({ name: peer.name, status: \'missing\' }) }',
         '}',
         `await writeFile(${JSON.stringify(peerResolutionPath)}, JSON.stringify({ schema: ${JSON.stringify(PROFILE_PEER_RESOLUTION_SCHEMA)}, peers }), { encoding: 'utf8', mode: 0o600, flag: 'wx' })`,
-        `await import(${JSON.stringify(pluginName)})`,
         `const child = spawn(${JSON.stringify(pnpmCommand)}, ${JSON.stringify(dshBootArgs)}, { cwd: process.cwd(), env: process.env, stdio: 'inherit' })`,
         "const exitCode = await new Promise(resolve => {",
         "  child.once('error', error => { console.error(error.message); resolve(1) })",
@@ -1222,6 +1281,7 @@ export async function observeDshPluginInstall(options) {
             pluginCodeMayExecuteDuringLoad: true,
             inheritedHostSecrets: false,
             approvedDependencyBuilds: allowedBuilds,
+            requiredDependencyBuilds: [],
             note: 'Radar scrubs the child environment and records Linux system-call evidence, but the caller provides and must verify the disposable isolation boundary. Same-container traces are best-effort evidence, not a malicious-code safety certificate.',
         },
     };
@@ -1271,7 +1331,7 @@ export async function observeDshPluginInstall(options) {
         const artifactResult = await runSafely(runner, {
             phase: 'artifact',
             command: npmCommand,
-            args: ['pack', `${spec.name}@${spec.version}`, '--ignore-scripts', '--json', '--pack-destination', '.'],
+            args: ['pack', `${spec.name}@${spec.version}`, '--ignore-scripts', '--pack-destination', '.', '--silent'],
             cwd: artifactDirectory,
             env: noScriptsEnvironment,
             timeoutMs,
@@ -1354,6 +1414,11 @@ export async function observeDshPluginInstall(options) {
                 return finishReport(report, 'unknown', 'the install command ran without readable trace evidence');
             }
             if (installResult.code !== 0) {
+                const requiredBuilds = requiredDependencyBuilds(`${installResult.stderr}\n${installResult.stdout}`, spec.name);
+                if (requiredBuilds.length > 0) {
+                    report.boundary.requiredDependencyBuilds = requiredBuilds;
+                    return finishReport(report, 'build-approval-required', `the DSH plugin install requires explicit approval for dependency builds: ${requiredBuilds.join(', ')}`);
+                }
                 return finishReport(report, 'install-failed', 'the traced DSH plugin install command failed');
             }
             const registered = await registeredBundle(environment.DSH_HOME, spec.name);
@@ -1362,7 +1427,7 @@ export async function observeDshPluginInstall(options) {
                 : { status: 'failed', detail: `the DSH profile did not register ${spec.name}` };
             if (!registered)
                 return finishReport(report, 'install-failed', 'DSH accepted the install command but did not register the plugin bundle');
-            const loadProbe = await writeProfileLoadProbe(environment.DSH_HOME, spec.name, options.dshVersion, pnpmCommand, artifact.requiredPeerDependencies);
+            const loadProbe = await writeProfileLoadProbe(environment.DSH_HOME, options.dshVersion, pnpmCommand, artifact.requiredPeerDependencies);
             const loadTracePath = join(traceDirectory, 'load.strace');
             const loadResult = await runSafely(runner, {
                 phase: 'load',
@@ -1420,6 +1485,7 @@ export function renderDshInstallObservation(report) {
         `Plugin Node requirement: ${report.artifact.nodeEngine ?? 'not declared'}`,
         `Isolation claim: ${report.boundary.isolationProviderClaim} (provided externally; not verified by Radar)`,
         `Approved dependency builds: ${report.boundary.approvedDependencyBuilds.length === 0 ? 'none' : report.boundary.approvedDependencyBuilds.join(', ')}`,
+        `Additional dependency builds required: ${report.boundary.requiredDependencyBuilds.length === 0 ? 'none' : report.boundary.requiredDependencyBuilds.join(', ')}`,
         '',
         `Result: ${report.result.toUpperCase()} — ${report.reason}`,
         `Lifecycle scripts declared: ${lifecycle}`,