@0xrama/bnpm 0.0.1

package/dist/src/package/publish.js

@@ -0,0 +1,189 @@
+import { RegistryError } from "../registry/client.js";
+import { loadRegistryConfiguration } from "../registry/configuration.js";
+import { generateProvenance, transparencyLogUrl } from "./provenance.js";
+import { trustedPublishingToken } from "./trusted-publishing.js";
+function stringSetting(value, key) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== "string" || value.length === 0)
+        throw new RegistryError(`package.json publishConfig.${key} must be a non-empty string`);
+    return value;
+}
+function publishConfig(manifest) {
+    const value = manifest.publishConfig;
+    if (value === undefined)
+        return {};
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new RegistryError("package.json publishConfig must be an object");
+    return value;
+}
+function registryOverride(value) {
+    if (value === undefined)
+        return undefined;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new RegistryError("publishConfig.registry must be an absolute HTTPS URL");
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.search || url.hash) {
+        throw new RegistryError("publishConfig.registry must be HTTPS and must not contain credentials, query, or fragment");
+    }
+    if (!url.pathname.endsWith("/"))
+        url.pathname += "/";
+    return url;
+}
+async function boundedError(response) {
+    if (!response.body)
+        return "";
+    const chunks = [];
+    let size = 0;
+    for await (const value of response.body) {
+        const chunk = Buffer.from(value);
+        size += chunk.length;
+        if (size > 1024 * 1024)
+            return "registry response exceeded the size limit";
+        chunks.push(chunk);
+    }
+    const text = Buffer.concat(chunks).toString("utf8");
+    try {
+        const parsed = JSON.parse(text);
+        const message = typeof parsed.error === "string" ? parsed.error : typeof parsed.reason === "string" ? parsed.reason : undefined;
+        return message?.slice(0, 500) ?? "";
+    }
+    catch {
+        return text.replace(/[\u0000-\u001f\u007f]/g, " ").slice(0, 500);
+    }
+}
+export async function publishPackage(options) {
+    if (options.artifact.manifest.private === true)
+        throw new RegistryError("Refusing to publish a package marked private");
+    const config = publishConfig(options.artifact.manifest);
+    const configuredRegistry = registryOverride(stringSetting(config.registry, "registry"));
+    const defaultRegistry = options.registry ?? configuredRegistry;
+    const configuration = await loadRegistryConfiguration({
+        userNpmrc: options.paths.userNpmrc,
+        projectNpmrc: options.paths.projectNpmrc,
+        ...(defaultRegistry === undefined ? {} : { defaultRegistry }),
+    });
+    const registry = options.registry ?? configuredRegistry ?? configuration.registryForPackage(options.artifact.name);
+    const configuredTag = stringSetting(config.tag, "tag");
+    const tag = options.tag ?? configuredTag ?? "latest";
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(tag))
+        throw new RegistryError(`Invalid distribution tag ${tag}`);
+    const configuredAccess = stringSetting(config.access, "access");
+    const access = options.access ?? (configuredAccess === "private" ? "restricted" : configuredAccess);
+    if (access !== undefined && access !== "public" && access !== "restricted")
+        throw new RegistryError("publish access must be public or restricted");
+    if (options.generateProvenance && options.provenance)
+        throw new RegistryError("generated and supplied provenance are mutually exclusive");
+    if (options.generateProvenance && access !== "public")
+        throw new RegistryError("provenance generation requires explicit public access");
+    const provenance = options.generateProvenance
+        ? await (options.provenanceGenerator ?? generateProvenance)(options.artifact)
+        : options.provenance;
+    const request = options.fetch ?? globalThis.fetch;
+    const trustedToken = await trustedPublishingToken({
+        packageName: options.artifact.name,
+        registry,
+        environment: options.environment ?? process.env,
+        fetch: request,
+        ...(options.signal === undefined ? {} : { signal: options.signal }),
+    });
+    const packagePath = encodeURIComponent(options.artifact.name);
+    const endpoint = options.stage ? new URL(`/-/stage/package/${packagePath}`, registry) : new URL(packagePath, registry);
+    const tarballUrl = new URL(`${packagePath}/-/${encodeURIComponent(options.artifact.filename)}`, registry).href;
+    const versionManifest = {
+        ...options.artifact.manifest,
+        _id: options.artifact.id,
+        dist: { integrity: options.artifact.integrity, shasum: options.artifact.shasum, tarball: tarballUrl },
+    };
+    const attachments = {
+        [options.artifact.filename]: {
+            content_type: "application/octet-stream",
+            data: options.artifact.tarball.toString("base64"),
+            length: options.artifact.size,
+        },
+    };
+    if (provenance) {
+        const serialized = JSON.stringify(provenance);
+        attachments[`${options.artifact.name}-${options.artifact.version}.sigstore`] = {
+            content_type: provenance.mediaType,
+            data: serialized,
+            length: Buffer.byteLength(serialized),
+        };
+    }
+    const body = JSON.stringify({
+        _id: options.artifact.name,
+        name: options.artifact.name,
+        ...(typeof options.artifact.manifest.description === "string" ? { description: options.artifact.manifest.description } : {}),
+        "dist-tags": { [tag]: options.artifact.version },
+        versions: { [options.artifact.version]: versionManifest },
+        ...(access === undefined ? {} : { access }),
+        _attachments: attachments,
+    });
+    let url = endpoint;
+    for (let redirect = 0; redirect <= 5; redirect += 1) {
+        const timeout = AbortSignal.timeout(30_000);
+        const signal = options.signal ? AbortSignal.any([options.signal, timeout]) : timeout;
+        const response = await request(url, {
+            method: options.stage ? "POST" : "PUT",
+            redirect: "manual",
+            signal,
+            headers: {
+                accept: "application/json",
+                "content-type": "application/json",
+                "content-length": String(Buffer.byteLength(body)),
+                ...configuration.headersFor(url),
+                ...(trustedToken === undefined ? {} : { authorization: `Bearer ${trustedToken}` }),
+                ...(options.otp === undefined ? {} : { "npm-otp": options.otp }),
+            },
+            body,
+        });
+        if ([307, 308].includes(response.status)) {
+            if (redirect === 5)
+                throw new RegistryError("Publish request exceeded the redirect limit");
+            const location = response.headers.get("location");
+            if (!location)
+                throw new RegistryError("Publish redirect did not provide a location");
+            url = new URL(location, url);
+            if (url.protocol !== "https:")
+                throw new RegistryError("Publish redirect must use HTTPS");
+            if (url.origin !== registry.origin)
+                throw new RegistryError("Publish redirect must remain on the registry origin");
+            continue;
+        }
+        if ([301, 302, 303].includes(response.status))
+            throw new RegistryError("Publish registry returned an unsafe method-changing redirect", response.status);
+        if (!response.ok) {
+            const detail = await boundedError(response);
+            throw new RegistryError(`Publish of ${options.artifact.id} failed with ${response.status}${detail ? `: ${detail}` : ""}`, response.status);
+        }
+        let stageId;
+        if (options.stage && response.body) {
+            const chunks = [];
+            let size = 0;
+            for await (const value of response.body) {
+                const chunk = Buffer.from(value);
+                size += chunk.length;
+                if (size > 1024 * 1024)
+                    throw new RegistryError("Staged publish response exceeded 1 MiB");
+                chunks.push(chunk);
+            }
+            try {
+                const value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+                stageId = typeof value.stageId === "string" ? value.stageId : typeof value.id === "string" ? value.id : undefined;
+            }
+            catch {
+                throw new RegistryError("Staged publish returned invalid JSON");
+            }
+            if (!stageId)
+                throw new RegistryError("Staged publish response has no stage id");
+        }
+        const tlog = provenance ? transparencyLogUrl(provenance) : undefined;
+        return { registry: registry.href, tag, ...(access === undefined ? {} : { access }), status: response.status, provenance: provenance !== undefined, ...(tlog === undefined ? {} : { transparencyLogUrl: tlog }), ...(stageId === undefined ? {} : { stageId }) };
+    }
+    throw new RegistryError("Publish request exceeded the redirect limit");
+}
+//# sourceMappingURL=publish.js.map

package/dist/src/package/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../../src/package/publish.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAyB,MAAM,iBAAiB,CAAC;AAChG,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AA4BjE,SAAS,aAAa,CAAC,KAAc,EAAE,GAAW;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,8BAA8B,GAAG,6BAA6B,CAAC,CAAC;IAC7I,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,QAA2C;IAChE,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC;IACrC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,8CAA8C,CAAC,CAAC;IACjJ,OAAO,KAA0C,CAAC;AACpD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,sDAAsD,CAAC,CAAC;IAAC,CAAC;IACxH,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACxF,MAAM,IAAI,aAAa,CAAC,2FAA2F,CAAC,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;YAAE,OAAO,2CAA2C,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0C,CAAC;QACzE,MAAM,OAAO,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAChI,OAAO,OAAO,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAuB;IAC1D,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,8CAA8C,CAAC,CAAC;IACxH,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxD,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IACxF,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,CAAC;IAC/D,MAAM,aAAa,GAAG,MAAM,yBAAyB,CAAC;QACpD,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS;QAClC,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY;QACxC,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;KAC9D,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,kBAAkB,IAAI,aAAa,CAAC,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnH,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,aAAa,IAAI,QAAQ,CAAC;IACrD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;IAC1G,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;IACpG,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY;QAAE,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;IACnJ,IAAI,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,aAAa,CAAC,0DAA0D,CAAC,CAAC;IAC1I,IAAI,OAAO,CAAC,kBAAkB,IAAI,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,uDAAuD,CAAC,CAAC;IACxI,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB;QAC3C,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,mBAAmB,IAAI,kBAAkB,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC7E,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACvB,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,sBAAsB,CAAC;QAChD,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAClC,QAAQ;QACR,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG;QAC/C,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;KACpE,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,oBAAoB,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACvH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,WAAW,MAAM,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC/G,MAAM,eAAe,GAAG;QACtB,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ;QAC5B,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;QACxB,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;KACtG,CAAC;IACF,MAAM,WAAW,GAA4B;QAC3C,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC3B,YAAY,EAAE,0BAA0B;YACxC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACjD,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;SAC9B;KACF,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC9C,WAAW,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,WAAW,CAAC,GAAG;YAC7E,YAAY,EAAE,UAAU,CAAC,SAAS;YAClC,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;SACtC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,GAAG,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAC1B,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI;QAC3B,GAAG,CAAC,OAAO,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5H,WAAW,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;QAChD,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE;QACzD,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IACH,IAAI,GAAG,GAAG,QAAQ,CAAC;IACnB,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,QAAQ,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACrF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;YAClC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YACtC,QAAQ,EAAE,QAAQ;YAClB,MAAM;YACN,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;gBAClC,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;gBACjD,GAAG,aAAa,CAAC,UAAU,CAAC,GAAG,CAAC;gBAChC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE,CAAC;gBAClF,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;aACjE;YACD,IAAI;SACL,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACzC,IAAI,QAAQ,KAAK,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;YACtF,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,CAAC,CAAC;YAC1F,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;gBAAE,MAAM,IAAI,aAAa,CAAC,qDAAqD,CAAC,CAAC;YACnH,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,8DAA8D,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QACxJ,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,MAAM,IAAI,aAAa,CAAC,cAAc,OAAO,CAAC,QAAQ,CAAC,EAAE,gBAAgB,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7I,CAAC;QACD,IAAI,OAA2B,CAAC;QAChC,IAAI,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,MAAM,GAAa,EAAE,CAAC;YAAC,IAAI,IAAI,GAAG,CAAC,CAAC;YAC1C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAAC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;gBAAC,IAAI,IAAI,GAAG,IAAI,GAAG,IAAI;oBAAE,MAAM,IAAI,aAAa,CAAC,wCAAwC,CAAC,CAAC;gBAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC;YACnN,IAAI,CAAC;gBAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwC,CAAC;gBAAC,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,aAAa,CAAC,sCAAsC,CAAC,CAAC;YAAC,CAAC;YAC9S,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,yCAAyC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACrE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,KAAK,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;IAClQ,CAAC;IACD,MAAM,IAAI,aAAa,CAAC,6CAA6C,CAAC,CAAC;AACzE,CAAC"}

package/dist/src/package/trusted-publishing.d.ts

@@ -0,0 +1,7 @@
+export declare function trustedPublishingToken(options: {
+    readonly packageName: string;
+    readonly registry: URL;
+    readonly environment?: Readonly<Record<string, string | undefined>>;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+}): Promise<string | undefined>;

package/dist/src/package/trusted-publishing.js

@@ -0,0 +1,84 @@
+import npa from "npm-package-arg";
+const maxResponseBytes = 1024 * 1024;
+function requestSignal(signal) {
+    const timeout = AbortSignal.timeout(30_000);
+    return signal === undefined ? timeout : AbortSignal.any([signal, timeout]);
+}
+async function boundedJson(response) {
+    if (!response.body)
+        return undefined;
+    const chunks = [];
+    let size = 0;
+    for await (const value of response.body) {
+        const chunk = Buffer.from(value);
+        size += chunk.length;
+        if (size > maxResponseBytes)
+            return undefined;
+        chunks.push(chunk);
+    }
+    try {
+        const parsed = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+        return typeof parsed === "object" && parsed !== null && !Array.isArray(parsed) ? parsed : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function supportedCi(environment) {
+    return environment.GITHUB_ACTIONS === "true" || environment.GITLAB_CI === "true" || environment.CIRCLECI === "true";
+}
+async function githubIdToken(registry, environment, request, signal) {
+    const rawUrl = environment.ACTIONS_ID_TOKEN_REQUEST_URL;
+    const requestToken = environment.ACTIONS_ID_TOKEN_REQUEST_TOKEN;
+    if (!rawUrl || !requestToken)
+        return undefined;
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return undefined;
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.hash)
+        return undefined;
+    url.searchParams.set("audience", `npm:${registry.hostname}`);
+    const response = await request(url, {
+        redirect: "error",
+        signal: requestSignal(signal),
+        headers: { accept: "application/json", authorization: `Bearer ${requestToken}` },
+    });
+    if (!response.ok)
+        return undefined;
+    const body = await boundedJson(response);
+    return typeof body?.value === "string" && body.value.length > 0 ? body.value : undefined;
+}
+export async function trustedPublishingToken(options) {
+    const environment = options.environment ?? process.env;
+    if (!supportedCi(environment))
+        return undefined;
+    const request = options.fetch ?? globalThis.fetch;
+    try {
+        const idToken = environment.NPM_ID_TOKEN ?? (environment.GITHUB_ACTIONS === "true"
+            ? await githubIdToken(options.registry, environment, request, options.signal)
+            : undefined);
+        if (!idToken)
+            return undefined;
+        const parsed = npa(options.packageName);
+        const escapedName = "escapedName" in parsed && typeof parsed.escapedName === "string" ? parsed.escapedName : encodeURIComponent(options.packageName);
+        const endpoint = new URL(`/-/npm/v1/oidc/token/exchange/package/${escapedName}`, options.registry);
+        const response = await request(endpoint, {
+            method: "POST",
+            redirect: "error",
+            signal: requestSignal(options.signal),
+            headers: { accept: "application/json", authorization: `Bearer ${idToken}` },
+        });
+        if (!response.ok)
+            return undefined;
+        const body = await boundedJson(response);
+        return typeof body?.token === "string" && body.token.length > 0 ? body.token : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=trusted-publishing.js.map

package/dist/src/package/trusted-publishing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-publishing.js","sourceRoot":"","sources":["../../../src/package/trusted-publishing.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,iBAAiB,CAAC;AAElC,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErC,SAAS,aAAa,CAAC,MAAoB;IACzC,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAkB;IAC3C,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,gBAAgB;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAClE,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,WAAyD;IAC5E,OAAO,WAAW,CAAC,cAAc,KAAK,MAAM,IAAI,WAAW,CAAC,SAAS,KAAK,MAAM,IAAI,WAAW,CAAC,QAAQ,KAAK,MAAM,CAAC;AACtH,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,QAAa,EACb,WAAyD,EACzD,OAAgC,EAChC,MAAoB;IAEpB,MAAM,MAAM,GAAG,WAAW,CAAC,4BAA4B,CAAC;IACxD,MAAM,YAAY,GAAG,WAAW,CAAC,8BAA8B,CAAC;IAChE,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;IAC1D,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5F,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;QAClC,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC;QAC7B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE;KACjF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACnC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,OAM5C;IACC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IACvD,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,WAAW,CAAC,YAAY,IAAI,CAAC,WAAW,CAAC,cAAc,KAAK,MAAM;YAChF,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;YAC7E,CAAC,CAAC,SAAS,CAAC,CAAC;QACf,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,WAAW,GAAG,aAAa,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACrJ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,yCAAyC,WAAW,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QACnG,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE;YACvC,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC;YACrC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;SAC5E,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/src/project/dependency-error.d.ts

@@ -0,0 +1,3 @@
+export declare class DependencyError extends Error {
+    constructor(message: string);
+}

package/dist/src/project/dependency-error.js

@@ -0,0 +1,7 @@
+export class DependencyError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "DependencyError";
+    }
+}
+//# sourceMappingURL=dependency-error.js.map

package/dist/src/project/dependency-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-error.js","sourceRoot":"","sources":["../../../src/project/dependency-error.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF"}

package/dist/src/project/dev-engines.d.ts

@@ -0,0 +1,10 @@
+export declare class DevEnginesError extends Error {
+    constructor(message: string);
+}
+export declare function checkDevEngines(cwd: string, options?: {
+    readonly packageManagerVersion?: string;
+    readonly platform?: string;
+    readonly architecture?: string;
+    readonly libc?: string;
+    readonly nodeVersion?: string;
+}): Promise<readonly string[]>;

package/dist/src/project/dev-engines.js

@@ -0,0 +1,70 @@
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import semver from "semver";
+import packageMetadata from "../../package.json" with { type: "json" };
+import { parseManifest } from "./manifest.js";
+export class DevEnginesError extends Error {
+    constructor(message) { super(`devEngines: ${message}`); this.name = "DevEnginesError"; }
+}
+function entries(value, key) {
+    const raw = Array.isArray(value) ? value : [value];
+    if (raw.length === 0)
+        throw new DevEnginesError(`${key} must not be an empty array`);
+    return raw.map((item) => {
+        if (typeof item !== "object" || item === null || Array.isArray(item))
+            throw new DevEnginesError(`${key} must be an object or array of objects`);
+        const record = item;
+        if (typeof record.name !== "string" || !record.name || record.name.includes("\0"))
+            throw new DevEnginesError(`${key}.name must be a non-empty string`);
+        if (record.version !== undefined && (typeof record.version !== "string" || semver.validRange(record.version) === null))
+            throw new DevEnginesError(`${key}.version must be a semantic version range`);
+        if (record.onFail !== undefined && !["error", "warn", "ignore"].includes(String(record.onFail)))
+            throw new DevEnginesError(`${key}.onFail must be error, warn, or ignore`);
+        return { name: record.name, ...(typeof record.version === "string" ? { version: record.version } : {}), onFail: (record.onFail ?? "error") };
+    });
+}
+function runtimeLibc() {
+    if (process.platform !== "linux")
+        return undefined;
+    const report = process.report?.getReport();
+    if (typeof report?.header?.glibcVersionRuntime === "string")
+        return "glibc";
+    return report?.sharedObjects?.some((value) => /(?:^|[\\/])(?:libc\.musl|ld-musl)/.test(value)) ? "musl" : undefined;
+}
+export async function checkDevEngines(cwd, options = {}) {
+    const path = join(cwd, "package.json");
+    const bytes = await readFile(path, "utf8");
+    parseManifest(bytes, path);
+    const raw = JSON.parse(bytes);
+    if (raw.devEngines === undefined)
+        return [];
+    if (typeof raw.devEngines !== "object" || raw.devEngines === null || Array.isArray(raw.devEngines))
+        throw new DevEnginesError("must be an object");
+    const configured = raw.devEngines;
+    const supported = new Set(["cpu", "os", "libc", "runtime", "packageManager"]);
+    for (const key of Object.keys(configured))
+        if (!supported.has(key))
+            throw new DevEnginesError(`unsupported key ${key}`);
+    const libc = options.libc ?? runtimeLibc();
+    const environment = {
+        cpu: { name: options.architecture ?? process.arch }, os: { name: options.platform ?? process.platform }, libc: libc === undefined ? {} : { name: libc },
+        runtime: { name: "node", version: options.nodeVersion ?? process.versions.node }, packageManager: { name: "bnpm", version: options.packageManagerVersion ?? packageMetadata.version },
+    };
+    const warnings = [];
+    for (const key of [...supported].sort()) {
+        if (configured[key] === undefined)
+            continue;
+        const expected = entries(configured[key], key);
+        const actual = environment[key] ?? {};
+        const matches = expected.some((entry) => entry.name === actual.name && (entry.version === undefined || (actual.version !== undefined && semver.satisfies(actual.version, entry.version))));
+        if (matches)
+            continue;
+        const message = `${key} requires ${expected.map((entry) => `${entry.name}${entry.version ? `@${entry.version}` : ""}`).join(" or ")}, current ${actual.name ?? "unknown"}${actual.version ? `@${actual.version}` : ""}`;
+        if (expected.some((entry) => entry.onFail === "error"))
+            throw new DevEnginesError(message);
+        if (expected.some((entry) => entry.onFail === "warn"))
+            warnings.push(message);
+    }
+    return warnings;
+}
+//# sourceMappingURL=dev-engines.js.map

package/dist/src/project/dev-engines.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-engines.js","sourceRoot":"","sources":["../../../src/project/dev-engines.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,eAAe,MAAM,oBAAoB,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe,IAAI,KAAK,CAAC,eAAe,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC;CACjG;AAID,SAAS,OAAO,CAAC,KAAc,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACtB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,wCAAwC,CAAC,CAAC;QAChJ,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,kCAAkC,CAAC,CAAC;QACvJ,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,2CAA2C,CAAC,CAAC;QACrM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,GAAG,GAAG,wCAAwC,CAAC,CAAC;QAC3K,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAA0B,EAAE,CAAC;IACxK,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW;IAClB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,SAAS,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,SAAS,EAA8H,CAAC;IACvK,IAAI,OAAO,MAAM,EAAE,MAAM,EAAE,mBAAmB,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC5E,OAAO,MAAM,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,OAAO,GAAmK,EAAE;IAC7N,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAAC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAsC,CAAC;IACnE,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC5C,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;IACnJ,MAAM,UAAU,GAAG,GAAG,CAAC,UAAqC,CAAC;IAAC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC5I,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,GAAG,EAAE,CAAC,CAAC;IACxH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IAC3C,MAAM,WAAW,GAAoF;QACnG,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE;QACvJ,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,qBAAqB,IAAI,eAAe,CAAC,OAAO,EAAE;KACtL,CAAC;IACF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3L,IAAI,OAAO;YAAE,SAAS;QACtB,MAAM,OAAO,GAAG,GAAG,GAAG,aAAa,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,MAAM,CAAC,IAAI,IAAI,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACxN,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3F,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/src/project/discovery.d.ts

@@ -0,0 +1,6 @@
+export interface DiscoveredProject {
+    readonly projectRoot: string;
+    readonly importerRoot: string;
+    readonly kind: "project" | "workspace";
+}
+export declare function discoverProject(cwd: string): Promise<DiscoveredProject | undefined>;

package/dist/src/project/discovery.js

@@ -0,0 +1,51 @@
+import { readFile, realpath } from "node:fs/promises";
+import { dirname, relative, resolve, sep } from "node:path";
+import { parseManifest } from "./manifest.js";
+async function manifestAt(root) {
+    try {
+        const path = resolve(root, "package.json");
+        const manifest = parseManifest(await readFile(path, "utf8"), path);
+        return { root, workspaces: manifest.workspaces };
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+function workspacePatternMatches(pattern, importerPath) {
+    const normalizedPattern = pattern.replace(/\\/g, "/").replace(/\/+$/, "");
+    const normalizedPath = importerPath.replace(/\\/g, "/").replace(/\/+$/, "");
+    const expression = new RegExp(`^${normalizedPattern
+        .split("*")
+        .map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&"))
+        .join("[^/]*")}$`);
+    return expression.test(normalizedPath);
+}
+export async function discoverProject(cwd) {
+    let current = await realpath(cwd);
+    const manifests = [];
+    while (true) {
+        const manifest = await manifestAt(current);
+        if (manifest)
+            manifests.push(manifest);
+        const parent = dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    const importer = manifests[0];
+    if (!importer)
+        return undefined;
+    if (importer.workspaces.length > 0) {
+        return { projectRoot: importer.root, importerRoot: importer.root, kind: "project" };
+    }
+    for (const workspace of manifests.slice(1)) {
+        const importerPath = relative(workspace.root, importer.root).split(sep).join("/");
+        if (workspace.workspaces.some((pattern) => workspacePatternMatches(pattern, importerPath))) {
+            return { projectRoot: workspace.root, importerRoot: importer.root, kind: "workspace" };
+        }
+    }
+    return { projectRoot: importer.root, importerRoot: importer.root, kind: "project" };
+}
+//# sourceMappingURL=discovery.js.map

package/dist/src/project/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/project/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAa9C,KAAK,UAAU,UAAU,CAAC,IAAY;IACpC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC;IACnD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe,EAAE,YAAoB;IACpE,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1E,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,IAAI,MAAM,CAC3B,IAAI,iBAAiB;SAClB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC;SAC1D,IAAI,CAAC,OAAO,CAAC,GAAG,CACpB,CAAC;IACF,OAAO,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,IAAI,OAAO,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAC9B,OAAO,GAAG,MAAM,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChC,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACtF,CAAC;IACD,KAAK,MAAM,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,MAAM,YAAY,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClF,IAAI,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,uBAAuB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YAC3F,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;QACzF,CAAC;IACH,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACtF,CAAC"}

package/dist/src/project/global.d.ts

@@ -0,0 +1,3 @@
+import type { BnpmPaths } from "../config/paths.js";
+export declare function ensureGlobalProject(paths: BnpmPaths): Promise<void>;
+export declare function exposeGlobalBins(paths: BnpmPaths): Promise<void>;

package/dist/src/project/global.js

@@ -0,0 +1,43 @@
+import { lstat, mkdir, readlink, rename, rm, symlink, writeFile } from "node:fs/promises";
+import { dirname, join, relative, resolve } from "node:path";
+import { randomUUID } from "node:crypto";
+export async function ensureGlobalProject(paths) {
+    await mkdir(paths.globalRoot, { recursive: true, mode: 0o755 });
+    const manifest = join(paths.globalRoot, "package.json");
+    try {
+        await writeFile(manifest, '{\n  "name": "bnpm-global",\n  "private": true,\n  "dependencies": {}\n}\n', { encoding: "utf8", mode: 0o644, flag: "wx" });
+    }
+    catch (error) {
+        if (error.code !== "EEXIST")
+            throw error;
+    }
+}
+export async function exposeGlobalBins(paths) {
+    const target = join(paths.globalRoot, "node_modules", ".bin");
+    await mkdir(target, { recursive: true, mode: 0o755 });
+    await mkdir(dirname(paths.globalBin), { recursive: true, mode: 0o755 });
+    try {
+        const existing = await lstat(paths.globalBin);
+        if (existing.isSymbolicLink()) {
+            const linked = await readlink(paths.globalBin);
+            if (resolve(dirname(paths.globalBin), linked) === target)
+                return;
+        }
+        if (existing.isDirectory() && process.platform === "win32")
+            return;
+        throw new Error(`Global bin path already exists and is not managed by bnpm: ${paths.globalBin}`);
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const temporary = `${paths.globalBin}.${randomUUID()}.tmp`;
+    try {
+        await symlink(process.platform === "win32" ? target : relative(dirname(temporary), target), temporary, process.platform === "win32" ? "junction" : "dir");
+        await rename(temporary, paths.globalBin);
+    }
+    finally {
+        await rm(temporary, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=global.js.map

package/dist/src/project/global.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"global.js","sourceRoot":"","sources":["../../../src/project/global.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAAgB;IACxD,MAAM,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,QAAQ,EAAE,4EAA4E,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,KAAgB;IACrD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtD,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,MAAM;gBAAE,OAAO;QACnE,CAAC;QACD,IAAI,QAAQ,CAAC,WAAW,EAAE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO;QACnE,MAAM,IAAI,KAAK,CAAC,8DAA8D,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;IACnG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,UAAU,EAAE,MAAM,CAAC;IAC3D,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1J,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC"}

package/dist/src/project/invalidation.d.ts

@@ -0,0 +1,3 @@
+export declare function invalidateInstalledLayout(projectRoot: string, reason: string): Promise<void>;
+export declare function installedLayoutIsInvalidated(projectRoot: string): Promise<boolean>;
+export declare function clearInstalledLayoutInvalidation(projectRoot: string): Promise<void>;

package/dist/src/project/invalidation.js

@@ -0,0 +1,21 @@
+import { access, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+const marker = ".bnpm-install-invalidated";
+export async function invalidateInstalledLayout(projectRoot, reason) {
+    await writeFile(join(projectRoot, marker), `${JSON.stringify({ version: 1, reason })}\n`, { mode: 0o600 });
+}
+export async function installedLayoutIsInvalidated(projectRoot) {
+    try {
+        await access(join(projectRoot, marker));
+        return true;
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return false;
+        throw error;
+    }
+}
+export async function clearInstalledLayoutInvalidation(projectRoot) {
+    await rm(join(projectRoot, marker), { force: true });
+}
+//# sourceMappingURL=invalidation.js.map

package/dist/src/project/invalidation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invalidation.js","sourceRoot":"","sources":["../../../src/project/invalidation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,MAAM,GAAG,2BAA2B,CAAC;AAE3C,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,WAAmB,EAAE,MAAc;IACjF,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC7G,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,WAAmB;IACpE,IAAI,CAAC;QAAC,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC7D,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAAC,WAAmB;IACxE,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACvD,CAAC"}

package/dist/src/project/link.d.ts

@@ -0,0 +1,21 @@
+import { type BnpmPaths } from "../config/paths.js";
+export declare function registerLink(options: {
+    readonly cwd: string;
+    readonly paths?: BnpmPaths;
+}): Promise<{
+    readonly name: string;
+    readonly target: string;
+}>;
+export declare function linkPackages(options: {
+    readonly cwd: string;
+    readonly names: readonly string[];
+    readonly paths?: BnpmPaths;
+}): Promise<readonly {
+    readonly name: string;
+    readonly target: string;
+}[]>;
+export declare function unregisterLink(options: {
+    readonly cwd: string;
+    readonly names: readonly string[];
+    readonly paths?: BnpmPaths;
+}): Promise<readonly string[]>;