@0xrama/bnpm 0.0.1

package/dist/src/project/pkg.js

@@ -0,0 +1,94 @@
+import { randomBytes } from "node:crypto";
+import { readFile, rename, rm, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { ManifestError, parseManifest } from "./manifest.js";
+const forbidden = new Set(["__proto__", "prototype", "constructor"]);
+function segments(path) {
+    if (!path || path.includes("\0"))
+        throw new ManifestError(`invalid package property path ${path}`);
+    const normalized = path.replace(/\[([0-9]+|"[^"]+"|'[^']+')\]/g, (_match, value) => `.${value.replace(/^['"]|['"]$/g, "")}`);
+    const result = normalized.split(".");
+    if (result.some((part) => !part || forbidden.has(part) || !/^[A-Za-z0-9_@/-]+$/.test(part)))
+        throw new ManifestError(`invalid package property path ${path}`);
+    return result;
+}
+function readAt(root, path) {
+    let value = root;
+    for (const part of segments(path)) {
+        if (typeof value !== "object" || value === null)
+            return undefined;
+        value = value[part];
+    }
+    return value;
+}
+function setAt(root, path, value) {
+    const parts = segments(path);
+    let current = root;
+    for (const part of parts.slice(0, -1)) {
+        const nested = current[part];
+        if (nested === undefined)
+            current[part] = {};
+        else if (typeof nested !== "object" || nested === null || Array.isArray(nested))
+            throw new ManifestError(`${path} crosses a non-object property`);
+        current = current[part];
+    }
+    current[parts.at(-1) ?? ""] = value;
+}
+function deleteAt(root, path) {
+    const parts = segments(path);
+    let current = root;
+    for (const part of parts.slice(0, -1)) {
+        const nested = current?.[part];
+        if (typeof nested !== "object" || nested === null || Array.isArray(nested))
+            return;
+        current = nested;
+    }
+    if (current)
+        delete current[parts.at(-1) ?? ""];
+}
+async function manifest(directory) {
+    const path = join(directory, "package.json");
+    const bytes = await readFile(path, "utf8");
+    parseManifest(bytes, path);
+    const value = JSON.parse(bytes);
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        throw new ManifestError(`${path}: root must be an object`);
+    return { path, value: value };
+}
+async function save(path, value) {
+    const temporary = `${path}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(value, null, 2)}\n`, { flag: "wx", mode: 0o644 });
+        parseManifest(await readFile(temporary, "utf8"), path);
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+export async function packageProperties(options) {
+    const loaded = await manifest(options.directory);
+    if (options.action === "get") {
+        if (options.operands.length === 0)
+            return loaded.value;
+        if (options.operands.length === 1)
+            return readAt(loaded.value, options.operands[0] ?? "");
+        return Object.fromEntries(options.operands.map((path) => [path, readAt(loaded.value, path)]));
+    }
+    if (options.action === "set") {
+        for (const operand of options.operands) {
+            const separator = operand.indexOf("=");
+            if (separator <= 0)
+                throw new ManifestError(`pkg set requires key=value, received ${operand}`);
+            setAt(loaded.value, operand.slice(0, separator), operand.slice(separator + 1));
+        }
+    }
+    else {
+        for (const operand of options.operands)
+            deleteAt(loaded.value, operand);
+    }
+    await save(loaded.path, loaded.value);
+    return loaded.value;
+}
+//# sourceMappingURL=pkg.js.map

package/dist/src/project/pkg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkg.js","sourceRoot":"","sources":["../../../src/project/pkg.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACnE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE7D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAErE,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IACnG,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,+BAA+B,EAAE,CAAC,MAAM,EAAE,KAAa,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACrI,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;IAC9J,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,IAAa,EAAE,IAAY;IACzC,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QAClE,KAAK,GAAI,KAAiC,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,KAAK,CAAC,IAA6B,EAAE,IAAY,EAAE,KAAc;IACxE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;aACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;QAClJ,OAAO,GAAG,OAAO,CAAC,IAAI,CAA4B,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC;AACtC,CAAC;AAED,SAAS,QAAQ,CAAC,IAA6B,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO,GAAwC,IAAI,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAY,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO;QACnF,OAAO,GAAG,MAAiC,CAAC;IAC9C,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,SAAiB;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3C,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAY,CAAC;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACpI,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAgC,EAAE,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,KAA8B;IAC9D,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;IACjF,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/F,aAAa,CAAC,MAAM,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;QACvD,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAIvC;IACC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACvD,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1F,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,SAAS,IAAI,CAAC;gBAAE,MAAM,IAAI,aAAa,CAAC,wCAAwC,OAAO,EAAE,CAAC,CAAC;YAC/F,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ;YAAE,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC;AACtB,CAAC"}

package/dist/src/project/recovery.d.ts

@@ -0,0 +1,2 @@
+export declare function recoverProjectLayout(projectRoot: string): Promise<void>;
+export declare function activateWithRecovery(projectRoot: string, prepared: string): Promise<void>;

package/dist/src/project/recovery.js

@@ -0,0 +1,82 @@
+import { randomUUID } from "node:crypto";
+import { readFile, rename, rm, stat, writeFile } from "node:fs/promises";
+import { basename, dirname, join } from "node:path";
+const journalName = ".bnpm-layout-transaction.json";
+function journalPath(projectRoot) { return join(projectRoot, journalName); }
+function validate(projectRoot, journal) {
+    if (journal.version !== 1 || journal.target !== join(projectRoot, "node_modules"))
+        throw new Error("Invalid bnpm recovery journal");
+    if (dirname(journal.backup) !== projectRoot || !basename(journal.backup).startsWith(".bnpm-node_modules-backup-"))
+        throw new Error("Invalid bnpm recovery backup path");
+    if (dirname(dirname(journal.prepared)) !== projectRoot || basename(journal.prepared) !== "node_modules" || !basename(dirname(journal.prepared)).startsWith(".bnpm-install-"))
+        throw new Error("Invalid bnpm prepared layout path");
+}
+async function exists(path) { try {
+    await stat(path);
+    return true;
+}
+catch (error) {
+    if (error.code === "ENOENT")
+        return false;
+    throw error;
+} }
+async function save(path, journal) {
+    const temporary = `${path}.${randomUUID()}.tmp`;
+    try {
+        await writeFile(temporary, `${JSON.stringify(journal)}\n`, { flag: "wx", mode: 0o600 });
+        await rename(temporary, path);
+    }
+    finally {
+        await rm(temporary, { force: true });
+    }
+}
+export async function recoverProjectLayout(projectRoot) {
+    const path = journalPath(projectRoot);
+    let journal;
+    try {
+        journal = JSON.parse(await readFile(path, "utf8"));
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return;
+        throw error;
+    }
+    validate(projectRoot, journal);
+    const targetExists = await exists(journal.target);
+    const backupExists = await exists(journal.backup);
+    if (!targetExists && backupExists)
+        await rename(journal.backup, journal.target);
+    else if (targetExists && backupExists)
+        await rm(journal.backup, { recursive: true, force: true });
+    await rm(dirname(journal.prepared), { recursive: true, force: true });
+    await rm(path, { force: true });
+}
+export async function activateWithRecovery(projectRoot, prepared) {
+    await recoverProjectLayout(projectRoot);
+    const target = join(projectRoot, "node_modules");
+    const backup = join(projectRoot, `.bnpm-node_modules-backup-${randomUUID()}`);
+    const path = journalPath(projectRoot);
+    let journal = { version: 1, target, backup, prepared, phase: "prepared" };
+    await save(path, journal);
+    try {
+        try {
+            await rename(target, backup);
+            journal = { ...journal, phase: "backed-up" };
+            await save(path, journal);
+        }
+        catch (error) {
+            if (error.code !== "ENOENT")
+                throw error;
+        }
+        await rename(prepared, target);
+        journal = { ...journal, phase: "activated" };
+        await save(path, journal);
+        await rm(backup, { recursive: true, force: true });
+        await rm(path, { force: true });
+    }
+    catch (error) {
+        await recoverProjectLayout(projectRoot);
+        throw error;
+    }
+}
+//# sourceMappingURL=recovery.js.map

package/dist/src/project/recovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery.js","sourceRoot":"","sources":["../../../src/project/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUpD,MAAM,WAAW,GAAG,+BAA+B,CAAC;AAEpD,SAAS,WAAW,CAAC,WAAmB,IAAY,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;AAE5F,SAAS,QAAQ,CAAC,WAAmB,EAAE,OAAsB;IAC3D,IAAI,OAAO,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACpI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,4BAA4B,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACxK,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,WAAW,IAAI,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,cAAc,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;AACrO,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,IAAY,IAAsB,IAAI,CAAC;IAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO,IAAI,CAAC;AAAC,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAAC,MAAM,KAAK,CAAC;AAAC,CAAC,CAAC,CAAC;AAErM,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,OAAsB;IACtD,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAC;IAChD,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,MAAM,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;YACvH,CAAC;QAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB;IAC5D,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,OAAsB,CAAC;IAC3B,IAAI,CAAC;QAAC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAkB,CAAC;IAAC,CAAC;IAC5E,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC9F,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY,IAAI,YAAY;QAAE,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;SAC3E,IAAI,YAAY,IAAI,YAAY;QAAE,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,QAAgB;IAC9E,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,6BAA6B,UAAU,EAAE,EAAE,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;IACtC,IAAI,OAAO,GAAkB,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACzF,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAAC,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAAC,CAAC;QAC9G,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACtF,MAAM,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC/B,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;QAAC,MAAM,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnD,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/src/project/workspaces.d.ts

@@ -0,0 +1,4 @@
+export declare class WorkspaceError extends Error {
+    constructor(message: string);
+}
+export declare function discoverWorkspacePackages(root: string, patterns: readonly string[]): Promise<ReadonlyMap<string, string>>;

package/dist/src/project/workspaces.js

@@ -0,0 +1,59 @@
+import { readdir, readFile, realpath } from "node:fs/promises";
+import { join, relative, sep } from "node:path";
+import { parseManifest } from "./manifest.js";
+export class WorkspaceError extends Error {
+    constructor(message) {
+        super(`Workspace error: ${message}`);
+        this.name = "WorkspaceError";
+    }
+}
+function segmentMatches(pattern, value) {
+    const expression = new RegExp(`^${pattern.split("*").map((part) => part.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join("[^/]*")}$`);
+    return expression.test(value);
+}
+function patternMatches(pattern, path) {
+    const patterns = pattern.replace(/\\/g, "/").replace(/^\.\//, "").replace(/\/$/, "").split("/");
+    const parts = path.replace(/\\/g, "/").split("/");
+    const match = (patternIndex, partIndex) => {
+        if (patternIndex === patterns.length)
+            return partIndex === parts.length;
+        if (patterns[patternIndex] === "**")
+            return match(patternIndex + 1, partIndex) || (partIndex < parts.length && match(patternIndex, partIndex + 1));
+        return partIndex < parts.length && segmentMatches(patterns[patternIndex] ?? "", parts[partIndex] ?? "") && match(patternIndex + 1, partIndex + 1);
+    };
+    return match(0, 0);
+}
+export async function discoverWorkspacePackages(root, patterns) {
+    const canonicalRoot = await realpath(root);
+    const packages = new Map();
+    let visited = 0;
+    const walk = async (directory) => {
+        visited += 1;
+        if (visited > 10_000)
+            throw new WorkspaceError("workspace discovery exceeded 10,000 directories");
+        const relativePath = relative(canonicalRoot, directory).split(sep).join("/");
+        if (relativePath && patterns.some((pattern) => patternMatches(pattern, relativePath))) {
+            try {
+                const manifestPath = join(directory, "package.json");
+                const manifest = parseManifest(await readFile(manifestPath, "utf8"), manifestPath);
+                if (!manifest.name)
+                    throw new WorkspaceError(`${manifestPath} requires a package name`);
+                if (packages.has(manifest.name))
+                    throw new WorkspaceError(`duplicate workspace package name ${manifest.name}`);
+                packages.set(manifest.name, await realpath(directory));
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+        }
+        for (const entry of await readdir(directory, { withFileTypes: true })) {
+            if (!entry.isDirectory() || ["node_modules", ".git", ".bnpm"].includes(entry.name))
+                continue;
+            await walk(join(directory, entry.name));
+        }
+    };
+    await walk(canonicalRoot);
+    return new Map([...packages].sort(([left], [right]) => left.localeCompare(right)));
+}
+//# sourceMappingURL=workspaces.js.map

package/dist/src/project/workspaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.js","sourceRoot":"","sources":["../../../src/project/workspaces.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE9C,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAClI,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,cAAc,CAAC,OAAe,EAAE,IAAY;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,CAAC,YAAoB,EAAE,SAAiB,EAAW,EAAE;QACjE,IAAI,YAAY,KAAK,QAAQ,CAAC,MAAM;YAAE,OAAO,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC;QACxE,IAAI,QAAQ,CAAC,YAAY,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC;QACnJ,OAAO,SAAS,GAAG,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,IAAI,KAAK,CAAC,YAAY,GAAG,CAAC,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC;IACpJ,CAAC,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAY,EAAE,QAA2B;IACvF,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,MAAM,IAAI,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;QACtD,OAAO,IAAI,CAAC,CAAC;QACb,IAAI,OAAO,GAAG,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,iDAAiD,CAAC,CAAC;QAClG,MAAM,YAAY,GAAG,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7E,IAAI,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;YACtF,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACrD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,YAAY,CAAC,CAAC;gBACnF,IAAI,CAAC,QAAQ,CAAC,IAAI;oBAAE,MAAM,IAAI,cAAc,CAAC,GAAG,YAAY,0BAA0B,CAAC,CAAC;gBACxF,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,cAAc,CAAC,oCAAoC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC/G,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;YACzD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;oBAAE,MAAM,KAAK,CAAC;YACtE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC7F,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1B,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC"}

package/dist/src/registry/account.d.ts

@@ -0,0 +1,79 @@
+import type { BnpmPaths } from "../config/paths.js";
+export declare function registryWhoami(options: {
+    readonly paths: BnpmPaths;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+}): Promise<string>;
+export declare function registryLogin(options: {
+    readonly paths: BnpmPaths;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+    readonly open: (url: URL) => Promise<void>;
+    readonly announce?: (url: URL) => void;
+    readonly now?: () => number;
+    readonly wait?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
+}): Promise<{
+    readonly registry: string;
+    readonly loginUrl: string;
+}>;
+export declare function registryLegacyLogin(options: {
+    readonly paths: BnpmPaths;
+    readonly username: string;
+    readonly password: string;
+    readonly email?: string;
+    readonly create?: boolean;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+    readonly otp?: string;
+}): Promise<{
+    readonly registry: string;
+    readonly username: string;
+    readonly created: boolean;
+}>;
+export declare function registryLogout(options: {
+    readonly paths: BnpmPaths;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+}): Promise<string>;
+export interface RegistryToken {
+    readonly id: string;
+    readonly name?: string;
+    readonly created?: string;
+    readonly readonly: boolean;
+    readonly cidr: readonly string[];
+}
+export interface CreatedRegistryToken {
+    readonly token: string;
+    readonly name?: string;
+    readonly created?: string;
+    readonly expires?: string;
+    readonly readonly?: boolean;
+    readonly cidr?: readonly string[];
+}
+export declare function registryTokens(options: {
+    readonly paths: BnpmPaths;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+}): Promise<readonly RegistryToken[]>;
+export declare function revokeRegistryTokens(options: {
+    readonly ids: readonly string[];
+    readonly paths: BnpmPaths;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+    readonly otp?: string;
+}): Promise<readonly string[]>;
+export declare function createRegistryToken(options: {
+    readonly paths: BnpmPaths;
+    readonly password: string;
+    readonly body: Readonly<Record<string, unknown>>;
+    readonly registry?: URL;
+    readonly fetch?: typeof globalThis.fetch;
+    readonly signal?: AbortSignal;
+    readonly otp?: string;
+}): Promise<CreatedRegistryToken>;

package/dist/src/registry/account.js

@@ -0,0 +1,305 @@
+import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { dirname } from "node:path";
+import { randomBytes } from "node:crypto";
+import { RegistryError } from "./client.js";
+import { loadRegistryConfiguration } from "./configuration.js";
+const maxResponseBytes = 1024 * 1024;
+function requestSignal(signal) {
+    const timeout = AbortSignal.timeout(30_000);
+    return signal === undefined ? timeout : AbortSignal.any([signal, timeout]);
+}
+async function json(response) {
+    if (!response.body)
+        throw new RegistryError("Registry returned an empty account response", response.status);
+    const chunks = [];
+    let size = 0;
+    for await (const value of response.body) {
+        const chunk = Buffer.from(value);
+        size += chunk.length;
+        if (size > maxResponseBytes)
+            throw new RegistryError("Registry account response exceeded the size limit", response.status);
+        chunks.push(chunk);
+    }
+    try {
+        const value = JSON.parse(Buffer.concat(chunks).toString("utf8"));
+        if (typeof value !== "object" || value === null || Array.isArray(value))
+            throw new Error("not an object");
+        return value;
+    }
+    catch {
+        throw new RegistryError("Registry returned invalid account JSON", response.status);
+    }
+}
+function secureUrl(value, purpose) {
+    let url;
+    try {
+        url = new URL(typeof value === "string" ? value : "");
+    }
+    catch {
+        throw new RegistryError(`Registry returned an invalid ${purpose} URL`);
+    }
+    if (url.protocol !== "https:" || url.username || url.password || url.hash)
+        throw new RegistryError(`Registry returned an unsafe ${purpose} URL`);
+    return url;
+}
+function credentialKey(registry) {
+    return `//${registry.host}${registry.pathname}:_authToken`;
+}
+async function npmrc(path) {
+    try {
+        return await readFile(path, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return "";
+        throw error;
+    }
+}
+async function updateCredential(path, registry, token) {
+    const key = credentialKey(registry);
+    const lines = (await npmrc(path)).split(/\r?\n/).filter((line) => {
+        const trimmed = line.trim();
+        return !trimmed.startsWith(`${key}=`) && !trimmed.startsWith(`${key.replace(":_authToken", ":_auth")}=`);
+    });
+    while (lines.at(-1) === "")
+        lines.pop();
+    if (token !== undefined)
+        lines.push(`${key}=${token}`);
+    const bytes = lines.length === 0 ? "" : `${lines.join("\n")}\n`;
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
+    try {
+        await writeFile(temporary, bytes, { flag: "wx", mode: 0o600 });
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+async function updateBasicCredential(path, registry, username, password) {
+    const key = credentialKey(registry).replace(":_authToken", ":_auth");
+    const tokenKey = key.replace(":_auth", ":_authToken");
+    const lines = (await npmrc(path)).split(/\r?\n/).filter((line) => { const trimmed = line.trim(); return !trimmed.startsWith(`${key}=`) && !trimmed.startsWith(`${tokenKey}=`); });
+    while (lines.at(-1) === "")
+        lines.pop();
+    lines.push(`${key}=${Buffer.from(`${username}:${password}`, "utf8").toString("base64")}`);
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const temporary = `${path}.${process.pid}.${randomBytes(8).toString("hex")}.tmp`;
+    try {
+        await writeFile(temporary, `${lines.join("\n")}\n`, { flag: "wx", mode: 0o600 });
+        await rename(temporary, path);
+    }
+    catch (error) {
+        await rm(temporary, { force: true });
+        throw error;
+    }
+}
+async function configuration(paths, registry) {
+    const loaded = await loadRegistryConfiguration({ userNpmrc: paths.userNpmrc, projectNpmrc: paths.projectNpmrc, ...(registry === undefined ? {} : { defaultRegistry: registry }) });
+    return { loaded, registry: registry ?? loaded.defaultRegistry };
+}
+export async function registryWhoami(options) {
+    const { loaded, registry } = await configuration(options.paths, options.registry);
+    const response = await (options.fetch ?? globalThis.fetch)(new URL("/-/whoami", registry), {
+        redirect: "error",
+        signal: requestSignal(options.signal),
+        headers: { accept: "application/json", ...loaded.headersFor(registry) },
+    });
+    if (!response.ok)
+        throw new RegistryError(`Registry identity request failed with ${response.status}`, response.status);
+    const body = await json(response);
+    if (typeof body.username !== "string" || body.username.length === 0)
+        throw new RegistryError("Registry identity response has no username");
+    return body.username;
+}
+export async function registryLogin(options) {
+    const { registry } = await configuration(options.paths, options.registry);
+    const request = options.fetch ?? globalThis.fetch;
+    const response = await request(new URL("/-/v1/login", registry), {
+        method: "POST",
+        redirect: "error",
+        signal: requestSignal(options.signal),
+        headers: { accept: "application/json", "content-type": "application/json", "npm-auth-type": "web" },
+        body: "{}",
+    });
+    if (!response.ok)
+        throw new RegistryError(`Registry web login is unavailable (${response.status})`, response.status);
+    const body = await json(response);
+    const loginUrl = secureUrl(body.loginUrl, "login");
+    const doneUrl = secureUrl(body.doneUrl, "login completion");
+    options.announce?.(loginUrl);
+    await options.open(loginUrl);
+    const now = options.now ?? Date.now;
+    const deadline = now() + 10 * 60_000;
+    const wait = options.wait ?? (async (milliseconds, signal) => {
+        await new Promise((resolvePromise, reject) => {
+            const timer = setTimeout(resolvePromise, milliseconds);
+            signal?.addEventListener("abort", () => { clearTimeout(timer); reject(signal.reason); }, { once: true });
+        });
+    });
+    while (now() < deadline) {
+        const check = await request(doneUrl, { redirect: "error", signal: requestSignal(options.signal), headers: { accept: "application/json" } });
+        const result = await json(check);
+        if (check.status === 200) {
+            if (typeof result.token !== "string" || result.token.length === 0)
+                throw new RegistryError("Registry completed login without a token");
+            await updateCredential(options.paths.userNpmrc, registry, result.token);
+            return { registry: registry.href, loginUrl: loginUrl.href };
+        }
+        if (check.status !== 202)
+            throw new RegistryError(`Registry login polling failed with ${check.status}`, check.status);
+        const retry = Number(check.headers.get("retry-after"));
+        await wait(Number.isFinite(retry) && retry > 0 ? Math.min(retry * 1000, 30_000) : 1000, options.signal);
+    }
+    throw new RegistryError("Registry login timed out");
+}
+export async function registryLegacyLogin(options) {
+    if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(options.username))
+        throw new RegistryError("Legacy login requires a valid username");
+    if (!options.password || options.password.length > 1024)
+        throw new RegistryError("Legacy login requires a bounded password");
+    if (options.create && (!options.email || options.email.length > 320 || !/^[^\s@]+@[^\s@]+$/.test(options.email)))
+        throw new RegistryError("Legacy adduser requires a valid email address");
+    const { registry } = await configuration(options.paths, options.registry);
+    const request = options.fetch ?? globalThis.fetch;
+    const endpoint = new URL(`/-/user/org.couchdb.user:${encodeURIComponent(options.username)}`, registry);
+    const base = { _id: `org.couchdb.user:${options.username}`, name: options.username, password: options.password, ...(options.email === undefined ? {} : { email: options.email }), type: "user", roles: [], date: new Date().toISOString() };
+    const headers = { accept: "application/json", "content-type": "application/json", ...(options.otp === undefined ? {} : { "npm-otp": options.otp }) };
+    const initial = await request(endpoint, { method: "PUT", redirect: "error", signal: requestSignal(options.signal), headers, body: JSON.stringify(base) });
+    let result;
+    if (initial.ok)
+        result = await json(initial);
+    else {
+        if (options.create || initial.status !== 409)
+            throw new RegistryError(`Legacy registry login failed with ${initial.status}`, initial.status);
+        const readUrl = new URL(endpoint);
+        readUrl.searchParams.set("write", "true");
+        const read = await request(readUrl, { redirect: "error", signal: requestSignal(options.signal), headers: { accept: "application/json" } });
+        if (!read.ok)
+            throw new RegistryError(`Legacy registry identity lookup failed with ${read.status}`, read.status);
+        const current = await json(read);
+        if (typeof current._rev !== "string" || current._rev.length === 0)
+            throw new RegistryError("Legacy registry identity has no revision");
+        const document = { ...current, ...base, roles: Array.isArray(current.roles) ? current.roles : [] };
+        const update = new URL(`${endpoint.pathname}/-rev/${encodeURIComponent(current._rev)}`, registry);
+        const authorization = `Basic ${Buffer.from(`${options.username}:${options.password}`, "utf8").toString("base64")}`;
+        const response = await request(update, { method: "PUT", redirect: "error", signal: requestSignal(options.signal), headers: { ...headers, authorization }, body: JSON.stringify(document) });
+        if (!response.ok)
+            throw new RegistryError(`Legacy registry authentication failed with ${response.status}`, response.status);
+        result = await json(response);
+    }
+    if (typeof result.token === "string" && result.token.length > 0)
+        await updateCredential(options.paths.userNpmrc, registry, result.token);
+    else
+        await updateBasicCredential(options.paths.userNpmrc, registry, options.username, options.password);
+    return { registry: registry.href, username: options.username, created: options.create === true };
+}
+export async function registryLogout(options) {
+    const { loaded, registry } = await configuration(options.paths, options.registry);
+    const authorization = loaded.headersFor(registry).authorization;
+    if (!authorization?.startsWith("Bearer "))
+        throw new RegistryError(`Not logged in to ${registry.href}`);
+    const token = authorization.slice("Bearer ".length);
+    const response = await (options.fetch ?? globalThis.fetch)(new URL(`/-/user/token/${encodeURIComponent(token)}`, registry), {
+        method: "DELETE",
+        redirect: "error",
+        signal: requestSignal(options.signal),
+        headers: { accept: "application/json", authorization },
+    });
+    if (!response.ok)
+        throw new RegistryError(`Registry logout failed with ${response.status}`, response.status);
+    await updateCredential(options.paths.userNpmrc, registry);
+    return registry.href;
+}
+async function tokenPage(url, loaded, request, signal) {
+    const response = await request(url, { redirect: "error", signal: requestSignal(signal), headers: { accept: "application/json", ...loaded.headersFor(url) } });
+    if (!response.ok)
+        throw new RegistryError(`Registry token request failed with ${response.status}`, response.status);
+    const body = await json(response);
+    if (!Array.isArray(body.objects))
+        throw new RegistryError("Registry token response has no objects array");
+    const tokens = body.objects.map((value) => {
+        if (typeof value !== "object" || value === null || Array.isArray(value) || typeof value.key !== "string")
+            throw new RegistryError("Registry returned an invalid token record");
+        const token = value;
+        if (token.name !== undefined && typeof token.name !== "string" || token.created !== undefined && typeof token.created !== "string" || token.readonly !== undefined && typeof token.readonly !== "boolean" || token.cidr_whitelist !== undefined && (!Array.isArray(token.cidr_whitelist) || token.cidr_whitelist.some((entry) => typeof entry !== "string")))
+            throw new RegistryError("Registry returned invalid token metadata");
+        return { key: token.key, ...(token.name === undefined ? {} : { name: token.name }), ...(token.created === undefined ? {} : { created: token.created }), readonly: token.readonly === true, cidr_whitelist: (token.cidr_whitelist ?? []) };
+    });
+    const nextValue = typeof body.urls === "object" && body.urls !== null && !Array.isArray(body.urls) ? body.urls.next : undefined;
+    if (nextValue !== undefined && typeof nextValue !== "string")
+        throw new RegistryError("Registry token pagination URL is invalid");
+    return { tokens, ...(nextValue === undefined || nextValue === "" ? {} : { next: new URL(nextValue, url) }) };
+}
+async function rawTokens(options) {
+    const { loaded, registry } = await configuration(options.paths, options.registry);
+    const request = options.fetch ?? globalThis.fetch;
+    const tokens = [];
+    let url = new URL("/-/npm/v1/tokens", registry);
+    for (let pages = 0; url !== undefined && pages < 100; pages += 1) {
+        if (url.protocol !== "https:" || url.origin !== registry.origin)
+            throw new RegistryError("Registry token pagination must remain on the HTTPS registry origin");
+        const page = await tokenPage(url, loaded, request, options.signal);
+        tokens.push(...page.tokens);
+        if (tokens.length > 10_000)
+            throw new RegistryError("Registry returned more than 10,000 tokens");
+        url = page.next;
+    }
+    if (url !== undefined)
+        throw new RegistryError("Registry token pagination exceeded 100 pages");
+    return { loaded, registry, tokens };
+}
+function tokenIds(tokens) {
+    const result = new Map();
+    for (const token of tokens) {
+        let id = token.key;
+        for (let length = 6; length < token.key.length; length += 1) {
+            const candidate = token.key.slice(0, length);
+            if (!tokens.some((other) => other !== token && other.key.startsWith(candidate))) {
+                id = candidate;
+                break;
+            }
+        }
+        result.set(token.key, id);
+    }
+    return result;
+}
+export async function registryTokens(options) {
+    const { tokens } = await rawTokens(options);
+    const ids = tokenIds(tokens);
+    return tokens.map((token) => ({ id: ids.get(token.key) ?? token.key, ...(token.name === undefined ? {} : { name: token.name }), ...(token.created === undefined ? {} : { created: token.created }), readonly: token.readonly === true, cidr: token.cidr_whitelist ?? [] }));
+}
+export async function revokeRegistryTokens(options) {
+    const { loaded, registry, tokens } = await rawTokens(options);
+    const keys = options.ids.map((id) => {
+        const matches = tokens.filter((token) => token.key.startsWith(id));
+        if (matches.length !== 1)
+            throw new RegistryError(matches.length === 0 ? `Unknown token id ${id}` : `Ambiguous token id ${id}`);
+        return matches[0]?.key;
+    });
+    for (const key of keys) {
+        const url = new URL(`/-/npm/v1/tokens/token/${encodeURIComponent(key)}`, registry);
+        const response = await (options.fetch ?? globalThis.fetch)(url, { method: "DELETE", redirect: "error", signal: requestSignal(options.signal), headers: { accept: "application/json", ...loaded.headersFor(url), ...(options.otp === undefined ? {} : { "npm-otp": options.otp }) } });
+        if (!response.ok)
+            throw new RegistryError(`Registry token revocation failed with ${response.status}`, response.status);
+    }
+    return options.ids;
+}
+export async function createRegistryToken(options) {
+    if (!options.password || options.password.length > 1024)
+        throw new RegistryError("A bounded account password is required to create a token");
+    const { loaded, registry } = await configuration(options.paths, options.registry);
+    const url = new URL("/-/npm/v1/tokens", registry);
+    const body = JSON.stringify({ ...options.body, password: options.password });
+    const response = await (options.fetch ?? globalThis.fetch)(url, { method: "POST", redirect: "error", signal: requestSignal(options.signal), headers: { accept: "application/json", "content-type": "application/json", "content-length": String(Buffer.byteLength(body)), ...loaded.headersFor(url), ...(options.otp === undefined ? {} : { "npm-otp": options.otp }) }, body });
+    if (!response.ok)
+        throw new RegistryError(`Registry token creation failed with ${response.status}`, response.status);
+    const result = await json(response);
+    if (typeof result.token !== "string" || result.token.length < 8 || result.token.length > 4096)
+        throw new RegistryError("Registry token creation response has no bounded token");
+    if ((result.name !== undefined && typeof result.name !== "string") || (result.created !== undefined && typeof result.created !== "string") || (result.expires !== undefined && typeof result.expires !== "string") || (result.readonly !== undefined && typeof result.readonly !== "boolean") || (result.cidr_whitelist !== undefined && (!Array.isArray(result.cidr_whitelist) || result.cidr_whitelist.some((value) => typeof value !== "string"))))
+        throw new RegistryError("Registry returned invalid created token metadata");
+    return { token: result.token, ...(result.name === undefined ? {} : { name: result.name }), ...(result.created === undefined ? {} : { created: result.created }), ...(result.expires === undefined ? {} : { expires: result.expires }), ...(result.readonly === undefined ? {} : { readonly: result.readonly }), ...(result.cidr_whitelist === undefined ? {} : { cidr: result.cidr_whitelist }) };
+}
+//# sourceMappingURL=account.js.map