@askrjs/cli 0.0.7 → 0.0.9

package/dist/registry-BVliEbUv.js

@@ -0,0 +1,95 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import Config from "@npmcli/config";
+import npmDefinitions from "@npmcli/config/lib/definitions/index.js";
+import registryFetch from "npm-registry-fetch";
+//#region src/update/registry.ts
+function executionEnvironment(env) {
+	if (env === process.env) return { ...process.env };
+	const inherited = { ...process.env };
+	for (const name of Object.keys(inherited)) if (/^npm_config_/i.test(name)) delete inherited[name];
+	return {
+		...inherited,
+		...env
+	};
+}
+async function loadNpmConfiguration(root, env = process.env) {
+	const effectiveEnvironment = executionEnvironment(env);
+	const { definitions, flatten, shorthands } = npmDefinitions;
+	const configuration = new Config({
+		npmPath: path.dirname(fileURLToPath(import.meta.resolve("@npmcli/config/package.json"))),
+		definitions,
+		flatten,
+		shorthands,
+		argv: [process.execPath, "askr"],
+		cwd: root,
+		env: effectiveEnvironment,
+		execPath: process.execPath,
+		warn: false
+	});
+	await configuration.load();
+	configuration.validate();
+	return {
+		cwd: root,
+		env: effectiveEnvironment,
+		options: { ...configuration.flat }
+	};
+}
+function isRecord(value) {
+	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
+}
+function isPackument(value) {
+	return isRecord(value) && isRecord(value["dist-tags"]) && isRecord(value.versions);
+}
+async function fetchPackage(packageName, configuration, _specifications) {
+	return registryFetch.json(packageName.replace("/", "%2f"), {
+		...configuration.options,
+		spec: packageName,
+		headers: {
+			...isRecord(configuration.options.headers) ? configuration.options.headers : {},
+			accept: "application/vnd.npm.install-v1+json"
+		}
+	});
+}
+function sanitizeRegistryError(error) {
+	const value = error && typeof error === "object" ? error : {};
+	if (value.statusCode === 404 || value.code === "E404") return "package was not found in the selected registry";
+	if (value.statusCode === 401 || value.statusCode === 403 || value.code === "E401" || value.code === "E403") return "registry authentication or authorization failed";
+	const code = typeof value.code === "string" ? value.code.toUpperCase() : "";
+	if ([
+		"ETIMEDOUT",
+		"ETIMEOUT",
+		"FETCH_ERROR",
+		"ECONNRESET"
+	].includes(code)) return "registry request timed out or was interrupted";
+	if (/^[A-Z][A-Z0-9_]{1,30}$/.test(code)) return `registry request failed (${code})`;
+	return "registry request failed";
+}
+async function fetchPackuments(packageNames, configuration, options = {}) {
+	const names = [...new Set(packageNames)].sort((left, right) => left.localeCompare(right));
+	const packuments = /* @__PURE__ */ new Map();
+	const failures = /* @__PURE__ */ new Map();
+	const viewPackage = options.viewPackage ?? fetchPackage;
+	const configuredSockets = Number(configuration.options.maxSockets ?? 15);
+	const concurrency = Math.max(1, Math.min(names.length, Number.isFinite(configuredSockets) ? configuredSockets : 15));
+	let nextIndex = 0;
+	const worker = async () => {
+		while (nextIndex < names.length) {
+			const packageName = names[nextIndex++];
+			try {
+				const result = await viewPackage(packageName, configuration, options.requirements?.specifications?.get(packageName) ?? []);
+				if (isPackument(result)) packuments.set(packageName, result);
+				else failures.set(packageName, "registry returned malformed package metadata");
+			} catch (error) {
+				failures.set(packageName, sanitizeRegistryError(error));
+			}
+		}
+	};
+	await Promise.all(Array.from({ length: concurrency }, worker));
+	return {
+		packuments,
+		failures
+	};
+}
+//#endregion
+export { fetchPackuments, loadNpmConfiguration };

package/dist/skills/askr-ssr-ssg/SKILL.md

@@ -34,7 +34,7 @@ Use this when the app renders outside the browser or produces static output. The
 ## Copy This Shape
 
 ```ts
-registerRoutes(() => {
+const registry = createRouteRegistry(() => {
   page("/docs/{slug}", DocsPage, {
     entries: async () => [{ slug: "getting-started" }, { slug: "routing" }],
   });

package/dist/{skills-B7CbWur9.js → skills-C2KzfTl9.js}

@@ -303,7 +303,6 @@ const REVIEW_PROMPTS = [
 				re("local Sidebar", String.raw`export\s+(?:default\s+)?function\s+Sidebar\b`)
 			]),
 			requireAny("Keeps Askr-native route or state primitives in use.", [
-				re("registerRoutes", String.raw`\bregisterRoutes\s*\(`),
 				re("createRouteRegistry", String.raw`\bcreateRouteRegistry\s*\(`),
 				re("state()", String.raw`\bstate\s*\(`),
 				re("resource()", String.raw`\bresource\s*\(`)

package/dist/skills.js

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
-import { n as runSkillsCli, r as syncBundledSkills, t as installBundledSkills } from "./skills-B7CbWur9.js";
+import { n as runSkillsCli, r as syncBundledSkills, t as installBundledSkills } from "./skills-C2KzfTl9.js";
 export { installBundledSkills, runSkillsCli, syncBundledSkills };

package/dist/{range-YUs9eimn.js → specification-BSlq_n9A.js}

@@ -106,12 +106,11 @@ function rewriteXRange(shape, target) {
 	if (count === 1) return String(parsed.major);
 	return `${parsed.major}.${parsed.minor}`;
 }
-function rewriteAtomic(shape, target, forcedBreaking) {
+function rewriteAtomic(shape, target, _forcedBreaking) {
 	if (shape.kind === "exact") return target;
 	if (shape.kind === "operator") return `${shape.operator}${target}`;
 	if (shape.kind === "x") return rewriteXRange(shape, target);
-	const boundary = nextBreakingBoundary(target);
-	return forcedBreaking ? `>=${target} <${boundary}` : `${shape.lower} <${boundary}`;
+	return `>=${target} <${nextBreakingBoundary(target)}`;
 }
 function rewriteRange(shape, target, forcedBreaking) {
 	if (shape.kind !== "union") return rewriteAtomic(shape, target, forcedBreaking);
@@ -122,4 +121,51 @@ function rewriteRange(shape, target, forcedBreaking) {
 	return rewritten.join(" || ");
 }
 //#endregion
-export { isBreakingChange as n, rewriteRange as r, analyzeRange as t };
+//#region src/update/specification.ts
+const WINDOWS_PATH = /^[A-Za-z]:[\\/]/;
+const HOSTED_GIT = /^(?:bitbucket|gist|github|gitlab):/i;
+const GIT_URL = /^(?:git(?:\+[^:]+)?:|git@|ssh:)/i;
+const GIT_SHORTHAND = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+(?:#.*)?$/;
+const REGISTRY_TAG = /^[A-Za-z][A-Za-z0-9._-]*$/;
+const SCOPED_PATH = /^@[^/]+\/[^/]+$/;
+function parseDependencySpecification(specification) {
+	const rawSpec = specification.trim();
+	if (!rawSpec) return {
+		type: "unsupported",
+		rawSpec
+	};
+	if (/^npm:/i.test(rawSpec)) return {
+		type: "alias",
+		rawSpec
+	};
+	if (/^(?:file|link|workspace):/i.test(rawSpec) || rawSpec.startsWith("./") || rawSpec.startsWith("../") || rawSpec.startsWith("/") || rawSpec.startsWith("~/") || /\.(?:tar\.gz|tgz)$/i.test(rawSpec) || WINDOWS_PATH.test(rawSpec) || /^[A-Za-z]:/.test(rawSpec) || SCOPED_PATH.test(rawSpec)) return {
+		type: "file",
+		rawSpec
+	};
+	if (HOSTED_GIT.test(rawSpec) || GIT_URL.test(rawSpec) || GIT_SHORTHAND.test(rawSpec)) return {
+		type: "git",
+		rawSpec
+	};
+	if (/^https?:/i.test(rawSpec) || /^[a-z][a-z0-9+.-]*:\/\//i.test(rawSpec)) return {
+		type: "remote",
+		rawSpec
+	};
+	if (semver.valid(rawSpec)) return {
+		type: "version",
+		rawSpec
+	};
+	if (semver.validRange(rawSpec)) return {
+		type: "range",
+		rawSpec
+	};
+	if (REGISTRY_TAG.test(rawSpec)) return {
+		type: "tag",
+		rawSpec
+	};
+	return {
+		type: "unsupported",
+		rawSpec
+	};
+}
+//#endregion
+export { rewriteRange as i, analyzeRange as n, isBreakingChange as r, parseDependencySpecification as t };

package/dist/ssg.d.ts

@@ -38,7 +38,6 @@ interface SsgDeps {
   existsSync?: typeof existsSync;
   importConfig?: (filePath: string) => Promise<unknown>;
   createStaticGen?: (options: {
-    routes?: unknown[];
     registry?: unknown;
     outputDir: string;
     seed?: unknown;

package/dist/ssg.js

@@ -458,9 +458,8 @@ async function runSsgCli(args = process.argv.slice(2), deps = {}, io = console)
 		}
 		const configModule = imported;
 		const candidate = configModule.default ?? configModule.staticConfig ?? configModule;
-		const hasRoutes = Array.isArray(candidate.routes);
-		if (hasRoutes === (candidate.registry !== void 0)) {
-			io.error("Error: Config must provide exactly one route source: routes or registry");
+		if (!(candidate.registry !== void 0) || Object.prototype.hasOwnProperty.call(candidate, "routes")) {
+			io.error("Error: Config must provide a route registry and no raw routes array");
 			return 1;
 		}
 		const config = candidate;
@@ -468,7 +467,7 @@ async function runSsgCli(args = process.argv.slice(2), deps = {}, io = console)
 			io.error("Error: Config must provide siteUrl to generate sitemap.xml, or set sitemap: false");
 			return 1;
 		}
-		io.log(hasRoutes ? `Generating ${config.routes?.length ?? 0} routes...` : "Generating registered routes...");
+		io.log("Generating registered routes...");
 		const createStaticGen = typeof resolvedDeps.createStaticGen === "function" ? resolvedDeps.createStaticGen : await loadCreateStaticGen();
 		cliStagingDir = await createSiblingStage(resolvedOutputDir, "askr-ssg");
 		if (parsed.incremental && !parsed.forceFull && await pathExists(resolvedOutputDir)) await fs$1.cp(resolvedOutputDir, cliStagingDir, {
@@ -477,7 +476,7 @@ async function runSsgCli(args = process.argv.slice(2), deps = {}, io = console)
 		});
 		const generationOutputDir = cliStagingDir;
 		const ssg = createStaticGen({
-			...hasRoutes ? { routes: config.routes } : { registry: config.registry },
+			registry: config.registry,
 			outputDir: generationOutputDir,
 			seed: config.seed,
 			dataOverrides: config.dataOverrides,

package/dist/templates/full-stack/src/server/app.ts

@@ -7,7 +7,18 @@ import { telemetry } from "../telemetry";
 import { createActionHandlers } from "./action-registry";
 import type { AppDependencies } from "./dependencies";
 
+function csrfSecret(): string {
+  const secret = process.env.CSRF_SECRET;
+  if (process.env.NODE_ENV !== "production") return secret ?? "development-only-secret";
+  if (!secret || secret.length < 32 || new Set(secret).size < 12) {
+    throw new Error("Production requires a strong CSRF_SECRET (at least 32 varied characters).");
+  }
+  return secret;
+}
+
 export function createApp(deps: AppDependencies) {
+  const secret = csrfSecret();
+  const development = process.env.NODE_ENV !== "production";
   return createAskrApp({
     name: "{{appName}}",
     version: "1.0.0",
@@ -37,26 +48,33 @@ export function createApp(deps: AppDependencies) {
           .summary("Create a message")
           .tags("Messages")
           .use(
-            csrf({ secret: process.env.CSRF_SECRET ?? "development-only-secret" }),
-            rateLimit({ store: deps.rateLimits, limit: 30, windowMs: 60_000 }),
+            csrf({ secret }),
+            rateLimit({
+              store: deps.rateLimits,
+              limit: 30,
+              windowMs: 60_000,
+              key: (ctx) => `message:${ctx.auth.session?.id ?? "anonymous"}`,
+            }),
           )
           .created(Message)
           .badRequest()
           .unprocessableEntity()
           .tooManyRequests();
-        api
-          .post("/session", (ctx) => {
-            const response = ctx.redirect("/", 303);
-            return ctx.setCookie(response, "askr-session", "demo-session", {
-              httpOnly: true,
-              sameSite: "lax",
-              secure: ctx.url.protocol === "https:",
-              path: "/",
-            });
-          })
-          .operationId("createSession")
-          .summary("Create a demo session")
-          .seeOther();
+        if (development) {
+          api
+            .post("/session", (ctx) => {
+              const response = ctx.redirect("/", 303);
+              return ctx.setCookie(response, "askr-session", "demo-session", {
+                httpOnly: true,
+                sameSite: "lax",
+                secure: ctx.url.protocol === "https:",
+                path: "/",
+              });
+            })
+            .operationId("createSession")
+            .summary("Create a development-only demo session")
+            .seeOther();
+        }
       },
     },
     auth: {
@@ -68,7 +86,7 @@ export function createApp(deps: AppDependencies) {
     },
     actions: {
       handlers: createActionHandlers(),
-      csrf: { secret: process.env.CSRF_SECRET ?? "development-only-secret" },
+      csrf: { secret },
     },
     middleware: [requestId(), securityHeaders()],
     telemetry,

package/dist/templates/full-stack/src/server/dependencies.ts

@@ -29,11 +29,16 @@ export function createDependencies(): AppDependencies {
   const counters = new Map<string, { count: number; reset: number }>();
   return {
     sessions: {
-      get: async (id) => (id === "demo-session" ? { id, subject: "demo-user" } : null),
+      get: async (id) =>
+        process.env.NODE_ENV !== "production" && id === "demo-session"
+          ? { id, subject: "demo-user" }
+          : null,
     },
     principals: {
       get: async (subject) =>
-        subject === "demo-user" ? { id: subject, subject, permissions: ["messages:create"] } : null,
+        process.env.NODE_ENV !== "production" && subject === "demo-user"
+          ? { id: subject, subject, permissions: ["messages:create"] }
+          : null,
     },
     actions: { record: async () => undefined },
     rateLimits: {

package/dist/templates/spa/README.md

@@ -38,7 +38,7 @@ code lives in `src/adapters`.
 
 ```tsx
 // src/pages/_routes.tsx
-import { fallback, group, registerRoutes } from '@askrjs/askr/router';
+import { createRouteRegistry, fallback, group } from '@askrjs/askr/router';
 import RootLayout from './_layout';
 import NotFoundPage from './not-found';
 import AuthLayout from './auth/_layout';
@@ -48,7 +48,7 @@ import { registerAppRoutes } from './app/_routes';
 import PublicLayout from './public/_layout';
 import { registerPublicRoutes } from './public/_routes';
 
-registerRoutes(() => {
+export const pageRegistry = createRouteRegistry(() => {
   group({ layout: RootLayout }, () => {
     group({ layout: PublicLayout }, () => {
       registerPublicRoutes();

package/dist/templates/spa/src/main.tsx

@@ -1,10 +1,9 @@
 import { createSPA } from '@askrjs/askr/boot';
-import { getManifest } from '@askrjs/askr/router';
+import { pageRegistry } from './pages/_routes';
 
 import './styles.css';
-import './pages/_routes';
 
 await createSPA({
   root: document.getElementById('app')!,
-  manifest: getManifest(),
+  registry: pageRegistry,
 });

package/dist/templates/spa/src/pages/_routes.tsx

@@ -1,4 +1,4 @@
-import { fallback, group, registerRoutes } from '@askrjs/askr/router';
+import { createRouteRegistry, fallback, group } from '@askrjs/askr/router';
 import RootLayout from './_layout';
 import AuthLayout from './auth/_layout';
 import { registerAuthRoutes } from './auth/_routes';
@@ -8,7 +8,7 @@ import NotFoundPage from './not-found';
 import { registerPublicRoutes } from './public/_routes';
 import PublicLayout from './public/_layout';
 
-registerRoutes(() => {
+export const pageRegistry = createRouteRegistry(() => {
   group({ layout: RootLayout }, () => {
     group({ layout: PublicLayout }, () => {
       registerPublicRoutes();

package/dist/update.js

@@ -193,7 +193,7 @@ function collectEdits(decisions) {
 	}] : []));
 }
 async function defaultRegistry(root, packageNames, requirements) {
-	const { fetchPackuments, loadNpmConfiguration } = await import("./registry-D2APi6x0.js");
+	const { fetchPackuments, loadNpmConfiguration } = await import("./registry-BVliEbUv.js");
 	return fetchPackuments(packageNames, await loadNpmConfiguration(root), { requirements });
 }
 async function runDependencyCli(command, args, io = console, runtime = {}) {
@@ -217,7 +217,7 @@ async function runDependencyCli(command, args, io = console, runtime = {}) {
 	let root = null;
 	let selectedWorkspaces = [];
 	try {
-		const [{ discoverProject }, { planUpdates }] = await Promise.all([import("./discovery-Djq8TxJu.js"), import("./planner-ZAX9SFjY.js")]);
+		const [{ discoverProject }, { planUpdates }] = await Promise.all([import("./discovery-BX-lnFRK.js"), import("./planner-BDfYDKnI.js")]);
 		const project = await discoverProject({
 			cwd: parsed.cwd,
 			packagePatterns: parsed.packagePatterns,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@askrjs/cli",
-  "version": "0.0.7",
+  "version": "0.0.9",
   "description": "Unified CLI for the Askr platform",
   "homepage": "https://github.com/askrjs/askr-cli#readme",
   "bugs": {
@@ -44,18 +44,22 @@
     "test:publint": "publint",
     "pack:check": "npm pack --ignore-scripts --dry-run --json",
     "test:templates": "node scripts/verify-packed-templates.mjs",
+    "bench": "npm run build --silent && node --import tsx benchmarks/cli.mjs --gate",
+    "bench:json": "npm run build --silent && node --import tsx benchmarks/cli.mjs --gate --json",
     "check": "npm run lint && npm run typecheck && npm run test:coverage && npm run build && npm run test:publint && npm run pack:check",
     "prepack": "npm run build",
     "prepublishOnly": "npm run check && npm run test:templates"
   },
   "dependencies": {
+    "@npmcli/config": "^10.12.0",
     "js-yaml": "^5.2.1",
     "minimatch": "^10.2.5",
+    "npm-registry-fetch": "^19.1.1",
     "semver": "^7.8.5",
     "tsx": "^4.23.1"
   },
   "devDependencies": {
-    "@askrjs/askr": ">=0.0.53 <0.1.0",
+    "@askrjs/askr": "^0.0.66",
     "@askrjs/charts": ">=0.1.0 <0.2.0",
     "@askrjs/logos": ">=0.0.3 <0.1.0",
     "@askrjs/lucide": ">=0.0.3 <0.1.0",

package/dist/registry-D2APi6x0.js

@@ -1,228 +0,0 @@
-import { t as parseDependencySpecification } from "./specification-DXnDOC-0.js";
-import path from "node:path";
-import { existsSync } from "node:fs";
-import { execFile } from "node:child_process";
-import semver from "semver";
-//#region src/update/registry.ts
-function installedNpmCli(executable) {
-	const directories = /* @__PURE__ */ new Set([path.dirname(process.execPath)]);
-	if (executable && path.isAbsolute(executable)) directories.add(path.dirname(executable));
-	for (const directory of directories) for (const candidate of [path.join(directory, "node_modules", "npm", "bin", "npm-cli.js"), path.resolve(directory, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js")]) if (existsSync(candidate)) return candidate;
-	return null;
-}
-function npmInvocation(env) {
-	const executable = env.npm_execpath;
-	const executableName = executable ? path.basename(executable).toLowerCase() : "";
-	const isNpmExecutable = executableName === "npm" || executableName === "npm.cmd" || /^npm(?:-cli)?\.(?:cjs|js|mjs)$/.test(executableName);
-	if (executable && isNpmExecutable) {
-		const extension = path.extname(executable).toLowerCase();
-		if ([
-			".cjs",
-			".js",
-			".mjs"
-		].includes(extension)) return {
-			executable: process.execPath,
-			prefix: [executable]
-		};
-		const npmCli = installedNpmCli(executable);
-		return npmCli ? {
-			executable: process.execPath,
-			prefix: [npmCli]
-		} : {
-			executable,
-			prefix: []
-		};
-	}
-	const npmCli = installedNpmCli();
-	if (npmCli) return {
-		executable: process.execPath,
-		prefix: [npmCli]
-	};
-	return {
-		executable: process.platform === "win32" ? "npm.cmd" : "npm",
-		prefix: []
-	};
-}
-function executionEnvironment(env) {
-	if (env === process.env) return { ...process.env };
-	const inherited = { ...process.env };
-	for (const name of Object.keys(inherited)) if (/^npm_config_/i.test(name)) delete inherited[name];
-	return {
-		...inherited,
-		...env
-	};
-}
-async function loadNpmConfiguration(root, env = process.env) {
-	const effectiveEnvironment = executionEnvironment(env);
-	return {
-		cwd: root,
-		env: effectiveEnvironment,
-		invocation: npmInvocation(effectiveEnvironment)
-	};
-}
-function npmError(error, stderr) {
-	const details = `${String(error.code ?? "")}\n${stderr}`;
-	const safe = /* @__PURE__ */ new Error("npm registry lookup failed");
-	safe.code = (details.match(/\bE(?:401|403|404|CONNRESET|TIMEDOUT|TIMEOUT)\b/i)?.[0])?.toUpperCase() ?? (typeof error.code === "string" ? error.code : "");
-	if (safe.code === "E401") safe.statusCode = 401;
-	if (safe.code === "E403") safe.statusCode = 403;
-	if (safe.code === "E404") safe.statusCode = 404;
-	return safe;
-}
-function executeNpmJson(args, configuration, preferOnline) {
-	const [command, ...positionals] = args;
-	return new Promise((resolve, reject) => {
-		execFile(configuration.invocation.executable, [
-			...configuration.invocation.prefix,
-			command,
-			"--json",
-			preferOnline ? "--prefer-online" : "--prefer-offline",
-			"--offline=false",
-			"--loglevel=error",
-			"--update-notifier=false",
-			"--",
-			...positionals
-		], {
-			cwd: configuration.cwd,
-			encoding: "utf8",
-			env: configuration.env,
-			maxBuffer: 64 * 1024 * 1024,
-			windowsHide: true
-		}, (error, stdout, stderr) => {
-			if (error) {
-				reject(npmError(error, stderr));
-				return;
-			}
-			try {
-				resolve(JSON.parse(stdout));
-			} catch {
-				reject(/* @__PURE__ */ new Error("npm registry returned malformed JSON"));
-			}
-		});
-	});
-}
-function isRecord(value) {
-	return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-function basePackument(value) {
-	if (!isRecord(value) || !Array.isArray(value.versions) || !isRecord(value["dist-tags"])) return null;
-	const versions = value.versions.filter((version) => typeof version === "string");
-	if (versions.length === 0) return null;
-	return {
-		"dist-tags": value["dist-tags"],
-		versions: Object.fromEntries(versions.map((version) => [version, { version }]))
-	};
-}
-function selectedVersions(packument, specifications) {
-	const versions = Object.keys(packument.versions ?? {}).filter((version) => semver.valid(version) !== null);
-	const selected = new Set(Object.values(packument["dist-tags"] ?? {}).filter((version) => typeof version === "string" && semver.valid(version) !== null && versions.includes(version)));
-	for (const specification of specifications) {
-		const parsed = parseDependencySpecification(specification);
-		if (parsed.type === "tag") {
-			const tagged = packument["dist-tags"]?.[parsed.rawSpec];
-			if (typeof tagged === "string" && versions.includes(tagged)) selected.add(tagged);
-		} else if (parsed.type === "version") {
-			if (versions.includes(parsed.rawSpec)) selected.add(parsed.rawSpec);
-		} else if (parsed.type === "range") {
-			const matching = semver.maxSatisfying(versions, parsed.rawSpec);
-			if (matching) selected.add(matching);
-		}
-	}
-	return [...selected].sort(semver.compare);
-}
-function candidateVersions(packument, specifications) {
-	const versions = Object.keys(packument.versions ?? {}).filter((version) => semver.valid(version) !== null);
-	const selected = selectedVersions(packument, specifications);
-	const lowerBounds = specifications.flatMap((specification) => {
-		const parsed = parseDependencySpecification(specification);
-		if (parsed.type === "version") return semver.valid(parsed.rawSpec) ? [parsed.rawSpec] : [];
-		if (parsed.type === "range") {
-			const current = semver.maxSatisfying(versions, parsed.rawSpec);
-			return current ? [current] : [];
-		}
-		return [];
-	});
-	if (lowerBounds.length === 0 || selected.length === 0) return selected;
-	const floor = lowerBounds.sort(semver.compare)[0];
-	const ceiling = selected.sort(semver.compare)[selected.length - 1];
-	return versions.filter((version) => semver.gte(version, floor) && semver.lte(version, ceiling));
-}
-function mergeVersionMetadata(packument, value, selected) {
-	const entries = Array.isArray(value) ? value : [value];
-	const merged = /* @__PURE__ */ new Set();
-	for (const entry of entries) {
-		if (typeof entry === "string") {
-			if (packument.versions?.[entry]) merged.add(entry);
-			continue;
-		}
-		if (!isRecord(entry) || typeof entry.version !== "string") continue;
-		const metadata = packument.versions?.[entry.version];
-		if (!isRecord(metadata)) continue;
-		if (isRecord(entry.peerDependencies)) metadata.peerDependencies = entry.peerDependencies;
-		if (isRecord(entry.peerDependenciesMeta)) metadata.peerDependenciesMeta = entry.peerDependenciesMeta;
-		merged.add(entry.version);
-	}
-	return selected.every((version) => merged.has(version));
-}
-async function executeNpmView(packageName, configuration, specifications) {
-	const packument = basePackument(await executeNpmJson([
-		"view",
-		packageName,
-		"versions",
-		"dist-tags"
-	], configuration, true));
-	if (!packument) return null;
-	const versions = candidateVersions(packument, specifications);
-	if (versions.length === 0) return packument;
-	return mergeVersionMetadata(packument, await executeNpmJson([
-		"view",
-		`${packageName}@${versions.join(" || ")}`,
-		"version",
-		"peerDependencies",
-		"peerDependenciesMeta"
-	], configuration, false), versions) ? packument : null;
-}
-function isPackument(value) {
-	return isRecord(value) && isRecord(value["dist-tags"]) && isRecord(value.versions);
-}
-function sanitizeRegistryError(error) {
-	const value = error && typeof error === "object" ? error : {};
-	if (value.statusCode === 404 || value.code === "E404") return "package was not found in the selected registry";
-	if (value.statusCode === 401 || value.statusCode === 403 || value.code === "E401" || value.code === "E403") return "registry authentication or authorization failed";
-	const code = typeof value.code === "string" ? value.code.toUpperCase() : "";
-	if ([
-		"ETIMEDOUT",
-		"ETIMEOUT",
-		"FETCH_ERROR",
-		"ECONNRESET"
-	].includes(code)) return "registry request timed out or was interrupted";
-	if (/^[A-Z][A-Z0-9_]{1,30}$/.test(code)) return `registry request failed (${code})`;
-	return "registry request failed";
-}
-async function fetchPackuments(packageNames, configuration, options = {}) {
-	const names = [...new Set(packageNames)].sort((left, right) => left.localeCompare(right));
-	const packuments = /* @__PURE__ */ new Map();
-	const failures = /* @__PURE__ */ new Map();
-	const viewPackage = options.viewPackage ?? executeNpmView;
-	let nextIndex = 0;
-	const worker = async () => {
-		while (nextIndex < names.length) {
-			const packageName = names[nextIndex];
-			nextIndex += 1;
-			try {
-				const result = await viewPackage(packageName, configuration, options.requirements?.specifications?.get(packageName) ?? []);
-				if (isPackument(result)) packuments.set(packageName, result);
-				else failures.set(packageName, "registry returned malformed package metadata");
-			} catch (error) {
-				failures.set(packageName, sanitizeRegistryError(error));
-			}
-		}
-	};
-	await Promise.all(Array.from({ length: Math.min(8, names.length) }, worker));
-	return {
-		packuments,
-		failures
-	};
-}
-//#endregion
-export { fetchPackuments, loadNpmConfiguration };