@nimbus-sh/worker 0.5.0 → 0.7.0

package/dist/npm/pre-bundle-facet.d.ts

@@ -71,7 +71,7 @@ export type SliceEntry = SlicedFile | SlicedDir;
 export interface PrebundleSpec {
     /** Bare specifier being bundled, e.g. "framer-motion" or "react/jsx-runtime". */
     specifier: string;
-    /** VFS path of the entry point, e.g. "/home/user/app/node_modules/framer-motion/dist/es/index.mjs". */
+    /** VFS path of the entry point, e.g. "/home/user/example-app/node_modules/framer-motion/dist/es/index.mjs". */
     entryPath: string;
     /** External specifiers (from getSharedRuntimeExternals). */
     externals: string[];

package/dist/npm/pre-bundle-facet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pre-bundle-facet.d.ts","sourceRoot":"","sources":["../../src/npm/pre-bundle-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAA6B,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAgBxG;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,IAAI,CAAC;CACb;AACD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAEhD,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAC5B,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,uGAAuG;IACvG,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB;;;8DAG0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAEpD;AAED,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA4GpD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAmBD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,YAAY,GACvB,MAAM,aAAa,EACnB,MAAM;IACJ,UAAU,EAAE;QAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;CAC7D,KACA,OAAO,CAAC,eAAe,CAiazB,CAAC;AAGF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC"}
+{"version":3,"file":"pre-bundle-facet.d.ts","sourceRoot":"","sources":["../../src/npm/pre-bundle-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAA6B,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAgBxG;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd;AACD,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,IAAI,CAAC;CACb;AACD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAEhD,yDAAyD;AACzD,MAAM,WAAW,aAAa;IAC5B,iFAAiF;IACjF,SAAS,EAAE,MAAM,CAAC;IAClB,+GAA+G;IAC/G,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB;;;;;;OAMG;IACH,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,+EAA+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB;;;8DAG0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,OAAO,CAAC;IACZ,gEAAgE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;IAChB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AACD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,GACZ;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAEpD;AAED,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,eAAe,EACpB,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,GACf;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CA4GpD;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAEjE;AAmBD;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,YAAY,GACvB,MAAM,aAAa,EACnB,MAAM;IACJ,UAAU,EAAE;QAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;CAC7D,KACA,OAAO,CAAC,eAAe,CAiazB,CAAC;AAGF,OAAO,EAAE,eAAe,EAAE,CAAC;AAE3B,MAAM,MAAM,gBAAgB,GAAG,eAAe,CAAC"}

package/dist/npm/pre-bundle-facet.js

@@ -598,7 +598,7 @@ export const prebundleOne = async function prebundleOne(spec, _env) {
         // NOTE: do NOT pass `external: spec.externals` here at the top level.
         // esbuild's top-level external matches by file PATH too — when bundling
         // a subpath like 'react/jsx-runtime', the resolved entry path
-        // /home/user/app/node_modules/react/jsx-runtime.js matches the 'react'
+        // /home/user/example-app/node_modules/react/jsx-runtime.js matches the 'react'
         // external and esbuild errors with
         //   "The entry point '...' cannot be marked as external"
         //

package/dist/npm/resolve-facet.d.ts

@@ -42,6 +42,12 @@ export type FacetRegistryEvent = {
     reason: string;
     suggest?: string;
     ctx: 'transitive';
+} | {
+    type: 'advisory';
+    from: string;
+    reason: string;
+    suggest?: string;
+    ctx: 'transitive';
 } | {
     type: 'transitive-skip';
     from: string;

package/dist/npm/resolve-facet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-facet.d.ts","sourceRoot":"","sources":["../../src/npm/resolve-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,gBAAgB;IAC/B;iEAC6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,YAAY,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,YAAY,CAAA;CAAE,GACrF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}
+{"version":3,"file":"resolve-facet.d.ts","sourceRoot":"","sources":["../../src/npm/resolve-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,WAAW,gBAAgB;IAC/B;iEAC6D;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yCAAyC;IACzC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,YAAY,CAAA;CAAE,GAC7D;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,YAAY,CAAA;CAAE,GAGrF;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,YAAY,CAAA;CAAE,GACvF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/npm/resolve-one-facet.d.ts

@@ -19,9 +19,7 @@
  *   - All helpers (semver, exports, skip-list, registry decisions) are
  *     accessed via bare identifiers from the preamble:
  *
- *       SHOULD_SKIP_PACKAGE(name, frameworkAware) → boolean
  *       SHOULD_SWAP(name) → { from, to } | null
- *       SHOULD_WARN_SKIP_TRANSITIVE(name) → { from, reason } | null
  *       SHOULD_REJECT_FAIL(name) → { from, reason, suggest? } | null
  *       NATIVE_EXECUTABLE_REJECT(pkg) → { from, reason, suggest? } | null
  *       PARSE_SEMVER(v) → [maj, min, patch] | null
@@ -38,24 +36,21 @@
  *     bestEffortNames set; the task returns the `pkg` raw and the
  *     supervisor decides whether a downstream reject silent-skips or
  *     propagates.
- *   - Top-level handling: the supervisor maintains topLevelNames.
- *     `topLevel` is passed in per task so SKIP_PACKAGES bypass works.
  *
  * What the task DOES do
  * ─────────────────────
- *   1. Apply SKIP_PACKAGES filter (unless `topLevel`).
- *   2. Apply swap / warn-skip / reject-fail registry policy.
- *   3. Try in-task cache from `cachedHit` (one entry shipped from
+ *   1. Apply swap / reject-fail registry policy.
+ *   2. Try in-task cache from `cachedHit` (one entry shipped from
  *      supervisor's NpmCache).
- *   4. Ask env.SUPERVISOR.getPackument for the packument. Fetching the
+ *   3. Ask env.SUPERVISOR.getPackument for the packument. Fetching the
  *      registry and filling the cross-tenant cache are supervisor-side;
  *      the facet only reads.
- *   5. Pick version via preamble's RESOLVE_VERSION.
- *   6. Materialise ResolvedPackage shape (versionToResolved-style).
- *   7. Stage cache writes for this version + top-5 recent versions.
+ *   4. Pick version via preamble's RESOLVE_VERSION.
+ *   5. Materialise ResolvedPackage shape (versionToResolved-style).
+ *   6. Stage cache writes for this version + top-5 recent versions.
  *      Returns them in `cacheWrites` so the supervisor can flush in one
  *      batched RPC.
- *   8. Return {pkg, deps, peerDeps, optionalDeps, allPeerDependencies,
+ *   7. Return {pkg, deps, peerDeps, optionalDeps, allPeerDependencies,
  *      cacheWrites, messages, events, packumentBytesDecoded,
  *      packumentSource, error?}.
  */
@@ -78,17 +73,9 @@ export interface ResolveOneSpec {
      * the best version that satisfies range.
      */
     cachedEntries: FacetCachedEntry[];
-    /**
-     * X.5-F R1: when true, this package was either user-typed OR a
-     * required peer-dep enqueued by the supervisor. Bypasses
-     * SKIP_PACKAGES. The supervisor decides the flag at enqueue time.
-     */
-    topLevel: boolean;
     /** X.5-G G1: this spec came from an optionalDependencies edge, so
      *  platform-native bindings silent-skip rather than failing the parent. */
     isOptional: boolean;
-    /** W11 framework-aware skip. */
-    frameworkAware: boolean;
     /** Per-fetch timeout (ms). Default 15_000. */
     fetchTimeoutMs: number;
     /** Retries for transient failures. Default 3. */
@@ -178,6 +165,20 @@ export interface ResolveOneResult {
         reason: string;
     };
 }
+/**
+ * Parse an npm spec into install-name / registry-name / range. `npm:`
+ * aliases redirect the registry lookup to a different package while the
+ * dep records the alias as the install name; everything else is the
+ * identity. Shared with the installer's lockfile check (which reads the
+ * inner range out of an alias spec) and re-declared in the loader
+ * preamble so the facet's serialized body sees the same implementation.
+ */
+export declare function parseRegistryRequest(name: string, range: string): {
+    installName: string;
+    registryName: string;
+    range: string;
+    alias: boolean;
+};
 /**
  * Per-package fanout task body. Serialised via fn.toString() and
  * dispatched by Fanout.submitMany — see installer.ts

package/dist/npm/resolve-one-facet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve-one-facet.d.ts","sourceRoot":"","sources":["../../src/npm/resolve-one-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AA4B/E;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC;;;;OAIG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB;+EAC2E;IAC3E,UAAU,EAAE,OAAO,CAAC;IACpB,gCAAgC;IAChC,cAAc,EAAE,OAAO,CAAC;IACxB,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;;;OAIG;IACH,WAAW,EAAE,GAAG,EAAE,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAClE;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,KAAK,CACnB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAChF;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,WAAW,CAAA;KAAE,CACrE,CAAC;IACF;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,EACF;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACrE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,GACrC,MAAM,cAAc,EACpB,KAAK;IACH,UAAU,EAAE;QACV;;;;WAIG;QACH,YAAY,EAAE,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,KAC5C,OAAO,CAAC;YACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;YAC/B,MAAM,EAAE,KAAK,CACT;gBAAE,IAAI,EAAE,KAAK,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,GAC/D;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,CACpD,CAAC;YACF,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC,CAAC;KACJ,CAAC;CACH,KACA,OAAO,CAAC,gBAAgB,CA+X1B,CAAC"}
+{"version":3,"file":"resolve-one-facet.d.ts","sourceRoot":"","sources":["../../src/npm/resolve-one-facet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuDG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AA4B/E;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,aAAa,EAAE,gBAAgB,EAAE,CAAC;IAClC;+EAC2E;IAC3E,UAAU,EAAE,OAAO,CAAC;IACpB,8CAA8C;IAC9C,cAAc,EAAE,MAAM,CAAC;IACvB,iDAAiD;IACjD,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sEAAsE;IACtE,GAAG,EAAE,eAAe,GAAG,IAAI,CAAC;IAC5B;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C;;;;OAIG;IACH,WAAW,EAAE,GAAG,EAAE,CAAC;IACnB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sDAAsD;IACtD,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B;;;OAGG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAC9B,eAAe,EAAE,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAClE;;;;OAIG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,KAAK,CACnB;QAAE,IAAI,EAAE,KAAK,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,WAAW,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAChF;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,WAAW,CAAA;KAAE,CACrE,CAAC;IACF;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,EACF;QAAE,IAAI,EAAE,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GACrE;QAAE,IAAI,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;CAC5C;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;;EAsB/D;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,0BAA0B,GACrC,MAAM,cAAc,EACpB,KAAK;IACH,UAAU,EAAE;QACV;;;;WAIG;QACH,YAAY,EAAE,CACZ,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;YAAE,OAAO,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,KAC5C,OAAO,CAAC;YACX,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;YACpB,MAAM,EAAE,UAAU,GAAG,SAAS,CAAC;YAC/B,MAAM,EAAE,KAAK,CACT;gBAAE,IAAI,EAAE,KAAK,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAC;gBAAC,KAAK,EAAE,MAAM,CAAA;aAAE,GAC/D;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAC;gBAAC,SAAS,EAAE,MAAM,CAAA;aAAE,CACpD,CAAC;YACF,MAAM,CAAC,EAAE,MAAM,CAAC;YAChB,OAAO,CAAC,EAAE,MAAM,CAAC;SAClB,CAAC,CAAC;KACJ,CAAC;CACH,KACA,OAAO,CAAC,gBAAgB,CAqW1B,CAAC"}

package/dist/npm/resolve-one-facet.js

@@ -19,9 +19,7 @@
  *   - All helpers (semver, exports, skip-list, registry decisions) are
  *     accessed via bare identifiers from the preamble:
  *
- *       SHOULD_SKIP_PACKAGE(name, frameworkAware) → boolean
  *       SHOULD_SWAP(name) → { from, to } | null
- *       SHOULD_WARN_SKIP_TRANSITIVE(name) → { from, reason } | null
  *       SHOULD_REJECT_FAIL(name) → { from, reason, suggest? } | null
  *       NATIVE_EXECUTABLE_REJECT(pkg) → { from, reason, suggest? } | null
  *       PARSE_SEMVER(v) → [maj, min, patch] | null
@@ -38,27 +36,58 @@
  *     bestEffortNames set; the task returns the `pkg` raw and the
  *     supervisor decides whether a downstream reject silent-skips or
  *     propagates.
- *   - Top-level handling: the supervisor maintains topLevelNames.
- *     `topLevel` is passed in per task so SKIP_PACKAGES bypass works.
  *
  * What the task DOES do
  * ─────────────────────
- *   1. Apply SKIP_PACKAGES filter (unless `topLevel`).
- *   2. Apply swap / warn-skip / reject-fail registry policy.
- *   3. Try in-task cache from `cachedHit` (one entry shipped from
+ *   1. Apply swap / reject-fail registry policy.
+ *   2. Try in-task cache from `cachedHit` (one entry shipped from
  *      supervisor's NpmCache).
- *   4. Ask env.SUPERVISOR.getPackument for the packument. Fetching the
+ *   3. Ask env.SUPERVISOR.getPackument for the packument. Fetching the
  *      registry and filling the cross-tenant cache are supervisor-side;
  *      the facet only reads.
- *   5. Pick version via preamble's RESOLVE_VERSION.
- *   6. Materialise ResolvedPackage shape (versionToResolved-style).
- *   7. Stage cache writes for this version + top-5 recent versions.
+ *   4. Pick version via preamble's RESOLVE_VERSION.
+ *   5. Materialise ResolvedPackage shape (versionToResolved-style).
+ *   6. Stage cache writes for this version + top-5 recent versions.
  *      Returns them in `cacheWrites` so the supervisor can flush in one
  *      batched RPC.
- *   8. Return {pkg, deps, peerDeps, optionalDeps, allPeerDependencies,
+ *   7. Return {pkg, deps, peerDeps, optionalDeps, allPeerDependencies,
  *      cacheWrites, messages, events, packumentBytesDecoded,
  *      packumentSource, error?}.
  */
+/**
+ * Parse an npm spec into install-name / registry-name / range. `npm:`
+ * aliases redirect the registry lookup to a different package while the
+ * dep records the alias as the install name; everything else is the
+ * identity. Shared with the installer's lockfile check (which reads the
+ * inner range out of an alias spec) and re-declared in the loader
+ * preamble so the facet's serialized body sees the same implementation.
+ */
+export function parseRegistryRequest(name, range) {
+    const text = String(range || 'latest');
+    if (!text.startsWith('npm:')) {
+        return { installName: name, registryName: name, range: text, alias: false };
+    }
+    const target = text.slice(4);
+    const findSeparator = (specText) => {
+        if (!specText)
+            return -1;
+        if (specText[0] !== '@')
+            return specText.indexOf('@');
+        const slash = specText.indexOf('/');
+        if (slash < 0)
+            return -1;
+        return specText.indexOf('@', slash + 1);
+    };
+    const splitAt = findSeparator(target);
+    const registryName = splitAt >= 0 ? target.slice(0, splitAt) : target;
+    const targetRange = splitAt >= 0 ? target.slice(splitAt + 1) : 'latest';
+    return {
+        installName: name,
+        registryName: registryName || name,
+        range: targetRange || 'latest',
+        alias: true,
+    };
+}
 /**
  * Per-package fanout task body. Serialised via fn.toString() and
  * dispatched by Fanout.submitMany — see installer.ts
@@ -75,32 +104,6 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
     const messages = [];
     const events = [];
     const cacheWrites = [];
-    const parseRegistryRequest = (name, range) => {
-        const text = String(range || 'latest');
-        if (!text.startsWith('npm:')) {
-            return { installName: name, registryName: name, range: text, alias: false };
-        }
-        const target = text.slice(4);
-        const findSeparator = (specText) => {
-            if (!specText)
-                return -1;
-            if (specText[0] !== '@')
-                return specText.indexOf('@');
-            const slash = specText.indexOf('/');
-            if (slash < 0)
-                return -1;
-            return specText.indexOf('@', slash + 1);
-        };
-        const splitAt = findSeparator(target);
-        const registryName = splitAt >= 0 ? target.slice(0, splitAt) : target;
-        const targetRange = splitAt >= 0 ? target.slice(splitAt + 1) : 'latest';
-        return {
-            installName: name,
-            registryName: registryName || name,
-            range: targetRange || 'latest',
-            alias: true,
-        };
-    };
     const request = parseRegistryRequest(spec.name, spec.range);
     // cache-obs-2: per-resolve cache events. Filled by the L2/L3 path
     // (spliced from supervisor RPC return.events) and the L4 path
@@ -122,6 +125,19 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
         cacheStatEvents,
         error,
     });
+    // npm parity: a table reject or a native-executable bin is a package
+    // with no Workers-compatible build — real npm still installs it. The
+    // advisory event tells the installer to print one `note:` line per
+    // name and the resolution continues like any package.
+    const emitAdvisory = (entry) => {
+        events.push({
+            type: 'advisory',
+            from: entry.from,
+            reason: entry.reason,
+            suggest: entry.suggest,
+            ctx: 'transitive',
+        });
+    };
     const outNativeExecutableReject = (pkg, bytes, source) => {
         const reject = NATIVE_EXECUTABLE_REJECT(pkg);
         if (!reject)
@@ -135,26 +151,30 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
             });
             return out(null, bytes, 'skipped');
         }
+        // Only an os/cpu/libc allowlist fails the install (EBADPLATFORM
+        // parity); a native-executable bin is advisory — the package's JS
+        // tree installs and the reason is reported as an advisory.
+        // @ts-ignore — preamble.
+        const platformReject = NATIVE_PLATFORM_REJECT(pkg);
+        if (!platformReject) {
+            emitAdvisory(reject);
+            return null;
+        }
         events.push({
             type: 'reject',
-            from: reject.from,
-            reason: reject.reason,
-            suggest: reject.suggest,
+            from: platformReject.from,
+            reason: platformReject.reason,
+            suggest: platformReject.suggest,
             ctx: 'transitive',
         });
         return out(null, bytes, source, {
             type: 'w6-reject',
-            from: reject.from,
-            reason: reject.reason,
-            suggest: reject.suggest,
+            from: platformReject.from,
+            reason: platformReject.reason,
+            suggest: platformReject.suggest,
         });
     };
-    // 1. SKIP_PACKAGES gate.
-    // @ts-ignore — preamble.
-    if (!spec.topLevel && SHOULD_SKIP_PACKAGE(spec.name, !!spec.frameworkAware)) {
-        return out(null, 0, 'skipped');
-    }
-    // 2. Registry policy.
+    // 1. Registry policy.
     let effName = request.registryName;
     // @ts-ignore — preamble.
     const __swap = SHOULD_SWAP(spec.name);
@@ -164,48 +184,29 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
         effName = __swap.to;
     }
     else {
-        // @ts-ignore — preamble.
-        const __warn = SHOULD_WARN_SKIP_TRANSITIVE(spec.name);
-        if (__warn) {
-            messages.push(`[npm] \x1b[33m[skip]\x1b[0m ${__warn.from} — ${__warn.reason}`);
-            events.push({ type: 'transitive-skip', from: __warn.from, reason: __warn.reason });
-            return out(null, 0, 'skipped');
-        }
         // @ts-ignore — preamble.
         const __fail = SHOULD_REJECT_FAIL(spec.name);
-        if (__fail) {
-            events.push({
-                type: 'reject',
-                from: __fail.from,
-                reason: __fail.reason,
-                suggest: __fail.suggest,
-                ctx: 'transitive',
-            });
-            return out(null, 0, 'skipped', {
-                type: 'w6-reject',
-                from: __fail.from,
-                reason: __fail.reason,
-                suggest: __fail.suggest,
-            });
-        }
+        // A listed package resolves and installs — npm parity; the
+        // advisory names the reason it cannot run here.
+        if (__fail)
+            emitAdvisory(__fail);
     }
-    // 3. cachedHit fast-path.
+    // 2. cachedHit fast-path. The pick over the cached versions is the same
+    //    RESOLVE_VERSION the packument path uses — a range is never reduced
+    //    to its base version. It used to be: `^3.0.0` was stripped to `3.0.0`
+    //    and answered by a cached 3.0.0 even with 3.0.1 sitting beside it,
+    //    which is how the second install in a session came back with lower
+    //    versions than the first (measured: totalist, readdirp, mrmime,
+    //    milliparsec, dot-prop, eta on json-server@1.0.0-beta.15).
     const cached = (() => {
         const entries = spec.cachedEntries || [];
         if (entries.length === 0)
             return null;
-        const cleanRange = (request.range || '').replace(/^[~^>=<\s]+/, '');
-        if (/^\d+\.\d+\.\d+$/.test(cleanRange)) {
-            const exact = entries.find((e) => e.name === request.installName && e.version === cleanRange);
-            if (exact)
-                return exact;
-        }
         const candidates = entries.filter((e) => e.name === request.installName);
         if (candidates.length === 0)
             return null;
-        const versions = candidates.map((e) => e.version);
         // @ts-ignore — preamble.
-        const picked = RESOLVE_VERSION(versions, request.range);
+        const picked = RESOLVE_VERSION(candidates.map((e) => e.version), request.range);
         if (!picked)
             return null;
         return candidates.find((e) => e.version === picked) || null;
@@ -343,7 +344,7 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
             reason: `packument for ${effName} carries no versions`,
         });
     }
-    // 6. Pick version.
+    // 3. Pick version.
     let version = null;
     if (request.range && data.versions[request.range])
         version = request.range;
@@ -362,7 +363,7 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
             reason: `no published version of ${effName} satisfies ${request.range}`,
         });
     }
-    // 7. Materialise ResolvedPackage.
+    // 4. Materialise ResolvedPackage.
     const vData = data.versions[version];
     const versionToResolved = (v) => {
         const packageName = request.installName || v.name;
@@ -424,7 +425,7 @@ export const resolveOnePackumentInFacet = async function resolveOnePackumentInFa
     const nativeReject = outNativeExecutableReject(pkg, bytes, packumentSource);
     if (nativeReject)
         return nativeReject;
-    // 8. Stage cache writes.
+    // 5. Stage cache writes.
     cacheWrites.push({
         name: pkg.name,
         version: pkg.version,

package/dist/npm/semver.d.ts

@@ -0,0 +1,59 @@
+/**
+ * npm/semver.ts — the one semver implementation the npm resolver picks
+ * versions with.
+ *
+ * The resolver facet (npm/resolve-one-facet.ts) runs inside a dynamic worker
+ * whose only module scope is the preamble string in
+ * loaders/npm-resolve-preamble.ts. That preamble embeds THESE functions by
+ * `fn.toString()`, so the facet's version pick is this module's by
+ * construction — there is no second copy to drift, and
+ * tests/unit/npm-semver.mjs asserts the embedded functions answer exactly
+ * as the exported ones do.
+ *
+ * Every function here is self-contained on purpose: no closures over module
+ * constants, no imports, only calls to the other functions in this file by
+ * name. `toString()` reproduces exactly that, and nothing else.
+ *
+ * What is implemented is the subset of node-semver that npm dependency
+ * ranges use: exact versions, `^`, `~`, comparators, hyphen ranges, `||`,
+ * X-ranges (`1`, `1.2`, `1.x`, `*`), and — the part the previous helper
+ * lacked — prerelease identifiers. Ignoring them meant every `1.0.0-*`
+ * compared equal, so `json-server@1.0.0-beta.15` resolved to whichever
+ * `1.0.0-*` the packument listed first (`1.0.0-alpha.1`) and
+ * `^1.0.0-next.24` picked `1.0.0-next.0`. Measured against the live registry
+ * lists before this rewrite.
+ */
+/** `[major, minor, patch, prerelease]` — prerelease is `[]` for a release. */
+export type ParsedSemver = [number, number, number, Array<string | number>];
+/** Parse `v1.2.3-beta.4+build` → `[1, 2, 3, ['beta', 4]]`; null for a non-version. */
+export declare function parseSemver(v: string): ParsedSemver | null;
+/**
+ * Total order. A release sorts above every prerelease of the same triple;
+ * prerelease identifiers compare left to right, numeric before alphanumeric,
+ * numeric by value, alphanumeric lexically, and a longer list sorts above
+ * its prefix (semver.org §11).
+ */
+export declare function compareSemver(a: ParsedSemver, b: ParsedSemver): number;
+/**
+ * One comparator set (the space-separated part of a range) as
+ * `>=lower <upper` bounds. Every range shape npm uses normalises to at
+ * most two bounds, so a set is a list of `[op, version]` pairs.
+ */
+export declare function semverComparators(part: string): Array<[string, ParsedSemver]> | null;
+/**
+ * node-semver's prerelease rule: a prerelease version satisfies a comparator
+ * set only when some comparator in that set names a prerelease of the same
+ * `major.minor.patch`. `^1.0.0-next.24` admits `1.0.0-next.29` and `1.0.0`,
+ * never `1.1.0-rc.1`; `^1.0.0` admits no prerelease at all.
+ */
+export declare function satisfiesRange(version: string, range: string): boolean;
+/**
+ * Whether `range` is semver-shaped at all — `''`, `*`, `latest`, tags,
+ * comparators, hyphen ranges, `||` groups. False for git:, github:,
+ * URL, file:, and other non-registry specifiers, where a version pin's
+ * presence is all a lockfile can answer.
+ */
+export declare function isSemverRange(range: string): boolean;
+/** The highest version satisfying `range`, or null; `latest`/`*` are the caller's dist-tag lookup. */
+export declare function resolveVersion(versions: readonly string[], range: string): string | null;
+//# sourceMappingURL=semver.d.ts.map

package/dist/npm/semver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"semver.d.ts","sourceRoot":"","sources":["../../src/npm/semver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,8EAA8E;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC;AAE5E,sFAAsF;AACtF,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAQ1D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,GAAG,MAAM,CAoBtE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,GAAG,IAAI,CA4CpF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAqCtE;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAgBpD;AAED,sGAAsG;AACtG,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAWxF"}