@orkestrel/scaffold 0.0.45 → 0.0.47

package/dist/src/server/index.cjs

@@ -2426,7 +2426,7 @@ var Materializer = class Materializer {
 		return this.#rewrite(directory, _src_core.CATALOG_AGENT_PATH, _src_core.MAX_ARTIFACT_BYTES, this.#recatalog(accepted));
 	}
 	/**
-	* Rewrite the `@orkestrel/*` range set in the target's manifest.
+	* Rewrite the declared dependency ranges the caller names in the target's manifest.
 	*
 	* @param dependencies - The names and ranges the manifest must declare.
 	* @param target - The directory to write into.
@@ -2925,45 +2925,12 @@ var Materializer = class Materializer {
 	}
 	#redeclare(dependencies) {
 		return (text) => {
-			let manifest = text;
-			for (const dependency of dependencies) {
-				const key = JSON.stringify(dependency.name);
-				const range = JSON.stringify(dependency.range);
-				let index = manifest.indexOf(key);
-				let declared = false;
-				while (index >= 0) {
-					const span = this.#span(manifest, index + key.length);
-					if (span === void 0) {
-						index = manifest.indexOf(key, index + key.length);
-						continue;
-					}
-					manifest = manifest.slice(0, span[0]) + range + manifest.slice(span[1]);
-					declared = true;
-					index = manifest.indexOf(key, span[0] + range.length);
-				}
-				if (!declared) throw this.#error("INVALID", `The manifest does not declare ${dependency.name}, so its range cannot be rewritten.`, { name: dependency.name });
-			}
-			return manifest;
+			const manifest = (0, _src_core.replaceManifestRanges)(text, dependencies);
+			if (manifest !== void 0) return manifest;
+			const missing = dependencies.find((dependency) => !text.includes(JSON.stringify(dependency.name)));
+			throw this.#error("INVALID", `The manifest does not declare ${missing?.name ?? "a requested package"}, so its range cannot be rewritten.`, missing === void 0 ? void 0 : { name: missing.name });
 		};
 	}
-	#span(text, from) {
-		let index = from;
-		while (index < text.length && /\s/u.test(text.charAt(index))) index += 1;
-		if (text.charAt(index) !== ":") return void 0;
-		index += 1;
-		while (index < text.length && /\s/u.test(text.charAt(index))) index += 1;
-		if (text.charAt(index) !== "\"") return void 0;
-		const start = index;
-		index += 1;
-		while (index < text.length) {
-			if (text.charAt(index) === "\\") {
-				index += 2;
-				continue;
-			}
-			if (text.charAt(index) === "\"") return [start, index + 1];
-			index += 1;
-		}
-	}
 	#finish(result) {
 		this.#emitter.emit("finish", result);
 		return result;
@@ -3028,7 +2995,6 @@ var Upstream = class Upstream {
 	static #defaultTimeout = 1e4;
 	static #defaultConcurrency = 6;
 	static #defaultRetries = 0;
-	static #defaultBudget = 16777216;
 	static #scope = "orkestrel";
 	static #unreadable = "the answer carries no readable latest version";
 	static #packument = "application/vnd.npm.install-v1+json";
@@ -3076,15 +3042,15 @@ var Upstream = class Upstream {
 		this.#registryTimeout = options?.registry?.timeout ?? Upstream.#defaultTimeout;
 		this.#concurrency = options?.concurrency ?? Upstream.#defaultConcurrency;
 		this.#retries = options?.retries ?? Upstream.#defaultRetries;
-		this.#limit = options?.limit ?? _src_core.MAX_ARTIFACT_BYTES;
-		this.#budget = options?.budget ?? Upstream.#defaultBudget;
+		this.#limit = options?.limit ?? _src_core.MAX_REGISTRY_BYTES;
+		this.#budget = options?.budget ?? _src_core.MAX_TOTAL_REGISTRY_BYTES;
 	}
 	/** The upstream reader's observation channel. */
 	get emitter() {
 		return this.#emitter;
 	}
 	/**
-	* Look up the registry's latest release for each declared dependency.
+	* Look up the newest release each declared range admits.
 	*
 	* @param dependencies - The declared dependencies to look up.
 	* @returns One release verdict per dependency, in input order.
@@ -3093,10 +3059,11 @@ var Upstream = class Upstream {
 	* torn down before or during the call.
 	*
 	* @remarks
-	* Whether the declared range already admits the reported version is not
-	* decided here and is not stored on the verdict: it is a function of the
-	* `range` and `latest` sitting beside each other, and one centralized helper
-	* answers it for every caller.
+	* The reader selects across the packument's stable version map before any
+	* collection bound can truncate it. It falls back to `dist-tags.latest` only
+	* when that version satisfies the declared range. `*` requests the newest
+	* stable version outright. The verdict's `major` field carries the stable
+	* major from the latest tag when that tag can be read.
 	*
 	* @example
 	* ```ts
@@ -3225,17 +3192,21 @@ var Upstream = class Upstream {
 	}
 	async #release(dependency, allowance) {
 		const outcome = await this.#read(this.#registryURL(dependency.name), this.#registryTimeout, allowance, Upstream.#packument);
-		const latest = outcome.lookup === "found" ? this.#latest(outcome.content) : void 0;
+		const latest = outcome.lookup === "found" ? this.#releaseVersion(outcome.content, dependency.range) : void 0;
+		const tagged = outcome.lookup === "found" ? this.#latest(outcome.content) : void 0;
+		const major = tagged === void 0 ? void 0 : (0, _src_core.extractVersion)(tagged)?.[0];
 		const release = latest === void 0 ? {
 			name: dependency.name,
 			range: dependency.range,
 			lookup: outcome.lookup === "missing" ? "missing" : "failed",
-			note: outcome.lookup === "found" ? Upstream.#unreadable : outcome.note
+			note: outcome.lookup === "found" ? Upstream.#unreadable : outcome.note,
+			...major === void 0 ? {} : { major }
 		} : {
 			name: dependency.name,
 			range: dependency.range,
 			lookup: "found",
-			latest
+			latest,
+			...major === void 0 ? {} : { major }
 		};
 		this.#emitter.emit("release", release);
 		return release;
@@ -3320,6 +3291,27 @@ var Upstream = class Upstream {
 		if (latest === void 0 || latest.length === 0 || latest.length > _src_core.MAX_RANGE_LENGTH) return;
 		return _src_core.CONTROL_CHARACTER_PATTERN.test(latest) ? void 0 : latest;
 	}
+	#releaseVersion(content, range) {
+		const parsed = (0, _orkestrel_contract.parseJSON)(content);
+		if (!(0, _orkestrel_contract.isRecord)(parsed)) return void 0;
+		const versions = parsed.versions;
+		let selected;
+		if ((0, _orkestrel_contract.isRecord)(versions)) for (const version of Object.keys(versions)) {
+			if (!this.#admits(range, version)) continue;
+			if (selected === void 0 || (0, _src_core.compareVersions)(version, selected) > 0) selected = version;
+		}
+		if (selected !== void 0) return selected;
+		const latest = this.#latest(content);
+		return latest !== void 0 && this.#admits(range, latest) ? latest : void 0;
+	}
+	#admits(range, version) {
+		const extracted = (0, _src_core.extractVersion)(version);
+		if (extracted === void 0) return false;
+		if (range === "*") return true;
+		const major = (0, _src_core.extractRangeMajor)(range);
+		if (major !== void 0 && range === `^${String(major)}`) return extracted[0] === major;
+		return (0, _src_core.matchesRange)(range, version);
+	}
 	#registryURL(name) {
 		return `${this.#registryBase}/${encodeURIComponent(name).replaceAll("%40", "@")}`;
 	}