@package-broker/cli 0.19.7 → 2.0.0-rc.1

package/dist/import/private-packagist/api.js

@@ -0,0 +1,246 @@
+import { createHmac, randomUUID } from 'node:crypto';
+const ORIGIN = 'https://packagist.com';
+export const MAX_PAGE_BYTES = 8 * 1024 * 1024;
+export const MAX_PAGES = 10_000;
+export const MAX_OBJECTS = 200_000;
+const ERROR_TEXT = {
+    get_only: 'Private Packagist requests must use GET.',
+    invalid_url: 'Private Packagist request URL refused.',
+    invalid_response: 'Invalid Private Packagist response.',
+    snapshot_limit_exceeded: 'Private Packagist snapshot limit exceeded.',
+    clock_skew: 'Check the local clock before retrying Private Packagist.',
+    packagist_auth: 'Private Packagist authentication failed.',
+    packagist_signature: 'Private Packagist signature failed.',
+    packagist_request: 'Private Packagist request failed.',
+    redirect_refused: 'Private Packagist redirect refused.',
+    org_mismatch: 'Private Packagist organization does not match.',
+    org_unverified: 'Private Packagist organization could not be verified.',
+    invalid_input: 'Invalid Private Packagist fetch options.',
+    credential_file: 'Credential files must be owned by the current user, regular, with mode 0600 or stricter.',
+    ambiguous_credentials: 'Choose either a credential file flag or its environment variable.',
+    output_exists: 'Snapshot output already exists.',
+    output_unwritable: 'Snapshot output could not be written.',
+};
+export class PackagistError extends Error {
+    code;
+    constructor(code) {
+        super(ERROR_TEXT[code]);
+        this.code = code;
+        this.name = 'PackagistError';
+    }
+}
+function encode(value) {
+    return encodeURIComponent(value).replace(/[!'()*]/g, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+function query(params) {
+    return Object.keys(params)
+        .sort()
+        .map((key) => `${encode(key)}=${encode(params[key])}`)
+        .join('&');
+}
+function pinnedUrl(path, base = ORIGIN) {
+    try {
+        const url = new URL(path, base);
+        if (url.origin !== ORIGIN || url.username || url.password || url.hash)
+            throw new Error();
+        return url;
+    }
+    catch {
+        throw new PackagistError('invalid_url');
+    }
+}
+function authorization(url, key, secret, timestamp) {
+    const params = Object.create(null);
+    for (const [name, value] of url.searchParams) {
+        // PHP parse_str rewrites these keys; our read endpoints use scalar, unique keys only.
+        if (!/^[a-zA-Z0-9_-]+$/.test(name) || Object.hasOwn(params, name))
+            throw new PackagistError('invalid_url');
+        params[name] = value;
+    }
+    const cnonce = randomUUID();
+    const canonical = `GET\n${url.hostname}\n${url.pathname}\n${query({
+        timestamp: String(timestamp),
+        cnonce,
+        key,
+        version: '2',
+        query: query(params),
+    })}`;
+    const signature = createHmac('sha256', secret).update(canonical).digest('base64');
+    return `PACKAGIST-HMAC-SHA256 Key=${key}, Timestamp=${timestamp}, Cnonce=${cnonce}, Version=2, Signature=${signature}`;
+}
+function nextLink(header, base) {
+    if (!header)
+        return null;
+    let next = null;
+    for (const part of header.split(/,(?=\s*<)/)) {
+        const rel = /;\s*rel\s*=\s*(?:"([^"]*)"|([^;\s,]+))/i.exec(part);
+        if (!(rel?.[1] ?? rel?.[2] ?? '').split(/\s+/).includes('next'))
+            continue;
+        const target = /^\s*<([^>]+)>/.exec(part)?.[1];
+        if (!target || next !== null)
+            throw new PackagistError('invalid_response');
+        next = pinnedUrl(target, base).href;
+    }
+    return next;
+}
+function checkDepth(value, depth = 0) {
+    if (depth > 64)
+        throw new PackagistError('invalid_response');
+    if (typeof value === 'object' && value !== null)
+        for (const child of Object.values(value))
+            checkDepth(child, depth + 1);
+}
+export class PackagistApi {
+    options;
+    active = 0;
+    waiters = [];
+    fetcher;
+    now;
+    sleep;
+    constructor(options) {
+        this.options = options;
+        this.fetcher = options.fetch ?? globalThis.fetch;
+        this.now = options.now ?? Date.now;
+        this.sleep = options.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+        if (options.key.length < 8 ||
+            options.secret.length < 8 ||
+            !/^[a-zA-Z0-9_-]+$/.test(options.key) ||
+            /[\r\n]/.test(options.secret))
+            throw new PackagistError('invalid_input');
+    }
+    assertNoCredentials(value) {
+        const text = JSON.stringify(value);
+        if (text.includes(this.options.key) || text.includes(this.options.secret))
+            throw new PackagistError('invalid_response');
+    }
+    async slot(operation) {
+        if (this.active >= 2)
+            await new Promise((resolve) => this.waiters.push(resolve));
+        else
+            this.active++;
+        try {
+            return await operation();
+        }
+        finally {
+            const next = this.waiters.shift();
+            if (next)
+                next();
+            else
+                this.active--;
+        }
+    }
+    async body(response) {
+        const cap = Math.min(this.options.limits?.bytes ?? MAX_PAGE_BYTES, MAX_PAGE_BYTES);
+        if (Number(response.headers.get('content-length')) > cap) {
+            await response.body?.cancel().catch(() => undefined);
+            throw new PackagistError('snapshot_limit_exceeded');
+        }
+        const reader = response.body?.getReader();
+        if (!reader)
+            throw new PackagistError('invalid_response');
+        const chunks = [];
+        let size = 0;
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                size += value.byteLength;
+                if (size > cap)
+                    throw new PackagistError('snapshot_limit_exceeded');
+                chunks.push(value);
+            }
+        }
+        finally {
+            await reader.cancel().catch(() => undefined);
+            reader.releaseLock();
+        }
+        return Buffer.concat(chunks).toString('utf8');
+    }
+    async request(path, method = 'GET') {
+        if (method !== 'GET')
+            throw new PackagistError('get_only');
+        const url = pinnedUrl(path);
+        return this.slot(async () => {
+            try {
+                for (let attempt = 0; attempt < 5; attempt++) {
+                    const response = await this.fetcher(url.href, {
+                        method: 'GET',
+                        redirect: 'error',
+                        signal: AbortSignal.timeout(30_000),
+                        headers: {
+                            Authorization: authorization(url, this.options.key, this.options.secret, Math.floor(this.now() / 1000)),
+                        },
+                    });
+                    if (response.redirected || (response.status >= 300 && response.status < 400)) {
+                        await response.body?.cancel().catch(() => undefined);
+                        throw new PackagistError('redirect_refused');
+                    }
+                    if (response.status === 401) {
+                        await response.body?.cancel().catch(() => undefined);
+                        throw new PackagistError('packagist_auth');
+                    }
+                    if (response.status === 429 || (response.status >= 500 && response.status <= 599)) {
+                        await response.body?.cancel().catch(() => undefined);
+                        if (attempt === 4)
+                            throw new PackagistError('packagist_request');
+                        const retry = response.headers.get('retry-after');
+                        const retryMs = retry === null
+                            ? 0
+                            : /^\d+(?:\.\d+)?$/.test(retry)
+                                ? Number(retry) * 1000
+                                : Date.parse(retry) - this.now();
+                        const backoff = 1000 * 2 ** attempt + (this.options.random ?? Math.random)() * 500;
+                        await this.sleep(Math.min(30_000, Math.max(backoff, Number.isFinite(retryMs) ? retryMs : 0)));
+                        continue;
+                    }
+                    const text = await this.body(response);
+                    if (response.status === 400)
+                        throw new PackagistError(/timestamp/i.test(text) ? 'clock_skew' : 'packagist_signature');
+                    if (!response.ok)
+                        throw new PackagistError('packagist_request');
+                    let data;
+                    try {
+                        data = JSON.parse(text);
+                    }
+                    catch {
+                        throw new PackagistError('invalid_response');
+                    }
+                    checkDepth(data);
+                    return { data, next: nextLink(response.headers.get('link'), url.href) };
+                }
+                throw new PackagistError('packagist_request');
+            }
+            catch (error) {
+                if (error instanceof PackagistError)
+                    throw error;
+                const redirect = error instanceof TypeError &&
+                    error.cause instanceof Error &&
+                    error.cause.message === 'unexpected redirect';
+                throw new PackagistError(redirect ? 'redirect_refused' : 'packagist_request');
+            }
+        });
+    }
+    async list(path) {
+        const rows = [];
+        let next = pinnedUrl(path).href;
+        let pages = 0;
+        while (next !== null) {
+            if (++pages > Math.min(this.options.limits?.pages ?? MAX_PAGES, MAX_PAGES))
+                throw new PackagistError('snapshot_limit_exceeded');
+            const url = pinnedUrl(next);
+            url.searchParams.set('limit', '500');
+            const page = await this.request(url.href);
+            if (!Array.isArray(page.data))
+                throw new PackagistError('invalid_response');
+            if (rows.length + page.data.length >
+                Math.min(this.options.limits?.objects ?? MAX_OBJECTS, MAX_OBJECTS))
+                throw new PackagistError('snapshot_limit_exceeded');
+            for (const row of page.data)
+                rows.push(row);
+            next = page.next;
+        }
+        return rows;
+    }
+}
+//# sourceMappingURL=api.js.map

package/dist/import/private-packagist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/import/private-packagist/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAErD,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC9C,MAAM,CAAC,MAAM,SAAS,GAAG,MAAM,CAAC;AAChC,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AACnC,MAAM,UAAU,GAAG;IACjB,QAAQ,EAAE,0CAA0C;IACpD,WAAW,EAAE,wCAAwC;IACrD,gBAAgB,EAAE,qCAAqC;IACvD,uBAAuB,EAAE,4CAA4C;IACrE,UAAU,EAAE,0DAA0D;IACtE,cAAc,EAAE,0CAA0C;IAC1D,mBAAmB,EAAE,qCAAqC;IAC1D,iBAAiB,EAAE,mCAAmC;IACtD,gBAAgB,EAAE,qCAAqC;IACvD,YAAY,EAAE,gDAAgD;IAC9D,cAAc,EAAE,uDAAuD;IACvE,aAAa,EAAE,0CAA0C;IACzD,eAAe,EACb,0FAA0F;IAC5F,qBAAqB,EAAE,mEAAmE;IAC1F,aAAa,EAAE,iCAAiC;IAChD,iBAAiB,EAAE,uCAAuC;CAClD,CAAC;AAEX,MAAM,OAAO,cAAe,SAAQ,KAAK;IAClB;IAArB,YAAqB,IAA6B;QAChD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QADL,SAAI,GAAJ,IAAI,CAAyB;QAEhD,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAYD,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,kBAAkB,CAAC,KAAK,CAAC,CAAC,OAAO,CACtC,UAAU,EACV,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,MAA8B;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SACvB,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;SACtD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,IAAI,GAAG,MAAM;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACzF,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ,EAAE,GAAW,EAAE,MAAc,EAAE,SAAiB;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAA2B,CAAC;IAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7C,sFAAsF;QACtF,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;YAC/D,MAAM,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,QAAQ,GAAG,CAAC,QAAQ,KAAK,GAAG,CAAC,QAAQ,KAAK,KAAK,CAAC;QAChE,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC;QAC5B,MAAM;QACN,GAAG;QACH,OAAO,EAAE,GAAG;QACZ,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;KACrB,CAAC,EAAE,CAAC;IACL,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClF,OAAO,6BAA6B,GAAG,eAAe,SAAS,YAAY,MAAM,0BAA0B,SAAS,EAAE,CAAC;AACzH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAqB,EAAE,IAAY;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,SAAS;QAC1E,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,IAAI;YAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC3E,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC3C,IAAI,KAAK,GAAG,EAAE;QAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAC7C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,OAAO,YAAY;IAOM;IANrB,MAAM,GAAG,CAAC,CAAC;IACF,OAAO,GAAmB,EAAE,CAAC;IAC7B,OAAO,CAA0B;IACjC,GAAG,CAAe;IAClB,KAAK,CAAgC;IAEtD,YAA6B,OAAmB;QAAnB,YAAO,GAAP,OAAO,CAAY;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QACjD,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,IACE,OAAO,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;YACtB,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YACzB,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;YACrC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAE7B,MAAM,IAAI,cAAc,CAAC,eAAe,CAAC,CAAC;IAC9C,CAAC;IAED,mBAAmB,CAAC,KAAc;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YACvE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,IAAI,CAAI,SAA2B;QAC/C,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC;YAAE,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;;YAClF,IAAI,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YAClC,IAAI,IAAI;gBAAE,IAAI,EAAE,CAAC;;gBACZ,IAAI,CAAC,MAAM,EAAE,CAAC;QACrB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAkB;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,cAAc,EAAE,cAAc,CAAC,CAAC;QACnF,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC;YACzD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACrD,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAiB,EAAE,CAAC;QAChC,IAAI,IAAI,GAAG,CAAC,CAAC;QACb,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;gBACzB,IAAI,IAAI,GAAG,GAAG;oBAAE,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;gBACpE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC7C,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,MAAM,GAAG,KAAK;QACxC,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM,IAAI,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1B,IAAI,CAAC;gBACH,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;oBAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE;wBAC5C,MAAM,EAAE,KAAK;wBACb,QAAQ,EAAE,OAAO;wBACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;wBACnC,OAAO,EAAE;4BACP,aAAa,EAAE,aAAa,CAC1B,GAAG,EACH,IAAI,CAAC,OAAO,CAAC,GAAG,EAChB,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAC9B;yBACF;qBACF,CAAC,CAAC;oBACH,IAAI,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC;wBAC7E,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBACrD,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;oBAC/C,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC5B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBACrD,MAAM,IAAI,cAAc,CAAC,gBAAgB,CAAC,CAAC;oBAC7C,CAAC;oBACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC;wBAClF,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;wBACrD,IAAI,OAAO,KAAK,CAAC;4BAAE,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;wBACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;wBAClD,MAAM,OAAO,GACX,KAAK,KAAK,IAAI;4BACZ,CAAC,CAAC,CAAC;4BACH,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;gCAC7B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI;gCACtB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,CAAC;wBACnF,MAAM,IAAI,CAAC,KAAK,CACd,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAC5E,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;oBACvC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;wBACzB,MAAM,IAAI,cAAc,CACtB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,qBAAqB,CAC/D,CAAC;oBACJ,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;oBAChE,IAAI,IAAa,CAAC;oBAClB,IAAI,CAAC;wBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;oBAC/C,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC,CAAC;oBACjB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1E,CAAC;gBACD,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,YAAY,cAAc;oBAAE,MAAM,KAAK,CAAC;gBACjD,MAAM,QAAQ,GACZ,KAAK,YAAY,SAAS;oBAC1B,KAAK,CAAC,KAAK,YAAY,KAAK;oBAC5B,KAAK,CAAC,KAAK,CAAC,OAAO,KAAK,qBAAqB,CAAC;gBAChD,MAAM,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAChF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAY;QACrB,MAAM,IAAI,GAAc,EAAE,CAAC;QAC3B,IAAI,IAAI,GAAkB,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAC/C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,OAAO,IAAI,KAAK,IAAI,EAAE,CAAC;YACrB,IAAI,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,CAAC;gBACxE,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC5B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAC5E,IACE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM;gBAC9B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,WAAW,EAAE,WAAW,CAAC;gBAElE,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;YACtD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/import/private-packagist/dates.d.ts

@@ -0,0 +1,30 @@
+import { type ParsedManifest } from '@package-broker/core/import/manifest';
+import { type PlanDiagnostic } from './plan.js';
+export interface PrivatePackagistDatesInput {
+    readonly snapshot: unknown;
+    readonly map: unknown;
+    readonly baseline: unknown;
+    readonly packages?: readonly string[];
+}
+export interface DatesSummary {
+    overrides: number;
+    missingReleasedAt: number;
+}
+export type PrivatePackagistDatesResult = {
+    readonly ok: false;
+    readonly diagnostics: readonly (PlanDiagnostic & {
+        readonly selector?: string;
+    })[];
+    readonly summary: DatesSummary;
+} | {
+    readonly ok: true;
+    readonly diagnostics: readonly (PlanDiagnostic & {
+        readonly selector?: string;
+    })[];
+    readonly summary: DatesSummary;
+    readonly manifest: ParsedManifest;
+    readonly canonical: string;
+    readonly hash: string;
+};
+export declare function planPrivatePackagistDates(input: PrivatePackagistDatesInput): Promise<PrivatePackagistDatesResult>;
+//# sourceMappingURL=dates.d.ts.map

package/dist/import/private-packagist/dates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dates.d.ts","sourceRoot":"","sources":["../../../src/import/private-packagist/dates.ts"],"names":[],"mappings":"AACA,OAAO,EAML,KAAK,cAAc,EACpB,MAAM,sCAAsC,CAAC;AAE9C,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,WAAW,CAAC;AAKrE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AACD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AACD,MAAM,MAAM,2BAA2B,GACnC;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,cAAc,GAAG;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IACnF,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,cAAc,GAAG;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IACnF,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAeN,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,2BAA2B,CAAC,CA6LtC"}

package/dist/import/private-packagist/dates.js

@@ -0,0 +1,189 @@
+import { createHash } from 'node:crypto';
+import { canonicalManifest, MAX_MANIFEST_BYTES, MAX_MANIFEST_ITEMS, parseManifest, planHash, } from '@package-broker/core/import/manifest';
+import { MapError, object, parsePackagistMap } from './map.js';
+import { Refusal, repository } from './plan.js';
+import { canonical } from './snapshot.js';
+function refuse(code, pointer = '', cap) {
+    throw new Refusal(code, pointer, cap);
+}
+function json(value, code) {
+    try {
+        return typeof value === 'string' ? JSON.parse(value) : value;
+    }
+    catch {
+        return refuse(code);
+    }
+}
+const hash = (...parts) => createHash('sha256').update(JSON.stringify(parts)).digest('hex');
+export async function planPrivatePackagistDates(input) {
+    const summary = { overrides: 0, missingReleasedAt: 0 };
+    try {
+        const snapshot = json(input.snapshot, 'invalid_snapshot');
+        if (!object(snapshot))
+            refuse('invalid_snapshot');
+        if (snapshot.versions !== true)
+            refuse('versions_missing', '/versions');
+        if (snapshot.version !== 1 ||
+            typeof snapshot.org !== 'string' ||
+            typeof snapshot.fetchedAt !== 'string' ||
+            !object(snapshot.objects))
+            refuse('invalid_snapshot');
+        const rows = new Map();
+        for (const [kind, entries] of Object.entries(snapshot.objects)) {
+            if (!Array.isArray(entries))
+                refuse('invalid_snapshot');
+            rows.set(kind, entries.map((entry) => {
+                if (!object(entry) ||
+                    !object(entry.data) ||
+                    entry.sha256 !== createHash('sha256').update(canonical(entry.data)).digest('hex'))
+                    refuse('invalid_snapshot', '/objects');
+                return entry.data;
+            }));
+        }
+        const map = parsePackagistMap(input.map);
+        const baseline = parseManifest(json(input.baseline, 'invalid_baseline'));
+        if (!baseline.ok || baseline.data.source_system !== 'private-packagist')
+            refuse('invalid_baseline', '/baseline');
+        const sources = new Map(baseline.data.items.flatMap((item) => item.type === 'source' &&
+            item.source_type === 'vcs' &&
+            item.ecosystem === 'composer' &&
+            item.project === null
+            ? [[item.external_ref, item]]
+            : []));
+        const packages = new Map();
+        for (const kind of ['packages', 'suborganizationPackages']) {
+            for (const [i, pkg] of (rows.get(kind) ?? []).entries()) {
+                const pointer = `/objects/${kind}/${i}`;
+                if (typeof pkg.id !== 'number' ||
+                    !Number.isSafeInteger(pkg.id) ||
+                    pkg.id <= 0 ||
+                    typeof pkg.name !== 'string' ||
+                    !object(pkg.config))
+                    refuse('invalid_snapshot', pointer);
+                const old = packages.get(pkg.id);
+                if (old && (old.name !== pkg.name || old.origin !== pkg.origin))
+                    refuse('invalid_snapshot', pointer);
+                if (old && pkg.origin === 'private') {
+                    const mapped = Object.hasOwn(map.packages, pkg.name) ? map.packages[pkg.name] : undefined;
+                    const previous = repository(mapped?.url ?? old.config.url, pointer, true);
+                    if (previous !== repository(mapped?.url ?? pkg.config.url, pointer, true))
+                        refuse('conflicting_source', pointer);
+                }
+                packages.set(pkg.id, pkg);
+            }
+        }
+        const selected = input.packages === undefined || input.packages.length === 0 ? null : new Set(input.packages);
+        const privateNames = new Set([...packages.values()].filter((pkg) => pkg.origin === 'private').map((pkg) => pkg.name));
+        for (const [index, selector] of (input.packages ?? []).entries()) {
+            if (!privateNames.has(selector))
+                return {
+                    ok: false,
+                    diagnostics: [
+                        { code: 'unknown_package', pointer: `/options/packages/${index}`, selector },
+                    ],
+                    summary,
+                };
+        }
+        const items = new Map();
+        const missing = new Set();
+        const detailed = new Set();
+        for (const [i, detail] of (rows.get('packageDetails') ?? []).entries()) {
+            const pointer = `/objects/packageDetails/${i}/data`;
+            const pkg = packages.get(detail.id);
+            if (!pkg || !Array.isArray(detail.versions))
+                refuse('invalid_snapshot', pointer);
+            detailed.add(detail.id);
+            if (selected !== null && !selected.has(pkg.name))
+                continue;
+            if (['private-mirror', 'private-proxy', 'public-mirror', 'public-proxy'].includes(String(pkg.origin)))
+                continue;
+            if (pkg.origin !== 'private')
+                refuse('unsupported_package_origin', pointer);
+            const name = pkg.name;
+            const config = pkg.config;
+            const mapped = Object.hasOwn(map.packages, name) ? map.packages[name] : undefined;
+            const url = repository(mapped?.url ?? config.url, pointer, true);
+            const identity = [url, name];
+            const source = sources.get(`pp:source:${hash('pp-source-v1', identity)}`);
+            if (!source)
+                refuse('incomplete_baseline', pointer);
+            for (const [j, version] of detail.versions.entries()) {
+                const path = `${pointer}/versions/${j}`;
+                if (!object(version) || typeof version.version !== 'string')
+                    refuse('invalid_snapshot', path);
+                if (!/^[0-9A-Za-z][0-9A-Za-z.+_~/-]{0,255}$/.test(version.version))
+                    refuse('invalid_version', `${path}/version`);
+                const external_ref = `pp:version:${hash('pp-version-v1', identity, name, version.version)}`;
+                if (version.releasedAt === null || version.releasedAt === undefined) {
+                    missing.add(external_ref);
+                    continue;
+                }
+                if (typeof version.releasedAt !== 'string' ||
+                    !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d+)?(?:Z|[+-]\d{2}:\d{2})$/.test(version.releasedAt))
+                    refuse('invalid_released_at', `${path}/releasedAt`);
+                const time = Date.parse(version.releasedAt);
+                if (!Number.isFinite(time) || time < 0)
+                    refuse('invalid_released_at', `${path}/releasedAt`);
+                const localTime = Date.parse(version.releasedAt.replace(/(?:Z|[+-]\d{2}:\d{2})$/, 'Z'));
+                if (!Number.isFinite(localTime) ||
+                    new Date(localTime).toISOString().slice(0, 19) !== version.releasedAt.slice(0, 19))
+                    refuse('invalid_released_at', `${path}/releasedAt`);
+                const item = {
+                    type: 'version_override',
+                    external_ref,
+                    source: { existing: { project: null, name: source.name } },
+                    package: name,
+                    version: version.version,
+                    published_at: new Date(time).toISOString(),
+                    basis: 'source_release',
+                };
+                const previous = items.get(external_ref);
+                if (previous && previous.published_at !== item.published_at)
+                    refuse('conflicting_release_date', path);
+                items.set(external_ref, item);
+                if (items.size > MAX_MANIFEST_ITEMS)
+                    refuse('single_run_limit_exceeded', '', 'MAX_MANIFEST_ITEMS');
+            }
+        }
+        for (const [id, pkg] of packages) {
+            if (pkg.origin === 'private' &&
+                (selected === null || selected.has(pkg.name)) &&
+                !detailed.has(id))
+                refuse('invalid_snapshot', '/objects/packageDetails');
+        }
+        summary.overrides = items.size;
+        summary.missingReleasedAt = missing.size;
+        const parsed = parseManifest({
+            version: 1,
+            source_system: 'private-packagist',
+            items: [...items.values()],
+            widening: [],
+        });
+        if (!parsed.ok)
+            refuse('manifest_invalid', parsed.details[0]?.path ?? '');
+        const bytes = canonicalManifest(parsed.data);
+        if (Buffer.byteLength(bytes) > MAX_MANIFEST_BYTES)
+            refuse('single_run_limit_exceeded', '', 'MAX_MANIFEST_BYTES');
+        return {
+            ok: true,
+            diagnostics: [],
+            summary,
+            manifest: parsed.data,
+            canonical: bytes,
+            hash: await planHash(parsed.data),
+        };
+    }
+    catch (error) {
+        const diagnostic = error instanceof Refusal
+            ? {
+                code: error.code,
+                pointer: error.pointer,
+                ...(error.cap === undefined ? {} : { cap: error.cap }),
+            }
+            : error instanceof MapError
+                ? { code: 'invalid_map', pointer: error.pointer }
+                : { code: 'invalid_snapshot', pointer: '' };
+        return { ok: false, diagnostics: [diagnostic], summary };
+    }
+}
+//# sourceMappingURL=dates.js.map

package/dist/import/private-packagist/dates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dates.js","sourceRoot":"","sources":["../../../src/import/private-packagist/dates.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,EACb,QAAQ,GAET,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAuB,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AA6B1C,SAAS,MAAM,CAAC,IAAY,EAAE,OAAO,GAAG,EAAE,EAAE,GAAY;IACtD,MAAM,IAAI,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;AACxC,CAAC;AACD,SAAS,IAAI,CAAC,KAAc,EAAE,IAAY;IACxC,IAAI,CAAC;QACH,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AACD,MAAM,IAAI,GAAG,CAAC,GAAG,KAAgB,EAAE,EAAE,CACnC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnE,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,KAAiC;IAEjC,MAAM,OAAO,GAAiB,EAAE,SAAS,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAClD,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAAE,MAAM,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QACxE,IACE,QAAQ,CAAC,OAAO,KAAK,CAAC;YACtB,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ;YAChC,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;YACtC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAEzB,MAAM,CAAC,kBAAkB,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAiB,CAAC;QACtC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,MAAM,CAAC,kBAAkB,CAAC,CAAC;YACxD,IAAI,CAAC,GAAG,CACN,IAAI,EACJ,OAAO,CAAC,GAAG,CAAC,CAAC,KAAc,EAAE,EAAE;gBAC7B,IACE,CAAC,MAAM,CAAC,KAAK,CAAC;oBACd,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;oBACnB,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;oBAEjF,MAAM,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBACzC,OAAO,KAAK,CAAC,IAAI,CAAC;YACpB,CAAC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,iBAAiB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,aAAa,KAAK,mBAAmB;YACrE,MAAM,CAAC,kBAAkB,EAAE,WAAW,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,CACrB,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACnC,IAAI,CAAC,IAAI,KAAK,QAAQ;YACtB,IAAI,CAAC,WAAW,KAAK,KAAK;YAC1B,IAAI,CAAC,SAAS,KAAK,UAAU;YAC7B,IAAI,CAAC,OAAO,KAAK,IAAI;YACnB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAU,CAAC;YACtC,CAAC,CAAC,EAAE,CACP,CACF,CAAC;QACF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAe,CAAC;QACxC,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,yBAAyB,CAAC,EAAE,CAAC;YAC3D,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;gBACxD,MAAM,OAAO,GAAG,YAAY,IAAI,IAAI,CAAC,EAAE,CAAC;gBACxC,IACE,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ;oBAC1B,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC7B,GAAG,CAAC,EAAE,IAAI,CAAC;oBACX,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAC5B,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;oBAEnB,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;gBACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACjC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC;oBAC7D,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;gBACtC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC1F,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,IAAK,GAAG,CAAC,MAAc,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;oBACnF,IAAI,QAAQ,KAAK,UAAU,CAAC,MAAM,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC;wBACvE,MAAM,CAAC,oBAAoB,EAAE,OAAO,CAAC,CAAC;gBAC1C,CAAC;gBACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;YAC5B,CAAC;QACH,CAAC;QACD,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/F,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CACxF,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAC7B,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,WAAW,EAAE;wBACX,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,qBAAqB,KAAK,EAAE,EAAE,QAAQ,EAAE;qBAC7E;oBACD,OAAO;iBACR,CAAC;QACN,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAoB,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACvE,MAAM,OAAO,GAAG,2BAA2B,CAAC,OAAO,CAAC;YACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;YAC9C,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC;gBAAE,MAAM,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAY,CAAC,CAAC;YAClC,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAc,CAAC;gBAAE,SAAS;YACrE,IACE,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,cAAc,CAAC,CAAC,QAAQ,CAC3E,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CACnB;gBAED,SAAS;YACX,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;YAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,IAAc,CAAC;YAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAa,CAAC;YACjC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,MAAM,GAAG,GAAG,UAAU,CAAC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACjE,MAAM,QAAQ,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,MAAM;gBAAE,MAAM,CAAC,qBAAqB,EAAE,OAAO,CAAC,CAAC;YACpD,KAAK,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;gBACrD,MAAM,IAAI,GAAG,GAAG,OAAO,aAAa,CAAC,EAAE,CAAC;gBACxC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ;oBACzD,MAAM,CAAC,kBAAkB,EAAE,IAAI,CAAC,CAAC;gBACnC,IAAI,CAAC,uCAAuC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;oBAChE,MAAM,CAAC,iBAAiB,EAAE,GAAG,IAAI,UAAU,CAAC,CAAC;gBAC/C,MAAM,YAAY,GAAG,cAAc,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5F,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;oBACpE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,IACE,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ;oBACtC,CAAC,sEAAsE,CAAC,IAAI,CAC1E,OAAO,CAAC,UAAU,CACnB;oBAED,MAAM,CAAC,qBAAqB,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;gBACtD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;oBAAE,MAAM,CAAC,qBAAqB,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;gBAC5F,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,CAAC;gBACxF,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAC3B,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;oBAElF,MAAM,CAAC,qBAAqB,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;gBACtD,MAAM,IAAI,GAAa;oBACrB,IAAI,EAAE,kBAAkB;oBACxB,YAAY;oBACZ,MAAM,EAAE,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE;oBAC1D,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,OAAO,CAAC,OAAO;oBACxB,YAAY,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;oBAC1C,KAAK,EAAE,gBAAgB;iBACxB,CAAC;gBACF,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACzC,IAAI,QAAQ,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;oBACzD,MAAM,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAC;gBAC3C,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;gBAC9B,IAAI,KAAK,CAAC,IAAI,GAAG,kBAAkB;oBACjC,MAAM,CAAC,2BAA2B,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;YACjC,IACE,GAAG,CAAC,MAAM,KAAK,SAAS;gBACxB,CAAC,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAc,CAAC,CAAC;gBACvD,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAEjB,MAAM,CAAC,kBAAkB,EAAE,yBAAyB,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC;QAC/B,OAAO,CAAC,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,aAAa,CAAC;YAC3B,OAAO,EAAE,CAAC;YACV,aAAa,EAAE,mBAAmB;YAClC,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAC1B,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,kBAAkB;YAC/C,MAAM,CAAC,2BAA2B,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;QAChE,OAAO;YACL,EAAE,EAAE,IAAI;YACR,WAAW,EAAE,EAAE;YACf,OAAO;YACP,QAAQ,EAAE,MAAM,CAAC,IAAI;YACrB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;SAClC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,UAAU,GACd,KAAK,YAAY,OAAO;YACtB,CAAC,CAAC;gBACE,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;aACvD;YACH,CAAC,CAAC,KAAK,YAAY,QAAQ;gBACzB,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE;gBACjD,CAAC,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC;IAC3D,CAAC;AACH,CAAC"}

package/dist/import/private-packagist/map.d.ts

@@ -0,0 +1,48 @@
+export type CredentialKind = 'http_basic' | 'bearer' | 'github_app' | 'ssh_key';
+export interface CredentialRule {
+    readonly match: {
+        package: string;
+    } | {
+        url_prefix: string;
+    } | {
+        packagist_credential: number;
+    } | {
+        host: string;
+    };
+    readonly kind: CredentialKind;
+    readonly ref: string | null;
+}
+export interface TeamMapping {
+    readonly group?: {
+        readonly provider: string;
+        readonly value: string;
+    };
+    readonly members?: 'csv';
+    readonly projects?: readonly string[];
+    readonly role?: 'project_owner' | 'project_developer';
+}
+export interface PackagistMap {
+    readonly version: 1;
+    readonly projects: Readonly<Record<string, {
+        readonly slug?: string;
+        readonly existing?: string;
+    }>>;
+    readonly github: {
+        readonly installations: Readonly<Record<string, number>>;
+    };
+    readonly mirrorOrder: readonly number[];
+    readonly packages: Readonly<Record<string, {
+        readonly url: string;
+    }>>;
+    readonly teams: Readonly<Record<string, TeamMapping>>;
+    readonly credentials: readonly CredentialRule[];
+    readonly distHosts: Readonly<Record<string, readonly string[]>>;
+}
+export declare class MapError extends Error {
+    readonly pointer: string;
+    readonly cap?: string | undefined;
+    constructor(pointer: string, cap?: string | undefined);
+}
+export declare const object: (v: unknown) => v is Record<string, unknown>;
+export declare function parsePackagistMap(input: unknown): PackagistMap;
+//# sourceMappingURL=map.d.ts.map

package/dist/import/private-packagist/map.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"map.d.ts","sourceRoot":"","sources":["../../../src/import/private-packagist/map.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;AAChF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EACV;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GACnB;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,GACtB;QAAE,oBAAoB,EAAE,MAAM,CAAA;KAAE,GAChC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AACD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,mBAAmB,CAAC;CACvD;AACD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CACzB,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CACvE,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;KAAE,CAAC;IAC9E,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACtD,QAAQ,CAAC,WAAW,EAAE,SAAS,cAAc,EAAE,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CACjE;AACD,qBAAa,QAAS,SAAQ,KAAK;IAE/B,QAAQ,CAAC,OAAO,EAAE,MAAM;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM;gBADZ,OAAO,EAAE,MAAM,EACf,GAAG,CAAC,EAAE,MAAM,YAAA;CAIxB;AACD,eAAO,MAAM,MAAM,GAAI,GAAG,OAAO,KAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CACL,CAAC;AAqB3D,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,YAAY,CA6I9D"}