@package-broker/core 0.2.15

package/dist/sync/strategies/composer-repo.js

@@ -0,0 +1,269 @@
+/*
+ * PACKAGE.broker
+ * Copyright (C) 2025 Łukasz Bajsarowicz
+ * Licensed under AGPL-3.0
+ */
+import { buildAuthHeaders, COMPOSER_USER_AGENT } from '@package-broker/shared';
+import pRetry from 'p-retry';
+import { getLogger } from '../../utils/logger';
+/**
+ * Sync from Composer repository (e.g., Satis, Packagist, third-party)
+ * @param url - Repository base URL
+ * @param credentialType - Type of authentication
+ * @param credentials - Authentication credentials
+ * @param packageFilter - Optional comma-separated list of packages to sync (required for provider-includes repos)
+ */
+export async function syncComposerRepository(url, credentialType, credentials, packageFilter) {
+    // Build auth headers based on credential type
+    const authHeaders = buildAuthHeaders(credentialType, credentials);
+    // Normalize URL
+    const baseUrl = url.replace(/\/$/, '');
+    const packagesUrl = `${baseUrl}/packages.json`;
+    try {
+        const response = await pRetry(() => fetch(packagesUrl, {
+            headers: {
+                ...authHeaders,
+                Accept: 'application/json',
+                'User-Agent': COMPOSER_USER_AGENT,
+            },
+        }), { retries: 3 });
+        if (response.status === 401 || response.status === 403) {
+            return { success: false, packages: [], error: 'auth_failed' };
+        }
+        if (response.status === 404) {
+            return { success: false, packages: [], error: 'packages_json_not_found' };
+        }
+        if (!response.ok) {
+            return { success: false, packages: [], error: `http_${response.status}` };
+        }
+        const packagesJson = await response.json();
+        // Check if repository uses provider-includes (lazy loading)
+        if (packagesJson['providers-url'] && packagesJson['provider-includes']) {
+            // Large repository with lazy loading
+            return await syncWithProviderIncludes(baseUrl, packagesJson, authHeaders, packageFilter);
+        }
+        // Direct packages - parse all
+        const packages = parseComposerPackagesJson(packagesJson, baseUrl);
+        return { success: true, packages, strategy: 'composer_repo' };
+    }
+    catch (error) {
+        const logger = getLogger();
+        logger.error('Composer repository sync error', { url }, error instanceof Error ? error : new Error(String(error)));
+        return { success: false, packages: [], error: 'network_error' };
+    }
+}
+/**
+ * Sync packages from a repository using provider-includes (lazy loading)
+ * This is used by large repositories like Magento Marketplace
+ */
+async function syncWithProviderIncludes(baseUrl, packagesJson, authHeaders, packageFilter) {
+    const providersUrl = packagesJson['providers-url'];
+    const providerIncludes = packagesJson['provider-includes'];
+    // Parse package filter
+    const targetPackages = packageFilter
+        ? packageFilter.split(',').map(p => p.trim()).filter(p => p.length > 0)
+        : [];
+    // If no filter provided, we'll sync all packages from provider files
+    const syncAllPackages = targetPackages.length === 0;
+    // Step 1: Fetch all provider files to build package-to-hash mapping
+    const packageHashes = new Map();
+    for (const [providerPath, { sha256 }] of Object.entries(providerIncludes)) {
+        // Replace %hash% placeholder with actual hash
+        const providerUrl = `${baseUrl}/${providerPath.replace('%hash%', sha256)}`;
+        try {
+            const response = await pRetry(() => fetch(providerUrl, {
+                headers: {
+                    ...authHeaders,
+                    Accept: 'application/json',
+                    'User-Agent': COMPOSER_USER_AGENT,
+                },
+            }), { retries: 2 });
+            if (!response.ok) {
+                const logger = getLogger();
+                logger.warn('Failed to fetch provider file', { providerUrl, status: response.status });
+                continue;
+            }
+            const providerData = await response.json();
+            // Extract package hashes - all packages if no filter, or only filtered packages
+            for (const [pkgName, { sha256: pkgHash }] of Object.entries(providerData.providers || {})) {
+                if (syncAllPackages || targetPackages.includes(pkgName)) {
+                    packageHashes.set(pkgName, pkgHash);
+                }
+            }
+        }
+        catch (error) {
+            const logger = getLogger();
+            logger.warn('Error fetching provider file', { providerUrl, error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    // Log sync strategy
+    const logger = getLogger();
+    if (syncAllPackages) {
+        logger.info('Syncing all packages from provider-includes', { packageCount: packageHashes.size });
+    }
+    else {
+        logger.info('Syncing filtered packages via provider-includes', { targetCount: targetPackages.length });
+        // Check if we found all requested packages (only when filtering)
+        const missingPackages = targetPackages.filter(pkg => !packageHashes.has(pkg));
+        if (missingPackages.length > 0) {
+            logger.warn('Some packages not found in provider files', { missingPackages });
+        }
+    }
+    if (packageHashes.size === 0) {
+        return {
+            success: false,
+            packages: [],
+            error: 'no_packages_found',
+        };
+    }
+    // Step 2: Fetch metadata for each package using providers-url
+    const allPackages = [];
+    for (const [packageName, packageHash] of packageHashes) {
+        // Build package URL from providers-url template
+        // Format: /p/%package%$%hash%.json
+        const packageUrl = `${baseUrl}${providersUrl
+            .replace('%package%', packageName)
+            .replace('%hash%', packageHash)}`;
+        try {
+            const response = await pRetry(() => fetch(packageUrl, {
+                headers: {
+                    ...authHeaders,
+                    Accept: 'application/json',
+                    'User-Agent': COMPOSER_USER_AGENT,
+                },
+            }), { retries: 2 });
+            if (!response.ok) {
+                const logger = getLogger();
+                logger.warn('Failed to fetch package metadata', { packageUrl, status: response.status });
+                continue;
+            }
+            const packageData = await response.json();
+            // Parse package versions - handle both array format (Packagist p2) and object format (traditional repos)
+            const packageVersions = packageData.packages?.[packageName] || {};
+            // Normalize versions to handle both array and object formats
+            const versionsArray = Array.isArray(packageVersions)
+                ? packageVersions.map((metadata) => ({ version: metadata.version || String(metadata), metadata }))
+                : Object.entries(packageVersions).map(([key, val]) => ({
+                    version: val?.version || key,
+                    metadata: val,
+                }));
+            for (const { version, metadata } of versionsArray) {
+                // Transform dist URL to absolute URL
+                let distUrl = resolveDistUrl(baseUrl, metadata.dist?.url, packageName, version);
+                allPackages.push({
+                    name: packageName,
+                    version,
+                    time: metadata.time,
+                    description: metadata.description,
+                    license: metadata.license,
+                    type: metadata.type,
+                    homepage: metadata.homepage,
+                    dist: distUrl
+                        ? {
+                            type: metadata.dist?.type || 'zip',
+                            url: distUrl,
+                            reference: metadata.dist?.reference,
+                        }
+                        : undefined,
+                    require: metadata.require,
+                    'require-dev': metadata['require-dev'],
+                });
+            }
+            const logger = getLogger();
+            logger.info('Fetched package versions', { packageName, versionCount: Object.keys(packageVersions).length });
+        }
+        catch (error) {
+            const logger = getLogger();
+            logger.warn('Error fetching package', { packageName, error: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    if (allPackages.length === 0) {
+        return {
+            success: false,
+            packages: [],
+            error: 'no_package_versions_found',
+        };
+    }
+    return {
+        success: true,
+        packages: allPackages,
+        strategy: 'composer_repo_providers',
+    };
+}
+/**
+ * Resolve dist URL to an absolute URL
+ * Handles: absolute URLs, protocol-relative URLs, relative paths, and constructs fallback archive URLs
+ */
+function resolveDistUrl(baseUrl, rawUrl, packageName, version) {
+    // If we have a valid absolute URL, use it
+    if (rawUrl && (rawUrl.startsWith('http://') || rawUrl.startsWith('https://'))) {
+        return rawUrl;
+    }
+    // Handle protocol-relative URLs (//example.com/path)
+    if (rawUrl && rawUrl.startsWith('//')) {
+        return `https:${rawUrl}`;
+    }
+    // Handle relative URLs starting with /
+    if (rawUrl && rawUrl.startsWith('/')) {
+        // Remove trailing slash from baseUrl to avoid double slashes
+        return `${baseUrl}${rawUrl}`;
+    }
+    // Handle other relative URLs
+    if (rawUrl && rawUrl.length > 0) {
+        return `${baseUrl}/${rawUrl}`;
+    }
+    // No dist URL provided - try to construct archive URL for Magento Marketplace format
+    // Format: /archives/vendor/package/vendor-package-version.zip
+    if (baseUrl.includes('repo.magento.com')) {
+        const [vendor, pkg] = packageName.split('/');
+        if (vendor && pkg) {
+            // Magento archive format: /archives/vendor/package/vendor-package-version.zip
+            // Version format may need adjustment (remove 'v' prefix if present, handle dev versions)
+            const cleanVersion = version.replace(/^v/, '');
+            return `${baseUrl}/archives/${vendor}/${pkg}/${vendor}-${pkg}-${cleanVersion}.zip`;
+        }
+    }
+    // No URL could be constructed
+    const logger = getLogger();
+    logger.warn('No dist URL available', { packageName, version, baseUrl });
+    return undefined;
+}
+/**
+ * Parse Composer packages.json and transform dist URLs if needed
+ */
+function parseComposerPackagesJson(data, baseUrl) {
+    const packages = [];
+    for (const [packageName, versions] of Object.entries(data.packages || {})) {
+        // Normalize versions to handle both array format (Packagist p2) and object format (traditional repos)
+        const versionsArray = Array.isArray(versions)
+            ? versions.map((metadata) => ({ version: metadata.version || String(metadata), metadata }))
+            : Object.entries(versions).map(([key, val]) => ({
+                version: val?.version || key,
+                metadata: val,
+            }));
+        for (const { version, metadata } of versionsArray) {
+            // Transform dist URL to absolute URL
+            const distUrl = resolveDistUrl(baseUrl, metadata.dist?.url, packageName, version);
+            packages.push({
+                name: packageName,
+                version,
+                time: metadata.time,
+                description: metadata.description,
+                license: metadata.license,
+                type: metadata.type,
+                homepage: metadata.homepage,
+                dist: distUrl
+                    ? {
+                        type: metadata.dist?.type || 'zip',
+                        url: distUrl,
+                        reference: metadata.dist?.reference,
+                    }
+                    : undefined,
+                require: metadata.require,
+                'require-dev': metadata['require-dev'],
+            });
+        }
+    }
+    return packages;
+}
+//# sourceMappingURL=composer-repo.js.map

package/dist/sync/strategies/composer-repo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composer-repo.js","sourceRoot":"","sources":["../../../src/sync/strategies/composer-repo.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,gBAAgB,EAAuB,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACpG,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAW,EACX,cAA8B,EAC9B,WAAmC,EACnC,aAAsB;IAEtB,8CAA8C;IAC9C,MAAM,WAAW,GAAG,gBAAgB,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAElE,gBAAgB;IAChB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,GAAG,OAAO,gBAAgB,CAAC;IAE/C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,GAAG,EAAE,CACH,KAAK,CAAC,WAAW,EAAE;YACjB,OAAO,EAAE;gBACP,GAAG,WAAW;gBACd,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,mBAAmB;aAClC;SACF,CAAC,EACJ,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;QAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QAC5E,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5E,CAAC;QAED,MAAM,YAAY,GAAyB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAEjE,4DAA4D;QAC5D,IAAI,YAAY,CAAC,eAAe,CAAC,IAAI,YAAY,CAAC,mBAAmB,CAAC,EAAE,CAAC;YACvE,qCAAqC;YACrC,OAAO,MAAM,wBAAwB,CACnC,OAAO,EACP,YAAY,EACZ,WAAW,EACX,aAAa,CACd,CAAC;QACJ,CAAC;QAED,8BAA8B;QAC9B,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAElE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACnH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,wBAAwB,CACrC,OAAe,EACf,YAAkC,EAClC,WAAwB,EACxB,aAAsB;IAEtB,MAAM,YAAY,GAAG,YAAY,CAAC,eAAe,CAAE,CAAC;IACpD,MAAM,gBAAgB,GAAG,YAAY,CAAC,mBAAmB,CAAE,CAAC;IAE5D,uBAAuB;IACvB,MAAM,cAAc,GAAG,aAAa;QAClC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QACvE,CAAC,CAAC,EAAE,CAAC;IAEP,qEAAqE;IACrE,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC;IAEpD,oEAAoE;IACpE,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEhD,KAAK,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1E,8CAA8C;QAC9C,MAAM,WAAW,GAAG,GAAG,OAAO,IAAI,YAAY,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;QAE3E,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,GAAG,EAAE,CACH,KAAK,CAAC,WAAW,EAAE;gBACjB,OAAO,EAAE;oBACP,GAAG,WAAW;oBACd,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,mBAAmB;iBAClC;aACF,CAAC,EACJ,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;YAED,MAAM,YAAY,GAAiB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEzD,gFAAgF;YAChF,KAAK,MAAM,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC1F,IAAI,eAAe,IAAI,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;oBACxD,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IAED,oBAAoB;IACpB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,EAAE,YAAY,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,iDAAiD,EAAE,EAAE,WAAW,EAAE,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;QACvG,iEAAiE;QACjE,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,EAAE,eAAe,EAAE,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IAED,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,mBAAmB;SAC3B,CAAC;IACJ,CAAC;IAED,8DAA8D;IAC9D,MAAM,WAAW,GAAsB,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,IAAI,aAAa,EAAE,CAAC;QACvD,gDAAgD;QAChD,mCAAmC;QACnC,MAAM,UAAU,GAAG,GAAG,OAAO,GAAG,YAAY;aACzC,OAAO,CAAC,WAAW,EAAE,WAAW,CAAC;aACjC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,GAAG,EAAE,CACH,KAAK,CAAC,UAAU,EAAE;gBAChB,OAAO,EAAE;oBACP,GAAG,WAAW;oBACd,MAAM,EAAE,kBAAkB;oBAC1B,YAAY,EAAE,mBAAmB;iBAClC;aACF,CAAC,EACJ,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;YAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACzF,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAA4B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnE,yGAAyG;YACzG,MAAM,eAAe,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;YAElE,6DAA6D;YAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC;gBAClD,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAClG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBACnD,OAAO,EAAG,GAAW,EAAE,OAAO,IAAI,GAAG;oBACrC,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC,CAAC;YAER,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC;gBAClD,qCAAqC;gBACrC,IAAI,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;gBAEhF,WAAW,CAAC,IAAI,CAAC;oBACf,IAAI,EAAE,WAAW;oBACjB,OAAO;oBACP,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;oBACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;oBAC3B,IAAI,EAAE,OAAO;wBACX,CAAC,CAAC;4BACE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK;4BAClC,GAAG,EAAE,OAAO;4BACZ,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS;yBACpC;wBACH,CAAC,CAAC,SAAS;oBACb,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9G,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxH,CAAC;IACH,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,2BAA2B;SACnC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,WAAW;QACrB,QAAQ,EAAE,yBAAyB;KACpC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CACrB,OAAe,EACf,MAA0B,EAC1B,WAAmB,EACnB,OAAe;IAEf,0CAA0C;IAC1C,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,qDAAqD;IACrD,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,OAAO,SAAS,MAAM,EAAE,CAAC;IAC3B,CAAC;IAED,uCAAuC;IACvC,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,6DAA6D;QAC7D,OAAO,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;IAC/B,CAAC;IAED,6BAA6B;IAC7B,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChC,OAAO,GAAG,OAAO,IAAI,MAAM,EAAE,CAAC;IAChC,CAAC;IAED,qFAAqF;IACrF,8DAA8D;IAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,8EAA8E;YAC9E,yFAAyF;YACzF,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC/C,OAAO,GAAG,OAAO,aAAa,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG,IAAI,YAAY,MAAM,CAAC;QACrF,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IACxE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAChC,IAA0B,EAC1B,OAAe;IAEf,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,sGAAsG;QACtG,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3C,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3F,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC5C,OAAO,EAAG,GAAW,EAAE,OAAO,IAAI,GAAG;gBACrC,QAAQ,EAAE,GAAG;aACd,CAAC,CAAC,CAAC;QAER,KAAK,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,aAAa,EAAE,CAAC;YAClD,qCAAqC;YACrC,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;YAElF,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,OAAO;oBACX,CAAC,CAAC;wBACE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK;wBAClC,GAAG,EAAE,OAAO;wBACZ,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS;qBACpC;oBACH,CAAC,CAAC,SAAS;gBACb,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/sync/strategies/github-api.d.ts

@@ -0,0 +1,6 @@
+import type { SyncResult } from '../types';
+/**
+ * Sync via GitHub Repository API (fallback when Packages Registry unavailable)
+ */
+export declare function syncViaGitHubApi(owner: string, repo: string, token: string, branch?: string, composerJsonPath?: string): Promise<SyncResult>;
+//# sourceMappingURL=github-api.d.ts.map

package/dist/sync/strategies/github-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-api.d.ts","sourceRoot":"","sources":["../../../src/sync/strategies/github-api.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAuD,MAAM,UAAU,CAAC;AAMhG;;GAEG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,MAAM,GAAE,MAAe,EACvB,gBAAgB,GAAE,MAA2B,GAC5C,OAAO,CAAC,UAAU,CAAC,CAsHrB"}

package/dist/sync/strategies/github-api.js

@@ -0,0 +1,137 @@
+/*
+ * PACKAGE.broker
+ * Copyright (C) 2025 Łukasz Bajsarowicz
+ * Licensed under AGPL-3.0
+ */
+import micromatch from 'micromatch';
+import semver from 'semver';
+import pRetry from 'p-retry';
+import { getLogger } from '../../utils/logger';
+/**
+ * Sync via GitHub Repository API (fallback when Packages Registry unavailable)
+ */
+export async function syncViaGitHubApi(owner, repo, token, branch = 'main', composerJsonPath = '**/composer.json') {
+    const headers = {
+        Authorization: `Bearer ${token}`,
+        Accept: 'application/vnd.github+json',
+        'User-Agent': 'CloudflareComposerProxy/1.0',
+        'X-GitHub-Api-Version': '2022-11-28',
+    };
+    try {
+        // Step 1: Get repository tree
+        const treeResponse = await pRetry(() => fetch(`https://api.github.com/repos/${owner}/${repo}/git/trees/${branch}?recursive=1`, { headers }), { retries: 3 });
+        if (treeResponse.status === 401 || treeResponse.status === 403) {
+            return { success: false, packages: [], error: 'auth_failed' };
+        }
+        if (treeResponse.status === 404) {
+            return { success: false, packages: [], error: 'repo_not_found' };
+        }
+        if (!treeResponse.ok) {
+            return { success: false, packages: [], error: `tree_fetch_failed_${treeResponse.status}` };
+        }
+        const treeData = await treeResponse.json();
+        // Handle truncated repos (>100k files)
+        if (treeData.truncated) {
+            const logger = getLogger();
+            logger.warn('Repository has >100k files, tree truncated', { owner, repo });
+            // Could implement directory-by-directory traversal here
+        }
+        // Step 2: Find composer.json files using glob pattern
+        const composerFiles = findComposerJsonFiles(treeData.tree, composerJsonPath);
+        if (composerFiles.length === 0) {
+            return { success: false, packages: [], error: 'no_composer_json_found' };
+        }
+        // Step 3: Fetch each composer.json
+        const packages = [];
+        for (const file of composerFiles) {
+            const contentResponse = await pRetry(() => fetch(`https://api.github.com/repos/${owner}/${repo}/contents/${file.path}?ref=${branch}`, {
+                headers: {
+                    ...headers,
+                    Accept: 'application/vnd.github.raw+json',
+                },
+            }), { retries: 2 });
+            if (!contentResponse.ok)
+                continue;
+            const composerJson = await contentResponse.json();
+            // Step 4: Parse package info
+            if (composerJson.name) {
+                packages.push({
+                    name: composerJson.name,
+                    version: composerJson.version || `dev-${branch}`,
+                    require: composerJson.require,
+                    'require-dev': composerJson['require-dev'],
+                    description: composerJson.description,
+                    dist: {
+                        type: 'zip',
+                        url: `https://api.github.com/repos/${owner}/${repo}/zipball/${branch}`,
+                        reference: treeData.sha,
+                    },
+                });
+            }
+        }
+        // Step 5: Get versions from tags
+        const versions = await getVersionsFromTags(owner, repo, token);
+        // Add versioned packages from tags
+        for (const [version, sha] of versions) {
+            for (const pkg of packages) {
+                if (semver.valid(version)) {
+                    packages.push({
+                        ...pkg,
+                        version,
+                        dist: {
+                            type: 'zip',
+                            url: `https://api.github.com/repos/${owner}/${repo}/zipball/${version}`,
+                            reference: sha,
+                        },
+                    });
+                }
+            }
+        }
+        return { success: true, packages, strategy: 'github_api' };
+    }
+    catch (error) {
+        const logger = getLogger();
+        logger.error('GitHub API sync error', { owner, repo }, error instanceof Error ? error : new Error(String(error)));
+        return { success: false, packages: [], error: 'network_error' };
+    }
+}
+/**
+ * Find composer.json files using glob pattern matching
+ */
+function findComposerJsonFiles(tree, globPattern) {
+    const blobPaths = tree.filter((item) => item.type === 'blob').map((item) => item.path);
+    const matchedPaths = micromatch(blobPaths, globPattern);
+    return tree.filter((item) => matchedPaths.includes(item.path));
+}
+/**
+ * Get versions from repository tags
+ */
+async function getVersionsFromTags(owner, repo, token) {
+    const headers = {
+        Authorization: `Bearer ${token}`,
+        Accept: 'application/vnd.github+json',
+        'User-Agent': 'CloudflareComposerProxy/1.0',
+    };
+    try {
+        const response = await pRetry(() => fetch(`https://api.github.com/repos/${owner}/${repo}/tags`, { headers }), { retries: 2 });
+        if (!response.ok) {
+            return new Map();
+        }
+        const tags = await response.json();
+        const versions = new Map();
+        for (const tag of tags) {
+            // Parse tag name as semver (e.g., "v1.2.3" → "1.2.3")
+            const version = semver.clean(tag.name) || tag.name;
+            if (semver.valid(version)) {
+                versions.set(version, tag.commit.sha);
+            }
+        }
+        return versions;
+    }
+    catch (error) {
+        const logger = getLogger();
+        logger.error('Error fetching tags', { owner, repo }, error instanceof Error ? error : new Error(String(error)));
+        return new Map();
+    }
+}
+//# sourceMappingURL=github-api.js.map

package/dist/sync/strategies/github-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-api.js","sourceRoot":"","sources":["../../../src/sync/strategies/github-api.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,UAAU,MAAM,YAAY,CAAC;AACpC,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,IAAY,EACZ,KAAa,EACb,SAAiB,MAAM,EACvB,mBAA2B,kBAAkB;IAE7C,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,MAAM,EAAE,6BAA6B;QACrC,YAAY,EAAE,6BAA6B;QAC3C,sBAAsB,EAAE,YAAY;KACrC,CAAC;IAEF,IAAI,CAAC;QACH,8BAA8B;QAC9B,MAAM,YAAY,GAAG,MAAM,MAAM,CAC/B,GAAG,EAAE,CACH,KAAK,CACH,gCAAgC,KAAK,IAAI,IAAI,cAAc,MAAM,cAAc,EAC/E,EAAE,OAAO,EAAE,CACZ,EACH,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,YAAY,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAChC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,qBAAqB,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;QAC7F,CAAC;QAED,MAAM,QAAQ,GAAuB,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAE/D,uCAAuC;QACvC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,wDAAwD;QAC1D,CAAC;QAED,sDAAsD;QACtD,MAAM,aAAa,GAAG,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QAE7E,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC;QAC3E,CAAC;QAED,mCAAmC;QACnC,MAAM,QAAQ,GAAsB,EAAE,CAAC;QAEvC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,MAAM,MAAM,CAClC,GAAG,EAAE,CACH,KAAK,CACH,gCAAgC,KAAK,IAAI,IAAI,aAAa,IAAI,CAAC,IAAI,QAAQ,MAAM,EAAE,EACnF;gBACE,OAAO,EAAE;oBACP,GAAG,OAAO;oBACV,MAAM,EAAE,iCAAiC;iBAC1C;aACF,CACF,EACH,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;YAEF,IAAI,CAAC,eAAe,CAAC,EAAE;gBAAE,SAAS;YAElC,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,IAAI,EAM9C,CAAC;YAEF,6BAA6B;YAC7B,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;gBACtB,QAAQ,CAAC,IAAI,CAAC;oBACZ,IAAI,EAAE,YAAY,CAAC,IAAI;oBACvB,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,OAAO,MAAM,EAAE;oBAChD,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,aAAa,EAAE,YAAY,CAAC,aAAa,CAAC;oBAC1C,WAAW,EAAE,YAAY,CAAC,WAAW;oBACrC,IAAI,EAAE;wBACJ,IAAI,EAAE,KAAK;wBACX,GAAG,EAAE,gCAAgC,KAAK,IAAI,IAAI,YAAY,MAAM,EAAE;wBACtE,SAAS,EAAE,QAAQ,CAAC,GAAG;qBACxB;iBACF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,iCAAiC;QACjC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAE/D,mCAAmC;QACnC,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC1B,QAAQ,CAAC,IAAI,CAAC;wBACZ,GAAG,GAAG;wBACN,OAAO;wBACP,IAAI,EAAE;4BACJ,IAAI,EAAE,KAAK;4BACX,GAAG,EAAE,gCAAgC,KAAK,IAAI,IAAI,YAAY,OAAO,EAAE;4BACvE,SAAS,EAAE,GAAG;yBACf;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAClH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,IAAsB,EAAE,WAAmB;IACxE,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEvF,MAAM,YAAY,GAAG,UAAU,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAExD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,KAAa,EACb,IAAY,EACZ,KAAa;IAEb,MAAM,OAAO,GAAG;QACd,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,MAAM,EAAE,6BAA6B;QACrC,YAAY,EAAE,6BAA6B;KAC5C,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,GAAG,EAAE,CAAC,KAAK,CAAC,gCAAgC,KAAK,IAAI,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,EAC9E,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,IAAI,GAAG,EAAE,CAAC;QACnB,CAAC;QAED,MAAM,IAAI,GAAqD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACrF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;QAE3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,sDAAsD;YACtD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC;YACnD,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC1B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChH,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/sync/strategies/github-packages.d.ts

@@ -0,0 +1,7 @@
+import type { SyncResult } from '../types';
+/**
+ * Sync via GitHub Packages Composer Registry (preferred strategy)
+ * Single API call returns native Composer packages.json format
+ */
+export declare function syncViaGitHubPackages(owner: string, token: string, targetPackages?: string[]): Promise<SyncResult>;
+//# sourceMappingURL=github-packages.d.ts.map

package/dist/sync/strategies/github-packages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-packages.d.ts","sourceRoot":"","sources":["../../../src/sync/strategies/github-packages.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAyC,MAAM,UAAU,CAAC;AAKlF;;;GAGG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,EAAE,GACxB,OAAO,CAAC,UAAU,CAAC,CAsCrB"}

package/dist/sync/strategies/github-packages.js

@@ -0,0 +1,66 @@
+/*
+ * PACKAGE.broker
+ * Copyright (C) 2025 Łukasz Bajsarowicz
+ * Licensed under AGPL-3.0
+ */
+import { COMPOSER_USER_AGENT } from '@package-broker/shared';
+import pRetry from 'p-retry';
+import { getLogger } from '../../utils/logger';
+/**
+ * Sync via GitHub Packages Composer Registry (preferred strategy)
+ * Single API call returns native Composer packages.json format
+ */
+export async function syncViaGitHubPackages(owner, token, targetPackages) {
+    const url = `https://composer.pkg.github.com/${owner}/packages.json`;
+    try {
+        const response = await pRetry(() => fetch(url, {
+            headers: {
+                Authorization: `Bearer ${token}`,
+                Accept: 'application/json',
+                'User-Agent': COMPOSER_USER_AGENT,
+            },
+        }), { retries: 3 });
+        // GitHub Packages returns 404 if owner has no packages
+        if (response.status === 404) {
+            return { success: false, packages: [], error: 'no_packages_registry' };
+        }
+        if (response.status === 401 || response.status === 403) {
+            return { success: false, packages: [], error: 'auth_failed' };
+        }
+        if (!response.ok) {
+            return { success: false, packages: [], error: `http_${response.status}` };
+        }
+        const packagesJson = await response.json();
+        const packages = parseComposerPackagesJson(packagesJson, targetPackages);
+        return { success: true, packages, strategy: 'github_packages' };
+    }
+    catch (error) {
+        const logger = getLogger();
+        logger.error('GitHub Packages sync error', { owner, url }, error instanceof Error ? error : new Error(String(error)));
+        return { success: false, packages: [], error: 'network_error' };
+    }
+}
+/**
+ * Parse Composer packages.json structure
+ */
+function parseComposerPackagesJson(data, filter) {
+    const packages = [];
+    for (const [packageName, versions] of Object.entries(data.packages || {})) {
+        // Apply filter if specified
+        if (filter && !filter.includes(packageName)) {
+            continue;
+        }
+        for (const [version, metadata] of Object.entries(versions)) {
+            packages.push({
+                name: packageName,
+                version,
+                dist: metadata.dist,
+                require: metadata.require,
+                'require-dev': metadata['require-dev'],
+                description: metadata.description,
+            });
+        }
+    }
+    return packages;
+}
+//# sourceMappingURL=github-packages.js.map

package/dist/sync/strategies/github-packages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github-packages.js","sourceRoot":"","sources":["../../../src/sync/strategies/github-packages.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAa,EACb,KAAa,EACb,cAAyB;IAEzB,MAAM,GAAG,GAAG,mCAAmC,KAAK,gBAAgB,CAAC;IAErE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAC3B,GAAG,EAAE,CACH,KAAK,CAAC,GAAG,EAAE;YACT,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,KAAK,EAAE;gBAChC,MAAM,EAAE,kBAAkB;gBAC1B,YAAY,EAAE,mBAAmB;aAClC;SACF,CAAC,EACJ,EAAE,OAAO,EAAE,CAAC,EAAE,CACf,CAAC;QAEF,uDAAuD;QACvD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC;QACzE,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC;QAChE,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5E,CAAC;QAED,MAAM,YAAY,GAAyB,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjE,MAAM,QAAQ,GAAG,yBAAyB,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC;QAEzE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACtH,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAClE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,yBAAyB,CAChC,IAA0B,EAC1B,MAAiB;IAEjB,MAAM,QAAQ,GAAsB,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1E,4BAA4B;QAC5B,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5C,SAAS;QACX,CAAC;QAED,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC;gBACtC,WAAW,EAAE,QAAQ,CAAC,WAAW;aAClC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/sync/strategies/index.d.ts

@@ -0,0 +1,4 @@
+export * from './github-packages';
+export * from './github-api';
+export * from './composer-repo';
+//# sourceMappingURL=index.d.ts.map

package/dist/sync/strategies/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/sync/strategies/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/sync/strategies/index.js

@@ -0,0 +1,5 @@
+// Sync strategies exports
+export * from './github-packages';
+export * from './github-api';
+export * from './composer-repo';
+//# sourceMappingURL=index.js.map

package/dist/sync/strategies/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/sync/strategies/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/sync/types.d.ts

@@ -0,0 +1,60 @@
+export interface ComposerPackage {
+    name: string;
+    version: string;
+    time?: string;
+    description?: string;
+    license?: string | string[];
+    type?: string;
+    homepage?: string;
+    dist?: {
+        type: string;
+        url: string;
+        reference?: string;
+    };
+    require?: Record<string, string>;
+    'require-dev'?: Record<string, string>;
+    autoload?: object;
+    readme?: string;
+}
+export interface SyncResult {
+    success: boolean;
+    packages: ComposerPackage[];
+    strategy?: string;
+    error?: string;
+}
+export interface GitHubTreeItem {
+    path: string;
+    type: 'blob' | 'tree';
+    sha: string;
+}
+export interface GitHubTreeResponse {
+    sha: string;
+    tree: GitHubTreeItem[];
+    truncated: boolean;
+}
+export interface ComposerPackagesJson {
+    packages: Record<string, Record<string, ComposerPackage>>;
+    'providers-url'?: string;
+    'provider-includes'?: Record<string, {
+        sha256: string;
+    }>;
+    'providers-lazy-url'?: string;
+    'metadata-url'?: string;
+}
+/**
+ * Provider file structure (from provider-includes)
+ * Contains package names and their SHA256 hashes for lazy loading
+ */
+export interface ProviderFile {
+    providers: Record<string, {
+        sha256: string;
+    }>;
+}
+/**
+ * Package metadata fetched via providers-url
+ * Same structure as packages.json but for a single package
+ */
+export interface ProviderPackageResponse {
+    packages: Record<string, Record<string, ComposerPackage>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/sync/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/sync/types.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACtB,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,cAAc,EAAE,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;IAC1D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC/C;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC;CAC3D"}

package/dist/sync/types.js

@@ -0,0 +1,3 @@
+// Sync types
+export {};
+//# sourceMappingURL=types.js.map

package/dist/sync/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/sync/types.ts"],"names":[],"mappings":"AAAA,aAAa"}