@packall/core 0.3.3 → 0.4.0

package/dist/bundle.d.ts

@@ -38,7 +38,7 @@ export type BundleArtifact = {
     readonly path: string;
     readonly bytes: number;
     readonly packageCount: number;
-    /** Which spec this artifact covers. Absent for `single` and `dir`. */
+    /** Which spec this artifact covers. Only `per-spec` sets it. */
     readonly spec?: string | undefined;
     readonly version?: string | undefined;
 };
@@ -76,11 +76,12 @@ export type PlanSummary = {
 /**
  * The files a run will write, known before anything is downloaded.
  *
- * `dir` layout is the odd one: it merges a package tree into `outDir`, and
- * package paths are `name/-/name-version.tgz` — the same package at the same
- * version is the same bytes, so an overlap there is idempotent rather than
- * destructive. Only the two summary files are genuinely replaced, and those are
- * the ones worth guarding.
+ * `dir` and `flat` are the odd ones: they merge a package tree into `outDir`
+ * rather than writing an archive. Either way a package's path is derived from
+ * its name and version, so the same package at the same version is the same
+ * bytes at the same path — an overlap is idempotent rather than destructive.
+ * Only the two summary files are genuinely replaced, and those are the ones
+ * worth guarding.
  */
 export type PlannedOutput = {
     readonly file: string;

package/dist/bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAUhD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EAAc,UAAU,EAAmC,MAAM,cAAc,CAAC;AAE5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,iDAAiD;AACjD,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,mCAAmC;AACnC,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,gDAAgD;IAChD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG;IAC3C,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACzB,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,aAAa,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,KAAK,SAAS,GACX,QAAQ,GACR,QAAQ,CAAC,QAAQ,GACjB,UAAU,CAAC,UAAU,GACrB,IAAI,CAAC,IAAI,GACT,MAAM,CAAC,MAAM,GACb,QAAQ,CAAC;AAmDZ,kDAAkD;AAClD,eAAO,MAAM,SAAS,eAAgB,UAAU,KAAG,WAYlD,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,aAAa,WAAW,CAAC,UAAU,MAAM,KAAG,CAG/E,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,UACT,aAAa,CAAC,WAAW,CAAC,WACxB,aAAa,KACpB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAIpE,CAAC;AAEJ;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,aACZ,UAAU,WACX,aAAa,GAAG,oBAAoB,KAC3C,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAIpE,CAAC;AAWJ;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,UACX,aAAa,CAAC,WAAW,CAAC,WACxB,aAAa,KACpB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,EAAE,SAAS,CAInE,CAAC;AAEJ,sCAAsC;AACtC,eAAO,MAAM,YAAY,aACd,UAAU,WACX,aAAa,GAAG,oBAAoB,KAC3C,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,EAAE,SAAS,CAInE,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,eACd,UAAU,WACb,aAAa,KACpB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,EAAE,SAAS,CAYnE,CAAC;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,cAAc,eACd,UAAU,WACb,aAAa,KACpB,aAAa,CAAC,aAAa,CAU7B,CAAC"}
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,KAAK,MAAM,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,UAAU,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAE3C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAWhD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,QAAQ,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzC,OAAO,KAAK,EAAc,UAAU,EAAmC,MAAM,cAAc,CAAC;AAE5F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAG7C,iDAAiD;AACjD,MAAM,MAAM,cAAc,GAAG;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,mCAAmC;AACnC,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAClD,gDAAgD;IAChD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,gEAAgE;AAChE,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG;IAC3C,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACzB,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,sDAAsD;IACtD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC,CAAC;AAEF,KAAK,SAAS,GACX,QAAQ,GACR,QAAQ,CAAC,QAAQ,GACjB,UAAU,CAAC,UAAU,GACrB,IAAI,CAAC,IAAI,GACT,MAAM,CAAC,MAAM,GACb,QAAQ,CAAC;AAmDZ,kDAAkD;AAClD,eAAO,MAAM,SAAS,eAAgB,UAAU,KAAG,WAYlD,CAAC;AAEF,+CAA+C;AAC/C,eAAO,MAAM,UAAU,GAAI,CAAC,SAAS,aAAa,WAAW,CAAC,UAAU,MAAM,KAAG,CAG/E,CAAC;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,IAAI,UACT,aAAa,CAAC,WAAW,CAAC,WACxB,aAAa,KACpB,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAIpE,CAAC;AAEJ;;;;;;;;GAQG;AACH,eAAO,MAAM,UAAU,aACZ,UAAU,WACX,aAAa,GAAG,oBAAoB,KAC3C,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAIpE,CAAC;AAWJ;;;;;;GAMG;AACH,eAAO,MAAM,MAAM,UACX,aAAa,CAAC,WAAW,CAAC,WACxB,aAAa,KACpB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,EAAE,SAAS,CAInE,CAAC;AAEJ,sCAAsC;AACtC,eAAO,MAAM,YAAY,aACd,UAAU,WACX,aAAa,GAAG,oBAAoB,KAC3C,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,EAAE,SAAS,CAInE,CAAC;AAEJ;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,eACd,UAAU,WACb,aAAa,KACpB,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,YAAY,GAAG,aAAa,EAAE,SAAS,CAYnE,CAAC;AAEJ;;;;;GAKG;AACH,eAAO,MAAM,cAAc,eACd,UAAU,WACb,aAAa,KACpB,aAAa,CAAC,aAAa,CAY7B,CAAC"}

package/dist/enums/artifact-kind.d.ts

@@ -3,6 +3,12 @@ import type { ValueOf } from "../types/value-of.js";
 export declare const ArtifactKind: {
     readonly Archive: "archive";
     readonly Directory: "directory";
+    /**
+     * A loose file that is not an archive — the manifest and the import guide,
+     * which `dir` and `flat` write beside the tarballs rather than sealing
+     * inside one.
+     */
+    readonly File: "file";
 };
 export type ArtifactKind = ValueOf<typeof ArtifactKind>;
 //# sourceMappingURL=artifact-kind.d.ts.map

package/dist/enums/artifact-kind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-kind.d.ts","sourceRoot":"","sources":["../../src/enums/artifact-kind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,uDAAuD;AACvD,eAAO,MAAM,YAAY;aACxB,OAAO,EAAE,SAAS;aAClB,SAAS,EAAE,WAAW;CACb,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,YAAY,CAAC,CAAC"}
+{"version":3,"file":"artifact-kind.d.ts","sourceRoot":"","sources":["../../src/enums/artifact-kind.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,uDAAuD;AACvD,eAAO,MAAM,YAAY;aACxB,OAAO,EAAE,SAAS;aAClB,SAAS,EAAE,WAAW;IACtB;;;;OAIG;aACH,IAAI,EAAE,MAAM;CACH,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,YAAY,CAAC,CAAC"}

package/dist/enums/layout.d.ts

@@ -17,6 +17,12 @@ export declare const Layout: {
      * `jf rt upload` or rsync.
      */
     readonly Dir: "dir";
+    /**
+     * Every tarball side by side in one directory — no archive, and no
+     * `name/-/` nesting. For tooling that globs `*.tgz` out of one directory
+     * rather than walking a registry tree.
+     */
+    readonly Flat: "flat";
 };
 export type Layout = ValueOf<typeof Layout>;
 export declare const Layouts: ReadonlyArray<Layout>;

package/dist/enums/layout.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../src/enums/layout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,+CAA+C;AAC/C,eAAO,MAAM,MAAM;IAClB;;;;OAIG;aACH,OAAO,EAAE,UAAU;IACnB;;;OAGG;aACH,MAAM,EAAE,QAAQ;IAChB;;;OAGG;aACH,GAAG,EAAE,KAAK;CACD,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,OAAO,EAAE,aAAa,CAAC,MAAM,CAAyB,CAAC"}
+{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../src/enums/layout.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,+CAA+C;AAC/C,eAAO,MAAM,MAAM;IAClB;;;;OAIG;aACH,OAAO,EAAE,UAAU;IACnB;;;OAGG;aACH,MAAM,EAAE,QAAQ;IAChB;;;OAGG;aACH,GAAG,EAAE,KAAK;IACV;;;;OAIG;aACH,IAAI,EAAE,MAAM;CACH,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,MAAM,CAAC,CAAC;AAE5C,eAAO,MAAM,OAAO,EAAE,aAAa,CAAC,MAAM,CAAyB,CAAC"}

package/dist/index.js

@@ -15,7 +15,8 @@ import * as Path from "effect/Path";
 /** What a bundle run wrote to the output directory. */
 const ArtifactKind = {
 	Archive: "archive",
-	Directory: "directory"
+	Directory: "directory",
+	File: "file"
 };
 
 //#endregion
@@ -56,7 +57,8 @@ const InputFileKind = {
 const Layout = {
 	PerSpec: "per-spec",
 	Single: "single",
-	Dir: "dir"
+	Dir: "dir",
+	Flat: "flat"
 };
 const Layouts = Object.values(Layout);
 
@@ -660,22 +662,6 @@ const strengthByAlgorithm = {
 
 //#endregion
 //#region src/layout.ts
-/**
-* The on-disk shape of a bundle.
-*
-* Everything is laid out exactly the way a registry serves it:
-*
-*     lodash/-/lodash-4.17.21.tgz
-*     @babel/core/-/core-7.24.0.tgz
-*
-* That is not an Artifactory convention — it is the path structure in every
-* `dist.tarball` URL npm publishes. See `notes/requirements.md` § FR-12 for
-* what that buys.
-*
-* The one shape worth noticing before editing anything here: a scoped
-* package's file name drops the scope, so `@babel/core` becomes
-* `core-7.24.0.tgz` under an `@babel/core/-/` directory.
-*/
 /** Splits `@scope/name` into its parts. `scope` is undefined when unscoped. */
 const splitName = (name) => {
 	if (!name.startsWith("@")) return {
@@ -708,7 +694,7 @@ const MANIFEST_FILE = "bundle-manifest.json";
 /** File name of the short import guide that ships inside every bundle. */
 const README_FILE = "IMPORT.md";
 /**
-* Name of the archive produced for one root spec in `per-spec` layout.
+* A flat, collision-free file name for one `name@version`.
 *
 * It is the spec, with the one character a file name cannot hold taken out:
 * `@types/react@19.2.18` becomes `@types-react@19.2.18.tgz`. So the name of the
@@ -738,18 +724,41 @@ const README_FILE = "IMPORT.md";
 * has to cross-reference against a manifest.
 *
 * It does not make every collision impossible — `@a/b-c` and `@a-b/c` still
-* meet — so `assertDistinctOutputs` still runs. That pair is pathological; the
-* scoped-against-unscoped one is `@babel/core` beside `babel-core`, which is a
-* real migration somebody could be bundling.
+* meet — so the run still checks before downloading anything. That pair is
+* pathological; the scoped-against-unscoped one is `@babel/core` beside
+* `babel-core`, which is a real migration somebody could be bundling.
 *
 * The leading `@` is safe here in a way it is not inside the archive: tar's
 * splice convention applies to the *file list* it is given, which is what
-* `archive.ts` guards with `./`. This is the output path, not an entry.
+* `archive.ts` guards with `./`. These are output paths, not entries.
 */
-const perSpecArchiveName = (name, version) => {
+const flatName = (name, version) => {
 	const { scope, bare } = splitName(name);
 	return `${scope === void 0 ? bare : `${scope}-${bare}`}@${version}.tgz`;
 };
+/**
+* Name of the archive produced for one root spec in `per-spec` layout.
+*
+* The same rule as {@link flatName}, which is where the reasoning lives — a
+* per-spec archive and a `flat` package tarball are both "one file in a
+* directory, named for what is in it", and there is no reason for a directory
+* of bundles and a directory of packages to be read differently.
+*/
+const perSpecArchiveName = flatName;
+/**
+* The path of one package tarball within a bundle. The one place the two
+* shapes are chosen between, so a manifest and the tree it describes cannot
+* drift apart.
+*
+* `flat` keeps a file name and no directories, and uses {@link flatName}
+* rather than the registry file name: with the directories gone that name is
+* all there is to tell two packages apart, and the registry one drops the
+* scope, which would put `@types/node` and `node` on the same file. The name
+* is free to differ — `npm publish <tarball>` reads a package's name and
+* version from the `package.json` inside it, not from what the file is
+* called.
+*/
+const bundlePath = (layout, name, version) => layout === Layout.Flat ? flatName(name, version) : packagePath(name, version);
 /** Name of the archive produced in `single` layout. */
 const singleArchiveName = (base = "bundle") => `${base}.tgz`;
 /**
@@ -757,8 +766,14 @@ const singleArchiveName = (base = "bundle") => `${base}.tgz`;
 *
 * Kept short and copy-pasteable on purpose: whoever opens this is mid-task on a
 * restricted network and does not want prose.
+*
+* Layout-aware, because the instructions genuinely differ — a registry-layout
+* tree uploads into Artifactory as it stands and a flat directory does not, and
+* a guide that said otherwise would be discovered to be wrong by somebody who
+* can no longer look anything up.
 */
-const importGuide = (options) => `# Importing this bundle
+const importGuide = (options) => options.layout === Layout.Flat ? flatGuide(options) : treeGuide(options);
+const treeGuide = (options) => `# Importing this bundle
 
 ${options.packageCount} package tarball(s), laid out exactly as an npm registry serves them:
 
@@ -786,6 +801,32 @@ Publish each tarball individually:
 
     node -e "const m=require('./bundle/${MANIFEST_FILE}');console.log(m.packages.length+' packages')"
 
+Every entry in ${MANIFEST_FILE} carries the integrity string the source registry
+advertised, and each tarball was checked against it at download time.
+`;
+const flatGuide = (options) => `# Importing this bundle
+
+${options.packageCount} package tarball(s), side by side in this one directory:
+
+    <name>@<version>.tgz
+    @<scope>-<name>@<version>.tgz
+
+Created ${options.createdAt} by packall ${options.toolVersion}.
+See ${MANIFEST_FILE} for the full list with checksums.
+
+## Publishing into a registry
+
+\`npm publish\` reads each package's name and version from the \`package.json\`
+inside its tarball, so neither the file names nor the order matter:
+
+    for f in *.tgz; do npm publish --registry <url> "$f"; done
+
+For a tree that uploads into Artifactory as it stands, use --layout dir instead.
+
+## Verifying before import
+
+    node -e "const m=require('./${MANIFEST_FILE}');console.log(m.packages.length+' packages')"
+
 Every entry in ${MANIFEST_FILE} carries the integrity string the source registry
 advertised, and each tarball was checked against it at download time.
 `;
@@ -804,7 +845,7 @@ const buildManifest = (input) => {
 		return {
 			name: pkg.name,
 			version: pkg.version,
-			path: packagePath(pkg.name, pkg.version),
+			path: bundlePath(input.options.layout, pkg.name, pkg.version),
 			tarball: pkg.manifest.dist.tarball,
 			integrity: pkg.manifest.dist.integrity,
 			shasum: pkg.manifest.dist.shasum,
@@ -2554,7 +2595,7 @@ const bundleResolved = (resolution, options) => Effect.gen(function* () {
 * first second rather than after a twenty-minute transfer.
 */
 const plannedOutputs = (resolution, options) => {
-	if (options.layout === Layout.Dir) return [{ file: MANIFEST_FILE }, { file: README_FILE }];
+	if (options.layout === Layout.Dir || options.layout === Layout.Flat) return [{ file: MANIFEST_FILE }, { file: README_FILE }];
 	if (options.layout === Layout.Single) return [{ file: singleArchiveName(options.archiveName ?? "bundle") }];
 	return perSpecTargets(resolution).map(({ root, version }) => ({
 		file: perSpecArchiveName(root.spec.name, version),
@@ -2609,6 +2650,7 @@ const emit$1 = (input, staging) => {
 		case Layout.Single: return emitSingle(input);
 		case Layout.Dir: return emitDirectory(input);
 		case Layout.PerSpec: return emitPerSpec(input, staging);
+		case Layout.Flat: return emitFlat(input, staging);
 	}
 };
 /** One tarball containing the deduplicated union of every closure. */
@@ -2658,6 +2700,47 @@ const emitDirectory = (input) => Effect.gen(function* () {
 	}];
 });
 /**
+* The flat directory: every tarball side by side, no archive, no nesting.
+*
+* The tarballs are the untouched registry ones — only their names are ours,
+* and `bundlePath` says why.
+*/
+const emitFlat = (input, staging) => Effect.gen(function* () {
+	const fs = yield* FileSystem.FileSystem;
+	const path = yield* Path.Path;
+	const flatDir = path.join(staging, "flat");
+	yield* fs.makeDirectory(flatDir, { recursive: true });
+	for (const pkg of input.resolution.packages) {
+		const parts = packagePath(pkg.name, pkg.version).split("/");
+		yield* linkOrCopy(path.join(input.packagesDir, ...parts), path.join(flatDir, flatName(pkg.name, pkg.version)));
+	}
+	yield* writeBundleMetadata({
+		dir: flatDir,
+		resolution: input.resolution,
+		included: input.resolution.packages,
+		options: input.options,
+		registryInfo: input.registryInfo,
+		sizes: input.report.sizes
+	});
+	yield* fs.copy(flatDir, input.options.outDir, { overwrite: true }).pipe(Effect.mapError((cause) => new OutputError(input.options.outDir, "could not write output tree", { cause })));
+	const tarballs = input.resolution.packages.map((pkg) => ({
+		kind: ArtifactKind.Archive,
+		path: path.join(input.options.outDir, flatName(pkg.name, pkg.version)),
+		bytes: input.report.sizes.get(`${pkg.name}@${pkg.version}`) ?? 0,
+		packageCount: 1
+	}));
+	const summaries = yield* Effect.forEach([MANIFEST_FILE, README_FILE], (file) => Effect.gen(function* () {
+		const info = yield* fs.stat(path.join(flatDir, file));
+		return {
+			kind: ArtifactKind.File,
+			path: path.join(input.options.outDir, file),
+			bytes: Number(info.size),
+			packageCount: 0
+		};
+	}));
+	return [...tarballs, ...summaries];
+});
+/**
 * One tarball per resolved root *version*.
 *
 * Under `--all-versions react@^18` this produces `react-18.0.0.tgz`,
@@ -2743,7 +2826,8 @@ const writeBundleMetadata = (input) => Effect.gen(function* () {
 	yield* fs.writeFileString(path.join(input.dir, README_FILE), importGuide({
 		packageCount: input.included.length,
 		createdAt: createdAt.toISOString(),
-		toolVersion: input.options.toolVersion
+		toolVersion: input.options.toolVersion,
+		layout: input.options.layout
 	}));
 });
 /** Sorted top-level entries of a directory, used as the tar entry list. */
@@ -2751,6 +2835,28 @@ const topLevelEntries = (dir) => Effect.gen(function* () {
 	return (yield* (yield* FileSystem.FileSystem).readDirectory(dir)).toSorted();
 });
 /**
+* `assertDistinctOutputs`, over package tarballs instead of archives.
+*
+* `flat` is the only layout with nothing but a file name to tell two packages
+* apart — everywhere else a tarball keeps its unique `name/-/` directory. What
+* is left to catch is the pathological pair, `@a/b-c` against `@a-b/c`; the
+* plausible one is impossible by construction, which is what `flatName` buys.
+*/
+const assertDistinctFlatNames = (resolution, options) => Effect.gen(function* () {
+	if (options.layout !== Layout.Flat) return;
+	const owners = /* @__PURE__ */ new Map();
+	for (const pkg of resolution.packages) {
+		const file = flatName(pkg.name, pkg.version);
+		const claimed = owners.get(file);
+		if (claimed === void 0) owners.set(file, [`${pkg.name}@${pkg.version}`]);
+		else claimed.push(`${pkg.name}@${pkg.version}`);
+	}
+	const collisions = [...owners].filter(([, packages]) => packages.length > 1);
+	if (collisions.length === 0) return;
+	const described = collisions.map(([file, packages]) => `${packages.join(" and ")} would both be ${file}`).join("; ");
+	return yield* Effect.fail(new OutputError(options.outDir, `two packages want the same file name — ${described}. \`flat\` layout has only the file name to tell them apart, and the \`/\` in a scope becomes a \`-\` to make one. Use --layout dir, which keeps each package in its own directory.`));
+});
+/**
 * Two different packages must not want the same file name.
 *
 * Most of what this used to catch is now impossible: an archive is named for
@@ -2810,6 +2916,7 @@ const prepareOutputDir = (resolution, options) => Effect.gen(function* () {
 	const path = yield* Path.Path;
 	const outDir = options.outDir;
 	yield* assertDistinctOutputs(resolution, options);
+	yield* assertDistinctFlatNames(resolution, options);
 	if (!options.force) {
 		const clashes = [];
 		for (const planned of plannedOutputs(resolution, options)) {