@ponharu/pkgflare 0.0.0

package/dist/worker.js

@@ -0,0 +1,3245 @@
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __commonJS = (cb, mod) => function __require() {
+  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// node_modules/semver/internal/constants.js
+var require_constants = __commonJS({
+  "node_modules/semver/internal/constants.js"(exports, module) {
+    "use strict";
+    var SEMVER_SPEC_VERSION = "2.0.0";
+    var MAX_LENGTH = 256;
+    var MAX_SAFE_INTEGER = Number.MAX_SAFE_INTEGER || /* istanbul ignore next */
+    9007199254740991;
+    var MAX_SAFE_COMPONENT_LENGTH = 16;
+    var MAX_SAFE_BUILD_LENGTH = MAX_LENGTH - 6;
+    var RELEASE_TYPES = [
+      "major",
+      "premajor",
+      "minor",
+      "preminor",
+      "patch",
+      "prepatch",
+      "prerelease"
+    ];
+    module.exports = {
+      MAX_LENGTH,
+      MAX_SAFE_COMPONENT_LENGTH,
+      MAX_SAFE_BUILD_LENGTH,
+      MAX_SAFE_INTEGER,
+      RELEASE_TYPES,
+      SEMVER_SPEC_VERSION,
+      FLAG_INCLUDE_PRERELEASE: 1,
+      FLAG_LOOSE: 2
+    };
+  }
+});
+
+// node_modules/semver/internal/debug.js
+var require_debug = __commonJS({
+  "node_modules/semver/internal/debug.js"(exports, module) {
+    "use strict";
+    var debug = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {
+    };
+    module.exports = debug;
+  }
+});
+
+// node_modules/semver/internal/re.js
+var require_re = __commonJS({
+  "node_modules/semver/internal/re.js"(exports, module) {
+    "use strict";
+    var {
+      MAX_SAFE_COMPONENT_LENGTH,
+      MAX_SAFE_BUILD_LENGTH,
+      MAX_LENGTH
+    } = require_constants();
+    var debug = require_debug();
+    exports = module.exports = {};
+    var re = exports.re = [];
+    var safeRe = exports.safeRe = [];
+    var src = exports.src = [];
+    var safeSrc = exports.safeSrc = [];
+    var t = exports.t = {};
+    var R = 0;
+    var LETTERDASHNUMBER = "[a-zA-Z0-9-]";
+    var safeRegexReplacements = [
+      ["\\s", 1],
+      ["\\d", MAX_LENGTH],
+      [LETTERDASHNUMBER, MAX_SAFE_BUILD_LENGTH]
+    ];
+    var makeSafeRegex = (value) => {
+      for (const [token, max] of safeRegexReplacements) {
+        value = value.split(`${token}*`).join(`${token}{0,${max}}`).split(`${token}+`).join(`${token}{1,${max}}`);
+      }
+      return value;
+    };
+    var createToken = (name, value, isGlobal) => {
+      const safe = makeSafeRegex(value);
+      const index = R++;
+      debug(name, index, value);
+      t[name] = index;
+      src[index] = value;
+      safeSrc[index] = safe;
+      re[index] = new RegExp(value, isGlobal ? "g" : void 0);
+      safeRe[index] = new RegExp(safe, isGlobal ? "g" : void 0);
+    };
+    createToken("NUMERICIDENTIFIER", "0|[1-9]\\d*");
+    createToken("NUMERICIDENTIFIERLOOSE", "\\d+");
+    createToken("NONNUMERICIDENTIFIER", `\\d*[a-zA-Z-]${LETTERDASHNUMBER}*`);
+    createToken("MAINVERSION", `(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})\\.(${src[t.NUMERICIDENTIFIER]})`);
+    createToken("MAINVERSIONLOOSE", `(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})\\.(${src[t.NUMERICIDENTIFIERLOOSE]})`);
+    createToken("PRERELEASEIDENTIFIER", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIER]})`);
+    createToken("PRERELEASEIDENTIFIERLOOSE", `(?:${src[t.NONNUMERICIDENTIFIER]}|${src[t.NUMERICIDENTIFIERLOOSE]})`);
+    createToken("PRERELEASE", `(?:-(${src[t.PRERELEASEIDENTIFIER]}(?:\\.${src[t.PRERELEASEIDENTIFIER]})*))`);
+    createToken("PRERELEASELOOSE", `(?:-?(${src[t.PRERELEASEIDENTIFIERLOOSE]}(?:\\.${src[t.PRERELEASEIDENTIFIERLOOSE]})*))`);
+    createToken("BUILDIDENTIFIER", `${LETTERDASHNUMBER}+`);
+    createToken("BUILD", `(?:\\+(${src[t.BUILDIDENTIFIER]}(?:\\.${src[t.BUILDIDENTIFIER]})*))`);
+    createToken("FULLPLAIN", `v?${src[t.MAINVERSION]}${src[t.PRERELEASE]}?${src[t.BUILD]}?`);
+    createToken("FULL", `^${src[t.FULLPLAIN]}$`);
+    createToken("LOOSEPLAIN", `[v=\\s]*${src[t.MAINVERSIONLOOSE]}${src[t.PRERELEASELOOSE]}?${src[t.BUILD]}?`);
+    createToken("LOOSE", `^${src[t.LOOSEPLAIN]}$`);
+    createToken("GTLT", "((?:<|>)?=?)");
+    createToken("XRANGEIDENTIFIERLOOSE", `${src[t.NUMERICIDENTIFIERLOOSE]}|x|X|\\*`);
+    createToken("XRANGEIDENTIFIER", `${src[t.NUMERICIDENTIFIER]}|x|X|\\*`);
+    createToken("XRANGEPLAIN", `[v=\\s]*(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:\\.(${src[t.XRANGEIDENTIFIER]})(?:${src[t.PRERELEASE]})?${src[t.BUILD]}?)?)?`);
+    createToken("XRANGEPLAINLOOSE", `[v=\\s]*(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:\\.(${src[t.XRANGEIDENTIFIERLOOSE]})(?:${src[t.PRERELEASELOOSE]})?${src[t.BUILD]}?)?)?`);
+    createToken("XRANGE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAIN]}$`);
+    createToken("XRANGELOOSE", `^${src[t.GTLT]}\\s*${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("COERCEPLAIN", `${"(^|[^\\d])(\\d{1,"}${MAX_SAFE_COMPONENT_LENGTH}})(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?(?:\\.(\\d{1,${MAX_SAFE_COMPONENT_LENGTH}}))?`);
+    createToken("COERCE", `${src[t.COERCEPLAIN]}(?:$|[^\\d])`);
+    createToken("COERCEFULL", src[t.COERCEPLAIN] + `(?:${src[t.PRERELEASE]})?(?:${src[t.BUILD]})?(?:$|[^\\d])`);
+    createToken("COERCERTL", src[t.COERCE], true);
+    createToken("COERCERTLFULL", src[t.COERCEFULL], true);
+    createToken("LONETILDE", "(?:~>?)");
+    createToken("TILDETRIM", `(\\s*)${src[t.LONETILDE]}\\s+`, true);
+    exports.tildeTrimReplace = "$1~";
+    createToken("TILDE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAIN]}$`);
+    createToken("TILDELOOSE", `^${src[t.LONETILDE]}${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("LONECARET", "(?:\\^)");
+    createToken("CARETTRIM", `(\\s*)${src[t.LONECARET]}\\s+`, true);
+    exports.caretTrimReplace = "$1^";
+    createToken("CARET", `^${src[t.LONECARET]}${src[t.XRANGEPLAIN]}$`);
+    createToken("CARETLOOSE", `^${src[t.LONECARET]}${src[t.XRANGEPLAINLOOSE]}$`);
+    createToken("COMPARATORLOOSE", `^${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]})$|^$`);
+    createToken("COMPARATOR", `^${src[t.GTLT]}\\s*(${src[t.FULLPLAIN]})$|^$`);
+    createToken("COMPARATORTRIM", `(\\s*)${src[t.GTLT]}\\s*(${src[t.LOOSEPLAIN]}|${src[t.XRANGEPLAIN]})`, true);
+    exports.comparatorTrimReplace = "$1$2$3";
+    createToken("HYPHENRANGE", `^\\s*(${src[t.XRANGEPLAIN]})\\s+-\\s+(${src[t.XRANGEPLAIN]})\\s*$`);
+    createToken("HYPHENRANGELOOSE", `^\\s*(${src[t.XRANGEPLAINLOOSE]})\\s+-\\s+(${src[t.XRANGEPLAINLOOSE]})\\s*$`);
+    createToken("STAR", "(<|>)?=?\\s*\\*");
+    createToken("GTE0", "^\\s*>=\\s*0\\.0\\.0\\s*$");
+    createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
+  }
+});
+
+// node_modules/semver/internal/parse-options.js
+var require_parse_options = __commonJS({
+  "node_modules/semver/internal/parse-options.js"(exports, module) {
+    "use strict";
+    var looseOption = Object.freeze({ loose: true });
+    var emptyOpts = Object.freeze({});
+    var parseOptions = (options) => {
+      if (!options) {
+        return emptyOpts;
+      }
+      if (typeof options !== "object") {
+        return looseOption;
+      }
+      return options;
+    };
+    module.exports = parseOptions;
+  }
+});
+
+// node_modules/semver/internal/identifiers.js
+var require_identifiers = __commonJS({
+  "node_modules/semver/internal/identifiers.js"(exports, module) {
+    "use strict";
+    var numeric = /^[0-9]+$/;
+    var compareIdentifiers = (a, b) => {
+      if (typeof a === "number" && typeof b === "number") {
+        return a === b ? 0 : a < b ? -1 : 1;
+      }
+      const anum = numeric.test(a);
+      const bnum = numeric.test(b);
+      if (anum && bnum) {
+        a = +a;
+        b = +b;
+      }
+      return a === b ? 0 : anum && !bnum ? -1 : bnum && !anum ? 1 : a < b ? -1 : 1;
+    };
+    var rcompareIdentifiers = (a, b) => compareIdentifiers(b, a);
+    module.exports = {
+      compareIdentifiers,
+      rcompareIdentifiers
+    };
+  }
+});
+
+// node_modules/semver/classes/semver.js
+var require_semver = __commonJS({
+  "node_modules/semver/classes/semver.js"(exports, module) {
+    "use strict";
+    var debug = require_debug();
+    var { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
+    var { safeRe: re, t } = require_re();
+    var parseOptions = require_parse_options();
+    var { compareIdentifiers } = require_identifiers();
+    var isPrereleaseIdentifier = (prerelease, identifier) => {
+      const identifiers = identifier.split(".");
+      if (identifiers.length > prerelease.length) {
+        return false;
+      }
+      for (let i = 0; i < identifiers.length; i++) {
+        if (compareIdentifiers(prerelease[i], identifiers[i]) !== 0) {
+          return false;
+        }
+      }
+      return true;
+    };
+    var SemVer = class _SemVer {
+      constructor(version, options) {
+        options = parseOptions(options);
+        if (version instanceof _SemVer) {
+          if (version.loose === !!options.loose && version.includePrerelease === !!options.includePrerelease) {
+            return version;
+          } else {
+            version = version.version;
+          }
+        } else if (typeof version !== "string") {
+          throw new TypeError(`Invalid version. Must be a string. Got type "${typeof version}".`);
+        }
+        if (version.length > MAX_LENGTH) {
+          throw new TypeError(
+            `version is longer than ${MAX_LENGTH} characters`
+          );
+        }
+        debug("SemVer", version, options);
+        this.options = options;
+        this.loose = !!options.loose;
+        this.includePrerelease = !!options.includePrerelease;
+        const m = version.trim().match(options.loose ? re[t.LOOSE] : re[t.FULL]);
+        if (!m) {
+          throw new TypeError(`Invalid Version: ${version}`);
+        }
+        this.raw = version;
+        this.major = +m[1];
+        this.minor = +m[2];
+        this.patch = +m[3];
+        if (this.major > MAX_SAFE_INTEGER || this.major < 0) {
+          throw new TypeError("Invalid major version");
+        }
+        if (this.minor > MAX_SAFE_INTEGER || this.minor < 0) {
+          throw new TypeError("Invalid minor version");
+        }
+        if (this.patch > MAX_SAFE_INTEGER || this.patch < 0) {
+          throw new TypeError("Invalid patch version");
+        }
+        if (!m[4]) {
+          this.prerelease = [];
+        } else {
+          this.prerelease = m[4].split(".").map((id) => {
+            if (/^[0-9]+$/.test(id)) {
+              const num = +id;
+              if (num >= 0 && num < MAX_SAFE_INTEGER) {
+                return num;
+              }
+            }
+            return id;
+          });
+        }
+        this.build = m[5] ? m[5].split(".") : [];
+        this.format();
+      }
+      format() {
+        this.version = `${this.major}.${this.minor}.${this.patch}`;
+        if (this.prerelease.length) {
+          this.version += `-${this.prerelease.join(".")}`;
+        }
+        return this.version;
+      }
+      toString() {
+        return this.version;
+      }
+      compare(other) {
+        debug("SemVer.compare", this.version, this.options, other);
+        if (!(other instanceof _SemVer)) {
+          if (typeof other === "string" && other === this.version) {
+            return 0;
+          }
+          other = new _SemVer(other, this.options);
+        }
+        if (other.version === this.version) {
+          return 0;
+        }
+        return this.compareMain(other) || this.comparePre(other);
+      }
+      compareMain(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        if (this.major < other.major) {
+          return -1;
+        }
+        if (this.major > other.major) {
+          return 1;
+        }
+        if (this.minor < other.minor) {
+          return -1;
+        }
+        if (this.minor > other.minor) {
+          return 1;
+        }
+        if (this.patch < other.patch) {
+          return -1;
+        }
+        if (this.patch > other.patch) {
+          return 1;
+        }
+        return 0;
+      }
+      comparePre(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        if (this.prerelease.length && !other.prerelease.length) {
+          return -1;
+        } else if (!this.prerelease.length && other.prerelease.length) {
+          return 1;
+        } else if (!this.prerelease.length && !other.prerelease.length) {
+          return 0;
+        }
+        let i = 0;
+        do {
+          const a = this.prerelease[i];
+          const b = other.prerelease[i];
+          debug("prerelease compare", i, a, b);
+          if (a === void 0 && b === void 0) {
+            return 0;
+          } else if (b === void 0) {
+            return 1;
+          } else if (a === void 0) {
+            return -1;
+          } else if (a === b) {
+            continue;
+          } else {
+            return compareIdentifiers(a, b);
+          }
+        } while (++i);
+      }
+      compareBuild(other) {
+        if (!(other instanceof _SemVer)) {
+          other = new _SemVer(other, this.options);
+        }
+        let i = 0;
+        do {
+          const a = this.build[i];
+          const b = other.build[i];
+          debug("build compare", i, a, b);
+          if (a === void 0 && b === void 0) {
+            return 0;
+          } else if (b === void 0) {
+            return 1;
+          } else if (a === void 0) {
+            return -1;
+          } else if (a === b) {
+            continue;
+          } else {
+            return compareIdentifiers(a, b);
+          }
+        } while (++i);
+      }
+      // preminor will bump the version up to the next minor release, and immediately
+      // down to pre-release. premajor and prepatch work the same way.
+      inc(release, identifier, identifierBase) {
+        if (release.startsWith("pre")) {
+          if (!identifier && identifierBase === false) {
+            throw new Error("invalid increment argument: identifier is empty");
+          }
+          if (identifier) {
+            const match = `-${identifier}`.match(this.options.loose ? re[t.PRERELEASELOOSE] : re[t.PRERELEASE]);
+            if (!match || match[1] !== identifier) {
+              throw new Error(`invalid identifier: ${identifier}`);
+            }
+          }
+        }
+        switch (release) {
+          case "premajor":
+            this.prerelease.length = 0;
+            this.patch = 0;
+            this.minor = 0;
+            this.major++;
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "preminor":
+            this.prerelease.length = 0;
+            this.patch = 0;
+            this.minor++;
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "prepatch":
+            this.prerelease.length = 0;
+            this.inc("patch", identifier, identifierBase);
+            this.inc("pre", identifier, identifierBase);
+            break;
+          // If the input is a non-prerelease version, this acts the same as
+          // prepatch.
+          case "prerelease":
+            if (this.prerelease.length === 0) {
+              this.inc("patch", identifier, identifierBase);
+            }
+            this.inc("pre", identifier, identifierBase);
+            break;
+          case "release":
+            if (this.prerelease.length === 0) {
+              throw new Error(`version ${this.raw} is not a prerelease`);
+            }
+            this.prerelease.length = 0;
+            break;
+          case "major":
+            if (this.minor !== 0 || this.patch !== 0 || this.prerelease.length === 0) {
+              this.major++;
+            }
+            this.minor = 0;
+            this.patch = 0;
+            this.prerelease = [];
+            break;
+          case "minor":
+            if (this.patch !== 0 || this.prerelease.length === 0) {
+              this.minor++;
+            }
+            this.patch = 0;
+            this.prerelease = [];
+            break;
+          case "patch":
+            if (this.prerelease.length === 0) {
+              this.patch++;
+            }
+            this.prerelease = [];
+            break;
+          // This probably shouldn't be used publicly.
+          // 1.0.0 'pre' would become 1.0.0-0 which is the wrong direction.
+          case "pre": {
+            const base = Number(identifierBase) ? 1 : 0;
+            if (this.prerelease.length === 0) {
+              this.prerelease = [base];
+            } else {
+              let i = this.prerelease.length;
+              while (--i >= 0) {
+                if (typeof this.prerelease[i] === "number") {
+                  this.prerelease[i]++;
+                  i = -2;
+                }
+              }
+              if (i === -1) {
+                if (identifier === this.prerelease.join(".") && identifierBase === false) {
+                  throw new Error("invalid increment argument: identifier already exists");
+                }
+                this.prerelease.push(base);
+              }
+            }
+            if (identifier) {
+              let prerelease = [identifier, base];
+              if (identifierBase === false) {
+                prerelease = [identifier];
+              }
+              if (isPrereleaseIdentifier(this.prerelease, identifier)) {
+                const prereleaseBase = this.prerelease[identifier.split(".").length];
+                if (isNaN(prereleaseBase)) {
+                  this.prerelease = prerelease;
+                }
+              } else {
+                this.prerelease = prerelease;
+              }
+            }
+            break;
+          }
+          default:
+            throw new Error(`invalid increment argument: ${release}`);
+        }
+        this.raw = this.format();
+        if (this.build.length) {
+          this.raw += `+${this.build.join(".")}`;
+        }
+        return this;
+      }
+    };
+    module.exports = SemVer;
+  }
+});
+
+// node_modules/semver/functions/parse.js
+var require_parse = __commonJS({
+  "node_modules/semver/functions/parse.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var parse = (version, options, throwErrors = false) => {
+      if (version instanceof SemVer) {
+        return version;
+      }
+      try {
+        return new SemVer(version, options);
+      } catch (er) {
+        if (!throwErrors) {
+          return null;
+        }
+        throw er;
+      }
+    };
+    module.exports = parse;
+  }
+});
+
+// node_modules/semver/functions/valid.js
+var require_valid = __commonJS({
+  "node_modules/semver/functions/valid.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var valid = (version, options) => {
+      const v = parse(version, options);
+      return v ? v.version : null;
+    };
+    module.exports = valid;
+  }
+});
+
+// node_modules/semver/functions/clean.js
+var require_clean = __commonJS({
+  "node_modules/semver/functions/clean.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var clean = (version, options) => {
+      const s = parse(version.trim().replace(/^[=v]+/, ""), options);
+      return s ? s.version : null;
+    };
+    module.exports = clean;
+  }
+});
+
+// node_modules/semver/functions/inc.js
+var require_inc = __commonJS({
+  "node_modules/semver/functions/inc.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var inc = (version, release, options, identifier, identifierBase) => {
+      if (typeof options === "string") {
+        identifierBase = identifier;
+        identifier = options;
+        options = void 0;
+      }
+      try {
+        return new SemVer(
+          version instanceof SemVer ? version.version : version,
+          options
+        ).inc(release, identifier, identifierBase).version;
+      } catch (er) {
+        return null;
+      }
+    };
+    module.exports = inc;
+  }
+});
+
+// node_modules/semver/functions/diff.js
+var require_diff = __commonJS({
+  "node_modules/semver/functions/diff.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var diff = (version1, version2) => {
+      const v1 = parse(version1, null, true);
+      const v2 = parse(version2, null, true);
+      const comparison = v1.compare(v2);
+      if (comparison === 0) {
+        return null;
+      }
+      const v1Higher = comparison > 0;
+      const highVersion = v1Higher ? v1 : v2;
+      const lowVersion = v1Higher ? v2 : v1;
+      const highHasPre = !!highVersion.prerelease.length;
+      const lowHasPre = !!lowVersion.prerelease.length;
+      if (lowHasPre && !highHasPre) {
+        if (!lowVersion.patch && !lowVersion.minor) {
+          return "major";
+        }
+        if (lowVersion.compareMain(highVersion) === 0) {
+          if (lowVersion.minor && !lowVersion.patch) {
+            return "minor";
+          }
+          return "patch";
+        }
+      }
+      const prefix = highHasPre ? "pre" : "";
+      if (v1.major !== v2.major) {
+        return prefix + "major";
+      }
+      if (v1.minor !== v2.minor) {
+        return prefix + "minor";
+      }
+      if (v1.patch !== v2.patch) {
+        return prefix + "patch";
+      }
+      return "prerelease";
+    };
+    module.exports = diff;
+  }
+});
+
+// node_modules/semver/functions/major.js
+var require_major = __commonJS({
+  "node_modules/semver/functions/major.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var major = (a, loose) => new SemVer(a, loose).major;
+    module.exports = major;
+  }
+});
+
+// node_modules/semver/functions/minor.js
+var require_minor = __commonJS({
+  "node_modules/semver/functions/minor.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var minor = (a, loose) => new SemVer(a, loose).minor;
+    module.exports = minor;
+  }
+});
+
+// node_modules/semver/functions/patch.js
+var require_patch = __commonJS({
+  "node_modules/semver/functions/patch.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var patch = (a, loose) => new SemVer(a, loose).patch;
+    module.exports = patch;
+  }
+});
+
+// node_modules/semver/functions/prerelease.js
+var require_prerelease = __commonJS({
+  "node_modules/semver/functions/prerelease.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var prerelease = (version, options) => {
+      const parsed = parse(version, options);
+      return parsed && parsed.prerelease.length ? parsed.prerelease : null;
+    };
+    module.exports = prerelease;
+  }
+});
+
+// node_modules/semver/functions/compare.js
+var require_compare = __commonJS({
+  "node_modules/semver/functions/compare.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
+    module.exports = compare;
+  }
+});
+
+// node_modules/semver/functions/rcompare.js
+var require_rcompare = __commonJS({
+  "node_modules/semver/functions/rcompare.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var rcompare = (a, b, loose) => compare(b, a, loose);
+    module.exports = rcompare;
+  }
+});
+
+// node_modules/semver/functions/compare-loose.js
+var require_compare_loose = __commonJS({
+  "node_modules/semver/functions/compare-loose.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var compareLoose = (a, b) => compare(a, b, true);
+    module.exports = compareLoose;
+  }
+});
+
+// node_modules/semver/functions/compare-build.js
+var require_compare_build = __commonJS({
+  "node_modules/semver/functions/compare-build.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var compareBuild = (a, b, loose) => {
+      const versionA = new SemVer(a, loose);
+      const versionB = new SemVer(b, loose);
+      return versionA.compare(versionB) || versionA.compareBuild(versionB);
+    };
+    module.exports = compareBuild;
+  }
+});
+
+// node_modules/semver/functions/sort.js
+var require_sort = __commonJS({
+  "node_modules/semver/functions/sort.js"(exports, module) {
+    "use strict";
+    var compareBuild = require_compare_build();
+    var sort = (list, loose) => list.sort((a, b) => compareBuild(a, b, loose));
+    module.exports = sort;
+  }
+});
+
+// node_modules/semver/functions/rsort.js
+var require_rsort = __commonJS({
+  "node_modules/semver/functions/rsort.js"(exports, module) {
+    "use strict";
+    var compareBuild = require_compare_build();
+    var rsort = (list, loose) => list.sort((a, b) => compareBuild(b, a, loose));
+    module.exports = rsort;
+  }
+});
+
+// node_modules/semver/functions/gt.js
+var require_gt = __commonJS({
+  "node_modules/semver/functions/gt.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var gt = (a, b, loose) => compare(a, b, loose) > 0;
+    module.exports = gt;
+  }
+});
+
+// node_modules/semver/functions/lt.js
+var require_lt = __commonJS({
+  "node_modules/semver/functions/lt.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var lt = (a, b, loose) => compare(a, b, loose) < 0;
+    module.exports = lt;
+  }
+});
+
+// node_modules/semver/functions/eq.js
+var require_eq = __commonJS({
+  "node_modules/semver/functions/eq.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var eq = (a, b, loose) => compare(a, b, loose) === 0;
+    module.exports = eq;
+  }
+});
+
+// node_modules/semver/functions/neq.js
+var require_neq = __commonJS({
+  "node_modules/semver/functions/neq.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var neq = (a, b, loose) => compare(a, b, loose) !== 0;
+    module.exports = neq;
+  }
+});
+
+// node_modules/semver/functions/gte.js
+var require_gte = __commonJS({
+  "node_modules/semver/functions/gte.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var gte = (a, b, loose) => compare(a, b, loose) >= 0;
+    module.exports = gte;
+  }
+});
+
+// node_modules/semver/functions/lte.js
+var require_lte = __commonJS({
+  "node_modules/semver/functions/lte.js"(exports, module) {
+    "use strict";
+    var compare = require_compare();
+    var lte = (a, b, loose) => compare(a, b, loose) <= 0;
+    module.exports = lte;
+  }
+});
+
+// node_modules/semver/functions/cmp.js
+var require_cmp = __commonJS({
+  "node_modules/semver/functions/cmp.js"(exports, module) {
+    "use strict";
+    var eq = require_eq();
+    var neq = require_neq();
+    var gt = require_gt();
+    var gte = require_gte();
+    var lt = require_lt();
+    var lte = require_lte();
+    var cmp = (a, op, b, loose) => {
+      switch (op) {
+        case "===":
+          if (typeof a === "object") {
+            a = a.version;
+          }
+          if (typeof b === "object") {
+            b = b.version;
+          }
+          return a === b;
+        case "!==":
+          if (typeof a === "object") {
+            a = a.version;
+          }
+          if (typeof b === "object") {
+            b = b.version;
+          }
+          return a !== b;
+        case "":
+        case "=":
+        case "==":
+          return eq(a, b, loose);
+        case "!=":
+          return neq(a, b, loose);
+        case ">":
+          return gt(a, b, loose);
+        case ">=":
+          return gte(a, b, loose);
+        case "<":
+          return lt(a, b, loose);
+        case "<=":
+          return lte(a, b, loose);
+        default:
+          throw new TypeError(`Invalid operator: ${op}`);
+      }
+    };
+    module.exports = cmp;
+  }
+});
+
+// node_modules/semver/functions/coerce.js
+var require_coerce = __commonJS({
+  "node_modules/semver/functions/coerce.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var parse = require_parse();
+    var { safeRe: re, t } = require_re();
+    var coerce = (version, options) => {
+      if (version instanceof SemVer) {
+        return version;
+      }
+      if (typeof version === "number") {
+        version = String(version);
+      }
+      if (typeof version !== "string") {
+        return null;
+      }
+      options = options || {};
+      let match = null;
+      if (!options.rtl) {
+        match = version.match(options.includePrerelease ? re[t.COERCEFULL] : re[t.COERCE]);
+      } else {
+        const coerceRtlRegex = options.includePrerelease ? re[t.COERCERTLFULL] : re[t.COERCERTL];
+        let next;
+        while ((next = coerceRtlRegex.exec(version)) && (!match || match.index + match[0].length !== version.length)) {
+          if (!match || next.index + next[0].length !== match.index + match[0].length) {
+            match = next;
+          }
+          coerceRtlRegex.lastIndex = next.index + next[1].length + next[2].length;
+        }
+        coerceRtlRegex.lastIndex = -1;
+      }
+      if (match === null) {
+        return null;
+      }
+      const major = match[2];
+      const minor = match[3] || "0";
+      const patch = match[4] || "0";
+      const prerelease = options.includePrerelease && match[5] ? `-${match[5]}` : "";
+      const build = options.includePrerelease && match[6] ? `+${match[6]}` : "";
+      return parse(`${major}.${minor}.${patch}${prerelease}${build}`, options);
+    };
+    module.exports = coerce;
+  }
+});
+
+// node_modules/semver/functions/truncate.js
+var require_truncate = __commonJS({
+  "node_modules/semver/functions/truncate.js"(exports, module) {
+    "use strict";
+    var parse = require_parse();
+    var constants = require_constants();
+    var SemVer = require_semver();
+    var truncate = (version, truncation, options) => {
+      if (!constants.RELEASE_TYPES.includes(truncation)) {
+        return null;
+      }
+      const clonedVersion = cloneInputVersion(version, options);
+      return clonedVersion && doTruncation(clonedVersion, truncation);
+    };
+    var cloneInputVersion = (version, options) => {
+      const versionStringToParse = version instanceof SemVer ? version.version : version;
+      return parse(versionStringToParse, options);
+    };
+    var doTruncation = (version, truncation) => {
+      if (isPrerelease(truncation)) {
+        return version.version;
+      }
+      version.prerelease = [];
+      switch (truncation) {
+        case "major":
+          version.minor = 0;
+          version.patch = 0;
+          break;
+        case "minor":
+          version.patch = 0;
+          break;
+      }
+      return version.format();
+    };
+    var isPrerelease = (type) => {
+      return type.startsWith("pre");
+    };
+    module.exports = truncate;
+  }
+});
+
+// node_modules/semver/internal/lrucache.js
+var require_lrucache = __commonJS({
+  "node_modules/semver/internal/lrucache.js"(exports, module) {
+    "use strict";
+    var LRUCache = class {
+      constructor() {
+        this.max = 1e3;
+        this.map = /* @__PURE__ */ new Map();
+      }
+      get(key) {
+        const value = this.map.get(key);
+        if (value === void 0) {
+          return void 0;
+        } else {
+          this.map.delete(key);
+          this.map.set(key, value);
+          return value;
+        }
+      }
+      delete(key) {
+        return this.map.delete(key);
+      }
+      set(key, value) {
+        const deleted = this.delete(key);
+        if (!deleted && value !== void 0) {
+          if (this.map.size >= this.max) {
+            const firstKey = this.map.keys().next().value;
+            this.delete(firstKey);
+          }
+          this.map.set(key, value);
+        }
+        return this;
+      }
+    };
+    module.exports = LRUCache;
+  }
+});
+
+// node_modules/semver/classes/range.js
+var require_range = __commonJS({
+  "node_modules/semver/classes/range.js"(exports, module) {
+    "use strict";
+    var SPACE_CHARACTERS = /\s+/g;
+    var Range = class _Range {
+      constructor(range, options) {
+        options = parseOptions(options);
+        if (range instanceof _Range) {
+          if (range.loose === !!options.loose && range.includePrerelease === !!options.includePrerelease) {
+            return range;
+          } else {
+            return new _Range(range.raw, options);
+          }
+        }
+        if (range instanceof Comparator) {
+          this.raw = range.value;
+          this.set = [[range]];
+          this.formatted = void 0;
+          return this;
+        }
+        this.options = options;
+        this.loose = !!options.loose;
+        this.includePrerelease = !!options.includePrerelease;
+        this.raw = range.trim().replace(SPACE_CHARACTERS, " ");
+        this.set = this.raw.split("||").map((r) => this.parseRange(r.trim())).filter((c) => c.length);
+        if (!this.set.length) {
+          throw new TypeError(`Invalid SemVer Range: ${this.raw}`);
+        }
+        if (this.set.length > 1) {
+          const first = this.set[0];
+          this.set = this.set.filter((c) => !isNullSet(c[0]));
+          if (this.set.length === 0) {
+            this.set = [first];
+          } else if (this.set.length > 1) {
+            for (const c of this.set) {
+              if (c.length === 1 && isAny(c[0])) {
+                this.set = [c];
+                break;
+              }
+            }
+          }
+        }
+        this.formatted = void 0;
+      }
+      get range() {
+        if (this.formatted === void 0) {
+          this.formatted = "";
+          for (let i = 0; i < this.set.length; i++) {
+            if (i > 0) {
+              this.formatted += "||";
+            }
+            const comps = this.set[i];
+            for (let k = 0; k < comps.length; k++) {
+              if (k > 0) {
+                this.formatted += " ";
+              }
+              this.formatted += comps[k].toString().trim();
+            }
+          }
+        }
+        return this.formatted;
+      }
+      format() {
+        return this.range;
+      }
+      toString() {
+        return this.range;
+      }
+      parseRange(range) {
+        range = range.replace(BUILDSTRIPRE, "");
+        const memoOpts = (this.options.includePrerelease && FLAG_INCLUDE_PRERELEASE) | (this.options.loose && FLAG_LOOSE);
+        const memoKey = memoOpts + ":" + range;
+        const cached = cache.get(memoKey);
+        if (cached) {
+          return cached;
+        }
+        const loose = this.options.loose;
+        const hr = loose ? re[t.HYPHENRANGELOOSE] : re[t.HYPHENRANGE];
+        range = range.replace(hr, hyphenReplace(this.options.includePrerelease));
+        debug("hyphen replace", range);
+        range = range.replace(re[t.COMPARATORTRIM], comparatorTrimReplace);
+        debug("comparator trim", range);
+        range = range.replace(re[t.TILDETRIM], tildeTrimReplace);
+        debug("tilde trim", range);
+        range = range.replace(re[t.CARETTRIM], caretTrimReplace);
+        debug("caret trim", range);
+        let rangeList = range.split(" ").map((comp) => parseComparator(comp, this.options)).join(" ").split(/\s+/).map((comp) => replaceGTE0(comp, this.options));
+        if (loose) {
+          rangeList = rangeList.filter((comp) => {
+            debug("loose invalid filter", comp, this.options);
+            return !!comp.match(re[t.COMPARATORLOOSE]);
+          });
+        }
+        debug("range list", rangeList);
+        const rangeMap = /* @__PURE__ */ new Map();
+        const comparators = rangeList.map((comp) => new Comparator(comp, this.options));
+        for (const comp of comparators) {
+          if (isNullSet(comp)) {
+            return [comp];
+          }
+          rangeMap.set(comp.value, comp);
+        }
+        if (rangeMap.size > 1 && rangeMap.has("")) {
+          rangeMap.delete("");
+        }
+        const result = [...rangeMap.values()];
+        cache.set(memoKey, result);
+        return result;
+      }
+      intersects(range, options) {
+        if (!(range instanceof _Range)) {
+          throw new TypeError("a Range is required");
+        }
+        return this.set.some((thisComparators) => {
+          return isSatisfiable(thisComparators, options) && range.set.some((rangeComparators) => {
+            return isSatisfiable(rangeComparators, options) && thisComparators.every((thisComparator) => {
+              return rangeComparators.every((rangeComparator) => {
+                return thisComparator.intersects(rangeComparator, options);
+              });
+            });
+          });
+        });
+      }
+      // if ANY of the sets match ALL of its comparators, then pass
+      test(version) {
+        if (!version) {
+          return false;
+        }
+        if (typeof version === "string") {
+          try {
+            version = new SemVer(version, this.options);
+          } catch (er) {
+            return false;
+          }
+        }
+        for (let i = 0; i < this.set.length; i++) {
+          if (testSet(this.set[i], version, this.options)) {
+            return true;
+          }
+        }
+        return false;
+      }
+    };
+    module.exports = Range;
+    var LRU = require_lrucache();
+    var cache = new LRU();
+    var parseOptions = require_parse_options();
+    var Comparator = require_comparator();
+    var debug = require_debug();
+    var SemVer = require_semver();
+    var {
+      safeRe: re,
+      src,
+      t,
+      comparatorTrimReplace,
+      tildeTrimReplace,
+      caretTrimReplace
+    } = require_re();
+    var { FLAG_INCLUDE_PRERELEASE, FLAG_LOOSE } = require_constants();
+    var BUILDSTRIPRE = new RegExp(src[t.BUILD], "g");
+    var isNullSet = (c) => c.value === "<0.0.0-0";
+    var isAny = (c) => c.value === "";
+    var isSatisfiable = (comparators, options) => {
+      let result = true;
+      const remainingComparators = comparators.slice();
+      let testComparator = remainingComparators.pop();
+      while (result && remainingComparators.length) {
+        result = remainingComparators.every((otherComparator) => {
+          return testComparator.intersects(otherComparator, options);
+        });
+        testComparator = remainingComparators.pop();
+      }
+      return result;
+    };
+    var parseComparator = (comp, options) => {
+      comp = comp.replace(re[t.BUILD], "");
+      debug("comp", comp, options);
+      comp = replaceCarets(comp, options);
+      debug("caret", comp);
+      comp = replaceTildes(comp, options);
+      debug("tildes", comp);
+      comp = replaceXRanges(comp, options);
+      debug("xrange", comp);
+      comp = replaceStars(comp, options);
+      debug("stars", comp);
+      return comp;
+    };
+    var isX = (id) => !id || id.toLowerCase() === "x" || id === "*";
+    var invalidXRangeOrder = (M, m, p) => isX(M) && !isX(m) || isX(m) && p && !isX(p);
+    var replaceTildes = (comp, options) => {
+      return comp.trim().split(/\s+/).map((c) => replaceTilde(c, options)).join(" ");
+    };
+    var replaceTilde = (comp, options) => {
+      const r = options.loose ? re[t.TILDELOOSE] : re[t.TILDE];
+      const z = options.includePrerelease ? "-0" : "";
+      return comp.replace(r, (_, M, m, p, pr) => {
+        debug("tilde", comp, _, M, m, p, pr);
+        let ret;
+        if (isX(M)) {
+          ret = "";
+        } else if (isX(m)) {
+          ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
+        } else if (isX(p)) {
+          ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+        } else if (pr) {
+          debug("replaceTilde pr", pr);
+          ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+        } else {
+          ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+        }
+        debug("tilde return", ret);
+        return ret;
+      });
+    };
+    var replaceCarets = (comp, options) => {
+      return comp.trim().split(/\s+/).map((c) => replaceCaret(c, options)).join(" ");
+    };
+    var replaceCaret = (comp, options) => {
+      debug("caret", comp, options);
+      const r = options.loose ? re[t.CARETLOOSE] : re[t.CARET];
+      const z = options.includePrerelease ? "-0" : "";
+      return comp.replace(r, (_, M, m, p, pr) => {
+        debug("caret", comp, _, M, m, p, pr);
+        let ret;
+        if (isX(M)) {
+          ret = "";
+        } else if (isX(m)) {
+          ret = `>=${M}.0.0${z} <${+M + 1}.0.0-0`;
+        } else if (isX(p)) {
+          if (M === "0") {
+            ret = `>=${M}.${m}.0${z} <${M}.${+m + 1}.0-0`;
+          } else {
+            ret = `>=${M}.${m}.0${z} <${+M + 1}.0.0-0`;
+          }
+        } else if (pr) {
+          debug("replaceCaret pr", pr);
+          if (M === "0") {
+            if (m === "0") {
+              ret = `>=${M}.${m}.${p}-${pr} <${M}.${m}.${+p + 1}-0`;
+            } else {
+              ret = `>=${M}.${m}.${p}-${pr} <${M}.${+m + 1}.0-0`;
+            }
+          } else {
+            ret = `>=${M}.${m}.${p}-${pr} <${+M + 1}.0.0-0`;
+          }
+        } else {
+          debug("no pr");
+          if (M === "0") {
+            if (m === "0") {
+              ret = `>=${M}.${m}.${p} <${M}.${m}.${+p + 1}-0`;
+            } else {
+              ret = `>=${M}.${m}.${p} <${M}.${+m + 1}.0-0`;
+            }
+          } else {
+            ret = `>=${M}.${m}.${p} <${+M + 1}.0.0-0`;
+          }
+        }
+        debug("caret return", ret);
+        return ret;
+      });
+    };
+    var replaceXRanges = (comp, options) => {
+      debug("replaceXRanges", comp, options);
+      return comp.split(/\s+/).map((c) => replaceXRange(c, options)).join(" ");
+    };
+    var replaceXRange = (comp, options) => {
+      comp = comp.trim();
+      const r = options.loose ? re[t.XRANGELOOSE] : re[t.XRANGE];
+      return comp.replace(r, (ret, gtlt, M, m, p, pr) => {
+        debug("xRange", comp, ret, gtlt, M, m, p, pr);
+        if (invalidXRangeOrder(M, m, p)) {
+          return comp;
+        }
+        const xM = isX(M);
+        const xm = xM || isX(m);
+        const xp = xm || isX(p);
+        const anyX = xp;
+        if (gtlt === "=" && anyX) {
+          gtlt = "";
+        }
+        pr = options.includePrerelease ? "-0" : "";
+        if (xM) {
+          if (gtlt === ">" || gtlt === "<") {
+            ret = "<0.0.0-0";
+          } else {
+            ret = "*";
+          }
+        } else if (gtlt && anyX) {
+          if (xm) {
+            m = 0;
+          }
+          p = 0;
+          if (gtlt === ">") {
+            gtlt = ">=";
+            if (xm) {
+              M = +M + 1;
+              m = 0;
+              p = 0;
+            } else {
+              m = +m + 1;
+              p = 0;
+            }
+          } else if (gtlt === "<=") {
+            gtlt = "<";
+            if (xm) {
+              M = +M + 1;
+            } else {
+              m = +m + 1;
+            }
+          }
+          if (gtlt === "<") {
+            pr = "-0";
+          }
+          ret = `${gtlt + M}.${m}.${p}${pr}`;
+        } else if (xm) {
+          ret = `>=${M}.0.0${pr} <${+M + 1}.0.0-0`;
+        } else if (xp) {
+          ret = `>=${M}.${m}.0${pr} <${M}.${+m + 1}.0-0`;
+        }
+        debug("xRange return", ret);
+        return ret;
+      });
+    };
+    var replaceStars = (comp, options) => {
+      debug("replaceStars", comp, options);
+      return comp.trim().replace(re[t.STAR], "");
+    };
+    var replaceGTE0 = (comp, options) => {
+      debug("replaceGTE0", comp, options);
+      return comp.trim().replace(re[options.includePrerelease ? t.GTE0PRE : t.GTE0], "");
+    };
+    var hyphenReplace = (incPr) => ($0, from, fM, fm, fp, fpr, fb, to, tM, tm, tp, tpr) => {
+      if (isX(fM)) {
+        from = "";
+      } else if (isX(fm)) {
+        from = `>=${fM}.0.0${incPr ? "-0" : ""}`;
+      } else if (isX(fp)) {
+        from = `>=${fM}.${fm}.0${incPr ? "-0" : ""}`;
+      } else if (fpr) {
+        from = `>=${from}`;
+      } else {
+        from = `>=${from}${incPr ? "-0" : ""}`;
+      }
+      if (isX(tM)) {
+        to = "";
+      } else if (isX(tm)) {
+        to = `<${+tM + 1}.0.0-0`;
+      } else if (isX(tp)) {
+        to = `<${tM}.${+tm + 1}.0-0`;
+      } else if (tpr) {
+        to = `<=${tM}.${tm}.${tp}-${tpr}`;
+      } else if (incPr) {
+        to = `<${tM}.${tm}.${+tp + 1}-0`;
+      } else {
+        to = `<=${to}`;
+      }
+      return `${from} ${to}`.trim();
+    };
+    var testSet = (set, version, options) => {
+      for (let i = 0; i < set.length; i++) {
+        if (!set[i].test(version)) {
+          return false;
+        }
+      }
+      if (version.prerelease.length && !options.includePrerelease) {
+        for (let i = 0; i < set.length; i++) {
+          debug(set[i].semver);
+          if (set[i].semver === Comparator.ANY) {
+            continue;
+          }
+          if (set[i].semver.prerelease.length > 0) {
+            const allowed = set[i].semver;
+            if (allowed.major === version.major && allowed.minor === version.minor && allowed.patch === version.patch) {
+              return true;
+            }
+          }
+        }
+        return false;
+      }
+      return true;
+    };
+  }
+});
+
+// node_modules/semver/classes/comparator.js
+var require_comparator = __commonJS({
+  "node_modules/semver/classes/comparator.js"(exports, module) {
+    "use strict";
+    var ANY = /* @__PURE__ */ Symbol("SemVer ANY");
+    var Comparator = class _Comparator {
+      static get ANY() {
+        return ANY;
+      }
+      constructor(comp, options) {
+        options = parseOptions(options);
+        if (comp instanceof _Comparator) {
+          if (comp.loose === !!options.loose) {
+            return comp;
+          } else {
+            comp = comp.value;
+          }
+        }
+        comp = comp.trim().split(/\s+/).join(" ");
+        debug("comparator", comp, options);
+        this.options = options;
+        this.loose = !!options.loose;
+        this.parse(comp);
+        if (this.semver === ANY) {
+          this.value = "";
+        } else {
+          this.value = this.operator + this.semver.version;
+        }
+        debug("comp", this);
+      }
+      parse(comp) {
+        const r = this.options.loose ? re[t.COMPARATORLOOSE] : re[t.COMPARATOR];
+        const m = comp.match(r);
+        if (!m) {
+          throw new TypeError(`Invalid comparator: ${comp}`);
+        }
+        this.operator = m[1] !== void 0 ? m[1] : "";
+        if (this.operator === "=") {
+          this.operator = "";
+        }
+        if (!m[2]) {
+          this.semver = ANY;
+        } else {
+          this.semver = new SemVer(m[2], this.options.loose);
+        }
+      }
+      toString() {
+        return this.value;
+      }
+      test(version) {
+        debug("Comparator.test", version, this.options.loose);
+        if (this.semver === ANY || version === ANY) {
+          return true;
+        }
+        if (typeof version === "string") {
+          try {
+            version = new SemVer(version, this.options);
+          } catch (er) {
+            return false;
+          }
+        }
+        return cmp(version, this.operator, this.semver, this.options);
+      }
+      intersects(comp, options) {
+        if (!(comp instanceof _Comparator)) {
+          throw new TypeError("a Comparator is required");
+        }
+        if (this.operator === "") {
+          if (this.value === "") {
+            return true;
+          }
+          return new Range(comp.value, options).test(this.value);
+        } else if (comp.operator === "") {
+          if (comp.value === "") {
+            return true;
+          }
+          return new Range(this.value, options).test(comp.semver);
+        }
+        options = parseOptions(options);
+        if (options.includePrerelease && (this.value === "<0.0.0-0" || comp.value === "<0.0.0-0")) {
+          return false;
+        }
+        if (!options.includePrerelease && (this.value.startsWith("<0.0.0") || comp.value.startsWith("<0.0.0"))) {
+          return false;
+        }
+        if (this.operator.startsWith(">") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        if (this.operator.startsWith("<") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (this.semver.version === comp.semver.version && this.operator.includes("=") && comp.operator.includes("=")) {
+          return true;
+        }
+        if (cmp(this.semver, "<", comp.semver, options) && this.operator.startsWith(">") && comp.operator.startsWith("<")) {
+          return true;
+        }
+        if (cmp(this.semver, ">", comp.semver, options) && this.operator.startsWith("<") && comp.operator.startsWith(">")) {
+          return true;
+        }
+        return false;
+      }
+    };
+    module.exports = Comparator;
+    var parseOptions = require_parse_options();
+    var { safeRe: re, t } = require_re();
+    var cmp = require_cmp();
+    var debug = require_debug();
+    var SemVer = require_semver();
+    var Range = require_range();
+  }
+});
+
+// node_modules/semver/functions/satisfies.js
+var require_satisfies = __commonJS({
+  "node_modules/semver/functions/satisfies.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var satisfies = (version, range, options) => {
+      try {
+        range = new Range(range, options);
+      } catch (er) {
+        return false;
+      }
+      return range.test(version);
+    };
+    module.exports = satisfies;
+  }
+});
+
+// node_modules/semver/ranges/to-comparators.js
+var require_to_comparators = __commonJS({
+  "node_modules/semver/ranges/to-comparators.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var toComparators = (range, options) => new Range(range, options).set.map((comp) => comp.map((c) => c.value).join(" ").trim().split(" "));
+    module.exports = toComparators;
+  }
+});
+
+// node_modules/semver/ranges/max-satisfying.js
+var require_max_satisfying = __commonJS({
+  "node_modules/semver/ranges/max-satisfying.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var maxSatisfying = (versions, range, options) => {
+      let max = null;
+      let maxSV = null;
+      let rangeObj = null;
+      try {
+        rangeObj = new Range(range, options);
+      } catch (er) {
+        return null;
+      }
+      versions.forEach((v) => {
+        if (rangeObj.test(v)) {
+          if (!max || maxSV.compare(v) === -1) {
+            max = v;
+            maxSV = new SemVer(max, options);
+          }
+        }
+      });
+      return max;
+    };
+    module.exports = maxSatisfying;
+  }
+});
+
+// node_modules/semver/ranges/min-satisfying.js
+var require_min_satisfying = __commonJS({
+  "node_modules/semver/ranges/min-satisfying.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var minSatisfying = (versions, range, options) => {
+      let min = null;
+      let minSV = null;
+      let rangeObj = null;
+      try {
+        rangeObj = new Range(range, options);
+      } catch (er) {
+        return null;
+      }
+      versions.forEach((v) => {
+        if (rangeObj.test(v)) {
+          if (!min || minSV.compare(v) === 1) {
+            min = v;
+            minSV = new SemVer(min, options);
+          }
+        }
+      });
+      return min;
+    };
+    module.exports = minSatisfying;
+  }
+});
+
+// node_modules/semver/ranges/min-version.js
+var require_min_version = __commonJS({
+  "node_modules/semver/ranges/min-version.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Range = require_range();
+    var gt = require_gt();
+    var minVersion = (range, loose) => {
+      range = new Range(range, loose);
+      let minver = new SemVer("0.0.0");
+      if (range.test(minver)) {
+        return minver;
+      }
+      minver = new SemVer("0.0.0-0");
+      if (range.test(minver)) {
+        return minver;
+      }
+      minver = null;
+      for (let i = 0; i < range.set.length; ++i) {
+        const comparators = range.set[i];
+        let setMin = null;
+        comparators.forEach((comparator) => {
+          const compver = new SemVer(comparator.semver.version);
+          switch (comparator.operator) {
+            case ">":
+              if (compver.prerelease.length === 0) {
+                compver.patch++;
+              } else {
+                compver.prerelease.push(0);
+              }
+              compver.raw = compver.format();
+            /* fallthrough */
+            case "":
+            case ">=":
+              if (!setMin || gt(compver, setMin)) {
+                setMin = compver;
+              }
+              break;
+            case "<":
+            case "<=":
+              break;
+            /* istanbul ignore next */
+            default:
+              throw new Error(`Unexpected operation: ${comparator.operator}`);
+          }
+        });
+        if (setMin && (!minver || gt(minver, setMin))) {
+          minver = setMin;
+        }
+      }
+      if (minver && range.test(minver)) {
+        return minver;
+      }
+      return null;
+    };
+    module.exports = minVersion;
+  }
+});
+
+// node_modules/semver/ranges/valid.js
+var require_valid2 = __commonJS({
+  "node_modules/semver/ranges/valid.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var validRange2 = (range, options) => {
+      try {
+        return new Range(range, options).range || "*";
+      } catch (er) {
+        return null;
+      }
+    };
+    module.exports = validRange2;
+  }
+});
+
+// node_modules/semver/ranges/outside.js
+var require_outside = __commonJS({
+  "node_modules/semver/ranges/outside.js"(exports, module) {
+    "use strict";
+    var SemVer = require_semver();
+    var Comparator = require_comparator();
+    var { ANY } = Comparator;
+    var Range = require_range();
+    var satisfies = require_satisfies();
+    var gt = require_gt();
+    var lt = require_lt();
+    var lte = require_lte();
+    var gte = require_gte();
+    var outside = (version, range, hilo, options) => {
+      version = new SemVer(version, options);
+      range = new Range(range, options);
+      let gtfn, ltefn, ltfn, comp, ecomp;
+      switch (hilo) {
+        case ">":
+          gtfn = gt;
+          ltefn = lte;
+          ltfn = lt;
+          comp = ">";
+          ecomp = ">=";
+          break;
+        case "<":
+          gtfn = lt;
+          ltefn = gte;
+          ltfn = gt;
+          comp = "<";
+          ecomp = "<=";
+          break;
+        default:
+          throw new TypeError('Must provide a hilo val of "<" or ">"');
+      }
+      if (satisfies(version, range, options)) {
+        return false;
+      }
+      for (let i = 0; i < range.set.length; ++i) {
+        const comparators = range.set[i];
+        let high = null;
+        let low = null;
+        comparators.forEach((comparator) => {
+          if (comparator.semver === ANY) {
+            comparator = new Comparator(">=0.0.0");
+          }
+          high = high || comparator;
+          low = low || comparator;
+          if (gtfn(comparator.semver, high.semver, options)) {
+            high = comparator;
+          } else if (ltfn(comparator.semver, low.semver, options)) {
+            low = comparator;
+          }
+        });
+        if (high.operator === comp || high.operator === ecomp) {
+          return false;
+        }
+        if ((!low.operator || low.operator === comp) && ltefn(version, low.semver)) {
+          return false;
+        } else if (low.operator === ecomp && ltfn(version, low.semver)) {
+          return false;
+        }
+      }
+      return true;
+    };
+    module.exports = outside;
+  }
+});
+
+// node_modules/semver/ranges/gtr.js
+var require_gtr = __commonJS({
+  "node_modules/semver/ranges/gtr.js"(exports, module) {
+    "use strict";
+    var outside = require_outside();
+    var gtr = (version, range, options) => outside(version, range, ">", options);
+    module.exports = gtr;
+  }
+});
+
+// node_modules/semver/ranges/ltr.js
+var require_ltr = __commonJS({
+  "node_modules/semver/ranges/ltr.js"(exports, module) {
+    "use strict";
+    var outside = require_outside();
+    var ltr = (version, range, options) => outside(version, range, "<", options);
+    module.exports = ltr;
+  }
+});
+
+// node_modules/semver/ranges/intersects.js
+var require_intersects = __commonJS({
+  "node_modules/semver/ranges/intersects.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var intersects = (r1, r2, options) => {
+      r1 = new Range(r1, options);
+      r2 = new Range(r2, options);
+      return r1.intersects(r2, options);
+    };
+    module.exports = intersects;
+  }
+});
+
+// node_modules/semver/ranges/simplify.js
+var require_simplify = __commonJS({
+  "node_modules/semver/ranges/simplify.js"(exports, module) {
+    "use strict";
+    var satisfies = require_satisfies();
+    var compare = require_compare();
+    module.exports = (versions, range, options) => {
+      const set = [];
+      let first = null;
+      let prev = null;
+      const v = versions.sort((a, b) => compare(a, b, options));
+      for (const version of v) {
+        const included = satisfies(version, range, options);
+        if (included) {
+          prev = version;
+          if (!first) {
+            first = version;
+          }
+        } else {
+          if (prev) {
+            set.push([first, prev]);
+          }
+          prev = null;
+          first = null;
+        }
+      }
+      if (first) {
+        set.push([first, null]);
+      }
+      const ranges = [];
+      for (const [min, max] of set) {
+        if (min === max) {
+          ranges.push(min);
+        } else if (!max && min === v[0]) {
+          ranges.push("*");
+        } else if (!max) {
+          ranges.push(`>=${min}`);
+        } else if (min === v[0]) {
+          ranges.push(`<=${max}`);
+        } else {
+          ranges.push(`${min} - ${max}`);
+        }
+      }
+      const simplified = ranges.join(" || ");
+      const original = typeof range.raw === "string" ? range.raw : String(range);
+      return simplified.length < original.length ? simplified : range;
+    };
+  }
+});
+
+// node_modules/semver/ranges/subset.js
+var require_subset = __commonJS({
+  "node_modules/semver/ranges/subset.js"(exports, module) {
+    "use strict";
+    var Range = require_range();
+    var Comparator = require_comparator();
+    var { ANY } = Comparator;
+    var satisfies = require_satisfies();
+    var compare = require_compare();
+    var subset = (sub, dom, options = {}) => {
+      if (sub === dom) {
+        return true;
+      }
+      sub = new Range(sub, options);
+      dom = new Range(dom, options);
+      let sawNonNull = false;
+      OUTER: for (const simpleSub of sub.set) {
+        for (const simpleDom of dom.set) {
+          const isSub = simpleSubset(simpleSub, simpleDom, options);
+          sawNonNull = sawNonNull || isSub !== null;
+          if (isSub) {
+            continue OUTER;
+          }
+        }
+        if (sawNonNull) {
+          return false;
+        }
+      }
+      return true;
+    };
+    var minimumVersionWithPreRelease = [new Comparator(">=0.0.0-0")];
+    var minimumVersion = [new Comparator(">=0.0.0")];
+    var simpleSubset = (sub, dom, options) => {
+      if (sub === dom) {
+        return true;
+      }
+      if (sub.length === 1 && sub[0].semver === ANY) {
+        if (dom.length === 1 && dom[0].semver === ANY) {
+          return true;
+        } else if (options.includePrerelease) {
+          sub = minimumVersionWithPreRelease;
+        } else {
+          sub = minimumVersion;
+        }
+      }
+      if (dom.length === 1 && dom[0].semver === ANY) {
+        if (options.includePrerelease) {
+          return true;
+        } else {
+          dom = minimumVersion;
+        }
+      }
+      const eqSet = /* @__PURE__ */ new Set();
+      let gt, lt;
+      for (const c of sub) {
+        if (c.operator === ">" || c.operator === ">=") {
+          gt = higherGT(gt, c, options);
+        } else if (c.operator === "<" || c.operator === "<=") {
+          lt = lowerLT(lt, c, options);
+        } else {
+          eqSet.add(c.semver);
+        }
+      }
+      if (eqSet.size > 1) {
+        return null;
+      }
+      let gtltComp;
+      if (gt && lt) {
+        gtltComp = compare(gt.semver, lt.semver, options);
+        if (gtltComp > 0) {
+          return null;
+        } else if (gtltComp === 0 && (gt.operator !== ">=" || lt.operator !== "<=")) {
+          return null;
+        }
+      }
+      for (const eq of eqSet) {
+        if (gt && !satisfies(eq, String(gt), options)) {
+          return null;
+        }
+        if (lt && !satisfies(eq, String(lt), options)) {
+          return null;
+        }
+        for (const c of dom) {
+          if (!satisfies(eq, String(c), options)) {
+            return false;
+          }
+        }
+        return true;
+      }
+      let higher, lower;
+      let hasDomLT, hasDomGT;
+      let needDomLTPre = lt && !options.includePrerelease && lt.semver.prerelease.length ? lt.semver : false;
+      let needDomGTPre = gt && !options.includePrerelease && gt.semver.prerelease.length ? gt.semver : false;
+      if (needDomLTPre && needDomLTPre.prerelease.length === 1 && lt.operator === "<" && needDomLTPre.prerelease[0] === 0) {
+        needDomLTPre = false;
+      }
+      for (const c of dom) {
+        hasDomGT = hasDomGT || c.operator === ">" || c.operator === ">=";
+        hasDomLT = hasDomLT || c.operator === "<" || c.operator === "<=";
+        if (gt) {
+          if (needDomGTPre) {
+            if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomGTPre.major && c.semver.minor === needDomGTPre.minor && c.semver.patch === needDomGTPre.patch) {
+              needDomGTPre = false;
+            }
+          }
+          if (c.operator === ">" || c.operator === ">=") {
+            higher = higherGT(gt, c, options);
+            if (higher === c && higher !== gt) {
+              return false;
+            }
+          } else if (gt.operator === ">=" && !c.test(gt.semver)) {
+            return false;
+          }
+        }
+        if (lt) {
+          if (needDomLTPre) {
+            if (c.semver.prerelease && c.semver.prerelease.length && c.semver.major === needDomLTPre.major && c.semver.minor === needDomLTPre.minor && c.semver.patch === needDomLTPre.patch) {
+              needDomLTPre = false;
+            }
+          }
+          if (c.operator === "<" || c.operator === "<=") {
+            lower = lowerLT(lt, c, options);
+            if (lower === c && lower !== lt) {
+              return false;
+            }
+          } else if (lt.operator === "<=" && !c.test(lt.semver)) {
+            return false;
+          }
+        }
+        if (!c.operator && (lt || gt) && gtltComp !== 0) {
+          return false;
+        }
+      }
+      if (gt && hasDomLT && !lt && gtltComp !== 0) {
+        return false;
+      }
+      if (lt && hasDomGT && !gt && gtltComp !== 0) {
+        return false;
+      }
+      if (needDomGTPre || needDomLTPre) {
+        return false;
+      }
+      return true;
+    };
+    var higherGT = (a, b, options) => {
+      if (!a) {
+        return b;
+      }
+      const comp = compare(a.semver, b.semver, options);
+      return comp > 0 ? a : comp < 0 ? b : b.operator === ">" && a.operator === ">=" ? b : a;
+    };
+    var lowerLT = (a, b, options) => {
+      if (!a) {
+        return b;
+      }
+      const comp = compare(a.semver, b.semver, options);
+      return comp < 0 ? a : comp > 0 ? b : b.operator === "<" && a.operator === "<=" ? b : a;
+    };
+    module.exports = subset;
+  }
+});
+
+// node_modules/semver/index.js
+var require_semver2 = __commonJS({
+  "node_modules/semver/index.js"(exports, module) {
+    "use strict";
+    var internalRe = require_re();
+    var constants = require_constants();
+    var SemVer = require_semver();
+    var identifiers = require_identifiers();
+    var parse = require_parse();
+    var valid = require_valid();
+    var clean = require_clean();
+    var inc = require_inc();
+    var diff = require_diff();
+    var major = require_major();
+    var minor = require_minor();
+    var patch = require_patch();
+    var prerelease = require_prerelease();
+    var compare = require_compare();
+    var rcompare = require_rcompare();
+    var compareLoose = require_compare_loose();
+    var compareBuild = require_compare_build();
+    var sort = require_sort();
+    var rsort = require_rsort();
+    var gt = require_gt();
+    var lt = require_lt();
+    var eq = require_eq();
+    var neq = require_neq();
+    var gte = require_gte();
+    var lte = require_lte();
+    var cmp = require_cmp();
+    var coerce = require_coerce();
+    var truncate = require_truncate();
+    var Comparator = require_comparator();
+    var Range = require_range();
+    var satisfies = require_satisfies();
+    var toComparators = require_to_comparators();
+    var maxSatisfying = require_max_satisfying();
+    var minSatisfying = require_min_satisfying();
+    var minVersion = require_min_version();
+    var validRange2 = require_valid2();
+    var outside = require_outside();
+    var gtr = require_gtr();
+    var ltr = require_ltr();
+    var intersects = require_intersects();
+    var simplifyRange = require_simplify();
+    var subset = require_subset();
+    module.exports = {
+      parse,
+      valid,
+      clean,
+      inc,
+      diff,
+      major,
+      minor,
+      patch,
+      prerelease,
+      compare,
+      rcompare,
+      compareLoose,
+      compareBuild,
+      sort,
+      rsort,
+      gt,
+      lt,
+      eq,
+      neq,
+      gte,
+      lte,
+      cmp,
+      coerce,
+      truncate,
+      Comparator,
+      Range,
+      satisfies,
+      toComparators,
+      maxSatisfying,
+      minSatisfying,
+      minVersion,
+      validRange: validRange2,
+      outside,
+      gtr,
+      ltr,
+      intersects,
+      simplifyRange,
+      subset,
+      SemVer,
+      re: internalRe.re,
+      src: internalRe.src,
+      tokens: internalRe.t,
+      SEMVER_SPEC_VERSION: constants.SEMVER_SPEC_VERSION,
+      RELEASE_TYPES: constants.RELEASE_TYPES,
+      compareIdentifiers: identifiers.compareIdentifiers,
+      rcompareIdentifiers: identifiers.rcompareIdentifiers
+    };
+  }
+});
+
+// src/config.ts
+var workerNamePattern = /^[a-z](?:[a-z0-9-]{0,52}[a-z0-9])?$/;
+var accountIdPattern = /^[a-f0-9]{32}$/;
+var scopePattern = /^@[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?$/;
+var bindingPattern = /^[A-Z][A-Z0-9_]*$/;
+var hostnamePattern = /^(?=.{1,253}$)(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var reservedBindings = /* @__PURE__ */ new Set(["PKGFLARE_DB", "PKGFLARE_BUCKET", "PKGFLARE_CONFIG"]);
+function isObject(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function normalizeConfig(value) {
+  if (!isObject(value)) throw new Error("configuration must be an object");
+  const { name, scopes: scopeValues, accountId, hostname, auth } = value;
+  if (typeof name !== "string" || !workerNamePattern.test(name)) {
+    throw new Error("name must be a lowercase Cloudflare resource name of at most 54 characters");
+  }
+  if (accountId !== void 0 && (typeof accountId !== "string" || !accountIdPattern.test(accountId))) {
+    throw new Error("accountId must be a 32-character lowercase hexadecimal Cloudflare account ID");
+  }
+  if (!Array.isArray(scopeValues) || scopeValues.length === 0 || scopeValues.some((scope) => typeof scope !== "string")) {
+    throw new Error("at least one package scope is required");
+  }
+  const scopes = [...new Set(scopeValues)];
+  for (const scope of scopes) {
+    if (!scopePattern.test(scope)) {
+      throw new Error(`invalid package scope: ${scope}`);
+    }
+  }
+  if (hostname !== void 0 && (typeof hostname !== "string" || !hostnamePattern.test(hostname))) {
+    throw new Error("hostname must be a valid DNS hostname without a scheme or path");
+  }
+  if (!isObject(auth) || auth.provider !== "secrets") {
+    throw new Error("unsupported authentication provider");
+  }
+  if (!Array.isArray(auth.tokens) || auth.tokens.length === 0) {
+    throw new Error("at least one authentication token binding is required");
+  }
+  const seenBindings = /* @__PURE__ */ new Set();
+  const tokens = auth.tokens.map((tokenValue) => {
+    if (!isObject(tokenValue) || typeof tokenValue.binding !== "string") {
+      throw new Error("authentication token binding must be an object with a binding name");
+    }
+    const { binding, permissions: permissionValues } = tokenValue;
+    if (!bindingPattern.test(binding)) {
+      throw new Error(`invalid secret binding: ${binding}`);
+    }
+    if (reservedBindings.has(binding)) {
+      throw new Error(`secret binding is reserved by pkgflare: ${binding}`);
+    }
+    if (seenBindings.has(binding)) {
+      throw new Error(`duplicate secret binding: ${binding}`);
+    }
+    seenBindings.add(binding);
+    if (!Array.isArray(permissionValues) || permissionValues.length === 0 || permissionValues.some((permission) => permission !== "read" && permission !== "publish")) {
+      throw new Error(`invalid permissions for ${binding}`);
+    }
+    const permissions = [...new Set(permissionValues)];
+    return { binding, permissions };
+  });
+  return {
+    name,
+    scopes,
+    ...accountId === void 0 ? {} : { accountId },
+    ...hostname === void 0 ? {} : { hostname },
+    auth: { provider: "secrets", tokens }
+  };
+}
+
+// src/runtime/response.ts
+function json(value, init = {}) {
+  const headers = new Headers(init.headers);
+  headers.set("content-type", "application/json; charset=utf-8");
+  return new Response(JSON.stringify(value), { ...init, headers });
+}
+function npmError(status, error, reason) {
+  const headers = new Headers({ "cache-control": "no-store" });
+  if (status === 401) {
+    headers.set("www-authenticate", 'Bearer realm="pkgflare"');
+  }
+  return json({ error, reason }, { status, headers });
+}
+function methodNotAllowed(allowed) {
+  const response = npmError(405, "method_not_allowed", "method not allowed");
+  response.headers.set("allow", allowed.join(", "));
+  return response;
+}
+
+// src/runtime/auth.ts
+function bearerToken(request) {
+  const authorization = request.headers.get("authorization");
+  if (authorization === null) return null;
+  const match = /^Bearer[ \t]+([^\s]+)$/i.exec(authorization);
+  return match?.[1] ?? null;
+}
+async function digest(value) {
+  return new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(value)));
+}
+function equalDigest(left, right) {
+  let difference = left.length ^ right.length;
+  const length = Math.max(left.length, right.length);
+  for (let index = 0; index < length; index += 1) {
+    difference |= (left[index] ?? 0) ^ (right[index] ?? 0);
+  }
+  return difference === 0;
+}
+function grants(permissions, required) {
+  return permissions.includes("publish") || permissions.includes(required);
+}
+async function authorize(request, context, required) {
+  const candidate = bearerToken(request);
+  if (candidate === null) {
+    return npmError(401, "unauthorized", "authentication required");
+  }
+  const candidateDigest = await digest(candidate);
+  let authorized = false;
+  for (const token of context.config.auth.tokens) {
+    const secret = context.env[token.binding];
+    if (typeof secret !== "string" || secret.length === 0) continue;
+    const matches = equalDigest(candidateDigest, await digest(secret));
+    authorized ||= matches && grants(token.permissions, required);
+  }
+  return authorized ? null : npmError(403, "forbidden", `token does not grant ${required} access`);
+}
+
+// src/runtime/diagnostics.ts
+function logRegistryError(requestId, operation, error) {
+  console.error(
+    JSON.stringify({
+      level: "error",
+      requestId,
+      operation,
+      errorType: error instanceof Error ? error.name : typeof error
+    })
+  );
+}
+
+// src/runtime/dist-tags.ts
+var import_semver2 = __toESM(require_semver2(), 1);
+
+// src/runtime/package-name.ts
+var import_semver = __toESM(require_semver2(), 1);
+var scopePart = "[a-z0-9](?:[a-z0-9._-]*[a-z0-9])?";
+var packagePart = "[a-z0-9_-][a-z0-9._-]*";
+var packageNamePattern = new RegExp(`^@${scopePart}/${packagePart}$`);
+function parsePackageRoute(pathname) {
+  let decoded;
+  try {
+    decoded = decodeURIComponent(pathname);
+  } catch {
+    return null;
+  }
+  const segments = decoded.split("/").filter(Boolean);
+  const scope = segments[0];
+  const name = segments[1];
+  if (scope === void 0 || name === void 0 || !scope.startsWith("@")) return null;
+  const packageName = `${scope}/${name}`;
+  if (packageName.length > 214 || !packageNamePattern.test(packageName)) return null;
+  return { packageName, remainder: segments.slice(2) };
+}
+function parseDistTagRoute(pathname) {
+  let decoded;
+  try {
+    decoded = decodeURIComponent(pathname);
+  } catch {
+    return null;
+  }
+  const segments = decoded.split("/").filter(Boolean);
+  if (segments[0] !== "-" || segments[1] !== "package" || segments[4] !== "dist-tags" || segments.length > 6) {
+    return null;
+  }
+  const scope = segments[2];
+  const name = segments[3];
+  if (scope === void 0 || name === void 0) return null;
+  const packageName = `${scope}/${name}`;
+  if (packageName.length > 214 || !packageNamePattern.test(packageName)) return null;
+  const tag = segments[5];
+  return tag === void 0 ? { packageName } : { packageName, tag };
+}
+function isAllowedPackage(packageName, scopes) {
+  const separator = packageName.indexOf("/");
+  return separator > 0 && scopes.includes(packageName.slice(0, separator));
+}
+function isValidDistTag(tag) {
+  return /^[a-z0-9][a-z0-9._-]*$/i.test(tag) && (0, import_semver.validRange)(tag, { loose: false }) === null;
+}
+
+// src/runtime/dist-tags.ts
+var maximumDistTagBodyBytes = 256;
+async function readVersion(request) {
+  if (request.body === null) throw new Error("missing body");
+  const reader = request.body.getReader();
+  const decoder = new TextDecoder("utf-8", { fatal: true });
+  let bytesRead = 0;
+  let contents = "";
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      bytesRead += value.byteLength;
+      if (bytesRead > maximumDistTagBodyBytes) {
+        await reader.cancel();
+        throw new PublishTagBodyError(413, "dist-tag request body exceeds 256 bytes");
+      }
+      contents += decoder.decode(value, { stream: true });
+    }
+    contents += decoder.decode();
+    return JSON.parse(contents);
+  } finally {
+    reader.releaseLock();
+  }
+}
+var PublishTagBodyError = class extends Error {
+  constructor(status, message) {
+    super(message);
+    this.status = status;
+  }
+  status;
+};
+async function readDistTags(context, packageName) {
+  if (!isAllowedPackage(packageName, context.config.scopes)) {
+    return npmError(404, "not_found", "package not found");
+  }
+  const result = await context.env.PKGFLARE_DB.prepare(
+    "SELECT tag, version FROM dist_tags WHERE package_name = ?1 ORDER BY tag"
+  ).bind(packageName).all();
+  if (result.results.length === 0) {
+    const packageRow = await context.env.PKGFLARE_DB.prepare(
+      "SELECT 1 AS present FROM packages WHERE name = ?1"
+    ).bind(packageName).first();
+    if (packageRow === null) return npmError(404, "not_found", "package not found");
+  }
+  return json(Object.fromEntries(result.results.map((row) => [row.tag, row.version])), {
+    headers: { "cache-control": "private, no-store" }
+  });
+}
+async function setDistTag(request, context, packageName, tag) {
+  if (!isAllowedPackage(packageName, context.config.scopes)) {
+    return npmError(404, "not_found", "package not found");
+  }
+  if (!isValidDistTag(tag)) return npmError(400, "bad_request", "dist-tag is invalid");
+  let version;
+  try {
+    version = await readVersion(request);
+  } catch (error) {
+    if (error instanceof PublishTagBodyError) {
+      return npmError(error.status, "payload_too_large", error.message);
+    }
+    return npmError(400, "bad_request", "dist-tag target must be a JSON version string");
+  }
+  if (typeof version !== "string" || (0, import_semver2.valid)(version, { loose: false }) !== version) {
+    return npmError(400, "bad_request", "dist-tag target must be a valid strict semver version");
+  }
+  const result = await context.env.PKGFLARE_DB.prepare(
+    "INSERT INTO dist_tags (package_name, tag, version) SELECT package_name, ?3, version FROM versions WHERE package_name = ?1 AND version = ?2 ON CONFLICT(package_name, tag) DO UPDATE SET version = excluded.version"
+  ).bind(packageName, version, tag).run();
+  if (result.meta.changes === 0) {
+    return npmError(404, "not_found", "package version not found");
+  }
+  return json({ ok: true });
+}
+async function deleteDistTag(context, packageName, tag) {
+  if (!isAllowedPackage(packageName, context.config.scopes)) {
+    return npmError(404, "not_found", "package not found");
+  }
+  if (!isValidDistTag(tag)) return npmError(400, "bad_request", "dist-tag is invalid");
+  const result = await context.env.PKGFLARE_DB.prepare(
+    "DELETE FROM dist_tags WHERE package_name = ?1 AND tag = ?2"
+  ).bind(packageName, tag).run();
+  return result.meta.changes === 0 ? npmError(404, "not_found", "dist-tag not found") : json({ ok: true });
+}
+
+// src/runtime/publish.ts
+var import_semver3 = __toESM(require_semver2(), 1);
+
+// src/runtime/publish-stream.ts
+var partSize = 5 * 1024 * 1024;
+var metadataLimit = 1024 * 1024;
+var maximumDepth = 128;
+var base64Alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var base64Values = new Int16Array(128).fill(-1);
+for (let index = 0; index < base64Alphabet.length; index += 1) {
+  base64Values[base64Alphabet.charCodeAt(index)] = index;
+}
+var PublishStreamError = class extends Error {
+  constructor(status, code, message) {
+    super(message);
+    this.status = status;
+    this.code = code;
+  }
+  status;
+  code;
+};
+function badJson(message = "request body must be valid JSON") {
+  return new PublishStreamError(400, "bad_request", message);
+}
+function hex(bytes) {
+  return [...new Uint8Array(bytes)].map((value) => value.toString(16).padStart(2, "0")).join("");
+}
+function base64(bytes) {
+  let binary = "";
+  for (const value of new Uint8Array(bytes)) binary += String.fromCharCode(value);
+  return btoa(binary);
+}
+function digestStream(algorithm) {
+  const constructor = crypto.DigestStream;
+  return new constructor(algorithm);
+}
+var MultipartTarball = class _MultipartTarball {
+  key;
+  filename;
+  #upload;
+  #sha1 = digestStream("SHA-1");
+  #sha512 = digestStream("SHA-512");
+  #sha1Writer = this.#sha1.getWriter();
+  #sha512Writer = this.#sha512.getWriter();
+  #parts = [];
+  #buffer = new Uint8Array(partSize);
+  #bufferLength = 0;
+  #quartet = [];
+  #base64Ended = false;
+  #finished = false;
+  #aborted = false;
+  #length = 0;
+  #shasum;
+  #integrity;
+  constructor(upload, key, filename) {
+    this.#upload = upload;
+    this.key = key;
+    this.filename = filename;
+  }
+  static async create(bucket, packageName, filename) {
+    const key = `packages/${encodeURIComponent(packageName)}/${crypto.randomUUID()}.tgz`;
+    const upload = await bucket.createMultipartUpload(key, {
+      httpMetadata: { contentType: "application/octet-stream" }
+    });
+    return new _MultipartTarball(upload, key, filename);
+  }
+  get length() {
+    this.#assertFinished();
+    return this.#length;
+  }
+  get shasum() {
+    this.#assertFinished();
+    return this.#shasum ?? "";
+  }
+  get integrity() {
+    this.#assertFinished();
+    return this.#integrity ?? "";
+  }
+  async writeBase64(value) {
+    if (this.#finished || this.#aborted) throw new Error("tarball upload is no longer writable");
+    for (const character of value) {
+      const characterCode = character.charCodeAt(0);
+      if (characterCode === 9 || characterCode === 10 || characterCode === 13 || characterCode === 32) {
+        continue;
+      }
+      if (this.#base64Ended) {
+        throw new PublishStreamError(400, "bad_request", "tarball attachment is not valid base64");
+      }
+      if (character === "=") {
+        this.#quartet.push(-1);
+      } else {
+        const valueIndex = characterCode < base64Values.length ? base64Values[characterCode] ?? -1 : -1;
+        if (valueIndex === -1) {
+          throw new PublishStreamError(
+            400,
+            "bad_request",
+            "tarball attachment is not valid base64"
+          );
+        }
+        this.#quartet.push(valueIndex);
+      }
+      if (this.#quartet.length === 4) {
+        const decoded = this.#decodeQuartet(true);
+        const pending = this.#writeBytes(decoded);
+        if (pending !== void 0) await pending;
+      }
+    }
+  }
+  async finishBase64() {
+    if (this.#finished) return;
+    if (this.#quartet.length === 1 || this.#quartet.some((value) => value < 0)) {
+      throw new PublishStreamError(400, "bad_request", "tarball attachment is not valid base64");
+    }
+    if (this.#quartet.length > 0) {
+      const decoded = this.#decodeQuartet(false);
+      const pending = this.#writeBytes(decoded);
+      if (pending !== void 0) await pending;
+    }
+    if (this.#bufferLength > 0) {
+      await this.#uploadPart(this.#buffer.slice(0, this.#bufferLength));
+      this.#bufferLength = 0;
+    }
+    if (this.#length === 0) {
+      throw new PublishStreamError(400, "bad_request", "tarball attachment must not be empty");
+    }
+    await Promise.all([this.#sha1Writer.close(), this.#sha512Writer.close()]);
+    const [sha1, sha512] = await Promise.all([this.#sha1.digest, this.#sha512.digest]);
+    this.#shasum = hex(sha1);
+    this.#integrity = `sha512-${base64(sha512)}`;
+    this.#finished = true;
+  }
+  async complete() {
+    this.#assertFinished();
+    if (this.#aborted) throw new Error("tarball upload was aborted");
+    return this.#upload.complete(this.#parts);
+  }
+  async abort() {
+    if (this.#aborted) return;
+    this.#aborted = true;
+    const reason = new Error("tarball upload aborted");
+    await Promise.allSettled([
+      this.#upload.abort(),
+      this.#sha1Writer.abort(reason),
+      this.#sha512Writer.abort(reason),
+      this.#sha1.digest,
+      this.#sha512.digest
+    ]);
+  }
+  #decodeQuartet(padded) {
+    const [first, second, third = -1, fourth = -1] = this.#quartet;
+    this.#quartet = [];
+    if (first === void 0 || second === void 0 || first < 0 || second < 0) {
+      throw new PublishStreamError(400, "bad_request", "tarball attachment is not valid base64");
+    }
+    if (third < 0) {
+      if (padded && fourth !== -1 || !padded && this.#base64Ended || (second & 15) !== 0) {
+        throw new PublishStreamError(400, "bad_request", "tarball attachment is not valid base64");
+      }
+      this.#base64Ended = true;
+      return [first << 2 | second >> 4];
+    }
+    if (fourth < 0) {
+      if ((third & 3) !== 0) {
+        throw new PublishStreamError(400, "bad_request", "tarball attachment is not valid base64");
+      }
+      const bytes = [first << 2 | second >> 4, (second & 15) << 4 | third >> 2];
+      this.#base64Ended = true;
+      return bytes;
+    }
+    return [
+      first << 2 | second >> 4,
+      (second & 15) << 4 | third >> 2,
+      (third & 3) << 6 | fourth
+    ];
+  }
+  #writeBytes(bytes) {
+    let pending;
+    for (const byte of bytes) {
+      this.#buffer[this.#bufferLength] = byte;
+      this.#bufferLength += 1;
+      this.#length += 1;
+      if (this.#bufferLength === partSize) {
+        const fullPart = this.#buffer;
+        this.#buffer = new Uint8Array(partSize);
+        this.#bufferLength = 0;
+        pending = this.#uploadPart(fullPart);
+      }
+    }
+    return pending;
+  }
+  async #uploadPart(bytes) {
+    await Promise.all([this.#sha1Writer.write(bytes), this.#sha512Writer.write(bytes)]);
+    const part = await this.#upload.uploadPart(this.#parts.length + 1, bytes);
+    this.#parts.push(part);
+  }
+  #assertFinished() {
+    if (!this.#finished) throw new Error("tarball upload is not finished");
+  }
+};
+var PublishJsonScanner = class {
+  #decoder = new TextDecoder("utf-8", { fatal: true });
+  #encoder = new TextEncoder();
+  #bucket;
+  #packageName;
+  #frames = [];
+  #metadataParts = [];
+  #metadataPending = "";
+  #metadataBytes = 0;
+  #rootState = "value";
+  #mode = "default";
+  #stringRole = "value";
+  #stringRaw = "";
+  #stringPath = [];
+  #stringIsAttachment = false;
+  #escapeState = "none";
+  #unicodeEscape = "";
+  #primitive = "";
+  #attachment;
+  #attachmentText = "";
+  constructor(bucket, packageName) {
+    this.#bucket = bucket;
+    this.#packageName = packageName;
+  }
+  async write(bytes) {
+    let text;
+    try {
+      text = this.#decoder.decode(bytes, { stream: true });
+    } catch {
+      throw badJson("request body must be valid UTF-8 JSON");
+    }
+    await this.#consume(text);
+    this.#flushMetadata();
+  }
+  async finish() {
+    let tail;
+    try {
+      tail = this.#decoder.decode();
+    } catch {
+      throw badJson("request body must be valid UTF-8 JSON");
+    }
+    await this.#consume(tail);
+    if (this.#mode === "primitive") this.#finishPrimitive();
+    if (this.#mode !== "default" || this.#frames.length !== 0 || this.#rootState !== "done") {
+      throw badJson();
+    }
+    this.#flushMetadata();
+    await this.#flushAttachmentText();
+    const attachment = this.#attachment;
+    if (attachment === void 0) {
+      throw new PublishStreamError(
+        400,
+        "bad_request",
+        "publish must contain one tarball attachment"
+      );
+    }
+    await attachment.finishBase64();
+    let document;
+    try {
+      document = JSON.parse(this.#metadataParts.join(""));
+    } catch {
+      throw badJson();
+    }
+    return { document, tarball: attachment };
+  }
+  async abort() {
+    await this.#attachment?.abort();
+  }
+  async #consume(text) {
+    for (const character of text) {
+      let pending;
+      if (this.#mode === "string") {
+        pending = this.#consumeString(character);
+      } else if (this.#mode === "primitive") {
+        pending = this.#consumePrimitive(character);
+      } else {
+        pending = this.#consumeDefault(character);
+      }
+      if (pending !== void 0) await pending;
+    }
+  }
+  #consumeDefault(character) {
+    if (/\s/.test(character)) {
+      this.#appendMetadata(character);
+      return void 0;
+    }
+    if (character === '"') {
+      const frame = this.#frames.at(-1);
+      const isKey = frame?.type === "object" && (frame.state === "keyOrEnd" || frame.state === "key");
+      if (!isKey && !this.#expectsValue()) throw badJson();
+      this.#mode = "string";
+      this.#stringRole = isKey ? "key" : "value";
+      this.#stringPath = isKey ? [] : this.#currentValuePath();
+      this.#stringIsAttachment = this.#isAttachmentPath(this.#stringPath);
+      this.#stringRaw = '"';
+      this.#escapeState = "none";
+      this.#unicodeEscape = "";
+      this.#appendMetadata('"');
+      if (this.#stringIsAttachment) {
+        if (this.#attachment !== void 0) {
+          throw new PublishStreamError(
+            400,
+            "bad_request",
+            "publish must contain exactly one tarball attachment"
+          );
+        }
+        const filename = this.#stringPath[1];
+        if (typeof filename !== "string") throw badJson();
+        return MultipartTarball.create(this.#bucket, this.#packageName, filename).then(
+          (attachment) => {
+            this.#attachment = attachment;
+          }
+        );
+      }
+      return void 0;
+    }
+    if (character === "{" || character === "[") {
+      if (!this.#expectsValue()) throw badJson();
+      if (this.#frames.length >= maximumDepth) {
+        throw new PublishStreamError(400, "bad_request", "JSON nesting exceeds 128 levels");
+      }
+      const path = this.#currentValuePath();
+      this.#appendMetadata(character);
+      this.#frames.push(
+        character === "{" ? { type: "object", path, state: "keyOrEnd", keys: /* @__PURE__ */ new Set() } : { type: "array", path, state: "valueOrEnd", index: 0 }
+      );
+      return void 0;
+    }
+    if (character === "}" || character === "]") {
+      const frame = this.#frames.at(-1);
+      const valid = character === "}" ? frame?.type === "object" && (frame.state === "keyOrEnd" || frame.state === "commaOrEnd") : frame?.type === "array" && (frame.state === "valueOrEnd" || frame.state === "commaOrEnd");
+      if (!valid) throw badJson();
+      this.#appendMetadata(character);
+      this.#frames.pop();
+      this.#completeValue();
+      return void 0;
+    }
+    if (character === ":") {
+      const frame = this.#frames.at(-1);
+      if (frame?.type !== "object" || frame.state !== "colon") throw badJson();
+      frame.state = "value";
+      this.#appendMetadata(character);
+      return void 0;
+    }
+    if (character === ",") {
+      const frame = this.#frames.at(-1);
+      if (frame?.state !== "commaOrEnd") throw badJson();
+      if (frame.type === "object") {
+        frame.state = "key";
+        delete frame.currentKey;
+      } else {
+        frame.state = "value";
+        frame.index += 1;
+      }
+      this.#appendMetadata(character);
+      return void 0;
+    }
+    if (this.#expectsValue() && /[-0-9tfn]/.test(character)) {
+      this.#mode = "primitive";
+      this.#primitive = character;
+      this.#appendMetadata(character);
+      return void 0;
+    }
+    throw badJson();
+  }
+  #consumeString(character) {
+    if (this.#escapeState === "unicode") {
+      if (!/[0-9a-f]/i.test(character)) throw badJson();
+      this.#unicodeEscape += character;
+      if (!this.#stringIsAttachment) this.#appendStringRaw(character);
+      if (this.#unicodeEscape.length === 4) {
+        if (this.#stringIsAttachment) {
+          const pending = this.#appendAttachmentCharacter(
+            String.fromCharCode(Number.parseInt(this.#unicodeEscape, 16))
+          );
+          this.#escapeState = "none";
+          return pending;
+        }
+        this.#escapeState = "none";
+      }
+      return void 0;
+    }
+    if (this.#escapeState === "escaped") {
+      if (character === "u") {
+        if (!this.#stringIsAttachment) this.#appendStringRaw(character);
+        this.#unicodeEscape = "";
+        this.#escapeState = "unicode";
+        return void 0;
+      }
+      const escapedCharacters = {
+        '"': '"',
+        "\\": "\\",
+        "/": "/",
+        b: "\b",
+        f: "\f",
+        n: "\n",
+        r: "\r",
+        t: "	"
+      };
+      const decoded = escapedCharacters[character];
+      if (decoded === void 0) throw badJson();
+      this.#escapeState = "none";
+      if (this.#stringIsAttachment) return this.#appendAttachmentCharacter(decoded);
+      this.#appendStringRaw(character);
+      return void 0;
+    }
+    if (character === "\\") {
+      if (!this.#stringIsAttachment) this.#appendStringRaw(character);
+      this.#escapeState = "escaped";
+      return void 0;
+    }
+    if (character === '"') {
+      const pending = this.#flushAttachmentText();
+      this.#appendMetadata('"');
+      if (this.#stringRole === "key") this.#finishKey();
+      else this.#completeValue();
+      this.#mode = "default";
+      return pending;
+    }
+    if (character.charCodeAt(0) < 32) throw badJson();
+    if (this.#stringIsAttachment) return this.#appendAttachmentCharacter(character);
+    this.#appendStringRaw(character);
+    return void 0;
+  }
+  #consumePrimitive(character) {
+    if (/\s/.test(character) || character === "," || character === "}" || character === "]") {
+      this.#finishPrimitive();
+      return this.#consumeDefault(character);
+    }
+    if (character === ":" || character === "{" || character === "[" || character === '"') {
+      throw badJson();
+    }
+    this.#primitive += character;
+    this.#appendMetadata(character);
+    return void 0;
+  }
+  #finishPrimitive() {
+    try {
+      const parsed = JSON.parse(this.#primitive);
+      if (typeof parsed !== "number" && typeof parsed !== "boolean" && parsed !== null)
+        throw badJson();
+    } catch {
+      throw badJson();
+    }
+    this.#primitive = "";
+    this.#mode = "default";
+    this.#completeValue();
+  }
+  #finishKey() {
+    const frame = this.#frames.at(-1);
+    if (frame?.type !== "object") throw badJson();
+    let key;
+    try {
+      key = JSON.parse(`${this.#stringRaw}"`);
+    } catch {
+      throw badJson();
+    }
+    if (frame.keys.has(key)) {
+      throw new PublishStreamError(400, "bad_request", `duplicate JSON key: ${key}`);
+    }
+    frame.keys.add(key);
+    frame.currentKey = key;
+    frame.state = "colon";
+  }
+  #expectsValue() {
+    const frame = this.#frames.at(-1);
+    if (frame === void 0) return this.#rootState === "value";
+    return frame.type === "object" ? frame.state === "value" : frame.state === "valueOrEnd" || frame.state === "value";
+  }
+  #currentValuePath() {
+    const frame = this.#frames.at(-1);
+    if (frame === void 0) return [];
+    if (frame.type === "array") return [...frame.path, frame.index];
+    if (frame.currentKey === void 0) throw badJson();
+    return [...frame.path, frame.currentKey];
+  }
+  #completeValue() {
+    const frame = this.#frames.at(-1);
+    if (frame === void 0) {
+      if (this.#rootState !== "value") throw badJson();
+      this.#rootState = "done";
+      return;
+    }
+    if (frame.type === "object") {
+      if (frame.state !== "value") throw badJson();
+      frame.state = "commaOrEnd";
+    } else {
+      if (frame.state !== "value" && frame.state !== "valueOrEnd") throw badJson();
+      frame.state = "commaOrEnd";
+    }
+  }
+  #isAttachmentPath(path) {
+    return path.length === 3 && path[0] === "_attachments" && typeof path[1] === "string" && path[2] === "data";
+  }
+  #appendStringRaw(character) {
+    if (this.#stringRole === "key") this.#stringRaw += character;
+    this.#appendMetadata(character);
+  }
+  #appendAttachmentCharacter(character) {
+    if (character.length !== 1 || character.charCodeAt(0) > 127) {
+      throw new PublishStreamError(400, "bad_request", "tarball attachment is not valid base64");
+    }
+    this.#attachmentText += character;
+    if (this.#attachmentText.length >= 8192) return this.#flushAttachmentText();
+    return void 0;
+  }
+  #flushAttachmentText() {
+    if (this.#attachmentText === "") return void 0;
+    const value = this.#attachmentText;
+    this.#attachmentText = "";
+    return this.#attachment?.writeBase64(value);
+  }
+  #appendMetadata(value) {
+    this.#metadataPending += value;
+    if (this.#metadataPending.length >= 8192) this.#flushMetadata();
+  }
+  #flushMetadata() {
+    if (this.#metadataPending === "") return;
+    this.#metadataBytes += this.#encoder.encode(this.#metadataPending).byteLength;
+    if (this.#metadataBytes > metadataLimit) {
+      throw new PublishStreamError(413, "payload_too_large", "publish metadata exceeds 1 MiB");
+    }
+    this.#metadataParts.push(this.#metadataPending);
+    this.#metadataPending = "";
+  }
+};
+async function parsePublishRequest(request, bucket, packageName) {
+  if (request.body === null) throw badJson();
+  const scanner = new PublishJsonScanner(bucket, packageName);
+  const reader = request.body.getReader();
+  try {
+    while (true) {
+      const { done, value } = await reader.read();
+      if (done) break;
+      await scanner.write(value);
+    }
+    return await scanner.finish();
+  } catch (error) {
+    await reader.cancel().catch(() => void 0);
+    await scanner.abort().catch(() => void 0);
+    if (error instanceof PublishStreamError) throw error;
+    throw error;
+  } finally {
+    reader.releaseLock();
+  }
+}
+
+// src/runtime/publish.ts
+var PublishError = class extends Error {
+  constructor(status, code, message) {
+    super(message);
+    this.status = status;
+    this.code = code;
+  }
+  status;
+  code;
+};
+function object(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function validateDocument(value, pathPackageName, scopes, tarball) {
+  if (!object(value)) {
+    throw new PublishError(400, "bad_request", "publish document must be an object");
+  }
+  const document = value;
+  if (document.name !== pathPackageName || document._id !== void 0 && document._id !== pathPackageName) {
+    throw new PublishError(400, "bad_request", "package name does not match request path");
+  }
+  if (!isAllowedPackage(pathPackageName, scopes)) {
+    throw new PublishError(403, "forbidden", "package scope is not configured for this registry");
+  }
+  if (!object(document.versions) || Object.keys(document.versions).length !== 1) {
+    throw new PublishError(400, "bad_request", "publish must contain exactly one version");
+  }
+  const [versionEntry] = Object.entries(document.versions);
+  if (versionEntry === void 0 || (0, import_semver3.valid)(versionEntry[0], { loose: false }) !== versionEntry[0]) {
+    throw new PublishError(400, "bad_request", "package version must be valid strict semver");
+  }
+  const [version, manifestValue] = versionEntry;
+  if (!object(manifestValue) || manifestValue.name !== pathPackageName || manifestValue.version !== version) {
+    throw new PublishError(
+      400,
+      "bad_request",
+      "manifest name and version must match the publish document"
+    );
+  }
+  if (!object(document["dist-tags"]) || Object.keys(document["dist-tags"]).length === 0) {
+    throw new PublishError(400, "bad_request", "at least one dist-tag is required");
+  }
+  const tags = {};
+  for (const [tag, target] of Object.entries(document["dist-tags"])) {
+    if (!/^[a-z0-9][a-z0-9._-]*$/i.test(tag) || target !== version) {
+      throw new PublishError(400, "bad_request", "dist-tags must reference the published version");
+    }
+    tags[tag] = version;
+  }
+  if (!object(document._attachments) || Object.keys(document._attachments).length !== 1) {
+    throw new PublishError(
+      400,
+      "bad_request",
+      "publish must contain exactly one tarball attachment"
+    );
+  }
+  const [attachmentEntry] = Object.entries(document._attachments);
+  if (attachmentEntry === void 0 || !object(attachmentEntry[1])) {
+    throw new PublishError(400, "bad_request", "tarball attachment is invalid");
+  }
+  const [attachmentName, attachment] = attachmentEntry;
+  const packageBasename = pathPackageName.slice(pathPackageName.indexOf("/") + 1);
+  const filename = `${packageBasename}-${version}.tgz`;
+  const standardScopedName = `${pathPackageName}-${version}.tgz`;
+  if (attachmentName !== filename && attachmentName !== standardScopedName || attachmentName !== tarball.filename || typeof attachment.data !== "string") {
+    throw new PublishError(400, "bad_request", "tarball attachment is invalid");
+  }
+  if (attachment.content_type !== void 0 && attachment.content_type !== "application/octet-stream") {
+    throw new PublishError(
+      400,
+      "bad_request",
+      "tarball attachment has an unsupported content type"
+    );
+  }
+  if (attachment.length !== void 0 && attachment.length !== tarball.length) {
+    throw new PublishError(400, "bad_request", "tarball attachment length does not match its data");
+  }
+  return {
+    packageName: pathPackageName,
+    version,
+    manifest: manifestValue,
+    tags,
+    filename,
+    tarball
+  };
+}
+function verifyClientChecksums(manifest, shasum, integrity) {
+  if (manifest.dist?.shasum !== void 0 && manifest.dist.shasum !== shasum) {
+    throw new PublishError(400, "bad_request", "tarball SHA-1 does not match manifest");
+  }
+  if (manifest.dist?.integrity !== void 0 && manifest.dist.integrity !== integrity) {
+    throw new PublishError(400, "bad_request", "tarball integrity does not match manifest");
+  }
+}
+async function reconcileCommit(context, publish) {
+  const { shasum, integrity } = publish.tarball;
+  let committed;
+  try {
+    committed = await context.env.PKGFLARE_DB.prepare(
+      "SELECT tarball_key, shasum, integrity FROM versions WHERE package_name = ?1 AND version = ?2"
+    ).bind(publish.packageName, publish.version).first();
+  } catch (error) {
+    logRegistryError(context.requestId, "publish_d1_reconcile", error);
+    return npmError(503, "storage_error", "publish outcome is unknown; retry the same version");
+  }
+  if (committed?.tarball_key === publish.tarball.key && committed.shasum === shasum && committed.integrity === integrity) {
+    return json({ ok: true, id: publish.packageName, rev: publish.version }, { status: 201 });
+  }
+  if (committed !== null) {
+    await context.env.PKGFLARE_BUCKET.delete(publish.tarball.key).catch((error) => {
+      logRegistryError(context.requestId, "publish_r2_cleanup", error);
+    });
+    return npmError(409, "conflict", "package version already exists");
+  }
+  return npmError(503, "storage_error", "publish was not committed; retrying is safe");
+}
+async function publishPackage(request, context, packageName) {
+  if (!isAllowedPackage(packageName, context.config.scopes)) {
+    return npmError(403, "forbidden", "package scope is not configured for this registry");
+  }
+  let parsed;
+  try {
+    parsed = await parsePublishRequest(request, context.env.PKGFLARE_BUCKET, packageName);
+  } catch (error) {
+    if (error instanceof PublishStreamError) {
+      return npmError(error.status, error.code, error.message);
+    }
+    logRegistryError(context.requestId, "publish_parse", error);
+    return npmError(503, "storage_error", "publish request could not be stored; retry is safe");
+  }
+  let completed = false;
+  try {
+    const publish = validateDocument(
+      parsed.document,
+      packageName,
+      context.config.scopes,
+      parsed.tarball
+    );
+    const existing = await context.env.PKGFLARE_DB.prepare(
+      "SELECT 1 AS present FROM versions WHERE package_name = ?1 AND version = ?2"
+    ).bind(publish.packageName, publish.version).first();
+    if (existing !== null) {
+      await publish.tarball.abort();
+      return npmError(409, "conflict", "package version already exists");
+    }
+    const { shasum, integrity } = publish.tarball;
+    verifyClientChecksums(publish.manifest, shasum, integrity);
+    const stored = await publish.tarball.complete();
+    completed = true;
+    if (stored.size !== publish.tarball.length) {
+      await context.env.PKGFLARE_BUCKET.delete(publish.tarball.key).catch(() => void 0);
+      logRegistryError(context.requestId, "publish_r2_size", new Error("stored size mismatch"));
+      return npmError(503, "storage_error", "tarball storage could not be verified");
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const manifest = {
+      ...publish.manifest,
+      dist: {
+        ...publish.manifest.dist,
+        shasum,
+        integrity
+      }
+    };
+    const statements = [
+      context.env.PKGFLARE_DB.prepare(
+        "INSERT INTO packages (name, created_at, updated_at) VALUES (?1, ?2, ?2) ON CONFLICT(name) DO UPDATE SET updated_at = excluded.updated_at"
+      ).bind(publish.packageName, now),
+      context.env.PKGFLARE_DB.prepare(
+        "INSERT INTO versions (package_name, version, manifest_json, tarball_key, tarball_file, shasum, integrity, tarball_size, published_at) VALUES (?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8, ?9)"
+      ).bind(
+        publish.packageName,
+        publish.version,
+        JSON.stringify(manifest),
+        publish.tarball.key,
+        publish.filename,
+        shasum,
+        integrity,
+        publish.tarball.length,
+        now
+      ),
+      ...Object.entries(publish.tags).map(
+        ([tag, version]) => context.env.PKGFLARE_DB.prepare(
+          "INSERT INTO dist_tags (package_name, tag, version) VALUES (?1, ?2, ?3) ON CONFLICT(package_name, tag) DO UPDATE SET version = excluded.version"
+        ).bind(publish.packageName, tag, version)
+      )
+    ];
+    try {
+      await context.env.PKGFLARE_DB.batch(statements);
+      return json({ ok: true, id: publish.packageName, rev: publish.version }, { status: 201 });
+    } catch (error) {
+      logRegistryError(context.requestId, "publish_d1_commit", error);
+      return reconcileCommit(context, publish);
+    }
+  } catch (error) {
+    if (!completed) await parsed.tarball.abort().catch(() => void 0);
+    if (error instanceof PublishError) return npmError(error.status, error.code, error.message);
+    logRegistryError(context.requestId, "publish", error);
+    return npmError(503, "storage_error", "publish failed; retrying the same version is safe");
+  }
+}
+
+// src/runtime/read.ts
+function tarballUrl(request, packageName, filename) {
+  const url = new URL(request.url);
+  const packagePath = packageName.split("/").map(encodeURIComponent).join("/");
+  return `${url.origin}/${packagePath}/-/${encodeURIComponent(filename)}`;
+}
+function publicManifest(request, packageName, row) {
+  const manifest = JSON.parse(row.manifest_json);
+  return {
+    ...manifest,
+    dist: {
+      ...manifest.dist,
+      tarball: tarballUrl(request, packageName, row.tarball_file),
+      shasum: row.shasum,
+      integrity: row.integrity
+    }
+  };
+}
+async function packageRows(context, packageName) {
+  const [versionsResult, tagsResult] = await context.env.PKGFLARE_DB.batch([
+    context.env.PKGFLARE_DB.prepare(
+      "SELECT version, manifest_json, tarball_file, shasum, integrity, published_at FROM versions WHERE package_name = ?1 ORDER BY published_at"
+    ).bind(packageName),
+    context.env.PKGFLARE_DB.prepare(
+      "SELECT tag, version FROM dist_tags WHERE package_name = ?1 ORDER BY tag"
+    ).bind(packageName)
+  ]);
+  return { versions: versionsResult.results ?? [], tags: tagsResult.results ?? [] };
+}
+async function readPackage(request, context, packageName, selector) {
+  if (!isAllowedPackage(packageName, context.config.scopes)) {
+    return npmError(404, "not_found", "package not found");
+  }
+  const { versions, tags } = await packageRows(context, packageName);
+  if (versions.length === 0) return npmError(404, "not_found", "package not found");
+  if (selector !== void 0) {
+    const selectedVersion = tags.find((row2) => row2.tag === selector)?.version ?? selector;
+    const row = versions.find((candidate) => candidate.version === selectedVersion);
+    return row === void 0 ? npmError(404, "not_found", "package version or dist-tag not found") : json(publicManifest(request, packageName, row), {
+      headers: { "cache-control": "private, no-store" }
+    });
+  }
+  const manifests = Object.fromEntries(
+    versions.map((row) => [row.version, publicManifest(request, packageName, row)])
+  );
+  const distTags = Object.fromEntries(tags.map((row) => [row.tag, row.version]));
+  const publishedTimes = Object.fromEntries(versions.map((row) => [row.version, row.published_at]));
+  return json(
+    {
+      _id: packageName,
+      name: packageName,
+      "dist-tags": distTags,
+      versions: manifests,
+      time: {
+        created: versions[0]?.published_at,
+        modified: versions.at(-1)?.published_at,
+        ...publishedTimes
+      }
+    },
+    { headers: { "cache-control": "private, no-store" } }
+  );
+}
+function contentRange(object2) {
+  if (object2.range === void 0) return null;
+  if ("offset" in object2.range) {
+    const length = object2.range.length ?? object2.size - object2.range.offset;
+    return {
+      header: `bytes ${String(object2.range.offset)}-${String(object2.range.offset + length - 1)}/${String(object2.size)}`,
+      length
+    };
+  }
+  if ("suffix" in object2.range) {
+    return {
+      header: `bytes ${String(object2.size - object2.range.suffix)}-${String(object2.size - 1)}/${String(object2.size)}`,
+      length: object2.range.suffix
+    };
+  }
+  return null;
+}
+async function readTarball(request, context, packageName, filename) {
+  if (!isAllowedPackage(packageName, context.config.scopes)) {
+    return npmError(404, "not_found", "tarball not found");
+  }
+  const row = await context.env.PKGFLARE_DB.prepare(
+    "SELECT tarball_key, shasum, integrity, tarball_size FROM versions WHERE package_name = ?1 AND tarball_file = ?2"
+  ).bind(packageName, filename).first();
+  if (row === null) return npmError(404, "not_found", "tarball not found");
+  const ifNoneMatch = request.headers.get("if-none-match");
+  const range = request.headers.get("range");
+  const object2 = request.method === "HEAD" ? await context.env.PKGFLARE_BUCKET.head(row.tarball_key) : await context.env.PKGFLARE_BUCKET.get(
+    row.tarball_key,
+    range === null ? {} : { range: request.headers }
+  );
+  if (object2 === null) {
+    return npmError(503, "storage_inconsistent", "published tarball is temporarily unavailable");
+  }
+  const headers = new Headers({
+    "accept-ranges": "bytes",
+    "cache-control": "private, max-age=31536000, immutable",
+    "content-type": "application/octet-stream",
+    etag: object2.httpEtag,
+    "x-pkgflare-integrity": row.integrity
+  });
+  if (ifNoneMatch === object2.httpEtag && range === null) {
+    return new Response(null, { status: 304, headers });
+  }
+  if (request.method === "HEAD") {
+    headers.set("content-length", String(row.tarball_size));
+    return new Response(null, { status: 200, headers });
+  }
+  const body = object2;
+  const rangeHeader = range === null ? null : contentRange(body);
+  if (rangeHeader !== null) {
+    headers.set("content-range", rangeHeader.header);
+    headers.set("content-length", String(rangeHeader.length));
+  } else {
+    headers.set("content-length", String(row.tarball_size));
+  }
+  return new Response(body.body, { status: rangeHeader === null ? 200 : 206, headers });
+}
+
+// src/worker.ts
+function contextFromEnv(env, requestId) {
+  try {
+    return {
+      env,
+      config: normalizeConfig(JSON.parse(env.PKGFLARE_CONFIG)),
+      requestId
+    };
+  } catch {
+    return npmError(500, "configuration_error", "registry configuration is invalid");
+  }
+}
+async function handle(request, env, requestId) {
+  const context = contextFromEnv(env, requestId);
+  if (context instanceof Response) return context;
+  const url = new URL(request.url);
+  if (url.pathname === "/-/ping") {
+    if (request.method !== "GET" && request.method !== "HEAD") {
+      return methodNotAllowed(["GET", "HEAD"]);
+    }
+    const denied = await authorize(request, context, "read");
+    if (denied !== null) return denied;
+    const response = json({ ok: true, name: context.config.name });
+    return request.method === "HEAD" ? new Response(null, { status: response.status, headers: response.headers }) : response;
+  }
+  const distTagRoute = parseDistTagRoute(url.pathname);
+  if (distTagRoute !== null) {
+    if (distTagRoute.tag === void 0) {
+      if (request.method !== "GET" && request.method !== "HEAD") {
+        return methodNotAllowed(["GET", "HEAD"]);
+      }
+      const denied2 = await authorize(request, context, "read");
+      if (denied2 !== null) return denied2;
+      const response = await readDistTags(context, distTagRoute.packageName);
+      return request.method === "HEAD" ? new Response(null, { status: response.status, headers: response.headers }) : response;
+    }
+    if (request.method !== "PUT" && request.method !== "DELETE") {
+      return methodNotAllowed(["PUT", "DELETE"]);
+    }
+    const denied = await authorize(request, context, "publish");
+    if (denied !== null) return denied;
+    return request.method === "PUT" ? setDistTag(request, context, distTagRoute.packageName, distTagRoute.tag) : deleteDistTag(context, distTagRoute.packageName, distTagRoute.tag);
+  }
+  const route = parsePackageRoute(url.pathname);
+  if (route === null) return npmError(404, "not_found", "endpoint not found");
+  if (route.remainder.length === 2 && route.remainder[0] === "-") {
+    if (request.method !== "GET" && request.method !== "HEAD") {
+      return methodNotAllowed(["GET", "HEAD"]);
+    }
+    const denied = await authorize(request, context, "read");
+    if (denied !== null) return denied;
+    return readTarball(request, context, route.packageName, route.remainder[1] ?? "");
+  }
+  if (route.remainder.length > 1) return npmError(404, "not_found", "endpoint not found");
+  if (request.method === "PUT" && route.remainder.length === 0) {
+    const denied = await authorize(request, context, "publish");
+    if (denied !== null) return denied;
+    return publishPackage(request, context, route.packageName);
+  }
+  if ((request.method === "GET" || request.method === "HEAD") && route.remainder.length <= 1) {
+    const denied = await authorize(request, context, "read");
+    if (denied !== null) return denied;
+    const response = await readPackage(request, context, route.packageName, route.remainder[0]);
+    return request.method === "HEAD" ? new Response(null, { status: response.status, headers: response.headers }) : response;
+  }
+  return methodNotAllowed(["GET", "HEAD", "PUT"]);
+}
+var worker_default = {
+  async fetch(request, env) {
+    const requestId = crypto.randomUUID();
+    try {
+      const response = await handle(request, env, requestId);
+      response.headers.set("x-pkgflare-request-id", requestId);
+      return response;
+    } catch (error) {
+      logRegistryError(requestId, "request", error);
+      const response = npmError(500, "internal_error", "unexpected registry error");
+      response.headers.set("x-pkgflare-request-id", requestId);
+      return response;
+    }
+  }
+};
+export {
+  worker_default as default
+};
+//# sourceMappingURL=worker.js.map