@telorun/cli 0.88.0 → 0.90.0

package/dist/controller-runtime.d.ts

@@ -1,3 +1,4 @@
+import type { NativeEntry } from "@telorun/analyzer";
 /** A kernel that can host a controller candidate.
  *
  *  Telo is polyglot: one manifest is loaded by different kernels, and a given
@@ -11,8 +12,8 @@
  *  learn that this filter wants something else. */
 export type Runtime = "nodejs" | "rust";
 /** The language a controller is written in, where the PURL actually determines
- *  it. A bundled `napi` / `wasm` artifact does not: a `.node` file may be Rust,
- *  C++ or Zig, so those contribute no language rather than a guess. */
+ *  it. A bundled `napi` / `dylib` / `wasm` artifact does not: a `.node` file may
+ *  be Rust, C++ or Zig, so those contribute no language rather than a guess. */
 export type Language = "javascript" | "rust";
 export interface KindRuntimeSupport {
     /** Kernels that can load this kind. Empty when it is `portable`, and also when
@@ -33,13 +34,34 @@ export interface KindRuntimeEntry extends KindRuntimeSupport {
 /** Per-kernel coverage across a module's kinds. A kernel that hosts none of them
  *  is absent rather than `"none"`, so the map lists only what actually runs. */
 export type RuntimeCoverage = Partial<Record<Runtime, "full" | "partial">>;
+/** A platform tuple a module's `native:` entries cover. */
+export interface NativePlatform {
+    os: string;
+    arch: string;
+    libc?: string;
+}
+/** What a module's `native:` entries cover. Per module, because no kind declares
+ *  which native file it uses — and a module that needs a native file loads
+ *  nowhere else, whatever its kinds' controllers say. */
+export interface NativeReach {
+    /** Distinct `os`/`arch`/`libc` tuples, sorted. */
+    platforms: NativePlatform[];
+    /** Distinct `abi` values, sorted; an entry stating none (an N-API addon)
+     *  contributes nothing, since it matches every ABI. */
+    abis: string[];
+}
 export interface ModuleRuntimeReport {
     kinds: KindRuntimeEntry[];
     languages: Language[];
     runtimes: RuntimeCoverage;
     /** Every kind is portable — the module carries no controller code at all. */
     portable: boolean;
+    /** Present only for a module declaring `native:` entries. */
+    native?: NativeReach;
 }
+/** The platforms and ABIs a module's `native:` entries cover, or `undefined`
+ *  for a module declaring none. */
+export declare function nativeReach(entries: readonly NativeEntry[]): NativeReach | undefined;
 /** Roll per-kind support up to the module.
  *
  *  A boolean would lie: `std/console` ships Rust controllers for two of its four
@@ -47,5 +69,5 @@ export interface ModuleRuntimeReport {
  *  supported everywhere, which is what keeps a "runs on rust" filter honest for
  *  a module that mixes portable and JS-only kinds. The rollup is recomputed on
  *  every re-ingest, so it self-heals when the kernel set changes. */
-export declare function moduleRuntimeReport(kinds: KindRuntimeEntry[]): ModuleRuntimeReport;
+export declare function moduleRuntimeReport(kinds: KindRuntimeEntry[], native?: NativeReach): ModuleRuntimeReport;
 //# sourceMappingURL=controller-runtime.d.ts.map

package/dist/controller-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"controller-runtime.d.ts","sourceRoot":"","sources":["../src/controller-runtime.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;mDAUmD;AACnD,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAIxC;;uEAEuE;AACvE,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;AA4C7C,MAAM,WAAW,kBAAkB;IACjC;kFAC8E;IAC9E,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB;;yDAEqD;IACrD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CAgBrF;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;CACd;AAED;gFACgF;AAChF,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,QAAQ,EAAE,eAAe,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED;;;;;;qEAMqE;AACrE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,GAAG,mBAAmB,CAqBlF"}
+{"version":3,"file":"controller-runtime.d.ts","sourceRoot":"","sources":["../src/controller-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD;;;;;;;;;;mDAUmD;AACnD,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,MAAM,CAAC;AAIxC;;gFAEgF;AAChF,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,MAAM,CAAC;AAsD7C,MAAM,WAAW,kBAAkB;IACjC;kFAC8E;IAC9E,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB;;yDAEqD;IACrD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,+DAA+D;AAC/D,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,kBAAkB,CAgBrF;AAED,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;CACd;AAED;gFACgF;AAChF,MAAM,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;AAE3E,2DAA2D;AAC3D,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;yDAEyD;AACzD,MAAM,WAAW,WAAW;IAC1B,kDAAkD;IAClD,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B;2DACuD;IACvD,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,QAAQ,EAAE,eAAe,CAAC;IAC1B,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;IAClB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED;mCACmC;AACnC,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,WAAW,EAAE,GAAG,WAAW,GAAG,SAAS,CAcpF;AAED;;;;;;qEAMqE;AACrE,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,gBAAgB,EAAE,EACzB,MAAM,CAAC,EAAE,WAAW,GACnB,mBAAmB,CAsBrB"}

package/dist/controller-runtime.js

@@ -1,5 +1,13 @@
 import { PackageURL } from "packageurl-js";
 const KNOWN_RUNTIMES = ["nodejs", "rust"];
+/** Which kernel opens each bundle format. `napi` is an N-API addon the Node
+ *  kernel loads; `dylib` is a library over the Rust controller ABI, which only
+ *  the Rust kernel opens. */
+const BUNDLE_FORMAT_RUNTIMES = {
+    js: { runtime: "nodejs", language: "javascript" },
+    napi: { runtime: "nodejs", language: null },
+    dylib: { runtime: "rust", language: null },
+};
 /** How one `controllers:` candidate maps onto kernels, or `null` when no kernel
  *  hosts it today (an unparseable PURL, a non-`local` `pkg:telo` namespace, or a
  *  bundle format both kernels report as env-missing).
@@ -7,10 +15,10 @@ const KNOWN_RUNTIMES = ["nodejs", "rust"];
  *  This mirrors what the loaders actually dispatch on. Sources of truth, both of
  *  which must move together with this function:
  *    - Node: `dispatchResolveOne` in `kernel/nodejs/src/controller-loader.ts`
- *      (PURL type → loader) and the `format !== "js"` gate in
+ *      (PURL type → loader) and `NODE_HOSTED_FORMATS` in
  *      `controller-loaders/bundle-loader.ts` (hostable bundle formats).
  *    - Rust: `dispatch_one` in `kernel/rust/src/controller_loader.rs`
- *      (`pkg:cargo` only; everything else is reported unhostable).
+ *      (`pkg:cargo`, and the `dylib` bundle format).
  *  The Rust half cannot be imported from here at all, so at least one constant
  *  is unavoidable; keeping both in one function makes the pair reviewable. */
 function classifyCandidate(purl) {
@@ -31,14 +39,15 @@ function classifyCandidate(purl) {
             return { runtimes: ["nodejs", "rust"], language: "rust" };
         case "npm":
             return { runtimes: ["nodejs"], language: "javascript" };
-        case "telo":
+        case "telo": {
             // Delivery sub-mode lives in the namespace; only `local` (bundled in the
-            // module artifact) exists today. The name is the artifact format, and the
-            // Node bundle loader hosts `js` alone — `napi` / `wasm` are env-missing on
-            // both kernels, so they name no runtime.
-            if (parsed.namespace !== "local" || parsed.name !== "js")
+            // module artifact) exists today. The name is the artifact format; one no
+            // kernel opens (`wasm`) names no runtime.
+            const hosted = parsed.namespace === "local" ? BUNDLE_FORMAT_RUNTIMES[parsed.name] : undefined;
+            if (!hosted)
                 return null;
-            return { runtimes: ["nodejs"], language: "javascript" };
+            return { runtimes: [hosted.runtime], language: hosted.language };
+        }
         default:
             return null;
     }
@@ -64,6 +73,26 @@ export function kindRuntimeSupport(controllers) {
         portable: false,
     };
 }
+/** The platforms and ABIs a module's `native:` entries cover, or `undefined`
+ *  for a module declaring none. */
+export function nativeReach(entries) {
+    if (entries.length === 0)
+        return undefined;
+    const platforms = new Map();
+    const abis = new Set();
+    for (const { selector } of entries) {
+        const { os, arch, libc, abi } = selector;
+        if (os === undefined || arch === undefined)
+            continue;
+        platforms.set([os, arch, libc ?? ""].join("/"), { os, arch, ...(libc ? { libc } : {}) });
+        if (abi !== undefined)
+            abis.add(abi);
+    }
+    return {
+        platforms: [...platforms.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, p]) => p),
+        abis: [...abis].sort(),
+    };
+}
 /** Roll per-kind support up to the module.
  *
  *  A boolean would lie: `std/console` ships Rust controllers for two of its four
@@ -71,7 +100,7 @@ export function kindRuntimeSupport(controllers) {
  *  supported everywhere, which is what keeps a "runs on rust" filter honest for
  *  a module that mixes portable and JS-only kinds. The rollup is recomputed on
  *  every re-ingest, so it self-heals when the kernel set changes. */
-export function moduleRuntimeReport(kinds) {
+export function moduleRuntimeReport(kinds, native) {
     const languages = new Set();
     for (const k of kinds)
         for (const l of k.languages)
@@ -92,6 +121,7 @@ export function moduleRuntimeReport(kinds) {
         // A module with no kinds at all declares no controllers either, which is
         // vacuously portable — and reads correctly for a manifest-only library.
         portable: kinds.every((k) => k.portable),
+        ...(native ? { native } : {}),
     };
 }
 //# sourceMappingURL=controller-runtime.js.map

package/dist/controller-runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"controller-runtime.js","sourceRoot":"","sources":["../src/controller-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAe3C,MAAM,cAAc,GAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAO9D;;;;;;;;;;;;8EAY8E;AAC9E,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,0EAA0E;QAC1E,wEAAwE;QACxE,gEAAgE;QAChE,yEAAyE;QACzE,iEAAiE;QACjE,KAAK,OAAO;YACV,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC5D,KAAK,KAAK;YACR,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAC1D,KAAK,MAAM;YACT,yEAAyE;YACzE,0EAA0E;YAC1E,2EAA2E;YAC3E,yCAAyC;YACzC,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACtE,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAC1D;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAaD,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,WAA8B;IAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAErF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAW,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAY,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,QAAQ;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAChC,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AAmBD;;;;;;qEAMqE;AACrE,MAAM,UAAU,mBAAmB,CAAC,KAAyB;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAY,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACzF,IAAI,SAAS,KAAK,CAAC;gBAAE,SAAS;YAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAChC,QAAQ;QACR,yEAAyE;QACzE,wEAAwE;QACxE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;KACzC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"controller-runtime.js","sourceRoot":"","sources":["../src/controller-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAe3C,MAAM,cAAc,GAAuB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAO9D;;6BAE6B;AAC7B,MAAM,sBAAsB,GAA8E;IACxG,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE;IACjD,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;IAC3C,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC3C,CAAC;AAEF;;;;;;;;;;;;8EAY8E;AAC9E,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,0EAA0E;QAC1E,wEAAwE;QACxE,gEAAgE;QAChE,yEAAyE;QACzE,iEAAiE;QACjE,KAAK,OAAO;YACV,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAC5D,KAAK,KAAK;YACR,OAAO,EAAE,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAC1D,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,yEAAyE;YACzE,yEAAyE;YACzE,0CAA0C;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QACnE,CAAC;QACD;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAaD,+DAA+D;AAC/D,MAAM,UAAU,kBAAkB,CAAC,WAA8B;IAC/D,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAErF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAW,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAY,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,QAAQ;YAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACvD,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAChC,QAAQ,EAAE,KAAK;KAChB,CAAC;AACJ,CAAC;AAuCD;mCACmC;AACnC,MAAM,UAAU,WAAW,CAAC,OAA+B;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAA0B,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,OAAO,EAAE,CAAC;QACnC,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,QAAQ,CAAC;QACzC,IAAI,EAAE,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;YAAE,SAAS;QACrD,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzF,IAAI,GAAG,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACvC,CAAC;IACD,OAAO;QACL,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5F,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE;KACvB,CAAC;AACJ,CAAC;AAED;;;;;;qEAMqE;AACrE,MAAM,UAAU,mBAAmB,CACjC,KAAyB,EACzB,MAAoB;IAEpB,MAAM,SAAS,GAAG,IAAI,GAAG,EAAY,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS;YAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACzF,IAAI,SAAS,KAAK,CAAC;gBAAE,SAAS;YAC9B,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC,CAAC,IAAI,EAAE;QAChC,QAAQ;QACR,yEAAyE;QACzE,wEAAwE;QACxE,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;QACxC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/env-files.d.ts

@@ -1,27 +1,36 @@
 /**
  * `.env` / `.env.local` collection for `telo run`.
  *
- * **The workspace marker is the bound, and its absence is the old behaviour.**
- * A walk-up needs a stop: walking to `/` would read a user's home `.env.local`
+ * **The workspace marker bounds the walk, and its `env:` block says how.** A
+ * walk-up needs a stop: walking to `/` would read a user's home `.env.local`
  * into an app run, and stopping at `.git` would tie env resolution to a VCS a
  * deployed checkout may not have. `telo-workspace.yaml` is already the anchor
  * every workspace-relative path is measured from, so it is the honest boundary
- * for "this repo". Only its LOCATION is read — never its `modules:` list, which
- * is release scope and says nothing about env, which is why a manifest under
- * `examples/` (in no release subtree) still gets the full walk.
+ * for "this repo" — and `env.roots` is how a workspace draws a tighter one,
+ * which is what keeps a vendor subtree's apps from reading a repo-root `.env`.
  *
  * With no marker anywhere above the manifest the walk collapses to the
  * manifest's own directory, which is what this did before the bound existed, so
  * the file stays harmless by its absence: it enables the parent lookup rather
  * than gating one, and deleting it cannot silently drop a variable an app had.
  *
- * Precedence (highest first): the real environment > nearest `.env.local` >
- * nearest `.env` > the same pair one directory up, and so on. A repo-root file
- * reaches every manifest beneath it, so a nearer declaration has to win.
+ * Precedence (highest first): the real environment > the nearest directory's
+ * files, last-declared winning within one directory > the same, one directory
+ * up, and so on. A repo-root file reaches every manifest beneath it, so a nearer
+ * declaration has to win.
+ *
+ * **Only `env:` is consulted, and only its diagnostics stop a run.** A typo
+ * under `release.modules` is a block this command has no interest in, so it is
+ * reported and the run proceeds — aborting every app in a workspace over a
+ * release typo is not a trade to make silently. A diagnostic inside `env:` is
+ * fatal: degrading to the marker-wide bound there would WIDEN the walk, which is
+ * the leak the block exists to prevent, and a block that opted into a boundary
+ * and got nothing is a defect rather than a default.
  *
  * **Resolving is separate from applying**, so the walk is answerable without
  * touching `process.env` or writing a line of output — the caller owns both.
  */
+import { type WorkspaceDiagnostic } from "@telorun/analyzer";
 /** One file the walk could not read for a reason other than its absence. */
 export interface UnreadableEnvFile {
     readonly path: string;
@@ -39,6 +48,12 @@ export interface EnvFileResolution {
      *  and it is not optional: an unreadable `.env` is indistinguishable from an
      *  absent one to everything downstream. */
     readonly unreadable: readonly UnreadableEnvFile[];
+    /** What the marker got wrong. Anything anchored outside `env:` is reported and
+     *  survivable; an error inside it is why `failed` is set. */
+    readonly diagnostics: readonly WorkspaceDiagnostic[];
+    /** Set when `env:` itself could not be read, so the caller must refuse rather
+     *  than run against a boundary it had to guess at. */
+    readonly failed?: string;
 }
 /** Collect the env files visible to a manifest. Pure: reads the filesystem and
  *  returns what it found. */

package/dist/env-files.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"env-files.d.ts","sourceRoot":"","sources":["../src/env-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAOH,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC;uBACmB;IACnB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD;6EACyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;+CAE2C;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;CACnD;AAID;6BAC6B;AAC7B,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAgBvE"}
+{"version":3,"file":"env-files.d.ts","sourceRoot":"","sources":["../src/env-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAOL,KAAK,mBAAmB,EACzB,MAAM,mBAAmB,CAAC;AAO3B,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,iFAAiF;IACjF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC;uBACmB;IACnB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD;6EACyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;+CAE2C;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClD;iEAC6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACrD;0DACsD;IACtD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;6BAC6B;AAC7B,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,CA+BvE"}

package/dist/env-files.js

@@ -1,41 +1,64 @@
 /**
  * `.env` / `.env.local` collection for `telo run`.
  *
- * **The workspace marker is the bound, and its absence is the old behaviour.**
- * A walk-up needs a stop: walking to `/` would read a user's home `.env.local`
+ * **The workspace marker bounds the walk, and its `env:` block says how.** A
+ * walk-up needs a stop: walking to `/` would read a user's home `.env.local`
  * into an app run, and stopping at `.git` would tie env resolution to a VCS a
  * deployed checkout may not have. `telo-workspace.yaml` is already the anchor
  * every workspace-relative path is measured from, so it is the honest boundary
- * for "this repo". Only its LOCATION is read — never its `modules:` list, which
- * is release scope and says nothing about env, which is why a manifest under
- * `examples/` (in no release subtree) still gets the full walk.
+ * for "this repo" — and `env.roots` is how a workspace draws a tighter one,
+ * which is what keeps a vendor subtree's apps from reading a repo-root `.env`.
  *
  * With no marker anywhere above the manifest the walk collapses to the
  * manifest's own directory, which is what this did before the bound existed, so
  * the file stays harmless by its absence: it enables the parent lookup rather
  * than gating one, and deleting it cannot silently drop a variable an app had.
  *
- * Precedence (highest first): the real environment > nearest `.env.local` >
- * nearest `.env` > the same pair one directory up, and so on. A repo-root file
- * reaches every manifest beneath it, so a nearer declaration has to win.
+ * Precedence (highest first): the real environment > the nearest directory's
+ * files, last-declared winning within one directory > the same, one directory
+ * up, and so on. A repo-root file reaches every manifest beneath it, so a nearer
+ * declaration has to win.
+ *
+ * **Only `env:` is consulted, and only its diagnostics stop a run.** A typo
+ * under `release.modules` is a block this command has no interest in, so it is
+ * reported and the run proceeds — aborting every app in a workspace over a
+ * release typo is not a trade to make silently. A diagnostic inside `env:` is
+ * fatal: degrading to the marker-wide bound there would WIDEN the walk, which is
+ * the leak the block exists to prevent, and a block that opted into a boundary
+ * and got nothing is a defect rather than a default.
  *
  * **Resolving is separate from applying**, so the walk is answerable without
  * touching `process.env` or writing a line of output — the caller owns both.
  */
+import { DEFAULT_ENV_FILES, WORKSPACE_FILENAME, diagnosticsFor, hasError, matchesPatterns, readWorkspaceConfig, } from "@telorun/analyzer";
+import { lastMatchIndex } from "@telorun/glob";
 import * as dotenv from "dotenv";
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { findWorkspaceRoot, realPath } from "./workspace-marker.js";
-const FILENAMES = [".env", ".env.local"];
 /** Collect the env files visible to a manifest. Pure: reads the filesystem and
  *  returns what it found. */
 export function resolveEnvFiles(manifestPath) {
     const loaded = [];
     const unreadable = [];
     const values = {};
+    const from = manifestDirectory(manifestPath);
+    const root = findWorkspaceRoot(from);
+    const marker = readMarker(root);
+    const envErrors = diagnosticsFor(marker.diagnostics, "env");
+    if (hasError(envErrors)) {
+        return {
+            values,
+            loaded,
+            unreadable,
+            diagnostics: marker.diagnostics,
+            failed: envErrors.find((diagnostic) => diagnostic.severity === "error").message,
+        };
+    }
+    const files = marker.config.env?.files ?? DEFAULT_ENV_FILES;
     // Farthest-first, so each nearer directory overwrites what the one above set.
-    for (const directory of envDirectories(manifestDirectory(manifestPath)).reverse()) {
-        for (const name of FILENAMES) {
+    for (const directory of envDirectories(from, root, marker.config.env?.roots).reverse()) {
+        for (const name of files) {
             const file = path.join(directory, name);
             const text = readEnvFile(file, unreadable);
             if (text === undefined)
@@ -44,7 +67,34 @@ export function resolveEnvFiles(manifestPath) {
             Object.assign(values, dotenv.parse(text));
         }
     }
-    return { values, loaded, unreadable };
+    return { values, loaded, unreadable, diagnostics: marker.diagnostics };
+}
+function readMarker(root) {
+    if (!root)
+        return { config: {}, diagnostics: [] };
+    const file = path.join(root, WORKSPACE_FILENAME);
+    try {
+        return readWorkspaceConfig(fs.readFileSync(file, "utf8"), WORKSPACE_FILENAME);
+    }
+    catch (err) {
+        // Reported, never swallowed. The marker was found by walking for it, so a
+        // read failure is a race or a permission problem — and degrading to "no
+        // blocks" would drop `env.roots` and read exactly the files the block was
+        // written to exclude, with no signal at all. Anchored at the document, which
+        // is inside every block's scope, so the run refuses.
+        return {
+            config: {},
+            diagnostics: [
+                {
+                    code: "WORKSPACE_INVALID_VALUE",
+                    severity: "error",
+                    message: `${WORKSPACE_FILENAME} could not be read (${err.code ?? String(err)}). ` +
+                        `It bounds which .env files this run may read, so its contents cannot be assumed.`,
+                    path: [],
+                },
+            ],
+        };
+    }
 }
 /** The directory holding the manifest — or the path itself when it names a
  *  directory. Resolved through symlinks, so the walk climbs the real tree. */
@@ -54,11 +104,16 @@ function manifestDirectory(manifestPath) {
         ? resolved
         : path.dirname(resolved);
 }
-/** The manifest's directory, then each ancestor up to and including the
- *  workspace root. Nearest first; just the one directory when no marker sits
- *  above it. */
-function envDirectories(from) {
-    const root = findWorkspaceRoot(from);
+/**
+ * The manifest's directory, then each ancestor up to and including the bound.
+ *
+ * The bound is the nearest ancestor matching `env.roots`, else the workspace
+ * root; with no marker it is the manifest's own directory. Two `roots` matches
+ * need no refusal — unlike two `release.modules` entries, which contradict about
+ * a destination, two bounds differ only in tightness and the nearest is the
+ * answer.
+ */
+function envDirectories(from, root, roots) {
     if (root === undefined)
         return [from];
     const dirs = [];
@@ -66,6 +121,11 @@ function envDirectories(from) {
         dirs.push(dir);
         if (dir === root || path.dirname(dir) === dir)
             break;
+        if (roots?.length) {
+            const rel = path.relative(root, dir).split(path.sep).join("/");
+            if (rel !== "" && matchesPatterns(rel, roots, lastMatchIndex))
+                break;
+        }
     }
     return dirs;
 }

package/dist/env-files.js.map

@@ -1 +1 @@
-{"version":3,"file":"env-files.js","sourceRoot":"","sources":["../src/env-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AAsBpE,MAAM,SAAS,GAAG,CAAC,MAAM,EAAE,YAAY,CAAU,CAAC;AAElD;6BAC6B;AAC7B,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,8EAA8E;IAC9E,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QAClF,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC3C,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC;AAED;8EAC8E;AAC9E,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QACnE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;gBAEgB;AAChB,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,GAAG,GAAG,IAAI,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;IACvD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,UAA+B;IAChE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"env-files.js","sourceRoot":"","sources":["../src/env-files.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,mBAAmB,GAEpB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AA4BpE;6BAC6B;AAC7B,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAA2B,EAAE,CAAC;IAE1C,MAAM,IAAI,GAAG,iBAAiB,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC5D,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM;YACN,MAAM;YACN,UAAU;YACV,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,KAAK,OAAO,CAAE,CAAC,OAAO;SACjF,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,iBAAiB,CAAC;IAC5D,8EAA8E;IAC9E,KAAK,MAAM,SAAS,IAAI,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACvF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YACxC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YAC3C,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AACzE,CAAC;AAED,SAAS,UAAU,CAAC,IAAwB;IAC1C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,wEAAwE;QACxE,0EAA0E;QAC1E,6EAA6E;QAC7E,qDAAqD;QACrD,OAAO;YACL,MAAM,EAAE,EAAE;YACV,WAAW,EAAE;gBACX;oBACE,IAAI,EAAE,yBAAyB;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,OAAO,EACL,GAAG,kBAAkB,uBAAwB,GAA6B,CAAC,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK;wBACnG,kFAAkF;oBACpF,IAAI,EAAE,EAAE;iBACT;aACF;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;8EAC8E;AAC9E,SAAS,iBAAiB,CAAC,YAAoB;IAC7C,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACtD,OAAO,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE;QACnE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,cAAc,CACrB,IAAY,EACZ,IAAwB,EACxB,KAAoC;IAEpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,GAAG,GAAG,IAAI,GAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;YAAE,MAAM;QACrD,IAAI,KAAK,EAAE,MAAM,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/D,IAAI,GAAG,KAAK,EAAE,IAAI,eAAe,CAAC,GAAG,EAAE,KAAK,EAAE,cAAc,CAAC;gBAAE,MAAM;QACvE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,UAA+B;IAChE,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC9D,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/release/apply-plan.d.ts

@@ -8,6 +8,7 @@
  * already a complete description of what to write.
  */
 import { type Ledger, type ModuleKey, type ReleasePlan } from "@telorun/analyzer";
+import { type ModuleTarget } from "./evidence.js";
 import { type Workspace } from "./workspace.js";
 /** One module's writes, reported so `apply` can list what it touched. */
 export interface AppliedModule {
@@ -34,5 +35,5 @@ export declare function writePlannedVersions(workspace: Workspace, plan: Release
  * pre-bump digest would guarantee the next `check` reported drift on every
  * module in this release.
  */
-export declare function recordLedger(root: string, registry: string, plan: ReleasePlan): Promise<Ledger>;
+export declare function recordLedger(root: string, targets: ReadonlyMap<ModuleKey, ModuleTarget>, plan: ReleasePlan): Promise<Ledger>;
 //# sourceMappingURL=apply-plan.d.ts.map

package/dist/release/apply-plan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAQL,KAAK,MAAM,EAEX,KAAK,SAAS,EAEd,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAM3B,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE9E,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,GACX,aAAa,EAAE,CAQjB;AA0FD;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,MAAM,CAAC,CAuBjB"}
+{"version":3,"file":"apply-plan.d.ts","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAQL,KAAK,MAAM,EAEX,KAAK,SAAS,EAEd,KAAK,WAAW,EACjB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAA8B,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AAE9E,OAAO,EAAgC,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAE9E,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,SAAS,EACpB,IAAI,EAAE,WAAW,EACjB,IAAI,EAAE,MAAM,GACX,aAAa,EAAE,CAQjB;AA0FD;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,WAAW,CAAC,SAAS,EAAE,YAAY,CAAC,EAC7C,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,MAAM,CAAC,CAwBjB"}

package/dist/release/apply-plan.js

@@ -11,7 +11,7 @@ import { prependChangelogRelease, renderChangelogRelease, stampCrateVersion, sta
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { ModulePayloadBuilder } from "../bundle/module-payload.js";
-import { destinationFor, digestPayload, imageDigest } from "./evidence.js";
+import { digestPayload, imageDigest } from "./evidence.js";
 import { readLedger } from "./ledger-store.js";
 import { loadWorkspace, requireModule } from "./workspace.js";
 /**
@@ -116,7 +116,7 @@ function writeChangelog(workspace, dir, module, date) {
  * pre-bump digest would guarantee the next `check` reported drift on every
  * module in this release.
  */
-export async function recordLedger(root, registry, plan) {
+export async function recordLedger(root, targets, plan) {
     // Re-read the workspace so discovery sees the versions just written.
     const workspace = loadWorkspace(root);
     const planned = new Set(plan.modules.map((module) => module.key));
@@ -128,13 +128,17 @@ export async function recordLedger(root, registry, plan) {
     for (const module of workspace.modules) {
         if (!planned.has(module.key))
             continue;
+        const target = targets.get(module.key);
+        if (!target)
+            continue;
         entries.set(module.key, {
             version: module.version,
+            registry: target.registry,
             layers: module.artifactKind === "image"
                 ? { image: await imageDigest(module) }
-                : await digestPayload(await builder.payload(module.manifestPath, destinationFor(registry, module))),
+                : await digestPayload(await builder.payload(module.manifestPath, target.destination)),
         });
     }
-    return { registry, modules: entries };
+    return { modules: entries };
 }
 //# sourceMappingURL=apply-plan.js.map

package/dist/release/apply-plan.js.map

@@ -1 +1 @@
-{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAMlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAW9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAoB,EACpB,IAAiB,EACjB,IAAY;IAEZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1E,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,uBAAwB,GAAa,CAAC,OAAO,4BAA4B;YAC9E,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,OAAO,GAAoF;QAC/F,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACnC,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;QAC5C,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;oDAEoD;AACpD,SAAS,cAAc,CACrB,SAAoB,EACpB,GAAW,EACX,MAAqB,EACrB,IAAY;IAEZ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,uBAAuB,CACrB,QAAQ,EACR,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC9E,EACD,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,QAAgB,EAChB,IAAiB;IAEjB,qEAAqE;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAE5F,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAyB,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,MAAM,EACJ,MAAM,CAAC,YAAY,KAAK,OAAO;gBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE;gBACtC,CAAC,CAAC,MAAM,aAAa,CACjB,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAC7E;SACR,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACxC,CAAC"}
+{"version":3,"file":"apply-plan.js","sourceRoot":"","sources":["../../src/release/apply-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,GAMlB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAqB,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,aAAa,EAAkB,MAAM,gBAAgB,CAAC;AAW9E;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,SAAoB,EACpB,IAAiB,EACjB,IAAY;IAEZ,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACjC,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,SAAS,GAAG,cAAc,CAAC,SAAS,EAAE,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1E,IAAI,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;IACtE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH;;;;;;;;GAQG;AACH,SAAS,eAAe,CAAC,IAAY;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,iBAAiB,CACzB,GAAG,IAAI,uBAAwB,GAAa,CAAC,OAAO,4BAA4B;YAC9E,kEAAkE,CACrE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,OAAe;IAChD,MAAM,OAAO,GAAoF;QAC/F,CAAC,WAAW,EAAE,oBAAoB,CAAC;QACnC,CAAC,qBAAqB,EAAE,mBAAmB,CAAC;QAC5C,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;KACvC,CAAC;IACF,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC/C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,MAAM;YAAE,SAAS;QACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;QACtC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,+EAA+E;IAC/E,2EAA2E;IAC3E,0CAA0C;IAC1C,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7E,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QAC5D,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YACrB,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;oDAEoD;AACpD,SAAS,cAAc,CACrB,SAAoB,EACpB,GAAW,EACX,MAAqB,EACrB,IAAY;IAEZ,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACjF,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,uBAAuB,CACrB,QAAQ,EACR,sBAAsB,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAC9E,EACD,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,OAA6C,EAC7C,IAAiB;IAEjB,qEAAqE;IACrE,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;IAE5F,4EAA4E;IAC5E,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAyB,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC;IACpF,KAAK,MAAM,MAAM,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACvC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;YAAE,SAAS;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;YACtB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EACJ,MAAM,CAAC,YAAY,KAAK,OAAO;gBAC7B,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC,MAAM,CAAC,EAAE;gBACtC,CAAC,CAAC,MAAM,aAAa,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;SAC1F,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/release/cargo-toml.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Reading a `Cargo.toml` into plain data, for the build-input digest of a
+ * crate-built source.
+ *
+ * A strict reader of the TOML cargo manifests are written in — tables, arrays of
+ * tables, dotted and quoted keys, strings of all four kinds, arrays, inline
+ * tables, booleans, and other scalars kept as their text. Anything else is a
+ * refusal naming the line, never a skip: a dependency table read wrongly would
+ * drop a path dependency from the digest, and a prebuild would then outlive a
+ * change to code it links without anything reporting it.
+ */
+export type TomlValue = string | boolean | TomlValue[] | TomlTable;
+export interface TomlTable {
+    [key: string]: TomlValue;
+}
+export declare function parseCargoToml(text: string, where: string): TomlTable;
+//# sourceMappingURL=cargo-toml.d.ts.map

package/dist/release/cargo-toml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cargo-toml.d.ts","sourceRoot":"","sources":["../../src/release/cargo-toml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC;AACnE,MAAM,WAAW,SAAS;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,CAErE"}