@uapkg/cli 1.3.0 → 1.3.1

package/dist/control-plane/PublishIdempotencyStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"PublishIdempotencyStore.js","sourceRoot":"","sources":["../../src/control-plane/PublishIdempotencyStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,MAAM,gBAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAYjD;;;;;;GAMG;AACH,MAAM,OAAO,uBAAuB;IACjB,QAAQ,CAAS;IAElC,YAAmB,QAAiB;QAClC,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAI,CAAC,6BAA6B,EAAE,EAAE,eAAe,CAAC,CAAC;IACrF,CAAC;IAED,wDAAwD;IACjD,MAAM,CAAC,gBAAgB,CAAC,SAAiB,EAAE,UAAmB;QACnE,OAAO,qBAAqB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1D,CAAC;IAEM,WAAW,CAAC,MAAc,EAAE,MAAoB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC,GAAG,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC;QACrB,IAAI,CAAC,KAAK,CAAC;YACT,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE;SACjE,CAAC,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IAEM,KAAK,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC;YAAE,OAAO;QACvC,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC;IAEO,IAAI,CAAC,GAAW;QACtB,IAAI,MAA6B,CAAC;QAClC,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;YACxD,IAAI,SAAS,CAAC,aAAa,KAAK,CAAC,IAAI,SAAS,CAAC,OAAO,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChG,MAAM,GAAG,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;QAC5E,CAAC;QACD,MAAM,OAAO,GAAgC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACpE,IACE,KAAK;gBACL,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ;gBAC7B,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;gBACnC,GAAG,GAAG,KAAK,CAAC,SAAS,IAAI,gBAAgB,EACzC,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACvC,CAAC;IAEO,KAAK,CAAC,KAAgB;QAC5B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC9E,CAAC;CACF"}
+{"version":3,"file":"PublishIdempotencyStore.js","names":[],"sources":["../../src/control-plane/PublishIdempotencyStore.ts"],"sourcesContent":["import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';\nimport { dirname, join } from 'node:path';\nimport { resolveActiveUapkgProfileRoot } from '@uapkg/common';\nimport { sha256OfCanonicalJson } from '@uapkg/package-claims';\n\nconst STORE_FILE_NAME = 'publish-idempotency.json';\nconst MAX_ENTRY_AGE_MS = 7 * 24 * 60 * 60 * 1000;\n\ninterface StoredEntry {\n  readonly key: string;\n  readonly createdAt: number;\n}\n\ninterface StoreFile {\n  readonly schemaVersion: 1;\n  readonly entries: Readonly<Record<string, StoredEntry>>;\n}\n\nexport interface GitHubActionsPublishCoordinates {\n  readonly registryId: string;\n  readonly packageName: string;\n  readonly packageVersion: string;\n  readonly artifactSha256: string;\n}\n\n/**\n * Stable, non-secret key for one GitHub Actions publish job. A rerun keeps the\n * same run ID and job name but changes GITHUB_RUN_ATTEMPT, so the attempt is\n * deliberately excluded. Renewing an OIDC session therefore cannot change\n * the request identity.\n */\nexport function createGitHubActionsPublishIdempotencyKey(\n  coordinates: GitHubActionsPublishCoordinates,\n  environment: NodeJS.ProcessEnv = process.env,\n): string {\n  const githubRunId = environment.GITHUB_RUN_ID?.trim();\n  const githubJob = environment.GITHUB_JOB?.trim();\n  if (!githubRunId || !githubJob) {\n    throw new Error(\n      'GitHub Actions OIDC publishing requires GITHUB_RUN_ID and GITHUB_JOB to derive a stable idempotency key.',\n    );\n  }\n  return `gha-${sha256OfCanonicalJson({\n    schemaVersion: 1,\n    registryId: coordinates.registryId,\n    packageName: coordinates.packageName,\n    packageVersion: coordinates.packageVersion,\n    artifactSha256: coordinates.artifactSha256,\n    githubRunId,\n    githubJob,\n  })}`;\n}\n\n/**\n * Persisted idempotency keys for logical registry-operation submissions.\n * One logical submission (operation + registry + payload) keeps one key\n * across retries, so a re-run after a network fault or crash replays the\n * original request instead of creating a duplicate. Keys are cleared once\n * the request reaches a terminal state.\n */\nexport class PublishIdempotencyStore {\n  private readonly filePath: string;\n\n  public constructor(filePath?: string) {\n    this.filePath = filePath ?? join(resolveActiveUapkgProfileRoot(), STORE_FILE_NAME);\n  }\n\n  /** Stable digest identifying one logical submission. */\n  public static submissionDigest(operation: string, submission: unknown): string {\n    return sha256OfCanonicalJson({ operation, submission });\n  }\n\n  public getOrCreate(digest: string, newKey: () => string, now = Date.now()): string {\n    const store = this.read(now);\n    const existing = store.entries[digest];\n    if (existing) return existing.key;\n    const key = newKey();\n    this.write({\n      schemaVersion: 1,\n      entries: { ...store.entries, [digest]: { key, createdAt: now } },\n    });\n    return key;\n  }\n\n  public clear(digest: string, now = Date.now()): void {\n    const store = this.read(now);\n    if (!(digest in store.entries)) return;\n    const entries = { ...store.entries };\n    delete entries[digest];\n    this.write({ schemaVersion: 1, entries });\n  }\n\n  private read(now: number): StoreFile {\n    let parsed: StoreFile | undefined;\n    try {\n      const raw = readFileSync(this.filePath, 'utf8');\n      const candidate = JSON.parse(raw) as Partial<StoreFile>;\n      if (candidate.schemaVersion === 1 && candidate.entries && typeof candidate.entries === 'object') {\n        parsed = { schemaVersion: 1, entries: candidate.entries };\n      }\n    } catch {\n      // Missing or corrupt store starts fresh; keys are best-effort retry aids.\n    }\n    const entries: Record<string, StoredEntry> = {};\n    for (const [digest, entry] of Object.entries(parsed?.entries ?? {})) {\n      if (\n        entry &&\n        typeof entry.key === 'string' &&\n        typeof entry.createdAt === 'number' &&\n        now - entry.createdAt <= MAX_ENTRY_AGE_MS\n      ) {\n        entries[digest] = entry;\n      }\n    }\n    return { schemaVersion: 1, entries };\n  }\n\n  private write(store: StoreFile): void {\n    mkdirSync(dirname(this.filePath), { recursive: true });\n    writeFileSync(this.filePath, `${JSON.stringify(store, null, 2)}\\n`, 'utf8');\n  }\n}\n"],"mappings":";;;;;;AAKA,MAAM,kBAAkB;AACxB,MAAM,mBAAmB;;;;;;;AAyBzB,SAAgB,yCACd,aACA,cAAiC,QAAQ,KACjC;CACR,MAAM,cAAc,YAAY,eAAe,KAAK;CACpD,MAAM,YAAY,YAAY,YAAY,KAAK;CAC/C,IAAI,CAAC,eAAe,CAAC,WACnB,MAAM,IAAI,MACR,0GACF;CAEF,OAAO,OAAO,sBAAsB;EAClC,eAAe;EACf,YAAY,YAAY;EACxB,aAAa,YAAY;EACzB,gBAAgB,YAAY;EAC5B,gBAAgB,YAAY;EAC5B;EACA;CACF,CAAC;AACH;;;;;;;;AASA,IAAa,0BAAb,MAAqC;CACnC,AAAiB;CAEjB,AAAO,YAAY,UAAmB;EACpC,KAAK,WAAW,YAAY,KAAK,8BAA8B,GAAG,eAAe;CACnF;;CAGA,OAAc,iBAAiB,WAAmB,YAA6B;EAC7E,OAAO,sBAAsB;GAAE;GAAW;EAAW,CAAC;CACxD;CAEA,AAAO,YAAY,QAAgB,QAAsB,MAAM,KAAK,IAAI,GAAW;EACjF,MAAM,QAAQ,KAAK,KAAK,GAAG;EAC3B,MAAM,WAAW,MAAM,QAAQ;EAC/B,IAAI,UAAU,OAAO,SAAS;EAC9B,MAAM,MAAM,OAAO;EACnB,KAAK,MAAM;GACT,eAAe;GACf,SAAS;IAAE,GAAG,MAAM;KAAU,SAAS;KAAE;KAAK,WAAW;IAAI;GAAE;EACjE,CAAC;EACD,OAAO;CACT;CAEA,AAAO,MAAM,QAAgB,MAAM,KAAK,IAAI,GAAS;EACnD,MAAM,QAAQ,KAAK,KAAK,GAAG;EAC3B,IAAI,EAAE,UAAU,MAAM,UAAU;EAChC,MAAM,UAAU,EAAE,GAAG,MAAM,QAAQ;EACnC,OAAO,QAAQ;EACf,KAAK,MAAM;GAAE,eAAe;GAAG;EAAQ,CAAC;CAC1C;CAEA,AAAQ,KAAK,KAAwB;EACnC,IAAI;EACJ,IAAI;GACF,MAAM,MAAM,aAAa,KAAK,UAAU,MAAM;GAC9C,MAAM,YAAY,KAAK,MAAM,GAAG;GAChC,IAAI,UAAU,kBAAkB,KAAK,UAAU,WAAW,OAAO,UAAU,YAAY,UACrF,SAAS;IAAE,eAAe;IAAG,SAAS,UAAU;GAAQ;EAE5D,QAAQ,CAER;EACA,MAAM,UAAuC,CAAC;EAC9C,KAAK,MAAM,CAAC,QAAQ,UAAU,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC,GAChE,IACE,SACA,OAAO,MAAM,QAAQ,YACrB,OAAO,MAAM,cAAc,YAC3B,MAAM,MAAM,aAAa,kBAEzB,QAAQ,UAAU;EAGtB,OAAO;GAAE,eAAe;GAAG;EAAQ;CACrC;CAEA,AAAQ,MAAM,OAAwB;EACpC,UAAU,QAAQ,KAAK,QAAQ,GAAG,EAAE,WAAW,KAAK,CAAC;EACrD,cAAc,KAAK,UAAU,GAAG,KAAK,UAAU,OAAO,MAAM,CAAC,EAAE,KAAK,MAAM;CAC5E;AACF"}

package/dist/control-plane/PublishRequestErrorMapper.d.ts

@@ -0,0 +1,155 @@
+import { PublishDiagnosticFact, PublishRequestFailedDiagnostic } from "@uapkg/diagnostics";
+//#region src/control-plane/PublishRequestErrorMapper.d.ts
+interface PublishRequestErrorContext {
+  readonly packageName: string;
+  readonly packageVersion: string;
+  readonly registryAlias: string;
+  readonly registryName?: string;
+  readonly registryIssuer: string;
+  readonly credentialKind: 'login' | 'gat' | 'oidc';
+  readonly requestedOwner?: string;
+  readonly repository: string;
+}
+type ResourceKind = 'access-tokens' | 'help' | 'login' | 'owner-command' | 'requests' | 'security' | 'registries' | 'trusted-publishers';
+interface PublishGuidance {
+  readonly message: string;
+  readonly hint: string;
+  readonly facts?: readonly PublishDiagnosticFact[];
+  readonly resources?: readonly ResourceKind[];
+  readonly requestId?: string;
+}
+interface PublishErrorSpec {
+  build(details: unknown, context: PublishRequestErrorContext): PublishGuidance;
+}
+/**
+ * Explicit inventory of errors that can be returned synchronously while the
+ * CLI submits POST /v1/registry-requests/publish. Unknown future codes use the
+ * non-leaking fallback in {@link publishRequestDiagnosticForError}.
+ */
+declare const PUBLISH_SUBMISSION_ERROR_CATALOG: {
+  readonly AUTH_REQUIRED: PublishErrorSpec;
+  readonly CONTROL_PLANE_AUTHENTICATION_REQUIRED: PublishErrorSpec;
+  readonly DPOP_AUTH_UNAVAILABLE: PublishErrorSpec;
+  readonly DPOP_AUTH_REQUIRED: PublishErrorSpec;
+  readonly DPOP_PROOF_INVALID: PublishErrorSpec;
+  readonly DPOP_PROOF_REPLAYED: PublishErrorSpec;
+  readonly DPOP_ACCESS_TOKEN_INVALID: PublishErrorSpec;
+  readonly DPOP_PROOF_STALE: PublishErrorSpec;
+  readonly DPOP_NONCE_REQUIRED: PublishErrorSpec;
+  readonly REGISTRY_GRANT_INVALID: PublishErrorSpec;
+  readonly CLI_LOGIN_ACTIVATION_EXPIRED: PublishErrorSpec;
+  readonly ACCOUNT_NOT_ACTIVE: PublishErrorSpec;
+  readonly CLI_ACCESS_TOKEN_INVALID: PublishErrorSpec;
+  readonly CLI_ACCESS_TOKEN_EXPIRED: PublishErrorSpec;
+  readonly OAUTH_SCOPE_INSUFFICIENT: PublishErrorSpec;
+  readonly OAUTH_SCOPE_UNSUPPORTED: PublishErrorSpec;
+  readonly TOKEN_INVALID: PublishErrorSpec;
+  readonly TOKEN_REVOKED: PublishErrorSpec;
+  readonly TOKEN_EXPIRED: PublishErrorSpec;
+  readonly UAPKG_TOKEN_APPROVAL_PENDING: PublishErrorSpec;
+  readonly UAPKG_TOKEN_APPROVAL_DENIED: PublishErrorSpec;
+  readonly UAPKG_TOKEN_ORGANIZATION_POLICY_DENIED: PublishErrorSpec;
+  readonly UAPKG_TOKEN_TEMPORARILY_BLOCKED_OWNER_MFA_REQUIRED: PublishErrorSpec;
+  readonly UAPKG_TOKEN_LIFECYCLE_DISABLED: PublishErrorSpec;
+  readonly UAPKG_TOKEN_PERMISSION_DENIED: PublishErrorSpec;
+  readonly UAPKG_TOKEN_RESOURCE_ACCESS_DENIED: PublishErrorSpec;
+  readonly SECOND_FACTOR_REQUIRED: PublishErrorSpec;
+  readonly OTP_INVALID: PublishErrorSpec;
+  readonly OTP_NOT_ENROLLED: PublishErrorSpec;
+  readonly OTP_RATE_LIMITED: PublishErrorSpec;
+  readonly OTP_ERROR: PublishErrorSpec;
+  readonly OTP_UNSUPPORTED_PRINCIPAL: PublishErrorSpec;
+  readonly SECURED_ACCOUNT_REQUIRED: PublishErrorSpec;
+  readonly ACTOR_WRITE_FORBIDDEN: PublishErrorSpec;
+  readonly UAPKG_PRINCIPAL_NOT_ALLOWED: PublishErrorSpec;
+  readonly UNSCOPED_PACKAGE_OWNER_REQUIRED: PublishErrorSpec;
+  readonly GAT_OWNER_ORGANIZATION_MISMATCH: PublishErrorSpec;
+  readonly UAPKG_PACKAGE_SCOPE_OWNER_MISMATCH: PublishErrorSpec;
+  readonly UAPKG_REGISTRY_REQUIRES_SCOPED_PACKAGE: PublishErrorSpec;
+  readonly INITIAL_PUBLICATION_PACKAGE_ACCESS_ALL_REQUIRED: PublishErrorSpec;
+  readonly PACKAGE_OWNER_NOT_AUTHORIZED: PublishErrorSpec;
+  readonly INITIAL_PUBLICATION_CREDENTIAL_UNSUPPORTED: PublishErrorSpec;
+  readonly CLI_REGISTRY_GRANT_NOT_AUTHORIZED: PublishErrorSpec;
+  readonly REGISTRY_WRITE_DENIED_REBAC: PublishErrorSpec;
+  readonly GAT_CREDENTIAL_CONTEXT_REQUIRED: PublishErrorSpec;
+  readonly PACKAGE_OWNER_NOT_RESOLVED: PublishErrorSpec;
+  readonly OIDC_SESSION_INVALID: PublishErrorSpec;
+  readonly OIDC_PROVIDER_UNAVAILABLE: PublishErrorSpec;
+  readonly OIDC_INITIAL_PUBLICATION_NOT_SUPPORTED: PublishErrorSpec;
+  readonly OIDC_SOURCE_REPOSITORY_MISMATCH: PublishErrorSpec;
+  readonly TRUSTED_PUBLISHER_NOT_AUTHORIZED: PublishErrorSpec;
+  readonly INVALID_PACKAGE_NAME: PublishErrorSpec;
+  readonly SCOPED_PACKAGES_DISABLED: PublishErrorSpec;
+  readonly INVALID_VERSION: PublishErrorSpec;
+  readonly INVALID_OWNER_ORGANIZATION_NAME: PublishErrorSpec;
+  readonly SOURCE_REQUIRED: PublishErrorSpec;
+  readonly GITHUB_RELEASE_SOURCE_REQUIRED: PublishErrorSpec;
+  readonly SOURCE_TYPE_UNSUPPORTED: PublishErrorSpec;
+  readonly GITHUB_REPOSITORY_INVALID: PublishErrorSpec;
+  readonly RELEASE_TAG_INVALID: PublishErrorSpec;
+  readonly RELEASE_ASSET_NAME_INVALID: PublishErrorSpec;
+  readonly OBSERVED_INTEGRITY_REQUIRED: PublishErrorSpec;
+  readonly OBSERVED_DIGEST_INVALID: PublishErrorSpec;
+  readonly OBSERVED_SIZE_INVALID: PublishErrorSpec;
+  readonly CLAIMS_REQUIRED: PublishErrorSpec;
+  readonly CLAIMS_IDENTITY_MISMATCH: PublishErrorSpec;
+  readonly CLAIMS_PRIVATE_INVALID: PublishErrorSpec;
+  readonly CLAIMS_BUCKET_INVALID: PublishErrorSpec;
+  readonly CLAIMS_DEPENDENCIES_TOO_MANY: PublishErrorSpec;
+  readonly CLAIMS_DEPENDENCY_NAME_INVALID: PublishErrorSpec;
+  readonly CLAIMS_DEPENDENCY_RANGE_INVALID: PublishErrorSpec;
+  readonly CLAIMS_DEPENDENCY_REGISTRY_INVALID: PublishErrorSpec;
+  readonly CLAIMS_DEPENDENCY_FIELDS_INVALID: PublishErrorSpec;
+  readonly OFFICIAL_REGISTRY_PRIVATE_PACKAGE_FORBIDDEN: PublishErrorSpec;
+  readonly SERVER_RESOLVED_METADATA_NOT_ALLOWED: PublishErrorSpec;
+  readonly UNRECOGNIZED_REQUEST_FIELDS: PublishErrorSpec;
+  readonly INVALID_REGISTRY_ID: PublishErrorSpec;
+  readonly PAYLOAD_TOO_LARGE: PublishErrorSpec;
+  readonly REQUEST_BODY_TOO_LARGE: PublishErrorSpec;
+  readonly UAPKG_OPERATION_INPUT_TOO_LARGE: PublishErrorSpec;
+  readonly INVALID_CONTENT_LENGTH: PublishErrorSpec;
+  readonly INVALID_JSON: PublishErrorSpec;
+  readonly INVALID_REQUEST_BODY: PublishErrorSpec;
+  readonly UAPKG_OPERATION_INPUT_INVALID: PublishErrorSpec;
+  readonly IDEMPOTENCY_KEY_REQUIRED: PublishErrorSpec;
+  readonly REQUEST_KIND_NOT_PUBLIC: PublishErrorSpec;
+  readonly SOURCE_NOT_ALLOWED: PublishErrorSpec;
+  readonly REASON_REQUIRED: PublishErrorSpec;
+  readonly DEPRECATION_MESSAGE_REQUIRED: PublishErrorSpec;
+  readonly REGISTRY_NOT_FOUND: PublishErrorSpec;
+  readonly REGISTRY_LINK_MISSING: PublishErrorSpec;
+  readonly REGISTRY_LINK_NOT_READY: PublishErrorSpec;
+  readonly PACKAGE_POLICY_NOT_CONFIGURED: PublishErrorSpec;
+  readonly PACKAGE_NOT_FOUND: PublishErrorSpec;
+  readonly PACKAGE_HALTED: PublishErrorSpec;
+  readonly VERSION_ALREADY_EXISTS: PublishErrorSpec;
+  readonly VERSION_TOMBSTONED: PublishErrorSpec;
+  readonly DUPLICATE_ACTIVE_REQUEST: PublishErrorSpec;
+  readonly PACKAGE_OWNERSHIP_PENDING_CONFLICT: PublishErrorSpec;
+  readonly IDEMPOTENCY_KEY_CONFLICT: PublishErrorSpec;
+  readonly RATE_LIMIT_EXCEEDED: PublishErrorSpec;
+  readonly REQUEST_ATTRIBUTION_INVALID: PublishErrorSpec;
+  readonly AUTHORIZATION_RECEIPT_REQUIRED: PublishErrorSpec;
+  readonly REQUEST_CREATE_FAILED: PublishErrorSpec;
+  readonly OPERATION_AUTHORIZATION_ACTION_MISMATCH: PublishErrorSpec;
+  readonly OPERATION_BODY_LIMIT_UNREGISTERED: PublishErrorSpec;
+  readonly UAPKG_OPERATION_BINDING_MISMATCH: PublishErrorSpec;
+  readonly UAPKG_OPERATION_BINDER_MISMATCH: PublishErrorSpec;
+  readonly UAPKG_OPERATION_BODY_LIMIT_UNREGISTERED: PublishErrorSpec;
+  readonly UAPKG_SERVICE_AUTHENTICATION_REQUIRED: PublishErrorSpec;
+  readonly REGISTRY_REQUEST_RESPONSE_INVALID: PublishErrorSpec;
+  readonly CONTROL_PLANE_RESPONSE_NOT_JSON: PublishErrorSpec;
+  readonly DESTRUCTIVE_POLICY_NOT_CONFIGURED: PublishErrorSpec;
+  readonly PACKAGE_VERSION_TARGET_NOT_FOUND: PublishErrorSpec;
+  readonly VERSION_ALREADY_UNPUBLISHED: PublishErrorSpec;
+  readonly VERSION_ALREADY_YANKED: PublishErrorSpec;
+  readonly VERSION_NOT_YANKED: PublishErrorSpec;
+  readonly VERSION_ALREADY_DEPRECATED: PublishErrorSpec;
+  readonly VERSION_NOT_DEPRECATED: PublishErrorSpec;
+  readonly UNPUBLISH_WINDOW_EXPIRED: PublishErrorSpec;
+};
+type PublishSubmissionErrorCode = keyof typeof PUBLISH_SUBMISSION_ERROR_CATALOG;
+declare function publishRequestDiagnosticForError(error: unknown, context: PublishRequestErrorContext): PublishRequestFailedDiagnostic;
+//#endregion
+export { PUBLISH_SUBMISSION_ERROR_CATALOG, PublishRequestErrorContext, PublishSubmissionErrorCode, publishRequestDiagnosticForError };
+//# sourceMappingURL=PublishRequestErrorMapper.d.ts.map

package/dist/control-plane/PublishRequestErrorMapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PublishRequestErrorMapper.d.ts","names":[],"sources":["../../src/control-plane/PublishRequestErrorMapper.ts"],"mappings":";;UA+FiB;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA;;KAGN;UAUK;WACC;WACA;WACA,iBAAiB;WACjB,qBAAqB;WACrB;;UAGD;EACR,MAAM,kBAAkB,SAAS,6BAA6B;;;;;;;cAuQnD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAgWD,0CAA0C;iBAEtC,iCACd,gBACA,SAAS,6BACR"}