@uapkg/cli 1.3.2 → 1.5.0

package/dist/commands/OutdatedCommand.js

@@ -1,43 +0,0 @@
-//#region src/commands/OutdatedCommand.ts
-/**
-* `uapkg outdated` — emits one row per declared dependency with
-* `current / wanted / latest / status` taken from
-* {@link PackageManifest.checkOutdated}.
-*
-* Exit code 0 when all rows are `up-to-date`; otherwise 2 so CI gates can
-* branch on it. JSON mode emits the full array on stdout in a single write.
-*/
-var OutdatedCommand = class {
-	root;
-	options;
-	constructor(root, options) {
-		this.root = root;
-		this.options = options;
-	}
-	async execute() {
-		const result = await this.root.packageManifest.checkOutdated();
-		if (this.options.outputFormat === "json") {
-			this.root.json.emit({
-				status: result.ok ? "ok" : "error",
-				command: "outdated",
-				data: result.ok ? result.value : void 0,
-				diagnostics: result.diagnostics
-			});
-			return result.ok ? result.value.some((r) => r.status !== "up-to-date") ? 2 : 0 : 1;
-		}
-		this.root.diagnostics.reportAll(result.diagnostics);
-		if (!result.ok) return 1;
-		const rows = result.value;
-		if (rows.length === 0) {
-			process.stdout.write("No declared dependencies.\n");
-			return 0;
-		}
-		const outdated = rows.filter((r) => r.status !== "up-to-date");
-		for (const row of rows) process.stdout.write(`${row.status.padEnd(16)} ${row.name.padEnd(32)} ${row.current} → ${row.wanted} (latest ${row.latest})\n`);
-		return outdated.length > 0 ? 2 : 0;
-	}
-};
-
-//#endregion
-export { OutdatedCommand };
-//# sourceMappingURL=OutdatedCommand.js.map

package/dist/commands/OutdatedCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"OutdatedCommand.js","names":[],"sources":["../../src/commands/OutdatedCommand.ts"],"sourcesContent":["import type { CompositionRoot } from '../app/CompositionRoot.js';\nimport type { Command } from './Command.js';\n\nexport interface OutdatedCommandOptions {\n  readonly outputFormat: 'text' | 'json';\n}\n\n/**\n * `uapkg outdated` — emits one row per declared dependency with\n * `current / wanted / latest / status` taken from\n * {@link PackageManifest.checkOutdated}.\n *\n * Exit code 0 when all rows are `up-to-date`; otherwise 2 so CI gates can\n * branch on it. JSON mode emits the full array on stdout in a single write.\n */\nexport class OutdatedCommand implements Command {\n  public constructor(\n    private readonly root: CompositionRoot,\n    private readonly options: OutdatedCommandOptions,\n  ) {}\n\n  public async execute(): Promise<number> {\n    const result = await this.root.packageManifest.checkOutdated();\n\n    if (this.options.outputFormat === 'json') {\n      this.root.json.emit({\n        status: result.ok ? 'ok' : 'error',\n        command: 'outdated',\n        data: result.ok ? result.value : undefined,\n        diagnostics: result.diagnostics,\n      });\n      return result.ok ? (result.value.some((r) => r.status !== 'up-to-date') ? 2 : 0) : 1;\n    }\n\n    this.root.diagnostics.reportAll(result.diagnostics);\n    if (!result.ok) return 1;\n\n    const rows = result.value;\n    if (rows.length === 0) {\n      process.stdout.write('No declared dependencies.\\n');\n      return 0;\n    }\n    const outdated = rows.filter((r) => r.status !== 'up-to-date');\n    for (const row of rows) {\n      process.stdout.write(\n        `${row.status.padEnd(16)} ${row.name.padEnd(32)} ${row.current} → ${row.wanted} (latest ${row.latest})\\n`,\n      );\n    }\n    return outdated.length > 0 ? 2 : 0;\n  }\n}\n"],"mappings":";;;;;;;;;AAeA,IAAa,kBAAb,MAAgD;CAE3B;CACA;CAFnB,AAAO,YACL,AAAiB,MACjB,AAAiB,SACjB;EAFiB;EACA;CAChB;CAEH,MAAa,UAA2B;EACtC,MAAM,SAAS,MAAM,KAAK,KAAK,gBAAgB,cAAc;EAE7D,IAAI,KAAK,QAAQ,iBAAiB,QAAQ;GACxC,KAAK,KAAK,KAAK,KAAK;IAClB,QAAQ,OAAO,KAAK,OAAO;IAC3B,SAAS;IACT,MAAM,OAAO,KAAK,OAAO,QAAQ;IACjC,aAAa,OAAO;GACtB,CAAC;GACD,OAAO,OAAO,KAAM,OAAO,MAAM,MAAM,MAAM,EAAE,WAAW,YAAY,IAAI,IAAI,IAAK;EACrF;EAEA,KAAK,KAAK,YAAY,UAAU,OAAO,WAAW;EAClD,IAAI,CAAC,OAAO,IAAI,OAAO;EAEvB,MAAM,OAAO,OAAO;EACpB,IAAI,KAAK,WAAW,GAAG;GACrB,QAAQ,OAAO,MAAM,6BAA6B;GAClD,OAAO;EACT;EACA,MAAM,WAAW,KAAK,QAAQ,MAAM,EAAE,WAAW,YAAY;EAC7D,KAAK,MAAM,OAAO,MAChB,QAAQ,OAAO,MACb,GAAG,IAAI,OAAO,OAAO,EAAE,EAAE,GAAG,IAAI,KAAK,OAAO,EAAE,EAAE,GAAG,IAAI,QAAQ,KAAK,IAAI,OAAO,WAAW,IAAI,OAAO,IACvG;EAEF,OAAO,SAAS,SAAS,IAAI,IAAI;CACnC;AACF"}

package/dist/commands/PackCommand.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PackCommand.d.ts","names":[],"sources":["../../src/commands/PackCommand.ts"],"mappings":";;UAIiB;EACf;EACA;EACA;EACA;;cAGW,uBAAuB;mBACL;EAA7B,YAA6B,SAAS;EAEhC,WAAO"}

package/dist/commands/PackCommand.js

@@ -1,27 +0,0 @@
-import { DiagnosticReporter } from "../reporting/DiagnosticReporter.js";
-import { pack } from "@uapkg/pack";
-
-//#region src/commands/PackCommand.ts
-var PackCommand = class {
-	options;
-	constructor(options) {
-		this.options = options;
-	}
-	async execute() {
-		const result = await pack({
-			cwd: this.options.cwd,
-			dryRun: this.options.dryRun,
-			allowMissingLfs: this.options.allowMissingLfs,
-			outFile: this.options.outFile
-		});
-		if (!result.ok) {
-			new DiagnosticReporter().reportAll(result.diagnostics);
-			return 1;
-		}
-		return 0;
-	}
-};
-
-//#endregion
-export { PackCommand };
-//# sourceMappingURL=PackCommand.js.map

package/dist/commands/PackCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PackCommand.js","names":[],"sources":["../../src/commands/PackCommand.ts"],"sourcesContent":["import { pack } from '@uapkg/pack';\nimport { DiagnosticReporter } from '../reporting/DiagnosticReporter.js';\nimport type { Command } from './Command.js';\n\nexport interface PackCommandOptions {\n  cwd: string;\n  dryRun: boolean;\n  allowMissingLfs: boolean;\n  outFile?: string;\n}\n\nexport class PackCommand implements Command {\n  constructor(private readonly options: PackCommandOptions) {}\n\n  async execute() {\n    const result = await pack({\n      cwd: this.options.cwd,\n      dryRun: this.options.dryRun,\n      allowMissingLfs: this.options.allowMissingLfs,\n      outFile: this.options.outFile,\n    });\n\n    if (!result.ok) {\n      new DiagnosticReporter().reportAll(result.diagnostics);\n      return 1;\n    }\n\n    return 0;\n  }\n}\n"],"mappings":";;;;AAWA,IAAa,cAAb,MAA4C;CACb;CAA7B,YAAY,AAAiB,SAA6B;EAA7B;CAA8B;CAE3D,MAAM,UAAU;EACd,MAAM,SAAS,MAAM,KAAK;GACxB,KAAK,KAAK,QAAQ;GAClB,QAAQ,KAAK,QAAQ;GACrB,iBAAiB,KAAK,QAAQ;GAC9B,SAAS,KAAK,QAAQ;EACxB,CAAC;EAED,IAAI,CAAC,OAAO,IAAI;GACd,IAAI,mBAAmB,CAAC,CAAC,UAAU,OAAO,WAAW;GACrD,OAAO;EACT;EAEA,OAAO;CACT;AACF"}

package/dist/commands/PackageLifecycleCommand.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PackageLifecycleCommand.d.ts","names":[],"sources":["../../src/commands/PackageLifecycleCommand.ts"],"mappings":";;;;;UAyBiB;WACN,WAAW;WACX;WACA;WACA;WACA;WACA,MAAM;WACN;WACA,cAAc;;;;;;;;cASZ,mCAAmC;mBAE3B;mBACA;EAFnB,YACmB,MAAM,iBACN,SAAS;EAGf,WAAW;UA0GhB;UAkBA"}

package/dist/commands/PackageLifecycleCommand.js

@@ -1,149 +0,0 @@
-import { ControlPlaneError } from "../control-plane/ControlPlaneTypes.js";
-import { ControlPlaneClient } from "../control-plane/ControlPlaneClient.js";
-import { describeControlPlaneError } from "../control-plane/AccountManager.js";
-import { AuthenticationSelector } from "../control-plane/AuthenticationSelector.js";
-import { PublishIdempotencyStore } from "../control-plane/PublishIdempotencyStore.js";
-import { InkPromptService } from "../prompts/InkPromptService.js";
-import { formatRegistryRequestTerminal, isRegistryRequestSuccessStatus, isRegistryRequestTerminalStatus } from "../reporting/RegistryRequestTerminalFormatter.js";
-import { randomUUID } from "node:crypto";
-
-//#region src/commands/PackageLifecycleCommand.ts
-const WATCH_TIMEOUT_MS = 18e5;
-const REASON_REQUIRED = /* @__PURE__ */ new Set([
-	"yank",
-	"unyank",
-	"unpublish",
-	"deprecate"
-]);
-/**
-* Shared implementation of the five route-derived package lifecycle
-* operations (`uapkg yank|unyank|unpublish|deprecate|undeprecate`). Each
-* command posts to its dedicated submission route and watches the request
-* to readiness unless detached.
-*/
-var PackageLifecycleCommand = class {
-	root;
-	options;
-	constructor(root, options) {
-		this.root = root;
-		this.options = options;
-	}
-	async execute() {
-		try {
-			const { operation, packageName, packageVersion } = this.options;
-			if (!packageName.trim() || !packageVersion.trim()) throw new Error(`uapkg ${operation} requires a package name and an exact version.`);
-			const reason = this.options.reason?.trim();
-			if (REASON_REQUIRED.has(operation) && !reason) throw new Error(`uapkg ${operation} requires --reason describing why the version is changing state.`);
-			const trust = await this.root.registryTrustResolver.resolve(this.options.registry);
-			const selector = new AuthenticationSelector(this.root.accountManager, new InkPromptService());
-			const oidcTarget = {
-				registryId: trust.registryId,
-				packageName: packageName.trim()
-			};
-			const requestedScopes = this.options.detach ? ["publishing.request.create"] : ["publishing.request.create", "publishing.request.read.self"];
-			let authentication = await selector.select(this.options.auth, trust, requestedScopes, true, oidcTarget);
-			let requestOtp = authentication.otp;
-			authentication = {
-				kind: authentication.kind,
-				credential: authentication.credential
-			};
-			const submission = {
-				registryId: trust.registryId,
-				payload: {
-					packageName: packageName.trim(),
-					packageVersion: packageVersion.trim(),
-					...reason ? { reason } : {}
-				}
-			};
-			const idempotencyStore = new PublishIdempotencyStore();
-			const submissionDigest = PublishIdempotencyStore.submissionDigest(operation, submission);
-			const idempotencyKey = idempotencyStore.getOrCreate(submissionDigest, () => randomUUID());
-			const client = new ControlPlaneClient(trust.apiBaseUrl);
-			let created;
-			try {
-				created = await client.submitRegistryRequest(authentication.credential, operation, submission, {
-					idempotencyKey,
-					otp: requestOtp
-				});
-			} finally {
-				requestOtp = void 0;
-			}
-			if (this.options.detach) {
-				this.printCreated(created.requestId, created.status, trust.alias);
-				return 0;
-			}
-			let detail = await client.getRegistryRequestDetail(authentication.credential, created.requestId);
-			let previousStatus = "";
-			const deadline = Date.now() + WATCH_TIMEOUT_MS;
-			while (!isRegistryRequestTerminalStatus(detail.request.status)) {
-				if (Date.now() >= deadline) throw new Error(`Timed out waiting for request ${detail.request.id}. Check it with \`uapkg requests status ${detail.request.id}\`.`);
-				if (this.options.outputFormat === "text" && detail.request.status !== previousStatus) {
-					process.stdout.write(`${detail.request.id}: ${detail.request.status}${detail.request.currentStep ? ` (${detail.request.currentStep})` : ""}\n`);
-					previousStatus = detail.request.status;
-				}
-				await delay(2e3);
-				try {
-					detail = await client.getRegistryRequestDetail(authentication.credential, created.requestId);
-				} catch (error) {
-					if (!(error instanceof ControlPlaneError) || error.status !== 401) throw error;
-					if (authentication.kind === "gat") throw error;
-					if (authentication.kind === "login") this.root.accountManager.invalidateAccessCredentials(trust);
-					authentication = await selector.select(authentication.kind, trust, ["publishing.request.read.self"], false, oidcTarget);
-					detail = await client.getRegistryRequestDetail(authentication.credential, created.requestId);
-				}
-			}
-			idempotencyStore.clear(submissionDigest);
-			if (isRegistryRequestSuccessStatus(detail.request.status)) {
-				let refreshWarning;
-				try {
-					await this.root.registryTrustResolver.forceRefresh(trust);
-				} catch (error) {
-					refreshWarning = error instanceof Error ? error.message : String(error);
-				}
-				this.printTerminal(detail, trust.alias, refreshWarning);
-				return 0;
-			}
-			this.printTerminal(detail, trust.alias);
-			return 1;
-		} catch (error) {
-			process.stderr.write(`${describeControlPlaneError(error)}\n`);
-			return 1;
-		}
-	}
-	printCreated(requestId, status, registryAlias) {
-		if (this.options.outputFormat === "json") {
-			process.stdout.write(`${JSON.stringify({
-				ok: true,
-				operation: this.options.operation,
-				registry: registryAlias,
-				requestId,
-				status
-			})}\n`);
-			return;
-		}
-		process.stdout.write(`${this.options.operation} request ${requestId} for ${this.options.packageName}@${this.options.packageVersion}: ${status}.\n`);
-	}
-	printTerminal(detail, registryAlias, refreshWarning) {
-		const output = formatRegistryRequestTerminal({
-			detail,
-			registryAlias,
-			outputFormat: this.options.outputFormat,
-			presentation: {
-				kind: "lifecycle",
-				operation: this.options.operation,
-				packageName: this.options.packageName,
-				packageVersion: this.options.packageVersion
-			},
-			...refreshWarning ? { registryRefreshWarning: refreshWarning } : {}
-		});
-		process.stdout.write(output.stdout);
-		if (output.stderr) process.stderr.write(output.stderr);
-	}
-};
-function delay(milliseconds) {
-	return new Promise((resolve) => setTimeout(resolve, milliseconds));
-}
-
-//#endregion
-export { PackageLifecycleCommand };
-//# sourceMappingURL=PackageLifecycleCommand.js.map

package/dist/commands/PackageLifecycleCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PackageLifecycleCommand.js","names":[],"sources":["../../src/commands/PackageLifecycleCommand.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\nimport type { CompositionRoot } from '../app/CompositionRoot.js';\nimport type { UAPKGLifecycleCommandName, UAPKGOutputFormat } from '../cli/UAPKGCommandLine.js';\nimport { describeControlPlaneError } from '../control-plane/AccountManager.js';\nimport { AuthenticationSelector } from '../control-plane/AuthenticationSelector.js';\nimport { ControlPlaneClient } from '../control-plane/ControlPlaneClient.js';\nimport {\n  type ControlPlaneAuthMode,\n  ControlPlaneError,\n  type RegistryRequestDetail,\n  type RegistryRequestStatus,\n  type RegistryRequestSubmission,\n} from '../control-plane/ControlPlaneTypes.js';\nimport { PublishIdempotencyStore } from '../control-plane/PublishIdempotencyStore.js';\nimport { InkPromptService } from '../prompts/InkPromptService.js';\nimport {\n  formatRegistryRequestTerminal,\n  isRegistryRequestSuccessStatus,\n  isRegistryRequestTerminalStatus,\n} from '../reporting/RegistryRequestTerminalFormatter.js';\nimport type { Command } from './Command.js';\n\nconst WATCH_TIMEOUT_MS = 30 * 60 * 1000;\nconst REASON_REQUIRED: ReadonlySet<UAPKGLifecycleCommandName> = new Set(['yank', 'unyank', 'unpublish', 'deprecate']);\n\nexport interface PackageLifecycleCommandOptions {\n  readonly operation: UAPKGLifecycleCommandName;\n  readonly packageName: string;\n  readonly packageVersion: string;\n  readonly reason?: string;\n  readonly registry?: string;\n  readonly auth: ControlPlaneAuthMode;\n  readonly detach: boolean;\n  readonly outputFormat: UAPKGOutputFormat;\n}\n\n/**\n * Shared implementation of the five route-derived package lifecycle\n * operations (`uapkg yank|unyank|unpublish|deprecate|undeprecate`). Each\n * command posts to its dedicated submission route and watches the request\n * to readiness unless detached.\n */\nexport class PackageLifecycleCommand implements Command {\n  public constructor(\n    private readonly root: CompositionRoot,\n    private readonly options: PackageLifecycleCommandOptions,\n  ) {}\n\n  public async execute(): Promise<number> {\n    try {\n      const { operation, packageName, packageVersion } = this.options;\n      if (!packageName.trim() || !packageVersion.trim()) {\n        throw new Error(`uapkg ${operation} requires a package name and an exact version.`);\n      }\n      const reason = this.options.reason?.trim();\n      if (REASON_REQUIRED.has(operation) && !reason) {\n        throw new Error(`uapkg ${operation} requires --reason describing why the version is changing state.`);\n      }\n\n      const trust = await this.root.registryTrustResolver.resolve(this.options.registry);\n      const selector = new AuthenticationSelector(this.root.accountManager, new InkPromptService());\n      const oidcTarget = { registryId: trust.registryId, packageName: packageName.trim() };\n      const requestedScopes = this.options.detach\n        ? (['publishing.request.create'] as const)\n        : (['publishing.request.create', 'publishing.request.read.self'] as const);\n      let authentication = await selector.select(this.options.auth, trust, requestedScopes, true, oidcTarget);\n      let requestOtp = authentication.otp;\n      authentication = { kind: authentication.kind, credential: authentication.credential };\n\n      const submission: RegistryRequestSubmission = {\n        registryId: trust.registryId,\n        payload: {\n          packageName: packageName.trim(),\n          packageVersion: packageVersion.trim(),\n          ...(reason ? { reason } : {}),\n        },\n      };\n\n      const idempotencyStore = new PublishIdempotencyStore();\n      const submissionDigest = PublishIdempotencyStore.submissionDigest(operation, submission);\n      const idempotencyKey = idempotencyStore.getOrCreate(submissionDigest, () => randomUUID());\n\n      const client = new ControlPlaneClient(trust.apiBaseUrl);\n      let created: Awaited<ReturnType<ControlPlaneClient['submitRegistryRequest']>>;\n      try {\n        created = await client.submitRegistryRequest(authentication.credential, operation, submission, {\n          idempotencyKey,\n          otp: requestOtp,\n        });\n      } finally {\n        // Do not retain the request-bound code during status reads or watch.\n        requestOtp = undefined;\n      }\n      if (this.options.detach) {\n        this.printCreated(created.requestId, created.status, trust.alias);\n        return 0;\n      }\n\n      let detail = await client.getRegistryRequestDetail(authentication.credential, created.requestId);\n      let previousStatus = '';\n      const deadline = Date.now() + WATCH_TIMEOUT_MS;\n      while (!isRegistryRequestTerminalStatus(detail.request.status)) {\n        if (Date.now() >= deadline) {\n          throw new Error(\n            `Timed out waiting for request ${detail.request.id}. Check it with \\`uapkg requests status ${detail.request.id}\\`.`,\n          );\n        }\n        if (this.options.outputFormat === 'text' && detail.request.status !== previousStatus) {\n          process.stdout.write(\n            `${detail.request.id}: ${detail.request.status}${detail.request.currentStep ? ` (${detail.request.currentStep})` : ''}\\n`,\n          );\n          previousStatus = detail.request.status;\n        }\n        await delay(2_000);\n        try {\n          detail = await client.getRegistryRequestDetail(authentication.credential, created.requestId);\n        } catch (error) {\n          if (!(error instanceof ControlPlaneError) || error.status !== 401) throw error;\n          if (authentication.kind === 'gat') throw error;\n          if (authentication.kind === 'login') {\n            this.root.accountManager.invalidateAccessCredentials(trust);\n          }\n          authentication = await selector.select(\n            authentication.kind,\n            trust,\n            ['publishing.request.read.self'],\n            false,\n            oidcTarget,\n          );\n          detail = await client.getRegistryRequestDetail(authentication.credential, created.requestId);\n        }\n      }\n\n      idempotencyStore.clear(submissionDigest);\n\n      if (isRegistryRequestSuccessStatus(detail.request.status)) {\n        let refreshWarning: string | undefined;\n        try {\n          await this.root.registryTrustResolver.forceRefresh(trust);\n        } catch (error) {\n          refreshWarning = error instanceof Error ? error.message : String(error);\n        }\n        this.printTerminal(detail, trust.alias, refreshWarning);\n        return 0;\n      }\n\n      this.printTerminal(detail, trust.alias);\n      return 1;\n    } catch (error) {\n      process.stderr.write(`${describeControlPlaneError(error)}\\n`);\n      return 1;\n    }\n  }\n\n  private printCreated(requestId: string, status: RegistryRequestStatus, registryAlias: string): void {\n    if (this.options.outputFormat === 'json') {\n      process.stdout.write(\n        `${JSON.stringify({\n          ok: true,\n          operation: this.options.operation,\n          registry: registryAlias,\n          requestId,\n          status,\n        })}\\n`,\n      );\n      return;\n    }\n    process.stdout.write(\n      `${this.options.operation} request ${requestId} for ${this.options.packageName}@${this.options.packageVersion}: ${status}.\\n`,\n    );\n  }\n\n  private printTerminal(detail: RegistryRequestDetail, registryAlias: string, refreshWarning?: string): void {\n    const output = formatRegistryRequestTerminal({\n      detail,\n      registryAlias,\n      outputFormat: this.options.outputFormat,\n      presentation: {\n        kind: 'lifecycle',\n        operation: this.options.operation,\n        packageName: this.options.packageName,\n        packageVersion: this.options.packageVersion,\n      },\n      ...(refreshWarning ? { registryRefreshWarning: refreshWarning } : {}),\n    });\n    process.stdout.write(output.stdout);\n    if (output.stderr) process.stderr.write(output.stderr);\n  }\n}\n\nfunction delay(milliseconds: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, milliseconds));\n}\n"],"mappings":";;;;;;;;;;AAsBA,MAAM,mBAAmB;AACzB,MAAM,kCAA0D,IAAI,IAAI;CAAC;CAAQ;CAAU;CAAa;AAAW,CAAC;;;;;;;AAmBpH,IAAa,0BAAb,MAAwD;CAEnC;CACA;CAFnB,AAAO,YACL,AAAiB,MACjB,AAAiB,SACjB;EAFiB;EACA;CAChB;CAEH,MAAa,UAA2B;EACtC,IAAI;GACF,MAAM,EAAE,WAAW,aAAa,mBAAmB,KAAK;GACxD,IAAI,CAAC,YAAY,KAAK,KAAK,CAAC,eAAe,KAAK,GAC9C,MAAM,IAAI,MAAM,SAAS,UAAU,+CAA+C;GAEpF,MAAM,SAAS,KAAK,QAAQ,QAAQ,KAAK;GACzC,IAAI,gBAAgB,IAAI,SAAS,KAAK,CAAC,QACrC,MAAM,IAAI,MAAM,SAAS,UAAU,iEAAiE;GAGtG,MAAM,QAAQ,MAAM,KAAK,KAAK,sBAAsB,QAAQ,KAAK,QAAQ,QAAQ;GACjF,MAAM,WAAW,IAAI,uBAAuB,KAAK,KAAK,gBAAgB,IAAI,iBAAiB,CAAC;GAC5F,MAAM,aAAa;IAAE,YAAY,MAAM;IAAY,aAAa,YAAY,KAAK;GAAE;GACnF,MAAM,kBAAkB,KAAK,QAAQ,SAChC,CAAC,2BAA2B,IAC5B,CAAC,6BAA6B,8BAA8B;GACjE,IAAI,iBAAiB,MAAM,SAAS,OAAO,KAAK,QAAQ,MAAM,OAAO,iBAAiB,MAAM,UAAU;GACtG,IAAI,aAAa,eAAe;GAChC,iBAAiB;IAAE,MAAM,eAAe;IAAM,YAAY,eAAe;GAAW;GAEpF,MAAM,aAAwC;IAC5C,YAAY,MAAM;IAClB,SAAS;KACP,aAAa,YAAY,KAAK;KAC9B,gBAAgB,eAAe,KAAK;KACpC,GAAI,SAAS,EAAE,OAAO,IAAI,CAAC;IAC7B;GACF;GAEA,MAAM,mBAAmB,IAAI,wBAAwB;GACrD,MAAM,mBAAmB,wBAAwB,iBAAiB,WAAW,UAAU;GACvF,MAAM,iBAAiB,iBAAiB,YAAY,wBAAwB,WAAW,CAAC;GAExF,MAAM,SAAS,IAAI,mBAAmB,MAAM,UAAU;GACtD,IAAI;GACJ,IAAI;IACF,UAAU,MAAM,OAAO,sBAAsB,eAAe,YAAY,WAAW,YAAY;KAC7F;KACA,KAAK;IACP,CAAC;GACH,UAAU;IAER,aAAa;GACf;GACA,IAAI,KAAK,QAAQ,QAAQ;IACvB,KAAK,aAAa,QAAQ,WAAW,QAAQ,QAAQ,MAAM,KAAK;IAChE,OAAO;GACT;GAEA,IAAI,SAAS,MAAM,OAAO,yBAAyB,eAAe,YAAY,QAAQ,SAAS;GAC/F,IAAI,iBAAiB;GACrB,MAAM,WAAW,KAAK,IAAI,IAAI;GAC9B,OAAO,CAAC,gCAAgC,OAAO,QAAQ,MAAM,GAAG;IAC9D,IAAI,KAAK,IAAI,KAAK,UAChB,MAAM,IAAI,MACR,iCAAiC,OAAO,QAAQ,GAAG,0CAA0C,OAAO,QAAQ,GAAG,IACjH;IAEF,IAAI,KAAK,QAAQ,iBAAiB,UAAU,OAAO,QAAQ,WAAW,gBAAgB;KACpF,QAAQ,OAAO,MACb,GAAG,OAAO,QAAQ,GAAG,IAAI,OAAO,QAAQ,SAAS,OAAO,QAAQ,cAAc,KAAK,OAAO,QAAQ,YAAY,KAAK,GAAG,GACxH;KACA,iBAAiB,OAAO,QAAQ;IAClC;IACA,MAAM,MAAM,GAAK;IACjB,IAAI;KACF,SAAS,MAAM,OAAO,yBAAyB,eAAe,YAAY,QAAQ,SAAS;IAC7F,SAAS,OAAO;KACd,IAAI,EAAE,iBAAiB,sBAAsB,MAAM,WAAW,KAAK,MAAM;KACzE,IAAI,eAAe,SAAS,OAAO,MAAM;KACzC,IAAI,eAAe,SAAS,SAC1B,KAAK,KAAK,eAAe,4BAA4B,KAAK;KAE5D,iBAAiB,MAAM,SAAS,OAC9B,eAAe,MACf,OACA,CAAC,8BAA8B,GAC/B,OACA,UACF;KACA,SAAS,MAAM,OAAO,yBAAyB,eAAe,YAAY,QAAQ,SAAS;IAC7F;GACF;GAEA,iBAAiB,MAAM,gBAAgB;GAEvC,IAAI,+BAA+B,OAAO,QAAQ,MAAM,GAAG;IACzD,IAAI;IACJ,IAAI;KACF,MAAM,KAAK,KAAK,sBAAsB,aAAa,KAAK;IAC1D,SAAS,OAAO;KACd,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;IACxE;IACA,KAAK,cAAc,QAAQ,MAAM,OAAO,cAAc;IACtD,OAAO;GACT;GAEA,KAAK,cAAc,QAAQ,MAAM,KAAK;GACtC,OAAO;EACT,SAAS,OAAO;GACd,QAAQ,OAAO,MAAM,GAAG,0BAA0B,KAAK,EAAE,GAAG;GAC5D,OAAO;EACT;CACF;CAEA,AAAQ,aAAa,WAAmB,QAA+B,eAA6B;EAClG,IAAI,KAAK,QAAQ,iBAAiB,QAAQ;GACxC,QAAQ,OAAO,MACb,GAAG,KAAK,UAAU;IAChB,IAAI;IACJ,WAAW,KAAK,QAAQ;IACxB,UAAU;IACV;IACA;GACF,CAAC,EAAE,GACL;GACA;EACF;EACA,QAAQ,OAAO,MACb,GAAG,KAAK,QAAQ,UAAU,WAAW,UAAU,OAAO,KAAK,QAAQ,YAAY,GAAG,KAAK,QAAQ,eAAe,IAAI,OAAO,IAC3H;CACF;CAEA,AAAQ,cAAc,QAA+B,eAAuB,gBAA+B;EACzG,MAAM,SAAS,8BAA8B;GAC3C;GACA;GACA,cAAc,KAAK,QAAQ;GAC3B,cAAc;IACZ,MAAM;IACN,WAAW,KAAK,QAAQ;IACxB,aAAa,KAAK,QAAQ;IAC1B,gBAAgB,KAAK,QAAQ;GAC/B;GACA,GAAI,iBAAiB,EAAE,wBAAwB,eAAe,IAAI,CAAC;EACrE,CAAC;EACD,QAAQ,OAAO,MAAM,OAAO,MAAM;EAClC,IAAI,OAAO,QAAQ,QAAQ,OAAO,MAAM,OAAO,MAAM;CACvD;AACF;AAEA,SAAS,MAAM,cAAqC;CAClD,OAAO,IAAI,SAAS,YAAY,WAAW,SAAS,YAAY,CAAC;AACnE"}

package/dist/commands/PostinstallCandidateBuilder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallCandidateBuilder.d.ts","names":[],"sources":["../../src/commands/PostinstallCandidateBuilder.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;cAqBa;EACJ,MACL,MAAM,iBACN,MAAM,aACN,UAAU,UACV,iBAAiB,sBAChB;;EAoBI,oBAAoB,UAAU"}

package/dist/commands/PostinstallCandidateBuilder.js

@@ -1,44 +0,0 @@
-import * as path$1 from "node:path";
-
-//#region src/commands/PostinstallCandidateBuilder.ts
-/**
-* Builds the {@link PostinstallCandidate} list that the postinstall
-* orchestrator consumes after an installer run.
-*
-* Rules:
-*   * Only `add` and `update` actions produce candidates (unchanged/remove never run postinstall).
-*   * `pluginRoot` is derived from the action's declared install `path` resolved
-*     against the manifest root — matching what the extractor wrote to disk.
-*   * `registry` is sourced from the lockfile entry; if the lockfile lacks the
-*     package (shouldn't happen post-install, but be defensive), the action is
-*     dropped.
-*
-* This adapter lives in the CLI rather than in `@uapkg/uapkg/postinstall/`
-* to keep the postinstall subsystem independent of `@uapkg/installer`.
-*/
-var PostinstallCandidateBuilder = class {
-	build(root, plan, lockfile, installedNames) {
-		const lockPackages = lockfile.packages;
-		const candidates = [];
-		for (const action of plan.actions) {
-			if (action.type !== "add" && action.type !== "update") continue;
-			if (installedNames && !installedNames.has(action.packageName)) continue;
-			const registry = lockPackages[action.packageName]?.registry ?? action.registry;
-			if (!registry) continue;
-			candidates.push({
-				packageName: action.packageName,
-				registry,
-				pluginRoot: path$1.join(root.cwd, action.path)
-			});
-		}
-		return candidates;
-	}
-	/** Convenience: returns `'project' | 'plugin'` for the orchestrator's input. */
-	resolveManifestType(manifest) {
-		return manifest.kind === "project" ? "project" : "plugin";
-	}
-};
-
-//#endregion
-export { PostinstallCandidateBuilder };
-//# sourceMappingURL=PostinstallCandidateBuilder.js.map

package/dist/commands/PostinstallCandidateBuilder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallCandidateBuilder.js","names":["path"],"sources":["../../src/commands/PostinstallCandidateBuilder.ts"],"sourcesContent":["import * as path from 'node:path';\nimport type { InstallPlan } from '@uapkg/installer';\nimport type { Lockfile, Manifest } from '@uapkg/package-manifest-schema';\nimport type { CompositionRoot } from '../app/CompositionRoot.js';\nimport type { PostinstallCandidate } from '../postinstall/runner/PostinstallOrchestrator.js';\n\n/**\n * Builds the {@link PostinstallCandidate} list that the postinstall\n * orchestrator consumes after an installer run.\n *\n * Rules:\n *   * Only `add` and `update` actions produce candidates (unchanged/remove never run postinstall).\n *   * `pluginRoot` is derived from the action's declared install `path` resolved\n *     against the manifest root — matching what the extractor wrote to disk.\n *   * `registry` is sourced from the lockfile entry; if the lockfile lacks the\n *     package (shouldn't happen post-install, but be defensive), the action is\n *     dropped.\n *\n * This adapter lives in the CLI rather than in `@uapkg/uapkg/postinstall/`\n * to keep the postinstall subsystem independent of `@uapkg/installer`.\n */\nexport class PostinstallCandidateBuilder {\n  public build(\n    root: CompositionRoot,\n    plan: InstallPlan,\n    lockfile: Lockfile,\n    installedNames?: ReadonlySet<string>,\n  ): PostinstallCandidate[] {\n    const lockPackages = lockfile.packages as Record<string, { registry: string }>;\n    const candidates: PostinstallCandidate[] = [];\n    for (const action of plan.actions) {\n      if (action.type !== 'add' && action.type !== 'update') continue;\n      // Failed/skipped branches never run postinstall.\n      if (installedNames && !installedNames.has(action.packageName)) continue;\n      const locked = lockPackages[action.packageName];\n      const registry = locked?.registry ?? action.registry;\n      if (!registry) continue;\n      candidates.push({\n        packageName: action.packageName,\n        registry: registry as string,\n        pluginRoot: path.join(root.cwd, action.path),\n      });\n    }\n    return candidates;\n  }\n\n  /** Convenience: returns `'project' | 'plugin'` for the orchestrator's input. */\n  public resolveManifestType(manifest: Manifest): 'project' | 'plugin' {\n    return manifest.kind === 'project' ? 'project' : 'plugin';\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAqBA,IAAa,8BAAb,MAAyC;CACvC,AAAO,MACL,MACA,MACA,UACA,gBACwB;EACxB,MAAM,eAAe,SAAS;EAC9B,MAAM,aAAqC,CAAC;EAC5C,KAAK,MAAM,UAAU,KAAK,SAAS;GACjC,IAAI,OAAO,SAAS,SAAS,OAAO,SAAS,UAAU;GAEvD,IAAI,kBAAkB,CAAC,eAAe,IAAI,OAAO,WAAW,GAAG;GAE/D,MAAM,WADS,aAAa,OAAO,YACZ,EAAE,YAAY,OAAO;GAC5C,IAAI,CAAC,UAAU;GACf,WAAW,KAAK;IACd,aAAa,OAAO;IACV;IACV,YAAYA,OAAK,KAAK,KAAK,KAAK,OAAO,IAAI;GAC7C,CAAC;EACH;EACA,OAAO;CACT;;CAGA,AAAO,oBAAoB,UAA0C;EACnE,OAAO,SAAS,SAAS,YAAY,YAAY;CACnD;AACF"}

package/dist/commands/ProjectGetNameCommand.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProjectGetNameCommand.d.ts","names":[],"sources":["../../src/commands/ProjectGetNameCommand.ts"],"mappings":";;;;;;;;KASY,+BAA+B;cAQ9B,iCAAiC;mBACR;EAApC,YAAoC,MAAM;EAE7B,WAAW"}

package/dist/commands/ProjectGetNameCommand.js

@@ -1,26 +0,0 @@
-import { ManifestReader } from "@uapkg/package-manifest";
-
-//#region src/commands/ProjectGetNameCommand.ts
-var ProjectGetNameCommand = class {
-	root;
-	constructor(root) {
-		this.root = root;
-	}
-	async execute() {
-		const result = await new ManifestReader().read(this.root.cwd);
-		if (!result.ok) {
-			this.root.diagnostics.reportAll(result.diagnostics);
-			return 1;
-		}
-		if (result.value.kind !== "project") {
-			process.stderr.write(`[uapkg] Expected manifest kind 'project', received '${result.value.kind}'\n`);
-			return 1;
-		}
-		process.stdout.write(`${String(result.value.name)}\n`);
-		return 0;
-	}
-};
-
-//#endregion
-export { ProjectGetNameCommand };
-//# sourceMappingURL=ProjectGetNameCommand.js.map

package/dist/commands/ProjectGetNameCommand.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ProjectGetNameCommand.js","names":[],"sources":["../../src/commands/ProjectGetNameCommand.ts"],"sourcesContent":["import { ManifestReader } from '@uapkg/package-manifest';\nimport type { CompositionRoot } from '../app/CompositionRoot.js';\nimport type { Command } from './Command.js';\n\n/**\n * Options for {@link ProjectGetNameCommand}. Reserved for future expansion\n * (e.g. alternate output format); today the command is fully parameterized\n * by {@link CompositionRoot}.\n */\nexport type ProjectGetNameCommandOptions = Record<string, never>;\n\n// ---------------------------------------------------------------------------\n// ProjectGetNameCommand — prints the `name` field of the current project\n// manifest to stdout. Fails with exit code 1 if the manifest is absent, not\n// a project, or invalid. Intended for shell wrapping in CI scripts.\n// ---------------------------------------------------------------------------\n\nexport class ProjectGetNameCommand implements Command {\n  public constructor(private readonly root: CompositionRoot) {}\n\n  public async execute(): Promise<number> {\n    const result = await new ManifestReader().read(this.root.cwd);\n    if (!result.ok) {\n      this.root.diagnostics.reportAll(result.diagnostics);\n      return 1;\n    }\n    if (result.value.kind !== 'project') {\n      process.stderr.write(`[uapkg] Expected manifest kind 'project', received '${result.value.kind}'\\n`);\n      return 1;\n    }\n    process.stdout.write(`${String(result.value.name)}\\n`);\n    return 0;\n  }\n}\n"],"mappings":";;;AAiBA,IAAa,wBAAb,MAAsD;CAChB;CAApC,AAAO,YAAY,AAAiB,MAAuB;EAAvB;CAAwB;CAE5D,MAAa,UAA2B;EACtC,MAAM,SAAS,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,KAAK,KAAK,GAAG;EAC5D,IAAI,CAAC,OAAO,IAAI;GACd,KAAK,KAAK,YAAY,UAAU,OAAO,WAAW;GAClD,OAAO;EACT;EACA,IAAI,OAAO,MAAM,SAAS,WAAW;GACnC,QAAQ,OAAO,MAAM,uDAAuD,OAAO,MAAM,KAAK,IAAI;GAClG,OAAO;EACT;EACA,QAAQ,OAAO,MAAM,GAAG,OAAO,OAAO,MAAM,IAAI,EAAE,GAAG;EACrD,OAAO;CACT;AACF"}

package/dist/commands/PublishCommand.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PublishCommand.d.ts","names":[],"sources":["../../src/commands/PublishCommand.ts"],"mappings":";;;;;;UAsCiB;WACN;WACA;WACA;WACA;WACA;WACA;WACA,MAAM;WACN;WACA,cAAc;;;;;;;;cASZ,0BAA0B;mBAElB;mBACA;EAFnB,YACmB,MAAM,iBACN,SAAS;EAGf,WAAW;UAkLV;UA0BA;UAeN;UAQA;;;iBAcY,wBAAwB,uBAAuB,QAAQ"}

package/dist/commands/PublishCommand.js

@@ -1,259 +0,0 @@
-import { ControlPlaneError } from "../control-plane/ControlPlaneTypes.js";
-import { ControlPlaneClient } from "../control-plane/ControlPlaneClient.js";
-import { describeControlPlaneError } from "../control-plane/AccountManager.js";
-import { AuthenticationSelector } from "../control-plane/AuthenticationSelector.js";
-import { PublishIdempotencyStore, createGitHubActionsPublishIdempotencyKey } from "../control-plane/PublishIdempotencyStore.js";
-import { InkPromptService } from "../prompts/InkPromptService.js";
-import { formatRegistryRequestTerminal, isRegistryRequestSuccessStatus, isRegistryRequestTerminalStatus } from "../reporting/RegistryRequestTerminalFormatter.js";
-import { ArtifactObserver } from "../control-plane/ArtifactObserver.js";
-import { publishRequestDiagnosticForError } from "../control-plane/PublishRequestErrorMapper.js";
-import { isAbsolute, join } from "node:path";
-import { execFile } from "node:child_process";
-import { existsSync } from "node:fs";
-import { randomUUID } from "node:crypto";
-import { readFile } from "node:fs/promises";
-import { readPackageClaimsFromArchive } from "@uapkg/package-claims";
-import { promisify } from "node:util";
-import { getRegistryRepoPath } from "@uapkg/registry-core";
-import { RegistryMetaSchema } from "@uapkg/registry-schema";
-
-//#region src/commands/PublishCommand.ts
-const execFileAsync = promisify(execFile);
-const PUBLISH_WATCH_TIMEOUT_MS = 18e5;
-/**
-* Artifact-first publish (PS-REQ-002): the CLI observes the exact release
-* artifact (download or `--asset-path`), reads packaged claims from it, and
-* submits the route-derived publish operation. The packaged archive — never
-* the working tree — is what gets published.
-*/
-var PublishCommand = class {
-	root;
-	options;
-	constructor(root, options) {
-		this.root = root;
-		this.options = options;
-	}
-	async execute() {
-		try {
-			const manifestResult = await this.root.packageManifest.readManifest();
-			if (!manifestResult.ok) throw new Error(manifestResult.diagnostics[0]?.message ?? "Unable to read uapkg.json.");
-			const manifest = manifestResult.value;
-			const registryAlias = this.options.registry ?? manifest.publish?.registry;
-			const trust = await this.root.registryTrustResolver.resolve(registryAlias);
-			const source = await this.resolveSource(manifest.version, manifest.publish);
-			const observer = new ArtifactObserver();
-			const artifact = this.options.assetPath ? await observer.observeLocalArchive(resolveAssetPath(this.root.cwd, this.options.assetPath)) : await observer.downloadReleaseAsset(source.repository, source.releaseTag, source.assetName);
-			try {
-				const claimsResult = await readPackageClaimsFromArchive(artifact.archivePath);
-				if (!claimsResult.ok) throw new Error(claimsResult.diagnostics[0]?.message ?? "Unable to read the packaged uapkg.json from the artifact.");
-				const claims = claimsResult.value;
-				if (this.options.outputFormat === "text" && (claims.name !== manifest.name || claims.version !== manifest.version)) process.stderr.write(`Publishing ${claims.name}@${claims.version} from the packaged artifact (local manifest says ${manifest.name}@${manifest.version}).\n`);
-				if (await readTrustedRegistryType(trust.cacheShortId) === "public" && claims.private) throw new Error(`"${claims.name}" is marked private in its packaged manifest; a public UAPKG registry does not accept private packages.`);
-				const scopedOwner = scopedOwnerName(claims.name);
-				const configuredOwner = normalizeOwner(this.options.owner ?? manifest.publish?.owner);
-				if (scopedOwner && configuredOwner && configuredOwner.toLowerCase() !== scopedOwner.toLowerCase()) throw new Error(`Package "${claims.name}" belongs to the "${scopedOwner}" namespace; --owner cannot select "${configuredOwner}".`);
-				const owner = scopedOwner ?? configuredOwner;
-				const selector = new AuthenticationSelector(this.root.accountManager, new InkPromptService());
-				const oidcTarget = {
-					registryId: trust.registryId,
-					packageName: claims.name
-				};
-				const requestedScopes = this.options.detach ? ["publishing.request.create"] : ["publishing.request.create", "publishing.request.read.self"];
-				let authentication = await selector.select(this.options.auth, trust, requestedScopes, true, oidcTarget);
-				let requestOtp = authentication.otp;
-				authentication = {
-					kind: authentication.kind,
-					credential: authentication.credential
-				};
-				const submission = {
-					registryId: trust.registryId,
-					...owner ? { ownerOrganizationName: owner } : {},
-					payload: {
-						packageName: claims.name,
-						packageVersion: claims.version,
-						source,
-						observedIntegrity: {
-							sha256: artifact.sha256,
-							sizeBytes: artifact.sizeBytes
-						},
-						claims
-					}
-				};
-				const idempotencyStore = new PublishIdempotencyStore();
-				const submissionDigest = PublishIdempotencyStore.submissionDigest("publish", submission);
-				const usesActionsIdempotency = authentication.kind === "oidc";
-				const idempotencyKey = usesActionsIdempotency ? createGitHubActionsPublishIdempotencyKey({
-					registryId: trust.registryId,
-					packageName: claims.name,
-					packageVersion: claims.version,
-					artifactSha256: artifact.sha256
-				}) : idempotencyStore.getOrCreate(submissionDigest, () => randomUUID());
-				const client = new ControlPlaneClient(trust.apiBaseUrl);
-				let created;
-				try {
-					created = await client.submitRegistryRequest(authentication.credential, "publish", submission, {
-						idempotencyKey,
-						otp: requestOtp
-					});
-				} catch (error) {
-					if (this.options.outputFormat === "json") throw error;
-					this.root.diagnostics.reportOne(publishRequestDiagnosticForError(error, {
-						packageName: claims.name,
-						packageVersion: claims.version,
-						registryAlias: trust.alias,
-						registryName: trust.registryName,
-						registryIssuer: trust.issuer,
-						credentialKind: authentication.kind,
-						...owner ? { requestedOwner: owner } : {},
-						repository: source.repository
-					}));
-					return 1;
-				} finally {
-					requestOtp = void 0;
-				}
-				if (this.options.detach) {
-					this.printCreated(created.requestId, created.status, trust.alias);
-					return 0;
-				}
-				const readRequest = async () => {
-					try {
-						return await client.getRegistryRequestDetail(authentication.credential, created.requestId);
-					} catch (error) {
-						if (!(error instanceof ControlPlaneError) || error.status !== 401) throw error;
-						if (authentication.kind === "gat") throw error;
-						if (authentication.kind === "login") this.root.accountManager.invalidateAccessCredentials(trust);
-						authentication = await selector.select(authentication.kind, trust, ["publishing.request.read.self"], false, oidcTarget);
-						return client.getRegistryRequestDetail(authentication.credential, created.requestId);
-					}
-				};
-				let detail = await readRequest();
-				let previousStatus = "";
-				const deadline = Date.now() + PUBLISH_WATCH_TIMEOUT_MS;
-				while (!isRegistryRequestTerminalStatus(detail.request.status)) {
-					if (Date.now() >= deadline) throw new Error(`Timed out waiting for publishing request ${detail.request.id}. Check it with \`uapkg requests status ${detail.request.id}\`.`);
-					if (this.options.outputFormat === "text" && detail.request.status !== previousStatus) {
-						process.stdout.write(`${detail.request.id}: ${detail.request.status}${detail.request.currentStep ? ` (${detail.request.currentStep})` : ""}\n`);
-						previousStatus = detail.request.status;
-					}
-					await delay(2e3);
-					detail = await readRequest();
-				}
-				if (!usesActionsIdempotency) idempotencyStore.clear(submissionDigest);
-				if (isRegistryRequestSuccessStatus(detail.request.status)) {
-					let refreshWarning;
-					try {
-						await this.root.registryTrustResolver.forceRefresh(trust);
-					} catch (error) {
-						refreshWarning = error instanceof Error ? error.message : String(error);
-					}
-					this.printTerminal(detail, trust.alias, refreshWarning);
-					return 0;
-				}
-				this.printTerminal(detail, trust.alias);
-				return 1;
-			} finally {
-				await artifact.cleanup();
-			}
-		} catch (error) {
-			process.stderr.write(`${describeControlPlaneError(error)}\n`);
-			return 1;
-		}
-	}
-	async resolveSource(packageVersion, manifestPublish) {
-		const repository = normalizeGitHubRepository(this.options.repository ?? manifestPublish?.repository ?? await this.gitOrigin());
-		const releaseTag = (this.options.tag ?? `v${packageVersion}`).trim();
-		const assetName = (this.options.asset ?? manifestPublish?.asset ?? "package.tgz").trim();
-		if (!releaseTag) throw new Error("The GitHub Release tag cannot be empty.");
-		if (!assetName || assetName.includes("/") || assetName.includes("\\")) throw new Error("The GitHub Release asset must be a file name, not a path.");
-		return {
-			type: "github_release",
-			repository,
-			releaseTag,
-			assetName
-		};
-	}
-	async gitOrigin() {
-		const git = this.root.config.get("git") ?? "git";
-		try {
-			const { stdout } = await execFileAsync(git, [
-				"remote",
-				"get-url",
-				"origin"
-			], {
-				cwd: this.root.cwd,
-				timeout: 1e4
-			});
-			return stdout.trim();
-		} catch (error) {
-			throw new Error("Unable to derive the GitHub repository from remote \"origin\". Use --repository.", { cause: error });
-		}
-	}
-	printCreated(requestId, status, registryAlias) {
-		if (this.options.outputFormat === "json") {
-			process.stdout.write(`${JSON.stringify({
-				ok: true,
-				registry: registryAlias,
-				requestId,
-				status
-			})}\n`);
-			return;
-		}
-		process.stdout.write(`Publishing request ${requestId} submitted to "${registryAlias}" (${status}).\n`);
-	}
-	printTerminal(detail, registryAlias, refreshWarning) {
-		const output = formatRegistryRequestTerminal({
-			detail,
-			registryAlias,
-			outputFormat: this.options.outputFormat,
-			presentation: { kind: "publish" },
-			...refreshWarning ? { registryRefreshWarning: refreshWarning } : {}
-		});
-		process.stdout.write(output.stdout);
-		if (output.stderr) process.stderr.write(output.stderr);
-	}
-};
-/** Reads the installer-trusted registry type from the projected registry snapshot. */
-async function readTrustedRegistryType(cacheShortId) {
-	const metaPath = join(getRegistryRepoPath(cacheShortId), ".uapkg", "registry.meta.json");
-	if (!existsSync(metaPath)) throw new Error("Trusted registry metadata is missing; registry policy cannot be determined.");
-	try {
-		const raw = await readFile(metaPath, "utf8");
-		const parsed = RegistryMetaSchema.safeParse(JSON.parse(raw));
-		if (!parsed.success) throw new Error("metadata does not match a supported registry schema");
-		return parsed.data.registry.registryType;
-	} catch (error) {
-		throw new Error("Trusted registry metadata is invalid or uses an unsupported schema version.", { cause: error });
-	}
-}
-function resolveAssetPath(cwd, assetPath) {
-	return isAbsolute(assetPath) ? assetPath : join(cwd, assetPath);
-}
-function normalizeGitHubRepository(input) {
-	let value = input.trim();
-	const scp = value.match(/^git@github\.com:([^/]+)\/(.+)$/i);
-	if (scp) value = `${scp[1]}/${scp[2]}`;
-	if (value.includes("://")) {
-		const url = new URL(value);
-		if (url.hostname.toLowerCase() !== "github.com") throw new Error("Publishing sources must be hosted on github.com in UAPKG v1.");
-		value = url.pathname.replace(/^\/+/, "");
-	}
-	value = value.replace(/\.git$/i, "").replace(/\/+$/, "");
-	if (!/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/.test(value)) throw new Error("Expected a GitHub repository in owner/repository form.");
-	return value.toLowerCase();
-}
-function scopedOwnerName(packageName) {
-	return packageName.match(/^@([^/]+)\/[^/]+$/)?.[1]?.toLowerCase();
-}
-function normalizeOwner(value) {
-	if (value === void 0) return void 0;
-	const owner = value.trim().toLowerCase();
-	if (!/^[a-z0-9][a-z0-9-_]*$/.test(owner)) throw new Error("The publish owner must be a valid UAPKG organization name.");
-	return owner;
-}
-function delay(milliseconds) {
-	return new Promise((resolve) => setTimeout(resolve, milliseconds));
-}
-
-//#endregion
-export { PublishCommand, readTrustedRegistryType };
-//# sourceMappingURL=PublishCommand.js.map