@uapkg/cli 1.4.0 → 1.5.0

package/dist/postinstall/loader/EntryResolver.js

@@ -1,39 +0,0 @@
-import { createPostinstallDuplicateEntryDiagnostic, fail, ok } from "@uapkg/diagnostics";
-import * as path$1 from "node:path";
-import fs from "node:fs";
-
-//#region src/postinstall/loader/EntryResolver.ts
-/** Candidate extensions in resolution order (spec-mandated). */
-const CANDIDATE_EXTENSIONS = [
-	"ts",
-	"js",
-	"mjs"
-];
-/**
-* Locates `.uapkg/postinstall.<ext>` inside a plugin root, enforcing the
-* order `ts → js → mjs`. If the plugin has two or more candidate files an
-* error diagnostic `POSTINSTALL_DUPLICATE_ENTRY` is returned so the user can
-* clean up ambiguity. `ok(null)` means "no postinstall defined" — a valid,
-* silent state.
-*/
-var EntryResolver = class {
-	resolve(packageName, pluginRoot) {
-		const dir = path$1.join(pluginRoot, ".uapkg");
-		if (!fs.existsSync(dir)) return ok(null);
-		const found = [];
-		for (const kind of CANDIDATE_EXTENSIONS) {
-			const candidate = path$1.join(dir, `postinstall.${kind}`);
-			if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) found.push({
-				path: candidate,
-				kind
-			});
-		}
-		if (found.length === 0) return ok(null);
-		if (found.length > 1) return fail([createPostinstallDuplicateEntryDiagnostic(packageName, found.map((entry) => entry.path))]);
-		return ok(found[0]);
-	}
-};
-
-//#endregion
-export { EntryResolver };
-//# sourceMappingURL=EntryResolver.js.map

package/dist/postinstall/loader/EntryResolver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"EntryResolver.js","names":["path"],"sources":["../../../src/postinstall/loader/EntryResolver.ts"],"sourcesContent":["import fs from 'node:fs';\nimport * as path from 'node:path';\nimport { createPostinstallDuplicateEntryDiagnostic, fail, ok, type Result } from '@uapkg/diagnostics';\n\n/** Candidate extensions in resolution order (spec-mandated). */\nconst CANDIDATE_EXTENSIONS = ['ts', 'js', 'mjs'] as const;\nexport type PostinstallEntryKind = (typeof CANDIDATE_EXTENSIONS)[number];\n\nexport interface ResolvedEntry {\n  readonly path: string;\n  readonly kind: PostinstallEntryKind;\n}\n\n/**\n * Locates `.uapkg/postinstall.<ext>` inside a plugin root, enforcing the\n * order `ts → js → mjs`. If the plugin has two or more candidate files an\n * error diagnostic `POSTINSTALL_DUPLICATE_ENTRY` is returned so the user can\n * clean up ambiguity. `ok(null)` means \"no postinstall defined\" — a valid,\n * silent state.\n */\nexport class EntryResolver {\n  public resolve(packageName: string, pluginRoot: string): Result<ResolvedEntry | null> {\n    const dir = path.join(pluginRoot, '.uapkg');\n    if (!fs.existsSync(dir)) return ok(null);\n\n    const found: ResolvedEntry[] = [];\n    for (const kind of CANDIDATE_EXTENSIONS) {\n      const candidate = path.join(dir, `postinstall.${kind}`);\n      if (fs.existsSync(candidate) && fs.statSync(candidate).isFile()) {\n        found.push({ path: candidate, kind });\n      }\n    }\n\n    if (found.length === 0) return ok(null);\n    if (found.length > 1) {\n      return fail([\n        createPostinstallDuplicateEntryDiagnostic(\n          packageName,\n          found.map((entry) => entry.path),\n        ),\n      ]);\n    }\n    return ok(found[0]);\n  }\n}\n"],"mappings":";;;;;;AAKA,MAAM,uBAAuB;CAAC;CAAM;CAAM;AAAK;;;;;;;;AAe/C,IAAa,gBAAb,MAA2B;CACzB,AAAO,QAAQ,aAAqB,YAAkD;EACpF,MAAM,MAAMA,OAAK,KAAK,YAAY,QAAQ;EAC1C,IAAI,CAAC,GAAG,WAAW,GAAG,GAAG,OAAO,GAAG,IAAI;EAEvC,MAAM,QAAyB,CAAC;EAChC,KAAK,MAAM,QAAQ,sBAAsB;GACvC,MAAM,YAAYA,OAAK,KAAK,KAAK,eAAe,MAAM;GACtD,IAAI,GAAG,WAAW,SAAS,KAAK,GAAG,SAAS,SAAS,CAAC,CAAC,OAAO,GAC5D,MAAM,KAAK;IAAE,MAAM;IAAW;GAAK,CAAC;EAExC;EAEA,IAAI,MAAM,WAAW,GAAG,OAAO,GAAG,IAAI;EACtC,IAAI,MAAM,SAAS,GACjB,OAAO,KAAK,CACV,0CACE,aACA,MAAM,KAAK,UAAU,MAAM,IAAI,CACjC,CACF,CAAC;EAEH,OAAO,GAAG,MAAM,EAAE;CACpB;AACF"}

package/dist/postinstall/loader/EsbuildTranspiler.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"EsbuildTranspiler.d.ts","names":[],"sources":["../../../src/postinstall/loader/EsbuildTranspiler.ts"],"mappings":";;;;;;;;;;;;;;;cAiBa;EACE,UAAU,qBAAqB,oBAAoB,QAAQ"}

package/dist/postinstall/loader/EsbuildTranspiler.js

@@ -1,54 +0,0 @@
-import { createPostinstallEsbuildErrorDiagnostic, fail, ok } from "@uapkg/diagnostics";
-import fs from "node:fs";
-import { build } from "esbuild";
-
-//#region src/postinstall/loader/EsbuildTranspiler.ts
-/**
-* Transpiles a single `.ts` postinstall entry into an in-memory ESM bundle.
-*
-* Constraints:
-*   * `bundle: false` — we only lower TypeScript to JS; users are expected to
-*     import shared modules via `node_modules` which the loader's dynamic
-*     import handles natively.
-*   * No type-checking. The user's IDE / CI catches type errors; `uapkg` only
-*     needs a runnable module.
-*   * `platform: node`, `format: esm`, `target: node20`.
-*
-* On failure returns a `POSTINSTALL_ESBUILD_ERROR` diagnostic.
-*/
-var EsbuildTranspiler = class {
-	async transpile(packageName, entryFile) {
-		let source;
-		try {
-			source = fs.readFileSync(entryFile, "utf-8");
-		} catch (error) {
-			return fail([createPostinstallEsbuildErrorDiagnostic(packageName, entryFile, error instanceof Error ? error.message : String(error))]);
-		}
-		const options = {
-			stdin: {
-				contents: source,
-				loader: "ts",
-				sourcefile: entryFile,
-				resolveDir: entryFile.replace(/[\\/][^\\/]+$/, "")
-			},
-			bundle: false,
-			write: false,
-			format: "esm",
-			platform: "node",
-			target: "node20",
-			sourcemap: false,
-			logLevel: "silent"
-		};
-		try {
-			const file = (await build(options)).outputFiles?.[0];
-			if (!file) return fail([createPostinstallEsbuildErrorDiagnostic(packageName, entryFile, "esbuild produced no output")]);
-			return ok(file.text);
-		} catch (error) {
-			return fail([createPostinstallEsbuildErrorDiagnostic(packageName, entryFile, error instanceof Error ? error.message : String(error))]);
-		}
-	}
-};
-
-//#endregion
-export { EsbuildTranspiler };
-//# sourceMappingURL=EsbuildTranspiler.js.map

package/dist/postinstall/loader/EsbuildTranspiler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"EsbuildTranspiler.js","names":[],"sources":["../../../src/postinstall/loader/EsbuildTranspiler.ts"],"sourcesContent":["import fs from 'node:fs';\nimport { createPostinstallEsbuildErrorDiagnostic, fail, ok, type Result } from '@uapkg/diagnostics';\nimport { type BuildOptions, build } from 'esbuild';\n\n/**\n * Transpiles a single `.ts` postinstall entry into an in-memory ESM bundle.\n *\n * Constraints:\n *   * `bundle: false` — we only lower TypeScript to JS; users are expected to\n *     import shared modules via `node_modules` which the loader's dynamic\n *     import handles natively.\n *   * No type-checking. The user's IDE / CI catches type errors; `uapkg` only\n *     needs a runnable module.\n *   * `platform: node`, `format: esm`, `target: node20`.\n *\n * On failure returns a `POSTINSTALL_ESBUILD_ERROR` diagnostic.\n */\nexport class EsbuildTranspiler {\n  public async transpile(packageName: string, entryFile: string): Promise<Result<string>> {\n    let source: string;\n    try {\n      source = fs.readFileSync(entryFile, 'utf-8');\n    } catch (error) {\n      return fail([\n        createPostinstallEsbuildErrorDiagnostic(\n          packageName,\n          entryFile,\n          error instanceof Error ? error.message : String(error),\n        ),\n      ]);\n    }\n\n    const options: BuildOptions = {\n      stdin: {\n        contents: source,\n        loader: 'ts',\n        sourcefile: entryFile,\n        resolveDir: entryFile.replace(/[\\\\/][^\\\\/]+$/, ''),\n      },\n      bundle: false,\n      write: false,\n      format: 'esm',\n      platform: 'node',\n      target: 'node20',\n      sourcemap: false,\n      logLevel: 'silent',\n    };\n\n    try {\n      const result = await build(options);\n      const file = result.outputFiles?.[0];\n      if (!file) {\n        return fail([createPostinstallEsbuildErrorDiagnostic(packageName, entryFile, 'esbuild produced no output')]);\n      }\n      return ok(file.text);\n    } catch (error) {\n      return fail([\n        createPostinstallEsbuildErrorDiagnostic(\n          packageName,\n          entryFile,\n          error instanceof Error ? error.message : String(error),\n        ),\n      ]);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAiBA,IAAa,oBAAb,MAA+B;CAC7B,MAAa,UAAU,aAAqB,WAA4C;EACtF,IAAI;EACJ,IAAI;GACF,SAAS,GAAG,aAAa,WAAW,OAAO;EAC7C,SAAS,OAAO;GACd,OAAO,KAAK,CACV,wCACE,aACA,WACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD,CACF,CAAC;EACH;EAEA,MAAM,UAAwB;GAC5B,OAAO;IACL,UAAU;IACV,QAAQ;IACR,YAAY;IACZ,YAAY,UAAU,QAAQ,iBAAiB,EAAE;GACnD;GACA,QAAQ;GACR,OAAO;GACP,QAAQ;GACR,UAAU;GACV,QAAQ;GACR,WAAW;GACX,UAAU;EACZ;EAEA,IAAI;GAEF,MAAM,QAAO,MADQ,MAAM,OAAO,EACf,CAAC,cAAc;GAClC,IAAI,CAAC,MACH,OAAO,KAAK,CAAC,wCAAwC,aAAa,WAAW,4BAA4B,CAAC,CAAC;GAE7G,OAAO,GAAG,KAAK,IAAI;EACrB,SAAS,OAAO;GACd,OAAO,KAAK,CACV,wCACE,aACA,WACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD,CACF,CAAC;EACH;CACF;AACF"}

package/dist/postinstall/loader/ExportValidator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ExportValidator.d.ts","names":[],"sources":["../../../src/postinstall/loader/ExportValidator.ts"],"mappings":";;;;;;;;;;;cAWa;EACJ,SAAS,qBAAqB,mBAAmB,uBAAuB,OAAO;UAa9E"}

package/dist/postinstall/loader/ExportValidator.js

@@ -1,38 +0,0 @@
-import { PostinstallDefinitionSchema } from "../api/PostinstallDsl.js";
-import { createPostinstallInvalidExportDiagnostic, fail, ok } from "@uapkg/diagnostics";
-
-//#region src/postinstall/loader/ExportValidator.ts
-/**
-* Normalizes an imported module to its default export (or the module object
-* itself for CommonJS-style returns) and validates against
-* {@link PostinstallDefinitionSchema}.
-*
-* Emits `POSTINSTALL_INVALID_EXPORT` with flattened Zod issue messages when
-* the shape is wrong.
-*/
-var ExportValidator = class {
-	validate(packageName, entryFile, moduleValue) {
-		const unwrapped = this.unwrap(moduleValue);
-		const parsed = PostinstallDefinitionSchema.safeParse(unwrapped);
-		if (!parsed.success) {
-			const issues = parsed.error.issues.map((issue) => {
-				const where = issue.path.length > 0 ? ` at ${issue.path.join(".")}` : "";
-				return `${issue.message}${where}`;
-			});
-			return fail([createPostinstallInvalidExportDiagnostic(packageName, entryFile, issues)]);
-		}
-		return ok(parsed.data);
-	}
-	unwrap(moduleValue) {
-		if (moduleValue && typeof moduleValue === "object") {
-			const record = moduleValue;
-			if ("default" in record) return record.default;
-			return record;
-		}
-		return moduleValue;
-	}
-};
-
-//#endregion
-export { ExportValidator };
-//# sourceMappingURL=ExportValidator.js.map

package/dist/postinstall/loader/ExportValidator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ExportValidator.js","names":[],"sources":["../../../src/postinstall/loader/ExportValidator.ts"],"sourcesContent":["import { createPostinstallInvalidExportDiagnostic, fail, ok, type Result } from '@uapkg/diagnostics';\nimport { type PostinstallDefinition, PostinstallDefinitionSchema } from '#cli/postinstall/api/PostinstallDsl.ts';\n\n/**\n * Normalizes an imported module to its default export (or the module object\n * itself for CommonJS-style returns) and validates against\n * {@link PostinstallDefinitionSchema}.\n *\n * Emits `POSTINSTALL_INVALID_EXPORT` with flattened Zod issue messages when\n * the shape is wrong.\n */\nexport class ExportValidator {\n  public validate(packageName: string, entryFile: string, moduleValue: unknown): Result<PostinstallDefinition> {\n    const unwrapped = this.unwrap(moduleValue);\n    const parsed = PostinstallDefinitionSchema.safeParse(unwrapped);\n    if (!parsed.success) {\n      const issues = parsed.error.issues.map((issue) => {\n        const where = issue.path.length > 0 ? ` at ${issue.path.join('.')}` : '';\n        return `${issue.message}${where}`;\n      });\n      return fail([createPostinstallInvalidExportDiagnostic(packageName, entryFile, issues)]);\n    }\n    return ok(parsed.data);\n  }\n\n  private unwrap(moduleValue: unknown): unknown {\n    if (moduleValue && typeof moduleValue === 'object') {\n      const record = moduleValue as Record<string, unknown>;\n      if ('default' in record) return record.default;\n      return record;\n    }\n    return moduleValue;\n  }\n}\n"],"mappings":";;;;;;;;;;;;AAWA,IAAa,kBAAb,MAA6B;CAC3B,AAAO,SAAS,aAAqB,WAAmB,aAAqD;EAC3G,MAAM,YAAY,KAAK,OAAO,WAAW;EACzC,MAAM,SAAS,4BAA4B,UAAU,SAAS;EAC9D,IAAI,CAAC,OAAO,SAAS;GACnB,MAAM,SAAS,OAAO,MAAM,OAAO,KAAK,UAAU;IAChD,MAAM,QAAQ,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,KAAK,GAAG,MAAM;IACtE,OAAO,GAAG,MAAM,UAAU;GAC5B,CAAC;GACD,OAAO,KAAK,CAAC,yCAAyC,aAAa,WAAW,MAAM,CAAC,CAAC;EACxF;EACA,OAAO,GAAG,OAAO,IAAI;CACvB;CAEA,AAAQ,OAAO,aAA+B;EAC5C,IAAI,eAAe,OAAO,gBAAgB,UAAU;GAClD,MAAM,SAAS;GACf,IAAI,aAAa,QAAQ,OAAO,OAAO;GACvC,OAAO;EACT;EACA,OAAO;CACT;AACF"}

package/dist/postinstall/loader/ModuleImporter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"ModuleImporter.d.ts","names":[],"sources":["../../../src/postinstall/loader/ModuleImporter.ts"],"mappings":";;KAMY;WACG;WAAuB;;;;WAEvB;WAA6B;WAAuB;;;;;;;;;;;;;cAatD;EACE,OAAO,qBAAqB,QAAQ,eAAe,QAAQ;UAY1D;UAkBN;UAQA"}

package/dist/postinstall/loader/ModuleImporter.js

@@ -1,52 +0,0 @@
-import { createPostinstallLoadFailedDiagnostic, fail, ok } from "@uapkg/diagnostics";
-import * as path$1 from "node:path";
-import fs from "node:fs";
-import * as os from "node:os";
-import { pathToFileURL } from "node:url";
-
-//#region src/postinstall/loader/ModuleImporter.ts
-/**
-* Imports a postinstall module.
-*
-* For `.js`/`.mjs` files we use the file URL directly so relative imports and
-* `node_modules` resolution work.
-*
-* For transpiled `.ts` code we write to a sibling temp file next to the
-* original entry — data: URLs cannot resolve relative specifiers — and delete
-* it on best-effort basis after import. The file lives in the OS tmp dir
-* keyed by a timestamp+pid, avoiding collisions across concurrent installs.
-*/
-var ModuleImporter = class {
-	async import(packageName, source) {
-		if (source.kind === "file") return this.importFileUrl(packageName, source.path, source.path);
-		const tmpFile = this.createTempFile(source.originalPath, source.code);
-		try {
-			return await this.importFileUrl(packageName, tmpFile, source.originalPath);
-		} finally {
-			this.safeUnlink(tmpFile);
-		}
-	}
-	async importFileUrl(packageName, filePath, reportedPath) {
-		try {
-			const moduleValue = await import(`${pathToFileURL(filePath).href}?t=${Date.now()}`);
-			return ok(moduleValue);
-		} catch (error) {
-			return fail([createPostinstallLoadFailedDiagnostic(packageName, reportedPath, error instanceof Error ? error.message : String(error))]);
-		}
-	}
-	createTempFile(originalPath, code) {
-		const fileName = `uapkg-postinstall-${path$1.basename(originalPath, path$1.extname(originalPath))}-${process.pid}-${Date.now()}.mjs`;
-		const tmpFile = path$1.join(os.tmpdir(), fileName);
-		fs.writeFileSync(tmpFile, code, "utf-8");
-		return tmpFile;
-	}
-	safeUnlink(filePath) {
-		try {
-			fs.unlinkSync(filePath);
-		} catch {}
-	}
-};
-
-//#endregion
-export { ModuleImporter };
-//# sourceMappingURL=ModuleImporter.js.map

package/dist/postinstall/loader/ModuleImporter.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ModuleImporter.js","names":["path"],"sources":["../../../src/postinstall/loader/ModuleImporter.ts"],"sourcesContent":["import fs from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport { pathToFileURL } from 'node:url';\nimport { createPostinstallLoadFailedDiagnostic, fail, ok, type Result } from '@uapkg/diagnostics';\n\nexport type ModuleSource =\n  | { readonly kind: 'file'; readonly path: string }\n  /** ESM source already transpiled by {@link EsbuildTranspiler}. */\n  | { readonly kind: 'transpiled'; readonly code: string; readonly originalPath: string };\n\n/**\n * Imports a postinstall module.\n *\n * For `.js`/`.mjs` files we use the file URL directly so relative imports and\n * `node_modules` resolution work.\n *\n * For transpiled `.ts` code we write to a sibling temp file next to the\n * original entry — data: URLs cannot resolve relative specifiers — and delete\n * it on best-effort basis after import. The file lives in the OS tmp dir\n * keyed by a timestamp+pid, avoiding collisions across concurrent installs.\n */\nexport class ModuleImporter {\n  public async import(packageName: string, source: ModuleSource): Promise<Result<unknown>> {\n    if (source.kind === 'file') {\n      return this.importFileUrl(packageName, source.path, source.path);\n    }\n    const tmpFile = this.createTempFile(source.originalPath, source.code);\n    try {\n      return await this.importFileUrl(packageName, tmpFile, source.originalPath);\n    } finally {\n      this.safeUnlink(tmpFile);\n    }\n  }\n\n  private async importFileUrl(packageName: string, filePath: string, reportedPath: string): Promise<Result<unknown>> {\n    try {\n      // Cache-bust with a query parameter so repeated postinstall runs in the\n      // same process (e.g. tests) always reload the latest bytes on disk.\n      const url = `${pathToFileURL(filePath).href}?t=${Date.now()}`;\n      const moduleValue = await import(url);\n      return ok(moduleValue);\n    } catch (error) {\n      return fail([\n        createPostinstallLoadFailedDiagnostic(\n          packageName,\n          reportedPath,\n          error instanceof Error ? error.message : String(error),\n        ),\n      ]);\n    }\n  }\n\n  private createTempFile(originalPath: string, code: string): string {\n    const base = path.basename(originalPath, path.extname(originalPath));\n    const fileName = `uapkg-postinstall-${base}-${process.pid}-${Date.now()}.mjs`;\n    const tmpFile = path.join(os.tmpdir(), fileName);\n    fs.writeFileSync(tmpFile, code, 'utf-8');\n    return tmpFile;\n  }\n\n  private safeUnlink(filePath: string): void {\n    try {\n      fs.unlinkSync(filePath);\n    } catch {\n      // Best-effort cleanup; OS tmp dir is rotated anyway.\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsBA,IAAa,iBAAb,MAA4B;CAC1B,MAAa,OAAO,aAAqB,QAAgD;EACvF,IAAI,OAAO,SAAS,QAClB,OAAO,KAAK,cAAc,aAAa,OAAO,MAAM,OAAO,IAAI;EAEjE,MAAM,UAAU,KAAK,eAAe,OAAO,cAAc,OAAO,IAAI;EACpE,IAAI;GACF,OAAO,MAAM,KAAK,cAAc,aAAa,SAAS,OAAO,YAAY;EAC3E,UAAU;GACR,KAAK,WAAW,OAAO;EACzB;CACF;CAEA,MAAc,cAAc,aAAqB,UAAkB,cAAgD;EACjH,IAAI;GAIF,MAAM,cAAc,MAAM,OAAO,GADlB,cAAc,QAAQ,CAAC,CAAC,KAAK,KAAK,KAAK,IAAI;GAE1D,OAAO,GAAG,WAAW;EACvB,SAAS,OAAO;GACd,OAAO,KAAK,CACV,sCACE,aACA,cACA,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CACvD,CACF,CAAC;EACH;CACF;CAEA,AAAQ,eAAe,cAAsB,MAAsB;EAEjE,MAAM,WAAW,qBADJA,OAAK,SAAS,cAAcA,OAAK,QAAQ,YAAY,CACzB,EAAE,GAAG,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE;EACxE,MAAM,UAAUA,OAAK,KAAK,GAAG,OAAO,GAAG,QAAQ;EAC/C,GAAG,cAAc,SAAS,MAAM,OAAO;EACvC,OAAO;CACT;CAEA,AAAQ,WAAW,UAAwB;EACzC,IAAI;GACF,GAAG,WAAW,QAAQ;EACxB,QAAQ,CAER;CACF;AACF"}

package/dist/postinstall/loader/PostinstallLoader.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallLoader.d.ts","names":[],"sources":["../../../src/postinstall/loader/PostinstallLoader.ts"],"mappings":";;;;;;;UAOiB;WACN;WACA;WACA;WACA,YAAY;;;;;;;;;;;;cAaV;mBAEQ;mBACA;mBACA;mBACA;EAJnB,YACmB,gBAAe,eACf,aAAY,mBACZ,WAAU,gBACV,YAAW;EAGjB,KAAK,qBAAqB,qBAAqB,QAAQ,OAAO;UAuB7D"}

package/dist/postinstall/loader/PostinstallLoader.js

@@ -1,64 +0,0 @@
-import { EntryResolver } from "./EntryResolver.js";
-import { EsbuildTranspiler } from "./EsbuildTranspiler.js";
-import { ExportValidator } from "./ExportValidator.js";
-import { ModuleImporter } from "./ModuleImporter.js";
-import { fail, ok } from "@uapkg/diagnostics";
-
-//#region src/postinstall/loader/PostinstallLoader.ts
-/**
-* Facade that composes the four loader stages:
-*   1. {@link EntryResolver}        locate `.uapkg/postinstall.<ext>`
-*   2. {@link EsbuildTranspiler}    if `.ts`, transpile to ESM
-*   3. {@link ModuleImporter}       dynamic import → raw module value
-*   4. {@link ExportValidator}      Zod-validate default export
-*
-* Returns `ok(null)` when a plugin has no postinstall — a valid, silent state.
-* Never throws: every stage returns `Result`.
-*/
-var PostinstallLoader = class {
-	entryResolver;
-	transpiler;
-	importer;
-	validator;
-	constructor(entryResolver = new EntryResolver(), transpiler = new EsbuildTranspiler(), importer = new ModuleImporter(), validator = new ExportValidator()) {
-		this.entryResolver = entryResolver;
-		this.transpiler = transpiler;
-		this.importer = importer;
-		this.validator = validator;
-	}
-	async load(packageName, pluginRoot) {
-		const entryResult = this.entryResolver.resolve(packageName, pluginRoot);
-		if (!entryResult.ok) return entryResult;
-		const entry = entryResult.value;
-		if (entry === null) return ok(null);
-		const sourceResult = await this.buildModuleSource(packageName, entry);
-		if (!sourceResult.ok) return sourceResult;
-		const importResult = await this.importer.import(packageName, sourceResult.value);
-		if (!importResult.ok) return importResult;
-		const validated = this.validator.validate(packageName, entry.path, importResult.value);
-		if (!validated.ok) return validated;
-		return ok({
-			packageName,
-			pluginRoot,
-			entryFile: entry.path,
-			definition: validated.value
-		});
-	}
-	async buildModuleSource(packageName, entry) {
-		if (entry.kind !== "ts") return ok({
-			kind: "file",
-			path: entry.path
-		});
-		const transpiled = await this.transpiler.transpile(packageName, entry.path);
-		if (!transpiled.ok) return fail(transpiled.diagnostics);
-		return ok({
-			kind: "transpiled",
-			code: transpiled.value,
-			originalPath: entry.path
-		});
-	}
-};
-
-//#endregion
-export { PostinstallLoader };
-//# sourceMappingURL=PostinstallLoader.js.map

package/dist/postinstall/loader/PostinstallLoader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallLoader.js","names":[],"sources":["../../../src/postinstall/loader/PostinstallLoader.ts"],"sourcesContent":["import { fail, ok, type Result } from '@uapkg/diagnostics';\nimport type { PostinstallDefinition } from '#cli/postinstall/api/PostinstallDsl.ts';\nimport { EntryResolver, type ResolvedEntry } from '#cli/postinstall/loader/EntryResolver.ts';\nimport { EsbuildTranspiler } from '#cli/postinstall/loader/EsbuildTranspiler.ts';\nimport { ExportValidator } from '#cli/postinstall/loader/ExportValidator.ts';\nimport { ModuleImporter, type ModuleSource } from '#cli/postinstall/loader/ModuleImporter.ts';\n\nexport interface LoadedPostinstall {\n  readonly packageName: string;\n  readonly pluginRoot: string;\n  readonly entryFile: string;\n  readonly definition: PostinstallDefinition;\n}\n\n/**\n * Facade that composes the four loader stages:\n *   1. {@link EntryResolver}        locate `.uapkg/postinstall.<ext>`\n *   2. {@link EsbuildTranspiler}    if `.ts`, transpile to ESM\n *   3. {@link ModuleImporter}       dynamic import → raw module value\n *   4. {@link ExportValidator}      Zod-validate default export\n *\n * Returns `ok(null)` when a plugin has no postinstall — a valid, silent state.\n * Never throws: every stage returns `Result`.\n */\nexport class PostinstallLoader {\n  public constructor(\n    private readonly entryResolver: EntryResolver = new EntryResolver(),\n    private readonly transpiler: EsbuildTranspiler = new EsbuildTranspiler(),\n    private readonly importer: ModuleImporter = new ModuleImporter(),\n    private readonly validator: ExportValidator = new ExportValidator(),\n  ) {}\n\n  public async load(packageName: string, pluginRoot: string): Promise<Result<LoadedPostinstall | null>> {\n    const entryResult = this.entryResolver.resolve(packageName, pluginRoot);\n    if (!entryResult.ok) return entryResult;\n    const entry = entryResult.value;\n    if (entry === null) return ok(null);\n\n    const sourceResult = await this.buildModuleSource(packageName, entry);\n    if (!sourceResult.ok) return sourceResult;\n\n    const importResult = await this.importer.import(packageName, sourceResult.value);\n    if (!importResult.ok) return importResult;\n\n    const validated = this.validator.validate(packageName, entry.path, importResult.value);\n    if (!validated.ok) return validated;\n\n    return ok({\n      packageName,\n      pluginRoot,\n      entryFile: entry.path,\n      definition: validated.value,\n    });\n  }\n\n  private async buildModuleSource(packageName: string, entry: ResolvedEntry): Promise<Result<ModuleSource>> {\n    if (entry.kind !== 'ts') {\n      return ok({ kind: 'file', path: entry.path });\n    }\n    const transpiled = await this.transpiler.transpile(packageName, entry.path);\n    if (!transpiled.ok) return fail(transpiled.diagnostics);\n    return ok({ kind: 'transpiled', code: transpiled.value, originalPath: entry.path });\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAwBA,IAAa,oBAAb,MAA+B;CAEV;CACA;CACA;CACA;CAJnB,AAAO,YACL,AAAiB,gBAA+B,IAAI,cAAc,GAClE,AAAiB,aAAgC,IAAI,kBAAkB,GACvE,AAAiB,WAA2B,IAAI,eAAe,GAC/D,AAAiB,YAA6B,IAAI,gBAAgB,GAClE;EAJiB;EACA;EACA;EACA;CAChB;CAEH,MAAa,KAAK,aAAqB,YAA+D;EACpG,MAAM,cAAc,KAAK,cAAc,QAAQ,aAAa,UAAU;EACtE,IAAI,CAAC,YAAY,IAAI,OAAO;EAC5B,MAAM,QAAQ,YAAY;EAC1B,IAAI,UAAU,MAAM,OAAO,GAAG,IAAI;EAElC,MAAM,eAAe,MAAM,KAAK,kBAAkB,aAAa,KAAK;EACpE,IAAI,CAAC,aAAa,IAAI,OAAO;EAE7B,MAAM,eAAe,MAAM,KAAK,SAAS,OAAO,aAAa,aAAa,KAAK;EAC/E,IAAI,CAAC,aAAa,IAAI,OAAO;EAE7B,MAAM,YAAY,KAAK,UAAU,SAAS,aAAa,MAAM,MAAM,aAAa,KAAK;EACrF,IAAI,CAAC,UAAU,IAAI,OAAO;EAE1B,OAAO,GAAG;GACR;GACA;GACA,WAAW,MAAM;GACjB,YAAY,UAAU;EACxB,CAAC;CACH;CAEA,MAAc,kBAAkB,aAAqB,OAAqD;EACxG,IAAI,MAAM,SAAS,MACjB,OAAO,GAAG;GAAE,MAAM;GAAQ,MAAM,MAAM;EAAK,CAAC;EAE9C,MAAM,aAAa,MAAM,KAAK,WAAW,UAAU,aAAa,MAAM,IAAI;EAC1E,IAAI,CAAC,WAAW,IAAI,OAAO,KAAK,WAAW,WAAW;EACtD,OAAO,GAAG;GAAE,MAAM;GAAc,MAAM,WAAW;GAAO,cAAc,MAAM;EAAK,CAAC;CACpF;AACF"}

package/dist/postinstall/markers/MarkerBlockEditor.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MarkerBlockEditor.d.ts","names":[],"sources":["../../../src/postinstall/markers/MarkerBlockEditor.ts"],"mappings":";;;;;;;;;;;;;;;;cAgBa;mBAEQ;mBACA;EAFnB,YACmB,UAAS,oBACT,YAAW;EAGvB,OAAO,gBAAgB,oBAAoB,cAAc,iBAAiB;EAM1E,OAAO,gBAAgB,oBAAoB;EAI3C,SAAS,gBAAgB,oBAAoB;;;;;;EAS7C,SAAS,gBAAgB,oBAAoB,cAAc,mBAAmB"}

package/dist/postinstall/markers/MarkerBlockEditor.js

@@ -1,50 +0,0 @@
-import { MarkerBlockService } from "./MarkerBlockService.js";
-import { MarkerIntegrityValidator } from "./MarkerIntegrityValidator.js";
-import { createPostinstallMarkerCorruptDiagnostic, fail, ok } from "@uapkg/diagnostics";
-
-//#region src/postinstall/markers/MarkerBlockEditor.ts
-/**
-* Higher-level idempotent wrapper around {@link MarkerBlockService}.
-*
-* - `upsert`: remove any existing owned block and re-insert fresh content.
-*   Idempotent: calling twice with the same input yields the same result.
-* - `remove`: strip the owned block if present; no-op otherwise.
-* - `validate`: detect corruption (orphaned/nested markers) in the source for
-*   the owning `(pluginName, zone)` pair. Returns a `POSTINSTALL_MARKER_CORRUPT`
-*   diagnostic on failure; never throws.
-*
-* Injectors compose this helper to achieve "edit once, safe to re-run" semantics.
-*/
-var MarkerBlockEditor = class {
-	service;
-	integrity;
-	constructor(service = new MarkerBlockService(), integrity = new MarkerIntegrityValidator()) {
-		this.service = service;
-		this.integrity = integrity;
-	}
-	upsert(source, pluginName, zone, content, indent = "") {
-		const stripped = this.service.stripOwnedBlock(source, pluginName, zone);
-		const block = this.service.createBlock(pluginName, zone, content, indent);
-		return `${stripped.trimEnd()}\n${block}\n`;
-	}
-	remove(source, pluginName, zone) {
-		return this.service.stripOwnedBlock(source, pluginName, zone);
-	}
-	contains(source, pluginName, zone) {
-		return this.service.containsOwnedBlock(source, pluginName, zone);
-	}
-	/**
-	* Validates that the source contains a well-formed marker block for the
-	* owning `(pluginName, zone)` pair. Returns `Result.ok` when clean; returns
-	* `Result.fail` with a `POSTINSTALL_MARKER_CORRUPT` diagnostic otherwise.
-	*/
-	validate(source, pluginName, zone, filePath) {
-		const result = this.integrity.validate(source, pluginName, zone);
-		if (result.ok) return ok(void 0);
-		return fail([createPostinstallMarkerCorruptDiagnostic(pluginName, filePath, result.reason)]);
-	}
-};
-
-//#endregion
-export { MarkerBlockEditor };
-//# sourceMappingURL=MarkerBlockEditor.js.map

package/dist/postinstall/markers/MarkerBlockEditor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MarkerBlockEditor.js","names":[],"sources":["../../../src/postinstall/markers/MarkerBlockEditor.ts"],"sourcesContent":["import { createPostinstallMarkerCorruptDiagnostic, fail, ok, type Result } from '@uapkg/diagnostics';\nimport { MarkerBlockService } from '#cli/postinstall/markers/MarkerBlockService.ts';\nimport { MarkerIntegrityValidator } from '#cli/postinstall/markers/MarkerIntegrityValidator.ts';\n\n/**\n * Higher-level idempotent wrapper around {@link MarkerBlockService}.\n *\n * - `upsert`: remove any existing owned block and re-insert fresh content.\n *   Idempotent: calling twice with the same input yields the same result.\n * - `remove`: strip the owned block if present; no-op otherwise.\n * - `validate`: detect corruption (orphaned/nested markers) in the source for\n *   the owning `(pluginName, zone)` pair. Returns a `POSTINSTALL_MARKER_CORRUPT`\n *   diagnostic on failure; never throws.\n *\n * Injectors compose this helper to achieve \"edit once, safe to re-run\" semantics.\n */\nexport class MarkerBlockEditor {\n  public constructor(\n    private readonly service: MarkerBlockService = new MarkerBlockService(),\n    private readonly integrity: MarkerIntegrityValidator = new MarkerIntegrityValidator(),\n  ) {}\n\n  public upsert(source: string, pluginName: string, zone: string, content: string, indent = ''): string {\n    const stripped = this.service.stripOwnedBlock(source, pluginName, zone);\n    const block = this.service.createBlock(pluginName, zone, content, indent);\n    return `${stripped.trimEnd()}\\n${block}\\n`;\n  }\n\n  public remove(source: string, pluginName: string, zone: string): string {\n    return this.service.stripOwnedBlock(source, pluginName, zone);\n  }\n\n  public contains(source: string, pluginName: string, zone: string): boolean {\n    return this.service.containsOwnedBlock(source, pluginName, zone);\n  }\n\n  /**\n   * Validates that the source contains a well-formed marker block for the\n   * owning `(pluginName, zone)` pair. Returns `Result.ok` when clean; returns\n   * `Result.fail` with a `POSTINSTALL_MARKER_CORRUPT` diagnostic otherwise.\n   */\n  public validate(source: string, pluginName: string, zone: string, filePath: string): Result<void> {\n    const result = this.integrity.validate(source, pluginName, zone);\n    if (result.ok) return ok(undefined);\n    return fail([createPostinstallMarkerCorruptDiagnostic(pluginName, filePath, result.reason)]);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAgBA,IAAa,oBAAb,MAA+B;CAEV;CACA;CAFnB,AAAO,YACL,AAAiB,UAA8B,IAAI,mBAAmB,GACtE,AAAiB,YAAsC,IAAI,yBAAyB,GACpF;EAFiB;EACA;CAChB;CAEH,AAAO,OAAO,QAAgB,YAAoB,MAAc,SAAiB,SAAS,IAAY;EACpG,MAAM,WAAW,KAAK,QAAQ,gBAAgB,QAAQ,YAAY,IAAI;EACtE,MAAM,QAAQ,KAAK,QAAQ,YAAY,YAAY,MAAM,SAAS,MAAM;EACxE,OAAO,GAAG,SAAS,QAAQ,EAAE,IAAI,MAAM;CACzC;CAEA,AAAO,OAAO,QAAgB,YAAoB,MAAsB;EACtE,OAAO,KAAK,QAAQ,gBAAgB,QAAQ,YAAY,IAAI;CAC9D;CAEA,AAAO,SAAS,QAAgB,YAAoB,MAAuB;EACzE,OAAO,KAAK,QAAQ,mBAAmB,QAAQ,YAAY,IAAI;CACjE;;;;;;CAOA,AAAO,SAAS,QAAgB,YAAoB,MAAc,UAAgC;EAChG,MAAM,SAAS,KAAK,UAAU,SAAS,QAAQ,YAAY,IAAI;EAC/D,IAAI,OAAO,IAAI,OAAO,GAAG,MAAS;EAClC,OAAO,KAAK,CAAC,yCAAyC,YAAY,UAAU,OAAO,MAAM,CAAC,CAAC;CAC7F;AACF"}

package/dist/postinstall/markers/MarkerBlockService.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MarkerBlockService.d.ts","names":[],"sources":["../../../src/postinstall/markers/MarkerBlockService.ts"],"mappings":";;;;;;;;;;;;;;;;cAea;EACJ,UAAU,oBAAoB;EAI9B,QAAQ,oBAAoB;EAI5B,YAAY,oBAAoB,cAAc,iBAAiB;EAU/D,gBAAgB,gBAAgB,oBAAoB;EAOpD,mBAAmB,gBAAgB,oBAAoB;UAKtD"}

package/dist/postinstall/markers/MarkerBlockService.js

@@ -1,46 +0,0 @@
-//#region src/postinstall/markers/MarkerBlockService.ts
-/**
-* Low-level marker-block primitives.
-*
-* A marker block has the form:
-*
-* ```
-* <indent>// UAPKG-BEGIN <pluginName>:<zone>
-* <indent><content...>
-* <indent>// UAPKG-END <pluginName>:<zone>
-* ```
-*
-* Blocks are *owned* by a `(pluginName, zone)` pair — only the owning pair's
-* blocks are ever rewritten. Behavior mirrors the legacy `MarkerBlockService`
-* so existing host-project files stay stable across the rewrite.
-*/
-var MarkerBlockService = class {
-	makeBegin(pluginName, zone) {
-		return `// UAPKG-BEGIN ${pluginName}:${zone}`;
-	}
-	makeEnd(pluginName, zone) {
-		return `// UAPKG-END ${pluginName}:${zone}`;
-	}
-	createBlock(pluginName, zone, content, indent = "") {
-		const begin = `${indent}${this.makeBegin(pluginName, zone)}`;
-		const end = `${indent}${this.makeEnd(pluginName, zone)}`;
-		return `${begin}\n${content.trim().split(/\r?\n/).map((line) => `${indent}${line}`.replace(/[ \t]+$/g, "")).join("\n")}\n${end}`;
-	}
-	stripOwnedBlock(source, pluginName, zone) {
-		const begin = this.escapeForRegex(this.makeBegin(pluginName, zone));
-		const end = this.escapeForRegex(this.makeEnd(pluginName, zone));
-		const pattern = new RegExp(`^[ \\t]*${begin}[\\s\\S]*?^[ \\t]*${end}\\s*\\r?\\n?`, "gm");
-		return source.replace(pattern, "");
-	}
-	containsOwnedBlock(source, pluginName, zone) {
-		const begin = this.escapeForRegex(this.makeBegin(pluginName, zone));
-		return new RegExp(`^[ \\t]*${begin}$`, "m").test(source);
-	}
-	escapeForRegex(value) {
-		return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-	}
-};
-
-//#endregion
-export { MarkerBlockService };
-//# sourceMappingURL=MarkerBlockService.js.map

package/dist/postinstall/markers/MarkerBlockService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MarkerBlockService.js","names":[],"sources":["../../../src/postinstall/markers/MarkerBlockService.ts"],"sourcesContent":["/**\n * Low-level marker-block primitives.\n *\n * A marker block has the form:\n *\n * ```\n * <indent>// UAPKG-BEGIN <pluginName>:<zone>\n * <indent><content...>\n * <indent>// UAPKG-END <pluginName>:<zone>\n * ```\n *\n * Blocks are *owned* by a `(pluginName, zone)` pair — only the owning pair's\n * blocks are ever rewritten. Behavior mirrors the legacy `MarkerBlockService`\n * so existing host-project files stay stable across the rewrite.\n */\nexport class MarkerBlockService {\n  public makeBegin(pluginName: string, zone: string): string {\n    return `// UAPKG-BEGIN ${pluginName}:${zone}`;\n  }\n\n  public makeEnd(pluginName: string, zone: string): string {\n    return `// UAPKG-END ${pluginName}:${zone}`;\n  }\n\n  public createBlock(pluginName: string, zone: string, content: string, indent = ''): string {\n    const begin = `${indent}${this.makeBegin(pluginName, zone)}`;\n    const end = `${indent}${this.makeEnd(pluginName, zone)}`;\n    const lines = content\n      .trim()\n      .split(/\\r?\\n/)\n      .map((line) => `${indent}${line}`.replace(/[ \\t]+$/g, ''));\n    return `${begin}\\n${lines.join('\\n')}\\n${end}`;\n  }\n\n  public stripOwnedBlock(source: string, pluginName: string, zone: string): string {\n    const begin = this.escapeForRegex(this.makeBegin(pluginName, zone));\n    const end = this.escapeForRegex(this.makeEnd(pluginName, zone));\n    const pattern = new RegExp(`^[ \\\\t]*${begin}[\\\\s\\\\S]*?^[ \\\\t]*${end}\\\\s*\\\\r?\\\\n?`, 'gm');\n    return source.replace(pattern, '');\n  }\n\n  public containsOwnedBlock(source: string, pluginName: string, zone: string): boolean {\n    const begin = this.escapeForRegex(this.makeBegin(pluginName, zone));\n    return new RegExp(`^[ \\\\t]*${begin}$`, 'm').test(source);\n  }\n\n  private escapeForRegex(value: string): string {\n    return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAeA,IAAa,qBAAb,MAAgC;CAC9B,AAAO,UAAU,YAAoB,MAAsB;EACzD,OAAO,kBAAkB,WAAW,GAAG;CACzC;CAEA,AAAO,QAAQ,YAAoB,MAAsB;EACvD,OAAO,gBAAgB,WAAW,GAAG;CACvC;CAEA,AAAO,YAAY,YAAoB,MAAc,SAAiB,SAAS,IAAY;EACzF,MAAM,QAAQ,GAAG,SAAS,KAAK,UAAU,YAAY,IAAI;EACzD,MAAM,MAAM,GAAG,SAAS,KAAK,QAAQ,YAAY,IAAI;EAKrD,OAAO,GAAG,MAAM,IAJF,QACX,KAAK,CAAC,CACN,MAAM,OAAO,CAAC,CACd,KAAK,SAAS,GAAG,SAAS,OAAO,QAAQ,YAAY,EAAE,CAClC,CAAC,CAAC,KAAK,IAAI,EAAE,IAAI;CAC3C;CAEA,AAAO,gBAAgB,QAAgB,YAAoB,MAAsB;EAC/E,MAAM,QAAQ,KAAK,eAAe,KAAK,UAAU,YAAY,IAAI,CAAC;EAClE,MAAM,MAAM,KAAK,eAAe,KAAK,QAAQ,YAAY,IAAI,CAAC;EAC9D,MAAM,UAAU,IAAI,OAAO,WAAW,MAAM,oBAAoB,IAAI,eAAe,IAAI;EACvF,OAAO,OAAO,QAAQ,SAAS,EAAE;CACnC;CAEA,AAAO,mBAAmB,QAAgB,YAAoB,MAAuB;EACnF,MAAM,QAAQ,KAAK,eAAe,KAAK,UAAU,YAAY,IAAI,CAAC;EAClE,OAAO,IAAI,OAAO,WAAW,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,MAAM;CACzD;CAEA,AAAQ,eAAe,OAAuB;EAC5C,OAAO,MAAM,QAAQ,uBAAuB,MAAM;CACpD;AACF"}

package/dist/postinstall/markers/MarkerIntegrityValidator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"MarkerIntegrityValidator.d.ts","names":[],"sources":["../../../src/postinstall/markers/MarkerIntegrityValidator.ts"],"mappings":";;;;;;;;;;;;;;;;;UAgBiB;WACN;;UAGM;WACN;WACA;WACA;;KAGC,wBAAwB,oBAAoB;cAE3C;EACJ,SAAS,gBAAgB,oBAAoB,eAAe"}

package/dist/postinstall/markers/MarkerIntegrityValidator.js

@@ -1,48 +0,0 @@
-//#region src/postinstall/markers/MarkerIntegrityValidator.ts
-var MarkerIntegrityValidator = class {
-	validate(source, pluginName, zone) {
-		const beginToken = `UAPKG-BEGIN ${pluginName}:${zone}`;
-		const endToken = `UAPKG-END ${pluginName}:${zone}`;
-		const lines = source.split(/\r?\n/);
-		let depth = 0;
-		let lastBeginLine = -1;
-		for (let i = 0; i < lines.length; i += 1) {
-			const line = lines[i];
-			const hasBegin = line.includes(beginToken);
-			const hasEnd = line.includes(endToken);
-			if (hasBegin && hasEnd) return {
-				ok: false,
-				reason: `BEGIN and END on same line at line ${i + 1}`,
-				line: i + 1
-			};
-			if (hasBegin) {
-				if (depth >= 1) return {
-					ok: false,
-					reason: `nested BEGIN at line ${i + 1} (previous BEGIN at line ${lastBeginLine + 1} was not closed)`,
-					line: i + 1
-				};
-				depth += 1;
-				lastBeginLine = i;
-				continue;
-			}
-			if (hasEnd) {
-				if (depth === 0) return {
-					ok: false,
-					reason: `orphaned END at line ${i + 1} (no preceding BEGIN)`,
-					line: i + 1
-				};
-				depth -= 1;
-			}
-		}
-		if (depth > 0) return {
-			ok: false,
-			reason: `orphaned BEGIN at line ${lastBeginLine + 1} (missing END)`,
-			line: lastBeginLine + 1
-		};
-		return { ok: true };
-	}
-};
-
-//#endregion
-export { MarkerIntegrityValidator };
-//# sourceMappingURL=MarkerIntegrityValidator.js.map

package/dist/postinstall/markers/MarkerIntegrityValidator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"MarkerIntegrityValidator.js","names":[],"sources":["../../../src/postinstall/markers/MarkerIntegrityValidator.ts"],"sourcesContent":["/**\n * Detects corruption in uapkg marker blocks for a single `(pluginName, zone)`\n * owning pair. Corruption rules (scoped to the owning pair — foreign plugins'\n * blocks are ignored on purpose):\n *\n *   1. `UAPKG-BEGIN X:Z` with no matching `UAPKG-END X:Z` after it\n *      → `orphaned-begin`.\n *   2. `UAPKG-END X:Z` with no preceding `UAPKG-BEGIN X:Z`\n *      → `orphaned-end`.\n *   3. Two `UAPKG-BEGIN X:Z` before any `UAPKG-END X:Z`\n *      → `nested-begin`.\n *\n * The validator is a pure function — no I/O, no mutation, no exceptions. It\n * returns the first violation encountered so callers can surface exactly one\n * diagnostic per file.\n */\nexport interface MarkerIntegrityOk {\n  readonly ok: true;\n}\n\nexport interface MarkerIntegrityFail {\n  readonly ok: false;\n  readonly reason: string;\n  readonly line: number;\n}\n\nexport type MarkerIntegrityResult = MarkerIntegrityOk | MarkerIntegrityFail;\n\nexport class MarkerIntegrityValidator {\n  public validate(source: string, pluginName: string, zone: string): MarkerIntegrityResult {\n    const beginToken = `UAPKG-BEGIN ${pluginName}:${zone}`;\n    const endToken = `UAPKG-END ${pluginName}:${zone}`;\n    const lines = source.split(/\\r?\\n/);\n\n    let depth = 0;\n    let lastBeginLine = -1;\n\n    for (let i = 0; i < lines.length; i += 1) {\n      const line = lines[i];\n      const hasBegin = line.includes(beginToken);\n      const hasEnd = line.includes(endToken);\n\n      if (hasBegin && hasEnd) {\n        // Same-line BEGIN+END is not a shape we emit; treat as malformed.\n        return {\n          ok: false,\n          reason: `BEGIN and END on same line at line ${i + 1}`,\n          line: i + 1,\n        };\n      }\n\n      if (hasBegin) {\n        if (depth >= 1) {\n          return {\n            ok: false,\n            reason: `nested BEGIN at line ${i + 1} (previous BEGIN at line ${lastBeginLine + 1} was not closed)`,\n            line: i + 1,\n          };\n        }\n        depth += 1;\n        lastBeginLine = i;\n        continue;\n      }\n\n      if (hasEnd) {\n        if (depth === 0) {\n          return {\n            ok: false,\n            reason: `orphaned END at line ${i + 1} (no preceding BEGIN)`,\n            line: i + 1,\n          };\n        }\n        depth -= 1;\n      }\n    }\n\n    if (depth > 0) {\n      return {\n        ok: false,\n        reason: `orphaned BEGIN at line ${lastBeginLine + 1} (missing END)`,\n        line: lastBeginLine + 1,\n      };\n    }\n\n    return { ok: true };\n  }\n}\n"],"mappings":";AA4BA,IAAa,2BAAb,MAAsC;CACpC,AAAO,SAAS,QAAgB,YAAoB,MAAqC;EACvF,MAAM,aAAa,eAAe,WAAW,GAAG;EAChD,MAAM,WAAW,aAAa,WAAW,GAAG;EAC5C,MAAM,QAAQ,OAAO,MAAM,OAAO;EAElC,IAAI,QAAQ;EACZ,IAAI,gBAAgB;EAEpB,KAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK,GAAG;GACxC,MAAM,OAAO,MAAM;GACnB,MAAM,WAAW,KAAK,SAAS,UAAU;GACzC,MAAM,SAAS,KAAK,SAAS,QAAQ;GAErC,IAAI,YAAY,QAEd,OAAO;IACL,IAAI;IACJ,QAAQ,sCAAsC,IAAI;IAClD,MAAM,IAAI;GACZ;GAGF,IAAI,UAAU;IACZ,IAAI,SAAS,GACX,OAAO;KACL,IAAI;KACJ,QAAQ,wBAAwB,IAAI,EAAE,2BAA2B,gBAAgB,EAAE;KACnF,MAAM,IAAI;IACZ;IAEF,SAAS;IACT,gBAAgB;IAChB;GACF;GAEA,IAAI,QAAQ;IACV,IAAI,UAAU,GACZ,OAAO;KACL,IAAI;KACJ,QAAQ,wBAAwB,IAAI,EAAE;KACtC,MAAM,IAAI;IACZ;IAEF,SAAS;GACX;EACF;EAEA,IAAI,QAAQ,GACV,OAAO;GACL,IAAI;GACJ,QAAQ,0BAA0B,gBAAgB,EAAE;GACpD,MAAM,gBAAgB;EACxB;EAGF,OAAO,EAAE,IAAI,KAAK;CACpB;AACF"}

package/dist/postinstall/policy/PostinstallPolicyGate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallPolicyGate.d.ts","names":[],"sources":["../../../src/postinstall/policy/PostinstallPolicyGate.ts"],"mappings":";;;;UASiB;EACf,UAAU,iBAAiB;;UAGZ;;WAEN;;WAEA,QAAQ;;WAER;;;;;WAKA,mBAAmB;;;;;;;;;;cAWjB;mBAEQ;mBACA;EAFnB,YACmB,SAAQ,oBACR,WAAU;EAGtB,SAAS,qBAAqB,uBAAuB;UAcpD"}

package/dist/postinstall/policy/PostinstallPolicyGate.js

@@ -1,68 +0,0 @@
-import Config, { PostInstallPolicyResolver } from "@uapkg/config";
-import { createPostinstallPolicyDeniedDiagnostic } from "@uapkg/diagnostics";
-
-//#region src/postinstall/policy/PostinstallPolicyGate.ts
-/**
-* Consults {@link PostInstallPolicyResolver} to decide whether a given plugin's
-* postinstall script should run. The resolver honors per-registry overrides
-* and falls back to the global `install.postInstallPolicy` default (`deny`).
-*
-* This class is a thin glue layer so the orchestrator stays free of config
-* vocabulary.
-*/
-var PostinstallPolicyGate = class {
-	reader;
-	resolver;
-	constructor(reader = Config, resolver = new PostInstallPolicyResolver()) {
-		this.reader = reader;
-		this.resolver = resolver;
-	}
-	evaluate(packageName, registryName) {
-		const resolved = this.readResolved();
-		const { policy, resolvedFrom } = this.resolver.resolve(resolved, registryName);
-		if (policy === "allow") return {
-			allowed: true,
-			policy,
-			resolvedFrom
-		};
-		return {
-			allowed: false,
-			policy,
-			resolvedFrom,
-			denialDiagnostic: createPostinstallPolicyDeniedDiagnostic(packageName, registryName, policy, resolvedFrom)
-		};
-	}
-	readResolved() {
-		const value = this.reader.getAll();
-		if (!value || typeof value !== "object" || !("install" in value)) return FALLBACK_RESOLVED_CONFIG;
-		return value;
-	}
-};
-/**
-* Construct-or-else fallback: never used with the real `@uapkg/config`
-* singleton (which always produces a `ResolvedConfig`), but shields the gate
-* from arbitrary callers that might pass a partial config.
-*/
-const FALLBACK_RESOLVED_CONFIG = {
-	registry: "",
-	registries: {},
-	git: "git",
-	editor: "",
-	exec: { shell: "" },
-	cache: { enabled: true },
-	registryCache: { ttlSeconds: 0 },
-	network: {
-		retries: 0,
-		timeout: 0,
-		maxConcurrentDownloads: 1
-	},
-	install: { postInstallPolicy: "deny" },
-	term: {
-		quiet: false,
-		verbose: false
-	}
-};
-
-//#endregion
-export { PostinstallPolicyGate };
-//# sourceMappingURL=PostinstallPolicyGate.js.map

package/dist/postinstall/policy/PostinstallPolicyGate.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallPolicyGate.js","names":[],"sources":["../../../src/postinstall/policy/PostinstallPolicyGate.ts"],"sourcesContent":["import Config, {\n  type ConfigInstance,\n  PostInstallPolicyResolver,\n  type PostInstallPolicyValue,\n  type ResolvedConfig,\n} from '@uapkg/config';\nimport { createPostinstallPolicyDeniedDiagnostic, type PostinstallPolicyDeniedDiagnostic } from '@uapkg/diagnostics';\n\n/** Minimal config reader surface; defaults to the singleton `@uapkg/config`. */\nexport interface PolicyConfigReader {\n  getAll(): ResolvedConfig | Record<string, unknown> | null;\n}\n\nexport interface PolicyDecision {\n  /** Whether the policy allows running a plugin's postinstall. */\n  readonly allowed: boolean;\n  /** The effective policy value (\"allow\"/\"deny\"). */\n  readonly policy: PostInstallPolicyValue;\n  /** Where the value was read from. */\n  readonly resolvedFrom: 'registry' | 'install';\n  /**\n   * Populated only when `allowed === false`. Callers attach this to their\n   * diagnostic bag and continue with other plugins (skipping is non-fatal).\n   */\n  readonly denialDiagnostic?: PostinstallPolicyDeniedDiagnostic;\n}\n\n/**\n * Consults {@link PostInstallPolicyResolver} to decide whether a given plugin's\n * postinstall script should run. The resolver honors per-registry overrides\n * and falls back to the global `install.postInstallPolicy` default (`deny`).\n *\n * This class is a thin glue layer so the orchestrator stays free of config\n * vocabulary.\n */\nexport class PostinstallPolicyGate {\n  public constructor(\n    private readonly reader: PolicyConfigReader = Config as unknown as PolicyConfigReader,\n    private readonly resolver: PostInstallPolicyResolver = new PostInstallPolicyResolver(),\n  ) {}\n\n  public evaluate(packageName: string, registryName: string): PolicyDecision {\n    const resolved = this.readResolved();\n    const { policy, resolvedFrom } = this.resolver.resolve(resolved, registryName);\n    if (policy === 'allow') {\n      return { allowed: true, policy, resolvedFrom };\n    }\n    return {\n      allowed: false,\n      policy,\n      resolvedFrom,\n      denialDiagnostic: createPostinstallPolicyDeniedDiagnostic(packageName, registryName, policy, resolvedFrom),\n    };\n  }\n\n  private readResolved(): ResolvedConfig {\n    const value = this.reader.getAll();\n    if (!value || typeof value !== 'object' || !('install' in value)) {\n      // Defensive: if the caller passed an unresolved config, fall back to deny.\n      return FALLBACK_RESOLVED_CONFIG;\n    }\n    return value as ResolvedConfig;\n  }\n}\n\n/**\n * Construct-or-else fallback: never used with the real `@uapkg/config`\n * singleton (which always produces a `ResolvedConfig`), but shields the gate\n * from arbitrary callers that might pass a partial config.\n */\nconst FALLBACK_RESOLVED_CONFIG: ResolvedConfig = {\n  registry: '',\n  registries: {},\n  git: 'git',\n  editor: '',\n  exec: { shell: '' },\n  cache: { enabled: true },\n  registryCache: { ttlSeconds: 0 },\n  network: { retries: 0, timeout: 0, maxConcurrentDownloads: 1 },\n  install: { postInstallPolicy: 'deny' },\n  term: { quiet: false, verbose: false },\n};\n\nexport type { ConfigInstance };\n"],"mappings":";;;;;;;;;;;;AAmCA,IAAa,wBAAb,MAAmC;CAEd;CACA;CAFnB,AAAO,YACL,AAAiB,SAA6B,QAC9C,AAAiB,WAAsC,IAAI,0BAA0B,GACrF;EAFiB;EACA;CAChB;CAEH,AAAO,SAAS,aAAqB,cAAsC;EACzE,MAAM,WAAW,KAAK,aAAa;EACnC,MAAM,EAAE,QAAQ,iBAAiB,KAAK,SAAS,QAAQ,UAAU,YAAY;EAC7E,IAAI,WAAW,SACb,OAAO;GAAE,SAAS;GAAM;GAAQ;EAAa;EAE/C,OAAO;GACL,SAAS;GACT;GACA;GACA,kBAAkB,wCAAwC,aAAa,cAAc,QAAQ,YAAY;EAC3G;CACF;CAEA,AAAQ,eAA+B;EACrC,MAAM,QAAQ,KAAK,OAAO,OAAO;EACjC,IAAI,CAAC,SAAS,OAAO,UAAU,YAAY,EAAE,aAAa,QAExD,OAAO;EAET,OAAO;CACT;AACF;;;;;;AAOA,MAAM,2BAA2C;CAC/C,UAAU;CACV,YAAY,CAAC;CACb,KAAK;CACL,QAAQ;CACR,MAAM,EAAE,OAAO,GAAG;CAClB,OAAO,EAAE,SAAS,KAAK;CACvB,eAAe,EAAE,YAAY,EAAE;CAC/B,SAAS;EAAE,SAAS;EAAG,SAAS;EAAG,wBAAwB;CAAE;CAC7D,SAAS,EAAE,mBAAmB,OAAO;CACrC,MAAM;EAAE,OAAO;EAAO,SAAS;CAAM;AACvC"}

package/dist/postinstall/runner/PostinstallOrchestrator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"PostinstallOrchestrator.d.ts","names":[],"sources":["../../../src/postinstall/runner/PostinstallOrchestrator.ts"],"mappings":";;;;;;;;;;;;;;;;UAkBiB;WACN;WACA;;WAEA;;UAGM;WACN;WACA;IAAoB;IAAqB;;;UAGnC;WACN;WACA;WACA,qBAAqB;;;;;;WAMrB;;;;;;;;;;;;;;;;;cAkBE;mBAEQ;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;mBACA;EARnB,YACmB,SAAQ,mBACR,SAAQ,uBACR,iBAAgB,4BAChB,gBAAe,iBACf,iBAAgB,kBAChB,kBAAiB,kBACjB,qBAAoB,oBACpB,iBAAgB;EAGtB,IAAI,OAAO,+BAA+B,QAAQ,OAAO;UA+BxD;UAyBN;UAmCA;UAsDA"}