@verdaccio/package-filter 13.0.4 → 13.1.0

package/build/_virtual/_rolldown/runtime.js

@@ -0,0 +1,23 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+exports.__toESM = __toESM;

package/build/config/parser.d.ts

@@ -0,0 +1,2 @@
+import type { ParsedConfig, PluginConfig } from './types';
+export declare function parseConfig(config: PluginConfig): ParsedConfig;

package/build/config/parser.js

@@ -0,0 +1,56 @@
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let semver = require("semver");
+//#region src/config/parser.ts
+var debug$1 = (0, debug.default)("verdaccio:plugin:package-filter:config");
+function parseConfigRules(configRules) {
+	const ruleMap = /* @__PURE__ */ new Map();
+	for (const rule of configRules) {
+		if ("scope" in rule && typeof rule.scope === "string") {
+			if (!rule.scope.startsWith("@")) throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);
+			ruleMap.set(rule.scope, "scope");
+			continue;
+		}
+		if ("package" in rule && !("versions" in rule)) {
+			ruleMap.set(rule.package, "package");
+			continue;
+		}
+		if ("package" in rule && "versions" in rule) {
+			const previousConfig = ruleMap.get(rule.package) || { versions: [] };
+			if (typeof previousConfig === "string") throw new Error(`Package ${rule.package} is already specified by another strict rule ${previousConfig}`);
+			const range = new semver.Range(rule.versions);
+			ruleMap.set(rule.package, {
+				versions: [...previousConfig.versions, range],
+				strategy: rule.strategy ?? "block"
+			});
+			continue;
+		}
+		throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);
+	}
+	return ruleMap;
+}
+function parseConfig(config) {
+	debug$1("parsing config: %o", config);
+	const blockMap = parseConfigRules(config.block ?? []);
+	const allowMap = parseConfigRules(config.allow ?? []);
+	debug$1("parsed %d block rules, %d allow rules", blockMap.size, allowMap.size);
+	const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;
+	if (dateThreshold && isNaN(dateThreshold.getTime())) throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);
+	const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;
+	let minAgeMs = null;
+	if (minAgeDays !== null) {
+		if (isNaN(minAgeDays) || minAgeDays < 0) throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);
+		minAgeMs = minAgeDays * 24 * 60 * 60 * 1e3;
+	}
+	return {
+		dateThreshold,
+		minAgeMs,
+		blockRules: blockMap,
+		allowRules: allowMap
+	};
+}
+//#endregion
+exports.parseConfig = parseConfig;
+
+//# sourceMappingURL=parser.js.map

package/build/config/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","names":[],"sources":["../../src/config/parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n"],"mappings":";;;;;AAKA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,OAAA,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,QAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,QAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,OAAO;EACL;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF"}

package/build/config/parser.mjs

@@ -0,0 +1,54 @@
+import buildDebug from "debug";
+import { Range } from "semver";
+//#region src/config/parser.ts
+var debug = buildDebug("verdaccio:plugin:package-filter:config");
+function parseConfigRules(configRules) {
+	const ruleMap = /* @__PURE__ */ new Map();
+	for (const rule of configRules) {
+		if ("scope" in rule && typeof rule.scope === "string") {
+			if (!rule.scope.startsWith("@")) throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);
+			ruleMap.set(rule.scope, "scope");
+			continue;
+		}
+		if ("package" in rule && !("versions" in rule)) {
+			ruleMap.set(rule.package, "package");
+			continue;
+		}
+		if ("package" in rule && "versions" in rule) {
+			const previousConfig = ruleMap.get(rule.package) || { versions: [] };
+			if (typeof previousConfig === "string") throw new Error(`Package ${rule.package} is already specified by another strict rule ${previousConfig}`);
+			const range = new Range(rule.versions);
+			ruleMap.set(rule.package, {
+				versions: [...previousConfig.versions, range],
+				strategy: rule.strategy ?? "block"
+			});
+			continue;
+		}
+		throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);
+	}
+	return ruleMap;
+}
+function parseConfig(config) {
+	debug("parsing config: %o", config);
+	const blockMap = parseConfigRules(config.block ?? []);
+	const allowMap = parseConfigRules(config.allow ?? []);
+	debug("parsed %d block rules, %d allow rules", blockMap.size, allowMap.size);
+	const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;
+	if (dateThreshold && isNaN(dateThreshold.getTime())) throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);
+	const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;
+	let minAgeMs = null;
+	if (minAgeDays !== null) {
+		if (isNaN(minAgeDays) || minAgeDays < 0) throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);
+		minAgeMs = minAgeDays * 24 * 60 * 60 * 1e3;
+	}
+	return {
+		dateThreshold,
+		minAgeMs,
+		blockRules: blockMap,
+		allowRules: allowMap
+	};
+}
+//#endregion
+export { parseConfig };
+
+//# sourceMappingURL=parser.mjs.map

package/build/config/parser.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.mjs","names":[],"sources":["../../src/config/parser.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range } from 'semver';\n\nimport type { ConfigRule, ParsedConfig, ParsedRule, PluginConfig } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:config');\n\nfunction parseConfigRules(configRules: ConfigRule[]): Map<string, ParsedRule> {\n  const ruleMap = new Map<string, ParsedRule>();\n  for (const rule of configRules) {\n    if ('scope' in rule && typeof rule.scope === 'string') {\n      if (!rule.scope.startsWith('@')) {\n        throw new TypeError(`Scope value must start with @, found: ${rule.scope}`);\n      }\n\n      ruleMap.set(rule.scope, 'scope');\n      continue;\n    }\n\n    if ('package' in rule && !('versions' in rule)) {\n      ruleMap.set(rule.package, 'package');\n      continue;\n    }\n\n    if ('package' in rule && 'versions' in rule) {\n      const previousConfig = ruleMap.get(rule.package) || { versions: [] };\n\n      if (typeof previousConfig === 'string') {\n        throw new Error(\n          `Package ${rule.package} is already specified by another strict rule ${previousConfig}`\n        );\n      }\n\n      // Merge version ranges of the rules for the same package\n      const range = new Range(rule.versions);\n      ruleMap.set(rule.package, {\n        versions: [...previousConfig.versions, range],\n        strategy: rule.strategy ?? 'block',\n      });\n\n      continue;\n    }\n\n    throw new TypeError(`Could not parse rule ${JSON.stringify(rule, null, 4)}`);\n  }\n\n  return ruleMap;\n}\n\nexport function parseConfig(config: PluginConfig): ParsedConfig {\n  debug('parsing config: %o', config);\n  const blockMap = parseConfigRules(config.block ?? []);\n  const allowMap = parseConfigRules(config.allow ?? []);\n  debug('parsed %d block rules, %d allow rules', blockMap.size, allowMap.size);\n  const dateThreshold = config.dateThreshold ? new Date(config.dateThreshold) : null;\n  if (dateThreshold && isNaN(dateThreshold.getTime())) {\n    throw new TypeError(`Invalid date ${config.dateThreshold} was provided for dateThreshold`);\n  }\n\n  const minAgeDays = config.minAgeDays ? Number(config.minAgeDays) : null;\n  let minAgeMs: number | null = null;\n  if (minAgeDays !== null) {\n    if (isNaN(minAgeDays) || minAgeDays < 0) {\n      throw new TypeError(`Invalid number ${config.minAgeDays} was provided for minAgeDays`);\n    }\n\n    minAgeMs = minAgeDays * 24 * 60 * 60 * 1000;\n  }\n\n  return {\n    dateThreshold,\n    minAgeMs,\n    blockRules: blockMap,\n    allowRules: allowMap,\n  };\n}\n"],"mappings":";;;AAKA,IAAM,QAAQ,WAAW,wCAAwC;AAEjE,SAAS,iBAAiB,aAAoD;CAC5E,MAAM,0BAAU,IAAI,IAAwB;CAC5C,KAAK,MAAM,QAAQ,aAAa;EAC9B,IAAI,WAAW,QAAQ,OAAO,KAAK,UAAU,UAAU;GACrD,IAAI,CAAC,KAAK,MAAM,WAAW,GAAG,GAC5B,MAAM,IAAI,UAAU,yCAAyC,KAAK,OAAO;GAG3E,QAAQ,IAAI,KAAK,OAAO,OAAO;GAC/B;EACF;EAEA,IAAI,aAAa,QAAQ,EAAE,cAAc,OAAO;GAC9C,QAAQ,IAAI,KAAK,SAAS,SAAS;GACnC;EACF;EAEA,IAAI,aAAa,QAAQ,cAAc,MAAM;GAC3C,MAAM,iBAAiB,QAAQ,IAAI,KAAK,OAAO,KAAK,EAAE,UAAU,CAAC,EAAE;GAEnE,IAAI,OAAO,mBAAmB,UAC5B,MAAM,IAAI,MACR,WAAW,KAAK,QAAQ,+CAA+C,gBACzE;GAIF,MAAM,QAAQ,IAAI,MAAM,KAAK,QAAQ;GACrC,QAAQ,IAAI,KAAK,SAAS;IACxB,UAAU,CAAC,GAAG,eAAe,UAAU,KAAK;IAC5C,UAAU,KAAK,YAAY;GAC7B,CAAC;GAED;EACF;EAEA,MAAM,IAAI,UAAU,wBAAwB,KAAK,UAAU,MAAM,MAAM,CAAC,GAAG;CAC7E;CAEA,OAAO;AACT;AAEA,SAAgB,YAAY,QAAoC;CAC9D,MAAM,sBAAsB,MAAM;CAClC,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,WAAW,iBAAiB,OAAO,SAAS,CAAC,CAAC;CACpD,MAAM,yCAAyC,SAAS,MAAM,SAAS,IAAI;CAC3E,MAAM,gBAAgB,OAAO,gBAAgB,IAAI,KAAK,OAAO,aAAa,IAAI;CAC9E,IAAI,iBAAiB,MAAM,cAAc,QAAQ,CAAC,GAChD,MAAM,IAAI,UAAU,gBAAgB,OAAO,cAAc,gCAAgC;CAG3F,MAAM,aAAa,OAAO,aAAa,OAAO,OAAO,UAAU,IAAI;CACnE,IAAI,WAA0B;CAC9B,IAAI,eAAe,MAAM;EACvB,IAAI,MAAM,UAAU,KAAK,aAAa,GACpC,MAAM,IAAI,UAAU,kBAAkB,OAAO,WAAW,6BAA6B;EAGvF,WAAW,aAAa,KAAK,KAAK,KAAK;CACzC;CAEA,OAAO;EACL;EACA;EACA,YAAY;EACZ,YAAY;CACd;AACF"}

package/build/config/types.d.ts

@@ -0,0 +1,39 @@
+import type { Range } from 'semver';
+export type BlockStrategy = 'block' | 'replace';
+export type ConfigRule = {
+    scope: string;
+} | {
+    package: string;
+} | {
+    package: string;
+    versions: string;
+    strategy?: BlockStrategy;
+};
+export interface PluginConfig {
+    /**
+     * An absolute date cutoff (e.g. '2023-01-01'). Versions published after this
+     * date will be blocked. When both `dateThreshold` and `minAgeDays` are set,
+     * the earlier (more restrictive) date wins.
+     */
+    dateThreshold?: string | number;
+    /**
+     * A relative age cutoff in days. Versions published less than this many days
+     * ago will be blocked. When both `minAgeDays` and `dateThreshold` are set,
+     * the earlier (more restrictive) date wins.
+     */
+    minAgeDays?: number;
+    block?: ConfigRule[];
+    allow?: ConfigRule[];
+}
+export interface ParsedConfigRule {
+    versions: Range[];
+    strategy?: BlockStrategy;
+}
+export type PackageScopeLevel = 'scope' | 'package' | undefined;
+export type ParsedRule = ParsedConfigRule | PackageScopeLevel;
+export interface ParsedConfig {
+    dateThreshold: Date | null;
+    minAgeMs: number | null;
+    blockRules: Map<string, ParsedRule>;
+    allowRules: Map<string, ParsedRule>;
+}

package/build/filtering/matcher.d.ts

@@ -0,0 +1,8 @@
+import type { Manifest } from '@verdaccio/types';
+import type { ParsedRule } from '../config/types';
+import type { MatchResult } from './types';
+/**
+ * Try to find a rule that matches the package.
+ * If found, returns the rule and the matched package versions from the manifest.
+ */
+export declare function matchRules(manifest: Manifest, rules: Map<string, ParsedRule>): MatchResult | undefined;

package/build/filtering/matcher.js

@@ -0,0 +1,71 @@
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+const require_types = require("./types.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let semver = require("semver");
+//#region src/filtering/matcher.ts
+var debug$1 = (0, debug.default)("verdaccio:plugin:package-filter:filter");
+/**
+* Split a package name into name itself and scope.
+*/
+function splitName(name) {
+	if (!name) return { name: "" };
+	const parts = name.split("/");
+	if (parts.length > 1) return {
+		scope: parts[0],
+		name: parts[1]
+	};
+	else return { name: parts[0] };
+}
+/**
+* Try to find a rule that matches the package.
+* If found, returns the rule and the matched package versions from the manifest.
+*/
+function matchRules(manifest, rules) {
+	const { scope } = splitName(manifest.name);
+	if (scope) {
+		const rule = rules.get(scope);
+		if (rule === "scope") {
+			debug$1("scope match: %s matched rule for %s", manifest.name, scope);
+			return {
+				type: require_types.MatchType.SCOPE,
+				rule,
+				scope,
+				versions: Object.keys(manifest.versions)
+			};
+		}
+	}
+	const rule = rules.get(manifest.name);
+	if (!rule) return;
+	if (rule === "package") {
+		debug$1("package match: %s", manifest.name);
+		return {
+			type: require_types.MatchType.PACKAGE,
+			rule,
+			package: manifest.name,
+			versions: Object.keys(manifest.versions)
+		};
+	}
+	if (rule === "scope") throw new Error("Unexpected case - rule for package should never be \"scope\"");
+	const versionRanges = rule.versions;
+	if (versionRanges.length === 0) return;
+	const matchedVersions = [];
+	Object.keys(manifest.versions).forEach((version) => {
+		versionRanges.forEach((versionRange) => {
+			if ((0, semver.satisfies)(version, versionRange, {
+				includePrerelease: true,
+				loose: true
+			})) matchedVersions.push(version);
+		});
+	});
+	if (matchedVersions.length > 0) debug$1("version match: %s matched %d versions: %o", manifest.name, matchedVersions.length, matchedVersions);
+	return {
+		type: require_types.MatchType.VERSIONS,
+		rule,
+		versions: matchedVersions
+	};
+}
+//#endregion
+exports.matchRules = matchRules;
+
+//# sourceMappingURL=matcher.js.map

package/build/filtering/matcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.js","names":[],"sources":["../../src/filtering/matcher.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const { scope } = splitName(manifest.name);\n  if (scope) {\n    const rule = rules.get(scope);\n    if (rule === 'scope') {\n      debug('scope match: %s matched rule for %s', manifest.name, scope);\n      return {\n        type: MatchType.SCOPE,\n        rule,\n        scope,\n        versions: Object.keys(manifest.versions),\n      };\n    }\n  }\n\n  const rule = rules.get(manifest.name);\n  if (!rule) {\n    // No match\n    return undefined;\n  }\n\n  if (rule === 'package') {\n    debug('package match: %s', manifest.name);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: manifest.name,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n"],"mappings":";;;;;;AASA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;;;;AAKjE,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;AAMA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,EAAE,UAAU,UAAU,SAAS,IAAI;CACzC,IAAI,OAAO;EACT,MAAM,OAAO,MAAM,IAAI,KAAK;EAC5B,IAAI,SAAS,SAAS;GACpB,QAAM,uCAAuC,SAAS,MAAM,KAAK;GACjE,OAAO;IACL,MAAM,cAAA,UAAU;IAChB;IACA;IACA,UAAU,OAAO,KAAK,SAAS,QAAQ;GACzC;EACF;CACF;CAEA,MAAM,OAAO,MAAM,IAAI,SAAS,IAAI;CACpC,IAAI,CAAC,MAEH;CAGF,IAAI,SAAS,WAAW;EACtB,QAAM,qBAAqB,SAAS,IAAI;EACxC,OAAO;GACL,MAAM,cAAA,UAAU;GAChB;GACA,SAAS,SAAS;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,EAAE,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,KAAA,GAAA,OAAA,WACY,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,QACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,cAAA,UAAU;EAChB;EACA,UAAU;CACZ;AACF"}

package/build/filtering/matcher.mjs

@@ -0,0 +1,69 @@
+import { MatchType } from "./types.mjs";
+import buildDebug from "debug";
+import { satisfies } from "semver";
+//#region src/filtering/matcher.ts
+var debug = buildDebug("verdaccio:plugin:package-filter:filter");
+/**
+* Split a package name into name itself and scope.
+*/
+function splitName(name) {
+	if (!name) return { name: "" };
+	const parts = name.split("/");
+	if (parts.length > 1) return {
+		scope: parts[0],
+		name: parts[1]
+	};
+	else return { name: parts[0] };
+}
+/**
+* Try to find a rule that matches the package.
+* If found, returns the rule and the matched package versions from the manifest.
+*/
+function matchRules(manifest, rules) {
+	const { scope } = splitName(manifest.name);
+	if (scope) {
+		const rule = rules.get(scope);
+		if (rule === "scope") {
+			debug("scope match: %s matched rule for %s", manifest.name, scope);
+			return {
+				type: MatchType.SCOPE,
+				rule,
+				scope,
+				versions: Object.keys(manifest.versions)
+			};
+		}
+	}
+	const rule = rules.get(manifest.name);
+	if (!rule) return;
+	if (rule === "package") {
+		debug("package match: %s", manifest.name);
+		return {
+			type: MatchType.PACKAGE,
+			rule,
+			package: manifest.name,
+			versions: Object.keys(manifest.versions)
+		};
+	}
+	if (rule === "scope") throw new Error("Unexpected case - rule for package should never be \"scope\"");
+	const versionRanges = rule.versions;
+	if (versionRanges.length === 0) return;
+	const matchedVersions = [];
+	Object.keys(manifest.versions).forEach((version) => {
+		versionRanges.forEach((versionRange) => {
+			if (satisfies(version, versionRange, {
+				includePrerelease: true,
+				loose: true
+			})) matchedVersions.push(version);
+		});
+	});
+	if (matchedVersions.length > 0) debug("version match: %s matched %d versions: %o", manifest.name, matchedVersions.length, matchedVersions);
+	return {
+		type: MatchType.VERSIONS,
+		rule,
+		versions: matchedVersions
+	};
+}
+//#endregion
+export { matchRules };
+
+//# sourceMappingURL=matcher.mjs.map

package/build/filtering/matcher.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"matcher.mjs","names":[],"sources":["../../src/filtering/matcher.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { satisfies } from 'semver';\n\nimport type { Manifest } from '@verdaccio/types';\n\nimport type { ParsedRule } from '../config/types';\nimport type { MatchResult } from './types';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Split a package name into name itself and scope.\n */\nfunction splitName(name: string): { name: string; scope?: string } {\n  if (!name) {\n    return { name: '' };\n  }\n\n  const parts = name.split('/');\n\n  if (parts.length > 1) {\n    return {\n      scope: parts[0],\n      name: parts[1],\n    };\n  } else {\n    return {\n      name: parts[0],\n    };\n  }\n}\n\n/**\n * Try to find a rule that matches the package.\n * If found, returns the rule and the matched package versions from the manifest.\n */\nexport function matchRules(\n  manifest: Manifest,\n  rules: Map<string, ParsedRule>\n): MatchResult | undefined {\n  const { scope } = splitName(manifest.name);\n  if (scope) {\n    const rule = rules.get(scope);\n    if (rule === 'scope') {\n      debug('scope match: %s matched rule for %s', manifest.name, scope);\n      return {\n        type: MatchType.SCOPE,\n        rule,\n        scope,\n        versions: Object.keys(manifest.versions),\n      };\n    }\n  }\n\n  const rule = rules.get(manifest.name);\n  if (!rule) {\n    // No match\n    return undefined;\n  }\n\n  if (rule === 'package') {\n    debug('package match: %s', manifest.name);\n    return {\n      type: MatchType.PACKAGE,\n      rule,\n      package: manifest.name,\n      versions: Object.keys(manifest.versions),\n    };\n  }\n\n  if (rule === 'scope') {\n    throw new Error('Unexpected case - rule for package should never be \"scope\"');\n  }\n\n  const versionRanges = rule.versions;\n  if (versionRanges.length === 0) {\n    // No match\n    return undefined;\n  }\n\n  const matchedVersions: string[] = [];\n  Object.keys(manifest.versions).forEach((version) => {\n    versionRanges.forEach((versionRange) => {\n      if (\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        matchedVersions.push(version);\n      }\n    });\n  });\n\n  if (matchedVersions.length > 0) {\n    debug(\n      'version match: %s matched %d versions: %o',\n      manifest.name,\n      matchedVersions.length,\n      matchedVersions\n    );\n  }\n\n  return {\n    type: MatchType.VERSIONS,\n    rule,\n    versions: matchedVersions,\n  };\n}\n"],"mappings":";;;;AASA,IAAM,QAAQ,WAAW,wCAAwC;;;;AAKjE,SAAS,UAAU,MAAgD;CACjE,IAAI,CAAC,MACH,OAAO,EAAE,MAAM,GAAG;CAGpB,MAAM,QAAQ,KAAK,MAAM,GAAG;CAE5B,IAAI,MAAM,SAAS,GACjB,OAAO;EACL,OAAO,MAAM;EACb,MAAM,MAAM;CACd;MAEA,OAAO,EACL,MAAM,MAAM,GACd;AAEJ;;;;;AAMA,SAAgB,WACd,UACA,OACyB;CACzB,MAAM,EAAE,UAAU,UAAU,SAAS,IAAI;CACzC,IAAI,OAAO;EACT,MAAM,OAAO,MAAM,IAAI,KAAK;EAC5B,IAAI,SAAS,SAAS;GACpB,MAAM,uCAAuC,SAAS,MAAM,KAAK;GACjE,OAAO;IACL,MAAM,UAAU;IAChB;IACA;IACA,UAAU,OAAO,KAAK,SAAS,QAAQ;GACzC;EACF;CACF;CAEA,MAAM,OAAO,MAAM,IAAI,SAAS,IAAI;CACpC,IAAI,CAAC,MAEH;CAGF,IAAI,SAAS,WAAW;EACtB,MAAM,qBAAqB,SAAS,IAAI;EACxC,OAAO;GACL,MAAM,UAAU;GAChB;GACA,SAAS,SAAS;GAClB,UAAU,OAAO,KAAK,SAAS,QAAQ;EACzC;CACF;CAEA,IAAI,SAAS,SACX,MAAM,IAAI,MAAM,8DAA4D;CAG9E,MAAM,gBAAgB,KAAK;CAC3B,IAAI,cAAc,WAAW,GAE3B;CAGF,MAAM,kBAA4B,CAAC;CACnC,OAAO,KAAK,SAAS,QAAQ,EAAE,SAAS,YAAY;EAClD,cAAc,SAAS,iBAAiB;GACtC,IACE,UAAU,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GAED,gBAAgB,KAAK,OAAO;EAEhC,CAAC;CACH,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,MACE,6CACA,SAAS,MACT,gBAAgB,QAChB,eACF;CAGF,OAAO;EACL,MAAM,UAAU;EAChB;EACA,UAAU;CACZ;AACF"}

package/build/filtering/packageVersion.d.ts

@@ -0,0 +1,20 @@
+import type { Logger, Manifest } from '@verdaccio/types';
+import type { ParsedRule } from '../config/types';
+/**
+ * Filter out all blocked package versions.
+ * If package or scope is blocked, then block all versions.
+ *
+ * TODO: consider adding a `prerelease` filter option to block/allow
+ * prerelease versions independently. Currently prereleases are matched by
+ * semver ranges with `includePrerelease: true`, but there's no dedicated toggle.
+ *
+ * Example config (not yet implemented):
+ *   block:
+ *     - package: 'foo'
+ *       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0
+ *     - package: 'bar'
+ *       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1
+ *
+ * Today the only workaround is using awkward ranges like ">=1.0.0-0 <1.0.0".
+ */
+export declare function filterBlockedVersions(manifest: Manifest, blockRules: Map<string, ParsedRule>, allowRules: Map<string, ParsedRule>, logger: Logger): Manifest;

package/build/filtering/packageVersion.js

@@ -0,0 +1,129 @@
+const require_runtime = require("../_virtual/_rolldown/runtime.js");
+const require_types = require("./types.js");
+const require_matcher = require("./matcher.js");
+let debug = require("debug");
+debug = require_runtime.__toESM(debug);
+let semver = require("semver");
+//#region src/filtering/packageVersion.ts
+var debug$1 = (0, debug.default)("verdaccio:plugin:package-filter:filter");
+/**
+* Filter out all blocked package versions.
+* If package or scope is blocked, then block all versions.
+*
+* TODO: consider adding a `prerelease` filter option to block/allow
+* prerelease versions independently. Currently prereleases are matched by
+* semver ranges with `includePrerelease: true`, but there's no dedicated toggle.
+*
+* Example config (not yet implemented):
+*   block:
+*     - package: 'foo'
+*       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0
+*     - package: 'bar'
+*       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1
+*
+* Today the only workaround is using awkward ranges like ">=1.0.0-0 <1.0.0".
+*/
+function filterBlockedVersions(manifest, blockRules, allowRules, logger) {
+	const allowMatch = require_matcher.matchRules(manifest, allowRules);
+	if (allowMatch && (allowMatch.type === require_types.MatchType.SCOPE || allowMatch.type === require_types.MatchType.PACKAGE)) {
+		logger.trace({ name: manifest.name }, "package @{name} is allow-listed, skipping block rules");
+		return manifest;
+	}
+	const blockMatch = require_matcher.matchRules(manifest, blockRules);
+	if (!blockMatch) return manifest;
+	logger.trace({
+		name: manifest.name,
+		type: blockMatch.type
+	}, "block rule matched for @{name} (type: @{type})");
+	const whitelistedVersions = allowMatch ? allowMatch.versions : [];
+	let blockRule = {
+		versions: [new semver.Range("*")],
+		strategy: "block"
+	};
+	if (blockMatch.type === require_types.MatchType.SCOPE) {
+		if (whitelistedVersions.length === 0) {
+			debug$1("blocking all versions of %s (scope %s blocked)", manifest.name, blockMatch.scope);
+			logger.trace({
+				name: manifest.name,
+				scope: blockMatch.scope
+			}, "all versions of @{name} blocked (scope @{scope})");
+			return {
+				...manifest,
+				versions: {},
+				readme: `All packages in scope ${blockMatch.scope} are blocked by rule`
+			};
+		}
+	} else if (blockMatch.type === require_types.MatchType.PACKAGE) {
+		if (whitelistedVersions.length === 0) {
+			debug$1("blocking all versions of %s (package blocked)", manifest.name);
+			logger.trace({ name: manifest.name }, "all versions of @{name} blocked (package rule)");
+			return {
+				...manifest,
+				versions: {},
+				readme: `All package versions are blocked by rule`
+			};
+		}
+	} else blockRule = {
+		...blockRule,
+		...blockMatch.rule
+	};
+	const versionRanges = blockRule.versions;
+	if (blockRule.strategy === "block") {
+		const blockedVersions = blockMatch.versions.filter((v) => !whitelistedVersions.includes(v));
+		for (const version of blockedVersions) delete manifest.versions[version];
+		if (blockedVersions.length > 0) {
+			debug$1("blocked %d versions of %s: %o", blockedVersions.length, manifest.name, blockedVersions);
+			logger.trace({
+				name: manifest.name,
+				count: blockedVersions.length,
+				versions: blockedVersions.join(", ")
+			}, "@{count} versions of @{name} blocked: @{versions}");
+			manifest.readme = (manifest.readme || "") + `\nSome versions(${blockedVersions.length}) of package are blocked by rules: ${versionRanges.map((range) => range.raw)}`;
+		}
+		return manifest;
+	}
+	const nonBlockedVersions = { ...manifest.versions };
+	const newVersionsMapping = {};
+	versionRanges.forEach((versionRange) => {
+		const allVersions = Object.keys(nonBlockedVersions);
+		let lastNonBlockedVersion = null;
+		allVersions.forEach((version) => {
+			if (!whitelistedVersions.includes(version) && (0, semver.satisfies)(version, versionRange, {
+				includePrerelease: true,
+				loose: true
+			})) {
+				delete nonBlockedVersions[version];
+				newVersionsMapping[version] = lastNonBlockedVersion;
+			} else lastNonBlockedVersion = version;
+		});
+	});
+	debug$1("replacing versions for %s: %o", manifest.name, newVersionsMapping);
+	const removedVersions = Object.entries(newVersionsMapping).filter(([_, replace]) => replace === null);
+	const replacedVersions = Object.entries(newVersionsMapping).filter(([_, replace]) => replace !== null);
+	removedVersions.forEach(([version]) => {
+		debug$1("no version to replace %s in %s", version, manifest.name);
+		logger.trace({
+			name: manifest.name,
+			version
+		}, "version @{version} of @{name} removed (no replacement available)");
+		delete manifest.versions[version];
+	});
+	replacedVersions.forEach(([version, replaceVersion]) => {
+		logger.trace({
+			name: manifest.name,
+			version,
+			replaceVersion
+		}, "version @{version} of @{name} replaced with @{replaceVersion}");
+		manifest.versions[version] = {
+			...manifest.versions[replaceVersion],
+			version
+		};
+	});
+	if (removedVersions.length > 0) manifest.readme += `\nSome versions of package could not be replaced and thus are fully blocked (${removedVersions.length}): ${removedVersions.map((a) => a[0])}`;
+	if (replacedVersions.length > 0) manifest.readme += `\nSome versions of package are replaced by other(${replacedVersions.length}): ${replacedVersions.map((a) => `${a[0]} => ${a[1]}`)}`;
+	return manifest;
+}
+//#endregion
+exports.filterBlockedVersions = filterBlockedVersions;
+
+//# sourceMappingURL=packageVersion.js.map

package/build/filtering/packageVersion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"packageVersion.js","names":[],"sources":["../../src/filtering/packageVersion.ts"],"sourcesContent":["import buildDebug from 'debug';\nimport { Range, satisfies } from 'semver';\n\nimport type { Logger, Manifest } from '@verdaccio/types';\n\nimport type { ParsedConfigRule, ParsedRule } from '../config/types';\nimport { matchRules } from './matcher';\nimport { MatchType } from './types';\n\nconst debug = buildDebug('verdaccio:plugin:package-filter:filter');\n\n/**\n * Filter out all blocked package versions.\n * If package or scope is blocked, then block all versions.\n *\n * TODO: consider adding a `prerelease` filter option to block/allow\n * prerelease versions independently. Currently prereleases are matched by\n * semver ranges with `includePrerelease: true`, but there's no dedicated toggle.\n *\n * Example config (not yet implemented):\n *   block:\n *     - package: 'foo'\n *       prerelease: true    # block 1.0.0-beta.1, 2.0.0-rc.1, keep 1.0.0, 2.0.0\n *     - package: 'bar'\n *       prerelease: false   # block 1.0.0, 2.0.0, keep 1.0.0-beta.1\n *\n * Today the only workaround is using awkward ranges like \">=1.0.0-0 <1.0.0\".\n */\nexport function filterBlockedVersions(\n  manifest: Manifest,\n  blockRules: Map<string, ParsedRule>,\n  allowRules: Map<string, ParsedRule>,\n  logger: Logger\n): Manifest {\n  const allowMatch = matchRules(manifest, allowRules);\n  if (\n    allowMatch &&\n    (allowMatch.type === MatchType.SCOPE || allowMatch.type === MatchType.PACKAGE)\n  ) {\n    // An entire scope or package is whitelisted\n    logger.trace({ name: manifest.name }, 'package @{name} is allow-listed, skipping block rules');\n    return manifest;\n  }\n\n  const blockMatch = matchRules(manifest, blockRules);\n  if (!blockMatch) {\n    // No rule is blocking this package\n    return manifest;\n  }\n\n  logger.trace(\n    { name: manifest.name, type: blockMatch.type },\n    'block rule matched for @{name} (type: @{type})'\n  );\n\n  const whitelistedVersions: string[] = allowMatch ? allowMatch.versions : [];\n  let blockRule: ParsedConfigRule = {\n    versions: [new Range('*')],\n    strategy: 'block',\n  };\n\n  if (blockMatch.type === MatchType.SCOPE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (scope %s blocked)', manifest.name, blockMatch.scope);\n      logger.trace(\n        { name: manifest.name, scope: blockMatch.scope },\n        'all versions of @{name} blocked (scope @{scope})'\n      );\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All packages in scope ${blockMatch.scope} are blocked by rule`,\n      };\n    }\n  } else if (blockMatch.type === MatchType.PACKAGE) {\n    if (whitelistedVersions.length === 0) {\n      debug('blocking all versions of %s (package blocked)', manifest.name);\n      logger.trace({ name: manifest.name }, 'all versions of @{name} blocked (package rule)');\n      return {\n        ...manifest,\n        versions: {},\n        readme: `All package versions are blocked by rule`,\n      };\n    }\n  } else {\n    blockRule = { ...blockRule, ...blockMatch.rule };\n  }\n\n  const versionRanges = blockRule.versions;\n\n  if (blockRule.strategy === 'block') {\n    const blockedVersions = blockMatch.versions.filter((v) => !whitelistedVersions.includes(v));\n    for (const version of blockedVersions) {\n      delete manifest.versions[version];\n    }\n\n    if (blockedVersions.length > 0) {\n      debug(\n        'blocked %d versions of %s: %o',\n        blockedVersions.length,\n        manifest.name,\n        blockedVersions\n      );\n      logger.trace(\n        {\n          name: manifest.name,\n          count: blockedVersions.length,\n          versions: blockedVersions.join(', '),\n        },\n        '@{count} versions of @{name} blocked: @{versions}'\n      );\n      // Add debug info for devs\n      manifest.readme =\n        (manifest.readme || '') +\n        `\\nSome versions(${blockedVersions.length}) of package are blocked by rules: ${versionRanges.map(\n          (range) => range.raw\n        )}`;\n    }\n\n    return manifest;\n  }\n\n  // Process block rule strategy 'replace'.\n  // We assume that the order of versions is already sorted.\n  const nonBlockedVersions = { ...manifest.versions };\n  const newVersionsMapping: Record<string, string | null> = {};\n\n  versionRanges.forEach((versionRange) => {\n    const allVersions = Object.keys(nonBlockedVersions);\n\n    let lastNonBlockedVersion: string | null = null;\n\n    allVersions.forEach((version) => {\n      if (\n        !whitelistedVersions.includes(version) &&\n        satisfies(version, versionRange, {\n          includePrerelease: true,\n          loose: true,\n        })\n      ) {\n        delete nonBlockedVersions[version];\n        newVersionsMapping[version] = lastNonBlockedVersion;\n      } else {\n        lastNonBlockedVersion = version;\n      }\n    });\n  });\n\n  debug('replacing versions for %s: %o', manifest.name, newVersionsMapping);\n\n  const removedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace === null\n  ) as [string, null][];\n  const replacedVersions = Object.entries(newVersionsMapping).filter(\n    ([_, replace]) => replace !== null\n  ) as [string, string][];\n\n  removedVersions.forEach(([version]) => {\n    debug('no version to replace %s in %s', version, manifest.name);\n    logger.trace(\n      { name: manifest.name, version },\n      'version @{version} of @{name} removed (no replacement available)'\n    );\n    delete manifest.versions[version];\n  });\n\n  replacedVersions.forEach(([version, replaceVersion]) => {\n    logger.trace(\n      { name: manifest.name, version, replaceVersion },\n      'version @{version} of @{name} replaced with @{replaceVersion}'\n    );\n    manifest.versions[version] = {\n      ...manifest.versions[replaceVersion],\n      version,\n    };\n  });\n\n  if (removedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package could not be replaced and thus are fully blocked (${removedVersions.length}):` +\n      ` ${removedVersions.map((a) => a[0])}`;\n  }\n\n  if (replacedVersions.length > 0) {\n    manifest.readme +=\n      `\\nSome versions of package are replaced by other(${replacedVersions.length}):` +\n      ` ${replacedVersions.map((a) => `${a[0]} => ${a[1]}`)}`;\n  }\n\n  return manifest;\n}\n"],"mappings":";;;;;;;AASA,IAAM,WAAA,GAAA,MAAA,SAAmB,wCAAwC;;;;;;;;;;;;;;;;;;AAmBjE,SAAgB,sBACd,UACA,YACA,YACA,QACU;CACV,MAAM,aAAa,gBAAA,WAAW,UAAU,UAAU;CAClD,IACE,eACC,WAAW,SAAS,cAAA,UAAU,SAAS,WAAW,SAAS,cAAA,UAAU,UACtE;EAEA,OAAO,MAAM,EAAE,MAAM,SAAS,KAAK,GAAG,uDAAuD;EAC7F,OAAO;CACT;CAEA,MAAM,aAAa,gBAAA,WAAW,UAAU,UAAU;CAClD,IAAI,CAAC,YAEH,OAAO;CAGT,OAAO,MACL;EAAE,MAAM,SAAS;EAAM,MAAM,WAAW;CAAK,GAC7C,gDACF;CAEA,MAAM,sBAAgC,aAAa,WAAW,WAAW,CAAC;CAC1E,IAAI,YAA8B;EAChC,UAAU,CAAC,IAAI,OAAA,MAAM,GAAG,CAAC;EACzB,UAAU;CACZ;CAEA,IAAI,WAAW,SAAS,cAAA,UAAU;MAC5B,oBAAoB,WAAW,GAAG;GACpC,QAAM,kDAAkD,SAAS,MAAM,WAAW,KAAK;GACvF,OAAO,MACL;IAAE,MAAM,SAAS;IAAM,OAAO,WAAW;GAAM,GAC/C,kDACF;GACA,OAAO;IACL,GAAG;IACH,UAAU,CAAC;IACX,QAAQ,yBAAyB,WAAW,MAAM;GACpD;EACF;QACK,IAAI,WAAW,SAAS,cAAA,UAAU;MACnC,oBAAoB,WAAW,GAAG;GACpC,QAAM,iDAAiD,SAAS,IAAI;GACpE,OAAO,MAAM,EAAE,MAAM,SAAS,KAAK,GAAG,gDAAgD;GACtF,OAAO;IACL,GAAG;IACH,UAAU,CAAC;IACX,QAAQ;GACV;EACF;QAEA,YAAY;EAAE,GAAG;EAAW,GAAG,WAAW;CAAK;CAGjD,MAAM,gBAAgB,UAAU;CAEhC,IAAI,UAAU,aAAa,SAAS;EAClC,MAAM,kBAAkB,WAAW,SAAS,QAAQ,MAAM,CAAC,oBAAoB,SAAS,CAAC,CAAC;EAC1F,KAAK,MAAM,WAAW,iBACpB,OAAO,SAAS,SAAS;EAG3B,IAAI,gBAAgB,SAAS,GAAG;GAC9B,QACE,iCACA,gBAAgB,QAChB,SAAS,MACT,eACF;GACA,OAAO,MACL;IACE,MAAM,SAAS;IACf,OAAO,gBAAgB;IACvB,UAAU,gBAAgB,KAAK,IAAI;GACrC,GACA,mDACF;GAEA,SAAS,UACN,SAAS,UAAU,MACpB,mBAAmB,gBAAgB,OAAO,qCAAqC,cAAc,KAC1F,UAAU,MAAM,GACnB;EACJ;EAEA,OAAO;CACT;CAIA,MAAM,qBAAqB,EAAE,GAAG,SAAS,SAAS;CAClD,MAAM,qBAAoD,CAAC;CAE3D,cAAc,SAAS,iBAAiB;EACtC,MAAM,cAAc,OAAO,KAAK,kBAAkB;EAElD,IAAI,wBAAuC;EAE3C,YAAY,SAAS,YAAY;GAC/B,IACE,CAAC,oBAAoB,SAAS,OAAO,MAAA,GAAA,OAAA,WAC3B,SAAS,cAAc;IAC/B,mBAAmB;IACnB,OAAO;GACT,CAAC,GACD;IACA,OAAO,mBAAmB;IAC1B,mBAAmB,WAAW;GAChC,OACE,wBAAwB;EAE5B,CAAC;CACH,CAAC;CAED,QAAM,iCAAiC,SAAS,MAAM,kBAAkB;CAExE,MAAM,kBAAkB,OAAO,QAAQ,kBAAkB,EAAE,QACxD,CAAC,GAAG,aAAa,YAAY,IAChC;CACA,MAAM,mBAAmB,OAAO,QAAQ,kBAAkB,EAAE,QACzD,CAAC,GAAG,aAAa,YAAY,IAChC;CAEA,gBAAgB,SAAS,CAAC,aAAa;EACrC,QAAM,kCAAkC,SAAS,SAAS,IAAI;EAC9D,OAAO,MACL;GAAE,MAAM,SAAS;GAAM;EAAQ,GAC/B,kEACF;EACA,OAAO,SAAS,SAAS;CAC3B,CAAC;CAED,iBAAiB,SAAS,CAAC,SAAS,oBAAoB;EACtD,OAAO,MACL;GAAE,MAAM,SAAS;GAAM;GAAS;EAAe,GAC/C,+DACF;EACA,SAAS,SAAS,WAAW;GAC3B,GAAG,SAAS,SAAS;GACrB;EACF;CACF,CAAC;CAED,IAAI,gBAAgB,SAAS,GAC3B,SAAS,UACP,gFAAgF,gBAAgB,OAAO,KACnG,gBAAgB,KAAK,MAAM,EAAE,EAAE;CAGvC,IAAI,iBAAiB,SAAS,GAC5B,SAAS,UACP,oDAAoD,iBAAiB,OAAO,KACxE,iBAAiB,KAAK,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI;CAGxD,OAAO;AACT"}