@verdaccio/ui-components 5.0.0-next-9.26 → 5.0.0-next-9.28

package/build/components/Dependencies/DependencyBlock.js

@@ -30,6 +30,7 @@ var DependencyBlock = ({ title, dependencies }) => {
 	const navigate = (0, react_router.useNavigate)();
 	const { t } = (0, react_i18next.useTranslation)();
 	const deps = Object.entries(dependencies);
+	deps.sort(([nameA], [nameB]) => nameA.localeCompare(nameB));
 	function handleClick(name) {
 		navigate(`${require_routes.Route.DETAIL}${name}`);
 	}

package/build/components/Dependencies/DependencyBlock.js.map

@@ -1 +1 @@
-{"version":3,"file":"DependencyBlock.js","names":["styled","Typography","Chip","useNavigate","useTranslation","Route","Box"],"sources":["../../../src/components/Dependencies/DependencyBlock.tsx"],"sourcesContent":["import styled from '@emotion/styled';\nimport Box from '@mui/material/Box';\nimport Chip from '@mui/material/Chip';\nimport Typography from '@mui/material/Typography';\nimport React from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { useNavigate } from 'react-router';\n\nimport type { Theme } from '../../Theme';\nimport type { PackageDependencies } from '../../types/packageMeta';\nimport { Route } from '../../utils';\n\ninterface DependencyBlockProps {\n  title: string;\n  dependencies: PackageDependencies;\n}\n\nexport const StyledText = styled(Typography)<{ theme?: Theme }>((props) => ({\n  fontWeight: props.theme.fontWeight.bold,\n  textTransform: 'capitalize',\n}));\n\nexport const Tags = styled('div')<{ theme?: Theme }>((props) => ({\n  display: 'flex',\n  justifyContent: 'start',\n  flexWrap: 'wrap',\n  // force title to be on the same line as the title\n  // could be better to avoid margin on the first element\n  // but it is a bit tricky to do with flexbox\n  marginLeft: props.theme.spacing(-0.6),\n}));\n\nexport const Tag = styled(Chip)<{ theme?: Theme }>((props) => ({\n  margin: props.theme.spacing(0.6),\n}));\n\nexport const DependencyBlock: React.FC<DependencyBlockProps> = ({ title, dependencies }) => {\n  const navigate = useNavigate();\n  const { t } = useTranslation();\n  const deps = Object.entries(dependencies);\n\n  function handleClick(name: string): void {\n    navigate(`${Route.DETAIL}${name}`);\n  }\n\n  function labelText(title: string, name: string, version: string): string {\n    if (title === 'bundleDependencies') {\n      return t('dependencies.dependency-block-bundle', { package: name });\n    } else {\n      return t('dependencies.dependency-block', { package: name, version });\n    }\n  }\n\n  return (\n    <Box data-testid={title} sx={{ margin: 2 }}>\n      <StyledText sx={{ marginBottom: 1 }} variant=\"subtitle1\">\n        {`${title} (${deps.length})`}\n      </StyledText>\n      <Tags>\n        {deps.map(([name, version]: [string, string]) => {\n          // Bundle dependencies are stored as array, for example [ 0: \"semver\" ]\n          // so the package name arrives here in the version field\n          const packageName = title == 'bundleDependencies' ? version : name;\n          return (\n            <Tag\n              className={'dep-tag'}\n              clickable={true}\n              data-testid={packageName}\n              key={packageName}\n              label={labelText(title, packageName, version)}\n              onClick={() => {\n                handleClick(packageName);\n              }}\n            />\n          );\n        })}\n      </Tags>\n    </Box>\n  );\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,IAAa,cAAA,GAAaA,gBAAAA,QAAAA,CAAOC,yBAAAA,OAAU,CAAC,EAAqB,WAAW;CAC1E,YAAY,MAAM,MAAM,WAAW;CACnC,eAAe;AACjB,EAAE;AAEF,IAAa,QAAA,GAAOD,gBAAAA,QAAAA,CAAO,KAAK,CAAC,EAAqB,WAAW;CAC/D,SAAS;CACT,gBAAgB;CAChB,UAAU;CAIV,YAAY,MAAM,MAAM,QAAQ,GAAI;AACtC,EAAE;AAEF,IAAa,OAAA,GAAMA,gBAAAA,QAAAA,CAAOE,mBAAAA,OAAI,CAAC,EAAqB,WAAW,EAC7D,QAAQ,MAAM,MAAM,QAAQ,EAAG,EACjC,EAAE;AAEF,IAAa,mBAAmD,EAAE,OAAO,mBAAmB;CAC1F,MAAM,YAAA,GAAWC,aAAAA,YAAAA,CAAY;CAC7B,MAAM,EAAE,OAAA,GAAMC,cAAAA,eAAAA,CAAe;CAC7B,MAAM,OAAO,OAAO,QAAQ,YAAY;CAExC,SAAS,YAAY,MAAoB;EACvC,SAAS,GAAGC,eAAAA,MAAM,SAAS,MAAM;CACnC;CAEA,SAAS,UAAU,OAAe,MAAc,SAAyB;EACvE,IAAI,UAAU,sBACZ,OAAO,EAAE,wCAAwC,EAAE,SAAS,KAAK,CAAC;OAElE,OAAO,EAAE,iCAAiC;GAAE,SAAS;GAAM;EAAQ,CAAC;CAExE;CAEA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACC,kBAAAA,SAAD;EAAK,eAAa;EAAO,IAAI,EAAE,QAAQ,EAAE;EAAzC,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,YAAD;GAAY,IAAI,EAAE,cAAc,EAAE;GAAG,SAAQ;GAC1C,UAAA,GAAG,MAAM,IAAI,KAAK,OAAO;EAChB,CAAA,GACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD,EAAA,UACG,KAAK,KAAK,CAAC,MAAM,aAA+B;GAG/C,MAAM,cAAc,SAAS,uBAAuB,UAAU;GAC9D,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;IACE,WAAW;IACX,WAAW;IACX,eAAa;IAEb,OAAO,UAAU,OAAO,aAAa,OAAO;IAC5C,eAAe;KACb,YAAY,WAAW;IACzB;GACD,GALM,WAKN;EAEL,CAAC,EACG,CAAA,CACH;;AAET"}
+{"version":3,"file":"DependencyBlock.js","names":["styled","Typography","Chip","useNavigate","useTranslation","Route","Box"],"sources":["../../../src/components/Dependencies/DependencyBlock.tsx"],"sourcesContent":["import styled from '@emotion/styled';\nimport Box from '@mui/material/Box';\nimport Chip from '@mui/material/Chip';\nimport Typography from '@mui/material/Typography';\nimport React from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { useNavigate } from 'react-router';\n\nimport type { Theme } from '../../Theme';\nimport type { PackageDependencies } from '../../types/packageMeta';\nimport { Route } from '../../utils';\n\ninterface DependencyBlockProps {\n  title: string;\n  dependencies: PackageDependencies;\n}\n\nexport const StyledText = styled(Typography)<{ theme?: Theme }>((props) => ({\n  fontWeight: props.theme.fontWeight.bold,\n  textTransform: 'capitalize',\n}));\n\nexport const Tags = styled('div')<{ theme?: Theme }>((props) => ({\n  display: 'flex',\n  justifyContent: 'start',\n  flexWrap: 'wrap',\n  // force title to be on the same line as the title\n  // could be better to avoid margin on the first element\n  // but it is a bit tricky to do with flexbox\n  marginLeft: props.theme.spacing(-0.6),\n}));\n\nexport const Tag = styled(Chip)<{ theme?: Theme }>((props) => ({\n  margin: props.theme.spacing(0.6),\n}));\n\nexport const DependencyBlock: React.FC<DependencyBlockProps> = ({ title, dependencies }) => {\n  const navigate = useNavigate();\n  const { t } = useTranslation();\n  const deps = Object.entries(dependencies);\n\n  // sort dependencies alphabetically by name\n  deps.sort(([nameA], [nameB]) => nameA.localeCompare(nameB));\n\n  function handleClick(name: string): void {\n    navigate(`${Route.DETAIL}${name}`);\n  }\n\n  function labelText(title: string, name: string, version: string): string {\n    if (title === 'bundleDependencies') {\n      return t('dependencies.dependency-block-bundle', { package: name });\n    } else {\n      return t('dependencies.dependency-block', { package: name, version });\n    }\n  }\n\n  return (\n    <Box data-testid={title} sx={{ margin: 2 }}>\n      <StyledText sx={{ marginBottom: 1 }} variant=\"subtitle1\">\n        {`${title} (${deps.length})`}\n      </StyledText>\n      <Tags>\n        {deps.map(([name, version]: [string, string]) => {\n          // Bundle dependencies are stored as array, for example [ 0: \"semver\" ]\n          // so the package name arrives here in the version field\n          const packageName = title == 'bundleDependencies' ? version : name;\n          return (\n            <Tag\n              className={'dep-tag'}\n              clickable={true}\n              data-testid={packageName}\n              key={packageName}\n              label={labelText(title, packageName, version)}\n              onClick={() => {\n                handleClick(packageName);\n              }}\n            />\n          );\n        })}\n      </Tags>\n    </Box>\n  );\n};\n"],"mappings":";;;;;;;;;;;;;;;;;AAiBA,IAAa,cAAA,GAAaA,gBAAAA,QAAAA,CAAOC,yBAAAA,OAAU,CAAC,EAAqB,WAAW;CAC1E,YAAY,MAAM,MAAM,WAAW;CACnC,eAAe;AACjB,EAAE;AAEF,IAAa,QAAA,GAAOD,gBAAAA,QAAAA,CAAO,KAAK,CAAC,EAAqB,WAAW;CAC/D,SAAS;CACT,gBAAgB;CAChB,UAAU;CAIV,YAAY,MAAM,MAAM,QAAQ,GAAI;AACtC,EAAE;AAEF,IAAa,OAAA,GAAMA,gBAAAA,QAAAA,CAAOE,mBAAAA,OAAI,CAAC,EAAqB,WAAW,EAC7D,QAAQ,MAAM,MAAM,QAAQ,EAAG,EACjC,EAAE;AAEF,IAAa,mBAAmD,EAAE,OAAO,mBAAmB;CAC1F,MAAM,YAAA,GAAWC,aAAAA,YAAAA,CAAY;CAC7B,MAAM,EAAE,OAAA,GAAMC,cAAAA,eAAAA,CAAe;CAC7B,MAAM,OAAO,OAAO,QAAQ,YAAY;CAGxC,KAAK,MAAM,CAAC,QAAQ,CAAC,WAAW,MAAM,cAAc,KAAK,CAAC;CAE1D,SAAS,YAAY,MAAoB;EACvC,SAAS,GAAGC,eAAAA,MAAM,SAAS,MAAM;CACnC;CAEA,SAAS,UAAU,OAAe,MAAc,SAAyB;EACvE,IAAI,UAAU,sBACZ,OAAO,EAAE,wCAAwC,EAAE,SAAS,KAAK,CAAC;OAElE,OAAO,EAAE,iCAAiC;GAAE,SAAS;GAAM;EAAQ,CAAC;CAExE;CAEA,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACC,kBAAAA,SAAD;EAAK,eAAa;EAAO,IAAI,EAAE,QAAQ,EAAE;EAAzC,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,YAAD;GAAY,IAAI,EAAE,cAAc,EAAE;GAAG,SAAQ;GAC1C,UAAA,GAAG,MAAM,IAAI,KAAK,OAAO;EAChB,CAAA,GACZ,iBAAA,GAAA,kBAAA,IAAA,CAAC,MAAD,EAAA,UACG,KAAK,KAAK,CAAC,MAAM,aAA+B;GAG/C,MAAM,cAAc,SAAS,uBAAuB,UAAU;GAC9D,OACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD;IACE,WAAW;IACX,WAAW;IACX,eAAa;IAEb,OAAO,UAAU,OAAO,aAAa,OAAO;IAC5C,eAAe;KACb,YAAY,WAAW;IACzB;GACD,GALM,WAKN;EAEL,CAAC,EACG,CAAA,CACH;;AAET"}

package/build/components/Dependencies/DependencyBlock.mjs

@@ -24,6 +24,7 @@ var DependencyBlock = ({ title, dependencies }) => {
 	const navigate = useNavigate();
 	const { t } = useTranslation();
 	const deps = Object.entries(dependencies);
+	deps.sort(([nameA], [nameB]) => nameA.localeCompare(nameB));
 	function handleClick(name) {
 		navigate(`${Route$1.DETAIL}${name}`);
 	}

package/build/components/Dependencies/DependencyBlock.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"DependencyBlock.mjs","names":["Route"],"sources":["../../../src/components/Dependencies/DependencyBlock.tsx"],"sourcesContent":["import styled from '@emotion/styled';\nimport Box from '@mui/material/Box';\nimport Chip from '@mui/material/Chip';\nimport Typography from '@mui/material/Typography';\nimport React from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { useNavigate } from 'react-router';\n\nimport type { Theme } from '../../Theme';\nimport type { PackageDependencies } from '../../types/packageMeta';\nimport { Route } from '../../utils';\n\ninterface DependencyBlockProps {\n  title: string;\n  dependencies: PackageDependencies;\n}\n\nexport const StyledText = styled(Typography)<{ theme?: Theme }>((props) => ({\n  fontWeight: props.theme.fontWeight.bold,\n  textTransform: 'capitalize',\n}));\n\nexport const Tags = styled('div')<{ theme?: Theme }>((props) => ({\n  display: 'flex',\n  justifyContent: 'start',\n  flexWrap: 'wrap',\n  // force title to be on the same line as the title\n  // could be better to avoid margin on the first element\n  // but it is a bit tricky to do with flexbox\n  marginLeft: props.theme.spacing(-0.6),\n}));\n\nexport const Tag = styled(Chip)<{ theme?: Theme }>((props) => ({\n  margin: props.theme.spacing(0.6),\n}));\n\nexport const DependencyBlock: React.FC<DependencyBlockProps> = ({ title, dependencies }) => {\n  const navigate = useNavigate();\n  const { t } = useTranslation();\n  const deps = Object.entries(dependencies);\n\n  function handleClick(name: string): void {\n    navigate(`${Route.DETAIL}${name}`);\n  }\n\n  function labelText(title: string, name: string, version: string): string {\n    if (title === 'bundleDependencies') {\n      return t('dependencies.dependency-block-bundle', { package: name });\n    } else {\n      return t('dependencies.dependency-block', { package: name, version });\n    }\n  }\n\n  return (\n    <Box data-testid={title} sx={{ margin: 2 }}>\n      <StyledText sx={{ marginBottom: 1 }} variant=\"subtitle1\">\n        {`${title} (${deps.length})`}\n      </StyledText>\n      <Tags>\n        {deps.map(([name, version]: [string, string]) => {\n          // Bundle dependencies are stored as array, for example [ 0: \"semver\" ]\n          // so the package name arrives here in the version field\n          const packageName = title == 'bundleDependencies' ? version : name;\n          return (\n            <Tag\n              className={'dep-tag'}\n              clickable={true}\n              data-testid={packageName}\n              key={packageName}\n              label={labelText(title, packageName, version)}\n              onClick={() => {\n                handleClick(packageName);\n              }}\n            />\n          );\n        })}\n      </Tags>\n    </Box>\n  );\n};\n"],"mappings":";;;;;;;;;;;AAiBA,IAAa,aAAa,OAAO,UAAU,CAAC,EAAqB,WAAW;CAC1E,YAAY,MAAM,MAAM,WAAW;CACnC,eAAe;AACjB,EAAE;AAEF,IAAa,OAAO,OAAO,KAAK,CAAC,EAAqB,WAAW;CAC/D,SAAS;CACT,gBAAgB;CAChB,UAAU;CAIV,YAAY,MAAM,MAAM,QAAQ,GAAI;AACtC,EAAE;AAEF,IAAa,MAAM,OAAO,IAAI,CAAC,EAAqB,WAAW,EAC7D,QAAQ,MAAM,MAAM,QAAQ,EAAG,EACjC,EAAE;AAEF,IAAa,mBAAmD,EAAE,OAAO,mBAAmB;CAC1F,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,MAAM,eAAe;CAC7B,MAAM,OAAO,OAAO,QAAQ,YAAY;CAExC,SAAS,YAAY,MAAoB;EACvC,SAAS,GAAGA,QAAM,SAAS,MAAM;CACnC;CAEA,SAAS,UAAU,OAAe,MAAc,SAAyB;EACvE,IAAI,UAAU,sBACZ,OAAO,EAAE,wCAAwC,EAAE,SAAS,KAAK,CAAC;OAElE,OAAO,EAAE,iCAAiC;GAAE,SAAS;GAAM;EAAQ,CAAC;CAExE;CAEA,OACE,qBAAC,KAAD;EAAK,eAAa;EAAO,IAAI,EAAE,QAAQ,EAAE;EAAzC,UAAA,CACE,oBAAC,YAAD;GAAY,IAAI,EAAE,cAAc,EAAE;GAAG,SAAQ;GAC1C,UAAA,GAAG,MAAM,IAAI,KAAK,OAAO;EAChB,CAAA,GACZ,oBAAC,MAAD,EAAA,UACG,KAAK,KAAK,CAAC,MAAM,aAA+B;GAG/C,MAAM,cAAc,SAAS,uBAAuB,UAAU;GAC9D,OACE,oBAAC,KAAD;IACE,WAAW;IACX,WAAW;IACX,eAAa;IAEb,OAAO,UAAU,OAAO,aAAa,OAAO;IAC5C,eAAe;KACb,YAAY,WAAW;IACzB;GACD,GALM,WAKN;EAEL,CAAC,EACG,CAAA,CACH;;AAET"}
+{"version":3,"file":"DependencyBlock.mjs","names":["Route"],"sources":["../../../src/components/Dependencies/DependencyBlock.tsx"],"sourcesContent":["import styled from '@emotion/styled';\nimport Box from '@mui/material/Box';\nimport Chip from '@mui/material/Chip';\nimport Typography from '@mui/material/Typography';\nimport React from 'react';\nimport { useTranslation } from 'react-i18next';\nimport { useNavigate } from 'react-router';\n\nimport type { Theme } from '../../Theme';\nimport type { PackageDependencies } from '../../types/packageMeta';\nimport { Route } from '../../utils';\n\ninterface DependencyBlockProps {\n  title: string;\n  dependencies: PackageDependencies;\n}\n\nexport const StyledText = styled(Typography)<{ theme?: Theme }>((props) => ({\n  fontWeight: props.theme.fontWeight.bold,\n  textTransform: 'capitalize',\n}));\n\nexport const Tags = styled('div')<{ theme?: Theme }>((props) => ({\n  display: 'flex',\n  justifyContent: 'start',\n  flexWrap: 'wrap',\n  // force title to be on the same line as the title\n  // could be better to avoid margin on the first element\n  // but it is a bit tricky to do with flexbox\n  marginLeft: props.theme.spacing(-0.6),\n}));\n\nexport const Tag = styled(Chip)<{ theme?: Theme }>((props) => ({\n  margin: props.theme.spacing(0.6),\n}));\n\nexport const DependencyBlock: React.FC<DependencyBlockProps> = ({ title, dependencies }) => {\n  const navigate = useNavigate();\n  const { t } = useTranslation();\n  const deps = Object.entries(dependencies);\n\n  // sort dependencies alphabetically by name\n  deps.sort(([nameA], [nameB]) => nameA.localeCompare(nameB));\n\n  function handleClick(name: string): void {\n    navigate(`${Route.DETAIL}${name}`);\n  }\n\n  function labelText(title: string, name: string, version: string): string {\n    if (title === 'bundleDependencies') {\n      return t('dependencies.dependency-block-bundle', { package: name });\n    } else {\n      return t('dependencies.dependency-block', { package: name, version });\n    }\n  }\n\n  return (\n    <Box data-testid={title} sx={{ margin: 2 }}>\n      <StyledText sx={{ marginBottom: 1 }} variant=\"subtitle1\">\n        {`${title} (${deps.length})`}\n      </StyledText>\n      <Tags>\n        {deps.map(([name, version]: [string, string]) => {\n          // Bundle dependencies are stored as array, for example [ 0: \"semver\" ]\n          // so the package name arrives here in the version field\n          const packageName = title == 'bundleDependencies' ? version : name;\n          return (\n            <Tag\n              className={'dep-tag'}\n              clickable={true}\n              data-testid={packageName}\n              key={packageName}\n              label={labelText(title, packageName, version)}\n              onClick={() => {\n                handleClick(packageName);\n              }}\n            />\n          );\n        })}\n      </Tags>\n    </Box>\n  );\n};\n"],"mappings":";;;;;;;;;;;AAiBA,IAAa,aAAa,OAAO,UAAU,CAAC,EAAqB,WAAW;CAC1E,YAAY,MAAM,MAAM,WAAW;CACnC,eAAe;AACjB,EAAE;AAEF,IAAa,OAAO,OAAO,KAAK,CAAC,EAAqB,WAAW;CAC/D,SAAS;CACT,gBAAgB;CAChB,UAAU;CAIV,YAAY,MAAM,MAAM,QAAQ,GAAI;AACtC,EAAE;AAEF,IAAa,MAAM,OAAO,IAAI,CAAC,EAAqB,WAAW,EAC7D,QAAQ,MAAM,MAAM,QAAQ,EAAG,EACjC,EAAE;AAEF,IAAa,mBAAmD,EAAE,OAAO,mBAAmB;CAC1F,MAAM,WAAW,YAAY;CAC7B,MAAM,EAAE,MAAM,eAAe;CAC7B,MAAM,OAAO,OAAO,QAAQ,YAAY;CAGxC,KAAK,MAAM,CAAC,QAAQ,CAAC,WAAW,MAAM,cAAc,KAAK,CAAC;CAE1D,SAAS,YAAY,MAAoB;EACvC,SAAS,GAAGA,QAAM,SAAS,MAAM;CACnC;CAEA,SAAS,UAAU,OAAe,MAAc,SAAyB;EACvE,IAAI,UAAU,sBACZ,OAAO,EAAE,wCAAwC,EAAE,SAAS,KAAK,CAAC;OAElE,OAAO,EAAE,iCAAiC;GAAE,SAAS;GAAM;EAAQ,CAAC;CAExE;CAEA,OACE,qBAAC,KAAD;EAAK,eAAa;EAAO,IAAI,EAAE,QAAQ,EAAE;EAAzC,UAAA,CACE,oBAAC,YAAD;GAAY,IAAI,EAAE,cAAc,EAAE;GAAG,SAAQ;GAC1C,UAAA,GAAG,MAAM,IAAI,KAAK,OAAO;EAChB,CAAA,GACZ,oBAAC,MAAD,EAAA,UACG,KAAK,KAAK,CAAC,MAAM,aAA+B;GAG/C,MAAM,cAAc,SAAS,uBAAuB,UAAU;GAC9D,OACE,oBAAC,KAAD;IACE,WAAW;IACX,WAAW;IACX,eAAa;IAEb,OAAO,UAAU,OAAO,aAAa,OAAO;IAC5C,eAAe;KACb,YAAY,WAAW;IACzB;GACD,GALM,WAKN;EAEL,CAAC,EACG,CAAA,CACH;;AAET"}

package/build/components/Provenance/Provenance.d.ts

@@ -0,0 +1,14 @@
+import type { FC } from 'react';
+import type { PackageMetaInterface } from '../../types/packageMeta';
+export declare function provenanceLabel(predicateType: string): string;
+export declare function builderLabel(builder: string, buildType?: string): string;
+export declare function commitUrl(repository: string, commit: string, buildType?: string): string;
+export declare function workflowUrl(repository: string, commit: string, workflowPath: string): string;
+/** "Provenance" sidebar section; its chip opens a dialog with the provenance and signature details. */
+declare const Provenance: FC<{
+    packageMeta: PackageMetaInterface;
+    packageName: string;
+    version?: string;
+    showDetails?: boolean;
+}>;
+export default Provenance;

package/build/components/Provenance/Provenance.js

@@ -0,0 +1,223 @@
+const require_runtime = require("../../_virtual/_rolldown/runtime.js");
+const require_url = require("../../utils/url.js");
+const require_routes = require("../../utils/routes.js");
+const require_use_data = require("../../api/use-data.js");
+const require_configuration = require("../../configuration.js");
+const require_utils = require("../../store/utils.js");
+const require_styles = require("../Distribution/styles.js");
+const require_RegistryInfoDialog = require("../RegistryInfoDialog/RegistryInfoDialog.js");
+require("../RegistryInfoDialog/index.js");
+let react = require("react");
+react = require_runtime.__toESM(react);
+let react_i18next = require("react-i18next");
+let react_jsx_runtime = require("react/jsx-runtime");
+let _mui_material_CircularProgress = require("@mui/material/CircularProgress");
+_mui_material_CircularProgress = require_runtime.__toESM(_mui_material_CircularProgress);
+let _mui_material_Link = require("@mui/material/Link");
+_mui_material_Link = require_runtime.__toESM(_mui_material_Link);
+let _mui_material_List = require("@mui/material/List");
+_mui_material_List = require_runtime.__toESM(_mui_material_List);
+let _mui_material_Typography = require("@mui/material/Typography");
+_mui_material_Typography = require_runtime.__toESM(_mui_material_Typography);
+let _mui_material_ListItem = require("@mui/material/ListItem");
+_mui_material_ListItem = require_runtime.__toESM(_mui_material_ListItem);
+let _mui_material_ListItemText = require("@mui/material/ListItemText");
+_mui_material_ListItemText = require_runtime.__toESM(_mui_material_ListItemText);
+let _mui_icons_material_VerifiedUser = require("@mui/icons-material/VerifiedUser");
+_mui_icons_material_VerifiedUser = require_runtime.__toESM(_mui_icons_material_VerifiedUser);
+let _mui_icons_material_VerifiedUserOutlined = require("@mui/icons-material/VerifiedUserOutlined");
+_mui_icons_material_VerifiedUserOutlined = require_runtime.__toESM(_mui_icons_material_VerifiedUserOutlined);
+//#region src/components/Provenance/Provenance.tsx
+function provenanceLabel(predicateType) {
+	const version = predicateType.match(/^https:\/\/slsa\.dev\/provenance\/(v[\d.]+)$/)?.[1];
+	return version ? `SLSA ${version}` : predicateType;
+}
+var isGitLab = (buildType) => buildType?.startsWith("https://github.com/npm/cli/gitlab");
+function builderLabel(builder, buildType) {
+	if (isGitLab(buildType)) return "GitLab CI/CD";
+	if (/^https:\/\/github\.com\/actions\/runner(\/|$)/.test(builder)) return builder.endsWith("/self-hosted") ? "GitHub Actions (self-hosted)" : "GitHub Actions";
+	return builder;
+}
+var isWorkflowFile = (entry) => /\.ya?ml$/.test(entry);
+function commitUrl(repository, commit, buildType) {
+	return `${repository}/${isGitLab(buildType) ? "-/commit" : "commit"}/${encodeURIComponent(commit)}`;
+}
+function workflowUrl(repository, commit, workflowPath) {
+	const path = workflowPath.split("/").map(encodeURIComponent).join("/");
+	return `${repository}/blob/${encodeURIComponent(commit)}/${path}`;
+}
+function readAttestations(raw) {
+	const value = raw;
+	const url = typeof value?.url === "string" && value.url.length > 0 ? value.url : void 0;
+	const predicateType = value?.provenance?.predicateType;
+	const provenance = typeof predicateType === "string" && predicateType.length > 0 ? { predicateType } : void 0;
+	return url || provenance ? {
+		url,
+		provenance
+	} : void 0;
+}
+function readSignatures(raw) {
+	return Array.isArray(raw) ? raw.filter((item) => typeof item?.keyid === "string" && item.keyid !== "") : [];
+}
+var isHttpUrl = (href) => /^https?:\/\//i.test(href) && require_url.isURL(href);
+var ExternalLink = ({ href, children }) => isHttpUrl(href) ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_material_Link.default, {
+	href,
+	rel: "noopener noreferrer",
+	target: "_blank",
+	underline: "hover",
+	children
+}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(react_jsx_runtime.Fragment, { children });
+var Detail = ({ label, children }) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_material_ListItem.default, {
+	disableGutters: true,
+	sx: { py: .5 },
+	children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_material_ListItemText.default, {
+		primary: label,
+		secondary: children,
+		secondaryTypographyProps: { component: "div" }
+	})
+});
+var BuildDetails = ({ packageName, version }) => {
+	const { t } = (0, react_i18next.useTranslation)();
+	const basePath = require_utils.stripTrailingSlash(require_configuration.getConfiguration().base);
+	const { data, error, isLoading } = require_use_data.useData(basePath, require_routes.APIRoute.PROVENANCE, packageName, version, { shouldRetryOnError: false });
+	if (isLoading) return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_material_CircularProgress.default, {
+		"data-testid": "provenance-loading",
+		size: 24,
+		sx: { my: 2 }
+	});
+	if (error || !data || typeof data !== "object") return null;
+	const repository = data.sourceRepository;
+	const commit = data.sourceCommit;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+		data.builder ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+			label: t("sidebar.provenance.built-on"),
+			children: builderLabel(data.builder, data.buildType)
+		}) : null,
+		repository ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(Detail, {
+			label: t("sidebar.provenance.source"),
+			children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExternalLink, {
+				href: repository,
+				children: repository.replace(/^https?:\/\//, "")
+			}), data.sourceRef ? ` (${data.sourceRef.replace(/^refs\/heads\//, "")})` : ""]
+		}) : null,
+		repository && commit ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+			label: t("sidebar.provenance.commit"),
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExternalLink, {
+				href: commitUrl(repository, commit, data.buildType),
+				children: commit.slice(0, 12)
+			})
+		}) : null,
+		data.workflowPath ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+			label: t("sidebar.provenance.workflow"),
+			children: repository && commit && isWorkflowFile(data.workflowPath) ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExternalLink, {
+				href: workflowUrl(repository, commit, data.workflowPath),
+				children: data.workflowPath
+			}) : data.workflowPath
+		}) : null,
+		data.buildRunUrl ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+			label: t("sidebar.provenance.build-run"),
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExternalLink, {
+				href: data.buildRunUrl,
+				children: data.buildRunUrl.replace(/^https?:\/\//, "")
+			})
+		}) : null,
+		data.transparencyLogUrl ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+			label: t("sidebar.provenance.transparency-log"),
+			children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExternalLink, {
+				href: data.transparencyLogUrl,
+				children: `#${data.transparencyLogIndex}`
+			})
+		}) : null
+	] });
+};
+var ProvenanceDialog = ({ open, onClose, packageName, version, attestations, signatures, showDetails }) => {
+	const { t } = (0, react_i18next.useTranslation)();
+	const provenance = attestations?.provenance;
+	const keyids = [...new Set(signatures.map((signature) => signature.keyid))];
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(require_RegistryInfoDialog.default, {
+		onClose,
+		open,
+		title: t("sidebar.provenance.title"),
+		children: [
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_material_Typography.default, {
+				sx: { pt: 2 },
+				variant: "subtitle2",
+				children: `${packageName}@${version}`
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_material_Typography.default, {
+				color: "text.secondary",
+				variant: "body2",
+				children: t("sidebar.provenance.disclaimer")
+			}),
+			/* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_mui_material_List.default, {
+				dense: true,
+				children: [
+					provenance ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+						label: t("sidebar.provenance.provenance"),
+						children: provenanceLabel(provenance.predicateType)
+					}) : null,
+					keyids.length > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+						label: t("sidebar.provenance.registry-signature"),
+						children: keyids.map((keyid) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: keyid }, keyid))
+					}) : null,
+					attestations?.url ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Detail, {
+						label: t("sidebar.provenance.attestation"),
+						children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ExternalLink, {
+							href: attestations.url,
+							children: attestations.url.replace(/^https?:\/\//, "")
+						})
+					}) : null,
+					showDetails && provenance && open ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(BuildDetails, {
+						packageName,
+						version
+					}) : null
+				]
+			})
+		]
+	});
+};
+/** "Provenance" sidebar section; its chip opens a dialog with the provenance and signature details. */
+var Provenance = ({ packageMeta, packageName, version, showDetails = false }) => {
+	const { t } = (0, react_i18next.useTranslation)();
+	const [open, setOpen] = (0, react.useState)(false);
+	const latest = packageMeta?.latest;
+	const attestations = readAttestations(latest?.dist?.attestations);
+	const signatures = readSignatures(latest?.dist?.signatures);
+	const provenance = attestations?.provenance;
+	if (!provenance && signatures.length === 0) return null;
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(_mui_material_List.default, {
+		subheader: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_styles.StyledText, {
+			variant: "subtitle1",
+			children: t("sidebar.provenance.title")
+		}),
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_styles.DistListItem, { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(require_styles.DistChips, {
+			clickable: true,
+			color: provenance ? "primary" : "default",
+			"data-testid": "provenance-badge",
+			icon: provenance ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_icons_material_VerifiedUser.default, {}) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_mui_icons_material_VerifiedUserOutlined.default, {}),
+			label: provenance ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("b", { children: t("sidebar.provenance.provenance") }),
+				": ",
+				provenanceLabel(provenance.predicateType)
+			] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("b", { children: t("sidebar.provenance.registry-signature") }),
+			onClick: () => setOpen(true),
+			variant: "outlined"
+		}) }), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ProvenanceDialog, {
+			attestations,
+			onClose: () => setOpen(false),
+			open,
+			packageName,
+			showDetails,
+			signatures,
+			version: version || latest?.version || ""
+		})]
+	});
+};
+//#endregion
+exports.builderLabel = builderLabel;
+exports.commitUrl = commitUrl;
+exports.default = Provenance;
+exports.provenanceLabel = provenanceLabel;
+exports.workflowUrl = workflowUrl;
+
+//# sourceMappingURL=Provenance.js.map

package/build/components/Provenance/Provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Provenance.js","names":["isURL","Link","_Fragment","ListItem","ListItemText","useTranslation","stripTrailingSlash","getConfiguration","useData","APIRoute","CircularProgress","RegistryInfoDialog","Typography","List","useState","StyledText","DistListItem","DistChips","VerifiedUserIcon","VerifiedUserOutlinedIcon"],"sources":["../../../src/components/Provenance/Provenance.tsx"],"sourcesContent":["import VerifiedUserIcon from '@mui/icons-material/VerifiedUser';\nimport VerifiedUserOutlinedIcon from '@mui/icons-material/VerifiedUserOutlined';\nimport CircularProgress from '@mui/material/CircularProgress';\nimport Link from '@mui/material/Link';\nimport List from '@mui/material/List';\nimport ListItem from '@mui/material/ListItem';\nimport ListItemText from '@mui/material/ListItemText';\nimport Typography from '@mui/material/Typography';\nimport type { FC } from 'react';\nimport React, { useState } from 'react';\nimport { useTranslation } from 'react-i18next';\n\nimport { useData } from '../../api/use-data';\nimport { getConfiguration } from '../../configuration';\nimport { stripTrailingSlash } from '../../store/utils';\nimport type { PackageMetaInterface, Signature } from '../../types/packageMeta';\nimport type { ProvenanceSummary } from '../../types/provenance';\nimport { APIRoute } from '../../utils/routes';\nimport { isURL } from '../../utils/url';\nimport { DistChips, DistListItem, StyledText } from '../Distribution/styles';\nimport RegistryInfoDialog from '../RegistryInfoDialog';\n\n// `https://slsa.dev/provenance/v1` → `SLSA v1`; other predicate types are shown as they are\nexport function provenanceLabel(predicateType: string): string {\n  const version = predicateType.match(/^https:\\/\\/slsa\\.dev\\/provenance\\/(v[\\d.]+)$/)?.[1];\n  return version ? `SLSA ${version}` : predicateType;\n}\n\nconst isGitLab = (buildType?: string) => buildType?.startsWith('https://github.com/npm/cli/gitlab');\n\n// npm and Yarn generate provenance on GitHub Actions (SLSA v1) and GitLab CI/CD (npm's own v0.2 build type)\nexport function builderLabel(builder: string, buildType?: string): string {\n  if (isGitLab(buildType)) {\n    return 'GitLab CI/CD';\n  }\n  if (/^https:\\/\\/github\\.com\\/actions\\/runner(\\/|$)/.test(builder)) {\n    return builder.endsWith('/self-hosted') ? 'GitHub Actions (self-hosted)' : 'GitHub Actions';\n  }\n  return builder;\n}\n\n// GitLab statements carry the job name here, GitHub ones the workflow file\nconst isWorkflowFile = (entry: string) => /\\.ya?ml$/.test(entry);\n\n// GitLab commit pages live under `/-/commit/`, GitHub (and most forges) under `/commit/`\nexport function commitUrl(repository: string, commit: string, buildType?: string): string {\n  return `${repository}/${isGitLab(buildType) ? '-/commit' : 'commit'}/${encodeURIComponent(commit)}`;\n}\n\n// each segment of the workflow path is encoded on its own so `/` keeps separating them\nexport function workflowUrl(repository: string, commit: string, workflowPath: string): string {\n  const path = workflowPath.split('/').map(encodeURIComponent).join('/');\n  return `${repository}/blob/${encodeURIComponent(commit)}/${path}`;\n}\n\n// `dist.attestations` and `dist.signatures` come straight from package metadata, not from the decoder\ntype ProvenanceMeta = { url?: string; provenance?: { predicateType: string } };\n\nfunction readAttestations(raw: unknown): ProvenanceMeta | undefined {\n  const value = raw as { url?: unknown; provenance?: { predicateType?: unknown } } | undefined;\n  const url = typeof value?.url === 'string' && value.url.length > 0 ? value.url : undefined;\n  const predicateType = value?.provenance?.predicateType;\n  const provenance =\n    typeof predicateType === 'string' && predicateType.length > 0 ? { predicateType } : undefined;\n  return url || provenance ? { url, provenance } : undefined;\n}\n\nfunction readSignatures(raw: unknown): Signature[] {\n  return Array.isArray(raw)\n    ? raw.filter((item): item is Signature => typeof item?.keyid === 'string' && item.keyid !== '')\n    : [];\n}\n\n// every url here comes from the registry metadata or the attestation bundle\nconst isHttpUrl = (href: string) => /^https?:\\/\\//i.test(href) && isURL(href);\n\nconst ExternalLink: FC<{ href: string; children: React.ReactNode }> = ({ href, children }) =>\n  isHttpUrl(href) ? (\n    <Link href={href} rel=\"noopener noreferrer\" target=\"_blank\" underline=\"hover\">\n      {children}\n    </Link>\n  ) : (\n    <>{children}</>\n  );\n\nconst Detail: FC<{ label: string; children: React.ReactNode }> = ({ label, children }) => (\n  <ListItem disableGutters={true} sx={{ py: 0.5 }}>\n    <ListItemText\n      primary={label}\n      secondary={children}\n      secondaryTypographyProps={{ component: 'div' }}\n    />\n  </ListItem>\n);\n\nconst BuildDetails: FC<{ packageName: string; version?: string }> = ({ packageName, version }) => {\n  const { t } = useTranslation();\n  const basePath = stripTrailingSlash(getConfiguration().base);\n  const { data, error, isLoading } = useData<ProvenanceSummary>(\n    basePath,\n    APIRoute.PROVENANCE,\n    packageName,\n    version,\n    { shouldRetryOnError: false }\n  );\n\n  if (isLoading) {\n    return <CircularProgress data-testid=\"provenance-loading\" size={24} sx={{ my: 2 }} />;\n  }\n  // the summary above is enough when the endpoint fails\n  if (error || !data || typeof data !== 'object') {\n    return null;\n  }\n\n  const repository = data.sourceRepository;\n  const commit = data.sourceCommit;\n  return (\n    <>\n      {data.builder ? (\n        <Detail label={t('sidebar.provenance.built-on')}>\n          {builderLabel(data.builder, data.buildType)}\n        </Detail>\n      ) : null}\n      {repository ? (\n        <Detail label={t('sidebar.provenance.source')}>\n          <ExternalLink href={repository}>{repository.replace(/^https?:\\/\\//, '')}</ExternalLink>\n          {data.sourceRef ? ` (${data.sourceRef.replace(/^refs\\/heads\\//, '')})` : ''}\n        </Detail>\n      ) : null}\n      {repository && commit ? (\n        <Detail label={t('sidebar.provenance.commit')}>\n          <ExternalLink href={commitUrl(repository, commit, data.buildType)}>\n            {commit.slice(0, 12)}\n          </ExternalLink>\n        </Detail>\n      ) : null}\n      {data.workflowPath ? (\n        <Detail label={t('sidebar.provenance.workflow')}>\n          {repository && commit && isWorkflowFile(data.workflowPath) ? (\n            <ExternalLink href={workflowUrl(repository, commit, data.workflowPath)}>\n              {data.workflowPath}\n            </ExternalLink>\n          ) : (\n            data.workflowPath\n          )}\n        </Detail>\n      ) : null}\n      {data.buildRunUrl ? (\n        <Detail label={t('sidebar.provenance.build-run')}>\n          <ExternalLink href={data.buildRunUrl}>\n            {data.buildRunUrl.replace(/^https?:\\/\\//, '')}\n          </ExternalLink>\n        </Detail>\n      ) : null}\n      {data.transparencyLogUrl ? (\n        <Detail label={t('sidebar.provenance.transparency-log')}>\n          <ExternalLink\n            href={data.transparencyLogUrl}\n          >{`#${data.transparencyLogIndex}`}</ExternalLink>\n        </Detail>\n      ) : null}\n    </>\n  );\n};\n\nconst ProvenanceDialog: FC<{\n  open: boolean;\n  onClose: () => void;\n  packageName: string;\n  version: string;\n  attestations?: ProvenanceMeta;\n  signatures: Signature[];\n  showDetails: boolean;\n}> = ({ open, onClose, packageName, version, attestations, signatures, showDetails }) => {\n  const { t } = useTranslation();\n  const provenance = attestations?.provenance;\n  const keyids = [...new Set(signatures.map((signature) => signature.keyid))];\n\n  return (\n    <RegistryInfoDialog onClose={onClose} open={open} title={t('sidebar.provenance.title')}>\n      <Typography sx={{ pt: 2 }} variant=\"subtitle2\">{`${packageName}@${version}`}</Typography>\n      <Typography color=\"text.secondary\" variant=\"body2\">\n        {t('sidebar.provenance.disclaimer')}\n      </Typography>\n      <List dense={true}>\n        {provenance ? (\n          <Detail label={t('sidebar.provenance.provenance')}>\n            {provenanceLabel(provenance.predicateType)}\n          </Detail>\n        ) : null}\n        {keyids.length > 0 ? (\n          <Detail label={t('sidebar.provenance.registry-signature')}>\n            {keyids.map((keyid) => (\n              <div key={keyid}>{keyid}</div>\n            ))}\n          </Detail>\n        ) : null}\n        {attestations?.url ? (\n          <Detail label={t('sidebar.provenance.attestation')}>\n            <ExternalLink href={attestations.url}>\n              {attestations.url.replace(/^https?:\\/\\//, '')}\n            </ExternalLink>\n          </Detail>\n        ) : null}\n        {showDetails && provenance && open ? (\n          <BuildDetails packageName={packageName} version={version} />\n        ) : null}\n      </List>\n    </RegistryInfoDialog>\n  );\n};\n\n/** \"Provenance\" sidebar section; its chip opens a dialog with the provenance and signature details. */\nconst Provenance: FC<{\n  packageMeta: PackageMetaInterface;\n  packageName: string;\n  version?: string;\n  // only servers exposing the provenance endpoint (ui option `capabilities.provenance`)\n  showDetails?: boolean;\n}> = ({ packageMeta, packageName, version, showDetails = false }) => {\n  const { t } = useTranslation();\n  const [open, setOpen] = useState(false);\n  const latest = packageMeta?.latest;\n  const attestations = readAttestations(latest?.dist?.attestations);\n  const signatures = readSignatures(latest?.dist?.signatures);\n  const provenance = attestations?.provenance;\n\n  if (!provenance && signatures.length === 0) {\n    return null;\n  }\n\n  return (\n    <List subheader={<StyledText variant=\"subtitle1\">{t('sidebar.provenance.title')}</StyledText>}>\n      <DistListItem>\n        <DistChips\n          clickable={true}\n          color={provenance ? 'primary' : 'default'}\n          data-testid=\"provenance-badge\"\n          icon={provenance ? <VerifiedUserIcon /> : <VerifiedUserOutlinedIcon />}\n          label={\n            provenance ? (\n              <>\n                <b>{t('sidebar.provenance.provenance')}</b>\n                {': '}\n                {provenanceLabel(provenance.predicateType)}\n              </>\n            ) : (\n              <b>{t('sidebar.provenance.registry-signature')}</b>\n            )\n          }\n          onClick={() => setOpen(true)}\n          variant=\"outlined\"\n        />\n      </DistListItem>\n      <ProvenanceDialog\n        attestations={attestations}\n        onClose={() => setOpen(false)}\n        open={open}\n        packageName={packageName}\n        showDetails={showDetails}\n        signatures={signatures}\n        version={version || latest?.version || ''}\n      />\n    </List>\n  );\n};\n\nexport default Provenance;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,gBAAgB,eAA+B;CAC7D,MAAM,UAAU,cAAc,MAAM,8CAA8C,CAAC,GAAG;CACtF,OAAO,UAAU,QAAQ,YAAY;AACvC;AAEA,IAAM,YAAY,cAAuB,WAAW,WAAW,mCAAmC;AAGlG,SAAgB,aAAa,SAAiB,WAA4B;CACxE,IAAI,SAAS,SAAS,GACpB,OAAO;CAET,IAAI,gDAAgD,KAAK,OAAO,GAC9D,OAAO,QAAQ,SAAS,cAAc,IAAI,iCAAiC;CAE7E,OAAO;AACT;AAGA,IAAM,kBAAkB,UAAkB,WAAW,KAAK,KAAK;AAG/D,SAAgB,UAAU,YAAoB,QAAgB,WAA4B;CACxF,OAAO,GAAG,WAAW,GAAG,SAAS,SAAS,IAAI,aAAa,SAAS,GAAG,mBAAmB,MAAM;AAClG;AAGA,SAAgB,YAAY,YAAoB,QAAgB,cAA8B;CAC5F,MAAM,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;CACrE,OAAO,GAAG,WAAW,QAAQ,mBAAmB,MAAM,EAAE,GAAG;AAC7D;AAKA,SAAS,iBAAiB,KAA0C;CAClE,MAAM,QAAQ;CACd,MAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,MAAM,IAAI,SAAS,IAAI,MAAM,MAAM,KAAA;CACjF,MAAM,gBAAgB,OAAO,YAAY;CACzC,MAAM,aACJ,OAAO,kBAAkB,YAAY,cAAc,SAAS,IAAI,EAAE,cAAc,IAAI,KAAA;CACtF,OAAO,OAAO,aAAa;EAAE;EAAK;CAAW,IAAI,KAAA;AACnD;AAEA,SAAS,eAAe,KAA2B;CACjD,OAAO,MAAM,QAAQ,GAAG,IACpB,IAAI,QAAQ,SAA4B,OAAO,MAAM,UAAU,YAAY,KAAK,UAAU,EAAE,IAC5F,CAAC;AACP;AAGA,IAAM,aAAa,SAAiB,gBAAgB,KAAK,IAAI,KAAKA,YAAAA,MAAM,IAAI;AAE5E,IAAM,gBAAiE,EAAE,MAAM,eAC7E,UAAU,IAAI,IACZ,iBAAA,GAAA,kBAAA,IAAA,CAACC,mBAAAA,SAAD;CAAY;CAAM,KAAI;CAAsB,QAAO;CAAS,WAAU;CACnE;AACG,CAAA,IAEN,iBAAA,GAAA,kBAAA,IAAA,CAAAC,kBAAAA,UAAA,EAAG,SAAW,CAAA;AAGlB,IAAM,UAA4D,EAAE,OAAO,eACzE,iBAAA,GAAA,kBAAA,IAAA,CAACC,uBAAAA,SAAD;CAAU,gBAAgB;CAAM,IAAI,EAAE,IAAI,GAAI;CAC5C,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAACC,2BAAAA,SAAD;EACE,SAAS;EACT,WAAW;EACX,0BAA0B,EAAE,WAAW,MAAM;CAC9C,CAAA;AACO,CAAA;AAGZ,IAAM,gBAA+D,EAAE,aAAa,cAAc;CAChG,MAAM,EAAE,OAAA,GAAMC,cAAAA,eAAAA,CAAe;CAC7B,MAAM,WAAWC,cAAAA,mBAAmBC,sBAAAA,iBAAiB,CAAC,CAAC,IAAI;CAC3D,MAAM,EAAE,MAAM,OAAO,cAAcC,iBAAAA,QACjC,UACAC,eAAAA,SAAS,YACT,aACA,SACA,EAAE,oBAAoB,MAAM,CAC9B;CAEA,IAAI,WACF,OAAO,iBAAA,GAAA,kBAAA,IAAA,CAACC,+BAAAA,SAAD;EAAkB,eAAY;EAAqB,MAAM;EAAI,IAAI,EAAE,IAAI,EAAE;CAAI,CAAA;CAGtF,IAAI,SAAS,CAAC,QAAQ,OAAO,SAAS,UACpC,OAAO;CAGT,MAAM,aAAa,KAAK;CACxB,MAAM,SAAS,KAAK;CACpB,OACE,iBAAA,GAAA,kBAAA,KAAA,CAAAR,kBAAAA,UAAA,EAAA,UAAA;EACG,KAAK,UACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAQ,OAAO,EAAE,6BAA6B;GAC3C,UAAA,aAAa,KAAK,SAAS,KAAK,SAAS;EACpC,CAAA,IACN;EACH,aACC,iBAAA,GAAA,kBAAA,KAAA,CAAC,QAAD;GAAQ,OAAO,EAAE,2BAA2B;GAA5C,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;IAAc,MAAM;IAAa,UAAA,WAAW,QAAQ,gBAAgB,EAAE;GAAgB,CAAA,GACrF,KAAK,YAAY,KAAK,KAAK,UAAU,QAAQ,kBAAkB,EAAE,EAAE,KAAK,EACnE;EACN,CAAA,IAAA;EACH,cAAc,SACb,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAQ,OAAO,EAAE,2BAA2B;GAC1C,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;IAAc,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS;IAC7D,UAAA,OAAO,MAAM,GAAG,EAAE;GACP,CAAA;EACR,CAAA,IACN;EACH,KAAK,eACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAQ,OAAO,EAAE,6BAA6B;GAC3C,UAAA,cAAc,UAAU,eAAe,KAAK,YAAY,IACvD,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;IAAc,MAAM,YAAY,YAAY,QAAQ,KAAK,YAAY;IAClE,UAAA,KAAK;GACM,CAAA,IAEd,KAAK;EAED,CAAA,IACN;EACH,KAAK,cACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAQ,OAAO,EAAE,8BAA8B;GAC7C,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;IAAc,MAAM,KAAK;IACtB,UAAA,KAAK,YAAY,QAAQ,gBAAgB,EAAE;GAChC,CAAA;EACR,CAAA,IACN;EACH,KAAK,qBACJ,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;GAAQ,OAAO,EAAE,qCAAqC;GACpD,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;IACE,MAAM,KAAK;IACX,UAAA,IAAI,KAAK;GAAqC,CAAA;EAC1C,CAAA,IACN;CACJ,EAAA,CAAA;AAEN;AAEA,IAAM,oBAQA,EAAE,MAAM,SAAS,aAAa,SAAS,cAAc,YAAY,kBAAkB;CACvF,MAAM,EAAE,OAAA,GAAMG,cAAAA,eAAAA,CAAe;CAC7B,MAAM,aAAa,cAAc;CACjC,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,WAAW,KAAK,cAAc,UAAU,KAAK,CAAC,CAAC;CAE1E,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACM,2BAAAA,SAAD;EAA6B;EAAe;EAAM,OAAO,EAAE,0BAA0B;EAArF,UAAA;GACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,yBAAAA,SAAD;IAAY,IAAI,EAAE,IAAI,EAAE;IAAG,SAAQ;IAAa,UAAA,GAAG,YAAY,GAAG;GAAsB,CAAA;GACxF,iBAAA,GAAA,kBAAA,IAAA,CAACA,yBAAAA,SAAD;IAAY,OAAM;IAAiB,SAAQ;IACxC,UAAA,EAAE,+BAA+B;GACxB,CAAA;GACZ,iBAAA,GAAA,kBAAA,KAAA,CAACC,mBAAAA,SAAD;IAAM,OAAO;IAAb,UAAA;KACG,aACC,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAQ,OAAO,EAAE,+BAA+B;MAC7C,UAAA,gBAAgB,WAAW,aAAa;KACnC,CAAA,IACN;KACH,OAAO,SAAS,IACf,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAQ,OAAO,EAAE,uCAAuC;MACrD,UAAA,OAAO,KAAK,UACX,iBAAA,GAAA,kBAAA,IAAA,CAAC,OAAD,EAAA,UAAkB,MAAW,GAAnB,KAAmB,CAC9B;KACK,CAAA,IACN;KACH,cAAc,MACb,iBAAA,GAAA,kBAAA,IAAA,CAAC,QAAD;MAAQ,OAAO,EAAE,gCAAgC;MAC/C,UAAA,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;OAAc,MAAM,aAAa;OAC9B,UAAA,aAAa,IAAI,QAAQ,gBAAgB,EAAE;MAChC,CAAA;KACR,CAAA,IACN;KACH,eAAe,cAAc,OAC5B,iBAAA,GAAA,kBAAA,IAAA,CAAC,cAAD;MAA2B;MAAsB;KAAU,CAAA,IACzD;IACA;;EACY;;AAExB;;AAGA,IAAM,cAMA,EAAE,aAAa,aAAa,SAAS,cAAc,YAAY;CACnE,MAAM,EAAE,OAAA,GAAMR,cAAAA,eAAAA,CAAe;CAC7B,MAAM,CAAC,MAAM,YAAA,GAAWS,MAAAA,SAAAA,CAAS,KAAK;CACtC,MAAM,SAAS,aAAa;CAC5B,MAAM,eAAe,iBAAiB,QAAQ,MAAM,YAAY;CAChE,MAAM,aAAa,eAAe,QAAQ,MAAM,UAAU;CAC1D,MAAM,aAAa,cAAc;CAEjC,IAAI,CAAC,cAAc,WAAW,WAAW,GACvC,OAAO;CAGT,OACE,iBAAA,GAAA,kBAAA,KAAA,CAACD,mBAAAA,SAAD;EAAM,WAAW,iBAAA,GAAA,kBAAA,IAAA,CAACE,eAAAA,YAAD;GAAY,SAAQ;GAAa,UAAA,EAAE,0BAA0B;EAAc,CAAA;EAA5F,UAAA,CACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,eAAAA,cAAD,EAAA,UACE,iBAAA,GAAA,kBAAA,IAAA,CAACC,eAAAA,WAAD;GACE,WAAW;GACX,OAAO,aAAa,YAAY;GAChC,eAAY;GACZ,MAAM,aAAa,iBAAA,GAAA,kBAAA,IAAA,CAACC,iCAAAA,SAAD,CAAmB,CAAA,IAAI,iBAAA,GAAA,kBAAA,IAAA,CAACC,yCAAAA,SAAD,CAA2B,CAAA;GACrE,OACE,aACE,iBAAA,GAAA,kBAAA,KAAA,CAAAjB,kBAAAA,UAAA,EAAA,UAAA;IACE,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD,EAAA,UAAI,EAAE,+BAA+B,EAAK,CAAA;IACzC;IACA,gBAAgB,WAAW,aAAa;GACzC,EAAA,CAAA,IAEF,iBAAA,GAAA,kBAAA,IAAA,CAAC,KAAD,EAAA,UAAI,EAAE,uCAAuC,EAAK,CAAA;GAGtD,eAAe,QAAQ,IAAI;GAC3B,SAAQ;EACT,CAAA,EACW,CAAA,GACd,iBAAA,GAAA,kBAAA,IAAA,CAAC,kBAAD;GACgB;GACd,eAAe,QAAQ,KAAK;GACtB;GACO;GACA;GACD;GACZ,SAAS,WAAW,QAAQ,WAAW;EACxC,CAAA,CACG;;AAEV"}

package/build/components/Provenance/Provenance.mjs

@@ -0,0 +1,209 @@
+import { isURL } from "../../utils/url.mjs";
+import { APIRoute } from "../../utils/routes.mjs";
+import { useData } from "../../api/use-data.mjs";
+import { getConfiguration } from "../../configuration.mjs";
+import { stripTrailingSlash } from "../../store/utils.mjs";
+import { DistChips, DistListItem, StyledText } from "../Distribution/styles.mjs";
+import RegistryInfoDialog from "../RegistryInfoDialog/RegistryInfoDialog.mjs";
+import "../RegistryInfoDialog/index.mjs";
+import { useState } from "react";
+import { useTranslation } from "react-i18next";
+import { Fragment as Fragment$1, jsx, jsxs } from "react/jsx-runtime";
+import CircularProgress from "@mui/material/CircularProgress";
+import Link from "@mui/material/Link";
+import List from "@mui/material/List";
+import Typography from "@mui/material/Typography";
+import ListItem from "@mui/material/ListItem";
+import ListItemText from "@mui/material/ListItemText";
+import VerifiedUserIcon from "@mui/icons-material/VerifiedUser";
+import VerifiedUserOutlinedIcon from "@mui/icons-material/VerifiedUserOutlined";
+//#region src/components/Provenance/Provenance.tsx
+function provenanceLabel(predicateType) {
+	const version = predicateType.match(/^https:\/\/slsa\.dev\/provenance\/(v[\d.]+)$/)?.[1];
+	return version ? `SLSA ${version}` : predicateType;
+}
+var isGitLab = (buildType) => buildType?.startsWith("https://github.com/npm/cli/gitlab");
+function builderLabel(builder, buildType) {
+	if (isGitLab(buildType)) return "GitLab CI/CD";
+	if (/^https:\/\/github\.com\/actions\/runner(\/|$)/.test(builder)) return builder.endsWith("/self-hosted") ? "GitHub Actions (self-hosted)" : "GitHub Actions";
+	return builder;
+}
+var isWorkflowFile = (entry) => /\.ya?ml$/.test(entry);
+function commitUrl(repository, commit, buildType) {
+	return `${repository}/${isGitLab(buildType) ? "-/commit" : "commit"}/${encodeURIComponent(commit)}`;
+}
+function workflowUrl(repository, commit, workflowPath) {
+	const path = workflowPath.split("/").map(encodeURIComponent).join("/");
+	return `${repository}/blob/${encodeURIComponent(commit)}/${path}`;
+}
+function readAttestations(raw) {
+	const value = raw;
+	const url = typeof value?.url === "string" && value.url.length > 0 ? value.url : void 0;
+	const predicateType = value?.provenance?.predicateType;
+	const provenance = typeof predicateType === "string" && predicateType.length > 0 ? { predicateType } : void 0;
+	return url || provenance ? {
+		url,
+		provenance
+	} : void 0;
+}
+function readSignatures(raw) {
+	return Array.isArray(raw) ? raw.filter((item) => typeof item?.keyid === "string" && item.keyid !== "") : [];
+}
+var isHttpUrl = (href) => /^https?:\/\//i.test(href) && isURL(href);
+var ExternalLink = ({ href, children }) => isHttpUrl(href) ? /* @__PURE__ */ jsx(Link, {
+	href,
+	rel: "noopener noreferrer",
+	target: "_blank",
+	underline: "hover",
+	children
+}) : /* @__PURE__ */ jsx(Fragment$1, { children });
+var Detail = ({ label, children }) => /* @__PURE__ */ jsx(ListItem, {
+	disableGutters: true,
+	sx: { py: .5 },
+	children: /* @__PURE__ */ jsx(ListItemText, {
+		primary: label,
+		secondary: children,
+		secondaryTypographyProps: { component: "div" }
+	})
+});
+var BuildDetails = ({ packageName, version }) => {
+	const { t } = useTranslation();
+	const basePath = stripTrailingSlash(getConfiguration().base);
+	const { data, error, isLoading } = useData(basePath, APIRoute.PROVENANCE, packageName, version, { shouldRetryOnError: false });
+	if (isLoading) return /* @__PURE__ */ jsx(CircularProgress, {
+		"data-testid": "provenance-loading",
+		size: 24,
+		sx: { my: 2 }
+	});
+	if (error || !data || typeof data !== "object") return null;
+	const repository = data.sourceRepository;
+	const commit = data.sourceCommit;
+	return /* @__PURE__ */ jsxs(Fragment$1, { children: [
+		data.builder ? /* @__PURE__ */ jsx(Detail, {
+			label: t("sidebar.provenance.built-on"),
+			children: builderLabel(data.builder, data.buildType)
+		}) : null,
+		repository ? /* @__PURE__ */ jsxs(Detail, {
+			label: t("sidebar.provenance.source"),
+			children: [/* @__PURE__ */ jsx(ExternalLink, {
+				href: repository,
+				children: repository.replace(/^https?:\/\//, "")
+			}), data.sourceRef ? ` (${data.sourceRef.replace(/^refs\/heads\//, "")})` : ""]
+		}) : null,
+		repository && commit ? /* @__PURE__ */ jsx(Detail, {
+			label: t("sidebar.provenance.commit"),
+			children: /* @__PURE__ */ jsx(ExternalLink, {
+				href: commitUrl(repository, commit, data.buildType),
+				children: commit.slice(0, 12)
+			})
+		}) : null,
+		data.workflowPath ? /* @__PURE__ */ jsx(Detail, {
+			label: t("sidebar.provenance.workflow"),
+			children: repository && commit && isWorkflowFile(data.workflowPath) ? /* @__PURE__ */ jsx(ExternalLink, {
+				href: workflowUrl(repository, commit, data.workflowPath),
+				children: data.workflowPath
+			}) : data.workflowPath
+		}) : null,
+		data.buildRunUrl ? /* @__PURE__ */ jsx(Detail, {
+			label: t("sidebar.provenance.build-run"),
+			children: /* @__PURE__ */ jsx(ExternalLink, {
+				href: data.buildRunUrl,
+				children: data.buildRunUrl.replace(/^https?:\/\//, "")
+			})
+		}) : null,
+		data.transparencyLogUrl ? /* @__PURE__ */ jsx(Detail, {
+			label: t("sidebar.provenance.transparency-log"),
+			children: /* @__PURE__ */ jsx(ExternalLink, {
+				href: data.transparencyLogUrl,
+				children: `#${data.transparencyLogIndex}`
+			})
+		}) : null
+	] });
+};
+var ProvenanceDialog = ({ open, onClose, packageName, version, attestations, signatures, showDetails }) => {
+	const { t } = useTranslation();
+	const provenance = attestations?.provenance;
+	const keyids = [...new Set(signatures.map((signature) => signature.keyid))];
+	return /* @__PURE__ */ jsxs(RegistryInfoDialog, {
+		onClose,
+		open,
+		title: t("sidebar.provenance.title"),
+		children: [
+			/* @__PURE__ */ jsx(Typography, {
+				sx: { pt: 2 },
+				variant: "subtitle2",
+				children: `${packageName}@${version}`
+			}),
+			/* @__PURE__ */ jsx(Typography, {
+				color: "text.secondary",
+				variant: "body2",
+				children: t("sidebar.provenance.disclaimer")
+			}),
+			/* @__PURE__ */ jsxs(List, {
+				dense: true,
+				children: [
+					provenance ? /* @__PURE__ */ jsx(Detail, {
+						label: t("sidebar.provenance.provenance"),
+						children: provenanceLabel(provenance.predicateType)
+					}) : null,
+					keyids.length > 0 ? /* @__PURE__ */ jsx(Detail, {
+						label: t("sidebar.provenance.registry-signature"),
+						children: keyids.map((keyid) => /* @__PURE__ */ jsx("div", { children: keyid }, keyid))
+					}) : null,
+					attestations?.url ? /* @__PURE__ */ jsx(Detail, {
+						label: t("sidebar.provenance.attestation"),
+						children: /* @__PURE__ */ jsx(ExternalLink, {
+							href: attestations.url,
+							children: attestations.url.replace(/^https?:\/\//, "")
+						})
+					}) : null,
+					showDetails && provenance && open ? /* @__PURE__ */ jsx(BuildDetails, {
+						packageName,
+						version
+					}) : null
+				]
+			})
+		]
+	});
+};
+/** "Provenance" sidebar section; its chip opens a dialog with the provenance and signature details. */
+var Provenance = ({ packageMeta, packageName, version, showDetails = false }) => {
+	const { t } = useTranslation();
+	const [open, setOpen] = useState(false);
+	const latest = packageMeta?.latest;
+	const attestations = readAttestations(latest?.dist?.attestations);
+	const signatures = readSignatures(latest?.dist?.signatures);
+	const provenance = attestations?.provenance;
+	if (!provenance && signatures.length === 0) return null;
+	return /* @__PURE__ */ jsxs(List, {
+		subheader: /* @__PURE__ */ jsx(StyledText, {
+			variant: "subtitle1",
+			children: t("sidebar.provenance.title")
+		}),
+		children: [/* @__PURE__ */ jsx(DistListItem, { children: /* @__PURE__ */ jsx(DistChips, {
+			clickable: true,
+			color: provenance ? "primary" : "default",
+			"data-testid": "provenance-badge",
+			icon: provenance ? /* @__PURE__ */ jsx(VerifiedUserIcon, {}) : /* @__PURE__ */ jsx(VerifiedUserOutlinedIcon, {}),
+			label: provenance ? /* @__PURE__ */ jsxs(Fragment$1, { children: [
+				/* @__PURE__ */ jsx("b", { children: t("sidebar.provenance.provenance") }),
+				": ",
+				provenanceLabel(provenance.predicateType)
+			] }) : /* @__PURE__ */ jsx("b", { children: t("sidebar.provenance.registry-signature") }),
+			onClick: () => setOpen(true),
+			variant: "outlined"
+		}) }), /* @__PURE__ */ jsx(ProvenanceDialog, {
+			attestations,
+			onClose: () => setOpen(false),
+			open,
+			packageName,
+			showDetails,
+			signatures,
+			version: version || latest?.version || ""
+		})]
+	});
+};
+//#endregion
+export { builderLabel, commitUrl, Provenance as default, provenanceLabel, workflowUrl };
+
+//# sourceMappingURL=Provenance.mjs.map

package/build/components/Provenance/Provenance.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"Provenance.mjs","names":["_Fragment"],"sources":["../../../src/components/Provenance/Provenance.tsx"],"sourcesContent":["import VerifiedUserIcon from '@mui/icons-material/VerifiedUser';\nimport VerifiedUserOutlinedIcon from '@mui/icons-material/VerifiedUserOutlined';\nimport CircularProgress from '@mui/material/CircularProgress';\nimport Link from '@mui/material/Link';\nimport List from '@mui/material/List';\nimport ListItem from '@mui/material/ListItem';\nimport ListItemText from '@mui/material/ListItemText';\nimport Typography from '@mui/material/Typography';\nimport type { FC } from 'react';\nimport React, { useState } from 'react';\nimport { useTranslation } from 'react-i18next';\n\nimport { useData } from '../../api/use-data';\nimport { getConfiguration } from '../../configuration';\nimport { stripTrailingSlash } from '../../store/utils';\nimport type { PackageMetaInterface, Signature } from '../../types/packageMeta';\nimport type { ProvenanceSummary } from '../../types/provenance';\nimport { APIRoute } from '../../utils/routes';\nimport { isURL } from '../../utils/url';\nimport { DistChips, DistListItem, StyledText } from '../Distribution/styles';\nimport RegistryInfoDialog from '../RegistryInfoDialog';\n\n// `https://slsa.dev/provenance/v1` → `SLSA v1`; other predicate types are shown as they are\nexport function provenanceLabel(predicateType: string): string {\n  const version = predicateType.match(/^https:\\/\\/slsa\\.dev\\/provenance\\/(v[\\d.]+)$/)?.[1];\n  return version ? `SLSA ${version}` : predicateType;\n}\n\nconst isGitLab = (buildType?: string) => buildType?.startsWith('https://github.com/npm/cli/gitlab');\n\n// npm and Yarn generate provenance on GitHub Actions (SLSA v1) and GitLab CI/CD (npm's own v0.2 build type)\nexport function builderLabel(builder: string, buildType?: string): string {\n  if (isGitLab(buildType)) {\n    return 'GitLab CI/CD';\n  }\n  if (/^https:\\/\\/github\\.com\\/actions\\/runner(\\/|$)/.test(builder)) {\n    return builder.endsWith('/self-hosted') ? 'GitHub Actions (self-hosted)' : 'GitHub Actions';\n  }\n  return builder;\n}\n\n// GitLab statements carry the job name here, GitHub ones the workflow file\nconst isWorkflowFile = (entry: string) => /\\.ya?ml$/.test(entry);\n\n// GitLab commit pages live under `/-/commit/`, GitHub (and most forges) under `/commit/`\nexport function commitUrl(repository: string, commit: string, buildType?: string): string {\n  return `${repository}/${isGitLab(buildType) ? '-/commit' : 'commit'}/${encodeURIComponent(commit)}`;\n}\n\n// each segment of the workflow path is encoded on its own so `/` keeps separating them\nexport function workflowUrl(repository: string, commit: string, workflowPath: string): string {\n  const path = workflowPath.split('/').map(encodeURIComponent).join('/');\n  return `${repository}/blob/${encodeURIComponent(commit)}/${path}`;\n}\n\n// `dist.attestations` and `dist.signatures` come straight from package metadata, not from the decoder\ntype ProvenanceMeta = { url?: string; provenance?: { predicateType: string } };\n\nfunction readAttestations(raw: unknown): ProvenanceMeta | undefined {\n  const value = raw as { url?: unknown; provenance?: { predicateType?: unknown } } | undefined;\n  const url = typeof value?.url === 'string' && value.url.length > 0 ? value.url : undefined;\n  const predicateType = value?.provenance?.predicateType;\n  const provenance =\n    typeof predicateType === 'string' && predicateType.length > 0 ? { predicateType } : undefined;\n  return url || provenance ? { url, provenance } : undefined;\n}\n\nfunction readSignatures(raw: unknown): Signature[] {\n  return Array.isArray(raw)\n    ? raw.filter((item): item is Signature => typeof item?.keyid === 'string' && item.keyid !== '')\n    : [];\n}\n\n// every url here comes from the registry metadata or the attestation bundle\nconst isHttpUrl = (href: string) => /^https?:\\/\\//i.test(href) && isURL(href);\n\nconst ExternalLink: FC<{ href: string; children: React.ReactNode }> = ({ href, children }) =>\n  isHttpUrl(href) ? (\n    <Link href={href} rel=\"noopener noreferrer\" target=\"_blank\" underline=\"hover\">\n      {children}\n    </Link>\n  ) : (\n    <>{children}</>\n  );\n\nconst Detail: FC<{ label: string; children: React.ReactNode }> = ({ label, children }) => (\n  <ListItem disableGutters={true} sx={{ py: 0.5 }}>\n    <ListItemText\n      primary={label}\n      secondary={children}\n      secondaryTypographyProps={{ component: 'div' }}\n    />\n  </ListItem>\n);\n\nconst BuildDetails: FC<{ packageName: string; version?: string }> = ({ packageName, version }) => {\n  const { t } = useTranslation();\n  const basePath = stripTrailingSlash(getConfiguration().base);\n  const { data, error, isLoading } = useData<ProvenanceSummary>(\n    basePath,\n    APIRoute.PROVENANCE,\n    packageName,\n    version,\n    { shouldRetryOnError: false }\n  );\n\n  if (isLoading) {\n    return <CircularProgress data-testid=\"provenance-loading\" size={24} sx={{ my: 2 }} />;\n  }\n  // the summary above is enough when the endpoint fails\n  if (error || !data || typeof data !== 'object') {\n    return null;\n  }\n\n  const repository = data.sourceRepository;\n  const commit = data.sourceCommit;\n  return (\n    <>\n      {data.builder ? (\n        <Detail label={t('sidebar.provenance.built-on')}>\n          {builderLabel(data.builder, data.buildType)}\n        </Detail>\n      ) : null}\n      {repository ? (\n        <Detail label={t('sidebar.provenance.source')}>\n          <ExternalLink href={repository}>{repository.replace(/^https?:\\/\\//, '')}</ExternalLink>\n          {data.sourceRef ? ` (${data.sourceRef.replace(/^refs\\/heads\\//, '')})` : ''}\n        </Detail>\n      ) : null}\n      {repository && commit ? (\n        <Detail label={t('sidebar.provenance.commit')}>\n          <ExternalLink href={commitUrl(repository, commit, data.buildType)}>\n            {commit.slice(0, 12)}\n          </ExternalLink>\n        </Detail>\n      ) : null}\n      {data.workflowPath ? (\n        <Detail label={t('sidebar.provenance.workflow')}>\n          {repository && commit && isWorkflowFile(data.workflowPath) ? (\n            <ExternalLink href={workflowUrl(repository, commit, data.workflowPath)}>\n              {data.workflowPath}\n            </ExternalLink>\n          ) : (\n            data.workflowPath\n          )}\n        </Detail>\n      ) : null}\n      {data.buildRunUrl ? (\n        <Detail label={t('sidebar.provenance.build-run')}>\n          <ExternalLink href={data.buildRunUrl}>\n            {data.buildRunUrl.replace(/^https?:\\/\\//, '')}\n          </ExternalLink>\n        </Detail>\n      ) : null}\n      {data.transparencyLogUrl ? (\n        <Detail label={t('sidebar.provenance.transparency-log')}>\n          <ExternalLink\n            href={data.transparencyLogUrl}\n          >{`#${data.transparencyLogIndex}`}</ExternalLink>\n        </Detail>\n      ) : null}\n    </>\n  );\n};\n\nconst ProvenanceDialog: FC<{\n  open: boolean;\n  onClose: () => void;\n  packageName: string;\n  version: string;\n  attestations?: ProvenanceMeta;\n  signatures: Signature[];\n  showDetails: boolean;\n}> = ({ open, onClose, packageName, version, attestations, signatures, showDetails }) => {\n  const { t } = useTranslation();\n  const provenance = attestations?.provenance;\n  const keyids = [...new Set(signatures.map((signature) => signature.keyid))];\n\n  return (\n    <RegistryInfoDialog onClose={onClose} open={open} title={t('sidebar.provenance.title')}>\n      <Typography sx={{ pt: 2 }} variant=\"subtitle2\">{`${packageName}@${version}`}</Typography>\n      <Typography color=\"text.secondary\" variant=\"body2\">\n        {t('sidebar.provenance.disclaimer')}\n      </Typography>\n      <List dense={true}>\n        {provenance ? (\n          <Detail label={t('sidebar.provenance.provenance')}>\n            {provenanceLabel(provenance.predicateType)}\n          </Detail>\n        ) : null}\n        {keyids.length > 0 ? (\n          <Detail label={t('sidebar.provenance.registry-signature')}>\n            {keyids.map((keyid) => (\n              <div key={keyid}>{keyid}</div>\n            ))}\n          </Detail>\n        ) : null}\n        {attestations?.url ? (\n          <Detail label={t('sidebar.provenance.attestation')}>\n            <ExternalLink href={attestations.url}>\n              {attestations.url.replace(/^https?:\\/\\//, '')}\n            </ExternalLink>\n          </Detail>\n        ) : null}\n        {showDetails && provenance && open ? (\n          <BuildDetails packageName={packageName} version={version} />\n        ) : null}\n      </List>\n    </RegistryInfoDialog>\n  );\n};\n\n/** \"Provenance\" sidebar section; its chip opens a dialog with the provenance and signature details. */\nconst Provenance: FC<{\n  packageMeta: PackageMetaInterface;\n  packageName: string;\n  version?: string;\n  // only servers exposing the provenance endpoint (ui option `capabilities.provenance`)\n  showDetails?: boolean;\n}> = ({ packageMeta, packageName, version, showDetails = false }) => {\n  const { t } = useTranslation();\n  const [open, setOpen] = useState(false);\n  const latest = packageMeta?.latest;\n  const attestations = readAttestations(latest?.dist?.attestations);\n  const signatures = readSignatures(latest?.dist?.signatures);\n  const provenance = attestations?.provenance;\n\n  if (!provenance && signatures.length === 0) {\n    return null;\n  }\n\n  return (\n    <List subheader={<StyledText variant=\"subtitle1\">{t('sidebar.provenance.title')}</StyledText>}>\n      <DistListItem>\n        <DistChips\n          clickable={true}\n          color={provenance ? 'primary' : 'default'}\n          data-testid=\"provenance-badge\"\n          icon={provenance ? <VerifiedUserIcon /> : <VerifiedUserOutlinedIcon />}\n          label={\n            provenance ? (\n              <>\n                <b>{t('sidebar.provenance.provenance')}</b>\n                {': '}\n                {provenanceLabel(provenance.predicateType)}\n              </>\n            ) : (\n              <b>{t('sidebar.provenance.registry-signature')}</b>\n            )\n          }\n          onClick={() => setOpen(true)}\n          variant=\"outlined\"\n        />\n      </DistListItem>\n      <ProvenanceDialog\n        attestations={attestations}\n        onClose={() => setOpen(false)}\n        open={open}\n        packageName={packageName}\n        showDetails={showDetails}\n        signatures={signatures}\n        version={version || latest?.version || ''}\n      />\n    </List>\n  );\n};\n\nexport default Provenance;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAuBA,SAAgB,gBAAgB,eAA+B;CAC7D,MAAM,UAAU,cAAc,MAAM,8CAA8C,CAAC,GAAG;CACtF,OAAO,UAAU,QAAQ,YAAY;AACvC;AAEA,IAAM,YAAY,cAAuB,WAAW,WAAW,mCAAmC;AAGlG,SAAgB,aAAa,SAAiB,WAA4B;CACxE,IAAI,SAAS,SAAS,GACpB,OAAO;CAET,IAAI,gDAAgD,KAAK,OAAO,GAC9D,OAAO,QAAQ,SAAS,cAAc,IAAI,iCAAiC;CAE7E,OAAO;AACT;AAGA,IAAM,kBAAkB,UAAkB,WAAW,KAAK,KAAK;AAG/D,SAAgB,UAAU,YAAoB,QAAgB,WAA4B;CACxF,OAAO,GAAG,WAAW,GAAG,SAAS,SAAS,IAAI,aAAa,SAAS,GAAG,mBAAmB,MAAM;AAClG;AAGA,SAAgB,YAAY,YAAoB,QAAgB,cAA8B;CAC5F,MAAM,OAAO,aAAa,MAAM,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC,KAAK,GAAG;CACrE,OAAO,GAAG,WAAW,QAAQ,mBAAmB,MAAM,EAAE,GAAG;AAC7D;AAKA,SAAS,iBAAiB,KAA0C;CAClE,MAAM,QAAQ;CACd,MAAM,MAAM,OAAO,OAAO,QAAQ,YAAY,MAAM,IAAI,SAAS,IAAI,MAAM,MAAM,KAAA;CACjF,MAAM,gBAAgB,OAAO,YAAY;CACzC,MAAM,aACJ,OAAO,kBAAkB,YAAY,cAAc,SAAS,IAAI,EAAE,cAAc,IAAI,KAAA;CACtF,OAAO,OAAO,aAAa;EAAE;EAAK;CAAW,IAAI,KAAA;AACnD;AAEA,SAAS,eAAe,KAA2B;CACjD,OAAO,MAAM,QAAQ,GAAG,IACpB,IAAI,QAAQ,SAA4B,OAAO,MAAM,UAAU,YAAY,KAAK,UAAU,EAAE,IAC5F,CAAC;AACP;AAGA,IAAM,aAAa,SAAiB,gBAAgB,KAAK,IAAI,KAAK,MAAM,IAAI;AAE5E,IAAM,gBAAiE,EAAE,MAAM,eAC7E,UAAU,IAAI,IACZ,oBAAC,MAAD;CAAY;CAAM,KAAI;CAAsB,QAAO;CAAS,WAAU;CACnE;AACG,CAAA,IAEN,oBAAAA,YAAA,EAAG,SAAW,CAAA;AAGlB,IAAM,UAA4D,EAAE,OAAO,eACzE,oBAAC,UAAD;CAAU,gBAAgB;CAAM,IAAI,EAAE,IAAI,GAAI;CAC5C,UAAA,oBAAC,cAAD;EACE,SAAS;EACT,WAAW;EACX,0BAA0B,EAAE,WAAW,MAAM;CAC9C,CAAA;AACO,CAAA;AAGZ,IAAM,gBAA+D,EAAE,aAAa,cAAc;CAChG,MAAM,EAAE,MAAM,eAAe;CAC7B,MAAM,WAAW,mBAAmB,iBAAiB,CAAC,CAAC,IAAI;CAC3D,MAAM,EAAE,MAAM,OAAO,cAAc,QACjC,UACA,SAAS,YACT,aACA,SACA,EAAE,oBAAoB,MAAM,CAC9B;CAEA,IAAI,WACF,OAAO,oBAAC,kBAAD;EAAkB,eAAY;EAAqB,MAAM;EAAI,IAAI,EAAE,IAAI,EAAE;CAAI,CAAA;CAGtF,IAAI,SAAS,CAAC,QAAQ,OAAO,SAAS,UACpC,OAAO;CAGT,MAAM,aAAa,KAAK;CACxB,MAAM,SAAS,KAAK;CACpB,OACE,qBAAAA,YAAA,EAAA,UAAA;EACG,KAAK,UACJ,oBAAC,QAAD;GAAQ,OAAO,EAAE,6BAA6B;GAC3C,UAAA,aAAa,KAAK,SAAS,KAAK,SAAS;EACpC,CAAA,IACN;EACH,aACC,qBAAC,QAAD;GAAQ,OAAO,EAAE,2BAA2B;GAA5C,UAAA,CACE,oBAAC,cAAD;IAAc,MAAM;IAAa,UAAA,WAAW,QAAQ,gBAAgB,EAAE;GAAgB,CAAA,GACrF,KAAK,YAAY,KAAK,KAAK,UAAU,QAAQ,kBAAkB,EAAE,EAAE,KAAK,EACnE;EACN,CAAA,IAAA;EACH,cAAc,SACb,oBAAC,QAAD;GAAQ,OAAO,EAAE,2BAA2B;GAC1C,UAAA,oBAAC,cAAD;IAAc,MAAM,UAAU,YAAY,QAAQ,KAAK,SAAS;IAC7D,UAAA,OAAO,MAAM,GAAG,EAAE;GACP,CAAA;EACR,CAAA,IACN;EACH,KAAK,eACJ,oBAAC,QAAD;GAAQ,OAAO,EAAE,6BAA6B;GAC3C,UAAA,cAAc,UAAU,eAAe,KAAK,YAAY,IACvD,oBAAC,cAAD;IAAc,MAAM,YAAY,YAAY,QAAQ,KAAK,YAAY;IAClE,UAAA,KAAK;GACM,CAAA,IAEd,KAAK;EAED,CAAA,IACN;EACH,KAAK,cACJ,oBAAC,QAAD;GAAQ,OAAO,EAAE,8BAA8B;GAC7C,UAAA,oBAAC,cAAD;IAAc,MAAM,KAAK;IACtB,UAAA,KAAK,YAAY,QAAQ,gBAAgB,EAAE;GAChC,CAAA;EACR,CAAA,IACN;EACH,KAAK,qBACJ,oBAAC,QAAD;GAAQ,OAAO,EAAE,qCAAqC;GACpD,UAAA,oBAAC,cAAD;IACE,MAAM,KAAK;IACX,UAAA,IAAI,KAAK;GAAqC,CAAA;EAC1C,CAAA,IACN;CACJ,EAAA,CAAA;AAEN;AAEA,IAAM,oBAQA,EAAE,MAAM,SAAS,aAAa,SAAS,cAAc,YAAY,kBAAkB;CACvF,MAAM,EAAE,MAAM,eAAe;CAC7B,MAAM,aAAa,cAAc;CACjC,MAAM,SAAS,CAAC,GAAG,IAAI,IAAI,WAAW,KAAK,cAAc,UAAU,KAAK,CAAC,CAAC;CAE1E,OACE,qBAAC,oBAAD;EAA6B;EAAe;EAAM,OAAO,EAAE,0BAA0B;EAArF,UAAA;GACE,oBAAC,YAAD;IAAY,IAAI,EAAE,IAAI,EAAE;IAAG,SAAQ;IAAa,UAAA,GAAG,YAAY,GAAG;GAAsB,CAAA;GACxF,oBAAC,YAAD;IAAY,OAAM;IAAiB,SAAQ;IACxC,UAAA,EAAE,+BAA+B;GACxB,CAAA;GACZ,qBAAC,MAAD;IAAM,OAAO;IAAb,UAAA;KACG,aACC,oBAAC,QAAD;MAAQ,OAAO,EAAE,+BAA+B;MAC7C,UAAA,gBAAgB,WAAW,aAAa;KACnC,CAAA,IACN;KACH,OAAO,SAAS,IACf,oBAAC,QAAD;MAAQ,OAAO,EAAE,uCAAuC;MACrD,UAAA,OAAO,KAAK,UACX,oBAAC,OAAD,EAAA,UAAkB,MAAW,GAAnB,KAAmB,CAC9B;KACK,CAAA,IACN;KACH,cAAc,MACb,oBAAC,QAAD;MAAQ,OAAO,EAAE,gCAAgC;MAC/C,UAAA,oBAAC,cAAD;OAAc,MAAM,aAAa;OAC9B,UAAA,aAAa,IAAI,QAAQ,gBAAgB,EAAE;MAChC,CAAA;KACR,CAAA,IACN;KACH,eAAe,cAAc,OAC5B,oBAAC,cAAD;MAA2B;MAAsB;KAAU,CAAA,IACzD;IACA;;EACY;;AAExB;;AAGA,IAAM,cAMA,EAAE,aAAa,aAAa,SAAS,cAAc,YAAY;CACnE,MAAM,EAAE,MAAM,eAAe;CAC7B,MAAM,CAAC,MAAM,WAAW,SAAS,KAAK;CACtC,MAAM,SAAS,aAAa;CAC5B,MAAM,eAAe,iBAAiB,QAAQ,MAAM,YAAY;CAChE,MAAM,aAAa,eAAe,QAAQ,MAAM,UAAU;CAC1D,MAAM,aAAa,cAAc;CAEjC,IAAI,CAAC,cAAc,WAAW,WAAW,GACvC,OAAO;CAGT,OACE,qBAAC,MAAD;EAAM,WAAW,oBAAC,YAAD;GAAY,SAAQ;GAAa,UAAA,EAAE,0BAA0B;EAAc,CAAA;EAA5F,UAAA,CACE,oBAAC,cAAD,EAAA,UACE,oBAAC,WAAD;GACE,WAAW;GACX,OAAO,aAAa,YAAY;GAChC,eAAY;GACZ,MAAM,aAAa,oBAAC,kBAAD,CAAmB,CAAA,IAAI,oBAAC,0BAAD,CAA2B,CAAA;GACrE,OACE,aACE,qBAAAA,YAAA,EAAA,UAAA;IACE,oBAAC,KAAD,EAAA,UAAI,EAAE,+BAA+B,EAAK,CAAA;IACzC;IACA,gBAAgB,WAAW,aAAa;GACzC,EAAA,CAAA,IAEF,oBAAC,KAAD,EAAA,UAAI,EAAE,uCAAuC,EAAK,CAAA;GAGtD,eAAe,QAAQ,IAAI;GAC3B,SAAQ;EACT,CAAA,EACW,CAAA,GACd,oBAAC,kBAAD;GACgB;GACd,eAAe,QAAQ,KAAK;GACtB;GACO;GACA;GACD;GACZ,SAAS,WAAW,QAAQ,WAAW;EACxC,CAAA,CACG;;AAEV"}

package/build/components/Provenance/index.d.ts

@@ -0,0 +1 @@
+export { default } from './Provenance';

package/build/components/Provenance/index.js

@@ -0,0 +1,2 @@
+const require_Provenance = require("./Provenance.js");
+exports.default = require_Provenance.default;

package/build/components/Provenance/index.mjs

@@ -0,0 +1 @@
+export { default } from "./Provenance.mjs";

package/build/i18n/crowdin/ui.js

@@ -128,6 +128,19 @@ var sidebar = {
 		"size": "Size",
 		"file-count": "File Count"
 	},
+	"provenance": {
+		"title": "Provenance",
+		"provenance": "Provenance",
+		"registry-signature": "Registry signature",
+		"built-on": "Built on",
+		"source": "Source",
+		"commit": "Commit",
+		"workflow": "Workflow",
+		"build-run": "Build run",
+		"transparency-log": "Transparency log",
+		"attestation": "Attestation",
+		"disclaimer": "Registry-provided metadata; cryptographic verification has not been performed."
+	},
 	"keywords": { "title": "Keywords" },
 	"maintainers": { "title": "Maintainers" },
 	"contributors": { "title": "Contributors" },