@vibesdotdev/infra-deploy 0.0.2 → 1.0.0-rc.5

package/dist/cli/npm/publish/consumer-surfaces.js

@@ -0,0 +1,199 @@
+import { resolveFileSystemAdapter } from "@vibesdotdev/filesystem";
+import { getRuntimePath } from "@vibesdotdev/paths";
+import { runRuntimeCommand } from "../../shared/runtime-execution.js";
+/**
+ * Vite config for the surface proof consumer; release packages are bundled for SSR.
+ */
+export function releaseConsumerViteConfig(internalPackageNames) {
+    return `import { sveltekit } from '@sveltejs/kit/vite';\nexport default { plugins: [sveltekit()], ssr: { noExternal: ${JSON.stringify([...internalPackageNames].sort())} } };\n`;
+}
+/**
+ * The subpaths a profile has DECLARED as framework surfaces — the ones a bare
+ * runtime cannot load. Read off the profile, never inferred from the specifier's
+ * text: a publisher may put a Svelte surface at `/ui`, or ship something at
+ * `/svelte-utils` that is plain JS, and the release proof has no business
+ * guessing either way from our own naming habits.
+ *
+ * One definition, because the bare-runtime plan and the installed surface proof
+ * must partition the specifier set between them — if they disagree, a specifier
+ * is either proven twice or not at all.
+ */
+export function releaseConsumerSurfaceSpecifiers(profile) {
+    return new Set([
+        ...(profile.surfaceImportSpecifiers ?? []),
+        ...(profile.ssrRenders ?? []).map((probe) => probe.specifier),
+    ]);
+}
+/**
+ * Binds every proof import to the runtime declared by its profile owner.
+ *
+ * Svelte surface specifiers are deliberately excluded here: their module graph
+ * reaches `.svelte` files, which no bare runtime can load (node throws
+ * ERR_UNKNOWN_FILE_EXTENSION, bun needs a registered plugin). They are proven
+ * by the stronger installed SvelteKit build + SSR render instead, which is the
+ * only place a component can actually be evaluated. Feeding them to the bare
+ * runtime import made the whole release proof fail on any package publishing a
+ * Svelte surface.
+ *
+ * The same specifier is intentionally exercised once per declared runtime.
+ */
+export function planReleaseConsumerRootImports(options) {
+    const byRuntime = new Map();
+    for (const profile of options.profiles) {
+        const owner = options.workspace.get(profile.root);
+        if (!owner) {
+            throw new Error(`Release consumer proof profile ${profile.id} has unknown root ${profile.root}`);
+        }
+        const declaredRuntime = owner.manifest.vibes?.publishLoadRuntime;
+        if (declaredRuntime !== undefined &&
+            declaredRuntime !== "node" &&
+            declaredRuntime !== "bun") {
+            throw new Error(`Release consumer proof profile ${profile.id} root ${profile.root} declares unsupported publishLoadRuntime ${String(declaredRuntime)}`);
+        }
+        const runtime = declaredRuntime ?? "node";
+        const group = byRuntime.get(runtime) ?? {
+            roots: new Set(),
+            imports: new Set(),
+        };
+        group.roots.add(profile.root);
+        const surfaces = releaseConsumerSurfaceSpecifiers(profile);
+        for (const specifier of profile.importSpecifiers) {
+            if (surfaces.has(specifier))
+                continue;
+            group.imports.add(specifier);
+        }
+        byRuntime.set(runtime, group);
+    }
+    return ["node", "bun"].flatMap((runtime) => {
+        const group = byRuntime.get(runtime);
+        if (!group || group.imports.size === 0)
+            return [];
+        return [
+            {
+                runtime,
+                profileRoots: [...group.roots].sort(),
+                importSpecifiers: [...group.imports].sort(),
+            },
+        ];
+    });
+}
+/**
+ * Import every planned specifier from the installed consumer under its runtime.
+ */
+export async function runReleaseConsumerRootImports(options) {
+    for (const plan of options.plans) {
+        const result = await runRuntimeCommand({
+            runtime: options.runtime,
+            execution: options.execution,
+            command: plan.runtime,
+            args: plan.runtime === "node"
+                ? [
+                    "--input-type=module",
+                    "--eval",
+                    `await Promise.all(${JSON.stringify(plan.importSpecifiers)}.map((s) => import(s)))`,
+                ]
+                : [
+                    "--eval",
+                    `await Promise.all(${JSON.stringify(plan.importSpecifiers)}.map((s) => import(s)))`,
+                ],
+            cwd: options.consumerDir,
+        });
+        if (result.code !== 0) {
+            throw new Error(`Installed release ${plan.runtime} import failed for ${plan.profileRoots.join(", ")}: ${result.stderr}`);
+        }
+    }
+}
+/**
+ * The installed-surface harness a profile asks for. `sveltekit` is the default
+ * and the only one implemented; it is a DECLARED choice rather than an assumed
+ * one so a package built on this framework that publishes, say, a React surface
+ * gets a clear refusal instead of our SvelteKit scaffold written into its proof.
+ */
+export function releaseConsumerSurfaceProofKind(profile) {
+    const declared = profile.surfaceProof ?? "sveltekit";
+    if (declared !== "sveltekit") {
+        throw new Error(`Release consumer proof profile ${profile.id} declares surfaceProof ${String(declared)}, ` +
+            `but this harness implements 'sveltekit' only. Implement that harness or drop the ` +
+            `surface declaration; do not let a SvelteKit scaffold stand in for another stack's proof.`);
+    }
+    return declared;
+}
+/** True when any profile declares surfaces proven by the SvelteKit harness. */
+export function releaseConsumerNeedsSvelteProof(profiles) {
+    return profiles.some((profile) => releaseConsumerSurfaceSpecifiers(profile).size > 0 &&
+        releaseConsumerSurfaceProofKind(profile) === "sveltekit");
+}
+/**
+ * Build a SvelteKit consumer that imports every declared surface and renders
+ * every SSR probe, when any profile needs the Svelte proof. Returns the
+ * profiles' import specifiers.
+ */
+export async function runReleaseConsumerSurfaceProof(options) {
+    const { plan, consumerDir } = options;
+    const imports = [
+        ...new Set(plan.profiles.flatMap((profile) => profile.importSpecifiers)),
+    ];
+    const ssrRenders = plan.profiles.flatMap((profile) => profile.ssrRenders ?? []);
+    const renderedSpecifiers = new Set(ssrRenders.map((probe) => probe.specifier));
+    const declaredSurfaces = new Set(plan.profiles.flatMap((profile) => [
+        ...releaseConsumerSurfaceSpecifiers(profile),
+    ]));
+    const surfaceImports = imports
+        .filter((specifier) => declaredSurfaces.has(specifier) && !renderedSpecifiers.has(specifier))
+        .map((specifier) => `import ${JSON.stringify(specifier)};`);
+    if (!releaseConsumerNeedsSvelteProof(plan.profiles))
+        return imports;
+    const renderImports = ssrRenders.map((probe, index) => `import { ${probe.exportName} as ReleaseSsrProbe${index} } from ${JSON.stringify(probe.specifier)};`);
+    const renderProps = ssrRenders.map((probe, index) => `const releaseSsrProps${index} = ${JSON.stringify(probe.props)};`);
+    const renderMarkup = ssrRenders
+        .map((_probe, index) => `<ReleaseSsrProbe${index} {...releaseSsrProps${index}} />`)
+        .join("\n");
+    const releasePage = `<script>\n${surfaceImports.join("\n")}\n${renderImports.join("\n")}\n${renderProps.join("\n")}\n</script>\n${renderMarkup || "<p>release proof</p>"}\n`;
+    const paths = await getRuntimePath(options.runtime);
+    const files = await resolveFileSystemAdapter(options.runtime, { binding: false });
+    await files.writeFile(paths.join(consumerDir, "vite.config.js"), releaseConsumerViteConfig([...options.internalNames]));
+    await files.mkdir(paths.join(consumerDir, "src", "routes"), { recursive: true });
+    await Promise.all([
+        files.writeFile(paths.join(consumerDir, "svelte.config.js"), "export default {};\n"),
+        files.writeFile(paths.join(consumerDir, "src", "app.html"), '<head>%sveltekit.head%</head><body><div style="display: contents">%sveltekit.body%</div></body>\n'),
+        files.writeFile(paths.join(consumerDir, "src", "routes", "+page.svelte"), releasePage),
+    ]);
+    const synced = await runRuntimeCommand({
+        runtime: options.runtime,
+        execution: options.execution,
+        command: "bun",
+        args: [
+            paths.join(consumerDir, "node_modules", "@sveltejs", "kit", "svelte-kit.js"),
+            "sync",
+        ],
+        cwd: consumerDir,
+    });
+    if (synced.code !== 0)
+        throw new Error(`Installed release SvelteKit sync failed: ${synced.stderr}`);
+    const vite = await runRuntimeCommand({
+        runtime: options.runtime,
+        execution: options.execution,
+        command: "bun",
+        args: ["--bun", paths.join(consumerDir, "node_modules/vite/bin/vite.js"), "build"],
+        cwd: consumerDir,
+    });
+    if (vite.code !== 0)
+        throw new Error(`Installed release surface import failed: ${vite.stderr}`);
+    if (ssrRenders.length > 0) {
+        const rendered = await runRuntimeCommand({
+            runtime: options.runtime,
+            execution: options.execution,
+            command: "node",
+            args: [
+                "--input-type=module",
+                "--eval",
+                "const [{ Server }, { manifest }] = await Promise.all([import('./.svelte-kit/output/server/index.js'), import('./.svelte-kit/output/server/manifest-full.js')]); const server = new Server(manifest); await server.init({ env: {} }); const response = await server.respond(new Request('https://release.invalid/'), { getClientAddress: () => 'proof' }); const body = await response.text(); if (!response.ok || !body) throw new Error(`SvelteKit SSR request failed ${response.status}`);",
+            ],
+            cwd: consumerDir,
+        });
+        if (rendered.code !== 0)
+            throw new Error(`Installed release SSR render failed: ${rendered.stderr}`);
+    }
+    return imports;
+}
+//# sourceMappingURL=consumer-surfaces.js.map

package/dist/cli/npm/publish/consumer-surfaces.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumer-surfaces.js","sourceRoot":"","sources":["../../../../src/cli/npm/publish/consumer-surfaces.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAMpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEtE;;GAEG;AACH,MAAM,UAAU,yBAAyB,CACvC,oBAAuC;IAEvC,OAAO,gHAAgH,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,oBAAoB,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC;AACnL,CAAC;AAWD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gCAAgC,CAC9C,OAAmD;IAEnD,OAAO,IAAI,GAAG,CAAC;QACb,GAAG,CAAC,OAAO,CAAC,uBAAuB,IAAI,EAAE,CAAC;QAC1C,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;KAC9D,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,8BAA8B,CAAC,OAG9C;IACC,MAAM,SAAS,GAAG,IAAI,GAAG,EAGtB,CAAC;IACJ,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,kCAAkC,OAAO,CAAC,EAAE,qBAAqB,OAAO,CAAC,IAAI,EAAE,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;QACjE,IACE,eAAe,KAAK,SAAS;YAC7B,eAAe,KAAK,MAAM;YAC1B,eAAe,KAAK,KAAK,EACzB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,kCAAkC,OAAO,CAAC,EAAE,SAAS,OAAO,CAAC,IAAI,4CAA4C,MAAM,CAAC,eAAe,CAAC,EAAE,CACvI,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,eAAe,IAAI,MAAM,CAAC;QAC1C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI;YACtC,KAAK,EAAE,IAAI,GAAG,EAAU;YACxB,OAAO,EAAE,IAAI,GAAG,EAAU;SAC3B,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAC3D,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YACjD,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACtC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IACD,OAAQ,CAAC,MAAM,EAAE,KAAK,CAAW,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClD,OAAO;YACL;gBACE,OAAO;gBACP,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;gBACrC,gBAAgB,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;aAC5C;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,OAMnD;IACC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EACF,IAAI,CAAC,OAAO,KAAK,MAAM;gBACrB,CAAC,CAAC;oBACE,qBAAqB;oBACrB,QAAQ;oBACR,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,yBAAyB;iBACpF;gBACH,CAAC,CAAC;oBACE,QAAQ;oBACR,qBAAqB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,yBAAyB;iBACpF;YACP,GAAG,EAAE,OAAO,CAAC,WAAW;SACzB,CAAC,CAAC;QACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,OAAO,sBAAsB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,CACxG,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAmD;IAEnD,MAAM,QAAQ,GAAG,OAAO,CAAC,YAAY,IAAI,WAAW,CAAC;IACrD,IAAI,QAAQ,KAAK,WAAW,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,kCAAkC,OAAO,CAAC,EAAE,0BAA0B,MAAM,CAAC,QAAQ,CAAC,IAAI;YACxF,mFAAmF;YACnF,0FAA0F,CAC7F,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,+BAA+B,CAC7C,QAA4C;IAE5C,OAAO,QAAQ,CAAC,IAAI,CAClB,CAAC,OAAO,EAAE,EAAE,CACV,gCAAgC,CAAC,OAAO,CAAC,CAAC,IAAI,GAAG,CAAC;QAClD,+BAA+B,CAAC,OAAO,CAAC,KAAK,WAAW,CAC3D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,OAOpD;IACC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;IACtC,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;KACzE,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CACtC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CACtC,CAAC;IACF,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAChC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAC3C,CAAC;IACF,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAC9B,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACjC,GAAG,gCAAgC,CAAC,OAAO,CAAC;KAC7C,CAAC,CACH,CAAC;IACF,MAAM,cAAc,GAAG,OAAO;SAC3B,MAAM,CACL,CAAC,SAAS,EAAE,EAAE,CACZ,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CACxE;SACA,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC9D,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,OAAO,CAAC;IACpE,MAAM,aAAa,GAAG,UAAU,CAAC,GAAG,CAClC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,YAAY,KAAK,CAAC,UAAU,sBAAsB,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CACvG,CAAC;IACF,MAAM,WAAW,GAAG,UAAU,CAAC,GAAG,CAChC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACf,wBAAwB,KAAK,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CACpE,CAAC;IACF,MAAM,YAAY,GAAG,UAAU;SAC5B,GAAG,CACF,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAChB,mBAAmB,KAAK,uBAAuB,KAAK,MAAM,CAC7D;SACA,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,WAAW,GAAG,aAAa,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,YAAY,IAAI,sBAAsB,IAAI,CAAC;IAC7K,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAClF,MAAM,KAAK,CAAC,SAAS,CACnB,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,EACzC,yBAAyB,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CACtD,CAAC;IACF,MAAM,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjF,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;QACpF,KAAK,CAAC,SAAS,CACb,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,UAAU,CAAC,EAC1C,mGAAmG,CACpG;QACD,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,EAAE,WAAW,CAAC;KACvF,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;QACrC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE;YACJ,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,KAAK,EAAE,eAAe,CAAC;YAC5E,MAAM;SACP;QACD,GAAG,EAAE,WAAW;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,4CAA4C,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC;QACnC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,+BAA+B,CAAC,EAAE,OAAO,CAAC;QAClF,GAAG,EAAE,WAAW;KACjB,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7E,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;YACvC,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,OAAO,EAAE,MAAM;YACf,IAAI,EAAE;gBACJ,qBAAqB;gBACrB,QAAQ;gBACR,8dAA8d;aAC/d;YACD,GAAG,EAAE,WAAW;SACjB,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,wCAAwC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cli/npm/publish/external-requirements.d.ts

@@ -0,0 +1,171 @@
+/**
+ * External requirements of a release: Registry selectors that must be
+ * satisfiable, workspace packages consumed as sealed Registry inputs, and the
+ * source registries the release proof resolves them from.
+ */
+import type { ChildEnvRuntime } from "../../shared/runtime-execution.ts";
+import { type RegistryReleaseExternalRequirement, type RegistryReleaseSetPlan } from "@vibesdotdev/registry";
+import type { RuntimeExecution } from "@vibesdotdev/kernel/execution";
+import type { JsonValue } from "@vibesdotdev/kernel/schemas/json";
+import { runNpm, type RunNpmResult } from "./npm-exec.ts";
+import { type ReleaseConsumerSourceRegistry } from "./proof-registry.ts";
+import { type RegistryReleaseReadCredential } from "./registry-credentials.ts";
+import { type PublisherManifest } from "./publisher-manifest.ts";
+import type { RegistryReleaseBuildPackage, RegistryReleasePublishTarget } from "./types.ts";
+/**
+ * Throw unless an installed/fetched package is the requirement's package and satisfies its selector.
+ */
+export declare function assertExternalPackageSelector(options: {
+    from: string;
+    name: string;
+    selector: string;
+    resolvedName: string | undefined;
+    resolvedVersion: string;
+}): void;
+/** npm's selector semantics, including `*` accepting any valid version. */
+export declare function npmRegistryVersionSatisfiesSelector(version: string, selector: string): boolean;
+type RegistryExternalReference = {
+    packageName: string;
+    selector: string;
+    dependencySelector: string;
+};
+/**
+ * Parse a requirement's selector (range or `npm:` alias) into the package it fetches.
+ */
+export declare function registryExternalReference(options: {
+    from: string;
+    name: string;
+    selector: string;
+}): RegistryExternalReference;
+/**
+ * Throw unless the requirement has a canonical name and a supported selector.
+ */
+export declare function assertRegistryExternalSelector(options: {
+    from: string;
+    name: string;
+    selector: string;
+}): void;
+/** `npm pack` one external requirement into `downloadDir` from `registry`. */
+export declare function runRegistryExternalPack(options: {
+    from: string;
+    name: string;
+    selector: string;
+    downloadDir: string;
+    registry: string;
+    proofRoot: string;
+    env: Record<string, string>;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+    redactValues?: readonly string[];
+}, runner?: typeof runNpm): Promise<{
+    args: string[];
+    result: RunNpmResult;
+}>;
+export interface ExternalRequirementMiss {
+    from: string;
+    name: string;
+    selector: string;
+    effectiveSelector: string;
+    reason: "no-matching-version" | "unreadable";
+}
+export interface RegistryExternalRequirementResolution {
+    requirement: RegistryReleaseExternalRequirement;
+    effectiveSelector: string;
+    version: string;
+}
+export interface SealedWorkspaceRegistryInput extends RegistryExternalRequirementResolution {
+    registry: string;
+    integrity: string;
+    repository: string;
+    gitHead: string;
+    tarball: string;
+}
+/**
+ * Every planned external requirement must be satisfiable by the registry
+ * BEFORE anything packs or publishes: a release that records unsatisfiable
+ * externals ships uninstallable-in-isolation packages. The planner is pure,
+ * so this is the publish flow's own gate (previously externals were only
+ * exercised inside the full offline consumer proof).
+ */
+export declare function assertExternalRequirementsSatisfiable(options: {
+    requirements: readonly RegistryReleaseExternalRequirement[];
+    rootOverrides: Readonly<Record<string, JsonValue>>;
+    listVersions(requirement: RegistryReleaseExternalRequirement, effectiveSelector: string): Promise<readonly string[] | null>;
+}): Promise<readonly RegistryExternalRequirementResolution[]>;
+/**
+ * Workspace-source requirements are release inputs, not implicit outputs. Seal
+ * the exact compatible Registry artifact before any build or remote mutation so
+ * the later consumer proof cannot resolve a different range winner.
+ *
+ * Each distinct Registry coordinate is sealed once, however many requirements
+ * resolve to it, and coordinates are sealed concurrently, each through its own
+ * availability temp root. A package name fixes its Registry, so distinct
+ * coordinates are distinct name@version pairs and never fetch the same
+ * tarball. Sealed inputs keep requirement order, and a failure is the one the
+ * first failing requirement hits.
+ */
+export declare function sealWorkspaceRegistryInputs(options: {
+    resolutions: readonly RegistryExternalRequirementResolution[];
+    buildPackages: readonly RegistryReleaseBuildPackage[];
+    expectedGitHeads: ReadonlyMap<string, string>;
+    sourceRegistry: ReleaseConsumerSourceRegistry;
+    artifactDir: string;
+    workspaceRoot: string;
+    scope?: string;
+    readCredential?: RegistryReleaseReadCredential;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<readonly SealedWorkspaceRegistryInput[]>;
+/**
+ * The root `overrides` selector for `name` when set, else the declared selector.
+ */
+export declare function effectiveExternalSelector(overrides: Readonly<NonNullable<PublisherManifest["overrides"]>>, name: string, declaredSelector: string): string;
+export interface RegistryExternalLookup {
+    packageName: string;
+    registry: string;
+}
+/**
+ * The package an external requirement fetches and the source registry it comes from.
+ */
+export declare function resolveRegistryExternalLookup(options: {
+    requirement: {
+        from: string;
+        name: string;
+        selector: string;
+    };
+    effectiveSelector: string;
+    sourceRegistry: ReleaseConsumerSourceRegistry;
+}): RegistryExternalLookup;
+/**
+ * Prove every external requirement of `releasePlan` has a published version
+ * satisfying its (root-overridden) selector, reading each source registry with
+ * the release read token from an owned temporary npm environment.
+ */
+export declare function resolveReleaseExternalRequirements(options: {
+    releasePlan: RegistryReleaseSetPlan;
+    /** Every release target; their registries are the external source registries. */
+    sourceTargets: readonly RegistryReleasePublishTarget[];
+    workspaceRoot: string;
+    scope: string;
+    readToken?: string;
+    execution: RuntimeExecution;
+    /** The runtime child environments are composed from. */
+    runtime: ChildEnvRuntime;
+}): Promise<readonly RegistryExternalRequirementResolution[]>;
+/**
+ * The version each workspace package's `workspace:` selectors are rewritten to: its source version,
+ * else the sealed Registry input a dependent was proven against (an internal dependency outside the
+ * release), else the version this release assigns it. A dependency outside the release keeping its
+ * source version shipped `^<stale source version>`, which `latest` could satisfy with older content.
+ */
+export declare function workspaceSelectorVersions(options: {
+    sourceVersions: ReadonlyMap<string, string>;
+    sealedWorkspaceInputs: readonly Pick<SealedWorkspaceRegistryInput, "requirement" | "version">[];
+    assignments: ReadonlyMap<string, {
+        version: string;
+    }>;
+}): Map<string, string>;
+export {};
+//# sourceMappingURL=external-requirements.d.ts.map

package/dist/cli/npm/publish/external-requirements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-requirements.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/external-requirements.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAIzE,OAAO,EAEL,KAAK,kCAAkC,EACvC,KAAK,sBAAsB,EAC5B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kCAAkC,CAAC;AAGlE,OAAO,EAEL,MAAM,EACN,KAAK,YAAY,EAGlB,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,6BAA6B,EACnC,MAAM,qBAAqB,CAAC;AAM7B,OAAO,EAEL,KAAK,6BAA6B,EAEnC,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AAEpB;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,eAAe,EAAE,MAAM,CAAC;CACzB,GAAG,IAAI,CAaP;AAED,2EAA2E;AAC3E,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GACf,OAAO,CAKT;AAED,KAAK,yBAAyB,GAAG;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,yBAAyB,CAsC5B;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAAC,OAAO,EAAE;IACtD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAEP;AAED,8EAA8E;AAC9E,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE;IACP,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;IACzB,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,EACD,MAAM,GAAE,OAAO,MAAe,GAC7B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE,CAAC,CAuBnD;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,qBAAqB,GAAG,YAAY,CAAC;CAC9C;AAED,MAAM,WAAW,qCAAqC;IACpD,WAAW,EAAE,kCAAkC,CAAC;IAChD,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,4BAA6B,SAAQ,qCAAqC;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,qCAAqC,CAAC,OAAO,EAAE;IACnE,YAAY,EAAE,SAAS,kCAAkC,EAAE,CAAC;IAC5D,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,YAAY,CACV,WAAW,EAAE,kCAAkC,EAC/C,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;CACtC,GAAG,OAAO,CAAC,SAAS,qCAAqC,EAAE,CAAC,CA8D5D;AAOD;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAAC,OAAO,EAAE;IACzD,WAAW,EAAE,SAAS,qCAAqC,EAAE,CAAC;IAC9D,aAAa,EAAE,SAAS,2BAA2B,EAAE,CAAC;IACtD,gBAAgB,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,cAAc,EAAE,6BAA6B,CAAC;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,6BAA6B,CAAC;IAC/C,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAAC,CAsEnD;AAyED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,QAAQ,CAAC,WAAW,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC,CAAC,EAChE,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,MAAM,GACvB,MAAM,CAKR;AAED,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,wBAAgB,6BAA6B,CAAC,OAAO,EAAE;IACrD,WAAW,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,6BAA6B,CAAC;CAC/C,GAAG,sBAAsB,CAYzB;AAED;;;;GAIG;AACH,wBAAsB,kCAAkC,CAAC,OAAO,EAAE;IAChE,WAAW,EAAE,sBAAsB,CAAC;IACpC,iFAAiF;IACjF,aAAa,EAAE,SAAS,4BAA4B,EAAE,CAAC;IACvD,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,gBAAgB,CAAC;IAC5B,wDAAwD;IACxD,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,SAAS,qCAAqC,EAAE,CAAC,CA4E5D;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE;IACjD,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,qBAAqB,EAAE,SAAS,IAAI,CAAC,4BAA4B,EAAE,aAAa,GAAG,SAAS,CAAC,EAAE,CAAC;IAChG,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAKtB"}