@vibesdotdev/infra-deploy 1.0.0-rc.4 → 1.0.0-rc.6

package/dist/cli/npm/mirror-registry-artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mirror-registry-artifacts.d.ts","sourceRoot":"","sources":["../../../src/cli/npm/mirror-registry-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAU,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAIhF,2CAA2C;AAC3C,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACzE,8DAA8D;GAC5D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACxE,kEAAkE;GAChE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAClD,mFAAmF;GACjF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,GAC9F;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAA;CAAE,CAAC;AAqDnF,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACtD,OAAO,EAAE,UAAU,CAAC;IACpB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CACzB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAU3B"}
+{"version":3,"file":"mirror-registry-artifacts.d.ts","sourceRoot":"","sources":["../../../src/cli/npm/mirror-registry-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,eAAe,EAAU,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AACpG,OAAO,KAAK,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAE1G,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAG1E,8FAA8F;AAC9F,MAAM,MAAM,aAAa;AACxB,iEAAiE;AAC/D;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACtF,iFAAiF;GAC/E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACrF,gFAAgF;GAC9E;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACpF,kEAAkE;GAChE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAClD,mFAAmF;GACjF;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACjG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,OAAO,EAAE,sBAAsB,CAAA;CAAE;AAC9I,0GAA0G;GACxG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,CAAC,SAAS,CAAC,CAAA;CAAE,CAAC;AAQzJ,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACtD,MAAM,EAAE,6BAA6B,CAAC;IACtC,MAAM,EAAE,6BAA6B,CAAC;IACtC,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,kFAAkF;IAClF,YAAY,CAAC,EAAE,2BAA2B,CAAC;IAC3C,iCAAiC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4CAA4C;IAC5C,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;CAC7C,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAmB3B"}

package/dist/cli/npm/mirror-registry-artifacts.js

@@ -1,114 +1,99 @@
 /**
- * Public npm carries the exact Registry bytes at the Registry's version. For each
+ * A mirror registry carries the exact bytes of its source registry at the source's
+ * versions and tags. Both are `infra/package-registry` implementations. For each
  * package, in the dependency order the caller passes (leaves first), the mirror reads
- * the source Registry's packument anonymously (only publicly served packages are
- * eligible), takes the version on the release tag, fetches that tarball, requires its
- * bytes to match `dist.integrity`, PUTs the same bytes to the target and reads the
- * target's `dist.integrity` back. Nothing is re-packed or re-versioned.
+ * the source's release tags anonymously (only what the source serves publicly is
+ * eligible): the one tag asked for, or every tag the source serves. Each tagged
+ * version the target lacks is fetched at its recorded integrity and written as the
+ * same bytes (accepted is published; the next run reads it back as present); a
+ * version the target already holds has its tag moved when it differs.
+ * Nothing is re-packed or re-versioned.
  *
  * A refusal or failure is reported for that package and the mirror continues.
  */
-import { settle, valueFreeFailure } from '@vibesdotdev/kernel';
+import { CapabilityError, settle, valueFreeFailure } from '@vibesdotdev/kernel';
 import { z } from 'zod/v4';
-import { bytesToBase64, putAttestedPackument } from "./put-attested-packument.js";
-const VersionSchema = z.object({
-    dist: z.object({ tarball: z.string().url(), integrity: z.string().startsWith('sha512-') })
+import { sha1Hex } from "./npm-protocol-package-registry.js";
+const RefusalSchema = z.object({
+    message: z.string(),
+    reason: z.literal('registry-put-failed'),
+    details: z.object({ status: z.number(), retryAfter: z.string().optional(), contentType: z.string().optional(), notice: z.string().optional() })
 });
-const PackumentSchema = z.object({
-    'dist-tags': z.record(z.string(), z.string()).default({}),
-    versions: z.record(z.string(), z.unknown()).default({})
-});
-function packumentUrl(registry, name) {
-    return `${registry}/${encodeURIComponent(name)}`;
-}
-async function digest(algorithm, bytes) {
-    return new Uint8Array(await crypto.subtle.digest(algorithm, new Uint8Array(bytes)));
-}
-/** The npm `dist.integrity` of `bytes`. */
-async function sha512Integrity(bytes) {
-    return `sha512-${bytesToBase64(await digest('SHA-512', bytes))}`;
-}
-/** The npm `dist.shasum` of `bytes`. */
-async function sha1Hex(bytes) {
-    return [...(await digest('SHA-1', bytes))].map((byte) => byte.toString(16).padStart(2, '0')).join('');
+export async function mirrorRegistryArtifacts(options) {
+    const settled = new Map();
+    let next = 0;
+    const lane = async () => {
+        for (let index = next++; index < options.packages.length; index = next++) {
+            const name = options.packages[index];
+            const outcomes = [];
+            const report = (outcome) => {
+                outcomes.push(outcome);
+                options.onOutcome?.(outcome);
+            };
+            const mirrored = await settle(() => mirrorOne({ ...options, name, report }));
+            if (!mirrored.ok)
+                report(failedOutcome(name, undefined, mirrored.cause));
+            settled.set(name, outcomes);
+        }
+    };
+    await Promise.all(Array.from({ length: Math.max(1, Math.min(options.concurrency ?? 1, options.packages.length)) }, lane));
+    // Outcomes keep the caller's dependency order, whichever lane finished first.
+    return options.packages.flatMap((name) => settled.get(name) ?? []);
 }
-/** A packument read: `null` when the registry answers 404 (absent, or not served to this caller). */
-async function readPackument(fetchImpl, url, headers = {}) {
-    const response = await fetchImpl(url, { headers: { accept: 'application/json', ...headers } });
-    if (response.status === 404) {
-        await response.body?.cancel();
-        return null;
-    }
-    if (!response.ok) {
-        await response.body?.cancel();
-        throw new Error(`packument read ${url} failed (${response.status})`);
+function failedOutcome(name, tag, cause) {
+    const outcome = { name, state: 'failed', failure: valueFreeFailure(cause) };
+    if (tag !== undefined)
+        outcome.tag = tag;
+    if (cause instanceof CapabilityError) {
+        outcome.message = cause.message;
+        if (cause.details !== undefined)
+            outcome.details = cause.details;
     }
-    return PackumentSchema.parse(await response.json());
+    return outcome;
 }
-/** The target's recorded integrity for `version`, or `undefined` when it holds no such version. */
-async function targetIntegrity(fetchImpl, registry, name, version, token) {
-    const packument = await readPackument(fetchImpl, packumentUrl(registry, name), { authorization: `Bearer ${token}` });
-    const entry = packument?.versions[version];
-    return entry === undefined ? undefined : VersionSchema.parse(entry).dist.integrity;
-}
-export async function mirrorRegistryArtifacts(options) {
-    const fetchImpl = options.fetchImpl ?? fetch;
-    const source = options.source.replace(/\/$/, '');
-    const target = options.target.replace(/\/$/, '');
-    const outcomes = [];
-    for (const name of options.packages) {
-        const mirrored = await settle(() => mirrorOne({ ...options, fetchImpl, source, target, name }));
-        outcomes.push(mirrored.ok ? mirrored.value : { name, state: 'failed', failure: valueFreeFailure(mirrored.cause) });
+async function mirrorOne(options) {
+    const { name, source, report } = options;
+    // Anonymous on purpose: eligibility is what the source serves publicly, never a manifest field.
+    const read = await source.readReleases(name, { anonymous: true });
+    if (read.state === 'absent')
+        return report({ name, state: 'restricted' });
+    if (options.tag !== undefined && read.tags[options.tag] === undefined)
+        return report({ name, state: 'untagged', tag: options.tag });
+    const tags = options.tag === undefined ? Object.keys(read.tags).sort() : [options.tag];
+    for (const tag of tags) {
+        const carried = await settle(() => mirrorTag({ ...options, tag, release: read.tags[tag] }));
+        report(carried.ok ? carried.value : failedOutcome(name, tag, carried.cause));
     }
-    return outcomes;
 }
-async function mirrorOne(options) {
-    const { name, fetchImpl } = options;
-    // Anonymous on purpose: eligibility is what the Registry serves publicly, never a manifest field.
-    const packument = await readPackument(fetchImpl, packumentUrl(options.source, name));
-    if (packument === null)
-        return { name, state: 'restricted' };
-    const version = packument['dist-tags'][options.tag];
-    if (version === undefined)
-        return { name, state: 'untagged', tag: options.tag };
-    const { dist } = VersionSchema.parse(packument.versions[version]);
-    const existing = await targetIntegrity(fetchImpl, options.target, name, version, options.token);
+async function mirrorTag(options) {
+    const { name, tag, source, target } = options;
+    const { version, integrity } = options.release;
+    const existing = await target.versionIntegrity(name, version);
     if (existing !== undefined) {
-        return existing === dist.integrity
-            ? { name, state: 'present', version, integrity: existing }
-            : { name, state: 'conflict', version, source: dist.integrity, target: existing };
-    }
-    const download = await fetchImpl(dist.tarball);
-    if (!download.ok) {
-        await download.body?.cancel();
-        throw new Error(`tarball read for ${name}@${version} failed (${download.status})`);
-    }
-    const bytes = new Uint8Array(await download.arrayBuffer());
-    if ((await sha512Integrity(bytes)) !== dist.integrity) {
-        throw new Error(`tarball for ${name}@${version} does not match the Registry's dist.integrity`);
+        if (existing !== integrity)
+            return { name, tag, state: 'conflict', version, source: integrity, target: existing };
+        // A packument can lag the write that set this tag, so only a tag that names another version
+        // is moved; an absent tag on a version the target holds is not evidence the tag is missing.
+        const current = (await target.distTags(name))[tag];
+        if (current === undefined || current === version)
+            return { name, tag, state: 'present', version, integrity };
+        const moved = await settle(() => target.setTag({ name, tag, version, secondFactor: options.secondFactor }));
+        if (!moved.ok)
+            return refusedOrThrow(name, tag, version, moved.cause);
+        return { name, tag, state: 'tagged', version, integrity };
     }
+    const bytes = await source.tarball(name, version, integrity);
     const shasum = await sha1Hex(bytes);
-    const put = await settle(() => putAttestedPackument({
-        runtime: options.runtime,
-        tarball: { bytes },
-        registry: options.target,
-        token: options.token,
-        tag: options.tag,
-        access: 'public',
-        dist: { integrity: dist.integrity, shasum },
-        fetchImpl
-    }));
-    if (!put.ok) {
-        // The PUT owner reports a registry refusal with its status and redacted `{ error }` text in the message.
-        const refusal = z.object({ message: z.string(), details: z.object({ status: z.number() }) }).safeParse(put.cause);
-        if (refusal.success)
-            return { name, state: 'refused', version, status: refusal.data.details.status, error: refusal.data.message };
-        throw put.cause;
-    }
-    const recorded = await targetIntegrity(fetchImpl, options.target, name, version, options.token);
-    if (recorded !== dist.integrity) {
-        throw new Error(`${name}@${version} was accepted, but the target records ${recorded ?? 'no'} integrity`);
-    }
-    return { name, state: 'mirrored', version, integrity: recorded };
+    const written = await settle(() => target.publish({ bytes, tag, access: 'public', dist: { integrity, shasum }, secondFactor: options.secondFactor }));
+    if (!written.ok)
+        return refusedOrThrow(name, tag, version, written.cause);
+    return { name, tag, state: 'mirrored', version, integrity: written.value.integrity };
+}
+/** A registry refusal (status and redacted `{ error }` text) as an outcome; any other failure stays a failure. */
+function refusedOrThrow(name, tag, version, cause) {
+    const refusal = RefusalSchema.safeParse(cause);
+    if (!refusal.success)
+        throw cause;
+    return { name, tag, state: 'refused', version, status: refusal.data.details.status, error: refusal.data.message, refusal: refusal.data.details };
 }
 //# sourceMappingURL=mirror-registry-artifacts.js.map

package/dist/cli/npm/mirror-registry-artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"mirror-registry-artifacts.js","sourceRoot":"","sources":["../../../src/cli/npm/mirror-registry-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAmB,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAelF,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;CAC1F,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,QAAgB,EAAE,IAAY;IACnD,OAAO,GAAG,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,SAA8B,EAAE,KAAiB;IACtE,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,2CAA2C;AAC3C,KAAK,UAAU,eAAe,CAAC,KAAiB;IAC/C,OAAO,UAAU,aAAa,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,wCAAwC;AACxC,KAAK,UAAU,OAAO,CAAC,KAAiB;IACvC,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,qGAAqG;AACrG,KAAK,UAAU,aAAa,CAC3B,SAAuB,EACvB,GAAW,EACX,UAAkC,EAAE;IAEpC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,YAAY,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,eAAe,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,mGAAmG;AACnG,KAAK,UAAU,eAAe,CAAC,SAAuB,EAAE,QAAgB,EAAE,IAAY,EAAE,OAAe,EAAE,KAAa;IACrH,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC;IACrH,MAAM,KAAK,GAAG,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;AACpF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAU7C;IACA,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAChG,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAQxB;IACA,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACpC,kGAAkG;IAClG,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACrF,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;IAC7D,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAChF,MAAM,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,QAAQ,KAAK,IAAI,CAAC,SAAS;YACjC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE;YAC1D,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,oBAAoB,IAAI,IAAI,OAAO,YAAY,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,eAAe,IAAI,IAAI,OAAO,+CAA+C,CAAC,CAAC;IAChG,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;QACnD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO,EAAE,EAAE,KAAK,EAAE;QAClB,QAAQ,EAAE,OAAO,CAAC,MAAM;QACxB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE;QAC3C,SAAS;KACT,CAAC,CAAC,CAAC;IACJ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACb,yGAAyG;QACzG,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClH,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAClI,MAAM,GAAG,CAAC,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,QAAQ,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,IAAI,OAAO,yCAAyC,QAAQ,IAAI,IAAI,YAAY,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AAClE,CAAC"}
+{"version":3,"file":"mirror-registry-artifacts.js","sourceRoot":"","sources":["../../../src/cli/npm/mirror-registry-artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,gBAAgB,EAAsB,MAAM,qBAAqB,CAAC;AAEpG,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,OAAO,EAAE,OAAO,EAAE,MAAM,oCAAoC,CAAC;AAmB7D,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;CAC/I,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAY7C;IACA,MAAM,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IACnD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACvB,KAAK,IAAI,KAAK,GAAG,IAAI,EAAE,EAAE,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,CAAC;YAC1E,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAE,CAAC;YACtC,MAAM,QAAQ,GAAoB,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,CAAC,OAAsB,EAAE,EAAE;gBACzC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;YAC9B,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7E,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YACzE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC7B,CAAC;IACF,CAAC,CAAC;IACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1H,8EAA8E;IAC9E,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,GAAuB,EAAE,KAAoB;IACjF,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;IAC3F,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC;IACzC,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAChC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClE,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAOxB;IACA,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACzC,gGAAgG;IAChG,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IACpI,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACvF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9E,CAAC;AACF,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAOxB;IACA,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC9C,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAC/C,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAClH,4FAA4F;QAC5F,4FAA4F;QAC5F,MAAM,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QAC7G,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;QAC5G,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACtE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAC3D,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IACtJ,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,cAAc,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC1E,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;AACtF,CAAC;AAED,kHAAkH;AAClH,SAAS,cAAc,CAAC,IAAY,EAAE,GAAW,EAAE,OAAe,EAAE,KAAoB;IACvF,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,KAAK,CAAC;IAClC,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;AAClJ,CAAC"}

package/dist/cli/npm/npm-protocol-package-registry.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The npm registry protocol as an `infra/package-registry` implementation: the
+ * Vibes Registry and public npm both answer it. Reads go through the packument
+ * (`GET /<name>`) and the version document, writes through the attested publish
+ * PUT; a write returns when the registry accepts it.
+ *
+ * The credential comes from the runtime Secrets owner under the descriptor's
+ * `publish.credential.secret` and is never printed. The second factor follows
+ * `publish.secondFactor`; a write that the descriptor says needs one refuses
+ * typed when the caller hands none.
+ */
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { PackageRegistryDescriptor, PackageRegistryImplementation } from '@vibesdotdev/infra-core';
+/** The adapter id an `infra/package-registry` descriptor names to select this implementation. */
+export declare const NPM_PROTOCOL_ADAPTER = "npm-protocol";
+/** The npm `dist.integrity` of `bytes`. */
+export declare function sha512Integrity(bytes: Uint8Array): Promise<string>;
+/** The npm `dist.shasum` of `bytes`. */
+export declare function sha1Hex(bytes: Uint8Array): Promise<string>;
+export type NpmProtocolRegistryOptions = {
+    descriptor: PackageRegistryDescriptor;
+    runtime: VibesRuntime;
+    /** The Secrets environment the credential is read from; the runtime's selected one when absent. */
+    environment?: string;
+    fetchImpl?: typeof fetch;
+    /** The `npm-session` id npm's client sends on every request of one command. */
+    session?: string;
+    /** Reads the publish credential; the runtime Secrets owner under `publish.credential.secret` by default. */
+    credential?: () => Promise<string | undefined>;
+};
+export declare function createNpmProtocolPackageRegistry(options: NpmProtocolRegistryOptions): PackageRegistryImplementation;
+//# sourceMappingURL=npm-protocol-package-registry.d.ts.map

package/dist/cli/npm/npm-protocol-package-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-protocol-package-registry.d.ts","sourceRoot":"","sources":["../../../src/cli/npm/npm-protocol-package-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAA2B,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEjF,OAAO,KAAK,EACX,yBAAyB,EACzB,6BAA6B,EAK7B,MAAM,yBAAyB,CAAC;AAQjC,iGAAiG;AACjG,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AAenD,2CAA2C;AAC3C,wBAAsB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAExE;AAED,wCAAwC;AACxC,wBAAsB,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAEhE;AASD,MAAM,MAAM,0BAA0B,GAAG;IACxC,UAAU,EAAE,yBAAyB,CAAC;IACtC,OAAO,EAAE,YAAY,CAAC;IACtB,mGAAmG;IACnG,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4GAA4G;IAC5G,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C,CAAC;AAEF,wBAAgB,gCAAgC,CAAC,OAAO,EAAE,0BAA0B,GAAG,6BAA6B,CA+MnH"}

package/dist/cli/npm/npm-protocol-package-registry.js

@@ -0,0 +1,237 @@
+/**
+ * The npm registry protocol as an `infra/package-registry` implementation: the
+ * Vibes Registry and public npm both answer it. Reads go through the packument
+ * (`GET /<name>`) and the version document, writes through the attested publish
+ * PUT; a write returns when the registry accepts it.
+ *
+ * The credential comes from the runtime Secrets owner under the descriptor's
+ * `publish.credential.secret` and is never printed. The second factor follows
+ * `publish.secondFactor`; a write that the descriptor says needs one refuses
+ * typed when the caller hands none.
+ */
+import { CapabilityError, settle } from '@vibesdotdev/kernel';
+import { serviceOrigin } from '@vibesdotdev/infra-core/service';
+import { z } from 'zod/v4';
+import { bytesToBase64, putAttestedPackument, registryErrorText, registryRefusalDetails, writeWithSecondFactor } from "./put-attested-packument.js";
+import { normalizeRegistryUrl, resolveTokenFromSecrets } from "./publish/registry-credentials.js";
+/** The packument media types npm's client sends (npm-registry-fetch `corgiDoc`, then full JSON). */
+const NPM_PACKUMENT_ACCEPT = 'application/vnd.npm.install-v1+json; q=1.0, application/json; q=0.8, */*';
+/** The adapter id an `infra/package-registry` descriptor names to select this implementation. */
+export const NPM_PROTOCOL_ADAPTER = 'npm-protocol';
+const VersionSchema = z.object({
+    dist: z.object({ tarball: z.string().url(), integrity: z.string().startsWith('sha512-') })
+});
+const PackumentSchema = z.object({
+    'dist-tags': z.record(z.string(), z.string()).default({}),
+    versions: z.record(z.string(), z.unknown()).default({})
+});
+async function digest(algorithm, bytes) {
+    return new Uint8Array(await crypto.subtle.digest(algorithm, new Uint8Array(bytes)));
+}
+/** The npm `dist.integrity` of `bytes`. */
+export async function sha512Integrity(bytes) {
+    return `sha512-${bytesToBase64(await digest('SHA-512', bytes))}`;
+}
+/** The npm `dist.shasum` of `bytes`. */
+export async function sha1Hex(bytes) {
+    return [...(await digest('SHA-1', bytes))].map((byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/** A packument version's `dist`; a version without a tarball and sha512 integrity refuses typed. */
+function versionDist(entry, where) {
+    const version = VersionSchema.safeParse(entry);
+    if (version.success)
+        return version.data.dist;
+    throw new CapabilityError(`${where} has no tarball with a sha512 integrity`, 'UNAVAILABLE', { reason: 'registry-version-invalid' });
+}
+export function createNpmProtocolPackageRegistry(options) {
+    const { descriptor, runtime } = options;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const session = options.session ?? crypto.randomUUID().replaceAll('-', '').slice(0, 16);
+    let origin;
+    let token;
+    const readCredential = async () => options.credential === undefined
+        ? resolveTokenFromSecrets(runtime, descriptor.publish.credential.secret, { environment: options.environment })
+        : { value: await options.credential(), environment: options.environment ?? 'supplied' };
+    // What a registry serves its installers is the anonymous view when it needs no credential to read
+    // (an authenticated read of public npm can omit published versions).
+    const readsAnonymously = !descriptor.authRequired || descriptor.publish === undefined;
+    const resolveOrigin = () => (origin ??= descriptor.url !== undefined
+        ? Promise.resolve(normalizeRegistryUrl(descriptor.url))
+        : serviceOrigin(runtime, descriptor.service).then(normalizeRegistryUrl));
+    /** The credential when the descriptor names one; `undefined` when it names none. */
+    const resolveToken = () => (token ??= descriptor.publish === undefined
+        ? Promise.resolve(undefined)
+        : readCredential().then((credential) => {
+            if (credential.value !== undefined)
+                return credential.value;
+            throw new CapabilityError(`No ${descriptor.publish.credential.secret} in the ${credential.environment} secrets for package registry ${descriptor.id}. Store it with \`vibes secrets set ${descriptor.publish.credential.secret}\`.`, 'PERMISSION_DENIED', { reason: 'package-registry-credential-missing', details: { registry: descriptor.id, secret: descriptor.publish.credential.secret, environment: credential.environment } });
+        }));
+    /** A packument read: `null` when the registry answers 404 (absent, or not served to this reader). */
+    async function readPackument(name, anonymous) {
+        const url = `${await resolveOrigin()}/${encodeURIComponent(name)}`;
+        const credential = anonymous ? undefined : await resolveToken();
+        // npm's own client asks for the install document first. Public npm serves it fresh after a
+        // publish while its full JSON document can still answer a cached 404.
+        const headers = new Headers({ accept: NPM_PACKUMENT_ACCEPT });
+        if (credential !== undefined)
+            headers.set('authorization', `Bearer ${credential}`);
+        const secrets = credential === undefined ? [] : [credential];
+        const response = await fetchImpl(url, { headers });
+        if (response.status === 404) {
+            await response.body?.cancel();
+            return null;
+        }
+        if (!response.ok) {
+            const details = registryRefusalDetails(response, secrets);
+            const said = await registryErrorText(response, secrets);
+            throw new CapabilityError(`packument read ${url} failed (${response.status})${said === undefined ? '' : `: ${said}`}`, 'UNAVAILABLE', {
+                reason: 'registry-packument-read-failed',
+                retryable: response.status === 429 || response.status >= 500,
+                details
+            });
+        }
+        const body = await settle(() => response.json());
+        const packument = body.ok ? PackumentSchema.safeParse(body.value) : undefined;
+        if (packument?.success)
+            return packument.data;
+        throw new CapabilityError(`packument read ${url} answered ${response.status} with a body that is not a packument`, 'UNAVAILABLE', {
+            reason: 'registry-packument-invalid',
+            details: registryRefusalDetails(response, secrets)
+        });
+    }
+    /**
+     * The version document (`GET /<name>/<version>`) first: public npm serves it as soon as
+     * a publish lands, while either packument document can lag. A
+     * registry without that route (404) is read through its packument.
+     */
+    async function versionIntegrity(name, version) {
+        const anonymous = readsAnonymously;
+        const credential = anonymous ? undefined : await resolveToken();
+        const url = `${await resolveOrigin()}/${encodeURIComponent(name)}/${encodeURIComponent(version)}`;
+        const headers = new Headers({ accept: 'application/json' });
+        if (credential !== undefined)
+            headers.set('authorization', `Bearer ${credential}`);
+        const response = await fetchImpl(url, { headers });
+        if (response.ok) {
+            const body = await settle(() => response.json());
+            if (body.ok)
+                return versionDist(body.value, `${descriptor.id} ${name}@${version}`).integrity;
+        }
+        else {
+            await response.body?.cancel();
+        }
+        const packument = await readPackument(name, anonymous);
+        const entry = packument?.versions[version];
+        return entry === undefined ? undefined : versionDist(entry, `${descriptor.id} ${name}@${version}`).integrity;
+    }
+    /** A write's second factor checked against what the descriptor asks for. */
+    function requireSecondFactor(factor) {
+        const policy = descriptor.publish;
+        if (policy === undefined) {
+            throw new CapabilityError(`Package registry ${descriptor.id} declares no publish credential.`, 'PERMISSION_DENIED', {
+                reason: 'package-registry-publish-undeclared',
+                details: { registry: descriptor.id }
+            });
+        }
+        if (policy.secondFactor !== 'none' && factor === undefined) {
+            throw new CapabilityError(`Package registry ${descriptor.id} asks for a ${policy.secondFactor} second factor on writes.`, 'PERMISSION_DENIED', {
+                reason: 'package-registry-second-factor-required',
+                details: { registry: descriptor.id, secondFactor: policy.secondFactor }
+            });
+        }
+        return {
+            otp: factor?.kind === 'otp' ? factor.code : undefined,
+            webAuth: factor?.kind === 'web' ? { announce: factor.announce, session, retryOnTimeout: factor.retryOnTimeout } : undefined
+        };
+    }
+    const implementation = {
+        config: descriptor,
+        forEnvironment: (environment) => createNpmProtocolPackageRegistry({ ...options, environment, session }),
+        origin: resolveOrigin,
+        async readRelease(name, tag, read = {}) {
+            const packument = await readPackument(name, read.anonymous === true);
+            if (packument === null)
+                return { state: 'absent' };
+            const version = packument['dist-tags'][tag];
+            if (version === undefined)
+                return { state: 'untagged' };
+            const { integrity } = versionDist(packument.versions[version], `${descriptor.id} ${name}@${version}`);
+            return { state: 'released', release: { version, integrity } };
+        },
+        async readReleases(name, read = {}) {
+            const packument = await readPackument(name, read.anonymous === true);
+            if (packument === null)
+                return { state: 'absent' };
+            const tags = {};
+            for (const [tag, version] of Object.entries(packument['dist-tags'])) {
+                tags[tag] = { version, integrity: versionDist(packument.versions[version], `${descriptor.id} ${name}@${version}`).integrity };
+            }
+            return { state: 'released', tags };
+        },
+        async distTags(name) {
+            return (await readPackument(name, readsAnonymously))?.['dist-tags'] ?? {};
+        },
+        async setTag(input) {
+            const factor = requireSecondFactor(input.secondFactor);
+            const token = (await resolveToken());
+            const response = await writeWithSecondFactor({
+                runtime,
+                url: `${await resolveOrigin()}/-/package/${encodeURIComponent(input.name)}/dist-tags/${encodeURIComponent(input.tag)}`,
+                body: JSON.stringify(input.version),
+                token,
+                ...factor,
+                fetchImpl
+            });
+            if (!response.ok) {
+                const details = registryRefusalDetails(response, [token]);
+                const said = await registryErrorText(response, [token]);
+                throw new CapabilityError(`Dist-tag ${input.tag} → ${input.name}@${input.version} on ${descriptor.id} failed (${response.status})${said === undefined ? '' : `: ${said}`}`, 'UNAVAILABLE', { reason: 'registry-put-failed', retryable: response.status === 429 || response.status >= 500, details });
+            }
+            await response.body?.cancel();
+        },
+        versionIntegrity,
+        async tarball(name, version, integrity) {
+            const packument = await readPackument(name, true);
+            const entry = packument?.versions[version];
+            if (entry === undefined) {
+                throw new CapabilityError(`${descriptor.id} does not serve ${name}@${version}`, 'NOT_FOUND', { reason: 'registry-version-absent' });
+            }
+            const { tarball } = versionDist(entry, `${descriptor.id} ${name}@${version}`);
+            const download = await fetchImpl(tarball);
+            if (!download.ok) {
+                await download.body?.cancel();
+                throw new CapabilityError(`tarball read for ${name}@${version} failed (${download.status})`, 'UNAVAILABLE', {
+                    reason: 'registry-tarball-read-failed',
+                    retryable: download.status === 429 || download.status >= 500,
+                    details: { status: download.status }
+                });
+            }
+            const bytes = new Uint8Array(await download.arrayBuffer());
+            if ((await sha512Integrity(bytes)) !== integrity) {
+                throw new CapabilityError(`tarball for ${name}@${version} does not match its recorded integrity`, 'INVALID_INPUT', {
+                    reason: 'registry-tarball-integrity-mismatch'
+                });
+            }
+            return bytes;
+        },
+        async publish(input) {
+            const factor = requireSecondFactor(input.secondFactor);
+            const put = await putAttestedPackument({
+                runtime,
+                tarball: { bytes: input.bytes },
+                registry: await resolveOrigin(),
+                token: (await resolveToken()),
+                tag: input.tag,
+                access: input.access,
+                dist: input.dist,
+                ...factor,
+                fetchImpl
+            });
+            // Accepted is published: a registry can take minutes to serve a fresh write, and the
+            // next read reports it present.
+            return { name: put.name, version: put.version, integrity: input.dist.integrity };
+        }
+    };
+    return implementation;
+}
+//# sourceMappingURL=npm-protocol-package-registry.js.map

package/dist/cli/npm/npm-protocol-package-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-protocol-package-registry.js","sourceRoot":"","sources":["../../../src/cli/npm/npm-protocol-package-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,EAAqB,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAShE,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAC3B,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpJ,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAElG,oGAAoG;AACpG,MAAM,oBAAoB,GAAG,0EAA0E,CAAC;AAExG,iGAAiG;AACjG,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAEnD,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;CAC1F,CAAC,CAAC;AACH,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC;AAGH,KAAK,UAAU,MAAM,CAAC,SAA8B,EAAE,KAAiB;IACtE,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAiB;IACtD,OAAO,UAAU,aAAa,CAAC,MAAM,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,wCAAwC;AACxC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAiB;IAC9C,OAAO,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACvG,CAAC;AAED,oGAAoG;AACpG,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IACjD,MAAM,OAAO,GAAG,aAAa,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;IAC9C,MAAM,IAAI,eAAe,CAAC,GAAG,KAAK,yCAAyC,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAC;AACrI,CAAC;AAcD,MAAM,UAAU,gCAAgC,CAAC,OAAmC;IACnF,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACxC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACxF,IAAI,MAAmC,CAAC;IACxC,IAAI,KAA8C,CAAC;IAEnD,MAAM,cAAc,GAAG,KAAK,IAAsD,EAAE,CACnF,OAAO,CAAC,UAAU,KAAK,SAAS;QAC/B,CAAC,CAAC,uBAAuB,CAAC,OAAO,EAAE,UAAU,CAAC,OAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/G,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,UAAU,EAAE,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,UAAU,EAAE,CAAC;IAE1F,kGAAkG;IAClG,qEAAqE;IACrE,MAAM,gBAAgB,GAAG,CAAC,UAAU,CAAC,YAAY,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,CAAC;IAEtF,MAAM,aAAa,GAAG,GAAG,EAAE,CAC1B,CAAC,MAAM,KAAK,UAAU,CAAC,GAAG,KAAK,SAAS;QACvC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvD,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,OAAQ,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAE5E,oFAAoF;IACpF,MAAM,YAAY,GAAG,GAAG,EAAE,CACzB,CAAC,KAAK,KAAK,UAAU,CAAC,OAAO,KAAK,SAAS;QAC1C,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5B,CAAC,CAAC,cAAc,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACrC,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC,KAAK,CAAC;YAC5D,MAAM,IAAI,eAAe,CACxB,MAAM,UAAU,CAAC,OAAQ,CAAC,UAAU,CAAC,MAAM,WAAW,UAAU,CAAC,WAAW,iCAAiC,UAAU,CAAC,EAAE,uCAAuC,UAAU,CAAC,OAAQ,CAAC,UAAU,CAAC,MAAM,KAAK,EAC3M,mBAAmB,EACnB,EAAE,MAAM,EAAE,qCAAqC,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,OAAQ,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,EAAE,CAC3K,CAAC;QACH,CAAC,CAAC,CAAC,CAAC;IAEP,qGAAqG;IACrG,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,SAAkB;QAC5D,MAAM,GAAG,GAAG,GAAG,MAAM,aAAa,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC;QAChE,2FAA2F;QAC3F,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC9D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,UAAU,EAAE,CAAC,CAAC;QACnF,MAAM,OAAO,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC7B,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxD,MAAM,IAAI,eAAe,CAAC,kBAAkB,GAAG,YAAY,QAAQ,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE;gBACrI,MAAM,EAAE,gCAAgC;gBACxC,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;gBAC5D,OAAO;aACP,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,IAAI,SAAS,EAAE,OAAO;YAAE,OAAO,SAAS,CAAC,IAAI,CAAC;QAC9C,MAAM,IAAI,eAAe,CAAC,kBAAkB,GAAG,aAAa,QAAQ,CAAC,MAAM,sCAAsC,EAAE,aAAa,EAAE;YACjI,MAAM,EAAE,4BAA4B;YACpC,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC;SAClD,CAAC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,OAAe;QAC5D,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACnC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,YAAY,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,GAAG,MAAM,aAAa,EAAE,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAClG,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAC5D,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,UAAU,EAAE,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACnD,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,EAAE;gBAAE,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;QAC9F,CAAC;aAAM,CAAC;YACP,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,KAAK,GAAG,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;IAC9G,CAAC;IAED,4EAA4E;IAC5E,SAAS,mBAAmB,CAAC,MAA+C;QAC3E,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,oBAAoB,UAAU,CAAC,EAAE,kCAAkC,EAAE,mBAAmB,EAAE;gBACnH,MAAM,EAAE,qCAAqC;gBAC7C,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE;aACpC,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC5D,MAAM,IAAI,eAAe,CAAC,oBAAoB,UAAU,CAAC,EAAE,eAAe,MAAM,CAAC,YAAY,2BAA2B,EAAE,mBAAmB,EAAE;gBAC9I,MAAM,EAAE,yCAAyC;gBACjD,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE;aACvE,CAAC,CAAC;QACJ,CAAC;QACD,OAAO;YACN,GAAG,EAAE,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;YACrD,OAAO,EAAE,MAAM,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,SAAS;SAC3H,CAAC;IACH,CAAC;IAED,MAAM,cAAc,GAAkC;QACrD,MAAM,EAAE,UAAU;QAClB,cAAc,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,gCAAgC,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QACvG,MAAM,EAAE,aAAa;QAErB,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE;YACrC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;YACrE,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACnD,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;YACxD,MAAM,EAAE,SAAS,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;QAC/D,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC;YACrE,IAAI,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;YACnD,MAAM,IAAI,GAA2D,EAAE,CAAC;YACxE,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;gBACrE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;YAC/H,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACpC,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,IAAI;YAClB,OAAO,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC;QAC3E,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,KAAK;YACjB,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,CAAC,MAAM,YAAY,EAAE,CAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;gBAC5C,OAAO;gBACP,GAAG,EAAE,GAAG,MAAM,aAAa,EAAE,cAAc,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,kBAAkB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;gBACtH,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;gBACnC,KAAK;gBACL,GAAG,MAAM;gBACT,SAAS;aACT,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;gBACxD,MAAM,IAAI,eAAe,CACxB,YAAY,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,OAAO,UAAU,CAAC,EAAE,YAAY,QAAQ,CAAC,MAAM,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,EAAE,EAChJ,aAAa,EACb,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CACxG,CAAC;YACH,CAAC;YACD,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAC/B,CAAC;QAED,gBAAgB;QAEhB,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS;YACrC,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD,MAAM,KAAK,GAAG,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,eAAe,CAAC,GAAG,UAAU,CAAC,EAAE,mBAAmB,IAAI,IAAI,OAAO,EAAE,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAC;YACrI,CAAC;YACD,MAAM,EAAE,OAAO,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,UAAU,CAAC,EAAE,IAAI,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAClB,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC9B,MAAM,IAAI,eAAe,CAAC,oBAAoB,IAAI,IAAI,OAAO,YAAY,QAAQ,CAAC,MAAM,GAAG,EAAE,aAAa,EAAE;oBAC3G,MAAM,EAAE,8BAA8B;oBACtC,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG;oBAC5D,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;iBACpC,CAAC,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC3D,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,IAAI,eAAe,CAAC,eAAe,IAAI,IAAI,OAAO,wCAAwC,EAAE,eAAe,EAAE;oBAClH,MAAM,EAAE,qCAAqC;iBAC7C,CAAC,CAAC;YACJ,CAAC;YACD,OAAO,KAAK,CAAC;QACd,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,KAAkC;YAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACvD,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC;gBACtC,OAAO;gBACP,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;gBAC/B,QAAQ,EAAE,MAAM,aAAa,EAAE;gBAC/B,KAAK,EAAE,CAAC,MAAM,YAAY,EAAE,CAAE;gBAC9B,GAAG,EAAE,KAAK,CAAC,GAAG;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,GAAG,MAAM;gBACT,SAAS;aACT,CAAC,CAAC;YACH,qFAAqF;YACrF,gCAAgC;YAChC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QAClF,CAAC;KACD,CAAC;IACF,OAAO,cAAc,CAAC;AACvB,CAAC"}

package/dist/cli/npm/publish/publish-to-mirror.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `vibes infra npm publish <paths> --to <registry>` for a registry whose
+ * descriptor names `publish.mirrorOf`: the release never packs for it. The
+ * release roots and their workspace dependencies, in dependency order, are
+ * carried from the source registry as its exact bytes (`mirrorRegistryArtifacts`).
+ */
+import type { UIContext } from '@vibesdotdev/cli/providers';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import type { PackageRegistryImplementation } from '@vibesdotdev/infra-core';
+import type { RegistryReleaseWorkspacePackage } from '@vibesdotdev/registry';
+import { type MirrorOutcome } from '../mirror-registry-artifacts.ts';
+export declare function publishToMirrorRegistry(options: {
+    runtime: VibesRuntime;
+    ui: UIContext;
+    target: PackageRegistryImplementation;
+    packageDirs: readonly string[];
+    workspace: ReadonlyMap<string, RegistryReleaseWorkspacePackage>;
+    tag?: string;
+    otp?: string;
+    environment?: string;
+    quiet: boolean;
+}): Promise<{
+    ok: boolean;
+    source: string;
+    target: string;
+    outcomes: MirrorOutcome[];
+}>;
+//# sourceMappingURL=publish-to-mirror.d.ts.map

package/dist/cli/npm/publish/publish-to-mirror.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-to-mirror.d.ts","sourceRoot":"","sources":["../../../../src/cli/npm/publish/publish-to-mirror.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACzE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAE7E,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAI9F,wBAAsB,uBAAuB,CAAC,OAAO,EAAE;IACtD,OAAO,EAAE,YAAY,CAAC;IACtB,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,6BAA6B,CAAC;IACtC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IAChE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,OAAO,CAAC;CACf,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,aAAa,EAAE,CAAA;CAAE,CAAC,CA6BtF"}