packtory 0.0.15 → 0.0.17

package/artifacts/artifacts-builder.d.ts

@@ -1,7 +1,9 @@
 import type { FileDescription } from '../file-manager/file-description.ts';
 import type { FileManager } from '../file-manager/file-manager.ts';
 import type { ProgressBroadcastProvider } from '../progress/progress-broadcaster.ts';
-import type { VersionedBundleWithManifest } from '../version-manager/versioned-bundle.ts';
+import type { ArtifactSourcePackage } from '../published-package/published-package.ts';
 import type { TarballBuilder } from '../tar/tarball-builder.ts';
+import { type VendorEntry } from '../vendor-materializer/vendor-entry.ts';
+import type { ZipBuilder } from '../zip/zip-builder.ts';
 export {};
 //# sourceMappingURL=artifacts-builder.d.ts.map

package/artifacts/artifacts-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.d.ts","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC;AAEpF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC;AACzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B"}
+{"version":3,"file":"artifacts-builder.d.ts","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC;AAClE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC;AACpF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,2CAA2C;AAEtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B;AAC/D,OAAO,EAA4B,KAAK,WAAW,EAAE,MAAM,wCAAwC;AACnG,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB"}

package/artifacts/artifacts-builder.js

@@ -1,91 +1,37 @@
-import path from 'node:path';
-import { inspectArtifactSizes } from "../report/inspectors.js";
-function isString(value) {
-    return typeof value === 'string';
-}
-export function createArtifactsBuilder(artifactsBuilderDependencies) {
-    const { fileManager, tarballBuilder, progressBroadcaster } = artifactsBuilderDependencies;
-    function applyPrefix(filePath, prefix) {
-        return prefix === undefined ? filePath : path.join(prefix, filePath);
-    }
-    function getExplicitBinTargetPaths(bundle) {
-        if (bundle.binField === undefined) {
-            return new Set();
-        }
-        const targets = typeof bundle.binField === 'string' ? [bundle.binField] : Object.values(bundle.binField).filter(isString);
-        return new Set(targets.map((target) => {
-            return target.replace(/^\.\//u, '');
-        }));
-    }
+import { inspectArtifactSizes } from "../report/inspectors/inspect-artifact-sizes.js";
+import { applyPrefixToVendorEntry } from "../vendor-materializer/vendor-entry.js";
+import { collectArtifactContents, describeArtifactsForReport } from "./content-collection.js";
+import { writeArtifactsToFolder } from "./folder-writer.js";
+export function createArtifactsBuilder(dependencies) {
+    const { fileManager, tarballBuilder, zipBuilder, progressBroadcaster } = dependencies;
     function collectContents(bundle, prefix, extraFiles = []) {
-        const explicitBinTargetPaths = getExplicitBinTargetPaths(bundle);
-        const artifactContents = [
-            {
-                ...bundle.manifestFile,
-                filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
-            }
-        ];
-        for (const entry of bundle.contents) {
-            artifactContents.push({
-                filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
-                content: entry.fileDescription.content,
-                isExecutable: entry.fileDescription.isExecutable ||
-                    explicitBinTargetPaths.has(entry.fileDescription.targetFilePath)
-            });
-        }
-        for (const extraFile of extraFiles) {
-            artifactContents.push({
-                filePath: applyPrefix(extraFile.filePath, prefix),
-                content: extraFile.content,
-                isExecutable: extraFile.isExecutable
-            });
-        }
+        const artifactContents = collectArtifactContents(bundle, prefix, extraFiles);
         if (progressBroadcaster.hasSubscribers('artifactsCollected')) {
             progressBroadcaster.emit('artifactsCollected', {
                 packageName: bundle.name,
-                entries: inspectArtifactSizes([
-                    {
-                        ...bundle.manifestFile,
-                        filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
-                    },
-                    ...bundle.contents.map((entry) => {
-                        return {
-                            filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
-                            content: entry.fileDescription.content,
-                            isExecutable: entry.fileDescription.isExecutable,
-                            sourceFilePath: entry.fileDescription.sourceFilePath,
-                            isSubstituted: entry.isSubstituted
-                        };
-                    }),
-                    ...extraFiles.map((entry) => {
-                        return {
-                            ...entry,
-                            filePath: applyPrefix(entry.filePath, prefix)
-                        };
-                    })
-                ])
+                entries: inspectArtifactSizes(describeArtifactsForReport(bundle, prefix, extraFiles))
             });
         }
         return artifactContents;
     }
     return {
         collectContents,
-        async buildTarball(bundle, extraFiles) {
+        async buildTarball(bundle, extraFiles, vendorEntries = []) {
             const contents = collectContents(bundle, 'package', extraFiles);
-            const tarData = await tarballBuilder.build(contents);
+            const prefixedVendor = vendorEntries.map((entry) => {
+                return applyPrefixToVendorEntry('package', entry);
+            });
+            const tarData = await tarballBuilder.build(contents, prefixedVendor);
             return { tarData };
         },
-        async buildFolder(bundle, targetFolder, extraFiles) {
-            const readability = await fileManager.checkReadability(targetFolder);
-            if (readability.isReadable) {
-                throw new Error(`Folder ${targetFolder} already exists`);
-            }
+        async buildZip(bundle, extraFiles, vendorEntries = []) {
+            const contents = collectContents(bundle, undefined, extraFiles);
+            const zipData = await zipBuilder.build(contents, vendorEntries);
+            return { zipData };
+        },
+        async buildFolder(bundle, targetFolder, extraFiles, vendorEntries = []) {
             const contents = collectContents(bundle, undefined, extraFiles);
-            for (const entry of contents) {
-                const targetFilePath = path.join(targetFolder, entry.filePath);
-                await fileManager.writeFile(targetFilePath, entry.content);
-                await fileManager.setExecutable(targetFilePath, entry.isExecutable);
-            }
+            await writeArtifactsToFolder(fileManager, targetFolder, contents, vendorEntries);
         }
     };
 }

package/artifacts/artifacts-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAc/D,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;AACrC,CAAC;AAmBD,MAAM,UAAU,sBAAsB,CAAC,4BAA0D;IAC7F,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,4BAA4B,CAAC;IAE1F,SAAS,WAAW,CAAC,QAAgB,EAAE,MAA0B;QAC7D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,SAAS,yBAAyB,CAAC,MAAmC;QAClE,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,IAAI,GAAG,EAAU,CAAC;QAC7B,CAAC;QAED,MAAM,OAAO,GACT,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9G,OAAO,IAAI,GAAG,CACV,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACnB,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED,SAAS,eAAe,CACpB,MAAmC,EACnC,MAAe,EACf,aAAyC,EAAE;QAE3C,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAsB;YACxC;gBACI,GAAG,MAAM,CAAC,YAAY;gBACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC9D;SACJ,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;gBACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;gBACtC,YAAY,EACR,KAAK,CAAC,eAAe,CAAC,YAAY;oBAClC,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC;aACvE,CAAC,CAAC;QACP,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACjD,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,YAAY,EAAE,SAAS,CAAC,YAAY;aACvC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,mBAAmB,CAAC,cAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3D,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC3C,WAAW,EAAE,MAAM,CAAC,IAAI;gBACxB,OAAO,EAAE,oBAAoB,CAAC;oBAC1B;wBACI,GAAG,MAAM,CAAC,YAAY;wBACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;qBAC9D;oBACD,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;wBAC7B,OAAO;4BACH,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;4BACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;4BACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;4BAChD,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc;4BACpD,aAAa,EAAE,KAAK,CAAC,aAAa;yBACrC,CAAC;oBACN,CAAC,CAAC;oBACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;wBACxB,OAAO;4BACH,GAAG,KAAK;4BACR,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;yBAChD,CAAC;oBACN,CAAC,CAAC;iBACL,CAAC;aACL,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAED,OAAO;QACH,eAAe;QAEf,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU;YACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAErD,OAAO,EAAE,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU;YAC9C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAErE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAEhE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAE/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YACxE,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAE,wBAAwB,EAAoB,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAyC5D,MAAM,UAAU,sBAAsB,CAAC,YAA0C;IAC7E,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,YAAY,CAAC;IAEtF,SAAS,eAAe,CACpB,MAA6B,EAC7B,MAAe,EACf,aAAyC,EAAE;QAE3C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAE7E,IAAI,mBAAmB,CAAC,cAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3D,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC3C,WAAW,EAAE,MAAM,CAAC,IAAI;gBACxB,OAAO,EAAE,oBAAoB,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aACxF,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAED,OAAO;QACH,eAAe;QAEf,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,EAAE;YACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBAC/C,OAAO,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACrE,OAAO,EAAE,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,EAAE;YACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,GAAG,EAAE;YAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,sBAAsB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACrF,CAAC;KACJ,CAAC;AACN,CAAC"}

package/artifacts/content-collection.js

@@ -0,0 +1,60 @@
+import path from 'node:path';
+import { explicitBinTargetPaths } from "../published-package/published-package.js";
+function applyPrefix(filePath, prefix) {
+    return prefix === undefined ? filePath : path.join(prefix, filePath);
+}
+export function collectArtifactContents(bundle, prefix, extraFiles) {
+    const binTargets = explicitBinTargetPaths(bundle);
+    const artifactContents = [
+        {
+            ...bundle.manifestFile,
+            filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
+        }
+    ];
+    for (const entry of bundle.contents.filter((content) => {
+        return !content.isGeneratedManifest;
+    })) {
+        artifactContents.push({
+            filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
+            content: entry.fileDescription.content,
+            isExecutable: entry.fileDescription.isExecutable || binTargets.has(entry.fileDescription.targetFilePath)
+        });
+    }
+    for (const extraFile of extraFiles) {
+        artifactContents.push({
+            filePath: applyPrefix(extraFile.filePath, prefix),
+            content: extraFile.content,
+            isExecutable: extraFile.isExecutable
+        });
+    }
+    return artifactContents;
+}
+export function describeArtifactsForReport(bundle, prefix, extraFiles) {
+    return [
+        {
+            ...bundle.manifestFile,
+            filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
+        },
+        ...bundle.contents.flatMap((entry) => {
+            if (entry.isGeneratedManifest) {
+                return [];
+            }
+            return [
+                {
+                    filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
+                    content: entry.fileDescription.content,
+                    isExecutable: entry.fileDescription.isExecutable,
+                    sourceFilePath: entry.fileDescription.sourceFilePath,
+                    isSubstituted: entry.isSubstituted
+                }
+            ];
+        }),
+        ...extraFiles.map((entry) => {
+            return {
+                ...entry,
+                filePath: applyPrefix(entry.filePath, prefix)
+            };
+        })
+    ];
+}
+//# sourceMappingURL=content-collection.js.map

package/artifacts/content-collection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-collection.js","sourceRoot":"","sources":["../../../../source/artifacts/content-collection.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAA8B,MAAM,2CAA2C,CAAC;AAE/G,SAAS,WAAW,CAAC,QAAgB,EAAE,MAA0B;IAC7D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,uBAAuB,CACnC,MAA6B,EAC7B,MAA0B,EAC1B,UAAsC;IAEtC,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAsB;QACxC;YACI,GAAG,MAAM,CAAC,YAAY;YACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9D;KACJ,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE;QACnD,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACxC,CAAC,CAAC,EAAE,CAAC;QACD,gBAAgB,CAAC,IAAI,CAAC;YAClB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;YACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;YACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC;SAC3G,CAAC,CAAC;IACP,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,gBAAgB,CAAC,IAAI,CAAC;YAClB,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;YACjD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,YAAY,EAAE,SAAS,CAAC,YAAY;SACvC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACtC,MAA6B,EAC7B,MAA0B,EAC1B,UAAsC;IAQtC,OAAO;QACH;YACI,GAAG,MAAM,CAAC,YAAY;YACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9D;QACD,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YACjC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACd,CAAC;YACD,OAAO;gBACH;oBACI,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;oBACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;oBACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;oBAChD,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc;oBACpD,aAAa,EAAE,KAAK,CAAC,aAAa;iBACrC;aACJ,CAAC;QACN,CAAC,CAAC;QACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACxB,OAAO;gBACH,GAAG,KAAK;gBACR,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;aAChD,CAAC;QACN,CAAC,CAAC;KACL,CAAC;AACN,CAAC"}

package/artifacts/folder-writer.js

@@ -0,0 +1,24 @@
+import path from 'node:path';
+async function writeFileDescriptions(fileManager, targetFolder, contents) {
+    for (const entry of contents) {
+        const targetFilePath = path.join(targetFolder, entry.filePath);
+        await fileManager.writeFile(targetFilePath, entry.content);
+        await fileManager.setExecutable(targetFilePath, entry.isExecutable);
+    }
+}
+async function copyVendorEntries(fileManager, targetFolder, vendorEntries) {
+    for (const vendorEntry of vendorEntries) {
+        const targetFilePath = path.join(targetFolder, vendorEntry.targetRelativePath);
+        await fileManager.copyFileBytes(vendorEntry.sourceAbsolutePath, targetFilePath);
+        await fileManager.setExecutable(targetFilePath, vendorEntry.isExecutable);
+    }
+}
+export async function writeArtifactsToFolder(fileManager, targetFolder, contents, vendorEntries = []) {
+    const readability = await fileManager.checkReadability(targetFolder);
+    if (readability.isReadable) {
+        throw new Error(`Folder ${targetFolder} already exists`);
+    }
+    await writeFileDescriptions(fileManager, targetFolder, contents);
+    await copyVendorEntries(fileManager, targetFolder, vendorEntries);
+}
+//# sourceMappingURL=folder-writer.js.map

package/artifacts/folder-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"folder-writer.js","sourceRoot":"","sources":["../../../../source/artifacts/folder-writer.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,KAAK,UAAU,qBAAqB,CAChC,WAAwB,EACxB,YAAoB,EACpB,QAAoC;IAEpC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,WAAwB,EACxB,YAAoB,EACpB,aAAqC;IAErC,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,WAAwB,EACxB,YAAoB,EACpB,QAAoC,EACpC,gBAAwC,EAAE;IAE1C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,qBAAqB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC"}

package/bundle-emitter/emitter.d.ts

@@ -4,7 +4,8 @@ import type { PublishSettings } from '../config/publish-settings.ts';
 import type { RegistrySettings } from '../config/registry-settings.ts';
 import type { VersioningSettings } from '../config/versioning-settings.ts';
 import type { FileDescription } from '../file-manager/file-description.ts';
-import type { VersionedBundleWithManifest } from '../version-manager/versioned-bundle.ts';
-import type { RegistryClient } from './registry-client.ts';
+import type { ArtifactPublishPackage } from '../published-package/published-package.ts';
+import { type PublishedReleaseArtifacts } from './fetch-published-artifacts.ts';
+import type { RegistryClient } from './registry/registry-client.ts';
 export {};
 //# sourceMappingURL=emitter.d.ts.map

package/bundle-emitter/emitter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAE1E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC;AAEzF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB"}
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAE1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C;AAEvF,OAAO,EAA2B,KAAK,yBAAyB,EAAE,MAAM,gCAAgC;AACxG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B"}

package/bundle-emitter/emitter.js

@@ -1,7 +1,8 @@
 /* eslint-disable import/max-dependencies -- the publish/check flow legitimately depends on registry, artifacts, file-manager, and provenance helpers */
 import { Maybe } from 'true-myth';
 import { compareFileDescriptions } from "../file-manager/compare.js";
-import { extractPackageTarball } from "./extract-package-tarball.js";
+import { canonicalizeSbomInFileSet } from "../sbom/sbom-canonicalizer.js";
+import { fetchPublishedArtifacts } from "./fetch-published-artifacts.js";
 import { assertRepositoryCoherence } from "./repository-coherence.js";
 export function createBundleEmitter(dependencies) {
     const { artifactsBuilder, registryClient, ciRepositoryUrl } = dependencies;
@@ -18,15 +19,16 @@ export function createBundleEmitter(dependencies) {
         },
         async checkBundleAlreadyPublished(options) {
             const { bundle, registrySettings, extraFiles } = options;
-            const latestVersion = await registryClient.fetchLatestVersion(bundle.name, registrySettings);
-            if (latestVersion.isNothing) {
-                return { alreadyPublishedAsLatest: false };
+            const previous = await fetchPublishedArtifacts(registryClient, bundle.name, registrySettings);
+            if (previous.isNothing) {
+                return { alreadyPublishedAsLatest: false, previousReleaseArtifacts: Maybe.nothing() };
             }
             const artifactContents = artifactsBuilder.collectContents(bundle, 'package', extraFiles);
-            const tarball = await registryClient.fetchTarball(latestVersion.value.tarballUrl, registrySettings);
-            const latestVersionArtifactContents = await extractPackageTarball(tarball);
-            const result = compareFileDescriptions(artifactContents, latestVersionArtifactContents);
-            return { alreadyPublishedAsLatest: result.status === 'equal' };
+            const comparison = compareFileDescriptions(canonicalizeSbomInFileSet(artifactContents), canonicalizeSbomInFileSet(previous.value.files));
+            return {
+                alreadyPublishedAsLatest: comparison.status === 'equal',
+                previousReleaseArtifacts: previous
+            };
         },
         async publish(options) {
             if (options.publishSettings.access === 'public' && options.publishSettings.provenance?.type === 'auto') {

package/bundle-emitter/emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,wJAAwJ;AACxJ,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAMlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAqCtE,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,YAAY,CAAC;IAE3E,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC7F,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACpG,MAAM,6BAA6B,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;YACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAExF,MAAM,cAAc,CAAC,cAAc,CAC/B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,CAC1B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,wJAAwJ;AACxJ,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAMlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAkC,MAAM,gCAAgC,CAAC;AAEzG,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAsCtE,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,YAAY,CAAC;IAE3E,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC9F,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1F,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzF,MAAM,UAAU,GAAG,uBAAuB,CACtC,yBAAyB,CAAC,gBAAgB,CAAC,EAC3C,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAClD,CAAC;YACF,OAAO;gBACH,wBAAwB,EAAE,UAAU,CAAC,MAAM,KAAK,OAAO;gBACvD,wBAAwB,EAAE,QAAQ;aACrC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAExF,MAAM,cAAc,CAAC,cAAc,CAC/B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,CAC1B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/bundle-emitter/fetch-published-artifacts.d.ts

@@ -0,0 +1,10 @@
+import { Maybe } from 'true-myth';
+import type { RegistrySettings } from '../config/registry-settings.ts';
+import type { FileDescription } from '../file-manager/file-description.ts';
+import type { RegistryClient } from './registry/registry-client.ts';
+export type PublishedReleaseArtifacts = {
+    readonly publishedAt?: Date | undefined;
+    readonly version: string;
+    readonly files: readonly FileDescription[];
+};
+//# sourceMappingURL=fetch-published-artifacts.d.ts.map

package/bundle-emitter/fetch-published-artifacts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-published-artifacts.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/fetch-published-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B;AAEnE,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C"}

package/bundle-emitter/fetch-published-artifacts.js

@@ -0,0 +1,16 @@
+import { Maybe } from 'true-myth';
+import { extractPackageTarball } from "./extract-package-tarball.js";
+export async function fetchPublishedArtifacts(registryClient, name, registrySettings) {
+    const latestVersion = await registryClient.fetchLatestReleaseMetadata(name, registrySettings);
+    if (latestVersion.isNothing) {
+        return Maybe.nothing();
+    }
+    const tarball = await registryClient.fetchTarball(latestVersion.value.tarballUrl, registrySettings);
+    const files = await extractPackageTarball(tarball);
+    return Maybe.just({
+        version: latestVersion.value.version,
+        files,
+        publishedAt: latestVersion.value.publishedAt
+    });
+}
+//# sourceMappingURL=fetch-published-artifacts.js.map

package/bundle-emitter/fetch-published-artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-published-artifacts.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/fetch-published-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AASrE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,cAA8B,EAC9B,IAAY,EACZ,gBAAkC;IAElC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9F,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACpG,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,KAAK;QACL,WAAW,EAAE,aAAa,CAAC,KAAK,CAAC,WAAW;KAC/C,CAAC,CAAC;AACP,CAAC"}

package/bundle-emitter/publish-error/auto-mode-error-matching.js

@@ -0,0 +1,30 @@
+import { isErrorLike } from "./error-shape-helpers.js";
+import { buildUnsupportedProviderMessage, githubActionsIdTokenMessage, gitlabSigstoreIdTokenMessage, unsupportedProviderMarker } from "./publish-error-messages.js";
+function getCiName(message) {
+    const tail = message.slice(message.indexOf(unsupportedProviderMarker) + unsupportedProviderMarker.length).trim();
+    if (tail === '') {
+        return 'unknown';
+    }
+    const whitespaceIndex = tail.search(/\s/u);
+    if (whitespaceIndex === -1) {
+        return tail;
+    }
+    return tail.slice(0, whitespaceIndex);
+}
+export function matchAutoModeError(error) {
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (message.includes(unsupportedProviderMarker)) {
+        return new Error(buildUnsupportedProviderMessage(getCiName(message)), { cause: error });
+    }
+    if (message.includes('"write" access to the "id-token" permission')) {
+        return new Error(githubActionsIdTokenMessage, { cause: error });
+    }
+    if (message.includes('SIGSTORE_ID_TOKEN')) {
+        return new Error(gitlabSigstoreIdTokenMessage, { cause: error });
+    }
+    return undefined;
+}
+//# sourceMappingURL=auto-mode-error-matching.js.map

package/bundle-emitter/publish-error/auto-mode-error-matching.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-mode-error-matching.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/auto-mode-error-matching.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACH,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EAC5B,MAAM,6BAA6B,CAAC;AAErC,SAAS,SAAS,CAAC,OAAe;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjH,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC7C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,KAAK,CAAC,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/bundle-emitter/publish-error/error-shape-helpers.js

@@ -0,0 +1,10 @@
+export function isRecord(value) {
+    return value instanceof Object;
+}
+export function isErrorLike(error) {
+    return isRecord(error) && typeof error.message === 'string';
+}
+export function ensureError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+//# sourceMappingURL=error-shape-helpers.js.map

package/bundle-emitter/publish-error/error-shape-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-shape-helpers.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/error-shape-helpers.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/bundle-emitter/publish-error/file-mode-error-matching.js

@@ -0,0 +1,28 @@
+import { isErrorLike, isRecord } from "./error-shape-helpers.js";
+import { buildInvalidProvenanceFileMessage, buildMissingProvenanceFileMessage, buildProvenanceDigestMismatchMessage } from "./publish-error-messages.js";
+function isProvenanceBundleError(message) {
+    return (message.includes('Bundle is invalid') ||
+        message.includes('Unsupported bundle format') ||
+        message.includes('Invalid bundle') ||
+        message.includes('subject does not match'));
+}
+function isProvenanceDigestMismatch(message) {
+    return message.includes('subject') || message.includes('digest');
+}
+export function matchFileModeError(error, filePath) {
+    if (isRecord(error) && error.code === 'ENOENT') {
+        return new Error(buildMissingProvenanceFileMessage(filePath), { cause: error });
+    }
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (!isProvenanceBundleError(message)) {
+        return undefined;
+    }
+    if (isProvenanceDigestMismatch(message)) {
+        return new Error(buildProvenanceDigestMismatchMessage(filePath), { cause: error });
+    }
+    return new Error(buildInvalidProvenanceFileMessage(filePath), { cause: error });
+}
+//# sourceMappingURL=file-mode-error-matching.js.map

package/bundle-emitter/publish-error/file-mode-error-matching.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-mode-error-matching.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/file-mode-error-matching.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACH,iCAAiC,EACjC,iCAAiC,EACjC,oCAAoC,EACvC,MAAM,6BAA6B,CAAC;AAErC,SAAS,uBAAuB,CAAC,OAAe;IAC5C,OAAO,CACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC7C,CAAC;AACN,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IAC/C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,QAAgB;IAC/D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,KAAK,CAAC,oCAAoC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/bundle-emitter/publish-error/publish-error-messages.js

@@ -0,0 +1,37 @@
+export const unsupportedProviderMarker = 'not supported for provider:';
+export const githubActionsIdTokenMessage = [
+    'GitHub Actions provenance needs "permissions: id-token: write" on the workflow job.',
+    'See the packtory readme for the workflow snippet.'
+].join(' ');
+export const gitlabSigstoreIdTokenMessage = [
+    'GitLab CI provenance needs an "id_tokens" entry with audience "sigstore"',
+    'exposed as SIGSTORE_ID_TOKEN. See the packtory readme for the workflow snippet.'
+].join(' ');
+export function buildUnsupportedProviderMessage(ciName) {
+    return [
+        'Provenance auto mode requires GitHub Actions or GitLab CI.',
+        `Detected CI: ${ciName}.`,
+        "Use provenance: { type: 'file' } for other environments."
+    ].join(' ');
+}
+export function buildMissingProvenanceFileMessage(filePath) {
+    return [
+        `Provenance bundle file "${filePath}" does not exist.`,
+        "Generate it with your CI's attestation tool (e.g. actions/attest-build-provenance)",
+        'before running packtory.'
+    ].join(' ');
+}
+export function buildInvalidProvenanceFileMessage(filePath) {
+    return [
+        `Provenance bundle file "${filePath}" is not a valid sigstore bundle.`,
+        'Re-generate it from the current build.'
+    ].join(' ');
+}
+export function buildProvenanceDigestMismatchMessage(filePath) {
+    return [
+        `Provenance bundle at "${filePath}" was signed against a different tarball`,
+        'than the one packtory built. Re-generate the bundle from the current source —',
+        'shipping a mismatched attestation would defeat the purpose of provenance.'
+    ].join(' ');
+}
+//# sourceMappingURL=publish-error-messages.js.map

package/bundle-emitter/publish-error/publish-error-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-error-messages.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/publish-error-messages.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACvC,qFAAqF;IACrF,mDAAmD;CACtD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,4BAA4B,GAAG;IACxC,0EAA0E;IAC1E,iFAAiF;CACpF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC1D,OAAO;QACH,4DAA4D;QAC5D,gBAAgB,MAAM,GAAG;QACzB,0DAA0D;KAC7D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB;IAC9D,OAAO;QACH,2BAA2B,QAAQ,mBAAmB;QACtD,oFAAoF;QACpF,0BAA0B;KAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB;IAC9D,OAAO;QACH,2BAA2B,QAAQ,mCAAmC;QACtE,wCAAwC;KAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,QAAgB;IACjE,OAAO;QACH,yBAAyB,QAAQ,0CAA0C;QAC3E,+EAA+E;QAC/E,2EAA2E;KAC9E,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC"}

package/bundle-emitter/registry/metadata-auth-retry.js

@@ -0,0 +1,26 @@
+import { buildAuthOptions, resolvePublishAuth } from "./registry-auth-config.js";
+const unauthorizedStatusCode = 401;
+const forbiddenStatusCode = 403;
+function isRecord(value) {
+    return value instanceof Object;
+}
+function isAuthFailureStatus(statusCode) {
+    return statusCode === forbiddenStatusCode || statusCode === unauthorizedStatusCode;
+}
+export async function retryWithFallbackAuth(registrySettings, auth, run) {
+    try {
+        return await run(auth.options);
+    }
+    catch (error) {
+        const statusCode = isRecord(error) ? error.statusCode : undefined;
+        if (!auth.allowsAutomaticRetry || !isAuthFailureStatus(statusCode)) {
+            throw error;
+        }
+        const publishAuth = resolvePublishAuth(registrySettings);
+        if (publishAuth.type === 'npm-oidc') {
+            throw error;
+        }
+        return run(buildAuthOptions(publishAuth, registrySettings).options);
+    }
+}
+//# sourceMappingURL=metadata-auth-retry.js.map

package/bundle-emitter/registry/metadata-auth-retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metadata-auth-retry.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/metadata-auth-retry.ts"],"names":[],"mappings":"AACA,OAAO,EACH,gBAAgB,EAChB,kBAAkB,EAGrB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAmB;IAC5C,OAAO,UAAU,KAAK,mBAAmB,IAAI,UAAU,KAAK,sBAAsB,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,gBAA4C,EAC5C,IAAoB,EACpB,GAA6C;IAE7C,IAAI,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,OAAO,GAAG,CAAC,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;AACL,CAAC"}

package/bundle-emitter/registry/oidc-token-exchange.js

@@ -0,0 +1,83 @@
+import { buildAuthOptions, createBaseOptions, isNpmRegistry, npmRegistryUrl, resolvePublishAuth, resolveRegistryUrl } from "./registry-auth-config.js";
+import { parseOidcExchangeResponse } from "./registry-response-schemas.js";
+const oidcExchangeRefreshThresholdInMilliseconds = 60_000;
+function expiresValueAsNumber(value) {
+    return typeof value === 'string' ? Date.parse(value) : value;
+}
+function encodePackageName(name) {
+    return name.replace('/', '%2F');
+}
+async function readJson(response) {
+    return response.json();
+}
+export function createOidcTokenExchanger(dependencies) {
+    const { fetch: fetchImplementation, clock, resolveIdToken } = dependencies;
+    const cache = new Map();
+    function getCacheKey(packageName, registrySettings) {
+        return `${resolveRegistryUrl(registrySettings) ?? npmRegistryUrl}::${packageName}`;
+    }
+    function readCachedToken(cacheKey) {
+        const cachedToken = cache.get(cacheKey);
+        if (cachedToken === undefined) {
+            return undefined;
+        }
+        const currentTime = clock.getCurrentTimeInMilliseconds();
+        if (cachedToken.expiresAt - currentTime > oidcExchangeRefreshThresholdInMilliseconds) {
+            return cachedToken.token;
+        }
+        return undefined;
+    }
+    async function postExchangeRequest(packageName, idToken) {
+        return fetchImplementation(`${npmRegistryUrl}-/npm/v1/oidc/token/exchange/package/${encodePackageName(packageName)}`, {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${idToken}` }
+        });
+    }
+    function parseExchangedToken(body) {
+        const parsed = parseOidcExchangeResponse(body);
+        if (!parsed.success) {
+            throw new TypeError(`OIDC token exchange returned an invalid response: ${parsed.issues.join('; ')}`);
+        }
+        const expiresAt = expiresValueAsNumber(parsed.data.expires);
+        if (!Number.isFinite(expiresAt)) {
+            throw new TypeError('OIDC token exchange returned an invalid expiry timestamp');
+        }
+        return { token: parsed.data.token, expiresAt };
+    }
+    async function requestExchange(packageName, auth) {
+        const idToken = await resolveIdToken(auth);
+        const exchangeResponse = await postExchangeRequest(packageName, idToken);
+        if (!exchangeResponse.ok) {
+            throw new Error(`OIDC token exchange failed with status ${exchangeResponse.status}`);
+        }
+        return parseExchangedToken(await readJson(exchangeResponse));
+    }
+    async function exchangeToken(packageName, registrySettings, auth) {
+        const cacheKey = getCacheKey(packageName, registrySettings);
+        const cached = readCachedToken(cacheKey);
+        if (cached !== undefined) {
+            return cached;
+        }
+        if (!isNpmRegistry(resolveRegistryUrl(registrySettings))) {
+            throw new Error('npm-oidc auth is only supported with the npmjs.org registry');
+        }
+        const exchanged = await requestExchange(packageName, auth);
+        cache.set(cacheKey, exchanged);
+        return exchanged.token;
+    }
+    return {
+        exchangeToken,
+        async resolveWriteAuthOptions(packageName, registrySettings) {
+            const auth = resolvePublishAuth(registrySettings);
+            if (auth.type !== 'npm-oidc') {
+                return buildAuthOptions(auth, registrySettings).options;
+            }
+            const token = await exchangeToken(packageName, registrySettings, auth);
+            return {
+                ...createBaseOptions(registrySettings),
+                forceAuth: { token }
+            };
+        }
+    };
+}
+//# sourceMappingURL=oidc-token-exchange.js.map

package/bundle-emitter/registry/oidc-token-exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oidc-token-exchange.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/oidc-token-exchange.ts"],"names":[],"mappings":"AAEA,OAAO,EACH,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAE3E,MAAM,0CAA0C,GAAG,MAAM,CAAC;AAE1D,SAAS,oBAAoB,CAAC,KAAsB;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC;AAyBD,SAAS,iBAAiB,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACtC,OAAO,QAAQ,CAAC,IAAI,EAAsB,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,YAAuC;IAC5E,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;IAC3E,MAAM,KAAK,GAAG,IAAI,GAAG,EAA6B,CAAC;IAEnD,SAAS,WAAW,CAAC,WAAmB,EAAE,gBAA4C;QAClF,OAAO,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;IACvF,CAAC;IAED,SAAS,eAAe,CAAC,QAAgB;QACrC,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,4BAA4B,EAAE,CAAC;QACzD,IAAI,WAAW,CAAC,SAAS,GAAG,WAAW,GAAG,0CAA0C,EAAE,CAAC;YACnF,OAAO,WAAW,CAAC,KAAK,CAAC;QAC7B,CAAC;QACD,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,OAAe;QACnE,OAAO,mBAAmB,CACtB,GAAG,cAAc,wCAAwC,iBAAiB,CAAC,WAAW,CAAC,EAAE,EACzF;YACI,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE;SAC5B,CAC1B,CAAC;IACN,CAAC;IAED,SAAS,mBAAmB,CAAC,IAAa;QACtC,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,SAAS,CAAC,qDAAqD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,SAAS,CAAC,0DAA0D,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,UAAU,eAAe,CAC1B,WAAmB,EACnB,IAAwD;QAExD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,gBAAgB,GAAG,MAAM,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzE,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0CAA0C,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,mBAAmB,CAAC,MAAM,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,UAAU,aAAa,CACxB,WAAmB,EACnB,gBAA4C,EAC5C,IAAwD;QAExD,MAAM,QAAQ,GAAG,WAAW,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,MAAM,CAAC;QAClB,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC/B,OAAO,SAAS,CAAC,KAAK,CAAC;IAC3B,CAAC;IAED,OAAO;QACH,aAAa;QAEb,KAAK,CAAC,uBAAuB,CAAC,WAAW,EAAE,gBAAgB;YACvD,MAAM,IAAI,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC3B,OAAO,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC;YAC5D,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;YACvE,OAAO;gBACH,GAAG,iBAAiB,CAAC,gBAAgB,CAAC;gBACtC,SAAS,EAAE,EAAE,KAAK,EAAE;aACvB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/bundle-emitter/registry/package-metadata-fetcher.d.ts

@@ -0,0 +1,4 @@
+import type _npmFetch from 'npm-registry-fetch';
+import { Maybe } from 'true-myth';
+import type { RegistrySettings } from '../../config/registry-settings.ts';
+//# sourceMappingURL=package-metadata-fetcher.d.ts.map

package/bundle-emitter/registry/package-metadata-fetcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC"}