packtory 0.0.25 → 0.0.27

package/bundle-emitter/emitter.d.ts

@@ -1,11 +1,59 @@
 import { Maybe } from 'true-myth';
 import type { ArtifactsBuilder } from '../artifacts/artifacts-builder.ts';
-import type { PublishSettings } from '../config/publish-settings.ts';
-import type { RegistrySettings } from '../config/registry-settings.ts';
-import type { VersioningSettings } from '../config/versioning-settings.ts';
 import type { FileDescription } from '../file-manager/file-description.ts';
 import type { ArtifactPublishPackage } from '../published-package/published-package.ts';
-import { type PublishedReleaseArtifacts } from './fetch-published-artifacts.ts';
+import { fetchPublishedArtifacts } from './fetch-published-artifacts.ts';
 import type { RegistryClient } from './registry/registry-client.ts';
+type Second<TValues extends readonly unknown[]> = TValues extends readonly [
+    unknown,
+    infer TValue,
+    ...(readonly unknown[])
+] ? TValue : never;
+type Fourth<TValues extends readonly unknown[]> = TValues extends readonly [
+    unknown,
+    unknown,
+    unknown,
+    infer TValue,
+    ...(readonly unknown[])
+] ? TValue : never;
+type RegistryClientPublishArguments = Parameters<RegistryClient['publishPackage']>;
+type ExtraFiles = readonly FileDescription[];
+type PublicationOutcome = Awaited<ReturnType<RegistryClient['publishPackage']>>;
+type PublishSettings = Fourth<RegistryClientPublishArguments>;
+type RegistrySettings = Second<Parameters<RegistryClient['fetchLatestVersion']>>;
+type VersioningSettings = {
+    readonly automatic: false;
+    readonly version: string;
+} | {
+    readonly automatic: true;
+};
+type PreviousReleaseArtifacts = Awaited<ReturnType<typeof fetchPublishedArtifacts>>;
+type PublishOptions = {
+    readonly bundle: ArtifactPublishPackage;
+    readonly registrySettings: RegistrySettings;
+    readonly publishSettings: PublishSettings;
+    readonly stage: boolean;
+    readonly extraFiles?: ExtraFiles;
+};
+type AlreadyPublishedCheckOptions = {
+    readonly bundle: ArtifactPublishPackage;
+    readonly registrySettings: RegistrySettings;
+    readonly extraFiles?: ExtraFiles;
+};
+type CurrentVersionLookupOptions = {
+    readonly name: string;
+    readonly registrySettings: RegistrySettings;
+    readonly stage: boolean;
+    readonly versioning: VersioningSettings;
+};
+type BundlePublishedCheckResult = {
+    readonly alreadyPublishedAsLatest: boolean;
+    readonly previousReleaseArtifacts: PreviousReleaseArtifacts;
+};
+export type BundleEmitter = {
+    publish: (options: PublishOptions) => Promise<PublicationOutcome>;
+    determineCurrentVersion: (options: CurrentVersionLookupOptions) => Promise<Maybe<string>>;
+    checkBundleAlreadyPublished: (options: AlreadyPublishedCheckOptions) => Promise<BundlePublishedCheckResult>;
+};
 export {};
 //# sourceMappingURL=emitter.d.ts.map

package/bundle-emitter/emitter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AACzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B;AACpE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC;AACtE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC;AAE1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAC1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C;AAEvF,OAAO,EAA2B,KAAK,yBAAyB,EAAE,MAAM,gCAAgC;AACxG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B"}
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAEzE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAC1E,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,2CAA2C;AAEvF,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B;AAGnE,KAAK,MAAM,CAAC,OAAO,SAAS,SAAS,OAAO,EAAE,IAAI,OAAO,SAAS,SAAS;IACvE,OAAO;IACP,MAAM,MAAM;IACZ,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC;CAC1B,GACK,MAAM,GACN,KAAK;AACX,KAAK,MAAM,CAAC,OAAO,SAAS,SAAS,OAAO,EAAE,IAAI,OAAO,SAAS,SAAS;IACvE,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM,MAAM;IACZ,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC;CAC1B,GACK,MAAM,GACN,KAAK;AACX,KAAK,8BAA8B,GAAG,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC;AAClF,KAAK,UAAU,GAAG,SAAS,eAAe,EAAE;AAC5C,KAAK,kBAAkB,GAAG,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAC/E,KAAK,eAAe,GAAG,MAAM,CAAC,8BAA8B,CAAC;AAC7D,KAAK,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAChF,KAAK,kBAAkB,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAA;CAAE;AAChH,KAAK,wBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAQnF,KAAK,cAAc,GAAG;IAClB,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CACpC;AAED,KAAK,4BAA4B,GAAG;IAChC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;CACpC;AAED,KAAK,2BAA2B,GAAG;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CAC3C;AAED,KAAK,0BAA0B,GAAG;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC3C,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;CAC/D;AAED,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClE,uBAAuB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,2BAA2B,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC/G"}

package/bundle-emitter/emitter.js

@@ -1,14 +1,54 @@
-/* eslint-disable import/max-dependencies -- the publish/check flow legitimately depends on registry, artifacts, file-manager, and provenance helpers */
+import semver from 'semver';
 import { Maybe } from 'true-myth';
 import { compareFileDescriptions, fileDescriptionComparisonStatus } from "../file-manager/compare.js";
 import { canonicalizeSbomInFileSet } from "../sbom/sbom-canonicalizer.js";
 import { fetchPublishedArtifacts } from "./fetch-published-artifacts.js";
 import { assertRepositoryCoherence } from "./repository-coherence.js";
+const stageRegistryUnsupportedMessage = 'npm staged publishing is only supported with the npmjs.org registry';
+const stageFirstPublishUnsupportedMessage = 'npm staged publishing requires the package to already exist on the npm registry';
+const npmRegistryUrl = 'https://registry.npmjs.org/';
+function isNpmRegistry(registryUrl) {
+    return new URL(registryUrl ?? npmRegistryUrl).href === npmRegistryUrl;
+}
+function validateVersion(version) {
+    const normalized = semver.valid(version);
+    if (normalized === null) {
+        throw new Error(`Registry returned an invalid version "${version}" for staged publishing`);
+    }
+    return normalized;
+}
+function highestVersion(firstVersion, laterVersions) {
+    let highest = validateVersion(firstVersion);
+    for (const version of laterVersions) {
+        const candidate = validateVersion(version);
+        if (semver.gt(candidate, highest)) {
+            highest = candidate;
+        }
+    }
+    return highest;
+}
 export function createBundleEmitter(dependencies) {
     const { artifactsBuilder, registryClient, ciRepositoryUrl } = dependencies;
+    async function determineCurrentVersionForStageMode(name, registrySettings, versioning) {
+        if (!isNpmRegistry(registrySettings.registryUrl)) {
+            throw new Error(stageRegistryUnsupportedMessage);
+        }
+        const latestVersion = await registryClient.fetchLatestVersion(name, registrySettings);
+        if (latestVersion.isNothing) {
+            throw new Error(stageFirstPublishUnsupportedMessage);
+        }
+        if (!versioning.automatic) {
+            return Maybe.just(versioning.version);
+        }
+        const stagedVersions = await registryClient.fetchStagedVersions(name, registrySettings);
+        return Maybe.just(highestVersion(latestVersion.value.version, stagedVersions));
+    }
     return {
         async determineCurrentVersion(options) {
-            const { versioning, registrySettings, name } = options;
+            const { versioning, registrySettings, name, stage } = options;
+            if (stage) {
+                return determineCurrentVersionForStageMode(name, registrySettings, versioning);
+            }
             if (versioning.automatic) {
                 const latestVersion = await registryClient.fetchLatestVersion(name, registrySettings);
                 return latestVersion.map((version) => {
@@ -35,7 +75,7 @@ export function createBundleEmitter(dependencies) {
                 assertRepositoryCoherence(options.bundle.packageJson, ciRepositoryUrl);
             }
             const tarball = await artifactsBuilder.buildTarball(options.bundle, options.extraFiles);
-            await registryClient.publishPackage(options.bundle.packageJson, tarball.tarData, options.registrySettings, options.publishSettings);
+            return registryClient.publishPackage(options.bundle.packageJson, tarball.tarData, options.registrySettings, options.publishSettings, options.stage);
         }
     };
 }

package/bundle-emitter/emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,wJAAwJ;AACxJ,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAKlC,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAGtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAkC,MAAM,gCAAgC,CAAC;AAEzG,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAsCtE,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,YAAY,CAAC;IAE3E,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC9F,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1F,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzF,MAAM,UAAU,GAAG,uBAAuB,CACtC,yBAAyB,CAAC,gBAAgB,CAAC,EAC3C,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAClD,CAAC;YACF,OAAO;gBACH,wBAAwB,EAAE,UAAU,CAAC,MAAM,KAAK,+BAA+B,CAAC,KAAK;gBACrF,wBAAwB,EAAE,QAAQ;aACrC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAExF,MAAM,cAAc,CAAC,cAAc,CAC/B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,CAC1B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAGtG,OAAO,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAgEtE,MAAM,+BAA+B,GAAG,qEAAqE,CAAC;AAC9G,MAAM,mCAAmC,GACrC,iFAAiF,CAAC;AACtF,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD,SAAS,aAAa,CAAC,WAA+B;IAClD,OAAO,IAAI,GAAG,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;AAC1E,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,yBAAyB,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,aAAgC;IAC1E,IAAI,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAE5C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,SAAS,CAAC;QACxB,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,YAAY,CAAC;IAE3E,KAAK,UAAU,mCAAmC,CAC9C,IAAY,EACZ,gBAAkC,EAClC,UAA8B;QAE9B,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;YACxB,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAE9D,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,mCAAmC,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;YACnF,CAAC;YAED,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC9F,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1F,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzF,MAAM,UAAU,GAAG,uBAAuB,CACtC,yBAAyB,CAAC,gBAAgB,CAAC,EAC3C,yBAAyB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAClD,CAAC;YACF,OAAO;gBACH,wBAAwB,EAAE,UAAU,CAAC,MAAM,KAAK,+BAA+B,CAAC,KAAK;gBACrF,wBAAwB,EAAE,QAAQ;aACrC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAExF,OAAO,cAAc,CAAC,cAAc,CAChC,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,KAAK,CAChB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/bundle-emitter/fetch-published-artifacts.d.ts

@@ -7,4 +7,5 @@ export type PublishedReleaseArtifacts = {
     readonly version: string;
     readonly files: readonly FileDescription[];
 };
+export declare function fetchPublishedArtifacts(registryClient: RegistryClient, name: string, registrySettings: RegistrySettings): Promise<Maybe<PublishedReleaseArtifacts>>;
 //# sourceMappingURL=fetch-published-artifacts.d.ts.map

package/bundle-emitter/fetch-published-artifacts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-published-artifacts.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/fetch-published-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC;AACtE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC;AAE1E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B;AAEnE,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C"}
+{"version":3,"file":"fetch-published-artifacts.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/fetch-published-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;CAC9C,CAAC;AAEF,wBAAsB,uBAAuB,CACzC,cAAc,EAAE,cAAc,EAC9B,IAAI,EAAE,MAAM,EACZ,gBAAgB,EAAE,gBAAgB,GACnC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAY3C"}

package/bundle-emitter/publication-outcome.d.ts

@@ -0,0 +1,9 @@
+export type PublicationOutcome = {
+    readonly type: 'none';
+} | {
+    readonly type: 'published';
+} | {
+    readonly type: 'staged';
+    readonly stageId: string;
+};
+//# sourceMappingURL=publication-outcome.d.ts.map

package/bundle-emitter/publication-outcome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-outcome.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/publication-outcome.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,kBAAkB,GACxB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE"}

package/bundle-emitter/publication-outcome.js

@@ -0,0 +1,6 @@
+export const noPublication = { type: 'none' };
+export const publishedToRegistry = { type: 'published' };
+export function stagedForApproval(stageId) {
+    return { type: 'staged', stageId };
+}
+//# sourceMappingURL=publication-outcome.js.map

package/bundle-emitter/publication-outcome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication-outcome.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/publication-outcome.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,aAAa,GAAuB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAuB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAE7E,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC7C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC"}

package/bundle-emitter/registry/package-metadata-fetcher.d.ts

@@ -1,4 +1,13 @@
 import type _npmFetch from 'npm-registry-fetch';
 import { Maybe } from 'true-myth';
 import type { RegistrySettings } from '../../config/registry-settings.ts';
+export type PackageVersionDetails = {
+    readonly version: string;
+    readonly tarballUrl: string;
+};
+export type PackageReleaseMetadata = {
+    readonly publishedAt?: Date | undefined;
+    readonly tarballUrl: string;
+    readonly version: string;
+};
 //# sourceMappingURL=package-metadata-fetcher.d.ts.map

package/bundle-emitter/registry/package-metadata-fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC"}
+{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAezE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B"}

package/bundle-emitter/registry/package-metadata-fetcher.js

@@ -1,7 +1,7 @@
 import { Maybe } from 'true-myth';
 import { retryWithFallbackAuth } from "./metadata-auth-retry.js";
 import { toRegistryPackagePath } from "./registry-package-path.js";
-import { resolveMetadataAuthOptions } from "./registry-auth-config.js";
+import { resolveMetadataAuthOptions, resolveStageListingAuthOptions } from "./registry-auth-config.js";
 import { parseAbbreviatedPackageResponse, parseFullPackageResponse } from "./registry-response-schemas.js";
 const notFoundStatusCode = 404;
 const forbiddenStatusCode = 403;
@@ -20,6 +20,30 @@ function parseTimestamp(timestamp) {
     }
     return parsed;
 }
+function isNonNegativeInteger(value) {
+    if (!Number.isSafeInteger(value)) {
+        return false;
+    }
+    return Number(value) >= 0;
+}
+function parseStagedPackageListResponse(response) {
+    if (!isRecord(response)) {
+        throw new Error('Got an invalid response from registry stage API');
+    }
+    const { items, total } = response;
+    if (!Array.isArray(items) || !isNonNegativeInteger(total)) {
+        throw new Error('Got an invalid response from registry stage API');
+    }
+    return {
+        items: items.map((item) => {
+            if (!isRecord(item) || typeof item.version !== 'string') {
+                throw new Error('Got an invalid response from registry stage API');
+            }
+            return { version: item.version };
+        }),
+        total
+    };
+}
 const abbreviatedPackageMetadataRequest = {
     parsePackageResponse: parseAbbreviatedPackageResponse,
     headers: { accept: abbreviatedResponseAcceptHeader }
@@ -28,6 +52,7 @@ const fullPackageMetadataRequest = {
     parsePackageResponse: parseFullPackageResponse,
     headers: undefined
 };
+const stageListPageSize = 100;
 async function fetchAndParsePackageMetadata(npmFetch, packageName, registrySettings, request) {
     const auth = resolveMetadataAuthOptions(registrySettings);
     try {
@@ -84,6 +109,25 @@ export async function fetchLatestPackageReleaseMetadata(npmFetch, packageName, r
         publishedAt: publishedAtTimestamp === undefined ? undefined : parseTimestamp(publishedAtTimestamp)
     });
 }
+export async function fetchStagedPackageVersions(npmFetch, packageName, registrySettings) {
+    const auth = resolveStageListingAuthOptions(registrySettings);
+    async function fetchPage(page, versions) {
+        const searchParams = new URLSearchParams({
+            package: packageName,
+            page: String(page),
+            perPage: String(stageListPageSize)
+        });
+        const response = parseStagedPackageListResponse(await npmFetch.json(`/-/stage?${searchParams.toString()}`, auth.options));
+        const nextVersions = versions.concat(response.items.map((item) => {
+            return item.version;
+        }));
+        if (nextVersions.length >= response.total || response.items.length === 0) {
+            return nextVersions;
+        }
+        return fetchPage(page + 1, nextVersions);
+    }
+    return fetchPage(0, []);
+}
 export async function fetchPackageTarball(npmFetch, tarballUrl, registrySettings) {
     const auth = resolveMetadataAuthOptions(registrySettings);
     const response = await retryWithFallbackAuth(registrySettings, auth, async (options) => {

package/bundle-emitter/registry/package-metadata-fetcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-metadata-fetcher.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EAG3B,MAAM,gCAAgC,CAAC;AAExC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAa9E,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,mBAAmB,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,yBAAyB,SAAS,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAOD,MAAM,iCAAiC,GAAuD;IAC1F,oBAAoB,EAAE,+BAA+B;IACrD,OAAO,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE;CACvD,CAAC;AAEF,MAAM,0BAA0B,GAAgD;IAC5E,oBAAoB,EAAE,wBAAwB;IAC9C,OAAO,EAAE,SAAS;CACrB,CAAC;AAEF,KAAK,UAAU,4BAA4B,CACvC,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC,EAClC,OAAiD;IAEjD,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE;gBAC3D,GAAG,OAAO;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,OAAO,EAAoB,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAChC,eAA2C,EAC3C,WAAmB;IAEnB,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACX,YAAY,aAAa,kBAAkB,WAAW,yCAAyC,CAClG,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,iCAAiC,CACpC,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,0BAA0B,CAC7B,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,oBAAoB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvF,OAAO,KAAK,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;QAC1C,WAAW,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC;KACrG,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAA0B,EAC1B,UAAkB,EAClB,gBAAkC;IAElC,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,OAAO,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"package-metadata-fetcher.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EAG3B,MAAM,gCAAgC,CAAC;AAExC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAa9E,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,mBAAmB,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,yBAAyB,SAAS,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAiB;IACrD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC,CAAC;QACF,KAAK;KACR,CAAC;AACN,CAAC;AAOD,MAAM,iCAAiC,GAAuD;IAC1F,oBAAoB,EAAE,+BAA+B;IACrD,OAAO,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE;CACvD,CAAC;AAEF,MAAM,0BAA0B,GAAgD;IAC5E,oBAAoB,EAAE,wBAAwB;IAC9C,OAAO,EAAE,SAAS;CACrB,CAAC;AAWF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,KAAK,UAAU,4BAA4B,CACvC,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC,EAClC,OAAiD;IAEjD,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE;gBAC3D,GAAG,OAAO;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,OAAO,EAAoB,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAChC,eAA2C,EAC3C,WAAmB;IAEnB,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACX,YAAY,aAAa,kBAAkB,WAAW,yCAAyC,CAClG,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,iCAAiC,CACpC,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,0BAA0B,CAC7B,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,oBAAoB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvF,OAAO,KAAK,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;QAC1C,WAAW,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC;KACrG,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,IAAI,GAAG,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAE9D,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,QAA2B;QAC9D,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACrC,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,8BAA8B,CAC3C,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAC3E,CAAC;QACF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAChC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,IAAI,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,YAAY,CAAC;QACxB,CAAC;QAED,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAA0B,EAC1B,UAAkB,EAClB,gBAAkC;IAElC,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,OAAO,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC"}

package/bundle-emitter/registry/registry-auth-config.js

@@ -5,7 +5,11 @@ export function resolveRegistryUrl(registrySettings) {
 export function isNpmRegistry(registry) {
     return new URL(registry ?? npmRegistryUrl).href === npmRegistryUrl;
 }
+const publishAuthRequiredErrorMessage = 'registrySettings.auth must be configured to publish; this code path should be unreachable when auth is missing.';
 export function resolvePublishAuth(registrySettings) {
+    if (registrySettings.auth === undefined) {
+        throw new Error(publishAuthRequiredErrorMessage);
+    }
     return 'type' in registrySettings.auth ? registrySettings.auth : registrySettings.auth.publish;
 }
 export function createBaseOptions(registrySettings) {
@@ -59,11 +63,7 @@ function resolveInheritedMetadataAuth(publishAuth, registrySettings) {
         ? createAnonymousAuthResolution(registrySettings)
         : buildAuthOptions(publishAuth, registrySettings);
 }
-export function resolveMetadataAuthOptions(registrySettings) {
-    if ('type' in registrySettings.auth) {
-        return resolveInheritedMetadataAuth(registrySettings.auth, registrySettings);
-    }
-    const metadataMode = registrySettings.auth.metadata;
+function resolveMetadataAuthFromMode(metadataMode, publishAuth, registrySettings) {
     if (metadataMode === 'auto') {
         return createAutomaticRetryAuthResolution(registrySettings);
     }
@@ -73,6 +73,31 @@ export function resolveMetadataAuthOptions(registrySettings) {
     if (typeof metadataMode === 'object') {
         return buildAuthOptions(metadataMode, registrySettings);
     }
-    return resolveInheritedMetadataAuth(registrySettings.auth.publish, registrySettings);
+    return resolveInheritedMetadataAuth(publishAuth, registrySettings);
+}
+export function resolveMetadataAuthOptions(registrySettings) {
+    if (registrySettings.auth === undefined) {
+        return createAnonymousAuthResolution(registrySettings);
+    }
+    if ('type' in registrySettings.auth) {
+        return resolveInheritedMetadataAuth(registrySettings.auth, registrySettings);
+    }
+    return resolveMetadataAuthFromMode(registrySettings.auth.metadata, registrySettings.auth.publish, registrySettings);
+}
+const stagedVersionLookupRequiresTokenAuthMessage = 'npm staged publishing with automatic versioning requires token-based metadata auth ' +
+    'when publish auth uses npm-oidc';
+export function resolveStageListingAuthOptions(registrySettings) {
+    const { auth } = registrySettings;
+    if (auth === undefined) {
+        throw new Error(publishAuthRequiredErrorMessage);
+    }
+    const publishAuth = 'type' in auth ? auth : auth.publish;
+    if (!('type' in auth) && typeof auth.metadata === 'object') {
+        return buildAuthOptions(auth.metadata, registrySettings);
+    }
+    if (publishAuth.type === 'npm-oidc') {
+        throw new Error(stagedVersionLookupRequiresTokenAuthMessage);
+    }
+    return buildAuthOptions(publishAuth, registrySettings);
 }
 //# sourceMappingURL=registry-auth-config.js.map

package/bundle-emitter/registry/registry-auth-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry-auth-config.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-auth-config.ts"],"names":[],"mappings":"AAGA,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAU5D,MAAM,UAAU,kBAAkB,CAAC,gBAA4C;IAC3E,OAAO,gBAAgB,CAAC,WAAW,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAA4B;IACtD,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,gBAA4C;IAC3E,OAAO,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,gBAA4C;IAC1E,OAAO;QACH,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;KACjD,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC5B,IAA0B,EAC1B,gBAA4C;IAE5C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC/B,OAAO;YACH,oBAAoB,EAAE,KAAK;YAC3B,QAAQ;YACR,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,SAAS,EAAE;oBACP,KAAK,EAAE,IAAI,CAAC,KAAK;iBACpB;aACJ;SACJ,CAAC;IACN,CAAC;IAED,OAAO;QACH,oBAAoB,EAAE,KAAK;QAC3B,QAAQ;QACR,OAAO,EAAE;YACL,GAAG,OAAO;YACV,SAAS,EAAE;gBACP,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC7E;YACD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACpE;KACJ,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,gBAA4C;IAC/E,OAAO;QACH,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;QAC9C,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,CAAC;KAC/C,CAAC;AACN,CAAC;AAED,SAAS,kCAAkC,CAAC,gBAA4C;IACpF,OAAO;QACH,GAAG,6BAA6B,CAAC,gBAAgB,CAAC;QAClD,oBAAoB,EAAE,IAAI;KAC7B,CAAC;AACN,CAAC;AAED,SAAS,4BAA4B,CACjC,WAAgC,EAChC,gBAA4C;IAE5C,OAAO,WAAW,CAAC,IAAI,KAAK,UAAU;QAClC,CAAC,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;QACjD,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,gBAA4C;IACnF,IAAI,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,4BAA4B,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACjF,CAAC;IAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;IACpD,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,kCAAkC,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,gBAAgB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO,4BAA4B,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AACzF,CAAC"}
+{"version":3,"file":"registry-auth-config.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-auth-config.ts"],"names":[],"mappings":"AAQA,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAU5D,MAAM,UAAU,kBAAkB,CAAC,gBAA4C;IAC3E,OAAO,gBAAgB,CAAC,WAAW,CAAC;AACxC,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAA4B;IACtD,OAAO,IAAI,GAAG,CAAC,QAAQ,IAAI,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC;AACvE,CAAC;AAED,MAAM,+BAA+B,GACjC,iHAAiH,CAAC;AAEtH,MAAM,UAAU,kBAAkB,CAAC,gBAA4C;IAC3E,IAAI,gBAAgB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,gBAA4C;IAC1E,OAAO;QACH,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;KACjD,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC5B,IAA0B,EAC1B,gBAA4C;IAE5C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAEpD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;QAC/B,OAAO;YACH,oBAAoB,EAAE,KAAK;YAC3B,QAAQ;YACR,OAAO,EAAE;gBACL,GAAG,OAAO;gBACV,SAAS,EAAE;oBACP,KAAK,EAAE,IAAI,CAAC,KAAK;iBACpB;aACJ;SACJ,CAAC;IACN,CAAC;IAED,OAAO;QACH,oBAAoB,EAAE,KAAK;QAC3B,QAAQ;QACR,OAAO,EAAE;YACL,GAAG,OAAO;YACV,SAAS,EAAE;gBACP,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAC7E;YACD,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;SACpE;KACJ,CAAC;AACN,CAAC;AAED,SAAS,6BAA6B,CAAC,gBAA4C;IAC/E,OAAO;QACH,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;QAC9C,OAAO,EAAE,iBAAiB,CAAC,gBAAgB,CAAC;KAC/C,CAAC;AACN,CAAC;AAED,SAAS,kCAAkC,CAAC,gBAA4C;IACpF,OAAO;QACH,GAAG,6BAA6B,CAAC,gBAAgB,CAAC;QAClD,oBAAoB,EAAE,IAAI;KAC7B,CAAC;AACN,CAAC;AAED,SAAS,4BAA4B,CACjC,WAAgC,EAChC,gBAA4C;IAE5C,OAAO,WAAW,CAAC,IAAI,KAAK,UAAU;QAClC,CAAC,CAAC,6BAA6B,CAAC,gBAAgB,CAAC;QACjD,CAAC,CAAC,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,2BAA2B,CAChC,YAA0C,EAC1C,WAAgC,EAChC,gBAA4C;IAE5C,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,kCAAkC,CAAC,gBAAgB,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,YAAY,KAAK,WAAW,EAAE,CAAC;QAC/B,OAAO,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,OAAO,gBAAgB,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,4BAA4B,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,gBAA4C;IACnF,IAAI,gBAAgB,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,6BAA6B,CAAC,gBAAgB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAClC,OAAO,4BAA4B,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,2BAA2B,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AACxH,CAAC;AAED,MAAM,2CAA2C,GAC7C,qFAAqF;IACrF,iCAAiC,CAAC;AAEtC,MAAM,UAAU,8BAA8B,CAAC,gBAA4C;IACvF,MAAM,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;IAEzD,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzD,OAAO,gBAAgB,CAAC,IAAI,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAC3D,CAAC"}

package/bundle-emitter/registry/registry-client.d.ts

@@ -1,10 +1,27 @@
 import type _npmFetch from 'npm-registry-fetch';
-import type { publish as _publish } from 'libnpmpublish';
 import type { Maybe } from 'true-myth';
 import type { Clock } from '../../common/clock.ts';
 import type { PublishSettings } from '../../config/publish-settings.ts';
 import type { NpmOidcPublishAuth, RegistrySettings } from '../../config/registry-settings.ts';
-import type { PublishedPackageJson } from '../../published-package/published-package.ts';
+import { type PublicationOutcome } from '../publication-outcome.ts';
 import { type PackageReleaseMetadata, type PackageVersionDetails } from './package-metadata-fetcher.ts';
+type PublishManifest = {
+    readonly name: string;
+    readonly version: string;
+};
+type PublishPackageArguments = readonly [
+    manifest: PublishManifest,
+    tarData: Buffer,
+    config: RegistrySettings,
+    publishSettings: PublishSettings,
+    stage: boolean
+];
+export type RegistryClient = {
+    fetchLatestReleaseMetadata: (packageName: string, config: RegistrySettings) => Promise<Maybe<PackageReleaseMetadata>>;
+    fetchLatestVersion: (packageName: string, config: RegistrySettings) => Promise<Maybe<PackageVersionDetails>>;
+    fetchStagedVersions: (packageName: string, config: RegistrySettings) => Promise<readonly string[]>;
+    publishPackage: (...args: PublishPackageArguments) => Promise<PublicationOutcome>;
+    fetchTarball: (tarballUrl: string, config: RegistrySettings) => Promise<Buffer>;
+};
 export {};
 //# sourceMappingURL=registry-client.d.ts.map

package/bundle-emitter/registry/registry-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,KAAK,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe;AACxD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW;AACtC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAC7F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,8CAA8C;AAExF,OAAO,EAIH,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC7B,MAAM,+BAA+B"}
+{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,WAAW;AACtC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,uBAAuB;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kCAAkC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAC7F,OAAO,EAA0C,KAAK,kBAAkB,EAAE,MAAM,2BAA2B;AAE3G,OAAO,EAKH,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC7B,MAAM,+BAA+B;AAGtC,KAAK,eAAe,GAAG;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B;AAQD,KAAK,uBAAuB,GAAG,SAAS;IACpC,QAAQ,EAAE,eAAe;IACzB,OAAO,EAAE,MAAM;IACf,MAAM,EAAE,gBAAgB;IACxB,eAAe,EAAE,eAAe;IAChC,KAAK,EAAE,OAAO;CACjB;AAWD,MAAM,MAAM,cAAc,GAAG;IACzB,0BAA0B,EAAE,CACxB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,gBAAgB,KACvB,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;IAC5C,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7G,mBAAmB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IACnG,cAAc,EAAE,CAAC,GAAG,IAAI,EAAE,uBAAuB,KAAK,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClF,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF"}

package/bundle-emitter/registry/registry-client.js

@@ -1,9 +1,19 @@
+import { publishedToRegistry, stagedForApproval } from "../publication-outcome.js";
 import { createOidcTokenExchanger } from "./oidc-token-exchange.js";
-import { fetchLatestPackageReleaseMetadata, fetchLatestPackageVersion, fetchPackageTarball } from "./package-metadata-fetcher.js";
+import { fetchLatestPackageReleaseMetadata, fetchPackageTarball, fetchLatestPackageVersion, fetchStagedPackageVersions } from "./package-metadata-fetcher.js";
 import { buildPublishOptionsForPublishSettings, remapPublishError } from "./publish-settings-bridge.js";
-function toPublishManifest(manifest) {
-    // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- libnpmpublish expects @npm/types PackageJson, which is structurally compatible with our validated manifest
-    return manifest;
+function hasStageId(response) {
+    return (typeof response === 'object' &&
+        response !== null &&
+        'stageId' in response &&
+        typeof response.stageId === 'string' &&
+        response.stageId.length > 0);
+}
+function readStageId(response) {
+    if (!hasStageId(response)) {
+        throw new Error('npm staged publish succeeded without returning a stage ID');
+    }
+    return response.stageId;
 }
 export function createRegistryClient(dependencies) {
     const { npmFetch, publish, fetch: fetchImplementation, clock, promptForOneTimePassword, resolveIdToken } = dependencies;
@@ -12,23 +22,25 @@ export function createRegistryClient(dependencies) {
         async fetchTarball(tarballUrl, registrySettings) {
             return fetchPackageTarball(npmFetch, tarballUrl, registrySettings);
         },
-        async publishPackage(manifest, tarData, registrySettings, publishSettings) {
+        async publishPackage(...[manifest, tarData, registrySettings, publishSettings, stage]) {
             const authOptions = await oidcExchanger.resolveWriteAuthOptions(manifest.name, registrySettings);
             const publishOptionsFromSettings = buildPublishOptionsForPublishSettings(publishSettings);
             const publishOptions = {
                 defaultTag: 'latest',
                 ...authOptions,
-                ...publishOptionsFromSettings
+                ...publishOptionsFromSettings,
+                ...(stage ? { stage: true } : {})
             };
             const publishOptionsWithOneTimePassword = {
                 ...publishOptions,
                 otpPrompt: promptForOneTimePassword
             };
             const publishPromise = promptForOneTimePassword === undefined
-                ? publish(toPublishManifest(manifest), tarData, publishOptions)
-                : publish(toPublishManifest(manifest), tarData, publishOptionsWithOneTimePassword);
+                ? publish(manifest, tarData, publishOptions)
+                : publish(manifest, tarData, publishOptionsWithOneTimePassword);
             try {
-                await publishPromise;
+                const response = await publishPromise;
+                return stage ? stagedForApproval(readStageId(response)) : publishedToRegistry;
             }
             catch (error) {
                 throw remapPublishError(error, publishSettings);
@@ -37,6 +49,9 @@ export function createRegistryClient(dependencies) {
         async fetchLatestVersion(packageName, registrySettings) {
             return fetchLatestPackageVersion(npmFetch, packageName, registrySettings);
         },
+        async fetchStagedVersions(packageName, registrySettings) {
+            return fetchStagedPackageVersions(npmFetch, packageName, registrySettings);
+        },
         async fetchLatestReleaseMetadata(packageName, registrySettings) {
             return fetchLatestPackageReleaseMetadata(npmFetch, packageName, registrySettings);
         }

package/bundle-emitter/registry/registry-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-client.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACH,iCAAiC,EACjC,yBAAyB,EACzB,mBAAmB,EAGtB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qCAAqC,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AA6BxG,SAAS,iBAAiB,CAAC,QAAwC;IAC/D,qLAAqL;IACrL,OAAO,QAAsC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAkD;IACnF,MAAM,EACF,QAAQ,EACR,OAAO,EACP,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EACL,wBAAwB,EACxB,cAAc,EACjB,GAAG,YAAY,CAAC;IACjB,MAAM,aAAa,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtG,OAAO;QACH,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,gBAAgB;YAC3C,OAAO,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe;YACrE,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACjG,MAAM,0BAA0B,GAAG,qCAAqC,CAAC,eAAe,CAAC,CAAC;YAC1F,MAAM,cAAc,GAAG;gBACnB,UAAU,EAAE,QAAQ;gBACpB,GAAG,WAAW;gBACd,GAAG,0BAA0B;aAChC,CAAC;YACF,MAAM,iCAAiC,GAAG;gBACtC,GAAG,cAAc;gBACjB,SAAS,EAAE,wBAAwB;aACtC,CAAC;YACF,MAAM,cAAc,GAChB,wBAAwB,KAAK,SAAS;gBAClC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC;gBAC/D,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC;YAE3F,IAAI,CAAC;gBACD,MAAM,cAAc,CAAC;YACzB,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACtB,MAAM,iBAAiB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACpD,CAAC;QACL,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,gBAAgB;YAClD,OAAO,yBAAyB,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,0BAA0B,CAAC,WAAW,EAAE,gBAAgB;YAC1D,OAAO,iCAAiC,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACtF,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"registry-client.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-client.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAA2B,MAAM,2BAA2B,CAAC;AAC5G,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EACH,iCAAiC,EACjC,mBAAmB,EACnB,yBAAyB,EACzB,0BAA0B,EAG7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,qCAAqC,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAyCxG,SAAS,UAAU,CAAC,QAAiB;IACjC,OAAO,CACH,OAAO,QAAQ,KAAK,QAAQ;QAC5B,QAAQ,KAAK,IAAI;QACjB,SAAS,IAAI,QAAQ;QACrB,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;QACpC,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAC9B,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,QAAiB;IAClC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,YAAkD;IACnF,MAAM,EACF,QAAQ,EACR,OAAO,EACP,KAAK,EAAE,mBAAmB,EAC1B,KAAK,EACL,wBAAwB,EACxB,cAAc,EACjB,GAAG,YAAY,CAAC;IACjB,MAAM,aAAa,GAAG,wBAAwB,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAEtG,OAAO;QACH,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,gBAAgB;YAC3C,OAAO,mBAAmB,CAAC,QAAQ,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,KAAK,CAAC;YACjF,MAAM,WAAW,GAAG,MAAM,aAAa,CAAC,uBAAuB,CAAC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YACjG,MAAM,0BAA0B,GAAG,qCAAqC,CAAC,eAAe,CAAC,CAAC;YAC1F,MAAM,cAAc,GAA6B;gBAC7C,UAAU,EAAE,QAAQ;gBACpB,GAAG,WAAW;gBACd,GAAG,0BAA0B;gBAC7B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC;YACF,MAAM,iCAAiC,GAAsC;gBACzE,GAAG,cAAc;gBACjB,SAAS,EAAE,wBAAwB;aACtC,CAAC;YACF,MAAM,cAAc,GAChB,wBAAwB,KAAK,SAAS;gBAClC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC;gBAC5C,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,iCAAiC,CAAC,CAAC;YAExE,IAAI,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC;gBACtC,OAAO,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAClF,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACtB,MAAM,iBAAiB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;YACpD,CAAC;QACL,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,gBAAgB;YAClD,OAAO,yBAAyB,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC9E,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,WAAW,EAAE,gBAAgB;YACnD,OAAO,0BAA0B,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/E,CAAC;QAED,KAAK,CAAC,0BAA0B,CAAC,WAAW,EAAE,gBAAgB;YAC1D,OAAO,iCAAiC,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;QACtF,CAAC;KACJ,CAAC;AACN,CAAC"}

package/checks/check-runner.js

@@ -1,7 +1,8 @@
 import { allRules } from "./rules/registry.js";
-export function runChecks(params) {
-    return allRules.flatMap((rule) => {
-        return rule.run(params);
-    });
+export async function runChecks(params) {
+    const issues = await Promise.all(allRules.map(async (rule) => {
+        return await rule.run(params);
+    }));
+    return issues.flat();
 }
 //# sourceMappingURL=check-runner.js.map

package/checks/check-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-runner.js","sourceRoot":"","sources":["../../../../source/checks/check-runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAS/C,MAAM,UAAU,SAAS,CAAC,MAAyB;IAC/C,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACP,CAAC"}
+{"version":3,"file":"check-runner.js","sourceRoot":"","sources":["../../../../source/checks/check-runner.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAU/C,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAyB;IACrD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAC5B,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACxB,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC,CAAC,CACL,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC"}

package/checks/rule.js.map

@@ -1 +1 @@
-{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../../../source/checks/rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAoB,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAGrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAExD,MAAM,kBAAkB,GAAG;IACvB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,kBAAkB;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC"}
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../../../source/checks/rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAoB,MAAM,UAAU,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAIrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAExD,MAAM,kBAAkB,GAAG;IACvB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;CACnE,CAAC;AAEF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,GAAG,kBAAkB;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC,kBAAkB,CAAC,CAAC"}