packtory 0.0.46 → 0.0.48

package/artifacts/folder-writer.js

@@ -1,4 +1,5 @@
 import path from 'node:path';
+import { validateVendorEntrySource } from "../vendor-materializer/vendor-entry.js";
 async function writeFileDescriptions(fileManager, targetFolder, contents) {
     for (const entry of contents) {
         const targetFilePath = path.join(targetFolder, entry.filePath);
@@ -9,6 +10,7 @@ async function writeFileDescriptions(fileManager, targetFolder, contents) {
 async function copyVendorEntries(fileManager, targetFolder, vendorEntries) {
     for (const vendorEntry of vendorEntries) {
         const targetFilePath = path.join(targetFolder, vendorEntry.targetRelativePath);
+        await validateVendorEntrySource(fileManager, vendorEntry);
         await fileManager.copyFileBytes(vendorEntry.sourceAbsolutePath, targetFilePath);
         await fileManager.setExecutable(targetFilePath, vendorEntry.isExecutable);
     }

package/artifacts/folder-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"folder-writer.js","sourceRoot":"","sources":["../../../../source/artifacts/folder-writer.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,KAAK,UAAU,qBAAqB,CAChC,WAAwB,EACxB,YAAoB,EACpB,QAAoC;IAEpC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,WAAwB,EACxB,YAAoB,EACpB,aAAqC;IAErC,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,WAAwB,EACxB,YAAoB,EACpB,QAAoC,EACpC,gBAAwC,EAAE;IAE1C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,qBAAqB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC"}
+{"version":3,"file":"folder-writer.js","sourceRoot":"","sources":["../../../../source/artifacts/folder-writer.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,yBAAyB,EAAoB,MAAM,wCAAwC,CAAC;AAErG,KAAK,UAAU,qBAAqB,CAChC,WAAwB,EACxB,YAAoB,EACpB,QAAoC;IAEpC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,WAAwB,EACxB,YAAoB,EACpB,aAAqC;IAErC,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,WAAwB,EACxB,YAAoB,EACpB,QAAoC,EACpC,gBAAwC,EAAE;IAE1C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,qBAAqB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC"}

package/bundle-emitter/registry/package-metadata-fetcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAgBzE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC"}
+{"version":3,"file":"package-metadata-fetcher.d.ts","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC;AAiBzE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC"}

package/bundle-emitter/registry/package-metadata-fetcher.js

@@ -3,13 +3,22 @@ import { retryWithFallbackAuth } from "./metadata-auth-retry.js";
 import { toRegistryPackagePath } from "./registry-package-path.js";
 import { resolveMetadataAuthOptions, resolveStageListingAuthOptions } from "./registry-auth-config.js";
 import { parseAbbreviatedPackageResponse, parseFullPackageResponse } from "./registry-response-schemas.js";
-import { assertTarballHostMatchesRegistry } from "./validate-tarball-host.js";
+import { assertTarballOriginMatchesRegistry } from "./validate-tarball-host.js";
 const notFoundStatusCode = 404;
 const forbiddenStatusCode = 403;
 const abbreviatedResponseAcceptHeader = 'application/vnd.npm.install-v1+json';
+const maxDownloadedTarballBytes = 268_435_456;
 function isRecord(value) {
     return value instanceof Object;
 }
+function assertDownloadedTarballSize(size) {
+    if (size > maxDownloadedTarballBytes) {
+        throw new Error(`Refusing to download tarball larger than ${maxDownloadedTarballBytes} bytes`);
+    }
+}
+function assertContentLengthWithinDownloadLimit(response) {
+    assertDownloadedTarballSize(Number(response.headers?.get('content-length')));
+}
 function isMissingPackageError(error) {
     const statusCode = isRecord(error) ? error.statusCode : undefined;
     return statusCode === notFoundStatusCode || statusCode === forbiddenStatusCode;
@@ -131,11 +140,14 @@ export async function fetchStagedPackageVersions(npmFetch, packageName, registry
     return fetchPage(0, []);
 }
 export async function fetchPackageTarball(npmFetch, tarballUrl, registrySettings) {
-    assertTarballHostMatchesRegistry(tarballUrl, registrySettings);
+    assertTarballOriginMatchesRegistry(tarballUrl, registrySettings);
     const auth = resolveMetadataAuthOptions(registrySettings);
     const response = await retryWithFallbackAuth(registrySettings, auth, async (options) => {
         return npmFetch(tarballUrl, options);
     });
-    return response.buffer();
+    assertContentLengthWithinDownloadLimit(response);
+    const tarball = await response.buffer();
+    assertDownloadedTarballSize(tarball.length);
+    return tarball;
 }
 //# sourceMappingURL=package-metadata-fetcher.js.map

package/bundle-emitter/registry/package-metadata-fetcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-metadata-fetcher.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EAG3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,gCAAgC,EAAE,MAAM,4BAA4B,CAAC;AAE9E,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAe9E,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,mBAAmB,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,yBAAyB,SAAS,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAiB;IACrD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC,CAAC;QACF,KAAK;KACR,CAAC;AACN,CAAC;AAOD,MAAM,iCAAiC,GAAuD;IAC1F,oBAAoB,EAAE,+BAA+B;IACrD,OAAO,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE;CACvD,CAAC;AAEF,MAAM,0BAA0B,GAAgD;IAC5E,oBAAoB,EAAE,wBAAwB;IAC9C,OAAO,EAAE,SAAS;CACrB,CAAC;AAWF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,KAAK,UAAU,4BAA4B,CACvC,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC,EAClC,OAAiD;IAEjD,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE;gBAC3D,GAAG,OAAO;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,OAAO,EAAoB,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAChC,eAA2C,EAC3C,WAAmB;IAEnB,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACX,YAAY,aAAa,kBAAkB,WAAW,yCAAyC,CAClG,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,iCAAiC,CACpC,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,0BAA0B,CAC7B,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,oBAAoB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvF,OAAO,KAAK,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;QAC1C,WAAW,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC;QAClG,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;KACvC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,IAAI,GAAG,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAE9D,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,QAA2B;QAC9D,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACrC,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,8BAA8B,CAC3C,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAC3E,CAAC;QACF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAChC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,IAAI,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,YAAY,CAAC;QACxB,CAAC;QAED,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAA0B,EAC1B,UAAkB,EAClB,gBAAkC;IAElC,gCAAgC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,OAAO,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;AAC7B,CAAC"}
+{"version":3,"file":"package-metadata-fetcher.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/package-metadata-fetcher.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAE,MAAM,2BAA2B,CAAC;AACvG,OAAO,EACH,+BAA+B,EAC/B,wBAAwB,EAG3B,MAAM,gCAAgC,CAAC;AACxC,OAAO,EAAE,kCAAkC,EAAE,MAAM,4BAA4B,CAAC;AAEhF,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAC9E,MAAM,yBAAyB,GAAG,WAAW,CAAC;AAe9C,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAOD,SAAS,2BAA2B,CAAC,IAAY;IAC7C,IAAI,IAAI,GAAG,yBAAyB,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,yBAAyB,QAAQ,CAAC,CAAC;IACnG,CAAC;AACL,CAAC;AAED,SAAS,sCAAsC,CAAC,QAAkC;IAC9E,2BAA2B,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAClE,OAAO,UAAU,KAAK,kBAAkB,IAAI,UAAU,KAAK,mBAAmB,CAAC;AACnF,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;IAEnC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,yBAAyB,SAAS,4BAA4B,CAAC,CAAC;IACxF,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IACxC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAiB;IACrD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO;QACH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACtB,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QACrC,CAAC,CAAC;QACF,KAAK;KACR,CAAC;AACN,CAAC;AAOD,MAAM,iCAAiC,GAAuD;IAC1F,oBAAoB,EAAE,+BAA+B;IACrD,OAAO,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE;CACvD,CAAC;AAEF,MAAM,0BAA0B,GAAgD;IAC5E,oBAAoB,EAAE,wBAAwB;IAC9C,OAAO,EAAE,SAAS;CACrB,CAAC;AAWF,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,KAAK,UAAU,4BAA4B,CACvC,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC,EAClC,OAAiD;IAEjD,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YACnF,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,qBAAqB,CAAC,WAAW,CAAC,EAAE,EAAE;gBAC3D,GAAG,OAAO;gBACV,OAAO,EAAE,OAAO,CAAC,OAAO;aAC3B,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/B,OAAO,KAAK,CAAC,OAAO,EAAoB,CAAC;QAC7C,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAChC,eAA2C,EAC3C,WAAmB;IAEnB,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5D,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACX,YAAY,aAAa,kBAAkB,WAAW,yCAAyC,CAClG,CAAC;IACN,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,iCAAiC,CACpC,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,eAAe,GAAG,MAAM,4BAA4B,CACtD,QAAQ,EACR,WAAW,EACX,gBAAgB,EAChB,0BAA0B,CAC7B,CAAC;IACF,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,2BAA2B,CAAC,eAAe,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,oBAAoB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEvF,OAAO,KAAK,CAAC,IAAI,CAAC;QACd,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;QACpC,UAAU,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU;QAC1C,WAAW,EAAE,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,oBAAoB,CAAC;QAClG,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;KACvC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC5C,QAA0B,EAC1B,WAAmB,EACnB,gBAAkC;IAElC,MAAM,IAAI,GAAG,8BAA8B,CAAC,gBAAgB,CAAC,CAAC;IAE9D,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,QAA2B;QAC9D,MAAM,YAAY,GAAG,IAAI,eAAe,CAAC;YACrC,OAAO,EAAE,WAAW;YACpB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,MAAM,CAAC,iBAAiB,CAAC;SACrC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,8BAA8B,CAC3C,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAC3E,CAAC;QACF,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAChC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACxB,OAAO,IAAI,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,CACL,CAAC;QAEF,IAAI,YAAY,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvE,OAAO,YAAY,CAAC;QACxB,CAAC;QAED,OAAO,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACrC,QAA0B,EAC1B,UAAkB,EAClB,gBAAkC;IAElC,kCAAkC,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,0BAA0B,CAAC,gBAAgB,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnF,OAAO,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxC,2BAA2B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,OAAO,CAAC;AACnB,CAAC"}

package/bundle-emitter/registry/registry-response-schemas.js

@@ -1,5 +1,5 @@
-import { safeParse } from '@schema-hub/zod-error-formatter';
 import { z } from 'zod/mini';
+import { safeParse } from "../../common/schema-validation.js";
 const packageVersionDetailsSchema = z.object({
     dist: z.object({
         tarball: z.string()

package/bundle-emitter/registry/registry-response-schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry-response-schemas.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-response-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAC5D,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAE7B,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC3B,CAAC,CAAC;AAgCH,MAAM,UAAU,+BAA+B,CAAC,QAAiB;IAC7D,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAiB;IACtD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAiB;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAA4B,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"registry-response-schemas.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/registry-response-schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAE9D,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACX,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACtB,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACjC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,2BAA2B,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC3B,CAAC,CAAC;AAgCH,MAAM,UAAU,+BAA+B,CAAC,QAAiB;IAC7D,MAAM,MAAM,GAAG,gCAAgC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,QAAiB;IACtD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,QAAiB;IACvD,MAAM,MAAM,GAAG,SAAS,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAA4B,EAAE,CAAC;IACxE,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;AAC3D,CAAC"}

package/bundle-emitter/registry/validate-tarball-host.js

@@ -1,25 +1,25 @@
 import { npmRegistryUrl } from "./registry-auth-config.js";
-function resolveConfiguredHost(registrySettings) {
-    return new URL(registrySettings.registryUrl ?? npmRegistryUrl).host;
+function resolveConfiguredOrigin(registrySettings) {
+    return new URL(registrySettings.registryUrl ?? npmRegistryUrl).origin;
 }
-function parseTarballHost(tarballUrl) {
+function parseTarballOrigin(tarballUrl) {
     try {
-        return new URL(tarballUrl).host;
+        return new URL(tarballUrl).origin;
     }
     catch {
         throw new TypeError(`Registry returned an invalid tarball URL: "${tarballUrl}"`);
     }
 }
-function buildMismatchMessage(tarballHost, configuredHost) {
-    return (`Refusing to download tarball from "${tarballHost}" because it differs from the configured registry host ` +
-        `"${configuredHost}". A tampered registry response could redirect the request and exfiltrate ` +
+function buildMismatchMessage(tarballOrigin, configuredOrigin) {
+    return (`Refusing to download tarball from "${tarballOrigin}" because it differs from the configured registry origin ` +
+        `"${configuredOrigin}". A tampered registry response could redirect the request and exfiltrate ` +
         'publish credentials.');
 }
-export function assertTarballHostMatchesRegistry(tarballUrl, registrySettings) {
-    const tarballHost = parseTarballHost(tarballUrl);
-    const configuredHost = resolveConfiguredHost(registrySettings);
-    if (tarballHost !== configuredHost) {
-        throw new Error(buildMismatchMessage(tarballHost, configuredHost));
+export function assertTarballOriginMatchesRegistry(tarballUrl, registrySettings) {
+    const tarballOrigin = parseTarballOrigin(tarballUrl);
+    const configuredOrigin = resolveConfiguredOrigin(registrySettings);
+    if (tarballOrigin !== configuredOrigin) {
+        throw new Error(buildMismatchMessage(tarballOrigin, configuredOrigin));
     }
 }
 //# sourceMappingURL=validate-tarball-host.js.map

package/bundle-emitter/registry/validate-tarball-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-tarball-host.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/validate-tarball-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,SAAS,qBAAqB,CAAC,gBAA4C;IACvE,OAAO,IAAI,GAAG,CAAC,gBAAgB,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,UAAkB;IACxC,IAAI,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,SAAS,CAAC,8CAA8C,UAAU,GAAG,CAAC,CAAC;IACrF,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAmB,EAAE,cAAsB;IACrE,OAAO,CACH,sCAAsC,WAAW,yDAAyD;QAC1G,IAAI,cAAc,4EAA4E;QAC9F,sBAAsB,CACzB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC5C,UAAkB,EAClB,gBAA4C;IAE5C,MAAM,WAAW,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IACjD,MAAM,cAAc,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;IAE/D,IAAI,WAAW,KAAK,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC,CAAC;IACvE,CAAC;AACL,CAAC"}
+{"version":3,"file":"validate-tarball-host.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/validate-tarball-host.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAE3D,SAAS,uBAAuB,CAAC,gBAA4C;IACzE,OAAO,IAAI,GAAG,CAAC,gBAAgB,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC,MAAM,CAAC;AAC1E,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC1C,IAAI,CAAC;QACD,OAAO,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,IAAI,SAAS,CAAC,8CAA8C,UAAU,GAAG,CAAC,CAAC;IACrF,CAAC;AACL,CAAC;AAED,SAAS,oBAAoB,CAAC,aAAqB,EAAE,gBAAwB;IACzE,OAAO,CACH,sCAAsC,aAAa,2DAA2D;QAC9G,IAAI,gBAAgB,4EAA4E;QAChG,sBAAsB,CACzB,CAAC;AACN,CAAC;AAED,MAAM,UAAU,kCAAkC,CAC9C,UAAkB,EAClB,gBAA4C;IAE5C,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,gBAAgB,CAAC,CAAC;IAEnE,IAAI,aAAa,KAAK,gBAAgB,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC3E,CAAC;AACL,CAAC"}

package/common/schema-validation.js

@@ -0,0 +1,90 @@
+import { FormattedZodError, formatZodError } from '@schema-hub/zod-error-formatter';
+import { z } from 'zod/v4-mini';
+function normalizeValidationIssue(issue) {
+    return issue
+        .replaceAll(': Invalid input', ': invalid input')
+        .replaceAll('no union alternative matched:', 'invalid value doesn’t match expected union')
+        .replaceAll(/: missing property; expected [^;|]+/gu, ': missing property');
+}
+function formatPath(path) {
+    return path
+        .map((segment) => {
+        return typeof segment === 'number' ? `[${segment}]` : `.${String(segment)}`;
+    })
+        .join('')
+        .replace(/^\./u, '');
+}
+function formatPathPrefix(path) {
+    const formattedPath = formatPath(path);
+    return formattedPath.length === 0 ? '' : `at ${formattedPath}: `;
+}
+function valueAtPath(value, path) {
+    let current = value;
+    for (const segment of path) {
+        current = Reflect.get(new Object(current), segment);
+    }
+    return current;
+}
+function formatExpectedValue(value) {
+    return typeof value === 'string' ? `"${value}"` : String(value);
+}
+function formatActualType(value) {
+    if (value === null) {
+        return 'null';
+    }
+    if (Array.isArray(value)) {
+        return 'array';
+    }
+    return typeof value;
+}
+function shouldUseGenericUnionIssue(issue, normalizedFallbackIssue) {
+    return (normalizedFallbackIssue === 'Invalid input' ||
+        normalizedFallbackIssue.includes('invalid value doesn’t match expected union') ||
+        (issue.path.length === 0 && normalizedFallbackIssue.startsWith('at ')));
+}
+function formatUnionIssue(issue, fallbackIssue) {
+    const normalizedFallbackIssue = normalizeValidationIssue(fallbackIssue);
+    if (shouldUseGenericUnionIssue(issue, normalizedFallbackIssue)) {
+        return `${formatPathPrefix(issue.path)}invalid value doesn’t match expected union`;
+    }
+    return normalizedFallbackIssue;
+}
+function formatInvalidValueIssue(issue, input) {
+    const actualValue = valueAtPath(input, issue.path);
+    if (actualValue === undefined) {
+        return `${formatPathPrefix(issue.path)}missing property`;
+    }
+    const [expectedValue] = issue.values;
+    const expectedValueMessage = formatExpectedValue(expectedValue);
+    const actualTypeMessage = formatActualType(actualValue);
+    const issuePath = formatPathPrefix(issue.path);
+    return `${issuePath}invalid literal: expected ${expectedValueMessage}, but got ${actualTypeMessage}`;
+}
+function formatStableIssue(issue, input, fallbackIssue) {
+    if (issue.code === 'invalid_union') {
+        return formatUnionIssue(issue, fallbackIssue);
+    }
+    if (issue.code === 'invalid_key') {
+        return `${formatPathPrefix(issue.path)}invalid key`;
+    }
+    return issue.code === 'invalid_value' ? formatInvalidValueIssue(issue, input) : undefined;
+}
+function normalizeIssues(issues, fallbackIssues, value) {
+    const normalizedIssues = issues.map((issue, index) => {
+        const fallbackIssue = String(fallbackIssues[index]);
+        return formatStableIssue(issue, value, fallbackIssue) ?? normalizeValidationIssue(fallbackIssue);
+    });
+    return [String(normalizedIssues[0]), ...normalizedIssues.slice(1)];
+}
+export function safeParse(schema, value) {
+    const result = z.safeParse(schema, value);
+    if (result.success) {
+        return result;
+    }
+    const fallbackIssues = formatZodError(result.error, value).issues;
+    return {
+        success: false,
+        error: new FormattedZodError(normalizeIssues(result.error.issues, fallbackIssues, value))
+    };
+}
+//# sourceMappingURL=schema-validation.js.map

package/common/schema-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema-validation.js","sourceRoot":"","sources":["../../../../source/common/schema-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAwB,MAAM,iCAAiC,CAAC;AAC1G,OAAO,EAAE,CAAC,EAAE,MAAM,aAAa,CAAC;AAMhC,SAAS,wBAAwB,CAAC,KAAa;IAC3C,OAAO,KAAK;SACP,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;SAChD,UAAU,CAAC,+BAA+B,EAAE,4CAA4C,CAAC;SACzF,UAAU,CAAC,uCAAuC,EAAE,oBAAoB,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,UAAU,CAAC,IAA4B;IAC5C,OAAO,IAAI;SACN,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QACb,OAAO,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;IAChF,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC;SACR,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA4B;IAClD,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,aAAa,IAAI,CAAC;AACrE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,IAA4B;IAC7D,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;QACzB,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACpC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,OAAO,OAAO,KAAK,CAAC;AACxB,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAgB,EAAE,uBAA+B;IACjF,OAAO,CACH,uBAAuB,KAAK,eAAe;QAC3C,uBAAuB,CAAC,QAAQ,CAAC,4CAA4C,CAAC;QAC9E,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,uBAAuB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CACzE,CAAC;AACN,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB,EAAE,aAAqB;IAC7D,MAAM,uBAAuB,GAAG,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,0BAA0B,CAAC,KAAK,EAAE,uBAAuB,CAAC,EAAE,CAAC;QAC7D,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC;IACvF,CAAC;IAED,OAAO,uBAAuB,CAAC;AACnC,CAAC;AAED,SAAS,uBAAuB,CAC5B,KAA6D,EAC7D,KAAc;IAEd,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC;IAC7D,CAAC;IAED,MAAM,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACrC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAChE,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,GAAG,SAAS,6BAA6B,oBAAoB,aAAa,iBAAiB,EAAE,CAAC;AACzG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgB,EAAE,KAAc,EAAE,aAAqB;IAC9E,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACjC,OAAO,gBAAgB,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAC/B,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC;IACxD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CACpB,MAA4B,EAC5B,cAAmC,EACnC,KAAc;IAEd,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjD,MAAM,aAAa,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,OAAO,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,aAAa,CAAC,IAAI,wBAAwB,CAAC,aAAa,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,SAAS,CAA0B,MAAc,EAAE,KAAc;IAC7E,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC;IAClB,CAAC;IAED,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC;IAClE,OAAO;QACH,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,IAAI,iBAAiB,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;KAC5F,CAAC;AACN,CAAC"}

package/config/optional-package-settings-schema.js

@@ -4,7 +4,9 @@ import { additionalPackageJsonAttributesSchema } from "./additional-package-json
 import { deadCodeEliminationSettingsSchema } from "./dead-code-elimination-settings.js";
 import { dependencyPolicySchema } from "./dependency-policy.js";
 import { publishSettingsSchema } from "./publish-settings.js";
+import { nonEmptyStringSchema } from "./base-validations.js";
 export const optionalPackageSettingsSchema = z.strictObject({
+    additionalChangelogSourceFiles: z.optional(z.readonly(z.array(nonEmptyStringSchema))),
     additionalFiles: z.optional(z.readonly(z.array(additionalFileDescriptionSchema))),
     includeSourceMapFiles: z.optional(z.boolean()),
     additionalPackageJsonAttributes: z.optional(additionalPackageJsonAttributesSchema),

package/config/optional-package-settings-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"optional-package-settings-schema.js","sourceRoot":"","sources":["../../../../source/config/optional-package-settings-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAE9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;IACjF,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9C,+BAA+B,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAClF,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAClD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACpD,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CACrE,CAAC,CAAC"}
+{"version":3,"file":"optional-package-settings-schema.js","sourceRoot":"","sources":["../../../../source/config/optional-package-settings-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,qCAAqC,EAAE,MAAM,gDAAgD,CAAC;AACvG,OAAO,EAAE,iCAAiC,EAAE,MAAM,qCAAqC,CAAC;AACxF,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAE7D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IACxD,8BAA8B,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACrF,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;IACjF,qBAAqB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9C,+BAA+B,EAAE,CAAC,CAAC,QAAQ,CAAC,qCAAqC,CAAC;IAClF,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC;IAClD,gBAAgB,EAAE,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC;IACpD,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,iCAAiC,CAAC;CACrE,CAAC,CAAC"}

package/config/package-config.d.ts

@@ -10,6 +10,7 @@ import type { VersioningSettings } from './versioning-settings.ts';
 export type CommonPackageSettings = {
     readonly sourcesFolder?: string | undefined;
     readonly mainPackageJson?: MainPackageJson | undefined;
+    readonly additionalChangelogSourceFiles?: readonly string[] | undefined;
     readonly additionalFiles?: readonly AdditionalFileDescription[] | undefined;
     readonly includeSourceMapFiles?: boolean | undefined;
     readonly additionalPackageJsonAttributes?: AdditionalPackageJsonAttributes | undefined;
@@ -25,6 +26,7 @@ type PackageConfigBase = {
     readonly bundlePeerDependencies?: readonly string[] | undefined;
     readonly sourcesFolder?: string | undefined;
     readonly mainPackageJson?: MainPackageJson | undefined;
+    readonly additionalChangelogSourceFiles?: readonly string[] | undefined;
     readonly additionalFiles?: readonly AdditionalFileDescription[] | undefined;
     readonly includeSourceMapFiles?: boolean | undefined;
     readonly additionalPackageJsonAttributes?: AdditionalPackageJsonAttributes | undefined;

package/config/package-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-config.d.ts","sourceRoot":"","sources":["../../../../source/config/package-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB;AAC/D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB;AAC9D,OAAO,KAAK,EAAE,+BAA+B,EAAE,eAAe,EAAE,MAAM,mBAAmB;AACzF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B;AAElE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,+BAA+B,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC1E;AAED,KAAK,iBAAiB,GAAG;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,+BAA+B,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC1E;AAED,KAAK,qBAAqB,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;CACzC;AAED,KAAK,qBAAqB,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC/C;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,GAAG,qBAAqB"}
+{"version":3,"file":"package-config.d.ts","sourceRoot":"","sources":["../../../../source/config/package-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB;AACtE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB;AAC/D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,qCAAqC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB;AAC9D,OAAO,KAAK,EAAE,+BAA+B,EAAE,eAAe,EAAE,MAAM,mBAAmB;AACzF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB;AAC9D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB;AAC5D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,0BAA0B;AAElE,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,8BAA8B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,+BAA+B,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC1E;AAED,KAAK,iBAAiB,GAAG;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,iBAAiB,CAAC,EAAE,IAAI,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,UAAU,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,8BAA8B,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACxE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,yBAAyB,EAAE,GAAG,SAAS,CAAC;IAC5E,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,+BAA+B,CAAC,EAAE,+BAA+B,GAAG,SAAS,CAAC;IACvF,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,2BAA2B,GAAG,SAAS,CAAC;CAC1E;AAED,KAAK,qBAAqB,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,CAAC;CACzC;AAED,KAAK,qBAAqB,GAAG,iBAAiB,GAAG;IAC7C,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC/C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,CAAC;IACvC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC/C;AAED,MAAM,MAAM,aAAa,GAAG,qBAAqB,GAAG,qBAAqB"}

package/config/package-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-config.js","sourceRoot":"","sources":["../../../../source/config/package-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAuDjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAA,uBAA+B,CAAA,CAAC"}
+{"version":3,"file":"package-config.js","sourceRoot":"","sources":["../../../../source/config/package-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAyDjF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAA,uBAA+B,CAAA,CAAC"}

package/config/validation.js

@@ -1,5 +1,5 @@
 import { Result } from 'true-myth';
-import { safeParse } from '@schema-hub/zod-error-formatter';
+import { safeParse } from "../common/schema-validation.js";
 import { validateCyclicDependencies, validateDuplicatePackages } from "./cross-package-validation.js";
 import { buildPackageGraph } from "./package-graph-builder.js";
 import { packtoryConfigSchema } from "./packtory-config-schema.js";

package/config/validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../source/config/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAI5D,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAYvF,SAAS,oCAAoC,CACzC,MAAmB,EACnB,MAAe;IAEf,MAAM,sBAAsB,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,gIAAgI;IAChI,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAe,CAAC;IAC9D,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,yBAAyB,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CACvB,MAAyE;IAEzE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IACxD,MAAM,YAAY,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,CAAC,GAAG,yBAAyB,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC,CAAC;IACpH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;AACvE,CAAC;AAMD,MAAM,UAAU,cAAc,CAAC,MAAe;IAC1C,OAAO,kBAAkB,CAAC,oCAAoC,CAAiB,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,6BAA6B,CACzC,MAAe;IAEf,OAAO,kBAAkB,CACrB,oCAAoC,CAAgC,mCAAmC,EAAE,MAAM,CAAC,CACnH,CAAC;AACN,CAAC"}
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../../../../source/config/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAG3D,OAAO,EAAE,0BAA0B,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,OAAO,EAAE,mCAAmC,EAAE,MAAM,8CAA8C,CAAC;AACnG,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAYvF,SAAS,oCAAoC,CACzC,MAAmB,EACnB,MAAe;IAEf,MAAM,sBAAsB,GAAG,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,GAAG,CAAC,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,gIAAgI;IAChI,MAAM,cAAc,GAAG,sBAAsB,CAAC,IAAe,CAAC;IAC9D,MAAM,cAAc,GAAG,mBAAmB,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEpE,MAAM,cAAc,GAAG,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC7D,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,yBAAyB,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,kBAAkB,CACvB,MAAyE;IAEzE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpC,CAAC;IAED,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;IACxD,MAAM,YAAY,GAAG,iBAAiB,CAAC,cAAc,CAAC,CAAC;IAEvD,MAAM,MAAM,GAAG,CAAC,GAAG,yBAAyB,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,0BAA0B,CAAC,YAAY,CAAC,CAAC,CAAC;IACpH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC,CAAC;AACvE,CAAC;AAMD,MAAM,UAAU,cAAc,CAAC,MAAe;IAC1C,OAAO,kBAAkB,CAAC,oCAAoC,CAAiB,oBAAoB,EAAE,MAAM,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,UAAU,6BAA6B,CACzC,MAAe;IAEf,OAAO,kBAAkB,CACrB,oCAAoC,CAAgC,mCAAmC,EAAE,MAAM,CAAC,CACnH,CAAC;AACN,CAAC"}

package/dependency-scanner/scanner.js

@@ -4,14 +4,14 @@ import { createDependencyGraph } from "./dependency-graph.js";
 import { moduleReferenceKind } from "./source-file-references.js";
 export function createDependencyScanner(dependencyScannerDependencies) {
     const { sourceMapFileLocator, typescriptProjectAnalyzer } = dependencyScannerDependencies;
-    async function getDependencyNodeData(project, sourceFilePath, externalDependencies, options) {
-        const sourceMapFilePath = options.includeSourceMapFiles && isCodeFile(sourceFilePath)
-            ? await sourceMapFileLocator.locate(sourceFilePath)
+    async function getDependencyNodeData(args) {
+        const sourceMapFilePath = args.options.includeSourceMapFiles && isCodeFile(args.sourceFilePath)
+            ? await sourceMapFileLocator.locate(args.sourceFilePath, args.sourcesFolder)
             : Maybe.nothing();
         return {
             sourceMapFilePath,
-            externalDependencies,
-            project
+            externalDependencies: args.externalDependencies,
+            project: args.project
         };
     }
     function collectReferenceLists(references) {
@@ -30,32 +30,37 @@ export function createDependencyScanner(dependencyScannerDependencies) {
             externalDependencies
         };
     }
-    async function connectLocalReferences(args) {
-        for (const localReference of args.localReferences) {
-            if (!args.graph.isKnown(localReference.filePath)) {
-                await args.scanReference(args.project, localReference, args.graph, args.options);
-            }
-            if (!args.graph.hasConnection(args.sourceFilePath, localReference.filePath)) {
-                args.graph.connect(args.sourceFilePath, localReference.filePath);
-            }
-        }
+    function getReferencedModules(project, reference) {
+        return reference.kind === moduleReferenceKind.localCode ? project.getReferencedModules(reference.filePath) : [];
+    }
+    function getNodeProject(project, reference) {
+        return reference.kind === moduleReferenceKind.localCode ? project : undefined;
+    }
+    function toDependencyNode(reference, nodeData) {
+        return reference.kind === moduleReferenceKind.generatedManifest
+            ? { ...nodeData, isGeneratedManifest: true }
+            : nodeData;
     }
-    async function scanDependenciesOfReference(project, reference, graph, options) {
+    async function scanDependenciesOfReference(context, reference) {
         const sourceFilePath = reference.filePath;
-        const referencedModules = reference.kind === moduleReferenceKind.localCode ? project.getReferencedModules(sourceFilePath) : [];
+        const referencedModules = getReferencedModules(context.project, reference);
         const { localReferences, externalDependencies } = collectReferenceLists(referencedModules);
-        const nodeData = await getDependencyNodeData(reference.kind === moduleReferenceKind.localCode ? project : undefined, sourceFilePath, externalDependencies, options);
-        graph.addDependency(sourceFilePath, reference.kind === moduleReferenceKind.generatedManifest
-            ? { ...nodeData, isGeneratedManifest: true }
-            : nodeData);
-        await connectLocalReferences({
-            graph,
-            localReferences,
-            options,
-            project,
-            scanReference: scanDependenciesOfReference,
-            sourceFilePath
+        const nodeData = await getDependencyNodeData({
+            externalDependencies,
+            options: context.options,
+            project: getNodeProject(context.project, reference),
+            sourceFilePath,
+            sourcesFolder: context.folder
         });
+        context.graph.addDependency(sourceFilePath, toDependencyNode(reference, nodeData));
+        for (const localReference of localReferences) {
+            if (!context.graph.isKnown(localReference.filePath)) {
+                await scanDependenciesOfReference(context, localReference);
+            }
+            if (!context.graph.hasConnection(sourceFilePath, localReference.filePath)) {
+                context.graph.connect(sourceFilePath, localReference.filePath);
+            }
+        }
     }
     return {
         async scan(entryPointFile, folder, options) {
@@ -70,7 +75,12 @@ export function createDependencyScanner(dependencyScannerDependencies) {
                 resolveDeclarationFiles: scanOptions.resolveDeclarationFiles,
                 mainPackageJson: scanOptions.mainPackageJson
             });
-            await scanDependenciesOfReference(project, { kind: moduleReferenceKind.localCode, filePath: entryPointFile }, graph, scanOptions);
+            await scanDependenciesOfReference({
+                folder,
+                graph,
+                options: scanOptions,
+                project
+            }, { kind: moduleReferenceKind.localCode, filePath: entryPointFile });
             return graph;
         }
     };

package/dependency-scanner/scanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../../../source/dependency-scanner/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAsD,MAAM,uBAAuB,CAAC;AAElH,OAAO,EAAE,mBAAmB,EAAwB,MAAM,6BAA6B,CAAC;AAoCxF,MAAM,UAAU,uBAAuB,CACnC,6BAAsE;IAEtE,MAAM,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,GAAG,6BAA6B,CAAC;IAE1F,KAAK,UAAU,qBAAqB,CAChC,OAAsC,EACtC,cAAsB,EACtB,oBAAuC,EACvC,OAA8B;QAE9B,MAAM,iBAAiB,GACnB,OAAO,CAAC,qBAAqB,IAAI,UAAU,CAAC,cAAc,CAAC;YACvD,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,cAAc,CAAC;YACnD,CAAC,CAAC,KAAK,CAAC,OAAO,EAAU,CAAC;QAElC,OAAO;YACH,iBAAiB;YACjB,oBAAoB;YACpB,OAAO;SACV,CAAC;IACN,CAAC;IAED,SAAS,qBAAqB,CAAC,UAAsC;QACjE,MAAM,eAAe,GAA8B,EAAE,CAAC;QACtD,MAAM,oBAAoB,GAAa,EAAE,CAAC;QAE1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,eAAe,EAAE,CAAC;gBACzD,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACJ,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;QAED,OAAO;YACH,eAAe;YACf,oBAAoB;SACvB,CAAC;IACN,CAAC;IAED,KAAK,UAAU,sBAAsB,CAAC,IAYrC;QACG,KAAK,MAAM,cAAc,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;YACrE,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,UAAU,2BAA2B,CACtC,OAA0B,EAC1B,SAAkC,EAClC,KAAsB,EACtB,OAA8B;QAE9B,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC1C,MAAM,iBAAiB,GACnB,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,EAAE,eAAe,EAAE,oBAAoB,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CACxC,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EACtE,cAAc,EACd,oBAAoB,EACpB,OAAO,CACV,CAAC;QACF,KAAK,CAAC,aAAa,CACf,cAAc,EACd,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,iBAAiB;YACpD,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE;YAC5C,CAAC,CAAC,QAAQ,CACjB,CAAC;QACF,MAAM,sBAAsB,CAAC;YACzB,KAAK;YACL,eAAe;YACf,OAAO;YACP,OAAO;YACP,aAAa,EAAE,2BAA2B;YAC1C,cAAc;SACjB,CAAC,CAAC;IACP,CAAC;IAED,OAAO;QACH,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO;YACtC,MAAM,EAAE,uBAAuB,GAAG,KAAK,EAAE,qBAAqB,GAAG,KAAK,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;YACpG,MAAM,WAAW,GAAG;gBAChB,qBAAqB;gBACrB,uBAAuB;gBACvB,eAAe;aAClB,CAAC;YAEF,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,yBAAyB,CAAC,cAAc,CAAC,MAAM,EAAE;gBAC7D,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;gBAC5D,eAAe,EAAE,WAAW,CAAC,eAAe;aAC/C,CAAC,CAAC;YAEH,MAAM,2BAA2B,CAC7B,OAAO,EACP,EAAE,IAAI,EAAE,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,EACjE,KAAK,EACL,WAAW,CACd,CAAC;YAEF,OAAO,KAAK,CAAC;QACjB,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../../../source/dependency-scanner/scanner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAsD,MAAM,uBAAuB,CAAC;AAElH,OAAO,EAAE,mBAAmB,EAAwB,MAAM,6BAA6B,CAAC;AA2CxF,MAAM,UAAU,uBAAuB,CACnC,6BAAsE;IAEtE,MAAM,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,GAAG,6BAA6B,CAAC;IAE1F,KAAK,UAAU,qBAAqB,CAAC,IAMpC;QACG,MAAM,iBAAiB,GACnB,IAAI,CAAC,OAAO,CAAC,qBAAqB,IAAI,UAAU,CAAC,IAAI,CAAC,cAAc,CAAC;YACjE,CAAC,CAAC,MAAM,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC;YAC5E,CAAC,CAAC,KAAK,CAAC,OAAO,EAAU,CAAC;QAElC,OAAO;YACH,iBAAiB;YACjB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;YAC/C,OAAO,EAAE,IAAI,CAAC,OAAO;SACxB,CAAC;IACN,CAAC;IAED,SAAS,qBAAqB,CAAC,UAAsC;QACjE,MAAM,eAAe,GAA8B,EAAE,CAAC;QACtD,MAAM,oBAAoB,GAAa,EAAE,CAAC;QAE1C,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,IAAI,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,eAAe,EAAE,CAAC;gBACzD,oBAAoB,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACJ,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;QACL,CAAC;QAED,OAAO;YACH,eAAe;YACf,oBAAoB;SACvB,CAAC;IACN,CAAC;IAED,SAAS,oBAAoB,CACzB,OAA0B,EAC1B,SAAkC;QAElC,OAAO,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpH,CAAC;IAED,SAAS,cAAc,CACnB,OAA0B,EAC1B,SAAkC;QAElC,OAAO,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,CAAC;IAED,SAAS,gBAAgB,CACrB,SAAkC,EAClC,QAAiC;QAEjC,OAAO,SAAS,CAAC,IAAI,KAAK,mBAAmB,CAAC,iBAAiB;YAC3D,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,mBAAmB,EAAE,IAAI,EAAE;YAC5C,CAAC,CAAC,QAAQ,CAAC;IACnB,CAAC;IAED,KAAK,UAAU,2BAA2B,CACtC,OAAoB,EACpB,SAAkC;QAElC,MAAM,cAAc,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC1C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC3E,MAAM,EAAE,eAAe,EAAE,oBAAoB,EAAE,GAAG,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC3F,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC;YACzC,oBAAoB;YACpB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC;YACnD,cAAc;YACd,aAAa,EAAE,OAAO,CAAC,MAAM;SAChC,CAAC,CAAC;QACH,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnF,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,MAAM,2BAA2B,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACxE,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;YACnE,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO;QACH,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO;YACtC,MAAM,EAAE,uBAAuB,GAAG,KAAK,EAAE,qBAAqB,GAAG,KAAK,EAAE,eAAe,EAAE,GAAG,OAAO,CAAC;YACpG,MAAM,WAAW,GAAG;gBAChB,qBAAqB;gBACrB,uBAAuB;gBACvB,eAAe;aAClB,CAAC;YAEF,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,MAAM,OAAO,GAAG,yBAAyB,CAAC,cAAc,CAAC,MAAM,EAAE;gBAC7D,uBAAuB,EAAE,WAAW,CAAC,uBAAuB;gBAC5D,eAAe,EAAE,WAAW,CAAC,eAAe;aAC/C,CAAC,CAAC;YAEH,MAAM,2BAA2B,CAC7B;gBACI,MAAM;gBACN,KAAK;gBACL,OAAO,EAAE,WAAW;gBACpB,OAAO;aACV,EACD,EAAE,IAAI,EAAE,mBAAmB,CAAC,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,CACpE,CAAC;YAEF,OAAO,KAAK,CAAC;QACjB,CAAC;KACJ,CAAC;AACN,CAAC"}

package/dependency-scanner/source-map-file-locator.js

@@ -1,29 +1,66 @@
 import path from 'node:path';
 import { Maybe } from 'true-myth';
+function sourceMappingUrlPrefix() {
+    return '//# sourceMappingURL=';
+}
 function getSourceMappingUrl(fileContent) {
+    const prefix = sourceMappingUrlPrefix();
     for (const line of fileContent.split('\n')) {
-        if (line.startsWith('//# sourceMappingURL=')) {
-            const sourceMappingUrl = line.slice('//# sourceMappingURL='.length);
-            return sourceMappingUrl === '' ? undefined : sourceMappingUrl;
+        if (line.startsWith(prefix)) {
+            const sourceMappingUrl = line.slice(prefix.length);
+            return sourceMappingUrl;
         }
     }
     return undefined;
 }
+function isUrlLike(filePath) {
+    return /^[a-z][\d+.a-z-]*:/iu.test(filePath);
+}
+function isRelativeMapFilePath(filePath) {
+    if (path.posix.isAbsolute(filePath) || path.win32.isAbsolute(filePath)) {
+        return false;
+    }
+    if (isUrlLike(filePath) || filePath.includes('?') || filePath.includes('#')) {
+        return false;
+    }
+    return path.extname(filePath) === '.map';
+}
+function isInFolder(folder, candidate) {
+    const relativePath = path.relative(folder, candidate);
+    return relativePath.length > 0 && !relativePath.startsWith('..') && !path.isAbsolute(relativePath);
+}
+function resolveSourceMapFile(sourceFile, sourcesFolder, sourceMappingUrl) {
+    if (!isRelativeMapFilePath(sourceMappingUrl)) {
+        return Maybe.nothing();
+    }
+    const sourceMapFile = path.resolve(path.dirname(sourceFile), sourceMappingUrl);
+    return isInFolder(path.resolve(sourcesFolder), sourceMapFile) ? Maybe.just(sourceMapFile) : Maybe.nothing();
+}
 export function createSourceMapFileLocator(dependencies) {
     const { fileManager } = dependencies;
+    async function isReadableSourceMap(sourcesFolder, sourceMapFile) {
+        const { isReadable } = await fileManager.checkReadability(sourceMapFile);
+        if (!isReadable) {
+            return false;
+        }
+        const realSourcesFolder = await fileManager.getRealPath(sourcesFolder);
+        const realSourceMapFile = await fileManager.getRealPath(sourceMapFile);
+        return isInFolder(realSourcesFolder, realSourceMapFile);
+    }
     return {
-        async locate(sourceFile) {
+        async locate(sourceFile, sourcesFolder) {
             const fileContent = await fileManager.readFile(sourceFile);
             const sourceMappingUrl = getSourceMappingUrl(fileContent);
-            if (sourceMappingUrl !== undefined) {
-                const folder = path.dirname(sourceFile);
-                const sourceMappingFile = path.join(folder, sourceMappingUrl);
-                const { isReadable } = await fileManager.checkReadability(sourceMappingFile);
-                if (isReadable) {
-                    return Maybe.just(sourceMappingFile);
-                }
+            if (sourceMappingUrl === undefined) {
+                return Maybe.nothing();
+            }
+            const sourceMapFile = resolveSourceMapFile(sourceFile, sourcesFolder, sourceMappingUrl);
+            if (sourceMapFile.isNothing) {
+                return Maybe.nothing();
             }
-            return Maybe.nothing();
+            return (await isReadableSourceMap(sourcesFolder, sourceMapFile.value))
+                ? Maybe.just(sourceMapFile.value)
+                : Maybe.nothing();
         }
     };
 }

package/dependency-scanner/source-map-file-locator.js.map

@@ -1 +1 @@
-{"version":3,"file":"source-map-file-locator.js","sourceRoot":"","sources":["../../../../source/dependency-scanner/source-map-file-locator.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAWlC,SAAS,mBAAmB,CAAC,WAAmB;IAC5C,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,EAAE,CAAC;YAC3C,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;YACpE,OAAO,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAClE,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,0BAA0B,CACtC,YAAwD;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC;IAErC,OAAO;QACH,KAAK,CAAC,MAAM,CAAC,UAAU;YACnB,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;gBACxC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;gBAC9D,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;gBAE7E,IAAI,UAAU,EAAE,CAAC;oBACb,OAAO,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBACzC,CAAC;YACL,CAAC;YAED,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"source-map-file-locator.js","sourceRoot":"","sources":["../../../../source/dependency-scanner/source-map-file-locator.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAWlC,SAAS,sBAAsB;IAC3B,OAAO,uBAAuB,CAAC;AACnC,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmB;IAC5C,MAAM,MAAM,GAAG,sBAAsB,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC1B,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnD,OAAO,gBAAgB,CAAC;QAC5B,CAAC;IACL,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAgB;IAC3C,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrE,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,MAAM,CAAC;AAC7C,CAAC;AAED,SAAS,UAAU,CAAC,MAAc,EAAE,SAAiB;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,aAAqB,EAAE,gBAAwB;IAC7F,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC,CAAC;IAC/E,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;AAChH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACtC,YAAwD;IAExD,MAAM,EAAE,WAAW,EAAE,GAAG,YAAY,CAAC;IAErC,KAAK,UAAU,mBAAmB,CAAC,aAAqB,EAAE,aAAqB;QAC3E,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QACzE,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACvE,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;IAC5D,CAAC;IAED,OAAO;QACH,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,aAAa;YAClC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,WAAW,CAAC,CAAC;YAE1D,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACjC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,UAAU,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC;YACxF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAED,OAAO,CAAC,MAAM,mBAAmB,CAAC,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC;gBAClE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;gBACjC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1B,CAAC;KACJ,CAAC;AACN,CAAC"}

package/package.json

@@ -8,7 +8,7 @@
         "@cyclonedx/cyclonedx-library": "10.1.0",
         "@jridgewell/gen-mapping": "0.3.13",
         "@jridgewell/trace-mapping": "0.3.31",
-        "@schema-hub/zod-error-formatter": "0.0.11",
+        "@schema-hub/zod-error-formatter": "0.0.12",
         "@ts-morph/common": "0.29.0",
         "@types/npm-registry-fetch": "8.0.9",
         "common-tags": "1.8.2",
@@ -54,6 +54,9 @@
         "./common/package-layout.js": {
             "import": "./common/package-layout.js"
         },
+        "./common/schema-validation.js": {
+            "import": "./common/schema-validation.js"
+        },
         "./common/sort-values.js": {
             "import": "./common/sort-values.js"
         },
@@ -119,5 +122,5 @@
         "./tar/tarball-builder.js"
     ],
     "type": "module",
-    "version": "0.0.46"
+    "version": "0.0.48"
 }

package/packtory/changelog-source-attribution.d.ts

@@ -1,3 +1,4 @@
 import type { AnalyzedBundle } from '../dead-code-eliminator/analyzed-bundle.ts';
 import type { FileManager } from '../file-manager/file-manager.ts';
+export {};
 //# sourceMappingURL=changelog-source-attribution.d.ts.map