packtory 0.0.8 → 0.0.10

package/artifacts/artifacts-builder.d.ts

@@ -1,19 +1,21 @@
 import type { FileDescription } from '../file-manager/file-description.ts';
 import type { FileManager } from '../file-manager/file-manager.ts';
+import type { ProgressBroadcastProvider } from '../progress/progress-broadcaster.ts';
 import type { VersionedBundleWithManifest } from '../version-manager/versioned-bundle.ts';
 import type { TarballBuilder } from '../tar/tarball-builder.ts';
 export type ArtifactsBuilderDependencies = {
     readonly fileManager: FileManager;
     readonly tarballBuilder: TarballBuilder;
+    readonly progressBroadcaster: ProgressBroadcastProvider;
 };
-export type TarballArtifact = {
+type TarballArtifact = {
     readonly tarData: Buffer;
-    readonly shasum: string;
 };
 export type ArtifactsBuilder = {
-    collectContents: (bundle: VersionedBundleWithManifest, prefix?: string) => readonly FileDescription[];
-    buildTarball: (bundle: VersionedBundleWithManifest) => Promise<TarballArtifact>;
-    buildFolder: (bundle: VersionedBundleWithManifest, targetFolder: string) => Promise<void>;
+    collectContents: (bundle: VersionedBundleWithManifest, prefix?: string, extraFiles?: readonly FileDescription[]) => readonly FileDescription[];
+    buildTarball: (bundle: VersionedBundleWithManifest, extraFiles?: readonly FileDescription[]) => Promise<TarballArtifact>;
+    buildFolder: (bundle: VersionedBundleWithManifest, targetFolder: string, extraFiles?: readonly FileDescription[]) => Promise<void>;
 };
 export declare function createArtifactsBuilder(artifactsBuilderDependencies: ArtifactsBuilderDependencies): ArtifactsBuilder;
+export {};
 //# sourceMappingURL=artifacts-builder.d.ts.map

package/artifacts/artifacts-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.d.ts","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,MAAM,4BAA4B,GAAG;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,eAAe,EAAE,CAAC,MAAM,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,SAAS,eAAe,EAAE,CAAC;IACtG,YAAY,EAAE,CAAC,MAAM,EAAE,2BAA2B,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAChF,WAAW,EAAE,CAAC,MAAM,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,4BAA4B,EAAE,4BAA4B,GAAG,gBAAgB,CA0DnH"}
+{"version":3,"file":"artifacts-builder.d.ts","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,MAAM,4BAA4B,GAAG;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;CAC3D,CAAC;AAEF,KAAK,eAAe,GAAG;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,eAAe,EAAE,CACb,MAAM,EAAE,2BAA2B,EACnC,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,KACtC,SAAS,eAAe,EAAE,CAAC;IAChC,YAAY,EAAE,CACV,MAAM,EAAE,2BAA2B,EACnC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,KACtC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9B,WAAW,EAAE,CACT,MAAM,EAAE,2BAA2B,EACnC,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,KACtC,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,4BAA4B,EAAE,4BAA4B,GAAG,gBAAgB,CA4FnH"}

package/artifacts/artifacts-builder.js

@@ -1,49 +1,3 @@
 import path from 'node:path';
-import ssri from 'ssri';
-export function createArtifactsBuilder(artifactsBuilderDependencies) {
-    const { fileManager, tarballBuilder } = artifactsBuilderDependencies;
-    function collectContents(bundle, prefix) {
-        const artifactContents = [
-            {
-                ...bundle.manifestFile,
-                filePath: prefix === undefined
-                    ? bundle.manifestFile.filePath
-                    : path.join(prefix, bundle.manifestFile.filePath)
-            }
-        ];
-        for (const entry of bundle.contents) {
-            const targetFilePath = prefix === undefined
-                ? entry.fileDescription.targetFilePath
-                : path.join(prefix, entry.fileDescription.targetFilePath);
-            artifactContents.push({
-                filePath: targetFilePath,
-                content: entry.fileDescription.content,
-                isExecutable: entry.fileDescription.isExecutable
-            });
-        }
-        return artifactContents;
-    }
-    return {
-        collectContents,
-        async buildTarball(bundle) {
-            const contents = collectContents(bundle, 'package');
-            const tarData = await tarballBuilder.build(contents);
-            return {
-                shasum: ssri.fromData(tarData, { algorithms: ['sha1'] }).hexDigest(),
-                tarData
-            };
-        },
-        async buildFolder(bundle, targetFolder) {
-            const readability = await fileManager.checkReadability(targetFolder);
-            if (readability.isReadable) {
-                throw new Error(`Folder ${targetFolder} already exists`);
-            }
-            const contents = collectContents(bundle);
-            for (const entry of contents) {
-                const targetFilePath = path.join(targetFolder, entry.filePath);
-                await fileManager.writeFile(targetFilePath, entry.content);
-            }
-        }
-    };
-}
+import { inspectArtifactSizes } from "../report/inspectors.js";
 //# sourceMappingURL=artifacts-builder.js.map

package/artifacts/artifacts-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AAsBxB,MAAM,UAAU,sBAAsB,CAAC,4BAA0D;IAC7F,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,4BAA4B,CAAC;IAErE,SAAS,eAAe,CAAC,MAAmC,EAAE,MAAe;QACzE,MAAM,gBAAgB,GAAsB;YACxC;gBACI,GAAG,MAAM,CAAC,YAAY;gBACtB,QAAQ,EACJ,MAAM,KAAK,SAAS;oBAChB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ;oBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;aAC5D;SACJ,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,cAAc,GAChB,MAAM,KAAK,SAAS;gBAChB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc;gBACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAClE,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;gBACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;aACnD,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAED,OAAO;QACH,eAAe;QAEf,KAAK,CAAC,YAAY,CAAC,MAAM;YACrB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAErD,OAAO;gBACH,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE;gBACpE,OAAO;aACV,CAAC;QACN,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY;YAClC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAErE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAEzC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAE/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW;AAI5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB"}

package/bundle-emitter/emitter.d.ts

@@ -1,16 +1,26 @@
 import { Maybe } from 'true-myth';
 import type { ArtifactsBuilder } from '../artifacts/artifacts-builder.ts';
+import type { PublishSettings } from '../config/publish-settings.ts';
 import type { RegistrySettings } from '../config/registry-settings.ts';
 import type { VersioningSettings } from '../config/versioning-settings.ts';
+import type { FileDescription } from '../file-manager/file-description.ts';
 import type { VersionedBundleWithManifest } from '../version-manager/versioned-bundle.ts';
 import type { RegistryClient } from './registry-client.ts';
 export type BundleEmitterDependencies = {
     readonly artifactsBuilder: ArtifactsBuilder;
     readonly registryClient: RegistryClient;
+    readonly ciRepositoryUrl: string | undefined;
 };
-export type PublishOptions = {
+type PublishOptions = {
     readonly bundle: VersionedBundleWithManifest;
     readonly registrySettings: RegistrySettings;
+    readonly publishSettings: PublishSettings;
+    readonly extraFiles?: readonly FileDescription[];
+};
+type AlreadyPublishedCheckOptions = {
+    readonly bundle: VersionedBundleWithManifest;
+    readonly registrySettings: RegistrySettings;
+    readonly extraFiles?: readonly FileDescription[];
 };
 type CurrentVersionLookupOptions = {
     readonly name: string;
@@ -23,7 +33,7 @@ type BundlePublishedCheckResult = {
 export type BundleEmitter = {
     publish: (options: PublishOptions) => Promise<void>;
     determineCurrentVersion: (options: CurrentVersionLookupOptions) => Promise<Maybe<string>>;
-    checkBundleAlreadyPublished: (options: PublishOptions) => Promise<BundlePublishedCheckResult>;
+    checkBundleAlreadyPublished: (options: AlreadyPublishedCheckOptions) => Promise<BundlePublishedCheckResult>;
 };
 export declare function createBundleEmitter(dependencies: BundleEmitterDependencies): BundleEmitter;
 export {};

package/bundle-emitter/emitter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAE1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC/C,CAAC;AAEF,KAAK,2BAA2B,GAAG;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CAC3C,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,uBAAuB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,2BAA2B,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACjG,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,yBAAyB,GAAG,aAAa,CAwC1F"}
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAE1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD,CAAC;AAEF,KAAK,cAAc,GAAG;IAClB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACpD,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAChC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACpD,CAAC;AAEF,KAAK,2BAA2B,GAAG;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CAC3C,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,uBAAuB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,2BAA2B,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC/G,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,yBAAyB,GAAG,aAAa,CA8C1F"}

package/bundle-emitter/emitter.js

@@ -1,35 +1,6 @@
+/* eslint-disable import/max-dependencies -- the publish/check flow legitimately depends on registry, artifacts, file-manager, and provenance helpers */
 import { Maybe } from 'true-myth';
 import { compareFileDescriptions } from "../file-manager/compare.js";
 import { extractPackageTarball } from "./extract-package-tarball.js";
-export function createBundleEmitter(dependencies) {
-    const { artifactsBuilder, registryClient } = dependencies;
-    return {
-        async determineCurrentVersion(options) {
-            const { versioning, registrySettings, name } = options;
-            if (versioning.automatic) {
-                const latestVersion = await registryClient.fetchLatestVersion(name, registrySettings);
-                return latestVersion.map((version) => {
-                    return version.version;
-                });
-            }
-            return Maybe.just(versioning.version);
-        },
-        async checkBundleAlreadyPublished(options) {
-            const { bundle, registrySettings } = options;
-            const latestVersion = await registryClient.fetchLatestVersion(bundle.name, registrySettings);
-            if (latestVersion.isNothing) {
-                return { alreadyPublishedAsLatest: false };
-            }
-            const artifactContents = artifactsBuilder.collectContents(bundle, 'package');
-            const tarball = await registryClient.fetchTarball(latestVersion.value.tarballUrl, latestVersion.value.shasum);
-            const latestVersionArtifactContents = await extractPackageTarball(tarball);
-            const result = compareFileDescriptions(artifactContents, latestVersionArtifactContents);
-            return { alreadyPublishedAsLatest: result.status === 'equal' };
-        },
-        async publish(options) {
-            const tarball = await artifactsBuilder.buildTarball(options.bundle);
-            await registryClient.publishPackage(options.bundle.packageJson, tarball.tarData, options.registrySettings);
-        }
-    };
-}
+import { assertRepositoryCoherence } from "./repository-coherence.js";
 //# sourceMappingURL=emitter.js.map

package/bundle-emitter/emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AA6BrE,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;IAE1D,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;YAC7C,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC7F,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAC7C,aAAa,CAAC,KAAK,CAAC,UAAU,EAC9B,aAAa,CAAC,KAAK,CAAC,MAAM,CAC7B,CAAC;YACF,MAAM,6BAA6B,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;YACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEpE,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/G,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AAMjC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B;AAEpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B;AAEpE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B"}

package/bundle-emitter/extract-package-tarball.js

@@ -1,15 +1,3 @@
 import { isExecutableFileMode } from "../file-manager/permissions.js";
 import { extractTarEntries } from "../tar/extract-tar.js";
-function tarEntryToFileDescription(tarEntry) {
-    const isExecutable = tarEntry.header.mode === undefined ? false : isExecutableFileMode(tarEntry.header.mode);
-    return {
-        filePath: tarEntry.header.name,
-        content: tarEntry.content,
-        isExecutable
-    };
-}
-export async function extractPackageTarball(tarball) {
-    const tarEntries = await extractTarEntries(tarball);
-    return tarEntries.map(tarEntryToFileDescription);
-}
 //# sourceMappingURL=extract-package-tarball.js.map

package/bundle-emitter/extract-package-tarball.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract-package-tarball.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/extract-package-tarball.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAiB,MAAM,uBAAuB,CAAC;AAEzE,SAAS,yBAAyB,CAAC,QAAkB;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7G,OAAO;QACH,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY;KACf,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"extract-package-tarball.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/extract-package-tarball.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC;AACrE,OAAO,EAAE,iBAAiB,EAAiB,MAAM,uBAAuB"}

package/bundle-emitter/publish-settings-bridge.js

@@ -0,0 +1,133 @@
+export function buildPublishOptionsForPublishSettings(publishSettings) {
+    if (publishSettings.access === 'restricted') {
+        return { access: 'restricted' };
+    }
+    if (publishSettings.provenance === undefined) {
+        return { access: 'public' };
+    }
+    if (publishSettings.provenance.type === 'auto') {
+        return { access: 'public', provenance: true };
+    }
+    return { access: 'public', provenanceFile: publishSettings.provenance.path };
+}
+function isRecord(value) {
+    return value instanceof Object;
+}
+function isErrorLike(error) {
+    return isRecord(error) && typeof error.message === 'string';
+}
+const unsupportedProviderMarker = 'not supported for provider:';
+function getCiName(message) {
+    const tail = message.slice(message.indexOf(unsupportedProviderMarker) + unsupportedProviderMarker.length).trim();
+    if (tail === '') {
+        return 'unknown';
+    }
+    const whitespaceIndex = tail.search(/\s/u);
+    if (whitespaceIndex === -1) {
+        return tail;
+    }
+    return tail.slice(0, whitespaceIndex);
+}
+function buildUnsupportedProviderMessage(ciName) {
+    return [
+        'Provenance auto mode requires GitHub Actions or GitLab CI.',
+        `Detected CI: ${ciName}.`,
+        "Use provenance: { type: 'file' } for other environments."
+    ].join(' ');
+}
+const githubActionsIdTokenMessage = [
+    'GitHub Actions provenance needs "permissions: id-token: write" on the workflow job.',
+    'See the packtory readme for the workflow snippet.'
+].join(' ');
+const gitlabSigstoreIdTokenMessage = [
+    'GitLab CI provenance needs an "id_tokens" entry with audience "sigstore"',
+    'exposed as SIGSTORE_ID_TOKEN. See the packtory readme for the workflow snippet.'
+].join(' ');
+function buildMissingProvenanceFileMessage(filePath) {
+    return [
+        `Provenance bundle file "${filePath}" does not exist.`,
+        "Generate it with your CI's attestation tool (e.g. actions/attest-build-provenance)",
+        'before running packtory.'
+    ].join(' ');
+}
+function buildInvalidProvenanceFileMessage(filePath) {
+    return [
+        `Provenance bundle file "${filePath}" is not a valid sigstore bundle.`,
+        'Re-generate it from the current build.'
+    ].join(' ');
+}
+function buildProvenanceDigestMismatchMessage(filePath) {
+    return [
+        `Provenance bundle at "${filePath}" was signed against a different tarball`,
+        'than the one packtory built. Re-generate the bundle from the current source —',
+        'shipping a mismatched attestation would defeat the purpose of provenance.'
+    ].join(' ');
+}
+function isProvenanceBundleError(message) {
+    return (message.includes('Bundle is invalid') ||
+        message.includes('Unsupported bundle format') ||
+        message.includes('Invalid bundle') ||
+        message.includes('subject does not match'));
+}
+function isProvenanceDigestMismatch(message) {
+    return message.includes('subject') || message.includes('digest');
+}
+function matchAutoModeError(error) {
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (message.includes(unsupportedProviderMarker)) {
+        return new Error(buildUnsupportedProviderMessage(getCiName(message)), { cause: error });
+    }
+    if (message.includes('"write" access to the "id-token" permission')) {
+        return new Error(githubActionsIdTokenMessage, { cause: error });
+    }
+    if (message.includes('SIGSTORE_ID_TOKEN')) {
+        return new Error(gitlabSigstoreIdTokenMessage, { cause: error });
+    }
+    return undefined;
+}
+function matchFileModeError(error, filePath) {
+    if (isRecord(error) && error.code === 'ENOENT') {
+        return new Error(buildMissingProvenanceFileMessage(filePath), { cause: error });
+    }
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (!isProvenanceBundleError(message)) {
+        return undefined;
+    }
+    if (isProvenanceDigestMismatch(message)) {
+        return new Error(buildProvenanceDigestMismatchMessage(filePath), { cause: error });
+    }
+    return new Error(buildInvalidProvenanceFileMessage(filePath), { cause: error });
+}
+function getProvenanceFilePath(publishSettings) {
+    if (publishSettings.access !== 'public') {
+        return undefined;
+    }
+    if (publishSettings.provenance?.type !== 'file') {
+        return undefined;
+    }
+    return publishSettings.provenance.path;
+}
+function ensureError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+export function remapPublishError(error, publishSettings) {
+    const autoModeError = matchAutoModeError(error);
+    if (autoModeError !== undefined) {
+        return autoModeError;
+    }
+    const filePath = getProvenanceFilePath(publishSettings);
+    if (filePath !== undefined) {
+        const fileModeError = matchFileModeError(error, filePath);
+        if (fileModeError !== undefined) {
+            return fileModeError;
+        }
+    }
+    return ensureError(error);
+}
+//# sourceMappingURL=publish-settings-bridge.js.map

package/bundle-emitter/publish-settings-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-settings-bridge.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/publish-settings-bridge.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,qCAAqC,CACjD,eAA0C;IAE1C,IAAI,eAAe,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAID,SAAS,WAAW,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AAChE,CAAC;AAED,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEhE,SAAS,SAAS,CAAC,OAAe;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjH,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAc;IACnD,OAAO;QACH,4DAA4D;QAC5D,gBAAgB,MAAM,GAAG;QACzB,0DAA0D;KAC7D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,2BAA2B,GAAG;IAChC,qFAAqF;IACrF,mDAAmD;CACtD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,4BAA4B,GAAG;IACjC,0EAA0E;IAC1E,iFAAiF;CACpF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,SAAS,iCAAiC,CAAC,QAAgB;IACvD,OAAO;QACH,2BAA2B,QAAQ,mBAAmB;QACtD,oFAAoF;QACpF,0BAA0B;KAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,iCAAiC,CAAC,QAAgB;IACvD,OAAO;QACH,2BAA2B,QAAQ,mCAAmC;QACtE,wCAAwC;KAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,oCAAoC,CAAC,QAAgB;IAC1D,OAAO;QACH,yBAAyB,QAAQ,0CAA0C;QAC3E,+EAA+E;QAC/E,2EAA2E;KAC9E,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC5C,OAAO,CACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC7C,CAAC;AACN,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IAC/C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,KAAK,CAAC,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,QAAgB;IACxD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,KAAK,CAAC,oCAAoC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,qBAAqB,CAAC,eAA0C;IACrE,IAAI,eAAe,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,eAA0C;IACxF,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,aAAa,CAAC;QACzB,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/bundle-emitter/registry-client.d.ts

@@ -1,21 +1,28 @@
 import type _npmFetch from 'npm-registry-fetch';
 import type { publish as _publish } from 'libnpmpublish';
 import { Maybe } from 'true-myth';
-import type { RegistrySettings } from '../config/registry-settings.ts';
-import type { BundlePackageJson } from '../version-manager/manifest/builder.ts';
+import type { Clock } from '../common/clock.ts';
+import type { PublishSettings } from '../config/publish-settings.ts';
+import type { PublishAuthStrategy, RegistrySettings } from '../config/registry-settings.ts';
+import type { BundlePackageJson } from '../version-manager/versioned-bundle.ts';
 type PublishFunction = typeof _publish;
 export type RegistryClientDependencies = {
     readonly npmFetch: typeof _npmFetch;
     readonly publish: PublishFunction;
+    readonly fetch: typeof globalThis.fetch;
+    readonly clock: Clock;
+    readonly resolveIdToken: (auth: Extract<PublishAuthStrategy, {
+        type: 'npm-oidc';
+    }>) => Promise<string>;
+    readonly promptForOneTimePassword?: (() => Promise<string | undefined>) | undefined;
 };
 export type RegistryClient = {
     fetchLatestVersion: (packageName: string, config: RegistrySettings) => Promise<Maybe<PackageVersionDetails>>;
-    publishPackage: (manifest: Readonly<BundlePackageJson>, tarData: Buffer, config: RegistrySettings) => Promise<void>;
-    fetchTarball: (tarballUrl: string, shasum: string) => Promise<Buffer>;
+    publishPackage: (manifest: Readonly<BundlePackageJson>, tarData: Buffer, config: RegistrySettings, publishSettings: PublishSettings) => Promise<void>;
+    fetchTarball: (tarballUrl: string, config: RegistrySettings) => Promise<Buffer>;
 };
-export type PackageVersionDetails = {
+type PackageVersionDetails = {
     readonly version: string;
-    readonly shasum: string;
     readonly tarballUrl: string;
 };
 export declare function createRegistryClient(dependencies: Readonly<RegistryClientDependencies>): RegistryClient;

package/bundle-emitter/registry-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/registry-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,KAAK,eAAe,GAAG,OAAO,QAAQ,CAAC;AAEvC,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7G,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpH,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACzE,CAAC;AAmCF,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B,CAAC;AAKF,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,GAAG,cAAc,CAsFvG"}
+{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/registry-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAGR,mBAAmB,EACnB,gBAAgB,EACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAGhF,KAAK,eAAe,GAAG,OAAO,QAAQ,CAAC;AAmBvC,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,mBAAmB,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvG,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;CACvF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7G,cAAc,EAAE,CACZ,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EACrC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,EACxB,eAAe,EAAE,eAAe,KAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF,CAAC;AAmDF,KAAK,qBAAqB,GAAG;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B,CAAC;AA4FF,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,GAAG,cAAc,CAwNvG"}

package/bundle-emitter/registry-client.js

@@ -1,93 +1,4 @@
 import { Maybe } from 'true-myth';
 import { z } from 'zod/mini';
-import { safeParse } from '@schema-hub/zod-error-formatter';
-function isFetchError(error) {
-    return typeof error === 'object' && error !== null && Object.hasOwn(error, 'statusCode');
-}
-function encodePackageName(name) {
-    return name.replace('/', '%2F');
-}
-const distTagsSchema = z.object({
-    latest: z.optional(z.string())
-});
-const versionDataSchema = z.object({
-    dist: z.object({ shasum: z.string(), tarball: z.string() })
-});
-const abbreviatedPackageResponseSchema = z.object({
-    name: z.string(),
-    'dist-tags': distTagsSchema,
-    versions: z.record(z.string(), versionDataSchema)
-});
-const httpStatusCode = {
-    notFound: 404,
-    forbidden: 403
-};
-export function createRegistryClient(dependencies) {
-    const { npmFetch, publish } = dependencies;
-    async function fetchRegistryEndpoint(endpoint, registrySettings) {
-        const acceptHeaderForFetchingAbbreviatedResponse = 'application/vnd.npm.install-v1+json';
-        return npmFetch.json(endpoint, {
-            forceAuth: {
-                alwaysAuth: true,
-                token: registrySettings.token
-            },
-            registry: registrySettings.registryUrl,
-            headers: { accept: acceptHeaderForFetchingAbbreviatedResponse }
-        });
-    }
-    async function fetchPackage(packageName, registrySettings) {
-        const endpointUri = `/${encodePackageName(packageName)}`;
-        try {
-            const response = await fetchRegistryEndpoint(endpointUri, registrySettings);
-            const result = safeParse(abbreviatedPackageResponseSchema, response);
-            if (!result.success) {
-                throw new Error('Got an invalid response from registry API');
-            }
-            return Maybe.just(result.data);
-        }
-        catch (error) {
-            if (isFetchError(error) &&
-                (error.statusCode === httpStatusCode.notFound || error.statusCode === httpStatusCode.forbidden)) {
-                return Maybe.nothing();
-            }
-            throw error;
-        }
-    }
-    return {
-        async fetchTarball(tarballUrl) {
-            const response = await npmFetch(tarballUrl);
-            return response.buffer();
-        },
-        async publishPackage(manifest, tarData, registrySettings) {
-            // eslint-disable-next-line @typescript-eslint/no-unsafe-type-assertion -- ok in this case
-            await publish(manifest, tarData, {
-                defaultTag: 'latest',
-                forceAuth: {
-                    alwaysAuth: true,
-                    token: registrySettings.token
-                },
-                registry: registrySettings.registryUrl
-            });
-        },
-        async fetchLatestVersion(packageName, registrySettings) {
-            const packageResponse = await fetchPackage(packageName, registrySettings);
-            if (packageResponse.isNothing) {
-                return Maybe.nothing();
-            }
-            const latestVersion = packageResponse.value['dist-tags'].latest;
-            if (latestVersion !== undefined) {
-                const versionData = packageResponse.value.versions[latestVersion];
-                if (versionData === undefined) {
-                    throw new Error(`Version "${latestVersion}" for package "${packageName}" is missing a shasum`);
-                }
-                return Maybe.just({
-                    version: latestVersion,
-                    shasum: versionData.dist.shasum,
-                    tarballUrl: versionData.dist.tarball
-                });
-            }
-            return Maybe.nothing();
-        }
-    };
-}
+import { buildPublishOptionsForPublishSettings, remapPublishError } from "./publish-settings-bridge.js";
 //# sourceMappingURL=registry-client.js.map

package/bundle-emitter/registry-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/registry-client.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,iCAAiC,CAAC;AAqB5D,SAAS,YAAY,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACnC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,cAAc;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC;CACpD,CAAC,CAAC;AAIH,MAAM,cAAc,GAAG;IACnB,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;CACjB,CAAC;AAWF,MAAM,UAAU,oBAAoB,CAAC,YAAkD;IACnF,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC;IAE3C,KAAK,UAAU,qBAAqB,CAChC,QAAgB,EAChB,gBAA4C;QAE5C,MAAM,0CAA0C,GAAG,qCAAqC,CAAC;QAEzF,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE;YAC3B,SAAS,EAAE;gBACP,UAAU,EAAE,IAAI;gBAChB,KAAK,EAAE,gBAAgB,CAAC,KAAK;aAChC;YACD,QAAQ,EAAE,gBAAgB,CAAC,WAAW;YACtC,OAAO,EAAE,EAAE,MAAM,EAAE,0CAA0C,EAAE;SAClE,CAAC,CAAC;IACP,CAAC;IAED,KAAK,UAAU,YAAY,CACvB,WAAmB,EACnB,gBAAkC;QAElC,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC,WAAW,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAC5E,MAAM,MAAM,GAAG,SAAS,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;YAErE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAClB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;YACjE,CAAC;YACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACtB,IACI,YAAY,CAAC,KAAK,CAAC;gBACnB,CAAC,KAAK,CAAC,UAAU,KAAK,cAAc,CAAC,QAAQ,IAAI,KAAK,CAAC,UAAU,KAAK,cAAc,CAAC,SAAS,CAAC,EACjG,CAAC;gBACC,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAED,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,OAAO;QACH,KAAK,CAAC,YAAY,CAAC,UAAU;YACzB,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5C,OAAO,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,EAAE,gBAAgB;YACpD,0FAA0F;YAC1F,MAAM,OAAO,CAAC,QAAsC,EAAE,OAAO,EAAE;gBAC3D,UAAU,EAAE,QAAQ;gBACpB,SAAS,EAAE;oBACP,UAAU,EAAE,IAAI;oBAChB,KAAK,EAAE,gBAAgB,CAAC,KAAK;iBAChC;gBACD,QAAQ,EAAE,gBAAgB,CAAC,WAAW;aACzC,CAAC,CAAC;QACP,CAAC;QAED,KAAK,CAAC,kBAAkB,CAAC,WAAW,EAAE,gBAAgB;YAClD,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;YAE1E,IAAI,eAAe,CAAC,SAAS,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,CAAC;YAED,MAAM,aAAa,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;YAChE,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;gBAClE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CAAC,YAAY,aAAa,kBAAkB,WAAW,uBAAuB,CAAC,CAAC;gBACnG,CAAC;gBAED,OAAO,KAAK,CAAC,IAAI,CAAC;oBACd,OAAO,EAAE,aAAa;oBACtB,MAAM,EAAE,WAAW,CAAC,IAAI,CAAC,MAAM;oBAC/B,UAAU,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;iBACvC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;QAC3B,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"registry-client.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/registry-client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU;AAU5B,OAAO,EAAE,qCAAqC,EAAE,iBAAiB,EAAE,MAAM,8BAA8B"}

package/bundle-emitter/repository-coherence.js

@@ -0,0 +1,54 @@
+import { normalizeRepositoryUrl } from "./repository-url-normalizer.js";
+function isNonEmptyString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+export function readCiEnvironment(env) {
+    return {
+        githubServerUrl: env.GITHUB_SERVER_URL,
+        githubRepository: env.GITHUB_REPOSITORY,
+        gitlabProjectUrl: env.CI_PROJECT_URL
+    };
+}
+export function getCiRepositoryUrl(env) {
+    if (isNonEmptyString(env.githubServerUrl) && isNonEmptyString(env.githubRepository)) {
+        return `${env.githubServerUrl}/${env.githubRepository}`;
+    }
+    if (isNonEmptyString(env.gitlabProjectUrl)) {
+        return env.gitlabProjectUrl;
+    }
+    return undefined;
+}
+const noRepositoryDeclaredMessage = [
+    'Provenance is enabled but the package has no repository declared.',
+    'Add a "repository" entry to additionalPackageJsonAttributes',
+    "so consumers can verify the attestation's source claim."
+].join('\n');
+const noCiDetectedMessage = [
+    'Provenance auto mode is enabled but no CI repository was detected.',
+    'Provenance auto mode requires GitHub Actions or GitLab CI; expected',
+    'one of GITHUB_SERVER_URL+GITHUB_REPOSITORY or CI_PROJECT_URL.'
+].join('\n');
+function buildMismatchMessage(configuredUrl, ciUrl) {
+    return [
+        "Provenance is enabled but the package's repository URL does not match",
+        'the CI repository.',
+        `Configured repository: ${configuredUrl}`,
+        `CI repository:         ${ciUrl}`,
+        'Either correct the package.json repository field, or disable provenance',
+        'if the mismatch is intentional.'
+    ].join('\n');
+}
+export function assertRepositoryCoherence(manifest, ciRepositoryUrl) {
+    const normalizedManifestUrl = normalizeRepositoryUrl(manifest.repository);
+    if (normalizedManifestUrl === undefined) {
+        throw new Error(noRepositoryDeclaredMessage);
+    }
+    const normalizedCiUrl = normalizeRepositoryUrl(ciRepositoryUrl);
+    if (normalizedCiUrl === undefined) {
+        throw new Error(noCiDetectedMessage);
+    }
+    if (normalizedCiUrl !== normalizedManifestUrl) {
+        throw new Error(buildMismatchMessage(normalizedManifestUrl, normalizedCiUrl));
+    }
+}
+//# sourceMappingURL=repository-coherence.js.map

package/bundle-emitter/repository-coherence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-coherence.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/repository-coherence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAQxE,SAAS,gBAAgB,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,GAAiD;IAC/E,OAAO;QACH,eAAe,EAAE,GAAG,CAAC,iBAAiB;QACtC,gBAAgB,EAAE,GAAG,CAAC,iBAAiB;QACvC,gBAAgB,EAAE,GAAG,CAAC,cAAc;KACvC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAkB;IACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAClF,OAAO,GAAG,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,gBAAgB,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACzC,OAAO,GAAG,CAAC,gBAAgB,CAAC;IAChC,CAAC;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,2BAA2B,GAAG;IAChC,mEAAmE;IACnE,6DAA6D;IAC7D,yDAAyD;CAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,mBAAmB,GAAG;IACxB,oEAAoE;IACpE,qEAAqE;IACrE,+DAA+D;CAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,oBAAoB,CAAC,aAAqB,EAAE,KAAa;IAC9D,OAAO;QACH,uEAAuE;QACvE,oBAAoB;QACpB,0BAA0B,aAAa,EAAE;QACzC,0BAA0B,KAAK,EAAE;QACjC,yEAAyE;QACzE,iCAAiC;KACpC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACrC,QAA2C,EAC3C,eAAmC;IAEnC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC1E,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,eAAe,GAAG,sBAAsB,CAAC,eAAe,CAAC,CAAC;IAChE,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,IAAI,eAAe,KAAK,qBAAqB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,qBAAqB,EAAE,eAAe,CAAC,CAAC,CAAC;IAClF,CAAC;AACL,CAAC"}

package/bundle-emitter/repository-url-normalizer.js

@@ -0,0 +1,2 @@
+import HostedGitInfo from 'hosted-git-info';
+//# sourceMappingURL=repository-url-normalizer.js.map

package/bundle-emitter/repository-url-normalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository-url-normalizer.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/repository-url-normalizer.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,iBAAiB"}

package/checks/check-runner.js

@@ -1,13 +1,2 @@
-import { noDuplicatedFilesRule } from "./rules/no-duplicated-files.js";
-const checkRules = [noDuplicatedFilesRule];
-export function runChecks(params) {
-    const { settings, bundles: packages } = params;
-    return checkRules
-        .filter((rule) => {
-        return rule.isEnabled(settings);
-    })
-        .flatMap((rule) => {
-        return rule.run({ bundles: packages }, settings);
-    });
-}
+import { allRules } from "./rules/registry.js";
 //# sourceMappingURL=check-runner.js.map

package/checks/check-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"check-runner.js","sourceRoot":"","sources":["../../../../source/checks/check-runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAMvE,MAAM,UAAU,GAAyB,CAAC,qBAAqB,CAAC,CAAC;AAEjE,MAAM,UAAU,SAAS,CAAC,MAAyB;IAC/C,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC;IAE/C,OAAO,UAAU;SACZ,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACb,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC,CAAC;SACD,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"check-runner.js","sourceRoot":"","sources":["../../../../source/checks/check-runner.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB"}

package/checks/rule.js

@@ -0,0 +1,5 @@
+import { z } from 'zod/mini';
+import { nonEmptyStringSchema } from "../config/base-validations.js";
+export const enabledOnlyGlobalSchema = z.strictObject({ enabled: z.boolean() });
+export const emptyPerPackageSchema = z.strictObject({});
+//# sourceMappingURL=rule.js.map

package/checks/rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule.js","sourceRoot":"","sources":["../../../../source/checks/rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAoB,MAAM,UAAU;AAC9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B;AAGpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC"}

package/checks/rules/max-bundle-size.js

@@ -0,0 +1,9 @@
+import { z } from 'zod/mini';
+const ruleName = 'maxBundleSize';
+export const maxBundleSizeRule = {
+    name: ruleName,
+    globalSchema,
+    perPackageSchema,
+    run
+};
+//# sourceMappingURL=max-bundle-size.js.map

package/checks/rules/max-bundle-size.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"max-bundle-size.js","sourceRoot":"","sources":["../../../../../source/checks/rules/max-bundle-size.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU;AAI5B,MAAM,QAAQ,GAAG,eAAe;AAgDhC,MAAM,CAAC,MAAM,iBAAiB,GAAyE;IACnG,IAAI,EAAE,QAAQ;IACd,YAAY;IACZ,gBAAgB;IAChB,GAAG;CACN"}

package/checks/rules/no-dev-dependency-imports.js

@@ -0,0 +1,9 @@
+import { emptyPerPackageSchema, enabledOnlyGlobalSchema } from "../rule.js";
+const ruleName = 'noDevDependencyImports';
+export const noDevDependencyImportsRule = {
+    name: ruleName,
+    globalSchema: enabledOnlyGlobalSchema,
+    perPackageSchema: emptyPerPackageSchema,
+    run
+};
+//# sourceMappingURL=no-dev-dependency-imports.js.map