packtory 0.0.8 → 0.0.10

package/linker/substitute-bundles.js

@@ -1,77 +1,5 @@
 import { Maybe } from 'true-myth';
+import { getPublicModuleSpecifierForSourcePath } from "../package-surface/modules.js";
 import { createSubstitutedResourceGraph } from "./substituted-resource-graph.js";
 import { replaceImportPaths } from "./source-modifier/import-paths.js";
-function findReplacement(file, bundleDependencies) {
-    for (const bundle of bundleDependencies) {
-        const matchingContent = bundle.contents.find((content) => {
-            return content.fileDescription.sourceFilePath === file;
-        });
-        if (matchingContent !== undefined) {
-            const targetPath = `${bundle.name}/${matchingContent.fileDescription.targetFilePath}`;
-            return Maybe.just({
-                targetPath,
-                packageName: bundle.name
-            });
-        }
-    }
-    return Maybe.nothing();
-}
-function findAllPathReplacements(files, bundleDependencies) {
-    const allReplacements = new Map();
-    const usedBundleDependencies = [];
-    for (const file of files) {
-        const result = findReplacement(file, bundleDependencies);
-        if (result.isJust) {
-            const { targetPath, packageName } = result.value;
-            allReplacements.set(file, targetPath);
-            usedBundleDependencies.push(packageName);
-        }
-    }
-    return { importPathReplacements: allReplacements, bundleDependencies: usedBundleDependencies };
-}
-export function substituteDependencies(resourceGraph, bundleDependencies) {
-    const substitutedGraph = createSubstitutedResourceGraph();
-    const outstandingConnections = [];
-    resourceGraph.traverse((node) => {
-        if (!substitutedGraph.isKnown(node.id)) {
-            const directDependencies = Array.from(node.adjacentNodeIds);
-            const replacements = findAllPathReplacements(directDependencies, bundleDependencies);
-            for (const file of directDependencies) {
-                if (!replacements.importPathReplacements.has(file)) {
-                    outstandingConnections.push({ from: node.id, to: file });
-                }
-            }
-            if (replacements.importPathReplacements.size > 0) {
-                const substitutionContent = replaceImportPaths(node.data.project, node.data.fileDescription.sourceFilePath, node.data.fileDescription.content, replacements.importPathReplacements);
-                substitutedGraph.add(node.id, {
-                    fileDescription: {
-                        sourceFilePath: node.data.fileDescription.sourceFilePath,
-                        targetFilePath: node.data.fileDescription.targetFilePath,
-                        isExecutable: node.data.fileDescription.isExecutable,
-                        content: substitutionContent
-                    },
-                    externalDependencies: node.data.externalDependencies,
-                    bundleDependencies: replacements.bundleDependencies,
-                    isSubstituted: true,
-                    isExplicitlyIncluded: node.data.isExplicitlyIncluded
-                });
-            }
-            else {
-                substitutedGraph.add(node.id, {
-                    fileDescription: node.data.fileDescription,
-                    externalDependencies: node.data.externalDependencies,
-                    bundleDependencies: [],
-                    isSubstituted: false,
-                    isExplicitlyIncluded: node.data.isExplicitlyIncluded
-                });
-            }
-        }
-    });
-    for (const connection of outstandingConnections) {
-        if (!substitutedGraph.hasConnection(connection.from, connection.to)) {
-            substitutedGraph.connect(connection.from, connection.to);
-        }
-    }
-    return substitutedGraph;
-}
 //# sourceMappingURL=substitute-bundles.js.map

package/linker/substitute-bundles.js.map

@@ -1 +1 @@
-{"version":3,"file":"substitute-bundles.js","sourceRoot":"","sources":["../../../../source/linker/substitute-bundles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,8BAA8B,EAAiC,MAAM,iCAAiC,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAOvE,SAAS,eAAe,CAAC,IAAY,EAAE,kBAAuD;IAC1F,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,CAAC;QACtC,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YACrD,OAAO,OAAO,CAAC,eAAe,CAAC,cAAc,KAAK,IAAI,CAAC;QAC3D,CAAC,CAAC,CAAC;QACH,IAAI,eAAe,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,UAAU,GAAG,GAAG,MAAM,CAAC,IAAI,IAAI,eAAe,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC;YACtF,OAAO,KAAK,CAAC,IAAI,CAAC;gBACd,UAAU;gBACV,WAAW,EAAE,MAAM,CAAC,IAAI;aAC3B,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;AAC3B,CAAC;AAOD,SAAS,uBAAuB,CAC5B,KAAwB,EACxB,kBAAuD;IAEvD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAkB,CAAC;IAClD,MAAM,sBAAsB,GAAa,EAAE,CAAC;IAE5C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;QACzD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC;YACjD,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;YACtC,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,CAAC;IACL,CAAC;IAED,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAClC,aAA4B,EAC5B,kBAAuD;IAEvD,MAAM,gBAAgB,GAAG,8BAA8B,EAAE,CAAC;IAC1D,MAAM,sBAAsB,GAAmC,EAAE,CAAC;IAElE,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE;QAC5B,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACrC,MAAM,kBAAkB,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC5D,MAAM,YAAY,GAAG,uBAAuB,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAC;YAErF,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;gBACpC,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,sBAAsB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC7D,CAAC;YACL,CAAC;YAED,IAAI,YAAY,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC/C,MAAM,mBAAmB,GAAG,kBAAkB,CAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,EACjB,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc,EACxC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,EACjC,YAAY,CAAC,sBAAsB,CACtC,CAAC;gBAEF,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;oBAC1B,eAAe,EAAE;wBACb,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc;wBACxD,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,cAAc;wBACxD,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY;wBACpD,OAAO,EAAE,mBAAmB;qBAC/B;oBACD,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB;oBACpD,kBAAkB,EAAE,YAAY,CAAC,kBAAkB;oBACnD,aAAa,EAAE,IAAI;oBACnB,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB;iBACvD,CAAC,CAAC;YACP,CAAC;iBAAM,CAAC;gBACJ,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE;oBAC1B,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,eAAe;oBAC1C,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB;oBACpD,kBAAkB,EAAE,EAAE;oBACtB,aAAa,EAAE,KAAK;oBACpB,oBAAoB,EAAE,IAAI,CAAC,IAAI,CAAC,oBAAoB;iBACvD,CAAC,CAAC;YACP,CAAC;QACL,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,UAAU,IAAI,sBAAsB,EAAE,CAAC;QAC9C,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAClE,gBAAgB,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;IACL,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC5B,CAAC"}
+{"version":3,"file":"substitute-bundles.js","sourceRoot":"","sources":["../../../../source/linker/substitute-bundles.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW;AACjC,OAAO,EAAE,qCAAqC,EAAE,MAAM,+BAA+B;AAGrF,OAAO,EAAE,8BAA8B,EAAiC,MAAM,iCAAiC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC"}

package/linker/substituted-resource-graph.js

@@ -1,78 +1,3 @@
+import { unique } from 'remeda';
 import { createDirectedGraph } from "../directed-graph/graph.js";
-import { uniqueList } from "../list/unique-list.js";
-function addOrCreateReference(externalDependencyName, reference, externalDependency) {
-    if (externalDependency === undefined) {
-        return {
-            name: externalDependencyName,
-            referencedFrom: [reference]
-        };
-    }
-    return {
-        name: externalDependencyName,
-        referencedFrom: uniqueList([...externalDependency.referencedFrom, reference])
-    };
-}
-function createFlattenCollectors() {
-    const contents = [];
-    const linkedBundleDependencies = new Map();
-    const externalDependencies = new Map();
-    const visited = new Set();
-    function collect(filePath, data, directDependencies) {
-        if (visited.has(filePath)) {
-            return;
-        }
-        visited.add(filePath);
-        contents.push({
-            fileDescription: data.fileDescription,
-            directDependencies,
-            isSubstituted: data.isSubstituted,
-            isExplicitlyIncluded: data.isExplicitlyIncluded
-        });
-        for (const bundleDependencyName of data.bundleDependencies) {
-            const bundleDependency = linkedBundleDependencies.get(bundleDependencyName);
-            linkedBundleDependencies.set(bundleDependencyName, addOrCreateReference(bundleDependencyName, filePath, bundleDependency));
-        }
-        for (const externalDependencyName of data.externalDependencies) {
-            const externalDependency = externalDependencies.get(externalDependencyName);
-            externalDependencies.set(externalDependencyName, addOrCreateReference(externalDependencyName, filePath, externalDependency));
-        }
-    }
-    return { collect, contents, linkedBundleDependencies, externalDependencies };
-}
-export function createSubstitutedResourceGraph() {
-    const graph = createDirectedGraph();
-    const nodeDataByFilePath = new Map();
-    return {
-        add(filePath, data) {
-            graph.addNode(filePath, data);
-            nodeDataByFilePath.set(filePath, data);
-        },
-        isKnown: graph.hasNode,
-        connect(fromFilePath, toFilePath) {
-            graph.connect({ from: fromFilePath, to: toFilePath });
-        },
-        hasConnection(fromFilePath, toFilePath) {
-            return graph.hasConnection({ from: fromFilePath, to: toFilePath });
-        },
-        flatten(entryPoints) {
-            const { collect, contents, linkedBundleDependencies, externalDependencies } = createFlattenCollectors();
-            for (const entryPoint of entryPoints) {
-                graph.visitBreadthFirstSearch(entryPoint, (node) => {
-                    collect(node.id, node.data, node.adjacentNodeIds);
-                });
-            }
-            for (const [filePath, data] of nodeDataByFilePath) {
-                if (data.isExplicitlyIncluded) {
-                    const directDependencies = graph.getAdjacentIds(filePath);
-                    collect(filePath, data, directDependencies);
-                }
-            }
-            return {
-                contents,
-                linkedBundleDependencies,
-                externalDependencies
-            };
-        }
-    };
-}
 //# sourceMappingURL=substituted-resource-graph.js.map

package/linker/substituted-resource-graph.js.map

@@ -1 +1 @@
-{"version":3,"file":"substituted-resource-graph.js","sourceRoot":"","sources":["../../../../source/linker/substituted-resource-graph.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAiBpD,SAAS,oBAAoB,CACzB,sBAA8B,EAC9B,SAAiB,EACjB,kBAAuC;IAEvC,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO;YACH,IAAI,EAAE,sBAAsB;YAC5B,cAAc,EAAE,CAAC,SAAS,CAAC;SAC9B,CAAC;IACN,CAAC;IAED,OAAO;QACH,IAAI,EAAE,sBAAsB;QAC5B,cAAc,EAAE,UAAU,CAAC,CAAC,GAAG,kBAAkB,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;KAChF,CAAC;AACN,CAAC;AAaD,SAAS,uBAAuB;IAC5B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,wBAAwB,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvE,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAA8B,CAAC;IACnE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,SAAS,OAAO,CACZ,QAAgB,EAChB,IAAsC,EACtC,kBAAuC;QAEvC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxB,OAAO;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC;YACV,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,kBAAkB;YAClB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;SAClD,CAAC,CAAC;QAEH,KAAK,MAAM,oBAAoB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YACzD,MAAM,gBAAgB,GAAG,wBAAwB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC5E,wBAAwB,CAAC,GAAG,CACxB,oBAAoB,EACpB,oBAAoB,CAAC,oBAAoB,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CACzE,CAAC;QACN,CAAC;QAED,KAAK,MAAM,sBAAsB,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC7D,MAAM,kBAAkB,GAAG,oBAAoB,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC5E,oBAAoB,CAAC,GAAG,CACpB,sBAAsB,EACtB,oBAAoB,CAAC,sBAAsB,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAC7E,CAAC;QACN,CAAC;IACL,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,8BAA8B;IAC1C,MAAM,KAAK,GAAG,mBAAmB,EAA4C,CAAC;IAC9E,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA4C,CAAC;IAE/E,OAAO;QACH,GAAG,CAAC,QAAQ,EAAE,IAAI;YACd,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YAC9B,kBAAkB,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,KAAK,CAAC,OAAO;QAEtB,OAAO,CAAC,YAAY,EAAE,UAAU;YAC5B,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC;QAED,aAAa,CAAC,YAAY,EAAE,UAAU;YAClC,OAAO,KAAK,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACvE,CAAC;QAED,OAAO,CAAC,WAAW;YACf,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,GAAG,uBAAuB,EAAE,CAAC;YAExG,KAAK,MAAM,UAAU,IAAI,WAAW,EAAE,CAAC;gBACnC,KAAK,CAAC,uBAAuB,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,EAAE;oBAC/C,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;gBACtD,CAAC,CAAC,CAAC;YACP,CAAC;YAED,KAAK,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,kBAAkB,EAAE,CAAC;gBAChD,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;oBAC5B,MAAM,kBAAkB,GAAG,KAAK,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;oBAC1D,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;gBAChD,CAAC;YACL,CAAC;YAED,OAAO;gBACH,QAAQ;gBACR,wBAAwB;gBACxB,oBAAoB;aACvB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"substituted-resource-graph.js","sourceRoot":"","sources":["../../../../source/linker/substituted-resource-graph.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ;AAG/B,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B"}

package/npm-oidc-id-token-resolver.js

@@ -0,0 +1,56 @@
+import { z } from 'zod/mini';
+const githubActionsAudience = 'npm:registry.npmjs.org';
+const defaultOidcIdTokenEnvVariableName = 'NPM_ID_TOKEN';
+const gitHubActionsIdTokenResponseSchema = z.object({
+    value: z.string().check(z.minLength(1))
+});
+async function parseJsonResponse(response) {
+    return response.json();
+}
+function getGitHubActionsRequestConfig(getEnvironmentVariable) {
+    const requestUrl = getEnvironmentVariable('ACTIONS_ID_TOKEN_REQUEST_URL');
+    const requestToken = getEnvironmentVariable('ACTIONS_ID_TOKEN_REQUEST_TOKEN');
+    if (requestUrl === undefined || requestToken === undefined) {
+        throw new Error('GitHub Actions OIDC requires ACTIONS_ID_TOKEN_REQUEST_URL and ACTIONS_ID_TOKEN_REQUEST_TOKEN');
+    }
+    return { requestUrl, requestToken };
+}
+function parseGitHubActionsIdTokenResponse(body) {
+    const result = gitHubActionsIdTokenResponseSchema.safeParse(body);
+    if (!result.success) {
+        throw new Error('GitHub Actions OIDC token response did not contain a usable id_token');
+    }
+    return result.data.value;
+}
+function usesGitHubActionsProvider(auth, getEnvironmentVariable) {
+    const provider = auth.provider ?? 'auto';
+    const runsInGitHubActions = getEnvironmentVariable('GITHUB_ACTIONS') === 'true';
+    return provider === 'github-actions' || (provider === 'auto' && runsInGitHubActions);
+}
+export function createNpmOidcIdTokenResolver(dependencies) {
+    const { fetch: fetchImplementation, getEnvironmentVariable } = dependencies;
+    async function fetchGitHubActionsIdToken() {
+        const { requestUrl, requestToken } = getGitHubActionsRequestConfig(getEnvironmentVariable);
+        const url = new URL(requestUrl);
+        url.searchParams.set('audience', githubActionsAudience);
+        const response = await fetchImplementation(url, {
+            headers: { Authorization: `Bearer ${requestToken}` }
+        });
+        if (!response.ok) {
+            throw new Error(`GitHub Actions OIDC token request failed with status ${response.status}`);
+        }
+        return parseGitHubActionsIdTokenResponse(await parseJsonResponse(response));
+    }
+    return async (auth) => {
+        if (usesGitHubActionsProvider(auth, getEnvironmentVariable)) {
+            return fetchGitHubActionsIdToken();
+        }
+        const variableName = auth.idTokenEnvVar ?? defaultOidcIdTokenEnvVariableName;
+        const value = getEnvironmentVariable(variableName);
+        if (value === undefined) {
+            throw new Error(`OIDC id_token environment variable "${variableName}" is missing`);
+        }
+        return value;
+    };
+}
+//# sourceMappingURL=npm-oidc-id-token-resolver.js.map

package/npm-oidc-id-token-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"npm-oidc-id-token-resolver.js","sourceRoot":"","sources":["../../../source/npm-oidc-id-token-resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,UAAU,CAAC;AAG7B,MAAM,qBAAqB,GAAG,wBAAwB,CAAC;AACvD,MAAM,iCAAiC,GAAG,cAAc,CAAC;AAWzD,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;CAC1C,CAAC,CAAC;AAEH,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IAC/C,OAAO,QAAQ,CAAC,IAAI,EAAsB,CAAC;AAC/C,CAAC;AAED,SAAS,6BAA6B,CAAC,sBAAoE;IAIvG,MAAM,UAAU,GAAG,sBAAsB,CAAC,8BAA8B,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,sBAAsB,CAAC,gCAAgC,CAAC,CAAC;IAE9E,IAAI,UAAU,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,8FAA8F,CAAC,CAAC;IACpH,CAAC;IAED,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,iCAAiC,CAAC,IAAa;IACpD,MAAM,MAAM,GAAG,kCAAkC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;AAC7B,CAAC;AAED,SAAS,yBAAyB,CAC9B,IAAiB,EACjB,sBAAoE;IAEpE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;IACzC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC;IAChF,OAAO,QAAQ,KAAK,gBAAgB,IAAI,CAAC,QAAQ,KAAK,MAAM,IAAI,mBAAmB,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,4BAA4B,CACxC,YAA0D;IAE1D,MAAM,EAAE,KAAK,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,GAAG,YAAY,CAAC;IAE5E,KAAK,UAAU,yBAAyB;QACpC,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,6BAA6B,CAAC,sBAAsB,CAAC,CAAC;QAC3F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;QAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,qBAAqB,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,GAAG,EAAE;YAC5C,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,YAAY,EAAE,EAAE;SACvD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,wDAAwD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,OAAO,iCAAiC,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChF,CAAC;IAED,OAAO,KAAK,EAAE,IAAI,EAAE,EAAE;QAClB,IAAI,yBAAyB,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,CAAC;YAC1D,OAAO,yBAAyB,EAAE,CAAC;QACvC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,IAAI,iCAAiC,CAAC;QAC7E,MAAM,KAAK,GAAG,sBAAsB,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uCAAuC,YAAY,cAAc,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;AACN,CAAC"}

package/package-surface/modules.js

@@ -0,0 +1,89 @@
+import { isImplicitPackageSurface } from "./surface.js";
+
+function getRoot(bundle, rootId) {
+    const root = bundle.roots[rootId];
+    if (root === undefined) {
+        throw new Error(`Package "${bundle.name}" references unknown root "${rootId}"`);
+    }
+    return root;
+}
+
+function resolveExplicitExportKey(packageName, specifier) {
+    if (specifier === packageName) {
+        return '.';
+    }
+    if (specifier.startsWith(`${packageName}/`)) {
+        return `./${specifier.slice(packageName.length + 1)}`;
+    }
+    return undefined;
+}
+
+function resolveExplicitPublicModuleSourceFilePath(bundle, surface, specifier) {
+    const exportKey = resolveExplicitExportKey(bundle.name, specifier);
+    if (exportKey === undefined) {
+        return undefined;
+    }
+    const { modules } = surface.packageInterface;
+    if (modules === undefined) {
+        return undefined;
+    }
+    const matchingEntry = modules.find((entry) => {
+        return entry.export === exportKey;
+    });
+    return matchingEntry === undefined ? undefined : getRoot(bundle, matchingEntry.root).js.sourceFilePath;
+}
+function resolveImplicitSpecifier(bundleName, specifier) {
+    if (specifier === bundleName) {
+        return ['root'];
+    }
+    const prefix = `${bundleName}/`;
+    if (!specifier.startsWith(prefix)) {
+        return ['private'];
+    }
+    return ['content', specifier.slice(prefix.length)];
+}
+function resolveImplicitPublicModuleSourceFilePath(bundle, surface, specifier) {
+    const [kind, targetFilePath] = resolveImplicitSpecifier(bundle.name, specifier);
+    const handlers = {
+        root: () => {
+            return getRoot(bundle, surface.defaultModuleRoot).js.sourceFilePath;
+        },
+        content: () => {
+            return bundle.contents.find((entry) => {
+                return entry.fileDescription.targetFilePath === targetFilePath;
+            })?.fileDescription.sourceFilePath;
+        }
+    };
+    return kind === 'private' ? undefined : handlers[kind]();
+}
+export function getPublicRootIds(bundle) {
+    if (isImplicitPackageSurface(bundle.surface)) {
+        return new Set(Object.keys(bundle.roots));
+    }
+    const rootIds = new Set();
+    for (const entry of bundle.surface.packageInterface.modules ?? []) {
+        rootIds.add(entry.root);
+    }
+    for (const entry of bundle.surface.packageInterface.bins ?? []) {
+        rootIds.add(entry.root);
+    }
+    return rootIds;
+}
+export function getEntryRootIds(bundle) {
+    if (isImplicitPackageSurface(bundle.surface)) {
+        return new Set(Object.keys(bundle.roots));
+    }
+    return new Set([
+        ...getPublicRootIds(bundle),
+        ...(bundle.surface.packageInterface.privateRoots ?? [])
+    ]);
+}
+
+export function resolvePublicModuleSourceFilePath(bundle, specifier) {
+    if (bundle.surface.mode === 'explicit') {
+        return resolveExplicitPublicModuleSourceFilePath(bundle, bundle.surface, specifier);
+    }
+    return resolveImplicitPublicModuleSourceFilePath(bundle, bundle.surface, specifier);
+}
+
+//# sourceMappingURL=modules.js.map

package/package-surface/modules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modules.js","sourceRoot":"","sources":["../../../../source/package-surface/modules.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,wBAAwB,EAAuB,MAAM,cAAc;;AA+B5E,SAAS,OAAO,CAAC,MAA0C,EAAE,MAAc;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,YAAY,MAAM,CAAC,IAAI,8BAA8B,MAAM,GAAG,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,IAAI,CAAC;AAChB;;AAUA,SAAS,wBAAwB,CAAC,WAAmB,EAAE,SAAiB;IACpE,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACf,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,EAAE,CAAC;QAC1C,OAAO,KAAK,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;IAC1D,CAAC;IACD,OAAO,SAAS,CAAC;AACrB;;AAwTA,SAAS,yCAAyC,CAC9C,MAAkB,EAClB,OAAwB,EACxB,SAAiB;IAEjB,MAAM,SAAS,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAC7C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QACzC,OAAO,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,OAAO,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC;AAC3G;AAEA,SAAS,wBAAwB,CAAC,UAAkB,EAAE,SAAiB;IACnE,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,UAAU,GAAG,CAAC;IAChC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,SAAS,CAAC,CAAC;IACvB,CAAC;IAED,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACvD;AAEA,SAAS,yCAAyC,CAC9C,MAAkB,EAClB,OAAwB,EACxB,SAAiB;IAEjB,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG;QACb,IAAI,EAAE,GAAW,EAAE;YACf,OAAO,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC;QACxE,CAAC;QACD,OAAO,EAAE,GAAuB,EAAE;YAC9B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBAClC,OAAO,KAAK,CAAC,eAAe,CAAC,cAAc,KAAK,cAAc,CAAC;YACnE,CAAC,CAAC,EAAE,eAAe,CAAC,cAAc,CAAC;QACvC,CAAC;KACqG,CAAC;IAE3G,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AAC7D;AAEA,MAAM,UAAU,gBAAgB,CAAC,MAA6C;IAC1E,IAAI,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAChE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,OAAO,CAAC;AACnB;AAEA,MAAM,UAAU,eAAe,CAAC,MAA6C;IACzE,IAAI,wBAAwB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,GAAG,CAAC;QACX,GAAG,gBAAgB,CAAC,MAAM,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,YAAY,IAAI,EAAE,CAAC;KAC1D,CAAC,CAAC;AACP;;AASA,MAAM,UAAU,iCAAiC,CAAC,MAAkB,EAAE,SAAiB;IACnF,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrC,OAAO,yCAAyC,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,yCAAyC,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AACxF"}

package/package-surface/public-module-usage.js

@@ -0,0 +1,37 @@
+import { ts as typescript } from 'ts-morph';
+import { isCodeFile } from "../common/code-files.js";
+import { resolvePublicModuleSourceFilePath } from "./modules.js";
+function recordUsage(usages, bundleName, sourceFilePath) {
+    const existing = usages.get(bundleName) ?? new Set();
+    existing.add(sourceFilePath);
+    usages.set(bundleName, existing);
+}
+function* collectModuleSpecifiers(bundle) {
+    for (const resource of bundle.contents) {
+        const { targetFilePath, content } = resource.fileDescription;
+        if (isCodeFile(targetFilePath)) {
+            const parsedFile = typescript.preProcessFile(content, true);
+            for (const literal of parsedFile.importedFiles) {
+                yield literal.fileName;
+            }
+        }
+    }
+}
+export function collectPublicModuleUsage(bundles) {
+    const usages = new Map();
+    for (const consumer of bundles) {
+        const specifiers = collectModuleSpecifiers(consumer);
+        for (const specifier of specifiers) {
+            for (const target of bundles) {
+                if (target.name !== consumer.name) {
+                    const sourceFilePath = resolvePublicModuleSourceFilePath(target, specifier);
+                    if (sourceFilePath !== undefined) {
+                        recordUsage(usages, target.name, sourceFilePath);
+                    }
+                }
+            }
+        }
+    }
+    return usages;
+}
+//# sourceMappingURL=public-module-usage.js.map

package/package-surface/public-module-usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-module-usage.js","sourceRoot":"","sources":["../../../../source/package-surface/public-module-usage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,IAAI,UAAU,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,OAAO,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AAEjE,SAAS,WAAW,CAAC,MAAgC,EAAE,UAAkB,EAAE,cAAsB;IAC7F,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;IAC7D,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7B,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AACrC,CAAC;AAED,QAAQ,CAAC,CAAC,uBAAuB,CAAC,MAAsB;IACpD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAC7D,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC5D,KAAK,MAAM,OAAO,IAAI,UAAU,CAAC,aAAa,EAAE,CAAC;gBAC7C,MAAM,OAAO,CAAC,QAAQ,CAAC;YAC3B,CAAC;QACL,CAAC;IACL,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAkC;IACvE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE9C,KAAK,MAAM,QAAQ,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACrD,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;gBAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;oBAChC,MAAM,cAAc,GAAG,iCAAiC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;oBAC5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;wBAC/B,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;oBACrD,CAAC;gBACL,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAClB,CAAC"}

package/package-surface/surface.d.ts

@@ -0,0 +1,12 @@
+import type { PackageInterface } from '../config/package-interface.ts';
+export type ImplicitPackageSurface = {
+    readonly mode: 'implicit';
+    readonly defaultModuleRoot: string;
+};
+export type ExplicitPackageSurface = {
+    readonly mode: 'explicit';
+    readonly packageInterface: PackageInterface;
+};
+export type PackageSurface = ExplicitPackageSurface | ImplicitPackageSurface;
+export declare function isImplicitPackageSurface(packageSurface: PackageSurface): packageSurface is ImplicitPackageSurface;
+//# sourceMappingURL=surface.d.ts.map

package/package-surface/surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface.d.ts","sourceRoot":"","sources":["../../../../source/package-surface/surface.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC;AAEtE,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,MAAM,sBAAsB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC/C;AAED,MAAM,MAAM,cAAc,GAAG,sBAAsB,GAAG,sBAAsB;AAgB5E,wBAAgB,wBAAwB,CAAC,cAAc,EAAE,cAAc,GAAG,cAAc,IAAI,sBAAsB"}

package/package-surface/surface.js

@@ -0,0 +1 @@
+//# sourceMappingURL=surface.js.map

package/package-surface/surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface.js","sourceRoot":"","sources":["../../../../source/package-surface/surface.ts"],"names":[],"mappings":""}

package/package.json

@@ -4,27 +4,58 @@
         "Christian Rackerseder <github@echooff.de>"
     ],
     "dependencies": {
+        "@cyclonedx/cyclonedx-library": "10.0.0",
+        "@jridgewell/gen-mapping": "0.3.13",
+        "@jridgewell/trace-mapping": "0.3.31",
         "@schema-hub/zod-error-formatter": "0.0.11",
-        "@ts-morph/common": "0.28.1",
+        "@ts-morph/common": "0.29.0",
         "@types/libnpmpublish": "9.0.1",
         "@types/npm-registry-fetch": "8.0.9",
         "common-tags": "1.8.2",
-        "effect": "2.2.5",
+        "hosted-git-info": "10.1.0",
         "libnpmpublish": "11.1.3",
-        "mitt": "3.0.1",
+        "npm-package-arg": "14.0.0",
         "npm-registry-fetch": "19.1.1",
-        "semver": "7.7.4",
-        "ssri": "13.0.1",
+        "remeda": "2.34.1",
+        "semver": "7.8.0",
+        "spdx-expression-parse": "4.0.0",
         "tar-stream": "3.1.8",
         "true-myth": "9.3.1",
         "ts-morph": "27.0.2",
-        "type-fest": "5.4.4",
+        "type-fest": "5.6.0",
         "unix-permissions": "6.0.1",
-        "zod": "4.3.6"
+        "zod": "4.4.3"
     },
     "description": "Enable customized npm package bundling and publishing using packtory’s versatile API.",
     "engines": {
-        "node": "^22 || ^24"
+        "node": "^24 || ^26"
+    },
+    "exports": {
+        ".": {
+            "import": "./packages/packtory/packtory.entry-point.js",
+            "types": "./packages/packtory/packtory.entry-point.d.ts"
+        },
+        "./bundle-emitter/repository-coherence.js": {
+            "import": "./bundle-emitter/repository-coherence.js"
+        },
+        "./common/clock.js": {
+            "import": "./common/clock.js",
+            "types": "./common/clock.d.ts"
+        },
+        "./common/code-files.js": {
+            "import": "./common/code-files.js"
+        },
+        "./packages/package-processor.composition.js": {
+            "import": "./packages/package-processor.composition.js"
+        },
+        "./packtory/packtory.js": {
+            "import": "./packtory/packtory.js",
+            "types": "./packtory/packtory.d.ts"
+        },
+        "./packtory/scheduler.js": {
+            "import": "./packtory/scheduler.js",
+            "types": "./packtory/scheduler.d.ts"
+        }
     },
     "keywords": [
         "bundler",
@@ -39,13 +70,24 @@
         "versioning"
     ],
     "license": "MIT",
-    "main": "packages/packtory/packtory.entry-point.js",
     "name": "packtory",
     "repository": {
         "type": "git",
         "url": "git+ssh://git@github.com/enormora/packtory.git"
     },
+    "sideEffects": [
+        "./bundle-emitter/publish-settings-bridge.js",
+        "./bundle-emitter/repository-coherence.js",
+        "./config/checks-schema.js",
+        "./config/package-schemas.js",
+        "./config/packtory-config-without-registry-schema.js",
+        "./dead-code-eliminator/side-effect-classifier.js",
+        "./dead-code-eliminator/transform/declaration-remover.js",
+        "./packages/package-processor.composition.js",
+        "./packages/packtory/packtory.entry-point.js",
+        "./sbom/sbom-builder.js",
+        "./tar/tarball-builder.js"
+    ],
     "type": "module",
-    "types": "packages/packtory/packtory.entry-point.d.ts",
-    "version": "0.0.8"
+    "version": "0.0.10"
 }

package/packages/package-processor.composition.js

@@ -0,0 +1,127 @@
+import fs from 'node:fs';
+import { createRequire } from 'node:module';
+import { RealFileSystemHost } from '@ts-morph/common';
+import { publish } from 'libnpmpublish';
+import npmFetch from 'npm-registry-fetch';
+import { ModuleKind, ModuleResolutionKind, Project, ScriptTarget } from 'ts-morph';
+import { createArtifactsBuilder } from "../artifacts/artifacts-builder.js";
+import { createBundleEmitter } from "../bundle-emitter/emitter.js";
+import { createRegistryClient } from "../bundle-emitter/registry-client.js";
+import { getCiRepositoryUrl } from "../bundle-emitter/repository-coherence.js";
+import { createDeadCodeEliminator } from "../dead-code-eliminator/eliminator.js";
+import { createDependencyScanner } from "../dependency-scanner/scanner.js";
+import { getReferencedSourceFiles } from "../dependency-scanner/source-file-references.js";
+import { createSourceMapFileLocator } from "../dependency-scanner/source-map-file-locator.js";
+import { createFileSystemAdapters } from "../dependency-scanner/typescript-file-host.js";
+import { createTypescriptProjectAnalyzer } from "../dependency-scanner/typescript-project-analyzer.js";
+import { createFileManager } from "../file-manager/file-manager.js";
+import { createBundleLinker } from "../linker/linker.js";
+import { createPackageProcessor } from "../packtory/package-processor.js";
+import { createProgressBroadcaster } from "../progress/progress-broadcaster.js";
+import { withStageTimings } from "../report/decorators.js";
+import { createResourceResolver } from "../resource-resolver/resource-resolver.js";
+import { createTarballBuilder } from "../tar/tarball-builder.js";
+import { createVersionManager } from "../version-manager/manager.js";
+import { createClock } from "../common/clock.js";
+import { createNpmOidcIdTokenResolver } from "../npm-oidc-id-token-resolver.js";
+import { createLicenseResolver } from "../sbom/license-resolver.js";
+import { createSbomFileBuilder } from "../sbom/sbom-file.js";
+import { createSbomSerializer } from "../sbom/sbom-serializer.js";
+import { createPacktoryToolVersionResolver } from "../sbom/tool-version.js";
+const localRequire = createRequire(import.meta.url);
+function tryResolvePackagePath(specifier) {
+    try {
+        return localRequire.resolve(specifier);
+    }
+    catch {
+        return undefined;
+    }
+}
+function getEnvironmentVariable(variableName) {
+    const environment = process.env[variableName];
+    return environment === undefined || environment.length === 0 ? undefined : environment;
+}
+function createDependencyScannerWith(fileManager) {
+    const sourceMapFileLocator = createSourceMapFileLocator({ fileManager });
+    const fileSystemAdapters = createFileSystemAdapters({ fileSystemHost: new RealFileSystemHost() });
+    const typescriptProjectAnalyzer = createTypescriptProjectAnalyzer({
+        Project,
+        getReferencedSourceFiles,
+        fileSystemAdapters
+    });
+    return createDependencyScanner({ sourceMapFileLocator, typescriptProjectAnalyzer });
+}
+function buildRegistryClient(options, clock) {
+    return createRegistryClient({
+        npmFetch,
+        publish,
+        fetch: globalThis.fetch,
+        clock,
+        resolveIdToken: createNpmOidcIdTokenResolver({
+            fetch: globalThis.fetch,
+            getEnvironmentVariable
+        }),
+        promptForOneTimePassword: options.promptForOneTimePassword
+    });
+}
+function buildSbomFileBuilder(fileManager) {
+    return createSbomFileBuilder({
+        licenseResolver: createLicenseResolver({ fileManager }),
+        sbomSerializer: createSbomSerializer(),
+        toolVersionProvider: createPacktoryToolVersionResolver({
+            fileManager,
+            resolvePackagePath: tryResolvePackagePath
+        }),
+        projectFolder: process.cwd()
+    });
+}
+function buildBundleEmitter(options, fileManager, progressBroadcaster) {
+    const registryClient = buildRegistryClient(options, createClock());
+    const artifactsBuilder = createArtifactsBuilder({
+        fileManager,
+        tarballBuilder: createTarballBuilder(),
+        progressBroadcaster: progressBroadcaster.provider
+    });
+    return createBundleEmitter({
+        registryClient,
+        artifactsBuilder,
+        ciRepositoryUrl: getCiRepositoryUrl(options.ciEnvironment)
+    });
+}
+export function buildPackageProcessorComposition(options) {
+    const fileManager = createFileManager({ hostFileSystem: fs.promises });
+    const dependencyScanner = createDependencyScannerWith(fileManager);
+    const progressBroadcaster = createProgressBroadcaster();
+    const bundleEmitter = buildBundleEmitter(options, fileManager, progressBroadcaster);
+    const resourceResolver = createResourceResolver({ fileManager, dependencyScanner });
+    const sbomFileBuilder = buildSbomFileBuilder(fileManager);
+    const deadCodeEliminator = createDeadCodeEliminator({
+        progressBroadcaster: progressBroadcaster.provider,
+        createProject: () => {
+            return new Project({
+                compilerOptions: {
+                    allowJs: true,
+                    module: ModuleKind.Node16,
+                    esModuleInterop: true,
+                    noLib: true,
+                    target: ScriptTarget.ES2022,
+                    moduleResolution: ModuleResolutionKind.Node10
+                },
+                skipLoadingLibFiles: true,
+                useInMemoryFileSystem: true
+            });
+        }
+    });
+    const basePackageProcessor = createPackageProcessor({
+        progressBroadcaster: progressBroadcaster.provider,
+        versionManager: createVersionManager({ progressBroadcaster: progressBroadcaster.provider }),
+        bundleEmitter,
+        linker: createBundleLinker(),
+        resourceResolver,
+        sbomFileBuilder,
+        deadCodeEliminator
+    });
+    const packageProcessor = withStageTimings(basePackageProcessor, progressBroadcaster.provider);
+    return { packageProcessor, progressBroadcaster, deadCodeEliminator };
+}
+//# sourceMappingURL=package-processor.composition.js.map

package/packages/package-processor.composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"package-processor.composition.js","sourceRoot":"","sources":["../../../../source/packages/package-processor.composition.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,QAAQ,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,oBAAoB,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AACnF,OAAO,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAC5E,OAAO,EAAE,kBAAkB,EAAsB,MAAM,2CAA2C,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,uCAAuC,CAAC;AACjF,OAAO,EAAE,uBAAuB,EAA0B,MAAM,kCAAkC,CAAC;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,EAAE,0BAA0B,EAAE,MAAM,kDAAkD,CAAC;AAC9F,OAAO,EAAE,wBAAwB,EAAE,MAAM,+CAA+C,CAAC;AACzF,OAAO,EAAE,+BAA+B,EAAE,MAAM,sDAAsD,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAoB,MAAM,iCAAiC,CAAC;AACtF,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAyB,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,yBAAyB,EAA4B,MAAM,qCAAqC,CAAC;AAC1G,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,sBAAsB,EAAE,MAAM,2CAA2C,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAE,WAAW,EAAc,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,4BAA4B,EAAE,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACpE,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AAClE,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAE5E,MAAM,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEpD,SAAS,qBAAqB,CAAC,SAAiB;IAC5C,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAaD,SAAS,sBAAsB,CAAC,YAAoB;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC9C,OAAO,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;AAC3F,CAAC;AAED,SAAS,2BAA2B,CAAC,WAAwB;IACzD,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC;IACzE,MAAM,kBAAkB,GAAG,wBAAwB,CAAC,EAAE,cAAc,EAAE,IAAI,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAClG,MAAM,yBAAyB,GAAG,+BAA+B,CAAC;QAC9D,OAAO;QACP,wBAAwB;QACxB,kBAAkB;KACrB,CAAC,CAAC;IACH,OAAO,uBAAuB,CAAC,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,mBAAmB,CACxB,OAA2C,EAC3C,KAAY;IAEZ,OAAO,oBAAoB,CAAC;QACxB,QAAQ;QACR,OAAO;QACP,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,KAAK;QACL,cAAc,EAAE,4BAA4B,CAAC;YACzC,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,sBAAsB;SACzB,CAAC;QACF,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;KAC7D,CAAC,CAAC;AACP,CAAC;AAED,SAAS,oBAAoB,CAAC,WAAwB;IAClD,OAAO,qBAAqB,CAAC;QACzB,eAAe,EAAE,qBAAqB,CAAC,EAAE,WAAW,EAAE,CAAC;QACvD,cAAc,EAAE,oBAAoB,EAAE;QACtC,mBAAmB,EAAE,iCAAiC,CAAC;YACnD,WAAW;YACX,kBAAkB,EAAE,qBAAqB;SAC5C,CAAC;QACF,aAAa,EAAE,OAAO,CAAC,GAAG,EAAE;KAC/B,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CACvB,OAA2C,EAC3C,WAAwB,EACxB,mBAAwC;IAExC,MAAM,cAAc,GAAG,mBAAmB,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC;QAC5C,WAAW;QACX,cAAc,EAAE,oBAAoB,EAAE;QACtC,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ;KACpD,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC;QACvB,cAAc;QACd,gBAAgB;QAChB,eAAe,EAAE,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC;KAC7D,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC5C,OAA2C;IAE3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;IACvE,MAAM,iBAAiB,GAAG,2BAA2B,CAAC,WAAW,CAAC,CAAC;IACnE,MAAM,mBAAmB,GAAG,yBAAyB,EAAE,CAAC;IACxD,MAAM,aAAa,GAAG,kBAAkB,CAAC,OAAO,EAAE,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACpF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,EAAE,WAAW,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACpF,MAAM,eAAe,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;IAC1D,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;QAChD,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ;QACjD,aAAa,EAAE,GAAG,EAAE;YAChB,OAAO,IAAI,OAAO,CAAC;gBACf,eAAe,EAAE;oBACb,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,eAAe,EAAE,IAAI;oBACrB,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,YAAY,CAAC,MAAM;oBAC3B,gBAAgB,EAAE,oBAAoB,CAAC,MAAM;iBAChD;gBACD,mBAAmB,EAAE,IAAI;gBACzB,qBAAqB,EAAE,IAAI;aAC9B,CAAC,CAAC;QACP,CAAC;KACJ,CAAC,CAAC;IAEH,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;QAChD,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ;QACjD,cAAc,EAAE,oBAAoB,CAAC,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,QAAQ,EAAE,CAAC;QAC3F,aAAa;QACb,MAAM,EAAE,kBAAkB,EAAE;QAC5B,gBAAgB;QAChB,eAAe;QACf,kBAAkB;KACrB,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,oBAAoB,EAAE,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAE9F,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,CAAC;AACzE,CAAC"}