packtory 0.0.8 → 0.0.9

package/artifacts/artifacts-builder.d.ts

@@ -1,19 +1,21 @@
 import type { FileDescription } from '../file-manager/file-description.ts';
 import type { FileManager } from '../file-manager/file-manager.ts';
+import type { ProgressBroadcastProvider } from '../progress/progress-broadcaster.ts';
 import type { VersionedBundleWithManifest } from '../version-manager/versioned-bundle.ts';
 import type { TarballBuilder } from '../tar/tarball-builder.ts';
 export type ArtifactsBuilderDependencies = {
     readonly fileManager: FileManager;
     readonly tarballBuilder: TarballBuilder;
+    readonly progressBroadcaster: ProgressBroadcastProvider;
 };
-export type TarballArtifact = {
+type TarballArtifact = {
     readonly tarData: Buffer;
-    readonly shasum: string;
 };
 export type ArtifactsBuilder = {
-    collectContents: (bundle: VersionedBundleWithManifest, prefix?: string) => readonly FileDescription[];
-    buildTarball: (bundle: VersionedBundleWithManifest) => Promise<TarballArtifact>;
-    buildFolder: (bundle: VersionedBundleWithManifest, targetFolder: string) => Promise<void>;
+    collectContents: (bundle: VersionedBundleWithManifest, prefix?: string, extraFiles?: readonly FileDescription[]) => readonly FileDescription[];
+    buildTarball: (bundle: VersionedBundleWithManifest, extraFiles?: readonly FileDescription[]) => Promise<TarballArtifact>;
+    buildFolder: (bundle: VersionedBundleWithManifest, targetFolder: string, extraFiles?: readonly FileDescription[]) => Promise<void>;
 };
 export declare function createArtifactsBuilder(artifactsBuilderDependencies: ArtifactsBuilderDependencies): ArtifactsBuilder;
+export {};
 //# sourceMappingURL=artifacts-builder.d.ts.map

package/artifacts/artifacts-builder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.d.ts","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,MAAM,4BAA4B,GAAG;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,eAAe,EAAE,CAAC,MAAM,EAAE,2BAA2B,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,SAAS,eAAe,EAAE,CAAC;IACtG,YAAY,EAAE,CAAC,MAAM,EAAE,2BAA2B,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;IAChF,WAAW,EAAE,CAAC,MAAM,EAAE,2BAA2B,EAAE,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,4BAA4B,EAAE,4BAA4B,GAAG,gBAAgB,CA0DnH"}
+{"version":3,"file":"artifacts-builder.d.ts","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qCAAqC,CAAC;AAErF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,MAAM,4BAA4B,GAAG;IACvC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,yBAAyB,CAAC;CAC3D,CAAC;AAEF,KAAK,eAAe,GAAG;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC3B,eAAe,EAAE,CACb,MAAM,EAAE,2BAA2B,EACnC,MAAM,CAAC,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,KACtC,SAAS,eAAe,EAAE,CAAC;IAChC,YAAY,EAAE,CACV,MAAM,EAAE,2BAA2B,EACnC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,KACtC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9B,WAAW,EAAE,CACT,MAAM,EAAE,2BAA2B,EACnC,YAAY,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,KACtC,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,4BAA4B,EAAE,4BAA4B,GAAG,gBAAgB,CA4FnH"}

package/artifacts/artifacts-builder.js

@@ -1,47 +1,76 @@
 import path from 'node:path';
-import ssri from 'ssri';
+import { inspectArtifactSizes } from "../report/inspectors.js";
 export function createArtifactsBuilder(artifactsBuilderDependencies) {
-    const { fileManager, tarballBuilder } = artifactsBuilderDependencies;
-    function collectContents(bundle, prefix) {
+    const { fileManager, tarballBuilder, progressBroadcaster } = artifactsBuilderDependencies;
+    function applyPrefix(filePath, prefix) {
+        return prefix === undefined ? filePath : path.join(prefix, filePath);
+    }
+    function collectContents(bundle, prefix, extraFiles = []) {
         const artifactContents = [
             {
                 ...bundle.manifestFile,
-                filePath: prefix === undefined
-                    ? bundle.manifestFile.filePath
-                    : path.join(prefix, bundle.manifestFile.filePath)
+                filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
             }
         ];
         for (const entry of bundle.contents) {
-            const targetFilePath = prefix === undefined
-                ? entry.fileDescription.targetFilePath
-                : path.join(prefix, entry.fileDescription.targetFilePath);
             artifactContents.push({
-                filePath: targetFilePath,
+                filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
                 content: entry.fileDescription.content,
                 isExecutable: entry.fileDescription.isExecutable
             });
         }
+        for (const extraFile of extraFiles) {
+            artifactContents.push({
+                filePath: applyPrefix(extraFile.filePath, prefix),
+                content: extraFile.content,
+                isExecutable: extraFile.isExecutable
+            });
+        }
+        if (progressBroadcaster.hasSubscribers('artifactsCollected')) {
+            progressBroadcaster.emit('artifactsCollected', {
+                packageName: bundle.name,
+                entries: inspectArtifactSizes([
+                    {
+                        ...bundle.manifestFile,
+                        filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
+                    },
+                    ...bundle.contents.map((entry) => {
+                        return {
+                            filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
+                            content: entry.fileDescription.content,
+                            isExecutable: entry.fileDescription.isExecutable,
+                            sourceFilePath: entry.fileDescription.sourceFilePath,
+                            isSubstituted: entry.isSubstituted
+                        };
+                    }),
+                    ...extraFiles.map((entry) => {
+                        return {
+                            ...entry,
+                            filePath: applyPrefix(entry.filePath, prefix)
+                        };
+                    })
+                ])
+            });
+        }
         return artifactContents;
     }
     return {
         collectContents,
-        async buildTarball(bundle) {
-            const contents = collectContents(bundle, 'package');
+        async buildTarball(bundle, extraFiles) {
+            const contents = collectContents(bundle, 'package', extraFiles);
             const tarData = await tarballBuilder.build(contents);
-            return {
-                shasum: ssri.fromData(tarData, { algorithms: ['sha1'] }).hexDigest(),
-                tarData
-            };
+            return { tarData };
         },
-        async buildFolder(bundle, targetFolder) {
+        async buildFolder(bundle, targetFolder, extraFiles) {
             const readability = await fileManager.checkReadability(targetFolder);
             if (readability.isReadable) {
                 throw new Error(`Folder ${targetFolder} already exists`);
             }
-            const contents = collectContents(bundle);
+            const contents = collectContents(bundle, undefined, extraFiles);
             for (const entry of contents) {
                 const targetFilePath = path.join(targetFolder, entry.filePath);
                 await fileManager.writeFile(targetFilePath, entry.content);
+                await fileManager.setExecutable(targetFilePath, entry.isExecutable);
             }
         }
     };

package/artifacts/artifacts-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,IAAI,MAAM,MAAM,CAAC;AAsBxB,MAAM,UAAU,sBAAsB,CAAC,4BAA0D;IAC7F,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,4BAA4B,CAAC;IAErE,SAAS,eAAe,CAAC,MAAmC,EAAE,MAAe;QACzE,MAAM,gBAAgB,GAAsB;YACxC;gBACI,GAAG,MAAM,CAAC,YAAY;gBACtB,QAAQ,EACJ,MAAM,KAAK,SAAS;oBAChB,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ;oBAC9B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC;aAC5D;SACJ,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,cAAc,GAChB,MAAM,KAAK,SAAS;gBAChB,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc;gBACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;YAClE,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,cAAc;gBACxB,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;gBACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;aACnD,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAED,OAAO;QACH,eAAe;QAEf,KAAK,CAAC,YAAY,CAAC,MAAM;YACrB,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAErD,OAAO;gBACH,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE;gBACpE,OAAO;aACV,CAAC;QACN,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY;YAClC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAErE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;YAEzC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAE/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/D,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAI7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AA+B/D,MAAM,UAAU,sBAAsB,CAAC,4BAA0D;IAC7F,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,mBAAmB,EAAE,GAAG,4BAA4B,CAAC;IAE1F,SAAS,WAAW,CAAC,QAAgB,EAAE,MAA0B;QAC7D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,SAAS,eAAe,CACpB,MAAmC,EACnC,MAAe,EACf,aAAyC,EAAE;QAE3C,MAAM,gBAAgB,GAAsB;YACxC;gBACI,GAAG,MAAM,CAAC,YAAY;gBACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;aAC9D;SACJ,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;gBACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;gBACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;aACnD,CAAC,CAAC;QACP,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACjC,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;gBACjD,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,YAAY,EAAE,SAAS,CAAC,YAAY;aACvC,CAAC,CAAC;QACP,CAAC;QAED,IAAI,mBAAmB,CAAC,cAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3D,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC3C,WAAW,EAAE,MAAM,CAAC,IAAI;gBACxB,OAAO,EAAE,oBAAoB,CAAC;oBAC1B;wBACI,GAAG,MAAM,CAAC,YAAY;wBACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;qBAC9D;oBACD,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;wBAC7B,OAAO;4BACH,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;4BACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;4BACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;4BAChD,cAAc,EAAE,KAAK,CAAC,eAAe,CAAC,cAAc;4BACpD,aAAa,EAAE,KAAK,CAAC,aAAa;yBACrC,CAAC;oBACN,CAAC,CAAC;oBACF,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;wBACxB,OAAO;4BACH,GAAG,KAAK;4BACR,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;yBAChD,CAAC;oBACN,CAAC,CAAC;iBACL,CAAC;aACL,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAED,OAAO;QACH,eAAe;QAEf,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU;YACjC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAErD,OAAO,EAAE,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU;YAC9C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;YAErE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;YAC7D,CAAC;YAED,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAEhE,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAE/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC3D,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;YACxE,CAAC;QACL,CAAC;KACJ,CAAC;AACN,CAAC"}

package/bundle-emitter/emitter.d.ts

@@ -1,16 +1,26 @@
 import { Maybe } from 'true-myth';
 import type { ArtifactsBuilder } from '../artifacts/artifacts-builder.ts';
+import type { PublishSettings } from '../config/publish-settings.ts';
 import type { RegistrySettings } from '../config/registry-settings.ts';
 import type { VersioningSettings } from '../config/versioning-settings.ts';
+import type { FileDescription } from '../file-manager/file-description.ts';
 import type { VersionedBundleWithManifest } from '../version-manager/versioned-bundle.ts';
 import type { RegistryClient } from './registry-client.ts';
 export type BundleEmitterDependencies = {
     readonly artifactsBuilder: ArtifactsBuilder;
     readonly registryClient: RegistryClient;
+    readonly ciRepositoryUrl: string | undefined;
 };
-export type PublishOptions = {
+type PublishOptions = {
     readonly bundle: VersionedBundleWithManifest;
     readonly registrySettings: RegistrySettings;
+    readonly publishSettings: PublishSettings;
+    readonly extraFiles?: readonly FileDescription[];
+};
+type AlreadyPublishedCheckOptions = {
+    readonly bundle: VersionedBundleWithManifest;
+    readonly registrySettings: RegistrySettings;
+    readonly extraFiles?: readonly FileDescription[];
 };
 type CurrentVersionLookupOptions = {
     readonly name: string;
@@ -23,7 +33,7 @@ type BundlePublishedCheckResult = {
 export type BundleEmitter = {
     publish: (options: PublishOptions) => Promise<void>;
     determineCurrentVersion: (options: CurrentVersionLookupOptions) => Promise<Maybe<string>>;
-    checkBundleAlreadyPublished: (options: PublishOptions) => Promise<BundlePublishedCheckResult>;
+    checkBundleAlreadyPublished: (options: AlreadyPublishedCheckOptions) => Promise<BundlePublishedCheckResult>;
 };
 export declare function createBundleEmitter(dependencies: BundleEmitterDependencies): BundleEmitter;
 export {};

package/bundle-emitter/emitter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAE3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAE1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;CAC/C,CAAC;AAEF,KAAK,2BAA2B,GAAG;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CAC3C,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,uBAAuB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,2BAA2B,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACjG,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,yBAAyB,GAAG,aAAa,CAwC1F"}
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAE3E,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wCAAwC,CAAC;AAE1F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,MAAM,MAAM,yBAAyB,GAAG;IACpC,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;CAChD,CAAC;AAEF,KAAK,cAAc,GAAG;IAClB,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACpD,CAAC;AAEF,KAAK,4BAA4B,GAAG;IAChC,QAAQ,CAAC,MAAM,EAAE,2BAA2B,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;CACpD,CAAC;AAEF,KAAK,2BAA2B,GAAG;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,kBAAkB,CAAC;CAC3C,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAC9B,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;CAC9C,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IACxB,OAAO,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD,uBAAuB,EAAE,CAAC,OAAO,EAAE,2BAA2B,KAAK,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1F,2BAA2B,EAAE,CAAC,OAAO,EAAE,4BAA4B,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAC;CAC/G,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,yBAAyB,GAAG,aAAa,CA8C1F"}

package/bundle-emitter/emitter.js

@@ -1,8 +1,10 @@
+/* eslint-disable import/max-dependencies -- the publish/check flow legitimately depends on registry, artifacts, file-manager, and provenance helpers */
 import { Maybe } from 'true-myth';
 import { compareFileDescriptions } from "../file-manager/compare.js";
 import { extractPackageTarball } from "./extract-package-tarball.js";
+import { assertRepositoryCoherence } from "./repository-coherence.js";
 export function createBundleEmitter(dependencies) {
-    const { artifactsBuilder, registryClient } = dependencies;
+    const { artifactsBuilder, registryClient, ciRepositoryUrl } = dependencies;
     return {
         async determineCurrentVersion(options) {
             const { versioning, registrySettings, name } = options;
@@ -15,20 +17,23 @@ export function createBundleEmitter(dependencies) {
             return Maybe.just(versioning.version);
         },
         async checkBundleAlreadyPublished(options) {
-            const { bundle, registrySettings } = options;
+            const { bundle, registrySettings, extraFiles } = options;
             const latestVersion = await registryClient.fetchLatestVersion(bundle.name, registrySettings);
             if (latestVersion.isNothing) {
                 return { alreadyPublishedAsLatest: false };
             }
-            const artifactContents = artifactsBuilder.collectContents(bundle, 'package');
-            const tarball = await registryClient.fetchTarball(latestVersion.value.tarballUrl, latestVersion.value.shasum);
+            const artifactContents = artifactsBuilder.collectContents(bundle, 'package', extraFiles);
+            const tarball = await registryClient.fetchTarball(latestVersion.value.tarballUrl, registrySettings);
             const latestVersionArtifactContents = await extractPackageTarball(tarball);
             const result = compareFileDescriptions(artifactContents, latestVersionArtifactContents);
             return { alreadyPublishedAsLatest: result.status === 'equal' };
         },
         async publish(options) {
-            const tarball = await artifactsBuilder.buildTarball(options.bundle);
-            await registryClient.publishPackage(options.bundle.packageJson, tarball.tarData, options.registrySettings);
+            if (options.publishSettings.access === 'public' && options.publishSettings.provenance?.type === 'auto') {
+                assertRepositoryCoherence(options.bundle.packageJson, ciRepositoryUrl);
+            }
+            const tarball = await artifactsBuilder.buildTarball(options.bundle, options.extraFiles);
+            await registryClient.publishPackage(options.bundle.packageJson, tarball.tarData, options.registrySettings, options.publishSettings);
         }
     };
 }

package/bundle-emitter/emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAIlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AA6BrE,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,YAAY,CAAC;IAE1D,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,OAAO,CAAC;YAC7C,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC7F,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC7E,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAC7C,aAAa,CAAC,KAAK,CAAC,UAAU,EAC9B,aAAa,CAAC,KAAK,CAAC,MAAM,CAC7B,CAAC;YACF,MAAM,6BAA6B,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;YACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAEpE,MAAM,cAAc,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC/G,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,wJAAwJ;AACxJ,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAMlC,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAqCtE,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,GAAG,YAAY,CAAC;IAE3E,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;YAEvD,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;gBACvB,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;oBACjC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC7F,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;gBAC1B,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;YAC/C,CAAC;YAED,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACpG,MAAM,6BAA6B,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;YACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACnE,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAExF,MAAM,cAAc,CAAC,cAAc,CAC/B,OAAO,CAAC,MAAM,CAAC,WAAW,EAC1B,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,CAC1B,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/bundle-emitter/extract-package-tarball.js

@@ -1,11 +1,10 @@
 import { isExecutableFileMode } from "../file-manager/permissions.js";
 import { extractTarEntries } from "../tar/extract-tar.js";
 function tarEntryToFileDescription(tarEntry) {
-    const isExecutable = tarEntry.header.mode === undefined ? false : isExecutableFileMode(tarEntry.header.mode);
     return {
         filePath: tarEntry.header.name,
         content: tarEntry.content,
-        isExecutable
+        isExecutable: isExecutableFileMode(Number(tarEntry.header.mode))
     };
 }
 export async function extractPackageTarball(tarball) {

package/bundle-emitter/extract-package-tarball.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract-package-tarball.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/extract-package-tarball.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAiB,MAAM,uBAAuB,CAAC;AAEzE,SAAS,yBAAyB,CAAC,QAAkB;IACjD,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAE7G,OAAO;QACH,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY;KACf,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"extract-package-tarball.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/extract-package-tarball.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAiB,MAAM,uBAAuB,CAAC;AAEzE,SAAS,yBAAyB,CAAC,QAAkB;IACjD,OAAO;QACH,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KACnE,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACrD,CAAC"}

package/bundle-emitter/publish-settings-bridge.js

@@ -0,0 +1,133 @@
+export function buildPublishOptionsForPublishSettings(publishSettings) {
+    if (publishSettings.access === 'restricted') {
+        return { access: 'restricted' };
+    }
+    if (publishSettings.provenance === undefined) {
+        return { access: 'public' };
+    }
+    if (publishSettings.provenance.type === 'auto') {
+        return { access: 'public', provenance: true };
+    }
+    return { access: 'public', provenanceFile: publishSettings.provenance.path };
+}
+function isRecord(value) {
+    return value instanceof Object;
+}
+function isErrorLike(error) {
+    return isRecord(error) && typeof error.message === 'string';
+}
+const unsupportedProviderMarker = 'not supported for provider:';
+function getCiName(message) {
+    const tail = message.slice(message.indexOf(unsupportedProviderMarker) + unsupportedProviderMarker.length).trim();
+    if (tail === '') {
+        return 'unknown';
+    }
+    const whitespaceIndex = tail.search(/\s/u);
+    if (whitespaceIndex === -1) {
+        return tail;
+    }
+    return tail.slice(0, whitespaceIndex);
+}
+function buildUnsupportedProviderMessage(ciName) {
+    return [
+        'Provenance auto mode requires GitHub Actions or GitLab CI.',
+        `Detected CI: ${ciName}.`,
+        "Use provenance: { type: 'file' } for other environments."
+    ].join(' ');
+}
+const githubActionsIdTokenMessage = [
+    'GitHub Actions provenance needs "permissions: id-token: write" on the workflow job.',
+    'See the packtory readme for the workflow snippet.'
+].join(' ');
+const gitlabSigstoreIdTokenMessage = [
+    'GitLab CI provenance needs an "id_tokens" entry with audience "sigstore"',
+    'exposed as SIGSTORE_ID_TOKEN. See the packtory readme for the workflow snippet.'
+].join(' ');
+function buildMissingProvenanceFileMessage(filePath) {
+    return [
+        `Provenance bundle file "${filePath}" does not exist.`,
+        "Generate it with your CI's attestation tool (e.g. actions/attest-build-provenance)",
+        'before running packtory.'
+    ].join(' ');
+}
+function buildInvalidProvenanceFileMessage(filePath) {
+    return [
+        `Provenance bundle file "${filePath}" is not a valid sigstore bundle.`,
+        'Re-generate it from the current build.'
+    ].join(' ');
+}
+function buildProvenanceDigestMismatchMessage(filePath) {
+    return [
+        `Provenance bundle at "${filePath}" was signed against a different tarball`,
+        'than the one packtory built. Re-generate the bundle from the current source —',
+        'shipping a mismatched attestation would defeat the purpose of provenance.'
+    ].join(' ');
+}
+function isProvenanceBundleError(message) {
+    return (message.includes('Bundle is invalid') ||
+        message.includes('Unsupported bundle format') ||
+        message.includes('Invalid bundle') ||
+        message.includes('subject does not match'));
+}
+function isProvenanceDigestMismatch(message) {
+    return message.includes('subject') || message.includes('digest');
+}
+function matchAutoModeError(error) {
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (message.includes(unsupportedProviderMarker)) {
+        return new Error(buildUnsupportedProviderMessage(getCiName(message)), { cause: error });
+    }
+    if (message.includes('"write" access to the "id-token" permission')) {
+        return new Error(githubActionsIdTokenMessage, { cause: error });
+    }
+    if (message.includes('SIGSTORE_ID_TOKEN')) {
+        return new Error(gitlabSigstoreIdTokenMessage, { cause: error });
+    }
+    return undefined;
+}
+function matchFileModeError(error, filePath) {
+    if (isRecord(error) && error.code === 'ENOENT') {
+        return new Error(buildMissingProvenanceFileMessage(filePath), { cause: error });
+    }
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (!isProvenanceBundleError(message)) {
+        return undefined;
+    }
+    if (isProvenanceDigestMismatch(message)) {
+        return new Error(buildProvenanceDigestMismatchMessage(filePath), { cause: error });
+    }
+    return new Error(buildInvalidProvenanceFileMessage(filePath), { cause: error });
+}
+function getProvenanceFilePath(publishSettings) {
+    if (publishSettings.access !== 'public') {
+        return undefined;
+    }
+    if (publishSettings.provenance?.type !== 'file') {
+        return undefined;
+    }
+    return publishSettings.provenance.path;
+}
+function ensureError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
+export function remapPublishError(error, publishSettings) {
+    const autoModeError = matchAutoModeError(error);
+    if (autoModeError !== undefined) {
+        return autoModeError;
+    }
+    const filePath = getProvenanceFilePath(publishSettings);
+    if (filePath !== undefined) {
+        const fileModeError = matchFileModeError(error, filePath);
+        if (fileModeError !== undefined) {
+            return fileModeError;
+        }
+    }
+    return ensureError(error);
+}
+//# sourceMappingURL=publish-settings-bridge.js.map

package/bundle-emitter/publish-settings-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-settings-bridge.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/publish-settings-bridge.ts"],"names":[],"mappings":"AAQA,MAAM,UAAU,qCAAqC,CACjD,eAA0C;IAE1C,IAAI,eAAe,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC3C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,eAAe,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAID,SAAS,WAAW,CAAC,KAAc;IAC/B,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AAChE,CAAC;AAED,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEhE,SAAS,SAAS,CAAC,OAAe;IAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjH,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,eAAe,KAAK,CAAC,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAc;IACnD,OAAO;QACH,4DAA4D;QAC5D,gBAAgB,MAAM,GAAG;QACzB,0DAA0D;KAC7D,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,2BAA2B,GAAG;IAChC,qFAAqF;IACrF,mDAAmD;CACtD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,MAAM,4BAA4B,GAAG;IACjC,0EAA0E;IAC1E,iFAAiF;CACpF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAEZ,SAAS,iCAAiC,CAAC,QAAgB;IACvD,OAAO;QACH,2BAA2B,QAAQ,mBAAmB;QACtD,oFAAoF;QACpF,0BAA0B;KAC7B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,iCAAiC,CAAC,QAAgB;IACvD,OAAO;QACH,2BAA2B,QAAQ,mCAAmC;QACtE,wCAAwC;KAC3C,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,oCAAoC,CAAC,QAAgB;IAC1D,OAAO;QACH,yBAAyB,QAAQ,0CAA0C;QAC3E,+EAA+E;QAC/E,2EAA2E;KAC9E,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAe;IAC5C,OAAO,CACH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC;QACrC,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAClC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAC7C,CAAC;AACN,CAAC;AAED,SAAS,0BAA0B,CAAC,OAAe;IAC/C,OAAO,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACtC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,KAAK,CAAC,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,QAAgB;IACxD,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,KAAK,CAAC,oCAAoC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,qBAAqB,CAAC,eAA0C;IACrE,IAAI,eAAe,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;QAC9C,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IAC/B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,eAA0C;IACxF,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,aAAa,CAAC;IACzB,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,eAAe,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,aAAa,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,aAAa,CAAC;QACzB,CAAC;IACL,CAAC;IAED,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC"}

package/bundle-emitter/registry-client.d.ts

@@ -1,21 +1,28 @@
 import type _npmFetch from 'npm-registry-fetch';
 import type { publish as _publish } from 'libnpmpublish';
 import { Maybe } from 'true-myth';
-import type { RegistrySettings } from '../config/registry-settings.ts';
-import type { BundlePackageJson } from '../version-manager/manifest/builder.ts';
+import type { Clock } from '../common/clock.ts';
+import type { PublishSettings } from '../config/publish-settings.ts';
+import type { PublishAuthStrategy, RegistrySettings } from '../config/registry-settings.ts';
+import type { BundlePackageJson } from '../version-manager/versioned-bundle.ts';
 type PublishFunction = typeof _publish;
 export type RegistryClientDependencies = {
     readonly npmFetch: typeof _npmFetch;
     readonly publish: PublishFunction;
+    readonly fetch: typeof globalThis.fetch;
+    readonly clock: Clock;
+    readonly resolveIdToken: (auth: Extract<PublishAuthStrategy, {
+        type: 'npm-oidc';
+    }>) => Promise<string>;
+    readonly promptForOneTimePassword?: (() => Promise<string | undefined>) | undefined;
 };
 export type RegistryClient = {
     fetchLatestVersion: (packageName: string, config: RegistrySettings) => Promise<Maybe<PackageVersionDetails>>;
-    publishPackage: (manifest: Readonly<BundlePackageJson>, tarData: Buffer, config: RegistrySettings) => Promise<void>;
-    fetchTarball: (tarballUrl: string, shasum: string) => Promise<Buffer>;
+    publishPackage: (manifest: Readonly<BundlePackageJson>, tarData: Buffer, config: RegistrySettings, publishSettings: PublishSettings) => Promise<void>;
+    fetchTarball: (tarballUrl: string, config: RegistrySettings) => Promise<Buffer>;
 };
-export type PackageVersionDetails = {
+type PackageVersionDetails = {
     readonly version: string;
-    readonly shasum: string;
     readonly tarballUrl: string;
 };
 export declare function createRegistryClient(dependencies: Readonly<RegistryClientDependencies>): RegistryClient;

package/bundle-emitter/registry-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/registry-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AACvE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,KAAK,eAAe,GAAG,OAAO,QAAQ,CAAC;AAEvC,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7G,cAAc,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACpH,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACzE,CAAC;AAmCF,MAAM,MAAM,qBAAqB,GAAG;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B,CAAC;AAKF,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,GAAG,cAAc,CAsFvG"}
+{"version":3,"file":"registry-client.d.ts","sourceRoot":"","sources":["../../../../source/bundle-emitter/registry-client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,SAAS,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,KAAK,EAGR,mBAAmB,EACnB,gBAAgB,EACnB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAC;AAGhF,KAAK,eAAe,GAAG,OAAO,QAAQ,CAAC;AAmBvC,MAAM,MAAM,0BAA0B,GAAG;IACrC,QAAQ,CAAC,QAAQ,EAAE,OAAO,SAAS,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,mBAAmB,EAAE;QAAE,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvG,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;CACvF,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IACzB,kBAAkB,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC7G,cAAc,EAAE,CACZ,QAAQ,EAAE,QAAQ,CAAC,iBAAiB,CAAC,EACrC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,gBAAgB,EACxB,eAAe,EAAE,eAAe,KAC/B,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACnF,CAAC;AAmDF,KAAK,qBAAqB,GAAG;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B,CAAC;AA4FF,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,QAAQ,CAAC,0BAA0B,CAAC,GAAG,cAAc,CAwNvG"}