packtory 0.0.91 → 0.0.92

package/sbom/sbom-file.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sbom-file.d.ts","sourceRoot":"","sources":["../../../../source/sbom/sbom-file.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;AAEjG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAG3D,KAAK,mBAAmB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAEjD,KAAK,2BAA2B,GAAG;IAC/B,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IACxC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC1B,QAAQ,EAAE,CACN,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,eAAe,EAAE,eAAe,KAC/B,OAAO,CAAC,SAAS,eAAe,EAAE,GAAG,SAAS,CAAC,CAAC;CACxD,CAAC;AAuBF,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,2BAA2B,GAAG,eAAe,CA6ChG"}
+{"version":3,"file":"sbom-file.d.ts","sourceRoot":"","sources":["../../../../source/sbom/sbom-file.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AACrE,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,2CAA2C,CAAC;MAe3F,MAAM,eAAe,GAAG;IAC1B,QAAQ,EAAE,CACN,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,SAAS,kBAAkB,EAAE,EACvC,eAAe,EAAE,eAAe,KAC/B,OAAO,CAAC,SAAS,eAAe,EAAE,GAAG,SAAS,CAAC,CAAC;CACxD,CAAC;AAuBF"}

package/sbom/sbom-file.js

@@ -1,55 +1,6 @@
-import * as cdx from '@cyclonedx/cyclonedx-library';
-import { sbomArtifactFilePath } from "../common/package-layout.js";
-import { createFileDescription } from "../file-manager/file-description.js";
-import { extractLicenseFromManifest } from "./extract-license.js";
-import { buildSbom } from "./sbom-builder.js";
-function isSbomEnabled(publishSettings) {
-    return publishSettings.sbom?.enabled ?? true;
-}
-function listDependencyEntries(bundle) {
-    return [
-        ...Object.entries(bundle.dependencies).map(function ([name, specifier]) {
-            return { name, specifier, scope: cdx.Enums.ComponentScope.Required };
-        }),
-        ...Object.entries(bundle.peerDependencies).map(function ([name, specifier]) {
-            return { name, specifier, scope: cdx.Enums.ComponentScope.Optional };
-        })
-    ];
-}
-export function createSbomFileBuilder(dependencies) {
-    const { licenseResolver, sbomSerializer, toolVersionProvider, projectFolder } = dependencies;
-    async function resolveDependencyEntries(bundle, siblings) {
-        const siblingsByName = new Map(siblings.map(function (sibling) {
-            return [sibling.name, sibling];
-        }));
-        const entries = listDependencyEntries(bundle);
-        return Promise.all(entries.map(async function (entry) {
-            const sibling = siblingsByName.get(entry.name);
-            const license = sibling === undefined
-                ? await licenseResolver.resolveLicense({ projectFolder, dependencyName: entry.name })
-                : extractLicenseFromManifest(sibling.packageJson);
-            return { ...entry, license };
-        }));
-    }
-    async function buildFile(bundle, siblings) {
-        const [resolvedToolVersion, sbomDependencies] = await Promise.all([
-            toolVersionProvider(),
-            resolveDependencyEntries(bundle, siblings)
-        ]);
-        const bom = buildSbom({
-            toolVersion: resolvedToolVersion,
-            rootComponent: { name: bundle.packageJson.name, version: bundle.packageJson.version },
-            dependencies: sbomDependencies
-        });
-        return createFileDescription(sbomArtifactFilePath, sbomSerializer.serialize(bom));
-    }
-    return {
-        async generate(bundle, siblings, publishSettings) {
-            if (!isSbomEnabled(publishSettings)) {
-                return undefined;
-            }
-            return [await buildFile(bundle, siblings)];
-        }
-    };
-}
+import '@cyclonedx/cyclonedx-library';
+import "../common/package-layout.js";
+import "../file-manager/file-description.js";
+import "./extract-license.js";
+import "./sbom-builder.js";
 //# sourceMappingURL=sbom-file.js.map

package/sbom/sbom-file.js.map

@@ -1 +1 @@
-{"version":3,"file":"sbom-file.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-file.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,8BAA8B,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,EAAE,qBAAqB,EAAwB,MAAM,qCAAqC,CAAC;AAElG,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGlE,OAAO,EAAE,SAAS,EAAuB,MAAM,mBAAmB,CAAC;AAyBnE,SAAS,aAAa,CAAC,eAAgC;IACnD,OAAO,eAAe,CAAC,IAAI,EAAE,OAAO,IAAI,IAAI,CAAC;AACjD,CAAC;AAED,SAAS,qBAAqB,CAAC,MAAmB;IAC9C,OAAO;QACH,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAkB,UAAU,CAAE,IAAI,EAAE,SAAS,CAAE;YACrF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzE,CAAC,CAAC;QACF,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,GAAG,CAAkB,UAAU,CAAE,IAAI,EAAE,SAAS,CAAE;YACzF,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,CAAC;QACzE,CAAC,CAAC;KACL,CAAC;AACN,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,YAAyC;IAC3E,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,mBAAmB,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC;IAE7F,KAAK,UAAU,wBAAwB,CACnC,MAAmB,EACnB,QAAuC;QAEvC,MAAM,cAAc,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,GAAG,CAAC,UAAU,OAAO;YAC1B,OAAO,CAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAE,CAAC;QACrC,CAAC,CAAC,CACL,CAAC;QACF,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,OAAO,CAAC,GAAG,CACd,OAAO,CAAC,GAAG,CAAC,KAAK,WAAW,KAAK;YAC7B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,MAAM,OAAO,GAAG,OAAO,KAAK,SAAS;gBACjC,CAAC,CAAC,MAAM,eAAe,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;gBACrF,CAAC,CAAC,0BAA0B,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YACtD,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC;QACjC,CAAC,CAAC,CACL,CAAC;IACN,CAAC;IAED,KAAK,UAAU,SAAS,CAAC,MAAmB,EAAE,QAAuC;QACjF,MAAM,CAAE,mBAAmB,EAAE,gBAAgB,CAAE,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChE,mBAAmB,EAAE;YACrB,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC;YAClB,WAAW,EAAE,mBAAmB;YAChC,aAAa,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE;YACrF,YAAY,EAAE,gBAAgB;SACjC,CAAC,CAAC;QACH,OAAO,qBAAqB,CAAC,oBAAoB,EAAE,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,CAAC;IAED,OAAO;QACH,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,eAAe;YAC5C,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClC,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,CAAE,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAE,CAAC;QACjD,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"sbom-file.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-file.ts"],"names":[],"mappings":"AAAA,OAAqB,8BAA8B,CAAC;AACpD,OAAqC,6BAA6B,CAAC;AAEnE,OAA4D,qCAAqC,CAAC;AAElG,OAA2C,sBAAsB,CAAC;AAGlE,OAA+C,mBAAmB,CAAC"}

package/sbom/sbom-serializer.js

@@ -1,15 +1,2 @@
-import * as cdx from '@cyclonedx/cyclonedx-library';
-function createCycloneDxJsonSerializer() {
-    return new cdx.Serialize.JsonSerializer(new cdx.Serialize.JSON.Normalize.Factory(cdx.Spec.Spec1dot6));
-}
-function serializeBom(serializer, bom) {
-    return String(Reflect.apply(serializer.serialize, serializer, [bom, { sortLists: true, space: 4 }]));
-}
-export function createSbomSerializer() {
-    const serializer = createCycloneDxJsonSerializer();
-    const serialize = function (bom) {
-        return serializeBom(serializer, bom);
-    };
-    return { serialize };
-}
+import '@cyclonedx/cyclonedx-library';
 //# sourceMappingURL=sbom-serializer.js.map

package/sbom/sbom-serializer.js.map

@@ -1 +1 @@
-{"version":3,"file":"sbom-serializer.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-serializer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,8BAA8B,CAAC;AAQpD,SAAS,6BAA6B;IAClC,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,SAAS,YAAY,CAAC,UAAwC,EAAE,GAAoB;IAChF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,EAAE,CAAE,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC;AAC3G,CAAC;AAED,MAAM,UAAU,oBAAoB;IAChC,MAAM,UAAU,GAAG,6BAA6B,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,UAAU,GAAoB;QAC5C,OAAO,YAAY,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,OAAO,EAAE,SAAS,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"sbom-serializer.js","sourceRoot":"","sources":["../../../../source/sbom/sbom-serializer.ts"],"names":[],"mappings":"AAAA,OAAqB,8BAA8B,CAAC"}

package/sbom/tool-version.js

@@ -1,50 +1,2 @@
-import { isObjectType, isPlainObject } from 'remeda';
-const candidatePackageNames = ['@packtory/cli', 'packtory'];
-function buildUnresolvableMessage() {
-    const intro = 'Cannot determine packtory tool version: neither "@packtory/cli" nor "packtory" is resolvable.';
-    return `${intro} Install packtory via npm so it lives under node_modules/.`;
-}
-function isCandidatePackageName(value) {
-    return value === '@packtory/cli' || value === 'packtory';
-}
-function isImportResolutionError(error) {
-    if (!isObjectType(error) || !Object.hasOwn(error, 'code')) {
-        return false;
-    }
-    const code = Reflect.get(error, 'code');
-    return code === 'ERR_MODULE_NOT_FOUND' || code === 'ERR_PACKAGE_PATH_NOT_EXPORTED';
-}
-function unwrapJsonModule(importedModule) {
-    if (!isPlainObject(importedModule) || !Object.hasOwn(importedModule, 'default')) {
-        return importedModule;
-    }
-    return importedModule.default;
-}
-function parseToolPackageJson(specifier, importedModule) {
-    const parsed = unwrapJsonModule(importedModule);
-    if (!isPlainObject(parsed) || typeof parsed.version !== 'string') {
-        throw new Error(`Imported packtory package.json from "${specifier}" is missing a version field`);
-    }
-    if (!isCandidatePackageName(parsed.name)) {
-        throw new Error(`Imported packtory package.json from "${specifier}" has unexpected package name`);
-    }
-    return parsed.version;
-}
-export function createPacktoryToolVersionResolver(dependencies) {
-    const { importPackageJson } = dependencies;
-    return async function resolvePacktoryToolVersion() {
-        for (const candidatePackageName of candidatePackageNames) {
-            const specifier = `${candidatePackageName}/package.json`;
-            try {
-                return parseToolPackageJson(specifier, await importPackageJson(specifier));
-            }
-            catch (error) {
-                if (!isImportResolutionError(error)) {
-                    throw error;
-                }
-            }
-        }
-        throw new Error(buildUnresolvableMessage());
-    };
-}
+import 'remeda';
 //# sourceMappingURL=tool-version.js.map

package/sbom/tool-version.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-version.js","sourceRoot":"","sources":["../../../../source/sbom/tool-version.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,QAAQ,CAAC;AAErD,MAAM,qBAAqB,GAAG,CAAE,eAAe,EAAE,UAAU,CAAW,CAAC;AAQvE,SAAS,wBAAwB;IAC7B,MAAM,KAAK,GAAG,+FAA+F,CAAC;IAC9G,OAAO,GAAG,KAAK,4DAA4D,CAAC;AAChF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC1C,OAAO,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,UAAU,CAAC;AAC7D,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC3C,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,MAAM,IAAI,GAAY,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACjD,OAAO,IAAI,KAAK,sBAAsB,IAAI,IAAI,KAAK,+BAA+B,CAAC;AACvF,CAAC;AAED,SAAS,gBAAgB,CAAC,cAAuB;IAC7C,IAAI,CAAC,aAAa,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9E,OAAO,cAAc,CAAC;IAC1B,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,CAAC;AAClC,CAAC;AAED,SAAS,oBAAoB,CAAC,SAAiB,EAAE,cAAuB;IACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,8BAA8B,CAAC,CAAC;IACrG,CAAC;IACD,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,wCAAwC,SAAS,+BAA+B,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC7C,YAA6C;IAE7C,MAAM,EAAE,iBAAiB,EAAE,GAAG,YAAY,CAAC;IAE3C,OAAO,KAAK,UAAU,0BAA0B;QAC5C,KAAK,MAAM,oBAAoB,IAAI,qBAAqB,EAAE,CAAC;YACvD,MAAM,SAAS,GAAG,GAAG,oBAAoB,eAAe,CAAC;YACzD,IAAI,CAAC;gBACD,OAAO,oBAAoB,CAAC,SAAS,EAAE,MAAM,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC;YAC/E,CAAC;YAAC,OAAO,KAAc,EAAE,CAAC;gBACtB,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClC,MAAM,KAAK,CAAC;gBAChB,CAAC;YACL,CAAC;QACL,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;AACN,CAAC"}
+{"version":3,"file":"tool-version.js","sourceRoot":"","sources":["../../../../source/sbom/tool-version.ts"],"names":[],"mappings":"AAAA,OAA4C,QAAQ,CAAC"}

package/sbom.cdx.json

@@ -9,16 +9,16 @@
                 {
                     "type": "application",
                     "name": "packtory",
-                    "version": "0.0.97"
+                    "version": "0.0.98"
                 }
             ]
         },
         "component": {
             "type": "library",
             "name": "packtory",
-            "version": "0.0.91",
-            "bom-ref": "pkg:npm/packtory@0.0.91",
-            "purl": "pkg:npm/packtory@0.0.91"
+            "version": "0.0.92",
+            "bom-ref": "pkg:npm/packtory@0.0.92",
+            "purl": "pkg:npm/packtory@0.0.92"
         }
     },
     "components": [
@@ -376,7 +376,7 @@
             "ref": "pkg:npm/npm-registry-fetch@20.0.1"
         },
         {
-            "ref": "pkg:npm/packtory@0.0.91",
+            "ref": "pkg:npm/packtory@0.0.92",
             "dependsOn": [
                 "pkg:npm/@arethetypeswrong/core@0.18.5",
                 "pkg:npm/@cyclonedx/cyclonedx-library@10.2.0",

package/tar/extract-tar.js

@@ -1,84 +1,4 @@
-import { createGunzip } from 'node:zlib';
-import { Readable } from 'node:stream';
-import { extract } from 'tar-stream';
-function defaultExtractTarLimits() {
-    return {
-        maxEntryCount: 50_000,
-        maxEntryPathLength: 4096,
-        maxExtractedBytes: 1_073_741_824
-    };
-}
-function toError(error) {
-    return error instanceof Error ? error : new Error(String(error));
-}
-function assertWithinEntryCountLimit(entries, limits) {
-    if (entries.length >= limits.maxEntryCount) {
-        throw new Error(`Refusing to extract tarball with more than ${limits.maxEntryCount} entries`);
-    }
-}
-function assertWithinEntryPathLimit(entry, limits) {
-    if (entry.header.name.length > limits.maxEntryPathLength) {
-        throw new Error(`Refusing to extract tarball entry with path longer than ${limits.maxEntryPathLength} characters`);
-    }
-}
-function assertWithinExtractedSizeLimit(extractedBytes, limits) {
-    if (extractedBytes > limits.maxExtractedBytes) {
-        throw new Error(`Refusing to extract tarball larger than ${limits.maxExtractedBytes} bytes`);
-    }
-}
-async function readEntryContent(entry, currentExtractedBytes, limits) {
-    let result = '';
-    let extractedBytes = currentExtractedBytes;
-    for await (const chunk of entry) {
-        extractedBytes += chunk.length;
-        assertWithinExtractedSizeLimit(extractedBytes, limits);
-        result += chunk.toString();
-    }
-    return { content: result, extractedBytes };
-}
-function stableTarHeader(header) {
-    const contentHeader = { ...header };
-    Reflect.deleteProperty(contentHeader, 'byteOffset');
-    return contentHeader;
-}
-async function collectTarEntries(stream, limits) {
-    const entries = [];
-    let extractedBytes = 0;
-    for await (const entry of stream) {
-        assertWithinEntryCountLimit(entries, limits);
-        assertWithinEntryPathLimit(entry, limits);
-        const content = await readEntryContent(entry, extractedBytes, limits);
-        extractedBytes = content.extractedBytes;
-        entries.push({ header: stableTarHeader(entry.header), content: content.content });
-    }
-    return entries;
-}
-async function waitForStreamError(stream) {
-    return await new Promise(function (_resolve, reject) {
-        stream.once('error', function (error) {
-            reject(toError(error));
-        });
-    });
-}
-function appendOutcome(outcomes, outcome) {
-    outcomes.add(outcome);
-    return outcomes;
-}
-async function raceExtractionOutcomes(streams, limits) {
-    const entries = await Promise.race(appendOutcome(appendOutcome(appendOutcome(appendOutcome(new Set(), collectTarEntries(streams.tarEntries, limits)), waitForStreamError(streams.source)), waitForStreamError(streams.gunzip)), waitForStreamError(streams.extractStream)));
-    return Array.from(entries);
-}
-export async function extractTarEntries(buffer, dependencies = {}, limits = defaultExtractTarLimits()) {
-    const createSource = dependencies.createSource ?? Readable.from;
-    const extractStream = extract();
-    const source = createSource(buffer);
-    const gunzip = createGunzip();
-    const tarEntries = source.pipe(gunzip).pipe(extractStream);
-    try {
-        return await raceExtractionOutcomes({ extractStream, gunzip, source, tarEntries }, limits);
-    }
-    catch (error) {
-        throw toError(error);
-    }
-}
+import 'node:zlib';
+import 'node:stream';
+import 'tar-stream';
 //# sourceMappingURL=extract-tar.js.map

package/tar/extract-tar.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract-tar.js","sourceRoot":"","sources":["../../../../source/tar/extract-tar.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,OAAO,EAAmC,MAAM,YAAY,CAAC;AA6BtE,SAAS,uBAAuB;IAC5B,OAAO;QACH,aAAa,EAAE,MAAM;QACrB,kBAAkB,EAAE,IAAI;QACxB,iBAAiB,EAAE,aAAa;KACnC,CAAC;AACN,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC3B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,CAAC;AAUD,SAAS,2BAA2B,CAAC,OAA4B,EAAE,MAAwB;IACvF,IAAI,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,8CAA8C,MAAM,CAAC,aAAa,UAAU,CAAC,CAAC;IAClG,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAqB,EAAE,MAAwB;IAC/E,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACX,2DAA2D,MAAM,CAAC,kBAAkB,aAAa,CACpG,CAAC;IACN,CAAC;AACL,CAAC;AAED,SAAS,8BAA8B,CAAC,cAAsB,EAAE,MAAwB;IACpF,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,iBAAiB,QAAQ,CAAC,CAAC;IACjG,CAAC;AACL,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC3B,KAAqB,EACrB,qBAA6B,EAC7B,MAAwB;IAExB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,cAAc,GAAG,qBAAqB,CAAC;IAE3C,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC9B,cAAc,IAAI,KAAK,CAAC,MAAM,CAAC;QAC/B,8BAA8B,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CAAC,MAAuB;IAC5C,MAAM,aAAa,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;IACpC,OAAO,CAAC,cAAc,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACpD,OAAO,aAAa,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAqC,EAAE,MAAwB;IAC5F,MAAM,OAAO,GAAe,EAAE,CAAC;IAC/B,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC/B,2BAA2B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7C,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC;QACtE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QACxC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,MAAoB;IAClD,OAAO,MAAM,IAAI,OAAO,CAAQ,UAAU,QAAQ,EAAE,MAAM;QACtD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,KAAc;YACzC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3B,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACP,CAAC;AAOD,SAAS,aAAa,CAClB,QAAqC,EACrC,OAAqC;IAErC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtB,OAAO,QAAQ,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,OAA0B,EAAE,MAAwB;IACtF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAC9B,aAAa,CACT,aAAa,CACT,aAAa,CACT,aAAa,CACT,IAAI,GAAG,EAAgC,EACvC,iBAAiB,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAChD,EACD,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CACrC,EACD,kBAAkB,CAAC,OAAO,CAAC,MAAM,CAAC,CACrC,EACD,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAC5C,CACJ,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,MAAc,EACd,eAAgD,EAAE,EAClD,SAA2B,uBAAuB,EAAE;IAEpD,MAAM,YAAY,GAAG,YAAY,CAAC,YAAY,IAAI,QAAQ,CAAC,IAAI,CAAC;IAChE,MAAM,aAAa,GAAG,OAAO,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,aAAa,CAAkC,CAAC;IAE5F,IAAI,CAAC;QACD,OAAO,MAAM,sBAAsB,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;AACL,CAAC"}
+{"version":3,"file":"extract-tar.js","sourceRoot":"","sources":["../../../../source/tar/extract-tar.ts"],"names":[],"mappings":"AAAA,OAA6B,WAAW,CAAC;AACzC,OAAyB,aAAa,CAAC;AACvC,OAAyD,YAAY,CAAC"}

package/tar/gzipped-pack.js

@@ -1,21 +1 @@
-const gzipHeaderOperatingSystemFieldIndex = 9;
-const gzipHeaderOperatingSystemUnknown = 255;
-function normalizeGzipHeader(data) {
-    const normalized = Buffer.from(data);
-    normalized[gzipHeaderOperatingSystemFieldIndex] = gzipHeaderOperatingSystemUnknown;
-    return normalized;
-}
-function gzipStreamChunkToBuffer(chunk) {
-    if (typeof chunk === 'string' || chunk instanceof Uint8Array) {
-        return Buffer.from(chunk);
-    }
-    throw new TypeError('Expected gzip stream to yield Buffer, Uint8Array, or string chunks');
-}
-export async function collectGzippedPack(pack, gzip) {
-    const chunks = [];
-    for await (const chunk of pack.pipe(gzip)) {
-        chunks.push(gzipStreamChunkToBuffer(chunk));
-    }
-    return normalizeGzipHeader(Buffer.concat(chunks));
-}
 //# sourceMappingURL=gzipped-pack.js.map

package/tar/gzipped-pack.js.map

@@ -1 +1 @@
-{"version":3,"file":"gzipped-pack.js","sourceRoot":"","sources":["../../../../source/tar/gzipped-pack.ts"],"names":[],"mappings":"AAGA,MAAM,mCAAmC,GAAG,CAAC,CAAC;AAC9C,MAAM,gCAAgC,GAAG,GAAG,CAAC;AAE7C,SAAS,mBAAmB,CAAC,IAAY;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,UAAU,CAAC,mCAAmC,CAAC,GAAG,gCAAgC,CAAC;IACnF,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,IAAI,SAAS,CAAC,oEAAoE,CAAC,CAAC;AAC9F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,IAAwB,EACxB,IAAwC;IAExC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC"}
+{"version":3,"file":"gzipped-pack.js","sourceRoot":"","sources":["../../../../source/tar/gzipped-pack.ts"],"names":[],"mappings":""}

package/tar/tarball-builder.js

@@ -1,46 +1,6 @@
-import zlib from 'node:zlib';
-import tar, {} from 'tar-stream';
-import { validateVendorEntrySource } from "../vendor-materializer/vendor-entry.js";
-import { collectGzippedPack } from "./gzipped-pack.js";
+import 'node:zlib';
+import 'tar-stream';
+import "../vendor-materializer/vendor-entry.js";
+import "./gzipped-pack.js";
 const staticFileModificationTime = new Date(0);
-const executableFileMode = 493;
-const nonExecutableFileMode = 420;
-export function createTarballBuilder(dependencies = {}) {
-    const createGzip = dependencies.createGzip ?? zlib.createGzip;
-    const fileManager = dependencies.fileManager ?? {
-        async getRealPath(filePath) {
-            return filePath;
-        },
-        async readFileBytes() {
-            throw new Error('readFileBytes is required to materialize vendor entries into the tarball');
-        }
-    };
-    function addEntry(pack, filePath, isExecutable, payload) {
-        const entry = pack.entry({
-            name: filePath,
-            mtime: staticFileModificationTime,
-            mode: isExecutable ? executableFileMode : nonExecutableFileMode
-        }, payload);
-        entry.end();
-    }
-    async function createPack(fileDescriptions, vendorEntries) {
-        const pack = tar.pack();
-        for (const fileDescription of fileDescriptions) {
-            addEntry(pack, fileDescription.filePath, fileDescription.isExecutable, fileDescription.content);
-        }
-        for (const vendorEntry of vendorEntries) {
-            await validateVendorEntrySource(fileManager, vendorEntry);
-            const payload = await fileManager.readFileBytes(vendorEntry.sourceAbsolutePath);
-            addEntry(pack, vendorEntry.targetRelativePath, vendorEntry.isExecutable, payload);
-        }
-        pack.finalize();
-        return pack;
-    }
-    return {
-        async build(fileDescriptions, vendorEntries = []) {
-            const pack = await createPack(fileDescriptions, vendorEntries);
-            return collectGzippedPack(pack, createGzip({ level: 9 }));
-        }
-    };
-}
 //# sourceMappingURL=tarball-builder.js.map

package/tar/tarball-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"tarball-builder.js","sourceRoot":"","sources":["../../../../source/tar/tarball-builder.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,GAAG,EAAE,EAAa,MAAM,YAAY,CAAC;AAG5C,OAAO,EAAE,yBAAyB,EAAoB,MAAM,wCAAwC,CAAC;AACrG,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAWvD,MAAM,0BAA0B,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/C,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,UAAU,oBAAoB,CAAC,eAAoD,EAAE;IACvF,MAAM,UAAU,GAAG,YAAY,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;IAC9D,MAAM,WAAW,GAAG,YAAY,CAAC,WAAW,IAAI;QAC5C,KAAK,CAAC,WAAW,CAAC,QAAgB;YAC9B,OAAO,QAAQ,CAAC;QACpB,CAAC;QACD,KAAK,CAAC,aAAa;YACf,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAC;QAChG,CAAC;KACJ,CAAC;IAEF,SAAS,QAAQ,CAAC,IAAU,EAAE,QAAgB,EAAE,YAAqB,EAAE,OAAwB;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CACpB;YACI,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,0BAA0B;YACjC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,qBAAqB;SAClE,EACD,OAAO,CACV,CAAC;QACF,KAAK,CAAC,GAAG,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,UAAU,UAAU,CACrB,gBAA4C,EAC5C,aAAqC;QAErC,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAExB,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,QAAQ,EAAE,eAAe,CAAC,YAAY,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;QACpG,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;YACtC,MAAM,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;YAC1D,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC;YAChF,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,kBAAkB,EAAE,WAAW,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QAED,IAAI,CAAC,QAAQ,EAAE,CAAC;QAEhB,OAAO,IAAI,CAAC;IAChB,CAAC;IAED,OAAO;QACH,KAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,aAAa,GAAG,EAAE;YAC5C,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC/D,OAAO,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9D,CAAC;KACJ,CAAC;AACN,CAAC"}
+{"version":3,"file":"tarball-builder.js","sourceRoot":"","sources":["../../../../source/tar/tarball-builder.ts"],"names":[],"mappings":"AAAA,OAAiB,WAAW,CAAC;AAC7B,OAA+B,YAAY,CAAC;AAG5C,OAA4D,wCAAwC,CAAC;AACrG,OAAmC,mBAAmB,CAAC;AAWvD,MAAM,0BAA0B,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC"}

package/vendor-materializer/vendor-entry.js

@@ -1,21 +1,2 @@
-import path from 'node:path';
-function isInFolder(folder, candidate) {
-    const relativePath = path.relative(folder, candidate);
-    return !relativePath.startsWith('..') && !path.isAbsolute(relativePath);
-}
-export async function validateVendorEntrySource(validator, entry) {
-    const rootPath = path.resolve(entry.sourcePackageRootPath);
-    const realSourcePath = await validator.getRealPath(entry.sourceAbsolutePath);
-    if (!isInFolder(rootPath, path.resolve(realSourcePath))) {
-        throw new Error(`Vendored file "${entry.sourceAbsolutePath}" resolved outside package root "${entry.sourcePackageRootPath}"`);
-    }
-}
-export function applyPrefixToVendorEntry(prefix, entry) {
-    return {
-        sourceAbsolutePath: entry.sourceAbsolutePath,
-        sourcePackageRootPath: entry.sourcePackageRootPath,
-        targetRelativePath: `${prefix}/${entry.targetRelativePath}`,
-        isExecutable: entry.isExecutable
-    };
-}
+import 'node:path';
 //# sourceMappingURL=vendor-entry.js.map

package/vendor-materializer/vendor-entry.js.map

@@ -1 +1 @@
-{"version":3,"file":"vendor-entry.js","sourceRoot":"","sources":["../../../../source/vendor-materializer/vendor-entry.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAY7B,SAAS,UAAU,CAAC,MAAc,EAAE,SAAiB;IACjD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC3C,SAAqC,EACrC,KAAkB;IAElB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC3D,MAAM,cAAc,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAE7E,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACX,kBAAkB,KAAK,CAAC,kBAAkB,oCAAoC,KAAK,CAAC,qBAAqB,GAAG,CAC/G,CAAC;IACN,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,KAAkB;IACvE,OAAO;QACH,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,qBAAqB,EAAE,KAAK,CAAC,qBAAqB;QAClD,kBAAkB,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,kBAAkB,EAAE;QAC3D,YAAY,EAAE,KAAK,CAAC,YAAY;KACnC,CAAC;AACN,CAAC"}
+{"version":3,"file":"vendor-entry.js","sourceRoot":"","sources":["../../../../source/vendor-materializer/vendor-entry.ts"],"names":[],"mappings":"AAAA,OAAiB,WAAW,CAAC"}

package/vendor-materializer/vendor-materializer.js

@@ -1,241 +1,9 @@
-import path from 'node:path';
-import parsePackageArgument from 'npm-package-arg';
-import { Result } from 'true-myth';
-import { tryOr } from 'true-myth/result';
-import { z } from 'zod/mini';
-import { safeParse } from "../common/schema-validation.js";
-import { ancestorInstalledDependencyPathCandidates, bundledInstalledDependencyPath, installedDependenciesFolderName, packageManifestPathIn } from "../common/package-layout.js";
-import { createWorklist } from "../common/worklist.js";
-export const vendorMaterializerFailureType = {
-    dependencyNotFound: 'dependency-not-found',
-    invalidDependencyName: 'invalid-dependency-name',
-    symlinkTargetOutsidePackage: 'symlink-target-outside-package'
-};
-const dependencyMapSchema = z.optional(z.record(z.string(), z.string()));
-function packageManifestSchema() {
-    return z.object({
-        dependencies: dependencyMapSchema,
-        peerDependencies: dependencyMapSchema
-    });
-}
-function getPackageArgumentName(name) {
-    const parsed = tryOr(undefined, function () {
-        return parsePackageArgument(name).name ?? undefined;
-    });
-    return parsed.isOk ? parsed.value : undefined;
-}
-function findFirstInvalidDependencyName(names) {
-    for (const name of names) {
-        if (getPackageArgumentName(name) !== name) {
-            return name;
-        }
-    }
-    return undefined;
-}
-function parseManifestSummary(sourcePackageName, content) {
-    const parsed = safeParse(packageManifestSchema(), JSON.parse(content));
-    if (!parsed.success) {
-        return Result.ok({ dependencies: [], peers: [] });
-    }
-    const dependencyNames = Object.keys(parsed.data.dependencies ?? {});
-    const peerDependencyNames = Object.keys(parsed.data.peerDependencies ?? {});
-    const invalidDependencyName = findFirstInvalidDependencyName(dependencyNames.concat(peerDependencyNames));
-    if (invalidDependencyName !== undefined) {
-        return Result.err({
-            type: vendorMaterializerFailureType.invalidDependencyName,
-            sourcePackageName,
-            invalidDependencyName
-        });
-    }
-    return Result.ok({
-        dependencies: dependencyNames,
-        peers: peerDependencyNames
-    });
-}
-async function collectPackageFileEntry(walker, state, relativeEntryPath) {
-    const sourceAbsolutePath = path.join(state.packageDirectory.rootDirectory, relativeEntryPath);
-    const targetRelativePath = bundledInstalledDependencyPath(state.packageDirectory.packageName, relativeEntryPath);
-    const fileDescription = await walker.getTransferableFileDescriptionFromPath(sourceAbsolutePath, targetRelativePath);
-    state.collected.push({
-        sourceAbsolutePath,
-        sourcePackageRootPath: state.packageDirectory.rootDirectory,
-        targetRelativePath,
-        isExecutable: fileDescription.isExecutable
-    });
-}
-async function getResolvedTargetPath(walker, absoluteEntryPath) {
-    try {
-        return Result.ok(await walker.getRealPath(absoluteEntryPath));
-    }
-    catch {
-        return Result.err(absoluteEntryPath);
-    }
-}
-function isPathInsideRoot(rootDirectory, candidatePath) {
-    const normalizedRoot = path.resolve(rootDirectory);
-    const normalizedCandidate = path.resolve(candidatePath);
-    return normalizedCandidate === normalizedRoot || normalizedCandidate.startsWith(`${normalizedRoot}${path.sep}`);
-}
-async function checkSymlinkInsidePackage(walker, rootDirectory, packageName, relativeEntryPath) {
-    const absoluteEntryPath = path.join(rootDirectory, relativeEntryPath);
-    const normalizedEntryRelativePath = relativeEntryPath.split(path.sep).join('/');
-    const resolvedTarget = await getResolvedTargetPath(walker, absoluteEntryPath);
-    const resolvedTargetPath = resolvedTarget.isOk ? resolvedTarget.value : resolvedTarget.error;
-    if (resolvedTarget.isErr) {
-        return Result.err({
-            type: vendorMaterializerFailureType.symlinkTargetOutsidePackage,
-            packageName,
-            entryRelativePath: normalizedEntryRelativePath,
-            resolvedTargetPath
-        });
-    }
-    if (!isPathInsideRoot(rootDirectory, resolvedTargetPath)) {
-        return Result.err({
-            type: vendorMaterializerFailureType.symlinkTargetOutsidePackage,
-            packageName,
-            entryRelativePath: normalizedEntryRelativePath,
-            resolvedTargetPath
-        });
-    }
-    return Result.ok(undefined);
-}
-async function validatePackageDirectoryEntry(walker, packageDirectory, relativeEntryPath, entry) {
-    if (!entry.isSymbolicLink) {
-        return Result.ok(undefined);
-    }
-    return checkSymlinkInsidePackage(walker, packageDirectory.rootDirectory, packageDirectory.packageName, relativeEntryPath);
-}
-const walkPackageDirectory = async function (walker, state, relativeDirectory) {
-    const absoluteDirectory = path.join(state.packageDirectory.rootDirectory, relativeDirectory);
-    const entries = await walker.listDirectoryEntries(absoluteDirectory);
-    const collectDirectoryEntry = async function (entry) {
-        if (entry.name === installedDependenciesFolderName) {
-            return Result.ok(undefined);
-        }
-        const relativeEntryPath = path.join(relativeDirectory, entry.name);
-        const symlinkCheck = await validatePackageDirectoryEntry(walker, state.packageDirectory, relativeEntryPath, entry);
-        if (symlinkCheck.isErr) {
-            return symlinkCheck;
-        }
-        if (entry.isDirectory) {
-            return walkPackageDirectory(walker, state, relativeEntryPath);
-        }
-        await collectPackageFileEntry(walker, state, relativeEntryPath);
-        return Result.ok(undefined);
-    };
-    for (const entry of entries) {
-        const result = await collectDirectoryEntry(entry);
-        if (result.isErr) {
-            return result;
-        }
-    }
-    return Result.ok(undefined);
-};
-export function createVendorMaterializer(dependencies) {
-    const { fileManager } = dependencies;
-    function queueItem(name, fromFolder, sourcePackageName, required) {
-        return { name, fromFolder, required, sourcePackageName };
-    }
-    function scheduleManifestDependencies(closure, name, realPath, summary) {
-        closure.pendingPackages.scheduleAll(summary.dependencies.map(function (dependencyName) {
-            return queueItem(dependencyName, realPath, name, true);
-        }));
-        closure.pendingPackages.scheduleAll(summary.peers.map(function (dependencyName) {
-            return queueItem(dependencyName, realPath, name, false);
-        }));
-    }
-    async function collectVendorEntries(packageName, realPath) {
-        const collected = [];
-        const walkResult = await walkPackageDirectory(fileManager, { packageDirectory: { rootDirectory: realPath, packageName }, collected }, '');
-        if (walkResult.isErr) {
-            return Result.err(walkResult.error);
-        }
-        return Result.ok(Array.from(collected));
-    }
-    async function readManifestSummary(packageName, realPath) {
-        const manifestPath = packageManifestPathIn(realPath);
-        const content = await fileManager.readFile(manifestPath);
-        return parseManifestSummary(packageName, content);
-    }
-    async function findPackageRealPath(packageName, startFolder) {
-        for (const candidatePath of ancestorInstalledDependencyPathCandidates(startFolder, packageName)) {
-            const readability = await fileManager.checkReadability(candidatePath);
-            if (readability.isReadable) {
-                return await fileManager.getRealPath(candidatePath);
-            }
-        }
-        return undefined;
-    }
-    async function ingestResolvedPackage(closure, name, realPath) {
-        const summaryResult = await readManifestSummary(name, realPath);
-        if (summaryResult.isErr) {
-            return Result.err(summaryResult.error);
-        }
-        scheduleManifestDependencies(closure, name, realPath, summaryResult.value);
-        closure.peerRequirements.set(name, summaryResult.value.peers);
-        const collectedResult = await collectVendorEntries(name, realPath);
-        if (collectedResult.isErr) {
-            return Result.err(collectedResult.error);
-        }
-        closure.entries.push(...collectedResult.value);
-        return Result.ok(undefined);
-    }
-    async function processPendingPackageItem(closure, item) {
-        if (closure.visited.has(item.name)) {
-            return Result.ok(undefined);
-        }
-        const realPath = await findPackageRealPath(item.name, item.fromFolder);
-        if (realPath === undefined) {
-            if (item.required) {
-                return Result.err({
-                    type: vendorMaterializerFailureType.dependencyNotFound,
-                    sourcePackageName: item.sourcePackageName,
-                    dependencyName: item.name
-                });
-            }
-            return Result.ok(undefined);
-        }
-        closure.visited.add(item.name);
-        return ingestResolvedPackage(closure, item.name, realPath);
-    }
-    async function drainPendingPackages(closure) {
-        for (let item = closure.pendingPackages.takeNext(); item !== undefined; item = closure.pendingPackages.takeNext()) {
-            const processed = await processPendingPackageItem(closure, item);
-            if (processed.isErr) {
-                return processed;
-            }
-        }
-        return Result.ok(undefined);
-    }
-    return {
-        async materializeExternals(options) {
-            const invalidInitialName = findFirstInvalidDependencyName(options.initialDependencyNames);
-            if (invalidInitialName !== undefined) {
-                return Result.err({
-                    type: vendorMaterializerFailureType.invalidDependencyName,
-                    sourcePackageName: undefined,
-                    invalidDependencyName: invalidInitialName
-                });
-            }
-            const entries = [];
-            const closure = {
-                visited: new Set(),
-                entries,
-                pendingPackages: createWorklist(options.initialDependencyNames.map(function (name) {
-                    return queueItem(name, options.projectFolder, undefined, true);
-                })),
-                peerRequirements: new Map()
-            };
-            const drained = await drainPendingPackages(closure);
-            if (drained.isErr) {
-                return Result.err(drained.error);
-            }
-            return Result.ok({
-                entries: Array.from(closure.entries),
-                packageNames: Array.from(closure.visited),
-                peerRequirements: new Map(closure.peerRequirements)
-            });
-        }
-    };
-}
+import 'node:path';
+import 'npm-package-arg';
+import 'true-myth';
+import 'true-myth/result';
+import 'zod/mini';
+import "../common/schema-validation.js";
+import "../common/package-layout.js";
+import "../common/worklist.js";
 //# sourceMappingURL=vendor-materializer.js.map