packtory 0.0.96 → 0.0.98

package/artifacts/artifacts-builder.js

@@ -1,5 +1,38 @@
-import "../report/inspectors/inspect-artifact-sizes.js";
-import "../vendor-materializer/vendor-entry.js";
-import "./content-collection.js";
-import "./folder-writer.js";
+import { inspectArtifactSizes } from "../report/inspectors/inspect-artifact-sizes.js";
+import { applyPrefixToVendorEntry } from "../vendor-materializer/vendor-entry.js";
+import { collectArtifactContents, describeArtifactsForReport } from "./content-collection.js";
+import { writeArtifactsToFolder } from "./folder-writer.js";
+export function createArtifactsBuilder(dependencies) {
+    const { fileManager, tarballBuilder, zipBuilder, progressBroadcaster } = dependencies;
+    function collectContents(bundle, prefix, extraFiles = []) {
+        const artifactContents = collectArtifactContents(bundle, prefix, extraFiles);
+        if (progressBroadcaster.hasSubscribers('artifactsCollected')) {
+            progressBroadcaster.emit('artifactsCollected', {
+                packageName: bundle.name,
+                entries: inspectArtifactSizes(describeArtifactsForReport(bundle, prefix, extraFiles))
+            });
+        }
+        return artifactContents;
+    }
+    return {
+        collectContents,
+        async buildTarball(bundle, extraFiles, vendorEntries = []) {
+            const contents = collectContents(bundle, 'package', extraFiles);
+            const prefixedVendor = vendorEntries.map(function (entry) {
+                return applyPrefixToVendorEntry('package', entry);
+            });
+            const tarData = await tarballBuilder.build(contents, prefixedVendor);
+            return { tarData };
+        },
+        async buildZip(bundle, extraFiles, vendorEntries = []) {
+            const contents = collectContents(bundle, undefined, extraFiles);
+            const zipData = await zipBuilder.build(contents, vendorEntries);
+            return { zipData };
+        },
+        async buildFolder(bundle, targetFolder, extraFiles, vendorEntries = []) {
+            const contents = collectContents(bundle, undefined, extraFiles);
+            await writeArtifactsToFolder(fileManager, targetFolder, contents, vendorEntries);
+        }
+    };
+}
 //# sourceMappingURL=artifacts-builder.js.map

package/artifacts/artifacts-builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAIA,OAAqC,gDAAgD,CAAC;AAEtF,OAA2D,wCAAwC,CAAC;AAEpG,OAAoE,yBAAyB,CAAC;AAC9F,OAAuC,oBAAoB,CAAC"}
+{"version":3,"file":"artifacts-builder.js","sourceRoot":"","sources":["../../../../source/artifacts/artifacts-builder.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAEtF,OAAO,EAAE,wBAAwB,EAAoB,MAAM,wCAAwC,CAAC;AAEpG,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AAC9F,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAyC5D,MAAM,UAAU,sBAAsB,CAAC,YAA0C;IAC7E,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,YAAY,CAAC;IAEtF,SAAS,eAAe,CACpB,MAA6B,EAC7B,MAAe,EACf,aAAyC,EAAE;QAE3C,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QAE7E,IAAI,mBAAmB,CAAC,cAAc,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC3D,mBAAmB,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC3C,WAAW,EAAE,MAAM,CAAC,IAAI;gBACxB,OAAO,EAAE,oBAAoB,CAAC,0BAA0B,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;aACxF,CAAC,CAAC;QACP,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC5B,CAAC;IAED,OAAO;QACH,eAAe;QAEf,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,EAAE;YACrD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,KAAK;gBACpD,OAAO,wBAAwB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACtD,CAAC,CAAC,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;YACrE,OAAO,EAAE,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,GAAG,EAAE;YACjD,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;YAChE,OAAO,EAAE,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,GAAG,EAAE;YAClE,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;YAChE,MAAM,sBAAsB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACrF,CAAC;KACJ,CAAC;AACN,CAAC"}

package/artifacts/content-collection.js

@@ -1,3 +1,60 @@
-import 'node:path';
-import "../published-package/published-package.js";
+import path from 'node:path';
+import { explicitBinTargetPaths } from "../published-package/published-package.js";
+function applyPrefix(filePath, prefix) {
+    return prefix === undefined ? filePath : path.join(prefix, filePath);
+}
+export function collectArtifactContents(bundle, prefix, extraFiles) {
+    const binTargets = explicitBinTargetPaths(bundle);
+    const artifactContents = [
+        {
+            ...bundle.manifestFile,
+            filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
+        }
+    ];
+    for (const entry of bundle.contents) {
+        if (!entry.isGeneratedManifest) {
+            artifactContents.push({
+                filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
+                content: entry.fileDescription.content,
+                isExecutable: entry.fileDescription.isExecutable || binTargets.has(entry.fileDescription.targetFilePath)
+            });
+        }
+    }
+    for (const extraFile of extraFiles) {
+        artifactContents.push({
+            filePath: applyPrefix(extraFile.filePath, prefix),
+            content: extraFile.content,
+            isExecutable: extraFile.isExecutable
+        });
+    }
+    return artifactContents;
+}
+export function describeArtifactsForReport(bundle, prefix, extraFiles) {
+    return [
+        {
+            ...bundle.manifestFile,
+            filePath: applyPrefix(bundle.manifestFile.filePath, prefix)
+        },
+        ...bundle.contents.flatMap(function (entry) {
+            if (entry.isGeneratedManifest) {
+                return [];
+            }
+            return [
+                {
+                    filePath: applyPrefix(entry.fileDescription.targetFilePath, prefix),
+                    content: entry.fileDescription.content,
+                    isExecutable: entry.fileDescription.isExecutable,
+                    inputFilePath: entry.fileDescription.inputFilePath,
+                    isSubstituted: entry.isSubstituted
+                }
+            ];
+        }),
+        ...extraFiles.map(function (entry) {
+            return {
+                ...entry,
+                filePath: applyPrefix(entry.filePath, prefix)
+            };
+        })
+    ];
+}
 //# sourceMappingURL=content-collection.js.map

package/artifacts/content-collection.js.map

@@ -1 +1 @@
-{"version":3,"file":"content-collection.js","sourceRoot":"","sources":["../../../../source/artifacts/content-collection.ts"],"names":[],"mappings":"AAAA,OAAiB,WAAW,CAAC;AAE7B,OAAmE,2CAA2C,CAAC"}
+{"version":3,"file":"content-collection.js","sourceRoot":"","sources":["../../../../source/artifacts/content-collection.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAA8B,MAAM,2CAA2C,CAAC;AAE/G,SAAS,WAAW,CAAC,QAAgB,EAAE,MAA0B;IAC7D,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACzE,CAAC;AAUD,MAAM,UAAU,uBAAuB,CACnC,MAA6B,EAC7B,MAA0B,EAC1B,UAAsC;IAEtC,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAsB;QACxC;YACI,GAAG,MAAM,CAAC,YAAY;YACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9D;KACJ,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YAC7B,gBAAgB,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;gBACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;gBACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,CAAC;aAC3G,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IAED,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACjC,gBAAgB,CAAC,IAAI,CAAC;YAClB,QAAQ,EAAE,WAAW,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC;YACjD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,YAAY,EAAE,SAAS,CAAC,YAAY;SACvC,CAAC,CAAC;IACP,CAAC;IAED,OAAO,gBAAgB,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,0BAA0B,CACtC,MAA6B,EAC7B,MAA0B,EAC1B,UAAsC;IAEtC,OAAO;QACH;YACI,GAAG,MAAM,CAAC,YAAY;YACtB,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC;SAC9D;QACD,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,KAAK;YACtC,IAAI,KAAK,CAAC,mBAAmB,EAAE,CAAC;gBAC5B,OAAO,EAAE,CAAC;YACd,CAAC;YACD,OAAO;gBACH;oBACI,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC;oBACnE,OAAO,EAAE,KAAK,CAAC,eAAe,CAAC,OAAO;oBACtC,YAAY,EAAE,KAAK,CAAC,eAAe,CAAC,YAAY;oBAChD,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,aAAa;oBAClD,aAAa,EAAE,KAAK,CAAC,aAAa;iBACrC;aACJ,CAAC;QACN,CAAC,CAAC;QACF,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,KAAK;YAC7B,OAAO;gBACH,GAAG,KAAK;gBACR,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC;aAChD,CAAC;QACN,CAAC,CAAC;KACL,CAAC;AACN,CAAC"}

package/artifacts/folder-writer.js

@@ -1,3 +1,26 @@
-import 'node:path';
-import "../vendor-materializer/vendor-entry.js";
+import path from 'node:path';
+import { validateVendorEntrySource } from "../vendor-materializer/vendor-entry.js";
+async function writeFileDescriptions(fileManager, targetFolder, contents) {
+    for (const entry of contents) {
+        const targetFilePath = path.join(targetFolder, entry.filePath);
+        await fileManager.writeFile(targetFilePath, entry.content);
+        await fileManager.setExecutable(targetFilePath, entry.isExecutable);
+    }
+}
+async function copyVendorEntries(fileManager, targetFolder, vendorEntries) {
+    for (const vendorEntry of vendorEntries) {
+        const targetFilePath = path.join(targetFolder, vendorEntry.targetRelativePath);
+        await validateVendorEntrySource(fileManager, vendorEntry);
+        await fileManager.copyFileBytes(vendorEntry.sourceAbsolutePath, targetFilePath);
+        await fileManager.setExecutable(targetFilePath, vendorEntry.isExecutable);
+    }
+}
+export async function writeArtifactsToFolder(fileManager, targetFolder, contents, vendorEntries = []) {
+    const readability = await fileManager.checkReadability(targetFolder);
+    if (readability.isReadable) {
+        throw new Error(`Folder ${targetFolder} already exists`);
+    }
+    await writeFileDescriptions(fileManager, targetFolder, contents);
+    await copyVendorEntries(fileManager, targetFolder, vendorEntries);
+}
 //# sourceMappingURL=folder-writer.js.map

package/artifacts/folder-writer.js.map

@@ -1 +1 @@
-{"version":3,"file":"folder-writer.js","sourceRoot":"","sources":["../../../../source/artifacts/folder-writer.ts"],"names":[],"mappings":"AAAA,OAAiB,WAAW,CAAC;AAG7B,OAA4D,wCAAwC,CAAC"}
+{"version":3,"file":"folder-writer.js","sourceRoot":"","sources":["../../../../source/artifacts/folder-writer.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,yBAAyB,EAAoB,MAAM,wCAAwC,CAAC;AAErG,KAAK,UAAU,qBAAqB,CAChC,WAAwB,EACxB,YAAoB,EACpB,QAAoC;IAEpC,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,WAAW,CAAC,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,KAAK,CAAC,YAAY,CAAC,CAAC;IACxE,CAAC;AACL,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC5B,WAAwB,EACxB,YAAoB,EACpB,aAAqC;IAErC,KAAK,MAAM,WAAW,IAAI,aAAa,EAAE,CAAC;QACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,CAAC,kBAAkB,CAAC,CAAC;QAC/E,MAAM,yBAAyB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QAC1D,MAAM,WAAW,CAAC,aAAa,CAAC,WAAW,CAAC,kBAAkB,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,WAAW,CAAC,aAAa,CAAC,cAAc,EAAE,WAAW,CAAC,YAAY,CAAC,CAAC;IAC9E,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CACxC,WAAwB,EACxB,YAAoB,EACpB,QAAoC,EACpC,gBAAwC,EAAE;IAE1C,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;IACrE,IAAI,WAAW,CAAC,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,UAAU,YAAY,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,qBAAqB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjE,MAAM,iBAAiB,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;AACtE,CAAC"}

package/bundle-emitter/emitter.js

@@ -1,7 +1,138 @@
-import 'semver';
-import 'true-myth';
-import "../file-manager/compare.js";
-import "./fetch-published-artifacts.js";
-import "./release-artifact-canonicalizer.js";
-import "./repository-coherence.js";
+import semver from 'semver';
+import { Maybe } from 'true-myth';
+import { compareFileDescriptions, fileDescriptionComparisonStatus } from "../file-manager/compare.js";
+import { fetchPublishedArtifacts, fetchPublishedArtifactsFromMetadata } from "./fetch-published-artifacts.js";
+import { canonicalizeReleaseArtifactFiles } from "./release-artifact-canonicalizer.js";
+import { assertRepositoryCoherence } from "./repository-coherence.js";
+const stageRegistryUnsupportedMessage = 'npm staged publishing is only supported with the npmjs.org registry';
+const stageFirstPublishUnsupportedMessage = 'npm staged publishing requires the package to already exist on the npm registry';
+const npmRegistryUrl = 'https://registry.npmjs.org/';
+function isNpmRegistry(registryUrl) {
+    const resolvedRegistryUrl = new URL(registryUrl ?? npmRegistryUrl);
+    return resolvedRegistryUrl.href === npmRegistryUrl;
+}
+function validateVersion(version) {
+    const normalized = semver.valid(version);
+    if (normalized === null) {
+        throw new Error(`Registry returned an invalid version "${version}" for staged publishing`);
+    }
+    return normalized;
+}
+function highestVersion(firstVersion, laterVersions) {
+    let highest = validateVersion(firstVersion);
+    for (const version of laterVersions) {
+        const candidate = validateVersion(version);
+        if (semver.gt(candidate, highest)) {
+            highest = candidate;
+        }
+    }
+    return highest;
+}
+function hasVersionProvider(versioning) {
+    return Object.hasOwn(versioning, 'provideVersion');
+}
+function isCurrentHeadPackageVersion(versionDetails, currentGitHead) {
+    return versionDetails.gitHead === currentGitHead;
+}
+function collectPackageArtifacts(artifactsBuilder, bundle, extraFiles) {
+    return canonicalizeReleaseArtifactFiles(artifactsBuilder.collectContents(bundle, 'package', extraFiles));
+}
+function artifactsMatch(currentArtifacts, publishedArtifacts) {
+    const comparison = compareFileDescriptions(currentArtifacts, canonicalizeReleaseArtifactFiles(publishedArtifacts));
+    return comparison.status === fileDescriptionComparisonStatus.equal;
+}
+function packageTargetDescription(bundle) {
+    return `Package "${bundle.name}" version "${bundle.packageJson.version}"`;
+}
+function assertTargetArtifactsMatch(bundle, currentArtifacts, publishedArtifacts) {
+    if (!artifactsMatch(currentArtifacts, publishedArtifacts)) {
+        throw new Error(`${packageTargetDescription(bundle)} already exists with different artifacts`);
+    }
+}
+function assertTargetIsTaggedLatest(bundle, latestVersion) {
+    if (latestVersion !== bundle.packageJson.version) {
+        throw new Error(`${packageTargetDescription(bundle)} already exists but is not tagged latest`);
+    }
+}
+export function createBundleEmitter(dependencies) {
+    const { artifactsBuilder, registryClient, ciRepositoryUrl, readCurrentGitHead } = dependencies;
+    async function determineCurrentVersionForStageMode(name, registrySettings, versioning) {
+        if (!isNpmRegistry(registrySettings.registryUrl)) {
+            throw new Error(stageRegistryUnsupportedMessage);
+        }
+        const latestVersion = await registryClient.fetchLatestVersion(name, registrySettings);
+        if (latestVersion.isNothing) {
+            throw new Error(stageFirstPublishUnsupportedMessage);
+        }
+        if (!versioning.automatic && !hasVersionProvider(versioning)) {
+            return Maybe.just(versioning.version);
+        }
+        const stagedVersions = await registryClient.fetchStagedVersions(name, registrySettings);
+        return Maybe.just(highestVersion(latestVersion.value.version, stagedVersions));
+    }
+    return {
+        async determineCurrentVersion(options) {
+            const { versioning, registrySettings, name, stage } = options;
+            if (stage) {
+                return determineCurrentVersionForStageMode(name, registrySettings, versioning);
+            }
+            if (versioning.automatic || hasVersionProvider(versioning)) {
+                const latestVersion = await registryClient.fetchLatestVersion(name, registrySettings);
+                return latestVersion.map(function (version) {
+                    return version.version;
+                });
+            }
+            return Maybe.just(versioning.version);
+        },
+        async findCurrentHeadPublishedVersion(options) {
+            const currentGitHead = await readCurrentGitHead();
+            if (currentGitHead === undefined) {
+                return undefined;
+            }
+            const latestVersion = await registryClient.fetchLatestVersion(options.name, options.registrySettings);
+            if (latestVersion.isNothing || !isCurrentHeadPackageVersion(latestVersion.value, currentGitHead)) {
+                return undefined;
+            }
+            return {
+                version: latestVersion.value.version,
+                gitHead: latestVersion.value.gitHead
+            };
+        },
+        async checkBundleAlreadyPublished(options) {
+            const { bundle, registrySettings, extraFiles } = options;
+            const previous = await fetchPublishedArtifacts(registryClient, bundle.name, registrySettings);
+            if (previous.isNothing) {
+                return { alreadyPublishedAsLatest: false, previousReleaseArtifacts: Maybe.nothing() };
+            }
+            const currentArtifacts = collectPackageArtifacts(artifactsBuilder, bundle, extraFiles);
+            return {
+                alreadyPublishedAsLatest: artifactsMatch(currentArtifacts, previous.value.files),
+                previousReleaseArtifacts: previous
+            };
+        },
+        async verifyBundlePublishTarget(options) {
+            const { bundle, registrySettings, extraFiles } = options;
+            const metadata = await registryClient.fetchVersionReleaseMetadata(bundle.name, bundle.packageJson.version, registrySettings);
+            if (metadata.isNothing) {
+                return { alreadyPublished: false, publishedArtifacts: Maybe.nothing() };
+            }
+            const publishedArtifacts = await fetchPublishedArtifactsFromMetadata(registryClient, registrySettings, metadata.value);
+            const currentArtifacts = collectPackageArtifacts(artifactsBuilder, bundle, extraFiles);
+            assertTargetArtifactsMatch(bundle, currentArtifacts, publishedArtifacts.files);
+            assertTargetIsTaggedLatest(bundle, metadata.value.latestVersion);
+            return { alreadyPublished: true, publishedArtifacts: Maybe.just(publishedArtifacts) };
+        },
+        async publish(options) {
+            if (options.publishSettings.access === 'public' && options.publishSettings.provenance?.type === 'auto') {
+                assertRepositoryCoherence(options.bundle.packageJson, ciRepositoryUrl);
+            }
+            const tarball = await artifactsBuilder.buildTarball(options.bundle, options.extraFiles);
+            const currentGitHead = await readCurrentGitHead();
+            const publishManifest = currentGitHead === undefined
+                ? options.bundle.packageJson
+                : { ...options.bundle.packageJson, gitHead: currentGitHead };
+            return registryClient.publishPackage(publishManifest, tarball.tarData, options.registrySettings, options.publishSettings, options.stage);
+        }
+    };
+}
 //# sourceMappingURL=emitter.js.map

package/bundle-emitter/emitter.js.map

@@ -1 +1 @@
-{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAmB,QAAQ,CAAC;AAC5B,OAAsB,WAAW,CAAC;AAElC,OAAyE,4BAA4B,CAAC;AAGtG,OAA6E,gCAAgC,CAAC;AAC9G,OAAiD,qCAAqC,CAAC;AAEvF,OAA0C,2BAA2B,CAAC"}
+{"version":3,"file":"emitter.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/emitter.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAGtG,OAAO,EAAE,uBAAuB,EAAE,mCAAmC,EAAE,MAAM,gCAAgC,CAAC;AAC9G,OAAO,EAAE,gCAAgC,EAAE,MAAM,qCAAqC,CAAC;AAEvF,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AA0FtE,MAAM,+BAA+B,GAAG,qEAAqE,CAAC;AAC9G,MAAM,mCAAmC,GACrC,iFAAiF,CAAC;AACtF,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD,SAAS,aAAa,CAAC,WAA+B;IAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IACnE,OAAO,mBAAmB,CAAC,IAAI,KAAK,cAAc,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACpC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,yBAAyB,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB,EAAE,aAAgC;IAC1E,IAAI,OAAO,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;IAE5C,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,GAAG,SAAS,CAAC;QACxB,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CACvB,UAA8B;IAE9B,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,2BAA2B,CAChC,cAAqC,EACrC,cAAsB;IAEtB,OAAO,cAAc,CAAC,OAAO,KAAK,cAAc,CAAC;AACrD,CAAC;AAED,SAAS,uBAAuB,CAC5B,gBAAkC,EAClC,MAA8B,EAC9B,UAAkC;IAElC,OAAO,gCAAgC,CAAC,gBAAgB,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,cAAc,CACnB,gBAA4C,EAC5C,kBAA8C;IAE9C,MAAM,UAAU,GAAG,uBAAuB,CACtC,gBAAgB,EAChB,gCAAgC,CAAC,kBAAkB,CAAC,CACvD,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,KAAK,+BAA+B,CAAC,KAAK,CAAC;AACvE,CAAC;AAED,SAAS,wBAAwB,CAAC,MAA8B;IAC5D,OAAO,YAAY,MAAM,CAAC,IAAI,cAAc,MAAM,CAAC,WAAW,CAAC,OAAO,GAAG,CAAC;AAC9E,CAAC;AAED,SAAS,0BAA0B,CAC/B,MAA8B,EAC9B,gBAA4C,EAC5C,kBAA8C;IAE9C,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACnG,CAAC;AACL,CAAC;AAED,SAAS,0BAA0B,CAC/B,MAA8B,EAC9B,aAAiC;IAEjC,IAAI,aAAa,KAAK,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,GAAG,wBAAwB,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC;IACnG,CAAC;AACL,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,YAAuC;IACvE,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,YAAY,CAAC;IAE/F,KAAK,UAAU,mCAAmC,CAC9C,IAAY,EACZ,gBAAkC,EAClC,UAA8B;QAE9B,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACtF,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;YAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,mBAAmB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;QACxF,OAAO,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO;QACH,KAAK,CAAC,uBAAuB,CAAC,OAAO;YACjC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;YAE9D,IAAI,KAAK,EAAE,CAAC;gBACR,OAAO,mCAAmC,CAAC,IAAI,EAAE,gBAAgB,EAAE,UAAU,CAAC,CAAC;YACnF,CAAC;YAED,IAAI,UAAU,CAAC,SAAS,IAAI,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;gBACzD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;gBACtF,OAAO,aAAa,CAAC,GAAG,CAAC,UAAU,OAAO;oBACtC,OAAO,OAAO,CAAC,OAAO,CAAC;gBAC3B,CAAC,CAAC,CAAC;YACP,CAAC;YAED,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,+BAA+B,CAAC,OAAO;YACzC,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAClD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACtG,IAAI,aAAa,CAAC,SAAS,IAAI,CAAC,2BAA2B,CAAC,aAAa,CAAC,KAAK,EAAE,cAAc,CAAC,EAAE,CAAC;gBAC/F,OAAO,SAAS,CAAC;YACrB,CAAC;YACD,OAAO;gBACH,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;gBACpC,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO;aACvC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,2BAA2B,CAAC,OAAO;YACrC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAC9F,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,EAAE,wBAAwB,EAAE,KAAK,EAAE,wBAAwB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1F,CAAC;YAED,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACvF,OAAO;gBACH,wBAAwB,EAAE,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;gBAChF,wBAAwB,EAAE,QAAQ;aACrC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,yBAAyB,CAAC,OAAO;YACnC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,2BAA2B,CAC7D,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,WAAW,CAAC,OAAO,EAC1B,gBAAgB,CACnB,CAAC;YACF,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACrB,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC5E,CAAC;YAED,MAAM,kBAAkB,GAAG,MAAM,mCAAmC,CAChE,cAAc,EACd,gBAAgB,EAChB,QAAQ,CAAC,KAAK,CACjB,CAAC;YACF,MAAM,gBAAgB,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;YACvF,0BAA0B,CAAC,MAAM,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC/E,0BAA0B,CAAC,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YAEjE,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC1F,CAAC;QAED,KAAK,CAAC,OAAO,CAAC,OAAO;YACjB,IAAI,OAAO,CAAC,eAAe,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,eAAe,CAAC,UAAU,EAAE,IAAI,KAAK,MAAM,EAAE,CAAC;gBACrG,yBAAyB,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YACxF,MAAM,cAAc,GAAG,MAAM,kBAAkB,EAAE,CAAC;YAClD,MAAM,eAAe,GAAG,cAAc,KAAK,SAAS;gBAChD,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW;gBAC5B,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC;YAEjE,OAAO,cAAc,CAAC,cAAc,CAChC,eAAe,EACf,OAAO,CAAC,OAAO,EACf,OAAO,CAAC,gBAAgB,EACxB,OAAO,CAAC,eAAe,EACvB,OAAO,CAAC,KAAK,CAChB,CAAC;QACN,CAAC;KACJ,CAAC;AACN,CAAC"}

package/bundle-emitter/extract-package-tarball.js

@@ -1,3 +1,14 @@
-import "../file-manager/permissions.js";
-import "../tar/extract-tar.js";
+import { isExecutableFileMode } from "../file-manager/permissions.js";
+import { extractTarEntries } from "../tar/extract-tar.js";
+function tarEntryToFileDescription(tarEntry) {
+    return {
+        filePath: tarEntry.header.name,
+        content: tarEntry.content,
+        isExecutable: isExecutableFileMode(Number(tarEntry.header.mode))
+    };
+}
+export async function extractPackageTarball(tarball) {
+    const tarEntries = await extractTarEntries(tarball);
+    return tarEntries.map(tarEntryToFileDescription);
+}
 //# sourceMappingURL=extract-package-tarball.js.map

package/bundle-emitter/extract-package-tarball.js.map

@@ -1 +1 @@
-{"version":3,"file":"extract-package-tarball.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/extract-package-tarball.ts"],"names":[],"mappings":"AACA,OAAqC,gCAAgC,CAAC;AACtE,OAAiD,uBAAuB,CAAC"}
+{"version":3,"file":"extract-package-tarball.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/extract-package-tarball.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAiB,MAAM,uBAAuB,CAAC;AAEzE,SAAS,yBAAyB,CAAC,QAAkB;IACjD,OAAO;QACH,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI;QAC9B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,YAAY,EAAE,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KACnE,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAe;IACvD,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AACrD,CAAC"}

package/bundle-emitter/fetch-published-artifacts.js

@@ -1,3 +1,20 @@
-import 'true-myth';
-import "./extract-package-tarball.js";
+import { Maybe } from 'true-myth';
+import { extractPackageTarball } from "./extract-package-tarball.js";
+export async function fetchPublishedArtifactsFromMetadata(registryClient, registrySettings, metadata) {
+    const tarball = await registryClient.fetchTarball(metadata.tarballUrl, metadata.tarballIntegrity, registrySettings);
+    const files = await extractPackageTarball(tarball);
+    return {
+        version: metadata.version,
+        files,
+        publishedAt: metadata.publishedAt,
+        gitHead: metadata.gitHead
+    };
+}
+export async function fetchPublishedArtifacts(registryClient, name, registrySettings) {
+    const latestVersion = await registryClient.fetchLatestReleaseMetadata(name, registrySettings);
+    if (latestVersion.isNothing) {
+        return Maybe.nothing();
+    }
+    return Maybe.just(await fetchPublishedArtifactsFromMetadata(registryClient, registrySettings, latestVersion.value));
+}
 //# sourceMappingURL=fetch-published-artifacts.js.map

package/bundle-emitter/fetch-published-artifacts.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch-published-artifacts.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/fetch-published-artifacts.ts"],"names":[],"mappings":"AAAA,OAAsB,WAAW,CAAC;AAGlC,OAAsC,8BAA8B,CAAC"}
+{"version":3,"file":"fetch-published-artifacts.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/fetch-published-artifacts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAWrE,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACrD,cAA8B,EAC9B,gBAAkC,EAClC,QAAgC;IAEhC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,YAAY,CAC7C,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,gBAAgB,EACzB,gBAAgB,CACnB,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACnD,OAAO;QACH,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,KAAK;QACL,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,OAAO,EAAE,QAAQ,CAAC,OAAO;KAC5B,CAAC;AACN,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CACzC,cAA8B,EAC9B,IAAY,EACZ,gBAAkC;IAElC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9F,IAAI,aAAa,CAAC,SAAS,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,mCAAmC,CAAC,cAAc,EAAE,gBAAgB,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;AACxH,CAAC"}

package/bundle-emitter/publication-outcome.js

@@ -1 +1,6 @@
+export const noPublication = { type: 'none' };
+export const publishedToRegistry = { type: 'published' };
+export function stagedForApproval(stageId) {
+    return { type: 'staged', stageId };
+}
 //# sourceMappingURL=publication-outcome.js.map

package/bundle-emitter/publication-outcome.js.map

@@ -1 +1 @@
-{"version":3,"file":"publication-outcome.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/publication-outcome.ts"],"names":[],"mappings":""}
+{"version":3,"file":"publication-outcome.js","sourceRoot":"","sources":["../../../../source/bundle-emitter/publication-outcome.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,aAAa,GAAuB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClE,MAAM,CAAC,MAAM,mBAAmB,GAAuB,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAE7E,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC7C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACvC,CAAC"}

package/bundle-emitter/publish-error/auto-mode-error-matching.js

@@ -1,3 +1,29 @@
-import "./error-shape-helpers.js";
-import "./publish-error-messages.js";
+import { isErrorLike } from "./error-shape-helpers.js";
+import { buildUnsupportedProviderMessage, githubActionsIdTokenMessage, gitlabSigstoreIdTokenMessage, unsupportedProviderMarker } from "./publish-error-messages.js";
+function getCiName(message) {
+    const providerSection = message
+        .slice(message.indexOf(unsupportedProviderMarker) + unsupportedProviderMarker.length)
+        .trimStart();
+    if (providerSection === '') {
+        return 'unknown';
+    }
+    const providerEnd = providerSection.search(/\s/u);
+    return providerEnd === -1 ? providerSection : providerSection.slice(0, providerEnd);
+}
+export function matchAutoModeError(error) {
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (message.includes(unsupportedProviderMarker)) {
+        return new Error(buildUnsupportedProviderMessage(getCiName(message)), { cause: error });
+    }
+    if (message.includes('"write" access to the "id-token" permission')) {
+        return new Error(githubActionsIdTokenMessage, { cause: error });
+    }
+    if (message.includes('SIGSTORE_ID_TOKEN')) {
+        return new Error(gitlabSigstoreIdTokenMessage, { cause: error });
+    }
+    return undefined;
+}
 //# sourceMappingURL=auto-mode-error-matching.js.map

package/bundle-emitter/publish-error/auto-mode-error-matching.js.map

@@ -1 +1 @@
-{"version":3,"file":"auto-mode-error-matching.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/auto-mode-error-matching.ts"],"names":[],"mappings":"AAAA,OAA4B,0BAA0B,CAAC;AACvD,OAKO,6BAA6B,CAAC;AAUU"}
+{"version":3,"file":"auto-mode-error-matching.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/auto-mode-error-matching.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EACH,+BAA+B,EAC/B,2BAA2B,EAC3B,4BAA4B,EAC5B,yBAAyB,EAC5B,MAAM,6BAA6B,CAAC;AAErC,SAAS,SAAS,CAAC,OAAe;IAC9B,MAAM,eAAe,GAAG,OAAO;SAC1B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC,MAAM,CAAC;SACpF,SAAS,EAAE,CAAC;IACjB,IAAI,eAAe,KAAK,EAAE,EAAE,CAAC;QACzB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClD,OAAO,WAAW,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC7C,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,OAAO,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,KAAK,CAAC,+BAA+B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,6CAA6C,CAAC,EAAE,CAAC;QAClE,OAAO,IAAI,KAAK,CAAC,2BAA2B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,KAAK,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC"}

package/bundle-emitter/publish-error/error-shape-helpers.js

@@ -1 +1,10 @@
+export function isRecord(value) {
+    return value instanceof Object;
+}
+export function isErrorLike(error) {
+    return isRecord(error) && typeof error.message === 'string';
+}
+export function ensureError(error) {
+    return error instanceof Error ? error : new Error(String(error));
+}
 //# sourceMappingURL=error-shape-helpers.js.map

package/bundle-emitter/publish-error/error-shape-helpers.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-shape-helpers.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/error-shape-helpers.ts"],"names":[],"mappings":""}
+{"version":3,"file":"error-shape-helpers.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/error-shape-helpers.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,QAAQ,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,MAAM,CAAC;AACnC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACtC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAc;IACtC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/bundle-emitter/publish-error/file-mode-error-matching.js

@@ -1,3 +1,34 @@
-import "./error-shape-helpers.js";
-import "./publish-error-messages.js";
+import { isErrorLike, isRecord } from "./error-shape-helpers.js";
+import { buildInvalidProvenanceFileMessage, buildMissingProvenanceFileMessage, buildProvenanceDigestMismatchMessage } from "./publish-error-messages.js";
+const provenanceBundleMarkers = [
+    'Bundle is invalid',
+    'Unsupported bundle format',
+    'Invalid bundle',
+    'subject does not match'
+];
+const provenanceDigestMismatchMarkers = ['subject', 'digest'];
+function includesOneOf(message, markers) {
+    for (const marker of markers) {
+        if (message.includes(marker)) {
+            return true;
+        }
+    }
+    return false;
+}
+export function matchFileModeError(error, filePath) {
+    if (isRecord(error) && error.code === 'ENOENT') {
+        return new Error(buildMissingProvenanceFileMessage(filePath), { cause: error });
+    }
+    if (!isErrorLike(error)) {
+        return undefined;
+    }
+    const { message } = error;
+    if (!includesOneOf(message, provenanceBundleMarkers)) {
+        return undefined;
+    }
+    if (includesOneOf(message, provenanceDigestMismatchMarkers)) {
+        return new Error(buildProvenanceDigestMismatchMessage(filePath), { cause: error });
+    }
+    return new Error(buildInvalidProvenanceFileMessage(filePath), { cause: error });
+}
 //# sourceMappingURL=file-mode-error-matching.js.map

package/bundle-emitter/publish-error/file-mode-error-matching.js.map

@@ -1 +1 @@
-{"version":3,"file":"file-mode-error-matching.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/file-mode-error-matching.ts"],"names":[],"mappings":"AAAA,OAAsC,0BAA0B,CAAC;AACjE,OAIO,6BAA6B,CAAC"}
+{"version":3,"file":"file-mode-error-matching.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/file-mode-error-matching.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EACH,iCAAiC,EACjC,iCAAiC,EACjC,oCAAoC,EACvC,MAAM,6BAA6B,CAAC;AAErC,MAAM,uBAAuB,GAAG;IAC5B,mBAAmB;IACnB,2BAA2B;IAC3B,gBAAgB;IAChB,wBAAwB;CAClB,CAAC;AACX,MAAM,+BAA+B,GAAG,CAAE,SAAS,EAAE,QAAQ,CAAW,CAAC;AAEzE,SAAS,aAAa,CAAC,OAAe,EAAE,OAA0B;IAC9D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3B,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc,EAAE,QAAgB;IAC/D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,uBAAuB,CAAC,EAAE,CAAC;QACnD,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,IAAI,aAAa,CAAC,OAAO,EAAE,+BAA+B,CAAC,EAAE,CAAC;QAC1D,OAAO,IAAI,KAAK,CAAC,oCAAoC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,iCAAiC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/bundle-emitter/publish-error/publish-error-messages.js

@@ -1 +1,25 @@
+export const unsupportedProviderMarker = 'not supported for provider:';
+export const githubActionsIdTokenMessage = 'GitHub Actions provenance needs "permissions: id-token: write" on the workflow job. ' +
+    'See the packtory readme for the workflow snippet.';
+export const gitlabSigstoreIdTokenMessage = 'GitLab CI provenance needs an "id_tokens" entry with audience "sigstore" ' +
+    'exposed as SIGSTORE_ID_TOKEN. See the packtory readme for the workflow snippet.';
+export function buildUnsupportedProviderMessage(ciName) {
+    return ('Provenance auto mode requires GitHub Actions or GitLab CI. ' +
+        `Detected CI: ${ciName}. ` +
+        "Use provenance: { type: 'file' } for other environments.");
+}
+export function buildMissingProvenanceFileMessage(filePath) {
+    return (`Provenance bundle file "${filePath}" does not exist. ` +
+        "Generate it with your CI's attestation tool (e.g. actions/attest-build-provenance) " +
+        'before running packtory.');
+}
+export function buildInvalidProvenanceFileMessage(filePath) {
+    return (`Provenance bundle file "${filePath}" is not a valid sigstore bundle. ` +
+        'Re-generate it from the current build.');
+}
+export function buildProvenanceDigestMismatchMessage(filePath) {
+    return (`Provenance bundle at "${filePath}" was signed against a different tarball ` +
+        'than the one packtory built. Re-generate the bundle from the current source: ' +
+        'shipping a mismatched attestation would defeat the purpose of provenance.');
+}
 //# sourceMappingURL=publish-error-messages.js.map

package/bundle-emitter/publish-error/publish-error-messages.js.map

@@ -1 +1 @@
-{"version":3,"file":"publish-error-messages.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/publish-error-messages.ts"],"names":[],"mappings":""}
+{"version":3,"file":"publish-error-messages.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/publish-error/publish-error-messages.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE,MAAM,CAAC,MAAM,2BAA2B,GACpC,sFAAsF;IACtF,mDAAmD,CAAC;AAExD,MAAM,CAAC,MAAM,4BAA4B,GACrC,2EAA2E;IAC3E,iFAAiF,CAAC;AAEtF,MAAM,UAAU,+BAA+B,CAAC,MAAc;IAC1D,OAAO,CACH,6DAA6D;QAC7D,gBAAgB,MAAM,IAAI;QAC1B,0DAA0D,CAC7D,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB;IAC9D,OAAO,CACH,2BAA2B,QAAQ,oBAAoB;QACvD,qFAAqF;QACrF,0BAA0B,CAC7B,CAAC;AACN,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAgB;IAC9D,OAAO,CACH,2BAA2B,QAAQ,oCAAoC;QACvE,wCAAwC,CAC3C,CAAC;AACN,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,QAAgB;IACjE,OAAO,CACH,yBAAyB,QAAQ,2CAA2C;QAC5E,+EAA+E;QAC/E,2EAA2E,CAC9E,CAAC;AACN,CAAC"}

package/bundle-emitter/registry/metadata-auth-retry.js

@@ -1,2 +1,25 @@
-import "./registry-auth-config.js";
+import { buildAuthOptions, resolvePublishAuth } from "./registry-auth-config.js";
+const unauthorizedStatusCode = 401;
+const forbiddenStatusCode = 403;
+function isAuthFailure(error) {
+    const statusCode = error instanceof Object && Object.hasOwn(error, 'statusCode')
+        ? error.statusCode
+        : undefined;
+    return statusCode === forbiddenStatusCode || statusCode === unauthorizedStatusCode;
+}
+export async function retryWithFallbackAuth(registrySettings, auth, run) {
+    try {
+        return await run(auth.options);
+    }
+    catch (error) {
+        if (!auth.allowsAutomaticRetry || !isAuthFailure(error)) {
+            throw error;
+        }
+        const publishAuth = resolvePublishAuth(registrySettings);
+        if (publishAuth.type === 'npm-oidc') {
+            throw error;
+        }
+        return run(buildAuthOptions(publishAuth, registrySettings).options);
+    }
+}
 //# sourceMappingURL=metadata-auth-retry.js.map

package/bundle-emitter/registry/metadata-auth-retry.js.map

@@ -1 +1 @@
-{"version":3,"file":"metadata-auth-retry.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/metadata-auth-retry.ts"],"names":[],"mappings":"AACA,OAKO,2BAA2B,CAAC"}
+{"version":3,"file":"metadata-auth-retry.js","sourceRoot":"","sources":["../../../../../source/bundle-emitter/registry/metadata-auth-retry.ts"],"names":[],"mappings":"AACA,OAAO,EACH,gBAAgB,EAChB,kBAAkB,EAGrB,MAAM,2BAA2B,CAAC;AAEnC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,SAAS,aAAa,CAAC,KAAc;IACjC,MAAM,UAAU,GAAG,KAAK,YAAY,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,YAAY,CAAC;QAC5E,CAAC,CAAE,KAA4C,CAAC,UAAU;QAC1D,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,UAAU,KAAK,mBAAmB,IAAI,UAAU,KAAK,sBAAsB,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACvC,gBAA4C,EAC5C,IAAoB,EACpB,GAA6C;IAE7C,IAAI,CAAC;QACD,OAAO,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACtD,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,WAAW,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAClC,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,OAAO,GAAG,CAAC,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,OAAO,CAAC,CAAC;IACxE,CAAC;AACL,CAAC"}

package/bundle-emitter/registry/oidc-token-exchange.js

@@ -1,4 +1,69 @@
-import "./registry-auth-config.js";
-import "./registry-package-path.js";
-import "./registry-response-schemas.js";
+import { buildAuthOptions, createBaseOptions, isNpmRegistry, npmRegistryUrl, resolvePublishAuth, resolveRegistryUrl } from "./registry-auth-config.js";
+import { toRegistryPackagePath } from "./registry-package-path.js";
+import { parseOidcExchangeResponse } from "./registry-response-schemas.js";
+const oidcExchangeRefreshThresholdInMilliseconds = 60_000;
+export function createOidcTokenExchanger(dependencies) {
+    const { fetch: fetchImplementation, clock, resolveIdToken } = dependencies;
+    const cache = new Map();
+    function getCacheKey(packageName, registrySettings) {
+        return `${resolveRegistryUrl(registrySettings) ?? npmRegistryUrl}::${packageName}`;
+    }
+    function readCachedToken(cacheKey) {
+        const cachedToken = cache.get(cacheKey);
+        if (cachedToken === undefined) {
+            return undefined;
+        }
+        const currentTime = clock.getCurrentTimeInMilliseconds();
+        if (cachedToken.expiresAt - currentTime > oidcExchangeRefreshThresholdInMilliseconds) {
+            return cachedToken.token;
+        }
+        return undefined;
+    }
+    function parseExchangedToken(body) {
+        const parsed = parseOidcExchangeResponse(body);
+        if (!parsed.success) {
+            throw new TypeError(`OIDC token exchange returned an invalid response: ${parsed.issues.join('; ')}`);
+        }
+        return { token: parsed.data.token, expiresAt: parsed.data.expires.getTime() };
+    }
+    async function requestExchange(packageName, auth) {
+        const idToken = await resolveIdToken(auth);
+        const requestInit = {
+            method: 'POST',
+            headers: { Authorization: `Bearer ${idToken}` }
+        };
+        const exchangeResponse = await fetchImplementation(`${npmRegistryUrl}-/npm/v1/oidc/token/exchange/package/${toRegistryPackagePath(packageName)}`, requestInit);
+        if (!exchangeResponse.ok) {
+            throw new Error(`OIDC token exchange failed with status ${exchangeResponse.status}`);
+        }
+        return parseExchangedToken((await exchangeResponse.json()));
+    }
+    async function exchangeToken(packageName, registrySettings, auth) {
+        const cacheKey = getCacheKey(packageName, registrySettings);
+        const cached = readCachedToken(cacheKey);
+        if (cached !== undefined) {
+            return cached;
+        }
+        if (!isNpmRegistry(resolveRegistryUrl(registrySettings))) {
+            throw new Error('npm-oidc auth is only supported with the npmjs.org registry');
+        }
+        const exchanged = await requestExchange(packageName, auth);
+        cache.set(cacheKey, exchanged);
+        return exchanged.token;
+    }
+    return {
+        exchangeToken,
+        async resolveWriteAuthOptions(packageName, registrySettings) {
+            const auth = resolvePublishAuth(registrySettings);
+            if (auth.type !== 'npm-oidc') {
+                return buildAuthOptions(auth, registrySettings).options;
+            }
+            const token = await exchangeToken(packageName, registrySettings, auth);
+            return {
+                ...createBaseOptions(registrySettings),
+                forceAuth: { token }
+            };
+        }
+    };
+}
 //# sourceMappingURL=oidc-token-exchange.js.map